Language Selection

English French German Italian Portuguese Spanish

April 2017

today's leftovers

Filed under
Misc

Leftovers: Software

Filed under
Software
  • The Atom Editor

    I didn’t set out to write a blog post about a text editor. I was going to write about one of the other awesome projects that the Ops team is doing here at Wombat. Along the way I decided to give Atom a chance again and I’m glad I did. I enjoyed it enough that I thought I would defer my post about automating my “Ops Environment” on a mac (I promise, I’ll do that one soon-ish) in favor of this.

  • Quick Update: ClipGrab and PlayOnLinux Applications Are Now Available For ALL Ubuntu Versions

    ClipGrab is fairly popular application to download video from famous sites of the Internet. It allows you to search video with in application and select to download the video or other way you can copy and paste the video URL to the application to download the video. Since famous video sites are supported by this application, if some site isn't officially supported, you may still be able to download the videos from it.

  • aTunes Enriched Audio Player Now Available For All Current Ubuntu/Linux Mint Versions

    There are wide variety of audio players available for Linux and you may have your favorite one installed on your system. aTunes is not new audio player but its initial release was way back in 2006 and the most recent version was released in June, 2014. In almost two years there is no news on the website or release from developers, well it is open-source released under GPL-V2 license and we don't see any other to carry on the development of this great application. It is written in Java programming language and it's cross-platform available for Linux, Unix, Windows and Mac. It uses Mplayer as its playback engine and supports wide variety of known formats such as: MP3, Ogg Vorbis, FLAC, WMA and other formats.

QNX 7 Can Be Fitted With A Qt5 Desktop

Filed under
OS
  • QNX 7 Can Be Fitted With A Qt5 Desktop

    While QNX remains targeted as an operating system for mobile/embedded solutions, a BlackBerry developer in his spare time has fitted QNX 7 with a Qt5 desktop.

    QNX 6 and prior had a desktop option, but was removed in QNX 7, which was released this past March. QNX 7.0 also brought support for 64-bit (and maintaining 32-bit) Intel x86 and ARM platforms along with C++14 support. For those wanting to experiment with QNX 7, a BlackBerry kernel developer has been working on making this operating system more desktop friendly.

  • Building a BlackBerry QNX 7 Desktop

    Having Qt allowed me to port one of my favourite applications, SpeedCrunch. It was a simple matter of running ‘qmake’ followed by ‘make’. Next, I ported the QTermWidget library so that I could have terminal windows.

Kernel Space/Linux

Filed under
Linux
  • Kernel explained
  • [Older] [Video] Audio on Linux: The End of a Golden Age?
  • State of Sway April 2017

    Development on Sway continues. I thought we would have slowed down a lot more by now, but every release still comes with new features - Sway 0.12 added redshift support and binary space partitioning layouts. Sway 0.13.0 is coming soon and includes, among other things, nvidia proprietary driver support. We already have some interesting features slated for Sway 0.14.0, too!

    Today Sway has 21,446 lines of C (and 4,261 lines of header files) written by 81 authors across 2,263 commits. These were written through 653 pull requests and 529 issues. Sway packages are available today in the official repos of pretty much every distribution except for Debian derivatives, and a PPA is available for those guys.

Supporting Burning Platforms

Filed under
GNU
Linux
Microsoft
  • Surface revenue does a U-boat, and dives

    Revenue generated by Microsoft's Surface hardware during the March quarter was down 26% from the same period the year before, the company said yesterday as it briefed Wall Street.

    For the quarter, Surface produced $831 million, some $285 million less than the March quarter of 2016, for the largest year-over-year dollar decline ever.

  • Acer said to me: "do not use our products with Linux. Find another manufacturer"

    Last year, I bought an Acer notebook and it came with Windows 10.

    As I didn't want spyware neither bloatware, I got Linux installed and asked for a refund of the OEM license. After a little of talking, they were wanting to charge me US$100 (to remove the license, which I already had wiped, as I got FDE Linux installed) to refund US$70 of the OEM license.

    This year, wondering to buy a new Acer notebook, I asked them again if they would refund me the OEM license without all the hassle (as they did pay me the US$70, without me having to pay the US$100).

Leftovers: OSS

Filed under
OSS
  • LibreOffice the better Office, really?
  • A serious bug in GCC

    This post is to inform you about a bug in GCC that may cause memory (or other resource) leaks in your valid C++ programs.

