Sponsored By:

• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.
• Kolide: Kolide can help you nail third-party audits and internal compliance goals with endpoint security for your entire fleet.

Support Linux Action News

Links:

• Shikitega - AT&T Alien Labs — New stealthy malware targeting Linux
• LINUX Unplugged 474: Linux’s Malware Inevitability
• New Linux malware combines unusual stealth with a full suite of capabilities — "Threat actors continue to search for ways to deliver malware in new ways to stay under the radar and avoid detection," AT&T Alien Labs researcher Ofer Caspi wrote.
• New Linux malware evades detection using multi-stage deployment
• Shape-shifting cryptominer savaging Linux endpoints and IoT — The malware was dubbed "Shikitega" for its extensive use of the popular Shikata Ga Nai polymorphic encoder, which allows the malware to "mutate" its code to avoid detection. Shikitega alters its code each time it runs through one of several decoding loops that AT&T said each deliver multiple attacks, beginning with an ELF file that's just 370 bytes.
• Next-Gen Linux Malware Takes Over Devices With Unique Tool Set
• OpenWrt 22.03 Released With Updated Firewall, Support For 180+ New Devices - Phoronix
• [OpenWrt Wiki] OpenWrt 22.03.0 - First Stable Release - 6 September 2022
• Linux Foundation Announces Open Wallet Foundation — The Linux Foundation, a global nonprofit organization enabling innovation through open source, today announced the intention to form the OpenWallet Foundation (OWF), a new collaborative effort to develop open source software to support interoperability for a wide range of wallet use cases.
• Linux Foundation announces the OpenWallet Foundation to develop interoperable digital wallets
• Welcoming PyTorch to the Linux Foundation
• Facebook Transfers PyTorch AI Framework to Linux Foundation for Governance — Today we are more than thrilled to welcome PyTorch to the Linux Foundation. Honestly, it’s hard to capture how big a deal this is for us in a single post but I’ll try.
• PyTorch strengthens its governance by joining the Linux Foundation
• Google Pixelbook is no more, proving the world wasn’t ready for premium Chromebooks | TechRadar
• Linux Plumbers Conference - YouTube
• LPC 2022: Rust Linux Drivers Capable Of Achieving Performance Comparable To C Code - Phoronix
• IO_uring Continues To Prove Very Exciting: Promising io_uring_spawn Announced — It also continues to be relentlessly optimized by Jens Axboe and others for maximum performance potential. The latest innovation around IO_uring that was announced this week at Linux Plumbers Conference 2022 in Dublin is io_uring_spawn.
• An io_uring-based user-space block driver
• A pair of Rust kernel modules
• Compiling Rust with GCC: an update
• Mesa’s Rust OpenCL Implementation Merged
• Adding rusticl (!15439) · Merge requests · Mesa / mesa · GitLab
• LPC 2022 - Kernel Summit - Lansdowne - YouTube

Sponsored By:

• Kolide: Kolide can help you nail third-party audits and internal compliance goals with endpoint security for your entire fleet.
• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.

Support Linux Action News

Links:

• Massive GitHub Malware Attack? — It was revealed by Stephen Lacy in his tweet, he shared his findings of a large-scale campaign targeting random GitHub repositories with project clones containing credential stealing malware and remote shell execution on top of the original code.
• Stephen Lacy on Twitter — “I am uncovering what seems to be a massive widespread malware attack on @github. - Currently over 35k repositories are infected - So far found in projects including: crypto, golang, python, js, bash, docker, k8s - It is added to npm scripts, docker images and install docs”
• Checkmarx on Twitter — “A recent tweet uncovered a widespread malware attack on @github. This turned out to be a false alarm of sorts, as the infected repositories are simply forks and clones of the original ones - which were mostly deleted by Github by now. Stay safe!"
• No, Linus Torvalds is not Bitcoin’s legendary creator Satoshi Nakamoto
• Steam Deck Client Update and SteamOS 3.3 — We have just shipped SteamOS 3.3 and an updated Steam Client to the Stable channel. This update includes all the changes and improvements that have been undergoing testing in the Beta and Preview channels.
• SteamOS 3.3 Now Available With Many Improvements For The Steam Deck
• Steam For Linux In July Shows A 1.23% Marketshare — AMD CPUs Now More Common Than Intel On Linux
• DXVK 1.10.3 Released With Shared Fences
• Chris’ Steam Deck Review LINUX Unplugged 467
• Lenovo Expects 30+ Platforms With Linux Support This Year, Both AMD & Intel Systems — Lenovo's Mark Pearson provided an update on Linux for their laptops/PCs, including 30+ platforms for 2022 with Linux support.
• Lenovo Linux 2022 - DebConf 22
• Fedora Pi Support Gets Real — The work around Raspberry Pi 4 has been on going for a number of years, but we've never officially supported it due to lack of accelerated graphics and other key features. With Fedora 37, Raspberry Pi 4 is now officially supported, including accelerated graphics using the V3D GPU.
• Fedora 37 To Offer Official Support On Raspberry Pi 4 Devices
• Linux 5.19 Released
• Some 5.19 development statistics
• Linux Kernel 5.19 Released with Major Networking Tweaks
• Rust Code For The Linux Kernel Updated With More Features
• Asahi Linux Confirms M2 MBA on Twitter — Linus is using an M2 MacBook Air, running ARM64 Fedora. He does his own kernel builds, of course, with our Asahi kernel branch merged in, and he's been building and testing kernels on it.
• Asahi Alternative Distros docs

