This page permanently redirects to gemini://gemini.techrights.org/2022/08/26/networkmanager-1-40-0/.

● 08.26.22

Gemini version available ♊︎

● Links 26/08/2022: Lutris 0.5.11 and NetworkManager 1.40.0

Posted in News Roundup at 12:40 pm by Dr. Roy Schestowitz

GNU/Linux

Server

=> ↺ Charmed Kubernetes and Huawei Oceanstor Pacific storage integration verification report | Ubuntu

• Huawei OceanStor Pacific is an intelligent distributed storage series with scale-out capability designed to support the business needs of today and tomorrow. Its diverse and adaptable range of features provides efficient processing for diverse data, everlasting operations for services, and economical storage for mass data.

• The OceanStor Pacific series supports Storage Access Protocols like NFS, CIFS, POSIX, MPI-IO, HDFS, and Amazon S3. The Block storage allows for SCSI or iSCSI access modes and delivers HA solutions such as distributed active-active and cabinet-level redundancy. It is widely applicable to virtualization, cloud resource pools, and databases.

• OceanStor Pacific Storage provides a perfectly reliable, economical, scale persistent storage for PaaS or CaaS (Platform/Container as a Service). The industry scenario includes Channel access PaaS for Internet finance, development and testing PaaS, carrier cloud services for BOM domains and B2B cloud resource pools, smart governments, and Smart City PaaS.

• Canonical commercially distributes and supports a pure upstream version of Kubernetes. Ubuntu is the reference operating system for Kubernetes deployments, making it an easy way to build Kubernetes clusters. MicroK8s, a Kubernetes is delivered in the form of snap – the universal Linux app packaging format – which dramatically simplifies the installation and upgrades of components.

Audiocasts/Shows

=> ↺ We Should Know Better | Self-Hosted 78

• We learned some really hard lessons this week, and reflect. Then Chris finds the perfect temperature sensor, and Alex finds a beautiful media discovery app.

=> ↺ 394 – With music on our side to break the old hard drives – mintCast

• 1:25 The News 16:15 Security and Privacy 26:03 Bi-Weekly Wanderings 1:22:59 Housekeeping and Announcements

• First up in the news, The Kernel gets a bump, LibreOffice adds a point, Android 13 is out if you have a Pixel, and Gnome has a birthday,

• In security and privacy, Discord and your passwords are pythoned, and hard drives apparently have a taste in music

• Then in our Wanderings, Joe plays with his handheld, Bill is setting up a new server, Moss skips the assault and gets a couple batteries, and Norbert has had done some things.

Benchmarks

=> ↺ Linux could leave Windows 11 in the dust as Intel hybrid CPUs get further optimizations – Neowin

• Back at its Architecture Day 2021 event, when Intel shared the core design details of its Alder Lake CPU architecture, the firm stated that Windows 11 was optimized in a way to best take advantage of the Alder Lake’s Performance Hybrid architecture and the new Thread Director technology that helps Windows 11 task scheduling.

• Following this announcement, head to head testing back in November 2021, indeed showed Windows 11 outperforming Linux quite easily thanks to the special optimizations baked into Microsoft’s new OS. In fact, it was beating out Windows 10 too, even when using an older Lakefield CPU.

• [...]

• With this Linux can potentially leave Windows 11 in the dust depending on the kind of improvements the new optimization sees.

Applications

=> ↺ Cockpit Project: Cockpit 275

• Cockpit has always had the theoretical ability to run arbitrary programs to gain administrative access, by adding them to a package manifest. However, the UI would always use “sudo”. Now, if multiple programs are defined, the UI will prompt for which one to use.

• By default, Cockpit will still only use “sudo”, so unless you actually add more programs via a manifest, there will be no visible change in the UI.

=> ↺ FOSS Weekly #22.31: Tweaking Nemo, Tools to Understand Linux Commands and More

• I got an overwhelmingly positive response to the new newsletter format.

• A few FOSSers expressed concern about losing the personal touch in this new format. I assure you that it won’t happen.

Instructionals/Technical

=> ↺ How to Update Firmware in Your Linux Machine – Make Tech Easier

• Firmware is a type of software that provides the low level control for device specific hardware. Firmware is stored on the read only memory (ROM) of a device. It gives instructions to the hardware about how it should be operated. Firmware can’t be modified or deleted by the end-user just like other software. You need some specialized software to do so. In this article, we are going to learn, how to update firmware in your Linux machine.

