Language Selection

English French German Italian Portuguese Spanish

Linux Today

Syndicate content
Updated: 17 min 14 sec ago

Trizen - A Lightweight AUR Package Manager For Arch-Based Systems

Thursday 15th of February 2018 11:00:00 PM

ostechnix: Trizen - A Lightweight AUR Package Manager written in Perl For Arch-Based Systems.

How to Run Sites Securely with Apache and Php-fpm on Ubuntu 16.04 LTS

Thursday 15th of February 2018 10:00:00 PM

A great security feature of Php FastCGI Process Manager (Php-fpm) is its ability to run Php scripts with different users.

Nintendo Switch Runs Linux Thanks To Hackers

Thursday 15th of February 2018 09:00:00 PM

 Not quite Nintendo Linux

How to Create a Bootable Ubuntu USB in Windows

Thursday 15th of February 2018 08:00:00 PM

MakeTechEasier: If you're one of the those Windows users who just wants to dabble in the open-source platform, then it could be handy to have a bootable Ubuntu USB.

Canonical Plans to Release Ubuntu 16.04.4 LTS (Xenial Xerus) on March 1, 2018

Thursday 15th of February 2018 07:00:00 PM

softpedia: The Ubuntu 16.04.4 LTS maintenance update was originally scheduled for release on February 15, 2018, but Canonical decided to delay it due to the Meltdown and Spectre security vulnerabilities

Open Source 101: A Beginner's Way to Learn Open Source

Thursday 15th of February 2018 06:00:00 PM

itprotoday: Enterprise level open source conferences, and conferences centered around single open source projects, are a great way to learn open source

How to Install Blender on Ubuntu

Thursday 15th of February 2018 05:00:00 PM

Blender is used to make 3D Figures and animations, it has been used for feature length films and more projects are underway.

How to create slides with Emacs Org mode and Reveal.js

Thursday 15th of February 2018 04:00:00 PM

opensource.com: With the Org-Reveal package, you can turn Emacs text files into simple Reveal.js slide decks.

How ZeroFox Protects Enterprise Social Media From Cyber-Attackers

Thursday 15th of February 2018 03:00:00 PM

eWEEK: Twitter might actually be safer, with 280 characters, rather than the old 140 limit.

Network Time Protocol: Install NTP server on Linux machines

Thursday 15th of February 2018 02:04:33 PM

LinuxTechLab: NTP or Network Time Protocol is a very important service that is used to keep the system time accurate.

Alfresco Software acquired by Private Equity Firm

Thursday 15th of February 2018 02:00:00 PM

Enterprise apps company acquired in a deal that won't see a change in corporate direction.

Pdgmail Forensic Tool to Analysis Process Memory Dump

Thursday 15th of February 2018 01:00:00 PM

Pdgmail Forensic tool to analysis process memory dump for Gmail data.

Min: An Open Source Web Browser for Minimalists

Thursday 15th of February 2018 12:00:00 PM

itsFOSS: Min is an open source web browser with a clean UI and minimalist look

Atom Hackable Text Editor Gets Asynchronous Context Menus, Read-Only TextEditors

Thursday 15th of February 2018 07:00:00 AM

Atom 1.24 is now available for Linux, Windows, and macOS, bringing asynchronous context menus

You Can Now Install KDE's Plasma Mobile on Your Android Smartphone, Here's How

Thursday 15th of February 2018 03:00:00 AM

softpedia: If you want to try something new on your Android smartphone, the KDE Project provides the community with not one but two methods

KDE Plasma Linux Desktop Is No Longer Vulnerable to USB Attacks, Update Now

Thursday 15th of February 2018 03:00:00 AM

One important security vulnerability fixed in the KDE Plasma 5.12 LTS desktop environment is a USB exploit

Qubes OS Security-Focused Operating System Now Supports Librem Linux Laptops

Wednesday 14th of February 2018 11:00:00 PM

Last year, Purism started shipping coreboot-enabled Librem laptops, and it received some interesting feedback

Everything I know about open source I learned from SpaceX

Wednesday 14th of February 2018 10:00:00 PM

Five lessons from the spectacular Falcon Heavy launch for people working on open source projects.

How to clone, modify, add, and delete files in Git

Wednesday 14th of February 2018 09:00:00 PM

Learn how to download and change files with Git

Securing ISPConfig 3.1 With a Free Let's Encrypt SSL Certificate

Wednesday 14th of February 2018 08:00:00 PM

This tutorial shows how to create and configure a free Let's encrypt SSL certificate for the ISPconfig interface

More in Tux Machines

NuTyX 10.1-rc1 Available

I'm very please to propose you the first release candidate version of the next version 10.1 stable version of NuTyX As they have been so many security issues, I took the chance to recompile all the collections (1701 packages) for this coming next stable NuTyX version. Read more

