Bonum Certa Men Certa

Links 9/9/2021: GNOME 41 RC and GStreamer 1.18.5



  • GNU/Linux

    • Desktop/Laptop

      • In Search of Linux Laptops? Check these 6 Places to Get Your Laptop in 2021

        Are you in search of Linux laptops? This article takes you through 6 different places that offer the best Linux laptops. So get prepared to choose your Linux laptop in 2021.

        [...]

        Slimbook is well known for its thin, rigid, and light durable laptops starting at a reasonable price of €930 (approx $1,075). These come with a nice screen, solid battery life, powerful CPU, and very good speakers.

        This brand is from Spain. Slimbook came ahead of its competitors launching the first KDE laptops.

        Slimbook brings laptops with a good variety of popular Linux distros, such as KDE Neon, Ubuntu, Ubuntu MATE, Linux Mint, Kubuntu. Additionally, their laptops have two Spanish Linux distros – Max and Lliurex. You can choose Windows OS as well with their laptops, but for that, additional costs are there.

        Slimbook offers desktop systems too. So, if you ever need desktops, check it here.

    • Server

    • Audiocasts/Shows

      • FLOSS Weekly 646: Atomic Jar and Testcontainers - Richard North

        Richard North was the dog that caught the bus when all of a sudden his open source project, Testcontainers, took off, and now has more than a million monthly downloads and developers using it at Netflix, Uber, Spotify, Google and other settings large and small. Doc Searls and Dan Lynch talk with Richard about how he caught the bus he ended up driving, how he set up Testcontainers.org, stood up Atomicjar.com as a running business backed by smart capital, and put learnings to use through a six-year journey that includes a worldwide pandemic that is changing development for everyone.

      • mintcast 369 – Cache Flushing

        1:49 The News 27:48 Security Update 32:18 Bi-Weekly Wanderings 1:01:28 Announcements & Outro

        First up in the news Linux Mint is ready for the facelift, Snaps get an upgrade, Kernel 5.14 is out, and 5.15 is looking good, and Ubuntu gets a release date

        In security cache flushing and Bluetooth flaws

        Then in our Wanderings Joe pines a phone with plasma, Tony walks 500 miles, and I search for a keyboard

      • Steamy PostgreSQL Shower | Coder Radio 430

        We are coming in hot, literally. It's a day of spicy takes.

    • Kernel Space

      • AMD Has An Important Suspend/Resume Fix With Linux 5.15 - Phoronix

        Since last year AMD has been working to get its s2idle / suspend-to-idle S0ix sleep state code in order for supporting this lowest power platform idle state on newer AMD laptops and there has also been other AMD suspend/resume improvements in recent times. Now with the Linux 5.15 kernel cycle is an important fix for the AMD s2idle code.

        Stemming from a user reporting incorrect resume from suspend with an HP ENVY X360, Linux 5.15 has a fix for it and other laptops facing a similar problem. The original issue was resuming from suspend would yield the power LED not working, some keys like brightness controls not working, and the cooling fan not spinning up even under load. Yeah, that's quite a poor Linux laptop experience.

      • Amazon's DAMON Merged Into Linux 5.15 For Data Access Monitoring Framework - Phoronix

        he DAMON kernel functionality developed by Amazon engineers has successfully landed in the Linux 5.15 tree.

        As part of the 147 patches herded into the kernel today by Andrew Morton, the most notable addition is the merging of the DAMON functionality.

      • Linux kernel 5.15: NTFS support gets a significant boost - TechRepublic

        The Linux kernel has included NTFS support for some time. However, up until now, working with NTFS filesystems on Linux has been a bit of a headache. One of the biggest issues with NTFS support in the Linux kernel to date has been fully functioning read/write support. The old captive NTFS driver hasn't been maintained for quite a while, and the NTFS-3G driver from Tuxera is far too slow for acceptable use (especially for enterprise use cases). So, a new driver has been needed for some time.

    • Benchmarks

      • Ubuntu 21.10 Delivering Some Performance Gains On The Intel Core i9 11900K - Phoronix

        For those wondering how the upcoming Ubuntu 21.10 release is looking for Intel "Rocket Lake" owners, here are some Ubuntu 21.04 versus 21.10 development benchmarks across dozens of different tests.

        With last month running some early Ubuntu 21.10 benchmarks on AMD Ryzen 9 5950X, the focus this time around with the latest Ubuntu 21.10 development build as of testing was for any performance changes on the Intel Core i9 11900K front.

    • Applications

      • Apps for daily needs part 5: video editors

        Video editing has become a popular activity. People need video editors for various reasons, such as work, education, or just a hobby. There are also now many platforms for sharing video on the internet. Almost all social media and chat messengers provide features for sharing videos. This article will introduce some of the open source video editors that you can use on Fedora Linux. You may need to install the software mentioned. If you are unfamiliar with how to add software packages in Fedora Linux, see my earlier article Things to do after installing Fedora 34 Workstation. Here is a list of a few apps for daily needs in the video editors category.

