Bonum Certa Men Certa

Links 26/08/2022: Lutris 0.5.11 and NetworkManager 1.40.0



  • GNU/Linux

    • Server

      • Ubuntu ☛ Charmed Kubernetes and Huawei Oceanstor Pacific storage integration verification report | Ubuntu

        Huawei OceanStor Pacific is an intelligent distributed storage series with scale-out capability designed to support the business needs of today and tomorrow. Its diverse and adaptable range of features provides efficient processing for diverse data, everlasting operations for services, and economical storage for mass data.

        The OceanStor Pacific series supports Storage Access Protocols like NFS, CIFS, POSIX, MPI-IO, HDFS, and Amazon S3. The Block storage allows for SCSI or iSCSI access modes and delivers HA solutions such as distributed active-active and cabinet-level redundancy. It is widely applicable to virtualization, cloud resource pools, and databases.

        OceanStor Pacific Storage provides a perfectly reliable, economical, scale persistent storage for PaaS or CaaS (Platform/Container as a Service). The industry scenario includes Channel access PaaS for Internet finance, development and testing PaaS, carrier cloud services for BOM domains and B2B cloud resource pools, smart governments, and Smart City PaaS.

        Canonical commercially distributes and supports a pure upstream version of Kubernetes. Ubuntu is the reference operating system for Kubernetes deployments, making it an easy way to build Kubernetes clusters. MicroK8s, a Kubernetes is delivered in the form of snap – the universal Linux app packaging format – which dramatically simplifies the installation and upgrades of components.

    • Audiocasts/Shows

      • Jupiter Broadcasting ☛ We Should Know Better | Self-Hosted 78

        We learned some really hard lessons this week, and reflect. Then Chris finds the perfect temperature sensor, and Alex finds a beautiful media discovery app.

      • mintCast Pocast ☛ 394 – With music on our side to break the old hard drives – mintCast

        1:25 The News 16:15 Security and Privacy 26:03 Bi-Weekly Wanderings 1:22:59 Housekeeping and Announcements

        First up in the news, The Kernel gets a bump, LibreOffice adds a point, Android 13 is out if you have a Pixel, and Gnome has a birthday,

        In security and privacy, Discord and your passwords are pythoned, and hard drives apparently have a taste in music

        Then in our Wanderings, Joe plays with his handheld, Bill is setting up a new server, Moss skips the assault and gets a couple batteries, and Norbert has had done some things.

    • Benchmarks

      • Neowin ☛ Linux could leave Windows 11 in the dust as Intel hybrid CPUs get further optimizations - Neowin

        Back at its Architecture Day 2021 event, when Intel shared the core design details of its Alder Lake CPU architecture, the firm stated that Windows 11 was optimized in a way to best take advantage of the Alder Lake's Performance Hybrid architecture and the new Thread Director technology that helps Windows 11 task scheduling.

        Following this announcement, head to head testing back in November 2021, indeed showed Windows 11 outperforming Linux quite easily thanks to the special optimizations baked into Microsoft's new OS. In fact, it was beating out Windows 10 too, even when using an older Lakefield CPU.

        [...]

        With this Linux can potentially leave Windows 11 in the dust depending on the kind of improvements the new optimization sees.

    • Applications

      • Cockpit Project: Cockpit 275

        Cockpit has always had the theoretical ability to run arbitrary programs to gain administrative access, by adding them to a package manifest. However, the UI would always use “sudo”. Now, if multiple programs are defined, the UI will prompt for which one to use.

        By default, Cockpit will still only use “sudo”, so unless you actually add more programs via a manifest, there will be no visible change in the UI.

      • Its FOSS ☛ FOSS Weekly #22.31: Tweaking Nemo, Tools to Understand Linux Commands and More

        I got an overwhelmingly positive response to the new newsletter format.

        A few FOSSers expressed concern about losing the personal touch in this new format. I assure you that it won't happen.

    • Instructionals/Technical

      • MakeTech Easier ☛ How to Update Firmware in Your Linux Machine - Make Tech Easier

        Firmware is a type of software that provides the low level control for device specific hardware. Firmware is stored on the read only memory (ROM) of a device. It gives instructions to the hardware about how it should be operated. Firmware can’t be modified or deleted by the end-user just like other software. You need some specialized software to do so. In this article, we are going to learn, how to update firmware in your Linux machine.

      • UNIX Cop ☛ How to install Signal Desktop client on Ubuntu 22.04 | Linux Mint 21

        Similar to WhatsApp and Telegram, Signal is a mobile messaging application that emphasizes security. So much so that Edward Snowden recommends it for everyday use.

        Like any modern mobile messaging app, you can expect stickers, video calls, individual, and group messaging and much more.

        Signal has good support for Linux, adding an excellent desktop client where you can use it for your daily communications on a computer.

        So let’s install it and use it.

