Show Notes: linuxunplugged.com/458

The post NVIDIA's New View | LINUX Unplugged 458 first appeared on Jupiter Broadcasting.

Show Notes: linuxunplugged.com/368

The post The Best is Yet to Come | LINUX Unplugged 368 first appeared on Jupiter Broadcasting.

RSS Feeds:

HD Video Feed | MP3 Feed | iTunes Feed

Become a supporter on Patreon:

Episode Links

• Red Hat to Acquire CoreOS, Expanding its Kubernetes and Containers Leadership — Red Hat today announced that it has signed a definitive agreement to acquire CoreOS, Inc., an innovator and leader in Kubernetes and container-native solutions, for a purchase price of $250 million
• TechSNAP Episode 353: Too Many Containers — We introduce you to Kubernetes, what problems it solves, why everyone is talking about it, and where it came from. Also who shouldn’t be using Kubernetes, and the problems you can run into when scaling it.
• LibreOffice 6.0 Released — The release of LibreOffice 6.0 marks the first major update to the productivity suite since the LibreOffice 5.4 release back in July 2017. It also coincides with the anniversary of the very first release of LibreOffice in January 2011.
• How do I test Plasma Mobile? (part 2) — Currently there are two possible ways of testing Plasma Mobile on an actual mobile device, using postmarketOS, installing Halium and a KDE neon-based rootfs
• GNOME and KDE in PureOS: diversity across devices — If we were doing short-term planning it would be easy to “just use Plasma” for the Librem 5, but that would undermine our long-term vision of having a consistent look/feel across all our devices, where GNOME/GTK+ is already the default and what we’ve invested in.
• Purism considering UBports for the Librem 5
• Purism Might Develop An X11-Free Wayland Compositor — We also reviewed and evaluated compositing managers and desktop shells that we could use for a phone UI. We aim to use only Wayland, trying to get rid of as much X11 legacy as we possibly can, for performance issues and for better security. From our discussions with GNOME maintainers of existing compositors and shells, we may be better off igniting a new compositor (upstreamed and backed by GNOME) in order to avoid the X11 baggage.
• Matrix receives large investment — We’re delighted to announce that our friends at Status have made a major strategic investment ($5M) in New Vector: the company which currently employs most of the Matrix.org core team.
• FSF receives large Bitcoin donation — The Free Software Foundation (FSF) announced it has received a record-breaking charitable contribution of 91.45 Bitcoin from the Pineapple Fund, valued at $1 million at the time of the donation.

The post Linux Action News 39 first appeared on Jupiter Broadcasting.

RSS Feeds:

MP3 Feed | Video Feed | iTunes Feed

Become a supporter on Patreon:

Links

• Packed Pixels – Additional portable monitors for your laptop
• Amazon.com: BlackBerry KEYone GSM Unlocked Android Smartphone (AT&T, T-Mobile) – 4G LTE – 32GB: Cell Phones & Accessories
• Samsung’s new luxurious smart flip phone has the widest aperture camera lens yet – The Verge
• Ravencoin – A digital peer to peer network for the facilitation of asset transfers

The post Coin-Operated Flip Phones | User Error 44 first appeared on Jupiter Broadcasting.

RSS Feeds:

HD Video Feed | MP3 Feed | iTunes Feed

Become a supporter on Patreon:

Episode Links

• UBports release OTA 3 — This update brings some new features and bug fixes atop the Ubuntu Touch 15.04 base. New features include some new packages requested by the community, the default start page and search provider was changed over to DuckDuckGo, and not displaying the keyboard when working with multiple windows. This over-the-air update has also removed the Ubuntu Store from the App Scope.
• Ubuntu Touch working on Android app support — “Project Anbox”. Anbox – a shorted form of ‘Android-in-a-Box” – is a community effort which allows Android apps to execute in a container in a more native way rather than the more common approach of using an Android emulator,
• LEDE and OpenWrt merge — The merged project will use the code base of the former LEDE project.
• Fuchsia available for the Pixelbook — Fuchsia—which only started development in 2016—is Google’s third operating system after Chrome OS and Android.
• Meltdown and Spectre — Meltdown and Spectre exploit critical vulnerabilities in modern processors. These hardware vulnerabilities allow programs to steal data which is currently processed on the computer. While programs are typically not permitted to read data from other programs, a malicious program can exploit Meltdown and Spectre to get hold of secrets stored in the memory of other running programs. This might include your passwords stored in a password manager or browser, your personal photos, emails, instant messages and even business-critical documents.
• Law Center and Conservancy updates — Because the SFLC has amended its trademark cancellation petition with a fraud claim, the SFC’s motion to toss the complaint must be refiled after the fraud issue been considered.

