A few weeks ago, HP joined the bandwagon of major laptop manufacturers releasing a Linux-based laptop, the HP Dev One. The brand joins others such as Lenovo and Dell, offering a laptop with a pre-installed distribution of Linux in the US market. HP joined forces with smaller Linux-based laptop brand System76 to pre-install Pop!_OS as their distribution of choice on the device. Pop!_OS is a Ubuntu-based distribution, which System76 started (and is currently the primary maintainer) to maximize the features of its own laptops sold on its website.
This article is a quick look at the HP Dev One, including first impressions of the hardware itself and running the pre-installed Pop!_OS and then Fedora on it after a few days. It is not about comparing them, just a few notes on how well they did on the HP Dev One.
Framework isn't all-in on Linux to the same degree as System76, but it does specifically brag about the laptop's Linux support and its use of Linux-friendly internal hardware. The DIY Edition doesn't come with an OS, but Linux users are certainly one of its target audiences.
Fedora 36 and Ubuntu 22.04 LTS should both support all of the new laptop's hardware out of the box, according to Framework, but for any distribution you use, you'll want to check the age of the Linux kernel it uses. To properly assign work between the E-cores and P-cores and get the best possible performance, you should try to run kernel version 5.16 or higher; that version provided some performance boosts for Alder Lake chips, but kernel 5.18 also introduces some improvements for the hybrid processors.
That means you might run into issues with other versions of Linux that are based on older upstream distributions. Linux Mint, my preferred distro, is still based on Ubuntu 20.04 and ships with Linux kernel version 5.4. Even the "Edge" edition, meant to solve exactly this problem by pairing the current Mint version with a newer kernel, only ships with 5.13.
Installing the Edge edition of Mint and then installing all updates (including an auto-update to kernel version 5.15, though you'll need to upgrade manually to get something newer) seemed to get most things working OK, including audio, networking, and graphics acceleration. But I had to install an additional package to get the fingerprint sensor working, and you'll still be missing Alder Lake-related improvements in newer kernels. Ubuntu 22.04 did work more smoothly out of the box, albeit still with an older 5.15 kernel.
First up in the news, Mint is coming, Lennart Poettering has left the building, Vim speaks a new language, WebApps come to GNOME 43, Fedora lets Flatpak out of jail and wants to talk, GTK5 is dropping the X, Linux gets Siri, er, Cortana, er, Carola.
Modern Linux kernels want to do kernel mode setting (KMS). One of the consequences of KMS is that the 'text' console goes through modesetting during boot. On desktops, you don't usually use a text console and KMS is necessary anyway for your graphical desktop; if modesetting is broken, you won't get far. On servers the benefits are lower and the downsides larger; with KMS enabled, modesetting must work in order for you to have any text console. Lately, I've come to feel that there are some pragmatic issues that make KMS more problematic on servers than you might think.
 If you use a general purpose media player to access your music collection, you’re missing out on a wealth of features that can improve your listening experience. That’s why we recommend a dedicated music player. Linux offers a huge range to choose from which is why we put together this roundup to help save you time. But there are always new projects coming along.
G4Music is billed as a beautiful, fast, fluent, lightweight music player.
The software is written in Vala and uses GTK4, a cross-platform widget toolkit for creating graphical user interfaces. Before we put the software that its paces, let’s briefly run over installation.
The Hurrican Aware App is a free open-source web application that track, collect, visualize and share information about the potential impacts of tropical storms in the United States.
The app uses ArcGIS Living Atlas of the World, ArcGIS JavaScript API, D3.js for the map visualization and React.js.
Today I wound up re-learning something that I sort of already knew about the IO statistics about pools and vdevs that you can get through things such as zpool iostat. Namely, that at least for bytes read and written and the number of IO operations, these IO statistics are what I call physical IO statistics; they aggregate and sum up the underlying physical disk IO information.
A little over a year ago, I removed all analytics from this site because it was sending me down a rabbit hole that I didn’t like. Here’s an update.
In retrospect I realise that this is one reason it took me so many years to eventually set up a website (and gemini capsule) and start journaling semi-regularly. That thought of "what should I write about or publish that people will want to read". A fallacy, quite obvious to me now, unless you're peddling a product or marketing a corporation.
The idea for an Ansible reference (or cheat) sheet was reborn last week at the Linuxhotel; a few students who knew they would be receiving a tmux mug as a gift when leaving asked why we don’t give out Ansible mugs.
To get statistics today you have a number of options. First, you can pick through the zpool iostat manual page and run it by hand to generate copious output, although this doesn't give you access to all IO statistics available (for example, there are size histograms that aren't currently available). If you want things in a metrics system, the ZFS on Linux project provides zpool_influxdb as an official InfluxDB format metrics exporter, but when I looked at it I didn't really like using it with Prometheus. There's a native Prometheus zfs_exporter project, but it's explicitly marked experimental and in my opinion needs a number of changes to make it truly useful (for example, in its current state it only provides per-vdev statistics, although it's easy to hack the code a bit to report per-pool stats too).
In this video, I am going to show how to install Regata OS 22.0.3.
Learn the command and steps to install the free open source accounting software – Akaunting on Ubuntu 22.04 LTS Jammy JellyFish to Ubuntu 20.04 LTS Focal Fossa.
If you want to install Akaunting for a demo on a local server or for permanent purposes on a cloud/hosting VPS server then here is the tutorial to guide you on the steps for the installation of Akaunitng on Ubuntu, Debian and other similar Linux.
