Bonum Certa Men Certa

Links 3/3/2022: LibreOffice 7.3.1 and Getting Things GNOME 0.6

  • GNU/Linux

    • Desktop/Laptop

      • XDADoes the Dell XPS 13 Plus run Linux?

        The Dell XPS 13 Plus is one of the most interesting laptops we’ve seen so far this year. It has a very modern design, a great display, and top-tier performance. Like most laptops, the Dell XPS 13 Plus is mostly known as a Windows device, but what if you want to run Linux on it? Thankfully, you can, either by buying it with Linux out of the box or by installing it yourself later.

      • How Linux Can Help a College Student [Ed: This looks like a legitimate article, but it's actually webspam with SEO crap interjected into it, e.g. "pay for essay"]

        Our article is about how Linux can help a student or any user who wants to get started in this world. Hopefully, you will like this tutorial and you will surely love the idea of using Linux as a primary or even secondary platform.

      • Cool Grub Boot-loader Theme Inspired by DedSec from Watch Dogs | UbuntuHandbook

        Boring with the poor boot menu appearance? Try the cool DedSec GRUB theme. It’s a Grub boot-loader (defaults in most Linux) theme inspired by the fictional hacker group DedSec from Watch Dogs series video game.

    • Instructionals/Technical

      • How to Install RainLoop Webmail with Free Let’s Encrypt SSL on Ubuntu – VITUX

        RainLoop Webmail is an open-source email client that can be installed on your own web server. It supports IMAP and SMTP and provides a user-friendly interface with a variety of features.

      • HowTo ForgeHow to Install Prometheus and Node Exporter on Rocky Linux

        Prometheus is an open-source monitoring and alerting platform. Originally, Prometheus is created by Soundcloud in 2012. Since then the Prometheus project adopted by some famous companies abe become a bigger project with very active developers and community. And In 2016, the Prometheus project is graduated under the Cloud Native Computing Foundation (CNCF).

      • How To Install Suricata on Ubuntu 20.04 LTS - idroot

        In this tutorial, we will show you how to install Suricata on Ubuntu 20.04 LTS. For those of you who didn’t know, Suricata is a Network Security Monitoring tool that processes and controls network traffic. It is used also for generating alerts, logs, and detecting suspicious packets or requests on any service coming to your server. By default, Suricata works as a passive Intrusion Detection System (IDS) to scan for suspicious traffic on a server or network. It will generate and log alerts for further investigation. It can also be configured as an active Intrusion Prevention System (IPS) to log, alert, and completely block network traffic that matches specific rules. This article assumes you have at least basic knowledge of Linux, know how to use the shell, and most importantly, you host your site on your own VPS. The installation is quite simple and assumes you are running in the root account, if not you may need to add ‘sudo‘ to the commands to get root privileges. I will show you the step-by-step installation of the Suricata network security monitoring on Ubuntu 20.04 (Focal Fossa). You can follow the same instructions for Ubuntu 18.04, 16.04, and any other Debian-based distribution like Linux Mint.

      • HowTo ForgeHow to Automate Your AWS Resources with CloudFormation Templates

        AWS CloudFormation is a service that enables system administrators to set up and manage an entire collection of AWS resources - including their configurations, dependencies, and inter-relationships between them - in a single statement. They can also make changes to existing infrastructure without stopping or redeploying the applications running on top of it. AWS Cloudformation allows you to configure your infrastructure as code. It is basically an infrastructure as a code engine that works in the cloud and helps users to provision and manage compute, storage, and other resources. A CloudFormation template is a JSON file with directives on how to create or update AWS resources. We can use AWS CLI, AWS SDKs like boto3, or AWS CloudFormation service to create templates.

      • How to Install Skype on Ubuntu 22.04 LTS - LinuxCapable [Ed: Really terrible advice that gives Microsoft control over GNU/Linux machines (root access, remote)]

        Skype is a proprietary telecommunications application software owned and developed by Microsoft. Skype is one of the most known and recognized software for video, audio, and text communication app available across multiple platforms. For the most part, free to download and use, Skype is an excellent tool for keeping in touch with friends or working remotely with colleagues. In the following tutorial, you will learn how to install Skype on Ubuntu 22.04 LTS Jammy Jellyfish using the command line terminal, and optional version builds of stable and unstable.