=> ↺ How to install Signal Desktop client on Ubuntu 22.04 | Linux Mint 21

• Similar to WhatsApp and Telegram, Signal is a mobile messaging application that emphasizes security. So much so that Edward Snowden recommends it for everyday use.

• Like any modern mobile messaging app, you can expect stickers, video calls, individual, and group messaging and much more.

• Signal has good support for Linux, adding an excellent desktop client where you can use it for your daily communications on a computer.

• So let’s install it and use it.

=> ↺ How to Trap Errors in Bash Scripts on Linux

• By default, a Bash script on Linux will report an error but keep running. We show you how to handle errors yourself so that you can decide what needs to happen next.

=> ↺ How to install Memcached on Ubuntu 22.04 LTS Server

• Steps and commands to install and configure Memcached on Ubuntu 22.04 LTS Jammy JellyFish to cache data for PHP or Python-based applications.

• Memcached is a BSD-licensed published cache server used by many organizations and website owners to quickly retrieve data from memory. It has been used by many users to improve the overall speed and performance of their dynamic websites with database connectivity to improve performance by avoiding disk access by storing important data in memory or by minimizing the call of complex and frequently used database queries – especially SELECT statements.

• Data is provided with a unique key value and stored as strings in memory whereas the connection takes place to the Memcached server via the PROTOCOLS TCP and IP. The stored data can be either permanent or temporary. Well, in the case of temporary storage, the deletion of cached data will happen automatically after the configured interval of time.

=> ↺ How To Install Apache Tomcat on Linux Mint 21 – idroot

• In this tutorial, we will show you how to install Apache Tomcat on Linux Mint 21. For those of you who didn’t know, Apache Tomcat is an open-source Java servlet container. Tomcat is developed and maintained by a free group of developers under the Apache Software Foundation’s auspices and is licensed under the Apache License 2.0.

• This article assumes you have at least basic knowledge of Linux, know how to use the shell, and most importantly, you host your site on your own VPS. The installation is quite simple and assumes you are running in the root account, if not you may need to add ‘sudo‘ to the commands to get root privileges. I will show you the step-by-step installation of an Apache Tomcat on Linux Mint 21 (Vanessa).

=> ↺ How To Install Grafana on Fedora 36 – idroot

• In this tutorial, we will show you how to install Grafana on Fedora 36. For those of you who didn’t know, Grafana is open-source analytics and monitoring solution for every database. It provides charts, graphs, and alerts for the web when connected to supported data sources. You can either install the open source version or the enterprise version. Both options would be free at the point of installing the service, but if you feel like you would like the Enterprise service that Grafana offers, you would only upgrade seamlessly with the enterprise version.

• This article assumes you have at least basic knowledge of Linux, know how to use the shell, and most importantly, you host your site on your own VPS. The installation is quite simple and assumes you are running in the root account, if not you may need to add ‘sudo‘ to the commands to get root privileges. I will show you the step-by-step installation of the Grafana monitoring tool on a Fedora 36.

=> ↺ Bash Select Loop Explained With Examples – OSTechNix

• We have seen about bash for loop, while loop, and until loop in our previous articles with detailed examples. Bash offers one more type of loop called select loop, which will allow you to create menu-driven scripts.

• Menu-driven scripts are good alternatives to scripts that require users to pass arguments to perform an action. You can add more verbosity in your menus and users have to just select the option for the program to do its job.

=> ↺ Extend LVM and online resize filesystem

=> ↺ How to install Datadog Agent on Ubuntu 22.04 – NextGenTips

• In this tutorial, we are going to learn how to install Datadog Agent on Ubuntu 22.04.

=> ↺ How to Install PrestaShop on Ubuntu 22.04 – LinuxTuto

• PrestaShop is an open-source platform that allows anybody to easily create an e-commerce website platform to start selling products. The software was created with PHP and released under the Open Software License (OSL).

• In this tutorial, we will explain how to install and configure the PrestaShop e-commerce platform on Ubuntu 22.04.

