Skip to main content

Blog posts tagged "Security"

Emilia Torino shares what goes into keeping Ubuntu secure

Canonical is the company behind Ubuntu, but who are the people behind Canonical? In this blog series, we get to know some of the different employees that make up our company. Emilia Torino is a Security Generalist at Canonical, and she has over 10 years of experience working in software engineering at an enterprise level.

Security corner: snap interface & snap connections

One of the defining features of snaps is their strong security. Snaps are designed to run isolated from the underlying system, with granular control and access to specific resources made possible through a mechanism of interfaces. Think of it as a virtual USB cable – an interface connects a plug with a slot. Security and

Optimised authentication methods for Ubuntu Desktop

Still counting on passwords to protect your workstation? When set up properly, alternatives to passwords provide a streamlined user experience while significantly improving security. These alternative authentication methods can also easily be combined to create a custom and adaptive authentication profile. This whitepaper introduces three

Infographic: Ubuntu from 2004 to 20.04 LTS

Today, the first point release of Ubuntu 20.04 LTS went live! To celebrate, we wanted to share how Ubuntu has evolved since the first release in 2004 to where we are today with 20.04. Thanks to those in the community and our users for your contributions and joining us on this journey. Upgrade to Ubuntu

Mitigating BootHole – ‘There’s a hole in the boot’ – CVE-2020-10713 and related vulnerabilities

Responsible disclosure and coordinated response as a benefit to all Today we released USN-4432-1 announcing updates for a series of vulnerabilities termed BootHole / ‘There’s a hole in the boot’ in GRUB2 (GRand Unified Bootloader version 2) that could allow an attacker to subvert UEFI Secure Boot. The original vulnerability, CVE-2020-1071

ROS Security Benchmark open for public comment

We’re pleased to announce that the Center for Internet Security (CIS) has publicly released the ROS Security Benchmark for community discussion. When published, this benchmark will document community best-practice configuration settings to properly secure ROS Melodic running on Ubuntu Bionic. Hopefully this is just the beginning of an ong

Robotics Recap: Learning, Programming & Snapping ROS 2

Robotics@Canonical puts a strong focus on the migration from ROS to ROS 2. ROS 2 benefits from many improvements, especially robot security. Our goal is to make it easy for you to transition to ROS 2, whether you’re completely new to ROS or a seasoned engineer retooling for a new environment. Your new platform should

Encryption at rest with Ceph

Do you have a big data center? Do you have terabytes of confidential data stored in that data center? Are you worried that your data might be exposed to malicious attacks? One of the most prominent security features of storage solutions is encryption at rest. This blog will explain this in more detail and how

MAAS 2.8 – new features

What’s new? This new release of MAAS brings three key new benefits: Virtual machines with LXD (Beta) Tighter, more responsive UX External/remote PostgreSQL database If you know what you want, go to maas.io/install, otherwise let’s dive in and explore these further. Virtual machines (VMs) with LXD (Beta) MAAS 2.8 can set up L XD-based VM

FIPS 140-2 certification for Ubuntu 18.04 LTS

Canonical has received FIPS 140-2, Level 1 certification for cryptographic modules in Ubuntu 18.04 LTS, with FIPS-validated OpenSSL-1.1.1. modules included. This certification enables organisations to meet compliance requirements within the public sector, healthcare and finance industries when utilising Ubuntu 18.04 LTS within public and

Updatable Ubuntu Server Live Installer

This article originally appeared on Joshua Powers’ blog The Ubuntu Server Live Installer, introduced with the release of Ubuntu 18.04 LTS (Bionic Beaver), provides a live Ubuntu Server environment along with a streamlined server installation experience. Building on guided installs for LVM, RAID, encrypted disks and advanced networking con

Enhanced SSH and FIDO authentication in Ubuntu 20.04 LTS

This article originally appeared on Joshua Powers’ blog One of the most exciting security enhancements in Ubuntu 20.04 LTS (Focal Fossa) is the ability to use the Fast Identity Online (FIDO) or Universal 2nd Factor (U2F) devices with SSH. By using a second authentication factor via a device, users can add another layer of security

Ubuntu Server 20.04 LTS: stability, security and more

Ubuntu Server 20.04 LTS (long-term support) is here with enterprise-class stability, resiliency and even better security. As an LTS release, it will be supported by Canonical until 2025. However, customers can extend security updates by an additional five years through the ESM (Extended Security Maintenance) service as part of their UA-I

Ubuntu Core: a cybersecurity analysis

An independent evaluation of Ubuntu Core’s security capabilities Manufacturers of Internet of Things (IoT) devices require an embedded operating system that is feature-rich, scalable, and — most importantly — secure. Built from the ground-up to meet these requirements, Ubuntu Core represents a comprehensive ecosystem for large-scale IoT d

Ubuntu Core: an independent security analysis

This is a guest blog by Trent R.Hein, Co-CEO of Rule 4. Once in a while an opportunity comes along that brings out our inner geek like no other, which is what happened when Canonical asked if we’d be willing to review the overall cybersecurity model of Ubuntu Core and its ecosystem. We’re no strangers

CIS hardened Ubuntu: cyber attack and malware prevention for mission-critical systems

The Center for Internet Security (CIS) is a nonprofit organisation that uses a community-driven process to release benchmarks to safeguard enterprises against cyber attacks. It is one of the most recognised industry standards that provides comprehensive secure configuration and configuration hardening checklists in a computing environment