Sponsored By:

• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.
• Kolide: Kolide can help you nail third-party audits and internal compliance goals with endpoint security for your entire fleet.

Support Linux Action News

Links:

• Microsoft Continues Improving Its Internal Linux Distro With Another Update — Microsoft has kept up with issuing one or more CBL-Mariner updates per month. This summer they rolled out CBL-Mariner 2.0 with many changes over its former 1.0 state, which continues to be maintained too. CBL-Mariner relies upon RPM SPEC files and other assets from Fedora, Photon OS, Openmamba, and Linux From Scratch. This week marked the release of CBL-Mariner 2.0 July 2022 Update 2.
• CBL-Mariner GitHub
• GitHub Moves to Guard Open Source Against Supply Chain Attacks — The popular Microsoft-owned code repository plans to roll out code signing, which will help beef up the security of open source projects.
• GitHub courts controversy by suspending Tornado Cash — GitHub over the past week has tested the trust of its users by enacting policies that call into question its commitment to free speech and privacy.
• ‘It Doesn’t Change Anything’ Says Tornado Cash After Code Disappears From GitHub
• Projects impacted by Tornando cash ban — TIL the creator address of the Eth2.0 Deposit contract was funded with Tornado cash, created the contract and donated the rest to Wikileaks
• Samuel JJ Gosling on Twitter — “@TornadoCash For those looking to host the frontend locally, I’ve uploaded the source code to @IPFS as I suspected this happening. Disclaimer: I’m a contributor to tornado but you should still verify the source code.
• Lucas Garron on Twitter
• Privacy Statement Updates September 2022 by olholder
• IPFS Supported In FFmpeg 5.1, IPFS Devs Envision Support In More Open-Source Projects — July's release of FFmpeg 5.1 introduced native IPFS support for this distributed peer-to-peer protocol.
• IPFS.io
• Ubuntu 22.04.1 LTS Delayed Due To An OEM Install Issue Leading To Broken Snaps — Ubuntu 22.04.1 LTS had been due for release today but has now been pushed back by one week after discovering an installer issue that led to Snaps like the default Mozilla Firefox browser failing to launch once installed.
• Linux 5.20 Likely To Be Called Linux 6.0 — With Linus Torvalds' modern versioning after 19~20 point releases has been when he bumps to the next major version number... Linux 4.0 succeeded Linux 3.19 while Linux 5.0 came after Linux 4.20.
• An io_uring-based user-space block driver [LWN.net] — The ublk driver starts by creating a special device called /dev/ublk-control. The user-space server (or servers, there can be more than one) starts by opening that device and setting up an io_uring ring to communicate with it.
• Linus' kernel source tree

Sponsored By:

• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.
• Ting: Save $25 off your first device, or $25 in service credit if you bring one!

Support Linux Action News

Links:

• Linux Foundation serves up free code-signing service — The Linux Foundation, with the support of Google, Red Hat, and Purdue University, is launching a service called sigstore to help developers sign the code they release.
• Linux Foundation announces new open-source software signing service
• Introducing sigstore — Installing most open source software today is equivalent to picking up a random thumb-drive off the sidewalk and plugging it into your machine.
• rekor: Signature Transparency Log — Rekor's goals are to provide an immutable tamper resistant ledger of metadata generated within a software projects supply chain.
• Fulcio: SigStore WebPKI — fulcio is a free Root-CA for code signing certs - issuing certificates based on an OIDC email address.
• cosign: Container Signing — Container Signing, Verification and Storage in an OCI registry.
• Diversity, Flexibility, and Linux: Prioritizing Generous Transfer
• German software company SUSE targets pre-summer IPO — SUSE is targeting a pre-summer initial public offering in a deal that may value the private equity-backed company with German roots at 7-8 billion euros ($8.3-9.5 billion), people close to the matter said.
• SUSE prepares for multi-billion Euro IPO
• VirtIO Sound Driver Coming — The virtual sound driver for VirtIO has been queued up into the sound-next code ahead of the Linux 5.13 merge window this spring.
• GNOME 40 Introducing Virtual Monitors — This headless native back-end that was merged today into GNOME 40's Mutter allows for running the native back-end atop a render node in a headless configuration without a physical display attached.
• GRUB 2.06 Release Candidate Available For Testing — Among the changes coming with GRUB 2.06 are expanded Btrfs RAID support, LUKS2 encrypted disk support, the BootHole patches and other security work,
• Progress Report Asahi Linux — To adapt the Apple world into a devicetree world, we are developing m1n1.
• Current status of the Corellium team's effort — Wifi now works on Linux on the M1.

