Tag Archives: open source

Nginx core developer quits project in security dispute, starts “freenginx” fork

Getty Images reader comments 42 A core developer of Nginx, currently the world’s most popular web server, has quit the project, stating that he no longer sees it as “a free and open source project… for the public good.” His fork, freenginx, is “going to be run by developers, and not corporate entities,” writes Maxim… Read More »

Zuckerberg’s AGI remarks follow trend of downplaying AI dangers

Enlarge / Mark Zuckerberg, chief executive officer of Meta Platforms Inc., during the Meta Connect event in Menlo Park, California, on September 27, 2023. reader comments 49 On Thursday, Meta CEO Mark Zuckerberg announced that his company is working on building “general intelligence” for AI assistants and “open sourcing it responsibly,” and that Meta is… Read More »

IBM, Meta form “AI Alliance” with 50 organizations to promote open source AI

reader comments 33 On Tuesday, IBM and Meta announced the AI Alliance, an international coalition of over 50 organizations including AMD, Intel, NASA, CERN, and Harvard University that aims to advance “open innovation and open science in AI.” In other words, the goal is to collectively promote alternatives to closed AI systems currently in use… Read More »

Highly invasive backdoor snuck into open source packages targets developers

Getty Images reader comments 14 with Highly invasive malware targeting software developers is once again circulating in Trojanized code libraries, with the latest ones downloaded thousands of times in the last eight months, researchers said Wednesday. Since January, eight separate developer tools have contained hidden payloads with various nefarious capabilities, security firm Checkmarx reported. The… Read More »

Meta releases open source AI audio tools, AudioCraft

reader comments 17 with On Wednesday, Meta announced it is open-sourcing AudioCraft, a suite of generative AI tools for creating music and audio from text prompts. With the tools, content creators can input simple text descriptions to generate complex audio landscapes, compose melodies, or even simulate entire virtual orchestras. AudioCraft consists of three core components:… Read More »

AlmaLinux says Red Hat source changes won’t kill its RHEL-compatible distro

Enlarge / AlmaLinux lets you build applications that work with Red Hat Enterprise Linux but can’t promise the exact same bug environment. That’s different from how they started, but it’s also a chance to pick a new path forward. AlmaLinux OS reader comments 7 with I asked benny Vasquez, chair of the AlmaLinux OS Foundation,… Read More »

Backdoor in public repository used new form of attack to target big firms

reader comments 19 with 17 posters participating Share this story A backdoor that researchers found hiding inside open source code targeting four German companies was the work of a professional penetration tester. The tester was checking clients’ resilience against a new class of attacks that exploits public repositories used by millions of software projects worldwide.… Read More »

Sabotage: Code added to popular NPM package wiped files in Russia and Belarus

Getty Images reader comments 95 with 73 posters participating, including story author Share this story A developer has been caught adding malicious code to a popular open-source package that wiped files on computers located in Russia and Belarus as part of a protest that has enraged many users and raised concerns about the safety of… Read More »

Developer sabotages his own apps, then claims Aaron Swartz was murdered

reader comments 179 with 99 posters participating Share this story The developer who sabotaged two of his own open source code libraries, causing disruptions for thousands of apps that used them, has a colorful past that includes embracing a QAnon theory involving Aaron Swartz, the well-known hacktivist and programmer who died by suicide in 2013.… Read More »

Zeroday in ubiquitous Log4j tool poses a grave threat to the Internet

Getty Images reader comments 62 with 41 posters participating Share this story Exploit code has been released for a serious code-execution vulnerability in Log4j, an open-source logging utility that’s used in countless apps, including those used by large enterprise organizations, several websites reported on last Thursday. Word of the vulnerability first came to light on… Read More »