The post Linux Action News 35 first appeared on Jupiter Broadcasting.

RSS Feeds:

HD Video Feed | MP3 Feed | iTunes Feed

Become a supporter on Patreon:

Episode Links

• Solus pushing forward Steam with Snaps — That snap, as some people have already guessed as much, will be the linux-steam-integration project, using a strict-mode LSI intercept module. We can also make various tweaks on top of that runtime to enforce ABI compatibility where it might be missing.
• AAC will be supported in Fedora Workstation 27 — What we will be shipping in Fedora is a modified version of the AAC implementation released by Google, which was originally written by Frauenhoffer. On top of that we will of course be providing GStreamer plugins to enable full support for playing and creating AAC files for GStreamer applications.
• Plasma 5.11 released — Plasma 5.11 brings a redesigned settings app, improved notifications, a more powerful task manager. Plasma 5.11 is the first release to contain the new “Vault”, a system to allow the user to encrypt and open sets of documents in a secure and user-friendly way, making Plasma an excellent choice for people dealing with private and confidential information.
• 5.12 aims for Wayland improvements — If we all just use Wayland and report and fix the bugs we run into I’m sure that 5.12 will be an awesome release on Wayland. So please help to make it happen!
• KDE turns 21 — t was on 14 October 1996 that the “Kool Desktop Environment” was founded by Matthias Ettrich. At the time he wanted KDE to be a “consistent, nice looking free desktop-environment.”
• Fwupd 1.0 Released — fwupd now supports 72 different kinds of hardware, support for another ~12 devices is currently being worked on, many vendors continue using or exploring fwupd, and around 165,000 devices each month get updated firmware using fwupd with LVFS.
• Oneplus collecting data in Oxygen OS — Moore discovered that some of the data being sent to OnePlus’ servers included the phone’s IMEI number, the phone number, MAC addresses, mobile network names and IMSI prefixes, Wi-Fi connection info, and the phone’s serial number.
• Say they’ll stop — By the end of October, “all OnePlus phones running OxygenOS will have a prompt in the setup wizard that asks users if they want to join our user experience program.” Not only that, but he also stated that OnePlus “will no longer be collecting telephone numbers, MAC Addresses and WiFi information.
• Librem 5 funded — 14 days early, we have crossed a historic milestone.
• Purism Collaborates with Cryptocurrency Monero — The Monero Project is a grassroots, community-driven initiative that advocates for privacy on a global scale by producing several free libre open source software projects, with the flagship offering being Monero, a fungible and decentralized cryptocurrency.

The post Linux Action News 23 first appeared on Jupiter Broadcasting.

Angela and Chris go one on one with the live audience in a battle of Xonotic, an open source first person shooter you can play too. Find out if Chris and Angela crush the competition, or go home a little humbled!

Thanks to:

Direct Download:

HD Download | Mobile Download | MP3 Download | YouTube

RSS Feeds:

HD Video Feed | Mobile Video Feed | MP3 Audio Feed | Torrent Feed | iTunes Feeds

— Show Notes: —

Mailsack!

• Silvrax built a biplane in FauxWorld Minecraft: https://angerz.imgur.com/all/

• Our server info: https://mc.jbgame.tv/

Check out the Shirt Pictures: https://instagram.com/jupiterbroadcasting

Find FauxShow!

Facebook: https://www.facebook.com/thefauxshow
Twitter: https://www.twitter.com/angerz
G+: https://www.gplus.to/fauxshow
Subscribe to Jupiter Signal: https://www.bit.ly/jupitersignal
Jupiter Radio: https://jblive.info
Affiliates Firefox Extension: https://addons.mozilla.org/en-US/firefox/addon/jupiterbroadcasting/
Affiliates Chrome Extension: https://chrome.google.com/webstore/detail/bjekemhblnilimncanbehhjijdpjgimj
Donations: https://original.jupiterbroadcasting.net/donate
Shows & Shownotes: https://original.jupiterbroadcasting.net/show/fauxshow/

The post Xonotic Vs | FauxShow 170 first appeared on Jupiter Broadcasting.

