Language Selection

English French German Italian Portuguese Spanish

Roy Schestowitz's blog

Migrating TuxMachines to a Bigger Server

Filed under
Site News

We are in the process of moving the TuxMachines Web site to a better server with more capacity and better hardware. There may be temporarily odd behaviour on the site (if data is accessed which is out of date).

Monitoring Tux Machines With Apachetop, Nmon and Htop

Filed under
Site News

Monitoring Tux Machines

Summary: A little glimpse at how we monitor this site for DDOS attacks and general performance, especially now that DDOS attacks have already become pervasive and routine (Apachetop helps identity attack patterns and visual, colourful alerts are triggered in Nmon and Htop)

Malicious Bots

Filed under
Site News

Choking on bots, cannot cope

TUX MACHINES may seem to have become rather slow if not unreachable at times. Over the past few months we've had issues with bots that request as many as 10,000 files per minute from the site's server, which is obviously unable to cope with the load/bandwidth and actually deliver what's requested. Sometimes it even resets Apache in order to regain order. At the moment we lack a permanent solution, but we have some mitigations in place.

More than 5 years ago we had to stop new account sign-ups due to spammers setting up loads of dummy accounts (hundreds per day), then directing these to vandalise the site. This inevitably led to tighter control from an editorial perspective and it reduced the number of comments.

Running a site is no picnic; it's a 24/7 responsibility. We do the best we can to maintain a reliable service whilst at the same time also pursuing the latest news stories of interest. This takes a huge amount of time and dedication.

If it is difficult to reach the site or if the site feels very slow, it's almost definitely due to those bots. The server's uptime is now 160 days.

Microsoft Loves Painting Apple (or "GAFA") as the Problem

Filed under
Just talk

Mask Me No Questions: The 'new' Microsoft; Mask Me No Questions

Summary: The latest twist in Microsoft's PR strategy is, divert attention and blame to other companies [1,2], even if their alleged abuses are in fact a copy of Microsoft's own

  • Microsoft Backs Epic’s Apple Battle on Game Technology Access

    The graphics technology, known as Unreal Engine, is a suite of software used by millions of developers to build 3-D games and other products. Cutting off Epic from Apple’s iOS and Mac developer tools would mean the gaming company can no longer distribute Unreal Engine to other developers, Epic said in its legal filing. Microsoft, which makes the Xbox, uses the technology for games developed for consoles, PCs and mobile devices.

  • Microsoft Supports Epic Games, Says Apple Blocking Access to Unreal Engine Would Harm Game Creators

    In a declaration in support of Epic Games [PDF], Microsoft gaming executive Kevin Gammill wrote that "Apple's discontinuation of Epic's ability to develop and support Unreal Engine for iOS or macOS will harm game creators and gamers." Specifically, Gammill said that games utilizing Unreal Engine will be put at a "substantial disadvantage," citing Microsoft's own racing game Forza Street for iPhone and iPad as an example.

140,000 Reached

Filed under
Site News

Clock

THIS may be hard to believe, but after more than 16 years we've managed to put together 140,000 Drupal nodes (this one is the 140,000th). Most of these are news clippings and clusters of links. The rest are pages, blog posts and forum threads.

The next meaningful milestone will be the 150,000th node and our 20th anniversary (some time in 2024). We're quite certain we'll get there, along with 200,000 nodes, as this past week we've been in the region of all-time record traffic.

Susan is still involved sometimes, albeit behind the scenes. We thank her enormously for all the work she did.

3 Months From Home

Filed under
Site News

TM setup portrait


TUX MACHINES has been run from one single place over the past 3 months because of the COVID-19-induced lock-downs. We no longer travel far from home (it's impractical)... and we both work from home anyway.

The prolonged shut-down of businesses (they only reopened a fortnight ago) resulted in lack of access to some digital necessities, but that almost always meant more free time to rethink and reassess the workflow and the workspace with existing hardware (reshuffling what we already have, both new and old).

Last month I showed how the screens on my desk were split to handle multi-tasking. Last week I shuffled to portrait mode (as shown above). Rianne too uses 2 or 3 screens, but her setup is somewhat simpler. We basically both use a combination of RSS readers. I mostly use QuiteRSS and she uses Thunderbird and QuiteRSS in conjunction (best of both worlds). We're still hoping that an intern based in Africa will start participating soon. The pandemic has made access to the Internet a lot harder for him. He wants to cover programming and Web-related topics for us.

