Bonum Certa Men Certa

Leftover Links 05/08/2023: Rust Holes and More Layoffs



  • Leftovers

    • Education

      • Parents accuse Bellevue School District of favoring rich kids in school closures

        When the Bellevue School District (BSD) opened its newest, state of the art elementary school on pristine wetlands and powered by geothermal energy in 2018, at a cost of $49 million, its principal did a welcoming dance in a video to show off the school.

        As she led the camera through the Microsoft Showcase school, showing classrooms that could be converted to learning pods for smaller or larger groups, she also pointed to teachers in a large group, waiting to teach kids.

        Today, however, issues of equity are dampening the shining reputation of the school—and raising questions about the district’s commitment to fairness.

    • Hardware

    • Proprietary/Artificial Intelligence (AI)

      • Bruce SchneierPolitical Milestones for AI

        ChatGPT was released just nine months ago, and we are still learning how it will affect our daily lives, our careers, and even our systems of self-governance.

        But when it comes to how AI may threaten our democracy, much of the public conversation lacks imagination. People talk about the danger of campaigns that attack opponents with fake images (or fake audio or video) because we already have decades of experience dealing with doctored images.

    • Security

      • InfoSecurity MagazineThreat Actors Use AWS SSM Agent as a Remote Access Trojan

        Threat actors have been observed using Amazon Web Services ( AWS ) 's System Manager (SSM) agent as a Remote Access Trojan (RAT) on Linux and Windows machines.

      • Rust BlogThe Rust Programming Language Blog: Security advisory for Cargo (CVE-2023-38497)

        This is a cross-post of the official security advisory. The official advisory contains a signed version with our PGP key, as well.

        The Rust Security Response WG was notified that Cargo did not respect the umask when extracting crate archives on UNIX-like systems. If the user downloaded a crate containing files writeable by any local user, another local user could exploit this to change the source code compiled and executed by the current user.

      • SUSE's Corporate BlogSUSE and IBM: Enhancing Data Security (a Technical Reference Documentation Getting Started guide) [Ed: "confidential computing" is a sham that encourages companies and governments to outsource their operations and data based on false premises of confidentiality]

        The Essence of Confidential Computing At its core, confidential computing addresses the vital need of safeguarding data while it is in use. SUSE and IBM work together to deliver advanced technical capabilities, like confidential computing. IBM Z€® and LinuxONE systems provide key hardware capabilities for the trusted execution environment.

      • Bleeping ComputerHackers can abuse Microsoft Office executables to download malware

        The list of LOLBAS files – legitimate binaries and scripts present in Windows that can be abused for malicious purposes...

      • SANSFrom small LNK to large malicious BAT file with zero VT score, (Thu, Aug 3rd)

        Last week, my spam trap caught an e-mail with LNK attachment, which turned out to be quite interesting.

      • IT WireTenable chief says no way to verify Microsoft claims about fixing Azure flaw

        Microsoft claims it has completely fixed a critical security issue in its Azure cloud platform, found in March by researchers from security firm Tenable, who then told Microsoft about it. Tenable chief executive and chairman Amit Yoran had claimed in a blog post on Wednesday that it took more than 90 days for Microsoft to effect a partial fix.

      • SANSAre Leaked Credentials Dumps Used by Attackers, (Fri, Aug 4th)

        This is a classic problem: One day, you create an account on a website (ex: an online shop), and later, this website is compromised. All credentials are collected and shared by the attacker. To reduce this risk, a best practice is to avoid password re-use (as well as to not use your corporate email address for non-business-related stuff).

      • Security WeekExploitation of Ivanti EPMM Flaw Picking Up as New Vulnerability Is Disclosed

        Exploitation of the Ivanti EPMM flaw CVE-2023-35078 is picking up as a new critical vulnerability tracked as CVE-2023-35082 is disclosed.

      • Security WeekFive Eyes Agencies Call Attention to Most Frequently Exploited Vulnerabilities

        Five Eyes government agencies have published a list of the software vulnerabilities that were most frequently exploited in malicious attacks in 2022.

      • Security Week670 ICS Vulnerabilities Disclosed by CISA in First Half of 2023: Analysis

        CISA disclosed 670 ICS vulnerabilities in the first half of 2023, but roughly one-third have no patches or mitigations from the vendor.

      • LWNSecurity updates for Friday

        Security updates have been issued by CentOS (bind and kernel), Debian (cjose, firefox-esr, ntpsec, and python-django), Fedora (chromium, firefox, librsvg2, and webkitgtk), Red Hat (firefox), Scientific Linux (firefox and openssh), SUSE (go1.20, ImageMagick, javapackages-tools, javassist, mysql-connector-java, protobuf, python-python-gflags, kernel, openssl-1_1, pipewire, python-pip, and xtrans), and Ubuntu (cargo, rust-cargo, cpio, poppler, and xmltooling).