Hello Techies, In this guide, we will cover how to install VirtualBox on OpenSUSE Leap 15.4 step by step.
VirtualBox is the virtualization software used at desktop level on both Linux and Windows operating system. It allows users to install and run multiple virtual machines (VMs) at the same time. Virtualbox is useful whenever users want to build their test environment on their laptop inside the virtual machines.
Valentina is a software package for creating clothing patterns distributed according to the open-source software model. The main idea of this concept is to combine modern technologies with traditional design methods. The main feature of Valentina, which qualitatively distinguishes it from other solutions for the fashion industry, is the work with parametric patterns. This allows you to create complex pattern shapes using a set of basic parameters.
In addition, Valentina provides a wide range of tools for pattern creation, including automatic drawing tools, freehand drawing tools, and a library of ready-made templates. Thanks to these features, Valentina has become one of the most popular software packages for fashion designers and sewing professionals.
The following tutorial will teach you how to install Valentina on Ubuntu 22.04 LTS Jammy Jellyfish using a LaunchPAD APT PPA with the command line terminal.
You've mastered a Linux tool, but that hard-earned knowledge came at the cost of frequent usage, reading the manual pages, and using a search engine to avoid the bad examples out there.
Managing files in a graphical desktop like GNOME or KDE is an exercise in point-and-click. To move a file into a folder, you click and drag the icon to its new home. To remove a file, you drag it into the “Trash” icon. The graphical interface makes desktop computing easy to use.
But we don't always interact with Linux systems with a graphical interface. If you work on a server, you likely need to use the command line to get around. Even desktop users like me might prefer to interact with their system through a terminal and command line.
Sometimes the shell scripts are required to run as the root user to perform some tasks with administrator privileges. Generally, that tasks can be achieved with the Sudo commands. If in some cases you still need to force the user to run the script as the root user, you can add code to your script to check if the script is running with the root user or not.
Django is a free and open-source, Python-based web framework that follows the model–template–views architectural pattern. Django advertises itself as “the web framework for perfectionists with deadlines” and “Django makes it easier to build better Web apps more quickly and with less code”. Django is known for the speed at which you can develop apps without compromising on robustness.
Docker is an open platform that performs Operating System level virtualization also known as containerization. It makes it possible to build, ship, and run distributed applications in controlled environments with defined rules.
Docker Compose is a tool for defining and running multi-container Docker applications. With Compose, you use a YAML file to configure your application’s services. Then, with a single command, you create and start all the services from your configuration.
Google Chrome is the most used Internet Explorer software on the earth. It is an excellent option for Linux Mint because it is faster than Firefox, the default installed browser on your desktop. Additionally, Chrome has a ton of features that make browsing the web a better experience. For example, Chrome has a built-in PDF viewer, making it easy to open PDFs without downloading them first. Chrome also has an incognito mode, allowing you to browse the web privately without saving your history or cookies. Finally, Chrome is synced with your Google account, so your bookmarks and passwords will be available on all your devices. Overall, Google Chrome is the best browser for Linux Mint users.
In the following tutorial, you will learn how to install Google Chrome on Linux Mint 21 release series in three alternative ways: stable, beta, or unstable versions, along with some essential command tips for users.
In this tutorial, we will show you how to install VeraCrypt on Ubuntu 22.04 LTS. For those of you who didn’t know, VeraCrypt is a free, open-source disk encryption tool. VeraCrypt is equipped with various encryption algorithms such as AES (Advanced Encryption Standard), Camelia, Kuznyechik, Serpent, and Twofish. It is available for Windows, Linux, and macOS.
This article assumes you have at least basic knowledge of Linux, know how to use the shell, and most importantly, you host your site on your own VPS. The installation is quite simple and assumes you are running in the root account, if not you may need to add ‘sudo‘ to the commands to get root privileges. I will show you the step-by-step installation of the VeraCrypt encryption tool on Ubuntu 22.04 (Jammy Jellyfish). You can follow the same instructions for Ubuntu 22.04 and any other Debian-based distribution like Linux Mint, Elementary OS, Pop!_OS, and more as well.
For years, the primary congestion control algorithms used on the internet were Reno and CUBIC. Both of these had their strengths and weaknesses, but they shared one major issue: they were not very effective at dealing with network bottlenecks. This led to a lot of wasted bandwidth and high latency, which was a major problem for Google and other companies that rely on the internet for their operations. However, Google has now found a way to overcome these issues with the new TCP Bottleneck Bandwidth and RRT (BBR) algorithm.
This updated congestion control algorithm achieves significant bandwidth improvements, lowers latency, and is deployed by Google.com, Google Cloud Platform, Youtube, and others. Thanks to BBR, we can finally say goodbye to the old network bottleneck problems that have plagued us for so long.
In the following tutorial, you will learn to enable TCP BBR on Debian 11 Bullseye using the command line terminal with some configurations and screenshots.
This short tutorial demonstrates how to install DIG on Debian 11 Bullseye. This tutorial also explains how to use this application to get DNS-related information.
The cut, copy, and paste file editing operations are key in the mastery of Linux file management. On a graphical text editor like LibreOffice Writer, the implementation of these file editing operations are a no-brainer.
However, the nano text editor offers some file editing flexibility not evident in graphical file editors like LibreOffice Writer. For instance, it is easier to navigate to various file paths and open them via the nano editor than it is to achieve the same objective using a graphical text editor.
This tutorial will show us how easy it is to achieve cut, copy, and paste text operations while using the nano text editor in Linux.