Sweet Sixteen

Filed under
Site News

Exuberant dog

TUX MACHINES is turning 16 today. Yes, 16. Not many sites last this long.

The interesting thing is, this past week we had an all-time traffic record and the same is true for the week prior. So for two weeks in a row, despite relatively slow news, we broke a record.

We aren't celebrating the birthday this year (we're still restricted in what can be done here, due to the virus), but maybe next year we'll do something and even share some photos.

Peaking Again

Filed under
Site News

Summary: In terms of number of daily nodes, we're at the pinnacle still (despite slow news at times of lock-downs)

Tux Machines is turning 16 exactly one month from now. We've decided to plot activity over time, as measured by number of posts/nodes. It's not the most important measure (e.g. original articles), but it's something that's not too hard to plot.

Attached to this post is tux-posts.txt, which can be converted into tux-numbers.txt as follows:

sed 's/[\t ][\t ]*/ /g' < tux-posts.txt | cut -d' ' -f3,5 >tux-numbers.txt

We can then plot it:

gnuplot -p -e 'plot "./tux-numbers.txt" with linespoints linetype 1 pointtype 2 linecolor 10'

And voila!

Plot tuxmachines posts

In a month from now we might buy a cake.

Running Tux Machines

Filed under
Site News

Roy's deskop

Roy's deskop and laptop

Roy's deskop and laptop with text

Running Tux Machines with my wife (the lead editor, I mostly sweep up and cluster related stories) is a hobby but it feels like a full-time job, a 24/7 job that involves picking and sorting news as quickly as possible, almost non-stop around the clock. My own workflow -- not speaking about Rianne's -- can be shown in this annotated photo, which I took a couple of hours ago. Readers might find it interesting, knowing roughly how the site is run from my side (not Rianne's). The office is at home of course, as we're both remote workers in the area of computing. We're like sysadmins for a living and maintaining Tux Machines helps keep us abreast of the latest technologies.

Turning 16 This Summer

Filed under
Site News

No crisis for the "tuxmachiners"

tuxmachines at whois

AS keen observers may be aware, bearing in mind last year's anniversary party (when such parties were still permitted), we're soon turning 16. There won't be a party or anything; not even online (it's pointless).

This past year has been our strongest and for whatever reason since the pandemic began (epidemic escalated and declared "pandemic"), then soon thereafter lock-downs were enforced, we saw another uptick in traffic. We don't spy on visitors, but we merely observe the size of Apache logs, which are then wiped for privacy reasons.

When Rianne and I took over the site in 2013 it had already flourished, thanks to the love of care of Susan. We continue curating the news, clustering together related reports. The list of blogs we syndicate continues to grow because the mainstream media perishes, leaving a vacuum for people who are eager to find timely information, such as distro reviews and howtos.

If you run a GNU/Linux-oriented blog in the English language that we do not link to (most likely because we're not aware of its existence), let us know in the comments, in IRC, or other contact means. We soon turn 16 and we're quite confident that we'll make it to 20 as well. At the moment, as of this month, we also do server upgrades and we hope to add SSL soon. We've already moved one of this site's databases to a separate container in Alpine Linux. We make improvements while maintaining the site's spirit and long tradition.

Stay home. Save lives.

100,000 Tweets

Filed under
Site News

@tuxmachines in Twitter
The @tuxmachines account in Twitter as of this morning

We have been on Twitter for nearly a decade. It's proprietary and centralised, but some of our audience comes from there. In the start of March we'll have posted our 100,000th tweet in Twitter. A milestone? Maybe for Twitter. We try to focus on our presence in Free/libre networks, such as Mastodon, Pleroma and Diaspora. We joined Pleroma a year ago and have more followers there than we have in Twitter. Spring is fast approaching, which means we soon turn 16.

Why Tux Machines Occasionally Adds Editorial Comments

Filed under
Just talk

Editorials

Summary: Editorial remarks (or Editor's comments, "Ed" for short) play a role in highlighting potential inaccuracies -- and manipulations of the mind -- when those aren't so shallow and aren't abundantly obvious

Recently, and as lately as a few hours ago, Richard Stallman exchanged some messages and we might meet again in a few months (he is traveling to the UK). Stallman and I share a concern about neglect of truth and history; for instance, many GNU programs are nowadays dubbed "LINUX COMMANDS" (I saw one example of that just 2 hours ago) and people sometimes lose sight of the important goals, focusing on brands instead of philosophy, political aspects and so on.

