link1s.site

Google extends Linux kernel support to 4 years

According to AndroidAuthority, the Linux kernel used by Android devices is mostly derived from Google's Android Universal Kernel (ACK) branch, which is created from the Android mainline kernel branch when new LTS versions are released upstream. For example, when kernel version 6.6 is announced as the latest LTS release, an ACK branch for Android15-6.6 appears shortly after, with the "android15" in the name referring to the Android version of the kernel (in this case, Android 15).

Google maintains its own set of LTS kernel branches for three main reasons. First, Google can integrate upstream features that have not yet been released into the ACK branch by backporting or picking, so as to meet the specific needs of Android. Second, Google can include some features that are being developed upstream in the ACK branch ahead of time, making it available for Android devices as early as possible. Finally, Google can add some vendor or original equipment manufacturer (OEM) features for other Android partners to use.

Once created, Google continues to update the ACK branch to include not only bug fixes for Android specific code, but also to integrate the LTS merge content of the upstream kernel branch. For example, the Linux kernel vulnerability disclosed in the July 2024 Android security bulletin will be fixed through these updates.

However, it is not easy to distinguish a bug fix from other bug fixes, as a patch that fixes a bug may also accidentally plug a security vulnerability that the submitter did not know about or chose not to disclose. Google does its best to recognize this, but it inevitably misses the mark, resulting in bug fixes for the upstream Linux kernel being released months before Android devices. As a result, Google has been urging Android vendors to regularly update the LTS kernel to avoid being caught off guard by unexpectedly disclosed security vulnerabilities.

Clearly, the LTS version of the Linux kernel is critical to the security of Android devices, helping Google and vendors deal with known and unknown security vulnerabilities. The longer the support period, the more timely security updates Google and vendors can provide to devices.

