Bonum Certa Men Certa

Links 22/3/2022: CrossOver 21.2 and NVIDIA Developer Kit



  • GNU/Linux

    • Audiocasts/Shows

    • Kernel Space

      • The Register UKNew Linux kernel has improved random-number generation ● The Register

        A significant rewrite of the Linux kernel's random-number generator is underway, ensuring Linux-based cryptography is a bit more secure, particularly in virtual machines, and some software a bit smoother to run.

        As outlined by the author of the changes, Jason A Donenfeld, the newly released kernel 5.17 contains the first stage of the big rewrite, but more will follow in 5.18. Among other changes, the /dev/random and /dev/urandom devices now do exactly the same. This brings the Linux kernel in line with FreeBSD and macOS.

        The code is contained in a module called random.c, originally written by Ted T'so for kernel 1.3 in 1994. It implements a Unix-style special character device called /dev/random which gives a stream of pseudorandom data. Building this into the kernel was a big deal, and the /dev/random device was adopted into DEC/Compaq Tru64, FreeBSD, HP-UX, IBM AIX, NetBSD, macOS, SGI IRIX, and Sun Solaris. This might make it one of the single most widely influential new features from Linux onto the broader Unix world.

        Generating truly random numbers in pure software is non-trivial. If you run the same code repeatedly with the same inputs, it should produce the same results. Thus if you write a program to output random numbers, it'll produce a predictable, pseudorandom stream of values. If you can predict the output, you can figure out how software using it is going to work and, for instance, break encryption based on it. Researchers managed this for Windows 2000, for instance.

    • Applications

    • Instructionals/Technical

      • How To Install Proxmox VE On Debian 11 Bullseye In Intel NUC

        A few days ago, we discussed how to install Proxmox VE standalone edition. Today, we will see how to install Proxmox VE on Debian 11 bullseye in an Intel NUC mini PC and access Proxmox web dashboard. In addition, we will also discuss how to create a network bridge and how to setup Wireless network card as a bridge.

      • HowTo ForgeHow to Install Adminer MySQL Database Management Tool on Alma Linux 8 - LinuxBuz

        Adminer is a full-featured database management tool written in PHP used for managing several databases including, MySQL, MariaDB, PostgreSQL, SQLite, MS SQL, Oracle, Elasticsearch, MongoDB, and more.

      • How to set up a VPN on Linux – ThisHosting.Rocks

        In this tutorial, we’re going to show you how to set up a VPN on Linux and why you’d need one.

        From our previous articles, you already know what a VPN is, if it’s necessary on Linux, and even how to set up OpenVPN on Ubuntu. In this article, we’re going to show you how to set up a VPN on Ubuntu from a specific VPN provider with their own VPN client, not setting up OpenVPN yourself.

      • H2S MediaHow to install Backdrop CMS on Ubuntu 22.04 Jammy - Linux Shout

        Here we learn the commands to install Backdrop CMS on Ubuntu 22.04 LTS Jammy JellyFish using the terminal.

        Backdrop CMS is a lightweight, feature-rich, and very user-friendly content management system. Designed specifically for small businesses, organizations, and educational institutions, the Drupal fork positions itself as an alternative between WordPress and Drupal. It is a system that already has the most important functions and is extremely easy to use. At the same time, Backdrop CMS offers enough reserves for tailor-made requests and more ambitious development projects.

      • How to Restrict Internet Access to a Single Program on Arch Linux with Firejail - Fasterland

        Sometimes, we may need to restrict the internet access to a single application both for security reasons or testing purposes.

        On Linux, there are different ways to restrict the internet access to a single program. Unfortunately, most of them, are not straightforward at all.

      • How to Restore Corrupt SQL Server Database on Linux? - LinuxTechLab [Ed: Better yet, replace it with a good database which is actually Free software]

        Do you want to recover a damaged/corrupted SQL Server database on Linux? This article explains in detail how to restore a corrupt SQL database on Linux from the backup and by using a professional SQL recovery tool.

      • OSNoteHow to Install and Use Podman on Rocky Linux 8 – OSNote

        Podman is a free and open-source daemonless container engine that was developed by RedHat. It exists to help developers manage and deploy their applications in a Linux environment. Similar to the Kubernetes platform, Podman works with pods. Podman seeks to be the alternative to the Docker engine which is also a containerization platform. Podman improves on Docker by decentralizing the components needed for container management. Podman has a few distinguishing differences, the main one being its architecture. It runs on a daemonless architecture.

    • Wine or Emulation

      • Announcing CrossOver 21.2.0

        I’m thrilled to announce that we have released CrossOver 21.2 for macOS, Linux and Chrome OS!

        This new release offers both improvements from upstream Wine and important fixes for a variety of issues.

