Tag Archive for: backs

Google backs Linux project to make Android, Chrome OS harder to hack


Google said Thursday it’s funding a project to increase Linux security by writing parts of the operating system’s core in the Rust programming language, a modernization effort that could bolster the security of the internet and smartphones .



icon: Miguel Ojeda


© Provided by CNET
Miguel Ojeda

If the project succeeds, it’ll be possible to add new elements written in Rust into the heart of Linux, called the kernel. Such a change would mark a major technological and cultural shift for an open-source software project that’s become foundational to Google’s Android and Chrome operating systems as well as vast swaths of the internet. 

Miguel Ojeda, who’s written software used by the Large Hadron Collider particle accelerator and worked on programming language security, is being contracted to write software in Rust for the Linux kernel. Google is paying for the contract, which is being extended through the Internet Security Research Group, a nonprofit that’s also made it easier to secure website communications through the Let’s Encrypt effort.



icon


© Miguel Ojeda


Adding Rust modules to the Linux kernel would improve security by closing some avenues for hackers can use to attack phones, computers or servers. Since it was launched in 1991, Linux has been written solely in the powerful but old C programming language. The language was developed in 1972 and is more vulnerable to hacks than contemporary programming languages.

Loading...

Load Error

Better security for Linux is good news for everyone but hackers. In addition to the Android and Chrome OSes, Google services like YouTube and Gmail all rely on servers running Linux. It also powers Amazon and Facebook, and is a fixture in cloud computing services.

It isn’t clear if Linux kernel leaders will accommodate Rust. Linus Torvalds, the founder of Linux, has said he’s open to change if Rust for Linux champions prove its worth. Ojeda has proposed 13 changes needed to allow Rust modules in Linux to get things started.

Google already has taken some early steps to make it possible to use Rust for Linux Android. Getting buy-in at the highest levels of the Linux kernel project means many other software projects could benefit, too.

Google credits the…

Source…

Channel backs government plans to tighten supply chain security


At the start of the week, the government revealed that it wanted to boost the cyber resilience of UK supply chains and would consider calling on managed service providers (MSPs) to adhere to rules that ensure they are secure.

Those that operate on the security and data protection side of the channel have broadly welcomed the consultation started by the Department for Digital, Culture, Media and Sport (DCMS).

There is a feeling among many in the channel that security is already taken extremely seriously, and any hoops that the government would require MSPs to jump through could be accommodated and are likely to be already met by many suppliers.

The consultation period kicked off this week and runs until 11 July, with MSPs getting the chance to share their thoughts. The DCMS is keen to hear about best practices and examples of good supplier risk management.

The government hinted that one of the ideas it is considering is that it could become mandatory for MSPs to meet the current Cyber Assessment Framework and adhere to the 14 principles that encourage higher levels of security.

Andrew Pitt, co-founder of security specialist Saepio, said that those channel players that already understood the importance of securing their own data would not be phased by the government’s discussion.

“We are very centred around strengthening the community and ensuring we are doing everything we can to mitigate the risk,” he said.

“Cyber security definitely has our government’s ear and as a result we are able to substantiate the messaging from a business point of view and relate it back top parliamentary initiatives,” he added. “It’s good that our government is focused on supporting businesses and cyber security businesses.”

Brooks Wallace, vice-president of Europe, Middle East and Africa (EMEA) sales at Deep Instinct, also welcomed the opportunity to share thoughts about how MSPs could improve their security levels, and saw the DCMS move as a positive.

“The DCMS can help to educate [MSPs] on the value of prevention and what it can mean for an MSP in the marketplace. That’s exactly what we want to hear because we can help out,” he said.

Others in the industry accepted…

Source…

Anti-Safe Space Crusader Bret Stephens Apparently Needs A Safe Space: Backs Out Of Bedbug Debate

IN 2017, NY Times columnist Bret Stephens gave a commencement address at Hampden-Sydney College that he then repurposed as one of his NY Times columns entitled: “Leave Your Safe Spaces.” The entire theme was that college students are way too soft intellectually, and they’ve been coddled and are too afraid to debate difficult and dangerous ideas. He mocks the concept of safe spaces, and suggests that it diminishes ones ability to truly seek the truth. Near the end, it states:

So here’s my advice to you: Get out of your own safe spaces. Define what your intellectual comfort zone is — and leave it. Enhance your tolerance for discordant voices. Narrow your criteria for what’s beyond the pale. Read the authors or watch the talking heads with whom you disagree. Treat those disagreements as a whetting stone to sharpen your own arguments. Resist the temptation to call people names.

