03.18.23

GNU/Linux

• Desktop/Laptop

  • Veikk Voila L Pen Tablet review: budget drawing tablet is an attractive choice [Ed: GNU/Linux compatible]

    The Veikk Voila L Pen Tablet from new kids on the block Veikk is a versatile, affordable drawing tablet that’s worth buying even if for only occasional use. It comes in cheaper than its rival the Huion Inspiroy Ink H320 and its rugged and simple design and inbuilt dial make it very simple to use out of the box. It’s supplied with different adaptors, allowing it to plug into phones, tablets and laptops and its pressure sensitivity is brilliant, especially for a sub-$50 tablet.

• Server

  • Container Journal ☛ Lightweight Environments in Kubernetes

    It’s becoming widely understood that testing needs to shift left as organizations rapidly grow their development environments. The question that remains: Exactly how should these organizations approach end-to-end testing and integration testing in Kubernetes and multi-cloud environments? To address this question, I’ll discuss how a new approach to realizing high-fidelity

  • Security Week ☛ Dero, Monero Cryptojackers Fighting for Same Kubernetes Clusters

    Dero cryptojacking operation infecting Kubernetes infrastructure is being targeted by Monero criptojackers for control over the same clusters.

• Audiocasts/Shows

  • CyberRisk Alliance LLC ☛ How to Steal a Tesla, AI On Your Pi, Linux Desktop: Future, – SOCKS5 Your Burp – PSW #776 | SC Media

    In the security news: AI on your PI, no flipper for you, stealing Tesla’s by accident, firmware at scale, the future of the Linux desktop, protect your attributes, SOCKS5 for your Burp, TPM 2.0 vulnerabilities, the world’s most vulnerable door device and hiding from “Real” hackers, sandwiches, robot lawyers, poisonis epipens, and profanity in your code! All that, and more, on this episode of Paul’s Security Weekly!

• Instructionals/Technical

  • ID Root ☛ How To Install LibreOffice on Manjaro 22

    In this tutorial, we will show you how to install LibreOffice on Manjaro 22.

  • Own HowTo ☛ How to generate app password on Gmail to send emails via Linux Terminal

    In this tutorial you will learn how to configure Gmail to send emails via mail utility on Linux.

  • Own HowTo ☛ How to send emails from Linux Terminal

    In this tutorial you will learn how to send an email from your terminal in Linux.

  • ID Root ☛ How To Install Apache Spark on Ubuntu 22.04 LTS

    In this tutorial, we will show you how to install Apache Spark on Ubuntu 22.04 LTS. For those of you who didn’t know, Apache Spark is a powerful open-source big data processing engine.

  • ID Root ☛ How To Install LXQt Desktop on Fedora 37

    In this tutorial, we will show you how to install LXQt Desktop on Fedora 37. For those of you who didn’t know, LXQt is a free and lightweight desktop environment that is built using the Qt framework.

  • ID Root ☛ How To Install MakeMKV on Ubuntu 22.04 LTS

    In this tutorial, we will show you how to install MakeMKV on Ubuntu 22.04 LTS. For those of you who didn’t know, MakeMKV is a popular software for creating high-quality video files from your DVD and Blu-ray discs.

  • It’s Ubuntu ☛ 15 Basic Cat Command Examples In Linux

    The cat is short for the “concatenate“ command. It is mostly used in file management tasks like creating single or multiple files, viewing the content of a file, concatenating files, etc.

  • Kifarunix ☛ Deploy Nagios NRPE Agents using Ansible

    In this tutorial, you will learn how to deploy Nagios NRPE Agents using Ansible. Ansible is an open-source automation tool used for configuration management, application deployment, and task automation.

  • Linux Host Support ☛ How to Install Docker CE on AlmaLinux

    Docker Community Edition (CE) is a free, open-source, and community-supported version of the Docker platform. Docker CE provides all the essential features to build, ship, and run container applications. It is designed for developers who are just starting out with containerization, as well as for small-scale development and testing environments.

  • Layer 4 – TCP and the three-way handshake

  • Net2 ☛ How to install Boost on Ubuntu 22.04

    Boost is a mighty C++ library used by many developers to provide various functions.

