Bonum Certa Men Certa

Links 14/09/2022: New Fedora Beta and Unifont 15.0.01



  • GNU/Linux

    • Audiocasts/Shows

    • Kernel Space

      • Adding software to the Steam Deck with systemd-sysext

         An immutable OS makes the system more stable and its updates less error-prone, but users cannot install additional packages to add more software. This is not a problem for most users since they are only going to run Steam and its games (which are stored in the home partition). Nevertheless, the OS also has a desktop mode which provides a standard Linux desktop experience, and here it makes sense to be able to install more software.

        How to do that though? It is possible for the user to become root, make the root filesytem read-write and install additional software there, but any changes will be gone after the next OS update. Modifying the rootfs can also be dangerous if the user is not careful.

    • Applications

      • The AnarcatAlternative MPD clients to GMPC - anarcat

        GMPC (GNOME Music Player Client) is a audio player based on MPD (Music Player Daemon) that I've been using as my main audio player for years now.

        Unfortunately, it's marked as "unmaintained" in the official list of MPD clients, along with basically every client available in Debian. In fact, if you look closely, all but one of the 5 unmaintained clients are in Debian (ario, cantata, gmpc, and sonata), which is kind of sad. And none of the active ones are packaged.

      • Ubuntu HandbookEyedropper - Modern GTK4 HEX, RGB, HSL Color Picker Tool for Linux | UbuntuHandbook

        Looking for a color picker tool for Linux? Try Eyedropper, a new GTK4 application that looks native in modern GNOME desktop.

        It’s a free and open-source tool written in Rust programming language. Which, provides an easy to use interface to pick a color and display in HEX, RGB, HSV, HSL, CMYK, XYZ and CIE-Lab formats, as well as handy “Copy to clipboard” icons to quickly copy the values.

      • Samba 4.17.0 Available for Download

        This is the first stable release of the Samba 4.17 release series.

        Please read the release notes carefully before upgrading.

    • Instructionals/Technical

      • H2S MediaInstall FortiClient VPN on Ubuntu 22.04 LTS - Linux Shout

        Tutorial on how to install free FortiClient VPN on Ubuntu 22.04 Jammy JellyFish using the command terminal for security.

        FortiClient is a security solution designed to reduce your computer’s vulnerability. The manufacturer advertises that the tool comes with virus protection, two-factor authentication, and WAN optimization, among other things.

        However, the FortiClient user interface itself only contains the vulnerability scan and a tab in which you can set up a VPN connection for remote access.

        The vulnerability scan indicates when, for example, an application is outdated, so there is potential for an attack and an update is urgently needed.

      • Make Use OfHow to Install Skype on Linux [Ed: That's Microsoft and NSA eavesdropping; better use something else]
      • Make Use OfHow to Install the Epic Games Launcher to Play Games on Linux

        Linux gaming is constantly reaching new levels, all thanks to the community and organizations focusing more and more on open-source gaming software. Epic Games is a renowned digital game store primarily known for distributing Windows games to millions of users globally. But not everyone knows that you can also install the Epic Games client on Linux.

        By the end, you'll know how to install and set up Epic Games on Linux and will be able to enjoy your favorite gaming titles on your desktop.

      • Make Use OfHow to Use the Touchpad on Your Linux Laptop as a Graphics Pad

        FingerPaint is an open-source Linux app that lets you use your laptop's touchpad as a graphics tablet for drawing and doodling.

        Graphics tablets are expensive, and a mouse isn't intuitive to draw with. If you have a Linux laptop with a touchpad, you already have a rudimentary graphics tab built in. Here's how to use your touchpad as a basic drawing surface on Linux.

      • Linux Made SimpleHow to install Flashforge FlashPrint on a Chromebook in 2022

        Today we are looking at how to install Flashforge FlashPrint on a Chromebook. Please follow the video/audio guide as a tutorial where we explain the process step by step and use the commands below.

      • Linux HandbookHow to Find Full Path of a File in Linux

        You can get the full path of a directory with the pwd command:

        pwd

        But how do you get the absolute path of a file in Linux?

      • AddictiveTipsHow to manage your Docker containers with Yacht

        Docker is a beautiful tool, but it can be hard to manage if you’re unfamiliar with it. Yacht is a program that tries to make things easier by giving users a web UI that can be used to deploy, modify, and manage containers. Here’s how to set up Yacht on your Linux system.

      • ID RootHow To Install WebStorm on Ubuntu 22.04 LTS - idroot

        In this tutorial, we will show you how to install WebStorm on Ubuntu 22.04 LTS. For those of you who didn’t know, Webstorm by Jetbrains is an Integrated Development Environment used in web, server, mobile, and desktop application development. Like other JetBrains IDEs, it makes your development experience more enjoyable, automating routine work and helping you handle complex tasks with ease. Webstorm also has native support for NodeJS, ReactJS, VueJS, and many more.