The nano text editor has a reputation for making life easier for most users on the journey of mastering the Linux operating system footprints. It is the perfect text editor to start with before adopting more advanced text editors like Vim.
Since human is to error, we tend to make mistakes while editing our files on a Linux operating system environment. A native solution to errors that occur during file editing operations is to navigate to the position of the incorrect text using the keyboard arrow keys and subsequently apply the keyboard backspace key to fix the issue.
However, when we master the implementation of undo and redo operations while working on a file opened with the nano text editor, it saves us a lot of valuable time that would be wasted trying to fix the edit issue via the keyboard navigation keys.
This article will walk us through the implementation of the undo and redo file operation functions in a nano text editor in Linux.
In this post, you will learn a simple but very useful trick that can help you in Linux administration. Today, you will learn how to change the SSH port.
Tor, also referred to as The Onion Router, is open-source, free software that permits anonymous communication using online services like web surfing. The Tor network directs the web traffic through an accessible worldwide volunteer overlay network with over six thousand relays and continues to grow. Many users want to search out more ways to keep their information and activities anonymous or private online due to the increasing concerns over data and work snooping. However, users should be aware of both the advantages and disadvantages of using Tor before deciding whether or not it is the right tool for them.
While Tor provides a high degree of anonymity, it is not perfect. Due to the way the network routes traffic, it can be slow, making it impractical for some uses. In addition, because traffic is encrypted, some sites that use anti-Tor measures can block all traffic from the network, preventing users from accessing them. Despite these drawbacks, Tor remains a popular tool for those seeking a higher degree of anonymity online.
In the following tutorial, you will learn how to install Tor Browser on Rocky Linux 9 workstation desktop using Flatpak third-party package manager or downloading the browser manually and how to install it manually with tips on registering the application icon.
Pong is simple. There are only three sprites on screen, the level is always the same, and the game logic is pretty easy to code. This also seemed like a great project to help me start to wrap my head around Go routines and Channels, concepts that were completely new to me coming from Ruby and Python.
A couple of days ago, was working on what was planned to become Limine Installer version 1.2, when hit a snag with BIOS chainloading.
Some fixes... cleaned up Vivaldi installer a little, fixed a bunch of my image manipulation scripts to work properly with switch from imagemagick to graphicsmagick.
Heavily edited idesktool to manipulate desktop/icons.
Stripped down the installer for the ISO. Just auto-install. No more Slckware tweaks/prompts -- Just takes over hard drive and goes... Will GPT the drive if bios is set to launch UHCI, (and you set USB stick to GPT. I used Rufus on a Windows box.) If you MBR the stick and computer bios is MBR, Absolute installer will partition drive MBR and use lilo.
In either case, the drive is repartitioned and anything on it is wiped.
But it’s worth remembering that resource use is only one metric; a computer that’s turned off isn’t using anything! I imagine a chart with features plotted against memory: provided both scale linearly, it’s easy to pick something that hits the sweet spot for features you use, your available resources, and how much time and inclination you have to spend tinkering with a system.
There’s also no shame in wanting something pretty, especially given how much some of us spend in front of these machines in our work and personal lives. Vermaden didn’t do this, but I see other people in the open source community poke fun at those who want something nice as well as functional. Technical specifications make something possible, but art makes life worth living. The fact we all have opinions about what that is, and what it should look like, is why we call it subjective.
Slowly and steadily, Flatpak has a growing acceptance in the desktop Linux world.
It is well integrated into Fedora and many other distributions like Linux Mint, elementary, Solus, etc. prefer it over Ubuntu’s Snap.
If you love using Flatpak applications, let me share a few tips, tools, and tweaks to make your Flatpak experience better and smoother.
 The new Debian GNU/Linux 11 Linux kernel security update comes one and a half months after the previous kernel security update and it’s here to fix a total of nine security vulnerabilities in the Linux 5.10 LTS kernel, which is the default kernel for Debian Bullseye users.
Patched in this new kernel update is CVE-2021-33655, a security issue that could allow a user with access to a framebuffer console driver to cause a memory out-of-bounds write through the FBIOPUT_VSCREENINFO ioctl, and CVE-2022-2318, a use-after-free vulnerability found in the Amateur Radio X.25 PLP (Rose) support that may result in a denial of service attack.
 Rockchip RK1808 SoC with a built-in 3.0 TOPS AI accelerator has been around since 2019, and we’ve seen it in USB compute sticks, SBCs, and even in Pine64 SoEdge-RK1808 SO-DIMM module, but somehow never in the more widely used M.2 or mPCIe form factors.
Toybrick TB-RK1808M0 changes that and offers Rockchip RK1808K SoC coupled with 1GB RAM and an 8GB eMMC flash in a mini PCIe module that exposes USB 3.0, USB 2.0, UART, and GPIO signals.
I have created a demonstration video for ROMulus on the Amiga 500. For anyone interested in finding out more about this board more details are available here.
Finally, the whole structure, including the top clamp is 3D printed now, which makes it potentially possible to do top probing and more easily adjust the dimensions.
With this new fixture, my cycle time for a test is around 60s. At that point, the time spent in the test program is about the same as the time it takes to unpack and package up the boards, so it isn’t really the limiting factor any more.
I’ve just pushed out version 0.8.0 of Obnam, an encrypting backup program. Below are the release notes.
A collaboration between CERT NZ, Catalyst and the open source community has created a major update for Samba, making it more secure.
Samba is an open source software suite used as an active directory domain controller, like Microsoft Active Directory.
Samba is Free Software licensed under the GNU General Public License, and the Samba project is a member of the Software Freedom Conservancy.