      • H2S MediaHow to install Zoom client on Ubuntu 22.04 LTS Linux - Linux Shout

        Go through the commands to install Zoom Client on Ubuntu 22.04 LTS Jammy JellyFish for having a video conference and voice calls. Zoom is a free software for holding audio calls and video conferences. The basic functions of Zoom can be used free of charge and registration is not absolutely necessary. Zoom is available both as a program for the computer and as an app for all Android and iOS devices. Depending on the scope of the package, recordings of your video conference can also be viewed. If desired, artificial intelligence can capture transcripts of your conversations, which you can then edit further.

      • HowTo GeekHow to Copy Files and Directories in the Linux Terminal

        Like any other operating system, you can copy and paste files and directories (folders) in a Linux distribution using the desktop interface. But you can save time by copying those files in the Terminal.

      • H2S MediaHow to Install PHP on Ubuntu 20.04 LTS Focal Fossa - Linux Shout

        Learn the steps to install the latest version of PHP language on Ubuntu 22.04 LTS Focal Fossa using the command terminal. PHP is the most common server-side programming language in the web world. Server-side means that the language can only perform actions on the server: For example, it can establish connections to a database or delete files on the server. You can easily convert an HTML file into PHP. You simply have to save the HTML file under .php. You can upload this PHP file to your server and call it up – without any actual PHP code. The output is unchanged.

      • How to Install Thunderbird Mail on Ubuntu 22.04 LTS - LinuxCapable

        Thunderbird Mail is a free, open-source email client that can be used on both your desktop computer and mobile devices like iPhone or Android. The mail client software was initially developed by the Mozilla Foundation but is now maintained by the Thunderbird community for the community. In the following tutorial, you will learn how to install Thunderbird Mail on Ubuntu 22.04 LTS Jammy Jellyfish using three installations method of APT, Flatpak, and Snap.

      • How to enable jailed shell/SSH access to CPanel user using command line.

        To enable jailed shell or SSH access to CPanel user. You can run below command.

      • How to Set Up WireGuard VPN on Ubuntu [A Step-by-Step Guide]

        WireGuard is an open-source, free, and fast VPN server that utilizes state-of-the-art cryptography. It passes traffic over UDP with better performance than the common two tunneling protocols i.e OpenVPN and IPsec. WireGuard is a peer-to-peer VPN made specifically for the Linux kernel. It runs inside the Linux kernel and allows you to create fast, modern, and secure VPN tunnel. WireGuard works by creating a network interface on each peer device that acts as a tunnel. Peers authenticate each other by exchanging and validating public keys, mimicking the SSH model.

      • How to Upgrade Mesa Drivers on Ubuntu 22.04 LTS - LinuxCapable

        With the release of modern graphics cards, it’s easy to forget that before they were standard in most gaming laptops and consoles – there was Mesa. The open-source software implementation translates API specifications into vendor-specific drivers so you can use high-end applications with your PC even if it has older hardware! Most Linux distributions feature Mesa drivers, given they are free and open-source before any proprietary drivers options, however for most Linux distributions that focus on stability first, you may find your Mesa drivers needing an update when new releases support newer graphic card hardware and technologies. In the following tutorial, you will learn how to upgrade or install Mesa Drivers on Ubuntu 22.04 LTS Jammy Jellyfish with Obigaf PPA for the latest drivers to support Intel Radeon, NVIDIA, etc.

      • How to Install GCC Compiler (build-essential) on Ubuntu€ 22.04 LTS - LinuxCapable

        GCC, better known as The GNU Compiler Collection, is a set of compilers development tools. Front ends such as C, C++, Objective-C, Fortran, Ada, Go, and D. GCC is open-source and is widely used as it was the original compiler for GNU and is currently used to compile the Linux Kernel along with many other projects. In the following tutorial, you will learn how to install GCC Compiler on Ubuntu 22.04 LTS desktop or server using the default APT repository maintained by Ubuntu or the PPA toolchain for the latest bleeding-edge or alternative backport versions.

      • How to Install ImageMagick on Ubuntu 22.04 LTS - LinuxCapable

        ImageMagick is a free, open-source application installed as a binary distribution or source code. ImageMagick can convert, read, write and process raster images. ImageMagick is also available across all major platforms, including Android, BSD, Linux, Windows, Mac OSX, iOS, and many others. In the following tutorial, you will learn how to install ImageMagick on Ubuntu 22.04 Jammy Jellyfish using the APT or Source installation method.

