MP3 Feed | Video Feed | Torrent Feed | iTunes Audio | iTunes Video

Become a supporter on Patreon:

— Show Notes: —

Feedback

• Kanban in Practice

Hoopla

#Facebook should be regulated into the ground re kids. It should be required to at least more aggressively enforce the 13 year old min age and the law should raise that 17-18. https://t.co/lG927dA1f8

— Michael Dominick (@dominucco) December 20, 2017

Rust in 2017: what we achieved – The Rust Programming Language Blog

Rust’s development in 2017 fit into a single overarching theme: increasing productivity, especially for newcomers to Rust. From tooling to libraries to documentation to the core language, we wanted to make it easier to get things done with Rust. That desire led to a roadmap for the year, setting out 8 high-level objectives that would guide the work of the team.

How’d we do? Really, really well.

GitHub’s global policy predictions for 2018 · GitHub

With issues like net neutrality and digital news curation in headlines every day, we’re seeing the effects of the growing role that technology has in our lives more than ever. From how we educate our children about new tools to how we decide to regulate internet service providers, we have a set of vitally important questions in front of us. To answer these questions, we’ll need a meeting of the minds—one that brings together the perspectives of government officials, business owners, developers, and citizens from all over the world. This global discussion is the only way we’ll progress toward appropriate solutions and the right balance in refocusing technology on humans.

Google fights fragmentation: New Android features to be forced on apps in 2018

Recently Google announced it will start setting a minimum API level that new and updated apps will be required to use.

The post The Last Coder | CR 290 first appeared on Jupiter Broadcasting.

Angela and Chris show off what the lower third is doing this summer in the episode of FauxShow Summer Project Awards!

Direct Download:

HD Video | Mobile Video | MP3 Audio | YouTube

RSS Feeds:

HD Video Feed | Mobile Video Feed | MP3 Audio Feed | Torrent Feed | iTunes Feed

— Show Notes —

Main Topic:

CountZero + Dremel Junkie: The 17″ iMac G4 to DVI – The Easiest Method Ever (So Far)
Kyle + agronick/Relay · GitHub
ejb1123 + yify-pop/yify-pop · GitHub
Justin + Summer Project
Paddatrapper + onair
stack12 + Relay – IRC Client for the modern Linux desktop – YouTube
David + openHAB
Frostclaw20 + Summer Project – Album on Imgur
+ Timelapse: Usb Pushpin Holder. – YouTube
+ Timelapse: RAMPS 11.4 Electronics box – YouTube
+ Timelapse: Chain Link Mount – YouTube

Email angela@jupiterbroadcasting.com your PORN SKIT! Yes, write your own potentially horribly geeky porn skit and email it in. Send in a pic and/or link and IRC nick.

WTR

• Check out Duh Ops | WTR 35 | Jupiter Broadcasting
• Follow WTR on twitter: www.twitter.com/heywtr
• Email WTR: wtr@jupiterbroadcasting.com

Follow Jupiter Broadcasting

• See more pics: https://instagram.com/jupiterbroadcasting#
• Sign up for Jupiter Signal: www.bit.ly/jupitersignal
• Unfilter is on Patreon! https://www.patreon.com/unfilter
• Tech Talk Today is on Patreon! https://www.patreon.com/jupitersignal

JB SWAG

• Join our virtual LUG! | Teespring

— Find the FauxShow! —

• Facebook: https://www.facebook.com/thefauxshow
• Twitter: https://www.twitter.com/angerz
• G+: https://www.gplus.to/fauxshow
• Subscribe to Jupiter Signal: https://www.bit.ly/jupitersignal
• Jupiter Radio: https://jblive.info
• Affiliates Firefox Extension: https://addons.mozilla.org/en-US/firefox/addon/jupiterbroadcasting/
• Affiliates Chrome Extension: https://chrome.google.com/webstore/detail/bjekemhblnilimncanbehhjijdpjgimj
• Donations: https://original.jupiterbroadcasting.net/donate
• Shows & Shownotes: https://original.jupiterbroadcasting.net/show/fauxshow/

The post Summer Project Awards | FauxShow 220 first appeared on Jupiter Broadcasting.

Live from LFNW Scarlett Clark tells us about her work with KDE and Kubuntu!

Direct Download:

MP3 Audio | OGG Audio | Video | HD Video | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | iTunes Feed | Video Feed

Become a supporter on Patreon:

Show Notes:

• Scarlett on G+
• LinuxFest Northwest
• Kubuntu
• KDE
• Jupiter Broadcasting
• Groovy
• Python

Full transcription of previous episodes can be found below or also at heywtr.tumblr.com

Transcription:

ANGELA: This is Women’s Tech Radio.
PAIGE: A show on the Jupiter Broadcasting Network, interviewing interesting women in technology. Exploring their roles and how they’re successful in technology careers. I’m Paige.
ANGELA: And I’m Angela.
PAIGE: Angela, today we’re going to interview at Linux Fest Northwest live. We’re doing an interview with Scarlett Clark. She’s a developer on the KDE project and also works for Kubuntu.
ANGELA: But, before we get into the interview, I want to tell you about Patreon.com. You can go to patreon.com/jupitersignal to support Women’s Tech Radio and all the other shows on teh Jupiter Broadcasting Network. Go to jupiterbroadcasting.com and see if there’s another show that you might want to listen to in addition to Women’s Tech Radio. Again, go to patreon.com/jupitersignal.
PAIGE: And we got started with this week’s episode by asking Scarlett what she does with KDE and Kubuntu.
SCARLETT: I am a developer for Kubuntu, so I do a lot of the packaging for the software applications for the user to be able to easily install and whatnot. And then, on the other side of the spectrum I created, wrote all the code to automate job creation and job building for KDE’s continuous integration system. Which, it builds the software packages and then test them to make sure that its functional. And then after they all turn green like they’re supposed to, they’re ready to release to distributions like Kubuntu. And I also went the extra step, and we now are testing for OS X and Windows will be coming next.
PAIGE: Oh, wow.
SCARLETT: Yeah, all the code is already in there. It’s just figuring — Windows is a little more complicated because getting dependencies, you can’t tell the continuous integration system to, hey go to this website, download this file, and use it as a dependency. So, it gets little more complicated, but once we sort that out Windows will also be supported with KDE software.
PAIGE: Wow, I had no idea you guys were going for that. That’s really awesome. Before you did this project was their not test coverage for KDE?
SCARLETT: They had a very old system and it was not reliable. And it was also — the job creation was all manual, and OS X and Windows were not supported.
PAIGE: That’s pretty deep in the weeds. Like building, testing, and all that jazz –
SCARLETT: Oh yes.
PAIGE: – for such a big, robust piece of software. Was that you just woke up one morning and decided to do? How did you end up where you are?
SCARLETT: No, actually, Valerie, the gal you just spoke to, they do this season of KDE and it generally targets students. Obviously, I’m not a student. But, this project didn’t have anybody grabbing on it and she just asked me, are you interested in Dev Ops. I’m like, I’m interested in everything. So, she introduced me to Ben Cooksy, the main sys admin guy, and got rolling. I had no idea what I was getting into when I got into it. So, I ended up learning Groovy, Python, and Java on the fly. I had taken a few classes, but that was years ago in university.
ANGELA: What had you done prior to that? Was anything prior to that technology related other than the several classes you mentioned?
SCARLETT: A long time ago I was IT.
ANGELA: Oh, okay.
SCARLETT: But I had not had any real world experience coding. So, this is my first real world experience coding and i love it.
PAIGE: So, you went from no coding to developing a new test suite for KDE?
SCARLETT: Yes, the back end.
PAIGE: So, how was that journey? How did you go through that? Because learning that many languages and that much theory on the fly –
SCARLETT: Yes. At first it was very overwhelming and I just stared at the blank sheet going, oh no. Oh no. But then, I just bits and pieces at a time and things started coming together, and then oh that makes sense. ANd then it just all came together. And then when the final result, we just went live two days ago and it was smooth.
PAIGE: How long did that project take for you?
SCARLETT: It was several months.
PAIGE: Wow, only months?
SCARLETT: Oh yeah.
PAIGE: Wow.
SCARLETT: Actually, yeah, I surprised a lot of people with how fast.
PAIGE: So, doing all that and learning all that, were there awesome resources that you were using? Was it the community? Did you have books that were –
ANGELA: Online courses?
SCARLETT: Google was good.
ANGELA: Yeah, I bet.
PAIGE: So, I have a lot of ladies who are trying to get in tech, and their biggest holdback is learning how to Google the right things. Did you find that was difficult at first., like knowing how to ask the right questions?
SCARLETT: I’ve been using Google since they were in the garage.
PAIGE: Nice, but asking the right tech question.
ANGELA: Yeah, like sometimes you don’t know what you don’t know.
SCARLETT: I know. That’s actually that you have to develop over time, because I’ve learned to figure out what to ask and how to ask it, and sometimes you don’t get it right the first time and you just have to reword it. That can be challenging. That is just it. When I first started the project I didn’t know what I was looking. So, I actually branched off in wrong directions at first. I had a few setbacks because I wanted to go be a docker, which is the new cool technology. But, it wasn’t — with the OS X and Windows, that ended up being wasted time, because you won’t get native builds, because Docker is Linux. That didn’t quite pan out, but it was fun learning.
PAIGE: Yeah, it’s always good to add new stack to your brain.
SCARLETT: Oh yeah. Yeah.
ANGELA: Yeah. Something will resonate and help you learn something else.