        This article assumes you have at least basic knowledge of Linux, know how to use the shell, and most importantly, you host your site on your own VPS. The installation is quite simple and assumes you are running in the root account, if not you may need to add ‘sudo‘ to the commands to get root privileges. I will show you the step-by-step installation of the WebStorm on Ubuntu 22.04 (Jammy Jellyfish). You can follow the same instructions for Ubuntu 22.04 and any other Debian-based distribution like Linux Mint, Elementary OS, Pop!_OS, and more as well.

      • nixCraftWhy command df and du reports different output?

        You will never notice something like this on FreeBSD, Linux Desktop home system, or your UNIX or Linux workstation. However, sometimes on a production UNIX server, you will notice that both df command (display free disk space) and du command (display disk usage statistics) report different output. Usually, df will output a bigger disk usage than du.

      • Nightly syslog-ng container images - Blog - syslog-ng Community - syslog-ng Community

        The syslog-ng team started publishing container images many years ago. For quite a while, it was a manual process, however, a few releases ago, publishing a container image became part of the release process. Recently, nightly container images have also become available, so you can test the latest features and bug fixes easily.

      • HowTo ForgeHow to Install Drupal CMS with Apache2 on Ubuntu 22.04

        Drupal is a free and open-source web content management system written in PHP and distributed under GNU General Public License. Drupal provides a robust content management tool with sophisticated APIs for multichannel publishing. Drupal is used among at least 14% of the top 10,000 websites on the internet, it's used for global enterprise industries, governments, education, and institutions sites. Drupal provides a high-scalable system, integrated with digital applications, and can be used to create multisite for different organizations with multilingual support.

        In this guide, I will show you how to install the latest version of Drupal on an Ubuntu 22.04 system. This guide includes the installation of some package dependencies such as Apache2 web server, MariaDB database, PHP 8.1, and Composer as the PHP package management tool. The goal here is you will have completed Drupal installation with LAMP Stack and secured with SSL certificates.

      • HowTo ForgeHow to Install Statping on Ubuntu 22.04

        Statping is an open-source uptime monitor that keeps track of websites and applications hosted across multiple servers. It can generate a beautiful status page by fetching real-time data from various sources. It can work with multiple database systems including SQLite, MySQL, and Postgres. For our tutorial, we will be using the fork of Statping, called Statping-ng since the original application is no longer being developed.

      • MakeTech EasierHow to Create a Calendar Server With Baikal

        Baikal is a simple calendar software that allows you to synchronize CardDAV and CalDAV files online. Unlike Google Calendar, it synchronizes calendar files between different clients and devices seamlessly. The app also supports multi-user instances, which means that it is possible to use Baikal with other people and share calendar events as you do in Google Calendar. For example, you can host a personal Baikal server for your friends and family as well as colleagues.

      • ID RootHow To Install OpenToonz on Ubuntu 22.04 LTS - idroot

        In this tutorial, we will show you how to install OpenToonz on Ubuntu 22.04 LTS. For those of you who didn’t know, OpenToonz Animation Maker 2D App is an animation tool that is designed for cartoon-based animation. It is also utilized in creating animation for projects. With an intuitive user interface and detailed tips, it is quite beginner-friendly.

        This article assumes you have at least basic knowledge of Linux, know how to use the shell, and most importantly, you host your site on your own VPS. The installation is quite simple and assumes you are running in the root account, if not you may need to add ‘sudo‘ to the commands to get root privileges. I will show you the step-by-step installation of the OpenToonz animation maker on Ubuntu 22.04 (Jammy Jellyfish). You can follow the same instructions for Ubuntu 22.04 and any other Debian-based distribution like Linux Mint, Elementary OS, Pop!_OS, and more as well.

      • H2S MediaInstall Wike Wikipedia Reader on Ubuntu 22.04 or 20.04 LTS

        Install Wike reader on Ubuntu 22.04 Jammy JellyFish or 20.04 Focal to read Wikipedia articles without opening any browser on your system.

        Wike is an open source app, project is available on GitHub, for the GNOME Desktop to read Wikipedia articles. The key benefit of Wike is to have all the content of the Wikipedia online encyclopedia in a native application. Its interface is simple, with minimal distractive elements, hence giving an expansive area to view articles.

        Apart from a simple interface, the application offers Search suggestions, Table Content, Light and dark themes, a List of recent articles, Text search in articles, multiple languages support, and more…

      • H2S MediaInstall FortiClient VPN on Ubuntu 22.04 LTS - Linux Shout

        Tutorial on how to install free FortiClient VPN on Ubuntu 22.04 Jammy JellyFish using the command terminal for security.

        FortiClient is a security solution designed to reduce your computer’s vulnerability. The manufacturer advertises that the tool comes with virus protection, two-factor authentication, and WAN optimization, among other things.

