Show Notes: techsnap.systems/410

The post Epyc Encryption | TechSNAP 410 first appeared on Jupiter Broadcasting.

RSS Feeds:

HD Video Feed | MP3 Feed | iTunes Feed

Become a supporter on Patreon:

Episode Links

• Introducing Amazon Linux 2 — Amazon Linux 2 provides a modern execution environment with LTS Kernel (4.9) tuned for optimal performance on Amazon Web Services (AWS), systemd support, and newer tooling (gcc 7.2.1, glibc 2.25, binutils 2.27).
• Amazon Linux 2 Benchmarks — With Amazon AWS this week having released Amazon Linux 2 LTS I was excited to put this updated cloud-focused operating system through some performance tests to see how it stacks up with the more well known Linux distributions.
• OpenSSH coming to Windows 10 — The software giant is now adding a native OpenSSH client to Windows 10. It’s available immediately as a beta option in the Fall Creators Update for Windows 10, and it’s easy to enable.
• Not just the client — we also shipped OpenSSH’s sshd server, but it’s a little tricky to configure right now. Expect a blog post this week. * This is not production-ready in the current version of Windows 10 (hence the “(Beta)” in the label), but we hope to be soon.
• Mozilla faces blowback after slipping Mr Robot plugin into Firefox — Firefox users noticed a strange new plug-in popping up in their browsers. A new plug-in called Looking Glass found its way into each instance of the new Firefox Quantum browser. It was disabled by default, but users were still alarmed to see a plugin they hadn’t installed.
• Steve Klabnik on Twitter — I am pretty upset with my employer, @mozilla, today
• Carol Nichols, Rus Dev on Twitter — “Mozilla wasn’t paid for the Mr. Robot tie-in”
• Intel to slap hardware lock on Management Engine code to thwart downgrade attacks — From version 12 onward, ME-equipped chips will defend against patch rollbacks.
• Conservancy update on fight with Law Center — Today, Conservancy filed for summary judgment in SFLC’s trademark cancellation action. As I understand from our lawyers, summary judgment is a mechanism to ask a Court to expediently handle a matter where the facts are straightforward and, as a matter of law, there is no plausible way that the party filing for summary judgment won’t prevail.
• TechSNAP reboot — Systems, Network, and Administration Podcast. Every week TechSNAP covers the stories that impact those of us in the tech industry, and all of us that follow it. Every episode we dedicate a portion of the show to answer audience questions, discuss best practices, and solving your problems.

The post Linux Action News 32 first appeared on Jupiter Broadcasting.

RSS Feeds:

HD Video Feed | MP3 Feed | iTunes Feed

Become a supporter on Patreon:

Episode Links

• Mozilla Files Cross-Complaint Against Yahoo Holdings and Oath — Yahoo Holdings and Oath filed a complaint against Mozilla on December 1, 2017, claiming that we improperly terminated the agreement between Mozilla and Yahoo. Today, in response, Mozilla filed a cross-complaint against Yahoo Holdings and Oath for breach of contract.
• Mozilla tackles fake news — The boundaries between truth and fiction are becoming harder to define, in part because of the proliferation of fake news and other forms of misinformation. Mozilla wants to shed light on this by sponsoring public demonstrations, using mixed reality and other art media that make the power of misinformation and its potential impacts visible and visceral.
• Classic Shell abandoned as open source — The source code is available at SourceForge, and the Classic Shell forum will remain online until the end of 2018 for folks that want to continue discussing the project.
• UK and EU plan Bitcoin crackdown — The Treasury plans to regulate bitcoin and other cryptocurrencies to bring them in line with anti-money laundering and counter-terrorism financial legislation. Traders will be forced to disclose their identities, ending the anonymity that has made the currency attractive for drug dealing and other illegal activities.
• Android Go released to OEMs — Google’s stripped-down version of Android is ready for OEMs.
• Mediatek announce Go optimized SoCs — MediaTek’s MT6739, MT6737, and MT6580 SoCs, among others, now have board support packages available to run Android Oreo (Go edition). This marks one of the first times that entry-level SoCs are ready to be used shortly after the latest version of Android.
• Pwning Intel ME — The duo say they found a locally exploitable stack buffer overflow that allows the execution of unsigned code on any device with Intel ME 11, even if the device is turned off or protected by security software.

