Page 12 - Dan Lorenc News Today : Breaking News, Live Updates & Top Stories | Vimarsana

Cryptographic software assurance backed by Google, Red Hat, Purdue U Share Copy The Linux Foundation, with the support of Google, Red Hat, and Purdue University, is launching a service called sigstore to help developers sign the code they release. Signing code involves associating a cryptographic signature with a specific digital artifact – release files, container images, and binaries – so that the person using the software can check the code's signature to verify that the release is authentic and hasn't been altered by someone along the way. "Sigstore enables all open source com...

Sigstore aims to improve the open source software supply chain by simplifying the process of cryptographic software signing.

The sigstore project, which is free to use for all developers, counts Google, Purdue University and Red Hat as founding members.

Their goal is to make the pervasive operating system more sustainable as research indicates a need to improve open source software security, specifically in Linux. A report from the Linux Foundation's Open Source Security Foundation (OpenSSF) and the Laboratory for Innovation Science at Harvard University (LISH) found a lack of security efforts in open source software. It's worth noting Linux has more than 20,000 contributors and 1 million commits as of August 2020. But while there are thousands of Linux developers, Google's contribution to underwrite two full-time Linux security maintainers ...

Google funds two Linux Foundation security roles Google is underwriting two Linux kernel security positions through the Linux Foundation, the company announced Wednesday. The effort support Google's strategy "to help support the critical open source projects that we're relying on," Google software engineer Dan Lorenc told SC Media. Please register to continue. News analysis The context and insight you need to stay abreast of the most important developments in cybersecurity. CISO and practitioner perspectives; strategy and tactics; solutions and innovation; policy and regulation. Arc...