USN-4742-1: Django vulnerability

It was discovered that Django incorrectly accepted semicolons as query
parameters. A remote attacker could possibly use this issue to perform a
Web Cache Poisoning attack.



How To: Install ‘gedit’ With All The Bells and Whistles

There are many text editors out there, but gedit is a perennial favorite. There are also many plugins to extend gedit, and this is an easy way to install a bunch at once.

gedit, the default editor for the Gnome desktop environment, is a part of the GNOME Core Applications and is available in pretty much every distro. It also doesn’t actually need a lot of additional dependencies, which helps make it useful for most any popular desktop environment.

You can use gedit for anything, from programming to writing markup for your website. You can use it as a plain text editor and there are many ways to extend it, to add functionality not included by default. There are plugins to highlight syntax, to auto-complete words, to auto-close brackets, etc. You can make it do all sorts of things you’d not expect from a plain text editor.

Given that disk space is absurdly cheap these days, I don’t see any reason to not just go ahead and install as many plugins at once as I can. I may not use them all, but I’ll use most of them and I can just not enable those that I don’t want to use. So, how to install it all at once?

Crack open your terminal with CTRL + ALT + T and enter the following:

[code]sudo apt install gedit gedit-plugins-common gedit-plugin-*[/code]

So, what’s going on there? You can string together applications with aptitude and this is installing gedit first, a pack of common plugins, and then every other plugin that uses the ‘gedit-plugin-*’ format and is in the repositories.

If you don’t already know, the asterisk is known as a wildcard. A wildcard basically means, “any character.” So, foo* is anything from fool to foolish and foob* is anything from foobar to foob-gibberish183742 or whatever. It’s unlike the question mark, which only matches one character, in that it means any and all characters.

It should be noted that this only installs the plugins. You still can’t use them until you enable them. To select them, you need to first open ‘gedit’ (which will almost certainly be called “Text Editor” in your application menu) and click on preferences where you can navigate to the right-most tab and enable them. It looks like this:

gedit preferences
Select plugins ’til you’re satisfied!

If you did this properly,  you should now have a bunch of plugins enabled and not have to hunt them down, one by one, trying to find and install them manually. Is this a bit of overkill? Perhaps, but disk space is cheap and the entire thing takes up less than 19 additional MB on my system.

Like always, thanks for reading. Scroll up and look right. Toss your name and email address in there and you’ll get notified of new articles. I promise, I won’t spam you. You ain’t even gotta use your real name!




How To: Enable Password-less SUDO.

This isn’t the smartest thing you can do. In fact, you probably shouldn’t do this. But, if you are comfortable with your physical security, you can use sudo without a password.

In my case, there’s not a whole lot folks are going to do with sudo on my computer. Anyone with physical access to my device is someone that I trust. I also run a ton of commands when hanging out in the support sites and I am frankly just tired of typing my password when I use sudo.

So, let’s get rid of it. Start by pressing CTRL + ALT + T, and then enter:

[code]sudo nano /etc/sudoers[/code]

Scroll down to the bottom and add this line:

[code]<your_username>  ALL=(ALL) NOPASSWD:ALL[/code]

Where “<your_username>” substitute it with your actual username on your computer. Now save it with:

CTRL + X

Y

ENTER

See that? You also may have just learned how use ‘nano’ to edit and save a text file while in the terminal. Pretty neat, huh? Anyhow, scroll up a little and look to the right. There’s a spot where you can enter a name and email address. If you do that (and confirm the email address) then you’ll get handy notices in the email when there’s a new article. I promise, I won’t send you a single non-site related email – ever.




The Linux Foundation and IBM Announce New Open Source Projects to Promote Racial Justice

The Linux Foundation will host seven Call for Code for Racial Justice projects created by IBM and Red Hat employees

San Francisco, Calif., Feb. 19, 2021 – The Linux Foundation, the nonprofit organization enabling mass innovation through open source, today announced it will host seven projects from Call for Code for Racial Justice, an initiative driven by IBM and Creator David Clark Cause to urge the global developer ecosystem and open source community to contribute to solutions that can help confront racial inequalities.

Call for Code for Racial Justice launched in October 2020, and facilitates the adoption and innovation of open source projects by developers, ecosystem partners, and communities across the world to promote racial justice across three focus areas: Police & Judicial Reform and Accountability; Diverse Representation; and Policy & Legislation Reform. The initiative builds upon Call for Code, which was created in 2018 and has grown to over 400,000 developers and problem solvers across 179 countries, in partnership with Creator David Clark Cause, Founding Partner IBM, Charitable Partner United Nations Human Rights, and the Linux Foundation.

