Bonum Certa Men Certa

Links 01/11/2022: Godot’s New Foundation and OpenSSL's Bug Hype Debunked



  • GNU/Linux

    • HackadayLinux Fu: Easy VMs | Hackaday

      It wasn’t long ago that we looked at easily creating Docker containers from the command line so you could just easily spin up a virtual environment for development. Wouldn’t it be nice if you could do the same for virtual machines? You can. Using Multipass from Canonical, the makers of Ubuntu, you can easily spin up virtual machines under Linux, Mac, or Windows. Granted, most of the virtual machines in question are variations of Ubuntu, but there are some additional images available, and you can create your own.

      Once you have it installed, starting up a new Ubuntu instance is trivial. If you have a set configuration, you can even set up predefined setups using a YAML file.

    • Audiocasts/Shows

    • Applications

      • TechRepublic6 free alternatives to Microsoft Word | TechRepublic [Ed: Terrible list. Most of these are proprietary and Apache OpenOffice is listed before LibreOffice.]

        If you're tired of paying for Microsoft Office features you don't use, here are free alternatives to Word you can download and start using today.

    • Instructionals/Technical

      • Make Use OfHow to Force Linux Users to Change Password at Next Login

        Linux users must change their passwords from time to time to keep their accounts secure. And as a system administrator, it's your responsibility to nudge them if they forget to change the password and continue using it for a long time.

        On Linux, user passwords are set to expire after 99,999 days by default. However, you can override the default settings and set the passwords to expire immediately.

        Here's how to force Linux users to change their passwords at the next login.

      • DebugPointHow to Install Flatpak Apps in Ubuntu and Other Linux

        A beginner’s guide on how to install Flatpak in Ubuntu and other Linux distributions.

      • Make Tech EasierHow to Secure an SSH Server in Ubuntu - Make Tech Easier

        SSH (Secure Socket Shell) is a command line interface and protocol for securely getting access to a remote Linux server. It provides a secure and encrypted communication over a network and allows data to be exchanged over a secure channel between two servers. It is widely used by system admins to control and manage their web servers remotely. This tutorial shows you how to secure your SSH server.

      • VituxHow to Monitor Linux Server Health with Command Line Tools - VITUX

        If you work on Linux servers, you need to check the disk, CPU, and memory usage on your system.

      • SUSE's Corporate BlogEnforcing Compliance of Container Environment Variables
      • It's UbuntuHow To Fix "package Dependencies Cannot Be Resolved" Error In Ubuntu 22.04 LTS | Itsubuntu.com

        If you are having issues like “package dependencies cannot be resolved” while installing some packages in Ubuntu 22.04 LTS then this Ubuntu 22.04 LTS tutorial post is for you. We have the solution for the “package dependencies cannot be resolved” error In Ubuntu 22.04 LTS.

      • Make Use OfSet Up a Cloudflare Tunnel to Expose Local Servers to the Internet

        If you are running a local server at your home on an old laptop or PC—such as a Plex Media server, a file server, a web server, or any other server—you can expose it to the internet by using the port forwarding option in your router. However, it’s neither secure nor recommended to access a server that way in a production environment.

        We will show you how to expose your local servers securely with an HTTPS connection to the internet using the free Cloudflare Tunnel service—without disclosing your public IP.

    • Games

      • Godot EngineGodot Engine - Godot’s Graduation: Godot moves to a new Foundation

        When Godot was first open-sourced in 2014, it was a very small project mostly developed by Ariel and Juan. Even after open-sourcing, contributions to Godot were almost exclusively made by volunteers. Over time, and to our surprise, many users expressed a wish to contribute financially to the project to speed up development.

        Creating a foundation at the time would have been too costly and difficult, so we turned to Ton Roosendaal for advice. Ton introduced us to the Software Freedom Conservancy (SFC), which is a charity located in New York.

        The SFC was a fantastic fit for Godot. They work as a non-profit home for several high profile FOSS projects (such as Git, Samba, Wine, etc) and they have tested and proven rules to ensure that donations are only used for the benefit of projects, as well as rules to avoid conflicts of interest. They allow open-source projects to grow and prosper and focus on their project while the SFC handles non-profit governance, accounting, and legal issues (including successfully walking back on Non Disclosure Agreements to ensure that all our work can happen in the open); essentially aggregating the work required for the operation of a not-for-profit organization.

      • Announcing Godot's Graduation from SFC! - Software Freedom Conservancy

        The Godot Game Engine joined Software Freedom Conservancy in 2015, and we're incredibly proud of their growth and improvement since then, empowering people everywhere to make their own games. The team that they have in place funded by the project for this work and the level of resources that the project has grown to need, now means that it is time for them to start their own independent organization. Working with them has given us so much hope for the future of software freedom in the game design and creative space, in which they play such a vital role. We can't wait to see their new organization thrive.

      • Ubuntu HandbookKart Racing Game SuperTuxKart 1.4 is out! How to Install in Ubuntu | UbuntuHandbook

        The free open-source kart racing game, SuperTuxKart, released the new stable 1.4 version. Here’s the new features and how to install guide for Ubuntu Linux.

        SuperTuxKart 1.4 fixed a dependency bug for MacOS user, meaning it’s now running again for macOS ranging from 10.9 to 10.14 (Mavericks to Mojave).

        The release also introduced experimental support for Vulkan renderer, for low CPU usage and better multi-platform support. User may try it out by either typing “/vulkan” in networking lobby and restart the game, or starting the game with --render-driver=vulkan argument.

