● 03.18.23

Gemini version available ♊︎

● Links 18/03/2023: Docker is Deleting Free Software Organisations

Posted in News Roundup at 4:46 am by Dr. Roy Schestowitz

GNU/Linux

Desktop/Laptop

=> ↺ Veikk Voila L Pen Tablet review: budget drawing tablet is an attractive choice

• The Veikk Voila L Pen Tablet from new kids on the block Veikk is a versatile, affordable drawing tablet that’s worth buying even if for only occasional use. It comes in cheaper than its rival the Huion Inspiroy Ink H320 and its rugged and simple design and inbuilt dial make it very simple to use out of the box. It’s supplied with different adaptors, allowing it to plug into phones, tablets and laptops and its pressure sensitivity is brilliant, especially for a sub-$50 tablet.

Server

=> ↺ Lightweight Environments in Kubernetes

• It’s becoming widely understood that testing needs to shift left as organizations rapidly grow their development environments. The question that remains: Exactly how should these organizations approach end-to-end testing and integration testing in Kubernetes and multi-cloud environments? To address this question, I’ll discuss how a new approach to realizing high-fidelity

=> ↺ Dero, Monero Cryptojackers Fighting for Same Kubernetes Clusters

• Dero cryptojacking operation infecting Kubernetes infrastructure is being targeted by Monero criptojackers for control over the same clusters.

Audiocasts/Shows

=> ↺ How to Steal a Tesla, AI On Your Pi, Linux Desktop: Future, – SOCKS5 Your Burp – PSW #776 | SC Media

• In the security news: AI on your PI, no flipper for you, stealing Tesla’s by accident, firmware at scale, the future of the Linux desktop, protect your attributes, SOCKS5 for your Burp, TPM 2.0 vulnerabilities, the world’s most vulnerable door device and hiding from “Real” hackers, sandwiches, robot lawyers, poisonis epipens, and profanity in your code! All that, and more, on this episode of Paul’s Security Weekly!

Instructionals/Technical

=> ↺ How To Install LibreOffice on Manjaro 22

• In this tutorial, we will show you how to install LibreOffice on Manjaro 22.

=> ↺ How to generate app password on Gmail to send emails via Linux Terminal

• In this tutorial you will learn how to configure Gmail to send emails via mail utility on Linux.

=> ↺ How to send emails from Linux Terminal

• In this tutorial you will learn how to send an email from your terminal in Linux.

=> ↺ How To Install Apache Spark on Ubuntu 22.04 LTS

• In this tutorial, we will show you how to install Apache Spark on Ubuntu 22.04 LTS. For those of you who didn’t know, Apache Spark is a powerful open-source big data processing engine.

=> ↺ How To Install LXQt Desktop on Fedora 37

• In this tutorial, we will show you how to install LXQt Desktop on Fedora 37. For those of you who didn’t know, LXQt is a free and lightweight desktop environment that is built using the Qt framework.

=> ↺ How To Install MakeMKV on Ubuntu 22.04 LTS

• In this tutorial, we will show you how to install MakeMKV on Ubuntu 22.04 LTS. For those of you who didn’t know, MakeMKV is a popular software for creating high-quality video files from your DVD and Blu-ray discs.

=> ↺ 15 Basic Cat Command Examples In Linux

• The cat is short for the “concatenate“ command. It is mostly used in file management tasks like creating single or multiple files, viewing the content of a file, concatenating files, etc.

=> ↺ Deploy Nagios NRPE Agents using Ansible

• In this tutorial, you will learn how to deploy Nagios NRPE Agents using Ansible. Ansible is an open-source automation tool used for configuration management, application deployment, and task automation.

=> ↺ How to Install Docker CE on AlmaLinux

• Docker Community Edition (CE) is a free, open-source, and community-supported version of the Docker platform. Docker CE provides all the essential features to build, ship, and run container applications. It is designed for developers who are just starting out with containerization, as well as for small-scale development and testing environments.