SCARLETT: Absolutely. Yelah.
PAIGE: So, tell me the story of why you were in IT before, and then you weren’t, and now you are again.
SCARLETT: That’s a story of — I had to give up my career to follow my husband to another state and I could not recover.
ANGELA: That’s too bad. Well, you have now.
SCARLETT: I have. Well, yes.
PAIGE: Was it really difficult for you diving back in afterwards, or did it just kind of re-spark that? We had a guest who talks about kind of the mental stimulation of being in this technical field.
SCARLETT: Yeah, I’ve been a Linux advocate/user since 1998. I have my big stack of Red Hat floppy disc. But I have always wanted to contribute, and I could never really find my way in. It’s a tight knit community. But I finally found my way in with Kubuntu and Jonathan Riddell. He just stepped up and, you want to learn how to package? I’m like, sure. He just showed me the ropes and I’ve just been riding the cloud since.
PAIGE: How did you get in touch with Jonathan? What was that?
SCARLETT: I knew Valerie from several mailing groups and stuff. She saw that I was doing documentation for KDE. Actually, an easy way in is doing documentation. And then she introduced me to Jonathan.
PAIGE: I think we have some people who are just getting started. What does doing documentation mean? What does that look like?
SCARLETT: The easiest way is to start with, like Wiki. It’s much simpler than Doc Books. You pretty much well have to know XML and the layout and everything. But Wiki is pretty much just plain text. You just find an app that you really love and just use it, and figure out — use cases of, well somebody might want to do this, and then you just instruct them how to do that and just build on it. That’s the easiest way to really get your food in the door, and it’s pretty simple because you figure out ways that you use the application and then just write about it.
PAIGE: I think, especially as a newer user of an application, sometimes you have an even more valuable input for that.
SCARLETT: Oh yeah.
PAIGE: Because you have just learned it. You know where the pain points are.
ANGELA: Yes. That is, in my current conversion to Linux, it’s very refreshing for the Linux Action Show audience to hear this new user perspective.
SCARLETT: Yes, absolutely. And a lot of times, developers don’t even think of things that a user would try or want to do with their application, so it’s a good way to also give feedback to the developers. I worked on KMail documentation and there was a lot of things that I ran into. I would talk to the developer, how do you do this. And they’re like, oh, well I need to fix that. Thank you.
PAIGE: Did you find being primarily in open source that reaching out to the developer, that was actually a welcomed thing?
SCARLETT: Not generally, but with KDE the are surprisingly very open and very, very nice. I’ve just felt really at home with KDE. It’s been a nice breath of fresh air.
PAIGE: So, you know, don’t give up looking for the right community.
SCARLETT: You’ll find it. Yeah. I’ve been looking for a long time and I just stumbled into it and didn’t expect it.
ANGELA: So, are you from around here?
SCARLETT: I live in Portland, Oregon.
ANGELA: Okay. Do you always come to Linux Fest? And are there any other festivals that you go to?
SCARLETT: This is my first one, but I will be from now on coming to Linux Fest.
ANGELA: I know, isn’t it great?
SCARLETT: Yes, but I go to Academy each year, which is in various places in Europe. This year we’re going to Spain. And then in September I’ll be going into a Random meeting which is in Switzerland for KDE.
ANGELA: Great.
PAIGE: Awesome.
SCARLETT: Yeah, fun and exciting.
PAIGE: So, you’re in Portland. Is the rest of the KDE team in Portland?
SCARLETT: No, KDE is all around the world.
PAIGE: How do you guys work together? What kind of tools do you use to keep in touch?
SCARLETT: IRC.
PAIGE: IRC?
SCARLETT: Yeah, I live in IRC.
PAIGE: Do you use version control to work together?
SCARLETT: Git.
PAIGE: Git, which is, of course of Linux. Linus, thank you. What’s your stack of tools look like right now. I always like to find out what other developers are using.
SCARLETT: I use Eclipse because it’s the only good Groovy plugin that I could find. And I use KDevelop for the Python work.
PAIGE: And do you have a favorite hardware, like laptop, tablet that you’re into? Or because KDE is so nice and friendly it works on just about everything?
SCARLETT: Yeah, I have Kubuntu on my desktop, my laptop, and then my phone has, you know, Android.
ANGELA: Nice.
PAIGE: Very cool. So, I guess last question, what are you the most excited about, about what’s coming down the pipe for technology? Either with Linux or just with general stuff.
SCARLETT: We are going to be porting our apps on to Android, so that’s kind of big.
PAIGE: Oh wow, that’s exciting.
SCARLETT: That’s what the whole Switzerland trip is about.
PAIGE: Oh nice. Very cool. We’ll have to keep an eye on that. That will be great. KDE on your Android.
ANGELA: Thank you for listening to his episode of Women’s Tech Radio. Don’t forget, you can email us, WTR@jupiterbroadcasting.com, or you can use the contact form that is over at jupiterbroadcasting.com.
PAIGE: Don’t forget to follow us on Twitter, @HeyWTR. You can also find us on iTunes or any of your other RSS feeds. The RSS feed is available on the website at jupiterbroadcasting.com. And if you have a minute, leave us a review or some feedback. We’d love to hear from you.