      • GStreamer 1.18.5 stable bug fix release

        The GStreamer team is pleased to announce another bug fix release in the stable 1.18 release series of your favourite cross-platform multimedia framework!

        This release only contains bugfixes and important security fixes, and it should be safe to update from 1.18.x.

    • Instructionals/Technical

      • Linux ls Command List and Sort Files by Size

        A directory in a Linux system can hold from a few files to hundreds and thousands of files.

        You may need to sort the files by size, either in ascending or descending order. The reason for sorting files by size may vary. We may want to locate the largest to smallest files or vice versa.

        You can easily sort files using the ls command.

        In this tutorial, we’ll cover the various ways of sorting files by size using the ls command.

        In our examples we’ll sort files in the /var/cache/apt/archives directory.

      • Share files with your client using ProjectSend

        ProjectSend is an open-source self-host file sharing platform for companies, teams and communities.

        It is an ideal solution if you want to share files with your clients. Let's say you are a designer who shares dozens of files with his clients every day, with ProjectSend you can do this effortlessly and without a hassle.

      • Discover your cluster logfiles - A journey into the past. | SUSE Communities

        Log files are very useful when it comes to situations where the root cause of an event has to be investigated. But analyzing logs does not only mean looking for errors in the system. There are also a lot of other informations in most of the log files. The pacemaker log file is a perfect example. Beside warnings and errors it includes also all cluster changes. The trick is to know which keywords you have to search for.

      • Set the order of task execution in Ansible with these two keywords | Enable Sysadmin

        Regular readers of Enable Sysadmin know that most of us are big fans of Ansible. We particularly like using Ansible roles to design reusable code effectively. A playbook follows a specific execution order when it runs, and there are several ways to control the order in which your tasks run. In this article, I'll look at two particularly useful Ansible features, pre_tasks and post_tasks. I'll walk you through some real (and simple) examples of how these features can add additional flexibility to your playbooks by executing tasks at different points during a playbook run.

      • Debug a web page error from the command line | Opensource.com

        Sometimes when managing a website, things can get messed up. You might remove some stale content and replace it with a redirect to other pages. Later, after making other changes, you find some web pages become entirely inaccessible. You might see an error in your browser that "The page isn't redirecting properly" with a suggestion to check your cookies.

      • Try Fusion-360 by installing on Ubuntu 20.04 LTS Linux using Wine

        “Fusion 360” is a CAD / CAM program from Autodesk, which is known for 3D modeling software. Although it is a paid graphic design software, students and schoolchildren can download the professional program for Windows and Mac free of charge. With this professional tool, you can design mechanical components and master a wide variety of tasks in product design. You can render your drafts, create animations, and – thanks to cloud support – helps to work in collaboration.

      • How to install Clone Hero on a Chromebook

        Today we are looking at how to install Clone Hero on a Chromebook. Please follow the video/audio guide as a tutorial where we explain the process step by step and use the commands below.

        If you have any questions, please contact us via a YouTube comment and we would be happy to assist you!

      • How to list all installed packages on OpenSUSE/SUSE Linux - nixCraft

        So you want to see a list of all packages installed on your SUSE Linux or OpenSUSE Linux system? Try these simple tips for listing all packages.

        We can easily search for packages matching any given search text/words under OpenSUSE or SUSE Enterprise Linux using the zypper command.

      • How To Find OpenSuse / SUSE Linux Version Using CLI - nixCraft

        How do I find out my Suse Linux / OpenSuse Linux / Suse Enterprise Linux server/desktop version using the command line options? What is the command to find out OpenSUSE Linux version?

        This page explains how to find SUSE or OpenSUSE Linux version using the cat command and other commands.

    • Desktop Environments/WMs

      • K Desktop Environment/KDE SC/Qt

      • GNOME Desktop/GTK

        • GNOME 41 Release Candidate Arrives With Many Improvements

          Ahead of the official GNOME 41 release later this month, the release candidate is now available to facilitate more testing.

          The GNOME 41 release candidate "41.rc" packages are now available for testing and GNOME developers have also put together a new "GNOME OS" release using these bleeding-edge packages to help in testing and for developers wanting to port extensions and other work around GNOME 41.

        • GNOME 41.RC is now available!

          Hi,

          GNOME 41.rc is now available. Remember this is the end of this development cycle; enjoy it as fast as you can, the final release is scheduled for this coming week!

          The corresponding flatpak runtimes have been published to Flathub. If you'd like to target the GNOME 41 platform, you can test your application against the 41beta branch of the Flathub Beta repository.

