Tootfinder

Opt-in global Mastodon full text search. Join the index!

@Techmeme@techhub.social
2026-06-01 18:30:48

Researchers find several packages in the @redhat-cloud-services npm namespace shipped malware targeting credentials for GitHub Actions, AWS, GCP, and others (Rohan Prabhu/Step Security Blog)
stepsecurity.io/blog/multiple-

Multiple redhat-cloud-services npm Packages compromised - StepSecurity
Several packages in the @redhat-cloud-services npm scope were found to carry malicious payloads that fire via a preinstall hook on every npm install. The affected versions span multiple packages across the RedHat Cloud Services frontend ecosystem. The payload is a sophisticated multi-stage credential harvester that targets GitHub Actions secrets, AWS, GCP, Azure, Kubernetes, HashiCorp Vault, npm tokens, and CircleCI tokens

@knurd42@social.linux.pizza
2026-08-01 09:40:33

""Starting with Red Hat Enterprise Linux (#RHEL) 10.2, #Firefox and #Thunderbird are delivered as Flatpaks by default. If you install RHEL with a graphical desktop, your browser and email client will now come from the

Firefox and Thunderbird as RHEL Flatpaks: What it means for you
Upgrade to Red Hat Enterprise Linux 10.2 for faster Firefox and Thunderbird updates, fewer dependency conflicts, and cleaner separation between OS and apps.

@jamie@boothcomputing.social
2026-06-05 21:46:04

Some Friday evening #retrocomputing
#RedHat
#RedHat5
#linux

picture of the install process for Red Hat 5.2 running the package install on a Gateway 2000 Solo laptop from 1995.
@stsquad@mastodon.org.uk
2026-05-28 08:40:49

It's been a while since #qemu put its original #llm contribution policy in place. It's now time to re-evaluate the policy and potentially update it:

@neverpanic@chaos.social
2026-05-21 11:16:53

Are you in the US and want to work on Smartcards? My employer has a position available: redhat.wd5.myworkdayjobs.com/e
(It says Raleigh, but…

Senior Software Engineer in Crypto (Smart Cards)
About the Job The Security Technologies crypto team is seeking a Senior Software Engineer who is a technical leader, creative and committed to delivering quality software. Our team is focused on cryptographic back-end components such as OpenSSL, GnuTLS and Network Security Services as well as cryptographic protocols like TLS, SSH and IPSEC. As a Senior Software Engineer, your main focus will be on designing, developing, testing and collaborating with other contributors over the world to bring f…

@neverpanic@chaos.social
2026-07-21 20:22:57

My team is looking for a US-based person to work on making #PQC #SmartCards work with open source software. Says Raleigh, but remote will be considered when nobody can be found locally, which is likely:

Senior Software Engineer in Crypto (Smart Cards)
About the Job The Security Technologies crypto team is seeking a Senior Software Engineer who is a technical leader, creative and committed to delivering quality software. Our team is focused on cryptographic back-end components such as OpenSSL, GnuTLS and Network Security Services as well as cryptographic protocols like TLS, SSH and IPSEC. As a Senior Software Engineer, your main focus will be on designing, developing, testing and collaborating with other contributors over the world to bring f…

@theodric@social.linux.pizza
2026-05-21 10:16:07

Another reason (of many!) not to run RedHat: they've slopped it! nerds.xyz/2026/05/red-hat-ente

@luana@wetdry.world
2026-07-20 20:32:07
Content warning: Gnome, genAI/LLMs, RedHat

Uhhhhh so GNOME will no longer accept security reports for its own projects that don't allow LLM usage???
What kind of self-boycotting bullshit is this?
Is this FashHat RedHat using their control over the security team to try to force all GNOME (sub)projects to accept "AI"?
If I'm getting this correctly, if you have a project there that doesn't allow LLMs it might be a good time to fork it away from under GNOMEs wings?
Source: phoronix.com/news/GNOME-Securi