Language Selection

English French German Italian Portuguese Spanish

April 2017

today's leftovers

Filed under
Misc

Leftovers: Software

Filed under
Software
  • The Atom Editor

    I didn’t set out to write a blog post about a text editor. I was going to write about one of the other awesome projects that the Ops team is doing here at Wombat. Along the way I decided to give Atom a chance again and I’m glad I did. I enjoyed it enough that I thought I would defer my post about automating my “Ops Environment” on a mac (I promise, I’ll do that one soon-ish) in favor of this.

  • Quick Update: ClipGrab and PlayOnLinux Applications Are Now Available For ALL Ubuntu Versions

    ClipGrab is fairly popular application to download video from famous sites of the Internet. It allows you to search video with in application and select to download the video or other way you can copy and paste the video URL to the application to download the video. Since famous video sites are supported by this application, if some site isn't officially supported, you may still be able to download the videos from it.

  • aTunes Enriched Audio Player Now Available For All Current Ubuntu/Linux Mint Versions

    There are wide variety of audio players available for Linux and you may have your favorite one installed on your system. aTunes is not new audio player but its initial release was way back in 2006 and the most recent version was released in June, 2014. In almost two years there is no news on the website or release from developers, well it is open-source released under GPL-V2 license and we don't see any other to carry on the development of this great application. It is written in Java programming language and it's cross-platform available for Linux, Unix, Windows and Mac. It uses Mplayer as its playback engine and supports wide variety of known formats such as: MP3, Ogg Vorbis, FLAC, WMA and other formats.

QNX 7 Can Be Fitted With A Qt5 Desktop

Filed under
OS
  • QNX 7 Can Be Fitted With A Qt5 Desktop

    While QNX remains targeted as an operating system for mobile/embedded solutions, a BlackBerry developer in his spare time has fitted QNX 7 with a Qt5 desktop.

    QNX 6 and prior had a desktop option, but was removed in QNX 7, which was released this past March. QNX 7.0 also brought support for 64-bit (and maintaining 32-bit) Intel x86 and ARM platforms along with C++14 support. For those wanting to experiment with QNX 7, a BlackBerry kernel developer has been working on making this operating system more desktop friendly.

  • Building a BlackBerry QNX 7 Desktop

    Having Qt allowed me to port one of my favourite applications, SpeedCrunch. It was a simple matter of running ‘qmake’ followed by ‘make’. Next, I ported the QTermWidget library so that I could have terminal windows.

Kernel Space/Linux

Filed under
Linux
  • Kernel explained
  • [Older] [Video] Audio on Linux: The End of a Golden Age?
  • State of Sway April 2017

    Development on Sway continues. I thought we would have slowed down a lot more by now, but every release still comes with new features - Sway 0.12 added redshift support and binary space partitioning layouts. Sway 0.13.0 is coming soon and includes, among other things, nvidia proprietary driver support. We already have some interesting features slated for Sway 0.14.0, too!

    Today Sway has 21,446 lines of C (and 4,261 lines of header files) written by 81 authors across 2,263 commits. These were written through 653 pull requests and 529 issues. Sway packages are available today in the official repos of pretty much every distribution except for Debian derivatives, and a PPA is available for those guys.

Supporting Burning Platforms

Filed under
GNU
Linux
Microsoft
  • Surface revenue does a U-boat, and dives

    Revenue generated by Microsoft's Surface hardware during the March quarter was down 26% from the same period the year before, the company said yesterday as it briefed Wall Street.

    For the quarter, Surface produced $831 million, some $285 million less than the March quarter of 2016, for the largest year-over-year dollar decline ever.

  • Acer said to me: "do not use our products with Linux. Find another manufacturer"

    Last year, I bought an Acer notebook and it came with Windows 10.

    As I didn't want spyware neither bloatware, I got Linux installed and asked for a refund of the OEM license. After a little of talking, they were wanting to charge me US$100 (to remove the license, which I already had wiped, as I got FDE Linux installed) to refund US$70 of the OEM license.

    This year, wondering to buy a new Acer notebook, I asked them again if they would refund me the OEM license without all the hassle (as they did pay me the US$70, without me having to pay the US$100).

