January 2025 - wlug - list.wlug.org.nz

New Attack On AI Bots: Prompt Injection
by Lawrence D'Oliveiro 01 Jul '26

01 Jul '26

A Twitter bot account run by a company that posts remote job listings was programmed to respond to tweets directed to it with general inoffensive comments touting the positive aspects of remote work. However <https://arstechnica.com/information-technology/2022/09/twitter-pranksters-d…>, some other Twitter users discovered that if they began their tweet with directives to “ignore previous instructions”, they could get the bot to say just about anything. And much hilarity ensued. Basically, the way the bot program works is it begins with some standard instructions on what to say, provided by the people who set up the account, to which is appended whatever tweet content was sent to the bot by the other user. This is then processed by the AI system to produce a response. This attack has been dubbed “prompt injection”, by analogy with “SQL injection” and other similar attacks on non-AI systems. But whereas those attacks can be blocked using basic, well-known syntactic quoting techniques, there seem to be no easy equivalents for stopping an AI paying attention to instructions it should not be obeying.

1 2

Weta Digital’s Technology Division Sold To US Firm
by Lawrence D'Oliveiro 01 Aug '25

01 Aug '25

Let me see if I understand this article <https://www.nzherald.co.nz/business/sir-peter-jackson-to-sell-weta-digital-…> correctly: the part of Weta Digital that used to develop the in-house 3D graphics/effects tools that they use in all those movies is being sold to US-based Unity Software. The part that is left will be called “WetaFX”, and will become a customer of Unity for the use of those tools, no longer doing its own development in-house. By the way, I’ve been looking at the Unity site <https://unity.com/>, and it looks like all their products are rentware (subscription-based).

1 2

Steam Deck & PC Gaming
by Lawrence D'Oliveiro 26 Feb '25

26 Feb '25

PC gaming is still a bigger business than consoles, according to <https://arstechnica.com/gaming/2025/01/way-more-game-makers-are-working-on-…>. And the Linux-powered Steam Deck has been pioneering the new handheld segment of the PC gaming market. But figures on Steam Deck sales are hard to come by. Here <https://newsletter.gamediscover.co/p/steam-deck-everything-you-were-afraid> is an attempt to tease out, from the available hints, how popular the product actually is. That article is over a year old by now, but it estimates that there were 3-4 million Steam Decks sold by that point. I think we can safely say another million or more in units has been added to that since then. One concrete figure from the Steam Hardware Survey <https://store.steampowered.com/hwsurvey/Steam-Hardware-Software-Survey-Welc…> is that about 2.3% of all Steam users are on Linux. This looks like 0.7% specifically on the Steam Deck, so other Linux would be about 1.6%. Another linked survey reports that over half of Steam Deck users run other game emulation systems (e.g. PlayStation 2, Game Boy, GameCube) on their Decks.

1 1

Facebook Flagging Linux Discussions as “Cybersecurity Threats”
by Lawrence D'Oliveiro 03 Feb '25

03 Feb '25

Facebook is blocking posts and users that mention Linux, according to this report <https://www.tomshardware.com/software/linux/facebook-flags-linux-topics-as-…>. Distrowatch seems to have been the first to notice this, saying that many of its readers have reported trouble with Facebook. But the trouble is not confined to them. And when the site tried to report the issue, its complaint was firmly rejected, and the writer’s account was also locked. And yes, if you were wondering, doesn’t Facebook itself rely heavily on Linux? It does indeed: Facebook's overzealous ban on some Linux topics in the name of Community Standards and its protection of its users from threats come with a large ladle full of irony. "Facebook runs much of its infrastructure on Linux," DistroWatch points out, "and often posts job ads looking for Linux developers." My most charitable interpretation of this is some kind of over-reliance on automated AI-based procedures has got a bit out of hand ...

2 1

Build-Your-Own Open-Source Laptop
by Lawrence D'Oliveiro 28 Jan '25

28 Jan '25

Looking further back at the Tom’s Hardware articles, I found this one <https://www.tomshardware.com/laptops/student-builds-open-source-laptop-in-6…> about a senior high-school student’s project to build his own laptop from off-the-shelf parts. Its core is a Raspberry-Pi competitor, it has a 4K display, and can manage 7 hours of battery life. The entire effort took six months. And the result doesn’t look too shabby, either.

1 0

Linux 6.14 Brings Some Systems Faster Suspend and Resume
by Peter Reutemann 28 Jan '25

28 Jan '25

'Amid the ongoing Linux 6.14 kernel development cycle, Phoronix spotted a pull request for ACPI updates which "will allow for faster suspend and resume cycles on some systems." Wikipedia defines ACPI as "an open standard that operating systems can use to discover and configure computer hardware components" for things like power management and putting unused hardware components to sleep. Phoronix reports: The ACPI change worth highlighting for Linux 6.14 is switching from msleep() to usleep_range() within the acpi_os_sleep() call in the kernel. This reduces spurious sleep time due to timer inaccuracy. Linux ACPI/PM maintainer Rafael Wysocki of Intel who authored this change noted that it could "spectacularly" reduce the duration of system suspend and resume transitions on some systems... Rafael explained in the patch making the sleep change: "The extra delay added by msleep() to the sleep time value passed to it can be significant, roughly between 1.5 ns on systems with HZ = 1000 and as much as 15 ms on systems with HZ = 100, which is hardly acceptable, at least for small sleep time values." One 2022 bug report complained a Dell XPS 13 using Thunderbolt took "a full 8 seconds to suspend and a full 8 seconds to resume even though no physical devices are connected." In November an Intel engineer posted on the kernel mailing list that the fix gave a Dell XPS 13 a 42% improvement in kernel resume time (from 1943ms to 1127ms).' -- source: https://linux.slashdot.org/story/25/01/25/2343225 Cheers, Peter