        CrossOver 21.2 includes over 300 updates to wined3d from upstream Wine. We also included dozens of changes from Wine 6.0.1 and 6.0.2 and updated to Wine Mono 7.0.

        Audio now works on both Mac and Linux for Halo: Master Chief Collection. We also fixed an issue with a recent Steam update that was causing some connections to take a very long time.

        On macOS, we fixed a long-standing issue with mouse control in Unity games. We also included fixes for the latest Rockstar Games Launcher and Quicken updates that caused those applications to stop working on M1 machines.

        For our Linux and Chrome OS users, we fixed rendering issues on Office 365. We also made changes so that CrossOver once again seamlessly installs on Chrome OS, and we added a fix for libldap dependency errors on certain Linux distros (including Ubuntu 21.10).

    • Games

    • Distributions

      • Barry KaulerEasyOS: Enchant spell checking fixed

        Forum member 'proebler' reported that when the geany text editor extra-plugins package is installed (via the package manager), the spell-checking plugin does not work.

      • IBM/Red Hat/Fedora

        • OpenSource.comGet started with reactive programming with Kotlin on Quarkus | Opensource.com

          Moving to the cloud with event-driven architecture raises big concerns for enterprises using multiple programming languages such as Java, C#, JavaScript, Scala, and Groovy to implement business requirements. Because enterprises need to redesign multiple architectures for container deployment separately and put more effort into optimizing production on the cloud, developers often must learn a new programming language in line with the production environment. For example, Java developers have to switch their skill sets to Node.Js to develop lightweight event-front applications.

          Kotlin addresses these issues and targets various developers who deploy business applications with multiple programming languages on top of Java Virtual Machine (JVM). Kotlin handles these issues with both imperative and reactive approaches. However, there's still a hustle to catch up on Kotlin's new syntax and APIs, especially for Java developers. Luckily, the Quarkus Kotlin extension makes it easier for developers to implement Kotlin applications.

        • Red Hat Official8 steps for estimating a cloud application's resource requirements | Enable Sysadmin

          Learn how to calculate a cloud application's resource needs correctly, in order to minimize common operational issues in production.

        • Enterprisers ProjectAutomation and digital transformation: 3 ways they go together

          Automation and digital transformation (DX) have become one of IT’s dynamic duos: Where you see or hear one, the other seems sure to follow.

          They’re certainly linked by their priority and popularity in IT and business circles. Automation and DX have been atop the strategic roadmaps of CIOs and other leaders for years now. Digital transformation has become an industry unto itself, and few CIOs have “automate less” highlighted on their strategic roadmap.

          But do they always go hand-in-hand? What’s the actual relationship between IT automation and DX? Answers to questions like this require more context and nuance.

        • FedoraCollecting ideas for "Feature Spotlight" articles – Fedora Community Blog

          How do we – as in, the developers and package maintainers who are working on Fedora Linux – make sure people actually know about all the cool stuff we’re doing? That’s the question at the heart of previous discussions on the “devel” mailing list (How do we announce new packages?) and on discourse (Idea for collecting “Cool New Features / Cool New Packages” article ideas).

          As it turns out, the answer to that question is: “If what you’ve worked on isn’t big or noteworthy enough, then there’s no place for you”. That’s not good, and it’s why I started working on “Feature Spotlight”.

        • Enterprisers ProjectDigital transformation: 5 layers to build on

          Digital transformation is defined as “the integration of digital technology into all areas of a business, fundamentally changing how you operate and deliver value to customers.” That’s why every company’s digital transformation journey looks different. Ultimately, it is a paradigm shift in how you do business.

        • Red HatWrite Kubernetes in Java with the Java Operator SDK, Part 2 | Red Hat Developer

          Java Operator SDK, or JOSDK, is an open source project that aims to simplify the task of creating Kubernetes Operators using Java. The project was started by Container Solutions, and Red Hat is now a major contributor.

          Part 1 in this series introduced JOSDK and explained why it could be interesting to create Operators in Java. In this article and its sequels, you will take a deeper look at JOSDK's concepts and learn how it simplifies Operator development. Along the way, you'll build a simple example using JOSDK and its quarkus-operator-sdk extension for Quarkus, a Kubernetes-native Java stack.

        • Software Freedom Institute: Red Hat, Inc vs Software Freedom Institute SA: Fedora open source trademark precedent

          Red Hat, Inc, a subsidiary of IBM, attempted to sue the Institute for using the domain name WeMakeFedora.org

          The Institute argued that the doctrine of fair use applies when volunteers collaborate on an open source software product like Fedora.

      • Debian Family

        • Linux Mint Debian Edition 5 Available to Download: discover all its news - LinuxStoney

          Linux Mint Debian Edition 5 Available to Download: discover all its news, There are many Linux distributions that we can use right now to be part of our PC. Among the wide variety that we can download and install, one of the most popular is Linux Mint .