Since 1992, Samba has provided secure, stable and fast file and print services for all clients using the SMB/CIFS protocol, such as all versions of DOS and Windows, OS/2, Linux and many others.
If you assume that the unit direction vector is in the first quadrant (both x and y are positive), then there is a direct way to compute the solution. Using 1/sqrt(2) or 0.7071 as the default solution, compare both x and y with cos(3*pi/8) and cos(pi/8), and only switch them to 1 or 0 if they are larger than cos(3*pi/8) or smaller than cos(pi/8). The full code looks as follows: [...]
I’m a big proponent of the email workflow for patch submission and code review. I have previously published some content (How to use git.sr.ht’s send-email feature, Forks & pull requests vs email, git-send-email.io) which demonstrates the contributor side of this workflow, but it’s nice to illustrate the advantages of the maintainer workflow as well. For this purpose, I’ve recorded a short video demonstrating how I manage code review as an email-oriented maintainer.
There's a curious case of a neural network for object recognition called YOLO – You Only Look Once. While many object detection models were two-pass (one for identifying bounding boxes, the other for classifying), YOLO was single-pass. This makes YOLO fast and small.
The next release of Leiningen (likely 2.9.9) will include support for starting an nREPL server listening to an Unix domain socket. As a reminder - Unix domain sockets were one of the highlights of nREPL 0.9, which was released at the end of 2021.
I recently needed to include an arbitrary blob of data in an executable, in a manner that's easily ported across platforms. I soon discovered that there are various solutions to including blobs, but finding out what the trade-offs are has been a case of trial and error [1]. In this post I'm going to try and document the portability (or lack thereof...) of the solutions I've tried, give a rough idea of performance, and then explain why I'll probably use a combination of several solutions in the future.
We have been working with a third-party vendor that supplies a critical component of one of our systems. Because of supply-chain issues, they are trying to "upgrade" us to a newer version of this component, and they say it is a drop-in replacement for the old one. They keep saying this component should be seen as a black box, but in our testing, we found many differences between the original and the updated part. These are not just simple bugs but significant technology changes that underlie the system. It would be nice to treat this component as a drop-in replacement and not worry about this, but what I have seen thus far does not inspire confidence. I do see their point that the API is the same, but I somehow do not think this is sufficient. When is a component truly drop-in and when should I be more paranoid?
Only using each Git server on a computer dedicated for some line of work (company, private, school) is impractical for different reasons. I keep personal notes on discoveries I make when working for my job or for school, which I store in a private repository. Changing laptops just to write down that command line I already googled seven times is not practical, and just would make me to google it for the eighth time.
Furthermore, I prefer to work on my stationary PC running Arch Linux (which I use as a daily driver, by the way) for school-related work, especially when it comes to making up programming examples; I'm just less efficient working on my Windows laptop.
For various reasons I spent the last two years way too much looking at code with terrible locking design and trying to rectify it, instead of a lot more actual building cool things. Symptomatic that the last post here on my neglected blog is also a rant on lockdep abuse.
I tried to distill all the lessons learned into some training slides, and this two part is the writeup of the same. There are some GPU specific rules, but I think the key points should apply to at least apply to kernel drivers in general.
The first part here lays out some principles, the second part builds a locking engineering design pattern hierarchy from the most easiest to understand and maintain to the most nightmare inducing approaches.
Also with locking engineering I mean the general problem of protecting data structures against concurrent access by multiple threads and trying to ensure that each sufficiently consistent view of the data it reads and that the updates it commits won’t result in confusion. Of course it highly depends upon the precise requirements what exactly sufficiently consistent means, but figuring out these kind of questions is out of scope for this little series here.
Picroscopy is a small Python web-application which is intended for usage with a Raspberry Pi as a microscopy solution.
With the Raspberry Pi Camera mounted on a microscope, the Raspberry Pi provides a live video feed to its monitor via HDMI, while another machine can be used to control the setup via a web-based interface.
The Linux date command is used to get the current date and time. You can easily customize the results by using the arguments. In this how-to tutorial, you will learn to format the date as YYYY-MM-DD in the bash shell.
My daily workflow often involves repeatedly running tasks, whether that be build commands, unit tests, or some other scripts. My ideal workflow is to have a terminal split on the right hand side, and then be able to send tasks to it.
The Linux ecosystem is packed with fantastic tools for working with text and strings. These include awk, grep, sed, and cut. For any heavyweight text wrangling, these should be your go-to choices.
Sometimes though, it’s convenient to use the shell’s built-in capabilities, especially when you’re writing a short and simple script. If your script is going to be shared with other people and it is going to run on their computers, using the standard Bash functionality means you don’t have to wonder about the presence or version of any of the other utilities.
If you need the power of the dedicated utilities, then by all means use them. That’s what they’re there for. But often your script and Bash can get the job done on their own.
Because they’re Bash built-ins, you can use them in scripts or on the command line. Using them in a terminal window is a fast and convenient way to prototype your commands and perfect the syntax. It avoids the edit, save, run, and debug cycle.
I present to you, dear reader, a spiral containing every Unicode 14 character in the GNU Unifont. Starting at the centre with the control characters, spiralling clockwise through the remnants of ASCII, and out across the entirety of the Basic Multi Lingual Plane. Then beyond into the esoteric mysteries of the Higher Planes2.
Lucas Holt asked what tech people liked that’s gone. I never miss an opportunity to engage in some tech nostalgia, so here’s a selection of mine: [...]