=> ↺ Layer 4 – TCP and the three-way handshake

=> ↺ How to install Boost on Ubuntu 22.04

• Boost is a mighty C++ library used by many developers to provide various functions.

=> ↺ How to solve the error : Could not create server TCP listening socket *:6379: bind: Address already in use

• Having trouble starting up the Redis server because of the “Could not create server TCP listening socket *:6379: bind: Address already in use” error? No need to fret. In this article, we’ll guide you through a detailed solution to address this error and help you get your Redis server operating seamlessly.

=> ↺ Remote port enumeration using native tools

=> ↺ Remote port and service enumeration – nmap

=> ↺ NMAP scripts

=> ↺ Wireless diagnostic operations

=> ↺ kubectl command examples (cheat sheet)

=> ↺ How to manage and troubleshoot Kubernetes logs

=> ↺ How to Install Kubernetes on All Linux Distros

=> ↺ How to Manage Kubernetes Clusters With kubectl

=> ↺ How to Install Ntopng to Monitor Network Traffic on Debian 11

• Ntopng is an open-source network monitoring tool that monitors real-time network traffic from a web interface. In this article, you will learn how to install Ntopng on Debian 11.

=> ↺ How to Set Up Multi-Master PostgreSQL Replication on Ubuntu 22.04

• PostgreSQL is an open-source database management system focusing on extensibility and SQL compliance. This tutorial will install the PostgreSQL database server on Ubuntu 22.04 servers and set up Multi-Master replication with multiple servers via Bucardo, an asynchronous PostgreSQL replication system.

=> ↺ How to Install Moodle on AlmaLinux 9

• Moodle is an open-source platform for online learning. It is a Learning Management System used by educational institutions that enable them to create online courses, training, learning and assignments. Originally, Moodle was known as an acronym for Modular Object-Oriented Dynamic Learning Environment.

=> ↺ How to Install Neovim on Ubuntu 22.04 or 20.04

• Discover Neovim, a state-of-the-art text editor built on the foundation of Vim, offering a free and open-source solution tailored for maximum usability and extensibility. Neovim emphasizes seamless maintenance and actively encourages contributions from a diverse community of developers.

=> ↺ SSL Certificate: A Complete Insight

• The internet has experienced exponential growth, becoming an integral aspect of daily life. As more individuals rely on the web for communication, shopping, and other activities, ensuring the security and privacy of online activities is of utmost importance.

=> ↺ IPv4 vs IPv6: A Comprehensive Comparison and Future Outlook

• This article offers a comprehensive comparison between IPv4 and IPv6, covering key differences, advantages, and challenges, while exploring their future outlook. Gain a deeper understanding of these internet protocols and their role in the ever-evolving digital landscape.

=> ↺ How to Use Gzip Command in Linux: Concepts and Examples

• Gzip is a widely used compression tool in the Linux community that allows for the compression and decompression of files and directories.

=> ↺ the GNU Linux (MATE) version of the Windows Taskmanager (graphical version of top or htop)

• it is pretty usefull, to see, what programs are running, what program uses how much CPU/RAM/DISK and the overall ressource use of the system.

=> ↺ How to Install Grafana on AlmaLinux 9

• In this tutorial, we will explain how to install Grafana on AlmaLinux 9 OS. If you ever doubt what Grafana is and what it is used for, we are here to explain it to you.

=> ↺ How to Install Nomacs on Ubuntu 22.04 or 20.04

• Nomacs is a powerful, open-source image viewer offering extensive features, a lightweight design, and cross-platform compatibility. It stands out as a valuable tool for developers and users who need advanced capabilities for image processing tasks.

=> ↺ How to easily deploy OpenShift on Azure using a GUI, Part 1

Distributions and Operating Systems

Reviews

=> ↺ Linux Distro Reviews: openSUSE Tumbleweed — Part 2 – WebProNews

• Security is only a good thing if it’s not so restrictive that people begin disabling features for the sake of convenience, and this is where openSUSE’s disadvantages begin to shine through.