          Here we find a distro capable of meeting the needs of all types of users, both new and more advanced. We are telling you all this because the new version of the operating system has just been released, specifically we are referring to Linux Mint Debian Edition 5 , which is now available. It is worth mentioning that this is something that happens after several months of testing by its developers.

          For those of you who don’t know, we will tell you that this system is based on Ubuntu by default. Considering that the last update of this software dates back to January of this year, the team released Linux Mint 20.3 in the same month. This release was accompanied by the Cinnamon, MATE, and Xfce desktops , all based on the Linux 5.4 kernel. But as we have mentioned, in these lines we are going to focus on Linux Mint Debian Edition.

          One of the goals of this distro is to ensure that it remains available if something happens to Ubuntu. Sure, that seems unlikely, though the team behind this proposal wants to be prepared for all eventualities. At the same time Linux Mint Debian Edition becomes an interesting alternative.

        • In Linux, they are basic, but do you know what DEB files are? [Ed: This is nonsense and false

          The name “DEB” comes from shortening the name of the first distro that introduced and started using them: Debian. These packages are basically the .EXE of Debian-based Linux distributions , such as Debian itself, Ubuntu or Linux Mint, among others. Thus, these are storage files (or packages) that contain all the files to be able to install a program in the distro, in addition to the scripts necessary to carry out this installation and configuration of the program in question.

        • Norbert PreiningPackages for Debian: KDE/Plasma, RSSguard, et al | There and back again

          As mentioned in this post, most of my activity around Debian has come to a complete halt (Send your thanks to da-manager@debian.org!). Since I still have a few computers running Debian, I keep maintaining a few things which I heavily rely on, in particular KDE/Plasma and RSSguard.

          For KDE/Plasma, there are the well known OBS repos I maintain, please read the blog posts tagged KDE.

      • Canonical/Ubuntu Family

        • UbuntuDesign and Web team summary – 25 February 2022 | Ubuntu

          The Web and design team at Canonical run two-week iterations building and maintaining all of the Canonical websites and product web interfaces. Here are some of the highlights of our completed work from this iteration.

    • Devices/Embedded

      • Linux GizmosJetson edge AI box offers four PoE ports with a choice of Onvif or GigE camera support

        Adlink unveiled an “EOS-JNX Series” of Jetson Xavier NX based edge AI vision systems with 4x PoE ports. The EOS-JNX-I has 10/100Mbps PoE ports that support Onvif surveillance cams plus a 1Gb NVR uplink; the EOS-JNX-G has GbE PoE ports with GigE camera support.

        Last September when Adlink announced its Edge Vision Analytics (EVA) SDK for systems including its Nvidia Jetson Xavier NX powered NEON-2000-JNX embedded camera, the company mentioned that an upcoming EOS-JNX line of computers would support the AI stack. Adlink has now announced the Xavier NX based EOS-JNX Series of computers with EVA support. In somewhat related news, Adlink announced a partnership with ANSCENTER to integrate its ANSCENTER ANS Video Intelligence System (ANSVIS) software with Adlink’s NEON cameras.

      • CNX SoftwareNVIDIA launches Jetson AGX Orin Developer Kit, Orin NX modules, and Isaac Nova Orin AMR platform - CNX Software

        NVIDIA Jetson AGX Orin module was first introduced in November 2011, but the company has now officially launched the Jetson AGX Orin Developer Kit, andunveiled the lower cost Orin NX modules still with 70 TOPS or more, and the Isaac Nova Orin AMR (autonomous mobile robot) reference platform.

      • Open Hardware/Modding

        • CNX SoftwareQuadric devkit features q16 hybrid AI, DSP, computer vision accelerator - CNX Software

          The Quadric devkit is an M.2 Key M module equipped with the company’s q16 edge processor offering a hybrid data-flow + Von Neumann machine for not only neural networks, but also computer vision, digital signal processing, BLAS (Basic Linear Algebra Subprograms), and other workloads.

          This architecture allows the Quadric q16 to be more flexible than traditional AI accelerators and can deliver more effective solutions for heterogonous systems that may have multiple accelerators or require a powerful processor. The M.2 form factor enables easy integration into boards with an M.2 Key M socket such as the Gumstix Raspberry Pi 4 development board shown below with the Quadric devkit.

      • Mobile Systems/Mobile Applications

        • Murena & /e/OS — a product roadmap for 2022: towards our V1? - Gaël Duval (blog, mandrake, /e/ my data is my data...)

          It’s interesting to have a look back at our past year roadmap: most of the features we announced are either done or close to be completed, which is not too bad! The two things that shew very little progress are the Smart Assistant project, and the energy efficiency project.