    • Games

      • GamingOnLinuxCastlevania Advance Collection works on Steam Deck, despite what Konami say | GamingOnLinux

        Recently, Konami released an announcement on the Castlevania Advance Collection Steam store page to say it does not work on the Steam Deck. It does. Note: personal purchase. The statement reads: "Before purchasing this software, please be advised that it cannot be played on Steam Deck as it does not support SteamOS.". Clearly then they don't understand how Linux, SteamOS, Proton or Steam Deck works. As usual, I'm here to clear things up — as it really works just fine.

      • GamingOnLinuxBoxes within boxes, puzzle game Patrick's Parabox releases March 29 | GamingOnLinux

        Patrick's Parabox, a very clever puzzle game is going to release on March 29. This might actually be one of my most anticipated releases this year. I tested out the demo in a previous Steam Festival and absolutely fell in love with the idea. "Patrick's Parabox is an award-winning puzzle game that explores a unique recursive system of boxes within boxes within boxes within boxes. Learn to manipulate the world's structure by pushing boxes into and out of each other. Wrap your head around what happens when a box contains itself, and learn to use infinity to your advantage. Explore many more mechanics and recursive twists as you delve deeper and deeper into the system. It's boxes all the way down."

      • GamingOnLinuxGOG suspends all sales in Russia and Belarus | GamingOnLinux

        With the ongoing brutal Russian invasion of Ukraine, many more companies are taking action and now GOG has made a big announcement with their store. Here's the statement they provided about the decision to suspend activities in Russia and Belarus...

      • GamingOnLinuxHeroic Games Launcher now works nicely on Steam Deck | GamingOnLinux

        Something that I've been asked, repeatedly (and then some), is to show the Heroic Games Launcher on the Steam Deck. So here we are, let's take a look. See also: installing Discord and the Epic Store directly. This had to wait, as there we some issues in both Heroic and an extra tool we needed called the Heroic Bash Launcher. I've been constantly speaking to the developer about it along with the issues, and now the fixes are live for everyone. Using the Epic Store with Rocket League for the guide, since it's free to play. While Heroic supports GOG, currently you can't add the games from GOG to Steam just yet with the AppImage.

    • Desktop Environments/WMs

      • K Desktop Environment/KDE SC/Qt

        • Season of KDE 2022 With KDE Eco

          As part of a pioneering sustainability project, KDE Eco has the aim of measuring and driving down the energy consumption of KDE/Free Software. This requires emulating user behaviour, which can be achieved by planning and scripting Standard Usage Scenarios. I will be scripting Standard Usage Scenarios for various applications, with a focus on commonly-used text editors like Kate, KWrite, Vim, Nano, Emacs, Calligra Words, and LibreOffice. I will prepare these usage scenarios with one of many available emulation tools. [...] Just imagine: What if we analyzed the energy consumption behind commonly-used software and made it more transparent? What if users could learn how much energy their software requires and could choose the application that might be better for the environment? This would be great!!! The KDE Eco initiatives Free and open source Energy Efficiency Project (FEEP) and Blauer Engel For FOSS (BE4FOSS) are working hard on these issues. As noted by FEEP, the design and implementation of software has a significant impact on the energy consumption of the systems it is part of. With the right tools, it is possible to quantify and drive down energy consumption. This increased efficiency contributes to a more sustainable use of energy as one of the shared resources of our planet.

      • GNOME Desktop/GTK

        • Jean-François Fortin Tam: Getting Things GNOME 0.6 released

          Yes, ladies, gentlemen, and seemingly-dead plants, it’s happening: after over 10 months of incremental work from the community, we are now releasing version 0.6 of our favorite personal productivity app. This release comes with some new features, lots of code improvements, and many bugfixes.

        • 9to5LinuxGetting Things GNOME 0.6 Personal Productivity App Released with New CalDAV Sync Backend

          Coming about 11 months after Getting Things GNOME 0.5, the Getting Things GNOME 0.6 release is here to introduce a new synchronization backend that supports CalDAV server synchronization across your multiple computers, a new plugin to add game-like elements to the app, as well as a revamped tag editor. There are also the usual improvements to make Getting Things GNOME more stable and reliable when adding parent or child tasks, when marking recurrent tasks as done, as well as when deleting multiple tasks at once, especially when you have a huge list of opened tasks.