=> ↺ Install Ajenti Admin Panel on Ubuntu 20.04 LTS Server

• Manage your CLI server by installing Admin Panel Ajenti on your Ubuntu 20.04 LTS Focal Fossa server using the command terminal.

• Ajenti is an open source Server management that offers an easy-to-use Web-based graphical user interface to command line servers so that they can be managed easily, locally or remotely.

• Well, you can’t compare it to the popular WHM Cpanel, instead, with the Cockpit Server Admin platform but with extra features to manage servers. That makes it easier for administrators to gain an overview and enable other users to manage docker containers, start services or run scripts, for example.

• The current version of Ajenti is a V2 lightweight Admin panel, however, there is also one more edition Ajenmti 1.x Panel which is not currently in development. Because the developers are focusing on Ajenti V2 which offers plugin-based architecture to expand the capabilities of the Panel. It is developed with Python3 & AngularJS and in the future will have plugins to manage other Server services such as apache2, Nginx, postfix, etc.

=> ↺ How to create a Project in OpenProject

• OpenProject is an open-source project management platform that makes it pretty easy to manage projects from the security of your own data center or your third-party cloud host. OpenProject can easily be deployed with the help of Docker, so you don’t have to worry about the complications of installing it manually.

• Once OpenProject is up and running, and you have the basic configurations taken care of, it’s time to create your first project. We’ll first create a new project, then we’ll add members and even set the project as a template, so you can more easily recreate it.

=> ↺ (Resolved) Port 22 Connection Refused on Ubuntu & Debian – TecAdmin

• Sometimes we get an error “Port 22: Connection refused” during the SSH connection to a remote system. This can happen due to multiple reasons.

=> ↺ How to Use Pushbuttons With Raspberry Pi GPIO Pins – Make Tech Easier

• If you’ve ever used an LED with a Raspberry Pi, then you probably know how GPIO outputs work. Code makes electricity flow through General Purpose Input / Output (GPIO) pins, passes through the LEDs, and lights things up. But have you ever tried doing the reverse? With pushbuttons, you can do the exact opposite. This tutorial shows you how to turn a GPIO pin into an input pin, listening to every button press you make!

=> ↺ How to Password Protect Directory in Nginx Web Server

• While Nginx pre-configurations cater to essential security needs for our web applications, some security precautions need to be user-defined.

• For instance, a website’s web directory may contain files and other subdirectories that we wish to protect from unauthorized user access. A solution to the problem is basic authentication implementation on the Nginx web app configuration file.

• This article will walk us through viable steps of password-protecting a web app directory hosted by an Nginx web server.

=> ↺ How to Install Puppet 7 Server on Rocky Linux/Alma Linux 9

• In this guide, we are going to install Puppet 7 Server Open Source in Rocky Linux/Centos 8 Server. We will set up a Puppet server and an agent and install nginx using puppet manifests.

• Puppet is a software configuration management tool which includes its own declarative language to describe system configuration. It is a model-driven solution that requires limited programming knowledge to use. Puppet operates in an agent-master architecture, in which a master node controls configuration information for a fleet of managed agent nodes.

=> ↺ How To Install OpenRGB on Linux Mint 21 – idroot

• In this tutorial, we will show you how to install OpenRGB on Linux Mint 21. For those of you who didn’t know, Open source RGB lighting control that doesn’t depend on manufacturer software. OpenRGB is available for Windows, Linux, and macOS. The software offers many features, including support for RGB amber lighting, game integrations, music visualization, and more. Additionally, the software comes with a plugin interface that allows you to extend its functionality even further.

• This article assumes you have at least basic knowledge of Linux, know how to use the shell, and most importantly, you host your site on your own VPS. The installation is quite simple and assumes you are running in the root account, if not you may need to add ‘sudo‘ to the commands to get root privileges. I will show you the step-by-step installation of OpenRGB on Linux Mint 21 (Vanessa).

=> ↺ Network automation with Ansible filters | Enable Sysadmin

• Ansible uses the Jinja2 templating system to handle variables in YAML playbooks. As I explained in my previous article, filters are a very powerful feature in Ansible that allow you to manipulate data in many different ways. One useful filtering example is network configuration.

=> ↺ GNU Linux – fonts and font editors – what is WOFF?

