Show Notes: linuxunplugged.com/464

The post Git Happens | LINUX Unplugged 464 first appeared on Jupiter Broadcasting.

HD Video Feed | MP3 Audio Feed | iTunes Feed | Torrent Feed

Become a supporter on Patreon:

Show Notes:

Net Neutrality – mail your Congressional Reps and Senators & state

governor – do not email or fax them. Put it in the mail.

• FYI, but mail them instead: Redditor shares a text bot that will send a fax to your state representative, senators, and governor, with message to fight for net neutrality

• Net Neutrality subreddit

• Hacker News: what can you do to help net neutrality

Security Alerts from GitHub

• define dependencies in one of the supported manifest file types, like package.json or Gemfile.

• similar to FreeBSD vuxml database – uses dependencies already listed in each FreeBSD port

here are over a billion outdated Android devices in use

• It’s common knowledge that Android device tend to be more out of date than iOS devices, but what does this actually mean?

• People sometimes compare Android to Windows XP because there are a large number of both in the wild and in both cases, most devices will not get security updates. However, this is tremendously unfair to Windows XP, which was released on 10/2001 and got security updates until 4/2014, twelve and a half years later.

• Another difference between Android and Windows is that Android’s scale is unprecedented in the desktop world. The were roughly 200 million PCs sold in 2017. Samsung alone has been selling that many mobile devices per year since 2008.

• If we look at the newest Android release (8.0, 8/2017), it looks like you’re quite lucky if you have a two year old device that will get the latest update. The oldest “Google” phone supported is the Nexus 6P (9/2015), giving it just under two years of support.

• But even with the data we have, we can take a guess at how many outdated devices are in use. In May 2017, Google announced that there are over two billion active Android devices. If we look at the latest stats (the far right edge), we can see that nearly half of these devices are two years out of date. At this point, we should expect that there are more than one billion devices that are two years out of date! Given Android’s update model, we should expect approximately 0% of those devices to ever get updated to a modern version of Android.

• Project Treble

Flight rules for git

A guide for astronauts (now, programmers using git) about what to do when things go wrong.

• Flight Rules are the hard-earned body of knowledge recorded in manuals that list, step-by-step, what to do if X occurs, and why. Essentially, they are extremely detailed, scenario-specific standard operating procedures. […]

• NASA has been capturing our missteps, disasters and solutions since the early 1960s, when Mercury-era ground teams first started gathering “lessons learned” into a compendium that now lists thousands of problematic situations, from engine failure to busted hatch handles to computer glitches, and their solutions.

• What did I just commit?

• I wrote the wrong thing in a commit message

• I committed with the wrong name and email configured

• I want to remove a file from a commit

Feedback

• Dan announces he is leaving the show.

• postgres and shared memory

• containers vs VM

Round Up:

• StartCom gets out of the certificates business – some background

• Massive US military social media spying archive left wide open in AWS S3 buckets

• ZFS from a MySQL perspective

• Announcing Prometheus 2.0

  • Node Exporter
  • Installation overview of node_exporter, prometheus and grafana

• The 3-Minute SQL Indexing Quiz That 60% Fail

The post Neutral Nets | TechSNAP 346 first appeared on Jupiter Broadcasting.

HD Video Feed | MP3 Audio Feed | iTunes Feed | Torrent Feed

Become a supporter on Patreon:

Show Notes:

“Stack Clash” poses threat to Linux, FreeBSD, OpenBSD, and other OSes

• affects Linux, OpenBSD, NetBSD, FreeBSD and Solaris, on i386 and amd64

• The original blog post

• The official advisory

• The following is not a complete list of CVEs found during the research

• The primary CVE

• Some are secondary and directly related CVE

• Some are independently exploitable and related to sudo

The RNC Files: Inside the Largest US Voter Data Leak

• misconfigured database containing the sensitive personal details of over 198 million American voters was left exposed to the internet by a firm working on behalf of the Republican National Committee (RNC)

• names, dates of birth, home addresses, phone numbers, and voter registration details, as well as data described as “modeled” voter ethnicities and religions.

• exposing the personal information of over sixty-one percent of the entire US population

Dan’s DNS setup

• DNS can be thought of as a phone book
• Once ran a single DNS server at home
• Had both internal (non public) and public hosts in the same zone file
• Moved internal hosts to .int subdomain
• had master/slave in public, but went to svn later
• Held zone files in svn, published them directly to servers

Feedback

• Freenas – Transferring files locally see sysutils/fusefs-ntfs

• Password managers filling in credentials

• Episode 323 Yellow dots give you see also https://en.wikipedia.org/wiki/EURion_constellation

• You cannot turn off Windows 10 Telemetry with a Group Policy

Round Up:

• WannaCry computer worm to North
  Korea

• Rooting a Printer

• Travel (Linux) laptop setup

• FreeNAS 11.0 is Now Here

The post DNS Mastery | TechSNAP 324 first appeared on Jupiter Broadcasting.

We\’ve got an interview with Henning Brauer about OpenBSD\’s pf firewall, a tutorial on how to follow the -STABLE and -CURRENT branches of FreeBSD, a recap of what happened at vBSDCon this year and.. As always, lots of news to cover, so stay tuned to BSD Now – the place to B.. SD.