    • Distributions

      • Barry KaulerEasyOS test build for recent AMD GPUs

        I have done another build, with 5.15.16 kernel, with some extra configure options enabled for recent AMD APUs and GPUs. Also with extra firmware under /lib/firmware/amdgpu -- thanks to forum member hundido. The kernel has the 'radeon' driver disabled, so won't work with older ATI/AMD GPUs. It only has the 'amdgpu' driver. This has been done for testing, so that the radeon driver won't load and interfere.

      • IBM/Red Hat/Fedora

        • Egeria Dojos and the IBM Developer community – IBM Developer [Ed: IBM cannot stop outsourcing everything to Microsoft and to its proprietary software attack on Free software/Open Source]

          I am an Egeria maintainer at IBM. If you would like to look up what code I have written, my GitHub ID is davidradl. Many thanks to Nigel Jones for reviewing this content. Nigel is also an Egeria maintainer at IBM.

        • How to provision a RHEL VM from Red Hat Satellite

          In this multi-part tutorial, we covered how to provision RHEL VMs to a vSphere environment from Red Hat Satellite. Now that we have completed all of our prep work, in this final part, we can provision VMs to our VMware cluster using the specification we defined in the compute profile. As part of the provisioning process, Satellite will request an available IP address from our DHCP server, update the forward and reverse DNS zone records, provision the VM on our VMware cluster, and register the new RHEL VM to our Satellite server and Red Hat Insights

        • CPE Quarterly Update Q4 2021 –

          This is a summary of the work done on initiatives by the CPE Team. Each quarter CPE Team together with CentOS and Fedora community representatives choose initiatives that will be being worked on in this quarter. The CPE Team is then split into multiple smaller sub-teams that will work on chosen initiatives + day to day work that needs to be done.

      • Debian Family

        • The Register UKLinux on an SBC project Armbian releases version 22.02

          The latest update to Armbian brings a mainline-kernel based Ubuntu- and Debian-compatible environment to dozens of small single-board computers. This includes both Arm and x86-based hardware UEFI booting – and 64-bit builds for Raspberry Pi hardware. Armbian supports over 60 different single-board computers, including various models of Banana Pi, nVidia Jetson, Pine64 and dozens more. The problem it addresses is similar to what postmarketOS is trying to do with smartphones. Your snazzy little SBC is shipped bundled with a Linux of some kind, customised for the hardware – but like a budget smartphone, all too often you will only get one update ever (if you're lucky), and then that's it. Soon the vendor has a new device to sell, and that device gets newer software versions, not last year's model. Armbian isn't exactly a Linux distro, but you could confuse it for one if you squint a bit. Armbian is a framework that lets you build enough of a Linux system – a kernel, plus tools to get that kernel into memory, and if necessary the core of a root filesystem – to put the rest of Debian or Ubuntu on top.

      • Canonical/Ubuntu Family

        • Linux MintMonthly News – February 2022 – The Linux Mint Blog

          I’m sorry for the late blog post. I’ll be brief and to the point. Before I talk about Linux Mint, I hope everyone is safe and OK. The roadmap for Linux Mint 21 is taking form. It’s currently available at The BETA release for LMDE 5 is out. We already received 22 bug reports. Many thanks to all the people who are helping us test it. In preparation for Linux Mint 21 we are updating Cinnamon’s Javascript interpreter and rebasing its window manager on a more modern version of Mutter. This is a huge task and it requires many code changes in Cinnamon itself and causes a significant number of regressions. We needed a full development cycle for this so the timing is perfect. Linux Mint 21 is likely to switch from Blueberry (which uses the gnome-bluetooth backend) to Blueman (which uses bluez). Feedback showed that it worked better with Bluetooth audio headsets and connected to a wider ranger of devices. On the development side of things, the latest version of gnome-bluetooth introduced changes which broke compatibility with Blueberry and its main developer isn’t keen on seeing his work used outside of GNOME. Blueman on the other hand welcomed a Mint migration and is open to changes. We’re currently testing Blueman and working on its integration within Linux Mint.