Transcribed by Carrie Cotter | transcription@cotterville.net

The post Living The Linux Life | WTR 25 first appeared on Jupiter Broadcasting.

Angela and Chris explain a project where you are able to gift items locally and participate in a community based system of giving and getting to know each other.

Direct Download:

HD Video | Mobile Video | MP3 Audio | YouTube

RSS Feeds:

HD Video Feed | Mobile Video Feed | MP3 Audio Feed | Torrent Feed | iTunes Feed

— Show Notes —

Buy Nothing Project

• Buy Nothing Project
• Find a Buy Nothing Project group

WTR

• Check out Women’s Tech Radio – Episode 3

• Join the discussion for it on reddit here

• Follow WTR on twitter: www.twitter.com/heywtr
• Email WTR: wtr@jupiterbroadcasting.com

Mail Sack:

Thomas writes:

I am after a little advice. I have an upgrade on my mobile phone contract. The choices are the Samsung galaxy s5 or the HTC one m8 both 16gb.

If it were you, which would you go for? The hardware looks very similar, apart from the cameras. Which the s5 looks to smash the HTC.

One thing that slightly concerns me with the samsung is KNOX. I didn’t know anything about this before my upgrade, and it seems to lock down the device, apparently voiding warranty if rooted with custom kernel/recovery.

Many thanks Chris, keep up the great work!
PS I tune into LAS every week without fail, my misses asked the other day whilst listening to you and Matt, “oh, they are still going then, is that where you got the cool computer shirt from?”

Happy new year to you and the family,

Thomas from UK.

Mike writes:

Chris, I think you’re my father. Remember that girl in High school?

Where do I get JB stickers?

Sakuramboo writes:

Sup Ang,

I figured you all could use my story in a ting ad.

Way back when, when Ting started advertising on JB, I did a lot of research on them and Sprint and was very impressed with them and their pay what you use plan. I started to become a spokesman for them even though I never switched. I introduced my sister to them and shortly after my sister and her husband switched their Sprint phones to Ting. Last time I asked her, she said that they are saving money, but not much because her husband uses a LOT of data. But, I don’t have the figures. Then, my dad was getting fed up with Verizon and decided that it was time to “try out these new smart phones everyone is talking about.” I showed him Ting and liked the pay what you use model as well. So, he bought a phone off ebay and when it came, I set everything up for him. My mom also wanted a phone and so we bought an old flip phone for her and added it to my dads plan for 6 bucks more. He now pays just a fraction of what he did before and actually has 2 phones on the plan, which blew him away.

All this in the span of about a year. And all this while I was still on Verizon but convincing everyone around me to switch to Ting. Then I bought a Moto X (Sprint) to switch and early terminate from Verizon, only to find that Sprint had a lock on the Moto X for a year and could not BYOD. Then, October 1st they opened to BYOD and I quickly ported my number and moved to the Moto X.

I was paying $95 a month for Verizon’s unlimited(?) plans. After my first month with Ting, I paid $34 dollars after tax. My only complaint is that the 4G service where I mostly am isn’t the best. But, that is a problem with Sprint. Ting got 5 new customers all because I saw their ads on JB and began pitching their ads to my family.

Thanks go out to Ting, you, Chris, Matt, and everyone else at JB for saving me almost a grand a year. That’s a raise right there.

One final note. I know Chris always gets down to the song that plays in the background of Kyra’s app of the week videos. That song was made from the samples that are included with Adobe Audition. I know this because I created the same exact song for use in a previous job many years ago.

Just in case if Chris wanted that song to play on repeat in the car to drive you crazy.

Follow Jupiter Broadcasting

• See more pics: https://instagram.com/jupiterbroadcasting#
• Sign up for Jupiter Signal: www.bit.ly/jupitersignal
• Unfilter is on Patreon! https://www.patreon.com/unfilter
• Tech Talk Today is on Patreon! https://www.patreon.com/jupitersignal

— Find the FauxShow! —

Facebook: https://www.facebook.com/thefauxshow
Twitter: https://www.twitter.com/angerz
G+: https://www.gplus.to/fauxshow
Subscribe to Jupiter Signal: https://www.bit.ly/jupitersignal
Jupiter Radio: https://jblive.info
Affiliates Firefox Extension: https://addons.mozilla.org/en-US/firefox/addon/jupiterbroadcasting/
Affiliates Chrome Extension: https://chrome.google.com/webstore/detail/bjekemhblnilimncanbehhjijdpjgimj
Donations: https://original.jupiterbroadcasting.net/donate
Shows & Shownotes: https://original.jupiterbroadcasting.net/show/fauxshow/

The post Buy Nothing | FauxShow 204 first appeared on Jupiter Broadcasting.

We recap the recent mini-exodus in the Debian project & discuss how the tone of discussion around systemd has had some terrible consequences. We follow that with some concrete ideas of what we can do to change that tone.

Plus we take a stroll down fantasy lane and wave our magic wands and solve our top three Linux pain points, some great follow up & much more.

Thanks to:

• Get Paid to Write for DigitalOcean

Direct Download:

MP3 Audio | OGG Audio | Video | HD Video | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | iTunes Feed | Video Feed | Torrent Feed | WebM Torrent Feed

Become a supporter on Patreon:

Show Notes:

Pre-Show:

• Hackers claim BitTorrent Sync should not be used for sensitive data

• Nokia’s first device after Microsoft is an iPad mini clone that runs Android

• Jolla – We are unlike

Something BIG is about to begin

FU:

• Chromium Challenge

• The ‘Simple systemd Survey’ Results

• Take Linux to the mainstream

• People loved my gnome3 + numix

• Best of JB Hunt Next Tuesday.
  LINUX Unplugged will start one hour EARLY.
  After Unplugged we team up with the Mumble room and go on the Hunt for the best moments of JB in 2014.

• Jupiter Holiday SWAG like new JB Polo

Debian sees a mini-exodus around systemd discussions

• Resigning from the Technical Committee

• Tollef Fog Heen

This morning, I resigned as a member of the systemd maintainer team.
I then proceeded to leave the relevant IRC channels and announced this
on twitter. The responses I’ve gotten have been almost all been
heartwarming. People have generally been offering hugs, saying thanks
for the work put into systemd in Debian and so on. I’ve greatly
appreciated those (and I’ve been getting those before I resigned too,
so this isn’t just a response to that). I feel bad about leaving the
rest of the team, they’re a great bunch: competent, caring, funny,
wonderful people. On the other hand, at some point I had to draw a
line and say “no further”.