Direct Download:

Video | HD Video | MP3 Audio | OGG Audio | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | iTunes Feed | Video Feed | HD Vid Feed | HD Torrent Feed

– Show Notes: –

Headlines

Managed services using FreeBSD

• New York Internet, a huge ISP and service provider, details how they use FreeBSD
• Mentions using BSD technologies: pf, pfsync, carp, haproxy, zfs, jails and more
• Explains FreeBSD\’s role in commercial workloads on a massive scale
• Lots of cool graphs and info, check out the full write-up

OpenBSD boot support for keydisk-based crypto volumes

• So far, only passphrase-based crypto volumes were bootable
• Full disk encryption with key disks required a non-crypto partition to load the kernel
• The bootloader now scans all BIOS-visible disks for RAID partitions and automatically associates key disk partitions with their crypto volume
• No need to re-create existing volumes. Moving the root partition onto the crypto disk and running \”installboot\” is all that\’s needed

More Dragonfly SMP speedups

• Matthew Dillon has been committing lots of various SMP improvements
• Using dports builds on a 48-processor machine as a test
• The machine’s now building more than 1000 packages an hour
• Super technical details in the show notes, check \’em out

Getting to know portmgr

• Start of an ongoing series profiling members of the FreeBSD Ports Management Team
• In the first interview, they talk to longest serving member of the team, Joe Marcus Clarke
• In the second, Bernhard Frölich (who\’s also the creator of redports.org)
• Future segments will include the other members
• Topics include their inspiration for using FreeBSD, first time using it, lots of other interesting stuff

BSD Now at the top of iTunes

• BSD Now is on the front-and-center page of iTunes\’ technology podcast section
• We\’re better than everyone else and Leo is fat

Interview – Henning Brauer – henning@openbsd.org / @henningbrauer

OpenBSD\’s pf firewall, privilege separation, various topics

Tutorial

Tracking -STABLE and -CURRENT

• The BSDs have development branches you can follow
• This guide shows the differences between FreeBSD -RELEASE, -STABLE and -CURRENT
• Will do OpenBSD and NetBSD versions in the future, their methods are all pretty different

News Roundup

OpenBSD gets XBox360 controller support

• Adds support for Microsoft XBox 360 controller as a uhid
• Will make things easier for emulators in OpenBSD
• Are there people who regularly play games on BSD? Email us, might do a segment on it

PCBSD 10-STABLE ISOs available

• Early cut of the new stable/10 branch, not recommended for everyone
• A pkgng repository is available, but is missing a number of packages
• AMD KMS, new text installer, UEFI loader support, much more

Switching from Linux to BSD

• Yet another Linux user switching to BSD makes a thread about it
• Asks the community what some differences and advantages are
• Good response from the community, worth reading if you\’re a Linux guy

Unattended OpenBSD installations

• Unattended installations possible using DHCP and a \”response\” file
• The system gets an IP via DHCP, then fetches a config file with key=value pairs
• Can do automatic network setup, SSH, passwords, etc
• Still a work in progress

Feedback/Questions

• Kjell-Aleksander writes in: https://slexy.org/view/s21hxDpzjO
• Alex writes in: https://slexy.org/view/s21ibNDb5y
• Chad writes in: https://slexy.org/view/s20D6K2NUe
• Joshua writes in: https://slexy.org/view/s20UZLFHAg
• Craig writes in: https://slexy.org/view/s20S15bbZ4

• All the tutorials are posted in their entirety at bsdnow.tv
• Send questions, comments, show ideas/topics, etc to feedback@bsdnow.tv
• We don’t check YouTube comments, JB comments, Reddit, etc. If you want us to see it, send it via email (the preferred way) or Twitter (also acceptable)
• Watch live Wednesdays at 2:00PM Eastern (18:00 UTC)

The post -CURRENT Events | BSD Now 9 first appeared on Jupiter Broadcasting.

Michael and Chris discuss the current state of lower level development, using C and other low level languages as a window into the deepest parts of software development.

Plus your great feedback, and more!

Direct Download:

MP3 Audio | OGG Audio | Video | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | Video Feed | Torrent Feed | iTunes Audio | iTunes Video

Show Notes:

Feedback

• Emett wants to know if there is a development or scripting solution to have to repave
  mutiple boxes quickly.
• Stefan is interested in hearing more about desktop development and is working on a panel in Xlib and Python.
• Daniel, is interested in recursion.
• Some passionate reactions to the piracy issues.

PSA RE TOS

• Mike attempts to rescue a Google+ friend from the jaws of GMAIL’s TOS… and fails.

Low Level 101

• What exactly is a low level language?
• Why should I care?
• Where would I find low level languages in use today.

UNLIMITED POWER!!!!!(Sorta)

• Generally, the lower you go the more efficient your code.
• C will have a much faster startup time than higher level languages
• More portable than you might think….
• Higher level languages Java in particular have been inching closer and closer to C / C++ running speed

For All You Snakes Out There

• Python and C better together
• Not to be left out: Ruby

Danger in Deep

• Think before you dive
• Memory management
• Development time++
• GCC / LLVM — make sure you never go it alone
• Proprietary extensions…. Bad for the web — bad for native code

The Horror! The Horror

• Tubsta shares his horror story

Project Update

• Check out the project on Gethub

Book Pick

[asa]B000PY3ZCG[/asa]

Tool of the Week

• Boots Smart Pointers

The post 20,000 Leagues Under Java! | CR 06 first appeared on Jupiter Broadcasting.