      • HowTo Geek ☛ How to Trap Errors in Bash Scripts on Linux

        By default, a Bash script on Linux will report an error but keep running. We show you how to handle errors yourself so that you can decide what needs to happen next.

      • H2S Media ☛ How to install Memcached on Ubuntu 22.04 LTS Server

        Steps and commands to install and configure Memcached on Ubuntu 22.04 LTS Jammy JellyFish to cache data for PHP or Python-based applications.

        Memcached is a BSD-licensed published cache server used by many organizations and website owners to quickly retrieve data from memory. It has been used by many users to improve the overall speed and performance of their dynamic websites with database connectivity to improve performance by avoiding disk access by storing important data in memory or by minimizing the call of complex and frequently used database queries – especially SELECT statements.

        Data is provided with a unique key value and stored as strings in memory whereas the connection takes place to the Memcached server via the PROTOCOLS TCP and IP. The stored data can be either permanent or temporary. Well, in the case of temporary storage, the deletion of cached data will happen automatically after the configured interval of time.

      • ID Root ☛ How To Install Apache Tomcat on Linux Mint 21 - idroot

        In this tutorial, we will show you how to install Apache Tomcat on Linux Mint 21. For those of you who didn’t know, Apache Tomcat is an open-source Java servlet container. Tomcat is developed and maintained by a free group of developers under the Apache Software Foundation’s auspices and is licensed under the Apache License 2.0.

        This article assumes you have at least basic knowledge of Linux, know how to use the shell, and most importantly, you host your site on your own VPS. The installation is quite simple and assumes you are running in the root account, if not you may need to add ‘sudo‘ to the commands to get root privileges. I will show you the step-by-step installation of an Apache Tomcat on Linux Mint 21 (Vanessa).

      • ID Root ☛ How To Install Grafana on Fedora 36 - idroot

        In this tutorial, we will show you how to install Grafana on Fedora 36. For those of you who didn’t know, Grafana is open-source analytics and monitoring solution for every database. It provides charts, graphs, and alerts for the web when connected to supported data sources. You can either install the open source version or the enterprise version. Both options would be free at the point of installing the service, but if you feel like you would like the Enterprise service that Grafana offers, you would only upgrade seamlessly with the enterprise version.

        This article assumes you have at least basic knowledge of Linux, know how to use the shell, and most importantly, you host your site on your own VPS. The installation is quite simple and assumes you are running in the root account, if not you may need to add ‘sudo‘ to the commands to get root privileges. I will show you the step-by-step installation of the Grafana monitoring tool on a Fedora 36.

      • OSTechNix ☛ Bash Select Loop Explained With Examples - OSTechNix

        We have seen about bash for loop, while loop, and until loop in our previous articles with detailed examples. Bash offers one more type of loop called select loop, which will allow you to create menu-driven scripts.

        Menu-driven scripts are good alternatives to scripts that require users to pass arguments to perform an action. You can add more verbosity in your menus and users have to just select the option for the program to do its job.

      • Extend LVM and online resize filesystem
      • How to install Datadog Agent on Ubuntu 22.04 – NextGenTips

        In this tutorial, we are going to learn how to install Datadog Agent on Ubuntu 22.04.

      • How to Install PrestaShop on Ubuntu 22.04 - LinuxTuto

        PrestaShop is an open-source platform that allows anybody to easily create an e-commerce website platform to start selling products. The software was created with PHP and released under the Open Software License (OSL).

        In this tutorial, we will explain how to install and configure the PrestaShop e-commerce platform on Ubuntu 22.04.

      • H2S Media ☛ Install Ajenti Admin Panel on Ubuntu 20.04 LTS Server

        Manage your CLI server by installing Admin Panel Ajenti on your Ubuntu 20.04 LTS Focal Fossa server using the command terminal.

        Ajenti is an open source Server management that offers an easy-to-use Web-based graphical user interface to command line servers so that they can be managed easily, locally or remotely.

        Well, you can’t compare it to the popular WHM Cpanel, instead, with the Cockpit Server Admin platform but with extra features to manage servers. That makes it easier for administrators to gain an overview and enable other users to manage docker containers, start services or run scripts, for example.

        The current version of Ajenti is a V2 lightweight Admin panel, however, there is also one more edition Ajenmti 1.x Panel which is not currently in development. Because the developers are focusing on Ajenti V2 which offers plugin-based architecture to expand the capabilities of the Panel. It is developed with Python3 & AngularJS and in the future will have plugins to manage other Server services such as apache2, Nginx, postfix, etc.

      • TechRepublic ☛ How to create a Project in OpenProject

        OpenProject is an open-source project management platform that makes it pretty easy to manage projects from the security of your own data center or your third-party cloud host. OpenProject can easily be deployed with the help of Docker, so you don’t have to worry about the complications of installing it manually.

        Once OpenProject is up and running, and you have the basic configurations taken care of, it’s time to create your first project. We’ll first create a new project, then we’ll add members and even set the project as a template, so you can more easily recreate it.