Leftovers: OSS

Filed under
OSS
  • LibreOffice the better Office, really?
  • A serious bug in GCC

    This post is to inform you about a bug in GCC that may cause memory (or other resource) leaks in your valid C++ programs.

  • [Older] Supporting Bangladesh’s software industry with Indian cooperation

    It’s worth noting that the word “free” in free/open-source software implies not just free of cost, but also freedom from commercial dependence upon multi-national software vendors.

    To emphasise this, the biography of Richard Stallman, the founder of the free software movement which ultimately produced the Linux operating system, is titled Free as in Freedom.

    In fact, it is impossible to run a modern government without computers; so it should not be acceptable that sovereign nations like Bangladesh be forever dependent on foreign IT vendors, especially when the Linux alternative offers both freedom and zero-cost.

Security Leftovers

Filed under
Security
  • Is there any way to truly secure Docker container contents?

    All this adds up to a lot of work, which is not taken care of for you by default in Docker. It is no surprise that many Docker images are insecure, given this picture. The unfortunate reality is that many Docker containers are running with known vulnerabilities that have known fixes, but just aren’t, and that’s sad.

  • Compromise recovery on Qubes OS

    Occasionally fuckups happen, even with Qubes (although not as often as some think).

    What should we – users or admins – do in such a situation? Patch, obviously. But is that really enough? What good is patching your system if it might have already been compromised a week earlier, before the patch was released, when an adversary may have learned of the bug and exploited it?

    That’s an inconvenient question for many of us – computer security professionals – to answer. Usually we would mutter something about Raising the Bar(TM), the high costs of targeted attacks, attackers not wanting to burn 0-days, or only nation state actors being able to afford such attacks, and that in case one is on their list of targets, the game is over anyway and no point in fighting. Plus some classic cartoon.

    While the above line of defense might work (temporarily), it really doesn’t provide for much comfort, long term, I think. We need better answers and better solutions. This post, together with a recently introduced feature in Qubes OS 3.2 and (upcoming) 4.0, is an attempt to offer such a solution.

  • Top 5 Kali Linux Pentest tools for WiFi/network and exploits
  • Linux/Shishiga Malware Brute-Forces SSH Credentials

    A new strain of Linux malware has been detected. Dubbed Linux/Shishiga, the malware could transform into a dangerous piece of malware. Linux/Shishiga was officially discovered and examined by researchers at Eset.

  • Cybercriminals have taken notice of leaked government spying techniques
  • Microsoft Closes Word/Wordpad Hole—6 Months after Report
  • [Older] The Pentagon’s Bug Bounty Program Should Be Expanded to Bases, DOD Official Says [iophk: "any version of Windows at all is inappropriate"]

    “About 75 percent of the devices that are control systems are on Windows XP or other nonsupported operating systems,” said Daryl Haegley, program manager for the Office of the Assistant Secretary of Defense for Energy, Installations and Environment.

    [...]

    “A lot of these systems are still Windows 95 or 98, and that’s OK—if they’re not connected to the internet,” Haegley added.

  • Don’t Info Op Until You See The Whites of Their Eyes
  • CFP P70

    This is the official CFP for P70.

  • VM escape - QEMU Case Study

    In this paper, we provide a in-depth analysis of CVE-2015-5165 (a memory-leak vulnerability) and CVE-2015-7504 (a heap-based overflow vulnerability), along with working exploits. The combination of these two exploits allows to break out from a VM and execute code on the target host. We discuss the technical details to exploit the vulnerabilities on QEMU's network card device emulation, and provide generic techniques that could be re-used to exploit future bugs in QEMU.

  • CIA’s anti-leaking tool leaked as ‘whistleblowers watch the watchers’

    Former MI5 intelligence officer Annie Machon and retired US Army Colonel Ann Wright, who is also a retired US State Department official, shared their views on these and other questions with RT.

    On Friday, WikiLeaks released a series of documentations on a US Central Intelligence Agency (CIA) project known as ‘Scribbles,’ which was allegedly created to allow ‘web beacon’ tags to be embedded “into documents that are likely to be copied.”