Android Leftovers

Events: FOSDEM Samba Talks, USENIX Enigma, LCA (linux.conf.au) and FAST18

  • Authentication and authorization in Samba 4
    Volker Lendecke is one of the first contributors to Samba, having submitted his first patches in 1994. In addition to developing other important file-sharing tools, he's heavily involved in development of the winbind service, which is implemented in winbindd. Although the core Active Directory (AD) domain controller (DC) code was written by his colleague Stefan Metzmacher, winbind is a crucial component of Samba's AD functionality. In his information-packed talk at FOSDEM 2018, Lendecke said he aimed to give a high-level overview of what AD and Samba authentication is, and in particular the communication pathways and trust relationships between the parts of Samba that authenticate a Samba user in an AD environment.
  • Two FOSDEM talks on Samba 4
    Much as some of us would love never to have to deal with Windows, it exists. It wants to authenticate its users and share resources like files and printers over the network. Although many enterprises use Microsoft tools to do this, there is a free alternative, in the form of Samba. While Samba 3 has been happily providing authentication along with file and print sharing to Windows clients for many years, the Microsoft world has been slowly moving toward Active Directory (AD). Meanwhile, Samba 4, which adds a free reimplementation of AD on Linux, has been increasingly ready for deployment. Three short talks at FOSDEM 2018 provided three different views of Samba 4, also known as Samba-AD, and left behind a pretty clear picture that Samba 4 is truly ready for use. I will cover the first two talks in this article, and the third in a later one.
  • A report from the Enigma conference
    The 2018 USENIX Enigma conference was held for the third time in January. Among many interesting talks, three presentations dealing with human security behaviors stood out. This article covers the key messages of these talks, namely the finding that humans are social in their security behaviors: their decision to adopt a good security practice is hardly ever an isolated decision. Security conferences tend to be dominated by security researchers demonstrating their latest exploits. The talks are attack-oriented, they keep a narrow focus, and usually they close with a dark outlook. The security industry has been doing security conferences like this for twenty years and seems to prefer this format. Yet, if you are tired of this style, the annual USENIX Enigma conference is a welcome change of pace. Most of the talks are defense-oriented, they have a horizon going far beyond technology alone, and they are generally focused on successful solutions.
  • DIY biology
    A scientist with a rather unusual name, Meow-Ludo Meow-Meow, gave a talk at linux.conf.au 2018 about the current trends in "do it yourself" (DIY) biology or "biohacking". He is perhaps most famous for being prosecuted for implanting an Opal card RFID chip into his hand; the Opal card is used for public transportation fares in Sydney. He gave more details about his implant as well as describing some other biohacking projects in an engaging presentation. Meow-Meow is a politician with the Australian Science Party, he said by way of introduction; he has run in the last two elections. He founded BioFoundry, which is "Australia's first open-access molecular biology lab"; there are now two such labs in the country. He is also speaks frequently as "an emerging technology evangelist" for biology as well as other topics.
  • Notes from FAST18

    I attended the technical sessions of Usenix's File And Storage Technology conference this week. Below the fold, notes on the papers that caught my attention.

Security: Vista10 and uTorrent Holes Found by Google

  • Google drops new Edge zero-day as Microsoft misses 90-day deadline

    Google originally shared details of the flaw with Microsoft on 17 November 2017, but Microsoft wasn’t able to come up with a patch within Google’s non-negotiable “you have 90 days to do this” period.

  • Google Goes Public with Another Major Windows 10 Bug
    After revealing an Edge browser vulnerability that Microsoft failed to fix, Google is now back with another disclosure, this time aimed at Windows 10 Fall Creators Update (version 1709), but potentially affecting other Windows versions as well. James Forshaw, a security researcher that’s part of Google’s Project Zero program, says the elevation of privilege vulnerability can be exploited because of the way the operating system handles calls to Advanced Local Procedure Call (ALPC). This means a standard user could obtain administrator privileges on a Windows 10 computer, which in the case of an attack, could eventually lead to full control over the impacted system. But as Neowin noted, this is the second bug discovered in the same function, and both of them, labeled as 1427 and 1428, were reported to Microsoft on November 10, 2017. Microsoft said it fixed them with the release of the February 2018 Patch Tuesday updates, yet as it turns out, only issue 1427 was addressed.
  • uTorrent bugs let websites control your computer and steal your downloads

    The vulnerabilities, according to Project Zero, make it possible for any website a user visits to control key functions in both the uTorrent desktop app for Windows and in uTorrent Web, an alternative to desktop BitTorrent apps that uses a web interface and is controlled by a browser. The biggest threat is posed by malicious sites that could exploit the flaw to download malicious code into the Windows startup folder, where it will be automatically run the next time the computer boots up. Any site a user visits can also access downloaded files and browse download histories.

  • BitTorrent Client uTorrent Suffers Security Vulnerability (Updated)

    BitTorrent client uTorrent is suffering from an as yet undisclosed vulnerability. The security flaw was discovered by Google security researcher Tavis Ormandy, who previously said he would reveal a series of "remote code execution flaws" in torrent clients. BitTorrent Inc. has rolled out a 'patch' in the latest Beta release and hopes to fix the stable uTorrent client later this week.