• Of all the distros that I have tried to date (Fedora, Manjaro, openSUSE, KDE Neon, Pop!_OS, Kubuntu, and Zorin OS), openSUSE’s security policies are by far the most restrictive. Want to adjust your network settings? You’ll need to enter your password. Want to install a Flatpak app? You’ll need to enter your password. Change your timezone? Enter your password.

• What’s more, the default firewall settings are so strict that printer discovery doesn’t work out of the box. To be clear, every single other distro I’ve tried automatically discovers my HP printer on my network and lets me print without installing any additional drivers.

• In contrast, openSUSE cannot even discover the printer without changing the firewall profile from the default ‘Public’ to ‘Home,’ or adding the mDNS service to the ‘Public’ profile. Even when making sure mDNS is enabled, openSUSE still requires “hplip” software/driver package installed.

• Is it possible to overcome these issues? Yes. But many people, especially less technical users, give up before figuring out how to jump through all these hoops. In fact, a quick look at openSUSE’s Reddit will reveal that two common solutions to printing on openSUSE are a) disable the firewall altogether or b) “don’t print on openSUSE.” Seriously…I have seen that advice multiple times…”don’t print on openSUSE.”

• The issues with printing on openSUSE are irritating enough that Linux creator Linus Torvalds famously dumped openSUSE and switched to Fedora because printing was just too hard to bother with. Fans of the distro will point out that it has gotten better since that day…but it’s still not good enough for the average desktop user.

New Releases

=> ↺ Penetration Testing with Kali Linux 2023 released: New modules, exercises, challenges (PEN-200)

• OffSec released the 2023 edition of Penetration Testing with Kali Linux (PEN-200). This new version, which incorporates the latest ethical hacking tools and techniques through real-world penetration testing simulations, offers many improvements and additions, including new Learning Modules and Learning Objectives to help learners focus on critical areas, new, progressive sets of machines (Challenge Labs) to assist learners in synthesizing materials; and private environments to create a superior learning experience.

Fedora Family / IBM

=> ↺ Reg FOSS desk test drive: First beta of Fedora 38 drops • The Register

• The Fedora project has released the beta version of Fedora 38. The Reg took it for a spin, and it handles well.

• The beta version of Fedora 38 is here, hitting the “early target” in its schedule. As usual, there’s an extensive changeset, which is worth scrutinizing for the full details of all the various subcomponents. We tried the beta in both VirtualBox and on bare metal, and so far, it has worked flawlessly – which is particularly impressive given the issues we had with Fedora 37 when it was at the same stage.

• We’ve covered some of what’s going into this release already, and we try not to repeat ourselves. Among the more visible changes, there will be two new “spins”: one with Budgie and one with Sway. Also, earlier this month, it turned out that some “legacy” components aren’t being dropped just yet. The default Workstation edition will come with GNOME 44, which itself just recently reached Release Candidate status and brings some welcome improvements.

• Among other highlights, it comes with the latest kernel 6.2. (Incidentally, this will also be used in Ubuntu 23.04, although that’s not yet reached beta stage – that milestone should be at the end of this month.)

Canonical/Ubuntu Family

=> ↺ OnLogic’s new fanless mini-PC uses a heatsink as a chassis

• To meet the need for capable computing power in environments with difficult installation conditions, OnLogic has launched its Helix 401 fanless industrial computer. This small device, which has made its premiere at Embedded World 2023, is designed for use in edge computing, IoT, and many other applications.

• The Helix 401 is available with a variety of Intel 12th Gen Core and Celeron CPUs. Customers may choose the CPU that best meets their application requirements, with options ranging from a Celeron 7305E to an i7-1270PE. Whether you need an HX401 for general-purpose data handling or complex machine vision and AI tasks, the Intel Iris Xe iGPUs on these CPUs will help. Windows 11 Pro 64 Bit, Windows 10 IoT Enterprise, and Ubuntu 22.04 are among the operating systems available. In addition, the Helix 401 is Red Hat Certified for usage with Red Hat Enterprise Linux 8.7, 9.1, and future releases.