Plus, why "Works with Chromebook" might be great for Linux, and using your GPU to fight the Coronavirus.

Support Linux Action News

Links:

• npm is joining GitHub — I’m excited to announce that GitHub has signed an agreement to acquire npm.
• The npm Blog — Next Phase Montage
• Microsoft's GitHub absorbs NPM into its code-hosting empire
• GitHub for mobile is now available
• LMDE 4 “Debbie” released! — LMDE is a Linux Mint project which stands for “Linux Mint Debian Edition”.
• Debian Project Leader Elections 2020 — Jonathan Carter Sruthi Chandran Brian Gupta
• Platform for Jonathan Carter
• Platform for Sruthi Chandran
• Works With Chromebook — You’ll begin to see the Works With Chromebook badge on certified accessories in the U.S., Canada and Japan.
• Chromebooks Accessories & Chargers
• Chrome OS to get native app for printing and scanning
• Upcoming Chrome and Chrome OS releases — Due to adjusted work schedules at this time, we are pausing upcoming Chrome and Chrome OS releases.
• PAPPL Is A New Printer Application Framework Made By The Founder Of CUPS — Michael Sweet, the lead developer of CUPS who had been at Apple for more than a decade since they acquired it, is now developing PAPPL as a printer application framework in addition to his work on the new LPrint project.
• Crowdsourced supercomputing project sets sights on coronavirus — Folding@home targets COVID-19, number of volunteer ‘folders’ skyrockets
• Thousands of These Computers Were Mining Cryptocurrency. Now They're Working on Coronavirus Research
• Gamers... assemble. It's time to join forces with @NVIDIAGeForce and @OfficialPCMR
• NVIDIA GeForce on Twitter: PC Gamers, let’s put those GPUs to work.
• Firefox 74.0 Released — Firefox now provides better privacy for your web voice and video calls through support for mDNS ICE by cloaking your computer’s IP address with a random ID in certain WebRTC scenarios.

Plus a new report about open source security, and more.

Support Linux Action News

Links:

• Microsoft: Linux Defender antivirus now in public preview — We're aiming to protect the modern workplace environment across everything that it is, being Microsoft or non-Microsoft.
• Microsoft Threat Protection stops attack sprawl and auto-heals enterprise
• Microsoft's Word, Excel and PowerPoint now live under one App
• Microsoft Works - Wikipedia
• Firefox releases an Android app for its VPN service — The Firefox Private Network VPN is powered by Mullvad VPN. Mullvad VPN claims that it won’t log and monitor user data, unlike many other VPN services.
• The Private Internet Access Android app is being open sourced
• IVPN applications are now open source
• Tom Scott video about VPNs
• Android 11 Developer Preview — All the changes we found from Android 10 so far.
• npm struggling to fund FOSS devs — Funding free software is 'still a very unsolved problem' says co-founder
• The Linux Foundation and Harvard’s Lab for Innovation Science Release Census for Open Source Software Security — New analysis identifies most widely used software and uncovers critical questions for the future of securing one of the world’s greatest shared resources
• The Linux Foundation identifies most important open-source software components and their problems — In its latest study, the Linux Foundation's Core Infrastructure Initiative discovered just how prevalent open-source components are in all software and their shared problems and vulnerabilities.
• Most-used libraries revealed
• The Linux Foundation and Harvard’s Lab for Innovation Science release census for open-source software security — Census II (run by Harvard) wanted to look at language-level packages. Their report discusses some of the challenges. One challenge of many is that the JavaScript environment strongly encourages tiny modules, with around 1/2 of all JavaScript packages having at most one function. As a result, when you start counting dependencies, there are *far* more dependencies in JavaScript (because each module does so little), and so JavaScript tends to dominate.