Language Selection

English French German Italian Portuguese Spanish

About Tux Machines

Wednesday, 22 Nov 17 - Tux Machines is a community-driven public service/news site which has been around for over a decade and primarily focuses on GNU/LinuxSubscribe now Syndicate content

Search This Site

Quick Roundup

Type Title Author Replies Last Postsort icon
Story Mastodon is Free Software, But It Does Not Respect Free Speech Roy Schestowitz 21/11/2017 - 8:37am
Story today's howtos Rianne Schestowitz 21/11/2017 - 7:49am
Story Mesa 17.3 RC5 and Early Stages of Linux 4.15 Rianne Schestowitz 21/11/2017 - 7:35am
Story Videos: Akademy 2017 Talk, Upgrading Linux Mint, This Week in Linux Rianne Schestowitz 21/11/2017 - 7:32am
Story LibreELEC (Krypton) v8.2.1 MR Rianne Schestowitz 21/11/2017 - 7:27am
Story Microsoft Worker Leaves for Google, Criticizes Post-Windows Vista Dev Strategy Rianne Schestowitz 21/11/2017 - 7:01am
Story LiFT Scholarship Recipients Advance Open Source Around the World Rianne Schestowitz 21/11/2017 - 3:36am
Story Linux Containers vs Virtual Machines Rianne Schestowitz 21/11/2017 - 3:29am
Story Linux gizmo indexes photos and videos for visual recognition search Rianne Schestowitz 21/11/2017 - 3:01am
Story today's leftovers Roy Schestowitz 20/11/2017 - 9:15pm

Debian Developers

Filed under
Development
Debian
  • Joey Hess: stupid long route

    Yesterday, I surpassed all that, and I did it in a way that hearkens right back to the original story. I had two computers, 20 feet apart, I wanted one to talk to the other, and the route between the two ended up traveling not around the Earth, but almost the distance to the Moon.

    I was rebuilding my home's access point, and ran into a annoying bug that prevented it from listening to wifi. I knew it was still connected over ethernet to the satellite receiver.

    I connected my laptop to the satellite receiver over wifi. But, I didn't know the IP address to reach the access point. Then I remembered I had set it up so incoming ssh to the satellite receiver was directed to the access point.

  • I am now a Debian Developer

    On the 6th of April 2017, I finally took the plunge and applied for Debian Developer status. On 1 August, during DebConf in Montréal, my application was approved. If you’re paying attention to the dates you might notice that that was nearly 4 months ago already. I was trying to write a story about how it came to be, but it ended up long. Really long (current draft is around 20 times longer than this entire post). So I decided I’d rather do a proper bio page one day and just do a super short version for now so that someone might end up actually reading it.

  • Freexian’s report about Debian Long Term Support, October 2017

    Like each month, here comes a report about the work of paid contributors to Debian LTS.

Programming: GNU Nano, Software Engineering Talent Shortage, HHVM (PHP)

Filed under
Development
GNU
  • GNU Nano Latest Version 2.9.0

    GNU nano 2.9.0 "Eta" introduces the ability to record and
    replay keystrokes (M-: to start and stop recording, M-;
    to play the macro back), makes ^Q and ^S do something
    useful by default (^Q starts a backward search, and ^S
    saves the current file), changes ^W to start always a
    forward search, shows the number of open buffers (when
    more than one) in the title bar, no longer asks to press
    Enter when there are errors in an rc file, retires the
    options '--quiet' and 'set quiet' and 'set backwards',
    makes indenting and unindenting undoable, will look in
    $XDG_CONFIG_HOME for a nanorc file and in $XDG_DATA_HOME
    for the history files, adds a history stack for executed
    commands (^R^X), does not overwrite the position-history
    file of another nano, and fixes a score of tiny bugs.

  • GNU Nano Text Editor Can Now Record & Replay Keystrokes

    GNU Nano 2.9 is now available as the latest feature release of this popular CLI text editor and it's bringing several new capabilities.

    First up, GNU Nano 2.9 has the ability to record and replay keystrokes within the text editor. M-: is used to start/stop the keystroke recording session while M-; is used to playback the macro / recorded keystrokes.