Free, Libre, and Open Source Software

=> ↺ NordVPN’s Linux App is Now Totally Open Source

• NordVPN probably needs no introduction

• It is a popular cross-platform VPN service known for its features and competitive pricing.

• With a recent announcement, they open-sourced three of their products alongside the launch of their free ‘Meshnet’ feature.

• Let’s see what’s in store for us.

=> ↺ Umami: Open Source Web Analytics and Google Analytics Alternative

• Umami is a simple, fast, privacy-focused alternative to Google Analytics.

=> ↺ Benefits of Using Open Source Knowledge Base + Top Tools

• Want to build an open source knowledge base? Learn everything about this solution, its pros and cons, including tools to use with our article.

Programming/Development

=> ↺ How to remove a package from PHP composer?

• PHP Composer is a package manager designed to install the libraries or dependencies required by a PHP application or project.

=> ↺ How to clear PHP composer cache or delete its folder?

• While working with PHP Composer, are you facing slow performance then to improve it and the efficiency of managing dependencies try to clear the cache of Composer for your Project.

=> ↺ Release candidate: Godot 4.0.1 RC 1

• Following the biggest Godot release ever we’ve collected several critical fixes and smaller usability improvements to make your experience with 4.0 more pleasant. This is the first release candidate for early adopters to test the changes, with the stable 4.0.1 release coming soon after.

Leftovers

=> ↺ Field of Bankruptcies

• It’s hard out there trying to do something new, which is why we want to look back on some of the notable failed sports leagues.

Science

=> ↺ When The Pandemic Came, The Zoos Shut, And The Animals Began to Act Differently

• When the humans go away…

=> ↺ JWST Catches Sight of a Rare Star on The Brink of Going Supernova

• Only a few hundred thousand years to go!

Hardware

=> ↺ Renesas introduces 100 MHz RA4E2 and 200 MHz RA6E2 Arm Cortex-M33 MCUs for wearables, sensors, appliances

• Renesas Electronics has added two new groups to its 32-bit RA family of microcontrollers (MCUs) with the 100 MHz RA4E2 and 200 MHz RA6E2 Arm Cortex-M33 microcontrollers designed for “high-performance applications” in small packages such as sensing, gaming, wearables, and appliances. The new microcontrollers are equipped with 40 KB SRAM, 128 KB or 256 KB flash, and integrate various on-chip interfaces such as CAN FD, USB, QSPI, SSI, and I3C interfaces to offer an easy upgrade path for products based on other members of the Renesas RA Family. Renesas RA4E2 MCU group Both the RA4E2 and the RA6E2 are the most cost-effective microcontroller groups of the RA family with integrated CAN FD,  with the RA4E2 group especially well-suited to cost-sensitive applications and other systems requiring relatively high performance, low power consumption, and/or small package size.

=> ↺ Synaptics SYN4382 SoC supports Wi-Fi 6E, Bluetooth 5.3, and 802.15.4 connectivity

• Synaptics SYN4382 is a triple combo SoC with Wi-Fi 5/6E, Bluetooth 5.3, and IEEE 802.15.4 (Zigbee/Thread/Matter) radios, and manufactured with a 16nm process to lower power consumption for IoT and multimedia applications.

Health/Nutrition/Agriculture

=> ↺ Fighting mental health stigma: Affordable and personalized care in Mexico

• Magala and Pedro started out as parents desperate to find help for their child. Now, at their own clinic, they are the ones offering help, fighting mental health stigma and providing treatment.

Proprietary

=> ↺ Docker is deleting Open Source organisations – what you need to know

• Coming up with a title that explains the full story here was difficult, so I’m going to try to explain quickly.

• Yesterday, Docker sent an email to any Docker Hub user who had created an “organisation”, telling them their account will be deleted including all images, if they do not upgrade to a paid team plan. The email contained a link to a tersely written PDF (since, silently edited) which was missing many important details which caused significant anxiety and additional work for open source maintainers.

