Bonum Certa Men Certa

Links 26/08/2022: Lutris 0.5.11 and NetworkManager 1.40.0



  • GNU/Linux

    • Server

      • UbuntuCharmed Kubernetes and Huawei Oceanstor Pacific storage integration verification report | Ubuntu

        Huawei OceanStor Pacific is an intelligent distributed storage series with scale-out capability designed to support the business needs of today and tomorrow. Its diverse and adaptable range of features provides efficient processing for diverse data, everlasting operations for services, and economical storage for mass data.

        The OceanStor Pacific series supports Storage Access Protocols like NFS, CIFS, POSIX, MPI-IO, HDFS, and Amazon S3. The Block storage allows for SCSI or iSCSI access modes and delivers HA solutions such as distributed active-active and cabinet-level redundancy. It is widely applicable to virtualization, cloud resource pools, and databases.

        OceanStor Pacific Storage provides a perfectly reliable, economical, scale persistent storage for PaaS or CaaS (Platform/Container as a Service). The industry scenario includes Channel access PaaS for Internet finance, development and testing PaaS, carrier cloud services for BOM domains and B2B cloud resource pools, smart governments, and Smart City PaaS.

        Canonical commercially distributes and supports a pure upstream version of Kubernetes. Ubuntu is the reference operating system for Kubernetes deployments, making it an easy way to build Kubernetes clusters. MicroK8s, a Kubernetes is delivered in the form of snap – the universal Linux app packaging format – which dramatically simplifies the installation and upgrades of components.

    • Audiocasts/Shows

      • Jupiter BroadcastingWe Should Know Better | Self-Hosted 78

        We learned some really hard lessons this week, and reflect. Then Chris finds the perfect temperature sensor, and Alex finds a beautiful media discovery app.

      • mintCast Pocast394 – With music on our side to break the old hard drives – mintCast

        1:25 The News 16:15 Security and Privacy 26:03 Bi-Weekly Wanderings 1:22:59 Housekeeping and Announcements

        First up in the news, The Kernel gets a bump, LibreOffice adds a point, Android 13 is out if you have a Pixel, and Gnome has a birthday,

        In security and privacy, Discord and your passwords are pythoned, and hard drives apparently have a taste in music

        Then in our Wanderings, Joe plays with his handheld, Bill is setting up a new server, Moss skips the assault and gets a couple batteries, and Norbert has had done some things.

    • Benchmarks

      • NeowinLinux could leave Windows 11 in the dust as Intel hybrid CPUs get further optimizations - Neowin

        Back at its Architecture Day 2021 event, when Intel shared the core design details of its Alder Lake CPU architecture, the firm stated that Windows 11 was optimized in a way to best take advantage of the Alder Lake's Performance Hybrid architecture and the new Thread Director technology that helps Windows 11 task scheduling.

        Following this announcement, head to head testing back in November 2021, indeed showed Windows 11 outperforming Linux quite easily thanks to the special optimizations baked into Microsoft's new OS. In fact, it was beating out Windows 10 too, even when using an older Lakefield CPU.

        [...]

        With this Linux can potentially leave Windows 11 in the dust depending on the kind of improvements the new optimization sees.

    • Applications

      • Cockpit Project: Cockpit 275

        Cockpit has always had the theoretical ability to run arbitrary programs to gain administrative access, by adding them to a package manifest. However, the UI would always use “sudo”. Now, if multiple programs are defined, the UI will prompt for which one to use.

        By default, Cockpit will still only use “sudo”, so unless you actually add more programs via a manifest, there will be no visible change in the UI.

      • Its FOSSFOSS Weekly #22.31: Tweaking Nemo, Tools to Understand Linux Commands and More

        I got an overwhelmingly positive response to the new newsletter format.

        A few FOSSers expressed concern about losing the personal touch in this new format. I assure you that it won't happen.

    • Instructionals/Technical

      • MakeTech EasierHow to Update Firmware in Your Linux Machine - Make Tech Easier

        Firmware is a type of software that provides the low level control for device specific hardware. Firmware is stored on the read only memory (ROM) of a device. It gives instructions to the hardware about how it should be operated. Firmware can’t be modified or deleted by the end-user just like other software. You need some specialized software to do so. In this article, we are going to learn, how to update firmware in your Linux machine.

      • UNIX CopHow to install Signal Desktop client on Ubuntu 22.04 | Linux Mint 21

        Similar to WhatsApp and Telegram, Signal is a mobile messaging application that emphasizes security. So much so that Edward Snowden recommends it for everyday use.

        Like any modern mobile messaging app, you can expect stickers, video calls, individual, and group messaging and much more.

        Signal has good support for Linux, adding an excellent desktop client where you can use it for your daily communications on a computer.

        So let’s install it and use it.

      • HowTo GeekHow to Trap Errors in Bash Scripts on Linux

        By default, a Bash script on Linux will report an error but keep running. We show you how to handle errors yourself so that you can decide what needs to happen next.

      • H2S MediaHow to install Memcached on Ubuntu 22.04 LTS Server

        Steps and commands to install and configure Memcached on Ubuntu 22.04 LTS Jammy JellyFish to cache data for PHP or Python-based applications.

        Memcached is a BSD-licensed published cache server used by many organizations and website owners to quickly retrieve data from memory. It has been used by many users to improve the overall speed and performance of their dynamic websites with database connectivity to improve performance by avoiding disk access by storing important data in memory or by minimizing the call of complex and frequently used database queries – especially SELECT statements.

