Language Selection

English French German Italian Portuguese Spanish

January 2018

today's leftovers

Filed under
Misc
  • Open Source Security Podcast: Episode 80 - GPS tracking and jamming
  • How to add a repository on your Linux machine
  • Modify SVG using GSVGtk: First Repor

    GSVGtk is a library to provide GTK+ widgets you can use to access SVG files. It is powered by GSVG, in a way it can access each shape and its properties using a GObject API based on W3C SVG 1.1 specification.

    Currently, GSVGtk uses Clutter to encapsulate SVG shapes, render them inside Clutter Actors, through librsvg, and maps events to source SVG in order to eventually modify original definitions, like its position.

    In the following video, you can see GSVGtk’s Container based on Clutter, loading an SVG file, take some shapes from it to show on the scene.

  • logo.png for default avatar for GitLab repos

    I added a logo.png to GNOME Tweaks at GNOME and it automatically showed up in Salsa when I imported the new version.

  • What’s New in Peppermint OS 8 Respin

    Peppermint OS 8 respin is the latest release of Peppermint OS Linux Distribution. This release based on Ubuntu 16.04 LTS (Xenial Xerus), powered by linux kernel 4.10 series, using LXDE desktop environment with new “Pepirus” xfwm4, GTK+ and icon themes. Also, brings 64 bit and 32 bit installation images. The 64 bit release provides complete support for UEFI systems and secure boot.

  • Imagine the world's biggest Kanban / Scrumboard

    Imagine a Kanban board that could aggregate issues from multiple backends, including your CalDAV task list, Bugzilla systems (Fedora, Mozilla, GNOME communities), Github issue lists and the Debian Bug Tracking System, visualize them together and coordinate your upstream fixes and packaging fixes in a single sprint.

    [...]

    If you'd like to see this or any of the other proposed projects go ahead, you don't need to be a Debian Developer to suggest ideas, refer a student or be a co-mentor. Many of our projects have relevance in multiple communities. Feel free to get in touch with us through the debian-outreach mailing list.

The Linux Foundation is Growing

Filed under
Linux
  • Linux Foundation fights fragmentation with network umbrella

    Open source platforms are becoming more and more fundamental to the new telecoms network architecture, raising exciting prospects for a more democratic ecosystem and rapid innovation. But open source also comes with the risk of fragmentation, which has already been seen in industry splits over different approaches to management and orchestration (MANO) in virtualized networks. A large number of open projects has emerged in the areas of virtualization, software-defined networking (SDN), MANO and even telecoms hardware initiatives like Facebook’s OpenCellular.

  • The Linux Foundation Announces 30 New Silver Members

    The Linux Foundation, the nonprofit organization enabling mass innovation through open source, announced the addition of 30 Silver members. Linux Foundation members help support development of the greatest shared technology resources in history, while accelerating their own innovation through open source leadership and participation.

Red Hat and Fedora Leftovers

Server: Microservices, Replika, STORK, OpenStack

OSS Leftovers

Filed under
OSS
  • India's RJio Plots Open Source Disruption

    Owned by Indian billionaire Mukesh Ambani, the telco believes that it is high time India developed products and services tailored specifically to the Indian market. "If you observe, a lot of effort has been put into the IT space [in India], but what has not happened is a focused effort [for innovation] in the telecom space," says Matthew Oommen, RJio's president of networks, global strategy and service development, on the sidelines of India's recent Digital Open Summit.

  • Open Source Initiative Turns 20

    The Open Source Initiative (OSI) will celebrate its 20th anniversary on Friday, Feb. 2, and the global non-profit organization dedicated to raising awareness and adoption of open source software is gonna par-tay. By which I mean, the OSI has scheduled activities around the world this year to commemorate the event. (I'm hoping there will be snacks.)

