GitHub, Android, Python, Go: More Software Adopts Race-Neutral Terminology

“The terms ‘allowlist’ and ‘blocklist’ describe their purpose, while the other words use metaphors to describe their purpose,” reads a change description on the source code for Android — from over a year ago. 9to5Mac calls it “a shortened version of Google’s (internal-only) explanation” for terminology changes which are now becoming more widespread. And Thursday GitHub’s CEO said they were also…

Vulnerabilities in Popular Open Source Projects Doubled in 2019

A study that analyzed the top 54 open source projects found that security vulnerabilities in these tools doubled in 2019, going from 421 bugs reported in 2018 to 968 last year. From a report: According to RiskSense’s “The Dark Reality of Open Source” report, released today, the company found 2,694 bugs reported in popular open source projects between 2015 and March…

‘FOSS Responders’ Want to Help Open-Source Groups Survive

“Thanks to the coronavirus, technology events have been canceled left and right,” writes ZDNet. “This, in turn, is damaging the finances of companies and groups that depend on these events.” Some open-source groups, such as The Linux Foundation, can deal with it. Others aren’t so fortunate. Some, such as Drupal Foundation, the Open Source Initiative (OSI), Open Source Matters (Joomla), and…

Notorious Crime Gang Targets Internet Routers Using Tomato Firmware

An anonymous reader quotes a report from Ars Technica: Internet routers running the Tomato alternative firmware are under active attack by a self-propagating exploit that searches for devices using default credentials. When credentials are found, the exploit then makes the routers part of a botnet that’s used in a host of online attacks, researchers said on Tuesday. The Muhstik botnet came…