          An installer image (built from scratch using freedesktop-sdk 21.08 as a base) is also available for testing and porting extensions:

          https://os.gnome.org/download/41.rc/gnome_os_installer_41.rc.iso

          This is meant to be installed in a virtual machine with EFI support (such as the GNOME Boxes version available on Flathub). You can also try to install it on bare metal but be warned that hardware support is very limited (join #gnome-os channel at irc.gnome.org if you are interested).

          We remind you we are string frozen, no string changes may be made without confirmation from the l10n team (gnome-i18n@) and notification to both the release team and the GNOME Documentation Project (gnome-doc-list@).

          Hard code freeze is also in place, no source code changes can be made without approval from the release-team. Translation and documentation can continue.

          If you want to compile GNOME 41.rc, you can use the official BuildStream project snapshot. Thanks to BuildStream's build sandbox, it should build reliably for you regardless of the dependencies on your host system:

          https://download.gnome.org/teams/releng/41.rc/gnome-41.rc.tar.xz

          The list of updated modules and changes is available here:

          https://download.gnome.org/core/41/41.rc/NEWS

          The source packages are available here:

          https://download.gnome.org/core/41/41.rc/sources/

    • Distributions

      • New Releases

        • Whonix 16 available, an anonymous Linux OS

          The release of the Whonix 16 distribution kit , aimed at providing guaranteed anonymity, security and protection of private information, took place. Whonix boot images are built to run under the control of the KVM hypervisor . Builds for VirtualBox and for use on the Qubes operating system are delayed (while Whonix 16 test builds continue to ship). The developments of the project are distributed under the GPLv3 license.

          The distribution is based on Debian GNU / Linux and uses Tor to ensure anonymity. A feature of Whonix is ​​the division of the distribution into two separately installed components – Whonix-Gateway with an implementation of a network gateway for anonymous communications and Whonix-Workstation with a desktop. Both components ship inside a single boot image. Access to the network from the Whonix-Workstation environment is made only through the Whonix-Gateway, which isolates the work environment from direct interaction with the outside world and allows only fictitious network addresses to be used. This approach protects the user from leaking the real IP address in the event of a hacked web browser or even exploiting a vulnerability that gives an attacker root access to the system.

          [...]

          If desired, the user can use only Whonix-Gateway and connect through it their usual systems, including Windows, which makes it possible to provide anonymous logoff for workstations already in use.

        • Kali Linux 2019.4 Release (Xfce, Gnome, GTK3, Kali-Undercover, Kali-Docs, KeX, PowerShell & Public Packaging)

          We are incredibly excited to announce our fourth and final release of 2019, Kali Linux 2019.4, which is available immediately for download.

          [...]

          There are a ton of updates to go over for this release, but the most in your face item that everyone is going to notice first are the changes to the desktop environment and theme. So let’s cover that first.

      • IBM/Red Hat/Fedora

      • Debian Family

      • Canonical/Ubuntu Family

        • Canonical announces new Anbox Cloud Appliance on AWS Marketplace - TechRepublic

          Canonical, the publisher of the open source Ubuntu operating system, announced Wednesday the availability of the Anbox Cloud Appliance in AWS Marketplace. The appliance allows Android developers to go from prototype to production.

          The Anbox Cloud Appliance is a scaled down version of Canonical's Anbox Cloud, which developers use for rapid prototyping and gives them access to a more extensive set of instance types, including support for Arm CPUs and NVIDIA GPUs than the appliance does.

    • Devices/Embedded

      • Tiny Gemini Lake mini-PC supports Linux

        XDO Tech has Kickstarter’ed a tiny, $149-and-up “Pantera PicoPC” mini-PC that runs Linux or Win 10/11 on a quad-core Gemini Lake CPU and offers up to 8GB LPDDR4, an SSD, 802.11ax/BT, HDMI, 3x USB 3.0, USB 2.0, and Type-C power with an optional battery.

        XDO Tech has gone to Kickstarter to successfully launch a fan-cooled, 69 x 69 x 53mm mini-PC equipped with a Gemini Lake Refresh — Intel’s Atom-class follow-on to Apollo Lake. The Pantera PicoPC starts at $149 for a Super Early Bird model with 4GB LPDDR4 and 64GB eMMC. There is also a $179 Super Early Bird with 8GB RAM and a 256GB M.2 SSD. Other 8GB RAM packages supply 512GB ($212) and 1TB ($250) SSDs. The campaign runs through Oct. 3 and shipments are expected in November.

      • Onyx Boox Note 3 Is A Powerful Android Ebook Reader

        Ebook readers have been on a steady rise in recent years, with people moving away from traditional book reading into the digitalized experience for many reasons: Saving budget & space, getting more comfort while reading for long hours and also unlocking access to better features than the normal reading process (E.g note taking, sharing, highlighting, PDF files access anywhere… etc).

        Amazon’s Kindle is the most famous e-reader by far, however, it is not alone. There have been many new competitors in the market with much better features for avid readers who would like to fully unlock the potential of their ebook reading experience.

