Microsoft recently applied to become a member of a private group of Linux developers focused on addressing security vulnerabilities (via ZDNet). While Linux development is typically done openly, the group — comprised of developers from big names like Amazon, Redhat, Debian, and FreeBSD, among others — is tasked with discussion and reporting security issues before they are revealed to the public.
In the application for membership, Microsoft Linux kernel developer Sasha Levin lays out the case for Microsoft's inclusion, noting the company meets a portion of the criteria through its work on Azure Sphere, a Linux-based IoT device; the Windows Subsystem for Linux; and Azure HDInsight and the Azure Kubernetes Service.
"Microsoft has decades long history of addressing security issues via MSRC," Levin argues, referring to the Microsoft Security Response Center. "While we are able to quickly (1-2 hours) create a build to address disclosed security issues, we require extensive testing and validation before we make these builds public. Being members of this mailing list would provide us the additional time we need for extensive testing."
If Microsoft's application is approved, the company could participate in private security discussions and would be expected to contribute to developing solutions.
Microsoft has been much more active in the Linux community in recent years. Whereas the company once took an adversarial approach to Linux, Microsoft has pushed to more openly embrace open-source software. In 2018, for example, Microsoft joined the Open Invention Network, which aims to prevent Linux and other open source software by opening up its patents to other members. The Windows Subsystem for Linux has also been a major focus for developers, allowing Linux distros natively in Windows.
Portable (and affordable) power accessories we love
Each and every one of these charging gadgets will keep your favorite gear and gadgets going for longer, and none of them costs more than $30.
This post may contain affiliate links. See our disclosure policy for more details.
Tech
via https://www.AiUpNow.com
Dan Thorp-Lancaster, Khareem Sudlow