        However, the FortiClient user interface itself only contains the vulnerability scan and a tab in which you can set up a VPN connection for remote access.

        The vulnerability scan indicates when, for example, an application is outdated, so there is potential for an attack and an update is urgently needed.

        The abbreviation VPN stands for “Virtual Private Network”, a self-contained network that you can access from anywhere with the right access data. For example, do you log into the company network from your home office to use printers, hard drives, and your work e-mail inbox, or do you dial into your home network while on the go and conveniently control your smart home from afar? Universities also allow their students secure access to the university network via VPN.

    • Games

      • Boiling SteamSteam Deck’s Huge Booth at the Tokyo Games Show 2022: First Look and Line-Up Announced - Boiling Steam

        The Tokyo Games Show 2022 is just a few days away (starting this Thursday) and there’s already some leaks of what some of the booths will look like. As I mentioned in my previous post, Valve is putting a lot of effort along with Komodo to advertise the Steam Deck, and there’s what the booth is starting to look like, using a huge reproduction of the Steam Deck. Now you understand the meaning of the “Huge Presence”!

      • Godot EngineGodot Engine - Dev snapshot: Godot 4.0 alpha 17

        We're getting prepared for the imminent release of Godot 4.0 beta 1, and to do so we're having a (last?) alpha 17 release to ensure that things work as best as we can reasonably expect before the beta phase.

        [...]

        Be aware that during the alpha stage the engine is still not feature-complete or stable. There will likely be breaking changes between this release and the first beta release. Only the beta will mark the so-called "feature freeze".

        As such, we do not recommend porting existing projects to this and other upcoming alpha releases unless you are prepared to do it again to fix future incompatibilities. However, if you can port some existing projects and demos to the new version, that may provide a lot of useful information about critical issues still left to fix.

        Most importantly: Make backups before opening any existing project in Godot 4.0 alpha builds. There is no easy way back once a project has been (partially) converted.

      • Boiling SteamTin Hearts: A Modern Day Lemmings with a Soothing Story - Boiling Steam

        Have you heard of lemmings? They are cute little rodents which got a bad and undeserved reputation of “suicidal herd mentality animal” due to the White Wilderness documentary in 1958, which staged them jumping from cliffs to their death in a collective unstoppable frenzy. This unfortunate myth, however, gave rise to one of the most memorable puzzle videogames of the 90’s, appropriately named after the rodents, which you do not as much guide as give orders to change the environment and make the little guys reach the exit.

      • mesa: speed up glTexImage(GL_DEPTH_STENCIL)

        The 2 patches achieve the same thing: they massively reduce "CS: GO" startup time on my machine from 150s to 10s (maybe there's something wrong on my setup because the initial value is very high).

  • Distributions and Operating Systems

    • Fedora Family / IBM

      • DebugPointFedora 37 BETA is Out for Testing and Installation

        Fedora team announced today that the Fedora 37 BETA is now available for direct download and upgrade from the current version. For a change, a Fedora release which is on time, without any delay! That itself makes it more of a piece of important news.

        A month of BETA testing is planned from today until the final release on October 18, 2022 (with the fallback date of Oct 25, 2022). In this one month, many bugs will be squashed and fixed to make it a more solid distro for you.

        Although I covered the new features in my traditional feature highlights of Fedora 37 page, let’s have a quick recap of the new features of this release.

      • Make Use OfFedora 37 Beta Gives Linux Devs Sneak Preview of Stable Release

        The Fedora project has announced the availability of the Fedora Linux Workstation beta version 37. The beta version sports an updated version of the forthcoming GNOME 43 desktop, and support for Raspberry Pi.

      • Beta NewsFedora Linux 37 Beta now available with GNOME 43 and Raspberry 4 support

        Fedora and GNOME go together like peanut butter and jelly. It is the best Linux distribution combined with the greatest desktop environment. Not to mention, Fedora focuses on truly free and open source software. Sure, that may make the operating system a bit less inviting to Linux beginners, but many seasoned Linux experts know Fedora is the cream of the crop.

        Today, Fedora 37 finally becomes available in Beta form, and the developers are hoping you will test it and provide some useful feedback. The most exciting aspect of Fedora 37 Beta is its use of GNOME 43, which is also in Beta. Also titillating is official Raspberry Pi 4 support, and yes, accelerated graphics are working. ARM fans will surely be happy about that, but sad to know the ARMv7 architecture will no longer be supported.

      • NeowinFedora 37 beta arrives with a beta version of GNOME 43 - Neowin

        The Fedora Project has announced the Fedora 37 beta for Fedora Workstation, Server, IoT, Spins, and Labs. Interestingly, the Workstation edition ships with a beta version of GNOME 43, this is expected to see a final release in a couple of weeks.