        Today we’ll talk about the Onyx Boox Note 3 e-reader, which is powered by Android, as a possible e-reader that you can buy if you are from this niche. Although a bit far from our typical publishing line in FOSS Post, a small change in the mood is never harmful (Let alone that it is powered by Linux, so not that far actually).

      • Open Hardware/Modding

        • Custom Joystick Build Guide Should Point You In The Right Direction | Hackaday

          Over the last two years, [benkster] has been perfecting their ideal flight controller. Like many people, they started out with a keyboard and mouse and eventually moved on to a joystick. While a HOTAS (hands on throttle-and-stick — e.g. a yoke controller with inputs right there on the sides) might have been the next logical step, those things cost too much. Naturally, the answer is to build one, ideally for less money. Hey, it could happen.

        • Arduino Powered Heat Pump Controller Helps Warm Your Toes | Hackaday

          Heat pump heating technology is starting to pop up more and more lately, as the technology becomes cheaper and public awareness and acceptance improves. Touted as a greener residential heating system, they are rapidly gaining popularity, at least in part due to various government green policies and tax breaks.

          [Gonzho] has been busy the last few years working on his own Arduino Powered Open Source heat pump controller, and the project logs show some nice details of what it takes to start experimenting with heat pumps in general, if that’s your game. Or you could use this to give an old system a new lease of life with an Arduino brain transplant.

        • 25-key ESP32 Touch Matrix makes good use of ESP32’s touch sensor interface

          Besides the addition of Bluetooth, there are many differences between ESP8266 and ESP32 and one of the lesser-known interfaces may be ESP32’s touch sensor interface.

          India-based Electro Point’s ESP32 Touch Matrix makes good use of the touch sensor interface with 25 touch pads arranged in a 5×5 matrix creating a wireless keypad that could connect over WiFi or Bluetooth to a host.

      • Mobile Systems/Mobile Applications

        • Pining For A De-Googled Smartphone

          Last summer in the first swings of the global pandemic, sitting at home finally able to tackle some of my electronics projects now that I wasn’t wasting three hours a day commuting to a cubicle farm, I found myself ordering a new smartphone. Not the latest Samsung or Apple offering with their boring, predictable UIs, though. This was the Linux-only PinePhone, which lacks the standard Android interface plastered over an otherwise deeply hidden Linux kernel.

          As a bit of a digital privacy nut, the lack of Google software on this phone seemed intriguing as well, and although there were plenty of warnings that this was a phone still in its development stages it seemed like I might be able to overcome any obstacles and actually use the device for daily use. What followed, though, was a challenging year of poking, prodding, and tinkering before it got to the point where it can finally replace an average Android smartphone and its Google-based spyware with something that suits my privacy-centered requirements, even if I do admittedly have to sacrifice some functionality.

    • Free, Libre, and Open Source Software

      • Web Browsers

        • Mozilla

          • Hacks.Mozilla.Org: Time for a review of Firefox 92

            Release time comes around so quickly! This month we have quite a few CSS updates, along with the new Object.hasOwn() static method for JavaScript.

          • Will Kahn-Greene: Mozilla: 10 years

            It's been a long while since I wrote Mozilla: 1 year review. I hit my 10-year "Moziversary" as an employee on September 6th. I was hired in a "doubling" period of Mozilla, so there are a fair number of people who are hitting 10 year anniversaries right now. It's interesting to see that even though we're all at the same company, we had different journeys here.

            I started out as a Software Engineer or something like that. Then I was promoted to Senior Software Engineer and then Staff Software Engineer. Then last week, I was promoted to Senior Staff Software Engineer. My role at work over time has changed significantly. It was a weird path to get to where I am now, but that's probably a topic for another post.

      • Programming/Development

        • Dirk Eddelbuettel: RcppSimdJson 0.1.6 on CRAN: New Upstream 1.0.0 !!

          The RcppSimdJson team is happy to share that a new version 0.1.6 arrived on CRAN earlier today. Its release coincides with release 1.0.0 of simdjson itself, which is included in this release too!

          RcppSimdJson wraps the fantastic and genuinely impressive simdjson library by Daniel Lemire and collaborators. Via very clever algorithmic engineering to obtain largely branch-free code, coupled with modern C++ and newer compiler instructions, it results in parsing gigabytes of JSON parsed per second which is quite mindboggling. The best-case performance is ‘faster than CPU speed’ as use of parallel SIMD instructions and careful branch avoidance can lead to less than one cpu cycle per byte parsed; see the video of the talk by Daniel Lemire at QCon (also voted best talk).

        • DevRel for Beginners: What to Know and How to Get Started

          Like many DevRel professionals, Ravi Lachhman began his tech career as a software engineer. He embraced an iterative, trial-and-error approach to development. He also found that he learned best by teaching others.

