- wlug - list.wlug.org.nz

GIMP 3.0 - a Milestone For Open-Source Image Editing
by Peter Reutemann 30 Nov '24

30 Nov '24

'The long-awaited release of the GNU Image Manipulation Program (GIMP) 3.0 is on the way, marking the first major update since version 2.10 was released in April 2018. It now features a GTK 3 user interface and GIMP 3.0 introduces significant changes to the core platform and plugins. This release also brings performance and usability improvements, as well as more compatibility with Wayland and complex input sources. GIMP 3.0 is the first release to use GTK 3, a more modern foundation than the GTK 2 base of prior releases. GTK 4 has been available for a few years now, and is on the project's radar, but the plan was always to finish the GTK 3 work first. Moving to GTK 3 brings initial Wayland compatibility and HiDPI scaling. In addition, this allows for GIMP users to take advantage of multi-touch input, bringing pinch-to-zoom gestures to the program, and offering a better experience when working with complex peripherals, such as advanced drawing tablets. These features were not previously possible due to the limitations of GTK 2. A secondary result of the transition to GTK 3 is a refreshed user interface (UI), now with support for CSS themes included. In this release, four themes are available by default, including light, dark, and gray themes, along with a high-contrast theme for users with visual impairments. Additionally, this release has transitioned to using GTK's header bar component, typically used to combine an application's toolbar and title bar into one unit. To maintain familiarity with previous releases, however, GIMP 3.0 still supports the traditional menu interface.' -- source: https://tech.slashdot.org/story/24/11/29/134239/ Cheers, Peter

1 0

Both KDE and GNOME To Offer Official Distros
by Peter Reutemann 30 Nov '24

30 Nov '24

'KDE and GNOME have decided that because they're not big and complicated enough already, they might work better if they have their own custom distributions underneath. What's the worst that could happen? A talk from this year's KDE conference, Akademy 2024, looks like it's going to become real. The talk, by KDE developer Harald Sitter, was entitled An Operating System of Our Own, and the idea sounds simple enough: Sitter proposed an official KDE Linux distribution. Now the proposal is gathering steam and a plan is coming together for an official KDE Linux -- codenamed "Project Banana."' -- source: https://tech.slashdot.org/story/24/11/29/2055220 Cheers, Peter

1 0

file browser
by Peter Reutemann 26 Nov '24

26 Nov '24

Hi there Today, I decided to finally switch my default file browser to krusader: https://krusader.org/ For a number of years, I've been using double-commander: https://doublecmd.sourceforge.io/ Mostly, I was quite happy with double-commander, as it had my preferred two-panel approach for managing files (I frequently copy files between various directories around for testing models etc). The two-panel approach was something I came to appreciate back in the DOS days when using the Norton Commander. With Double-commander I could also have an arbitrary number of tabs within a panel. The function buttons at the bottom (rename/copy/view/terminal/etc) were also quite handy when using the mouse. And, very importantly, Double-commander is available for Windows as well. However, remote access via sftp was quite slow (viewing and copying files) and that's when I had to fall back on caja, as it had a much higher throughput. Compared to caja, krusader is much faster when listing remote files. Waiting around for caja to refresh a few thousand files was taking way too long (sometimes up to 30 seconds). That's what gave me the final push to make the switch (on my development machine). Double-commander will still be my go-to tool for Windows machines. Anyway, what is your preferred file browser? Cheers, Peter

2 1

g: An Elegant Alternative for the ls Command in Linux
by Peter Reutemann 25 Nov '24

25 Nov '24

Hi everyone Just came across this post: '“g” is a free and open-source cross-platform alternative to the ls command, offering more advanced features than any other alternative, such as what “exa” can provide. The developer named this tool “g” because it’s written in Go, and “g” is simply easy to remember. It offers various ways to customize output, multiple ways to layout the output, integrated support for Git, advanced sorting mechanisms, fuzzy path matching, and hyperlink support.' -- source: https://linuxtldr.com/g-alternative-of-the-ls-command/ Looks like an interesting alternative. :-) Cheers, Peter

1 0

Red Hat is Becoming an Official Microsoft 'Windows Subsystem for Linux' Distro
by Peter Reutemann 24 Nov '24

24 Nov '24

'You can use any Linux distribution inside of the Windows Subsystem for Linux" Microsoft recently reminded Windows users, "even if it is not available in the Microsoft Store, by importing it with a tar file." But being an official distro "makes it easier for Windows Subsystem for Linux users to install and discover it with actions like wsl --list --online and wsl --install," Microsoft pointed out this week. And "We're excited to announce that Red Hat will soon be delivering a Red Hat Enterprise Linux WSL distro image in the coming months..." Thank you to the Red Hat team as their feedback has been invaluable as we built out this new architecture, and we're looking forwards to the release...! Ron Pacheco, senior director, Red Hat Enterprise Linux Ecosystem, Red Hat says: "Developers have their preferred platforms for developing applications for multiple operating systems, and WSL is an important platform for many of them. Red Hat is committed to driving greater choice and flexibility for developers, which is why we're working closely with the Microsoft team to bring Red Hat Enterprise Linux, the largest commercially available open source Linux distribution, to all WSL users." Read Pacheco's own blog post here. But in addition Microsoft is also releasing "a new way to make WSL distros," they announced this week, "with a new architecture that backs how WSL distros are packaged and installed." Up until now, you could make a WSL distro by either creating an appx package and distributing it via the Microsoft Store, or by importing a .tar file with wsl -import. We wanted to improve this by making it possible to create a WSL distro without needing to write Windows code, and for users to more easily install their distros from a file or network share which is common in enterprise scenarios... With the tar based architecture, you can start with the same .tar file (which can be an exported Linux container!) and just edit it to add details to make it a WSL distro... These options will describe key distro attributes, like the name of the distro, its icon in Windows, and its out of box experience (OOBE) which is what happens when you run WSL for the first time. You'll notice that the oobe_command option points to a file which is a Linux executable, meaning you can set up your full experience just in Linux if you wish. ' -- source: https://tech.slashdot.org/story/24/11/23/0251245 Cheers, Peter

1 0

Ubuntu Linux Impacted By Decade-Old 'needrestart' Flaw That Gives Root
by Peter Reutemann 21 Nov '24

21 Nov '24

'Five local privilege escalation (LPE) vulnerabilities in the Linux utility "needrestart" -- widely used on Ubuntu to manage service updates -- allow attackers with local access to escalate privileges to root. The flaws were discovered by Qualys in needrestart version 0.8, and fixed in version 3.8. BleepingComputer reports: Complete information about the flaws was made available in a separate text file, but a summary can be found below: - CVE-2024-48990: Needrestart executes the Python interpreter with a PYTHONPATH environment variable extracted from running processes. If a local attacker controls this variable, they can execute arbitrary code as root during Python initialization by planting a malicious shared library. - CVE-2024-48992: The Ruby interpreter used by needrestart is vulnerable when processing an attacker-controlled RUBYLIB environment variable. This allows local attackers to execute arbitrary Ruby code as root by injecting malicious libraries into the process. - CVE-2024-48991: A race condition in needrestart allows a local attacker to replace the Python interpreter binary being validated with a malicious executable. By timing the replacement carefully, they can trick needrestart into running their code as root. - CVE-2024-10224: Perl's ScanDeps module, used by needrestart, improperly handles filenames provided by the attacker. An attacker can craft filenames resembling shell commands (e.g., command|) to execute arbitrary commands as root when the file is opened. - CVE-2024-11003: Needrestart's reliance on Perl's ScanDeps module exposes it to vulnerabilities in ScanDeps itself, where insecure use of eval() functions can lead to arbitrary code execution when processing attacker-controlled input. The report notes that attackers would need to have local access to the operation system through malware or a compromised account in order to exploit these flaws. "Apart from upgrading to version 3.8 or later, which includes patches for all the identified vulnerabilities, it is recommended to modify the needrestart.conf file to disable the interpreter scanning feature, which prevents the vulnerabilities from being exploited," adds BleepingComputer.' -- source: https://it.slashdot.org/story/24/11/21/0057206 Cheers, Peter