"Sometimes we link to something which isn't entirely accurate or can be misleading."

I would like to take this moment, on the last day of this year, to explain where we stand on issues pertaining to software freedom. A few times in the past one reader bemoaned my editorial comments (marked "Ed"), which typically bemoan something about the cited article/s. Sometimes we link to something which isn't entirely accurate or can be misleading. One example of that is openwashing. Another rather common and increasingly ubiquitous example concerns Microsoft "loving" Linux (it actually loves Windows).

We live in a world with Public Relations and marketing agencies. They exist to mislead; they shape perceptions -- that's their business model! To blindly link to just anything online without commentary or curation would likely lead us astray. Truth does matter. Facts need to be checked. This is what Tux Machines strives to achieve; throwing the word "LINUX" into something like Google News would expose one to loads of cruft, irrelevant stuff, plagiarism, pure spam and sometimes intentional lies. With no human operator or editor just about anything can be dunked into search results, owing to SEO manipulation and mishandling of indexes. I've seen that for well over a decade. Automation just doesn't work; someone who understands the problem domain needs to assess things for quality and accuracy.

"To be fair, comments are open, so readers can respond."

My adult life (since age 18 or so when I became a GNU/Linux user) involved very hard work and lifelong activism for software freedom. Not everyone agrees with me and if sometimes I may say something readers disagree with (e.g. in editorial comments), then it's likely because I try to be realistic, not jingoistic. Moreover, no two individuals will agree on everything 100% of the time. That's inevitable. So some readers might dislike these editorial comments. To be fair, comments are open, so readers can respond.

At the moment, the way I personally see it, Free software is under a number of attacks. There are different types of attacks. I think Free software will endure regardless. On a more positive note, Free software is nowadays used everywhere, it's just not being called that ("Open Source" is the term corporate media prefers) and it has been leveraged as a low-cost 'cushion' for DRM, surveillance, militarism etc. Think of companies like Facebook and Netflix (GNU and Linux at their back ends). Is this what we strive for? Closed systems that are merely built upon Freedom-respecting stacks?

"At the moment, the way I personally see it, Free software is under a number of attacks."

Software freedom is a huge objective in a world where almost everything becomes digital (only more so over time). I think it's up to us to somehow guide the world's software towards ethical uses, without necessarily imposing how it's used, and that is perhaps a future challenge for the Free Software Movement. It's a monumental challenge because politics can be a massive terrain to navigate. Over at Techrights I mostly focus on issues such as patents (laws), with emphasis on the U.S. Patent and Trademark Office (USPTO), the European Patent Office (EPO) granting software patents in Europe and so on. Patents on algorithms are one kind of barrier (among many) impeding Free software adoption.

The End of Tux Machines' Strongest Year

Filed under
Site News

Tux Machines 2020

TODAY is the last day of the last month of this year if not decade. We're pleased to close this year with record traffic levels. In 2019 we increased our coverage of programming-centric matters, especially when the underlying frameworks/languages were Free/libre software.

Earlier this year we also celebrated our 15th anniversary. There are three of us working behind the scenes to make the site up to date and keep it up (online). We're all passionate users of GNU/Linux who want to spread the word and encourage more people to use the platform.

In 2019 not only did we see record traffic levels; we also saw an unprecedented level of success for GNU/Linux in the adoption sense. Rianne is responsible for "Android leftovers" and remember that each Android device has Linux (or "Tux") in it. Google explored alternatives, but we haven't heard of these for months. It's nowadays very difficult to run a company or start a company without Linux -- no matter if in the server or device space. Let's hope Tux Machines will be around -- and online -- for many years to come. Happy new year.

Moving Into 'Christmas Mode'

Filed under
Site News

Slow news day

Summary: Fewer news items in days to come and potentially some planned downtime as well

AS ONE can expect, we won't be able to find much news over the next few days, and perhaps be 'low volume' for as long as a week or more to come (a problem to news addicts or neophiles). We'll try to also upgrade/migrate the site if all goes according to plan. In that case, there might be limited downtime (scheduled, altogether expected, no need to panic).

Merry Christmas to those who celebrate it.

