Thoughts on Feren?

I just tried Feren OS out and I've got to say, it's the most aesthetically pleasing distro I've used. Beats elementary by a mile to me on appearance. I'm not a huge fan of Vivaldi being the out-of-box browser, but the whole OS works just as solid as any other Ubuntu-based distro I've used. I'm wondering if anyone else here has tried it, and what your thoughts are? Thinking of switching from Linux Mint.

https://redd.it/l4r0pn
@r_linux

Exploiting CVE-2014-3153 (Towelroot)
https://elongl.github.io/exploitation/2021/01/08/cve-2014-3153.html

https://redd.it/l0hrhv
@r_linux

Dotfile - Simple VCS for managing single files
https://github.com/knoebber/dotfile

https://redd.it/l0ok0y
@r_linux

What are everyones thoughts on Fedora Silverblue?

Found out about fedora silverblue a few weeks ago and I think its probably the most exciting shake up to the linux desktop space there is.

They have an explanation on what silveblue is here but the tldr is they turn the OS in to an immutable image which gets mounted as read only and any user programs and user data are separate from the OS.

The advantages:

Almost impossible to break your OS
Updates become very safe since they do not need to account for your own modifications or migrate previous data, its just a case of swapping the old OS image for the new one
Updates can be easily reverted

Downsides:

Package manager removed since it can no longer insert files in to OS dirs like /bin

Silverblue offers a few alternative workflows for package management.

One being a tool called rpm-ostree which creates an additional layer over the OS image which contains your package. You must reboot to apply the layer though.

The main suggested workflow for applications is now flatpak. Probably controversial but there are some neat advantages to this method

The third being a tool called toolbox which can create and enter podman images which contain a more standard fedora install including dnf which has access to your home directory. Best method for setting up a development env and also has the advantage of allowing multiple separate environments.

What does the community here think? Will some variant of this idea become the default in linux distros?

https://redd.it/l4z1nv
@r_linux

hey everyone

metasploit isnt working after i did apt-get update/upgrade.

\> Executing “sudo msfdb init && msfconsole”

[sudo\] password for kali1:

[+\] Starting database

[i\] The database appears to be already configured, skipping initialization

Unable to find a spec satisfying metasploit-framework (>= 0) in the set. Perhaps the lockfile is corrupted?

Run `bundle install` to install missing gems.

i ran bundle install and the output was: could not locate gemfile..

if anyone knows whats going on here please let me know

https://redd.it/l5033v
@r_linux

X2x and sharing the clipboard

I used to use Synergy to allow one keyboard and mouse to work across multiple machines. The Synergy package used to be available in Debian but has long since disappeared from the repos and seems to be no longer maintained.

I have recently been messing around with x2x and ssh between Linux machines and it provides the same functionality for the keyboard and mouse, but unlike Synergy, does not also share the clipboard.

Is there any way to get x2x working with the clipboard? I would like to copy on one machine, move the mouse to a second and paste what I copied on the first.

Update: I just noticed that xsel works (and that may be sufficient), but Contol-C/Control-V does not. Obviously they use different mechanisims.

https://redd.it/l52wsy
@r_linux

Linux UI set

What's up my dudes!

I feel this might not be the right threat to ask something like this, as this is not entirely your cup of tea but I don't know where else to turn.

I'm going to make an animation in the linux debian envoirenment. I want it to be like the episode of modern family but then focused on the linux OS. I have screen recordings of someone using the OS to get the feel of how it works, but using the frames and apps from a screen recording kind of limits what I can do with it.

Does anybody know if there is an EPS/SVG/PNG set available of the UI? It would really save me a lot of time, and make my animated video a lot cooler

https://redd.it/l5a0on
@r_linux

Automating an entire Youtube channel with Terminal magic.

So I was wondering creating an entire youtube channel and running it with bash noscript cronjob.

One night I noticed there is a youtube channel which is doing nothing but making a compilation video of tik tok, there are lot of compilation video channels on youtube and those channels are just picking someone else content from other social media.

So I decided to create my own and running it with cronjob.

There are 3 things I have to do -

* Finding content using reddit
* Editing video using ffmpeg
* Uploading video on youtube with python.

Script link - [http://0x0.st/--T0.sh](http://0x0.st/--T0.sh)

You can watch a [Video explanation](https://youtu.be/PS5vBJELtj4)

Or read the text below -

# 1. Finding Content

I can use r/TikTokCringe to download 12 most upvotes tik tok video of that particular day. I can use youtube-dl to download these videos. It's pretty easy because in reddit if you add .json in the end of url you will get json output something like [this](https://www.reddit.com/r/TikTokCringe/top.json?limit=12).

So by using curl only this line is enough to download funny tiktok video -

youtube-dl $(curl -s -H "User-agent: 'your bot 0.1'" https://www.reddit.com/r/TikTokCringe/hot.json?limit=12 | jq '.' | grep url_overridden_by_dest | grep -Eoh "https:\/\/v\.redd\.it\/\w{13}")

# 2. Editing video

Now these tik tok videos are vertical videos so First thing I have to do is adding the blur background in vertical video, to make it horizontal video. So I can use ffmpeg to add blur background. After looking online a little I found a weird command to do this trick and now I can run this command to all files using a for loop -

for f in *.mp4; do ffmpeg -i $f -lavfi '[0:v]scale=ih*16/9:-1,boxblur=luma_radius=min(h\,w)/20:luma_power=1:chroma_radius=min(cw\,ch)/20:chroma_power=1[bg];[bg][0:v]overlay=(W-w)/2:(H-h)/2,crop=h=iw*9/16' -vb 800K blur/$f ; done

Now in last I have to merge the videos to finish my editing. I can also download a subnoscription request video from youtube to just add it in the end and then use ffmpeg concat function to merge all videos and making one compilation video.

for f in blur/*.mp4; do echo "file $f" >> file_list.txt ; done
ffmpeg -f concat -i file_list.txt final.mp4

Don't forget to delete vertical and horizontal videos after making a final.mp4 file.