      • USDOJNigerian National Pleads Guilty to $1.25 Million Business Email Compromise Scam Impacting U.S. Company

        Onwuchekwa Nnanna Kalu, 39, a Nigerian National from Rivers State, Nigeria, pleaded guilty today to stealing $1.25 million from an investment firm located in Boston, through a business email compromise (“BEC”) scam. The plea was announced by U.S. Attorney Matthew M. Graves and Acting Special Agent in Charge David Geist, of the FBI Washington Field Office's Criminal and Cyber Division.

        Nnanna Kalu pleaded guilty in the District of Columbia to one count of wire fraud. U.S. District Court Judge Randolph D. Moss scheduled a sentencing hearing for November 29, 2023. Kalu was arrested in 2022 and has been detained by the Court as a risk of flight.

      • Gray Media GroupMassive data breach could impact many who attended or worked for public schools in Colorado

        A news release issued by the Colorado Department of Higher Education is notifying the public of a “data incident.”

        KKTV 11 News is working to learn more about the situation, but the release reads as follows:

        The Colorado Department of Higher Education (“CDHE”) is providing notice of a cybersecurity incident that may involve the personal information of certain individuals. CDHE is providing information about the measures it has taken in response to the incident, and steps impacted individuals may take to protect themselves against possible misuse of information.

    • Defence/Aggression

      • JURISTSingapore executes second prisoner in one week despite international outcry

        Singaporean authorities executed Mohamed Shalleh Bin Abdul Latiff, a 39-year-old former delivery driver, Thursday for trafficking 54.04 grams of diamorphine, a controlled drug, which is four times the amount required to trigger the mandatory death penalty under Singapore’s Misuse of Drugs Act. Shalleh is the second person executed by the country in the last week.

      • Federal News NetworkUS military may put armed troops on commercial ships in Strait of Hormuz to stop Iran seizures

        The U.S. military is considering putting armed personnel on commercial ships traveling through the Strait of Hormuz, in what would be an unheard of action aimed at stopping Iran from seizing and harassing civilian vessels. That's what five American officials told The Associated Press on Thursday. If implemented, it would be an extraordinary step by the Pentagon as it grapples with a renewed effort by Iran to harass and seize ships traveling in the strait, through which 20% of all the world’s crude oil passes. Iran’s mission to the United Nations did not immediately respond to a request for comment from the AP about the U.S. proposal.

      • War in Ukraine

    • Environment

    • Finance

      • AxiosHackerOne lays off 12% of workforce

        Popular bug bounty program HackerOne is laying off 12% of its workforce, CEO MÃ¥rten Mickos told employees earlier this week.

      • Daniel PocockDaniel Pocock: Conflicts of Interest: Extinction Rebellion & Rishi Sunak, Greenpeace & Donald Trump

        There have been many rumors about conflicts of interest in the Debian Google Summer of Code and Outreachy internships. The only case where evidence has appeared is the former leader himself, the very person who started rumors about other mentors and I included.

        Yet conflicts of interest can come in many forms. One of the most bizarre cases I've seen was a pensions industry meeting in the UK.

        Representatives of pension administrators and government officials gathered in the town of Swindon. Rishi Sunak, who has recently become Prime Minister, attended the meeting in his former role as local authorities minister.

      • AxiosThe lesson for the Fed in "early hiker" monetary policy

        One reason to be optimistic that U.S. inflation can fall without a recession: Many smaller nations that did move earlier than the Federal Reserve to hike interest rates have done exactly that.

        Why it matters: The unusual dynamics of a post-pandemic global economy appear to be making a so-called "immaculate disinflation" — one with minimal pain — more plausible than it once seemed based on the historical record.


        What they're saying: "There are other economies we can also look to to get some sense of what's likely to happen in the U.S. — other economies that were actually a lot faster in tightening monetary policy," Jan Hatzius, chief economist at Goldman Sachs, said on a call with reporters last month.

      • BloombergTech Giants Slash Marketing Budgets, Bruising Major Ad Firms

        After massive layoffs earlier this year, technology giants have found one more item to slash: marketing budgets.

        Several large advertising companies reported a sharp cutback in spending from US tech and telecom companies, which had recently become some of the largest marketers in the world.

      • Telus slashing 6,000 jobs in order to remain competitive

        According to news outlets, including CBC News, the company plans to cut approximately 6,000 jobs. 4,000 roles will be eliminated at Telus’ main business, with the remaining 2,000 affecting Telus International.

