Sponsored By:

• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.
• Kolide: Kolide can help you nail third-party audits and internal compliance goals with endpoint security for your entire fleet.

Support Linux Action News

Links:

• HDR hackfest wrap-up — People from various organizations were on-site: Red Hat, KDE, System76, AMD, Igalia, Collabora, Canonical, etc. Some more people from NVIDIA, Intel and Google joined us remotely (some of them waking up at 2 AM due to their timezone!).
• Fakespot is acquired by Mozilla — I have exciting news to share, Fakespot has been acquired by Mozilla! We are joining a company that develops one of the most popular browsers in the world in Firefox with a lineage that dates back to the origins of the internet.
• Apple removes Fakespot from App Store after Amazon complains
• More Rust Code Readied For Linux 6.4 — New Rust code for Linux 6.4 includes the introduction of the pin-init API, which is for dealing with safe pinned initialization and allows reducing the amount of "unsafe" Rust code within the kernel.
• Asahi Lina on Twitter: My Rust contributions for Linux 6.4 are finally merged upstream! 🦀🐧 — The next big challenge is going to be the DRM subsystem abstractions!
• India blocks 14 mobile apps used by terrorists in Pakistan to send information in J-K — As inputs received that these applications are being used to further terror propaganda and incite youths in Jammu and Kashmir, the Central government blocked them under Section 69A of the Information Technology Act, 2000.
• India removes ban on VLC media player after cybersecurity concerns addressed
• Text of the RESTRICT Act — To authorize the Secretary of Commerce to review and prohibit certain transactions between persons in the United States and foreign adversaries, and for other purposes...
• Tell Congress: Don’t Outlaw Encrypted Applications

Special Guest: Brent Gervais.

Sponsored By:

• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.
• Kolide: Kolide can help you nail third-party audits and internal compliance goals with endpoint security for your entire fleet.

Support Linux Action News

Links:

• curl 8.0.0 is Here — This a major version number bump but without any ground-breaking changes or fireworks. We decided it was about time to reset the minor number down to more a manageable level and doing it exactly on curl’s 25th birthday made it extra fun. There is no API nor ABI break in this version.
• Twenty-five Tears of curl — Taking curl this far and being able to work full time on my hobby project is a dream come real. curl is a huge part of my life.
• curl 8.0.0 with Daniel Stenberg [YouTube]
• curl 8.0.1: because I jinxed it
• Amazon Linux 2023 — When looking for a base to serve as a starting point for Amazon Linux 2023, Fedora was the best choice. We found that Fedora’s core tenets (Freedom, Friends, Features, First) resonate well with our vision for Amazon Linux.
• Paving the Road to Vulkan on Asahi Linux — Today we’re releasing a big update to our GPU drivers for Asahi Linux, so I wanted to talk to you about what we’ve been working on since then, and what’s next!
• Asahi Linux Continues Making Progress On Apple Silicon Graphics, Promising OpenGL Speed
• Canonical joins the confidential computing consortium — Confidential computing is here to give you back control over the security guarantees of your workloads. As the consortium explains, confidential computing aims to “protect data in use by performing computation in a hardware-based Trusted Execution Environment.
• Introduction to Confidential Computing [YouTube]
• Hub 4 pioneers ethical AI integration for a more productive and collaborative future — Today, we are excited to announce a major step forward with Hub 4 – the very first on-premises collaboration platform to integrate intelligent features across its applications.
• Develop for Nextcloud — Write new applications, extend Nextcloud or integrate other software.
• Nextcloud Ethical AI Rating
• Berlin Meet Up — Friday, March 24, 2023

Sponsored By:

• Kolide: Kolide can help you nail third-party audits and internal compliance goals with endpoint security for your entire fleet.
• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.