Keep the Bees Going

Filed under
Site News

Bee

MANCHESTER is known as the city of "working bees" because of the work ethics or its hard-working people. Working bees are the symbol of Manchester, where my wife and I are based and spend each day -- morning, afternoon, evening and sometimes night -- posting updates here in Tux Machines.

The end of the year is fast approaching. Literally 22 days left, i.e. 3 weeks and a day. We wish to thank those who tipped up yesterday to keep us going. We accept donations through PayPal and we're grateful for any contribution readers can make, even if as meager as a cup of coffee's worth. It gives my wife and I motivation to continue and circulate updates as soon as we find them. Thank you! Smile

Using Menus For Command Line Programs and Scripts

Filed under
Howtos

THE holidays are coming (Christmas approaching), so I've taken advantage of some spare time to menu-ise commands that I use frequently. Those commands aren't the mere opening of an application and they often require dealing with input and output (in the command line). So I've created menu.sh and used dialog to craft the following menu, e.g. for operations associated with Techrights. I invoke this menu with the click of one button (of the mouse).

Rianne has a similar menu for commands she often runs (which are long and would otherwise need pasting or typing in length). Her menu looks something like this:

Rianne's menu

Here's the code (bash file) that renders the menu above (it's really that simple!):


#!/bin/bash

HEIGHT=15
WIDTH=40
CHOICE_HEIGHT=4
BACKTITLE="Aloha, Rianne"
TITLE="Rianne @ Ted"
MENU="Choose one of the following options:"

OPTIONS=(1 "Start VPN"
         2 "REDACTED"
         3 "REDACTED"
	4 "REDACTED"
	5 "REDACTED"
	6 "REDACTED"
	7 "REDACTED"
)

CHOICE=$(dialog --clear \
                --backtitle "$BACKTITLE" \
                --title "$TITLE" \
                --menu "$MENU" \
                $HEIGHT $WIDTH $CHOICE_HEIGHT \
                "${OPTIONS[@]}" \
                2>&1 >/dev/tty)

clear
case $CHOICE in
        1)
            echo "You chose Option 1"
sh ~/vpn.sh ;;

        2)
            echo "You chose Option 2"
REDACTED COMMAND ;;
        3)
            echo "You chose Option 3"
REDACTED COMMAND ;;
        4)
            echo "You chose Option 4"
REDACTED COMMAND ;;
        5)
            echo "You chose Option 5"
REDACTED COMMAND ;;
        6)
            echo "You chose Option 6"
REDACTED COMMAND ;;
        7)
            echo "You chose Option 7"
REDACTED COMMAND ;;

esac

Hopefully this inspires other people out there to do the same. It takes a while to set up, but it's a big time saver over the long run.

Tux Machines Entering a Third Decade Soon

Filed under
Site News

Put your tuxedo on

Tux Machines 2020
Getting better over time?

SUSAN created this site a very long time ago, more than a decade and a half in the past. Susan did a spectacular job. With regular news updates she managed to grow the site in terms of pages, screenshots, reviews, readers, and contributors. We are eternally thankful to her.

Rianne and I have run the site since 2013. 2020 is around the corner (just over 3 weeks left!) and that makes another new decade. In terms of site traffic we continue to grow. Other than Rianne and I posting news updates 'around the clock' there's already a systems administrator who volunteered to help keep the site chugging along. We are very thankful to him. He prefers to remain unnamed. So Tux Machines is basically not a one-person operation. It is basically a team of three people now (in addition to various people who add posts/links). Rianne (based in the UK) usually takes the lead with breaking stories, I tend to post summaries or clusters of related links and system integrity/uptime is assured from Scandinavia. The hypervisor is physically in the United States. We're a sort of international team with no income source (other than our jobs).

If you enjoy the site and find it handy, maybe you wish to drop us a tip for Christmas as a token of gratitude. Anything helps, even a cup of coffee's worth. Coffee helps keep us awake to post more links. Wink

Keeping a Web Site Safe and Available With or Without a CDN

Filed under
Site News

PostgreSQL

THE site Tux Machines is and has been online for over 15 years. It has not suffered security-related incidents. The same is true for Techrights, which soon turns 13. Tux Machines uses Gallery and Drupal, whereas Techrights uses MediaWiki, WordPress and Drupal. WordPress is its most important component as it contains over 26,000 posts. Tux Machines has about 130,000 nodes in Drupal. We don't use a CDN as we have a reasonably powerful server that can cope with the load on its own. For security we use best practices and keep critical issues plugged. I was recently asked for advice on these matters and explained things as follows.