          For others items, we have started to introduce better compatibility with Android applications (SafetyNet support), first for the stable devices, and later, progressively, for as many supported smartphones as possible…

          We will also soon be offering a much larger and transparent access to mobile applications, with our new application installer called “App Lounge”. On this aspect, even if we didn’t have a single case of tampered application during the past three years, we’re progressively abandoning our dependency to the “CleanAPK” service. CleanAPK is still going to be used momentarily for the catalog of apps coming from F-Droid and Progressive Web Apps, but will be totally abandonned this year.

    • Free, Libre, and Open Source Software

      • LWNThe Open Source Initiative elects a new board

        The Open Source Initiative has announced the results of its 2022 board election.

      • Daniel StenbergA headers API for libcurl | daniel.haxx.se

        For many years we’ve had this outstanding idea to add a new API to libcurl that would offer applications easy access to HTTP response headers.

        Applications could already retrieve the headers using existing methods but that requires them to write a callback and to a certain amount of parsing and “understanding” HTTP that we always felt was a little unfortunate, a bit error-prone on the behalf of the applications and perhaps also a thing that forced a lot of applications out there having to write the same kind of extra function logic.

        If libcurl provides this functionality, it would remove a lot of (duplicated) code from a lot of applications.

      • Peter Czanik: The system() source of syslog-ng now also works on MacOS
      • The syslog-ng insider 2022-03: syslog-ng 4; MQTT source; Zinc; Elastic Cloud; 3.36; - Blog - syslog-ng Community - syslog-ng Community

        This is the 99th issue of syslog-ng Insider, a monthly newsletter that brings you syslog-ng-related news.

      • Open Source InitiativeComcast: Why we support the OSI

        Comcast is a global media and technology company that operates as three primary businesses: Comcast Cable in the U.S., Sky in Europe, and NBCUniversal globally. In addition, Comcast also provides communications services, including residential high-speed internet, phone, and wireless services.

      • FSFE

        • FSFESFP#14: The world of mesh networking with Elektra Wagenrad

          With this episode the Software Freedom Podcast opens the door to the fascinating and sometimes complex world of mesh networking. And who better than Elektra Wagenrad can take us on this journey? Elektra is one of the original developers of the B.A.T.M.A.N. protocol and the person behind the Mesh Potato project.

      • FSF

        • GNU Projects

          • GNUGNU Linux-libre 5.17-gnu
            GNU Linux-libre 5.17-gnu cleaning-up scripts, cleaned-up sources, and
            cleaning-up logs (including tarball signatures) are now available from
            our git-based release archive git://linux-libre.fsfla.org/releases.git/
            tags {scripts,sources,logs}/v5.17-gnu.
            
            

            Compressed tarballs and incremental patches are also available at <https://www.fsfla.org/selibre/linux-libre/download/releases/5.17-gnu/>.

            Freesh and RPMFreedom, the .deb and .rpm distributions of GNU Linux-libre maintained by Jason Self, already have binaries of 5.17-gnu. Thanks, Jason!

            We had hoped for a release during FSF's amazing LibrePlanet conference, but alas, that was not meant to be. Cleaning up scripts have required changes for the final release, compared with -rc8, and that delayed the release quite significantly.

            This release required updates to cleaning up logic for tegra, bnx2x, mt7915, btmtk, mscc, and new logic for dts files for various new aarch64 SoCs, and for a new driver for x86 android tablets.

            In other news, Jason Self has started sharing the work of preparing and verifying the multiple upstream stable releases we clean up and put out every week. Please join me in thanking him for adjusting our bus factor in a desirable way! There are likely to be upcoming changes in details about signatures as we streamline this new mode of cooperation.

            You may also enjoy the beautiful artwork with our mascot, Freedo, that he's made and published at https://jxself.org/git/?p=freedo.git;a=tree

            For up-to-the-minute news, join us on IRC (#gnu-linux-libre on libera.chat), or follow me on P2P or federated social media (the link in my signature has directions).

            Be Free! with GNU Linux-libre.

            What is GNU Linux-libre? ------------------------

            GNU Linux-libre is a Free version of the kernel Linux (see below), suitable for use with the GNU Operating System in 100% Free GNU/Linux-libre System Distributions. http://www.gnu.org/distros/

            It removes non-Free components from Linux, that are disguised as source code or distributed in separate files. It also disables run-time requests for non-Free components, shipped separately or as part of Linux, and documentation pointing to them, so as to avoid (Free-)baiting users into the trap of non-Free Software. http://www.fsfla.org/anuncio/2010-11-Linux-2.6.36-libre-debait

            Linux-libre started within the gNewSense GNU/Linux distribution. It was later adopted by Jeff Moe, who coined its name, and in 2008 it became a project maintained by FSF Latin America. In 2012, it became part of the GNU Project.