The largest password leak in history exposes nearly 10 billion credentials
The largest collection of stolen passwords ever has been leaked to a notorious crime marketplace, according to cybersecurity researchers at Cybernews. This leak, dubbed RockYou2024 by its original poster “ObamaCare,” holds a file containing nearly 10 billion unique plaintext passwords. Allegedly gathered from a series of data breaches and hacks accumulated over several years, the passwords were posted on July 4th and hailed as the most extensive collection of stolen and leaked credentials ever seen on the forum. “In its essence, the RockYou2024 leak is a compilation of real-world passwords used by individuals all over the world,” the researchers told Cybernews. “Revealing that many passwords for threat actors substantially heightens the risk of credential stuffing attacks.” Credential stuffing attacks are among the most common methods criminals, ransomware affiliates, and state-sponsored hackers use to access services and systems. Threat actors could exploit the RockYou2024 password collection to conduct brute-force attacks against any unprotected system and “gain unauthorized access to various online accounts used by individuals whose passwords are included in the dataset,” the research team said. This could affect online services, cameras and hardware This could affect various targets, from online services to internet-facing cameras and industrial hardware. “Moreover, combined with other leaked databases on hacker forums and marketplaces, which, for example, contain user email addresses and other credentials, RockYou2024 can contribute to a cascade of data breaches, financial frauds, and identity thefts,” the team concluded. However, despite the seriousness of the data leak, it is important to note that RockYou2024 is primarily a compilation of previous password leaks, estimated to contain entries from a total of 4,000 massive databases of stolen credentials, covering at least two decades. This new file notably includes an earlier credentials database known as RockYou2021, which featured 8.4 billion passwords. RockYou2024 added approximately 1.5 billion passwords to the collection, spanning from 2021 through 2024, which, though a massive figure, is only a fraction of the reported 9,948,575,739 passwords in the leak. Thus, users who have changed their passwords since 2021 may not have to panic about a potential breach of their information. That said, the research team at Cybernews stressed the importance of maintaining data security. In response to the leak, they recommend immediately changing the passwords for any accounts associated with the leaked credentials, ensuring each password is strong and unique and not reused across different platforms. Additionally, they advised enabling multi-factor authentication (MFA), which requires an extra form of verification beyond the password, wherever possible, to strengthen cyber security. Lastly, tech users should utilize password manager software, which securely generates and stores complex passwords, mitigating the risk of password reuse across multiple accounts.
Record numbers of people are flying. So why are airlines’ profits plunging?
New York CNN — A record number of passengers are expected to pass through US airports this holiday travel week. You’d think this would be a great time to run an airline. You’d be wrong. Airlines face numerous problems, including higher costs, such as fuel, wages and interest rates. And problems at Boeing mean airlines have too few planes to expand routes to support a record numbers of flyers. Strong bookings can’t entirely offset that financial squeeze. The good news for passengers is they will be spared most of the problems hurting airlines’ bottom lines — at least in the near term. Airfares are driven far more by supply and demand, not their costs. But in the long run, the airlines’ difficulties could mean fewer airline routes, less passenger choice and ultimately a less pleasant flying experience. Profit squeeze Industry analysts expect airlines to report a drop of about $2 billion in profit, or 33%, when they report financial results for the April to June period this year. That would follow losses of nearly $800 million across the industry in the first quarter. Labor costs and jet fuel prices, the airlines’ two largest costs, are both sharply higher this year. Airline pilot unions just landed double-digit pay hikes to make up for years of stagnant wages; flight attendant unions now want comparable raises. Jet fuel prices are climbing because of higher demand in the summer. According to the International Air Transport Association’s jet fuel monitor, prices are up 1.4% in just the last week, and about 4% in the last month. Adding to the airlines’ problems is the crisis at Boeing, as well as the less-well-publicized problems with some of the jet engines on planes from rival Airbus. Since an Alaska Airlines Boeing 737 Max jet lost a door plug on a January 5 flight, leaving a gaping hole in the side of the plane 10 minutes after takeoff, the Federal Aviation Administration has limited how many jets Boeing can make over concerns about quality and safety. As a result, airlines have dramatically reduced plans to expand their fleets and replace older planes with more fuel efficient models. In some cases, airlines have asked pilots to take time off without pay, and carriers such as Southwest and United have announced pilot hiring freezes. In addition to the problems at Boeing, hundreds of the Airbus A220 and A320 family of jets globally have also been grounded for at least a month or more to deal with engine problems. Just about all the planes with those engines have been out of sevice for at least a few days to undergo examinations. And Airbus has also cut back the number of planes it expects to deliver to airlines this year because of supply chain problems. Problems for flyers For now, competition in the industry remains fierce: There are 6% more seats available this month compared to July of 2023, according to aviation analytics firm Cirium. And that’s helped to drive fares down — good news for passengers, but more bad news for airlines’ profits. Southwest announced in April that it would stop serving four airports to trim costs — Bellingham International Airport in Washington state, Cozumel International Airport in Mexico, Syracuse Hancock International Airport in New York and Houston’s George Bush Intercontinental Airport. Many more cities lost air service during the financial hard times of the pandemic. While upstart airlines are driving prices lower for travelers, those discount carriers might not survive long term. As the major carriers are making less money, many of the upstarts are flat-out losing money.