There are mainly two types of attacks (maybe three if one includes social engineering, e.g. tricking a citizen journalist/blogger/administrator into a trap):

1) capacity-based, e.g. DDOS attack

2) exploiting vulnerabilities to degrade/compromise site's quality of service (similar to (1) above but not the same), access site data (confidential), spy on people (writers/staff/visitors) without them being aware.

WordPress runs lots of stuff and powers a lot of the Web, maybe 20% (or more) of today's Web sites. It's regularly checked for security issues and bugs are regularly fixed. Updates can be set to automatic, which means they happen in the background without user intervention. I check the site for updates several times per day, e.g. this one from yesterday.

I've used WordPress for 15 years as an early adopter and developer.

What's known as the "core" of WordPress is generally secure if kept up to date, manually or automatically (for large sites it might make sense to apply patches manually to reduce risk of unnoticed incidents and enable quality control, patch assessment etc). It's also important to keep the underlying operating system and pertinent packages like PHP (programming language), mysql/psql (WordPress and Drupal typically use MariaDB or MySQL as the database, but PostgreSQL should be possible too) and Apache (there are simpler alternatives e.g. NGINX for Web server) up to date.

If we get to keep everything up to date, and moreover we don't install WordPress extensions that cannot be trusted or are no longer maintained (or scarcely maintained), we should be OK. The social engineering part involves stuff such as phishing, e.g. someone sending out an E-mail in an attempt to obtain passwords of privileged users.

If you use a CDN for content distribution, e.g. CloudFlare, then availability will be mostly down to the CDN company. WordPress generates pages on the fly (dynamic), but it has caching mechanisms that can be further improved with extensions. The CDN likely obviates the need for those. So, if the site is receiving 'too many' requests, the CDN can probably scale to deal with that (maybe a more expensive protection plan).

I peronsally would never use CloudFlare (for a lot of reasons), but to many people it's the only CDN that 'counts' or exists. Brand recognition perhaps.

Daylight Linux Version 4

Filed under
Linux

Daylight Linux (Web site) version 4 has just been released.

The Linux kernel is now upgraded to the 5.3 version for the AMD64 live version and Kernel 4.19.68 for the Raspberry Pi version.

All packages are upgraded to the Debian 10 version or to the cutting-edge version (experimental) for all current software packages.

Added compatibility for the Raspberry Pi 4.

By Hamdy Abou El Anein
Founder / Linux system engineer

Daylight Linux V4

Daylight Linux V4

Daylight Linux V4

Daylight Linux V4

Daylight Linux V4

Contact Private Internet Access (PIA) Managers to Help Save Linux Journal From Shutdown

Filed under
Site News

Private Internet Access

TUX MACHINES turned 15 almost exactly two months ago. The site has operational costs, as one can expect, mostly the hardware and bandwidth. We've thankfully had these resources very kindly donated to us last year, basically saving us the massive burden of bills somewhere around $10,000. Running a site with a lot of traffic isn't cheap and it isn't getting cheaper, either. As an overhead or addition to server maintenance (uptime requires habitual work on repairing databases, managing backups, patching of software and agonising system upgrades once in a few years) it takes a lot of time to compose new material and moderate to keep spam out.

A lot of the mainstream media is bashing Linux Journal right now. It makes it seem like its demise is a problem with GNU/Linux itself. These are villainous lies from self-serving foes of Linux, sometimes people who are aligned with Microsoft or salaried by Microsoft (we don't want to link to their provocative clickbait). But anyway, the bottom line is that keeping Linux Journal online may be costly and people should prepare for the possibility of Linux Journal becoming unavailable (offline) some time soon. I try very hard to prevent this (today and yesterday). "There is a real (and ever-growing) danger that a massive trove of GNU/Linux and Free software history will vanish unless urgent action is taken right now," I said. There are ways to avoid this (writers of that site need to unite in a union-like sense). I also secure my own sites from such a fate, having reached almost 13 years in Techrights. This week the site is experiencing all-time traffic records.

