Page 6 - Dan Lorenc News Today

Companies advised to have Zero-day attacks prevention plans

Google provides funding for development of OpenSSL alternative Apr 20, 2021 11:00 EDT with 1 comment The Internet Security Research Group has announced that Google has provided funding for Rust developer Dirkjan Ochtman to make improvements to Rustls, a memory-safe alternative to OpenSSL. This funding is linked to the news we reported back in February that the ISRG will be making Apache HTTP Server’s implementation of httpd more secure by using Rustls in its compon...

Google Funds Two Full-Time Linux Security Developers To help Linux maintainers stay ahead of the black hats, Google has funded two full-time Linux security developers. Linux is becoming more secure. Google and the Linux Foundation recently announced that Google will fund two full-time Linux  security developers to focus entirely on securing the kernel. Theres always room for Linux security improvements – especially with a project that currently weighs-in at close to 29 million lines of...

Linux Foundation Announces Free sigstore Signing Service to Confirm Origin and Authenticity of Software Red Hat, Google and Purdue University lead efforts to ensure software maintainers, distributors and consumers have full confidence in their code, artifacts and tooling News provided by Share this article Share this article SAN FRANCISCO, March 9, 2021 /PRNewswire/ -- The Linux Foundation, the nonprofit organization enabling mass innovation through open source, today announced the sigstore pr...

The Linux Foundation, the non-profit organization enabling innovation through open source, has announced a new service to improve the security of the software supply chain by enabling the easy adoption of cryptographic software signing.

Cryptographic software assurance backed by Google, Red Hat, Purdue U Share Copy The Linux Foundation, with the support of Google, Red Hat, and Purdue University, is launching a service called sigstore to help developers sign the code they release. Signing code involves associating a cryptographic signature with a specific digital artifact – release files, container images, and binaries – so that the person using the software can check the codes signature to verify that the release i...

Sigstore aims to improve the open source software supply chain by simplifying the process of cryptographic software signing.

The sigstore project, which is free to use for all developers, counts Google, Purdue University and Red Hat as founding members.

Their goal is to make the pervasive operating system more sustainable as research indicates a need to improve open source software security, specifically in Linux. A report from the Linux Foundations Open Source Security Foundation (OpenSSF) and the Laboratory for Innovation Science at Harvard University (LISH) found a lack of security efforts in open source software. Its worth noting Linux has more than 20,000 contributors and 1 million commits as of August 2020. But while there are thousands ...

Google funds two Linux Foundation security roles Google is underwriting two Linux kernel security positions through the Linux Foundation, the company announced Wednesday. The effort support Googles strategy "to help support the critical open source projects that were relying on," Google software engineer Dan Lorenc told SC Media. Please register to continue. News analysis The context and insight you need to stay abreast of the most important developments in cybersecurity. CISO and pra...