Should Linux users be anti-cloud? Why do so many of us feel guilty for using the\”cloud\”?

This week will dig into this conundrum and maybe even solve this more and more complex question.

Plus a little KDE vs Gnome debate, moral pirates, and even RMS\’ workflow.

Thanks to:

Direct Download:

MP3 Audio | OGG Audio | Video | HD Video | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | iTunes Feed | Video Feed | Torrent Feed | WebM Torrent Feed

— Show Notes: —

FU

• paul4er comments on ZoneMinder Review | LAS s28e10

• Chris also managed to make his KDE setup look rather hideous — so no wonder no one would want to look at that for much longer! I see he now also is blaming KDE for what most likely was the unstable and impractical fiddler\’s distro, Arch, wrecking his configuration

• donniezazen comments on ZoneMinder Review | LAS s28e10

One think about KDE that has always bugged me is lack of a design philosophy.

— Dat Cloud —

• What would be your dream setup?

I would ideally like to have a machine with the speed and memory of a laptop, and the display size of a laptop too, combined with the same freedom that I have now on the Yeelong.

Until I can have them both, freedom is my priority. I’ve campaigned for freedom since 1983, and I am not going to surrender that freedom for the sake of a more convenient computer.

I do hope to switch soon to a newer model of Yeelong with a 10-inch display.

It\’s the little things that make me use the cloud. IE, Dropbox, G+ pictures, Google Docs, etc.

• Ex-Microsoft privacy adviser: I don\’t trust company after NSA revelations

Mail Sack:

• New Arch-er reporting : LinuxActionShow
• Comment on digital content restrictions

The post Cloud Guilt | LINUX Unplugged 8 first appeared on Jupiter Broadcasting.

Can two of the hottest sync systems live in harmony? We’ll compare SpiderOak and Bittorrent Sync, and see if we can use each for it’s specific strengths.

Plus: Intel and XMir drama, developers plea for the end of DirectX, your emails…

AND SO MUCH MORE!

All this week on, The Linux Action Show!

Thanks to:

Download:

HD Video | Mobile Video | WebM Torrent | MP3 Audio | Ogg Audio | YouTube | HD Torrent

RSS Feeds:

HD Video Feed | Large Video Feed | Mobile Video Feed | MP3 Feed | Ogg Feed | iTunes Feeds | Torrent Feed

Support the Show:

— Show Notes: —

SpiderOak vs Bittorrent Sync:

Brought to you by: System76

New from the System76 team: BeansBooks

– SpiderOak –

• SpiderOak

SpiderOak is a zero-knowledge encrypted data backup, share, sync, access and storage service. Online and multi-platform with 2GB of storage free for life.

• SpiderOak Twitter

• SpiderOak for Mobile

• SpiderOak – openSUSE

• How do I install SpiderOak on a headless Linux server?

We have many customers who use SpiderOak on headless servers. The initial
setup requires a simple workaround, and from there you can use the command line
options to implement all other tasks.

• Why isn’t SpiderOak open source yet? When will it be?

We are steadily releasing many of the tools and libraries that we created while
building SpiderOak as independent, generalized components. These can be found
under the code section.

– Bittorrent Sync –

• BitTorrent Sync

• BitTorrent on Twitter

Private and Secure. File transfers are encrypted. Your information is never stored on a server in the cloud and your data is protected by private keys.

• BitTorrent® Sync – Android

• BitTorrent Sync for iPhone, iPod touch, and iPad

• How to backup your phone’s camera roll without limits

• Sync Hacks: Raspberry Pi + BitTorrent Sync to Sync Without Data Loss

---

– Picks –

Runs Linux:

• SolidRun Cube, Runs Linux

Android Pick:

• Evomail – Modern Mobile Email

Desktop App Pick:

• BSD games – LQWiki

Git yours hands all over our STUFF:

• Jupiter Broadcasting Affiliate Extensions
• Callisto-app – Google Project Hosting
• Quick Update to the Jupiter Broadcasting Android App

---

— NEWS —

• Dell To Expand Ubuntu Retail Presence in China

• Plasma Active 4 – ready when you are

• Intel Remove XMir Support From Xorg Drive

• Seems XMir won’t have a future on Intel drivers.

