- wlug - list.wlug.org.nz

Blender - Oscar win for Flow
by Peter Reutemann 03 Mar '25

03 Mar '25

'Making Flow – Interview with director Gints Zilbalodis Flow, the animated feature film following the mystical journey of a dark grey cat and his companions, is the manifestation of Blender’s mission, where a small, independent team with a limited budget is able to create a story that moves audiences worldwide, and achieve recognition with over 60 awards, including a Golden Globe for Best Animation and two Oscar nominations. In this interview, Gints Zilbalodis, writer and director (and more!) of the film, shares how Blender was instrumental in the creation of the film.' -- sources: https://www.blender.org/user-stories/making-flow-an-interview-with-director… https://www.reuters.com/lifestyle/flow-wins-best-animated-feature-film-osca… Cheers, Peter

2 1

Mozilla Revises Firefox's Terms of Use, Clarifies That They Don't Own Your Data
by Peter Reutemann 03 Mar '25

03 Mar '25

'"We need a license to allow us to make some of the basic functionality of Firefox possible," Mozilla explained Wednesday in a clarification a recent Terms of Use update. "Without it, we couldn't use information typed into Firefox, for example. It does NOT give us ownership of your data or a right to use it for anything other than what is described in the Privacy Notice." But Friday they went further, and revised those new Terms of Use "to more clearly reflect the limited scope of how Mozilla interacts with user data," according to a Mozilla blog post. More details from the Verge: The particular language that drew criticism was: "When you upload or input information through Firefox, you hereby grant us a nonexclusive, royalty-free, worldwide license to use that information to help you navigate, experience, and interact with online content as you indicate with your use of Firefox." That language has been removed. Now, the language in the terms says: "You give Mozilla the rights necessary to operate Firefox. This includes processing your data as we describe in the Firefox Privacy Notice. It also includes a nonexclusive, royalty-free, worldwide license for the purpose of doing as you request with the content you input in Firefox. This does not give Mozilla any ownership in that content...." Friday's post additionally provides some context about why the company has "stepped away from making blanket claims that 'We never sell your data.'" Mozilla says that "in some places, the LEGAL definition of 'sale of data' is broad and evolving," and that "the competing interpretations of do-not-sell requirements does leave many businesses uncertain about their exact obligations and whether or not they're considered to be 'selling data.'" Mozilla says that "there are a number of places where we collect and share some data with our partners" so that Firefox can be "commercially viable," but it adds that it spells those out in its privacy notice and works to strip data of potentially identifying information or share it in aggregate.' -- source: https://news.slashdot.org/story/25/03/01/2111254 Cheers, Peter

1 0

Steam Deck & PC Gaming
by Lawrence D'Oliveiro 26 Feb '25

26 Feb '25

PC gaming is still a bigger business than consoles, according to <https://arstechnica.com/gaming/2025/01/way-more-game-makers-are-working-on-…>. And the Linux-powered Steam Deck has been pioneering the new handheld segment of the PC gaming market. But figures on Steam Deck sales are hard to come by. Here <https://newsletter.gamediscover.co/p/steam-deck-everything-you-were-afraid> is an attempt to tease out, from the available hints, how popular the product actually is. That article is over a year old by now, but it estimates that there were 3-4 million Steam Decks sold by that point. I think we can safely say another million or more in units has been added to that since then. One concrete figure from the Steam Hardware Survey <https://store.steampowered.com/hwsurvey/Steam-Hardware-Software-Survey-Welc…> is that about 2.3% of all Steam users are on Linux. This looks like 0.7% specifically on the Steam Deck, so other Linux would be about 1.6%. Another linked survey reports that over half of Steam Deck users run other game emulation systems (e.g. PlayStation 2, Game Boy, GameCube) on their Decks.

1 1

Pi-hole 6 Is Here: Now Faster, Smarter, and More Secu
by Peter Reutemann 25 Feb '25