        Data is provided with a unique key value and stored as strings in memory whereas the connection takes place to the Memcached server via the PROTOCOLS TCP and IP. The stored data can be either permanent or temporary. Well, in the case of temporary storage, the deletion of cached data will happen automatically after the configured interval of time.

      • ID RootHow To Install Apache Tomcat on Linux Mint 21 - idroot

        In this tutorial, we will show you how to install Apache Tomcat on Linux Mint 21. For those of you who didn’t know, Apache Tomcat is an open-source Java servlet container. Tomcat is developed and maintained by a free group of developers under the Apache Software Foundation’s auspices and is licensed under the Apache License 2.0.

        This article assumes you have at least basic knowledge of Linux, know how to use the shell, and most importantly, you host your site on your own VPS. The installation is quite simple and assumes you are running in the root account, if not you may need to add ‘sudo‘ to the commands to get root privileges. I will show you the step-by-step installation of an Apache Tomcat on Linux Mint 21 (Vanessa).

      • ID RootHow To Install Grafana on Fedora 36 - idroot

        In this tutorial, we will show you how to install Grafana on Fedora 36. For those of you who didn’t know, Grafana is open-source analytics and monitoring solution for every database. It provides charts, graphs, and alerts for the web when connected to supported data sources. You can either install the open source version or the enterprise version. Both options would be free at the point of installing the service, but if you feel like you would like the Enterprise service that Grafana offers, you would only upgrade seamlessly with the enterprise version.

        This article assumes you have at least basic knowledge of Linux, know how to use the shell, and most importantly, you host your site on your own VPS. The installation is quite simple and assumes you are running in the root account, if not you may need to add ‘sudo‘ to the commands to get root privileges. I will show you the step-by-step installation of the Grafana monitoring tool on a Fedora 36.

      • OSTechNixBash Select Loop Explained With Examples - OSTechNix

        We have seen about bash for loop, while loop, and until loop in our previous articles with detailed examples. Bash offers one more type of loop called select loop, which will allow you to create menu-driven scripts.

        Menu-driven scripts are good alternatives to scripts that require users to pass arguments to perform an action. You can add more verbosity in your menus and users have to just select the option for the program to do its job.

      • Extend LVM and online resize filesystem
      • How to install Datadog Agent on Ubuntu 22.04 – NextGenTips

        In this tutorial, we are going to learn how to install Datadog Agent on Ubuntu 22.04.

      • How to Install PrestaShop on Ubuntu 22.04 - LinuxTuto

        PrestaShop is an open-source platform that allows anybody to easily create an e-commerce website platform to start selling products. The software was created with PHP and released under the Open Software License (OSL).

        In this tutorial, we will explain how to install and configure the PrestaShop e-commerce platform on Ubuntu 22.04.

      • H2S MediaInstall Ajenti Admin Panel on Ubuntu 20.04 LTS Server

        Manage your CLI server by installing Admin Panel Ajenti on your Ubuntu 20.04 LTS Focal Fossa server using the command terminal.

        Ajenti is an open source Server management that offers an easy-to-use Web-based graphical user interface to command line servers so that they can be managed easily, locally or remotely.

        Well, you can’t compare it to the popular WHM Cpanel, instead, with the Cockpit Server Admin platform but with extra features to manage servers. That makes it easier for administrators to gain an overview and enable other users to manage docker containers, start services or run scripts, for example.

        The current version of Ajenti is a V2 lightweight Admin panel, however, there is also one more edition Ajenmti 1.x Panel which is not currently in development. Because the developers are focusing on Ajenti V2 which offers plugin-based architecture to expand the capabilities of the Panel. It is developed with Python3 & AngularJS and in the future will have plugins to manage other Server services such as apache2, Nginx, postfix, etc.

      • TechRepublicHow to create a Project in OpenProject

        OpenProject is an open-source project management platform that makes it pretty easy to manage projects from the security of your own data center or your third-party cloud host. OpenProject can easily be deployed with the help of Docker, so you don’t have to worry about the complications of installing it manually.

        Once OpenProject is up and running, and you have the basic configurations taken care of, it’s time to create your first project. We’ll first create a new project, then we’ll add members and even set the project as a template, so you can more easily recreate it.

      • TecAdmin(Resolved) Port 22 Connection Refused on Ubuntu & Debian – TecAdmin

        Sometimes we get an error “Port 22: Connection refused” during the SSH connection to a remote system. This can happen due to multiple reasons.

      • MakeTech EasierHow to Use Pushbuttons With Raspberry Pi GPIO Pins - Make Tech Easier

        If you’ve ever used an LED with a Raspberry Pi, then you probably know how GPIO outputs work. Code makes electricity flow through General Purpose Input / Output (GPIO) pins, passes through the LEDs, and lights things up. But have you ever tried doing the reverse? With pushbuttons, you can do the exact opposite. This tutorial shows you how to turn a GPIO pin into an input pin, listening to every button press you make!

      • Linux Shell TipsHow to Password Protect Directory in Nginx Web Server

        While Nginx pre-configurations cater to essential security needs for our web applications, some security precautions need to be user-defined.

        For instance, a website’s web directory may contain files and other subdirectories that we wish to protect from unauthorized user access. A solution to the problem is basic authentication implementation on the Nginx web app configuration file.