  • [Older] Supporting Bangladesh’s software industry with Indian cooperation

    It’s worth noting that the word “free” in free/open-source software implies not just free of cost, but also freedom from commercial dependence upon multi-national software vendors.

    To emphasise this, the biography of Richard Stallman, the founder of the free software movement which ultimately produced the Linux operating system, is titled Free as in Freedom.

    In fact, it is impossible to run a modern government without computers; so it should not be acceptable that sovereign nations like Bangladesh be forever dependent on foreign IT vendors, especially when the Linux alternative offers both freedom and zero-cost.

Security Leftovers

Filed under
Security
  • Is there any way to truly secure Docker container contents?

    All this adds up to a lot of work, which is not taken care of for you by default in Docker. It is no surprise that many Docker images are insecure, given this picture. The unfortunate reality is that many Docker containers are running with known vulnerabilities that have known fixes, but just aren’t, and that’s sad.

  • Compromise recovery on Qubes OS

    Occasionally fuckups happen, even with Qubes (although not as often as some think).

    What should we – users or admins – do in such a situation? Patch, obviously. But is that really enough? What good is patching your system if it might have already been compromised a week earlier, before the patch was released, when an adversary may have learned of the bug and exploited it?

    That’s an inconvenient question for many of us – computer security professionals – to answer. Usually we would mutter something about Raising the Bar(TM), the high costs of targeted attacks, attackers not wanting to burn 0-days, or only nation state actors being able to afford such attacks, and that in case one is on their list of targets, the game is over anyway and no point in fighting. Plus some classic cartoon.

    While the above line of defense might work (temporarily), it really doesn’t provide for much comfort, long term, I think. We need better answers and better solutions. This post, together with a recently introduced feature in Qubes OS 3.2 and (upcoming) 4.0, is an attempt to offer such a solution.

  • Top 5 Kali Linux Pentest tools for WiFi/network and exploits
  • Linux/Shishiga Malware Brute-Forces SSH Credentials

    A new strain of Linux malware has been detected. Dubbed Linux/Shishiga, the malware could transform into a dangerous piece of malware. Linux/Shishiga was officially discovered and examined by researchers at Eset.

  • Cybercriminals have taken notice of leaked government spying techniques
  • Microsoft Closes Word/Wordpad Hole—6 Months after Report
  • [Older] The Pentagon’s Bug Bounty Program Should Be Expanded to Bases, DOD Official Says [iophk: "any version of Windows at all is inappropriate"]

    “About 75 percent of the devices that are control systems are on Windows XP or other nonsupported operating systems,” said Daryl Haegley, program manager for the Office of the Assistant Secretary of Defense for Energy, Installations and Environment.

    [...]

    “A lot of these systems are still Windows 95 or 98, and that’s OK—if they’re not connected to the internet,” Haegley added.

  • Don’t Info Op Until You See The Whites of Their Eyes
  • CFP P70

    This is the official CFP for P70.

  • VM escape - QEMU Case Study

    In this paper, we provide a in-depth analysis of CVE-2015-5165 (a memory-leak vulnerability) and CVE-2015-7504 (a heap-based overflow vulnerability), along with working exploits. The combination of these two exploits allows to break out from a VM and execute code on the target host. We discuss the technical details to exploit the vulnerabilities on QEMU's network card device emulation, and provide generic techniques that could be re-used to exploit future bugs in QEMU.

  • CIA’s anti-leaking tool leaked as ‘whistleblowers watch the watchers’

    Former MI5 intelligence officer Annie Machon and retired US Army Colonel Ann Wright, who is also a retired US State Department official, shared their views on these and other questions with RT.

    On Friday, WikiLeaks released a series of documentations on a US Central Intelligence Agency (CIA) project known as ‘Scribbles,’ which was allegedly created to allow ‘web beacon’ tags to be embedded “into documents that are likely to be copied.”

    WikiLeaks began publishing a huge cache of secret documents on the CIA named ‘Vault 7’ in March.

  • Vault 7: CIA tool to track people through Word docs released

    The documentation says: "Scribbles (SCRIB) is a document watermarking tool that can be used to batch process a number of documents in a pre-seeded input directory. It generates a random watermark for each document, inserts that watermark into the document, saves all such processed documents in an output directory, and creates a log file which identifies the watermarks inserted into each document."

    It says the tool was successfully tested on Office 2013 (on Windows 8.1 x64), documents from Office versions 97-2016 (Office 95 documents will not work!) and documents that are not locked forms, encrypted, or password-protected.