Samsung expects profits to jump by more than 1,400%
Samsung Electronics expects its profits for the three months to June 2024 to jump 15-fold compared to the same period last year. An artificial intelligence (AI) boom has lifted the prices of advanced chips, driving up the firm's forecast for the second quarter. The South Korean tech giant is the world's largest maker of memory chips, smartphones and televisions. The announcement pushed Samsung shares up more than 2% during early trading hours in Seoul. The firm also reported a more than 10-fold jump in its profits for the first three months of this year. In this quarter, it said it is expecting its profit to rise to 10.4tn won ($7.54bn; £5.9bn), from 670bn won last year. That surpasses analysts' forecasts of 8.8tn won, according to LSEG SmartEstimate. "Right now we are seeing skyrocketing demand for AI chips in data centers and smartphones," said Marc Einstein, chief analyst at Tokyo-based research and advisory firm ITR Corporation. Optimism about AI is one reason for the broader market rally over the last year, which pushed the S&P 500 and the Nasdaq in the United States to new records on Wednesday. The market value of chip-making giant Nvidia surged past $3tn last month, briefly holding the top spot as the world's most valuable company. "The AI boom which massively boosted Nvidia is also boosting Samsung's earnings and indeed those of the entire sector," Mr Einstein added. Samsung Electronics is the flagship unit of South Korean conglomerate Samsung Group. Next week, the tech company faces a possible three-day strike, which is expected to start on Monday. A union of workers is demanding a more transparent system for bonuses and time off.
Clear Check | Russian satellite disintegrated and hit GPS and Starlink satellites?
On June 27, the U.S. Space Command announced that a retired Russian satellite disintegrated in low Earth orbit on June 26, generating more than 100 pieces of debris, forcing astronauts on the International Space Station to hide for about an hour. The X-platform account of the International Space Station showed that shortly after 9 p.m. Eastern Time on June 26, NASA instructed the crew on the space station to hide in their respective spacecraft for safety because NASA learned in the morning of the 26th that a satellite disintegrated near the space station. About an hour later, the crew was allowed to leave the spacecraft and the space station resumed normal operation. There are rumors on social platforms that the satellite hit six U.S. GPS satellites after the disintegration and damaged 20 Starlink satellites developed by Space Exploration Technologies Corporation (SpaceX) led by Musk, triggering speculation that the relevant satellites were deliberately disintegrated.
Japan and the Philippines signed the "Reciprocal Access Agreement". Experts: Japan wants to use the Philippines to strategically contain China
Japan and the Philippines signed an important defense agreement, and the two sides became "quasi-allies". On July 8, local time, Japan and the Philippines signed the "Reciprocal Access Agreement" in Manila. The agreement will relax restrictions on the movement of personnel between the Japanese Self-Defense Forces and the Philippine military during joint exercises, mutual visits and other operations in each other's countries. In response, Chinese Foreign Ministry spokesman Lin Jian responded at a regular press conference on the 8th that exchanges and cooperation between countries should not undermine mutual understanding and trust between regional countries, should not undermine regional peace and stability, and should not target third parties or undermine the interests of third parties. The Asia-Pacific region does not need military groups, let alone "small circles" that provoke camp confrontation and instigate a "new Cold War". Any actions that undermine peace and stability in the region and undermine unity and cooperation in the region will arouse the vigilance and common opposition of the people in the region. Japan and the Philippines upgraded to a "quasi-alliance" relationship On the same day, a "2+2" meeting attended by the foreign ministers and defense ministers of Japan and the Philippines was held in Manila. Japanese Defense Minister Minoru Kihara and Foreign Minister Yoko Kamikawa attended the talks with Philippine Defense Minister Gilbert Teodoro and Foreign Minister Enrique Manalo. This is the second Japan-Philippines "2+2" meeting. The last one was held in Tokyo in April 2022. Witnessed by Philippine President Marcos, the two sides signed the "Reciprocal Access Agreement". Marcos expressed the hope that the bilateral relations between the Philippines and Japan and the trilateral cooperation between the Philippines, Japan and the United States will be further deepened. The "Reciprocal Access Agreement" is also known as the "Military Visits Agreement". Military and defense cooperation between sovereign states, especially sending troops into each other's territory, usually faces complicated procedures and other problems. In order to simplify the procedures, the two countries will reach relevant agreements to simplify the approval procedures for the entry of troops from both sides into each other's countries, and facilitate mutual visits and joint military activities between the two countries' troops. The "Reciprocal Access Agreement" was born. Take the "Reciprocal Access Agreement" signed by Japan and Australia (full name "Agreement between Japan and Australia on Promoting Mutual Access and Cooperation Facilitation between the Japanese Self-Defense Forces and the Australian Defense Force") as an example. The agreement has 29 articles, covering many areas such as entry and exit procedures for troops, jurisdiction, taxation, cost burden and compensation. The key is to simplify the entry and exit procedures for visiting troops and their members, ships, aircraft, etc., relax restrictions on the transportation of weapons, ammunition and