=> ↺ Docker is deleting open source organisations – what you need to know

• What a shitshow. We really have to start worrying about the future of Github, too, since I find it highly unlikely Microsoft isn’t planning similar moves in the future. If you’re hosting code at Github, I’d suggest looking at alternatives sooner rather than later, so you don’t end up like the people affected by something like this.

Linux Foundation

=> ↺ Linux Foundation Training & Certification & Cloud Native Computing Foundation Partner with CoRise to Prepare 50,000 Professionals for the Certified Kubernetes Administrator Exam

Security

=> ↺ Latitude leaks customer data after employee login details stolen

• Financial services provider Latitude Financial has disclosed a breach that it says has led to the leak of personal IDs of more than 100,000 customers from one of its service providers.

• Additionally, about 225,000 customer records were stolen from a second service provider, the company said in a statement to the ASX on Thursday.

=> ↺ US Charges Two Men Over Use of Hacked Law Enforcement Database for Doxing

• Sagar Singh and Nicholas Ceraolo have been charged for their alleged roles in a doxing operation that involved hacking a law enforcement platform and email account.

=> ↺ SAP Releases Five ‘Hot News’ Notes on March 2023 Patch Day

• SAP has released 19 new notes on March 2023 Security Patch Day, including five notes rated hot news.

=> ↺ FCC rules aims to curb scourge of robotexts assaulting Americans’ phones

• The agency reports that scam text complaints rose 500% between 2015 to 2022, reflecting the increase in robotexts Americans receive annually.

=> ↺ Rural hospitals need help from feds to fight ransomware, witnesses tell lawmakers

• Experts told Senators on Thursday that rural hospitals don’t have the necessary resources to fend off an increasing number of cyberattacks.

=> ↺ Scammers target Cloudflare CEO with Silicon Valley Bank-themed spearphishing

• The collapse of the U.S. tech industry’s bank of choice has prompted a massive amount of fraud attempting to capitalize on its downfall.

=> ↺ The US cybersecurity strategy won’t address today’s threats with regulation alone

• The Biden administration needs to foster greater public-private collaboration, involve global partners and help build the cyber workforce to fight growing digital threats. 

=> ↺ Russian Cyberspies Abuse EU Information Exchange Systems in Government Attacks

• Russia-linked APT29 was seen abusing the legitimate information exchange systems used by European countries in attacks aimed at governments.

=> ↺ Microsoft Pins Outlook Zero-Day Attacks on Russian Actor, Offers Detection Script

• Microsoft blames a “Russian-based threat actor” for in-the-wild attacks hitting its flagship Microsoft Outlook and has released a detection script to help defenders.

=> ↺ Chinese Cyberspies Hacked DLP Company Serving Military, Government Orgs

• The Chinese hacker group Tick has targeted an East Asian data loss prevention firm whose customers include military and other government organizations.

Privacy/Surveillance

=> ↺ European Digital Identity – A Potential Game Changer?

• The foundations for a Europe-wide digital identity system are just about to be laid. Will Europe get it right and lead on this important topic? Will the EU set a global standard for the protection of sensitive user information and digital identities?

=> ↺ Austrian DSB: Meta Tracking Tools Illegal

• Austrian DSB: Meta Tracking Tools Illegal

• Austrian Data Protection Authority (DSB) decided that the use of Facebook’s tracking pixel directly violates the GDPR and the so-called “Schrems II” decision on transatlantic data flows.

=> ↺ EDRi-gram, 15 March 2023

• Last week, on International Women’s Day, EDRi’s Sarah Chander and Claire Fernandez were honoured as leading voices for change in the European Union and tech and digital rights space.

• Join us in celebrating them and all women!

• In this edition, amongst other digital rights updates, check out our position on the proposed European Health Data Space. This attempt by the European Union to better use health data could come at the cost of patients’ right to privacy and consent.

• You can also catch up with your favourite #PrivacyCamp23 sessions by reading the summaries below or watching the recordings online.