        This article will walk us through viable steps of password-protecting a web app directory hosted by an Nginx web server.

      • CitizixHow to Install Puppet 7 Server on Rocky Linux/Alma Linux 9

        In this guide, we are going to install Puppet 7 Server Open Source in Rocky Linux/Centos 8 Server. We will set up a Puppet server and an agent and install nginx using puppet manifests.

        Puppet is a software configuration management tool which includes its own declarative language to describe system configuration. It is a model-driven solution that requires limited programming knowledge to use. Puppet operates in an agent-master architecture, in which a master node controls configuration information for a fleet of managed agent nodes.

      • ID RootHow To Install OpenRGB on Linux Mint 21 - idroot

        In this tutorial, we will show you how to install OpenRGB on Linux Mint 21. For those of you who didn’t know, Open source RGB lighting control that doesn’t depend on manufacturer software. OpenRGB is available for Windows, Linux, and macOS. The software offers many features, including support for RGB amber lighting, game integrations, music visualization, and more. Additionally, the software comes with a plugin interface that allows you to extend its functionality even further.

        This article assumes you have at least basic knowledge of Linux, know how to use the shell, and most importantly, you host your site on your own VPS. The installation is quite simple and assumes you are running in the root account, if not you may need to add ‘sudo‘ to the commands to get root privileges. I will show you the step-by-step installation of OpenRGB on Linux Mint 21 (Vanessa).

      • Red Hat OfficialNetwork automation with Ansible filters | Enable Sysadmin

        Ansible uses the Jinja2 templating system to handle variables in YAML playbooks. As I explained in my previous article, filters are a very powerful feature in Ansible that allow you to manipulate data in many different ways. One useful filtering example is network configuration.

      • dwaves.deGNU Linux – fonts and font editors – what is WOFF?
      • dwaves.deGNU Linux bash – tar – how to pack compress backup folder create tar.gz and exclude filetype
      • Linux Shell TipsNeofetch – A Command Line Linux System Information Tool

        How much do you know about your Linux OS system information? Moreover, what system settings do you check, or what inbuilt Linux commands do you run to retrieve important information regarding your Linux operating system distribution?

        This article guide is here to answer such important questions concerning your Linux OS distribution via the Neofetch system information tool.

      • OpenSource.comHow I analyze my music directory with Groovy | Opensource.com

        Lately, I’ve been looking at how Groovy streamlines the slight clunkiness of Java. In this article, I begin a short series to demonstrate Groovy scripting by creating a tool to analyze my music directory.

        In this article, I demonstrate how the groovy.File class extends and streamlines java.File and simplifies its use. This provides a framework for looking at the contents of a music folder to ensure that expected content (for example, a cover.jpg file) is in place. I use the JAudiotagger library to analyze the tags of any music files.

    • Lutris

    • Desktop Environments/WMs

      • K Desktop Environment/KDE SC/Qt

      • GNOME Desktop/GTK

        • LinuxiacThe GNOME Project Introduces a Telemetry Data Collection Tool

          GNOME released a new gnome-info-collect tool that collects (anonymous) information about your system and some of the choices you’ve made.

          Above all, we want to stress that there is no cause for concern, especially for highly sensitive users regarding data privacy.

          In today’s world, users have mixed feelings about telemetry. But first, for those not in the know, let’s define telemetry in its use as software.

          Telemetry typically comprises software running in the background, gathering data about your computer and how you interact with it, and forwarding it to third parties – for example, hardware vendors or operating system makers.

        • OMG UbuntuPano is a 'Next-Gen Clipboard Manager' for GNOME Shell - OMG! Ubuntu!

          ‘Pano’ bills itself as a “next-gen clipboard manager for GNOME Shell” and if first impressions are anything to go by, it certainly fulfils that claim!

          Most clipboard managers (that I’ve used, at least) tend to be text-heavy lists. You copy items, they get added to a list, and you spend ages trying to work out which truncated string is which. Pano is way more graphical in its presentation of your copy/paste history making it potentially more useful.

          [...]

          Clipboard managers are only as useful as their contents, and not every you copy you’ll want to keep within easy reach. You can remove an item your clipboard history by clicking on the ‘x’ in the corner, and search through all saved contents using the search bar.

  • Distributions and Operating Systems

    • SUSE/OpenSUSE

      • Mesa, Git, Gear, More Update in Tumbleweed - openSUSE News

        The rolling release continues fastforwarding daily with new versions of software.

        The most recent snapshot is 20220824 and it updated the Linux Bluetooth protocol bluez 5.65; the package fixed a few Advanced Audio Distribution Profile issues and added experimental support for ISO sockets. The 4.16.2 version of hypervisor xen dropped several patches contained in the new tarball including a CLFLUSH work around for AMD x86. The new xen update fixes a few Common Vulnerabilities and Exposures. There were a few updates related to Vulkan like an update of shaderc 2022.2, which added support for 16b-bit-types in High-Level Shader Language. There were also updates to vulkan-loader and vulkan-tools 1.3.224.0. The OpenGL and OpenGL for Embedded Systems shader glslang 11.11.0 added OpSource support and avoids a double-free in functions clone for vulkan in relaxed mode.