            The GNU Linux-libre project takes a minimal-changes approach to cleaning up Linux, making no effort to substitute components that need to be removed with functionally equivalent Free ones. Nevertheless, we encourage and support efforts towards doing so. http://libreplanet.org/wiki/LinuxLibre:Devices_that_require_non-free_firmware

            Our mascot is Freedo, a light-blue penguin that has just come out of the shower. Although we like penguins, GNU is a much greater contribution to the entire system, so its mascot deserves more promotion. See our web page for their images. http://linux-libre.fsfla.org/

            If you are the author of an awesome program and want to join us in writing Free (libre) Software, please consider making it an official GNU program and become a GNU Maintainer. You can find instructions on how to do so at https://www.gnu.org/help/evaluation. We look forward to hacking with you! :)

            What is Linux? --------------

            Linux is a clone of the Unix kernel [...]

            (snipped from Documentation/admin-guide/README.rst)
          • GNU Linux-Libre 5.17 Kernel Released
      • Programming/Development

        • Linux HintScala Abstract Class

          We have to create classes in programming in any language. Classes have methods and have values defined in them. In real life, we want to hide some information in a class or don’t want to show unnecessary details of the class. Just putting forward the subject that we have created for users. In Scala, there is a way out of hiding details of implementation through creating an Abstract class and showing only the functionality we want to display. We will learn the concept of creating an Abstract class in Scala in this article. Scala’s Abstract class and Java’s Abstract class are quite similar. Let’s have some more information about the Scala Abstract class.

        • Linux HintScala Collections

          A collection in Scala in particular or in any other programming language, in general, is simply a container that can hold the data. However, as far as the Scala programming language is concerned, then it supports multiple different collections. Therefore, today’s article will be dedicated to the collections in the Scala programming language in Ubuntu 20.04.

        • Linux HintScala Hello World

          Whichever programming language you are comfortable with, you must be familiar with a Hello World program in it. This program is generally the first program that you will ever create in any programming language. With this basic program, you try to understand the syntax of the programming language that you wish to learn. In this guide, we will learn to write a Hello World program in the Scala programming language in Ubuntu 20.04.

        • Linux HintHow to Use Strings in Rust

          A string is defined as a sequence of Unicode characters that are encoded into the UTF-8-byte stream. Strings are a fundamental concept in any programming knowledge as they are a source of great trouble or great productivity.

          This article will explore how to work with strings in the Rust programming language and determine what makes strings in Rust different.

  • Leftovers

    • Hardware

      • CubicleNateWireless Network Bridge Solution

        Wireless bridging is not a real common residential application, at least, not that one that I would think to be common. When you are in a situation where a wireless bridge is necessary, this is a solution I can highly recommend. I am glad I went with the long distance model as it seems to do well even when obstacles re put its way. I think the money spent on the wireless bridge was the better solution to burred wire.

    • Integrity/Availability

      • Proprietary

        • Help Net SecurityLapsus$ Gang Says it Has Breached Okta and Microsoft

          After breaching NVIDIA and Samsung and stealing and leaking those companies’ propertary data, the Lapsus$ cyber extortion gang has announced that they have popped Microsoft and Okta.

          [...]

          If Lapsus$’s assertions prove to be true, this (previously) relatively unknown hacking group has quickly become another threat actor that big corporations have to worry about.

        • MIT Technology ReviewActivists are targeting Russians with open-source "protestware" | MIT Technology Review [Ed: MIT Technology Review is blaming "open source" for Microsoft shipping malware]
        • LWNActivists are targeting Russians with open-source "protestware" (Technology Review) [Ed: MIT Technology Review basically blames the victims of Microsoft for what Microsoft is doing; see comments]

          MIT Technology Review has taken a brief look at open-source projects that have added changes protesting the war in Ukraine and drawn some questionable conclusions...

        • ZDNetCorrupted open-source software enters the Russian battlefield [Ed: Steven Vaughan-Nichols now helps Microsoft by spinning Microsoft shipping malware as an "open source" issue]

          It started as an innocent protest. Npm, JavaScript's package manager maintainer RIAEvangelist, Brandon Nozaki Miller, wrote and published an open-code npm source-code package called peacenotwar. It did little except add a protest message against Russia's invasion of Ukraine. But then, it took a darker turn: It began destroying computers' file systems.

        • USCERTDelta Electronics DIAEnergie [Ed: Microsoft SQL 'Server']
        • CISADelta Electronics DIAEnergie (Update B) [Ed: Microsoft SQL 'Server']
        • Security

          • USCERTFBI and FinCEN Release Advisory on AvosLocker Ransomware [Ed: AvosLocker is a ransomware group that was identified in 2021, specifically targeting Windows machines; FBI and CISA do not even name Microsoft or Windows, as usual. Microsoft cannot defend Windows (too many back doors and defects), so the best it can do it pay the media to stay quiet, change the topic, or blame the wrong parties.]