  • Swatantra17

    Last month Thiruvananthapuram witnessed one of the biggest Free and Open Source Software conference called Swatantra17. Swatantra is a flagship triennial ( actually used to be triennial, but from now on organizers decided to conduct in every 2 years.) FOSS conference from ICFOSS. This year there were more than 30 speakers from all around the world. The event held from 20-21 December at Mascot hotel, Thiruvananthapuram. I was one of the community volunteer for the event and was excited from the day it announced Smile .

  • DO or UNDO - there is no VACUUM

    To put this another way, it is in general true that PostgreSQL’s VACUUM implementation has gotten progressively better at reclaiming space occupied by dead tuples more quickly and with less expenditure of effort. And that’s really good, because the faster you reclaim space, the less new space you end up allocating, which keeps tables small and performance high. However, the examples above show that VACUUM isn’t the whole problem. In these examples, even if VACUUM ran at the earliest instant when it could reclaim the space occupied by dead tuples and ran infinitely fast, the table would still become bloated. In the case where the bloat is caused by many short queries run while one long-running transaction remains open, we could, with smarter snapshot management, limit the worst-case bloat to approximately a factor of two -- that is, we’d keep the version of the tuple visible to the old snapshot and the current version, and discard the intermediate versions, a trick PostgreSQL currently can’t manage. However, even a factor of two is a lot, and what if there are multiple distinct open snapshots?  Further, in the case where the bloat is created by a SQL statement that induces scattered updates throughout the table, no improvement to VACUUM can possibly help. By the time that SQL statement finishes, the damage is already done.

  • Scratch group projects – 2018

    Once again, it’s time for this year’s Scratch projects from my grade 10 students. Up next is python, but their final projects are available at https://scratch.lesbg.com. Feel free to play them and rate them. This is a first attempt for students, so do please be gentle on the ratings.

  • Why Create a New Unix Shell?

FSF and GNU Debugger (GDB) 8.1

Filed under
GNU
  • Free Software Foundation was gifted 91 bitcoin

    The Free Software Foundation, has announced that it received its largest donation ever, 91.45 bitcoin from an anonymous entity called Pineapple Fund. The 91.45 bitcoin, at the time of payment, was roughly equal to $1 million. The Free Software Foundation is an organisation that promotes the concept of free software, which is defined by the ‘four essential freedoms’.

  • GDB 8.1 released!

    Release 8.1 of GDB, the GNU Debugger, is now available via anonymous FTP.  GDB is a source-level debugger for Ada, C, C++, Objective-C, Pascal and many other languages.  GDB can target (i.e., debug programs running on) more than a dozen different processor architectures, and GDB itself can run on most popular GNU/Linux, Unix and Microsoft Windows variants.

  • GDB 8.1 Debugger Brings Better Rust Support, Improved Python Scripting

    Version 8.1 of the GNU Debugger (GDB) is now available for developers.

    The GDB 8.1 debugger update brings Python scripting enhancements, improved Rust language support, breakpoints on C++ functions are now set on all scopes by default, a number of new commands have been added, the GDBserver has received a few enhancements, there is better auto-completion support for this debugger, and a variety of other improvements to help developers debug their code in a variety of languages.

  • GDB 8.1 released

    Version 8.1 of the GDB debugger is out. Changes include better support for the Rust language and various other improvements to make debugging easier; see the announcement and the news file for the full list.

Security: Updates, Google, Hacking Team, Microsoft-NSA, Django

Filed under
Security
  • Security updates for Wednesday
  • How Did Google Wipe Out 700,000 Malicious Android Apps From Play Store? Using Artificial Intelligence
  • Hacking Team Is Still Alive Thanks to a Mysterious Investor From Saudi Arabia

    The 2015 breach of spyware vendor Hacking Team seemed like it should have ended the company. Hacking Team was thoroughly owned, with its once-secret list of customers, internal emails, and spyware source code leaked online for anyone to see. But nearly three years later, the company trudges on, in large part thanks to a cash influx in 2016 from a mysterious investor who had been publicly unknown until now.