=> ↺ GNU Linux bash – tar – how to pack compress backup folder create tar.gz and exclude filetype

=> ↺ Neofetch – A Command Line Linux System Information Tool

• How much do you know about your Linux OS system information? Moreover, what system settings do you check, or what inbuilt Linux commands do you run to retrieve important information regarding your Linux operating system distribution?

• This article guide is here to answer such important questions concerning your Linux OS distribution via the Neofetch system information tool.

=> ↺ How I analyze my music directory with Groovy | Opensource.com

• Lately, I’ve been looking at how Groovy streamlines the slight clunkiness of Java. In this article, I begin a short series to demonstrate Groovy scripting by creating a tool to analyze my music directory.

• In this article, I demonstrate how the groovy.File class extends and streamlines java.File and simplifies its use. This provides a framework for looking at the contents of a music folder to ensure that expected content (for example, a cover.jpg file) is in place. I use the JAudiotagger library to analyze the tags of any music files.

Lutris

=> ↺ Lutris 0.5.11 Adds Open Source Macintosh Emulators and Amazon Games Integration

• Lutris is an open-source game manager on Linux, giving you easy access to all kinds of game clients like Ubisoft Connect, Epic Games Store, and more.

• [...]

• Along with the highlights, another key change includes the support for Gamescope for Nvidia drivers 515 and above.

• Gamescope can be paradise while playing low-resolution games as it helps you to upscale the resolution.

=> ↺ Interview with Mathieu Comandon, creator of Lutris! – Invidious

Desktop Environments/WMs

K Desktop Environment/KDE SC/Qt

=> ↺ KDE Snap Packages now on ARM and KDE Invent CI – Jonathan Esk-Riddell’s Diary

• KDE’s apps are available to install from the Snap store. 110 of them are packaged there ready to run on pretty much any Linux distro out there.

• There’s 350,000 devices with KDE snaps installed in the last week. The most popular Snaps are Okular, Krita with 50,000 devices this week. Kdenlive has nearly 44,000. Kolourpaint is popular at over 20,000.

=> ↺ KDE neon Docker Images now on 22.04LTS – KDE neon Developers’ Blog

• KDE neon has Docker images which are great for easily testing out KDE software built from Git master, Git testing or releases without touching your host system.

GNOME Desktop/GTK

=> ↺ The GNOME Project Introduces a Telemetry Data Collection Tool

• GNOME released a new gnome-info-collect tool that collects (anonymous) information about your system and some of the choices you’ve made.

• Above all, we want to stress that there is no cause for concern, especially for highly sensitive users regarding data privacy.

• In today’s world, users have mixed feelings about telemetry. But first, for those not in the know, let’s define telemetry in its use as software.

• Telemetry typically comprises software running in the background, gathering data about your computer and how you interact with it, and forwarding it to third parties – for example, hardware vendors or operating system makers.

=> ↺ Pano is a ‘Next-Gen Clipboard Manager’ for GNOME Shell – OMG! Ubuntu!

• ‘Pano’ bills itself as a “next-gen clipboard manager for GNOME Shell” and if first impressions are anything to go by, it certainly fulfils that claim!

• Most clipboard managers (that I’ve used, at least) tend to be text-heavy lists. You copy items, they get added to a list, and you spend ages trying to work out which truncated string is which. Pano is way more graphical in its presentation of your copy/paste history making it potentially more useful.

• [...]

• Clipboard managers are only as useful as their contents, and not every you copy you’ll want to keep within easy reach. You can remove an item your clipboard history by clicking on the ‘x’ in the corner, and search through all saved contents using the search bar.

Distributions and Operating Systems

SUSE/OpenSUSE

=> ↺ Mesa, Git, Gear, More Update in Tumbleweed – openSUSE News

• The rolling release continues fastforwarding daily with new versions of software.

• The most recent snapshot is 20220824 and it updated the Linux Bluetooth protocol bluez 5.65; the package fixed a few Advanced Audio Distribution Profile issues and added experimental support for ISO sockets. The 4.16.2 version of hypervisor xen dropped several patches contained in the new tarball including a CLFLUSH work around for AMD x86. The new xen update fixes a few Common Vulnerabilities and Exposures. There were a few updates related to Vulkan like an update of shaderc 2022.2, which added support for 16b-bit-types in High-Level Shader Language. There were also updates to vulkan-loader and vulkan-tools 1.3.224.0. The OpenGL and OpenGL for Embedded Systems shader glslang 11.11.0 added OpSource support and avoids a double-free in functions clone for vulkan in relaxed mode.

