Livepatch – Jupiter Broadcasting

openmediavault is the next generation network attached storage (NAS) solution based on Debian Linux. It contains services like SSH, (S)FTP, SMB/CIFS, DAAP media server, RSync, BitTorrent client and many more. Thanks to the modular design of the framework it can be enhanced via plugins.

Wed Mar 18 2015: I’m announcing the release of the 3.19.2 kernel.

— PICKS —

Runs Linux

21K FPS Camera RUNS LINUX!

1:43 – talks about Linux
Sent in by: Big T

Desktop App Pick

Wire

End to end encryption, open source through and through communication

Timed Messages
Audio message with filters
Voice and video calls
Group calls and chats
Apps for desktop
Multiple Devices

Spotlight

Easystroke

Application that allows you to define a mouse gesture for opening an application, executing a command, or even linking to a key such as the Superkey or shift key

OpenYourMouth: Open Source Recipes from the Jupiter Broadcasting community

— NEWS —

Dirty COW was Livepatched in Ubuntu within Hours of Publication

Coincidentally, just before the vulnerability was published, we released the Canonical Livepatch Service for Ubuntu 16.04 LTS. The thousands of users who enabled canonical-livepatch on their Ubuntu 16.04 LTS systems with those first few hours received and applied the fix to Dirty COW, automatically, in the background, and without rebooting!

New Legislation to Tackle Pirate Kodi Box Sellers Rejected

Modified Kodi and other IPTV devices allow users to access valuable content for free. Members of Parliament and industry players say they want to clamp down on such devices, by closing loopholes in copyright law to target sellers. This week, however, their suggestions to change the law in the UK were withdrawn.

DTrace for Linux 2016

Without DTrace on Linux, I began by using what was built in to the Linux kernel, ftrace and perf_events, and from them made a toolkit of tracing tools (_perf-tools). They have been invaluable. But I couldn’t do some tasks, particularly latency histograms and stack trace counting. We needed kernel tracing to be programmatic._

A Quantum Leap for the Web – Mozilla Tech

Project Quantum is about developing a next-generation engine that will meet the demands of tomorrow’s web by taking full advantage of all the processing power in your modern devices. Quantum starts from Gecko, and replaces major engine components that will benefit most from parallelization, or from offloading to the GPU.

(Linux Only) BIOS Update for Windows 10 (64-bit) – Yoga 900-13ISK2 – Lenovo Support

Feedback:

Had website issues due to all the traffic following the #AppleEvent. This year rocks! #Linux #Ubuntu #YearOfTheLinuxDesktop

— System76 (@system76) October 30, 2016

Mail Bag

Name: Name: Dout H

thanks for the great idea!

Subject: JB Suerkey

Message: I’ve heard you talk about the new super key stickers for linux. When can we buy these from JB, I would love to get some!

Name: Andrew L
Subject: CRM Review

Message: This was a great segment. I would like to see more business solution type segments on LAS or even a more business centric show for Noah. As a person that works primarily in a Windows environment, I like to see open source solutions that are business ready so that I can pitch them at work. The only way we will go from a Microsoft shop to a Linux shop is by finding open source applications that can meet the needs of the business. We will be looking to replace our CRM next year so I’ll be setting up a Zurmo server for people to try.

Call in: 1-877-347-0011

New Show: User Error

User Error | Jupiter Broadcasting

Catch the show LIVE SUNDAY:

— CHRIS’ STASH —

Chris’s Twitter account has changed, you’ll need to follow!

Chris Fisher (@ChrisLAS) | Twitter

Hang in our chat room:

irc.geekshed.net #jupiterbroadcasting

— NOAH’S STASH —

Noah’s Day Job

Altispeed Technologies

Contact Noah

noah [at] jupiterbroadcasting.com

Find us on Google+

Find us on Twitter

Follow us on Facebook

The post Slaying the Arch Zombie | LAS 441 first appeared on Jupiter Broadcasting.

Livepatch Your CoW | LAS 440

chris — Sun, 23 Oct 2016 20:46:43 +0000

RSS Feeds:

Become a supporter on Patreon:

— Show Notes: —

Brought to you by: Linux Academy

Zurmo CRM

Zurmo is an Open Source Customer Relationship Management (CRM) application that is mobile, social, and gamified. We use a test-driven methodology for building every part of the application. This means you can create and maintain a custom-built CRM system or platform with the assurance that future updates are not going to break your installation. Head over to the forums to learn more.