            The Federal Bureau of Investigation (FBI) and the Department of the Treasury’s Financial Crimes Enforcement Network (FinCEN) have released a joint Cybersecurity Advisory identifying indicators of compromise associated with AvosLocker ransomware. AvosLocker is a ransomware-as-a-service affiliate-based group that has targeted victims across multiple critical infrastructure sectors in the United States including, but not limited to, the Financial Services, Critical Manufacturing, and Government Facilities sectors.

          • LWNSecurity updates for Tuesday [LWN.net]

            Security updates have been issued by Debian (apache2 and thunderbird), Fedora (abcm2ps, containerd, dotnet6.0, expat, ghc-cmark-gfm, moodle, openssl, and zabbix), Mageia (389-ds-base, apache, bind, chromium-browser-stable, nodejs-tar, python-django/python-asgiref, and stunnel), openSUSE (icingaweb2, lapack, SUSE:SLE-15-SP4:Update (security), and thunderbird), Oracle (openssl), Slackware (bind), SUSE (apache2, bind, glibc, kernel-firmware, lapack, net-snmp, and thunderbird), and Ubuntu (binutils, linux, linux-aws, linux-aws-5.13, linux-gcp, linux-hwe-5.13, linux-kvm, linux-raspi, linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-gke, linux-gkeop, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, and linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-dell300x, linux-hwe, linux-gcp-4.15, linux-kvm, linux-oracle, linux-snapdragon).

          • CISADrupal Releases Security Updates | CISA

            Drupal has released security updates to address a vulnerability affecting Drupal 9.2 and 9.3. An attacker could exploit this vulnerability to take control of an affected system.

          • Market ScreenerQualys : Implications of Windows Subsystem for Linux for Adversaries & Defenders (Part 1) [Ed: WSL is an attack on Linux, it's Windows in disguise, and firms should quit using Microsoft's attack on Linux as a pretext for bashing the security of GNU/Linux]
          • SBOMs Supporting Safety Critical Software [Ed: This isn't the solution, this is the LF acting as a marketing proxy for sponsors]
    • Defence/Aggression

      • Here’s why Putin won’t use nukes in Ukraine — Pass it on. | I, Cringely

        President Putin of Russia has been talking a lot lately about his forces using nuclear weapons — presumably tactical nuclear weapons — in the war with Ukraine. It’s an easy threat to make but a difficult one to follow-through for reasons I’ll explain here in some detail. I’m not saying Mr Putin won’t order nuclear strikes. He might. Dictators do such things from time to time. But if Mr Putin does push that button, I’d estimate there is perhaps a 20- percent chance that nukes will be actually launched and a 100 percent chance that Mr. Putin will end that day with a bullet in his brain.

        Given that I don’t think Mr. Putin really wants a bullet in his brain, my goal here is to lay out facts and probabilities to show how nuking Ukraine would be a huge mistake for Putin and Russia. With the facts thus presented and presumably repeated by many people in many venues, that information will quickly reach everyone in positions to make such a nuclear war NOT happen. But without essays like this one, that education and intervention is much less likely. So I am writing this as a public service. Pass it on.

        What do I know? I worked as an investigator for the Presidential Commission on the Accident at Three Mile Island in 1979. Part of my portfolio then was to study the Federal Emergency Management Agency’s response to that nuclear accident, which was pathetic.

        TMI was FEMA’s first big crisis as FEMA. Most of the agency had been called Civil Defense until a short time before TMI. Their idea of nuclear safety (remember the Nuclear Regulatory Commission, not FEMA, actually regulates the reactors) had been tracking clouds of predicted fallout from Russian nuclear attacks driven by prevailing winds and coming up with plans to move civilians out of the way of those clouds. In the northeast USA around Three Mile Island, the old Civil Defense plans called for moving 75 million people in 72 hours — an impossible task, then or now.

    • Censorship/Free Speech

      • WiredWhy WhatsApp Survived Russia’s Social Media Purge

        It has become easier to be labeled an extremist in Russia. On Monday the label—once reserved for the likes of the Taliban and the Islamic State—was given to Facebook’s parent company, Meta.

        A Moscow court ruled that Meta was an extremist organization in a decision that effectively banned social media platforms Facebook and Instagram from operating in Russia. But the court ruling included an interesting carve-out: WhatsApp. Both of the other platforms had been blocked earlier in March after clashing with the Kremlin over content referencing the war in Ukraine. But the ruling purposefully allowed the company’s messenger platform WhatsApp to continue operating in the country. “The decision does not apply to the activities of Meta's messenger WhatsApp, due to its lack of functionality for the public dissemination of information,” the court said, according to Reuters.

