PyPI open-source code repository deals with manic malware maelstrom
Controlled outage used to keep malware marauders from gumming up the works. Learn what you can do to help in future…
supply chain
The U.S. Needs Minerals for Electric Cars. Everyone Else Wants Them Too.
The United States is entering an array of agreements to secure the critical minerals necessary for the energy transition, but it’s not clear which of the arrangements can succeed.
G7 Countries Borrow China’s Economic Strategy
Wealthy democracies rev up an effort to spend trillions on a new climate-friendly energy economy, while stealing away some of China’s manufacturing power.
Micro-Star International Signing Key Stolen
Micro-Star International—aka MSI—had its UEFI signing key stolen last month.
This raises the possibility that the leaked key could push out updates that would infect a computer’s most nether regions without triggering a warning. To make matters worse, Matrosov said, MSI doesn’t have an automated patching process the way Dell, HP, and many larger hardware makers do. Consequently, MSI doesn’t provide the same kind of key revocation capabilities.
Delivering a signed payload isn’t as easy as all that. “Gaining the kind of control required to compromise a software build system is generally a non-trivial event that requires a great deal of skill and possibly some luck.” But it just got a whole lot easier…
Some U.S. Solar Makers Criticize Biden’s Tax Credits as Too Lax on China
U.S.-based manufacturers of solar products say rules issued by the Biden administration on Friday will “cement China’s dominance” over the solar industry.
The Forces Behind South Korea’s and Japan’s Thaw
Eras of grievances between the two countries are giving way under the pressure of global changes, and with help from a personal outreach approach by both leaders.
PHP Packagist supply chain poisoned by hacker “looking for a job”
I pwned you! Gizza job! You know it makes sense!
Unpaid open source maintainers struggle with increased security demands
Ensuring the security of the open-source software that modern organizations depend on is a crucial responsibility of the open source maintainers, especially as attacks on the software supply chain are increasingly common, according to Tidelift. Open so…
Why the Japan and South Korea Détente Is Crucial to Biden’s Asia Ambitions
The animosity between South Korea and Japan has long been a weak link in Washington’s Indo-Pacific strategy. President Biden is likely to urge more steps toward a thaw during meetings this week.
Can Africa Get Close to Vaccine Independence? Here’s What It Will Take.
Leaders on the continent have vowed that if there is another pandemic, they won’t be shut out of the vaccine market.