        With GNOME 43, users will get a device security panel in Settings, which will let you see security information about hardware and firmware on their system. In addition, more of the core GNOME apps have been updated to use the latest GTK toolkit for better performance and improved appearance.

        Another notable aspect of Fedora 37 is that the Raspberry Pi 4 is now supported officially with accelerated graphics. Unfortunately, ARMv7 hardware loses support in this release. The team said that the Fedora CoreOS and Fedora Cloud Base releases are being upgraded in status to Editions. This means they are flagship products designed for specific use cases.

      • 9to5LinuxFedora Linux 37 Beta Released with GNOME 43, Official Raspberry Pi 4 Support

        Fedora Linux 37 is probably the most anticipated GNU/Linux distro release of the year, promising official support for the Raspberry Pi 4 single-board computer with accelerated graphics and other enhancements, the upcoming GNOME 43 desktop environment for the Workstation edition, as well as the upcoming Linux 6.0 kernel.

        Apart from some of the latest and greatest GNU/Linux technologies and Open Source apps, the Fedora Linux 37 release also promises Fedora CoreOS and Fedora Cloud Base as official Fedora Linux editions, the public release of the Anaconda Web UI preview image, and SELinux autorelabel parallel running by default.

      • Linux 37
      • Fedora MagazineFedora Magazine: Announcing the release of Fedora Linux 37 Beta
      • Red Hat OfficialFedora 37 Beta now available
      • Charles-Antoine Couret: Fedora 37 Beta est disponible !
      • Red Hat OfficialPrivate 5G, edge computing business use cases and Red Hat solutions

        Private 5G is a non-public mobile network that uses licensed, unlicensed or shared spectrum. This is best suited for the areas where the spectrum provided by a mobile network operator (MNO) is restricted for government use only or is not available. Many organizations around the world have either deployed a private 5G network or are in the process of deploying one to secure data inside their premises.

      • Red Hat OfficialEmbraced by creative studios: VFX Linux Task Force recommends Red Hat Enterprise Linux

        Behind everyone’s favorite animated series or special effects-laden blockbuster stands a host of highly skilled visual effects (VFX) and animation studios, providing the artistic muscle to bring the wildest concepts to life on-screen. These creative houses rely on artist workstations and backend services powered by Linux, given the flexibility and scalability of the platform. A new report from the VFX Linux Task Force, however, doesn’t recommend that studios use just any Linux - the working group recommends Red Hat Enterprise Linux (RHEL) 9.x, along with downstream rebuilds of the published RHEL sources.

      • Red Hat OfficialHow Red Hat is approaching the future of work

        The past few years have transformed how we think about work. Our "new normal" presents unique challenges for companies thinking seriously about the future of work. At Red Hat, we’ve come to believe that the future of work is driven by one concept: flexibility.

        As the world’s leading open source software company, Red Hat shares its products and what we’ve learned for free. In that spirit, I’d like to share three things we’ve learned about our new normal.

      • UbuntuIBM LinuxONE Emperor 4: Maximise the value of next generation IBM LinuxONE servers with Ubuntu 22.04.1 | Ubuntu

        IBM has today announced the next generation of its enterprise-grade Linux server family, IBM LinuxONE. The LinuxONE Emperor 4 is IBM’s most highly performing, secure, sustainable and open Linux server to date.

        As the world’s most powerful Linux-based server, LinuxONE Emperor 4 matches perfectly with Ubuntu, the leading Linux operating system. The latest Ubuntu Server release combines Canonical’s signature stability and price-performance together with purpose built LinuxONE hardware support – providing users with an unparalleled path to value for the new IBM server.

      • TechTargetIBM targets energy-saving mainframes at Linux users

        Looking to capitalize on enterprises' growing focus on sustainability and energy saving, IBM has rolled out its next generation of Linux mainframes it claims reduces energy consumption by up to 75%.

        The high-end version of the LinuxOne Emperor 4 server can scale to support tens of thousands of workloads in a single footprint, saving data center floor space by potentially replacing hundreds of x86-based servers.

    • Open Hardware/Modding

      • UbuntuUbuntu Blog: Home Assistant tutorial on Ubuntu Core

        In this tutorial, we’ll learn how to install Home Assistant on Ubuntu Core, then create a motion-activated light automation. This is a great starting point for a secure, open-source smart home. By the end, we’ll have learned the skills we need to create Home Assistant automations of our own with whatever smart home devices we wish.

      • ArduinoTransform the way you organize your home with Arduino | Arduino Blog Smart storage

        One of the wonderful things about living in the modern world is having full cupboards, pantries, and wardrobes. But this privilege also comes with downsides — managing all the various items we own can be a headache and can lead to confusion and stress.

        The good news is that storage doesn’t have to be a chore. In fact, with the right tech solutions, we can make our storage spaces much smarter, so they actually help us stay more organized and even give us guidance on how to use our space better. Many of these solutions can be built at home with just a few tools.

