Plus the Linux tech Greg KH is most excited about, and more.

Support Linux Action News

Links:

• Ubuntu fixes bugs that standard users could use to become root — A handful of commands was all it took for untrusted users to become all-powerful.
• Now-patched Ubuntu desktop vulnerability allows privilege escalation
• How to get root on Ubuntu 20.04 by pretending nobody’s /home
• Meet Proxmox Backup Server, a Debian-Based Open Source Enterprise Backup Solution — Proxmox launched today Proxmox Backup Server as a new edition of its Debian-based Linux distribution engineered to act as an enterprise solution for backing up and restoring physical hosts, virtual machines and containers.
• Proxmox Roadmap
• Proxmox Backup Server
• Proxmox Backup Git Repo
• PayPal's crypto trading goes live in the US — Customers will be able to trade up to $20,000 a week, rather than the originally announced $10,000.
• Systemd catches up with bind events — Perhaps the real lesson here is that the community would be better served by closer relations between the kernel project and projects managing low-level utilities like systemd.
• eBPF - The Future of Networking & Security — Cilium is an open source project that has been designed on top of eBPF to address the networking, security, and visibility requirements of container workloads. It provides a high-level abstraction on top of eBPF. Cilium is to eBPF what Kubernetes and container runtimes are to Linux kernel namespaces, cgroups, and seccomp
• Linux App Summit 2020

Plus AMP's new governance model kicks in, and the Necuno Mobile Plasma tease.

Support Linux Action News

Links:

• Clear Linux now easier to try and to install — The addition of the desktop-live image itself is also certainly a welcome addition for those planning a desktop install rather than first having to install the basic Clear Linux without any desktop environment, especially if you first want to verify your system's hardware support/compatibility before proceeding with the installation. From their downloads area the new images are the "live-desktop-beta" images.
• Fedora 31 Will Likely Be Cancelled Or Significantly Delayed — Following the release of Fedora 30 in May, there might not be another major Fedora Linux release for about one year's time.
• Fedora may move to annual releases — Not formally drafted besides a mailing list thread, there is a new proposal about moving Fedora to an annual platform release following Fedora 30. This was suggested by Red Hat's RHEL development coordinator, Brendan Conoboy.
• AMP Project’s new governance model now in effect — Two key features of AMP’s new governance model are the Technical Steering Committee (TSC) and the Advisory Committee (AC).  We have endeavored to ensure that these committees consist of people who bring a wide variety of perspectives, with representatives from different AMP constituencies.  
• Necuno Mobile: An open phone with Plasma Mobile — With a focus on openness, security and privacy, the Necuno Mobile is built around an ARM® Cortex®-A9 NXP i.MX6 Quad and a Vivante GPU. According to Necuno, none of the closed firmware has access to the memory.
• Linux Foundation and RISC-V Foundation Announce Joint Collaboration — This partnership with the Linux Foundation will enable the RISC-V Foundation to grow the RISC-V ecosystem with improved support for the development of new applications and architectures across all computing platforms.
• Firecracker mini VMs tipped to the next big thing — Firecracker can launch user space or application code in less than 125ms and microVMs at a rate of 150 per second per host. It churns out fairly compact microVMs too, with each requiring less than 5MiB of memory overhead, so thousands can co-exist on a single server.

Plus we try out the new Devuan release, and more.

Support Linux Action News

Links:

• Microsoft to acquire GitHub for $7.5 billion
• ReactOS Is Finally Able To Build Itself
• TrueOS to Focus on Core Operating System
• Project Trident
• Stepping down as maintainer
• Find your way to Plasma Mobile
• Devuan 2.0 released

Plus a new report claims every Bitcoin transaction uses as much energy as your house in a week, and two legal matters that may have long-term impacts on the Linux community.

Support Linux Action News

Links:

• Plasma Mobile Roadmap — Our development strategy is to build a basic system and platform around our core values first and then extend this.
• Librem 5 progressing with Plasma Mobile — In general, Plasma Mobile already provides a usable (albeit alpha-quality) mobile interface today. The Qt Quick/QML based Kirigami component library and interface guidelines also provide a nice framework for mobile application developers
• Firefox to remove canvas fingerprinting — The Mozilla Foundation is boosting privacy in an upcoming version of its Firefox browser by removing the snooping capability called canvas fingerprinting, a method of tracking users across multiple websites.
• Tor flaw: TorMoil — TorMoil threatens Mac and Linux versions of Tor browser; Windows and Tails not affected.
• Canonical joins GNOME Foundation Advisory Board — The GNOME Foundation is pleased to announce that Canonical, creator of the Ubuntu operating system, has joined the GNOME Foundation advisory board.
• SCO vs. IBM Lives on — As Groklaw records, this case kicked off in 2003. The dispute centres on “Project Monterey” a joint effort by SCO and IBM to build a unified UNIX capable of running on several different microprocessor architectures. SCO – at that time known as the Santa Cruz Operation – sold versions of UNIX and tossed some of its source code into the Project Monterey mix, as did IBM. The parties signed a “joint development agreement” (JDA) to formalise the deal.
• SFLC files a suit against Conservancy — This trademark action is in its early stages. SFLC filed a petition on September 22. Yesterday, we provided an answer that lists defenses that we plan to use.

Plus why we're not too worried about BlueBourne, the fight for public money to fund public code, and a new power tool for Firefox users.

Sponsored By:

• Ting: Save $25 off your first device, or $25 in service credit if you bring one!

Support Linux Action News

Links:

• GNOME 3.26 — The GNOME Project is excited to announce the release of version 3.26, the latest version of GNOME 3. The new version is the result of six months’ hard work by the GNOME community, and comes packed with improvements and new features.
• GNOME 3.26 Release Notes — GNOME 3.26 no longer shows status icons in the bottom-left of the screen. This prevents the status icon tray from getting in the way and is expected to provide a better overall experience.
• Purism and KDE to Work Together — Having full access to Purism's hardware platform is a dream for the KDE community.
• Relevant Email 1 — One of the open questions for the phone is still which UX we will use, and Plasma Mobile would obviously be a perfect fit for this kind of project, since KDE and Purism share the same values, the UI is already done in large parts, and nothing would have to be developed from scratch (especially the Kirigami controls are great!).
• Relevant Email 2 — To make clear our standpoint - both GNOME and KDE *will* be first class citizen on Librem5. So there is no favorite between two, but both are equal in this challenge.
• BlueBorne — The attack does not require the targeted device to be paired to the attacker’s device, or even to be set on discoverable mode.
• Public Money, Public Code — We want legislation requiring that publicly financed software developed for the public sector be made publicly available under a Free and Open Source Software licence. If it is public money, it should be public code as well.
• Multi-Account Containers extension for Firefox — The Firefox Multi-Account Containers extension lets you carve out a separate box for each of your online lives