Support Linux Action News

Links:

• New subsystem for compute accelerator devices — This is the fourth (and hopefully last) version of the patch set to add the new subsystem for compute accelerators.
• Compute Accelerator Subsystem Hopes To Be Ready For Linux 6.2
• Peter's Talk at Linux Plumbers Conference — All types of wireless in Linux are terrible and why the vendors should feel bad - Peter Robinson
• Intel’s IWD 2.0 Released For Modern Linux Wireless Daemon — Released this week was IWD 2.0 as the latest milestone for this open-source wireless daemon.
• Phoronix Premium Black Friday Deal — For this year's deal, you can go premium for just $30 per year or $150 for a lifetime subscription.
• Asahi Linux Updates — This month’s update is packed with new hardware support, new features, and fixes for longstanding pain points, as well as a new bleeding-edge kernel branch with long-awaited support for suspend and the display controller!
• Feature Support · AsahiLinux/docs Wiki

Sponsored By:

• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.
• Kolide: Kolide can help you nail third-party audits and internal compliance goals with endpoint security for your entire fleet.

Support Linux Action News

Links:

• IBM Takes Over Red Hat Storage to IBM Offerings — IBM announced today it will add Red Hat storage product roadmaps and Red Hat associate teams to the IBM Storage business unit, bringing consistent application and data storage across on-premises infrastructure and cloud.
• Why Whitehurst is stepping away from IBM
• IBM Does A “Quasi-Acquisition” Of Red Hat Storage — Red Hat OpenShift Data Foundation is also being absorbed into IBM Spectrum Fusion. IBM is assuming the Premier Sponsorship role of the Ceph Foundation from Red Hat.
• Announcing Nextcloud Hub 3 — Our design always followed three principles. Focus on content, ease of use, and great accessibility. For this refresh, we added a fourth: make it your own.
• Introducing NVK — NVK is a new open-source Vulkan driver for NVIDIA hardware in Mesa.
• Debian’s firmware vote results — The winning option allows the installer image to include firmware necessary to use the system.
• Intel Laptop Users Should Avoid Linux 5.19.12 — After looking at some logs we do end up with potentially bogus panel power sequencing delays, which may harm the LCD panel.
• Intel Laptop Users Should Avoid Linux 5.19.12 To Avoid Potentially Damaging The Display - Phoronix
• Linux 6.0 Released With Many Intel & AMD Driver Additions — Linus Torvalds just promoted Linux 6.0 to stable on-schedule and thereby now ushering in the Linux 6.1 merge window to officially get underway tomorrow.
• Some 6.0 development statistics — A total of 2,034 developers contributed to the 6.0 release; of those, 236 made their first contribution during this cycle. The total number of developers is just short of the record (2,086) set for 5.19, but the number of first-time contributors is the lowest seen since the 5.6 release (216) in 2020.
• Linux 6.0 Supporting New Intel/AMD Hardware
• Btrfs Brings Some Great Performance Improvements With Linux 6.1
• The Initial Rust Infrastructure Has Been Merged Into Linux 6.1 — As a follow-up to the Rust infrastructure pull request for Linux 6.1, Linus Torvalds pulled the initial Rust code into the mainline Linux kernel this evening.

Sponsored By:

• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.
• Kolide: Kolide can help you nail third-party audits and internal compliance goals with endpoint security for your entire fleet.

Support Linux Action News

Links:

• Shikitega - AT&T Alien Labs — New stealthy malware targeting Linux
• LINUX Unplugged 474: Linux’s Malware Inevitability
• New Linux malware combines unusual stealth with a full suite of capabilities — "Threat actors continue to search for ways to deliver malware in new ways to stay under the radar and avoid detection," AT&T Alien Labs researcher Ofer Caspi wrote.
• New Linux malware evades detection using multi-stage deployment
• Shape-shifting cryptominer savaging Linux endpoints and IoT — The malware was dubbed "Shikitega" for its extensive use of the popular Shikata Ga Nai polymorphic encoder, which allows the malware to "mutate" its code to avoid detection. Shikitega alters its code each time it runs through one of several decoding loops that AT&T said each deliver multiple attacks, beginning with an ELF file that's just 370 bytes.
• Next-Gen Linux Malware Takes Over Devices With Unique Tool Set
• OpenWrt 22.03 Released With Updated Firewall, Support For 180+ New Devices - Phoronix
• [OpenWrt Wiki] OpenWrt 22.03.0 - First Stable Release - 6 September 2022
• Linux Foundation Announces Open Wallet Foundation — The Linux Foundation, a global nonprofit organization enabling innovation through open source, today announced the intention to form the OpenWallet Foundation (OWF), a new collaborative effort to develop open source software to support interoperability for a wide range of wallet use cases.
• Linux Foundation announces the OpenWallet Foundation to develop interoperable digital wallets
• Welcoming PyTorch to the Linux Foundation
• Facebook Transfers PyTorch AI Framework to Linux Foundation for Governance — Today we are more than thrilled to welcome PyTorch to the Linux Foundation. Honestly, it’s hard to capture how big a deal this is for us in a single post but I’ll try.
• PyTorch strengthens its governance by joining the Linux Foundation
• Google Pixelbook is no more, proving the world wasn’t ready for premium Chromebooks | TechRadar
• Linux Plumbers Conference - YouTube
• LPC 2022: Rust Linux Drivers Capable Of Achieving Performance Comparable To C Code - Phoronix
• IO_uring Continues To Prove Very Exciting: Promising io_uring_spawn Announced — It also continues to be relentlessly optimized by Jens Axboe and others for maximum performance potential. The latest innovation around IO_uring that was announced this week at Linux Plumbers Conference 2022 in Dublin is io_uring_spawn.
• An io_uring-based user-space block driver
• A pair of Rust kernel modules
• Compiling Rust with GCC: an update
• Mesa’s Rust OpenCL Implementation Merged
• Adding rusticl (!15439) · Merge requests · Mesa / mesa · GitLab
• LPC 2022 - Kernel Summit - Lansdowne - YouTube

Sponsored By:

• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.
• Ting: Save $25 off your first device, or $25 in service credit if you bring one!

Support Linux Action News

Links:

• Linux has been bitten by its most high-severity vulnerability in years — Dirty Pipe has the potential to smudge people using Linux and Linux derivitives.
• Catalin Cimpanu on Twitter — “DirtyPipe (CVE-2022-0847) is a vulnerability in the Linux kernel since 5.8 which allows overwriting data in arbitrary read-only files. This leads to privilege escalation. It is similar to CVE-2016-5195 “Dirty Cow” but is easier to exploit.
• Ron Amadeo on Twitter — “By my count, Dirty Pipe affects only brand-new Android 12 devices like the Pixel 6 and S22. Linux 5.8 and above has only been an Android option for five months."
• Canonical Patches “Dirty Pipe” Vulnerability in Ubuntu 21.10 and 20.04 LTS
• BLASTY on Twitter: “Hacked up a quick Dirty Pipe PoC that spawns a shell by hijacking (and restoring) the contents of a setuid binary.”
• The Dirty Pipe Vulnerability — The Dirty Pipe Vulnerability documentation
• AMD Posts Some New Linux Job Openings From Client CPU To Server — AMD would need a lot more Linux engineers to achieve the same level of timely Linux support and low-level kernel enhancements that Intel has been focused on for years, especially when it comes to Intel's open-source work beyond just the actual hardware device enablement.
• Introducing Native Matrix VoIP with Element Call! — What’s more, Element Call is built entirely on Matrix: it doesn’t need any additional servers to get going. You can run it against your existing Matrix homeserver to provide complete self-sovereignty… while still being able to talk to anyone else anywhere on the wider Matrix network! We will also be able to automatically use Matrix’s end-to-end encryption to secure all Element Call conferences
• call.element.io
• https://github.com/vector-im/element-call/issues
• Extending Matrix’s E2EE calls to multiparty
• Danielle Foré on Twitter — Okay it’s been a full month and this situation still isn’t resolved, and it sucks for you to just be completely in the dark and it’s pretty obvious something is up and people are asking what’s going on, so here is my side of the story 🧵
• Danielle gives an update on elementary Reddit Thread
• Jupiter Broadcasting East Coast Meetup

Plus new Matrix goodies, why AWS is investing in Blender, and more.