Sponsored By:

• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.

Support Linux Action News

Links:

• Akamai Warns Of “Panchan” Linux Botnet — The botnet introduces a unique (and possibly novel) approach to lateral movement by harvesting of SSH keys. Instead of just using brute force or dictionary attacks on randomized IP addresses like most botnets do, the malware also reads the id_rsa and known_hosts files to harvest existing credentials and use them to move laterally across the network.
• Canonical Continues Working On Ubuntu’s Firefox Snap Performance — On the Ubuntu blog is a new post by Canonical's Oliver Smith about their latest efforts to improve the Firefox Snap performance and other outstanding issues with this sandboxed version of the Mozilla web browser.
• Lars Knoll Announces His Successor For Qt Chief Maintainer — The voting period for the new Chief Maintainer has ended yesterday. This means Volker Hilsheimer will be our new Chief Maintainer. Congratulations!
• New Chief Maintainer for the Qt Project
• Talisman: Debut of X — I've spent the last couple weeks writing a window system for the VS100. I stole a fair amount of code from W, surrounded it with an asynchronous rather than a synchronous interface, and called it X. Overall performance appears to be about twice that of W.
• X Window System Turns 38 Years Old — It was on 19 June 1984 that Bob Scheifler announced the initial X window system release "X1" at MIT.
• X Windows System Design Principles, a lecture by James Gettys
• A Political History of X - Keith Packard (LCA 2020)
• Linus Torvalds: Rust For The Kernel Could Possibly Be Merged For Linux 5.20 — Torvalds commented that real soon they expect to have the Rust infrastructure merged within the kernel, possibly even for the next release -- meaning Linux 5.20.
• Open Source Summit North America 2022: Keynote: Linus Torvalds
• How are we improving Firefox Snap performance? Part 2

Plus Google Cardboard goes open source, and a neat machine-learning tool to pull songs apart.

Special Guest: Wes Payne.

Support Linux Action News

Links:

• Google gives most Chromebooks an extra year of software support — Seven Chromebooks from Lenovo recently had their support lifespan extended, and now Google has updated the EOL date for 135 more models from several manufacturers. Most models received another year of support, others only got another six months, and some now have two more years.
• What’s new in Chrome OS: Virtual Desks, simpler printing and more — Think of Virtual Desks as separate workspaces within your Chromebook. Use this feature to create helpful boundaries between projects or activities. If you’re working on multiple projects, you can dedicate a desk to each one. Open Overview and tap New Desk in the top right-hand corner of your screen to try out Virtual Desks.
• Google Enlists Outside Help to Clean Up Android's Malware Mess — Today Google is announcing a partnership with three antivirus firms—ESET, Lookout, and Zimperium—to create an App Defense Alliance.
• Open sourcing Google Cardboard — Today, we’re releasing the Cardboard open source project to let the developer community continue to build Cardboard experiences and add support to their apps for an ever increasing diversity of smartphone screen resolutions and configurations.
• Access ESM, now free to the community, via the updated Ubuntu Advantage client — Canonical is happy to announce that all community users are entitled to a free Ubuntu Advantage for Infrastructure account for access to Extended Security Maintenance (ESM) and Kernel Livepatch* for Ubuntu 14.04 LTS (Trusty Tahr) for up to three machines, and up to 50 machines for all official Ubuntu Members.
• Releasing Spleeter: Deezer Research source separation engine — We are releasing Spleeter to help the research community in Music Information Retrieval (MIR) leverage the power of a state-of-the-art source separation algorithm. It comes in the form of a Python Library based on Tensorflow, with pretrained models for 2, 4 and 5 stems separation.
• Microsoft Will Release Their Edge Web Browser For Linux — Microsoft announced at their Ignite conference in Seattle that their Edge web-browser will see a Linux release