1 0

Linux Kernel 6.12 Has Been Released
by Peter Reutemann 18 Nov '24

18 Nov '24

'Slashdot unixbhaskar writes: Linus has released a fresh Linux kernel for public consumption. Please give it a try and report any glitches to the maintainers for improvement. Also, please do not forget to express your appreciation to those tireless folks who did all the hard work for you. The blog OMG Ubuntu calls it "one of the most biggest kernel releases for a while," joking that it's a "really real-time kernel." The headline feature in Linux 6.12 is mainline support for PREEMPT_RT. This patch set dramatically improves the performance of real-time applications by making kernel processes pre-emptible — effectively enabled proper real-time computing... Meanwhile, Linus Torvalds himself contributes a new method for user-space address masking designed to claw back some of the performance lost due to Spectre-v1 mitigations. You might have heard that kernel devs have been working to add QR error codes to Linux's kernel panic BSOD screen (as a waterfall of error text is often cut off and not easily copied for ad-hoc debugging). Well, Linux 6.12 adds support for those during Direct Rendering Manager panics... A slew of new RISC-V CPU ISA extensions are supported in Linux 6.12; hybrid CPU scaling in the Intel P-State driver lands ahead of upcoming Intel Core Ultra 2000 chips; and AMD P-State driver improves AMD Boost and AMD Preferred Core features. More coverage from the blog 9to5Linux highlights a new scheduler called sched_ext, Clang support (including LTO) for nolibc, support for NVIDIA's virtual command queue implementation for SMMUv3, and "an updated cpuidle tool that now displays the residency value of cpuidle states for a clearer and more detailed view of idle state information when using cpuidle-info." Linux kernel 6.12 also introduces SWIG bindings for libcpupower to make it easier for developers to write scripts that use and extend the functionality of libcpupower, support for translating normalized error addresses reported by an AMD memory controller into system physical addresses using a UEFI mechanism called platform runtime mechanism (PRM), as well as simplified loading of microcode patches on AMD Zen and newer CPUs by using the family, model, and stepping encoded in the patch revision number... Moreover, Linux 6.12 adds support for running as a protected guest on Android as well as perf and support for a bunch of new interconnect PMUs. It also adds the final conversions to the new Intel VFM CPU model matching macros, rewrites the PCM buffer allocation handling and locking optimizations, and improves the USB audio driver... ' -- source: https://linux.slashdot.org/story/24/11/18/0142252 Cheers, Peter

1 0

mailing list alternatives
by Peter Reutemann 18 Nov '24

18 Nov '24

Hi everyone Here is a list of all the potential options for having the WLUG mailing list continue in some form after the University of Waikato will shut down their mailman instance next month: 1. TechnologyWise would support us and host it at Catalyst (Wellington) Type: unspecified (since general hosting, could be mailman?) Comment: TW ran the BOP LUG that way 2. Linux Australia (https://lists.linux.org.au/mailman/listinfo) Type: mailman (open-source) Comment: not yet contacted whether they'd be open to it 3. Don Gould Type: unspecified (has FLOSS platform, so could be mailman) 4. NZOSS Type: discourse (open-source, at community.iridescent.nz) Comment: unlikely to migrate archives 5. Outlook Groups option Type: MS Outlook (proprietary) Comment: just email distribution, probably no archives In terms of WLUG list archives... I've experimented with hypermail (https://github.com/hypermail-project/hypermail) and was able to turn the 53MB mbox file containing all our posts from the last 25 years into 183MB of HTML. That way, we can at least ensure that the old content doesn't get lost completely. I also talked to Daniel Lawson, who's hosting the old WLUG website and wiki. Though he is not keen on managing mail (bit of a nightmare nowadays according to him), he'd be willing to host the HTML version of the archives. Please reply to this post with your preferred option(s) by Saturday night (e.g., "1" or "1 3 4"). On Sunday, I will then create a final tally (hopefully). Thanks again for your suggestions! Cheers, Peter

3 4

New systemd update will bring Windows’ infamous Blue Screen of Death to Linux
by Peter Reutemann 18 Nov '24

18 Nov '24

'Windows' infamous "Blue Screen of Death" is a bit of a punchline. People have made a hobby of spotting them out in the wild, and in some circles, they remain a byword for the supposed flakiness and instability of PCs. To this day, networked PCs in macOS are represented by beige CRT monitors displaying a BSOD. But the BSOD is supposed to be a diagnostic tool, an informational screen that technicians can use to begin homing in on the problem that caused the crash in the first place; that old Windows' BSOD error codes were often so broad and vague as to be useless doesn't make the idea a bad one. Today, version 255 of the Linux systemd project honors that original intent by adding a systemd-bsod component that generates a full-screen display of some error messages when a Linux system crashes. The systemd-bsod component is currently listed as "experimental" and "subject to change." But the functionality is simple: any logged error message that reaches the LOG_EMERG level will be displayed full-screen to allow people to take a photo or write it down. Phoronix reports that, as with BSODs in modern Windows, the Linux version will also generate a QR code to make it easier to look up information on your phone.' -- source: https://arstechnica.com/gadgets/2023/12/linux-distros-are-about-to-get-a-ki… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, Hamilton, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 3

European alternatives to US services
by Peter Reutemann 13 Nov '24

13 Nov '24

Hi everyone For people who are thinking of maybe switching US-based services, below is a list of European alternatives: https://european-alternatives.eu/ Came across this on Mastodon: https://mastodon.social/@sturmsucht/113470149047788406 Of course, the AlternativeTo site is always worth checking out as well: https://alternativeto.net/ Cheers, Peter

1 0

Debian 12.8 “Bookworm” Released with 68 Bug Fixes and 50 Security Updates
by Peter Reutemann 13 Nov '24

13 Nov '24

'The Debian Project announced today the release and general availability of Debian 12.8 as the seventh ISO update to the latest Debian GNU/Linux 12 “Bookworm” operating system series. Powered by a newer kernel in the Linux 6.1 LTS series, Debian 12.8 is here a little over two months after Debian 12.7 as the seventh point release of Debian Bookworm. Yes, seventh, because Debian 12.3 was never released due to an issue in the EXT4 file system leading to data corruption so it doesn’t count. Debian 12.8 provides those who want to deploy the latest Debian Bookworm operating system on new hardware an up-to-date installation media where they won’t have to download hundreds of updates from the repositories after the installation. In numbers, this new release includes a total of 68 bug fixes for miscellaneous packages and 50 security updates. Details about these security and miscellaneous bug fixes can be found on the release announcement page.' -- source: https://9to5linux.com/debian-12-8-bookworm-released-with-68-bug-fixes-and-5… Cheers, Peter

1 0

decommissioning of mailman server
by Peter Reutemann 11 Nov '24

11 Nov '24

Hi everyone Just received word from the university that, as part of their continuing move to proprietary Microsoft services, they are decommissioning their mailman server instance by December 13th and only university-related lists will be moved to an MS service. This, of course, will affect our WLUG mailing list. Any ideas where to go to? Google Groups*? Other free hosting sites for such a low-traffic list? Cheers, Peter * Not sure about import options (posts/members).

7 10

Re: B. Eagle Burt added you to the wlug_digest group
by Lawrence D'Oliveiro 10 Nov '24

10 Nov '24

Hosted at Microsoft? Oh, the irony. No, thank you.