    WikiLeaks began publishing a huge cache of secret documents on the CIA named ‘Vault 7’ in March.

  • Vault 7: CIA tool to track people through Word docs released

    The documentation says: "Scribbles (SCRIB) is a document watermarking tool that can be used to batch process a number of documents in a pre-seeded input directory. It generates a random watermark for each document, inserts that watermark into the document, saves all such processed documents in an output directory, and creates a log file which identifies the watermarks inserted into each document."

    It says the tool was successfully tested on Office 2013 (on Windows 8.1 x64), documents from Office versions 97-2016 (Office 95 documents will not work!) and documents that are not locked forms, encrypted, or password-protected.

    There is a limitation to the Scribbles system: if a document that has the watermarks in it and is opened in OpenOffice, LibreOffice the watermark images and URLs may become visible.

  • The US Takes On the World in NATO’s Cyber War Games

    Last year, Capt. Sean Ruddy and his team of operator-soldiers from the US Cyber Brigade entered a Locked Shields, a NATO-organized cyber-defense war game that pits teams from dozens of countries against “live-fire” attacks. It was their first time. And of the 19 countries represented, the US finished dead last. This week, they got their shot at redemption.

Anbox Runs Android In Your Linux Without Emulation

Filed under
Linux

​In a recent article, we talked about android emulators for Ubuntu or Linux in general. Most of the time we need to play a game or try some applications on android or even when we don’t have a smartphone we opt to use an emulator to try applications. A fan on facebook let us know about Anbox and asked for the tutorial on Anbox installation in Linux. So here you have how to install Anbox in Linux.

Read<br />
more

More in Tux Machines

today's leftovers

  • How Software Is Helping Big Companies Dominate
    Antitrust deserves the attention it’s getting, and the tech platforms raise important questions. But the rise of big companies — and the resulting concentration of industries, profits, and wages — goes well beyond tech firms and is about far more than antitrust policy. In fact, research suggests that big firms are dominating through their use of software. In 2011, venture capitalist Marc Andreessen declared that “software is eating the world.” Its appetizer seems to have been smaller companies. [...] This model, where proprietary software pairs with other strengths to form competitive advantage, is only becoming more common. Years ago, one of us (James) started a company that sold publishing software. The business model was to write the software and then sell licenses to publishers. That model still exists, including in online publishing where companies like Automattic, maker of the open source content management system WordPress, sell hosting and related services to publishers. One-off licenses have given way to monthly software-as-a-service subscriptions, but this model still fits with Carr’s original thesis: software companies make technology that other companies pay for, but from which they seldom derive unique advantage. That’s not how Vox Media does it. Vox is a digital publishing company known, in part, for its proprietary content management system. Vox does license its software to some other companies (so far, mostly non-competitors), but it is itself a publisher. Its primary business model is to create content and sell ads. It pairs proprietary publishing software with quality editorial to create competitive advantage. Venture capitalist Chris Dixon has called this approach the “full-stack startup.” “The old approach startups took was to sell or license their new technology to incumbents,” says Dixon. “The new, ‘full stack’ approach is to build a complete, end-to-end product or service that bypasses incumbents and other competitors.” Vox is one example of the full-stack model. The switch from the software vendor model to the full-stack model is seen in government statistics. Since 1998, the share of firm spending on software that goes to pre-packaged software (the vendor model) has been declining. Over 70% of the firms’ software budgets goes to code developed in-house or under custom contracts. And the amount they spend on proprietary software is huge — $250 billion in 2016, nearly as much as they invested in physical capital net of depreciation.
  • Metsä Wood - Open Source Wood Winner: ClipHut Structural Building System
  • Shutting the open sauce bottle
    While open source software has revolutionised the enterprise software world, a few people are starting to wonder if its very nature will survive the age of the cloud. The concept that software can be used by pretty much anyone for pretty much anything is causing its developers big problems in the era of distributed cloud computing services. Two open-source software companies have decided to alter the licences under which some of their software is distributed, with the expressed intent of making it harder -- or impossible -- for cloud computing providers to offer a service based around that software.
  • How do we handle and use such enormous amounts of data?
    How many gigabytes of data did we (the people of Earth) create yesterday? ...brain. is. thinking... More than 2.5 billion! And it's growing. Yes, it's hard for us to wrap our human brains around it. So, the question the Command Line Heros podcast deals with this week is: How do we handle and use such enormous amounts of data?
  • Security updates for Tuesday