And then it concludes:

Safe spaces, physical and intellectual, are for children. You are grown-ups now. If your diplomas mean anything, it’s that it is time you leave those spaces behind forever.

And last year, he wrote a column (which was also actually a speech given at a university) entitled “Free Speech and the Necessity of Discomfort”, which concludes:

As each side gathers round in their respective echo chambers and social media silos, the purpose of free speech has become increasingly more obscure.

Its purpose isn’t, or isn’t merely, to allow us to hear our own voices, or the voices of those with whom we already agree. It is also to hear what other people, with other views, often anathema to ours, have to say.

To hear such speech may make us uncomfortable. As well it should. Discomfort is not injury. An intellectual provocation is not a physical assault. It’s a stimulus. Over time, it can improve our own arguments, and sometimes even change our minds.

In either case, it’s hard to see how we can’t benefit from it, if we choose to do so. Make that choice. Democracy is enriched if you do. So are you.

He also wrote a column that was also a speech, entitled “The Dying Art of Disagreement”, which also whines about kids at universities being unwilling to debate those they disagree with.

So here’s where we stand: Intelligent disagreement is the lifeblood of any thriving society. Yet we in the United States are raising a younger generation who have never been taught either the how or the why of disagreement, and who seem to think that free speech is a one-way right: Namely, their right to disinvite, shout down or abuse anyone they dislike, lest they run the risk of listening to that person — or even allowing someone else to listen. The results are evident in the parlous state of our universities, and the frayed edges of our democracies.

By now you should get a sense of Stephens’ general style. Those crazy universities with their safe spaces and unwillingness to debate difficult ideas in the light of day.

Of course, we all know that Stephens is a bit hypocritical in all of that. Back in August, somewhat famously, he turned a little-noticed jokey tweet from media professor David Karpf that suggested bedbugs at the NY Times offices were “a metaphor” for Bret Stephens, into a massive phenomenon, by first misunderstanding the tweet, and then getting so worked up and angry about it that he not only emailed the professor, but also emailed the professor’s boss in an obvious attempt to intimidate him. It soon came out that he’d done similar things to others as well. Stephens then made things even worse by thinking he was clever in subtly comparing Karpf to the Nazis in his NYT column, which accidentally revealed that he’d just done a Google Book search of “jews as bedbugs” and then twisted the results to pretend that it was common for Nazis to call jews bedbugs.

When Karpf was on our podcast he revealed that Stephens had actually agreed to go to come to George Washington University (where Karpf is a professor) and debate the whole incident. Except… that’s now off. And the reason it’s off appears to be that it wouldn’t have been enough of a safe space for Stephens, because the University (and Karpf) refused to block the public from attending. As Karpf told Ashley Feinberg at Slate:

“The thing that I can share is that he had decided that he was only willing to come if we made it not a public event,” Karpf told me over the phone. “Students could be in the room, but he didn’t want to allow this story to continue anymore. They talked with him, and what it came down to was, the only way he’d do the event is if the public wasn’t allowed to see it. I said, ‘I think that’s really unreasonable.’ They came back to him and said, ‘Karpf thinks that’s unreasonable.’ And he said, ‘OK, we’re not doing it.’ ”

As Karpf has shown over and over again in this whole saga, he’s the one who should have a column at the NY Times or somewhere where lots more people can read his insights, as he so succinctly sums up the craziness of the situation:

Karpf, for his part, said that if Stephens had never written the column comparing Karpf to Nazi propaganda ministers, he might have relented. “If he’d just said, ‘You know I’ve been teased a lot about this because of that one email that I sent you—I’m willing to talk with you, but I don’t want it to be public,’ then I probably would have been OK with that,” Karpf explained. “But if you’re going to go full Godwin against me in the New York Times, I don’t think you then get to say, ‘Oh, by the way, it’s all off the record from here on out.’ That’s just creating a safe space for him so that he could talk about how the Bretbug affair felt for him, but not in a way that anyone would be able to cover. It didn’t seem reasonable or appropriate to me.”

GWU’s School of Media and Public Affairs does occasionally hold private, off-the-record events, but according to Karpf, “it’s not like we were bringing in a diplomat who was going to tell us secrets about what it’s like to be a diplomat. This is a New York Times columnist who writes two columns a week for the New York Times. If a broader public wants to hear what he says there, then I think they get to hear it.”

Ah well. Bedbugs never really do like the light, do they?

Permalink | Comments | Email This Story

Techdirt.