“Open source technology has an important role to play in addressing the greatest challenges of our time, and that includes racial justice,” said Mike Dolan, senior vice president and GM of Projects at the Linux Foundation. “We are excited to host and support these projects at the Linux Foundation, and look forward to how they will develop and deploy through contributions from the open source community.”

As part of today’s announcement, the Linux Foundation and IBM unveiled two new solution starters, Fair Change and TakeTwo:

Fair Change is a platform to help record, catalog, and access evidence of potentially racially charged incidents to help enable transparency, reeducation and reform as a matter of public interest and safety. For example, real-world video footage related to routine traffic stops, stop and search or other scenarios, may be recorded and accessed by the involved parties and authorities to determine whether the incidents were handled in a biased manner. Fair Change consists of a mobile application for iOS and Android built using React Native, an API for capturing data from various sources built using Node JS. It also includes a website with a geospatial map view of incidents built using Google Maps and React. Data can be stored in a cloud hosted database and object store. Visit the tutorial or project page to learn more.

TakeTwo aims to help mitigate bias in digital content, whether it is overt or subtle, with a focus on text across news articles, headlines, web pages, blogs, and even  code. The solution is designed to provide a consistent set of language recommendations, leveraging directories of inclusive terms compiled by trusted sources like the Inclusive Naming Initiative, which was co-founded by the Linux Foundation, Cloud Native Computing Foundation, IBM, Red Hat, Cisco, and VMware. The terminology is categorized and can be used to train an AI model to enhance its accuracy over time. TakeTwo is built using open source technologies including Python, FastAPI and Docker. The API can be run locally with an Adobe CouchDB backend database or IBM Cloudant database. IBM has already deployed TakeTwo within its existing IBM Developer tools that are used to publish new content produced by hundreds of IBMers each week. TakeTwo is being trialed by IBM for the IBM Developer website content. Visit the tutorial or project page to learn more.

“Viewed from an etymological perspective, language is a manifestation of our inherent viewpoints about society. Many phrases and words may be used in harmless contexts but bear a history that does not support our diverse, multi-cultural engineering community today. To that end, it gives me great pride that the TakeTwo project is leveraging the Inclusive Naming Initiative to provide language guidance to anyone seeking to write consciously across all platforms. By expanding beyond developers with solutions like TakeTwo, Inclusive Naming is becoming essential to a diverse and resilient community of doers and we are very honored,” said Priyanka Sharma, General Manager of the Cloud Native Computing Foundation.

In addition to the two new solution starters, the Linux Foundation will now host five existing and evolving open source projects from Call for Code for Racial Justice:

  • Five Fifths Voter: This web app empowers minorities to exercise their right to vote and helps ensure their voice is heard by determining optimal voting strategies and limiting suppression issues.
  • Legit-Info: Local legislation can have significant impacts on areas as far-reaching as jobs, the environment, and safety. Legit-Info helps individuals understand the legislation that shapes their lives.
  • Incident Accuracy Reporting System: This platform allows witnesses and victims to corroborate evidence or provide additional information from multiple sources against an official police report.
  • Open Sentencing: To help public defenders better serve their clients and make a stronger case, Open Sentencing shows racial bias in data such as demographics.
  • Truth Loop: This app helps communities simply understand the policies, regulations, and legislation that will impact them the most. 

These projects were built using technologies such as Red Hat OpenShift, IBM Cloud, IBM Watson, Blockchain ledger, Node.js, Vu.js, Docker, upstream Kubernetes and Tekton. The Linux Foundation and IBM are asking developers and ecosystem partners to contribute by testing, extending and implementing them, and adding their own diverse perspectives and expertise to make them even stronger.

“These applications emerged from an internal IBM program called the Call for Code Emb(race) Challenge, where Black IBMers, supported by Red Hat’s Blacks United in Leadership and Diversity (B.U.I.L.D.) community, and allies designed technology solutions to address the problem of systemic racism,” said Ruth Davis, IBM Director of Call for Code. “Since we released the original five projects in October, we have received enthusiastic support from the open source community. In collaboration with the Linux Foundation, we are committed to working to develop and deploy these solutions to help combat racial injustice.”

For more information and to begin contributing, please visit: 

https://developer.ibm.com/callforcode/racial-justice/get-started/

https://developer.ibm.com/callforcode/racial-justice/projects/

https://www.linuxfoundation.org/projects/call-for-code/  

https://github.com/Call-for-Code-for-Racial-Justice

About the Linux Foundation

Founded in 2000, the Linux Foundation is supported by more than 1,500 members and is the world’s leading home for collaboration on open source software, open standards, open data, and open hardware. Linux Foundation’s projects are critical to the world’s infrastructure including Linux, Kubernetes, Node.js, and more.  The Linux Foundation’s methodology focuses on leveraging best practices and addressing the needs of contributors, users and solution providers to create sustainable models for open collaboration. For more information, please visit us at linuxfoundation.org.