  • 2018's Software Engineering Talent Shortage— It’s quality, not just quantity

    The software engineering shortage is not a lack of individuals calling themselves “engineers”, the shortage is one of quality — a lack of well-studied, experienced engineers with a formal and deep understanding of software engineering.

  • HHVM 3.23

    HHVM 3.23 is released! This release contains new features, bug fixes, performance improvements, and supporting work for future improvements. Packages have been published in the usual places, however we have rotated the GPG key used to sign packages; see the installation instructions for more information.

  • Facebook Releases HHVM 3.23 With OpenSSL 1.1 Support, Experimental Bytecode Emitter

    HHVM 3.23 has been released as their high performance virtual machine for powering their Hack programming language and current PHP support.

    As mentioned back in September though, Facebook will stop focusing on PHP 7 compatibility in favor of driving their own Hack programming language forward. It's after their next release, HHVM 3.24, in early 2018 they will stop their commitment to supporting PHP5 features and at the same time not focus on PHP7 support. Due to the advancements made by upstream PHP on improving their performance, etc, Facebook is diverting their attention to instead just bolstering Hack and thus overtime the PHP support within HHVM will degrade.

Linux 4.14 File-System Benchmarks: Btrfs, EXT4, F2FS, XFS

Filed under
Graphics/Benchmarks

Our latest Linux file-system benchmarking is looking at the performance of the mainline Btrfs, EXT4, F2FS, and XFS file-systems on the Linux 4.14 kernel compared to 4.13 and 4.12.

In looking to see how the file-system/disk performance has changed if at all under the newly released Linux 4.14 kernel, I carried out some 4.12/4.13/4.14 benchmarks using Btrfs/EXT4/F2FS/XFS while freshly formatting the drive each time and using the default mount options.

Read more

Also: Freedreno Gallium3D Supports A Fair Amount Of OpenGL 4.x

Canonical Releases Snapcraft 2.35 with Support for Ubuntu 14.04 LTS and Solus

Filed under
Ubuntu

Snapcraft 2.35 comes approximately two months after the September release of Snapcraft 2.34, and it's a major update that finally adds support for the Ubuntu 14.04 LTS (Trusty Tahr) operating system series, which is maintained by Canonical for five years, until April 2019.

Ubuntu 14.04 LTS support in Snapcraft is particularly important for running Snaps based on ROS (Robot Operating System) Indigo, which is based on this LTS Ubuntu release. In addition, Snapcraft also appears to have received support for the Solus Linux-based operating system.

Read more

Snaps Are Coming to Ubuntu 18.04 by Default, Kubuntu Could Also Adopt Them

Filed under
Ubuntu

Snap, the universal Linux binary format from Canonical, allows us to run the most recent versions of apps on day one. The developers of the Ubuntu MATE official Ubuntu flavor pioneered the concept of Snaps by default for their distribution with the release of Ubuntu MATE 17.10 (Artful Aardvark) by shipping a tiny PulseAudio mixer command-line app to get the pulse of the community.

As things went well on their side and no issues were reported by users so far, now the Ubuntu team laid down plans on a mechanism that should allow users to install Snaps on a freshly installed Ubuntu 18.04 LTS (Bionic Beaver) operating system from the ISO image.

Read more

BlackArch Linux Ethical Hacking and Penetration Testing OS Drops 32-Bit Support

Filed under
Linux

The announcement was published this morning on their website and Twitter account, as it looks like the BlackArch developers plan to remove the 32-bit ISO images and respective repositories soon, urging all those running BlackArch on 32-bit PCs to upgrade to the 64-bit version of the operating system as soon as possible.

"Following 9 months of deprecation period, support for the i686 architecture effectively ends today. By the end of November, i686 packages will be removed from our mirrors and later from the packages archive," said the devs. "We wish to thank all of BlackArch's users, mirrors, and supporters. Thanks for your help."