Sponsored By:

• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.
• Ting: Save $25 off your first device, or $25 in service credit if you bring one!

Support Linux Action News

Links:

• Google kills Android Things, its IoT OS, in January — Google announced it had basically given up on the project as a general-purpose IoT operating system in 2019, but now there's an official shutdown date thanks to a new FAQ page detailing the demise of the OS.
• Android Things Shutdown FAQ
• Ron Amadeo on Twitter — Oof, Google promised three years of updates when Android Things launched in May 2018, the actual support it delivered? One year, three months.
• Google, Qualcomm partner to bring 4 OS Android updates to new chipsets — The new plan is three years of major OS updates and four years of security updates.
• Qualcomm promises three years of Android updates for its entire SoC lineup
• Google acquires CloudReady OS to make PCs Chromebooks — Neverware lets you turn old PCs and Macs into Chromebook-esque devices through its CloudReady OS. While primarily aimed at schools and enterprises, a free “Home” edition for everyone is available. Google has now acquired Neverware and CloudReady with plans to integrate it with Chrome OS.
• Native Steam (Borealis) on Chrome OS likely arriving mid-2021
• GTK 4.0 Officially Released After More Than 4 Years of Development — The GTK development officially released today the next generation of the GTK toolkit, GTK 4.0, after being in development for more than four years.
• GTK 4.0 Toolkit Officially Released
• GTK 4.0 – GTK Development Blog
• Matrix.to: Reloaded — A challenge we regularly face is all the factors which make Matrix flexible and powerful as an open, secure decentralised protocol also increase the difficulty of getting started.
• Matrix.to — Create shareable links to Matrix rooms, users or messages without being tied to any app
• Introducing Cerulean — Alongside all the normal business-as-usual Matrix stuff, we’ve found some time to do a mad science experiment over the last few weeks - to test the question: "Is it possible to build a serious Twitter-style decentralised microblogging app using Matrix?"
• Google AMP gets a shock to its system as advisor quits, lawsuit claims foul play — Google’s Accelerated Mobile Pages technology, known as AMP among web publishers, took a beating this week as an antitrust lawsuit filed by the Attorney General of Texas charged that the ad biz used AMP to hinder competition.
• I have resigned from the Google AMP Advisory Committee – Terence Eden’s Blog — I remain convinced that AMP is poorly implemented, hostile to the interests of both users and publishers, and a proprietary & unnecessary incursion into the open web.
• AWS joins the Blender Development Fund — AWS committed to a period of three years, specifically to support character animation tools development.

Plus Nvidia's Jetson Nano release and the freaky future of low-level AI, and our thoughts on Coinbase's recent news.

Sponsored By:

• System76: System76 is better than ever, check out all the great stuff they're doing today and tell them Linux Action News sent you.
• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.

Support Linux Action News

Links:

• Nextcloud 20 Released — Nextcloud Hub 20 debuts Dashboard, unifies search and notifications, integrates with other technologies
• Nextcloud bridging chat services in Talk — This allows users to connect a Talk conversion to one or more external services, like IRC, Slack, MS Teams or more. The administrator has to have enabled this feature and users can then simply configure it from the right-hand sidebar in Talk.
• IBM to split into two companies by end of 2021 — As-yet unnamed “NewCo” will handle IBM’s “managed infrastructure services.”
• IBM Jettisons Legacy Services To Focus On Hybrid Cloud
• As IBM spins out legacy infrastructure management biz, CEO goes all in on the cloud
• IBM’s “Cloud” Business (or Lack Thereof)
• Nvidia unveils $59 Nvidia Jetson Nano 2GB mini — The Jetson Nano 2GB Developer Kit, announced this week, is a single-board computer – like the Raspberry Pi
• Firefox may soon display Sponsored Top Sites on the New Tab Page — A recently added bug to Mozilla's bug tracking site Bugzilla indicates that Firefox may soon display sponsored top sites on the New Tab page. The bug requests that a preference is added to Firefox to disable sponsored top sites.
• 1668473 - Add pref UI for disabling sponsored top sites
• A follow up to Coinbase being a mission focused company
• Sixty Coinbase employees take buyout offer over “no politics” rule

Plus Google Cardboard goes open source, and a neat machine-learning tool to pull songs apart.

