Security and Fear, Uncertainty, Doubt

• Cybersecurity experts question Microsoft's Ukraine report

  Microsoft President Brad Smith spent much of last Wednesday traveling across Washington to promote his company’s sweeping report on the current state of cyberwarfare and disinformation in the Russia-Ukraine war.

  He sat down with David Ignatius, foreign affairs columnist for The Washington Post, for a webcast on its findings. Afterwards, he headed to the Reagan Institute’s Center for Freedom and Democracy to give a 20-minute speech about the 27-page report called “Defending Ukraine: Early Lessons from the Cyber War” before joining Senator Angus King (I-ME) for a panel discussion.

  The New York Times, CNN, The Washington Post, NPR and others covered the study as an accurate and revealing look at an otherwise opaque and confusing digital front in the Ukraine war.

• QSB-082: Memory management issues in PV frontend drivers

  We have just published Qubes Security Bulletin (QSB) 082: Memory management issues in PV frontend drivers. The text of this QSB is reproduced below. This QSB and its accompanying signatures will always be available in the Qubes Security Pack (qubes-secpack).

• XSAs released on 2022-07-05

  The Xen Project has released one or more Xen Security Advisories (XSAs). The security of Qubes OS is affected. Therefore, user action is required.

• New RedAlert Ransomware targets Windows, Linux VMware ESXi servers [Ed: This actually requires someone breaking into the machine in the first place; with Windows, it's a walk in the park as there are back doors]

Games: Last Call BBS, Lord Winklebottom, and More

• Last Call BBS, the final game from Zachtronics is out in Early Access

  With Zachtronics moving on from game development, their last game is now out in Early Access with Last Call BBS although it's actually not just one game.

• Quirky murder mystery adventure Lord Winklebottom Investigates releases July 28th

  Lord Winklebottom Investigates is an upcoming adventure from UK-based developer Cave Monsters, and they've recently confirmed it will release on July 28th. This game will be coming along with full Native Linux support too.

• Don't Starve Together big Curse of Moon Quay update out now

  Curse of Moon Quay is the latest major update for the Native Linux survival game Don't Starve Together and it sounds like a great one. They also updated it with Steam Deck support recently too!

• Humble Choice has Deep Rock Galactic this month

  Another month has arrived and so a fresh Humble Choice bundle is here and with it comes an absolutely fantastic game with Deep Rock Galactic.

• 13 years ago we appeared online, Happy Birthday to GamingOnLinux

  Can you believe it? GamingOnLinux is now officially 13 years old and that suddenly makes me feel quite old.

How to Create and Configure 404 Error Page in NGINX

When you host your website on the NGINX web server, it will handle the client request, but when the request is not fulfilled, it will return an error. This error will be displayed to a user via a basic HTML page with the error code (404, 403, 500, 503), as shown below.

today's howtos

• Converseen 0.9.9.6 - Improved Quality/Compression Settings - Fasterland

  Here is Converseen 0.9.9.6, the open-source and cross platform batch image processor that allows you to convert, resize, rotate and flip an infinite number of images with a mouse click.

• Using sigstore-python to sign and verify your software release

  Sigstore allows software developers to quickly sign and verify the software they release. Many of the bigger projects use hardware-based OpenPGP keys to sign and release. But the steps used to make sure that the end-users are correctly verifying those signatures are long, and people make mistakes. Also, not every project has access to hardware smartcards, air-gapped private keys etc. Sigstore solves (or at least makes it way easier) these steps for most developers. It uses existing known (right now only 3) big OIDC providers using which one can sign and verify any data/software. For this blog post, I will use the python tool called sigstore-python.

• Finding files on Linux with the longest names

  File names on Linux systems can be as long as 255 characters. While determining which files in a directory have the longest names might not be the most exciting task at hand, doing this with a script poses some interesting challenges that invite equally interesting solutions.

• How to List Installed Packages on Fedora

  Occasionally, you may want to check the packages installed on your system. Learn how to list packages in Fedora using DNF and other package tools.