        In this article, we’ll explore the concept of smart storage, and why it’s so useful, and we’ll share a few examples from the Arduino community from people who have built their own smart storage projects.

      • ArduinoBuild your own automatic bean sprouter for superfood meals | Arduino Blog

        Mung bean sprouts are a very popular food throughout Asia, as they are nutritious and extremely easy to grow. While you can certainly purchase these bean sprouts at your local markets, you can also take advantage of their easy cultivation to grow your own. Doing so is affordable and doesn’t take much time or equipment, but Nico Pretorius’ automated bean sprouter will make the process even easier.

        Mung bean sprouts are seeds that are going through the germination process, so cultivating them is a matter of encouraging that germination. There are different techniques in use around the world, but the most efficient involves soaking mung bean seeds in water every few hours. After a few days, you get edible bean sprouts that are suitable for a wide range of culinary dishes. This device automates that watering process to eliminate almost all of the manual labor associated with cultivating bean sprouts.

      • HacksterPapon Charles' NaxRiscV Offers a Fully-Open, Linux-Capable RISC-V System-on-Chip Design for All - Hackster.io

        Hardware engineer Papon Charles has put together a free and open source system-on-chip design, built around the RISC-V instruction set architecture, capable of booting into the RISC-V port of Debian Linux: NaxRiscv.

        "[There weren't] many OoO [Out-of-Order] open source soft-cores out there in the wild (Marocchino, RSD, OPA…)," Charles explains of his decision to develop NaxRiscv, an out-of-order superscalar RISC-V core. "The bet was that it was possible to do better in some metrics, and hopefully being good enough to justify in some project the replacement of single-issue/in-order core soft-cores by providing better performance (at the cost of [silicon] area)."

    • Mobile Systems/Mobile Applications

  • Free, Libre, and Open Source Software

    • Web Browsers

      • Mozilla

        • MozillaSupport.Mozilla.Org: Tribute to FredMcD

          If you ever posted a question to our Support Forum, you may be familiar with a contributor named “FredMcD”. Fred was one of the most active contributors in Mozilla Support, and for many years remains one of our core contributors. He was regularly awarded a forum contributor badge every year since 2013 for his consistency in contributing to the Support Forum.

          He was a dedicated contributor, super helpful, and very loyal to Firefox users making over 81400 contributions to the Support Forum since 2013. During the COVID-19 lockdown period, he focussed on helping people all over the world when they were online the most – at one point he was doing approximately 3600 responses in 90 days, an average of 40 a day.

    • SaaS/Back End/Databases

      • PostgreSQLPostgreSQL: pgBadger v12.0 released

        pgBadger is a PostgreSQL performance analyzer, built for speed with fully detailed reports based on your PostgreSQL log files.

      • The Register UKThe future of FOSS: A tale of database licensing says it all ● The Register

        You don't have to spend long in any aspect of IT to discover that databases are the soul of IT, its constant animating force. From one perspective, everything digital is a specialized database: word processors, spreadsheets, shoot-em-ups, streaming services, from Google to your disk filing system. The storing, sorting and retrieval of data? That's it. That's the whole game. It has been the case ever since Herman Hollerith designed the punched card tabulating machine in the late nineteenth century.

        As for databases that call themselves that, they're the engine of corporate computing. Their capability, reliability and maintainability are essential, and the metrics of performance and expense are unambiguous. Corporate decisions about databases are one of the purest indicators of how IT is sourced and deployed. Hype is quickly exposed, as is the good stuff.

        So when you look at the databases developers actually choose, you're seeing a market model with wider implications. Open source versus proprietary, hosted versus on-prem, innovation versus maturity: all primary concerns across IT, all crystallized in DB decisions.

        But there's an equally important flip side: how the developers and suppliers of DB software manage to stay in business themselves. That's the other great question of IT in the 2020s: how do you make money either fighting or flaunting FOSS.

        That's the first lesson from a feature discussing today's FOSS databases and their respective licensing terms: open source has won. It's about time too. Before FOSS was a corporate option, the big guys were ruthless at monetizing their position in the heart of IT.

    • Productivity Software/LibreOffice/Calligra

      • Document FoundationLibreOffice Conference 2022 Schedule - The Document Foundation Blog

        The schedule of the LibreOffice Conference 2022, to be held in Milan from September 29, to October 1st, has been published: https://events.documentfoundation.org/libreoffice-conference-2022/schedule/. Please check it on a regular basis, as changes will be reflected in real time, even during the conference.

    • Content Management Systems (CMS)

      • Linux JournalStatic Site Generation with Hugo

        Hugo is quickly becoming one of the best ways to create a website. Hugo is a free and open source static website generator that allows you to build beautiful static websites with ease. Static websites are awesome because they take very little system resources to host. Compared to something like Wordpress that replies on databases, php, and more static sites are simply HTML, CSS, and the occasional line JavaScript. So static sites are perfect for simple blogs, documentation sites, portfolios, and more.