Read more

Also: BlackArch Linux Distro For Ethical Hacking Drops 32-bit Support

Raspberry Pi Digital Signage OS Updated to Debian Stretch, Chromium 62 Browser

Filed under
Linux
Debian

Raspberry Digital Signage 10.0 is the latest release of the operating system designed for deployment on digital signage infrastructures, backed by the tiny Raspberry Pi computer. It comes six months after the release of version 9.0 with a complete rebase on the latest Debian GNU/Linux 9 "Stretch" operating system series.

Marco Buratto announces the release of Raspberry Digital Signage 10.0 today, saying that it's utilizing the latest and greatest Chromium 62 open-source web browser, which features improved HTML5 video playback capabilities, better Adobe Flash support, as well as overall H264/AVC video playback performance improvements.

Read more

Open Linux – Beyond distributions, regressions and rivalry

Filed under
GNU
Linux

I love Linux. Which is why, whenever there’s a new distro release and it’s less than optimal (read, horrible), a unicorn dies somewhere. And since unicorns are pretty much mythical, it tells you how bad the situation is. On a more serious note, I’ve started my autumn crop of distro testing, and the results are rather discouraging. Worse than just bad results, we get inconsistent results. This is possibly even worse than having a product that works badly. The wild emotional seesaw of love-hate, hope-despair plays havoc with users and their loyalty.

Looking back to similar tests in previous years, it’s as if nothing has changed. We’re spinning. Literally. Distro releases happen in a sort of intellectual vacuum, isolated from one another, with little to no cross-cooperation or cohesion. This got me thinking. Are there any mechanisms that could help strengthen partnership among different distro teams, so that our desktops looks and behave with more quality and consistency?

Read more

Security: PeopleSoft, DJI, IoT, Amazon, Microsoft, ​Google, Ad Blocking and Codewarz

Filed under
Security
  • Oracle rushes out 5 patches for huge vulnerabilities in PeopleSoft app server

    Oracle issued a set of urgent security fixes on Tuesday that repair vulnerabilities revealed today by researchers from the managed security provider ERPScan at the DeepSec security conference in Vienna, Austria. The five vulnerabilities include one dubbed "JoltandBleed" by the researchers because of its similarity to the HeartBleed vulnerability discovered in OpenSSL in 2014. JoltandBleed is a serious vulnerability that could expose entire business applications running on PeopleSoft platforms accessible from the public Internet.

    The products affected include Oracle PeopleSoft Campus Solutions, Human Capital Management, Financial Management, and Supply Chain Management, as well as any other product using the Tuxedo 2 application server. According to recent research by ERPScan, more than 1,000 enterprises have their PeopleSoft systems exposed to the Internet, including a number of universities that use PeopleSoft Campus Solutions to manage student data.

  • Man gets threats—not bug bounty—after finding DJI customer data in public view

    DJI, the Chinese company that manufactures the popular Phantom brand of consumer quadcopter drones, was informed in September that developers had left the private keys for both the "wildcard" certificate for all the company's Web domains and the keys to cloud storage accounts on Amazon Web Services exposed publicly in code posted to GitHub. Using the data, researcher Kevin Finisterre was able to access flight log data and images uploaded by DJI customers, including photos of government IDs, drivers licenses, and passports. Some of the data included flight logs from accounts associated with government and military domains.

  • New Study Finds Poorly Secured Smart Toys Lets Attackers Listen In On Your Kids

    We've long noted how the painful lack of security and privacy standards in the internet of (broken) things is also very well-represented in the world of connected toys. Like IOT vendors, toymakers were so eager to make money, they left even basic privacy and security standards stranded in the rear view mirror as they rush to connect everything to the internet. As a result, we've seen repeated instances where your kids' conversations and interests are being hoovered up without consent, with the data frequently left unencrypted and openly accessible in the cloud.

    With Luddites everywhere failing to realize that modern Barbie needs a better firewall, this is increasingly becoming a bigger problem. The latest case in point: new research by Which? and the German consumer group Stiftung Warentest found yet more flaws in Bluetooth and wifi-enabled toys that allow a total stranger to listen in on or chat up your toddler:

  • Amazon Key flaw makes entering your home undetected a possibility
  • How to fix a program without the source code? Patch the binary directly
  • ​Google Home and Amazon Echo hit by big bad Bluetooth flaws
  • Senator urges ad blocking by feds as possible remedy to malvertising scourge

    A US Senator trying to eradicate the Internet scourge known as malvertising is proposing that all federal agencies block ads delivered to worker computers unless advertisers can ensure their networks are free of content that contains malicious code.