Contact Management

Full view of Contact details
360 view of Accounts
Lead Management
Quickly find info with Global Search

Activity Overview

Meetings, Tasks, Notes, and Attachments all in one place
Roll Up to see activities from related records
Latest activities widget, easy view of historical information

Deal Tracking

Sales Force Automation
Create and Manage Opportunities
Track Sales Pipeline
Probability of Closure

Manual Install Guide

Bitnami Script

Cloud Hosting – Bitnami

Open Source is No Joke

The short version: Most Open Source Customer Relationship Management (CRM) applications are not fully functioning CRMs because they usually lack Reporting and Workflow. CRMs without these two features are useless. We want people to get value out of Zurmo. So we’re adding functionality that is usually available only in paid, Enterprise editions. Why? The current model teases people and insults our intelligence. We want people to take Zurmo and make it better. We want there to be a tool out there that’s easy to work with and to develop. By building software so a lot of people will use it, we’ll benefit by supporting it. That’s why we’re including all these features like Reporting and Workflow for free.

The long version: If you’re looking for a joke, watch a Jim Carry movie. Dumb and Dumber fits the bill. If you are looking for Open Source Customer Relationship Management (CRM) that’s along the same lines of ineptitude, just do a Google search. You have a bunch to pick from. Call them “teasers”. Call them bait and switch. Call them whatever you’d like. Just surely don’t call them full functioning CRM systems. I am serious. And please don’t call me Shirley.

— PICKS —

Runs Linux

CVS RUNS LINUX!!

Sent in by Anon Ymous (very clever)

Desktop App Pick

Flux

Ever notice how people texting at night have that eerie blue glow? Or wake up ready to write down the Next Great Idea, and get blinded by your computer screen? During the day, computer screens look good—they’re designed to look like the sun. But, at 9PM, 10PM, or 3AM, you probably shouldn’t be looking at the sun.

f.lux fixes this: it makes the color of your computer’s display adapt to the time of day, warm at night and like sunlight during the day. It’s even possible that you’re staying up too late because of your computer. You could use f.lux because it makes you sleep better, or you could just use it just because it makes your computer look better.

redshift: Redshift adjusts the color temperature of your screen according to your surroundings. This may help your eyes hurt less if you are working in front of the screen at night.

Redshift adjusts the color temperature of your screen according to your surroundings. This may help your eyes hurt less if you are working in front of the screen at night.

redshift – GNOME Shell Extensions

Spotlight

ShowTerm

It’s showtime in a terminal near you! Put on your best colours, resize to 80 columns, and let your fingers fly!

Termshows are purely text based. This makes them ideal for demoing instructions (as the user can copy-paste), making fail-safe “live-coding” sessions (plain text is very scalable), and sharing all your l33t terminal hacks.

Each termshow gets its own link. You can add hash-fragments to customize playback,
All shows are in plain text
Easy to install
Easy to use

Donate to OpenStreetMap | OpenStreetMap

OpenStreetMap is the largest open geographic database in the world, the data infrastructure for multitudes of mapping projects around the globe. Your donation to the OpenStreetMap Foundation will cover our core operational expenses in supporting the OpenStreetMap project: hardware costs, legal fees, administrative assistant and other expenses of our working groups and administration.

— NEWS —

Hotfix Your Ubuntu Kernels with the Canonical Livepatch Service!

Today, Canonical has publicly launched the Canonical Livepatch Service — an authenticated, encrypted, signed stream of Linux livepatches that apply to the 64-bit Intel/AMD architecture of the Ubuntu 16.04 LTS (Xenial) Linux 4.4 kernel, addressing the highest and most critical security vulnerabilities, without requiring a reboot in order to take effect. This is particularly amazing for Container hosts — Docker, LXD, etc. — as all of the containers share the same kernel, and thus all instances benefit.

Live kernel patching from Canonical now available for Ubuntu 16.04 LTS

“Most serious” Linux privilege-escalation bug ever is under active exploit

The vulnerability, a variety known as a race condition, was found in the way Linux memory handles a duplication technique called copy on write. Untrusted users can exploit it to gain highly privileged write-access rights to memory mappings that would normally be read-only_

Dirty COW — Critical Linux Kernel Flaw Being Exploited in the Wild

Why is the Flaw called Dirty COW?

