2025-02-20

RUSTSEC-2025-0007: ring: *ring* is unmaintained

The ring cryptography package maintenance status underwent changes, initially being declared unmaintained but later receiving security-focused maintenance from the rustls team. The advisory highlights potential security implications for users of the ring crate, with the rustls team committed to addressing critical security issues.

Original archive.is archive.ph web.archive.org

Log in to get one-click access to archived versions of this article.

read comments on news aggregators:

Related articles

Delta Chat: Delta Chat, decentralized secure messenger

Delta Chat offers secure, decentralized messaging with multi-profile support and interactive web apps, built on Internet Standards. The application combines instant messaging features with email server compatibility and end-to-end encryption. Users can access the platform across mobile and desktop devices while enjoying gaming and collaboration features.

Tailscale is pretty useful

Tailscale creates a virtual private network enabling secure remote access to devices and file sharing without traditional port forwarding. The service offers features like device-to-device connectivity, Taildrop for easy file transfers, and VPN capabilities through Mullvad integration.

Mox - modern, secure, all-in-one email server

Mox is a modern, open-source email server written in Go that combines all essential email protocols in a single, easy-to-maintain application. The server offers comprehensive features including IMAP4, SMTP, security protocols, and can be set up within 10 minutes through a quickstart command, addressing the growing centralization of email services.

Block Breakers

A hands-on educational resource focused on block cipher cryptanalysis, with a particular emphasis on attacking AES. The course provides guided exercises and practical implementations rather than theoretical knowledge, making complex cryptography concepts more approachable.

Effective Rust

A comprehensive guide presenting 35 specific methods to enhance Rust programming practices, covering essential topics from type systems to FFI boundaries. The guide is structured into six main sections, focusing on types, traits, concepts, dependencies, tooling, and advanced Rust features. Each item provides detailed insights for writing more effective and maintainable Rust code.

Yoke is really cool

Yoke enables infrastructure management through actual code rather than configuration files, allowing developers to write infrastructure definitions in Go or Rust and compile them to WebAssembly. Its Air Traffic Control feature offers powerful Kubernetes operator capabilities through CustomResourceDefinitions, while maintaining security through WebAssembly sandboxing and limited system access.

This Month in Ladybird - February 2025

The Ladybird project merged 281 PRs from 35 contributors, welcomed new sponsors including Shopify and Proton, and achieved significant improvements in Web Platform Tests compliance. Key technical advancements include OpenSSL adoption, Firefox DevTools protocol support, and various CSS implementations, demonstrating substantial progress toward the 90% pass rate required for iOS alternative browser engine eligibility.

What, if anything, should I do about using Mozilla's Firefox

A reflection on the continued use of Firefox browser amid Mozilla's recent controversial decisions, exploring alternatives like LibreWolf, Debian repos version, and standalone applications. The analysis weighs various options while considering privacy, security, and functionality needs, ultimately leaning towards maintaining Firefox usage while monitoring Mozilla's direction.

Sponsor @servo on GitHub Sponsors

Servo, a web browser rendering engine written in Rust, offers developers a lightweight, high-performance solution for embedding web technologies. Originally created by Mozilla Research in 2012 and now under Linux Foundation Europe, the project focuses on WebGL and WebGPU support for desktop, mobile, and embedded applications. The project advances web standards and platform development through its unique approach, distinct from Gecko and WebKit.