    • GNU Projects

    • Programming/Development

      • Perl / Raku

        • PerlAn artistic tool for programmers. | lichtkind [blogs.perl.org]

          I just release App::GUI::Harmonograph for your leisure and pleasure. In case your not not an English noble man form the 18th century who could afford an Harmonograph, even though modern DIY kits are quite affordable, it is a set of set of 3 independent pendula, which move a pen and and paper to create harmonious drawings, of sometimes extraordinary elegance and richness. I got the impulse and knowledge of the apparatus from this book and refer for more background details to this publication. However, the documentation (which is also displayed by the program itself) is much more of practical use, because the WxPerl version is greatly enhanced in possibilities, not in the least for dotted lines with variable density an additional rotation movement and flowing colors.

        • PerlPerl Weekly Challenge 182: Max Index and Common Path
  • Leftovers

    • Linux Foundation

    • Security

      • LWNSecurity updates for Tuesday [LWN.net]

        Security updates have been issued by Debian (connman and python-oslo.utils), Fedora (libapreq2), Red Hat (booth, gnupg2, kernel, kernel-rt, mariadb:10.3, nodejs:14, nodejs:16, python3, ruby:2.7, and ruby:3.0), SUSE (chromium, opera, python2-numpy, and rubygem-kramdown), and Ubuntu (poppler).

      • CISAApple Releases Security Updates for Multiple Products | CISA

        An attacker could exploit some of these vulnerabilities to take control of an affected device.

      • CISACISA Releases Five Industrial Control Systems Advisories | CISA

        CISA released five Industrial Control Systems (ICS) advisories on September 13, 2022. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS.

      • IT WireMicrosoft monthly patch release 'on the lighter side'

        Microsoft has released patches for 62 CVEs on its monthly Patch Tuesday, with five rated as critical and 57 rated as important.

        The security firm Tenable said it had omitted one fix, CVE-2022-23960, a cache speculation restriction vulnerability as it was issued by MITRE and applied to Arm CPUs.

        Tenable staff research engineer Satnam Narang said Microsoft had patched CVE-2022-37969, an elevation of privilege vulnerability in the Windows Common Log File System (CLFS) Driver.

        [...]

        "All three CVEs are considered critical and carry a CVSSv3 base score of 9.8..."

      • CISAMicrosoft Releases September 2022 Security Updates | CISA

        Microsoft has released updates to address multiple vulnerabilities in Microsoft software. An attacker can exploit some of these vulnerabilities to take control of an affected system.

      • CISAAdobe Releases Security Updates for Multiple Products | CISA

        An attacker could exploit some of these vulnerabilities to take control of an affected system.

      • Fear, Uncertainty, Doubt/Fear-mongering/Dramatisation

        • Security BoulevardRetbleed Security Fix Makes Linux go 70% Slower [Ed: Anti-Linux site spreads anti-Linux propaganda. This is about VMware, not Linux.]

          The Linux kernel workaround for the ‘Retbleed’ vulnerability is causing a huge slowdown in tests. Performance runs of VMware guests show results up to 70% worse on slightly old hardware.

          In a way, this was to be expected: When your workaround to a bug in a performance booster is to neuter the performance booster, you’d kinda expect the performance not to be so … boosted? Anyway, it’s hugely worrying for owners of older cloud server fleets.

      • Privacy/Surveillance

        • Citizen LabMass DNA Collection in the Tibet Autonomous Region from 2016–2022 - The Citizen Lab

          In China under the Xi Jinping administration (2012–present), public security work is characterized by two features. The first is intensifying repression and state control, especially in areas with large ethnic and religious minority populations like the Xinjiang Uyghur Autonomous Region. The second is the expansion of invasive state surveillance over the public across China.

          Both of these features are evident in the police-led mass DNA collection campaigns which have occurred under the Xi administration. Like police forces around the world, China’s Ministry of Public Security, the national police agency, has operated a forensic DNA database system since the early 2000s. As of 2018, this DNA database system contained 68 million DNA samples. DNA samples in this database are collected as part of criminal or forensic investigations. Using this database, police can compare DNA samples they collect against a larger repository of existing samples in order to determine a suspect’s identity.

        • TechRadarADPPA vs GDPR: how does the proposed US law compare to EU privacy standards?

          While many Internet users are looking to secure their personal data with the best VPN services, governments across the world have been busy crafting ad-hoc legislations to protect citizens' privacy and prevent businesses from exploiting their sensitive information for commercial purposes.

          Since 2018, people living in the EU and the UK have benefited from the protection of a comprehensive privacy law, the General Data Protection Regulation (GDPR). This legislation has functioned as a base for further regulations worldwide.

