After some updates about some of your favorite distros, we go hands on with the Raspberry Pi 3. Then we look at the AppImage project and their delivery on the download and run promise.
Plus a make good on a recent mistake, looking at a new kind of distro funding model & much more!
Direct Download:
MP3 Audio | OGG Audio | Video | HD Video | Torrent | YouTube
RSS Feeds:
MP3 Feed | OGG Feed | iTunes Feed | Video Feed | Torrent Feed | WebM Torrent Feed
Become a supporter on Patreon:
Show Notes:
Follow Up / Catch Up
The Linux Mint Blog » Post Attack
I’d like to thank Avast for working with us on this. They contacted us and offered to help analyze the fake ISO. We gave them a copy of it and all the info we already had. A day later they came back with a full malware analysis and we were able to issue an update to warn people who might still be affected by it. Avast also pushed updates towards their own users and they were able to block access to the Bulgarian servers used by the hackers. Finally, the addresses the malware was connecting to were either shut down or blocked by Kaspersky’s DNS sinkhole. I’ve been really impressed by Avast and the awesome work they did, it really helped us react quicker.
Response Summary
- To protect ourselves and reduce the risk of future attacks, many restrictions were placed on our servers. This might affect some of the websites a bit. If you find yourself unable to comment, to upload or to do something that worked well before, please let us know.
- To protect you and reduce the risk of man-in-the-middle attacks, almost all websites moved to HTTPS so you’re guaranteed you’re looking at the real Linux Mint server and the communication between you and us is encrypted. These measures protect you against local attacks (somebody listening to your local network, somebody maliciously opening up free Wifi to capture passwords being typed in a public place, or even on a greater scale.. fake DNS resolution pointing you to malicious servers). Note: The blog is yet to switch to HTTPS, we’re working on that still.
- Our servers are now monitored by Sucuri and protected by their firewall. We’ll be entering a partnership with them and it’s a real pleasure not just to benefit from the protection and the range of services they’re offering us but also to have that close relationship with security experts and to be able to quickly get in touch with them whenever our project needs it.
- To make ISO verification more accurate we’ll communicate SHA256 sums and GPG information more prominently going forward. MD5 was displayed as the primary mean of verification, with SHA256 and GPG being available for people who wanted them. We’ll review the way this information is shown and try to make more people use SHA256 and hopefully also GPG by default.
- We’re considering re-adding Gufw to the default software selection. What happened was very uncommon but as our project and Linux in general are getting more and more popular, our operating system is becoming more and more of a target. We cannot ignore the threat of malware and think that it only affects Windows. The centralization of our software and the better practices of our users who rarely directly install 3rd party packages or binaries are an asset, but they can also be a vulnerability. A malicious PPA archive could affect Ubuntu and Linux Mint users, it could offer legitimate packages for months and then suddenly spread malware that would be immediately accepted by thousands of users. It’s important to understand that the reason we’ve been so safe until now is because we’re smaller and because we therefore represent a much less interesting target. We can’t just protect ourselves from attacks, we also need to think of how we can react to them after they’ve taken place. We need scanners, and we’ll look into that as well, and we need something people can use to quickly and easily configure outgoing traffic and review applications communicating with their network, and Gufw does that very well.
Fedora project leader Matthew Miller reveals what’s in store for Fedora in 2016
Fedora is still focused on developers—but developers want to play games on their laptops, too.
DigitalOcean
Ubuntu MATE February 2016 supporters
Many thanks to everyone who donated to the Ubuntu MATE project this
month. You have been generous as always and ensured that we can meet
all the costs associated with running the Ubuntu MATE project and the
community site. In fact, this month we are able to reward some
developers for working on Ubuntu MATE projects.
AppImage | Linux apps that run anywhere
Download an application, make it executable, and run! No need to install. No system libraries or system preferences are altered.
I finally got around to play with the “AppImage” version of +Subsurface, and it really does seem to “just work”.
Intel Atom X3: 100-Dollar-Smartphone bietet ‘Continuum’ mit Android & Debian Linux
TING
Raspberry Pi 3 has Wi-Fi and Bluetooth, 64-bit chip, still just $35
Pi will still run 32-bit operating systems, but it’ll be 50% faster.
Ubuntu MATE for Raspberry Pi 3
The Raspberry Pi 3 Model B is here and we are delighted to announce the immediate availability of Ubuntu MATE 15.10 for the Raspberry Pi 3 Model B!
We’re excited to have Windows 10 support the new board via a new Windows 10 IoT Core Insider Preview update available for download today. The new Raspberry Pi 3 board is available now in the Microsoft Store online”, says Billy Anders, Director of Program Management, Windows IoT.
While the ODROID-C2 costs $5 more than a Raspberry Pi 3, it does have a faster processor, twice as much memory, Gigabit Ethernet, and a number of other features which could make it faster than the new Raspberry Pi.
Linux Academy
N1 is a very nice open source client with modern workflow but it requires that all emails are synced on the Nylas servers or run/maintain a sync engine yourself locally. Would you trust a 3rd party service provider with your emails however secure they claim to be?
Chris, are you aware that by using N1 client, all your mails are routed through 3rd party servers?
https://www.omgubuntu.co.uk/2015/10/n1-open-source-email-app-linux
By default N1 uses the Nylas API and open-source Sync Engine to handle mailsync operations on Nylas’ own cloud infrastructure.
In effect this means that all email you get in the app first passes through — and is stored on — a Nylas server.
That’s a big no in my book.
The Nylas Sync Engine provides a RESTful API on top of a powerful email sync platform, making it easy to build apps on top of email. See the full API documentation for more details.