        Mesa and its drivers package updated to version 22.1.7 in snapshot 20220823. The 3d graphics library’s new version had fixes and cleanups all over the tree; most of the fixes were for the Zink driver that emits Vulkan Application Programming Interface calls. Several YaST packages updated in the snapshot. There were some adjustments made with yast2-storage-ng 4.5.8 to adapt to new types of mounts by libstorage-ng, and yast2-network 4.5.5 added a class to generate the configuration needed for Fibre Channel over Ethernet. Other packages to update in the snapshot were transactional-update 4.0.1, autoyast2 4.5.3 and many other libraries.

        [...]

        Among the packages to update were KDE Gear 22.08.0, which allows you to sort files also by file extension with Dolphin.

      • openSUSE Tumbleweed – Review of the week 2022/34 – Dominique a.k.a. DimStar (Dim*)

        Dear Tumbleweed users and hackers,

        This week, Tumbleweed made the impossible possible: we have published 8 daily snapshots in just 7 days. Of course, the timing was a bit on our side: the snapshot that started building yesterday went so quickly through build and QA that it already managed to be published. In any case, the daily streak continued all along (now at 22 – a new all-time record).

    • Fedora Family / IBM

      • Red Hat OfficialEdge automation: Seven industry use cases and examples

        Put simply, edge computing is computing that takes place at or near the physical location of either the user or the source of the data being processed, such as a device or sensor.

        By placing computing services closer to these locations, users benefit from faster, more reliable services and organizations benefit from the flexibility and agility of the open hybrid cloud.

      • Red Hat OfficialModernization: Developing your code migration strategy
      • GTK 2 removal from RHEL 10+

        In RHEL 10 the GTK 3 and GTK 4 will still continue to be available for everyone to use.

      • Fedora ProjectCPE Weekly Update - Week 34 2022 – Fedora Community Blog

        This is a weekly report from the CPE (Community Platform Engineering) Team. If you have any questions or feedback, please respond to this report or contact us on #redhat-cpe channel on libera.chat (https://libera.chat/).

        We provide you both infographics and text version of the weekly report. If you just want to quickly look at what we did, just look at the infographic. If you are interested in more in depth details look below the infographic.

      • CentOSCentOS Community Newsletter, August 2022 – Blog.CentOS.org

        CentOS hosted a Dojo at DevConf.US in Boston. This was our first return to hosting in-person events, and we tried to include remote participants with a YouTube live stream. Thanks to everybody who joined us in Boston or online. We appreciate feedback on how we can improve hybrid events. The recordings will be published soon.

      • Enterprisers ProjectHow to hire (and retain) Gen Z talent

        As a new generation of IT talent emerges, corporate leaders should examine business practices that embrace new ideas and expectations. Consider this expert advice

    • Debian Family

      • DebugPointDeepin 23 Plans to Leave Debian, Aims to Become Independent

        A few days back, the Deepin team gave a preview of the upcoming Deepin 23 release with new feature updates and additional details. However, in a recent post in the official subreddit of Deepin, the team announced that Deepin 23 would not be based on Debian anymore.

    • Devices/Embedded

      • peppe8oJellyfin and Raspberry PI: a Free System to Manage your Media

        Raspberry PI computer boards, especially the newest ones, meet perfectly the need for small media center systems. One of the most famous on the web is Jellyfin

        This tutorial will show you how to install Jellyfin on Raspberry PI computer boards using Docker. For this tutorial, I’m going to use a Raspberry PI 3 Model A+, but it should work with any newest Raspberry PI computer board.

        Moreover, I’m going also to show a way to easily upload media files remotely to your Jellyfin media center.

        [...]

        Jellyfin is a Free Software Media System licensed under the GNU GPL: this means that you can use it, study it, modify it, build it, and distribute it for free, as long as your changes are licensed the same way. It descends from Emby‘s 3.5.2 release, trying to be different in order to avoid attached strings, premium licenses or features, and hidden agendas.

  • Free, Libre, and Open Source Software

    • Events

      • UbuntuMeet Canonical at OpenSearchCon 2022 and hear about our new community collaboration | Ubuntu

        OpenSearch makes it easy to ingest, search, visualise, and analyse data. Developers build with OpenSearch for use cases such as application search, log analytics, data observability, data ingestion, and more.

        OpenSearch is Apache 2.0 licensed software, which means that it is open source and run, maintained and advanced by the community. OpenSearch includes a network of partners and is open to contribution. OpenSearch also has principles for development, as the organisation believes that great open-source software is built together with a diverse community of contributors. Canonical, the publisher of Ubuntu, is proud to be a member of this expanding community.

      • Daniel Stenbergcurl up 2022 take 2 | daniel.haxx.se

        In June of 2022 we intended to run the curl up 2022 curl conference in person, in California.

        Unfortunately, I had the bad taste of catching covid exactly when I was about to use my new US visa for the first time, so I had to remain at home and because of that we cancelled the whole event.

    • Web Browsers

      • Mozilla

        • MozillaSlow your scroll: 5 ways to fight misinformation on your social feed

          The news is overwhelming. Attention spans are waning. Combine those with social media feeds that are optimized for endless scrolling, and we get an internet where misinformation thrives.

          In many ways, consuming news has become a social act. We get to share what we’re reading and thinking through social media. Other people respond with their own thoughts and opinions. Algorithms pick up on all of this activity, and soon enough, our feeds feed us what to consume next – one after another. While it could be actual news and accurate information, often, it’s an opinionated take, inaccuracy or even propaganda.