I've decided to contact Rick Falkvinge (Dick Greger Augustsson), founder of the Swedish Pirate Party and head of privacy at Private Internet Access, which owns Linux Journal. Bear in mind he used to work for Microsoft. We're still friendly online (we've exchanged some messages over the years) and he probably has sufficient clout at Private Internet Access to sway their decisions. In case they plan to shut down the site, we must act fast. Please contact him; as per his Web site, his E-mail address is x1bpsas66na001@sneakemail.com and any message he receives he can relay to other high-level people at the company. I don't personally know anyone else at that company, so that's the only contact I'm able to provide.

Syndicate content

More in Tux Machines

today's leftovers

  • Snapcraft Clinic Successes

    On Thursday I mentioned we were restarting the Snapcraft Clinic. Basically we stand up a regular video call with engineers from the snap and snapcraft team & us from Snap Advocacy. Developers of applications and publishers of snaps are invited to join to troubleshoot. There was nothing especially secret or private discussed, but as we don’t record or stream the calls, and I don’t have direct permission to mention the applications or people involved, so I’ll keep this a little vague. In future I think we should ask permission and record the outcomes of the calls. We had a few productive discussions. One developer brought an application which they’d requested classic confinement for, and wished to discuss the options for confinement. We had a rather lengthy open discussion about the appropriateness of the available options. The developer was offered some choices, including making changes to their application to accomodate confinement, and another was (as always) not to snap the application. They appreciated our openness in terms of accepting that there are limitations with all software, and not everything always makes sense to be packaged as a snap, at the moment. We also had a productive discusison with a representative of a group responsible for publishing multiple snaps. They had difficulties with a graphical snapped application once it had been updated to use core20. The application would launch and almost immediately segfault. As the application was already published in the Snap Store, in a non-stable channel, we were all able to install it to test on our own systems.

  • Kraft Version 0.96

    Ich freue mich, heute das Release Version 0.96 von Kraft herauszugeben. Die neue Version kann über die Homepage heruntergeladen werden.

  • A new data format has landed in the upcoming GTG 0.5

    Diego’s changes are major, invasive technological changes, and they would benefit from extensive testing by everybody with “real data” before 0.5 happens (very soon). I’ve done some pretty extensive testing & bug reporting in the last few months; Diego fixed all the issues I’ve reported so far, so I’ve pretty much run out of serious bugs now, as only a few remain targetted to the 0.5 milestone… But I’m only human, and it is possible that issues might remain, even after my troll-testing. Grab GTG’s git version ASAP, with a copy of your real data (for extra caution, and also because we want you to test with real data); see the instructions in the README, including the “Where is my user data and config stored?” section. Please torture-test it to make sure everything is working properly, and report issues you may find (if any). Look for anything that might seem broken “compared to 0.4”, incorrect task parenting/associations, incorrect tagging, broken content, etc.

  • MAS ‘Ocean strainer’ technology to be open source

    Inspired by the success of its ‘Ocean Strainer’ floating trash trap, a pilot project launched in the Dehiwala Canal last year, MAS Holdings will make the ‘Ocean Strainer’ technology available to interested parties, to replicate and scale up the solution.

  • Notes on Addressing Supply Chain Vulnerabilities

    One of the unsung achievements of modern software development is the degree to which it has become componentized: not that long ago, when you wanted to write a piece of software you had to write pretty much the whole thing using whatever tools were provided by the language you were writing in, maybe with a few specialized libraries like OpenSSL. No longer. The combination of newer languages, Open Source development and easy-to-use package management systems like JavaScript’s npm or Rust’s Cargo/crates.io has revolutionized how people write software, making it standard practice to pull in third party libraries even for the simplest tasks; it’s not at all uncommon for programs to depend on hundreds or thousands of third party packages. [...] Even packages which are well maintained and have good development practices routinely have vulnerabilities. For example, Firefox recently released a new version that fixed a vulnerability in the popular ANGLE graphics engine, which is maintained by Google. Both Mozilla and Google follow the practices that this blog post recommends, but it’s just the case that people make mistakes. To (possibly mis)quote Steve Bellovin, “Software has bugs. Security-relevant software has security-relevant bugs”. So, while these practices are important to reduce the risk of vulnerabilities, we know they can’t eliminate them. Of course this applies to inadvertant vulnerabilities, but what about malicious actors (though note that Brewer et al. observe that “Taking a step back, although supply-chain attacks are a risk, the vast majority of vulnerabilities are mundane and unintentional—honest errors made by well-intentioned developers.”)? It’s possible that some of their proposed changes (in particular forbidding anonymous authors) might have an impact here, but it’s really hard to see how this is actionable. What’s the standard for not being anonymous? That you have an e-mail address? A Web page? A DUNS number?[3] None of these seem particularly difficult for a dedicated attacker to fake and of course the more strict you make the requirements the more it’s a burden for the (vast majority) of legitimate developers. I do want to acknowledge at this point that Brewer et al. clearly state that multiple layers of protection needed and that it’s necessary to have robust mechanisms for handling vulnerability defenses. I agree with all that, I’m just less certain about this particular piece.