      • TecAdmin ☛ (Resolved) Port 22 Connection Refused on Ubuntu & Debian – TecAdmin

        Sometimes we get an error “Port 22: Connection refused” during the SSH connection to a remote system. This can happen due to multiple reasons.

      • MakeTech Easier ☛ How to Use Pushbuttons With Raspberry Pi GPIO Pins - Make Tech Easier

        If you’ve ever used an LED with a Raspberry Pi, then you probably know how GPIO outputs work. Code makes electricity flow through General Purpose Input / Output (GPIO) pins, passes through the LEDs, and lights things up. But have you ever tried doing the reverse? With pushbuttons, you can do the exact opposite. This tutorial shows you how to turn a GPIO pin into an input pin, listening to every button press you make!

      • Linux Shell Tips ☛ How to Password Protect Directory in Nginx Web Server

        While Nginx pre-configurations cater to essential security needs for our web applications, some security precautions need to be user-defined.

        For instance, a website’s web directory may contain files and other subdirectories that we wish to protect from unauthorized user access. A solution to the problem is basic authentication implementation on the Nginx web app configuration file.

        This article will walk us through viable steps of password-protecting a web app directory hosted by an Nginx web server.

      • Citizix ☛ How to Install Puppet 7 Server on Rocky Linux/Alma Linux 9

        In this guide, we are going to install Puppet 7 Server Open Source in Rocky Linux/Centos 8 Server. We will set up a Puppet server and an agent and install nginx using puppet manifests.

        Puppet is a software configuration management tool which includes its own declarative language to describe system configuration. It is a model-driven solution that requires limited programming knowledge to use. Puppet operates in an agent-master architecture, in which a master node controls configuration information for a fleet of managed agent nodes.

      • ID Root ☛ How To Install OpenRGB on Linux Mint 21 - idroot

        In this tutorial, we will show you how to install OpenRGB on Linux Mint 21. For those of you who didn’t know, Open source RGB lighting control that doesn’t depend on manufacturer software. OpenRGB is available for Windows, Linux, and macOS. The software offers many features, including support for RGB amber lighting, game integrations, music visualization, and more. Additionally, the software comes with a plugin interface that allows you to extend its functionality even further.

        This article assumes you have at least basic knowledge of Linux, know how to use the shell, and most importantly, you host your site on your own VPS. The installation is quite simple and assumes you are running in the root account, if not you may need to add ‘sudo‘ to the commands to get root privileges. I will show you the step-by-step installation of OpenRGB on Linux Mint 21 (Vanessa).

      • Red Hat Official ☛ Network automation with Ansible filters | Enable Sysadmin

        Ansible uses the Jinja2 templating system to handle variables in YAML playbooks. As I explained in my previous article, filters are a very powerful feature in Ansible that allow you to manipulate data in many different ways. One useful filtering example is network configuration.

      • dwaves.de ☛ GNU Linux – fonts and font editors – what is WOFF?
      • dwaves.de ☛ GNU Linux bash – tar – how to pack compress backup folder create tar.gz and exclude filetype
      • Linux Shell Tips ☛ Neofetch – A Command Line Linux System Information Tool

        How much do you know about your Linux OS system information? Moreover, what system settings do you check, or what inbuilt Linux commands do you run to retrieve important information regarding your Linux operating system distribution?

        This article guide is here to answer such important questions concerning your Linux OS distribution via the Neofetch system information tool.

      • OpenSource.com ☛ How I analyze my music directory with Groovy | Opensource.com

        Lately, I’ve been looking at how Groovy streamlines the slight clunkiness of Java. In this article, I begin a short series to demonstrate Groovy scripting by creating a tool to analyze my music directory.

        In this article, I demonstrate how the groovy.File class extends and streamlines java.File and simplifies its use. This provides a framework for looking at the contents of a music folder to ensure that expected content (for example, a cover.jpg file) is in place. I use the JAudiotagger library to analyze the tags of any music files.

    • Lutris

    • Desktop Environments/WMs

      • K Desktop Environment/KDE SC/Qt

      • GNOME Desktop/GTK

        • Linuxiac ☛ The GNOME Project Introduces a Telemetry Data Collection Tool

          GNOME released a new gnome-info-collect tool that collects (anonymous) information about your system and some of the choices you’ve made.

          Above all, we want to stress that there is no cause for concern, especially for highly sensitive users regarding data privacy.

          In today’s world, users have mixed feelings about telemetry. But first, for those not in the know, let’s define telemetry in its use as software.

          Telemetry typically comprises software running in the background, gathering data about your computer and how you interact with it, and forwarding it to third parties – for example, hardware vendors or operating system makers.

        • OMG Ubuntu ☛ Pano is a 'Next-Gen Clipboard Manager' for GNOME Shell - OMG! Ubuntu!