• Mesa and its drivers package updated to version 22.1.7 in snapshot 20220823. The 3d graphics library’s new version had fixes and cleanups all over the tree; most of the fixes were for the Zink driver that emits Vulkan Application Programming Interface calls. Several YaST packages updated in the snapshot. There were some adjustments made with yast2-storage-ng 4.5.8 to adapt to new types of mounts by libstorage-ng, and yast2-network 4.5.5 added a class to generate the configuration needed for Fibre Channel over Ethernet. Other packages to update in the snapshot were transactional-update 4.0.1, autoyast2 4.5.3 and many other libraries.

• [...]

• Among the packages to update were KDE Gear 22.08.0, which allows you to sort files also by file extension with Dolphin.

=> ↺ openSUSE Tumbleweed – Review of the week 2022/34 – Dominique a.k.a. DimStar (Dim*)

• Dear Tumbleweed users and hackers,

• This week, Tumbleweed made the impossible possible: we have published 8 daily snapshots in just 7 days. Of course, the timing was a bit on our side: the snapshot that started building yesterday went so quickly through build and QA that it already managed to be published. In any case, the daily streak continued all along (now at 22 – a new all-time record).

Fedora Family / IBM

=> ↺ Edge automation: Seven industry use cases and examples

• Put simply, edge computing is computing that takes place at or near the physical location of either the user or the source of the data being processed, such as a device or sensor.

• By placing computing services closer to these locations, users benefit from faster, more reliable services and organizations benefit from the flexibility and agility of the open hybrid cloud.

=> ↺ Modernization: Developing your code migration strategy

=> ↺ GTK 2 removal from RHEL 10+

• In RHEL 10 the GTK 3 and GTK 4 will still continue to be available for everyone to use.

=> ↺ CPE Weekly Update – Week 34 2022 – Fedora Community Blog

• This is a weekly report from the CPE (Community Platform Engineering) Team. If you have any questions or feedback, please respond to this report or contact us on #redhat-cpe channel on libera.chat (https://libera.chat/).

• We provide you both infographics and text version of the weekly report. If you just want to quickly look at what we did, just look at the infographic. If you are interested in more in depth details look below the infographic.

=> ↺ CentOS Community Newsletter, August 2022 – Blog.CentOS.org

• CentOS hosted a Dojo at DevConf.US in Boston. This was our first return to hosting in-person events, and we tried to include remote participants with a YouTube live stream. Thanks to everybody who joined us in Boston or online. We appreciate feedback on how we can improve hybrid events. The recordings will be published soon.

=> ↺ How to hire (and retain) Gen Z talent

• As a new generation of IT talent emerges, corporate leaders should examine business practices that embrace new ideas and expectations. Consider this expert advice

Debian Family

=> ↺ Deepin 23 Plans to Leave Debian, Aims to Become Independent

• A few days back, the Deepin team gave a preview of the upcoming Deepin 23 release with new feature updates and additional details. However, in a recent post in the official subreddit of Deepin, the team announced that Deepin 23 would not be based on Debian anymore.

Devices/Embedded

=> ↺ Jellyfin and Raspberry PI: a Free System to Manage your Media

• Raspberry PI computer boards, especially the newest ones, meet perfectly the need for small media center systems. One of the most famous on the web is Jellyfin

• This tutorial will show you how to install Jellyfin on Raspberry PI computer boards using Docker. For this tutorial, I’m going to use a Raspberry PI 3 Model A+, but it should work with any newest Raspberry PI computer board.

• Moreover, I’m going also to show a way to easily upload media files remotely to your Jellyfin media center.

• [...]

• Jellyfin is a Free Software Media System licensed under the GNU GPL: this means that you can use it, study it, modify it, build it, and distribute it for free, as long as your changes are licensed the same way. It descends from Emby‘s 3.5.2 release, trying to be different in order to avoid attached strings, premium licenses or features, and hidden agendas.

Free, Libre, and Open Source Software

Events

=> ↺ Meet Canonical at OpenSearchCon 2022 and hear about our new community collaboration | Ubuntu

• OpenSearch makes it easy to ingest, search, visualise, and analyse data. Developers build with OpenSearch for use cases such as application search, log analytics, data observability, data ingestion, and more.

