Remoticon Video: Pigweed Brings Embedded Unit Testing, Library Integration to Commandline

When it comes to embedded engineering, toolchains are the worst. Getting a new toolchain up and running correctly is often hard, and often prone to breaking when the IDE or other software is upgraded. A plethora of different toolchains for …read more

Continue reading Remoticon Video: Pigweed Brings Embedded Unit Testing, Library Integration to Commandline

Fake Python Libraries Caught Trying to Steal SSH and GPG Keys

A couple of Python libraries that posed as real components were caught stealing SSH and GPG keys from projects that used them. Software developer Lukas Martini discovered that the python3-dateutil and jeIlyfish libraries in the PyPI (Python Package Ind… Continue reading Fake Python Libraries Caught Trying to Steal SSH and GPG Keys

Zip Slip Flaw Affects Thousands of Open-Source Projects

An exploit allows attackers to remotely overwrite archive files with their own content, and from there pivot to achieving remote command execution on the machine. Continue reading Zip Slip Flaw Affects Thousands of Open-Source Projects