        A new character Godette, the mascot of the Godot Engine, is introduced in the release. And, the Konqi now has a newer and maturer look.

    • Desktop Environments/WMs

      • K Desktop Environment/KDE SC/Qt

        • Learnings from Building an AppImage

          For some time I am offering an AppImage of Kraft to make installations for users as easy as possible. Unfortunately real linux packages are big effort for the variety of distributions, and having one way to rule them all seems very appealing.

          My first AppImage versions were pretty faulty when looking into details. So I spent some time to improve it recently, with the great help of the friendly people from AppImage community.

          Here is my little report about what I have learned. If there is something I can do better, please let me know (unless it is use $OTHERTOOL).

        • Adriaan de GrootFosstodon!

          I may retire the Twitter handle I got in 2010, but as a label it’ll live on in my Mastodon handle.

          Insofar as I think about my “social media” profile at all, I’ve come to realise that the things I actually control are the most valuable.

        • Adriaan de GrootWork-work (in glass) | [bobulate]

          Huh, I realised I had written “farewell” to Blue Systems and Calamares back in may – Calamares is still trundling along at a much reduced pace – but have not yet written about where I went to work. So, let’s fill in a little of that. I work at Vimec, which makes glass inspection machines. I went to work there because I know nothing about glass inspection, but I do know about C++, Qt, and CMake. So I’ll learn about glass while doing my usual software things.

          One of the things I notice is how “Open-Source”-ish work is. Vimec is a small company, and I can best describe a work day as “like a KDE sprint, but only from 9 to 5”. I sit down at a Linux workstation, log into KDE Plasma (backed by Active Directory, that’s the corporate angle there), poke at GitLab to see what went down overnight, git pull to see what’s up, and then fire up the editor of my choice to get stuff done.

          [...]

          I suppose I should have learned this, from prior job changes, but I notice that at the end of a day of KDE-like programming, I don’t have much energy left over for more actually-KDE programming. I sit down to do a little light Python or Haskell more than C++ these days, for kicks.

      • GNOME Desktop/GTK

        • Making Rust attractive for writing GTK applications

          Rust, the programming language, has been gaining traction across many software disciplines - support for it has landed in the upstream Linux kernel, developers have been using it for games, websites, low-level OS components, and desktop applications.

          The gtk-rs team has been doing an impressive amount of work during the last few years to make the experience of using GObject-based libraries in Rust enjoyable by providing high-quality, memory-safe bindings around those libraries, generated with gir from the introspection data.

        • Trying out Zola

          For nearly two years I have been inactive on my blog despite spending time making a fancy website, but I can no longer afford the extra code to maintain and infrastructure work to keep it running. So I decided to move the posts I had on the old website to a statically generated one while waiting for the CI to pass during the gtk-rs hackfest.

          One of the annoyances I had with static websites generators is that they were too slow. Add to that Jekyll is written in Ruby and it was too difficult to get any rubygem installed on my machine.

  • Distributions and Operating Systems

    • Updates for October, 2022 â‹… elementary Blog

      This month featured a slew of minor updates and translation updates on OS 6.1 as a side effect of preparing stable builds of OS 7, but the focus for the team is solidly on putting the finishing touches on the new major release.

      If you’ve been following along on the OS 7 Project Board, you’ll have noticed that all of the blocking window manager issues have now been resolved! Major shoutouts to Corentin Noël and David Hewitt here for finishing those off. I also want to give a special thanks to Bobby Rong, the maintainer of Pantheon on NixOS, for noticing a couple of regressions that slipped through the cracks and quickly reporting them upstream.

      At this point the outstanding tasks for releasing OS 7 largely have to do with builds, infrastructure, etc. We’re really in the home stretch now! But that doesn’t mean we can’t try to sneak in some last minute polish. I’ve been revisiting the App Icon Redesign Project and have several outstanding branches here that will hopefully make it into 7.0. Micah Ilbery and I have been working on modernizing the look of app icons on elementary OS, including increasing the border radius of tile icons, improving contrast and use of color, and adding a bit more dimensionality to icons that make use of overlaid glyphs.

    • New Releases

    • Screenshots/Screencasts

      • VideoLinux Lite 6.2 Updates - Invidious

        Today we look at Linux Lite to see what is up in the next release. This is the 6.2 RC1 which supports the Linux Kernel 5.15 by default but supports up to 6.0. We look at the system memory, default applications, and more.

      • VideoLinux Lite 6.2 Run Through - Invidious

        In this video, we are looking at Linux Lite 6.2.

      • Linux Made SimpleLinux Lite 6.2

        Today we are looking at Linux Lite 6.2. It comes with Linux Kernel 5.15, based on Ubuntu 22.04, XFCE 4.16, and uses about 900MB of ram when idling.

    • Fedora Family / IBM

      • Red Hat OfficialRed Hat Satellite 6.11.4 has been released

        We are pleased to announce that Red Hat Satellite 6.11.4 is generally available as of September 29, 2022.

        Red Hat Satellite is part of the Red Hat Smart Management subscription that makes it easier for enterprises to manage patching, provisioning, and subscription management of Red Hat Enterprise Linux infrastructure.

        The erratum for this release includes...

      • The Next PlatformOnly The Agile And Adaptable Survive [Ed: IBM puff piece from Red Hat/IBM sponsored publisher; disclosure conspicuously lacking, as usual]

        Red Hat is not just the top Linux software vendor and the driving force behind IBM’s hybrid cloud ambitions. It is by far the most agile part of Big Blue.