    There is a limitation to the Scribbles system: if a document that has the watermarks in it and is opened in OpenOffice, LibreOffice the watermark images and URLs may become visible.

  • The US Takes On the World in NATO’s Cyber War Games

    Last year, Capt. Sean Ruddy and his team of operator-soldiers from the US Cyber Brigade entered a Locked Shields, a NATO-organized cyber-defense war game that pits teams from dozens of countries against “live-fire” attacks. It was their first time. And of the 19 countries represented, the US finished dead last. This week, they got their shot at redemption.

Anbox Runs Android In Your Linux Without Emulation

Filed under
Linux

​In a recent article, we talked about android emulators for Ubuntu or Linux in general. Most of the time we need to play a game or try some applications on android or even when we don’t have a smartphone we opt to use an emulator to try applications. A fan on facebook let us know about Anbox and asked for the tutorial on Anbox installation in Linux. So here you have how to install Anbox in Linux.

Read<br />
more

More in Tux Machines

today's leftovers

  • Lenovo Chromebook C330 2-in-1

    Today we are looking at the Lenovo Chromebook C330 (81HY0000US), it is a 2-1 device, a notebook but it can also be converted into a tablet. It comes with a fanless quad-core MediaTek MT8173C CPU, an 11.6 inch, 1366x768, IPS display, and touch screen. It has 4gb of RAM and 64GB eMMC SSD.

  • Foliate Ebook Reader Picks Up Mobi & Amazon Kindle Support

    The Foliate ebook reader app for Linux has added support for additional ebook formats, including those used by the Amazon Kindle. Now, I’m conscious that I’ve mentioned Foliate a lot recently. I generally don’t like to do that — anyone remember the omg! docky! days? — but some developers are so dang prolific, able to knock out notable update after notable update at a regular clip, that I have no choice! Foliate’s developer, John Factotum, is one such dev — nice work!

  • Install & Run Xampp on Ubuntu 19.04 using Terminal
  • How to scan your Docker installment with docker-bench-test
  • KDE Applications 19.08 branches created

    Make sure you commit anything you want to end up in the KDE Applications 19.08 release to them

  • OpenMandriva Lx 4.1 Aiming To PGO More Packages, Use IWD For WiFi Connections

    While OpenMandriva Lx 4.0 was just released last month, we are already looking forward to OpenMandriva 4.1 for a number of improvements and some new features. OpenMandriva's developer board provides an interesting look at what's ahead for OpenMandriva Lx 4.1. Already completed for this next milestone include migrating to LLVM Clang 9, and using LD.lld and BFD as the default linkers.

  • Installing Debian 10

    Debian 10 Buster was released recently. It is the newest version on Debian operating system. Debian 10 comes with Linux Kernel 4.19. It also comes with latest Linux graphical desktop environment such as GNOME 3.30, KDE Plasma 5.14, Cinnamon 3.8, LXDE 0.99.2, LxQt 0.14, MATE 1.20, Xfce 4.12 and many more. Debian 10 also comes with awesome new artworks. In this article, I am going to show you how to install Debian 10 Buster on your computer.

  • Workload Consolidation: The Entire IoT in One Box

    To deliver the benefits of workload consolidation while ensuring robust partitioning, congatec has developed a proof of concept based on a six-core Core i7-based COM Express module, a type 1 hypervisor from Real-Time Systems, and Ubuntu Linux.

  • 100,985,047 have been invited to the Evite data breach “party”

    Did you get an invitation to the latest data breach? Over the weekend it was disclosed that Evite, the online invitation platform that has sent more than a few birthday and pizza party invitations over the years, suffered a data breach that included over 100 million accounts.

  • The Gecko Hacker's Guide to Taskcluster

    I spent a good chunk of this year fiddling with taskcluster configurations in order to get various bits of continuous integration stood up for WebRender. Taskcluster configuration is very flexible and powerful, but can also be daunting at first. This guide is intended to give you a mental model of how it works, and how to add new jobs and modify existing ones. I'll try and cover things in detail where I believe the detail would be helpful, but in the interest of brevity I'll skip over things that should be mostly obvious by inspection or experimentation if you actually start digging around in the configurations. I also try and walk through examples and provide links to code as much as possible.

Events: Plasma Sprint, PyCon, SciPy and All Systems Go!