A powerful 7.1 magnitude earthquake struck the Philippine island of Luzon on Wednesday killing at least one person and damaging buildings in the northern Abra province and sending strong tremors through the capital, Manila.
A 25-year-old man was killed by falling debris, said Abra Vice Governor Joy Bernos, when the quake struck about 11 km (six miles) southeast of Dolores town at a shallow depth of 10 km (6 miles), according to U.S. Geological Survey data.
While the company only lasted for a few years — and they only produced a handful of models — their distinctive designs (for both their cases and their hardware & software choices) are worthy of being remembered.
In 1982, Canon released the AS-100 computer. A fascinating — and awesome looking — computer workstation that was aimed squarely at the business market.
About a month ago, British health authorities announced they’d found evidence suggesting local spread of polio in London.
It was a jolt, to be sure. The country was declared polio-free in 2003.
I can’t help but wonder if, in the minds of many reviewers, MacBooks were PCs so long as they used Intel, and therefore they stopped being PCs once Apple switched to using their own silicon.
Developers who use NPM, the popular JavaScript package manager, will now be able to connect their Twitter and GitHub accounts to the software as a recovery method.
Those of you who have emailed my work address lately will have noticed I’m also on sabbatical this summer, because after five years of focus on Tidelift I’m feeling pretty burnt out. This is not a criticism of Tidelift: it’s a great team; I’m very proud of what we are doing; and I will be going back shortly. But a big theme of the summer has been to think about what I want to do, and how that intersects with Tidelift—so that when I come back I’ll be both a strong contributor, and a happy and healthy contributor.
[....]
Good: it helped me ask “what the hell am I doing” in much better ways. Two key tricks to this: asking it in a ten year timeframe, and using a bunch of neat futurist-y brainstorming techniques to help think genuinely outside of the box. For this reason I think it might end up being, in ten years, the most influential “self-help” book I ever read.
Bad: it’s a classic “this book should have been an article”, and it is the first time I’ve thought “this book should have been an app”—the structured brainstorming exercises could have been much more impactful if guided with even minimal software. There actually is a companion(?) pay-to-enter community, which so far I’ve really enjoyed—if I stick with it, and find value, I suspect in the future I’ll recommend joining that community rather than reading the book.
Other big failure(?): it focuses a lot on What Is Going On In The World and How You Can Change It, when one of my takeaways from Malesic’s burnout book was to focus less on The World and more on the concrete people and places around me. The book’s techniques are still helpful for this, which is why I think it’ll be impactful for me, but I think it’d be a better book if its examples and analysis also drilled down on the personal.
Clouds can really help your business. If, and it's a big if, you can get it to work for you. That's where companies such as Cloudify, with its open source business-to-business (B2B) e-commerce platform, come in. Now, to make it more powerful, you can use the Cloudify infrastructure automation platform with ServiceNow IT Operations Management (ITOM), part of the digital workflow of its Now Platform.
One of the first findings brought to my attention was that Secure Boot was not enabled. After shaming myself, I remembered that in the past, installation instructions for most Linux distributions recommended disabling Secure Boot prior to installation. Not wanting to complicate installations any further I went into the BIOS/UEFI settings and disabled Secure Boot, then installed my Linux distribution of choice (sometimes that was POP_OS! And more recently Ubuntu). Once the installation was completed, I had not gone back and researched how to achieve better security using Secure Boot.
This brought forth one of my first questions: Why did most Linux distributions state that Secure Boot should be disabled? It turns out Linux distributions had not completed the process to get all of the required binaries signed that allow a computer to boot securely. With there being so many Linux distributions this proved to be quite the challenge. It was only in the past 2-3 years that many distributions have moved to enable Secure Boot by default. Understanding what needs to be done in order to support Secure Boot leads us pretty deep down a rabbit hole, which begins with first understanding how Secure Boot works.
A good starting point is to read some of the previous research on vulnerabilities related to Secure Boot. Eclypsium researchers have presented on Secure Boot dating as far back as 2013 at Black Hat USA in a talk titled “A Tale of One Software Bypass of Windows 8 Secure Boot” and again in 2014 at Defcon “Summary of Attacks Against BIOS and Secure Boot“.
For corporate and commercial projects, it is better to choose Linux, which confidently leads by the parameter "security".
Security is especially critical for Software-as-a-Service (SaaS) environments, where the platform is used by many different people who need the confidence that their data is stored safely and kept private from unrelated users. This article focuses on security concerns for containers on your SaaS deployment running in Kubernetes environments such as Red Hat OpenShift. The article is the fifth in a series called the SaaS architecture checklist that covers the software and deployment considerations for SaaS applications.
In February 2021, forensic analysis by Amnesty International and Citizen Lab revealed that Kanimba had been surveilled, allegedly by the Rwandan government, with her phone infected with the Israeli NSO Group’s spyware Pegasus as early as a month after her father’s kidnapping.
Pegasus spyware has been connected with several instances of hacking and surveillance by governments targeting dissidents, journalists and political opponents, resulting in the NSO Group being blacklisted by the US.
Kanimba says her phone was tracked during meetings and communications with foreign officials as she advocated for her father’s release.
One Medical is a membership-based primary care practice with nearly 200 locations across the country that also offers virtual services. The company had roughly 767,000 member patients as of May.
The Greek data protection authority has fined the company Clearview AI €20 million. The company that sells facial recognition software to law enforcement agencies in the U.S. is no longer allowed to process biometric data on individuals in Greece and must delete all existing data.