        • MozillaFirefox Presents: Feeling alive with the ‘Stoke King’

          If you could use a little hyping up to go outside, look no further than Wade Holland’s social media feeds. A former competitive skier from Montana, Holland encourages people to find their “stoke” – whether that’s by going on a mountain bike ride, rollerblading, or just feeling the sun on your skin.

          “It can be finding a little park right behind your house and singing and dancing in it,” Holland said. “You don’t have to hike Everest. You can do whatever elevates your stoke!”

        • ThunderbirdWe Asked AI To Create These Beautiful Thunderbird Wallpapers

          The buzz around AI-generated artwork continues to grow with each passing week. As machine-learning-driven AI systems like DALL€·E 2, Midjourney, and Stable Diffusion continue to evolve, some truly awe-inspiring creations are being unleashed onto the world. We wanted to tap into that creative energy to produce some unique desktop wallpapers for the Thunderbird community!

          So, we fed Midjourney the official Thunderbird logo and a series of descriptive text prompts to produce the stunning desktop wallpapers you see below. (Can you spot which one is also inspired by our friends at Firefox?)

    • Programming/Development

      • postmarketOS // Considering SourceHut, Part 2

        We recently added a post, Considering SourceHut, where we explained our desire to move from our current source code and issue hosting on gitlab.com to SourceHut. Along with a tentative rollout plan and a call out to postmarketOS contributors to give their feedback in an issue created specifically for that purpose (postmarketos#49). After receiving a lot of thoughtful feedback (and yes we did read them all!) from contributors and community members who read the post, we felt is was necessary to provide an update.

        [...]

        What we do know is, now would be the best time to try it.

      • <Weeks 9> Storing OCR result | My Journey at google summer of Code 2022

        This week, I implemented two ways to store the output text.

        The first way is that output text will be recorded and saved as a text file. I implement the method saveTextFile(const QString& filePath, const QString& text) of Ocr Tesseract Engine; this function uses QTextStream’s streaming operators, so we can conveniently write and update text into the file. The text file is located with the same path as the Url image.

        The second way is to save the text in XMP. I implement the method saveXMP(const QString& filePath, const QString& text) to do this task. XMP uses a structured container to host similar metadata. An alternative language string is an entry in the XMP tree (based on XML) which will be an additional property for a title or caption tag. A new language version of a label is appended to XML. There is no limit in size and char encoding. XMP is hosted in the image to a dedicated chunk outside the image data/properties.

      • Nim and BaCon

        • Barry KaulerDebian to Puppy package db conversion in Nim

          'debdb2pupdb' is written in BaCon language, though Dima (dimkr in the forum) rewrote it in C in woof-CE; though, the legacy-branch in woof-CE still has the BaCon version...

        • Barry KaulerBaCon 4.x cross-compile problem in OE

          However, it turns out that cross-compiling BaCon and apps written in BaCon, is not resolved. It was only fixed for the situation where was compiling on a x86_64 host OS, for a x86_64 target CPU.

  • Leftovers

    • Hardware

      • CNX SoftwareWAFER-TGL-U 3.5-inch Tiger Lake SBC offers 3x 2.5GbE port, SATA, 4x display interfaces - CNX Software

        IEI’s WAFER-TGL-U is a 3.5-inch SBC based on a choice of Intel Tiger Lake UP3 processors with up to 32GB RAM, SATA storage, three 2.5 Gbps Ethernet ports, four display interfaces including HDMI, DisplayPort, and the company’s custom iDPM 3040 slot for eDP/LVDS/VGA, as well as four USB 3.2 ports.

        The board also comes with M.2 sockets to add 4G LTE or 5G cellular connectivity, a few RS232/RS422/RS485 ports, and IEI says it is ideal for space-constrained applications such as AGV (Automated Guided Vehicle), AMR (Autonomous Mobile Robot), and small cabinets in factories.

    • Security

      • Living off the land, AD CS style | Pen Test Partners

        Unless you have been living under a rock for the last year or so, Active Directory Certificate Services (AD CS) abuse continues to be a hot topic in offensive security, ever since the excellent research released by Will Schroeder (@harmj0y) and Lee Christensen (@tifkin_). I, like many, have enjoyed the fruits of Will and Lee’s research since its release last year.

        Up until now exploitation of these AD CS misconfigurations typically requires tools like Certify directly over C2, or Oliver Lyak’s excellent certipy tool over SOCKS into the target environment.

        Recently, my genius and handsome colleague Nick (guess who tech QA’d this post?) and I got into a conversation around living off the land techniques for AD CS abuse. The environment he was targeting at the time was brutal from a red teamer perspective, with a high functioning SOC and excellent detection capability. In situations such as this, living of the land is a much more effective way of remaining undetected and blending in with legitimate traffic.

        [...]

        There are several ways to enrol for certificates using traditional Windows features and tools. The certutil command line tool and the web enrolment endpoint that is sometimes exposed, to name a few. But we wanted to avoid the command line if possible and not rely on the web enrolment endpoint as often this is not available.

      • LWNSecurity updates for Friday [LWN.net]

        Security updates have been issued by Debian (zlib), Fedora (dotnet3.1, firefox, java-1.8.0-openjdk-aarch32, thunderbird, and zlib), Mageia (canna, chromium-browser-stable, dovecot, firefox/nss, freeciv, freetype2, gnutls, kernel, kernel-linus, kicad, ldb/samba/sssd, libgsasl, microcode, nodejs, rsync, thunderbird, and unbound), Oracle (php:7.4 and systemd), Scientific Linux (firefox, rsync, systemd, and thunderbird), Slackware (vim), and SUSE (bluez, gstreamer-plugins-good, java-1_7_1-ibm, java-1_8_0-ibm, kernel, libcroco, postgresql10, postgresql13, python-lxml, and webkit2gtk3).