        • 9to5LinuxLinux Mint 21 to Adopt Blueman for Better Bluetooth Support, Use a More Modern Mutter

          Linux Mint 21 will finally end the Linux Mint 20 series, which is based on the Ubuntu 20.04 LTS (Focal Fossa) operating system series, featuring a newer base from the upcoming Ubuntu 22.04 LTS (Jammy Jellifish) long-term supported operating system series. Of course, Linux Mint 20 will still be supported until April 2025 with software and security updates, but the Linux Mint team is now focusing on the next major series, Linux Mint 21, which will ship not only with newer core components (e.g. Linux kernel, Mesa graphics stack, GCC, GNU C Library) but also with a newer version of the in-house developed Cinnamon desktop environment.

    • Devices/Embedded

      • Linux GizmosBanana Pi previews RK3588 module and dev kit

        Banana Pi previewed a “Core” module with an octa-core -A76 and -A55 Rockchip RK3588 with up to 8GB LPDDR4 and 128GB eMMC. A carrier board adds 2x GbE, 2x SATA, 3x HDMI, 4x USB, and PCIe Gen3 x4. Banana Pi has teased an upcoming compute module and carrier board based on Rockchip’s RK3588, which will also be appearing in Q2 2022 on Radxa’s Rock 5 Model B. The products are offered by the Banana Pi unit that will soon ship the RK3568-based, quad-GbE BPI-R2 Pro router board. The unnamed Core module and carrier have begun sampling, and the BSP for Linux and Android 12 is still under development.

      • Linux Action News 230

        Why it might be time to lower your RISC-V expectations, Intel's moves to close up CPU firmware, and a quick state of the Deck.

      • 1U Raspberry Pi Rack Mount Bracket – CubicleNate's Techpad

        In an effort to improve the organization of my home computer “core” I have made the search for a solution to mount my Raspberry Pi and potentially future Pis on my 2-post server rack. The solutions I found were outside of my budget for a small change so I found a solution on by Russ Ross. [...] This was perfect so I employed my 3D Printer to print off all the parts. The total cost for the PLA and the hardware is about $20.00 This will take about 554 grams of PLA at $20 per kilogram will cost $11.04. The Hardware, which includes a 36 inch threaded rod, 4 nuts and 4 washers to fasten the components together, and 24 screws for retaining the Pis was about $9.00.

      • Geeky GadgetsAAEON Up Squared 6000 Edge mini PC $599 - Geeky Gadgets

        AAEON has launched a new Edge mini PC computer kit in the form of the Up Squared 6000. Specifically designed to provide a small form factor industrial solution to simplify the development process for independent software vendors (ISVs), and IoT developers. The new mini PC is based on the Intel Atom x6000E range of processors formerly known as Elkhart Lake. [...] The software package features the Intel Edge Insights for Vision, which includes Ubuntu desktop LTS...

      • Open Hardware/Modding

        • ArduinoThis special chessboard brings digital opponents into the physical world | Arduino Blog

          Chess still remains an extremely popular game but finding someone to play against can be a struggle, especially when it’s done in-person instead of through a screen. Greg06 on Instructables has created an automated chessboard that can not only tell where specific pieces are moved, but also play against a live human opponent intelligently while moving its own pieces. At the base of the gameboard is a two-axis gantry system, which is responsible for moving the chess pieces positioned above via an electromagnet. And rather than placing one stepper motor on each axis, the gantry takes advantage of the CoreXY concept which can move the magnet in all directions with a complex arrangement of pulleys, belts, and two stationary stepper motors. Controlling this is a single Arduino Nano connected to a pair of A4988 drivers, a MOSFET for driving the magnet, and two limit switches for homing.

      • Mobile Systems/Mobile Applications

    • Free, Libre, and Open Source Software

      • Document FoundationLibreOffice 7.3.1 Community available for download
        LibreOffice 7.3.1 Community, the first minor release of the LibreOffice 7.3 family, targeted at technology enthusiasts and power users, is available for download from This version provides a solution to several LibreOffice 7.3 bugs, including the Auto Calculate regression on Calc, the crashes running Calc when lacking AVX instructions and the crashes related to the Skia graphic engine on macOS.