  • Net2 ☛ How to solve the error : Could not create server TCP listening socket *:6379: bind: Address already in use

    Having trouble starting up the Redis server because of the “Could not create server TCP listening socket *:6379: bind: Address already in use” error? No need to fret. In this article, we’ll guide you through a detailed solution to address this error and help you get your Redis server operating seamlessly.

  • Remote port enumeration using native tools

  • Remote port and service enumeration – nmap

  • NMAP scripts

  • Wireless diagnostic operations

  • LinuxConfig ☛ kubectl command examples (cheat sheet)

  • LinuxConfig ☛ How to manage and troubleshoot Kubernetes logs

  • LinuxConfig ☛ How to Install Kubernetes on All Linux Distros

  • LinuxConfig ☛ How to Manage Kubernetes Clusters With kubectl

  • HowTo Forge ☛ How to Install Ntopng to Monitor Network Traffic on Debian 11

    Ntopng is an open-source network monitoring tool that monitors real-time network traffic from a web interface. In this article, you will learn how to install Ntopng on Debian 11.

  • HowTo Forge ☛ How to Set Up Multi-Master PostgreSQL Replication on Ubuntu 22.04

    PostgreSQL is an open-source database management system focusing on extensibility and SQL compliance. This tutorial will install the PostgreSQL database server on Ubuntu 22.04 servers and set up Multi-Master replication with multiple servers via Bucardo, an asynchronous PostgreSQL replication system.

  • Linux Cloud VPS ☛ How to Install Moodle on AlmaLinux 9

    Moodle is an open-source platform for online learning. It is a Learning Management System used by educational institutions that enable them to create online courses, training, learning and assignments. Originally, Moodle was known as an acronym for Modular Object-Oriented Dynamic Learning Environment.

  • Linux Capable ☛ How to Install Neovim on Ubuntu 22.04 or 20.04

    Discover Neovim, a state-of-the-art text editor built on the foundation of Vim, offering a free and open-source solution tailored for maximum usability and extensibility. Neovim emphasizes seamless maintenance and actively encourages contributions from a diverse community of developers.

  • Linux Capable ☛ SSL Certificate: A Complete Insight

    The internet has experienced exponential growth, becoming an integral aspect of daily life. As more individuals rely on the web for communication, shopping, and other activities, ensuring the security and privacy of online activities is of utmost importance.

  • Linux Capable ☛ IPv4 vs IPv6: A Comprehensive Comparison and Future Outlook

    This article offers a comprehensive comparison between IPv4 and IPv6, covering key differences, advantages, and challenges, while exploring their future outlook. Gain a deeper understanding of these internet protocols and their role in the ever-evolving digital landscape.

  • Linux Capable ☛ How to Use Gzip Command in Linux: Concepts and Examples

    Gzip is a widely used compression tool in the Linux community that allows for the compression and decompression of files and directories.

  • dwaves.de ☛ the GNU Linux (MATE) version of the Windows Taskmanager (graphical version of top or htop)

    it is pretty usefull, to see, what programs are running, what program uses how much CPU/RAM/DISK and the overall ressource use of the system.

  • Linux Cloud VPS ☛ How to Install Grafana on AlmaLinux 9

    In this tutorial, we will explain how to install Grafana on AlmaLinux 9 OS. If you ever doubt what Grafana is and what it is used for, we are here to explain it to you.

  • Linux Capable ☛ How to Install Nomacs on Ubuntu 22.04 or 20.04

    Nomacs is a powerful, open-source image viewer offering extensive features, a lightweight design, and cross-platform compatibility. It stands out as a valuable tool for developers and users who need advanced capabilities for image processing tasks.

  • Red Hat ☛ How to easily deploy OpenShift on Azure using a GUI, Part 1 [Ed: Red Hat seems eager to help Microsoft spyware that's proprietary]

Distributions and Operating Systems

• Reviews

  • Web Pro News ☛ Linux Distro Reviews: openSUSE Tumbleweed — Part 2 – WebProNews

    Security is only a good thing if it’s not so restrictive that people begin disabling features for the sake of convenience, and this is where openSUSE’s disadvantages begin to shine through.