  • 26 Firefox Quantum About:Config Tricks You Need to Learn - Make Tech Easier

    “Here be dragons,” reads the ominous disclaimer when you type about:config into Firefox’s URL bar, warning you that tweaking things in this area is largely experimental and can cause instability to your browser. Sounds exciting, right? And even though it sounds a little scary, the fact is you will almost certainly be okay when you start playing around in this area and can actually use the features here to improve and speed up your browser. These are Make Tech Easier’s favorite Firefox about:config tricks, freshly updated for Firefox Quantum.

  • Attackers collaborate to exploit CVE-2021-21972 and CVE-2021-21973 - Blueliv

Programming Leftovers

  • The HTTP Referer header is fading away (at least as a useful thing)

    The HTTP Referer header on requests is famously misspelled (it should be Referrer), and also famously not liked because of privacy and security concerns. The privacy and security concerns are especially strong with external ('cross-origin') Referers, which is also the ones that many people find most useful because they tell you where visitors to your pages are coming from and let you find places where people have linked to you or are mentioning you.

  • Top 10 Natural Language Processing (NLP) Trends To Look Forward

    AI and Machine Learning have gifted us marvelous things. NLP or Natural Language Processing is one of them. It is one of the most prominent applications of AI. We are using this technology in our day-to-day life without even knowing. Translators, speech recognition apps, chatbots are actually NLP-powered products. Tech giants like Google and Microsoft are making new developments in NLP every year. If you are an AI enthusiast, you should go deep inside NLP. Chill! We got you covered. Just go through the article, and know about the top NLP trends that most data scientists are talking about.

  • Russ Allbery: DocKnot 4.01

    DocKnot is my software documentation and release management tool. This release adds support for a global user configuration file separate from the metadata for any given project and adds support for signing generated distribution tarballs with GnuPG. Currently, the only configuration options for the global configuration file are to set the destination location of generated distributions and the PGP key to use when signing them.

  • horizonator: terrain renderer based on SRTM DEMs

    I just resurrected and cleaned up an old tool I had lying around. It's now nice and usable by others. This tool loads terrain data, and renders it from the ground, simulating what a human or a camera would see. This is useful for armchair exploring or for identifying peaks. This was relatively novel when I wrote it >10 years ago, but there are a number of similar tools in existence now. This implementation is still useful in that it's freely licensed and contains APIs, so fancier processing can be performed on its output.

  • Happy birthday, Python, you're 30 years old this week: Easy to learn, and the right tool at the right time

    The 30th anniversary of Python this week finds the programming language at the top of its game, but not without challenges. "I do believe that Python just doesn’t have the right priorities these days," said Armin Ronacher, director of engineering at software monitoring biz Sentry and creator of Flask, the popular Python web app framework, in an email interview with The Register. Ronacher, a prolific Python contributor, remains a fan of the language. He credits Python's success to being both easy to learn and having an implementation that was easy to hack. And in its early years, Python didn't have a lot of competitors with those same characteristics, he said.

  • Google fires 150 game developers hired for Stadia: Report

    In about two years, Google has announced to shut down the in-house Stadia game development division, as it sees a great adoption of its technology by third-party developers and publishers to create world-class games.

    Google has said that it will not be investing further in bringing exclusive content from its internal development team SG&E, beyond any near-term planned games.

Benchmarks at Phoronix and Phoronix Test Suite

  • Vulkan Ray-Tracing Along With Other New/Updated Benchmarks For February - Phoronix

    Below is a look at all of the updates now available via OpenBenchmarking.org for Phoronix Test Suite users or if simply wanting to go to the test profile pages to gauge the CPU/GPU performance in the different real-world workloads. All these updates are available to Phoronix Test Suite users automatically if on an Internet connection when the metadata automatically updates or by running phoronix-test-suite openbenchmarking-refresh to force refresh.

