Language Selection

English French German Italian Portuguese Spanish

January 2018

today's leftovers

Filed under
Misc
  • Open Source Security Podcast: Episode 80 - GPS tracking and jamming
  • How to add a repository on your Linux machine
  • Modify SVG using GSVGtk: First Repor

    GSVGtk is a library to provide GTK+ widgets you can use to access SVG files. It is powered by GSVG, in a way it can access each shape and its properties using a GObject API based on W3C SVG 1.1 specification.

    Currently, GSVGtk uses Clutter to encapsulate SVG shapes, render them inside Clutter Actors, through librsvg, and maps events to source SVG in order to eventually modify original definitions, like its position.

    In the following video, you can see GSVGtk’s Container based on Clutter, loading an SVG file, take some shapes from it to show on the scene.

  • logo.png for default avatar for GitLab repos

    I added a logo.png to GNOME Tweaks at GNOME and it automatically showed up in Salsa when I imported the new version.

  • What’s New in Peppermint OS 8 Respin

    Peppermint OS 8 respin is the latest release of Peppermint OS Linux Distribution. This release based on Ubuntu 16.04 LTS (Xenial Xerus), powered by linux kernel 4.10 series, using LXDE desktop environment with new “Pepirus” xfwm4, GTK+ and icon themes. Also, brings 64 bit and 32 bit installation images. The 64 bit release provides complete support for UEFI systems and secure boot.

  • Imagine the world's biggest Kanban / Scrumboard

    Imagine a Kanban board that could aggregate issues from multiple backends, including your CalDAV task list, Bugzilla systems (Fedora, Mozilla, GNOME communities), Github issue lists and the Debian Bug Tracking System, visualize them together and coordinate your upstream fixes and packaging fixes in a single sprint.

    [...]

    If you'd like to see this or any of the other proposed projects go ahead, you don't need to be a Debian Developer to suggest ideas, refer a student or be a co-mentor. Many of our projects have relevance in multiple communities. Feel free to get in touch with us through the debian-outreach mailing list.

The Linux Foundation is Growing

Filed under
Linux
  • Linux Foundation fights fragmentation with network umbrella

    Open source platforms are becoming more and more fundamental to the new telecoms network architecture, raising exciting prospects for a more democratic ecosystem and rapid innovation. But open source also comes with the risk of fragmentation, which has already been seen in industry splits over different approaches to management and orchestration (MANO) in virtualized networks. A large number of open projects has emerged in the areas of virtualization, software-defined networking (SDN), MANO and even telecoms hardware initiatives like Facebook’s OpenCellular.

  • The Linux Foundation Announces 30 New Silver Members

    The Linux Foundation, the nonprofit organization enabling mass innovation through open source, announced the addition of 30 Silver members. Linux Foundation members help support development of the greatest shared technology resources in history, while accelerating their own innovation through open source leadership and participation.

Red Hat and Fedora Leftovers

Server: Microservices, Replika, STORK, OpenStack

OSS Leftovers

Filed under
OSS
  • India's RJio Plots Open Source Disruption

    Owned by Indian billionaire Mukesh Ambani, the telco believes that it is high time India developed products and services tailored specifically to the Indian market. "If you observe, a lot of effort has been put into the IT space [in India], but what has not happened is a focused effort [for innovation] in the telecom space," says Matthew Oommen, RJio's president of networks, global strategy and service development, on the sidelines of India's recent Digital Open Summit.

  • Open Source Initiative Turns 20

    The Open Source Initiative (OSI) will celebrate its 20th anniversary on Friday, Feb. 2, and the global non-profit organization dedicated to raising awareness and adoption of open source software is gonna par-tay. By which I mean, the OSI has scheduled activities around the world this year to commemorate the event. (I'm hoping there will be snacks.)

  • Swatantra17

    Last month Thiruvananthapuram witnessed one of the biggest Free and Open Source Software conference called Swatantra17. Swatantra is a flagship triennial ( actually used to be triennial, but from now on organizers decided to conduct in every 2 years.) FOSS conference from ICFOSS. This year there were more than 30 speakers from all around the world. The event held from 20-21 December at Mascot hotel, Thiruvananthapuram. I was one of the community volunteer for the event and was excited from the day it announced Smile .