The question above is straight-forward and the answer lies in the bandwidth that we, Mauritians, consume. In order to learn about the bandwidth consumption, I checked the ICT report published by Statistics Mauritius.
Let's say someone has visited your website; is it possible to determine what DNS resolvers their computer is configured to use?
Well, yes. Of course you can! This blogpost wouldn't be very long if the answer was no. Let's find out how. But before we begin...
You'll need JavaScript for this to work.
Part of what makes it hard to put an end to hacking is that there’s just so much of it. There’s a “ware” for everything: malware, ransomware, and even spyware. With this overabundance, the U.S. Congress is finally going to start looking into foreign spyware, specifically Pegasus.
It’s been seven years since the online cheating site AshleyMadison.com was hacked and highly sensitive data about its users posted online. The leak led to the public shaming and extortion of many Ashley Madison users, and to at least two suicides. To date, little is publicly known about the perpetrators or the true motivation for the attack. But a recent review of Ashley Madison mentions across Russian cybercrime forums and far-right websites in the months leading up to the hack revealed some previously unreported details that may deserve further scrutiny.
The United States needs to adopt a more offensive cybersecurity posture to survive in an evolving digital world by enacting sanctions against malicious states, developing artificial intelligence capabilities to identify possible cyberthreats, and engaging in diplomacy to deter cyberattacks before they initiate, said experts at an Internet Governance Forum event on Thursday.
The report by members of the Republican minority of the Senate Homeland Security and Governmental Affairs Committee alleges that China has used promises of lucrative teaching and research contracts to try to entice economists working at more than half of the system's 12 Federal Reserve Banks to share nonpublic information about economic forecasts and monetary policy decisions with Chinese officials.
China's goal, according to the report, is to "supplant the U.S. as the global economic leader and end the U.S. dollar's status as the world's primary reserve currency."
Earlier this month, the city of New York released a short video, seemingly out of the blue, informing residents what to do in the event of a nuclear attack. The 90-second video—which opens with the line, “So, there’s been a nuclear attack. Don’t ask me how or why, just know that the big one has hit. OK?”—left many New Yorkers scratching their heads.
In defending the video as “a very proactive step,” New York City Mayor Eric Adams acknowledged that the public safety announcement had come in response to the changing nature of the global security environment with Russia’s invasion of Ukraine.
In particular, the Digital Earth Viewer, which is open source and licensed under the EUPL, is a web application for spatiotemporal contextualization and visualization of heterogeneous data sources. It was developed with the goal of enabling real-time exploration of geoscientific data sets across spatial and temporal scales. To this end, it is capable of ingesting data from a large variety of types that are usually found in the geosciences, and it deploys a user interface, which allows for interactive visual analysis. At the same time, online and offline deployment, cross-platform implementation, and a comprehensive graphical user interface are all capabilities that make the Digital Earth Viewer particularly accessible to scientific users.
The youth plaintiffs in the case, Held, v. State of Montana, are represented by the Oregon-based nonprofit law firm Our Children’s Trust, an organization that has brought multiple youth climate suits, most notably Juliana v. United States, a 2015 case in which 21 young people sued the federal government for knowingly and extensively contributing to climate change and with these actions violating their constitutional rights.
But this is the first time that a case of this nature has been allowed to enter the trial phase, which will likely begin in early summer 2023. Advocates say the trial is a landmark opportunity to hold a governing body accountable for its role in perpetuating climate change and to establish a plan for remedy and relief. If successful, it also lays the groundwork for the courts to rule in favor of young people in future climate lawsuits.
It is hard to understand wildfires in the western states without first learning about the arid nature of the region. There remains no better book on water in the West than Marc Reisner’s “Cadillac Desert”, from 1986. It is a sprawling history of how the Bureau of Reclamation made the modern West possible by erecting a vast network of dams, reservoirs and pipelines to carry water from wet places to dry ones. But the bureau’s frenetic construction enabled the overuse of western rivers by cities and farms, and so further parched the landscape. Water policy can be impenetrable. Yet Reisner brings the complicated story to life by introducing readers to characters such as the “Renaissance man” who explored the length of the Colorado River, and the politicians who stole the water that allowed Los Angeles to blossom.
At the moment, world oil production is€ hovering at around 100 million barrels daily and is projected to€ reach€ 109 million barrels by 2030, 117 million by 2040, and a jaw-dropping 126 million by 2050. So much, in other words, for “peak oil” and a swift transition to green energy.
This is the fourth annual survey by cable.co.uk and it shows that while there are interesting positional moves, little has changed over the life of the survey.
We have previously reported on this and similar investigations with significant fluctuations in position.
Taking a look at the data, one of the most striking observations is that mobile data is most expensive in countries where infrastructure is weak; and populations are small. Perhaps that’s obvious.
Mark Zuckerberg believes that Apple and his company are in a “very deep, philosophical competition” to build the metaverse, suggesting the two tech giants are ready to butt heads in selling hardware for augmented and virtual reality.
The Meta CEO told employees earlier this month that they were competing with Apple to determine “what direction the internet should go in,” according to a recording of his comments during an internal all-hands meeting obtained by The Verge. He said that Meta would position itself as the more open, cheaper alternative to Apple, which is expected to announce its first AR headset as soon as later this year.
Two bills that would revamp how tech companies cater to and obtain data from young users will be in the spotlight Wednesday as a Senate panel debates how to update laws designed before the rise of social media.
The markup has been long awaited by critics who say the existing regulations are no longer adequate for a generation raised on the internet. Support for the issue has snowballed since a Facebook whistleblower leaked bombshell internal documents last year.