    In a letter sent today, Oregon Senator Ron Wyden asked White House Cybersecurity Coordinator Rob Joyce to begin discussions with advertising industry officials to ensure ads displayed on websites can't be used to infect US government computers. If, after 180 days, Joyce isn't "completely confident" the industry has curbed the problem, Wyden asked that Joyce direct the US Department of Homeland Security to issue a directive "requiring federal agencies to block the delivery to employees' computers of all Internet ads containing executable code."

    "Malware is increasingly delivered through code embedded in seemingly innocuous advertisements online," Wyden wrote. "Individuals do not even need to click on ads to get infected: this malicious software, including ransomware, is delivered without any interaction by the user."

  • Weekend code warriors prepare to clash in Codewarz

    If you didn't have any weekend plans yet—or maybe even if you did—and you're interested in scratching your programming itch, there's something to add to your calendar. Codewarz, a programming competition that presents participants with 24 coding challenges, is running its first live event starting at 1pm Eastern on November 18 and ending at 9pm on November 20.

    This is not a hacking competition—it’s strictly coding. Participants can use their language of choice as long as it's one of the 15 supported by the event: the various flavors of C, Python, Node.js, Scala, PHP, Go, Ruby, and even BASH. (Sorry, no one has asked them to support ADA or Eiffel yet.) There's no compiling required, either. Each submitted solution is run in an interpreted sandbox on a Linux machine for evaluation and scoring. And the challenges run the gamut from beginner (things like text parsing, math and basic networking) to advanced (more advanced parsing and math, hashing, cryptography, and forensics challenges).

KVM & Xen Don't Change Much With Linux 4.15

Filed under
Linux

There are a ton of exciting improvements building up in Linux 4.15, but not too much on the virtualization front.

The Kernel-based Virtual Machine (KVM) work this time around isn't too exciting with no big ticket items debuting for Linux 4.15. KVM for this next kernel release finally has Python 3 support within the Python script that collects runtime statistics from the KVM kernel module. Most of the other work is relatively small additions and fixes. There is some optimizations to ARM's timer handling, PowerPC support for running in a hashed page table MMU mode and single-threaded mode support on POWER9, s390 prep work for exitless interrupts and crypto, and on the x86 front are some fixes, improved emulation in a few areas, and other small work.

Read more

Software: Wpm, Wanna, Atelier, Narabu

Filed under
Software
  • Wpm – Measure Your Typing Speed From Terminal

    How is your weekend going, folks? Today, I’d like to share a command line utility that makes your weekend useful. Say hello to Wpm, a command line utility to test and improve your typing speed. Using Wpm, you can check and measure your typing speed from Terminal in words per minute. You may already be using any GUI-based utilities for this purpose. However, Wpm has many features that any GUI based typing speed tester utilities have.

  • Wanna – A Modern Eye Candy To-Do List App

    Today, we introduce to you a new project that is described in its GitHub page as an implementation of a 21st-century to-do list app. And who will beg to differ when the app is so spectacular it comes along with its own workflow and well-stated philosophy.

    Wanna is a modern cross-platform and open-source Electron-based To-Do list application with a focus on time management.

  • Monitoring 3DPrinters with Atelier

    One of the features that were asked a lot of times on our Telegram groups was the ability to monitor the 3DPrinter via a stream feed.

    Since we released the beta version of the AtCore couple weeks ago, we are trying now to get more work done with Atelier.

    In our project, Atelier is the interface running above AtCore. So it has a lot of more features than the AtCore TestClient has.

  • Introducing Narabu, part 6: Performance

    Narabu is a new intraframe video codec. You probably want to read part 1, part 2, part 3, part 4 and part 5 first.

    Like I wrote in part 5, there basically isn't a big splashy ending where everything is resolved here; you're basically getting some graphs with some open questions and some interesting observations.