  • DO or UNDO - there is no VACUUM

    To put this another way, it is in general true that PostgreSQL’s VACUUM implementation has gotten progressively better at reclaiming space occupied by dead tuples more quickly and with less expenditure of effort. And that’s really good, because the faster you reclaim space, the less new space you end up allocating, which keeps tables small and performance high. However, the examples above show that VACUUM isn’t the whole problem. In these examples, even if VACUUM ran at the earliest instant when it could reclaim the space occupied by dead tuples and ran infinitely fast, the table would still become bloated. In the case where the bloat is caused by many short queries run while one long-running transaction remains open, we could, with smarter snapshot management, limit the worst-case bloat to approximately a factor of two -- that is, we’d keep the version of the tuple visible to the old snapshot and the current version, and discard the intermediate versions, a trick PostgreSQL currently can’t manage. However, even a factor of two is a lot, and what if there are multiple distinct open snapshots?  Further, in the case where the bloat is created by a SQL statement that induces scattered updates throughout the table, no improvement to VACUUM can possibly help. By the time that SQL statement finishes, the damage is already done.

  • Scratch group projects – 2018

    Once again, it’s time for this year’s Scratch projects from my grade 10 students. Up next is python, but their final projects are available at https://scratch.lesbg.com. Feel free to play them and rate them. This is a first attempt for students, so do please be gentle on the ratings.

  • Why Create a New Unix Shell?

FSF and GNU Debugger (GDB) 8.1

Filed under
GNU
  • Free Software Foundation was gifted 91 bitcoin

    The Free Software Foundation, has announced that it received its largest donation ever, 91.45 bitcoin from an anonymous entity called Pineapple Fund. The 91.45 bitcoin, at the time of payment, was roughly equal to $1 million. The Free Software Foundation is an organisation that promotes the concept of free software, which is defined by the ‘four essential freedoms’.

  • GDB 8.1 released!

    Release 8.1 of GDB, the GNU Debugger, is now available via anonymous FTP.  GDB is a source-level debugger for Ada, C, C++, Objective-C, Pascal and many other languages.  GDB can target (i.e., debug programs running on) more than a dozen different processor architectures, and GDB itself can run on most popular GNU/Linux, Unix and Microsoft Windows variants.

  • GDB 8.1 Debugger Brings Better Rust Support, Improved Python Scripting

    Version 8.1 of the GNU Debugger (GDB) is now available for developers.

    The GDB 8.1 debugger update brings Python scripting enhancements, improved Rust language support, breakpoints on C++ functions are now set on all scopes by default, a number of new commands have been added, the GDBserver has received a few enhancements, there is better auto-completion support for this debugger, and a variety of other improvements to help developers debug their code in a variety of languages.

  • GDB 8.1 released

    Version 8.1 of the GDB debugger is out. Changes include better support for the Rust language and various other improvements to make debugging easier; see the announcement and the news file for the full list.

Security: Updates, Google, Hacking Team, Microsoft-NSA, Django

Filed under
Security
  • Security updates for Wednesday
  • How Did Google Wipe Out 700,000 Malicious Android Apps From Play Store? Using Artificial Intelligence
  • Hacking Team Is Still Alive Thanks to a Mysterious Investor From Saudi Arabia

    The 2015 breach of spyware vendor Hacking Team seemed like it should have ended the company. Hacking Team was thoroughly owned, with its once-secret list of customers, internal emails, and spyware source code leaked online for anyone to see. But nearly three years later, the company trudges on, in large part thanks to a cash influx in 2016 from a mysterious investor who had been publicly unknown until now.

    The hack hurt the company’s reputation and bottom line: Hacking Team lost customers, was struggling to make new ones, and several key employees left. Three years later—after the appearance of this new investor—the company appears to have stopped the bleeding. The company registered around $1 million in losses in 2015, but bounced back with around $600,000 in profits in 2016.

    Motherboard has learned that this apparent recovery is in part thanks to the new investor, who appears to be from Saudi Arabia—and whose lawyer’s name matches that of a prominent Saudi attorney who regularly works for the Saudi Arabian government and facilitates deals between the government and international companies.

  • NSA exploit EternalBlue is back and powering WannaMine cryptojacking malware

    SAY HELLO to WannaMine, the cryptojacking malware that's using leaked NSA hacking tools to infiltrate computers and syphon processor power to crunch calculations needed to 'mine; cryptocurrencies.