          Four years later, it could finally be the time for US citizens to have more control over their data. Making its way through the House floor right now, the American Data Privacy and Protection Act (ADPPA) has the potential to become the first comprehensive federal privacy law in the US. At the moment, just a handful of States enforce their own regulations.

          Despite the fact the legislative process is still ongoing and the current text might change, let's compare how people in Europe and the US could have their privacy rights preserved.

        • AccessNowYour body, your data: data-veillance and reproductive rights in a post-Roe world - Access Now

          In the wake of the historic overturning of Roe v. Wade, data privacy and reproductive rights experts have good reason to be alarmed. Once again, abortion can be criminalized in the United States, yet in today’s world our private lives are constantly surveilled and monetized. This means that everything from our whereabouts to our online search histories — from visiting Planned Parenthood to downloading a period app — is a tool to be sold and weaponized against us. Join this briefing where we will unpack what the Supreme Court ruling means for our human rights and digital safety, and where we go from here. Lunch will be provided for those attending in-person.

    • Censorship/Free Speech

      • ForbesIndia's Supreme Court Demands Clarity On Internet Shutdowns

        India's Ministry of Electronics and Information Technology has been ordered to reveal the grounds upon which it imposes or approves internet shutdowns.

        The ruling by the country's Supreme Court follows a lawsuit from the Software Freedom Law Centre (SFLC) against the state of Arunachal Pradesh, which ordered an internet blackout last October to try and prevent cheating during the state civil service exams.

  • Gemini* and Gopher

    • Personal

      • BDIRSTU Wordo: TABOR

        This is a wordlog for the SpellBinding puzzle (in which you construct words using the specified letters; each word must contain the anchor letter).

    • Technical

      • What's my IP?

        Sometimes you want to find out what public IP address your connection is using to reach the outside world.

        An easy way to find this information is to use a DNS query, which I find to be a quicker way (and also a lighter weight query) instead of opening up a website to find this information.

      • I€²C Project: A Single Flipped Bit

        I've been working on trying to get I€²C comms working on Mecrisp Stellaris, using the built-in hardware module. I spent many lunch breaks seemingly going nowhere, because I couldn't get the Trellis LEDs to even turn on, and the signals did not look correct on the scope.

      • Science

        • Using a unicycle to do a bicycle's job

          I refer to myself as a "unicyclist" since it is an activity I do on an almost daily basis. People who unicycle regularly will do so for various different reasons. For my own part, my interest is primarily to use it as a tool for getting around and/or keeping myself fit and active. Thus I use my unicycles pretty much as others might use a bike (or perhaps even a car). The longest I have travelled in a single ride is a little over 62km (39 miles) but I cycle distances in the 25 to 30km (15 to 19 mile) range fairly often and I cycle at least 10km (6 miles) for my daily round trip commutes (sometimes more than double that, as I love taking detours if I have the time).

      • Programming

        • Landing CPP Shuttle in Geminispace

          It has been a long time since my last entry! Lantashi, that beautiful but demanding Sylvan, has been pushing me to write more, and program more (personal coding, at least). I finally took a vacation in the last week of August.

          During the vacation, I worked on the Lantashi's Dungeon code, which is written in C++. We already had the ability to map out the environment, and move about it with n (north), s (south) etc. But part of the fun on playing a text-based adventure game is figuring out the language it accepts.

        • White space

          I read that Go enforces code layout, so I'll probably never use Go. I'm not bothered where the curlies go or whether indentation is tabs or spoaces. It makes no difference. But if I can use whitespace to make structure explicit, I'm all for it.


* Gemini (Primer) links can be opened using Gemini software. It's like the World Wide Web but a lot lighter.



Recent Techrights' Posts

[Video] Time to Acknowledge Debian Has a Real Problem and This Problem Needs to be Solved
it would make sense to try to resolve conflicts and issues, not exacerbate these
Daniel Pocock elected on ANZAC Day and anniversary of Easter Rising (FSFE Fellowship)
Reprinted with permission from Daniel Pocock
Ulrike Uhlig & Debian, the $200,000 woman who quit
Reprinted with permission from disguised.work
Girlfriends, Sex, Prostitution & Debian at DebConf22, Prizren, Kosovo
Reprinted with permission from disguised.work
 