          ‘Pano’ bills itself as a “next-gen clipboard manager for GNOME Shell” and if first impressions are anything to go by, it certainly fulfils that claim!

          Most clipboard managers (that I’ve used, at least) tend to be text-heavy lists. You copy items, they get added to a list, and you spend ages trying to work out which truncated string is which. Pano is way more graphical in its presentation of your copy/paste history making it potentially more useful.

          [...]

          Clipboard managers are only as useful as their contents, and not every you copy you’ll want to keep within easy reach. You can remove an item your clipboard history by clicking on the ‘x’ in the corner, and search through all saved contents using the search bar.

  • Distributions and Operating Systems

    • SUSE/OpenSUSE

      • Mesa, Git, Gear, More Update in Tumbleweed - openSUSE News

        The rolling release continues fastforwarding daily with new versions of software.

        The most recent snapshot is 20220824 and it updated the Linux Bluetooth protocol bluez 5.65; the package fixed a few Advanced Audio Distribution Profile issues and added experimental support for ISO sockets. The 4.16.2 version of hypervisor xen dropped several patches contained in the new tarball including a CLFLUSH work around for AMD x86. The new xen update fixes a few Common Vulnerabilities and Exposures. There were a few updates related to Vulkan like an update of shaderc 2022.2, which added support for 16b-bit-types in High-Level Shader Language. There were also updates to vulkan-loader and vulkan-tools 1.3.224.0. The OpenGL and OpenGL for Embedded Systems shader glslang 11.11.0 added OpSource support and avoids a double-free in functions clone for vulkan in relaxed mode.

        Mesa and its drivers package updated to version 22.1.7 in snapshot 20220823. The 3d graphics library’s new version had fixes and cleanups all over the tree; most of the fixes were for the Zink driver that emits Vulkan Application Programming Interface calls. Several YaST packages updated in the snapshot. There were some adjustments made with yast2-storage-ng 4.5.8 to adapt to new types of mounts by libstorage-ng, and yast2-network 4.5.5 added a class to generate the configuration needed for Fibre Channel over Ethernet. Other packages to update in the snapshot were transactional-update 4.0.1, autoyast2 4.5.3 and many other libraries.

        [...]

        Among the packages to update were KDE Gear 22.08.0, which allows you to sort files also by file extension with Dolphin.

      • openSUSE Tumbleweed – Review of the week 2022/34 – Dominique a.k.a. DimStar (Dim*)

        Dear Tumbleweed users and hackers,

        This week, Tumbleweed made the impossible possible: we have published 8 daily snapshots in just 7 days. Of course, the timing was a bit on our side: the snapshot that started building yesterday went so quickly through build and QA that it already managed to be published. In any case, the daily streak continued all along (now at 22 – a new all-time record).

    • Fedora Family / IBM

      • Red Hat Official ☛ Edge automation: Seven industry use cases and examples

        Put simply, edge computing is computing that takes place at or near the physical location of either the user or the source of the data being processed, such as a device or sensor.

        By placing computing services closer to these locations, users benefit from faster, more reliable services and organizations benefit from the flexibility and agility of the open hybrid cloud.

      • Red Hat Official ☛ Modernization: Developing your code migration strategy
      • GTK 2 removal from RHEL 10+

        In RHEL 10 the GTK 3 and GTK 4 will still continue to be available for everyone to use.

      • Fedora Project ☛ CPE Weekly Update - Week 34 2022 – Fedora Community Blog

        This is a weekly report from the CPE (Community Platform Engineering) Team. If you have any questions or feedback, please respond to this report or contact us on #redhat-cpe channel on libera.chat (https://libera.chat/).

        We provide you both infographics and text version of the weekly report. If you just want to quickly look at what we did, just look at the infographic. If you are interested in more in depth details look below the infographic.

      • CentOS ☛ CentOS Community Newsletter, August 2022 – Blog.CentOS.org

        CentOS hosted a Dojo at DevConf.US in Boston. This was our first return to hosting in-person events, and we tried to include remote participants with a YouTube live stream. Thanks to everybody who joined us in Boston or online. We appreciate feedback on how we can improve hybrid events. The recordings will be published soon.

      • Enterprisers Project ☛ How to hire (and retain) Gen Z talent

        As a new generation of IT talent emerges, corporate leaders should examine business practices that embrace new ideas and expectations. Consider this expert advice

    • Debian Family

      • DebugPoint ☛ Deepin 23 Plans to Leave Debian, Aims to Become Independent

        A few days back, the Deepin team gave a preview of the upcoming Deepin 23 release with new feature updates and additional details. However, in a recent post in the official subreddit of Deepin, the team announced that Deepin 23 would not be based on Debian anymore.