Linux 4.15, Linux 4.16, and Linux Foundation's CNCF and CII

Filed under
Linux
  • Linux 4.15 Gets Fixed To Report Current CPU Frequency Via /proc/cpuinfo

    A change recently in the Linux kernel led the CPU MHz reported value via /proc/cpuinfo to either be the nominal CPU frequency or the most recently requested frequency. This behavior changed compared to pre-4.13 kernels while now it's been fixed up to report the current CPU frequency.

  • Linux 4.16 Will Be Another Big Cycle For Intel's DRM Driver

    We are just through week one of two for the Linux 4.15 merge window followed by eight or so weeks after that before this next kernel is officially released. But Intel's open-source driver developers have already begun building up a growing stack of changes for Linux 4.16 when it comes to their DRM graphics driver.

  • CNCF Wants You to Use 'Certified Kubernetes'
  • Open Source Threat Modeling

    Application threat modeling is a structured approach to identifying ways that an adversary might try to attack an application and then designing mitigations to prevent, detect or reduce the impact of those attacks. The description of an application’s threat model is identified as one of the criteria for the Linux CII Best Practises Silver badge.

Linux World Domination and Microsoft Corruption in Munich

Filed under
GNU
Linux

Programming/Development: 'DevOps', NumPy, Google SLING

Filed under
Development
  • 5 DevOps leadership priorities in 2018

    This week, DevOps professionals gathered in San Francisco to talk about the state of DevOps in the enterprise. At 1,400 attendees, the sold-out DevOps Enterprise Summit has doubled in size since 2014 – a testament to the growth of the DevOps movement itself.

    With an ear to this event and an eye on the explosion of tweets coming out of it, here are five key priorities we think IT leaders should be aware of as they take their DevOps efforts into the new year.

  • NumPy Plan for dropping Python 2.7 support

    The Python core team plans to stop supporting Python 2 in 2020. The NumPy project has supported both Python 2 and Python 3 in parallel since 2010, and has found that supporting Python 2 is an increasing burden on our limited resources; thus, we plan to eventually drop Python 2 support as well. Now that we're entering the final years of community-supported Python 2, the NumPy project wants to clarify our plans, with the goal of to helping our downstream ecosystem make plans and accomplish the transition with as little disruption as possible.

  • Google SLING: An Open Source Natural Language Parser

    Google Research has just released an open source project that might be of interest if you are into natural language processing. SLING is a combination of recurrent neural networks and frame based parsing.

    Natural language parsing is an important topic. You can get meaning from structure and parsing is how you get structure. It is important in processing both text and voice. If you have any hope that Siri, Cortana or Alexa are going to get any better then you need to have better natural language understanding - not just the slot and filler systems currently in use.

Graphics: AMDGPU, Radeon, Intel DRM

Filed under
Graphics/Benchmarks
  • AMDGPU DC Code Lands For Linux 4.15 Kernel

    Linus Torvalds has accepted the AMDGPU DC display code pull request for the Linux 4.15 kernel. AMD Linux users can now rejoice!

    Overnight David Airlie sent in the AMDGPU DC pull request for Linux 4.15 and since then Linus Torvalds was active on the kernel mailing list ranting about AMD header files and other unrelated to DC code. He was also pulling in other PRs... It was getting a bit worrisome, given the DC code not being in pristine shape, but it was exciting as heck to see this evening that he did go ahead and pull in the 132 thousand lines of new kernel code to land this AMDGPU DC. Linus hasn't provided any commentary about DC on the kernel mailing list as of writing.

  • Radeon VCN Encode Support Lands In Mesa 17.4 Git

    It's an exciting day for open-source Radeon Linux users today as besides the AMDGPU DC pull request (albeit still unmerged as of writing), Radeon VCN encoding support has landed in Mesa Git.

  • The - Hopefully - Final Stab At Intel Fastboot Support

    Intel's Maarten Lankhorst has sent out what could be the final patches for enabling "fastboot" support by default within their DRM graphics driver.

Raspberry Digital Signage 10

Filed under
GNU
Linux

It shows web pages from Internet, LAN or internal sources (a WordPress installation comes already installed by default on the SD card); there is no way to escape this view but rebooting the machine.