      • AccessNowUpdate: internet access, censorship, and the Myanmar coup

        Access Now, outraged by today’s announcement that the Myanmar Investment Commission has approved the sale of Telenor Myanmar, is calling for international actors to implement sanctions and stop the company’s irresponsible disposal of its Myanmar operations to a company whose 80% majority shareholder is military-linked Shwe Byain Phyu Group.

        Telenor stated that its sanctions screening “assured” them that Shwe Byain Phyu and its owners were not subject to any current international sanctions. However, they are linked to multiple individuals and companies currently subject to U.S., European Union, and UK sanctions.

        “The purchaser, Shwe Byain Phyu, may not be sanctioned now — but it needs to be. International actors must recognize and take action against the company’s multiple and flagrant links to the military,” said Wai Phyo Myint, Asia Pacific Policy Analyst at Access Now.

    • Internet Policy/Net Neutrality



Recent Techrights' Posts

American Back Doors No Longer Trusted by Europeans
Has the EU paid attention, for a change?
When Energy Prices Double in About a Month the Slop Bros Won't Sleep at Night
Unhinged leadership does not seem eager to end a conflict that it started
Newer is Not Better, Lunar Edition
Maybe in 57 years (2083, after all these wars) we'll managed to launch a capsule with a human and a dog above the stratosphere again
 