      • Bruce SchneierSecurity and Cheap Complexity - Schneier on Security

        I’ve been saying that complexity is the worst enemy of security for a long time now. (Here’s me in 1999.) And it’s been true for a long time.

      • The anomaly of cheap complexity

        So, computers are insecure because they have so many complex layers.

      • Day in the life of a package maintainer: Reproducible Go packages

        In this new blog series, I would like to introduce you to the daily adventures of an Arch Linux package maintainer.

        This time, we will have a look at reproducible package builds. Reproducible package builds are very important for us, as package maintainers, because reproducible package builds create an independently-verifiable path from source to the final package. This means, every Arch Linux user can verify that noone tampered with the Arch Linux package build process. Technically spoken, this means that we can build the same package on different systems and get an exact identical package (identical as in: they share the same SHA256 checksum).

      • Privacy/Surveillance

        • Internet Freedom FoundationPegasus Investigation Report to remain in sealed cover despite containing evidence that 5 phones had malware

          The committee of experts (‘Committee’) constituted by the Supreme Court to investigate the use of Pegasus spyware on Indian citizens recently submitted its report with the Supreme Court in a sealed envelope (‘Report’). This Report was opened for the first time by the Bench comprising Chief Justice NV Ramana (‘CJI’), Justice Surya Kant and Justice Hima Kohli in open court. The CJI read some parts of the Report, and revealed that the Report states that malware was found in 5 out of 29 phones, but that the Report couldn’t say if the malware was Pegasus. However, despite this shocking revelation, the Report will be kept in the sealed envelope, in the custody of the Supreme Court’s General Secretary, even when the CJI stated during the court proceedings, that parts of the Report will be public.

        • TechRadarThe American Data Privacy and Protection Act: a look into the United States’ first federal privacy law
        • [Old] VS Code - What's the deal with the telemetry?

          Microsoft state that they follow the General Data Protection Regulation (GDPR), and that these practices apply to all geographies, not just Europe.

          However, you cannot access the data collected.

          [...]

          And there is a ‘sign-in’ experience in VS Code. You can sync your settings by signing into a Microsoft account or GitHub account. You may not use it, but you can be obviously identified that way. Is that data linked?

          [...]

          Under the right of access article, you can make a formal request called a data subject request (DSR) to a data controller (whoever holds your data) to take an action on that data. A data controller must provide an overview of the categories of data that are being processed (Article 15(1)(b)) as well as a copy of the actual data (Article 15(3)); furthermore, the data controller has to inform the data subject on details about the processing, such as the purposes of the processing (Article 15(1)(a)), with whom the data is shared (Article 15(1)(c)), and how it acquired the data (Article 15(1)(g)).

          Microsoft have added GDPR annotations to telemetry events to describe their purpose. I guess that covers Article 15(1)(a) mentioned above. It is an enumerated variable, which can contain values: “FeatureInsight”, “PerformanceAndHealth”, “BusinessInsight”, and “SecurityAndAuditing”. It is kind of vague. What does a “BusinessInsight” event mean?

          My own take is that I do not feel like I am adequately protected. I am not totally anonymous. I cannot access data collected. Microsoft extensions collect data implicitly, and may not offer settings to control what is sent out. The fact that all Microsoft product licenses say that users cannot opt out of all data collection makes me doubt the sincerity of the effort.

          [...]

          However, VSCodium can’t shut out all the data collection as it is the same codebase. And since extensions act independently with regard to data collection, you still need to be mindful of what extensions you install.

          You would need to search around for other options if you want to find a more privacy-oriented, open-source code editor.

    • Digital Restrictions (DRM)

  • Gemini* and Gopher

    • Personal

      • It's Over, It Starts

        I am rounding out a long, manic week with a much needed full-night's rest. It feels nice to be refreshed once again after so many days of feeling like I'm working with only half of my brain. These spells of insonmia, along with intense, creative flow aren't bad. Just exhausting. And I end up feeling a bit guilty for the folks around me that rely on the rest of me being there.

      • strange thoughts

        while working on my website, i happened to stumble across an opportunity where a certain company was opening auditions for new vtuber talents. i'm only heavily considering it because i'm in the midst of a hopeless job hunt - which sounds stupid but. well. this is me trying every avenue, even the unorthodox ones.

      • My Music Collection

        Many years ago I bought a record player and started my own little record collection. I fell in love with handling, cleaning, and playing records from the very beginning. I grew up in the back-end of tapes and meat of the CD eras so records were new to me.

      • SpellBinding: ABIMORS Wordo: PIING
    • Technical

      • Internet/Gemini

        • My First Gemlog!

          I finally created a gemini capsule!!! I've been lurking on gemini for ages now, and I've been wanting to contribute my own nonsense for just as long.

          However, I could never figure out how to set up a capsule. I tried so many times, spent countless hours troubleshooting my setups, but to no avail. I had a yunohost server running though, and when I saw that I could host a gemini capsule on it I was ecstatic!