    • Devices/Embedded

      • peppe8o ☛ Jellyfin and Raspberry PI: a Free System to Manage your Media

        Raspberry PI computer boards, especially the newest ones, meet perfectly the need for small media center systems. One of the most famous on the web is Jellyfin

        This tutorial will show you how to install Jellyfin on Raspberry PI computer boards using Docker. For this tutorial, I’m going to use a Raspberry PI 3 Model A+, but it should work with any newest Raspberry PI computer board.

        Moreover, I’m going also to show a way to easily upload media files remotely to your Jellyfin media center.

        [...]

        Jellyfin is a Free Software Media System licensed under the GNU GPL: this means that you can use it, study it, modify it, build it, and distribute it for free, as long as your changes are licensed the same way. It descends from Emby‘s 3.5.2 release, trying to be different in order to avoid attached strings, premium licenses or features, and hidden agendas.

  • Free, Libre, and Open Source Software

    • Events

      • Ubuntu ☛ Meet Canonical at OpenSearchCon 2022 and hear about our new community collaboration | Ubuntu

        OpenSearch makes it easy to ingest, search, visualise, and analyse data. Developers build with OpenSearch for use cases such as application search, log analytics, data observability, data ingestion, and more.

        OpenSearch is Apache 2.0 licensed software, which means that it is open source and run, maintained and advanced by the community. OpenSearch includes a network of partners and is open to contribution. OpenSearch also has principles for development, as the organisation believes that great open-source software is built together with a diverse community of contributors. Canonical, the publisher of Ubuntu, is proud to be a member of this expanding community.

      • Daniel Stenberg ☛ curl up 2022 take 2 | daniel.haxx.se

        In June of 2022 we intended to run the curl up 2022 curl conference in person, in California.

        Unfortunately, I had the bad taste of catching covid exactly when I was about to use my new US visa for the first time, so I had to remain at home and because of that we cancelled the whole event.

    • Web Browsers

      • Mozilla

        • Mozilla ☛ Slow your scroll: 5 ways to fight misinformation on your social feed

          The news is overwhelming. Attention spans are waning. Combine those with social media feeds that are optimized for endless scrolling, and we get an internet where misinformation thrives.

          In many ways, consuming news has become a social act. We get to share what we’re reading and thinking through social media. Other people respond with their own thoughts and opinions. Algorithms pick up on all of this activity, and soon enough, our feeds feed us what to consume next – one after another. While it could be actual news and accurate information, often, it’s an opinionated take, inaccuracy or even propaganda.

        • Mozilla ☛ Firefox Presents: Feeling alive with the ‘Stoke King’

          If you could use a little hyping up to go outside, look no further than Wade Holland’s social media feeds. A former competitive skier from Montana, Holland encourages people to find their “stoke” – whether that’s by going on a mountain bike ride, rollerblading, or just feeling the sun on your skin.

          “It can be finding a little park right behind your house and singing and dancing in it,” Holland said. “You don’t have to hike Everest. You can do whatever elevates your stoke!”

        • Thunderbird ☛ We Asked AI To Create These Beautiful Thunderbird Wallpapers

          The buzz around AI-generated artwork continues to grow with each passing week. As machine-learning-driven AI systems like DALL€·E 2, Midjourney, and Stable Diffusion continue to evolve, some truly awe-inspiring creations are being unleashed onto the world. We wanted to tap into that creative energy to produce some unique desktop wallpapers for the Thunderbird community!

          So, we fed Midjourney the official Thunderbird logo and a series of descriptive text prompts to produce the stunning desktop wallpapers you see below. (Can you spot which one is also inspired by our friends at Firefox?)

    • Programming/Development

      • postmarketOS // Considering SourceHut, Part 2

        We recently added a post, Considering SourceHut, where we explained our desire to move from our current source code and issue hosting on gitlab.com to SourceHut. Along with a tentative rollout plan and a call out to postmarketOS contributors to give their feedback in an issue created specifically for that purpose (postmarketos#49). After receiving a lot of thoughtful feedback (and yes we did read them all!) from contributors and community members who read the post, we felt is was necessary to provide an update.

        [...]

        What we do know is, now would be the best time to try it.

      • <Weeks 9> Storing OCR result | My Journey at google summer of Code 2022

        This week, I implemented two ways to store the output text.

        The first way is that output text will be recorded and saved as a text file. I implement the method saveTextFile(const QString& filePath, const QString& text) of Ocr Tesseract Engine; this function uses QTextStream’s streaming operators, so we can conveniently write and update text into the file. The text file is located with the same path as the Url image.

        The second way is to save the text in XMP. I implement the method saveXMP(const QString& filePath, const QString& text) to do this task. XMP uses a structured container to host similar metadata. An alternative language string is an entry in the XMP tree (based on XML) which will be an additional property for a title or caption tag. A new language version of a label is appended to XML. There is no limit in size and char encoding. XMP is hosted in the image to a dedicated chunk outside the image data/properties.

      • Nim and BaCon

        • Barry Kauler ☛ Debian to Puppy package db conversion in Nim

          'debdb2pupdb' is written in BaCon language, though Dima (dimkr in the forum) rewrote it in C in woof-CE; though, the legacy-branch in woof-CE still has the BaCon version...