      • Red Hat OfficialSharing Red Hat Insights with your Technical Account Manager for better collaboration

        I have been working as a Technical Account Manager (TAM) with Red Hat for around a year now. I love interacting with my customers, working with them on shared goals and providing proactive tips on how to get the most out of the Red Hat products they are using.

        One of the Red Hat tools that I love to share with customers is Red Hat Insights. Red Hat Insights itself is a great tool, and is included in many Red Hat subscriptions (including Red Hat Ansible Automation Platform, Red Hat Enterprise Linux and Red Hat OpenShift). It can really help you understand risks within your environment and any areas you should be focusing on.

    • Canonical/Ubuntu Family

      • NeowinLinux Mint is getting a ‘show the desktop’ button just like Windows - Neowin

        The Linux Mint team has just shared what it has been working on through October. There are quite a few improvements it has been making, but one notable one is the corner bar, which is very similar to the ‘show the desktop’ button on Windows that lives in the bottom right of the taskbar. Other changes include fewer password prompts, Flatpak support in Update Manager, and some visual refinements.

        The new corner bar coming to Mint is less noticeable than the show the desktop button on Windows, however, it can be configured to be more powerful than the Windows implementation. Using customizable settings, you can choose the click action, the middle click action, and enable or disable peek at the desktop on hover. As the corner bar is in the lower right, you don’t even have to think about where to move the cursor.

        Password requests have also been worked on, so they’re less intrusive. They’re no longer needed when using Synaptic and Update Manager, nor when removing a Flatpak. These programs will instead ask pkexec to remember your password, so you don’t need to enter it more than once. This should make things a little more convenient.

      • The Register UKLinux Lite 6.2 is out ● The Register

        Linux Lite 6.2 is the latest version of this increasingly inaccurately named distro. In effect, it's a niftily customized remix of Xubuntu 22.04.1.

      • OMG UbuntuLinux Lite 6.2 Released, Based on Ubuntu 22.04.1 LTS - OMG! Ubuntu!

        A new version of the Linux Lite, an Ubuntu-based Linux distribution aimed at lower-spec’d computers, is available to download.

        Linux Lite 6.2 is based on the Ubuntu 22.04.1 LTS point release and Linux kernel 5.15, plus a tweaked version of the Xfce 4.16 desktop environment and its associated assembly of apps. Modern machines can run Linux Lite but the distro is tailored towards those on older and/or resource-limited hardware.

        “This release is mostly comprised of UI adjustments, up to date software and bug fixes,” Linux Lite creator Jerry Bezencon says in a release announcement posted on the Linux Lite forums.

        Updated versions of bundled software, including the latest update in the LibreOffice 7.3 series and the most recent release of Google Chrome, come as standard.

      • UbuntuWhat to Expect at the Ubuntu Summit 2022 [Ed: No more community and Canonical has quit pretending]

        As the Ubuntu Summit draws near, we have an update to share with you all. We have a new timetable that can help you plan your days. There are some pretty neat people coming too! If you can’t participate in-person this year, we completely understand. That is why we have remote participation in mind as well. So read on to check out the updates in more detail!

      • UbuntuPublic cloud for telco – Part 3: Microsoft Azure [Ed: Microsoft Azure is laying off its staff, but Canonical is still propping up those who attack Linux]
      • Elektrobit Partners with Canonical to Pave the Way to a New Era of Software-defined Vehicles

        As the industry transitions towards software-defined vehicles, the new partnership will make it easier than ever before for car makers, suppliers, and developers to create the next generation of vehicle applications, while meeting stringent automotive standards.

      • Install Firefox 106 on Ubuntu / Linux Mint - Tips On Unix

        This tutorial will be helpful for beginners to install firefox 106 on Ubuntu 22.04 LTS, Ubuntu 20.04, and Linux Mint 21.

    • Devices/Embedded

      • CNX SoftwareSystem-on-module combines NXP i.MX 8M Mini Arm CPU and Xilinx Artix-7 FPGA

        Based on the block diagram above, the FPGA and CPU are interfaced via PCIe x1, I2C, and interrupts.

        MYiR provides two Yocto-built Linux images based on Linux 5.10.72 and U-boot 2021.04 and all drivers for peripherals, one with Qt, and the other without. There’s no mention of specific software or sample code for the Artix-7 FPGA, so you’d probably be expected to use Xilinx tools like the ISE Design Suite.

    • Open Hardware/Modding

      • PurismYear-End Savings Start Now with $200 off on Librem 14 Laptop - Purism

        PCMag has highlighted our Librem 14 as one of the top gifts in the tech space. The article 8 Techie Gifts for the Security Expert in Your Life highlights:

        “All Linux computers aren’t created alike, though. Purism’s Librem 14 stands out from the pack in several ways. First, it runs PureOS, a security-focused Linux distro created by Purism that powers laptops and cell phones. The fact that it’s open-source means experts can comb through it and flag any flaws. It’s also (according to Purism) “designed chip-by-chip, line-by-line, to respect your rights to privacy, security, and freedom.”

      • ArduinoHuge LED globe becomes Halloween helmet | Arduino Blog

        Some Halloween costumes are creepy, others are racy, and a few, like this one, are just plain cool. LEDs have been common since the 1960s, but they can still stand out when done well. As it turns out, one way to achieve that is by arranging 378 of them around a big globe and wearing that globe on your head like Redditor HGRDOG14 did for Halloween this year.