    The hack hurt the company’s reputation and bottom line: Hacking Team lost customers, was struggling to make new ones, and several key employees left. Three years later—after the appearance of this new investor—the company appears to have stopped the bleeding. The company registered around $1 million in losses in 2015, but bounced back with around $600,000 in profits in 2016.

    Motherboard has learned that this apparent recovery is in part thanks to the new investor, who appears to be from Saudi Arabia—and whose lawyer’s name matches that of a prominent Saudi attorney who regularly works for the Saudi Arabian government and facilitates deals between the government and international companies.

  • NSA exploit EternalBlue is back and powering WannaMine cryptojacking malware

    SAY HELLO to WannaMine, the cryptojacking malware that's using leaked NSA hacking tools to infiltrate computers and syphon processor power to crunch calculations needed to 'mine; cryptocurrencies.

    But first a history lesson. You may remember the EternalBlue, a Windows exploit developed by the NSA that was leaked by hacking group Shadow Brokers.

    Pretty soon after the exploit was used to launch the massive WannaCry ransomware attack that locked down NHS systems and affected some 230,000 computers across 150 countries. EternalBlue was then used to spearhead the arguably more dangerous NotPetya attacks.

  • Johnny Hacker hauls out NSA-crafted Server Message Block exploits, revamps 'em

    EternalBlue, EternalSynergy, EternalRomance and EternalChampion formed part of the arsenal of NSA-developed hacking tools that were leaked by the Shadow Brokers group before they were used (in part) to mount the devastating NotPetya cyber attack.

    [...]

    "After that, the exploit module will drop to disk (or use a PowerShell command), explains zerosum0x0, and then copy directly to the hard drive."

  • 10 tips for making the Django Admin more secure

    Offloading the responsibility for making your app secure onto QA testers or an information security office is tempting, but security is everyone's responsibility. The Django Admin is one of our favorite features of Django, but unless it's locked down correctly, it presents opportunities for exploitation. To save your users from compromised data, here are 10 tips to make the Django Admin more secure.

11 Myths About the RISC-V ISA

Filed under
Hardware
OSS

Despite its rich ecosystem and growing number of real-world implementations, misconceptions about RISC-V are keeping companies around the world from fully realizing its benefits.

Read more

Mozilla: Rust, Privacy and More

Filed under
Moz/FF
  • Where’s Rust headed in 2018? Ask the community.

    2017 was a big year for the Rust systems programming language. Now, members of the open source project are looking to consolidate last year’s progress – making Rust easier to learn and use – and publish the first major update to the stable 2015 Rust release.

    “We’re making Rust a much nicer place to be,” said Aaron Turon, a Rust core team member and engineering manager at Mozilla. “We’re working to create a more productive environment for programmers – especially those new to the language.”

  • The 2018 Rust Event Lineup

    Every year there are multiple Rust events around the world, bringing together the community. Despite being early in the year, we’re excited to be able to highlight several events that are already being organized!

  • This Week in Rust 219

    Hello and welcome to another issue of This Week in Rust! Rust is a systems language pursuing the trifecta: safety, concurrency, and speed. This is a weekly summary of its progress and community. Want something mentioned? Tweet us at @ThisWeekInRust or send us a pull request. Want to get involved? We love contributions.

  • Retrospective: Looking Glass

    In December, we launched a tv show tie-in with Mr. Robot, Looking Glass, that alarmed some people because we didn’t think hard enough about the implications of shipping an add on that had the potential to be both confusing and upsetting. We’re deeply sorry for this and we understand why it’s important for us to learn and grow from this experience. As mentioned last month, we conducted a post-mortem to better understand how and why this happened and how we can do better.

  • Mozilla Reps Community: Rep of the Month – December 2017
  • Mozilla Security Blog: Preventing data leaks by stripping path information in HTTP Referrers

    To help prevent third party data leakage while browsing privately, Firefox Private Browsing Mode will remove path information from referrers sent to third parties starting in Firefox 59.