          “On projects, I would always elect to write documentation and convert to Agile, happy to give presentations and sprint demos,” Lachhman told The New Stack.

          That led to solutions architect and sales engineer positions, which eventually opened the door to his first evangelist role three years ago, a common job title in the DevRel field. Today, Lachhman manages a team of DevRels at Harness, a software-delivery platform company. (He’s hiring, by the way.)

        • The Dark Side Of Package Repositories: Ownership Drama And Malware

          At their core, package repositories sound like a dream: with a simple command one gains access to countless pieces of software, libraries and more to make using an operating system or developing software a snap. Yet the rather obvious flip side to this is that someone has to maintain all of these packages, and those who make use of the repository have to put their faith in that whatever their package manager fetches from the repository is what they intended to obtain.

          How ownership of a package in such a repository is managed depends on the specific software repository, with the especially well-known JavaScript repository NPM having suffered regular PR disasters on account of it playing things loose and fast with package ownership. Quite recently an auto-transfer of ownership feature of NPM was quietly taken out back and erased after Andrew Sampson had a run-in with it painfully backfiring.

          In short, who can tell when a package is truly ‘abandoned’, guarantee that a package is free from malware, and how does one begin to provide insurance against a package being pulled and half the internet collapsing along with it?

        • Commercial LTS Qt 5.15.6 Released

          We have released Qt 5.15.6 LTS for commercial license holders today. As a patch release, Qt 5.15.6 does not add any new functionality but provides bug fixes and other improvements.

        • Rust

          • Rustacean Principles

            As the web site says, Rust is a language empowering everyone to build reliable and efficient software. I think it’s precisely this feeling of empowerment that people love about Rust. As wycats put it recently to me, Rust makes it “feel like things are possible that otherwise feel out of reach”. But what exactly makes Rust feel that way? If we can describe it, then we can use that description to help us improve Rust, and to guide us as we design extensions to Rust.

            Besides the language itself, Rust is also an open-source community, one that prides itself on our ability to do collaborative design. But what do we do which makes us able to work well together? If we can describe that, then we can use those descriptions to help ourselves improve, and to instruct new people on how to better work within the community.

          • Ian Jackson: Wanted: Rust sync web framework

            Please recommend me a high-level Rust server-side web framework which is sync and does not plan to move to an async api.

        • Java

          • Build a Random Password Generator in Java

            Today, we will make a random password generator that makes passwords with random numbers and letters!

            In order to do this we are going to use ASCII. ASCII is a language in which every possible character is represented by a number. This standard ensures that computers can communicate to each other about characters properly.

            This is a more challenging project for beginners, but you certainly have the ability to do it as long as you are familiar with Java concepts such as conditionals, loops, functions, and random numbers.

            Watch the tutorial video to see how we code this game step-by-step and continue reading this post for more details.

  • Leftovers

    • Venice prepares to charge tourists, require booking

      From a control room inside the police headquarters in Venice, Big Brother is watching you.

      To combat tourist overcrowding, officials are tracking every person who sets foot in the lagoon city.

      Using 468 CCTV cameras, optical sensors and a mobile phone-tracing system, they can tell residents from visitors, Italians from foreigners, where people are coming from, where they are heading and how fast they are moving.

    • Hardware

    • Health/Nutrition

      • Vietnamese man jailed for 5 years for spreading coronavirus

        Vietnam jailed a man on Monday for five years for breaking strict COVID-19 quarantine rules and spreading the virus to others, state media reported.

        Le Van Tri, 28, was convicted of "spreading dangerous infectious diseases" at a one-day trial at the People's Court of the southern province of Ca Mau, the state-run Vietnam News Agency (VNA) reported.

    • Integrity/Availability

      • Proprietary

        • TrueConf Introduces Linux-Based Video Collaboration Platform

          TrueConf, an award-winning video conferencing developer, announces the official release of TrueConf Server for Linux. This all-in-one UC platform will enable organizations with Linux-based infrastructure to deploy highly secure video conferencing networks using the ecosystem of TrueConf software and hardware solutions.

          The Linux version of TrueConf Server ensures the same security, quality, and feature set as its counterpart for Windows. With this cross-platform software solution, users can run unlimited UltraHD events with up to 1,000 participants at a time, from any location and device.

        • Pseudo-Open Source

          • Openwashing

            • Facebook Opens Up CacheLib As Their New Caching Engine - Phoronix

              Facebook last week formally announced CacheLib as their new open-source caching engine designed for web scale services and to make for effective non-volatile memory caching to offset the increasing costs of DRAM.

            • Not All Of The IBM POWER10 Firmware Is Currently Open-Source

              Power E1080 server as their first in a new family of servers based on the IBM POWER10 processor. Sadly though not all of the POWER10 firmware is open-source.