    But first a history lesson. You may remember the EternalBlue, a Windows exploit developed by the NSA that was leaked by hacking group Shadow Brokers.

    Pretty soon after the exploit was used to launch the massive WannaCry ransomware attack that locked down NHS systems and affected some 230,000 computers across 150 countries. EternalBlue was then used to spearhead the arguably more dangerous NotPetya attacks.

  • Johnny Hacker hauls out NSA-crafted Server Message Block exploits, revamps 'em

    EternalBlue, EternalSynergy, EternalRomance and EternalChampion formed part of the arsenal of NSA-developed hacking tools that were leaked by the Shadow Brokers group before they were used (in part) to mount the devastating NotPetya cyber attack.

    [...]

    "After that, the exploit module will drop to disk (or use a PowerShell command), explains zerosum0x0, and then copy directly to the hard drive."

  • 10 tips for making the Django Admin more secure

    Offloading the responsibility for making your app secure onto QA testers or an information security office is tempting, but security is everyone's responsibility. The Django Admin is one of our favorite features of Django, but unless it's locked down correctly, it presents opportunities for exploitation. To save your users from compromised data, here are 10 tips to make the Django Admin more secure.

11 Myths About the RISC-V ISA

Filed under
Hardware
OSS

Despite its rich ecosystem and growing number of real-world implementations, misconceptions about RISC-V are keeping companies around the world from fully realizing its benefits.

Read more

Mozilla: Rust, Privacy and More

Filed under
Moz/FF
  • Where’s Rust headed in 2018? Ask the community.

    2017 was a big year for the Rust systems programming language. Now, members of the open source project are looking to consolidate last year’s progress – making Rust easier to learn and use – and publish the first major update to the stable 2015 Rust release.

    “We’re making Rust a much nicer place to be,” said Aaron Turon, a Rust core team member and engineering manager at Mozilla. “We’re working to create a more productive environment for programmers – especially those new to the language.”

  • The 2018 Rust Event Lineup

    Every year there are multiple Rust events around the world, bringing together the community. Despite being early in the year, we’re excited to be able to highlight several events that are already being organized!

  • This Week in Rust 219

    Hello and welcome to another issue of This Week in Rust! Rust is a systems language pursuing the trifecta: safety, concurrency, and speed. This is a weekly summary of its progress and community. Want something mentioned? Tweet us at @ThisWeekInRust or send us a pull request. Want to get involved? We love contributions.

  • Retrospective: Looking Glass

    In December, we launched a tv show tie-in with Mr. Robot, Looking Glass, that alarmed some people because we didn’t think hard enough about the implications of shipping an add on that had the potential to be both confusing and upsetting. We’re deeply sorry for this and we understand why it’s important for us to learn and grow from this experience. As mentioned last month, we conducted a post-mortem to better understand how and why this happened and how we can do better.

  • Mozilla Reps Community: Rep of the Month – December 2017
  • Mozilla Security Blog: Preventing data leaks by stripping path information in HTTP Referrers

    To help prevent third party data leakage while browsing privately, Firefox Private Browsing Mode will remove path information from referrers sent to third parties starting in Firefox 59.

More in Tux Machines

Software and Games Leftovers

  • LXD Weekly Status #35
    This past week we’ve been focusing on a number of open pull requests, getting closer to merging improvements to our storage volume handling, unix char/block devices handling and the massive clustering branch that’s been cooking for a while. We’re hoping to see most of those land at some point this coming week. On the LXC side of things, the focus was on bugfixes and cleanups as well as preparing for the removal of the python3 and lua bindings from the main repository. We’re also making good progress on distrobuilder and hope to start moving some of our images to using it as the build tool very soon.
  • Performance Co-Pilot 4.0.0 released
    It gives me great pleasure to announce the first major-numbered PCP release in nine and a half years - PCP v4 - is here!
  • Performance Co-Pilot Sees First Major Version Bump In Nearly A Decade
    The Performance Co-Pilot open-source cross-platform monitoring/visualizing stack has reached version 4.0 as its first major version hike in almost ten years.
  •  
  • Sci-fi mystery 'The Station' has released, it’s a short but memorable experience
    What would happen if we discovered the existence of alien life? A question I've often asked and a question many games, films and books have covered in great detail. The Station [Steam] is a sci-fi mystery that sees you investigate The Espial, a space station sent to research a sentient alien civilization.
  • Halcyon 6: The Precursor Legacy DLC released, some good content for a small price
    Halcyon 6: The Precursor Legacy DLC [GOG, Steam] was released earlier this month, adding some really nice content at a small price to an already great game.
  • Parry and dodge your way to victory in 'Way of the Passive Fist', launching March 6th
    Way of the Passive Fist [Steam, Official Site] is a rather unique and very colourful arcade brawler and it's releasing with Linux support on March 6th.