        • Barry Kauler ☛ BaCon 4.x cross-compile problem in OE

          However, it turns out that cross-compiling BaCon and apps written in BaCon, is not resolved. It was only fixed for the situation where was compiling on a x86_64 host OS, for a x86_64 target CPU.

  • Leftovers

    • Hardware

      • CNX Software ☛ WAFER-TGL-U 3.5-inch Tiger Lake SBC offers 3x 2.5GbE port, SATA, 4x display interfaces - CNX Software

        IEI’s WAFER-TGL-U is a 3.5-inch SBC based on a choice of Intel Tiger Lake UP3 processors with up to 32GB RAM, SATA storage, three 2.5 Gbps Ethernet ports, four display interfaces including HDMI, DisplayPort, and the company’s custom iDPM 3040 slot for eDP/LVDS/VGA, as well as four USB 3.2 ports.

        The board also comes with M.2 sockets to add 4G LTE or 5G cellular connectivity, a few RS232/RS422/RS485 ports, and IEI says it is ideal for space-constrained applications such as AGV (Automated Guided Vehicle), AMR (Autonomous Mobile Robot), and small cabinets in factories.

    • Security

      • Living off the land, AD CS style | Pen Test Partners

        Unless you have been living under a rock for the last year or so, Active Directory Certificate Services (AD CS) abuse continues to be a hot topic in offensive security, ever since the excellent research released by Will Schroeder (@harmj0y) and Lee Christensen (@tifkin_). I, like many, have enjoyed the fruits of Will and Lee’s research since its release last year.

        Up until now exploitation of these AD CS misconfigurations typically requires tools like Certify directly over C2, or Oliver Lyak’s excellent certipy tool over SOCKS into the target environment.

        Recently, my genius and handsome colleague Nick (guess who tech QA’d this post?) and I got into a conversation around living off the land techniques for AD CS abuse. The environment he was targeting at the time was brutal from a red teamer perspective, with a high functioning SOC and excellent detection capability. In situations such as this, living of the land is a much more effective way of remaining undetected and blending in with legitimate traffic.

        [...]

        There are several ways to enrol for certificates using traditional Windows features and tools. The certutil command line tool and the web enrolment endpoint that is sometimes exposed, to name a few. But we wanted to avoid the command line if possible and not rely on the web enrolment endpoint as often this is not available.

      • LWN ☛ Security updates for Friday [LWN.net]

        Security updates have been issued by Debian (zlib), Fedora (dotnet3.1, firefox, java-1.8.0-openjdk-aarch32, thunderbird, and zlib), Mageia (canna, chromium-browser-stable, dovecot, firefox/nss, freeciv, freetype2, gnutls, kernel, kernel-linus, kicad, ldb/samba/sssd, libgsasl, microcode, nodejs, rsync, thunderbird, and unbound), Oracle (php:7.4 and systemd), Scientific Linux (firefox, rsync, systemd, and thunderbird), Slackware (vim), and SUSE (bluez, gstreamer-plugins-good, java-1_7_1-ibm, java-1_8_0-ibm, kernel, libcroco, postgresql10, postgresql13, python-lxml, and webkit2gtk3).

      • Bruce Schneier ☛ Security and Cheap Complexity - Schneier on Security

        I’ve been saying that complexity is the worst enemy of security for a long time now. (Here’s me in 1999.) And it’s been true for a long time.

      • The anomaly of cheap complexity

        So, computers are insecure because they have so many complex layers.

      • Day in the life of a package maintainer: Reproducible Go packages

        In this new blog series, I would like to introduce you to the daily adventures of an Arch Linux package maintainer.

        This time, we will have a look at reproducible package builds. Reproducible package builds are very important for us, as package maintainers, because reproducible package builds create an independently-verifiable path from source to the final package. This means, every Arch Linux user can verify that noone tampered with the Arch Linux package build process. Technically spoken, this means that we can build the same package on different systems and get an exact identical package (identical as in: they share the same SHA256 checksum).

      • Privacy/Surveillance

        • Internet Freedom Foundation ☛ Pegasus Investigation Report to remain in sealed cover despite containing evidence that 5 phones had malware

          The committee of experts (‘Committee’) constituted by the Supreme Court to investigate the use of Pegasus spyware on Indian citizens recently submitted its report with the Supreme Court in a sealed envelope (‘Report’). This Report was opened for the first time by the Bench comprising Chief Justice NV Ramana (‘CJI’), Justice Surya Kant and Justice Hima Kohli in open court. The CJI read some parts of the Report, and revealed that the Report states that malware was found in 5 out of 29 phones, but that the Report couldn’t say if the malware was Pegasus. However, despite this shocking revelation, the Report will be kept in the sealed envelope, in the custody of the Supreme Court’s General Secretary, even when the CJI stated during the court proceedings, that parts of the Report will be public.