As a piece of the new world order that is under construction, Putin’s trip to Tehran last week was of singular importance.
Twitter revealed the expenses in its 10-Q filing Tuesday with the SEC. Other than the $33.1 million in “transaction expenses” associated with Musk’s proposed takeover, “the terms of the Merger Agreement did not impact the Company’s consolidated financial statements,” the company said.
Lawmakers in the House of Representatives have introduced the Puerto Rico Status Act, which would allow residents of the longtime U.S. colony to begin the process of self-determination and decide on the island’s territorial status. The bill sets up three options for residents to choose from in a referendum — U.S. statehood, independence or sovereignty in free association with the United States — and commits Congress to abide by the results. We speak to San Juan’s former Mayor Carmen Yulín Cruz about the shortcomings of the bill, which she says lacks clarity on what each status would mean for Puerto Ricans. Among the concerns are whether Spanish would be taught as a primary language in government-funded public schools. Many do not understand “the rush to do it and, in doing so, not allowing the Puerto Rican people to have all the information to exercise their freedom to choose,” says Cruz.
It’s easy to recall how€ Trump claimed global warming was a “Chinese hoax”€ that, according to his twisted view of the world, was intended to give China an economic advantage over the U.S. Apparently the idea that some of our political leaders€ —€ and certainly the majority of our citizens€ —€ desperately want to take action to address the climate crisis is antithetical to the “take it all while you can get it”€ self-acknowledged greed of the former president.
But the “chickens have come home to roost” on that issue€ —€ and it’s so hot they’re laying hard-boiled eggs.€ The airports in Britain (which is an island in the middle of the ocean) had to be shut down because the runways were melting€ in the hottest temperatures ever recorded there. So were the roads€ —€ and the railways were closed because the tracks are warping in the extreme triple digit heat. And they’re wrapping the London Bridge in tin foil because the cast iron is cracking in the heat.
The policy sets criteria for the selection, removal and replacement of books. School officials said it doesn’t seek to censor any particular community, pointing to safeguards like a protection for “classics” and replacing removed books with new ones that touch on similar subject matter but without age-inappropriate content.
Newsroom raids, a website ban and a team reporting from exile are no obstacle for the independent Belarusian Investigative Center.
Founded in 2018, BIC specializes in news analysis, fighting disinformation and exposing wrongdoing.
Its award-winning journalism has uncovered corruption in the pharmaceutical industry, sanction-breaking exports of petroleum, and shady real estate deals by oligarchs.
In April, BIC became part of the Organized Crime and Corruption Reporting Project (OCCRP).
The digitalisation of the public sector is proved a difficulty for one fourth of Danish citizens who do not feel comfortable using technology, and this may lead to a social inequality.
This is according to a report done by Justitia that has recently been released, revealing how several Danes are against the continuous digitalisation of the public sector as it is creating obstacles for some.
Throughout the country, counties are dipping into funds from the American Rescue Plan Act (ARPA) and the Coronavirus Aid, Relief, and Economic Security (CARES) Act to build and expand jails and prisons. At least 20 counties in 18 states are using, or want to use, Covid relief money this way. The problem is, their decision to do so violates the spirit, and likely the letter, of the rules governing how relief money can be used. These rules, finalized by the US Treasury earlier this year, ban jurisdictions from using Covid relief money to build or expand correctional facilities. Yet that hasn’t stopped local officials in a number of counties from pushing their projects through, spending their ARPA and CARES Act windfalls like winning lottery tickets for long-sought expansions.
America’s deadliest epidemic is fueled by dangerous numbness and self-loathing, says Professor of Clinical Psychiatry Dr. James Gilligan, whose work analyzes the crisis of nihilistic violence through patient case studies, Greek myths, and Shakespeare.
We were warned for decades about the death march we are on because of global warming. And yet, the global ruling class continues to frog-march us towards extinction.
Human rights activists are sounding the alarm in Burma, where the military junta has executed four men imprisoned for their pro-democracy activism and opposing last year’s coup. It is the first series of reported executions in Burma in three decades. We speak to exiled Burmese dissident and human rights activist Maung Zarni, who says the international community should hold the Burmese regime accountable for its humanitarian crimes, especially in light of the overwhelming response to the Russian war in Ukraine. “This is a regime that has committed every single grave crime in international law that has ever been established and coded in the law books,” says Zarni.
Pope Francis is on a historic trip to Canada this week to apologize for the mistreatment suffered by thousands of Indigenous children in residential schools run by the Catholic Church. Many survivors say the apology comes over half a century too late and the church should take further actions to prevent the psychological, physical and sexual abuse from recurring in Catholic-run institutions. We go to Toronto to speak to Mi’kmaq lawyer Pamela Palmater, who says the apology was little more than “pomp and circumstance” for the church, which ultimately “doesn’t take responsibility for their policies and practices.” Her Toronto Star op-ed is headlined “Another pope’s apology isn’t enough when Catholic Church’s cover-ups and hypocrisy continue to this day.”
We all know this country is capable of evils normally associated with authoritarian regimes — things like torture, illegal spying, the occasional exhortation to commit suicide, etc. But we expect the country we love to only violate our sense of justice for big things: War on Terror, War on Drugs, War on… Equal Rights, I guess.
CIA veteran John Kiriakou breaks down some of the most important elements of Vault 7—the biggest leak in CIA history—allegedly divulged to WikiLeaks by another former CIA officer.
Italian media no longer receive information about their country’s cooperation with the Libyan coast guard. Whether many millions of euros for equipment have been wasted there can now hardly be clarified. It also makes the EU border agency Frontex more opaque.