• Resignation from the pkg-systemd maintainer team

I hereby resign from the systemd maintainer team in Debian. Please
remove me from Uploaders on the next upload. You’ve been an awesome
team to work with, but the load of the continued attacks is just
becoming too much.

• Bruce Perens (former Debian project leader) comments on systemd

• Chris’ comments on live stream of LAS about .net

• What can JB do to change the tone??

• Should we hold public round table discussions? How could we pull that off?

• Should we focus on getting more people into OSS?

What are the draw backs of Linux?

Hey there,

I’ve been considering more and more moving over to linux. Now, I use my computer a lot to work and unfortunately the business world is ridden with Windows. I’m currently on a Mac and the good thing with that has been that there’s Office for OS X. I don’t like office but it just makes life so much easier to run it as everyone else does and I’ve had my fare share of issues trying to send documents not created natively in office where layouts differ etc.
But more importantly besides the small thing that is MS office, what other drawbacks should I take into consideration.
I’m fully aware that Linux is awesome software, but I’m asking the question from the perspective of someone using ones computer mainly to work and casual surfing. Casual stuff I know won’t be a problem, just worried about the draw backs in a work environment.

Runs Linux from the people:

• Send in a pic/video of your runs Linux.
• Please upload videos to YouTube and submit a link via email or the subreddit.

New Shows : Tech Talk Today (Mon – Thur)

• Tech Talk Today Today | Jupiter Broadcasting

Support Jupiter Broadcasting on Patreon

Post-Show

• Who in the Linux world do you follow on twitter?

The post Debian Community Divided | LINUX Unplugged 67 first appeared on Jupiter Broadcasting.

The Shellshock bug is taking the internet by storm, Fedora project lead Matthew Miller joins us to discuss how this Bash bug works, how big of a problem it really is, and how large projects are responding to the issue. Plus we chat a little Fedora.next and more!

Then it’s our look at what’s great in Gnome 3.14, Ubuntu 14.10 & another systemd alternative that’s doing it right.

Thanks to:

Download:

HD Video | Mobile Video | WebM Torrent | MP3 Audio | Ogg Audio | YouTube | HD Torrent

RSS Feeds:

HD Video Feed | Large Video Feed | Mobile Video Feed | MP3 Feed | Ogg Feed | iTunes Feeds | Torrent Feed

Become a supporter on Patreon:

— Show Notes: —

Shellshock with Matthew Miller – FedoraProject

Brought to you by: System76

Shellshock BASH Vulnerability Tester

Shellshock (CVE-2014-6271, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187) is a vulnerability in GNU’s bash shell that gives attackers access to run remote commands on a vulnerable system. If your system has not updated bash in the last 24 hours (See patch history), you’re most definitely vulnerable and have been since first boot. This security vulnerability affects versions 1.14 (released in 1994) to the most recent version 4.3 according to NVD.

Shellshock: How does it actually work? | Fedora Magazine

And there’s quite a lot of other little cleanups in there too — security people at Fedora, at Red Hat, and around the world sure have been busy for the couple of days. Thanks to all of you for your hard work, and to Fedora’s awesome QA and Release Engineering teams, who sprung into action to make sure that these updates got to you quickly and safely.

Still more vulnerabilities in bash? Shellshock becomes whack-a-mole | Ars Technica

Here’s how the Shellshock vulnerability works, in a nutshell: an attacker sends a request to a Web server (or Git, a DHCP client, or anything else affected) that uses bash internally to interact with the operating system. This request includes data stored in an environmental variable. Environmental variables are like a clipboard for operating systems, storing information used to help it and software running on it know where to look for certain files or what configuration to start with. But in this case, the data is malformed so as to trick bash into treating it as a command, and that command is executed as part of what would normally be a benign set of script. This ability to trick bash is the shellshock bug. As a result, the attacker can run programs with the same level of access as the part of the system launching a bash shell.

Shellshock just ‘a blip’ says Richard Stallman as Bash bug attacks increase | Technology

GNU Project founder: ‘Any program can have a bug. But a proprietary program is likely to have intentional bugs’

The bash vulnerability and Docker containers | Colin Walters

In a previous post about Docker, I happened to randomly pick bash as a package shared between the host and containers. I had thought of it as a relatively innocent package, but the choice turned out to be prescient. The bash vulnerability announced today shows just how important even those apparently innocent packages can be.

shellshock – What does env x='() { :;}; command’ bash do and why is it insecure? – Unix & Linux Stack Exchange

bash stores exported function definitions as environment variables. Exported functions look like this:

$ foo() { bar; }
$ export -f foo
$ env | grep -A1 foo
foo=() {  bar
}

That is, the environment variable foo has the literal contents:

() {  bar
}

When a new instance of bash launches, it looks for these specially crafted environment variables, and interprets them as function definitions. You can even write one yourself, and see that it still works:

$ export foo='() { echo "Inside function"; }'
$ bash -c 'foo'
Inside function

Unfortunately, the parsing of function definitions from strings (the environment variables) can have wider effects than intended. In unpatched versions, it also interprets arbitrary commands that occur after the termination of the function definition. This is due to insufficient constraints in the determination of acceptable function-like strings in the environment. For example:

$ export foo='() { echo "Inside function" ; }; echo "Executed echo"'
$ bash -c 'foo'
Executed echo
Inside function

Note that the echo outside the function definition has been unexpectedly executed during bash startup. The function definition is just a step to get the evaluation and exploit to happen, the function definition itself and the environment variable used are arbitrary. The shell looks at the environment variables, sees foo, which looks like it meets the constraints it knows about what a function definition looks like, and it evaluates the line, unintentionally also executing the echo (which could be any command, malicious or not).