              While POWER9 was big for open-source fans with the formation of the OpenPOWER Foundation and Raptor Computing Systems designing POWER9-based systems that are fully open-source down to schematics and the motherboard firmware, the same can't be currently said about POWER10.

              Raptor Computing Systems previously hinted that it might not be all rosy for POWER10 when it comes to open-source and at least for the initial rollout, it does appear to be that way.

        • Security

          • HAProxy Found Vulnerable to Critical HTTP Request Smuggling Attack

            A critical security vulnerability has been disclosed in HAProxy, a widely used open-source load balancer and proxy server, that could be abused by an adversary to possibly smuggle HTTP requests, resulting in unauthorized access to sensitive data and execution of arbitrary commands, effectively opening the door to an array of attacks.

          • Vulnerability Could Expose HAProxy to HTTP Request Smuggling Attack | eSecurityPlanet

            A critical vulnerability discovered in the open-source load balancer and proxy server HAProxy could enable bad actors to launch an HTTP Request Smuggling attack, which would let them bypass security controls and gain unauthorized access to sensitive data.

            Researchers with JFrog Security uncovered the vulnerability, CVE-2021-40346, during their regular searches for new and previously unknown vulnerabilities in popular open-source projects. HAProxy fits into that category.

          • Outdated Linux Versions, Misconfigurations Triggering Cloud Attacks: Report [Ed: This is not about Linux but software that runs on it; it's like blaming Photoshop holes on "Windows"]

            The "Linux Threat Report 2021 1H" from Trend Micro found that Linux cloud operating systems are heavily targeted for cyberattacks, with nearly 13 million detections in the first half of this year. As organizations expand their footprint in the cloud, correspondingly, they are exposed to the pervasive threats that exist in the Linux landscape.

            This latest threat report, released Aug. 23, provides an in-depth look at the Linux threat landscape. It discusses several pressing security issues that affect Linux running in the cloud.

          • Security Risks of Relying on a Single Smartphone

            Isracard used a single cell phone to communicate with credit card clients, and receive documents via WhatsApp. An employee stole the phone. He reformatted the SIM, which was oddly the best possible outcome, given the circumstances. Using the data to steal money would have been much worse.

          • ClamAV 0.104.0 introduces LTS program - itsfoss.net

            The developers have announced the project’s blog a new Long Term Support (LTS) program on as part of an update of their End-of-Life (EOL) policy. The LTS program begins retrospectively with the last major version, ClamAV 0.103. The new LTS policy extends the lifespan from 0.103 to September 2023. LTS editions are supported for a minimum of three years.

            Each LTS version is supported with critical patch versions and access to signature updates for the duration of the three-year support period. A new LTS feature release is presented approximately every two years. Non-LTS releases are supported with critical patch versions for at least four months from the original release date of the next feature release or until the release of the next feature release. For detailed information on the Long Term Support Program, see the LTS Announcement blog post and the LTS Policy in the online documentation.

          • Best File and Disk Encryption Tools For Linux

            Most of us are familiar with Microsoft Windows or macOS - these OSes dominate the personal computing space. But the OS that is taking over the world isn’t owned by Microsoft, Apple, or any tech company for that matter. In fact, the most popular OS in the world today isn’t owned by anyone. It’s the completely open-source Linux operating system.

            [...]

            GnuPG, also known as GPG, is a unique hybrid encryption tool that not only employs conventional symmetric-key cryptography but also uses public-key cryptography. This two-prong approach to encryption helps speed up the encryption process without compromising OS security.

            GnuPG is popular among journalists who use the tool to encrypt important documents and protect the identities of their sources.

          • Mozilla Releases Security Updates for Firefox, Firefox ESR, and Thunderbird

            Mozilla has released security updates to address vulnerabilities in Firefox, Firefox ESR, and Thunderbird. An attacker could exploit some of these vulnerabilities to take control of an affected system.

          • Zoho Releases Security Update for ADSelfService Plus | CISA

            Zoho has released a security update on a vulnerability (CVE-2021-40539) affecting ManageEngine ADSelfService Plus builds 6113 and below. CVE-2021-40539 has been detected in exploits in the wild. A remote attacker could exploit this vulnerability to take control of an affected system. ManageEngine ADSelfService Plus is a self-service password management and single sign-on solution for Active Directory and cloud apps. Additionally, CISA strongly urges organizations ensure ADSelfService Plus is not directly accessible from the internet.

          • Privacy/Surveillance

            • This Contact Tracing Has A Major Exploit - Invidious

              I've uncovered a massive exploit in the contact tracing system used in South Australia and so far the SA Health has done absolutely nothing to fix it, I told them I'd publish this if it didn't get fixed so here we go.

    • Civil Rights/Policing

      • U.S. condemns Russia's detention of Crimean Tatar leader, 45 others

        The United States on Sunday strongly condemned what it said was Russia's detention at the weekend of the deputy leader of the main representative body of Crimean Tatars and at least 45 other members of the ethnic group.