        • TechRadar ☛ The American Data Privacy and Protection Act: a look into the United States’ first federal privacy law
        • [Old] VS Code - What's the deal with the telemetry?

          Microsoft state that they follow the General Data Protection Regulation (GDPR), and that these practices apply to all geographies, not just Europe.

          However, you cannot access the data collected.

          [...]

          And there is a ‘sign-in’ experience in VS Code. You can sync your settings by signing into a Microsoft account or GitHub account. You may not use it, but you can be obviously identified that way. Is that data linked?

          [...]

          Under the right of access article, you can make a formal request called a data subject request (DSR) to a data controller (whoever holds your data) to take an action on that data. A data controller must provide an overview of the categories of data that are being processed (Article 15(1)(b)) as well as a copy of the actual data (Article 15(3)); furthermore, the data controller has to inform the data subject on details about the processing, such as the purposes of the processing (Article 15(1)(a)), with whom the data is shared (Article 15(1)(c)), and how it acquired the data (Article 15(1)(g)).

          Microsoft have added GDPR annotations to telemetry events to describe their purpose. I guess that covers Article 15(1)(a) mentioned above. It is an enumerated variable, which can contain values: “FeatureInsight”, “PerformanceAndHealth”, “BusinessInsight”, and “SecurityAndAuditing”. It is kind of vague. What does a “BusinessInsight” event mean?

          My own take is that I do not feel like I am adequately protected. I am not totally anonymous. I cannot access data collected. Microsoft extensions collect data implicitly, and may not offer settings to control what is sent out. The fact that all Microsoft product licenses say that users cannot opt out of all data collection makes me doubt the sincerity of the effort.

          [...]

          However, VSCodium can’t shut out all the data collection as it is the same codebase. And since extensions act independently with regard to data collection, you still need to be mindful of what extensions you install.

          You would need to search around for other options if you want to find a more privacy-oriented, open-source code editor.

    • Digital Restrictions (DRM)

  • Gemini* and Gopher

    • Personal

      • It's Over, It Starts

        I am rounding out a long, manic week with a much needed full-night's rest. It feels nice to be refreshed once again after so many days of feeling like I'm working with only half of my brain. These spells of insonmia, along with intense, creative flow aren't bad. Just exhausting. And I end up feeling a bit guilty for the folks around me that rely on the rest of me being there.

      • strange thoughts

        while working on my website, i happened to stumble across an opportunity where a certain company was opening auditions for new vtuber talents. i'm only heavily considering it because i'm in the midst of a hopeless job hunt - which sounds stupid but. well. this is me trying every avenue, even the unorthodox ones.

      • My Music Collection

        Many years ago I bought a record player and started my own little record collection. I fell in love with handling, cleaning, and playing records from the very beginning. I grew up in the back-end of tapes and meat of the CD eras so records were new to me.

      • SpellBinding: ABIMORS Wordo: PIING
    • Technical

      • Internet/Gemini

        • My First Gemlog!

          I finally created a gemini capsule!!! I've been lurking on gemini for ages now, and I've been wanting to contribute my own nonsense for just as long.

          However, I could never figure out how to set up a capsule. I tried so many times, spent countless hours troubleshooting my setups, but to no avail. I had a yunohost server running though, and when I saw that I could host a gemini capsule on it I was ecstatic!

          Then, another roadblock. There are two apps available on yunohost for gemini, gemserv and my_capsule. I was familiar with gemserv so I installed it and tried to set it up. It was an absolute disaster. Could not figure it out and I thought it was just game over.


* Gemini (Primer) links can be opened using Gemini software. It's like the World Wide Web but a lot lighter.



Recent Techrights' Posts

Trillions of Dollars in Debt Are Not "Investment", More People Realise This Now
"Investors started offloading shares on Wednesday in response to an X post about the debt load of CoreWeave Inc..."
Intercontinental Brigading - Part V - Keeping Linux Under Users' Control, Not Microsoft's (NSA) Control, Leads to Weaponisation of Cops (Killing the Messengers)
Transatlantic lawfare
UK's Competition and Markets Authority (CMA) Says Microsoft is Still Abusive
Today, ahead of the latest fake 'results' [...] Microsoft cheats the system everywhere it can
 