25 Feb '25

'The much-anticipated Pi-hole 6, a network-wide ad blocker that acts as a DNS sinkhole to block advertisements, trackers, and malicious domains at the network level, has been officially released, now featuring an embedded web server and a new REST API directly integrated into the pihole-FTL binary. This eliminates the need for Lighttpd and PHP, reducing the installation footprint and boosting overall performance. Moreover, the new API introduces server-side pagination for the query log, ensuring a faster and more responsive user experience. Next, advanced filtering gets a boost by introducing support for subscribed allowlists, also known as “Antigravity.” These allowlists work similarly to traditional blocklists but allow domains rather than denying them, giving users more nuanced control over what content gets filtered. Additionally, configuration management has been made more user-friendly by consolidating multiple settings files into a single, richly commented TOML file located at “/etc/pihole/pihole.toml.” Whether you prefer direct file editing, command line tweaks, API usage, or environment variables—Pi-hole 6 has you covered. It’s also worth noting that the user interface has received a complete overhaul. With settings now divided into Basic and Expert modes, users can tailor their experience based on their comfort level.' -- source: https://linuxiac.com/pi-hole-6-is-here-now-faster-smarter-and-more-secure/ Cheers, Peter

2 1

Greg Kroah-Hartman Supports Rust in the Kernel
by Peter Reutemann 24 Feb '25

24 Feb '25

'Report from Phoronix: Linux's second-in-command Greg Kroah-Hartman has also been a big proponent of Rust kernel code. He's crafted another Linux kernel mailing list post [Wednesdsay] outlining the benefits of Rust and encouraging new kernel code/drivers to be in Rust rather than C. Greg KH makes the case that the majority of the kernel bugs are due to "stupid little corner cases in C that are totally gone in Rust." "As someone who has seen almost EVERY kernel bugfix and security issue for the past 15+ years... and who sees EVERY kernel CVE issued, I think I can speak on this topic," Kroah-Hartman began. Here's some excerpts from his remarks. Citing corner cases like overwrites of memory, error path cleanups, use-after-free mistakes and forgetting to check error values, Kroah-Hartman says he's "all for... making these types of problems impossible to hit." That's why I'm wanting to see Rust get into the kernel, these types of issues just go away, allowing developers and maintainers more time to focus on the REAL bugs that happen (i.e. logic issues, race conditions, etc.)... [F]or new code / drivers, writing them in Rust where these types of bugs just can't happen (or happen much much less) is a win for all of us, why wouldn't we do this...? Rust isn't a "silver bullet" that will solve all of our problems, but it sure will help in a huge number of places, so for new stuff going forward, why wouldn't we want that...? Yes, mixed language codebases are rough, and hard to maintain, but we are kernel developers dammit, we've been maintaining and strengthening Linux for longer than anyone ever thought was going to be possible. We've turned our development model into a well-oiled engineering marvel creating something that no one else has ever been able to accomplish. Adding another language really shouldn't be a problem, we've handled much worse things in the past and we shouldn't give up now on wanting to ensure that our project succeeds for the next 20+ years. We've got to keep pushing forward when confronted with new good ideas, and embrace the people offering to join us in actually doing the work to help make sure that we all succeed together. Kroah-Hartman emphasized later that "a huge majority of the stupid things we do in C just don't happen in the same code implemented in Rust (i.e. memory leaks, error path cleanups, return value checking, etc.) " The complete thread contains over 140 messages — including Linus Torvalds' observation that " #pragma is complete garbage and should never be used."' -- source:https://linux.slashdot.org/story/25/02/22/0543255 Cheers, Peter

1 0

Brave Now Lets You Inject Custom JavaScript To Tweak Websites
by Peter Reutemann 11 Feb '25

11 Feb '25

'Brave Browser version 1.75 introduces "custom scriptlets," a new feature that allows advanced users to inject their own JavaScript into websites for enhanced customization, privacy, and usability. The feature is similar to the TamperMonkey and GreaseMonkey browser extensions, notes BleepingComputer. From the report: "Starting with desktop version 1.75, advanced Brave users will be able to write and inject their own scriptlets into a page, allowing for better control over their browsing experience," explained Brave in the announcement. Brave says that the feature was initially created to debug the browser's adblock feature but felt it was too valuable not to share with users. Brave's custom scriptlets feature can be used to modify webpages for a wide variety of privacy, security, and usability purposes. For privacy-related changes, users write scripts that block JavaScript-based trackers, randomize fingerprinting APIs, and substitute Google Analytics scripts with a dummy version. In terms of customization and accessibility, the scriptlets could be used for hiding sidebars, pop-ups, floating ads, or annoying widgets, force dark mode even on sites that don't support it, expand content areas, force infinite scrolling, adjust text colors and font size, and auto-expand hidden content. For performance and usability, the scriptlets can block video autoplay, lazy-load images, auto-fill forms with predefined data, enable custom keyboard shortcuts, bypass right-click restrictions, and automatically click confirmation dialogs. The possible actions achievable by injected JavaScript snippets are virtually endless. However, caution is advised, as running untrusted custom scriptlets may cause issues or even introduce some risk.' -- source: https://tech.slashdot.org/story/25/02/10/2348258 Cheers, Peter