The bug, marked as “High” priority, gets its name from the copy-on-write (COW) mechanism in the Linux kernel, which is so broken that any application or malicious program can tamper with read-only root-owned executable files and setuid executables.

“A race condition was found in the way the Linux kernel’s memory subsystem handled the copy-on-write (COW) breakage of private read-only memory mappings,” reads the website dedicated to Dirty COW.

“An unprivileged local user could use this flaw to gain write access to otherwise read-only memory mappings and thus increase their privileges on the system.”

The Dirty COW vulnerability has been present in the Linux kernel since version 2.6.22 in 2007, and is also believed to be present in Android, which is powered by the Linux kernel.

There are proof of concept available here.

Impact

An unprivileged local user could use this flaw to gain write access to otherwise read-only memory mappings and thus increase their privileges on the system.
This flaw allows an attacker with a local system account to modify on-disk binaries, bypassing the standard permission mechanisms that would prevent modification without an appropriate permission set.

How

The In The Wild exploit relied on writing to /proc/self/mem on one side of the race.
The In The Wild exploit relied on using ptrace.
The attack relies on racing the madvise(MADV_DONTNEED) system call while having the page of the executable mmapped in memory.

IOT Targeted in Recent DDOS attacks of DNS

DNS, the internet traffic management company hit by DDoS attacks Friday which affected more than 80 popular websites, says it believes that smart devices such as webcams and thermostats were infiltrated to carry out the attacks.

Scores of websites including PayPal, Reddit, Amazon, Spotify and Twitter were unavailable Friday as three separate distributed denial of service (DDoS) attacks disrupted the New Hampshire based server’s operations.

Feedback:

Loading poll…

Mail Bag

Name: Corey L

Subject: System 76 Same As Clevo?

Message: Hello Chris and Noah,

Would i be able to use the system 76 PPA on a generic Clevo laptop of the same model that the Oryx Pro is built upon. I have an opportunity to purchase one second hand from a Windows user, and I’m sure i could get everything working under Ubuntu 16.10 (except for crappy wireless) .

The model is NP8152-S

Thank you both,
Best regards,
Corey L

Name: LJ

Subject: Ubuntu 16.04 / 16.10 Followup

Message: Message: Hi Noah,

Regarding the wifi problems you have been facing with ubuntu 16.04 (and probably 16.10), please check the instructions/script in the file attached.

It may be a dirty solution but in the end it works and it it completely transparent to the user.

Keep the good work

Regards
LJ from Portugal

Script To Fix Wifi
Open a terminal and type the following:
sudo nano /etc/systemd/system/wifi-resume.service
Copy/Paste the script in there with a right click.
Exit with ctrl + o and ctrl + x
Now to activate it:

sudo systemctl enable wifi-resume.service

Script:

#/etc/systemd/system/wifi-resume.service
#sudo systemctl enable wifi-resume.service
[Unit]
Description=Restart networkmanager at resume
After=suspend.target
After=hibernate.target
After=hybrid-sleep.target

[Service]
Type=oneshot
ExecStart=/bin/systemctl restart network-manager.service

[Install]
WantedBy=suspend.target
WantedBy=hibernate.target
WantedBy=hybrid-sleep.target

Salty Noah?

Call in: 1-877-347-0011

New Show: User Error

User Error | Jupiter Broadcasting

Catch the show LIVE SUNDAY:

— CHRIS’ STASH —

Chris’s Twitter account has changed, you’ll need to follow!

Chris Fisher (@ChrisLAS) | Twitter

Hang in our chat room:

irc.geekshed.net #jupiterbroadcasting

— NOAH’S STASH —

Noah’s Day Job

Altispeed Technologies

Contact Noah

noah [at] jupiterbroadcasting.com

Find us on Google+

Find us on Twitter

Follow us on Facebook

The post Livepatch Your CoW | LAS 440 first appeared on Jupiter Broadcasting.

