The H Roundup - Google Drive backdoor, Wayland 1.0 and Raspberry Pi

Welcome to The H Roundup, your rapid review of the week with the most read news on The H, the security alerts and open source releases, and the essential feature articles – all in one quick-to-scan news item.

Top News

Google's desktop clients for its Drive service were found to give unexpected access to users' Google accounts, a list of the 25 worst passwords of the year was published with some new gems, and a problem in CyanogenMod that caused it to log lockscreen swipe gestures was found and fixed.

• Google Drive opens backdoor to Google accounts
• The 25 worst passwords of the year
• CyanogenMod logged lockscreen swipe gestures

The Wayland compositor protocol and its Weston reference implementation reached their version 1.0 milestone, the first GNOME 3 desktop remix of Ubuntu Linux arrived for those who prefer GNOME over Unity, and the open source GitHub clone GitLab got a 3.0 release with a new web editor.

• Wayland's 1.0 milestone fixes graphics protocol
• Ubuntu less Unity: A first look at Ubuntu GNOME Remix 12.10
• Open source GitHub clone GitLab reaches version 3.0

An apparent ext4 data corruption bug was patched, but turned out to be far more esoteric than originally thought, Google was welcomed as the Eclipse Foundation's newest strategic member, and the Raspberry Pi mini-computer had its ARM graphics code made available as open source. In the latest edition of Hardware Hacks, The H took a look at the Gertboard add-on for the Raspberry Pi, the ARM-based Arduino Due and a quadrocopter powered by open source.

• Stable Linux kernel hit by ext4 data corruption bug
• Google becomes strategic member of the Eclipse Foundation
• Raspberry Pi opens its ARM graphics code
• Hardware Hacks: Gertboard, Arduino Due and the R10 Quadcopter

Featured Articles

This week, Glyn Moody explained why he believes that Mozilla should involve itself in CryptoParties, and Jürgen Schmidt attacked the open source TrueCrypt disk encryption tool using a small utility called TCHead. The H also published its Community Calendar for November.

• Why Mozilla should join the CryptoParty
• Attacking TrueCrypt
• The H Community Calendar - November 2012

Open Source Releases

The Git version control system was updated to support accessing keyrings under Windows and GNOME, the key-value store database Redis added Lua scripting support, Mono 3.0 arrived with a C# 5.0 compiler, and the 1.3 release from the Yocto Project further improved its embedded distribution builder. A new Ubuntu-based version of Puppy Linux built on 12.04 LTS was published, Cairo-Dock improved its Unity integration, and OpenNebula 3.8 improved hypervisor support.

• Git 1.8.0 can access Windows and GNOME keyrings
• Redis 2.6.0 released with Lua scripting support
• Mono 3.0 facilitates asynchronous programming
• Yocto Project 1.3 includes AutoBuilder
• Puppy Linux 5.4 "Precise" based on Ubuntu 12.04 LTS
• Cairo-Dock 3.1 with improved Unity integration
• OpenNebula 3.8 improves hypervisor support
• KDevelop 4.4 C++ IDE released
• First VirtualBox 4.2 update has Linux 3.7 fixes
• Chinese students recreate LLVM core for Java developers
• Firefox beta introduces Social API with Facebook Messenger
• First GNOME 3.6 update released
• Latest release of systemd includes time-based log rotation
• WordPress for iOS adds Featured Image support
• Tine 2.0 groupware adds human resources management module
• OpenCMIS Chemistry 0.8.0 now with Android client
• Proxmox VE works with KVM and OpenVZ containers
• CoffeeScript 1.4.0 released

• Beta of ROSA Desktop 2012 released
• Technology preview of Icinga 2 brings extensive rewrite

Security Alerts

• Exim mail servers susceptible to DKIM attacks

For everything The H has published in the last week, check out the last seven days of news. To keep up with The H, subscribe to the RSS feed, or follow honlinenews on Twitter. You can follow The H's own tweeting on Twitter as honline.

(crve)