1 0

Re: wlug Digest, Vol 401, Issue 4
by Ron Dean 09 Nov '24

09 Nov '24

I still like to read the digest very seldom have I posted anynthing On Sat, Nov 9, 2024 at 12:00 AM <wlug-request(a)list.waikato.ac.nz> wrote: > Send wlug mailing list submissions to > wlug(a)list.waikato.ac.nz > > To subscribe or unsubscribe via email, send a message with subject or > body 'help' to > wlug-request(a)list.waikato.ac.nz > > You can reach the person managing the list at > wlug-owner(a)list.waikato.ac.nz > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of wlug digest..." > > Today's Topics: > > 1. Re: decommissioning of mailman server (DL Neil) > 2. Re: decommissioning of mailman server (Peter Reutemann) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Fri, 8 Nov 2024 10:07:55 +1300 > From: DL Neil <NZLUG(a)etelligence.info> > Subject: [wlug] Re: decommissioning of mailman server > To: wlug(a)list.waikato.ac.nz > Message-ID: <a81bf0e4-072a-4013-9b49-66d1e9f0231e(a)etelligence.info> > Content-Type: text/plain; charset=UTF-8; format=flowed > > > -------- Original message -------- > > From: Peter Reutemann <fracpete(a)gmail.com>... > > continuing move to proprietary Microsoft services, they are > > decommissioning their mailman server instance by December 13th and > > only university-related lists will be moved to an MS service. This, of > > course, will affect our WLUG mailing list. > > Decommission: long overdue and not up-to-snuff with today's email-world! > > MSFTing: a continuing disappointment, as it's not a real improvement anyway > > > > Any ideas where to go to? Google Groups*? Other free hosting sites for > > such a low-traffic list? > > > Think it may be possible through NZOSS - will make enquiries and revert... > > > On 8/11/24 09:33, Don Gould wrote: > > Do you have a domain name for Wellington lug? > > Oops! > > > -- > Regards =dn > > > -- > Regards =dn > > > ------------------------------ > > Message: 2 > Date: Fri, 8 Nov 2024 10:45:27 +1300 > From: Peter Reutemann <fracpete(a)gmail.com> > Subject: [wlug] Re: decommissioning of mailman server > To: wlug List <wlug(a)list.waikato.ac.nz> > Message-ID: > <CAHoQ12JfoXKwy2qxKxMdoD-hU7SM= > 5Tsxgo6Ei1CSNY9DbXJ3Q(a)mail.gmail.com> > Content-Type: text/plain; charset="UTF-8" > > > Just received word from the university that, as part of their > > continuing move to proprietary Microsoft services, they are > > decommissioning their mailman server instance by December 13th and > > only university-related lists will be moved to an MS service. This, of > > course, will affect our WLUG mailing list. > > > > Any ideas where to go to? Google Groups*? Other free hosting sites for > > such a low-traffic list? > > Thanks for the great feedback so far everyone! > > Important factors for me would be: > - hosted in NZ > - free of charge (we no longer have a charity associated) > - mailman-based or at least support for importing mailman archives > > Please keep the suggestions coming. Early next week, I will compile a > list from the offered solutions and you can show your support for the > various options. > > Cheers, Peter > > ------------------------------ > > Subject: Digest Footer > > _______________________________________________ > wlug mailing list -- wlug(a)list.waikato.ac.nz > To unsubscribe send an email to wlug-leave(a)list.waikato.ac.nz > > > ------------------------------ > > End of wlug Digest, Vol 401, Issue 4 > ************************************ > -- Ron Dean Unit 61 Village Gardens 16 Rototuna Road Hamilton 3210 New Zealand Home 64 7 8493904 Mob 02102259172

1 0

GIMP 3.0 Release Candidate Is Now Available for Public Testing
by Peter Reutemann 07 Nov '24

07 Nov '24

'The development team behind the popular GIMP open-source image editing software announced today the general availability of the Release Candidate (RC) milestone of the highly anticipated GIMP 3.0 release. Featuring a much-refined interface, GIMP 3.0 introduces massive improvements to color management, a stable public API to allow porting of plug-ins and scripts from the GIMP 2.10 series, support for loading layers from TIFF files saved in the Autodesk Sketchbook format, and support for 64 bits per pixel images for the BMP format. GIMP 3.0 also promises improvements to non-destructive editing by introducing an optional “Merge Filters” checkbox at the bottom of NDE filters that merges down the filter immediately after it’s committed, along with non-destructive filters on layer groups and the implementation of storing version of filters in GIMP’s XCF project files. “This will allow us to update filters in the future without impacting how older project files look when they’re opened. Additional work will be needed in GEGL to fully implement this feature, but that can be done after 3.0 without impacting existing project files,” said the devs. Among other noteworthy changes, the updated UI of GIMP 3.0 allows the use of the mouse scroll wheel to flip through different dockable dialogue tabs, GEGL and babl components have been updated with new features and many improvements, such as Inner Glow, Bevel, and GEGL Styles filters, and some plugins saw small enhancements. On top of all that, GIMP 3.0 also comes with a new logo, a new splash screen, improvements to the legacy icon theme to look great on HiDPI screens, and the ability to export images with different settings while leaving the original image unchanged.' -- source: https://9to5linux.com/gimp-3-0-release-candidate-is-now-available-for-publi… Cheers, Peter

1 0

Linux Mint and Framework Laptops Join Forces
by Peter Reutemann 07 Nov '24

07 Nov '24

'Linux Mint and Framework Laptops Join Forces The October 2024 edition of Linux Mint’s Monthly News brings exciting updates, including a significant announcement about collaboration with Framework Laptops, having potential to advance Mint’s compatibility with hardware designed with flexibility, repairability, and sustainability in mind. For those unfamiliar, unlike most traditional laptops, which are often difficult or impossible to repair or upgrade, Framework laptops are built to be user-friendly, making it easy to replace or upgrade components. This modular approach extends the laptop’s lifespan and promotes sustainability by reducing e-waste. According to Clement Lefebvre, the driving force behind the Linux Mint project, the team recently received Framework’s Laptop 13, and initial impressions are promising. But more importantly, this partnership could open new avenues for Linux Mint, allowing the development team to work with advanced components and technologies featured in Framework’s offerings that haven’t previously been on the project’s radar. Of course, this also means that if compatibility progresses smoothly, Linux Mint could confidently recommend Framework Laptops to its community without hesitation. As Lefebvre noted, the full review of the Laptop 13 will be available in next month’s update, but early sentiments are already positive. Apart from that, the Linux Mint team is currently working on integrating Night Light support into the Cinnamon desktop environment, thus aiming to reduce eye strain for its users. Furthermore, efforts are ongoing to migrate key Cinnamon dialogs to Clutter, enhancing functionality and design. This includes familiar dialogs like the one used to unlock keyrings or confirm display settings.' -- source: https://linuxiac.com/linux-mint-and-framework-laptops-join-forces/ Cheers, Peter

1 0

How to Use Syntax Highlighting in Nano Editor
by Peter Reutemann 07 Nov '24

07 Nov '24

I thought, the following tutorial on how to enable syntax highlighting in nano would be quite a useful one for people commonly using that editor: 'Nano is a simple and user-friendly command-line text editor for Linux, which is often used for basic text editing tasks, such as creating and editing configuration files, scripts, or simple documents. However, many users don’t know that Nano supports syntax highlighting, which can make editing code files easier by coloring different parts of the text (like keywords, variables, and comments) for better visibility. This guide will explain how to enable syntax highlighting in Nano to make your coding experience smoother and more efficient.' -- source: https://www.tecmint.com/nano-editor-syntax-highlighting/ Cheers, Peter

1 0

KDE’s New Distro: Btrfs-Based, Immutable Linux OS, with Flatpak and Snap
by Peter Reutemann 04 Nov '24

04 Nov '24

'Surprises never end. The KDE project is about to take a bold step by introducing its own Linux distribution. Here’s what it’s all about. Introduced at Akademy 2024, KDE Linux (codenamed “Project Banana”) is a brand-new, still-in-development initiative by the KDE devs to bring a seamless, user-friendly experience that merges KDE software’s reliability and rich interface with cutting-edge Linux technologies. Immediately, we want to clarify that this isn’t a rebranded version of the well-known KDE Neon developed by the KDE community. KDE Linux is an entirely new project with a completely different technical approach under the hood and ambitious goals for both developers and end users. The distro is designed to be a bulletproof, highly user-friendly operating system that showcases the best of KDE technology—a system that KDE can confidently recommend to casual users and hardware manufacturers. With an eye on simplicity, the OS will use Btrfs for its file system and introduce an image-based (immutable) approach, allowing users to easily switch between different OS versions, ensuring a secure, flexible experience without the stress of traditional system management. KDE Linux will feature rolling OS updates based on snapshot releases and employs systemd-boot with custom theming. All mutable data, such as user home directories and cache locations, is encrypted for enhanced security. Moreover, the architecture also includes an image-based A/B update mechanism with rollback capabilities and a recovery partition for added resilience. Users can benefit from an automatic backup system using Btrfs snapshots, which includes a user-friendly GUI similar to Apple’s Time Machine. Using Arch as a base, KDE Linux aims to attract a broad audience, including KDE developers, enthusiasts, and hardware vendors. It will include applications from Flatpak (and possibly Snap), helping to keep the core system and applications separate for greater stability.' -- source: https://linuxiac.com/kde-announced-its-kde-linux-distro/ Cheers, Peter

1 0

Local Privilege Escalation Vulnerability Affecting X.Org Server For 18 Years
by Peter Reutemann 30 Oct '24

30 Oct '24

'Phoronix's Michael Larabel reports: CVE-2024-9632 was made public today as the latest security vulnerability affecting the X.Org Server. The CVE-2024-9632 security issue has been present in the codebase now for 18 years and can lead to local privilege escalation. Introduced in the X.Org Server 1.1.1 release back in 2006, CVE-2024-9632 affects the X.Org Server as well as XWayland too. By providing a modified bitmap to the X.Org Server, a heap-based buffer overflow privilege escalation can occur. This security issue is within _XkbSetCompatMap() and stems from not updating the heap size properly and can lead to local privilege escalation if the server is run as root or as a remote code execution with X11 over SSH.' -- source: https://it.slashdot.org/story/24/10/29/2029233 Cheers, Peter