      • 9to5LinuxLibreOffice 7.3 Office Suite Gets First Point Release, Almost 100 Bugs Were Fixed

        LibreOffice 7.3.1 is here exactly one month after LibreOffice 7.3 to fix a bunch of bugs and issues that would prevent you from successfully using the popular office suite software for any of your home office needs. A total of 98 issues were addressed in this first point release to provide solutions to several LibreOffice 7.3 bugs, including the Auto Calculate regression on the Calc component, along with crashes when running Calc without AVX instructions.

      • Programming/Development

        • Linux Links8 Top Free and Open Source Haskell Web Frameworks - LinuxLinks

          One of the types of software that’s important for a web developer is the web framework. A framework “is a code library that makes a developer’s life easier when building reliable, scalable, and maintainable web applications” by providing reusable code or extensions for common operations. By saving development time, developers can concentrate on application logic rather than mundane elements. A web framework offers the developer a choice about how to solve a specific problem. By using a framework, a developer lets the framework control portions of their application. While it’s perfectly possible to code a web application without using a framework, it’s more practical to use one. Haskell is a standardized, general-purpose, polymorphically statically typed, lazy, purely functional language, very different from many programming languages. It enables developers to produce software that’s clear, concise, and correct. When it comes to web development, there are a fairly wide range of Haskell frameworks available. The choice depends on finding the right tool for the job at hand. Here’s our pick of the finest Haskell web frameworks.

        • The New StackUsing APIs with Low-Code Tools: 9 Best Practices [Ed: "ServiceNow and Torq are sponsors of The New Stack." So this is, in effect, a paid-for commercial again. The New Stack is a part time webspam site disguised as "news".]

          There’s no doubt that these tools and platforms are helping to speed up software creation and delivery. But how do you make sure the tools your organization chooses integrate well with the APIs you need to be productive — from Slack to Salesforce — and serve your users and customers? As with any other type of software that serves cloud native architecture, the low- and no-code market is crowded with products, and not all of them will survive the competition. Or, the most popular low-code startups get acquired by tech giants. Either way, vendor lock-in can leave your organization stranded. “The problem quite often in the past has been, low-code tools get to a certain level, and they just disappear,” said Mark Boyd, founder and director of the consulting firm Platformable. There’s another possible pain point with low-code/no-code tools and APIs, said Boyd, who researches best practices for API technologies. “When you dig down and try to do something a little bit outside the box, that’s not as simple as you just pull this data from here into here,” he told The New Stack. Some of the tools get complicated when you try to customize them. Before you know it, he said, you’re rolling up your sleeves and coding anyway: “It can be a turn-off.”

        • Qt 5.15.3 Opensource released

          we have released Qt 5.15.3 opensource today...

        • QtQML Type Compilation: that new Qt Quick Compiler part you have not heard much about

          We have been recently talking about the QML to C++ compilation, but this was mostly describing the process of compiling your JavaScript code. Along with it, however, there is another compiler coming in Qt 6.3 - the QML type compiler (or qmltc for short), available as a tool in the qtdeclarative repository. This compiler is part of the Qt Quick Compiler technology and, complementing QML script compiler (qmlsc), it aims to look at the QML language from a different angle. In this blog post you should learn about this part of QML and the process of compiling your QML types to C++, no components left aside.

  • Leftovers

    • Science

      • HackadayIon Thrusters: Not Just For TIE Fighters Anymore | Hackaday

        Spacecraft rocket engines come in a variety of forms and use a variety of fuels, but most rely on chemical reactions to blast propellants out of a nozzle, with the reaction force driving the spacecraft in the opposite direction. These rockets offer high thrust, but they are relatively fuel inefficient and thus, if you want a large change in velocity, you need to carry a lot of heavy fuel. Getting that fuel into orbit is costly, too! Ion thrusters, in their various forms, offer an alternative solution – miniscule thrust, but high fuel efficiency. This tiny push won’t get you off the ground on Earth. However, when applied over a great deal of time in the vacuum of space, it can lead to a huge change in velocity, or delta V. This manner of operation means that an ion thruster and a small mass of fuel can theoretically create a much larger delta-V than chemical rockets, perfect for long-range space missions to Mars and other applications, too. Let’s take a look at how ion thrusters work, and some of their interesting applications in the world of spacecraft!