2 1

Could New Linux Code Cut Data Center Energy Use By 30%?
by Peter Reutemann 26 Jan '25

26 Jan '25

'Two computer scientists at the University of Waterloo in Canada believe changing 30 lines of code in Linux "could cut energy use at some data centers by up to 30 percent," according to the site Data Centre Dynamics. It's the code that processes packets of network traffic, and Linux "is the most widely used OS for data center servers," according to the article: The team tested their solution's effectiveness and submitted it to Linux for consideration, and the code was published this month as part of Linux's newest kernel, release version 6.13. "All these big companies — Amazon, Google, Meta — use Linux in some capacity, but they're very picky about how they decide to use it," said Martin Karsten [professor of Computer Science in the Waterloo's Math Faculty]. "If they choose to 'switch on' our method in their data centers, it could save gigawatt hours of energy worldwide. Almost every single service request that happens on the Internet could be positively affected by this." The University of Waterloo is building a green computer server room as part of its new mathematics building, and Karsten believes sustainability research must be a priority for computer scientists. "We all have a part to play in building a greener future," he said. The Linux Foundation, which oversees the development of the Linux OS, is a founder member of the Green Software Foundation, an organization set up to look at ways of developing "green software" — code that reduces energy consumption. Karsten "teamed up with Joe Damato, distinguished engineer at Fastly" to develop the 30 lines of code, according to an announcement from the university. "The Linux kernel code addition developed by Karsten and Damato was based on research published in ACM SIGMETRICS Performance Evaluation Review" (by Karsten and grad student Peter Cai). Their paper "reviews the performance characteristics of network stack processing for communication-heavy server applications," devising an "indirect methodology" to "identify and quantify the direct and indirect costs of asynchronous hardware interrupt requests (IRQ) as a major source of overhead... "Based on these findings, a small modification of a vanilla Linux system is devised that improves the efficiency and performance of traditional kernel-based networking significantly, resulting in up to 45% increased throughput..."' -- source: https://hardware.slashdot.org/story/25/01/25/2111225 Cheers, Peter

1 0

kiwix
by Peter Reutemann 23 Jan '25

23 Jan '25

Hi there Just stumbled across kiwix, an offline reader for things like Mediawiki (incl Wikipedia) and other books: https://kiwix.org/en/applications/ The library: https://library.kiwix.org/#lang=eng -- source: https://infosec.exchange/@Em0nM4stodon/113872764752277451 Cheers, Peter

2 1

Wine 10.0 brings Arm Windows apps to Linux, still is not an emulator
by Peter Reutemann 23 Jan '25

23 Jan '25

'The open source Wine project—sometimes stylized WINE, for Wine Is Not an Emulator—has become an important tool for companies and individuals who want to make Windows apps and games run on operating systems like Linux or even macOS. The CrossOver software for Mac and Windows, Apple's Game Porting Toolkit, and the Proton project that powers Valve's SteamOS and the Steam Deck are all rooted in Wine, and the attention and resources put into the project in recent years have dramatically improved its compatibility and usefulness. Yesterday, the Wine project announced the stable release of version 10.0, the next major version of the compatibility layer that is not an emulator. The headliner for this release is support for ARM64EC, the application binary interface (ABI) used for Arm apps in Windows 11, but the release notes say that the release contains "over 6,000 individual changes" produced over "a year of development effort." ARM64EC allows developers to mix Arm and x86-compatible code—if you're making an Arm-native version of your app, you can still allow the use of more obscure x86-based plugins or add-ons without having to port everything over at once. Wine 10.0 also supports ARM64X, a different type of application binary file that allows ARM64EC code to be mixed with older, pre-Windows 11 ARM64 code. Wine's ARM64EC support does have one limitation that will keep it from working on some prominent Arm Linux distributions, at least by default: the release notes say it "requires the system page size to be 4K, since that is what the Windows ABI specifies." Several prominent Linux-on-Arm distributions default to a 16K page size because it can improve performance—when page sizes are smaller, you need more of them, and managing a higher number of pages can introduce extra CPU overhead.' -- source: https://arstechnica.com/gadgets/2025/01/wine-10-0-released-adding-linux-com… Cheers, Peter

1 0

TuxCare Stops Microsoft From Killing .NET 6.0
by Peter Reutemann 17 Jan '25

17 Jan '25

'TuxCare today announced that it’s added Microsoft’s .NET 6.0 to the roster of open-source platforms its supporting through its Endless Lifecycle Support program. This means that organizations that wish to continue using the platform, which reached end of life on Nov 12, 2024 and no longer receives updates, can continue to safely do so. TuxCare’s service will supply security patches for any vulnerabilities that arise in the software, just as it continues to patch long dead Linux distros. In times past, continuing to keep expired software in production was considered to be bad policy. These days, however, it’s becoming more common for sysadmins and DevOps teams to rely on services like TuxCare rather than go through the often frustrating and always time consuming and costly ordeal of upgrading, a process that often breaks essential secondary components which then have to be upgraded or fixed. When FOSS Force spoke with Joao Correia, a technical evangelist for both TuxCare and its parent company CloudLinux, he was quick to point out that supporting a product from Microsoft is something new, not only for TuxCare but for any of the companies that offer aftermarket support for expired open-source projects. “That’s somewhat of a departure in that we are now touching on proprietary Microsoft space which we hadn’t touched before,” he said. “At the same time, it’s an open-source project, and we have lots of experience with those types of projects and maintaining them.”' -- source: https://fossforce.com/2025/01/tuxcare-stops-microsoft-from-killing-net-6-0/ Cheers, Peter

1 0