          Then, another roadblock. There are two apps available on yunohost for gemini, gemserv and my_capsule. I was familiar with gemserv so I installed it and tried to set it up. It was an absolute disaster. Could not figure it out and I thought it was just game over.


* Gemini (Primer) links can be opened using Gemini software. It's like the World Wide Web but a lot lighter.



Recent Techrights' Posts

Windows in Åland Islands: From 100% to Less Than Half
Åland Islands lost the sense of urgency to move to GNU/Linux
Not Just Slow News But Also Late News (Julian Assange Landing in Thailand)
Why did AP take so long (nearly a week) to release these?
[Meme] Smart Alec Poettering
How many Microsofters can the Debian Project withstand?
Getting Rid of Microsoft Does Not Go Far Enough
Microsoft already has many problems. One day Microsoft won't exist anymore. But that does not guarantee users' freedom.
Alyssa Rosenzweig's LibrePlanet Talk About Freeing the Apple GPU
Alyssa Rosenzweig is the graphics witch behind the reverse-engineered drivers for the Apple GPU. She previously led Panfrost, the free drivers for Arm Mali GPUs powering devices like the Pinebook Pro. She graduated in 2023 with a Computer Science degree from the University of Toronto and now writes free software full-time.
Links 30/06/2024: LLMs Under Fire and Dictatorship of the Old
Links for the day
[Meme] Walking Outside the Guardrails of the Walled Gardens Built by Monopolies
So-called "advertiser-unfriendly" material was never a problem for Wikileaks
 