  • The Phoronix Test Suite Gains Vulkan Ray-Tracing Benchmarks

    The versatile Phoronix Test Suite, developed and used by the Linux news website Phoronix, has gained profiles for benchmarking Vulkan ray-tracing performance using two different benchmarks as well as the JPEG XL benchmarks. There's also updates to many of the existing tests as well as a new 10.2.2 release of the Phoronix Test Suite software. [...] Michael Larabel has also updated many existing benchmarks, including the ones for the commercial closed-source games Portal 2, Insurgency and Civilization VI, blender, the libavif AVIF image encoder, the dav1d AV1 video encoder, GROMACS (GROningen MAchine for Chemical Simulations), ParaView, V-RAY (commercial), Pennant (OpenMP benchmark), NWChem and the free software platform game DDraceNetwork.

today's howtos

  • How To Use chmod and chown Command in Linux

    How do I use chmod and chown command under Linux / Unix operating systems? Use the chown command to change file owner and group information. we run the chmod command command to change file access permissions such as read, write, and access. This page explains how to use chmod and chown command on Linux or Unix-like systems.

  • How To Add Route on Linux – devconnected

    As a network engineer, you probably spend a lot of time thinking and planning your network infrastructure. You plan how computers will be linked, physically using specific cables but also logically using routing tables. When your network plan is built, you will have to implement every single link that you theorized on paper. In some cases, if you are using Linux computers, you may have to add some routes in order to link it to other networks in your company. Adding routes on Linux is extremely simple and costless : you can use the Network Manager daemon (if you are running a recent distribution) or the ifconfig one. In this tutorial, you will learn how you can easily add new routes on a Linux machine in order to link it to your physical network.

  • syncing subtitles in freedom

    The topic of creating subtitles with Free Software has often come up in my circles of Emacs-oriented users, and I haven't had a good recommendation to share, until this idea hit me the other day. Subtitle files are largely blocks of start/end time associated with blocks of text. I figured, once you got a transcript, existing Emacs Org Mode features could be used, perhaps along with keyboard macros, to turn the transcript into a synced subtitle file.

  • How To Install Minecraft on Ubuntu 20.04 LTS [Ed: Proprietary and Microsoft; not an attractive option as Free/libre alternatives exist]

    In this tutorial, we will show you how to install Minecraft on Ubuntu 20.04 LTS. For those of you who didn’t know, Minecraft is the most popular sandbox video game developed by Mojang studios but later purchased by Microsoft. It can be used with all major platforms like Linux, macOS, and Windows. Most Minecraft players would agree that the secrete to the game’s success lies in its creativity-inspiring design. Players are free to explore a large, procedurally generated world made of blocks, each of which can be interacted with, moved, or transformed into resources for crafting. This article assumes you have at least basic knowledge of Linux, know how to use the shell, and most importantly, you host your site on your own VPS. The installation is quite simple and assumes you are running in the root account, if not you may need to add ‘sudo‘ to the commands to get root privileges. I will show you through the step-by-step installation of Minecraft on Ubuntu 20.04 (Focal Fossa). You can follow the same instructions for Ubuntu 18.04, 16.04, and any other Debian-based distribution like Linux Mint.

  • Ubuntu: format SD card [Guide]

    Are you new to Ubuntu? Do you need to format your SD card but can’t figure out how to do it? If so, this guide is for you! Follow along as we go over a few ways you can format SD cards on Linux.

  • How to remove a remove apt repository from Debian

    Do you have an Apt repository on your Debian Linux PC that you want to delete? Can’t figure out how to do it? We can help! Follow along as we go over two ways you can remove Apt repositories from Debian!

  • The Raspberry PI Cheat Sheet – Raspberry PI User

    The Raspberry PI cheat sheet gives a quick overview of common commands, installation tips and links to guides to help you set up your Raspberry PI as a desktop computer.

  • Do a Kernel Upgrade the Easy Way in Linux Mint

    Upgrading the Linux kernel can be difficult, especially for new Linux users. In Linux Mint, however, it's possible to upgrade to a newer kernel with zero hassle. Today we'll find out how to do it, and what to do if you experience problems.