Forwarded from Hacker News
Apple to face EU antitrust charge over NFC chip (Score: 150+ in 5 hours)
Link: https://readhacker.news/s/4VReF
Comments: https://readhacker.news/c/4VReF
Link: https://readhacker.news/s/4VReF
Comments: https://readhacker.news/c/4VReF
Reuters
EXCLUSIVE Apple to face EU antitrust charge over NFC chip - sources
Apple will be hit with an EU antitrust charge over its NFC chip technology, people familiar with the matter said, a move that puts it at risk of a possible hefty fine and could force it to open its mobile payment system to rivals.
以前我们抱怨 #Java，直到 #JavaScript 统治世界。
https://news.ycombinator.com/item?id=20682591
I remember back in the early 2000's when everybody was complaining about Java. That it was “slow”, and “used a lot of memory”, and that its UI “is not native”.
Now it's all JS and #Electron and every single complaint people used against Java is an order of magnitude worse and everybody seems to be happy about it.
Progress have definitely been going backwards.
https://news.ycombinator.com/item?id=20682591
I remember back in the early 2000's when everybody was complaining about Java. That it was “slow”, and “used a lot of memory”, and that its UI “is not native”.
Now it's all JS and #Electron and every single complaint people used against Java is an order of magnitude worse and everybody seems to be happy about it.
Progress have definitely been going backwards.
Forwarded from 层叠 - The Cascading
#PSA GitKraken Git-Hosted SSH
tl;dr: 截止 12 日凌晨一点 (UTC+8)，GitHub 已经作废了所有用户通过 7.6.x, 7.7.x 和 8.0.0 版本的 GitKraken 生成的 SSH 密钥，以及来自其它客户端软件的类似弱密钥。在以后，使用或添加此类弱密钥的行为也会被 GitHub 阻止。受影响用户应已经收到通知。
此处置并非因为 GitHub 的数据发生泄露。
GitKraken 亦就此事件通知了 Bitbucket、GitLab 及 Azure DevOps。这三个平台的受影响用户也应已经收到通知。请参见 [bb]、[gl]、[az] 三篇文章。
GitKraken 的 7.6.x, 7.7.x 和 8.0.0 版本所使用的依赖项
https://github.blog/2021-10-11-github-security-update-revoking-weakly-generated-ssh-keys/
导致此问题的
1. https://www.gitkraken.com/blog/weak-ssh-key-issue-fix
2. https://github.com/juliangruber/keypair/security/advisories/GHSA-3f99-hvg4-qjwj
bb: https://bitbucket.org/blog/action-required-for-gitkraken-users-using-ssh
gl: https://about.gitlab.com/blog/2021/10/11/notice-for-gitkraken-users-with-gitlab/
az: https://devblogs.microsoft.com/devops/azure-devops-response-to-gitkraken-ssh-bug/
tl;dr: 截止 12 日凌晨一点 (UTC+8)，GitHub 已经作废了所有用户通过 7.6.x, 7.7.x 和 8.0.0 版本的 GitKraken 生成的 SSH 密钥，以及来自其它客户端软件的类似弱密钥。在以后，使用或添加此类弱密钥的行为也会被 GitHub 阻止。受影响用户应已经收到通知。
此处置并非因为 GitHub 的数据发生泄露。
GitKraken 亦就此事件通知了 Bitbucket、GitLab 及 Azure DevOps。这三个平台的受影响用户也应已经收到通知。请参见 [bb]、[gl]、[az] 三篇文章。
GitKraken 的 7.6.x, 7.7.x 和 8.0.0 版本所使用的依赖项
keypair 会生成较弱的 SSH key。如果您正在使用 GitKraken，请检查您最近通过 GitKraken 生成的 SSH 密钥。来自 GitKraken 的消息和解释请见 [1]。GitHuhttps://github.blog/2021-10-11-github-security-update-revoking-weakly-generated-ssh-keys/
导致此问题的
keypair 的漏洞已被标记为 GHSA-3f99-hvg4-qjwj，详细描述在 [2]。这个漏洞的特点之一是会周期性生成重复的 RSA 密钥，因此问题较为严重。1. https://www.gitkraken.com/blog/weak-ssh-key-issue-fix
2. https://github.com/juliangruber/keypair/security/advisories/GHSA-3f99-hvg4-qjwj
bb: https://bitbucket.org/blog/action-required-for-gitkraken-users-using-ssh
gl: https://about.gitlab.com/blog/2021/10/11/notice-for-gitkraken-users-with-gitlab/
az: https://devblogs.microsoft.com/devops/azure-devops-response-to-gitkraken-ssh-bug/
The GitHub Blog
GitHub security update: revoking weakly-generated SSH keys
On September 28, 2021, we received notice from Axosoft regarding a vulnerability in a dependency of their popular git GUI client GitKraken.
层叠 - The Cascading
#PSA GitKraken Git-Hosted SSH tl;dr: 截止 12 日凌晨一点 (UTC+8)，GitHub 已经作废了所有用户通过 7.6.x, 7.7.x 和 8.0.0 版本的 GitKraken 生成的 SSH 密钥，以及来自其它客户端软件的类似弱密钥。在以后，使用或添加此类弱密钥的行为也会被 GitHub 阻止。受影响用户应已经收到通知。 此处置并非因为 GitHub 的数据发生泄露。 GitKraken 亦就此事件通知了 Bitbucket、GitLab 及 Azure…
#GitKraken Acquires BigBrassBand, Creator of #Git Integration for #Jira
https://www.gitkraken.com/blog/gitkraken-acquires-git-integration-jira-bigbrassband
https://www.gitkraken.com/blog/gitkraken-acquires-git-integration-jira-bigbrassband
GitKraken
GitKraken Acquires Git Integration for Jira by BigBrassBand
GitKraken has acquired BigBrassBand, creators of Git Integration for Jira, the most popular Atlassian Marketplace app for integrating Jira and Git.
Forwarded from Plltxe.
TechCrunch: Microsoft to pull LinkedIn from Chinese market.
https://techcrunch.com/2021/10/14/microsoft-to-pull-linkedin-from-chinese-market/
🐦
https://techcrunch.com/2021/10/14/microsoft-to-pull-linkedin-from-chinese-market/
🐦
TechCrunch
Microsoft to pull LinkedIn from Chinese market
American technology giant Microsoft announced today that it will pull its professional social network LinkedIn from the Chinese market later this year. Microsoft purchased LinkedIn for more than $26 billion back in 2016. The news comes amidst a flurry of…