        President and CEO Darren Entwistle claimed that the reduction is being made with “a very heavy heart” and was prompted by the “evolving regulatory, competitive and macroeconomic environment.”

        “Against the backdrop of rapid transformation in our industry and the ways in which our customers want to engage with us, today we are announcing a significant investment in an extensive efficiency and effectiveness initiative across Telus,” Entwistle said in a news release obtained by CBC News.

      • Study after study shows that working from home leads to more efficiency and higher quality work — so why do companies want people back in the office? Here are 3 possible reasons

        Employees overwhelmingly love the option to work from home. More than nine in 10 prefer it exclusively or as a hybrid arrangement, a Gallup study shows.

        Employers, on the other hand, don't appear fully on board, as many are calling employees back into the office.

        In some ways, employers' resistance to remote work is a mystery. After all, eliminating commutes gives the average U.S. employee almost one extra hour to work each day, according to research from the University of Chicago’s Becker Friedman Institute. Plus, staff forced to work in-office are more likely to experience burnout and low engagement, per Gallup.

    • AstroTurf/Lobbying/Politics

    • Censorship/Free Speech

    • Freedom of Information / Freedom of the Press

    • Monopolies



Recent Techrights' Posts

Touch Grass
Happiness involves what humans have evolved to appreciate, not what humans create to sedate the mind (like skinnerboxes)
The Cyber Show on Technology Having Become a Tool of Mass Psychosis, Not Enablement or Emancipation
Technology as mass psychosis
The Rumour Said That a Second Wave of Microsoft Layoffs Would Come This Week (Ahead of Fake 'Results'), Maybe Tomorrow
Let's wait and see how "MSM" unfold
Karen Melchior Fought the Good Fight
stay tuned for Part 29
 