Linux Leftovers

  • Sorry, Linux. Kubernetes is now the OS that matters [Ed: Mac Asay does't know what an operating system is. This is what happens when people with a law degree write about technology. And he trolls Linux for clicks.]
  • Clear Linux Making Progress With Encrypted Installations
    One of the features I've personally been looking forward to is the official support for encrypted installations with Clear Linux. While many don't view it as a particular desktop distribution, it does have all of the packages I personally need for my main production system. So I've been wanting to see how well it could work out as my main desktop OS and to chronicle that experience. Having official support for encrypted installations has been one of the last blockers for my requirements. You can currently setup Clear on an encrypted installation manually, but for simplicity and wanting to keep to the "official" installation routes, I've been waiting for them to officially support encrypted installs... Especially in this day and age, anyone installing a desktop Linux distribution particularly on a mobile/laptop/ultrabook should really be doing a full-disk encryption.
  • The Linux Throwie: A Non-Spacefaring Satellite
    Throwies occupy a special place in hardware culture — a coin cell battery, LED, and a magnet that can be thrown into an inaccessible place and stick there as a little beacon of colored light. Many of us will fondly remember this as a first project. Alas, time marches inevitably on, and launching cheerful lights no longer teaches me new skills. With a nod to those simpler times, I’ve been working on the unusual idea of building a fully functional server that can be left in remote places and remain functional, like a throwie (please don’t actually throw it). It’s a little kooky, yet should still deliver a few years of occasional remote access if you leave it somewhere with sunlight.
  • OnePlus To Launch 5G Phone In 2019; $100 Costlier Than OnePlus 6T
  • OnePlus Releases OxygenOS Open Beta 7, OnePlus Roaming Launched
    Chinese company OnePlus has released the new OxygenOS Open Beta 7 for its OnePlus 6 smartphone, which has introduced several updates and features.

OSS: Development and Conferences

  • Give your students edit access to their course syllabus
    I wanted to give students more agency in their learning. So I let them make pull requests against the syllabus. [...] This exercise was a learning experience for both my students and me, as we clearly had different visions of what constituted a "disruption." While we all agreed that students should pay attention to the instructor and engage in all classroom activities, students thought they should be able to take "important" calls during class time and that texting during class was acceptable. I thought that cell phones should be turned off entirely during class. Students also thought that leaving the classroom to get a drink without asking permission was acceptable, while I thought that they should handle thirst needs before or after class. This resulted in a discussion about professionalism and the expectations associated with college-level work. We discussed what constituted a distraction and agreed that making sounds, whispering, and talking in class all counted as distractions. This in turn led to a discussion of the impacts distractions can have on a learning environment and the importance of paying attention in class. We also explored the impact various learning technologies can have on a classroom—for example, the tools students with disabilities require to fully participate in class, such as a screen reader—and agreed that noise generated by these was acceptable under the policy we intended to construct.
  • Open source tools to consider for your RESTful APIs
    At the start of a RESTful API development project, a software team might be tempted to buy an expensive commercial API management tool when an open source tool can just as easily do the trick. In fact, there are plenty of open source tools that can help with each stage of the API lifecycle and help get an API development program off the ground at low cost.
  • London Perl Workshop

    As london.pm celebrates its 20th anniversary, join Katherine Spice in conversation with a panel of the group's former leaders.

  • GNOME at Capitole du Libre 2018
    Last Saturday and Sunday I went to the Capitole du Libre 2018 to animate the GNOME booth and help on the Purism one.
  • Find Out the Visa Requirements to Attend oSC19
    For people planning on attending the openSUSE Conference 2019 in Nuremberg, Germany, from May 24 – 26, there are certain requirements necessary to receive a visa for those who are not a citizen of a Schengen country.

Red Hat/IBM: OpenShift and Ansible, RHEL Updates