This is considered insecure because variables are not typically allowed or expected, by themselves, to directly cause the invocation of arbitrary code contained in them. Perhaps your program sets environment variables from untrusted user input. It would be highly unexpected that those environment variables could be manipulated in such a way that the user could run arbitrary commands without your explicit intent to do so using that environment variable for such a reason declared in the code.

— PICKS —

Runs Linux

India’s Mission to Mars, runs Linux

India has made history today by being the first and only country in the world to send a space craft to Mars in first attempt. The country also made history as it achieved it in a budget lesser than the un-scientific Hollywood block buster Gravity; India spent only $71 million on the mission.

Desktop App Pick

• How to Protect your Server Against the Shellshock Bash Vulnerability | DigitalOcean

Shellshock BASH Vulnerability Tester

You can use this website to test if your system is vulnerable, and also learn how to patch the vulnerability so you are no longer at risk for attack.

• shellshocker · GitHub

Weekly Spotlight

RockStor: Store Smartly: Free Advanced File Storage

Installs on 64-bit commodity hardware or virtual machine
Built on top of Enterprise Linux operating system
Supports NA sharing protocols including Samba/CIFS, NFS and SFTP
Efficient storage management functionility with web-ui or CLI
Extend functionality with plugins

— NEWS —

GNOME 3.14 Released, See What`s New

After six months of development, GNOME 3.14 was released today and it includes quite a few interesting changes such as multi-touch gestures for both the system and applications, re-worked default theme, new animations as well as various enhancements for the code GNOME applications.

• Gnome 3.14 reviewed on Arch Linux

In a nutshell I like Gnome 3.14 a lot. It’s a really nice release. Though I am a hard core Plasma user, I see myself spending some time with Gnome, enjoying things like online integration, easy-to-set-up Evolution and many more features which I can’t find in KDE’s Plasma. That said, both are my favorite. They both excel in their focus areas. If you have not tried Gnome yet, do give it a try.

• Gesture support in Shell Apart from Touch support in Shell there is also…

Apart from Touch support in Shell there is also support for GNOME apps and in fact some GNOME apps they do use gestures!

• GTK+ 3.14 Brings Much Better Wayland Support, Multi-Touch, New Theme

The Wayland changes for GTK+ 3.14 include support for the recently released Wayland 1.6, touch input is now supported, working drag-and-drop support, and support for the GNOME classic mode.

• Download GNOME 3.14 ISO (based on Fedora 21)

• Touching on Touchscreen Support | Erich Eickmeyer

Touchscreens are no longer just for tablets and phones. Touchscreen laptop computers and desktops are becoming the norm, if not more common, in the computer market. Much of this has been spurred-on by Microsoft and Windows 8, whose “Modern” interface is about as touchscreen-friendly as you can get. In fact, it is what is driving the laptop market to include capacitive touchscreens.

The nosh package

It should also be suitable for filling the gap caused by the
systemd tool not being portable outwith the Linux kernel since it
is known to work on proper BSD and on Debian Linux, and therefore
should work on Debian kFreeBSD.

Ubuntu 14.10 Beta Downloads Now Available

There’s not even a new default desktop wallpaper.

• Why GNOME 3.14 Won’t Be Included in Ubuntu 14.10 – OMG! Ubuntu!

Feature Freeze is the point past which no new features, packages or APIs are introduced, with emphasis placed on polish and bug fixing to ensure as stable an experience as possible. Feature Freeze for Ubuntu 14.10 and its flavors came into effect on August 21 — a month prior to the release of GNOME 3.14 Stable.

It’s this tight timeframe that conspires against the Ubuntu GNOME team, making it impossible for them to include latest GNOME stack. If you were one of those who hoped to find GNOME 3.12 in Ubuntu 14.04 LTS, you’ll be familiar with the impact this has.

A series of maintained PPAs — Stable, Staging, and Next — provide backports of newer GNOME releases to Ubuntu, allowing you to optionally roll with (potentially untested) newer software should you want to.

Tech Talk Today | A Daily Tech News Show with a Linux Perspective

• Tech Talk Today Subreddit

— FEEDBACK —

• Jupiter Broadcasting Fall/Spring Jacket | Teespring

• Jupiter Broadcasting at Ohio LinuxFest – Google+

— CHRIS’ STASH —

• jupiterbroadcasting on Instagram

Hang in our chat room:

irc.geekshed.net #jupiterbroadcasting

— MATT’S STASH —

• Check out LINUX Unplugged
• Articles by Matt Hartley

Find us on Google+

• Chris
• Matt Hartley
• Jupiter Broadcasting’s Page

Find us on Twitter

• Chris – ChrisLAS
• Matt – matthartley

Follow the network on Facebook

• Jupiter Broadcasting on Facebook

Catch the show LIVE Sunday 10am Pacific / 1pm Eastern / 6pm UTC:

• https://jblive.tv
• Network Calendar

The post Weaponized Bash | Linux Action Show 332 first appeared on Jupiter Broadcasting.