Harassment by Microsoft, Then a Cover-up
That Microsoft relies on blackmail, bribes and harassment (even against its own people) isn't surprising given the roots of the company and its toxic, deceitful management
SLAPP Censorship - Part 37 Out of 200: The Correct Suspicion Garrett and Graveley Were Collaborating in Overseas Litigation Against Critics
Microsofters and back doors' boosters from America frivolously sue Brits
Microsoft Has Lost Nearly 20% in "Desktop Operating System Market Share" Since COVID-19 Began
Add Android and iOS, then Windows falls to 24%
Maintenance Later This Month
Apr 24, 2026 21:00 - Apr 25, 2026 09:00 BST
Microsoft: Move Over, XBox, Slop is the New "Entertainment" and We Demote Our "Entertainment" CEO
Marketers, marketers, marketers, as a CEO called Ballmer put it
linuxbuz.com is a Slopfarm, It Depends on LLMs
In the more distant past it could be said that linuxbuz.com was an OK site
Links 07/04/2026: Patent Trolls Leigh M. Rothschild, Bolstered by GNOME and OIN, Continues to Attack; ‘Retaliatory Antitrust Suit’ by MElon
Links for the day
Gemini Links 07/04/2026: Copyleft Revisited, Killing Linux Processes With FZF
Links for the day
It Would be Good for Debian to Have a Female DPL, But...
Debian isn't exactly selecting people for quality or policing bad behaviour
IBM Insiders Say What's Wrong With IBM in Albany (and Yes, There Are Layoffs)
promotions boil down to what insiders now call "brown-nosing" and nepotism
After Killing OpenSource.org IBM Together With OSI Told Us It Would Carry on OpenSource.net, But the Site Has Been Essentially Dead for 9 Months (Effectively Abandoned)
OpenSource.org has been dormant for 4 weeks already and OpenSource.net last had a new page 9 months ago (it'll be 9 months tomorrow) [...] That's IBM in a nutshell
A Lot of What Happened to OSI is Because of Reporting by Techrights
Half a year since Stefano Maffuli (Executive Director) "left"
Public Presentations by RMS Hardly Interrupted Anymore
We'll carry on covering those sorts of topics throughout the year
Links 07/04/2026: US Wants to Put Journalists in Prison for Reporting Facts, Artist ‘Bale’ Arrested Over Rape Allegation in Social Control Media
Links for the day
To IBMers, IBM Has Failed and is Fast Becoming a Book of Jokes and One-Word Punchlines
How else can one make it obvious that IBM is circling down the drain?
"AI Revolution" Was a Lie: Microsoft CEO Admits What He Calls "AI" is Sometimes Sloppy and Microsoft Admits That Slop is for "Entertainment Purposes Only" (Not for Any Serious Work)
if it gets "memory-holed", we can bring it up again and again
Social Control Media is Not a Viable Business Model
The future of the Web might not be the Web
From Datacentres Boom to Actual Booms That Target Datacentres, Now Struggling to Justify Humongous Energy and Water Consumption
Datacentres that are used for mindless "entertainment" (as Microsoft calls it) like slop are not a priority at this time
Gemini Links 07/04/2026: Aircraft Lift Force, Editor History, and Consumer Hardware Stagnation
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Monday, April 06, 2026
IRC logs for Monday, April 06, 2026
What Matters is Software Freedom, Not the Brands
The important thing is to speak about Software Freedom
Wikileaks is About to Turn 20
~2 days ago it turned 19.5
The Cloud of Smoke
Will 2026 be the year that "The Cloud" openly confesses the risks it brings about?
SLAPP Censorship - Part 36 Out of 200: Claim KB-2024-003529 in a Nutshell (Microsoft Employee Does Terrible Things, Then Sues the Reporter in Another Continent)
It commences with more of an overview
Gemini Links 06/04/2026: Solar Panel Story and Centralisation
Links for the day
"Free Speech, Free Press": What the World Needs to Improve
Darkness breeds corruption
IBM prioritises a "lot of smoke and hype and use of trending buzzwords"
IBM can pretend all it wants things are fine
GAFAM Paying the Price for Pursuing US Military Money (Taxpayers' Money as 'Stimulus' With Strings Attached)
The "cloud" in cloud computing is a cloud of smoke
Observing Slop's Demise
If energy becomes more scarce, then one rare/side perk (or upside) will be slop companies screaming for lifeboats
Links 06/04/2026: Crackers Breached the European Commission, Why "Old Way of Campaigning Won’t Cut It Anymore"
Links for the day
Enron Versus NVIDIA (the Cost of Circular Financing, or Funding Your Own Customers to Buy Your Products) - “The Inventory Paradox” or “The Vibe Revenue Admission”
Round-tripping (finance)
You Know "The Economy" is Fake When 6 Months After Oracle Says Debt-Saddled 'Open' 'AI' (Slop) Will Pay It $300,000,000,000 Oracle Says It Must Lay Off 30,000 Workers at 6AM
Oracle is in deep debt, which increased at a pace of almost 4 billion dollars per month lately
Free Software Will Outlive GAFAM
GAFAM is overhyped
Techrights Was Further Decentralised Three Years Ago
In 2020 we began working on IPFS stuff
The Military Attacks on Dubai Internet City as Reminder That GAFAM Isn't Safe (Disregard the "Nobody Gets Fired for Buying GAFAM" Mindset)
These are all realistic and foreseeable scenarios that GAFAM sceptics have long warned about
The Wars Aren't Ending, Now We See GAFAM Facilities Being Bombed
This is becoming a tech issue
Links 06/04/2026: Turning 34, Throwing Things Away, and Printing in GNU/Linux
Links for the day
Links 06/04/2026: Ex-Microsoft Engineer Explains Why Azure Fails, Germany Prepares for War
Links for the day
EPO "Cocaine Communication Manager" - Part XI - EPO Strike Enters Its Second Week, EPO Sheds Off Qualified Staff to Make Way for Nepotists
More than six months ago the "Cocaine Communication Manager" got arrested for cocaine use
Another Microsoft Outlook Downtime
Microsoft has sloppy code, it's not something suitable for mission-critical things
Week 2 of April IBM Layoffs Accelerate Based on Rumours
"Heard about Layoff at IBM"
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Sunday, April 05, 2026
IRC logs for Sunday, April 05, 2026
Culture of Harassment Inside Microsoft, Says Former Director at Microsoft
listen to Microsoft insiders
Drone Strikes on Amazon (GAFAM) Datacentres Highlight Azure's Miniscule Share
Azure is failing
SLAPP Censorship - Part 35 Out of 200: How to Make ~10,000 Pound Sterling (13,220.50 United States Dollars) by Copy-Pasting and Editing 10 Pages
Today it's Easter Sunday, so we'll keep this part relatively short
Gemini Links 05/04/2026: Artemis II Mission Tracker, Meditation on Copyright, Alhena 5.5.5, "Gemini as the Final Frontier of Human Cognition"
Links for the day
Microsoft Windows Falls to All-Time Low of ~60% in Switzerland, GNU/Linux Among Top Gainers
What will it take for mainstream media (not just geeks' site) to cover it?
Mainstream Media on "Practical Survivalism"
Suffice to say, panic buying begets more panic and price surges
Cloud Computing as a Cloud of Smoke (Your Hosting Provider is a "Legitimate" Military Target)
When a French datacentre went up in flames people joked that the "cloud" meant a cloud of smoke
Andreas Tille Congratulates Sruthi Chandran Before the Election for Debian Project Leader (DPL) is Even Over
Andreas Tille, the current Debian Project Leader (DPL) who has been in this role for nearly 24 months
When You Try to Change the World for the Better and Somehow They Find a Way to Say You Are the Villain
Don't be a fool. Don't fall for inversions of narratives.
Slop Was a Flop and Energy Crisis Will be Slop's Final Blow
Today we see no slopfarms in Google News
Links 05/04/2026: "Taiwanese Airlines to Hike Fuel Surcharges 157%" and Openly Racist Voter Suppression Starts in the US
Links for the day
Gemini Links 05/04/2026: Playing with Hyprland and Migrating Antenna Filters
Links for the day
Links 05/04/2026: "Confidential Computing" as Proprietary Bundle of False Promises and "The Web Is an Antitrust Wedge"
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Saturday, April 04, 2026
IRC logs for Saturday, April 04, 2026