        We’re hesitant to call this a “Halloween mask” because of its sheer size, but “enormous glowing Halloween helmet” doesn’t have the same ring to it. HGRDOG14’s creation started as a 24” beach ball. They then covered that in papier mâché to create a rigid shell and removed the original beach ball. After that, they covered the papier mâché sphere in strips of WS2812B individually addressable RGB LEDs. Those strips have 30cm spacing between LEDs and HGRDOG14 staggered each longitudinal strip in order to arrange the LEDs in the pattern you see.

      • ArduinoMaking a puppet ride an RC tricycle | Arduino Blog

        Inspired by a remote-controlled Radio Flyer tricycle in which Kermit pedaled around at Maker Faire New York 2018, Donald Bell wanted to create his own version that could bring similar magic to people who interact with it. It began with the same Radio Flyer tricycle as in the original video, except this one was modified a bit differently.

        An overarching goal that Bell wanted to achieve was keeping the tricycle as stock as possible, which meant placing all of the electronics underneath the rear axle. Movement is provided by a single DC motor just below one of the wheels that connects via a timing belt for added safety. Meanwhile, the trike is able to steer thanks to a 24V high-torque servo motor that rotates to push a rod back and forth, thus turning the front fork to either side. Controlling all of these parts is an Arduino Uno that receives information from an RC receiver module.

    • Mobile Systems/Mobile Applications

  • Free, Libre, and Open Source Software

    • Web Browsers/Web Servers

    • Productivity Software/LibreOffice/Calligra

      • Community support needed: We want to use our users personal data - LibreOffice Design Team [Ed: LibreOffice to become spyware under the guise of "telemetry"? Like Firefox?]

        While our proprietary competitors constantly (mis)use user data to improve the UX of their products, we are maneuvering in thick fog. And whenever we try to reach out to our users to decide about design directions, we mainly get feedback from white, male nerds [1]. You hopefully see the problems this implies.

        The only solution is: We need to be able to evaluate usage information from everyone else too. While preserving the privacy of our users of course.

    • Programming/Development

      • Python

        • DebugPoint6 Best Python IDE(s) and Code Editor(s) - Top List of 2022

          We list the six best Python code editor(s) for Ubuntu and other Linux distros and Windows in 2022.

          Python is everywhere today, and it is arguably the C programming language of the modern era. You can find Python everywhere, from websites, apps, data science projects, and AI to IoT devices. So being a popular programming language of this decade, it is essential to know the development environment of Python, where developers create applications, especially if you are starting afresh.

          Many Python development environments are available with features and utilities catering to your need. Some of them are useful for beginners learning Python by setting up the environment and other users for heavy Python development and complex setups.

          Here, in this post, I will touch upon the best of them that would help you pick one for your own need and use case.

  • Leftovers

    • Proprietary

    • Security

      • ZDNetOpenSSL dodges a security bullet | ZDNET [Ed: No, SJVN, it dodges a FUD campaign]

        At first, it looked like the OpenSSL 3.x security bug was going to be truly awful. While it was feared to be a critical error that could lead to remote code execution (RCE), upon a closer examination it turned out to be not so horrid after all.

      • CISAOpenSSL Releases Security Update | CISA

        OpenSSL has released a security advisory to address two vulnerabilities, CVE-2022-3602 and CVE-2022-3786, affecting OpenSSL versions 3.0.0 through 3.0.6.

        Both CVE-2022-3602 and CVE-2022-3786 can cause a denial of service. According to OpenSSL, a cyber threat actor leveraging CVE-2022-3786, "can craft a malicious email address to overflow four attacker-controlled bytes on the stack. This buffer overflow could result in a crash (causing a denial of service) or potentially remote code execution," allowing them to take control of an affected system.

      • IT WireiTWire - OpenSSL patches released, UK sec expert's judgment justified

        The OpenSSL Project has released fixes for two vulnerabilities in the open-source cryptographic library, with the severity of both rated "high". The accompanying documentation has justified the advice of British security expert Kevin Beaumont not to get carried away by hype over the expected announcement, as iTWirereported.

        The project said it had released advisories about "CVE-2022-3786 (“X.509 Email Address Variable Length Buffer Overflow”) and CVE-2022-3602 (“X.509 Email Address 4-byte Buffer Overflow”)".

      • LWNOpenSSL 3.0.7 released [LWN.net]

        The much-anticipated OpenSSL 3.0.7 release, which fixes some high-risk security problems, is available. The release notes list two vulnerabilities (CVE-2022-3786 and CVE-2022-3602) that have not yet been documented on the OpenSSL vulnerabilities page. LWN commenter mat2 has provided the relevant information, though. It is worth updating quickly, but many sites do not appear to be at immediate risk.

      • DebugPointOpenSSL 3.0.7 Fixes Two High-CVEs with Buffer Overflow

        The highly anticipated OpenSSL 3.0.7 is now released, fixing two high-severity CVEs. All the major Linux distributions across desktops and, most importantly, server admins have been waiting for this fix since it was reported last week by the OpenSSL team. Due to the criticality of this package, some distro releases got delayed (such as Fedora 37), and probably some patching activities across the industry.

        Both the high severity fixes are due to buffer overrun, which impacts the entire OpenSSL 3.0.0 series (i.e. from 3.0.0 to 3.0.6). Alarming, it may sound, but these two vulnerabilities have been out in the wild for almost a year since the 3.0.0 release in 2021.

