Brief items
Security
The Problems and Promise of WebAssembly (Project Zero)
Over at Google's Project Zero blog, Natalie Silvanovich looks at some of the bugs the project has found in WebAssembly, which is a binary format to run code in the browser for web applications. She also looks to the future: "There are two emerging features of WebAssembly that are likely to have a security impact. One is threading. Currently, WebAssembly only supports concurrency via JavaScript workers, but this is likely to change. Since JavaScript is designed assuming that this is the only concurrency model, WebAssembly threading has the potential to require a lot of code to be thread safe that did not previously need to be, and this could lead to security problems. WebAssembly GC [garbage collection] is another potential feature of WebAssembly that could lead to security problems. Currently, some uses of WebAssembly have performance problems due to the lack of higher-level memory management in WebAssembly. For example, it is difficult to implement a performant Java Virtual Machine in WebAssembly. If WebAssembly GC is implemented, it will increase the number of applications that WebAssembly can be used for, but it will also make it more likely that vulnerabilities related to memory management will occur in both WebAssembly engines and applications written in WebAssembly."
Security quote of the week
Kernel development
Kernel release status
The 4.19 merge window is still open. The process of merging changes into the mainline continues, with 10,650 changesets added as of this writing.Stable updates: it was a busy week for stable kernels:
- 4.18.1, 4.17.15, 4.14.63, 4.9.120, and 4.4.148 all showed up on August 16; they included the first set of patches for the L1TF vulnerability among other things.
- 4.18.2, 4.17.16, 4.14.64, 4.9.121, 4.4.149, and 3.18.119, followed immediately by the single-fix updates 4.18.3, 4.17.17, 4.14.65, 4.9.122, and 4.4.150, all came out on August 18.
- Finally, 4.18.4, 4.17.18, 4.14.66, 4.9.123, and 4.4.151 were released on August 22.
One cause for all of these updates was the need to fix residual problems
with the L1TF mitigations. There were complaints about a lack of testing,
but the real problem, according
to Linus Torvalds, is that "because this was all done under
embargo, we didn't get the kind of test robot coverage we usually
get
".
Quotes of the week
Distributions
Debian: 25 years and counting
The Debian project is celebrating the 25th anniversary of its founding by Ian Murdock on August 16, 1993. The "Bits from Debian" blog had this to say: "Today, the Debian project is a large and thriving organization with countless self-organized teams comprised of volunteers. While it often looks chaotic from the outside, the project is sustained by its two main organizational documents: the Debian Social Contract, which provides a vision of improving society, and the Debian Free Software Guidelines, which provide an indication of what software is considered usable. They are supplemented by the project's Constitution which lays down the project structure, and the Code of Conduct, which sets the tone for interactions within the project. Every day over the last 25 years, people have sent bug reports and patches, uploaded packages, updated translations, created artwork, organized events about Debian, updated the website, taught others how to use Debian, and created hundreds of derivatives." Happy birthday to the project from all of us here at LWN.
Flatpak 1.0 released
The 1.0 release of the Flatpak application distribution system is out. There are a number of performance improvements, the ability to mark applications as being at end-of-life, up-front confirmation of requested permissions, and more. "Apps can now request access the host SSH agent to securely access remote servers or Git repositories."
Distribution quotes of the week
I consider this one decision an opportunity to see if we get any traction or interest from putting our logo prominently in an unusual place. And I think that's a worthwhile idea - after all we're not going to attract new blood with totally new ideas to the Project if we only advertise ourselves in the usual places.
Development
Vetter: Why no 2D Userspace API in DRM?
On his blog, Daniel Vetter answers an often-asked question about why the direct rendering manager (DRM) does not have a 2D API (and won't in the future): "3D has it easy: There’s OpenGL and Vulkan and DirectX that require a certain feature set. And huge market forces that make sure if you use these features like a game would, rendering is fast. Aside: This means the 2D engine in a browser actually needs to work like a 3D action game, or the GPU will crawl. The [impedance] mismatch compared to traditional 2D rendering designs is huge. On the 2D side there’s no such thing: Every blitter engine is its own bespoke thing, with its own features, limitations and performance characteristics. There’s also no standard benchmarks that would drive common performance characteristics - today blitters are [needed] mostly in small systems, with very specific use cases. Anything big enough to run more generic workloads will have a 3D rendering block anyway. These systems still have blitters, but mostly just to help move data in and out of VRAM for the 3D engine to consume."
Development quotes of the week
The code from these blog posts had spread through the codebase like a disease, scattering issues here and there without any rhyme or reason. And there wasn't any obvious cure other than to read everything manually and fix issues as I went along. Without unit tests or automated deployments, this took almost a year. I'm almost certain the cost of fixing the code exceeded the margin on revenue due to writing it in the first place.
Page editor: Jake Edge
Next page:
Announcements>>