1 0

Debian's "secret" sauce
by Peter Reutemann 29 Oct '24

29 Oct '24

'While Debian's "sauce" is not actually all that secret, it is not particularly well-known either, Samuel Henrique said at the start of his DebConf24 talk. There is a lot of software-engineering effort that has been put in place by the distribution in order to create and maintain its releases, but ""loads of people are not aware"" of it. That may be due to the fact that all of that is not really documented anywhere in a central location that he can just point someone to. Recognizing that is what led him to give the talk; hopefully it will be a ""first step toward"" helping solve the problem. Henrique said that he is a Brazilian and has been a Debian Developer since 2018. He mostly works in the security tools packaging team, but also maintains some packages outside of that team, including curl and rsync. In addition, he mentors Debian newcomers, mostly on packaging tasks. He works on the Amazon Linux security team. He noted that his web site contains links to the slides from the talk; a WebM video is also available. [Update: A YouTube video with subtitles in English and Portuguese is also available.]' -- source: https://lwn.net/Articles/990177/ Cheers, Peter

1 0

Discovering the Joys of E-Books with Calibre
by Ben Cottrell 29 Oct '24

29 Oct '24

I was lucky to come across a collection of Cybersecurity E-Books on Humble Bundle, spending around 40 NZD to receive 21 books. After paying for and downloading the books, the PDF’s weren’t named tidily, so I decided to use Calibre to organize my collection. Calibre categorized the books under author subdirectories and named them by title nicely. It couldn’t open the PDF’s itself, it does a good job cataloguing. Do you have any favourite tools or scripts for managing E-Books? Please let me know 😊 Cheers, Ben

2 1

Raspberry Pi OS’s yearslong switch from X Window to Wayland is now official
by Peter Reutemann 29 Oct '24

29 Oct '24

'There have been times when it seemed like X Window System would be with us forever, even though it's more than 40 years old, and the last true version was issued in 2012. But with great effort, some organizations and operating systems have moved on. Raspberry Pi has now joined the forward momentum, with its latest release of Raspberry Pi OS swapping in Wayland—and it's hoping the change is hardly noticeable. You might want to wait a moment before upgrading, though. Simon Long wrote on Raspberry Pi's blog that the organization started thinking about switching to Wayland about 10 years ago, though it was "nowhere near ready to use" back then. Over the last few years, the Pi team has done some things to prep a real switch: - Used mutter as an X window manager in 2021's Bullseye release because it could also be used as a Wayland compositor - Switched from mutter to wayfire in 2023's Bookworm release and made Wayland the default for Raspberry Pi 4 and 5 - Switched one last time to labwc, which better fit Raspberry Pi's graphics hardware than wayfire Because labwc is built on wlroots, a modular system that allows for building a Wayland compositor without whole-cloth reinvention, it was easier to adapt to Raspberry Pi's needs. After efforts throughout 2024, the team is ready to call it the year of Wayland on Raspberry Pi desktops. "After much optimisation for our hardware, we have reached the point where labwc desktops run just as fast as X on older Raspberry Pi models," Long wrote. "Today, we make the switch with our latest desktop image: Raspberry Pi Desktop now runs Wayland by default across all models."' -- source: https://arstechnica.com/gadgets/2024/10/raspberry-pi-oss-years-long-switch-… Cheers, Peter

1 0

AI Scams In The Knitting And Crochet World
by Lawrence D'Oliveiro 26 Oct '24

26 Oct '24

I suppose if you spend much time in online software support forums, you’ve come across the newbie who asked an AI to generate some code for them, and then asks for help to figure out why it didn’t work. But did you know that knitting and crochet patterns are like computer code, too? And that people are using AI to generate those? And that the same problems of quality control are afflicting them? Unlike computer software, where once you track down the bug, you can usually fix just that one line and run the code again, a flaw in a knitting or crochet pattern can require you to throw away hours of work, unpicking your way back to the point where the flaw was introduced, before you can fix it and continue from that point again. And food recipes are becoming infested with AI rubbish as well. Here you might be tricked into following some interesting-looking recipe, perhaps quite complicated, only to end up with an inedible, revolting mess, and money wasted on all the ingredients, as well as time wasted doing the work. <https://www.zdnet.com/article/ai-scams-have-infiltrated-the-knitting-and-cr…>

1 0

ISC DHCP Server Replaced By Kea
by Lawrence D'Oliveiro 19 Oct '24

19 Oct '24

I just discovered that the DHCP server I’ve been using at home <https://arstechnica.com/information-technology/2024/10/finally-upgrading-fr…> officially reached EOL two years ago, and has been replaced by a new package, rewritten from the ground up, called Kea. Seems the old code base was just getting too convoluted and creaky and too hard to maintain. Of course there are tools to assist the migration to the new way of doing things.

1 0

5 Stand-Out LibreOffice Features That Make It My Go-To Office Suite
by Lawrence D'Oliveiro 17 Oct '24

17 Oct '24

From <https://www.zdnet.com/home-and-office/work-life/5-stand-out-libreoffice-fea…>: Customizable GUI: For example, when writing a novel, I want the sidebar always readily available because I need quick access to formatting options. If I'm working on a more traditional document, I might go with the tabbed UI. For spreadsheets, I want the simplest UI that I can use, such as the contextual single UI. LibreOffice makes this possible, with the ability to switch between a standard toolbar, tabbed, single toolbar, sidebar, tabbed compact, groupedbar compact, and contextual single. You can even make changes to different tools, which allows you to have one UI for Writer, one for Calc, and one for Presents. Customizable styles: What I like about this feature is that it allows me to get very granular with the styles, even to the point where I can define what style comes next, how drop caps are handled, transparency, borders, indents & spacing, text flow, font, position, highlights, much more. No AI: (what more needs to be said?) Microsoft Office compatibility: For a while, I was writing everything in Google Docs; that is, until one of my editors complained of incompatibility issues (even when exporting to the .docx format with Docs). Once I switched from Google Docs to LibreOffice (for my fiction writing), those issues all went away. Document export: LibreOffice document export allows you to export your Writer documents to XHTML, PDF, EPUB, MediaWiki, Writer Indexing Export XML, JPEG, Writer Layout XML, PNG, and WEBP. You can also save as ODF, ODF Template, Flat XML, Unified Office Format, Word 2010-365, Word 2007, Word 2007 Template, Word 2003 XML, Rich Text, Word 97-2003, and other types. If there's a format you need, more than likely LibreOffice can export it. ... I can also ask what version of MS Office a collaborator is using and make sure to export it to the most compatible version. Because, you know, even Microsoft Office cannot manage 100% compatibility with Microsoft Office ...

1 0

Resetting USB Controllers After Error
by Lawrence D'Oliveiro 16 Oct '24

16 Oct '24

I was doing my semi-regular backup of some core essential files onto USB sticks today, and hit an error writing to one of the sticks (I replaced it with a spare). However, the error left the USB on my main machine in a strange state: it still thought the bad USB stick was present on the bus, even though it had been removed. And also my USB audio interface stopped working (though thankfully not my mouse or keyboard). I found the “usbreset” utility program. Trying to reset the nonexistent device of course returned an error that it did not exist. It listed three USB hubs, and I thought if I reset the one that the stick had been connected to, that might work. I was able to reset two of the hubs, but it hung on the third one (very likely the source of the problem). And the problem remained unfixed. I thought I was going to have to reboot my machine. Then, after hunting around online, I found this little shell script <https://unix.stackexchange.com/questions/704341/how-to-reset-usb-controllers>, which finds all your USB controller interfaces and tells them to “unbind”, and then “rebind”, all devices attached to each. And that worked! I have my 5.1 USB audio working again! Of course, I can’t guarantee it’ll work for you, if you hit a similar problem, but I figure, how could it hurt to try? ;)

1 0

Juice TV Hiccup
by Lawrence D'Oliveiro 15 Oct '24

15 Oct '24

Currently when I switch to FreeView Channel 200, it shows a frozen image with the text “Cinegy” and “Demo Version” on it. Searching for that name takes me to a site that talks about “software defined television”. Either their product licence has expired, or they never had one in the first place ...