        The first CVE-2022-3786 triggers when a malicious email address with arbitrary payload with character “.” (decimal 46). The second vulnerability, CVE-2022-3602, also deals with another payload with the same email address in name constraints, checking for X.509 certificates.

      • Hacker NewsOpenSSL Releases Patch for 2 New High-Severity Vulnerabilities

        The OpenSSL project has rolled out fixes to contain two high-severity flaws in its widely used cryptography library that could result in a denial-of-service (DoS) and remote code execution.

        The issues, tracked as CVE-2022-3602 and CVE-2022-3786, have been described as buffer overrun vulnerabilities that can be triggered during X.509 certificate verification by supplying a specially-crafted email address.

        "In a TLS client, this can be triggered by connecting to a malicious server," OpenSSL said in an advisory for CVE-2022-3786. "In a TLS server, this can be triggered if the server requests client authentication and a malicious client connects."

      • LWNSecurity updates for Tuesday [LWN.net]

        Security updates have been issued by Debian (python3.7), Gentoo (android-tools, expat, firefox, libjxl, libxml2, pjproject, sqlite, thunderbird, and zlib), Oracle (compat-expat1), Slackware (php8 and vim), SUSE (kernel, libtasn1, podman, and pyenv), and Ubuntu (libtasn1-6).

      • CISACISA Upgrades to TLP 2.0 | CISA

        Today, CISA officially upgraded to Traffic Light Protocol (TLP) 2.0, which facilitates greater information sharing and collaboration. CISA made this upgrade in accordance with the recommendation from the Forum of Incident Response and Security Teams to upgrade to TLP 2.0 by January 2023.

      • CISACISA Releases One Industrial Control Systems Advisory | CISA

        CISA released one Industrial Control Systems (ICS) advisory on November 1, 2022. This advisory provides timely information about current security issues, vulnerabilities, and exploits surrounding ICS.

      • Help Net SecurityDeepfakes: What they are and how to spot them - Help Net Security

        The term “deepfake” is used for photo, video or audio content that has been manipulated to make it seem that the subject is doing or saying something they never did or said. This content is created by using AI and machine learning techniques.

        Some deepfakes are obvious and we can detect them with the naked eye by looking for inconsistencies. With increased sophistication of deepfake technology, though, deepfake detection technologies had to be and have been developed in recent years.

      • XSAs released on 2022-11-01 | Qubes OS

        The Xen Project has released one or more Xen Security Advisories (XSAs). The security of Qubes OS is affected. Therefore, user action is required.

      • QSB-085: Xenstore: Guests can crash xenstored (XSA-414)
    • Freedom of Information / Freedom of the Press

      • IT WireiTWire - Ex-CIA head Pompeo served with lawsuit over alleged Assange spying

        Former US secretary of state and ex-head of the CIA Mike Pompeo has been formally served with a lawsuit which claims he provided oversight for a criminal conspiracy to violate Fourth Amendment rights of American lawyers and journalists inside the Ecuadorian embassy in London.

        Pompeo is one of the defendants in the case, which also names the CIA, security firm UC Global and UC Global director David R. Morales Guillen. They are accused of spying on WikiLeaks publisher and founder Julian Assange and his visitors while he took refuge in the embassy.

        A statement from the Assange Defence Committee said the suit was served on the former CIA head as he was posing for photographs at the John Ashbrook Memorial Dinner in Ohio on 29 October.

        The plaintiffs, who include renowned civil rights activist and human rights attorney Margaret Ratner Kunstler, attorney Deborah Hrbek and journalists Charles Glass and John Goetz, visited Assange while he was in the embassy.

        [...]

        Plaintiff Margaret Ratner Kunstler blasted the threat such surveillance poses to constitutional liberties.

        “If a foreign journalist can be prosecuted for publishing factual documents, then no journalist is safe,” she said. “And apparently Mike Pompeo believes that attorneys representing journalists should not be safe either. These actions are outrageous.”

        The suit claimed these actions were authorised and approved by Pompeo.

        Assange is currently being held in Belmarsh prison in the UK, pending an appeal against his extradition to the US which was approved by British Home Minister Priti Patel on 17 June.

    • Monopolies

      • Public KnowledgePublic Knowledge Welcomes Competition Win as Federal Judge Blocks Publishing Merger - Public Knowledge

        Yesterday, a federal judge blocked the merger of Penguin Random House and Simon & Schuster. The proposed merger would have created a publishing giant responsible for half of the top-selling books from the first- and fourth-largest publishing houses, further consolidating an already concentrated marketplace. The Department of Justice sued to block the merger last year in a complaint highlighting the potential harms to authors, other publishers, and readers. Public Knowledge celebrates this long overdue reinvigoration of antitrust law and enforcement in the all-important publishing industry, and looks forward to equally bold actions to free e-books and combat Big Tech dominance.

  • Gemini* and Gopher

    • Personal

      • Me Boot Sequence

        Traditionally speaking, October has been a time of shutting down, tuning out, and imploding. It has been this way for as long as I can remember and my symptoms have only worsened as time progresses. Recently Octobers have been almost unbearable.