        A State Department statement said Nariman Dzhelyalov, deputy chairman of the Crimean Tatars' Mejlis, was detained on Saturday by Russian occupation authorities in Crimea. It said at least 45 other Crimean Tatars had also been detained.

      • Bolsonaro’s Pro-Coup September 7 Rally Is Brazil’s January 6

        With his reelection prospects dimming, Bolsonaro’s supporters are ramping up their version of the pro-Trump rally that led to the Capitol riot.



Recent Techrights' Posts

Gemini Links 25/10/2025: Portugal, Midnightpub, and "Tech Right Admins"
Links for the day
Almost 2026 Already (When We Turn Twenty)
In just over a year the site will turn 20
When "Sponsored Feature" in The Register MS Means Ponzi Scheme Promotion From the Communist Party of China (CPC)
the promotion of a financial scam
Week of EPO Leaks: Workers of the EPO Are Getting a Pay Cut While Prices Rise Fast
More to come in the next few days
Microsoft is Finally Giving Up on XBox, The Chief Says the Grapes Are Sour Anyway
Microsoft loses hundreds of dollars on each XBox that it sells
Slopwatch: LinuxSecurity, UbuntuPIT, and Various Slopfarms Propped up by Google News
Why can't Google News do better than this?
Links 25/10/2025: Two New Smokescreens for Scam Altman and ‘TikTok USA’ Remains in Limbo
Links for the day
Bad faith: can't change Debian Social Contract (DSC) without unanimous consent of every joint author
Reprinted with permission from Daniel Pocock
Confirmed: Very Close Friend of Bill Gates and Microsoft's Biggest Patent Troll Nathan Myhrvold Flew the Lolita Express (a Gateway to Pedophilia), According to Bill Gates-Sponsored Seattle Times
There is no speculation or any "conspiracy theories" here;' those are verified facts
Gemini Links 25/10/2025: "The Highest Leader of The Global Civil Society Community", SSL Certificates Causing Bitrot
Links for the day
Links 25/10/2025: Target Layoffs and "Shutdown Sparks 85% Increase in US Government Cyberattacks"
Links for the day
"Big Data" Was a Big Lie
Remember "Big Data"? Remember "Data Scientists"...?
statCounter Has Been Broken for a Long Time
Considering the huge proportion of Web requests that come from LLM bots (more so this past year or two), statCounter may struggle to justify the operating costs
Techrights Anniversary Party on November 7th
Let us know if you need any accommodation-related arrangements
Trends That Must Alarm Microsoft and Mozilla
Expect Firefox to no longer be supported by various sites in the US
Why Microsoft Became the Layoffs Leader
The corporate media is projecting or signalling its own dishonesty when it tells us that Microsoft is a very "valuable" company while the data shows Microsoft is also a "market leader" in layoffs
Speaking for Ourselves and Letting the Facts Speak for Themselves
we've already published over 50,000 pages
For Second Time in a Day The Register MS Takes Money From Private Companies to Sell a Ponzi Scheme
Do not have empathy for those who have zero empathy towards you
IBM is Misleading IBM Shareholders
IBM is still all about vapourware and buzzwords
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Friday, October 24, 2025
IRC logs for Friday, October 24, 2025
The Serial Slopper Starts Up - or Restarts - His Plagiarism Machine (LLMs)
Serial Sloppers like these don't belong in news sites. That's why he got sacked by BetaNews.
Links 24/10/2025: Esperanto Music History, Anxiety, and New Portals
Links for the day
[Video] Richard Stallman's Talk in Sweden, Attended by Nearly 700 People, is Now Online
The Web page is in Swedish, but the talk is in English
Slopwatch: LinuxSecurity.com, Linux Journal, and Pet Slopfarms of Google News
Why does Google News still advance these fake sites to the top of search results?
Links 24/10/2025: Inequality Grows, Billion-Dollar Scam Center Industry
Links for the day
Links 24/10/2025: "Independent Media in Cambodia is Collapsing" and Serious F5 Breach
Links for the day
Coping With the Site Going More Mainstream
Fame is no laughing matter
They Never 'Put Down' Corporations
There are "pests" that are traded in Wall Street
21 Pages in Less Than 7 Hours is No Joking Matter
We've become a lot more effective and efficient
Correct Information is a Valued Asset in the Age of Slopfarms and Public Relations (PR) or Spin
Publishing suppressed facts is never easy
The Register MS Continues to Bag Money to Promote a Ponzi Scheme, Even Money From China
Today in the front page
analytics.usa.gov: The Only Supported Version of Windows (This Past Week) is Only Used by About 13.9% of People in the US, the Home Base of Windows
Even Vista 7 is still used more
Rust is Very Secure
If only Rust itself is secure
Who Will be Held Accountable for Breaking Ubuntu by Imposing Rust on Otherwise-Functional Programs, in Effect Replacing GNU With Proprietary Microsoft (GitHub)?