In mid-June, Helga Pirogova, an opposition municipal councillor from the Siberian city of Novosibirsk, wrote a critical tweet in response to a news article about Russian volunteer soldiers killed in Ukraine. Pirogova had been openly supporting Ukraine for months, but€ apparently this comment was the final straw. On direct instructions from agency head Alexander Bastrykin, the Russian Investigative Committee launched criminal proceedings against Pirogova for allegedly spreading “disinformation” about the Russian military. Facing up to three years in prison if tried and convicted, Pirogova made the difficult decision to flee Russia for Georgia. Speaking to Meduza, Helga Pirogova shares her story.
In upcoming Intel, Qualcomm, and AMD processors, there is going to be a new chip, built-in to the CPU/SoC silicon die, co-developed by Microsoft and AMD called the Pluton. Originally developed for the Xbox One as well as the Azure Sphere, the Pluton is a new security (cynical reader: DRM) chip that will soon be included in all new Windows PCs, and is already shipping in mobile Ryzen 6000 chips.
This new chip was announced by Microsoft in 2020, however details of what it was actually capable of, and what it actually means for the Windows ecosystem were kept frustratingly vague. Now with Pluton rolling out in some AMD chips, it is possible to put together a cohesive story of what Pluton can do from several disparate sources.
Because Microsoft’s details are sparse, this article will attempt to summarize all that we now know regarding Pluton. It may contain inaccuracies or speculation, but any potential inaccuracy or speculation will be called out where possible.
Netflix gives every impression of being one of the world’s most climate friendly corporations.€
The streaming company responsible for the blockbuster climate movie “Don’t Look Up” starring Leonardo DiCaprio and Jennifer Lawrence plans to slash or offset all of its corporate greenhouse gas emissions by the end of 2022, a goal known as net-zero.
Meta’s AI division has announced€ two exciting new projects€ in the field of machine translation:
The former operator of pirate IPTV service HeHeStreams has reached a plea agreement with the US government. After being indicted on several counts carrying sentences of up to 20 years each, Joshua Streit has admitted to a single cybercrime offense. In addition to a potential prison sentence, Streit will now forfeit $500K.
Popular sports streaming site Rojadirecta has found itself on the losing end of a piracy battle in Italy. The Court of Rome has found the Spanish company liable for infringing the rights of local broadcaster Mediaset and reportedly ordered the streaming portal to pay 529,579 euros in damages. However, the court didn't grant all Mediaset's requests.
Unconventional forms of representation like this, serve to make you pay attention to what is actually represented. In this case, it really made it clear to me how interconnected the mediterranean is (and was historically).
Hoo boy am I feelign sick. I’ve had a fever of about 100âââ° for 2 days give or take. I think it’s from the buza I drank in Biaà âystok, or perhaps it was something I ate.
I went to the doctor, and the prognosis was good, tho I still feel sick. I’ll get over this soon, hopefully. Gotta drink a bunch of Gatorade lol.
Concerningly, a number of participants tested positive for coronavirus after the conference. I tested negatively, and I’m praying that the others recover swiftly.
So one of the Linux distros that I used a lot in my early days was Puppy Linux. Around the time I started with it, Puppy had two graphical text editors, Leafpad and Beaver. Leafpad was basically what you'd get if you were copying Notepad's interface using Gtk+. It's extremely simple and no frills. Even after moving away from Puppy, I continued to install Leafpad on whatever system I was on and made sure that it was the program used to open any text file when clicked on in a file manager. I did this for a rather long time, until I sat down and actually learned Vim.
Xfce at some point adopted the Leafpad codebase and began improving upon it as their Mousepad editor. Mousepad initially only added tabs, and then syntax highlighting. And then, after a while, a funny thing happened
I wrote this out for a HARO request, and figured it was worth posting the whole thing, because this stuff is getting done poorly everywhere!
Then I remembered the fantasy consoles PICO-8 and TIC-80.
I bought PICO-8 a few years ago and played a few games. They're really small, but many are fun. And the source always comes with the game, which is quite a nice culture really.
When it comes to fantasy consoles I heard that there was an alternative: TIC-80. This was recommended to me on the basis that it's open source, unlike PICO-8.
I'm probably going to install both on my console. Since I've already bought PICO-8 it makes sense to use it, and TIC-80 is free anyway.
I have working Gemini and Spartan server implementations under my belt now[1], and having spent some time seeking out Spartan-hosted content via clients that make it easy to traverse both geminispace and sparta it's a pretty good experience.
The only things I think I can feel missing in sparta which gemini makes a non-issue are user sessions of some sort, allowing specific interactivity, and protocol-level resiliance to bad actors on the network. In Gemini, both of these tasks are accomplished via TLS.
I want to run gemserv in a simple container for process isolation from the main filesystem. The simplest container technique is 'chroot', which lets you run a process with a virtual root filesystem, or 'proot', which does similar but doesn't require root any privileges. Since gemserv itself doesn't require root privileges, and 'proot' does everything I need, that's what I'll use in this instance.
The main benefit of all this is security, since it limits what can be seen by at attacker if the server is compromised in some way. It's not particularly strong security, but it's enough to mitigate the reach of many simple attacks, like those we saw in gemserv when dereferencing relative paths.
Here’s a simple way to write JSON from call-tables. It’s very unoptimal for now since it uses an intermediate representation instead of writing directly...
* Gemini (Primer) links can be opened using Gemini software. It's like the World Wide Web but a lot lighter.