        Towards the end of September every year I start to feel my psyche shift. I get what I have inaccurately been calling "stressed," the symptoms of which include the following: I become more irritable, my muscles tense up and refuse to relax (especially in my neck and shoulders), my menstrual cycle goes awry, I don't get any restful sleep, I develop an annoying twitch in my left eye, I hallucinate, my memory stops functioning, I am easily overwhelmed, I have bouts of confusion, and I have serious difficulties thinking and speaking properly. Halloween marks the grand finale. Then, November comes over me like a cool mist on a still early morning and I start to breathe normally again. Well, whatever normal means.

      • Settling in to the new house

        It's pretty early in the morning for me as I write this, having grown accustomed to afternoon shift over the past five years. I've been up since about 7:30 local time sipping coffee, slicing vegetables and listening to a nice Jazz session featuring Danny Gatton and a young Joshua Redman. I've just finished filling the crocpot with Roma tomatoes, sweet yellow onion, green bell pepper and three varieties of beans. Browning some ground beef to add and in about 8 hours we'll be eating bowls of chili on a fall day.

      • Extreme fortunes, Brevard, NC edition

        Last week, Bunny and I ate at the Twin Dragons Grand Buffet (and if there was a website, I'd have linked to it). After dinner I checked my fortune cookie and lo:

        [Fortune cookie fortune that says “Vous savez bien apprécier des belles choses.”] Maybe if we were eating in a Vietnamese restaurant, this would make sense. [1]Â…

      • Autumn in Small Town on West Coast

        The sky is cloudy grey that's makes one wonder if today the day that the rain will finally come to this very dry land suffering from this summer's harsh punishment. it's have finally begun to feel more like Autumn, but the trees were delay charging their colors and slowly begin to shed some of their colors off. and all I can do is stay in my shelter and keep warm preparing for the weather to slowly get colder by each passing day. of course, there are dangers that occur in the colder months. mists that blind your field of view but touching your skin with chilly breezes hitting against your face and small water particles landing on your hands that are invisible. but you're greeted by frost cover plants and tricky grey passageways waiting for you to fall. along with multiple color vehicles passing through the rocky black paths. living in a small town in west coast is full of unexpected surprise but at the same time can be a bit dangerous at night.

      • 🔤SpellBinding: UFHLOPE Wordo: ADMIN
    • Politics

      • Oxymoronist: Ministry of Truth

        The attempted launch of the Disinformation Governance Board, aka Ministry of Truth, met with a backlash, but the attempts to gain tighter control over public discourse are obviously ongoing. Although this predominantly concerns social media, the efforts are not limited to the largest ones. An Intercept article reports on some leaked DHS documents, commenting: "How disinformation is defined by the government has not been clearly articulated, and the inherently subjective nature of what constitutes disinformation provides a broad opening for DHS officials to make politically motivated determinations about what constitutes dangerous speech." They provide some additional insight into the Hunter Biden laptop story, but fail to mention the embarrassing split up with Glenn Greenwald, who had wanted to report on it on the Intercept.

    • Technical

      • Give Me Your Best OpenTTD NewGRFs

        I've finished my NewGRF that adds tea to OpenTTD. It's not publicly available yet, because I want to test it more and see if there's anything that should be tweaked.

        Now I want to know which mods you all like! Specific vehicles, town names, scenarios, height maps, industries, etc. Anything that makes it fun to start earlier than 1900, or playing later than 2050? Anything that makes gameplay more interesting in general?

      • Internet/Gemini

        • Twitter and autonomy



          There’s space for disagreement and nuance (what do we mean by “the most” and “affected”? what happens when similarly-affected people disagree?); no two cultures that abided by this rule would look alike. But it’s completely incompatible with capitalist relations of production, even under the stewardship of liberal democracy.

          Since there seems to be a bit of an exodus from Twitter at the moment, many people have been confronted by the fact that a social media company’s owner (like Elon Musk) or majority shareholder (like Mark Zuckerberg) can unilaterally make decisions that affect millions of people. Since I don’t think the world should work that way, I decided that I would no longer voluntarily enter relationships that do. I may have no choice about needing a job or being a citizen of a state, but I can sure as hell quit Facebook and Twitter. So I quit them (along with a growing list of second-stringers), and have been getting my social media fix on the Fediverse. Here, I do have a say in what sort of behavior is moderated and blocked€¹, and if I decide I don’t like my instance’s policies, the system is designed to make it easy for me to find a different instance or even start my own.

          But it’s not just social media, and for me this journey didn’t start there. Most political organizations, including the majority of leftist ones, use leadership and decision-making structures that don’t follow this principle€². Democracy, as we’re taught to understand it, can lead to situations where a slim majority dictates the actions of a slim minority, even when those actions have a minimal effect on the majority. Delegated decision-making (electing “leaders”) also creates such situations, especially when leadership terms are long. I spent most of the past five years in such an organization, fighting bitter fights about the org’s projects and goals, and I eventually realized that the whole enterprise doesn’t align with my values.

        • Re: Mayan and Gemini Priests

          The barrier to entry is literally installing one of the many Gemini browsers.

          It's not rocket science. Click a few times and voila, Gemini.

          If you are that stupid, stick to Windows with a pre-installed Microsoft Web browser, I guess. But how did you get on Mastodon anyway? That requires like, registering and passwords and stuff...

          If you can't figure out where or how to post, gees, we will miss your brilliant ideas, I guess.


* Gemini (Primer) links can be opened using Gemini software. It's like the World Wide Web but a lot lighter.