2 3

BBS Pioneer Ward Christensen Has Died
by Lawrence D'Oliveiro 15 Oct '24

15 Oct '24

Ward Christensen, co-inventor of the first computer-based Bulletin Board System, and creator of XMODEM, the first file-transfer protocol designed to work over noisy phone lines (both in the late 1970s), has passed away at the age of 78. He never made a big deal out of his pioneering achievements, and always kept a modest profile in his personal life. <https://arstechnica.com/gadgets/2024/10/ward-christensen-bbs-inventor-and-a…>

1 0

If I Buy Something, Do I Own It?
by Lawrence D'Oliveiro 12 Oct '24

12 Oct '24

For some reason, it was never considered deceptive for shops to advertise themselves as “selling” CDs and tapes and videocassettes and DVDs and video games; if you bothered to ask, you discovered that what you were buying was a “licence” to use the product, not ownership of the product as such. Well, that’s changing, at least in some places. The US state of California has now decreed that not mentioning this distinction between “licence” and “ownership” constitutes false advertising, so vendors had better make it clear <https://arstechnica.com/gaming/2024/10/steam-now-reminds-you-that-it-really…>. In case customers get upset at discovering something they should have realized before, the article ends with the reassuring words: So long as Steam lasts forever, however, this new language should not be that alarming.

1 0

Thousands of Linux systems infected by stealthy malware since 2021
by Peter Reutemann 04 Oct '24

04 Oct '24

'Thousands of machines running Linux have been infected by a malware strain that’s notable for its stealth, the number of misconfigurations it can exploit, and the breadth of malicious activities it can perform, researchers reported Thursday. The malware has been circulating since at least 2021. It gets installed by exploiting more than 20,000 common misconfigurations, a capability that may make millions of machines connected to the Internet potential targets, researchers from Aqua Security said. It can also exploit CVE-2023-33426, a vulnerability with a severity rating of 10 out of 10 that was patched last year in Apache RocketMQ, a messaging and streaming platform that’s found on many Linux machines. Perfctl storm The researchers are calling the malware Perfctl, the name of a malicious component that surreptitiously mines cryptocurrency. The unknown developers of the malware gave the process a name that combines the perf Linux monitoring tool and ctl, an abbreviation commonly used with command line tools. A signature characteristic of Perfctl is its use of process and file names that are identical or similar to those commonly found in Linux environments. The naming convention is one of the many ways the malware attempts to escape notice of infected users. Perfctl further cloaks itself using a host of other tricks. One is that it installs many of its components as rootkits, a special class of malware that hides its presence from the operating system and administrative tools. Other stealth mechanisms include: - Stopping activities that are easy to detect when a new user logs in - Using a Unix socket over TOR for external communications - Deleting its installation binary after execution and running as a background service thereafter - Manipulating the Linux process pcap_loop through a technique known as hooking to prevent admin tools from recording the malicious traffic - Suppressing mesg errors to avoid any visible warnings during execution. The malware is designed to ensure persistence, meaning the ability to remain on the infected machine after reboots or attempts to delete core components. Two such techniques are (1) modifying the ~/.profile script, which sets up the environment during user login so the malware loads ahead of legitimate workloads expected to run on the server and (2) copying itself from memory to multiple disk locations. The hooking of pcap_loop can also provide persistence by allowing malicious activities to continue even after primary payloads are detected and removed. Besides running using the machine resources to mine cryptocurrency, Perfctl also turns the machine into a profit-making proxy that paying customers use to relay their Internet traffic. Aqua Security researchers have also observed the malware serving as a backdoor to install other families of malware.' -- source: https://arstechnica.com/security/2024/10/persistent-stealthy-linux-malware-… Cheers, Peter

1 0

Mozilla Thunderbird Lands On Android With New Beta Release
by Peter Reutemann 02 Oct '24

02 Oct '24

'The popular open-source email client, Mozilla Thunderbird, has just launched a beta version of its Android app. This release, version 8.0b1, is available as a pre-release with a range of new features and improvements. Here are some notable features, improvements and bug fixes in Thunderbird for Android 8.0b1 (beta) version: 1. Thunderbird for Android Branding: This beta release introduces the official Thunderbird for Android branding, moving away from its previous identity as K-9 Mail. 2. Updated Design: Users will immediately notice the updated design language, with a Material 3 navigation drawer and a refreshed colour scheme.It's important to 3. Migration Made Easy: For those already using K-9 Mail or a previous Thunderbird for Android build, migrating settings to the new version is now a seamless process. 4. Under the Hood Improvements: This beta release incorporates the Glean SDK for improved data collection and analysis. Additionally, the groundwork for supporting financial contributions through Google Play subscriptions has been laid. 5. Enhanced Security and Privacy: When encrypting email subjects, the app now uses "[…]" for the outer subject, bolstering privacy. 6. Simplified Settings: The "Move/copy destination folders" and "Folders to search" settings have been removed for a cleaner user experience. 7. Focus on Stability and Performance: Significant refactoring has been done to critical areas such as the message list, accounts, and folders, improving maintainability and performance. Numerous bug fixes also address crashes and other issues. 8. Open Source and Community Driven: Thunderbird for Android remains committed to open-source development, welcoming contributions from the community. The project uses the Apache License, Version 2.0. 9. Known Issues: Be mindful that the settings import feature may display apps that don't yet support it, leading to unsuccessful imports.' -- source: https://ostechnix.com/thunderbird-lands-on-android-with-new-beta-release/ Cheers, Peter

1 0

Mozilla's massive lapse in judgement causes clash with uBlock Origin developer
by Peter Reutemann 02 Oct '24

02 Oct '24

'Software developers who publish their products on third-party stores face all kinds of problems sometimes. From rejected apps or extensions to removed products or unjustified claims about them. Raymond "gorhill" Hill, maker of the world's most popular content blocker uBlock Origin received two emails from Mozilla recently about his Firefox add-on uBlock Origin Lite. Good to know: uBlock Origin Lite is a Manifest V3-compatible version of the content blocker. It is less powerful, but since Google is disabling Manifest V2 support in Chrome, it is what will remain from uBlock Origin for Chromium-based browsers. Mozilla says that it has reviewed the extension and found violations. The following claims were made: - The extension is not asking for consent for data collecting. - The extension contains "minified, concatenated or otherwise machine-generated code". - There is no privacy policy. As a consequence, Mozilla disabled the extension on the Firefox Add-ons Store. Hill refuted all three claims that Mozilla made on the GitHub repository stating that the extension is not collecting any data, that there is no minified code in uBlock Origin Lite, and that there is a privacy policy. He admitted further that he does not "have the time or motivation to spend time on this nonsense" and won't react to the allegations made or appeal the decision.' -- source: https://www.ghacks.net/2024/10/01/mozillas-massive-lapse-in-judgement-cause… Cheers, Peter

1 0

I'm using Windows at the moment: what's keeping me back
by Ben Cottrell 01 Oct '24

01 Oct '24

Hi, I'm using Windows 11 on my Lenovo ThinkBook 16p Gen 2, with an NVIDIA GeForce RTX 3060, and an AMD Ryzen 5600H (with integrated Radeon graphics). In the past I've distro hopped, and here were my experiences. I've stuck with Windows because NVIDIA has still not fully committed to supporting the standards needed for Wayland. OpenSUSE Tumbleweed: The first distro that properly worked with UEFI secure booting, in terms of enrolling keys. NVIDIA's drivers would not be loaded by the kernel unless the keys were enrolled. Ubuntu: Good default GTK theme. Good beginner distro. Installing NVIDIA drivers is a little easier than OpenSUSE. NixOS: Cutting edge, and allowed me to run certain applications to run with GPU acceleration. Easy to rollback system wide changes, but I couldn't really grasp their config language. I'm not sure if the issue is down to an insufficient allocation of staff by NVIDIA, or if there's a conflict of interest with Microsoft. Cheers, Ben

1 0

How to display network traffic in the terminal?
by Peter Reutemann 01 Oct '24

01 Oct '24

Was just wondering that myself and came across the following askubuntu Q&A: https://askubuntu.com/questions/257263/how-to-display-network-traffic-in-th… Tools mentioned: bmon slurm tcptrack iftop nethogs speedometer iptraf Quite a few that I hadn't heard of. :-) Cheers, Peter

2 1

Critical Unauthenticated RCE Flaw Impacts All GNU/Linux Systems
by Peter Reutemann 27 Sep '24