This Coming Weekend Marks 4 Years Since We Dumped Content Management Systems (CMSs) in Favour of Static Site Generators (SSGs)
the first page dated July 25
Slop's Latest Casualty: The Credibility of Linus Torvalds
If you care about millionaires and billionaires, follow Torvalds (he is already in that "club")
Techrights Will Become More Productive (More Output) Over Time
Big stories about to land
To Wikipedia, "Notability" is Just an Excuse to Hail People Who Serve Billionaires While Marginalising or Defaming the Rest
Wikipedia is an advertising space
Our Series About Solicitors Regulation Authority (SRA) and SLAPPs Will Resume Soon
Originally, in 2025, we gave ourselves 6 years (until 2031) to cover these issues, but we've seen since extended that to 10 years (until 2036) because of the amount of material we have
European Patent Office (EPO) Series: The EPO Transparency Gap
Despite the "European" tag in the organisation's name, the European Union has no jurisdiction over the European Patent Organisation
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Monday, July 20, 2026
IRC logs for Monday, July 20, 2026
Links 20/07/2026: Lashes for Songs in Iran, Kurdish Language at Risk
Links for the day
Gemini Links 21/07/2026: The Boss Baby (2017) and 2026 Old Computer Challenge Epilogue
Links for the day
Canonical Staff Acting Like They Aim to Receive Job Offers From Microsoft
There are moreover allegations that Debian will do the same, in the same way Mono boosters infected both distros in tandem or in turn.
Worsening Staff Affairs at Microsoft
Microsoft is managing to piss off many of its own workers
Czech Mate for GNU/Linux on the Way
Czechoslovakia is having none of that "peace for our time" with Microsoft
Nobody Will be Left Who Trusts IBM Anymore
The common theme is, the management must be completely replaced as soon as possible and truth needs to come out
Wall Street is a Bubble and No Company is Worth 5 Trillion Dollars
It's not hard to see which stocks will crash the hardest (or fastest)
The Corrupt Have Historically Tried to Paint Their Exposers as the Real Problem
As usual, there are efforts to shoot or muzzle the messenger
Search Engine Market Share in Italy: Microsoft Falls to Third in Many Countries Including Italy
Expect more layoffs in Bing
Links 20/07/2026: Spotify Drowning in Slop, Expiry of Software Patents in MPEG-4
Links for the day
Gemini Links 20/07/2026: Another Step Towards Owning Personal Data and Gemtext2 Envisioned
Links for the day
European Patent Office (EPO) Series: Public Missions and Private Ambitions
Despite the French government's strong formal pushback, the lobbying momentum generated by Campinos and Negrão proved unstoppable
"DOOM" and "Bloodbath": the State of Microsoft and XBox
Way to piss off fans
Links 20/07/2026: Notes on E-mail Encryption, Torvalds and His Employer Paid a Lot to Promote Slop (Pyramid Scheme)
Links for the day
What a Difference Six Years Make...
We are also beta-testing a new feature for the site; we plan to announce it some time soon
When It Comes to Slop, Richard Stallman is Opposite of Linus Torvalds
When it comes to computing, Dr. Stallman has long been a voice of reason
Daniel Pocock is in Mainstream Media This Week
Pocock's haters will absolutely hate this
In His Departure Post, Poul-Henning Kamp (phk) Explains Why Linus Torvalds is Full of "Hot Air" and Slop Bubbles
Having lived through previous bubbles as a UNIX geek, phk cannot be ignored
Whistleblowers Keep Flowing
Later today a police investigator should phone us regarding death threats we've received
We Need Less Gadgets, More Humanity
If people are being honest with themselves, many of the gadgets they claim they "cannot live without" are just excesses and distractions they could definitely leave behind
Technology and Gadgets Got Obese, Just Like Their Users
They now sell us so-called 'phones' for slop
Daniel Pocock in The Guardian This Morning
There is an opportunity here to spread a message, even if Pocock won't win a seat
"Samsung Recently Projected a 19-fold Surge in Second-Quarter Operating Profit", Now There Are Mass Layoffs
In a 9-month period Samsung's debt rose by about 80%
Gemini Links 20/07/2026: Dungeon Meshi/Undertale Crossover, "The Hitchhiker’s Guide to the Dark Web and Beyond"
Links for the day
IBM's Control of the Media "Just Showed What Taking Accountability Does Not Look Like"
It is no secret that IBM pays the media
Microsoft Loses XBox Lawsuit, But There Are More
The collapse of studios continues
GNU/Linux Approaching International Average in Djibouti
One can envisage further gains for GNU/Linux, seeing Microsoft is in such a bad shape
Daniel Pocock "[t]he Australian Taking on Nigel Farage — from Down Under"
This can help raise awareness of some issues
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Sunday, July 19, 2026
IRC logs for Sunday, July 19, 2026
Misleading Coverage in Slashdot Promotes and Openwashes Slop
Piggybacking RMS for the headline seems like a PR stunt of sorts
As Envisioned, a Rebellion and Many Whistleblowers at Microsoft
Whistleblowers ensure Microsoft has totally lost control of the "narrative" (face-saving PR)
Microsoft is a Right-Wing Company
Just remember that when people call Microsoft "woke"
GNU/Linux "Market Share" Rises to About a Quarter in Sudan
Can anyone explain to us why?
Gemini Links 19/07/2026: Visiting Ethiopia, Two Dreams, and Price of Skinnerboxes
Links for the day
Tears in IBM, Company Falls Apart While Management Fakes "Performance" to Take Bonuses
Wall Street is a naked emperor
Telling Our Story
In the coming years we'll have some high-impact stories to share and generally tell without fear of reprisal
Microsoft XBox Studio Leaders Upset at What the New CEO Did
From what we can gather, in 2024 XBox was already entering what's known as a "death spiral". Now it's literally moving down the drain/pipe.
IRC Started in Finland, GNU/Linux Did Not
History is like that
GNU/Linux Rises to 8% in Bhutan, Same as the International Average
Taking note of estimated GNU/Linux share in that country, we see it hovering around the international median/average this month
Links 19/07/2026: "The Voice of Google" and "Chinese Surveillance Tech a Threat to Privacy"
Links for the day
Keep Both Eyes on the Ball
At the moment we have six series running in parallel; two of them concern the EPO
'Journalists' Who Help IBM Cover Up Fraud
Journalistic malpractice
The "Modern Linux" Song
Join us now, make the kernel
XBox Layoffs Vastly Bigger Than Microsoft Told the Press, Microsoft Keeps Trying to Change the Subject
Many so-called "XBox fans" are no more
Microsoft Lost 1,200 Billion Dollars in "Market Value", Take a Look at What Happened to Windows
while Windows continues to fall unstoppably GNU/Linux is surging
Links 19/07/2026: People in China Are Buying Feelings and 404 Media Has Third Anniversary
Links for the day
Gemini Links 19/07/2026: Camping, Health, and Hardware
Links for the day
The State of Slopfarms
Slopfarms or LLM slopfarms are a menace and a problem on the Web
GNU/Linux Rising to 6% in Brunei
seventh in the world for GDP (PPP) per capita
Free Software is Like an 'Activist Movement'
People who argue strongly in favour of something (even very good things) will attract the wrath of those whom they oppose
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Saturday, July 18, 2026
IRC logs for Saturday, July 18, 2026