Marco Buratto has released Raspberry Digital Signage 10.0 today, which comes with the latest and greatest Chromium build (featuring advanced HTML5 capabilities, Adobe Flash support and H264/AVC video acceleration), so you can display more attractive resources, more easily.

Read more

Red Hat Leftovers

Filed under
Red Hat
Syndicate content

More in Tux Machines

Inspiring the Next Generation of Open Source

The Linux Foundation works through our projects, training and certification programs, events and more to bring people of all backgrounds into open source. We meet a lot of people, but find the drive and enthusiasm of some of our youngest community members to be especially infectious. In the past couple of months, we’ve invited 13-year-old algorithmist and cognitive developer Tanmay Bakshi, 11-year-old hacker and cybersecurity ambassador Reuben Paul, and 15-year-old programmer Keila Banks to speak at Linux Foundation conferences. In 2014 when he was 12, Zachary Dupont wrote a letter to his hero Linus Torvalds. We arranged for Zach to meet Linus–a visit that helped clinch his love for Linux. This year, Zach came to Open Source Summit in Los Angeles to catch up with Linus and let us know what he’s been up to. He’s kept busy with an internship at SAP and early acceptance to the Computer Networking and Digital Forensics program at the Delaware County Technical School. Read more

Debian and Ubuntu Leftovers

  • Debian package depicts 'Tux the penguin' with sheep in intimate ASCII
    A Debian software package containing an "ASCII representation of zoophilia" has been installed automatically on some users' machines. According to a bug report, Debian user Felicia Hummel installed a package called "cowsay", which turns text into ASCII art of cows (or other animals) with speech or thought balloons. But with default settings of "install suggests" enabled, a controversial second "recommends" package called "cowsay-off" was also installed.
  • Join us at the Ubuntu Enterprise Summit!
    Bloomberg, Walmart, eBay, Samsung, Dell. Ever wonder how some of the world’s largest enterprises run on Ubuntu? This December, we are hosting our first ever Ubuntu Enterprise Summit to tell you how and help guide your own organisation whether it be running the cloud in a large telco to deriving revenue from your next IoT initiative. The Ubuntu Enterprise Summit is a two day event of webinars on December 5th and 6th where you can join Canonical’s product managers, technical leads, partners and customers to get an inside look at why some of the world’s largest companies have chosen Ubuntu. Whether you are focused on the cloud or are living life at the edge, the webinars will also look at trends and the considerations for your organisation when implementing such technologies. To kick off the event on December 5th, Canonical CEO and founder Mark Shuttleworth will deliver a keynote talk on 21st Century Infrastructure. Following Mark’s opening, there will be a series of other events and you can register now for those that spark your interest by clicking on the links below
  • Ubuntu Server Development Summary – 21 Nov 2017
    The purpose of this communication is to provide a status update and highlights for any interesting subjects from the Ubuntu Server Team. If you would like to reach the server team, you can find us at the #ubuntu-server channel on Freenode. Alternatively, you can sign up and use the Ubuntu Server Team mailing list.
  • Late Post For Ubuntu Community Appreciation Day 2017
    I am also very thankful for LaTeX2e and Tex Live. It has been a great thing to have to prepare devotional materials for church. I am thankful for the MOTU folks maintaining Gummi which is the editor I use on Xubuntu. Xubuntu is what I run on my laptop that goes many places with me. Tex Live is run both on the laptop and on the Raspberry Pi 2 at home.

Tizen: India, Games, Update

Running Radeon RX Vega On Linux 4.15, NVIDIA/Radeon Benchmarks

With AMDGPU DC having been merged a few days ago for the Linux 4.15 merge window, it's now possible to run the Radeon RX Vega graphics cards with display support using the mainline kernel without having to resort to using a patched/third-party kernel build or using the AMDGPU-PRO hybrid driver. Here are some tests I have carried out with the Radeon RX Vega 56, RX Vega 64, and other graphics cards from Linux 4.15 Git compared to a few NVIDIA GPUs. Read more Also: NVIDIA's Binary Driver Doesn't Yet Play Nicely With Linux 4.15 Less related: 'Urgent data corruption issue' destroys filesystems in Linux 4.14