they're practical people who merely point out that a bunch of buffoons not only ruin Ubuntu but also every future distro based on Ubuntu
Generation Chaff - Phase VIII: In Summary
Like "Science" with a capital "S", what we see here commercial interests usurping everything
Generation Chaff - Phase VII: Curtailing Alternative Media
There was always an obligation - a collective duty of sorts - to uphold independent journalism
Generation Chaff - Phase VI: Centralisation of Information (X, Cheetok/Fentanylware)
Would you trust information when controlled by such people?
Generation Chaff - Phase V: Censorship of Dissent (Painted as Harassment or Terrorism)
Censorship is all around us now
Generation Chaff - Phase IV: Apps Only Few Companies Decide On
Tools are being collectively confiscated, under the premise or false prospect of "security"
Generation Chaff - Phase III: Slop and Plagiarism
A lot of the current so-called 'economy' is built upon false valuations
Generation Chaff - Phase II: "Cloud", Blockchains and Other Hype
For those of us who turned down those propositions there was a struggle; we needed to justify not having skinnerboxes or "social" accounts in some site run by a private company
Generation Chaff - Phase I: Social Control Media
IRC predates the Web
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Thursday, October 23, 2025
IRC logs for Thursday, October 23, 2025
More Clues Shed on Collapse of Microsoft XBox
XBox is basically circling down the drain as Microsoft implements 2-3 waves of layoffs each month
'Vibe Coding' Doesn't Work
In a lot of ways, so-called 'Vibe Coding' is already considered vapourware or a passing fad promoted in the media by managers who try to justify mass layoffs, especially ridding companies of "very expensive" software engineers
Links 24/10/2025: Microsoft's Killing of XBox Connected to Revenue/Profit Problems, "How Elon Musk Ruined Twitter"
Links for the day
Gemini Links 24/10/2025: 86,400 Seconds and "Society's Task"
Links for the day
Slopwatch: Google News and Slopfarms That Relay Nonsense From LLMs
Google News, which once prioritised or used to care about provenance and quality, is feeding slopfarms
Links 23/10/2025: More Health Concerns Over Dumb Chatbots (LLMs) and "Talking Cars" as Latest Buzz
Links for the day
Gemini Links 23/10/2025: Daylight Savings Time and Duration Shorthand
Links for the day
Links 23/10/2025: LLM 'Hallucinations' (Defects) in Practical Code 'Generation', China Becomes More Economically and Technologically Independent
Links for the day
Why We Support Richard Stallman and You Probably Should Too
It's not about being "Richard Stallman fan", it is about maintaining the right to hold positions (on technology) like his
Linux Foundation Uses LLM Slop to Promote Microsoft in Linux.com (Again), Rendering It a Linux-Hostile Slopfarm
Openwashing with slop by "Linux.com Editorial Staff", which basically seems to be a bot
Some Large German Media Covers Richard Stallman's Talks in Germany Earlier This Week
LLM-based chatbots are just "bullshit generators" (as he has long called them)
Links 23/10/2025: Windows TCO Galore and "The Internet Is Going to Break Again"
Links for the day
Trouble in Red Hat/IBM and a Retreat to Ponzi Economics in Search of Wall Street Market Heist
Would you invest your life savings in this kind of crap?
Who Asked Software in the Public Interest (SPI) for a Refund? ($100,000, Resulting in Losses of $267,201 in 12 Months, Highest-Ever Losses)
The IRS does not reveal who or what's tied to this refund (or the cause/reason)
Social engineering attack: Debian voted to trick you on binary blobs
Reprinted with permission from Daniel Pocock
Techrights Will Always Stand for Women's Rights
We even invest money - personal savings that it - in our principles
Certified Lawyers Should Know Better (Than to Intimidate Us With Man Who Drives on Motorcycle Through a Really Bad Storm Between Distant Cities, Then Collects Photos of Our Home)
Mentioning someone was in prison for bad things isn't a crime, it's a public service
The "AI" (Slop) Bubble is Already Imploding
"ChatGPT Usage Has Peaked and Is Now Declining, New Data Finds"
The So-called "Sexy" Buckets (AI, Quantum) Cannot Save IBM From Reality, Shares Tank
"No matter how much financial hocus-pocus they use to reclassify revenues to land in the "sexy" buckets (AI, Quantum), it still smells old and musty - just like this company."
Paul Krugman is Wrong About the Scope of Mass Layoffs in the United States
A few years ago society was accelerating its journey towards feudalism, boosted by COVID-19
Links 23/10/2025: Proprietary Blunders and CISA's Latest Disclosure of Holes
Links for the day
Gemini Links 23/10/2025: Fast Past (F1), 99.9% Uptime
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Wednesday, October 22, 2025
IRC logs for Wednesday, October 22, 2025