The post Linux Action News 31 first appeared on Jupiter Broadcasting.

RSS Feeds:

HD Video Feed | MP3 Feed | iTunes Feed

Become a supporter on Patreon:

Episode Links

• Samsung enable Linux on their phones — Linux desktops will become available if users plug their phones into the DeX Station, the device that lets a Galaxy 8 run a Samsung-created desktop-like environment when connected to the DeX and an external monitor
• Purism Now Shipping Their Laptops With Intel ME Disabled — Purism has announced today all laptops to be shipping from their company will now have the Intel Management Engine (ME) disabled.
• Purism partner with Nextcloud on end-to-end encrypted storage — Purism plans to include Nextcloud in the Librem 5 phone, as well as within PureOS for its Librem 13 and Librem 15 laptops. Additionally, Purism will be discussing with Nextcloud about a future Purism NAS that runs completely free software including Nextcloud and services.
• LVFS/fwupd need donations — At the moment the secure part of the LVFS is hosted in a dedicated Scaleway instance, so any additional donations would be spent on paying this small bill and perhaps more importantly buying some (2nd hand?) hardware to include as part of our release-time QA checks.
• Linux Kernel Community Enforcement Statement — It adopts the same termination provisions we are all familiar with from GPL-3.0 as an Additional Permission giving companies confidence that they will have time to come into compliance if a failure is identified. Their ability to rely on this Additional Permission will hopefully re-establish user confidence and help direct enforcement activity back to the original purpose we have all sought over the years — actual compliance.  
• Ubuntu 17.10 released — Under the hood, there have been updates to many core packages, including
  a new 4.13-based kernel, glibc 2.26, gcc 7.2, and much more.
  Ubuntu Desktop has had a major overhaul, with the switch from Unity as
  our default desktop to GNOME3 and gnome-shell.
• Happy 13th Birthday — Ubuntu 4.10 ‘Warty Warthog’ wasn’t the most glamorous looking release, but it offered open-source enthusiasts of the day a simple, straightforward install from a single CD. The distro was notable for trying to “detect as much hardware as possible, simplifying the X install.”
  GNOME 2.8, Firefox 0.9, Evolution 2.0 and OpenOffice.org 1.1.2 were among the software assembled for the formative release.
• Ubuntu MATE — After six months of tireless work we present Ubuntu MATE 17.10, by far the best release we’ve ever produced.
• Xubuntu — Accelerated video playback with Intel hardware should now work more reliably out of the box.

The post Linux Action News 24 first appeared on Jupiter Broadcasting.

MP3 Feed | OGG Feed | iTunes Feed | Video Feed | Torrent Feed | WebM Torrent Feed

Become a supporter on Patreon:

Show Notes:

Follow Up / Catch Up

Zero Terminal: A Tiny Linux PC That You Can Build Using Raspberry Pi And Smartphone Keyboard

_The DIY tech inventor NODE has created a handheld all-in-one computer that runs __Linux. It’s made using the new Raspberry Pi Zero W, some 3D printed parts, and an iPhone 5 slider keyboard. He has also posted the details of the project on his website to help you make your own computer._

Security Update for the LastPass Extension

Over the weekend, Google security researcher Tavis Ormandy reported a new client-side vulnerability in the LastPass browser extension.

Announcing Rockstor 3.9.0

We’ve just wrapped up a fun release cycle, and it’s my pleasure to announce Rockstor 3.9.0. Our community has been really active and we’ve prioritized nicely to improve on a few different areas. 6 contributors have come together for this release and besides working on new features and bug fixes, we made significant improvements to code quality.

FreeNAS Adopts Docker

FreeNAS Corral is 100% free and Open Source, building on the success of the FreeNAS Open Source project. FreeNAS Corral is fully committed to the Open Source development model, being based exclusively on Open Source technologies, and its storage services are designed to be fully compatible with FreeNAS 9.10.

Features include a rewritten middleware architecture, a modern graphical user interface, support for Docker containers, its own built-in hypervisor that supports virtualization with full ZFS integration, and a powerful command line interface.

• Migrating from 9.X to FreeNAS Corral – FreeNAS

FreeNAS Corral now supports Docker containers for doing all of its “application hosting” and existing jails/plugins data will simply continue to live in the jails/dataset in the ZFS volume but will be inactive, since jails are no longer used in Corral.