27 Sep '24

'"Looks like there's a storm brewing, and it's not good news," writes ancient Slashdot reader jd. "Whether or not the bugs are classically security defects or not, this is extremely bad PR for the Linux and Open Source community. It's not clear from the article whether this affects other Open Source projects, such as FreeBSD." From a report: A critical unauthenticated Remote Code Execution (RCE) vulnerability has been discovered, impacting all GNU/Linux systems. As per agreements with developers, the flaw, which has existed for over a decade, will be fully disclosed in less than two weeks. Despite the severity of the issue, no Common Vulnerabilities and Exposures (CVE) identifiers have been assigned yet, although experts suggest there should be at least three to six. Leading Linux distributors such as Canonical and RedHat have confirmed the flaw's severity, rating it 9.9 out of 10. This indicates the potential for catastrophic damage if exploited. However, despite this acknowledgment, no working fix is still available. Developers remain embroiled in debates over whether some aspects of the vulnerability impact security.' -- source: https://it.slashdot.org/story/24/09/25/2150210 Cheers, Peter

4 4

Tor Project Merges With Tails
by Peter Reutemann 27 Sep '24

27 Sep '24

'The Tor Project: Today the Tor Project, a global non-profit developing tools for online privacy and anonymity, and Tails, a portable operating system that uses Tor to protect users from digital surveillance, have joined forces and merged operations. Incorporating Tails into the Tor Project's structure allows for easier collaboration, better sustainability, reduced overhead, and expanded training and outreach programs to counter a larger number of digital threats. In short, coming together will strengthen both organizations' ability to protect people worldwide from surveillance and censorship. Countering the threat of global mass surveillance and censorship to a free Internet, Tor and Tails provide essential tools to help people around the world stay safe online. By joining forces, these two privacy advocates will pool their resources to focus on what matters most: ensuring that activists, journalists, other at-risk and everyday users will have access to improved digital security tools. In late 2023, Tails approached the Tor Project with the idea of merging operations. Tails had outgrown its existing structure. Rather than expanding Tails's operational capacity on their own and putting more stress on Tails workers, merging with the Tor Project, with its larger and established operational framework, offered a solution. By joining forces, the Tails team can now focus on their core mission of maintaining and improving Tails OS, exploring more and complementary use cases while benefiting from the larger organizational structure of The Tor Project. This solution is a natural outcome of the Tor Project and Tails' shared history of collaboration and solidarity. 15 years ago, Tails' first release was announced on a Tor mailing list, Tor and Tails developers have been collaborating closely since 2015, and more recently Tails has been a sub-grantee of Tor. For Tails, it felt obvious that if they were to approach a bigger organization with the possibility of merging, it would be the Tor Project.' -- source: https://yro.slashdot.org/story/24/09/26/1431201 Cheers, Peter

1 0

NIST proposes barring some of the most nonsensical password rules
by Peter Reutemann 26 Sep '24

26 Sep '24

'The National Institute of Standards and Technology (NIST), the federal body that sets technology standards for governmental agencies, standards organizations, and private companies, has proposed barring some of the most vexing and nonsensical password requirements. Chief among them: mandatory resets, required or restricted use of certain characters, and the use of security questions. Choosing strong passwords and storing them safely is one of the most challenging parts of a good cybersecurity regimen. More challenging still is complying with password rules imposed by employers, federal agencies, and providers of online services. Frequently, the rules—ostensibly to enhance security hygiene—actually undermine it. And yet, the nameless rulemakers impose the requirements anyway. [...] 1. Verifiers and CSPs SHALL require passwords to be a minimum of eight characters in length and SHOULD require passwords to be a minimum of 15 characters in length. 2. Verifiers and CSPs SHOULD permit a maximum password length of at least 64 characters. 3. Verifiers and CSPs SHOULD accept all printing ASCII [RFC20] characters and the space character in passwords. 4. Verifiers and CSPs SHOULD accept Unicode [ISO/ISC 10646] characters in passwords. Each Unicode code point SHALL be counted as a single character when evaluating password length. 5. Verifiers and CSPs SHALL NOT impose other composition rules (e.g., requiring mixtures of different character types) for passwords. 6. Verifiers and CSPs SHALL NOT require users to change passwords periodically. However, verifiers SHALL force a change if there is evidence of compromise of the authenticator. 7. Verifiers and CSPs SHALL NOT permit the subscriber to store a hint that is accessible to an unauthenticated claimant. 8. Verifiers and CSPs SHALL NOT prompt subscribers to use knowledge-based authentication (KBA) (e.g., “What was the name of your first pet?”) or security questions when choosing passwords. 9. Verifiers SHALL verify the entire submitted password (i.e., not truncate it).' -- source: https://arstechnica.com/security/2024/09/nist-proposes-barring-some-of-the-… Cheers, Peter

2 1

OpenSSH 9.9 Features Enhanced Quantum-Resistant Algorithms
by Peter Reutemann 26 Sep '24

26 Sep '24

'The OpenSSH project announced the release of OpenSSH 9.9, now available for download on its official mirrors. This new version introduces significant features, including support for hybrid post-quantum key exchange using a formally verified ML-KEM implementation, improved controls for managing unwanted connections, faster NTRUPrime key exchange code, and more.' -- source: https://linuxiac.com/openssh-9-9-released/ Cheers, Peter

1 0

Kubuntu Focus Ir14 Gen 2 review: Using Linux instead of messing with it
by Peter Reutemann 25 Sep '24

25 Sep '24

'There are lots of laptops—maybe all of them—on which you can run a Linux desktop. There are a few vendors that offer laptops with extensive Linux compatibility. And then there are a select few that specialize in Linux laptops, support them, and even customize them. Kubuntu Focus is one of the select few. It sent me one of its laptops to test the Ir14 Gen 2, which runs, of course, Kubuntu, the KDE desktop variant of Ubuntu. The “Focus” in the company name comes from what it is hoping to provide: a device on which you can just do your work without worrying about what’s happening deeper in your system. Go ahead and sudo apt update, says the Focus team; we’ve got you. I used the Ir14 Gen 2 for Ars Technica work and my personal needs for at least two weeks. Setting the system up with Focus’ guided wizard, installing apps from its store, and refusing to touch any of the deeper system files, I achieved something pretty remarkable: no unexpected behaviors on a Linux laptop. Had anything gone wrong, I could reasonably lean back on the system’s rollbacks, which I used a couple of times with no problem. Is this what it could be like? Does using Linux on the desktop not have to involve compiling from source, searching for that one relevant forum comment related to a problem, wondering where the fault lies along the chain from kernel to desktop to repository to me? Maybe. Can you surrender a bit of your upgrade and tinkering curiosity in exchange for knowing that things will work when they get to you? It might be trickier than you think. A Kubuntu Focus Ir14 Gen 2 laptop includes these things: - A laptop made by Carbon Systems, which supplies a lot of fleet and enterprise systems, and happens to make them relatively upgrade and repair-friendly - A stock Kubuntu 24.04 LTS system with a Plasma desktop, with Focus’ integrations built in - A few software tools from Focus, including power profiles and rollback The Focus is not meant to let you do whatever you want but to keep doing what you do. Researchers, developers, and jet propulsion labs are some of Focus’ customers. Focus tests everything that will arrive on official update channels to the device. When kernel updates appear in the upstream, Focus makes sure everything on the device works with it, while also contributing back to Ubuntu, Kubuntu, KDE, and the kernel itself. You don’t get interim releases. You don’t get staff in the forums helping you with running Arch or Fedora. There’s no custom desktop environment or windowing system (“We felt building a separate distribution and ecosystem is the last thing anyone needed,” the company writes). Focus chose reliability for daily-driver devices running Linux. It can, in other words, save you from yourself, if you’re a lot like me. Besides testing, Focus also makes a bunch of tweaks to the system before shipping: some keyboard shortcuts, screen scaling and console font alterations, automatic power profiles on plug and unplug, and the like. Focus has also written up almost every corner of your system you want help on; you can check it out on its site.' -- source: https://arstechnica.com/gadgets/2024/09/kubuntu-focus-ir14-gen-2-review-usi… Cheers, Peter