Mike and Chris address a number of topics this week, from open source project’s properly communicating with the media, Google selling Motorola to Leveno, and a debate about Microsoft’s rumored CEO choice.

Plus your feedback, and more!

Thanks to:

• Help the DigitalOcean community by submitting articles and get paid $50 per published piece!

Direct Download:

MP3 Audio | OGG Audio | Video | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | Video Feed | Torrent Feed | iTunes Audio | iTunes Video

— Show Notes: —

Feedback

• We all love / hate college
• Jason’s email: Scala deployment with only free software
• Johnny’s email: Software Factory
• Egon’s Email: Egon is still around
• https://imgur.com/RaFYS4V

Dev Week Hoopla

• Google sells Motorola to Lenovo for $2.91 billion | The Verge

Google will retain ownership of the vast majority of Motorola\’s patents, while 2,000 patents and a license on the remaining patents will go to Lenovo. At the deal\’s closing, Lenovo will pay Google $660 million in cash and $750 million in stock, while the remaining $1.5 billion will be paid out over three years.
+ Google Sells Motorola to Lenovo: Winners and Losers
So how does Google come out ahead? Backing up a bit, Google had already arranged to sell Motorola\’s set-top box business to Arris Group for about $2.3 billion (cash and stock) even before its takeover of Motorola was technically closed. Google also offloaded things like factories for about $100 million, closed offices, kicked 4,000 people to the curb, and pocketed Motorola\’s assets. So now, with the Lenovo sale, Google\’s on-paper out-of-pocket cost on acquiring Motorola is down to about $1.8 billion. That\’s not bad, considering Google valued Motorola\’s patents and technology at about $5.5 billion when it took over the company.
Of course, Motorola Mobility has lost almost $2 billion since Google took it over — and that\’s gotta burn.

• Google could swap Nexus line with Google Play by 2015 | Android Atlas – CNET Reviews

According to Murtazin\’s sources, Google will introduce two or three more Nexus-branded products this year, but will discontinue the sub-brand in 2015. This bligger indicates that Google will rebrand the Play Edition as the Nexus replacement.
+ Report: Satya Nadella to be named Microsoft CEO; Gates out, too | PCWorld

Microsoft\’s cloud chief, Satya Nadella, will lead the company as its next chief executive, according to a report from Bloomberg.
+ As Microsoft CEO rumors swirl, consider the Bill Gates factor | Microsoft – CNET News
According to three different reports from the past few days (Recode, Bloomberg, The Wall Street Journal), Gates may end up resigning as chairman to take on a more active product development role at the company.

• Microsoft\’s CEO Pick: a Safe Choice, With Edge – WSJ.com

If he is named CEO, Mr. Nadella would inherit many advantages. Microsoft generated $27 billion in operating profit in the year ended June 30, and the company holds $84 billion in cash. Microsoft\’s Windows still runs roughly nine out of every 10 desktop and laptop computers in the world, and its Office and Exchange programs are corporate mainstays.

Follow the hosts and the show:

• FingertipTech on Twitter

• Email the show

• Join the Coder Radio Subreddit
• Live Monday 9am PST
• Music by: Ronald Jenkees
• Mike on Twitter
• Mike on Google+
• Mike’s website
• Chris on twitter
• Chris on Google+

The post Waning Windows | CR 87 first appeared on Jupiter Broadcasting.

The guys attempt to answer when to sunset a project, Github calls you stupid, and is depending on other software that can’t last forever simply kicking the can down the road?

Plus taking on too many projects at once, your feedback, Mike’s pick of the week, and more!

Direct Download:

MP3 Audio | OGG Audio | Video | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | Video Feed | Torrent Feed | iTunes Audio | iTunes Video

Show Notes:

Feedback

• Notbryant is taking “Intro to Software Engineering” and is learning about project management and asks for “any advice on not being an evil PM”
• Jimmy has a problem:

“I tend to get too serious about too many projects at the same time.
Any advice would be greatly appreciated. I was already working on porting an application, almost at completion, but now my Raspberry Pi has arrived. Sigh.”

Also wants to share his blog

The End

• Software doesn’t last forever.
• 1 Year, 2 Years, 3 Years
• “Sun-setting” a project

Book of the Week

[asa]078214327X[/asa]

Tool of The Week

• SmartGitHg

Follow the show

• Email the show
• Live Monday 9am PST
• Music by: Ronald Jenkees
• Mike on Twitter
• Mike on Google+
• Mike’s website
• Chris on twitter
• Chris on Google+

The post GitHub Calls You Stupid | CR 34 first appeared on Jupiter Broadcasting.

When is the time right to launch your project? Mike and Chris discuss how understanding your market can be key to answering that question, building a community, advertising, and when to just ship it.

Plus: Things to tell your IT guy, QA war stories, and a batch of your feedback!

Direct Download:

MP3 Audio | OGG Audio | Video | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | Video Feed | Torrent Feed | iTunes Audio | iTunes Video

Show Notes:

Feedback

• New Coder wants to when he is considered to “know” a language.