• Moving on from iXsystems and the future of FreeNAS / Corral | FreeNAS Community

I’m going into the nanotech / biomedical field, for a complete career change of pace and hopefully the opportunity to do things that will substantially improve quality of life for a lot of people

• So long and thanks for all the fish | FreeNAS Community

One week from today I’ll be concluding my time at iXsystems. It’s been a very enjoyable 7 years and I have really enjoyed working on FreeNAS since iXsystems sponsored the rewrite of FreeNAS with the 8.0 version (released in early May 2011, five and a half years ago!)
+ You can Still download and Use FreeNAS 9.10

Download the current stable release of FreeNAS (9.10)

Linux Academy

• Linux Academy | Linux and AWS Online Training

This handheld Linux PC is actually a Raspberry Pi with iPhone keyboard

Designed and prototyped by DIY tech inventor and YouTuber N-O-D-E, the Zero Terminal is an all-in-one computer that is offers remarkable portability and functionality in an impressively compact body.

• Acer Travelmate 4150 retrofitting to Raspberry Pi Laptop: Part 1 – LCD and cleanup – Code and Unicorns

Hackers Exploit Ubuntu Linux, Microsoft Edge, Safari at Pwn2Own

While Pwn2Own has always taken aim at web browsers, the 2017 event is the first that provided Linux, and specifically the Ubuntu 16.10 Linux distribution, as a target. Researchers did not shy away from Linux’s first time at Pwn2Own, taking direct aim at the open-source operating system.

Dishwasher has directory traversal bug

The utterly predictable _vulnerability advisory_on the Full Disclosure mailing list details CVE-2017-7240 — aka “Miele Professional PG 8528 – Web Server Directory Traversal.” This is the builtin web server that’s used to remotely control the glassware-cleaning machine from a browser.

TING

• Ting – mobile that makes sense

Let’s Spend Wes’ Money

• beefy but reasonably sized laptop?
• ultrabook/netbook with a new desktop at home?
• What are the most important stickers to get for a new machine?

#ProjectSputnik — $200 off Dell XPS 13 developer edition configs! https://t.co/qSl4emltS8 not sure how long this is will be going on for

— Barton George (@barton808) March 28, 2017

• Entroware Kratos
• The New Razer Blade Pro V2 – The Desktop in Your Laptop
• ThinkPad P70 | Mobile Workstation | | Lenovo US

Electromagnetic plated system76 logo approved today. PVT complete. Galago production starting soon. pic.twitter.com/PD56VWvObu

— Carl Richell (@carlrichell) March 28, 2017

DigitalOcean

• DigitalOcean: SSD Cloud Server, VPS Server, Simple Cloud Hosting

Should Wes Build a Rig?

• ultrabook/netbook with a new desktop at home?

• Thunderbolting Your Video Card

Yes, that’s right, I paid $500 for an external Thunderbolt 3 enclosure to fit a $600 video card, all to enable a plug-in upgrade of a GPU on a Skull Canyon NUC that itself cost around $1000 fully built. I know, it sounds crazy, and … OK fine, I won’t argue with you. It’s crazy.

• Cheap and Painless eGPU Thrills on a 2013 MacBook Pro

To summarize, using only…

• An AKiTiO Thunder2 PCIe Box ($220)
• An EVGA GeForce GTX 1050 Ti SC ($140)
• A 120W 12V/10A power adaptor with a 5.5×2.5mm plug and center positive polarity ($35 — though buy it from a seller with Prime in case it’s the wrong one! This listing used to have a Prime seller, but I don’t see them anymore. Also, HN has pointed out that this may be a far better adaptor, even if it’s not sold on Amazon.)

…you can assemble a painless, hack-less eGPU build and use it with your late-2013 15″ dGPU MacBook as a relatively inexpensive graphics upgrade compared to building a PC from scratch or buying a console. (Cheaper still if you wait for rebates or use an older/weaker X50 card.)
Caveat emptor: the same build might not work so well — or at all! — on other MacBook models or even with a different driver version. In other words, what worked for me might not work for you! Remember that eGPU on TB2 is not officially supported and mostly works by accident, though clearly it can work very well.

[coreboot] Experiments with disabling the ME on Sandybridge x230

The post Boot Free or Die Tryin’ | LINUX Unplugged 190 first appeared on Jupiter Broadcasting.