Language Selection

English French German Italian Portuguese Spanish

today's leftovers

Filed under
  • The mysterious case of the Linux Page Table Isolation patches

    tl;dr: there is presently an embargoed security bug impacting apparently all contemporary CPU architectures that implement virtual memory, requiring hardware changes to fully resolve. Urgent development of a software mitigation is being done in the open and recently landed in the Linux kernel, and a similar mitigation began appearing in NT kernels in November. In the worst case the software fix causes huge slowdowns in typical workloads. There are hints the attack impacts common virtualization environments including Amazon EC2 and Google Compute Engine, and additional hints the exact attack may involve a new variant of Rowhammer.

  • systemd Breached One Million Lines Of Code In 2017

    Systemd had a busy 2017 and its code-base is now up to over one million lines.

    Systemd in 2017 saw 3,443 commits, which is actually the lowest point since 2012. But the commits were larger with having 418,903 lines of code added and 119,975 lines removed: a net gain of nearly 300,000 lines of code.

  • NuTyX 10.0-rc1 is release

    The NuTyX team is proud to annonce the first release candidat of the next major version 10 of NuTyX.

  • Arcan 0.5.4, Durden 0.4

    From left to right, we have a little Raspberry  running the ‘prio’ WM using the broadcom binary blob drivers (so lacks some of the features needed to run durden), with arcan and terminals eating up all of 20MB of ram. The left Macbook running OSX with Arcan/Durden in fullscreen, retina resolution, of course. The Macbook on the right is running the same system on OpenBSD 6.2. The three-headed monkey behind them is a voidlinux setup with two instances, one on an intel GPU, the other on an AMD GPU. If only the android devices on the wall could be brought in on the fun as well…

  • Arcan 0.5.4 Display Server Released With Durden 0.4 Desktop

    Remember Arcan? The Linux display server built off a game engine. The project is ending 2017 with the release of the Arcan 0.5.4 display server and its associated Durden v0.4 desktop.

    With the Arcan 0.5.4 release, its X.Org-backend has been ported to OpenBSD, its VRbridge tool now has basic OpenHMD support, improvements to its Wayland protocol handling, and a lot more.

  • LinuxJournal, Which Ceased Publication Last Month Citing Poor Financial Condition, Secures Fresh Fund From Readers To Resume Operation

    LinuxJournal announced in Nov 2017 that they were going to cease publication; With some timely intervention by Private Internet Access they are going to be able to continue operation and are currently soliciting feedback for improving the magazine in the future.

More in Tux Machines

Games: Atari, Coregrounds and More

Security: Endgame, Updates, antiX, Fedora and SELinux

  • Endgame Launches Open-Source Initiative to Drive Adoption of MITRE ATT&CK™, the Best Model of Attacker Behavior
    Endgame, the leader in unified endpoint protection against targeted attacks, today announced it released a set of open-source tools that allow enterprises to test defenses against modern attacker behaviors. These tools, called red team automation (RTA), directly map to MITRE's ATT&CK™ matrix, the most comprehensive framework for attacker techniques and tactics. Security teams that lack sufficient time and resources will now have the ability to measure protection capabilities beyond malware-based attacks.
  • Security updates for Monday
  • Security updates for Friday
  • Debian-Based antiX Linux OS Receives New Kernel Patches for Meltdown and Spectre
    The first point release of the Debian-based antiX 17 "Heather Heyer" operating system series arrived this past weekend with a new kernel patched against the Meltdown and Spectre security flaws, as well as the latest software versions. antiX 17.1 (Heather Heyer) is now available, powered by the Linux 4.9.87 LTS kernel patched against the Meltdown and Spectre security vulnerabilities unearthed in January 2018 and discovered to put billions of devices at risk of attacks. This protects new antiX installations against these type of attacks. Based on the latest Debian GNU/Linux 9.4 "Stretch" operating system, antiX 17.1 comes with up-to-date packages from its software repositories, including the LibreOffice 5.2.7 office suite and Mozilla Firefox 52.7.1 ESR web browser. Additionally, this release comes with eudev 3.5 and latest xf86-video-sisimedia-antix release.
  • Update on the Meltdown & Spectre vulnerabilities
    January saw the annoucement of a series of critical vulnerabilities called Spectre and Meltdown. The nature of these issues meant the solutions were complex and required fixing delicate code. The initial fix for Meltdown on x86 was KPTI, which was available almost immediately. Developing mitigations for Spectre was more complex. Other architectures had to look at their vulnerability status as well, and get mitigation in where it was needed. As a bit of time has passed, what is the exposure on Fedora now?
  • SELinux should and does BLOCK access to Docker socket

You Can Now Transform Your Raspberry Pi 3 Model B+ into a Home Theatre System

OSMC (Open Source Media Center), the free and open-source media player operating system based on the Linux kernel and designed for single-board computers received March 2018's update with dozens of changes, including support for the latest Raspberry Pi model. Raspberry Pi Foundation announced last week on Pi Day, March 14, 2018, the Raspberry Pi 3 Model B+ single-board computer (SBC), which features updated hardware, including a 1.4GHz 64-bit Quad-core ARM Cortex-A53 CPU, Gigabit Ethernet over USB 2.0, Bluetooth 4.2, Dual-band 802.11ac wireless LAN, and PoE support. The developers of the OSMC Linux OS (formerly RaspBMC) received some pre-production units from Raspberry Pi Foundation to prepare their upcoming release for the new SBC, and March's update is now live with Raspberry Pi 3 Model B+ support, allowing you to transform it into a versatile home theatre system. Read more

LG/webOS Coverage Today