  • Plasma sprint, 2019 edition; personal updates

    In June, I had a great time at a series of KDE events held in the offices of Slimbook, makers of fantastic Neon-powered laptops, at the outskirts of Valencia, Spain. Following on from a two-day KDE e.V. board of directors meeting, the main event was the 2019 edition of the Plasma development sprint. The location proved to be quite ideal for everything. Slimbook graciously provided us with two lovely adjacent meeting rooms for Plasma and the co-located KDE Usability & Productivity sprint, allowing the groups to mix and seperate as our topics demanded - a well-conceived spatial analog for the tight relationship and overlap between the two. [...] In KDE e.V. news, briefly we stole one of the sprint rooms for a convenient gathering of most of our Financial Working Group, reviewing the implementation of the annual budget plan of the organization. We also had a chance to work with the Usability goal crew (have you heard about KDE goals yet?) on a plan for the use of their remaining budget -- it's going to be exciting. As a closing note, it was fantastic to see many new faces at this year's sprint. It's hard to believe for how many attendees it was their first KDE sprint ever, as it couldn't have been more comfortable to have them on board. It's great to see our team grow.

  • Real Python at PyCon US 2019
  • Quansight presence at SciPy'19

    Yesterday the SciPy'19 conference ended. It was a lot of fun, and very productive. You can really feel that there's a lot of energy in the community, and that it's growing and maturing. This post is just a quick update to summarize Quansight's presence and contributions, as well as some of the more interesting things I noticed.

  • ASG! 2019 CfP Re-Opened!

    Due to popular request we have re-opened the Call for Participation (CFP) for All Systems Go! 2019 for one day. It will close again TODAY, on 15 of July 2019, midnight Central European Summit Time! If you missed the deadline so far, we’d like to invite you to submit your proposals for consideration to the CFP submission site quickly! (And yes, this is the last extension, there's not going to be any more extensions.)

GNOME: GSOC, GNOME Foundation, GLib

  • Gaurav Agrawal: GSOC Progress by Mid July

    July Marked the beginning of II GSOC coding month. This month our goal is to make the diff bar model as accurate and intuitive as possible. One of the biggest thing which I learnt so far is how to contribute on upstream repositories on which our project depends. In our case this was with Libgit2, we discovered a bug in Libgit2 while doing our project, and Albfan made this a perfect example to show me how to contribute on upstream, how to raise bugs and how to do discussions for getting it solved.

  • Jean-François Fortin Tam: Available for hire, 2019 edition

    Sometime after the end of my second term on the GNOME Foundation, I was contacted by a mysterious computer vendor that ships a vanilla GNOME on their laptops, Purism.

  • Array copying and extending in GLib 2.61.2

    A slightly more in-depth post in the mini-series this time, about various new functions which Emmanuel Fleury has landed in GLib 2.61.2 (which is due to be released soon), based on some old but not-quite-finished patches from others.

Programming: Python, Vim, Go and More

  • How to integrate jenkins with webhook
  • Serving Gifs With Discord Bot - Reading Time: 12 Mins
  • Python Snippet 1: More Uses For Else
  • Python Celery Guide
  • Python String Find()
  • PyCharm 2019.2 Beta #2

    It hasn’t been long since we published PyCharm 2019.2 Beta, and now we’re ready to share with you the second Beta build! The final release date is getting closer and closer, and while you wait, give PyCharm 2019.2 Beta #2 a go! Get the PyCharm 2019.2 Beta build from our website and try all the latest functionality.

  • Vimrc Tutorial

    In this article, we’re going to dive deep into the vimrc file of Vim. Once you’re inside the vimscript, it’s easy to mess things up. That’s why this rule of thumb will always be helpful in your journey with Vim. Don’t put any line in vimrc that you don’t understand.

  • CPU atomics and orderings explained

    Sometimes the question comes up about how CPU memory orderings work, and what they do. I hope this post explains it in a really accessible way.

  • You can't say Go without Google – specifically, our little logo, Chocolate Factory insists

    Back in 2009, Google chose to name its latest programming language Go, a decision that is still giving it a migraine It could have called it "Google Go" to avoid confusion with Frank McCabe's Go! programming language. Despite criticism, it didn't do so. After almost a year of online grumbling, Google software engineer Russ Cox, in 2010, closed GitHub Issue #9, dismissing the complaints as "unfortunate." And the headaches over the thing's name still won't go away (no pun intended.) Last week, Google rebuffed a request to remove its logo from the Go website, golang.org, a change supported by some developers who feel Google takes Go developers for granted.