    Of all the distros that I have tried to date (Fedora, Manjaro, openSUSE, KDE Neon, Pop!_OS, Kubuntu, and Zorin OS), openSUSE’s security policies are by far the most restrictive. Want to adjust your network settings? You’ll need to enter your password. Want to install a Flatpak app? You’ll need to enter your password. Change your timezone? Enter your password.

    What’s more, the default firewall settings are so strict that printer discovery doesn’t work out of the box. To be clear, every single other distro I’ve tried automatically discovers my HP printer on my network and lets me print without installing any additional drivers.

    In contrast, openSUSE cannot even discover the printer without changing the firewall profile from the default ‘Public’ to ‘Home,’ or adding the mDNS service to the ‘Public’ profile. Even when making sure mDNS is enabled, openSUSE still requires “hplip” software/driver package installed.

    Is it possible to overcome these issues? Yes. But many people, especially less technical users, give up before figuring out how to jump through all these hoops. In fact, a quick look at openSUSE’s Reddit will reveal that two common solutions to printing on openSUSE are a) disable the firewall altogether or b) “don’t print on openSUSE.” Seriously…I have seen that advice multiple times…”don’t print on openSUSE.”

    The issues with printing on openSUSE are irritating enough that Linux creator Linus Torvalds famously dumped openSUSE and switched to Fedora because printing was just too hard to bother with. Fans of the distro will point out that it has gotten better since that day…but it’s still not good enough for the average desktop user.

• New Releases

  • Help Net Security ☛ Penetration Testing with Kali Linux 2023 released: New modules, exercises, challenges (PEN-200)

    OffSec released the 2023 edition of Penetration Testing with Kali Linux (PEN-200). This new version, which incorporates the latest ethical hacking tools and techniques through real-world penetration testing simulations, offers many improvements and additions, including new Learning Modules and Learning Objectives to help learners focus on critical areas, new, progressive sets of machines (Challenge Labs) to assist learners in synthesizing materials; and private environments to create a superior learning experience.

• Fedora Family / IBM

  • The Register UK ☛ Reg FOSS desk test drive: First beta of Fedora 38 drops • The Register

    The Fedora project has released the beta version of Fedora 38. The Reg took it for a spin, and it handles well.

    The beta version of Fedora 38 is here, hitting the “early target” in its schedule. As usual, there’s an extensive changeset, which is worth scrutinizing for the full details of all the various subcomponents. We tried the beta in both VirtualBox and on bare metal, and so far, it has worked flawlessly – which is particularly impressive given the issues we had with Fedora 37 when it was at the same stage.

    We’ve covered some of what’s going into this release already, and we try not to repeat ourselves. Among the more visible changes, there will be two new “spins”: one with Budgie and one with Sway. Also, earlier this month, it turned out that some “legacy” components aren’t being dropped just yet. The default Workstation edition will come with GNOME 44, which itself just recently reached Release Candidate status and brings some welcome improvements.

    Among other highlights, it comes with the latest kernel 6.2. (Incidentally, this will also be used in Ubuntu 23.04, although that’s not yet reached beta stage – that milestone should be at the end of this month.)

• Canonical/Ubuntu Family

  • KitGuru ☛ OnLogic’s new fanless mini-PC uses a heatsink as a chassis

    To meet the need for capable computing power in environments with difficult installation conditions, OnLogic has launched its Helix 401 fanless industrial computer. This small device, which has made its premiere at Embedded World 2023, is designed for use in edge computing, IoT, and many other applications.

    The Helix 401 is available with a variety of Intel 12th Gen Core and Celeron CPUs. Customers may choose the CPU that best meets their application requirements, with options ranging from a Celeron 7305E to an i7-1270PE. Whether you need an HX401 for general-purpose data handling or complex machine vision and AI tasks, the Intel Iris Xe iGPUs on these CPUs will help. Windows 11 Pro 64 Bit, Windows 10 IoT Enterprise, and Ubuntu 22.04 are among the operating systems available. In addition, the Helix 401 is Red Hat Certified for usage with Red Hat Enterprise Linux 8.7, 9.1, and future releases.