• Luke asks:

“How is it you come to figure out the right tools (languages) for the right job, and once you do that, what\’s the anticipated \’study time\’ that needs to go into learning to use the language well enough to feel like you can actually do what you\’ve set out to do?”

• Eric shares a development contest

• Hayden wants to know what I think of JavaFX

• mdominick.com – Give Duke a Break

Brian’s War Story

Hello Michael and Chris,

I work in a medium sized development shop with about 20 developers working on what\’s essentially an enterprise client side app. I have always considered our process for releasing bug fix updates as being rather backwards and poorly executed. Essentially our head of \”QA\” will send an e-mail one morning to all developers that the code is \”frozen\”.

He will then do a build, test it for 4 or 5 days and then send an e-mail to everyone that the code is \”unfrozen\”. During this \”frozen\” time the developers are still expected to continue fixing bugs but rather than check in their changes they are supposed to \”sit\” on them, usually for several days, until the \”unfrozen\” e-mail is sent out. At this point a free-for-all of code check in commences with all sorts of conflict and collision shenanigans.

That said, there is nothing physically restricting the checking in of code. If a developer doesn\’t see the \”fr eeze\” e-mail or simply forgets after a few days then \”QA\” unleashes their wrath on the poor sod. I\’m sure you can see all sorts of problems with this joke of a build/test/release process and I am even a little embarrassed just describing it. I would like to offer some suggestions to my superiors about ways to improve this and was wondering if you guys had any thoughts or suggestions.

One, perhaps obvious idea would be to switch to using Git as we are still using the ancient CVS for source control. However I\’m still very much a novice and trying to learn it better in my spare time. How would you suggest to use Git in a way that we can improve our build/test/release cycle? Do you have any other thoughts or suggestions to bring our release cycle up to a more sane and reasonable, not to mention modern process?

Thanks for your thoughts and thank you for the awesome show you do each week.

Sincerely,
Brian M.

Launch!

• How do you know when your project is ready to launch?

• Is this really a bug?

  • Bug? or new feature?

• Do I have to be 100% bug free to ship?

  • Is that even possible

• What market?

Follow the show

• Email the show
• Live Monday 9am PST
• Music by: Ronald Jenkees
• Mike on Twitter
• Mike on Google+
• Mike’s website
• Chris on twitter
• Chris on Google+

The post Just Ship | CR 33 first appeared on Jupiter Broadcasting.

Angela and Chris give out random and ridiculous awards to our audience, who have submitted the projects they plan to work on the next few months! Plus we even slip in a project of our own, and toxic levels of coffee are involved!

Direct Download:

HD Download | Mobile Download | MP3 Download | YouTube

RSS Feeds:

HD Video Feed | Mobile Video Feed | MP3 Audio Feed | Torrent Feed | iTunes Feeds

Show Notes:

[asa]B0083TUEHY[/asa]

The post Summer Project Awards | FauxShow 98 first appeared on Jupiter Broadcasting.

Last week we played games on Linux, this week – It’s time to get some work done!

Find out how some of the busiest guys on the Internet manage it get it all done, using Linux!

Plus – Find out why Motorola might be Android’s next big threat, and Cisco’s plans to help protect Linux!

All this week on, The Linux Action Show!

Thanks to:

GoDaddy.com Use our codes LINUX to save 10% at checkout, or LINUX20 to save 20% on hosting!

Subscribe…— The Linux Action Show! —iTunes MP3iTunes Large VideoiTunes iPod VideoLarge Video RSSiPod Video RSSMP3 Audio RSSOgg Audio RSS— ALL SHOWS —iTunes Large VideoiTunes MP3Large Video RSSMP3 Audio RSSOGG Audio RSS— PODCAST NETWORKS —StitcherMiroZuneiTunes

[ad#shownotes]

Episode Show Notes:

Runs Linux:

Raspberry Pi, Runs Linux

Android Pick:

• TeamSpeak for Android BETA
• Android Picks so far thanks to Madjo in the IRC Chat room!

Linux Pick:

• Inkscape
• Linux App Picks so far. Thanks to Madjo!

News:

• Cisco and Twitter join Linux patent protection pool
• Motorola Considers Collecting IP Royalties as Android Patent Trouble Worsens
• Nokia: the N9 isn’t coming to America
• KDE Plans To Support Wayland In 2012
• Ubuntu 11.10 Has a New Login Manager
• LightDM – Ubuntu Wiki

Getting Work Done:

• Redmine – Overview
• How to install Redmine in Ubuntu
• HowTo: Redmine with Git and Gitosis on Ubuntu 11.04
• HowTo: Install Redmine on CentOS 5
• Todo.txt Touch
• Dropbox
• TiddlyWiki – a reusable non-linear personal web notebook
• Inkscape. Draw Freely.
• GetDeb.net for Inkscape
• Inkscape Screencasts

Additional:

• Road-Sign Hank Issue #1

Find us on Google+

• Bryan
• Chris

Find us on Twitter:

• Bryan – BryanLunduke
• Chris – ChrisLAS

Follow the network on Facebook:

• Jupiter Broadcasting on Facebook

Catch the show LIVE at 10am on Sunday:

• https://jblive.tv

The post Getting Work Done | LAS | s18e02 first appeared on Jupiter Broadcasting.