• OpenSearch is Apache 2.0 licensed software, which means that it is open source and run, maintained and advanced by the community. OpenSearch includes a network of partners and is open to contribution. OpenSearch also has principles for development, as the organisation believes that great open-source software is built together with a diverse community of contributors. Canonical, the publisher of Ubuntu, is proud to be a member of this expanding community.

=> ↺ curl up 2022 take 2 | daniel.haxx.se

• In June of 2022 we intended to run the curl up 2022 curl conference in person, in California.

• Unfortunately, I had the bad taste of catching covid exactly when I was about to use my new US visa for the first time, so I had to remain at home and because of that we cancelled the whole event.

Web Browsers

Mozilla

=> ↺ Slow your scroll: 5 ways to fight misinformation on your social feed

• The news is overwhelming. Attention spans are waning. Combine those with social media feeds that are optimized for endless scrolling, and we get an internet where misinformation thrives.

• In many ways, consuming news has become a social act. We get to share what we’re reading and thinking through social media. Other people respond with their own thoughts and opinions. Algorithms pick up on all of this activity, and soon enough, our feeds feed us what to consume next – one after another. While it could be actual news and accurate information, often, it’s an opinionated take, inaccuracy or even propaganda.

=> ↺ Firefox Presents: Feeling alive with the ‘Stoke King’

• If you could use a little hyping up to go outside, look no further than Wade Holland’s social media feeds. A former competitive skier from Montana, Holland encourages people to find their “stoke” – whether that’s by going on a mountain bike ride, rollerblading, or just feeling the sun on your skin.

• “It can be finding a little park right behind your house and singing and dancing in it,” Holland said. “You don’t have to hike Everest. You can do whatever elevates your stoke!”

=> ↺ We Asked AI To Create These Beautiful Thunderbird Wallpapers

• The buzz around AI-generated artwork continues to grow with each passing week. As machine-learning-driven AI systems like DALL·E 2, Midjourney, and Stable Diffusion continue to evolve, some truly awe-inspiring creations are being unleashed onto the world. We wanted to tap into that creative energy to produce some unique desktop wallpapers for the Thunderbird community!

• So, we fed Midjourney the official Thunderbird logo and a series of descriptive text prompts to produce the stunning desktop wallpapers you see below. (Can you spot which one is also inspired by our friends at Firefox?)

Programming/Development

=> ↺ postmarketOS // Considering SourceHut, Part 2

• We recently added a post, Considering SourceHut, where we explained our desire to move from our current source code and issue hosting on gitlab.com to SourceHut. Along with a tentative rollout plan and a call out to postmarketOS contributors to give their feedback in an issue created specifically for that purpose (postmarketos#49). After receiving a lot of thoughtful feedback (and yes we did read them all!) from contributors and community members who read the post, we felt is was necessary to provide an update.

• [...]

• What we do know is, now would be the best time to try it.

=> ↺ <Weeks 9> Storing OCR result | My Journey at google summer of Code 2022

• This week, I implemented two ways to store the output text.

• The first way is that output text will be recorded and saved as a text file. I implement the method saveTextFile(const QString& filePath, const QString& text) of Ocr Tesseract Engine; this function uses QTextStream’s streaming operators, so we can conveniently write and update text into the file. The text file is located with the same path as the Url image.

• The second way is to save the text in XMP. I implement the method saveXMP(const QString& filePath, const QString& text) to do this task. XMP uses a structured container to host similar metadata. An alternative language string is an entry in the XMP tree (based on XML) which will be an additional property for a title or caption tag. A new language version of a label is appended to XML. There is no limit in size and char encoding. XMP is hosted in the image to a dedicated chunk outside the image data/properties.

Nim and BaCon

=> ↺ Debian to Puppy package db conversion in Nim

• ‘debdb2pupdb’ is written in BaCon language, though Dima (dimkr in the forum) rewrote it in C in woof-CE; though, the legacy-branch in woof-CE still has the BaCon version…

=> ↺ BaCon 4.x cross-compile problem in OE

• However, it turns out that cross-compiling BaCon and apps written in BaCon, is not resolved. It was only fixed for the situation where was compiling on a x86_64 host OS, for a x86_64 target CPU.