200 This Week
Monday started with 40 articles/pages and this is #200
Press Complicity and Public Apathy All Along Enabled 14 Years of Illegal, Arbitrary Detention and Coercion Into Plea Bargain of Julian Assange on Brink of Death
They basically blackmailed him into letting the US 'win' the argument
At the End Journalism a Crime (If It Involves Accessing or Gaining Access to Documents Marked "Confidential" or "Classified" by Those Looking to Hide Their Misconduct/Crimes)
At least in the US, especially where the imperialism is at stake
Links 30/06/2024: Tensions in Korea and Japan, Criminalisation of Sleeping Outdoors
Links for the day
100% Slop/Spam From linuxsecurity.com
This is the kind of stuff that's killing the Web faster
Gemini Links 30/06/2024: Murdoch and Ideal OS
Links for the day
In the First 6 Months of 2024 Thailand Moved to GNU/Linux, Not to Windows Vista 11
maybe users moved from Vista 10 and 11 to GNU/Linux, seeing where Microsoft was heading with forced hardware "upgrades"
Eko K. A. Owen, New Outreach and Communications Coordinator for the FSF
Nice to see many new additions to the FSF's team
Microsoft Has Slaves and Enablers, Not Partners
Obligatory meme too
Tobias Platen Covered Freedom-To-Play Games in LibrePlanet 2024
Freedom-To-Play games using Taler
[Meme] Opening a 'Webapp' With 'Only' 4 GB of RAM
Until 2020 none of my PCs ever had more than 2 GB of RAM
Destination 'Five Percent'
We reckon GNU/Linux can break the 5% barrier some time by the end of this year, even without counting Chromebooks
A Crisis of Online Journalism
Almost a week ago a journalist was forced to plead guilty for an act of journalism
Germany One of Many Countries Where Microsoft's Bing Lost Market Share After All That LLM Nonsense (Bing Chat and Further Rebrands/Renames)
openai.com traffic plunged 60% last month
Microsoft’s Latest Antitrust Scrutiny
4 new stories
Microsoft Layoffs, Mass Plagiarism, and More
outrage included
GNU/Linux Climbed 0.25% This Month (in statCounter)
Around midday on Tuesday we'll start seeing preliminary data for July
Ilya Gulko Introduces Pollyanna
"Pollyanna is a web framework that makes it easy to create your own libre social space, such as a social network or blog."
'FSFE': Underage Labour, GAFAM Fronting, and Identity Theft to Undermine the FSF's Current Fundraiser
looking to raise funds at the same time as the FSF
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Saturday, June 29, 2024
IRC logs for Saturday, June 29, 2024
Links 29/06/2024: Astronauts at Risk, Ukraine Updates
Links for the day
Fedora and Red Hat Leftovers
mostly redhat.com
Microsoft is Now Googlebombing or Spamming 'Open Source' and 'Linux' to Promote Proprietary Surveillance, Azure
Notice the title and the image, what's being promoted etc.
Seychelles: GNU/Linux Doing OK
Seychelles cannot be considered poor
This War Crime Footage, Nothing Political Per Se, Is What They Made Julian Assange Plead Guilty To (War Criminals Not Convicted, Only Those Who Expose Them)
Wikileaks' Julian Assange: Exposing the US Military Crimes
Gemini Protocol Isn't Even Remotely "Dead"
"Lupa knows of 505,000 (half a million!) working Gemini URLs at present, up from about 425,000 this time last year"
About 10 New Free Software Foundation (FSF) Members Per Day
The total changed from 46 to 47 while typing the article
20 Years Passed, Let's Go Even Faster Now
We are hoping to bring more original stories
Vista 11 Adoption Unusually Low in Germany and It's Going Down, Not Up
This is not happening only in Germany
Kevin Korte on Computers Being Allowed to Make Decisions Based on Cryptic Algorithms and Proprietary/Secret Data
It uses buzzwords where none are needed
[Meme] Garbage In, Garbage Out (linuxsecurity.com)
It is neither Linux nor security, just chatbot-generated slop
Microsoft-Invaded CISA Spreads Anti-Free Software FUD (as If Proprietary Software Has No Memory Safety Issues), Brittany Day Uses Chatbots to Amplify and Permutate the Microsoft FUD
linuxsecurity.com became an anti-Linux spam site
Microsoft Laying Off Staff in an Act of Retaliation and Union-Busting
retaliatory layoffs at Microsoft
Gemini Links 29/06/2024: Content Drowning in 'Goo' and LLM Slop
Links for the day
Windows Lost Almost 92% Market Share in Egypt
From over 99% to just over 7%
In Ecuador, GNU/Linux Adoption Surged From Under 1% to Over 4% in About 3 Years
Not even counting Chromebooks
LibrePlanet: Cultivating Backups (of Recordings)
an appeal to recover some of these talks
Microsoft/Windows Machines Are Turned Off (or Windows Deleted/Decommissioned) in Web Servers, as the "Market Share" Collapse Continues
Taking full history into account, this is a decrease of over 90% in some cases
Corwin Brust Hosting Freedom: A Behind-the-scenes Tour With the GNU Savannah Hackers
"the "smiling faces" behind it."
Android at 90% or More in Chad
Windows below 2%
David Wilson: Cultivating a Welcoming Free Software Community That Lasts
"a feeling of shared ownership for all users."
Julian Assange Might Continue Wikileaks, But Certainly Not Yet (Recovery Time Needed)
And probably at a symbolic capacity only
Bringing in 12 Santas and Taking 13 Out (Old Interview With Julian Assange)
Julian Assange's life inside the Ecuadorian embassy
Neil Plotnick on GNU/Linux in the High School Classroom
uploaded to the LibrePlanet instance of MediaGoblin
Asia Appears to be Fastest to Adopt GNU/Linux
the home of a considerable majority of the world's population
Alexandre Oliva's LibrePlanet 2024 Talk About "Software Enshittification"
in spite of technical difficulties encountered while recording
What They Used to Do With Mono They Now Do With Systemd (Lower and Deeper Down Than Userspace)
Now we have a project started primarily by Red Hat (and managed by Microsoft GitHub, which is proprietary) being managed by Microsoft and primarily serving Microsoft and IBM
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Friday, June 28, 2024
IRC logs for Friday, June 28, 2024
Links 28/06/2024: Kangaroo Courts and Patents Spam, EFF Still Fighting for CPC's TikTok (a Digital Weapon)
Links for the day
Links 28/06/2024: Overton window and Polarization
Links for the day
[Meme] In 50 Years...
Microsoft's Vista 11 will take 50 years to be fully adopted
Only About 1 in 8 Russian Windows Users is Using Vista 11
it looks like over the past 12 months Vista 11 hardly grew and it remains very low at around 12% of Windows usage in Russia
Links 28/06/2024: More Attacks on the Press, More Censorship in Russia
Links for the day
Gemini Links 28/06/2024: Christmas Prematurely, Self-hosting
Links for the day
IBM: So Long, Suckers. Your Free OS is Now Proprietary. Pay IBM or Else.
almost exactly a year after turning RHEL into proprietary software
Vista 11 is Doomed and Despite Lack of Adoption Microsoft Already Speaks of Vapourware ("12")
"Microsoft has pulled a Windows 11 update after users reported boot loops and startup failures."
ChromeOS Reaches Highest Share in Years at the World's Most Populous Nation, Windows Now at All-Time Low of 13%
We're talking about India today
[Video] "It Is Incredible That Julian Assange Survives"
There was a positive and mutual relationship between Wikileaks and Dr Jill Stein
Never Assume That Because the Law Exists the Powerful Will Follow the Law
Who's going to hold them accountable now?
Nearly a Month Has Passed and Nobody at the Debian Project Even Attempted to Explain What Seems Like Back-dooring of Debian (and Hundreds of Distros That Are Debian-Derived)
I can cynically guess that only matters when a user with a Chinese name does it
[Video] Julian Assange Explains Wikileaks' Logistics
predating indefinite detention
IBM Was Never the "Good Guy", Just a Self-Serving and Opportunistic Money- and Power-Hungry Monopolist, Living Off of Taxpayers' Money (Government Contracts)
The Nazi Party of Germany was its second-biggest client at one point and now it's looking to profit from the work of slaves
"I Hated Working at IBM. They Were the Most Unfriendly People."
Don't forget what Watson the son did to a poor woman on a plane
State of the News (and Depletion of Journalism Online, Not Just Offline)
Newspapers are not coming back and the Web is not coming back either
GNU/Linux Consolidates in North America
Android rising a lot this year, too
[Meme] More Monopolies Granted While Patent Examiners Die (Overworking for Less Compensation)
Work more; Get less
Staff Union of the EPO (SUEPO) is Taking the New Pension Scheme (NPS) to an International Tribunal (ILOAT)
SUEPO wants more EPO staff to participate in collective action
Stella Assange and the Legal Team Speak to the Media a Day After WikiLeaks Founder Julian Assange Arrives in Australia
Published yesterday by a number of mainstream publishers
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Thursday, June 27, 2024
IRC logs for Thursday, June 27, 2024
RIP Daniel Bristot de Oliveira, Red Hat death
Reprinted with permission from Daniel Pocock