Livepatch Bait & Switch | LINUX Unplugged 167

chris — Tue, 18 Oct 2016 20:16:23 +0000

RSS Feeds:

Become a supporter on Patreon:

Show Notes:

Follow Up / Catch Up

Ubuntu 17.04 to Be Dubbed “Zesty Zapus,” Will Launch on April 2017

That’s right, we’re talking about Ubuntu 17.04, whose codename will be “Zesty Zapus.” While some of you are enjoying their brand new Ubuntu 16.10 (Yakkety Yak) installations, the Ubuntu development team has started working on Ubuntu 17.04, which will be yet another normal release of the Linux-based operating system that will receive 9 months of support.

All Aboard Ubuntu 16.10 | LAS 439

Has Ubuntu fallen behind, or setting a new bar of refinement? We load up our hardware with Ubuntu 16.10, walk away with some big surprises & two totally different experiences.

The VeraCrypt Audit Results – OSTIF.org

VeraCrypt 1.18 and its bootloaders were evaluated. This release included a number of new features including non-western developed encryption options, a boot loader that supports UEFI (modern BIOSes), and more.

QuarksLab found:

8 Critical Vulnerabilities
3 Medium Vulnerabilities
15 Low or Informational Vulnerabilities / Concerns

This public disclosure of these vulnerabilities coincides with the release of VeraCrypt 1.19 which fixes the vast majority of these high priority concerns. Some of these issues have not been fixed due to high complexity for the proposed fixes, but workarounds have been presented in the documentation for VeraCrypt.

DigitalOcean

DigitalOcean: SSD Cloud Server, VPS Server, Simple Cloud Hosting

Plasma’s road ahead

Our general direction points towards professional use-cases. We want Plasma to be a solid tool, a reliable work-horse that gets out of the way, allowing to get the job done quickly and elegantly. We want it to be faster and of better quality than the competition.

Hotfix Your Ubuntu Kernels with the Canonical Livepatch Service!

_Today, Canonical has _publicly launched_the Canonical Livepatch Service— an authenticated, encrypted, signed stream of Linux livepatches that apply to the 64-bit Intel/AMD architecture of the Ubuntu 16.04 LTS (Xenial) Linux 4.4 kernel, addressing the highest and most critical security vulnerabilities, without requiring a reboot in order to take effect.

_ This is particularly amazing for Container hosts — Docker, LXD, etc. — as all of the containers share the same kernel, and thus all instances benefit.

New Tool Lets You Easily Install the Ubuntu Touch OS on Your Mobile Devices

MariusQuabeck/magic-device-tool

TING

BUG_ON oh Come on!

Linus Torvalds admits ‘buggy crap’ made it into Linux 4.8 • The Register

Devs have ‘NO F*CKING EXCUSE to knowingly kill the kernel’, says Linux lord

Big no no to BUG_ON(), Beware of this Linux 4.8 Bug

This BUG_ON() is triggered when CONFIG_DEBUG_VM is enabled. Some distributions such as the standard Fedora Kernel config enable it by default. Linus Torvalds has discovered that once this BUG_ON() triggers, the machine will have problems handling kernel paging requests and report that a reboot is required to fix a recursive fault from which the machine will never recover!

Fixing this bug is number one priority for Linus and he asked Johannes Weiner to work on it. Measures are being taken to avoid having it end up in a stable release, but please check your kernel config to make sure CONFIG_DEBUG_VM is disabled until the bug is fixed.

Linus re-emphasized and warned to not use BUG_ON() for debugging, but rather use WARN_ON() which is a safer alternative to BUG_ON().

LKML: Linus Torvalds: BUG_ON() in workingset_node_shadows_dec() triggers

Return of the Cantrill | BSD Now 163

Bryan Cantrill, CTO of Joyent.
Bryan Cantrill (@bcantrill)

Linux Academy

Linux Academy | Linux and AWS Online Training

The role of Free Software in a world that doesn’t care

The Free Software movement is about personal and social
liberties. Giving the owner and user of a computer control
over it. But most people don’t see the problem with a small
number of multinational mega-corporations having control over
everyone’s computers. They think: “Apple and Microsoft know
what they’re doing, and they do a good job, so why would I
need Free Software?”

Accepting that most people reject the Free Software message,
what can the Free Software movement contribute to the world?

The post Livepatch Bait & Switch | LINUX Unplugged 167 first appeared on Jupiter Broadcasting.