Recent Techrights' Posts

Microsofters' SLAPP Censorship - Part 2 Out of 200: Detailed Timeline From 2012 (Attack on Reporters That Question Restricted Boot) to 2024 (Lawsuit Against Reporter and His Wife in Another Continent)
we reproduce a document produced 2 years ago to give people more context and more facts
GNU/Linux in Laptops/Desktops Still Matters, It's Likely the Only Way to Achieve Software Freedom
Software Freedom requires all sorts of things at the "OS level"
 
FSF Promoting Richard M. Stallman (RMS) Talk in Switzerland in Just Over a Day From Now
RMS may have more talks on the way
Why Slop Will Flop - Part IV - We've Seen the End of It
Some years ago they insisted blockchains would revolutionise everything
Android is Proprietary 'Linux' and It Becomes More Malicious Over Time, Google Only Delayed What It Planned All Along
Google is a proprietary software giant, GSoC is only a distraction and confusion
Links 04/03/2026: Scam Altman Causes Chatbot Sub Numbers to Plunge, "Stocks Drop as Inflation Risk Emerges"
Links for the day
Why Slop Will Flop - Part III - Our Relationship With Slop (and Yours)
I never - except inadvertently - "used" an LLM-based chatbot
Why Slop Will Flop - Part II - Devil in the Details
News sites or social control media sites which tolerate slop are digging their own grave
Simpler Means Faster
Do you know your bottlenecks?
Gemini Links 04/03/2026: About a Missing Symbol and "Good Manners"
Links for the day
The Register MS Takes Money From Chinese Surveillance Threat to Promote a Ponzi Scheme
"Sponsored by Huawei."
Nicaragua's GNU/Linux Usage Measured at Over 8% by statCounter
Nicaragua is a poor country, but it also has rich culture
Why Slop Will Flop - Part I - Slop Fatigue Prevalent
See, sooner or later people (audiences of colleagues) find out and as soon as they find out you are slopping, they will lose interest
Links 04/03/2026: "The EU moves to kill infinite scrolling" and a call to "Nationalize Amazon"
Links for the day
Coming Soon: Evidence of Abuse in Our IRC Network
IRC's freedom can sometimes be its 'weakness' if not properly guarded
High GNU/Linux Adoption in Brunei Darussalam
It's worth noting (or at least noticing) that Microsoft loses ground in some of the countries where the government contracts paid the most
Media Blackout Reducing or Preventing Press Coverage of Microsoft Layoffs in 2026
Worse yet, there will be gaslighting and deceit
Gemini Links 04/03/2026: The Garnet Star, The Hunt, The SYN Attacks
Links for the day
The EPO's General Consultative Committee (GCC) Discussion Illuminates How Much Worse Things Have Gotten ("on Strike and Participated in the 'Meeting'")
a videoconference - not a physical meeting - discussed EPO policies
Free Software Foundation Supports Its Founder, Advertises His Talks in Switzerland
When you suppress voices, assuming the reasons for suppression are bunk, it is always bound to backfire very badly
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Tuesday, March 03, 2026
IRC logs for Tuesday, March 03, 2026
Over 1,500 EPO Workers Went on Strike Last Week
a new publication which celebrates some accomplishments of industrial actions and calls for further actions
Madame Streisand Wanted to Censor The Web, Instead She 'Created' a New Term, "Streisand Effect"
It is basically an own goal
Solicitors Regulation Authority (SRA) Failed to Detect Fraud in Law Firms... Until It Was Too Late
Earlier today we contacted some more politicians about this and received mail from them as well
Our EPO and IBM Coverage Bears Fruit
In case insiders want to get in touch with us, please ensure or at least try doing so securely
Defending Women Isn't a Crime, Everybody Can Agree on That
Their culture is unlike ours
EPO "Cocaine Communication Manager" - Part VI - Influx of Spaniards and Portuguese Workers (+77%) at Europe's Second-Largest Institution, Led by the 'Alicante Mafia'
There is now data supporting this assertion, new and complete data in fact
Links 03/03/2026: "Scam Altman in Damage Control" and Oil Traffic Disrupted
Links for the day
Gemini Links 03/03/2026: Phones, LLMs, and Changes on the Web
Links for the day
Richard Stallman Confirms Talk in Bern Next Week
Dr. Stallman has just formally confirmed his third talk this month in Switzerland
Nobody is Safe at IBM (or Red Hat)
There is no job security at IBM
GNU/Linux at All-Time High in Guam
there are many computers in that island
Bad faith: Hugo Roy knew FSFE impersonating FSF before French tribunal, colleagues deceived
Reprinted with permission from Daniel Pocock
Microsofters' SLAPP Censorship - Part 1 Out of 200: Claim No. KB-2024-001270 in a Nutshell
abuse of process by a law firm working for an American who was arrested for strangling women and another American whose own spouse calls a "rapist"
When EPO Team Managers (TMs) Are Harassing People Who Strictly Apply the European Patent Convention (EPC) in Patent Examination
There are two strikes planned for this month
Confirmed: Using Slop Gets You Fired
Let the story of Benj Edwards be a cautionary tale
Links 03/03/2026: "No one wants to read your AI slop" and "chatbots in the kill chain"
Links for the day
EPO and "Equivalent to More Than 100 Days of Strike"
The industrial actions continue and already have a positive effect
Streisand Effect, the Microsoft Way
Microsoft has once again proven the Streisand Effect
Keeping Track of IBM Layoffs in March 2026
IBM depends on bribery
GNU/Linux Measured at 7% in Yemen
