[$] Open source security in spite of AI

The curl project has found AI-powered tools to be a mixed bag when it comes to security reports. At FOSDEM 2026, curl creator and lead developer Daniel Stenberg used his keynote se [...]

https://lwn.net/Articles/1058266/ #LWN #Linux #security #FOSDEM

Security updates for Monday

https://lwn.net/Articles/1058989/ #LWN #Linux #security

Security updates for Friday

https://lwn.net/Articles/1058642/ #LWN #Linux #security

The fresh 4th edition of The Book of PF in physical form has reached Europe (Ireland), https://www.linkedin.com/posts/tomsmythconnect_thebookofpf-openbsd-packetfilter-activity-7427686906349555713-7s4w - so my stack of author copies are hopefully on the way too.

The book home page is at https://nostarch.com/book-of-pf-4th-edition

Some background https://nxdomain.no/~peter/yes_the_book_of_pf_4th_ed_is_coming.html @nostarch #bookofpf #openbsd #freebsd #pf #packetfilter #networking #security

Linus Torvalds rejected Linux 7.0’s MMC updates as “untested garbage.” ⚙️
The move delays new eMMC features but reinforces Linux’s focus on stability and sound testing. 🧩
Debate follows on quality standards, transparency, and contributor accountability. ⚖️

🔗 https://www.techedubyte.com/linus-torvalds-rejects-linux-7-0-updates-controversy/

#TechNews #Linux #OpenSource #Privacy #Kernel #Software #Testing #QA #Security #Innovation #Accountability #Developers #Hardware #FOSS #Coding #Freedom #Freesoftware #Ubuntu #Debian #Fedora #Community

No One, Including Our Furry Friends, Will Be Safer in Ring's Surveillance Nightmare

https://www.eff.org/deeplinks/2026/02/no-one-including-our-furry-friends-will-be-safer-rings-surveillance-nightmare-0

#tech #technology #news #technews #security #privacy #ring #Surveillance

Security updates for Thursday

https://lwn.net/Articles/1058473/ #LWN #Linux #security

I've had admin powers at 5+ companies' Google Workspace/G Suite over the past decade or so. Every single one had groups which were misconfigured, often so anyone in the whole company could join without approval or see the message history at https://groups.google.com without being a member at all.

This is because for any sensible configuration of Google Groups when using it for email groups you have to use the "Custom" permissions mode. The default Public mode doesn't allow external people to email the group, but does allow the whole company to see all the messages. The default Team mode, has the same problem of everyone being able to see all the messages.

Also let's not forget that dangerous little "Anyone in the organisation can join" toggle at the bottom which is on by default. So any random new starter can join your confidential company directors group and get all the emails sent to it.

Giving Google the benefit of the doubt here, I think the reasoning might be that Google Groups is intended as a kind of company forum, not for private email groups. However that isn't how anyone uses it in my experience...

#security #infosec #google #googleworkspace

Alt...

Screenshot of the default Google Group settings for team mode

Alt...

Screenshot of the default Google Group settings for public mode