Free, Libre, and Open Source Software

• It’s FOSS ☛ NordVPN’s Linux App is Now Totally Open Source

  NordVPN probably needs no introduction

  It is a popular cross-platform VPN service known for its features and competitive pricing.

  With a recent announcement, they open-sourced three of their products alongside the launch of their free ‘Meshnet’ feature.

  Let’s see what’s in store for us.

• Medevel ☛ Umami: Open Source Web Analytics and Google Analytics Alternative

  Umami is a simple, fast, privacy-focused alternative to Google Analytics.

• Medevel ☛ Benefits of Using Open Source Knowledge Base + Top Tools

  Want to build an open source knowledge base? Learn everything about this solution, its pros and cons, including tools to use with our article.

• Programming/Development

  • How to remove a package from PHP composer?

    PHP Composer is a package manager designed to install the libraries or dependencies required by a PHP application or project.

  • How to clear PHP composer cache or delete its folder?

    While working with PHP Composer, are you facing slow performance then to improve it and the efficiency of managing dependencies try to clear the cache of Composer for your Project.

  • Godot Engine ☛ Release candidate: Godot 4.0.1 RC 1

    Following the biggest Godot release ever we’ve collected several critical fixes and smaller usability improvements to make your experience with 4.0 more pleasant. This is the first release candidate for early adopters to test the changes, with the stable 4.0.1 release coming soon after.

Leftovers

• Tedium ☛ Field of Bankruptcies

  It’s hard out there trying to do something new, which is why we want to look back on some of the notable failed sports leagues.

• Science

  • Science Alert ☛ When The Pandemic Came, The Zoos Shut, And The Animals Began to Act Differently

    When the humans go away…

  • Science Alert ☛ JWST Catches Sight of a Rare Star on The Brink of Going Supernova

    Only a few hundred thousand years to go!

• Hardware

  • CNX Software ☛ Renesas introduces 100 MHz RA4E2 and 200 MHz RA6E2 Arm Cortex-M33 MCUs for wearables, sensors, appliances

    Renesas Electronics has added two new groups to its 32-bit RA family of microcontrollers (MCUs) with the 100 MHz RA4E2 and 200 MHz RA6E2 Arm Cortex-M33 microcontrollers designed for “high-performance applications” in small packages such as sensing, gaming, wearables, and appliances. The new microcontrollers are equipped with 40 KB SRAM, 128 KB or 256 KB flash, and integrate various on-chip interfaces such as CAN FD, USB, QSPI, SSI, and I3C interfaces to offer an easy upgrade path for products based on other members of the Renesas RA Family. Renesas RA4E2 MCU group Both the RA4E2 and the RA6E2 are the most cost-effective microcontroller groups of the RA family with integrated CAN FD,  with the RA4E2 group especially well-suited to cost-sensitive applications and other systems requiring relatively high performance, low power consumption, and/or small package size.

  • CNX Software ☛ Synaptics SYN4382 SoC supports Wi-Fi 6E, Bluetooth 5.3, and 802.15.4 connectivity

    Synaptics SYN4382 is a triple combo SoC with Wi-Fi 5/6E, Bluetooth 5.3, and IEEE 802.15.4 (Zigbee/Thread/Matter) radios, and manufactured with a 16nm process to lower power consumption for IoT and multimedia applications.

• Health/Nutrition/Agriculture

  • Mexico News Daily ☛ Fighting mental health stigma: Affordable and personalized care in Mexico

    Magala and Pedro started out as parents desperate to find help for their child. Now, at their own clinic, they are the ones offering help, fighting mental health stigma and providing treatment.

• Proprietary

  • Alex Ellis ☛ Docker is deleting Open Source organisations – what you need to know

    Coming up with a title that explains the full story here was difficult, so I’m going to try to explain quickly.

    Yesterday, Docker sent an email to any Docker Hub user who had created an “organisation”, telling them their account will be deleted including all images, if they do not upgrade to a paid team plan. The email contained a link to a tersely written PDF (since, silently edited) which was missing many important details which caused significant anxiety and additional work for open source maintainers.