More in Tux Machines

today's leftovers

  • Lenovo Chromebook C330 2-in-1

    Today we are looking at the Lenovo Chromebook C330 (81HY0000US), it is a 2-1 device, a notebook but it can also be converted into a tablet. It comes with a fanless quad-core MediaTek MT8173C CPU, an 11.6 inch, 1366x768, IPS display, and touch screen. It has 4gb of RAM and 64GB eMMC SSD.

  • Foliate Ebook Reader Picks Up Mobi & Amazon Kindle Support

    The Foliate ebook reader app for Linux has added support for additional ebook formats, including those used by the Amazon Kindle. Now, I’m conscious that I’ve mentioned Foliate a lot recently. I generally don’t like to do that — anyone remember the omg! docky! days? — but some developers are so dang prolific, able to knock out notable update after notable update at a regular clip, that I have no choice! Foliate’s developer, John Factotum, is one such dev — nice work!

  • Install & Run Xampp on Ubuntu 19.04 using Terminal
  • How to scan your Docker installment with docker-bench-test
  • KDE Applications 19.08 branches created

    Make sure you commit anything you want to end up in the KDE Applications 19.08 release to them

  • OpenMandriva Lx 4.1 Aiming To PGO More Packages, Use IWD For WiFi Connections

    While OpenMandriva Lx 4.0 was just released last month, we are already looking forward to OpenMandriva 4.1 for a number of improvements and some new features. OpenMandriva's developer board provides an interesting look at what's ahead for OpenMandriva Lx 4.1. Already completed for this next milestone include migrating to LLVM Clang 9, and using LD.lld and BFD as the default linkers.

  • Installing Debian 10

    Debian 10 Buster was released recently. It is the newest version on Debian operating system. Debian 10 comes with Linux Kernel 4.19. It also comes with latest Linux graphical desktop environment such as GNOME 3.30, KDE Plasma 5.14, Cinnamon 3.8, LXDE 0.99.2, LxQt 0.14, MATE 1.20, Xfce 4.12 and many more. Debian 10 also comes with awesome new artworks. In this article, I am going to show you how to install Debian 10 Buster on your computer.

  • Workload Consolidation: The Entire IoT in One Box

    To deliver the benefits of workload consolidation while ensuring robust partitioning, congatec has developed a proof of concept based on a six-core Core i7-based COM Express module, a type 1 hypervisor from Real-Time Systems, and Ubuntu Linux.

  • 100,985,047 have been invited to the Evite data breach “party”

    Did you get an invitation to the latest data breach? Over the weekend it was disclosed that Evite, the online invitation platform that has sent more than a few birthday and pizza party invitations over the years, suffered a data breach that included over 100 million accounts.

  • The Gecko Hacker's Guide to Taskcluster

    I spent a good chunk of this year fiddling with taskcluster configurations in order to get various bits of continuous integration stood up for WebRender. Taskcluster configuration is very flexible and powerful, but can also be daunting at first. This guide is intended to give you a mental model of how it works, and how to add new jobs and modify existing ones. I'll try and cover things in detail where I believe the detail would be helpful, but in the interest of brevity I'll skip over things that should be mostly obvious by inspection or experimentation if you actually start digging around in the configurations. I also try and walk through examples and provide links to code as much as possible.

Events: Plasma Sprint, PyCon, SciPy and All Systems Go!

  • Plasma sprint, 2019 edition; personal updates

    In June, I had a great time at a series of KDE events held in the offices of Slimbook, makers of fantastic Neon-powered laptops, at the outskirts of Valencia, Spain. Following on from a two-day KDE e.V. board of directors meeting, the main event was the 2019 edition of the Plasma development sprint. The location proved to be quite ideal for everything. Slimbook graciously provided us with two lovely adjacent meeting rooms for Plasma and the co-located KDE Usability & Productivity sprint, allowing the groups to mix and seperate as our topics demanded - a well-conceived spatial analog for the tight relationship and overlap between the two. [...] In KDE e.V. news, briefly we stole one of the sprint rooms for a convenient gathering of most of our Financial Working Group, reviewing the implementation of the annual budget plan of the organization. We also had a chance to work with the Usability goal crew (have you heard about KDE goals yet?) on a plan for the use of their remaining budget -- it's going to be exciting. As a closing note, it was fantastic to see many new faces at this year's sprint. It's hard to believe for how many attendees it was their first KDE sprint ever, as it couldn't have been more comfortable to have them on board. It's great to see our team grow.