• Google To Bring New Packaged Chrome Apps To Linux

• Google Chrome Blog: A new breed of Chrome Apps

• Game Developers Talk Up OpenGL At PAX Prime 2013

• Mailpile hits a (hopefully short term) roadblock with PayPal : LinuxActionShow

• Support 0 A.D., an Open-Source Strategy Game

---

– Feedback: –

Show will be LIVE on Friday

• Private video calls using VPN

• Poor GVFS performance

• Natural selection 2 Almost Fixed!

• New app: MovieThumbs

• Great Little Radio Player

BM-GuJRSMgViBNXnafzuRQL3tpHHFSJQ5Wm

— Chris’ Stash —

• New updates to the Chrome and Firefox extensions!

• Interview with Docker Dev on Coder Radio tomorrow in episode 66

Hang in our chat room:

irc.geekshed.net #jupiterbroadcasting

— What’s Matt Doin? —

• Matt’s Amazon Birthday Wishlist
• Hell froze over, Matt’s on Facebook

— Find us on Google+ —

• Chris
• Matt Hartley
• Jupiter Broadcasting’s Page

— Find us on Twitter —

• Chris – ChrisLAS
• Matt – matthartley

— Follow the network on Facebook: —

• Jupiter Broadcasting on Facebook

— Catch the show LIVE Sunday 10am Pacific / 1pm Eastern / 6pm UTC: —

• https://jblive.tv
• Network Calendar

The post SpiderOak vs Bittorrent Sync | LAS s28e07 first appeared on Jupiter Broadcasting.

]]> https://original.jupiterbroadcasting.net/39887/who-watches-the-monitors-techsnap-117/ Thu, 04 Jul 2013 18:46:14 +0000 https://original.jupiterbroadcasting.net/?p=39887 Extending your office LAN for remote office workers, monitoring the monitoring service, and Zynga's embarrassing Apache error.

The post Who Watches the Monitors | TechSNAP 117 first appeared on Jupiter Broadcasting.

]]>

Extending your office LAN for remote office workers, monitoring the monitoring service, and Zynga\’s embarrassing Apache error.

Plus a HUGE batch of your questions, our answers, and much much more!

Thanks to:

GoDaddy.com Use our code tech249 to score .COM for $2.49! Get private registration FOR FREE with a .COM! code: free5
Ting.com Visit techsnap.ting.com to save $25 off your device or service credits.

Direct Download: HD Video | Mobile Video | MP3 Audio | Ogg Audio | YouTube | HD Torrent | Mobile Torrent RSS Feeds: HD Video Feed | Mobile Video Feed | MP3 Audio Feed | Ogg Audio Feed | iTunes Feeds | Torrent Feed

Show Notes:

Monitoring the Monitors

• An interesting short article from USENIX that raises the question of how do you monitor your monitoring system?
• The article breaks the monitor monitoring systems down based on their features:
• Automated vs. manual execution
• Automated vs. manual response
• Destructive vs. non-destructive response
• Monitoring vs. monitoring of notification services
• For example, a “dead-man switch” is an example of an automated execution (releasing the trigger happens automatically), automatic response (no other action is required to cause the response) and is generally destructive
• Another complication of monitoring systems is how do you monitor the notification service?
• If the sysadmin gets notified that a service is down via text message, how do you ensure they actually got the text message?
• One solution mentioned in the article is sending a text message to the on-duty admin at the start of each ‘shift’. If they do not get this message, they know something is wrong and investigate
• A better solution to this may be a similar alert that they must acknowledge it, possible before the off-going sysadmin is allowed to leave
• It is quite possible to ‘miss’ an event, especially when it becomes routine. If you get a text message every morning at 9am, would you notice if you didn’t get it one day?
• Instead, what if the text message contained a URL you had to visit in order to acknowledge the message, else the alert would repeat and eventually escalate

---

A Secure Processor Architecture

• A system designed to prevent someone with access to a system from determining what other operations are happening on that system
• Seems relevant to our previous discussion about how from inside one VM you could collect enough data to disclose the private encryption keys of another VM running on the same physical hardware
• The described system, ‘Ascend’ features ‘Obfuscated Instruction Execution’ and ‘Oblivious RAM’