    • Integrity/Availability

      • Proprietary

        • Pseudo-Open Source

          • Openwashing

            • Security WeekOpen Source Security Foundation Now Counts 60 Members [Ed: Openwashing by proprietary software companies]

              The Open Source Security Foundation (OpenSSF) on Tuesday announced that 19 more organizations have joined the initiative, showing commitment towards identifying and addressing vulnerabilities in open source software. OpenSSF now has a total of 60 members. Hosted by the Linux Foundation, OpenSSF is a cross-industry forum meant to bring together open source security initiatives and help not only address the security of open source, but also develop best practices, research, tooling, training, and vulnerability disclosure practices.

            • The Apache Software Foundation Welcomes VMware as its Newest Platinum Sponsor [Ed: This company is attacking Free software [1, 2], ASF should not welcome the attacker]

              The Apache€® Software Foundation (ASF) today welcomed VMware€® as its latest sponsor at the Platinum level. "We are happy to welcome VMware as a Platinum Sponsor," said Bob Paulin, ASF Vice President Fundraising. "Sponsoring the ASF provides essential funds and services that enable us to support more than 300 Apache Projects and their communities on a day-to-day basis. We are grateful for VMware's generosity as it helps us further our mission of providing software for the public good."

        • Security

          • Enrico Zini: Migrating from procmail to sieve

            Anarcat's "procmail considered harmful" post convinced me to get my act together and finally migrate my venerable procmail based setup to sieve. My setup was nontrivial, so I migrated with an intermediate step in which sieve scripts would by default pipe everything to procmail, which allowed me to slowly move rules from procmailrc to sieve until nothing remained in procmailrc. Here's what I did.

          • Bruce SchneierDetails of an NSA Hacking Operation [Ed: Cracking, Bruce Schneier, not "Hacking"...]

            Pangu Lab in China just published a report of a hacking operation by the Equation Group (aka the NSA). It noticed the hack in 2013, and was able to map it with Equation Group tools published by the Shadow Brokers (aka some Russian group).

          • ViceChinese Cybersecurity Company Doxes Apparent NSA Hacking Operation
          • LWNSecurity updates for Thursday []

            Security updates have been issued by CentOS (cyrus-sasl), Fedora (kicad), Mageia (php), openSUSE (envoy-proxy, ldns, libdxfrw, librecad, php7, and shapelib), Red Hat (cyrus-sasl), SUSE (firefox, gnutls, ldns, and php7), and Ubuntu (haproxy and php7.2, php7.4).

          • Cisco Releases Security Updates for Multiple Products | CISA

            Cisco has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system. For updates addressing lower severity vulnerabilities, see the Cisco Security Advisories page.

    • Defence/Aggression

    • Civil Rights/Policing

      • AccessNowIran: Drop charges against human rights activist Hossein Ronaghi - Access Now

        We, the undersigned human rights organisations, call on Iranian authorities to drop the charges against Iranian activist and human rights defender Hossein Ronaghi. We believe the charges arise from peaceful exercise of his human rights, including his criticism of the dire human rights situation in the country and a looming piece of legislation that will further shrink people’s rights if ratified. Ronaghi was held in detention in circumstances that violated his due process rights, from 23 February until he was released on bail late on 2 March. He was held in detention in Evin Prison for eight days without any official charges brought against him. According to his lawyer, a hearing before the office of the prosecutor on 28 February revealed he had been charged with ‘propaganda against the state’ and ‘gathering and collusion with the intention of disturbing national security’. Ronaghi was previously imprisoned for six years in relation to his peaceful exercise of his human rights. During his imprisonment, his health deteriorated severely as a result of torture and ill-treatment and the multiple hunger strikes he went on to protest his conditions. Following his recent arrest, Ronaghi was denied access to his lawyers and denied visits from family members. It was several days before security agents gave his family any information about his disappearance. The authorities also prohibited his lawyers from accessing case files throughout much of his detention, thereby violating his due process rights.