materials carried by visiting troops, and provide a legal basis for the two countries' troops and weapons and equipment to enter each other's territory. Japan and the Philippines signed the "Reciprocal Access Agreement", making the Philippines the third country to conclude this agreement with Japan after Australia and the United Kingdom. Cai Liang, Secretary-General and Researcher of the China-Japan Relations Research Center of the Shanghai Institute for International Studies, analyzed to The Paper (www.thepaper.cn) that Japan and the Philippines have their own strategic considerations for signing the "Reciprocal Access Agreement". As for the Philippines, due to its limited strength, it does not exclude any foreign power willing to strengthen military cooperation with the Philippines from intervening in the South China Sea situation. Therefore, it can be seen that in the past two years, the Philippines has actively promoted Australia, France, India and other countries to intervene in the South China Sea and strengthen military cooperation with them, involving intelligence, weapons and equipment, and training and exercises. "Japan's purpose is very simple. Strengthening military cooperation with the Philippines is to strategically balance China. The United States and the Philippines are allies, and the US-Japan alliance has been upgraded to a 'quasi-alliance'. The military cooperation between the United States, Japan and the Philippines has been upgraded to a new level." Cai Liang said, "The signing of an important defense agreement between Japan and the Philippines will make it easier for Japan to intervene in the South China Sea situation and seek the 'three seas linkage' of the East China Sea, the South China Sea, and the Taiwan Strait, in order to better respond to China's strategy and enhance its international influence." As for whether the signing of the "Reciprocal Access Agreement" means that Japan will deploy the Self-Defense Forces in the Philippines, Cai Liang pointed out that this agreement only simplifies the procedures for the troops of both sides to enter each other's territory, and is more suitable for short-term training, military exercises, etc., and is not a long-term deployment of the Self-Defense Forces in the Philippines. The two countries deepen military cooperation The Philippine presidential office also said in a statement that Japan is one of the four major strategic partners of the Philippines, and the two countries have established a strategic partnership for more than ten years. It seems no coincidence that Japan and the Philippines signed the "Reciprocal Access Agreement" at this time. Recently, China-Philippines relations have become tense around the situation in the South China Sea. The Global Times quoted Japan's Kyodo News Agency as saying that the two sides are seeking to strengthen cooperation against China. Minoru Kihara said last week: "The Philippines is located in a strategically important region, occupies a key position on Japan's sea lanes, and is also an ally of the United States. Joint training and strengthening cooperation with the Philippines are of great significance to the realization of a 'free and open Indo-Pacific region'." Cai Liang said that Japan's intervention in the South China Sea situation is mainly to reduce strategic pressure in the East China Sea and southwest of Japan, but it is not conducive to peace and stability in the South China Sea. It is reported that Japan and the Philippines began negotiations on the agreement in November last year. The signing of the "Reciprocal Access Agreement" by the two sides lays the foundation for the two countries to strengthen bilateral and even multilateral military cooperation in the future. The Japanese government intends to allow the Self-Defense Forces to formally participate in the annual US-Philippines "Shoulder to Shoulder" joint exercises around the Philippines after the agreement comes into effect. The Self-Defense Forces previously participated in the "Shoulder to Shoulder" exercises as observers, and will be able to formally participate after signing the agreement. In April this year, the United States and the Philippines held the largest "Shoulder to Shoulder" exercise to date, involving 5,000 Philippine personnel and 11,000 US personnel. The military exercise also included about 150 Australian military personnel and 100 French naval personnel. According to the plan, 14 countries including Japan and India sent personnel as observers. The "Typhon" medium-range missile launch system deployed by the US military on Luzon Island in the Philippines for the first time participated in the exercise, which aroused great attention from all walks of life. In terms of weapons and equipment exports, Japan and the Philippines have gradually strengthened military cooperation in recent years. The Philippines recently agreed to purchase five Coast Guard patrol ships from Japan to enhance its patrol capabilities in the South China Sea. Defense News reported in November last year that the Philippines had received an early warning radar system from Japan in 2023, the first major equipment transfer since the Japanese government lifted the postwar defense export ban in 2014. The Japanese Ministry of Foreign Affairs stated that Kamikawa mentioned topics such as defense equipment transfer, "government security capability enhancement support" (OSA), and economic and trade cooperation. The OSA project was created by the Kishida government and plans to allocate billions of yen in budget to assist the military construction of the Philippines and other countries, including providing the Philippines with 5 sets of coastal surveillance radars. Regarding Japan's relaxation of restrictions on defense equipment exports, the Chinese Ministry of Defense previously responded that Japan has continuously broken through the constraints of the "peace constitution" and the principle of "exclusive defense", and has been making small moves in the field of military security, which has aroused high vigilance and strong concern from the international community. China requires Japan to deeply reflect on its history of aggression, attach importance to the security concerns of its Asian neighbors, adhere to the path of peaceful development, and win the trust of its Asian neighbors and the international community with practical actions.