Audiocasts/Shows: FLOSS Weekly and mintCast
the latest pair of episodes
[Meme] Arvind Krishna's Business Machines
He is harming Red Hat in a number of ways (he doesn't understand it) and Fedora users are running out of patience (many volunteers quit years ago)
[Video] Debian's Newfound Love of Censorship Has Become a Threat to the Entire Internet
SPI/Debian might end up with rotten tomatoes in the face
Joerg (Ganneff) Jaspert, Dalbergschule Fulda & Debian Death threats
Reprinted with permission from disguised.work
Amber Heard, Junior Female Developers & Debian Embezzlement
Reprinted with permission from disguised.work
[Video] IBM's Poor Results Reinforce the Idea of Mass Layoffs on the Way (Just Like at Microsoft)
it seems likely Red Hat layoffs are in the making
IRC Proceedings: Wednesday, April 24, 2024
IRC logs for Wednesday, April 24, 2024
Over at Tux Machines...
GNU/Linux news for the past day
Links 24/04/2024: Layoffs and Shutdowns at Microsoft, Apple Sales in China Have Collapsed
Links for the day
Sexism processing travel reimbursement
Reprinted with permission from disguised.work
Microsoft is Shutting Down Offices and Studios (Microsoft Layoffs Every Month This Year, Media Barely Mentions These)
Microsoft shutting down more offices (there have been layoffs every month this year)
Balkan women & Debian sexism, WeBoob leaks
Reprinted with permission from disguised.work
Martina Ferrari & Debian, DebConf room list: who sleeps with who?
Reprinted with permission from Daniel Pocock
Links 24/04/2024: Advances in TikTok Ban, Microsoft Lacks Security Incentives (It Profits From Breaches)
Links for the day
Gemini Links 24/04/2024: People Returning to Gemlogs, Stateless Workstations
Links for the day
Meike Reichle & Debian Dating
Reprinted with permission from disguised.work
Europe Won't be Safe From Russia Until the Last Windows PC is Turned Off (or Switched to BSDs and GNU/Linux)
Lives are at stake
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Tuesday, April 23, 2024
IRC logs for Tuesday, April 23, 2024
[Meme] EPO: Breaking the Law as a Business Model
Total disregard for the EPO to sell more monopolies in Europe (to companies that are seldom European and in need of monopoly)
The EPO's Central Staff Committee (CSC) on New Ways of Working (NWoW) and “Bringing Teams Together” (BTT)
The latest publication from the Central Staff Committee (CSC)
Volunteers wanted: Unknown Suspects team
Reprinted with permission from Daniel Pocock
Debian trademark: where does the value come from?
Reprinted with permission from Daniel Pocock
Detecting suspicious transactions in the Wikimedia grants process
Reprinted with permission from Daniel Pocock
Links 23/04/2024: US Doubles Down on Patent Obviousness, North Korea Practices Nuclear Conflict
Links for the day
Stardust Nightclub Tragedy, Unlawful killing, Censorship & Debian Scapegoating
Reprinted with permission from Daniel Pocock
Gunnar Wolf & Debian Modern Slavery punishments
Reprinted with permission from Daniel Pocock
On DebConf and Debian 'Bedroom Nepotism' (Connected to Canonical, Red Hat, and Google)
Why the public must know suppressed facts (which women themselves are voicing concerns about; some men muzzle them to save face)
Several Years After Vista 11 Came Out Few People in Africa Use It, Its Relative Share Declines (People Delete It and Move to BSD/GNU/Linux?)
These trends are worth discussing
Canonical, Ubuntu & Debian DebConf19 Diversity Girls email
Reprinted with permission from disguised.work
Links 23/04/2024: Escalations Around Poland, Microsoft Shares Dumped
Links for the day
Gemini Links 23/04/2024: Offline PSP Media Player and OpenBSD on ThinkPad
Links for the day
Amaya Rodrigo Sastre, Holger Levsen & Debian DebConf6 fight
Reprinted with permission from disguised.work
DebConf8: who slept with who? Rooming list leaked
Reprinted with permission from disguised.work
Bruce Perens & Debian: swiping the Open Source trademark
Reprinted with permission from disguised.work
Ean Schuessler & Debian SPI OSI trademark disputes
Reprinted with permission from disguised.work
Windows in Sudan: From 99.15% to 2.12%
With conflict in Sudan, plus the occasional escalation/s, buying a laptop with Vista 11 isn't a high priority
Anatomy of a Cancel Mob Campaign
how they go about
[Meme] The 'Cancel Culture' and Its 'Hit List'
organisers are being contacted by the 'cancel mob'
Richard Stallman's Next Public Talk is on Friday, 17:30 in Córdoba (Spain), FSF Cannot Mention It
Any attempt to marginalise founders isn't unprecedented as a strategy
IRC Proceedings: Monday, April 22, 2024
IRC logs for Monday, April 22, 2024
Over at Tux Machines...
GNU/Linux news for the past day
Don't trust me. Trust the voters.
Reprinted with permission from Daniel Pocock
Chris Lamb & Debian demanded Ubuntu censor my blog
Reprinted with permission from disguised.work
Ean Schuessler, Branden Robinson & Debian SPI accounting crisis
Reprinted with permission from disguised.work
William Lee Irwin III, Michael Schultheiss & Debian, Oracle, Russian kernel scandal
Reprinted with permission from disguised.work