1 0

Linux boots in 4.76 days on the Intel 4004
by Peter Reutemann 24 Sep '24

24 Sep '24

'Hardware hacker Dmitry Grinberg recently achieved what might sound impossible: booting Linux on the Intel 4004, the world's first commercial microprocessor. With just 2,300 transistors and an original clock speed of 740 kHz, the 1971 CPU is incredibly primitive by modern standards. And it's slow—it takes about 4.76 days for the Linux kernel to boot. Initially designed for a Japanese calculator called the Busicom 141-PF, the 4-bit 4004 found limited use in commercial products of the 1970s before being superseded by more powerful Intel chips, such as the 8008 and 8080 that powered early personal computers—and then the 8086 and 8088 that launched the IBM PC era. If you're skeptical that this feat is possible with a raw 4004, you're right: The 4004 itself is far too limited to run Linux directly. Instead, Grinberg created a solution that is equally impressive: an emulator that runs on the 4004 and emulates a MIPS R3000 processor—the architecture used in the DECstation 2100 workstation that Linux was originally ported to. This emulator, along with minimal hardware emulation, allows a stripped-down Debian Linux to boot to a command prompt.' -- source: https://arstechnica.com/gadgets/2024/09/hacker-boots-linux-on-intels-first-… Cheers, Peter

1 0

Zen Browser: a New Firefox-based Alternative to Chromium Browsers
by Peter Reutemann 24 Sep '24

24 Sep '24

'First released on July 11th, the Firefox-based Zen browser is "taking a different approach to the user interface," according to the blog It's FOSS. The Register says the project "reminds us strongly of Arc, a radical Chromium-based web browser... to modernize the standard web browser UI by revising some fundamental assumptions." [Arc] removes the URL bar from front and center, gets rid of the simple flat list of tabs, and so on. Zen is trying to do some similar things, but in a slightly more moderate way — and it's doing it on the basis of Mozilla's Firefox codebase... Instead of the tired old horizontal tab bar you'll see in both Firefox and Chrome, Zen implements its own tab bar... By default, this tab bar is narrow and just shows page icons — but there are some extra controls at the bottom of the sidebar, one of which expands the sidebar to show page titles too. For us, it worked better than Vivaldi's fancier sidebar. The article concludes it's "a new effort to modernize web browsing by bringing tiling, workspaces, and so on — and it's blissfully free of Google code." One Reddit comment swooned over Zen's "extraordinary" implementation of a distraction-free "Compact Mode" (hiding things like the sidebar and top bar). And It's Foss described it as a "tranquil," browser, "written using CSS, C++, JavaScript, and a few other programming languages, with a community of over 30 people contributing to it." The layout of the interface felt quite clean to me; there were handy buttons on the top to control the webpage, manage extensions, and a menu with additional options... The split-view functionality allows you to open up two different tabs on the same screen, allowing for easy multitasking when working across different webpages... I split two tabs, but in my testing, I could split over 10+ tabs... If you have a larger monitor, then you are in for a treat... The Zen Sidebar feature... can run web apps alongside any open tabs. This can be helpful in situations where you need to quickly access a service like a note-taking app, Wikipedia, Telegram, and others. On the customization side of things, you will find that Zen Browser supports everything that Firefox does, be it the settings, adding new extensions/themes/plugins, etc. The Register points out it's easy to give it a try. "Being based on Firefox means that as well as running existing extensions, it can connect to Mozilla's Sync service and pick up not just your bookmarks, but also your tabs from other instances." And beyond all that, "There's just something satisfying about switching browsers every now and again..." argues the tech site Pocket-Lint: Zen Browser's vertical tabs layout is superb and feels much better than anything available in standard Firefox. [Firefox recently offered vertical tabs and a new sidebar experience in Nightly/Firefox Labs 131.] The tab bar can be set to automatically hide and show up whenever you hover near it, and it also contains quick access buttons to bookmarks, settings, and browsing history. The tab bar also contains a profile switcher... One of the greatest parts of the Zen Browser is the community that has popped up around it. At its heart, Zen Browser is a community-driven project... Zen Browser themes are aesthetic and functional tweaks to the UI. While there aren't a ton available right now, the ones that are show a lot of promise for the browser's future... I've personally gotten great use out of the Super URL Bar theme, which makes your URL bar expand and become the focus of your screen while typing in it... There's a lot you can do to make Zen Browser feel nearly exactly like what you want it to feel like. The "Business Standard calls it "an open-source alternative to Chromium-based browsers," adding "Where Zen truly shines is it offers a range of customisation, tab management, and workspace management..." Their theme store offers a range of options, including modifications to the bookmark toolbar, a floating URL bar, private mode theming, and removal of browser padding. In addition to these, users can also choose from custom colour schemes and built-in theming options... The Sidebar is another neat feature which allows you to open tabs in a smaller, smartphone-sized window. You can view websites in mobile layout by using this panel. It's "focused on being always at the latest version of Firefox," according to its official site, noting that Firefox is known for its security features. But then, "We also have additional security features like https only built into Zen Browser to help keep you safe online." And it also promises automated Releases "to ensure security." It's FOSS adds that you can get Zen Browser for Linux, Windows, and macOS from its official website (adding "They also offer it on the Flathub store for further accessibility on Linux.") And its source code is available on GitHub.' -- source: https://news.slashdot.org/story/24/09/23/0353206 Cheers, Peter

1 0

As Companies Try 'Open Source Rug Pull', Open Source Foundations Considered Helpful
by Peter Reutemann 22 Sep '24

22 Sep '24

'"In the era of the open source rug pull, the role of open source foundations is more important than ever," argues the co-founder of the developer-focused industry analyst firm RedMonk: The "rug pull" here refers to companies that have used open source as a distribution mechanism, building a community and user base, before changing the license to be restricted, rather than truly open source. "This is capitalism, yo. We've got shareholders to satisfy. It's time to relicense that software, move to a Business Source license." [...] Where open source used to be a sustainable commitment, today too often it feels like a short term tactic. Commercial open source isn't what it used to be. Which means that open source foundations, which provide ongoing governance and intellectual property management for open source projects, are in an interesting position, in some cases becoming more adversarial than they historically have been with vendors.... [T]he Apache Software Foundation (ASF) has done a great job of fostering sustainable, commercial, open source for decades now, most notably in the data infrastructure space — think Hadoop, Spark, Kafka, Flink etc. ["[C]ommercial open source would almost certainly never have achieved critical mass and continued success without foundations in the mix," the article notes later. "The ASF was founded in 1999, and underpinned the adoption of open source middleware in the enterprise..."] One premise behind the Cloud Native Computing Foundation (CNCF) is that user organisations can within reason trust it to stand behind the projects it incubates and manages. While not an explicit commitment, adopters generally, and enterprises specifically, have seen the CNCF imprimatur as one that they can rely on. In the era of the open source rug pull this kind of promise becomes even more important.... Sid Sijbrandij, CEO of GitLab has argued that open source companies should commit to an Open Charter as a mechanism to protect users from open source rug pulls. "Open source software isn't useful if people can't rely on the project remaining open source. Adopting Open Charter offers open source users predictability amidst the growing licensing switch trend." With a CNCF project, though, the need for this kind of charter becomes less important, because the code is by design not single source, but has a diverse set of contributors. Which is to say that open source foundations can make rug pulls a lot less likely than adoption of open source technology built by a single company. Relying on benevolent dictators is generally pretty risky. And recently the benevolent dictators have seemed... less benevolent. In conclusion, "Open Source Foundations Considered Helpful," according to the post's title. It does argue that "Any company is within its rights to relicense its software, but it can certainly be problematic from a community and project health perspective. "Which is exactly why open source foundations are more important than ever."' -- source: https://news.slashdot.org/story/24/09/21/0530234 Cheers, Peter

1 0

List Of IPTV Resources
by Lawrence D'Oliveiro 22 Sep '24

22 Sep '24

This user <https://github.com/iptv-org> just popped up in my GitHub feed. One repo <https://github.com/iptv-org/iptv> claims to be a list of links to over 8000 streaming TV channels from nations all over the world, while the other is a list of tools*, providers and other resources. Do be aware it’s a bit of a mixed bag: yes, there are legitimate channels (no encryption so far that I have noticed), but also some dubious-looking links. *Oddly, FFmpeg and youtube-dl aren’t in the list.

2 5

Trying Out IPv6
by Lawrence D'Oliveiro 19 Sep '24

19 Sep '24

My new ISP supports IPv6, and I’ve been doing a few tentative tests with it. I actually disabled the DHCPv6 support in my router, and manually configured an address in the ISP-delegated range into my main machine, just for testing. And now I’ve discovered that my other Linux machines have picked up addresses in the delegated range as well, all by themselves! Turns out this is through a mechanism called “SLAAC” (“Stateless Address Autoconfiguration”). My main worry was that, since IPv6 allows direct connections without needing NAT, that internal machines with IPv6 addresses would be directly visible on the Internet. But checking with an external IPv6 ping site seems to show this is not the case: my router is blocking incoming attempts to access nodes on IPv6 addresses by default. The router responds to pings on its own IPv6 address from the public Internet, of course; but other allocated addresses in the range do not respond. Here is a site <https://test-ipv6.com/> I found to test your IPv6 connectivity. It also gives details of the tests it runs, and a handy list of some random places you can access via IPv6.

