Forwarded from LAPSUS$
After evaluating our position and NVIDIA's, we decided to add one more requirement.
We request that NVIDIA commits to COMPLETELY OPEN-SOURCE (and distribute under a foss license) their GPU drivers for Windows, macOS and Linux, from now on and forever.
If this request is not met, on Friday we will release the COMPLETE SILICON, GRAPHICS AND COMPUTER CHIPSET FILES for all recent NVIDIA GPUs, including the RTX 3090Ti and UPCOMING REVISIONS! Of course, this includes all files with extensions such as .v, .vx, .vg and more.
So, NVIDIA, the choice is yours! Either:
-Officially make current and all future drivers for all cards open source, while keeping the Verilog and chipset trade secrets... well, secret
OR
-Not make the drivers open source, making us release the entire silicon chip files so that everyone not only knows your driver's secrets, but also your most closely-guarded trade secrets for graphics and computer chipsets too!
YOU HAVE UNTIL FRIDAY, YOU DECIDE!
We request that NVIDIA commits to COMPLETELY OPEN-SOURCE (and distribute under a foss license) their GPU drivers for Windows, macOS and Linux, from now on and forever.
If this request is not met, on Friday we will release the COMPLETE SILICON, GRAPHICS AND COMPUTER CHIPSET FILES for all recent NVIDIA GPUs, including the RTX 3090Ti and UPCOMING REVISIONS! Of course, this includes all files with extensions such as .v, .vx, .vg and more.
So, NVIDIA, the choice is yours! Either:
-Officially make current and all future drivers for all cards open source, while keeping the Verilog and chipset trade secrets... well, secret
OR
-Not make the drivers open source, making us release the entire silicon chip files so that everyone not only knows your driver's secrets, but also your most closely-guarded trade secrets for graphics and computer chipsets too!
YOU HAVE UNTIL FRIDAY, YOU DECIDE!
慢慢明白那些伟大的开源组织自建Git的目的，原来他们早就看破，某些看似开放或者故意伪装成开放的个体/机构/组织/企业，他们从根本上从来不是，也永远无法成为全世界人类的资产
如果关注曾经发生过的事件，GitHub封禁整个国家的普通开发者的事情也真实的发生过
https://github.blog/2022-03-02-our-response-to-the-war-in-ukraine/
如果关注曾经发生过的事件，GitHub封禁整个国家的普通开发者的事情也真实的发生过
https://github.blog/2022-03-02-our-response-to-the-war-in-ukraine/
The GitHub Blog
Our response to the war in Ukraine
As the global response to the tragedies in Ukraine and other impacted regions continues to evolve, I wanted to share with our community an expansion of the message that I shared earlier this week with our Hubbers.
拾趣
After evaluating our position and NVIDIA's, we decided to add one more requirement. We request that NVIDIA commits to COMPLETELY OPEN-SOURCE (and distribute under a foss license) their GPU drivers for Windows, macOS and Linux, from now on and forever. If…
Microsoft News
DEV-0537 criminal actor targeting organizations for data exfiltration and destruction
The activity we have observed has been attributed to a threat group that Microsoft tracks as DEV-0537, also known as LAPSUS$. DEV-0537 is known for using a pure extortion and destruction model without deploying ransomware payloads.
拾趣
After evaluating our position and NVIDIA's, we decided to add one more requirement. We request that NVIDIA commits to COMPLETELY OPEN-SOURCE (and distribute under a foss license) their GPU drivers for Windows, macOS and Linux, from now on and forever. If…
BBC News
Lapsus$: Oxford teen accused of being multi-millionaire cyber-criminal
Police say they've arrested seven teenagers as part of their investigation into a hacking group.
Forwarded from Solidot
GitHub 将要求所有代码贡献者使用 2FA
2022-05-05 13:32
最大代码托管平台 GitHub 宣布到 2023 年底所有上传代码的用户都必须使用双因素认证（2FA）。GitHub 首席安全官（CSO）Mike Hanley 在官方博客上 宣布了这一政策，此举旨在预防开发者的账号被劫持，防止攻击者劫持账号后上传恶意代码对下游项目发动供应链攻击。Hanley 称，软件的供应链始于开发者，开发者的账号经常成为社交工程和劫持的目标，保护开发者免受此类攻击是保护供应链安全的第一步也是最重要的一步。GitHub 的内部数据显示，只有 16.5% 的活跃用户启用了增强保护措施，它希望通过引导开发者采取更安全的账号保护标准，提高软件开发社区的整体安全性。
2022-05-05 13:32
最大代码托管平台 GitHub 宣布到 2023 年底所有上传代码的用户都必须使用双因素认证（2FA）。GitHub 首席安全官（CSO）Mike Hanley 在官方博客上 宣布了这一政策，此举旨在预防开发者的账号被劫持，防止攻击者劫持账号后上传恶意代码对下游项目发动供应链攻击。Hanley 称，软件的供应链始于开发者，开发者的账号经常成为社交工程和劫持的目标，保护开发者免受此类攻击是保护供应链安全的第一步也是最重要的一步。GitHub 的内部数据显示，只有 16.5% 的活跃用户启用了增强保护措施，它希望通过引导开发者采取更安全的账号保护标准，提高软件开发社区的整体安全性。