New Downfall Attack Could Lead to Sensitive Data Leakage on Intel Processors
Security researcher Daniel Moghimi discovered a new side-channel vulnerability affecting Intel processors that could be exploited to steal data from other users or apps running on the same computer. Dubbed Downfall, the vulnerability has been patched by Intel and mitigated by most major OS vendors.
Keeping Go "Boring" in Go 1.21: How Google Grants Backward Compatibility
In a recent article, Google engineer Russ Cox detailed what Google does to make sure each new Go release honors Go’s backward-compatibility guarantee. This includes generalizing GODEBUG in Go 1.21 to cover even subtle incompatibility cases.
Ngrok Starts Offering One Static Domain to All of its Free Users
To make it easier for developers to expose their local services to the Internet while developing them, ngrok is now providing them the possibility to create and use one static domain for free, instead of relying on time-limited, random domains.
OpenSSF New Manifesto Urges the Software Industry to Take Responsibility for Open Source Security
The Open Source Consumption Manifesto from OpenSSF aims to make the software industry more aware of its responsibility when it comes to ensuring the software supply chain remains secure and healthy.