1 0

Real-Time Linux Is Now Mainstream
by Lawrence D'Oliveiro 19 Sep '24

19 Sep '24

The PREEMPT_RT patches (aka “Real-Time Linux”) originated as a set of out-of-tree mods to the Linux kernel about 20 years ago. Bit by bit, over time, various parts of them have been incorporated into the mainline code. Some of these patches have found uses in, shall we say, more mainstream application areas. And beginning with kernel version 6.12, the last of those out-of-tree patches have been merged, and the out-of-tree PREEMPT_RT patchset is no more. This article <https://www.zdnet.com/article/20-years-later-real-time-linux-makes-it-to-th…> by long-time Linux fan Steven J Vaughan-Nichols, gives some background. Including the fact that musicians have been using Linux for audio work for decades, because Linux with the real-time patches was the cheapest way of recording pro-quality audio, much cheaper than buying “real” pro audio gear.

1 0

Use oathtool Linux command line for 2 step verification (2FA)
by Peter Reutemann 18 Sep '24

18 Sep '24

Hi everyone With 2FA now being commonplace, I've mainly relied on Google's Authenticator or the MS equivalent. However, today I came across this tutorial on how to use the oathtool CLI tool to achieve the same: https://www.cyberciti.biz/faq/use-oathtool-linux-command-line-for-2-step-ve… Originally, I came across the tutorial on my Mastodon feed: https://mastodon.social/@nixCraft/113154210830716246 Cheers, Peter

1 0

Is Your Windows Licence Legal?
by Lawrence D'Oliveiro 18 Sep '24

18 Sep '24

How do you know your Windows-running PC is running a legitimately-licensed copy of Windows? It seems you can’t: <https://www.zdnet.com/article/is-your-windows-license-legal-should-you-even…>. The article says “You almost certainly have a valid Windows license if you acquired it in ...” and goes on to list the usual ways that users obtain their copies. But note that “almost”: there is nothing you end up with -- no document or artifact or anything else -- that definitively says your copy of Windows is genuine. The final decision always goes back to Microsoft: if they decide not to sue you, then your copy is probably legit.

1 0

Chrome Switching To NIST-Approved ML-KEM Quantum Encryption
by Peter Reutemann 18 Sep '24

18 Sep '24

'Google is updating the post-quantum cryptography in Chrome, replacing the experimental Kyber with the fully standardized Module Lattice Key Encapsulation Mechanism (ML-KEM) to enhance protection against quantum computing attacks. BleepingComputer reports: This change comes roughly five months after Google rolled out the post-quantum secure TLS key encapsulation system on Chrome stable for all users, which also caused some problems with TLS exchanges. The move from Kyber to ML-KEM though is not related to those early problems, that got resolved soon after manifesting. Rather, its a strategic choice to abandon an experimental system for a NIST-approved and fully standardized mechanism. ML-KEM was fully endorsed by the U.S. National Institute of Standards and Technology (NIST) in mid-August, with the agency publishing the complete technical specifications of the final version at the time. Google explains that despite the technical changes from Kyber to ML-KEM being minor, the two are essentially incompatible, so a switch had to be made. "The changes to the final version of ML-KEM make it incompatible with the previously deployed version of Kyber," explains Google. "As a result, the codepoint in TLS for hybrid post-quantum key exchange is changing from 0x6399 for Kyber768+X25519, to 0x11EC for ML-KEM768+X25519." ' -- source: https://it.slashdot.org/story/24/09/17/0455248 Cheers, Peter

1 0

Linus Torvalds Muses About Maintainer Gray Hairs, Next 'King of Linux'
by Peter Reutemann 17 Sep '24

17 Sep '24

'A report from ZDNet, written by Steven Vaughan-Nichols: In a candid keynote chat at the Linux Foundation's Open Source Summit Europe, Linux creator Linus Torvalds shared his thoughts on kernel development, the integration of Rust, and the future of open source. Dirk Hohndel, Verizon's Open Source Program Office head and Torvalds friend, moderated their conversation about the Linux ecosystem. Torvalds emphasized that kernel releases, like the recent 6.11 version, are intentionally not exciting. "For almost 15 years, we've had a very good regular cadence of releases," he explained. With releases every nine weeks, this regularity aims for timeliness and reliability rather than flashy new features. The Linux creator noted that while drivers still make up the bulk of changes, core kernel development continues to evolve. "I'm still surprised that we're doing very core development," Torvalds said, mentioning ongoing work in virtual file systems and memory management. [...] Shifting back to another contentious subject -- maintainer burnout and succession planning -- Hohndel observed that "maintainers are aging. Strangely, some of us have, you know, not quite as much or the right hair color anymore." (Torvalds interjected that "gray is the right color.") Hohndel continued, "So the question that I always ask myself: Is it about time to talk about there being a mini-Linus?" Torvalds turned the question around. True, the Linux maintainers are getting older and people do burn out and go away. "But that's kind of normal. What is not normal is that people actually stay around for decades. That's the unusual thing, and I think that's a good sign." At the same time, Torvalds admitted, it can be intimidating for a younger developer to join the Linux kernel team "when you see all these people who have been around for decades, but at the same time, we have many new developers. Some of those new developers come in, and three years later, they are top maintainers." Hohndel noted that "to be the king of Linux, the main maintainer, you have to have a lot of experience. And the backup right now is Greg KH (Greg Kroah-Hartman, maintainer of the stable Linux kernel), who is about the same age as we are and has even less hair." True, Torvalds responded, "But the thing is, Greg hasn't always been Greg. Before Greg, there's been Andrew {Morton) and Alan (Cox). After Greg, there will be Shannon and Steve. The real issue is you have to have a person or a group of people that the development community can trust, and part of trust is fundamentally about having been around for long enough that people know how you work, but long enough does not mean to be 30 years." Hohndel made one last comment: "What I'm trying to say is, you've been doing this for 33 years. I don't want to be morbid, but I think in 33 years, you may no longer be doing this?" Torvalds, making motions as though he was using a walker, replied, "I would love to still do this conference with you." The report notes the contention around the integration of Rust, highlighted by the recent departure of Rust for Linux maintainer Wedson Filho. Despite resistance from some devs who prefer C and are skeptical of Rust, Torvalds remains optimistic about Rust's future in the kernel. He said: "Rust is a very different thing, and there are a lot of people who are used to the C model. They don't like the differences, but that's OK. In the kernel itself, absolutely nobody understands everything. I don't. I rely heavily on maintainers of various subsystems. I think the same can be true of Rust and C. I think it's one of our strengths in the kernel that we can specialize. Clearly, some people just don't like the notion of Rust and having Rust encroach on their area. But we've only been doing Rust for a couple of years, so it's way too early to say Rust is a failure." Meanwhile, Torvalds confirmed that the long-anticipated real-time Linux (RTLinux) project will finally be integrated into the kernel with the upcoming release of Linux 6.12.' -- source: https://linux.slashdot.org/story/24/09/16/2047217 Cheers, Peter

1 0

Linux Kernel 6.11 is Out
by Peter Reutemann 17 Sep '24

17 Sep '24

'Linux creator Linus Torvalds has released version 6.11 of the open-source operating system kernel. The new release, while not considered major by Torvalds, introduces several notable improvements for AMD hardware users and Arch Linux developers. ZDNet: This latest version introduces several enhancements, particularly for AMD hardware users, while offering broader system improvements and new capabilities. These include: RDNA4 Graphics Support: The kernel now includes baseline support for AMD's upcoming RDNA4 graphics architecture. This early integration bodes well for future AMD GPU releases, ensuring Linux users have day-one support. Core Performance Boost: The AMD P-State driver now includes handling for AMD Core Performance Boost. This driver gives AMD Core users more granular control over turbo and boost frequency ranges. Fast Collaborative Processor Performance Control (CPPC) Support: Overclockers who want the most power possible from their computers will be happy with this improvement to the AMD P-State driver. This feature enhances power efficiency on recent Ryzen (Zen 4) mobile processors. This can improve performance by 2-6% without increasing power consumption. AES-GCM Crypto Performance: AMD and Intel CPUs benefit from significantly faster AES-GCM encryption and decryption processing, up to 160% faster than previous versions.' -- source: https://linux.slashdot.org/story/24/09/16/1928224 Cheers, Peter

1 0