Defence/Aggression

=> ↺ UK Supreme Court: trial must decide if $3B Ukraine loan from Russia was taken under duress

• The UK Supreme Court Wednesday ruled that a full public trial must be held to evaluate Ukraine’s “arguable and justiciable defence of duress” in relation to a $3 billion debt the nation owes to Russia.

=> ↺ Ukraine war and Middle East

• Emboldened by the independent foreign policies of Western allies Israel and Turkey, more countries in the region are weighing where their own interests lie, notes Gilles Kepel, author of more than 20 books on the Middle East, North Africa, Islam in France and Europe, adviser of senior European and Arab political and business leaders.

Finance

=> ↺ Credit Suisse to borrow up to $54 billion from central bank after shares plunge

• Swiss bank Credit Suisse said Thursday it will move to shore up its finances, borrowing up to $54 billion from the central bank after its shares plunged, dragging down other major European lenders in the wake of bank failures in the United States.

=> ↺ General Motors agrees to 10% pay increase with union at GTO plant

• The union-negotiated above-inflation raise will go into effect later this month, securing a major increase for workers.

AstroTurf/Lobbying/Politics

=> ↺ UK bans TikTok on government devices over security concerns

• Britain said on Thursday it would ban TikTok on government phones with immediate effect, a move that follows other Western countries in barring the Chinese-owned video app over security concerns.

Censorship/Free Speech

=> ↺ Case challenging Meta’s arbitrary removal of Polish NGO’s accounts finally in court

• The first court hearing in the case between a Polish NGO and Meta took place before the Warsaw District Court on 7 February 2023. The hearing was conducted almost four years after the organisation sued the internet giant for deleting its accounts and groups without a prior warning or an explanation.

Civil Rights/Policing

=> ↺ FIFA should use World Cup funds to compensate victims of Qatar human rights abuses: rights groups

• Human Rights Watch (HRW) Thursday said that the Fédération Internationale de Football Association (FIFA) should utilise the approved World Cup Qatar 2022 Legacy Fund to compensate victims of human rights abuses related to the 2022 World Cup.

=> ↺ Vermont school district settles race, sex-based harassment complaint

• The Twin Valley School District in Windham County, Vermont Thursday reached a settlement agreement to resolve a complaint that a student was harassed based on her race and sex.

=> ↺ Celebratory gunfire hits a transformer in Hebron: ‘We came close to a horrendous disaster’

• Videos filmed on March 14, 2023 show armed supporters of the Palestinian political movement Fatah firing celebratory gunshots into the air in Hebron in the West Bank. The men were celebrating their party’s victory in student elections held at the city’s polytechnic university. However, this celebratory gunfire, a common occurrence during celebrations in the Middle East, hit a transformer, causing it to explode. Our Observer says the result could have been catastrophic.

Monopolies

Patents

=> ↺ InterDigital vs. Lenovo: High Court cements UK as centre for FRAND-rate setting

• Finally, the High Court in London has handed down its much-anticipated decision in the dispute between InterDigital and mobile device manufacturer Lenovo over FRAND licensing and terms.

Gemini* and Gopher

Personal

=> ↺ architects of cruelty

• They built walls as the world caved in fountains as the reservoirs dried up prepared feasts in famine

• now they lay in rags or in coffins shouting to the heavens for its cruelty but the kingdom of heaven’s walls held strong

• their cries lay unanswered their servants abandoned them the utopia they fancied unfurled

Technical

=> ↺ Accidental portrait

• I’ve been working on a pinball game. I wanted level 2 to work like Bagatalle. You can control the strength of the plunger that fires a ball into play, but that’s it. I put a few things on the playing field, and then worked on getting the plunger to work properly.

• Gemini (Primer) links can be opened using Gemini software. It’s like the World Wide Web but a lot lighter. Share in other sites/networks: These icons link to social bookmarking sites where readers can share and discover new web pages. Permalink  Send this to a friend

=> Techrights

➮ Sharing is caring. Content is available under CC-BY-SA.