1 0

This Keyboard Has A “SMOL” Key
by Lawrence D'Oliveiro 11 Feb '25

11 Feb '25

The review claims this is the “world’s largest keyboard”. <https://www.tomshardware.com/peripherals/keyboards/im-typing-this-on-the-wo…>. It is supposedly inspired by the legendary “Space Cadet” keyboard from the 1980s <https://www.deviantart.com/default-cube/art/Space-Cadet-Keyboard-650629356>, and is certainly a wonder to behold. Yet with all the modifiers it does provide (look, they found room for *two* “Meta” keys, both on the right-hand side!), they somehow decided to omit any CTRL keys. Note on modifiers: “Meta” is commonly a synonym for “Alt”, while the “Super” key is usually mapped to the one with the Windows logo on it, for those still stuck in the Microsoft world. The “Hyper” moodifier has no equivalent on a conventional keyboard. These are all names well-established from the days of high-powered workstations running Unix or doing AI work with Lisp. But what the heck is the “SMOL” key supposed to do?

1 0

Tails 6.12 Rolls Out, Sealing Critical Security Gaps
by Peter Reutemann 11 Feb '25

11 Feb '25

'The Tails project announced the release of its privacy-focused Linux distro, Tails 6.12, featuring vital security patches alongside an array of functional updates. According to the development team, several vulnerabilities were discovered during an external security audit by Radically Open Security. In light of this, perhaps the most noteworthy highlights in Tails 6.12 are the fixes preventing attackers from monitoring Tor circuits and altering Persistent Storage settings. Here are some more details about it. Tor Circuit Monitoring Prevention In earlier versions (up to Tails 6.11), vulnerabilities within Onion Circuits and the Tor Browser wrapper could have allowed a hostile actor—who had already hijacked a running application—to monitor or modify Tor connections, potentially revealing user identities. The Tails developers emphasize that there is no indication these flaws were exploited in the wild. Persistent Storage Security Enhancements Another fix addresses a loophole that, if exploited, could have allowed attackers with existing control of an application to change Persistent Storage settings. This patch ensures that user data in the Persistent Storage remains more securely locked down even in the unlikely event of a breach.' -- source: https://linuxiac.com/tails-6-12-rolls-out-sealing-critical-security-gaps/ Cheers, Peter

1 0

OpenWrt 24.10 Brings Kernel 6.6 and Initial WiFi 7 Support
by Peter Reutemann 11 Feb '25

11 Feb '25

'OpenWrt, a free and open-source Linux-based operating system primarily used for embedded devices, most notably residential gateways and routers, has just announced the first stable release of its 24.10 series. Most notable among the changes is the jump from Linux kernel 5.15 to 6.6 LTS, which promises better hardware support and long-term viability. Additionally, TLS 1.3 support is now standard in the default images, bolstering security capabilities for systems relying on encrypted connections. Another noteworthy improvement is the activation of POSIX Access Control Lists and file system security attributes on devices with larger flash memory sizes. Moreover, kernel support for Multipath TCP has been enabled on devices with greater storage capacity. Regarding wireless networking, OpenWrt 24.10 further refines WiFi6 (802.11ax) and adds initial, although still limited, support for WiFi7 (802.11be). Of course, each new release also expands device coverage, with OpenWrt 24.10 now supporting over 1,970 devices, adding compatibility for more than 100 new models compared to the previous release. And completely expected, their own OpenWrt One is now among them.' -- source: https://linuxiac.com/openwrt-24-10-brings-kernel-6-6-and-initial-wifi-7-sup… Cheers, Peter

1 0

How To Make Any AMD Zen CPU Always Generate 4 As a Random Number
by Peter Reutemann 10 Feb '25

10 Feb '25

'Google security researchers have discovered a way to bypass AMD's security, enabling them to load unofficial microcode into its processors and modify the silicon's behaviour at will. To demonstrate this, they created a microcode patch that forces the chips to always return 4 when asked for a random number. Beyond simply allowing Google and others to customize AMD chips for both beneficial and potentially malicious purposes, this capability also undermines AMD's secure encrypted virtualization and root-of-trust security mechanisms.' -- source: https://it.slashdot.org/story/25/02/09/2021244 Cheers, Peter

3 2