---

Zynga directs support inquiries to a random stranger

• When Zynga users were confronted with an HTTP Error 500 page from the fb.themepark.zynga.com server, it told them to email someone @themepark.com which they did not actually own
• It appears Zynga uses Apache as their web server (no wonder they were throwing 500 errors under load), and had misconfigured the ‘ServerAdmin’ directive, so the error pages contained this incorrect email address
• The unfortunate recipient of emails from many whiny facebook gamers complained to Zynga, but got no response
• So he decided to have some fun with it, and wrote back responses trolling the users
• “I know that For Canada Day, the engineering department wraps the .ca servers in Canadian flags, and then sets a plate of poutine on top. This sometimes can cause the server to overheat, and sometimes even get gravy into the login/logout module.”

---

Feedback:

[asa]B008U5ZNIG[/asa]

• Michael asks about setting up a VPN for remote office workers
• Requires the pfSense ‘tap fix’, install it from the pfSense packages menu

• OpenVPN Bridge Mode How-To for pfSense

• Virtual Box / VmWare images

• How do you direct pfsense to direct packets sent to the gateway back to the local subnet?

• pfSense Performance Issue Followups

• Router DNS Caching?

• What is some advice you can give people starting out as a contractor or service provider?

• What is your backup?

• Secure lan messaging server

• First FreeBSD Desktop Questions

• Follow up on FreeBSD Media Server

Roundup:

• McAfee report: Average firm takes 10 hours to detect a securit breach
• Security update regarding your Ubisoft account – please create a new password
• Problem with Android digital signature checking means all android devices will accept a maliciously modified package as being unmodified
• Nginx just became the most used web server among the top 1000 websites
• California’s Attorney General wants to crack down on companies that do not encrypt data
• DecryptoCat – TobTu
• What can you learn about someone from 6 months worth of ‘metadata’
• Mastercard and Visa Start Banning VPN Providers
• Alcatel Lucent develops first gigabit DSL

The post Who Watches the Monitors | TechSNAP 117 first appeared on Jupiter Broadcasting.

]]> https://original.jupiterbroadcasting.net/39177/whats-in-your-cache-techsnap-115/ Thu, 20 Jun 2013 16:31:02 +0000 https://original.jupiterbroadcasting.net/?p=39177 New research reveals your browser cache contains a lot more than you might expect, and we’ve got the details on some security issues WordPress doesn’t have a fix for...

The post What’s in Your Cache | TechSNAP 115 first appeared on Jupiter Broadcasting.

]]>

New research reveals your browser cache contains a lot more than you might expect, and we’ve got the details on some security issues WordPress doesn’t have a fix for…

Plus: We’ll answer your questions, chat about rolling your own email server, and much much more!

On this week’s TechSNAP

Thanks to:

GoDaddy.com Use our code tech249 to score .COM for $2.49! 35% off your ENTIRE first order just use our code 35off3 until the end of the month!
Ang Reports on her Android challange Catch episode 144 find out how things stand after her week on Android

Direct Download: HD Video | Mobile Video | MP3 Audio | Ogg Audio | YouTube | HD Torrent | Mobile Torrent RSS Feeds: HD Video Feed | Mobile Video Feed | MP3 Audio Feed | Ogg Audio Feed | iTunes Feeds | Torrent Feed

 

Support the Show:

Purchase anything at Amazon.com Purchase anything at Think Geek using this link Purchase anything at Newegg using this link Contribute directly on our donation page or check out our advertising options and reach millions of amazing people! Grab our Chrome Extension and auto-tag your shopping session for us!

