Amarok to Better Guard Against Potential Malware
To program an effective virus for Linux is fairly difficult. It's much easier to provide malware disguised as an add-on, however. The Amarok project now wants to protect against that.
Linux users are pretty easy going when it comes to Internet dangers, which can lead to trouble, as was recently revealed in an incident of malware disguised as a screensaver. It's easy to lean back and say, "well, it's your own fault that you downloaded a binary package without first looking at the source code." But the more Linux users there are, the higher the rate that programs are downloaded and installed without much forethought. Security tests may be available, but require a lot of work in view of the magnitude of uploads.
One of the first developers to address this problem is Mark Kretschmann, who recommended a solution for the KDE music player that other projects could also adopt. Even Amarok is an easy target for these attacks. The attacker needs just to disguise one as a "cool" add-on, which Kretschmann claims, for example, could completely wipe out your home directory.
He suggests, therefore, immediately using a version control system (VCS) for all scripts and add-ons. This might increase the entry barrier for prospective Amarok developers, but the detour through a VCS provides a better protection against what Kretschmann calls "crapware" scripts, because all programmers will then know that their code is being reviewed. The scripts in version control can then be downloaded via the Get Hot New Stuff (GHNS) framework in KDE, where additional security measures can be applied. Even if an author manages to inflict malware into the code, the suspect checking it in can still be traced.
Apart from guarding against malware, a mandatory VCS has the further benefit of removing "abandonware" (such as code that was forked and is no longer maintained) or giving it to someone else to maintain.
News
-
The First Point Release For Ubuntu 22.04 is Now Available
Canonical has released the first point upgrade for Jammy Jellyfish which includes important new toolchains and fixes.
-
Kali Linux 2022.3 Released
From the creators of the most popular penetration testing distributions on the planet, comes a new release with some new tools and a community, real-time chat option.
-
The 14" Pinebook Pro Linux Laptop is Shipping
After a considerable delay, the 14" version of the Pinebook Pro laptop is, once again, available for purchase.
-
OpenMandriva Lx ROME Technical Preview Released
OpenMandriva’s rolling release distribution technical preview has been released for testing purposes and adds some of the latest/greatest software into the mix.
-
Linux Mint 21 is Now Available
The latest iteration of Linux Mint, codenamed Vanessa, has been released with a new upgrade tool and other fantastic features.
-
Firefox Adds Long-Anticipated Feature
Firefox 103 has arrived and it now includes a feature users have long awaited…sort of.
-
System76 Refreshes Their Popular Oryx Pro Laptop with a New CPU
The System76 Oryx Pro laptop has been relaunched with a 12th Gen CPU and more powerful graphics options.
-
Elive Has Released a New Beta
The Elive team is proud to announce the latest beta version (3.8.30) of its Enlightenment-centric Linux distribution.
-
Rocky Linux 9 Has Arrived
The latest iteration of Rocky Linux is now available and includes a host of new features and support for new architecture.
-
Slimbook Executive Linux Ultrabook Upgrading Their CPUs
The Spanish-based company, Slimbook, has made available their next generation Slimbook Executive Linux ultrabooks with a 12th Gen Intel Alder Lake CPU.