GPL Was Right (About Hoarding, Now Automated With Plagiarism Blenders)
Some time next year the UK's High Court might listen to arguments related to this
Microsoft Allegedly Asks Many Workers to Leave at the End of This Year (or Get the Boot), It's Called Voluntary Exit Program a.k.a. Voluntary Early Retirement Program (or VEP) Even for People Far Too Young to Retire
"Everyone at Microsoft knows what those acronyms mean."
The Torvalds-led Slopfest as a Reminder to Pursue Software Freedom, Not Plagiarism Endorsed (for Money) by 'Linux' Foundation
What's happening this month moreover proves that he is not in control of important decisions in his project
Why We Never Got Back to IPFS
Practically speaking, we could get back to IPFS any time
Red Hat Silent Layoffs: October 1 Bluewashing, Then Leaving IBM Altogether
It's said that weeks from now there will be another "round" (of "RAs")
Gemini Links 16/10/2026: Metrovision, Smartwatches, and Rekindled Love for Geminispace
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Friday, October 16, 2026
IRC logs for Friday, October 16, 2026
TeamBlind Accused of Censorship, Maybe Surveillance in the Future
It's expensive to protect whistleblowers and to resist censorship of what whistleblowers try to expose
Another Friday 'Litter' of IBM Workers, Discarded and Sometimes Replaced to Cut Costs
The little that IBM earns is spent buying companies to pretend there's "growth" and headcount stability
Gemini Links 16/10/2026: Carrie, Games, and Slop
Links for the day
Links 16/10/2026: Election Interference by Slop; White House Backs Russia, Not Ukraine
Links for the day
The Register MS Has New 'Article' That Has "AI" 20 Times. "SPONSORED POST" As Usual.
At the end, both the media and the pyramid scheme will collapse
Links 16/10/2026: "Data Centers Are Driving Conservative Rural Voters to The Democratic Party En Masse" and Slop Bros Bribe Candidates "for Congress"
Links for the day
Deplatforming People You Disagree With Is a Losing Strategy
Trying to deplatform people you don't agree with is oppressive and petty
Microsoft Cannot Pay Salaries
Microsoft is deep in debt
IBM "support that is USA based will migrate over 4 years to Indian based just because it lowers costs substantially."
IBM is not capable of growing, so it tries to find ways to shave off costs
Gemini Links 16/10/2026: Publishing and Licensing, Going to Movies, and Nature/Seasons Change
Links for the day
Microsoft's OSI Calling Slop "Open Source AI" (Microsoft Paid OSI to Do This) Has Helped Associate "Open Source" With Pedophilia
Microsoft deflecting?
Fridges Do Not Need an Internet Connection
Keep it simple, stupid (KISS)
Wikileaks Still Matters
The world needs more sites like these
'Cocaine King' Campinos Should 'Get the Message', Pack Up His Things and Go Already
His staff is constantly on strike and engaged in various industrial actions
We Don't Do Slop
People tend to appreciate genuine work, not fakes
On Lying With Confidence
LLMs are hype
Market Share of Windows in the United Kingdom is Shockingly Low
Microsoft's losses are very profound
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Thursday, October 15, 2026
IRC logs for Thursday, October 15, 2026
Microsoft Can Barely Afford to Colonise Africa Any Longer (Too Much Debt)
"Before the announcement, former Microsoft employees publicly described staff being placed on performance improvement plans or offered “voluntary” exits."
Intercontinental Brigading - Part IV - Harassment Registered With the Police Before Projection Attempts Made From America
The thing one gets subjected to for opposing back doors in Linux
Gemini Links 16/10/2026: Dogs, Slop, and Blogging
Links for the day
The Fate of "Alicante Mafia" at the EPO Yet to Be Determined
It'll be interesting to hear what they say about the secret meeting regarding the future of Campinos
Gemini Links 15/10/2026: Medical Difficulty, Science Fiction, and Playstation 3 Dies
Links for the day
Links 15/10/2026: Cuts to Public Health and Misuse of License Plate Data for Social Control
Links for the day
Links 15/10/2026: ALPRs Are Mass Surveillance, GAFAM Front Group ('New' EFF) Asks the Wisconsin Supreme Court to End Warrantless ALPR Searches
Links for the day
IBM RAs: "It's on Me"
IBM has no respect for the workers and it tries to hide the layoffs
Gemini Links 15/10/2026: Literature, Funerals, and Devices
Links for the day
The Efforts to Criminalise Opposition to a Ponzi Scheme Sold as "Super Intelligence" (Plagiarism Engines, Disinformation Generators)
Cops are becoming combatants for slop bros, i.e. they use power to promote a Ponzi scheme
Clownflare Sees Most Requests in Africa Coming From Android (Linux)
Android is the dominant platform
IBM's "RA Season" is Nearly Upon Us, But Tens of Thousands Are Already Marked for Removal With PIPs (as "Low Performers")
IBM is a dying company
Microsoft Has Confirmed It Had a Plan to Cut Azure (or Azure Costs) by 20%
So basically... yes! Microsoft did have a plan to slash Azure.
No Noticeable Libera Chat Exodus After Code of Censorship (CoC) Scandal Earlier This Month
Libera Chat pissed off some people by unmasking the CoC's real purpose
Red Hat Silent Layoffs Seem to Carry on Throughout This Month
How much longer will these silent layoffs (e.g. PIPs) carry on for?
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Wednesday, October 14, 2026
IRC logs for Wednesday, October 14, 2026