KDE and GNOME Leftovers

  • Kdenlive Café tonight and beta AppImage
    The last months for Kdenlive have been very quiet from the outside – we were not very active on the bugtracker, did not make a lot of announcements, and the 17.12.x release cycle only contained very few minor bugfixes. The main reason for this was the huge work that went behind the scenes for a major code refactoring that was required to allow further developments. So after more than a year working on it, we hope to get ready for the 18.04 release!
  • [Krita] Interview with Christine Garner
    I did Archaeology in University and I love history, mythology, folklore and nature. I’ve always been drawing from an early age. I graduated in 2003 with an archaeology degree. I taught myself digital art and web coding skills for fun and practical reasons. I used to do self-employed web design and admin type jobs, but in 2013 I became disillusioned with my life and had depression. I took a Foundation art course in 2013 deciding to pursue my artistic passions instead.
  • Qt 5.11 Brings New Accessibility Backend on Windows
    Accessibility technology encompasses assistive tools such as screen readers, magnifiers and braille displays, as well as APIs and frameworks that allow applications to expose elements of their UI to such tools.
  • CSS Grid
    This would totally have been a tweet or a facebook post, but I’ve decided to invest a little more energy and post these on my blog, accessible to everybody. Getting old, I guess. We’re all mortal and the web isn’t open by its own. In the past few days I’ve been learning about CSS grid while redesigning Flatpak and Flathub sites (still coming). And with the knowledge of really grokking only a fraction of it, I’m in love.