    • Internet Policy/Net Neutrality

      • Senate Commerce Votes To Approve Sohn, Bedoya To Guide Broadband Policy for Consumers - Public Knowledge

        Today, the U.S. Senate Committee on Commerce, Science, and Transportation voted to approve Gigi Sohn as a Commissioner at the Federal Communications Commission and Alvaro Bedoya as a Commissioner for the Federal Trade Commission. Both Ms. Sohn and Mr. Bedoya have worked steadfastly to champion consumer protections and have a deep understanding of the important role that these agencies have in ensuring those protections reflect the needs of consumers. Public Knowledge urges the Senate to confirm President Joe Biden’s nominees to help protect consumers in the digital era. The following can be attributed to Chris Lewis, President and CEO at Public Knowledge: “These committee votes are extremely important for getting stalled parts of the technology policy agenda moving with a sense of urgency. The FCC plays a critical role in ensuring consumers have access to robust, affordable broadband and the FTC works to ensure that once consumers are online, their privacy is protected and there is a functioning market that provides choice.

Recent Techrights' Posts

Washington's WARN Site/Portal (That Excludes Many Microsoft Layoffs) is Now Down for Many Hours, Microsoft Causes Major Outages and Incidents Worldwide (Even Deaths)
The mass layoffs (lots of them in Azure since 2020) probably worsen resilience and security some more
UEFI 'Secure Boot' Once Again Bricking PCs and Fake Security Models Are Perishing in Geminispace
Let's Encrypt has just fallen again
1901 Days in High-Security Prison (and 8 More Years in Severe Confinement) for the 'Crime' of Exposing War Crimes and Corruption
Julian Assange clip = Microsoft Lobbying (Openwashing)
Here's the latest pair of blog posts
In Northern Mariana Islands, Where Julian Assange Pled Guilty 4 Weeks Ago, Windows Remains Second to Android, and GNU/Linux Still Grows in Oceania
It was the first month ever that statCounter saw more Web requests there from Android than from Windows
Gemini Links 20/07/2024: Gopher Catchup and Old Computer Challenge
Links for the day
Microsoft Lays Off Half of Its Workforce in Nigeria
Microsoft continues to implode in Africa
Links 19/07/2024: Microsoft Breaks Down and Amdocs Has 1,500-3,000 More Layoffs
Links for the day
[Meme] Conservative (and Fake) Nuclear Physicist Bill Gates
Didn't even graduate from college, media treats him like a world-renowned expert in nuclear energy
The Gemini Capsule of Tux Machines Turns 2 in Six Days
Many people actually use Gemini, some participate in it by creating their own capsule (or capsules)
GNU/Linux Rises to 4% in Saudi Arabia, Says statCounter, Windows Has Fallen to 11% (Android Exceeds 60%)
Microsoft might soon fall below 10% in KSA (Saudi Arabia)
IRC Proceedings: Thursday, July 18, 2024
IRC logs for Thursday, July 18, 2024
GNU/Linux news for the past day
GNU/Linux news for the past day
If GitLab Gets Sold (Datadog and Google Named Among Potential Buyers), It'll Prove Our Point About GitLab
Beware the bait on the hook
Hot Summer: Microsoft Flirting With the "5% Windows" Club in Afghanistan
The share of Windows in Afghanistan has fallen to almost 5% (1 in 20 Web requests)
[Meme] Nothing Says "Independence Day" Like...
Firing DEI on Independence Day period
Good News About GNU/Linux, Geminispace, FSF, and Backlash Against Microsoft
here are a few quick takes
Links 18/07/2024: Hardware, Conflicts, and Gemini Leftovers
Links for the day
Backlash and Negative Press After Microsoft Tells Diversity, Equity, and Inclusion (DEI) People to DIE
Follow-up stories
Links 18/07/2024: Retroactively Pseudonymised Litigant and Alberta’s Energy ‘War Room’
Links for the day
Gemini Links 18/07/2024: A Welcome to Gemini and Politics of Assassinations
Links for the day
Red Hat's Official Site Yesterday: Promoting 'Secure' Boot in Machines You Don't Own or Control Anyway
"To be clear, CentOS Linux no longer exist"
Fabian Gruenbichler & Debian: former GSoC student added to keyring
Reprinted with permission from Daniel Pocock
Links 18/07/2024: ORG Complaint to ICO About Facebook, Korean Double Agent Unmasked
Links for the day
Joel Espy Klecker & Debian on Joe Biden's health and Donald Trump's assassination
Reprinted with permission from Daniel Pocock
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Wednesday, July 17, 2024
IRC logs for Wednesday, July 17, 2024
Links 18/07/2024: Hostname Pedantry and Retro Coding
Links for the day