Latest Linux and open source news from around the web

Ubiquiti UniFi U6+ Sponsored · View on Amazon → Cat6 Ethernet Cable 5-Pack Sponsored · View on Amazon →
Linux Journal

The Need for Cloud Security in a Modern Business Environment

by George Whittaker Cloud systems are an emergent standard in business, but migration efforts and other directional shifts have introduced vulnerabilities. Where some attack patterns are mitigated, cloud platforms leave businesses open to new threats and vectors. The dynamic nature of these environments cannot be addressed by traditional security systems, necessitating robust cloud security for contemporary organizations. Just as businesses have come to acknowledge the value of cloud operations, so too have cyber attackers. Protecting sensitive assets and maintaining regulatory compliance, while simultaneously ensuring business continuity against cloud attacks, requires a modern strategy. When any window could be an opportunity for infiltration, a comprehensive approach serves to limit exploitation. Unlike traditional on-premise infrastructure, cloud environments dramatically expand an organization’s threat surface. Resources are distributed across regions, heavily dependent on APIs, a

LWN.net

FSFE reports trouble with payment provider

The Free Software Foundation Europe (FSFE) is reporting that payment provider Nexi has terminated its contract without prior notice, which means that a number of FSFE supporters' recurring payments have been halted: Over the past few months, our former payment provider Nexi S.p.A. ("Nexi") requested access to private data, which we understood to be specifically the usernames and passwords of our supporters. We have refused this request. All our attempts to clarify Nexi's request, or to understand how their need for such information was necessary and legal, were met with what we consider to be vague and unsatisfactory explanations relating to a general need for risk analysis. [...] The decisions that Nexi has made are incomprehensible to us. Over the last months, as part of a security audit that Nexi claimed to be conducting, we have provided them with large amounts of the FSFE's financial documentation, which even included private information of our executive staff. We have answered al

Phoronix

AMD MLIR-AIE Releases New AIECC C++ Compiler To Help Bring New Workloads To Ryzen AI NPUs

AMD Ryzen AI NPUs are now running LLMs on Linux with the recently debuted Lemonade 10.0 server and FastFlowLM 0.9.35 adding Linux support. In addition to those software components, AMD engineers have also been developing MLIR-AIE as a compiler toolchain for AMD AI Engine devices such as Ryzen AI NPUs in leveraging LLVM-based code generation with the Multi-Level Intermediate Representation (MLIR). Out today is MLIR-AIE v1.3 with some notable new features...

LPI

DevOps Tools Introduction #09: Machine Deployment

In previous discussions about DevOps tools, we explored container virtualization and how containers transformed the way applications are packaged and deployed. One of the major advantages of containers is their extremely fast startup time combined with minimal resource overhead compared ... Read more The post DevOps Tools Introduction #09: Machine Deployment appeared first on Linux Professional Institute (LPI).

LWN.net

[$] Fedora ponders a "sandbox" technology lifecycle

Fedora Project Leader (FPL) Jef Spaleta has issued a "modest proposal" for a technology-innovation-lifecycle process that would provide more formal structure for adopting technologies in Fedora. The idea is to spur innovation in the project without having an adverse impact on stability or the release process. Spaleta's proposal is somewhat light on details, particularly as far as specific examples of which projects would benefit; however, the reception so far is mostly positive and some think that it could make Fedora more "competitive" by being the place where open-source projects come to grow.