February 9, 2022
by sjvn01
Comments Off on Best desktop Linux for pros 2022: Our top 5 choices
I get so, so tired of explaining that Linux isn’t that hard. Indeed, if you’re reading this on an Android phone or on a Chromebook, congratulations! You’re using Linux, and you very well might not have known it. But then … Continue reading
February 7, 2022
by sjvn01
Comments Off on Intel invests in open-source RISC-V processors, creates billion-dollar fund
RISC-V International, the global open hardware standards organization, has announced that Intel has joined RISC-V at the Premier membership level. Let that sink in for a minute. Intel, which has made billions from its closed-source, complex instruction set computer (CISC) x86 processors, … Continue reading
February 7, 2022
by sjvn01
Comments Off on StarlingX 6.0, the Edge-Computing Cloud Stack Arrives
The OpenInfra Foundation‘s open source, edge-computing cloud stack StarlingX‘s latest version, StarlingX 6.0 is out and ready to run. It’s optimized for low-latency and high-performance applications. In other words, it’s meant for Edge and Internet of Things (IoT) platforms. It does this by combining … Continue reading
February 4, 2022
by sjvn01
Comments Off on The Alpha and Omega of software supply chain security
What is the Alpha-Omega Project? Its purpose is to “improve global open source software supply chain security by working with project maintainers to systematically look for new, as-yet-undiscovered vulnerabilities in open-source code” and then fix them. This is vital to improving … Continue reading
February 3, 2022
by sjvn01
Comments Off on Is npm a Hotbed of Malware?
According to WhiteSource, a leading open source security provider, npm, one of the most widely used JavaScript package managers, is a playground for malicious actors. Is it really that bad? First, JavaScript is wildly popular. Love it or hate it, Javascript by Stack Overflow’s … Continue reading
February 1, 2022
by sjvn01
Comments Off on Securing the open source ecosystem: SBOMs are no longer optional
In the last year and a half, one cybersecurity mess after another — the SolarWinds software supply chain attack, the log4j vulnerability, the npm bad code injection — have made it clear that we must clean up our software supply chain. That’s … Continue reading