  • OS News ☛ Docker is deleting open source organisations – what you need to know

    What a shitshow. We really have to start worrying about the future of Github, too, since I find it highly unlikely Microsoft isn’t planning similar moves in the future. If you’re hosting code at Github, I’d suggest looking at alternatives sooner rather than later, so you don’t end up like the people affected by something like this.

• Linux Foundation

  • PR Newswire ☛ Linux Foundation Training & Certification & Cloud Native Computing Foundation Partner with CoRise to Prepare 50,000 Professionals for the Certified Kubernetes Administrator Exam

• Security

  • IT Wire ☛ Latitude leaks customer data after employee login details stolen

    Financial services provider Latitude Financial has disclosed a breach that it says has led to the leak of personal IDs of more than 100,000 customers from one of its service providers.

    Additionally, about 225,000 customer records were stolen from a second service provider, the company said in a statement to the ASX on Thursday.

  • Security Week ☛ US Charges Two Men Over Use of Hacked Law Enforcement Database for Doxing

    Sagar Singh and Nicholas Ceraolo have been charged for their alleged roles in a doxing operation that involved hacking a law enforcement platform and email account.

  • Security Week ☛ SAP Releases Five ‘Hot News’ Notes on March 2023 Patch Day

    SAP has released 19 new notes on March 2023 Security Patch Day, including five notes rated hot news.

  • Scoop News Group ☛ FCC rules aims to curb scourge of robotexts assaulting Americans’ phones

    The agency reports that scam text complaints rose 500% between 2015 to 2022, reflecting the increase in robotexts Americans receive annually.

  • Scoop News Group ☛ Rural hospitals need help from feds to fight ransomware, witnesses tell lawmakers

    Experts told Senators on Thursday that rural hospitals don’t have the necessary resources to fend off an increasing number of cyberattacks.

  • Scoop News Group ☛ Scammers target Cloudflare CEO with Silicon Valley Bank-themed spearphishing

    The collapse of the U.S. tech industry’s bank of choice has prompted a massive amount of fraud attempting to capitalize on its downfall.

  • Scoop News Group ☛ The US cybersecurity strategy won’t address today’s threats with regulation alone

    The Biden administration needs to foster greater public-private collaboration, involve global partners and help build the cyber workforce to fight growing digital threats. 

  • Security Week ☛ Russian Cyberspies Abuse EU Information Exchange Systems in Government Attacks [Ed: Misdirection. The issue is Microsoft, not those exploiting the holes.]

    Russia-linked APT29 was seen abusing the legitimate information exchange systems used by European countries in attacks aimed at governments.

  • Security Week ☛ Microsoft Pins Outlook Zero-Day Attacks on Russian Actor, Offers Detection Script [Ed: Once again Microsoft leverages geopolitics to distract from its incompetence if not liability]

    Microsoft blames a “Russian-based threat actor” for in-the-wild attacks hitting its flagship Microsoft Outlook and has released a detection script to help defenders.

  • Security Week ☛ Chinese Cyberspies Hacked DLP Company Serving Military, Government Orgs

    The Chinese hacker group Tick has targeted an East Asian data loss prevention firm whose customers include military and other government organizations.

  • Privacy/Surveillance

    • EDRI ☛ European Digital Identity – A Potential Game Changer?

      The foundations for a Europe-wide digital identity system are just about to be laid. Will Europe get it right and lead on this important topic? Will the EU set a global standard for the protection of sensitive user information and digital identities?

    • NYOB ☛ Austrian DSB: Meta Tracking Tools Illegal

      Austrian DSB: Meta Tracking Tools Illegal

      Austrian Data Protection Authority (DSB) decided that the use of Facebook’s tracking pixel directly violates the GDPR and the so-called “Schrems II” decision on transatlantic data flows.

    • EDRI ☛ EDRi-gram, 15 March 2023

      Last week, on International Women’s Day, EDRi’s Sarah Chander and Claire Fernandez were honoured as leading voices for change in the European Union and tech and digital rights space.

      Join us in celebrating them and all women!

      In this edition, amongst other digital rights updates, check out our position on the proposed European Health Data Space. This attempt by the European Union to better use health data could come at the cost of patients’ right to privacy and consent.