  • Real Python at PyCon US 2019
  • Quansight presence at SciPy'19

    Yesterday the SciPy'19 conference ended. It was a lot of fun, and very productive. You can really feel that there's a lot of energy in the community, and that it's growing and maturing. This post is just a quick update to summarize Quansight's presence and contributions, as well as some of the more interesting things I noticed.

  • ASG! 2019 CfP Re-Opened!

    Due to popular request we have re-opened the Call for Participation (CFP) for All Systems Go! 2019 for one day. It will close again TODAY, on 15 of July 2019, midnight Central European Summit Time! If you missed the deadline so far, we’d like to invite you to submit your proposals for consideration to the CFP submission site quickly! (And yes, this is the last extension, there's not going to be any more extensions.)

GNOME: GSOC, GNOME Foundation, GLib

  • Gaurav Agrawal: GSOC Progress by Mid July

    July Marked the beginning of II GSOC coding month. This month our goal is to make the diff bar model as accurate and intuitive as possible. One of the biggest thing which I learnt so far is how to contribute on upstream repositories on which our project depends. In our case this was with Libgit2, we discovered a bug in Libgit2 while doing our project, and Albfan made this a perfect example to show me how to contribute on upstream, how to raise bugs and how to do discussions for getting it solved.

  • Jean-François Fortin Tam: Available for hire, 2019 edition

    Sometime after the end of my second term on the GNOME Foundation, I was contacted by a mysterious computer vendor that ships a vanilla GNOME on their laptops, Purism.

  • Array copying and extending in GLib 2.61.2

    A slightly more in-depth post in the mini-series this time, about various new functions which Emmanuel Fleury has landed in GLib 2.61.2 (which is due to be released soon), based on some old but not-quite-finished patches from others.

Programming: Python, Vim, Go and More

  • How to integrate jenkins with webhook
  • Serving Gifs With Discord Bot - Reading Time: 12 Mins
  • Python Snippet 1: More Uses For Else
  • Python Celery Guide
  • Python String Find()
  • PyCharm 2019.2 Beta #2

    It hasn’t been long since we published PyCharm 2019.2 Beta, and now we’re ready to share with you the second Beta build! The final release date is getting closer and closer, and while you wait, give PyCharm 2019.2 Beta #2 a go! Get the PyCharm 2019.2 Beta build from our website and try all the latest functionality.

  • Vimrc Tutorial

    In this article, we’re going to dive deep into the vimrc file of Vim. Once you’re inside the vimscript, it’s easy to mess things up. That’s why this rule of thumb will always be helpful in your journey with Vim. Don’t put any line in vimrc that you don’t understand.

  • CPU atomics and orderings explained

    Sometimes the question comes up about how CPU memory orderings work, and what they do. I hope this post explains it in a really accessible way.

  • You can't say Go without Google – specifically, our little logo, Chocolate Factory insists

    Back in 2009, Google chose to name its latest programming language Go, a decision that is still giving it a migraine It could have called it "Google Go" to avoid confusion with Frank McCabe's Go! programming language. Despite criticism, it didn't do so. After almost a year of online grumbling, Google software engineer Russ Cox, in 2010, closed GitHub Issue #9, dismissing the complaints as "unfortunate." And the headaches over the thing's name still won't go away (no pun intended.) Last week, Google rebuffed a request to remove its logo from the Go website, golang.org, a change supported by some developers who feel Google takes Go developers for granted.