Special Guest: Wes Payne.

Support Linux Action News

Links:

• Google gives most Chromebooks an extra year of software support — Seven Chromebooks from Lenovo recently had their support lifespan extended, and now Google has updated the EOL date for 135 more models from several manufacturers. Most models received another year of support, others only got another six months, and some now have two more years.
• What’s new in Chrome OS: Virtual Desks, simpler printing and more — Think of Virtual Desks as separate workspaces within your Chromebook. Use this feature to create helpful boundaries between projects or activities. If you’re working on multiple projects, you can dedicate a desk to each one. Open Overview and tap New Desk in the top right-hand corner of your screen to try out Virtual Desks.
• Google Enlists Outside Help to Clean Up Android's Malware Mess — Today Google is announcing a partnership with three antivirus firms—ESET, Lookout, and Zimperium—to create an App Defense Alliance.
• Open sourcing Google Cardboard — Today, we’re releasing the Cardboard open source project to let the developer community continue to build Cardboard experiences and add support to their apps for an ever increasing diversity of smartphone screen resolutions and configurations.
• Access ESM, now free to the community, via the updated Ubuntu Advantage client — Canonical is happy to announce that all community users are entitled to a free Ubuntu Advantage for Infrastructure account for access to Extended Security Maintenance (ESM) and Kernel Livepatch* for Ubuntu 14.04 LTS (Trusty Tahr) for up to three machines, and up to 50 machines for all official Ubuntu Members.
• Releasing Spleeter: Deezer Research source separation engine — We are releasing Spleeter to help the research community in Music Information Retrieval (MIR) leverage the power of a state-of-the-art source separation algorithm. It comes in the form of a Python Library based on Tensorflow, with pretrained models for 2, 4 and 5 stems separation.
• Microsoft Will Release Their Edge Web Browser For Linux — Microsoft announced at their Ignite conference in Seattle that their Edge web-browser will see a Linux release

Plus the impact of Google suspending business with Huawei, the recent ChromeOS feature silently dropped, and more.

Support Linux Action News

Links:

• ZombieLoad Attack — After Meltdown, Spectre, and Foreshadow, we discovered more critical vulnerabilities in modern processors. The ZombieLoad attack allows stealing sensitive data and keys while the computer accesses them.
• Understanding the MDS vulnerability: What it is, why it works and how to mitigate it
• Understanding Microarchitectural Data Sampling (aka MDS, ZombieLoad, RIDL & Fallout) from Red Hat - YouTube
• AMD Immune to Crippling MDS Vulnerabilities
• AMP to start hiding google from the URL — Signed-Exchange is something which can help you show your own domain in AMP page URLs, with all the AMP-Cache capabilities intact.
• A report from the AMP Advisory Committee Meeting
• Dual booting Windows on Chromebooks dead — Project Campfire turned up in the Chromium world this past August.
• Microsoft open-sources a crucial algorithm behind its Bing Search services — Microsoft today announced that it has open-sourced a key piece of what makes its Bing search services able to quickly return search results to its users
• Microsoft AI lab experiments
• South Korean government planning Linux migration as Windows 7 support ends — The Herald quotes the Interior Ministry as indicating that the transition to Linux, and the purchase of new PCs, would cost about 780 billion won ($655 million), but also anticipates long-term cost reductions with the adoption of Linux. The report doesn't mention a specific distro, instead "hopes to avoid building reliance on a single operating system."
• Windows dual booting no longer looking likely on Pixelbooks
• Google suspends business with Huawei — “Huawei will only be able to use the public version of Android and will not be able to get access to proprietary apps and services from Google,” the source said.
• Command Line Threat Hunting Video