      You can also catch up with your favourite #PrivacyCamp23 sessions by reading the summaries below or watching the recordings online.

• Defence/Aggression

  • JURIST ☛ UK Supreme Court: trial must decide if $3B Ukraine loan from Russia was taken under duress

    The UK Supreme Court Wednesday ruled that a full public trial must be held to evaluate Ukraine’s “arguable and justiciable defence of duress” in relation to a $3 billion debt the nation owes to Russia.

  • Modern Diplomacy ☛ Ukraine war and Middle East

    Emboldened by the independent foreign policies of Western allies Israel and Turkey, more countries in the region are weighing where their own interests lie, notes Gilles Kepel, author of more than 20 books on the Middle East, North Africa, Islam in France and Europe, adviser of senior European and Arab political and business leaders.

• Finance

  • France24 ☛ Credit Suisse to borrow up to $54 billion from central bank after shares plunge

    Swiss bank Credit Suisse said Thursday it will move to shore up its finances, borrowing up to $54 billion from the central bank after its shares plunged, dragging down other major European lenders in the wake of bank failures in the United States.

  • Mexico News Daily ☛ General Motors agrees to 10% pay increase with union at GTO plant

    The union-negotiated above-inflation raise will go into effect later this month, securing a major increase for workers.

• AstroTurf/Lobbying/Politics

  • France24 ☛ UK bans TikTok on government devices over security concerns

    Britain said on Thursday it would ban TikTok on government phones with immediate effect, a move that follows other Western countries in barring the Chinese-owned video app over security concerns.

• Censorship/Free Speech

  • EDRI ☛ Case challenging Meta’s arbitrary removal of Polish NGO’s accounts finally in court

    The first court hearing in the case between a Polish NGO and Meta took place before the Warsaw District Court on 7 February 2023. The hearing was conducted almost four years after the organisation sued the internet giant for deleting its accounts and groups without a prior warning or an explanation.

• Civil Rights/Policing

  • JURIST ☛ FIFA should use World Cup funds to compensate victims of Qatar human rights abuses: rights groups

    Human Rights Watch (HRW) Thursday said that the Fédération Internationale de Football Association (FIFA) should utilise the approved World Cup Qatar 2022 Legacy Fund to compensate victims of human rights abuses related to the 2022 World Cup.

  • JURIST ☛ Vermont school district settles race, sex-based harassment complaint

    The Twin Valley School District in Windham County, Vermont Thursday reached a settlement agreement to resolve a complaint that a student was harassed based on her race and sex.

  • France24 ☛ Celebratory gunfire hits a transformer in Hebron: ‘We came close to a horrendous disaster’

    Videos filmed on March 14, 2023 show armed supporters of the Palestinian political movement Fatah firing celebratory gunshots into the air in Hebron in the West Bank. The men were celebrating their party’s victory in student elections held at the city’s polytechnic university. However, this celebratory gunfire, a common occurrence during celebrations in the Middle East, hit a transformer, causing it to explode. Our Observer says the result could have been catastrophic.

• Monopolies

  • Patents

    • JUVE ☛ InterDigital vs. Lenovo: High Court cements UK as centre for FRAND-rate setting [Ed: InterDigital is a massive patent troll, just like the sponsors of this Web site and 'journalist']

      Finally, the High Court in London has handed down its much-anticipated decision in the dispute between InterDigital and mobile device manufacturer Lenovo over FRAND licensing and terms.

Gemini* and Gopher

• Personal

  • architects of cruelty

    They built walls as the world caved in
    fountains as the reservoirs dried up
    prepared feasts in famine

    now they lay in rags or in coffins
    shouting to the heavens for its cruelty
    but the kingdom of heaven’s walls held strong

    their cries lay unanswered
    their servants abandoned them
    the utopia they fancied unfurled

• Technical

  • Accidental portrait

    I’ve been working on a pinball game. I wanted level 2 to work like Bagatalle. You can control the strength of the plunger that fires a ball into play, but that’s it. I put a few things on the playing field, and then worked on getting the plunger to work properly.