Windows is too hostile and dangerous
Links 03/03/2026: Security Breaches, Iceland Wants EU Membership, and "Wall Street–Backed Lawmakers Want to Help Banks Gouge You"
Links for the day
Queensland Health Payroll System: IBM billion-dollar-blowout inquiry
Reprinted with permission from Daniel Pocock
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Monday, March 02, 2026
IRC logs for Monday, March 02, 2026
Gemini Links 03/03/2026: GrapheneOS and Keyboard Shortcuts
Links for the day
Tomorrow should be sunny (at long last!) and a generally productive dayProductive Week Ahead
Tomorrow should be sunny (at long last!) and a generally productive day
Only One Slopfarm Seems to Have Targeted "Linux" Today
It certainly does feel like the slop hype is reaching the "late life crisis" and companies that benefited from this bubble are overdue for a day of reckoning
Microsoft Mass Layoffs: Being Sacked at 1AM in the Morning
Watch what happens to Microsoft employees who get pregnant
Links 02/03/2026: More Social Control Media Bans, Climate Change Woes, and "Journalist With Germany's Deutsche Welle Arrested in Turkey"
Links for the day
Gemini Links 02/03/2026: Small Phones, "I 3D Printed My Brain", and "Managing 5 Servers at Once with tmux"
Links for the day
IBM is Trying to Hide Mass Layoffs, Not Only With NDAs and 'Scripted' LinkedIn Posts
From what we can gather (screenshot above), today many people leave IBM and Red Hat
Richard Stallman is Giving a Public Talk This Week (Friday in Lucerne School of Computer Science and Information Technology)
His birthday is just around the corner.
Windows Falls to New Low in World's Largest Population (India)
Windows is now down to 7%
Never Miss a Good Opportunity to Shut Up and Drink Coffee
Threats come at a cost; each time you issue a threat you stigmatise yourself as a bully
Last Month Matthew Garrett Said Ridiculous Things After His Spouse Had Called Him a "Rapist", Now He's Trying to Take the Site Offline and Put My Family in Prison
The real issue of concern to him (and his alleged reputation) is the spouse and the matter is to be dealt with in America, not the UK
Machine-Generated Legal Documents, Over 2,000 Pages Sent to Us Today Alone
We now know that the papers we receive are produced using bots (algorithms)
Reporting to Our Politicians/MPs the Failure of the SRA to Stop Hired Guns Who Help Americans (Men Who Attack Women and Nowadays Also Attack British Reporters)
About a month ago my wife wrote to politicians to get the ball rolling
The Topic Many People Don't Want to Talk or Write About
"DEI" is inherently about making racial and gender patterns better reflect society's
XBox is Virtually Dead Already, What Next Will Die at Microsoft?
Now that there are mass layoffs at Microsoft datacentres it is not premature to speculate about what dies after XBox
For the First Time, statCounter Measures Internet Explorer at 0.01% "Market Share"
What Microsoft replaced it with is just a Chrome clone with extra spyware
Was a Lot of "Windows" and "Unknown" in Iran Just GNU/Linux in Disguise?
more than 1 in 10 desktop/laptop requests is estimated to be GNU/Linux
"Here in the UK, GNU/Linux rose to all-time high at Windows' expense"
Will this entail Software Freedom as well? This depends on all of us
Links 02/03/2026: Claude Code Causes a Mexican Government Cyberattack, "London Repair Week" Noted
Links for the day
2026 Microsoft Mass Layoffs in So-called 'AI' Datacentres, Why Doesn't the Mainstream Media Cover The News?
What does this tell us about the state of the media?
Don't Fall for "Top X Law Firms" in "Discipline Y", They Pay $Z to Get False Endorsement/s
It's a scheme, a scam, an elaborate fraud
More Publishers Have Turned From Slop Boosters Into Slop Sceptics and Critics
There's a "hidden cost" when one participates (for profit) in "pump and dump" schemes
TeX Live Has New Release, But Planet Debian Won't Tell You That
It 'unpersoned' the developer
LLM Slop Does Not Know People (It Knows Nothing) and Cannot Distinguish Between People. It's a Recipe for Disaster.
no way of knowing who's who
"Over 1,100 Law Firms Gone in Five Years" in the United Kingdom (UK) Alone
There are basically way too many lawyers (looking for "business", e.g. threats and lawfare) and not enough positions to fill
Microsoft FUD From Microsoft Site Helps Distract From Actual Microsoft Back Doors
Published on a Sunday
Free Software Foundation Needs to Become More Active in Europe to Avoid Impersonation by Microsoft-Sponsored Groups
So far we've hardly seen the FSF saying anything at all about the US president
Links 02/03/2026: "Not Envious of Billionaires" and Palantir SLAPPs "Swiss Magazine For Accurately Reporting That The Swiss Government Didn't Want Palantir"
Links for the day
There Has Never Been a Better Time to Quit Social Control Media
Those networks are selling something. And that something is not peace because peace does not sell "attention".
Microsoft Users Drowning in Slop, If They Complain Microsoft Censors Them
Like an authoritarian regime
IBM is Killing Red Hat's Portfolio - Including Linux - to Prop Up Ponzi Scheme ("AI")
IBM is killing Red Hat
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Sunday, March 01, 2026
IRC logs for Sunday, March 01, 2026
Speed of Sites Matters
Being easily accessible all the time matters to us
Gemini Links 02/03/2026: Weird Phone Calls, Small Phones, and Exploring Racket
Links for the day
Dr. Andy Farnell on "Good Tech"
in the age of "rent everything" and "own nothing"