Leftovers

Hardware

=> ↺ WAFER-TGL-U 3.5-inch Tiger Lake SBC offers 3x 2.5GbE port, SATA, 4x display interfaces – CNX Software

• IEI’s WAFER-TGL-U is a 3.5-inch SBC based on a choice of Intel Tiger Lake UP3 processors with up to 32GB RAM, SATA storage, three 2.5 Gbps Ethernet ports, four display interfaces including HDMI, DisplayPort, and the company’s custom iDPM 3040 slot for eDP/LVDS/VGA, as well as four USB 3.2 ports.

• The board also comes with M.2 sockets to add 4G LTE or 5G cellular connectivity, a few RS232/RS422/RS485 ports, and IEI says it is ideal for space-constrained applications such as AGV (Automated Guided Vehicle), AMR (Autonomous Mobile Robot), and small cabinets in factories.

Security

=> ↺ Living off the land, AD CS style | Pen Test Partners

• Unless you have been living under a rock for the last year or so, Active Directory Certificate Services (AD CS) abuse continues to be a hot topic in offensive security, ever since the excellent research released by Will Schroeder (@harmj0y) and Lee Christensen (@tifkin_). I, like many, have enjoyed the fruits of Will and Lee’s research since its release last year.

• Up until now exploitation of these AD CS misconfigurations typically requires tools like Certify directly over C2, or Oliver Lyak’s excellent certipy tool over SOCKS into the target environment.

• Recently, my genius and handsome colleague Nick (guess who tech QA’d this post?) and I got into a conversation around living off the land techniques for AD CS abuse. The environment he was targeting at the time was brutal from a red teamer perspective, with a high functioning SOC and excellent detection capability. In situations such as this, living of the land is a much more effective way of remaining undetected and blending in with legitimate traffic.

• [...]

• There are several ways to enrol for certificates using traditional Windows features and tools. The certutil command line tool and the web enrolment endpoint that is sometimes exposed, to name a few. But we wanted to avoid the command line if possible and not rely on the web enrolment endpoint as often this is not available.

=> ↺ Security updates for Friday [LWN.net]

• Security updates have been issued by Debian (zlib), Fedora (dotnet3.1, firefox, java-1.8.0-openjdk-aarch32, thunderbird, and zlib), Mageia (canna, chromium-browser-stable, dovecot, firefox/nss, freeciv, freetype2, gnutls, kernel, kernel-linus, kicad, ldb/samba/sssd, libgsasl, microcode, nodejs, rsync, thunderbird, and unbound), Oracle (php:7.4 and systemd), Scientific Linux (firefox, rsync, systemd, and thunderbird), Slackware (vim), and SUSE (bluez, gstreamer-plugins-good, java-1_7_1-ibm, java-1_8_0-ibm, kernel, libcroco, postgresql10, postgresql13, python-lxml, and webkit2gtk3).

=> ↺ Security and Cheap Complexity – Schneier on Security

• I’ve been saying that complexity is the worst enemy of security for a long time now. (Here’s me in 1999.) And it’s been true for a long time.

=> ↺ The anomaly of cheap complexity

• So, computers are insecure because they have so many complex layers.

=> ↺ Day in the life of a package maintainer: Reproducible Go packages

• In this new blog series, I would like to introduce you to the daily adventures of an Arch Linux package maintainer.

• This time, we will have a look at reproducible package builds. Reproducible package builds are very important for us, as package maintainers, because reproducible package builds create an independently-verifiable path from source to the final package. This means, every Arch Linux user can verify that noone tampered with the Arch Linux package build process. Technically spoken, this means that we can build the same package on different systems and get an exact identical package (identical as in: they share the same SHA256 checksum).

Privacy/Surveillance

=> ↺ Pegasus Investigation Report to remain in sealed cover despite containing evidence that 5 phones had malware

• The committee of experts (‘Committee’) constituted by the Supreme Court to investigate the use of Pegasus spyware on Indian citizens recently submitted its report with the Supreme Court in a sealed envelope (‘Report’). This Report was opened for the first time by the Bench comprising Chief Justice NV Ramana (‘CJI’), Justice Surya Kant and Justice Hima Kohli in open court. The CJI read some parts of the Report, and revealed that the Report states that malware was found in 5 out of 29 phones, but that the Report couldn’t say if the malware was Pegasus. However, despite this shocking revelation, the Report will be kept in the sealed envelope, in the custody of the Supreme Court’s General Secretary, even when the CJI stated during the court proceedings, that parts of the Report will be public.