   

Show Notes:

Get TechSNAP on your Android:

• Callisto – Android App
• Jupiter Broadcasting – Android App by ShaneQful

Browser Affiliate Extension:

• Jupiter Broadcasting Affiliate Extensions for Chrome and Firefox

Researchers find that 21 financial sites store sensitive information in your cache

• Browsers used to never cache any content that was served over HTTPS
• The internet has changed significantly since then and many more sites use HTTPS for entire browsing sessions, including Google and Facebook
• Secure sites are supposed to send special headers instructing the browser which files not to cache, but it seems somes sites do not bother, and some send a non-standard header that only works with Internet Explorer
• Researchers from Independent Security Evaluators in Baltimore conducted a survey of a number of popular financial sites and found rather disappointing results
• “Non-technical users likely believe that if, after visiting a site and viewing personal data, they logout and close their browsers, that their data will be safe. Our findings prove this assumption incorrect in 70% of the cases tested.”
• ADP, Verizon Wireless, Scottrade, Geico, Equifax, PayPal and Allstate were among the websites that saved items such as prescription information, utility bills, check images and credit reports.
• All told 21 of 30 sites checked improperly stored sensitive data in the users’ local cache
• ISE identified 4 different ways to instruct Internet Explorer to not cache sensitive information, only one of which is actually an HTTP Standard
• The correct way to tell a browser to not store sensitive data is to send the header: “Cache-Control: no-store”
• Part of the problem may be that most Online Banking systems were designed in the early 2000s, when Internet Explorer had over 90% market share
• Researchers Report

---

Amazon vows to help you fight government requests for data stored on their cloud

• An Amazon executive said “If a U.S. entity is serving us with a legally binding subpoena, we contact our customer and work with that customer to fight the subpoena. We will do that proactively and help the customer in any way to comply with the subpoena or fight it.”
• Amazon also recommends that you encrypt all data stored in the cloud
• However, many such orders from US Agencies include a gag order, preventing Amazon from informing the customer that their data is being sought. If Amazon faced a subpoena that required it to keep the order secret, such encryption would be useful to customers. “If the data is encrypted, all we’d be handing over would be the ciphertext,”
• One of Amazon’s main rivals, RackSpace said: “Rackspace reviews any orders to determine that they are lawful and have been issued in accordance with the 4th amendment. We are prohibited from accessing and disclosing customer data stored on their servers or storage devices in our data centers without a properly issued, lawful request from a court with jurisdiction over both Rackspace and the data sought. In the event Rackspace receives a court order for customer data that does not adhere to the 4th amendment, Rackspace will oppose the order.”
• Amazon is also building a $600 million private cloud for the CIA, a contract protested by IBM

---

WordPress plugins still a security nightmare

• Security researchers at Checkmarx find that 12 of the top 50 wordpress plugins are susceptible to common attacks
• The researchers also found that 7 of the top 10 e-commerce plugins contained flaws
• Many popular plugins are susceptible to SQL injection, Cross-Site Script Injection (XSS), Cross-Site Request Forgery (CSRF), Remote/ Local File Inclusion (RFI/ LFI) and Path Traversal
• “First of all, Web admins think that if they are downloading these plug-ins from a reputable source, then there is an assumption that they are receiving a secure plug-in,”
• Checkmarx started their research in January, at which time 18 of the top 50 wordpress plugins were vulnerable. During a subsequent scan in June, every plugin tested had been updated but only 6 fixed all of the vulnerabilities
• The researchers recommend that you only download plugins from official sources, and that the official sources conduct more intense security scans on plugins before they are listed in the marketplace
• Research Paper

---

Feedback:

• Question on serial access on routers

• Windows LAN Mail Server?

• Raspberry Pi Router

• NSA Concernes from Germany

• TOR Proxy via a Jail or VM?

• VPS Breach

• Whats to become a excellent PenTester

• PCBSD moving forward with Rolling Release of 9-STABLE

TechSNAP Bitmessage: BM-GuGEaEtsqQjqgHRAfag5FW33Dy2KHUmZ

Round-Up:

• GCHQ intercepted foreign politicians’ communications at G20 summits
• LinkedIn Outage Due To Possible DNS Hijacking [Update: Fidelity.com Also Affected]
• Network Solutions takes credit for downing Linkedin and others
• Terrorists Live tweet during attack
• Playstation 4 Reportedly Running a Modified FreeBSD 9.0
• Project Loon – Google
• Former President of TigerDirect indicted for money laundering
• 9 reasons your syadmin hates you
• Stanford launches the Cookie Clearing House with Mozilla and Opera
• Bruce Schneier – Evidence that the NSA Is Storing Voice Content
• Richard Betjtlich (the Mandian APT report) on What businesses need to know
• MySQL Man page relicense was a bug, has been fixed

The post What’s in Your Cache | TechSNAP 115 first appeared on Jupiter Broadcasting.

]]>