About Call for Code

Developers have revolutionized the way people live and interact with virtually everyone and everything. Where most people see challenges, developers see possibilities. That’s why David Clark Cause created and launched Call for Code in 2018 alongside Founding Partner IBM. This five-year, $30 million global initiative is a rallying cry to developers to use their skills and mastery of the latest technologies, and to create new ones, to drive positive and long-lasting change across the world with their code. Call for Code global winning solutions, among others, are further developed and deployed where they can make the greatest impact.

Red Hat, the Red Hat logo and OpenShift are trademarks or registered trademarks of Red Hat, Inc. or its subsidiaries in the U.S. and other countries.

The post The Linux Foundation and IBM Announce New Open Source Projects to Promote Racial Justice appeared first on Linux Foundation.




New Open Source Projects to Confront Racial Justice

Today the Linux Foundation announced that it would be hosting seven projects that originated at Call for Code for Racial Justice, an initiative driven by IBM and Creator David Clark Cause to urge the global developer ecosystem and open source community to contribute to solutions that can help confront racial inequalities. 

Launched by IBM in October 2020, Call for Code for Racial Justice facilitates the adoption and innovation of open source projects by developers, ecosystem partners, and communities across the world to promote racial justice across three distinct focus areas: Police & Judicial Reform and Accountability; Diverse Representation; and Policy & Legislation Reform. 

The initiative builds upon Call for Code, created by IBM in 2018 and has grown to over 400,000 developers and problem solvers in 179 countries, in partnership with Creator David Clark Cause, Founding Partner IBM, Charitable Partner United Nations Human Rights, and the Linux Foundation.

As part of today’s announcement, the Linux Foundation and IBM unveiled two new solution starters, Fair Change and TakeTwo: 

Fair Change is a platform to help record, catalog, and access evidence of potentially racially charged incidents to enable transparency, reeducation, and reform as a matter of public interest and safety. For example, real-world video footage related to routine traffic stops, stop and search, or other scenarios may be recorded and accessed by the involved parties and authorities to determine whether the incidents were handled in a biased manner. Fair Change consists of a mobile application for iOS and Android built using React Native, an API for capturing data from various sources built using Node JS. It also includes a website with a geospatial map view of incidents built using Google Maps and React. Data can be stored in a cloud-hosted database and object-store. Visit the tutorial or project page to learn more. 

TakeTwo aims to help mitigate digital content bias, whether overt or subtle, focusing on text across news articles, headlines, web pages, blogs, and even code. The solution is designed to leverage directories of inclusive terms compiled by trusted sources like the Inclusive Naming Initiative, which the Linux Foundation and CNCF co-founded. The terminology is categorized to train an AI model to enhance its accuracy over time. TakeTwo is built using open source technologies, including Python, FastAPI, and Docker. The API can be run locally with a CouchDB backend database or IBM Cloudant database. IBM has already deployed TakeTwo within its existing IBM Developer tools that are used to publish new content produced by hundreds of IBMers each week. IBM is trialing TakeTwo for IBM Developer website content. Visit the tutorial or project page to learn more.

In addition to the two new solution starters, The Linux Foundation will now host five existing and evolving open source projects from Call for Code for Racial Justice:

  • Five-Fifths Voter: This web app empowers minorities to exercise their right to vote and ensures their voice is heard by determining optimal voting strategies and limiting suppression issues.
  • Legit-Info: Local legislation can significantly impact areas as far-reaching as jobs, the environment, and safety. Legit-Info helps individuals understand the legislation that shapes their lives.
  • Incident Accuracy Reporting System: This platform allows witnesses and victims to corroborate evidence or provide additional information from multiple sources against an official police report.
  • Open Sentencing: To help public defenders better serve their clients and make a stronger case, Open Sentencing shows racial bias in data such as demographics.
  • Truth Loop: This app helps communities simply understand the policies, regulations, and legislation that will impact them the most.  

These projects were built using open source technologies that include Red Hat OpenShift, IBM Cloud, IBM Watson, Blockchain ledger, Node.js, Vu.js, Docker, Kubernetes, and Tekton. The Linux Foundation and IBM ask developers and ecosystem partners to contribute to these solutions by testing, extending, implementing them, and adding their own diverse perspectives and expertise to make them even stronger. 

For more information and to begin contributing, please visit: 

https://developer.ibm.com/callforcode/racial-justice/get-started/

https://developer.ibm.com/callforcode/racial-justice/projects/  

https://www.linuxfoundation.org/projects/call-for-code/  

https://github.com/Call-for-Code-for-Racial-Justice/

The post New Open Source Projects to Confront Racial Justice appeared first on Linux Foundation.