OSS: Project Names, Events, NSF and Mozilla, ArangoDB, Oracle, Bitcoin and More

  • Choosing project names: 4 key considerations
    Working on a new open source project, you're focused on the code—getting that great new idea released so you can share it with the world. And you'll want to attract new contributors, so you need a terrific name for your project. We've all read guides for creating names, but how do you go about choosing the right one? Keeping that cool science fiction reference you're using internally might feel fun, but it won't mean much to new users you're trying to attract. A better approach is to choose a name that's memorable to new users and developers searching for your project. Names set expectations. Your project's name should showcase its functionality in the ecosystem and explain to users what your story is. In the crowded open source software world, it's important not to get entangled with other projects out there. Taking a little extra time now, before sending out that big announcement, will pay off later.
  • FOSDEM 2018 Community DevRoom Recap: Simon Phipps & Rich Sands
    It’s been a few weeks now since FOSDEM and if you didn’t have a chance to attend or watch the  livestream of the FOSDEM 2018 Community DevRoom, Leslie my co-chair, and I are doing a round up summary on posts on each of the talks to bring you the video and the highlights of each presentation. You can read the preview post of Rich Sands and Simon Phipps pre FOSDEM blog post here.
  • Scheduling Voxxed Days Zurich 2018 with OptaPlanner
    My name is Mario Fusco and I’m honored to be the Program Committee Lead of Voxxed Days Zurich for the third year in a row. Reading, evaluating, discussing, and selecting from the 200+ proposals that arrive every year is a long and challenging process. I must admit, I largely underestimated the task the first year I started doing it. It’s necessary to evaluate not only the quality of every submission, but also how they fit together. In the end, the worst part is having to reject so many incredible proposals because there are a limited number of slots. However, once all the talks have been selected and all the approval and rejection emails have been sent, the process is still not complete. Now it is time to take all the accepted talks and schedule the actual program. Even for a moderate sized event like Voxxed Days Zurich (the conference lasts only one day and we have four parallel tracks), this is not a trivial task. There are many constraints and nice-to-haves that you may need to consider. For example, some speakers will arrive late in the morning or will have to leave early in the afternoon.  Some talks require different room capacities.  Two talks belonging to the same track must not be scheduled at the same time. There are many more variables to this process.
  • 20 Big Ideas to Connect the Unconnected
    Last year, the National Science Foundation (NSF) and Mozilla announced the Wireless Innovation for a Networked Society (WINS) challenges: $2 million in prizes for big ideas to connect the unconnected across the U.S. Today, we’re announcing our first set of winners: 20 bright ideas from Detroit, Cleveland, Albuquerque, New York City, and beyond. The winners are building mesh networks, solar-powered Wi-Fi, and network infrastructure that fits inside a single backpack. Winning projects were developed by veteran researchers, enterprising college students, and everyone in-between. What do all these projects have in common? They’re affordable, scalable, open-source, and secure.
  • ArangoDB publishes industry-wide open source NoSQL performance benchmark
    ArangoDB, a provider of native multi-model NoSQL database solutions, announced the latest findings of its open source NoSQL performance benchmark series. To enable vendors to respond to the results and contribute improvements, ArangoDB has published the necessary scripts required to repeat the benchmark.
  • Can one 'multi-model' database rule them all?
    ArangoDB open source NoSQL performance benchmark series is one such open study.
  • Oracle-Supported Port of DTrace?, Linux Foundation Announces Akraino, New Feral Interactive Game and Qt 5.11 Alpha
    For those of us who have been holding out to see an Oracle-supported port of DTrace on Linux, that time is nearly here. Oracle just re-licensed the system instrumentation tool from the original CDDL to GPLv2.
  • Kernel patch releases, WineHQ, OpenIndiana project, FreeBSD Unix distribution, Xubuntu community contest
    The OpenIndiana project is still alive and well with a recent announcement of migrating the project to GCC 6.4. Unfortunately, this version does not cover the Spectre/Meltdown vulnerabilities, although the next version planned is 7.3 which will cover these hot issues.
  • Satoshi’s Vision? Bitcoin Cash Gets It Wrong, Says Max Keiser
    The movement was formally founded in 1983 by Richard Stallman with the launch of the GNU Project, which was founded on the idea that proprietary software harms users to the benefit of large corporations.
  • Bitcoin's Developers Are Debating A Change To Its Open License
    Ever since its launch last August, bitcoin has had an antagonistic relationship with its offshoot, bitcoin cash. But their battle may have provided a trigger to seek ways to protect bitcoin’s core code from indiscriminate use.
  • A new Maryland bill would allow students to buy textbooks tax-free twice a year [Ed: This is a reaction to open-source (Open Access) books and maybe an attempt to extinguish such state-level initiatives]
    University of Maryland student Kayla Little has wanted to be a doctor since she was 11 years old — but a nationwide rise in textbook prices has proved to be an obstacle to her success. "I've wanted to go into medicine for the longest [time], and I really don't want to give that up for books," said Little, who hopes to go to medical school and become an orthopedic surgeon for a professional sports team.
  • How the Grateful Dead were a precursor to Creative Commons licensing
    From its founding in 1965, the Grateful Dead was always an unusual band. Rising amidst the counterculture movement in the San Francisco Bay Area, the Grateful Dead’s music had roots in multiple styles and genres but did not lend itself to easy categorization. Was it psychedelic? Folk? Blues? Country? Yes, it was all of these and more. The band frequently performed well-known public domain songs, but they made the songs their own. Members of the band could effortlessly play across traditional and diverse styles. At concerts, they often performed songs that sounded familiar at first but grew and evolved across styles and genres. Songs often turned into lengthy jam sessions in which musicians played off one another, discovering new musical motifs and expanding them together.

Rust things I miss in C and learning to program is getting harder

  • Rust things I miss in C
    Librsvg feels like it is reaching a tipping point, where suddenly it seems like it would be easier to just port some major parts from C to Rust than to just add accessors for them. Also, more and more of the meat of the library is in Rust now. I'm switching back and forth a lot between C and Rust these days, and C feels very, very primitive these days.
  • Learning to program is getting harder

    I have written several books that use Python to explain topics like Bayesian Statistics and Digital Signal Processing. Along with the books, I provide code that readers can download from GitHub. In order to work with this code, readers have to know some Python, but that's not enough. They also need a computer with Python and its supporting libraries, they have to know how to download code from GitHub, and then they have to know how to run the code they downloaded.

    And that's where a lot of readers get into trouble.