=> ↺ The American Data Privacy and Protection Act: a look into the United States’ first federal privacy law

=> ↺ [Old] VS Code – What’s the deal with the telemetry?

• Microsoft state that they follow the General Data Protection Regulation (GDPR), and that these practices apply to all geographies, not just Europe.

• However, you cannot access the data collected.

• [...]

• And there is a ‘sign-in’ experience in VS Code. You can sync your settings by signing into a Microsoft account or GitHub account. You may not use it, but you can be obviously identified that way. Is that data linked?

• [...]

• Under the right of access article, you can make a formal request called a data subject request (DSR) to a data controller (whoever holds your data) to take an action on that data. A data controller must provide an overview of the categories of data that are being processed (Article 15(1)(b)) as well as a copy of the actual data (Article 15(3)); furthermore, the data controller has to inform the data subject on details about the processing, such as the purposes of the processing (Article 15(1)(a)), with whom the data is shared (Article 15(1)(c)), and how it acquired the data (Article 15(1)(g)).

• Microsoft have added GDPR annotations to telemetry events to describe their purpose. I guess that covers Article 15(1)(a) mentioned above. It is an enumerated variable, which can contain values: “FeatureInsight”, “PerformanceAndHealth”, “BusinessInsight”, and “SecurityAndAuditing”. It is kind of vague. What does a “BusinessInsight” event mean?

• My own take is that I do not feel like I am adequately protected. I am not totally anonymous. I cannot access data collected. Microsoft extensions collect data implicitly, and may not offer settings to control what is sent out. The fact that all Microsoft product licenses say that users cannot opt out of all data collection makes me doubt the sincerity of the effort.

• [...]

• However, VSCodium can’t shut out all the data collection as it is the same codebase. And since extensions act independently with regard to data collection, you still need to be mindful of what extensions you install.

• You would need to search around for other options if you want to find a more privacy-oriented, open-source code editor.

Digital Restrictions (DRM)

=> ↺ A new jailbreak for John Deere tractors rides the right-to-repair wave

Gemini* and Gopher

Personal

=> ↺ It’s Over, It Starts

• I am rounding out a long, manic week with a much needed full-night’s rest. It feels nice to be refreshed once again after so many days of feeling like I’m working with only half of my brain. These spells of insonmia, along with intense, creative flow aren’t bad. Just exhausting. And I end up feeling a bit guilty for the folks around me that rely on the rest of me being there.

=> ↺ strange thoughts

• while working on my website, i happened to stumble across an opportunity where a certain company was opening auditions for new vtuber talents. i’m only heavily considering it because i’m in the midst of a hopeless job hunt – which sounds stupid but. well. this is me trying every avenue, even the unorthodox ones.

=> ↺ My Music Collection

• Many years ago I bought a record player and started my own little record collection. I fell in love with handling, cleaning, and playing records from the very beginning. I grew up in the back-end of tapes and meat of the CD eras so records were new to me.

=> ↺ SpellBinding: ABIMORS Wordo: PIING

Technical

Internet/Gemini

=> ↺ My First Gemlog!

• I finally created a gemini capsule!!! I’ve been lurking on gemini for ages now, and I’ve been wanting to contribute my own nonsense for just as long.

• However, I could never figure out how to set up a capsule. I tried so many times, spent countless hours troubleshooting my setups, but to no avail. I had a yunohost server running though, and when I saw that I could host a gemini capsule on it I was ecstatic!

• Then, another roadblock. There are two apps available on yunohost for gemini, gemserv and my_capsule. I was familiar with gemserv so I installed it and tried to set it up. It was an absolute disaster. Could not figure it out and I thought it was just game over.

• Gemini (Primer) links can be opened using Gemini software. It’s like the World Wide Web but a lot lighter. Share in other sites/networks: These icons link to social bookmarking sites where readers can share and discover new web pages. Permalink  Send this to a friend

=> Techrights

➮ Sharing is caring. Content is available under CC-BY-SA.