# 3. Uploading Video

Now this is very simple google have an [article](https://developers.google.com/youtube/v3/guides/uploading_a_video). Explaining how you can upload a youtube video by using python. You can read this article. It's provide a python2 noscript which require your google account outh2 authorization keys and then you can run this noscript in last.

python2 $HOME/bw/.local/bin/upload.py --file="final.mp4" --noscript="Funny TikTok Compilation" --denoscription="Buy my merchandise - spamlink.ly" --keywords="tiktok,cringe" --category="22" --privacyStatus="public"

You can post video in privacy status public so this way you don't have to worry about anything.

​

>isn't that amazing?

This one simple noscript will run as cronjob daily and upload funny tik tok videos in 24 hours. Also these are most up voted tik tok on r/TikTokCringe So your video are pretty much high quality tik toks. So you will get good retention on your video. Also by running multiple channels like this you have a good chance of getting subscribers and you can find a way to monetize your channel and earn some Money.

I am very sure your videos will also get picked by stupid youtube algorithm.

BTW I am not going to do this thing by myself. Because I don't support putting someone else video and earning from it. I have my own youtube channel where I put original content. But since this is good idea I just wanted it to share with you.

https://redd.it/l5awi1
@r_linux

Tiling Window Managers are Simply Better
https://dev.to/arnav127/tiling-window-managers-are-simply-better-3jk5

https://redd.it/l57e0k
@r_linux

Offloading NixOS builds to a faster machine
https://sgt.hootr.club/molten-matter/nix-distributed-builds/

https://redd.it/l521lx
@r_linux

Strengths, weaknesses, opportunities, and threats facing the GNU Autotools
https://www.owlfolio.org/development/autoconf-swot/

https://redd.it/l5e3qv
@r_linux

Firefox 85.0 released
https://www.mozilla.org/en-GB/firefox/85.0/releasenotes/

https://redd.it/l5fjiy
@r_linux

Add Voice Interfaces to Python Apps, in Minutes!
https://medium.com/picovoice/add-voice-interfaces-to-python-apps-in-minutes-4398e24a7986

https://redd.it/l5fdfq
@r_linux

gocryptfs - Encrypted overlay filesystem written in Go
https://nuetzlich.net/gocryptfs/

https://redd.it/l5ec16
@r_linux

Why Red Hat killed CentOS—a CentOS board member speaks
https://arstechnica.com/gadgets/2021/01/on-the-death-of-centos-red-hat-liaison-brian-exelbierd-speaks/

https://redd.it/l5is0p
@r_linux

100% installed on a pc,not on anything else(it's a bare bone Debian machine,surprised it can run on a Snapdragon 835)

https://redd.it/l5lajc
@r_linux

Baron Samedit: Heap-based buffer overflow in Sudo (CVE-2021-3156)
https://www.qualys.com/2021/01/26/cve-2021-3156/baron-samedit-heap-based-overflow-sudo.txt

https://redd.it/l5lazz
@r_linux

I automate sending birthday and festival wishes to my friends by running a bash noscript in cronjob.

​

One day one of my female friend got angry with me and stopped talking to me because I forgot her birthday and she never forget my birthday. So I was feeling very bad.

and this is not the first time. This happen every year. Not just with one friend with all my friends. Since I don't use any social media it's really hard for me to remember my friends birthdays.

I have no facebook to notify me about my friends birthday. Also no whatsapp so I can see status of my friends putting party pictures or others birthday wishes.

I never wish people on festivals too and we have so many festivals here in India.

But then I got this idea -

I also have a Video explanation or you can read text.

Script - https://pastebin.com/HZrUYynw

# Step 1 -

First my college group is on telegram so almost all my friends use telegram. So by using Telethon library I create a simple tgsend python noscript to send messages on telegram from my account by using terminal.

You need to get your telegram API ID and API HASH from telegram website but it's really easy. Not like Google API.

tgsend username "Sending Happy Birthday using Username"
tgsend +00123456789 "Sending Happy Birthday using Phone number"

# Step 2 -

After this I created a csv file which contain my friends - name, contact number, birthday. My list is huge because I included almost everyone I know - old friends, new friends, all classmates, people I see daily.

File is something like this -

$ cat contacts.csv
Jimmy, +1234567890, 02-May
Emma watson, +1231231234, 09-Jan
Hannah Montana, +1233123123, 21-Sep
...

# Step 3 -

We can use simple grep magic to know who is having birthday today.

grep $(date '+%d-%B') contacts.csv

Here by using date command we can print today's date in exact format we have in contact.csv

Now to get more information we can use Simple cut command.

For example -

name=$(grep $(date '+%d-%B') contacts.csv | cut -d, -f1) # for name
phone=$(grep $(date '+%d-%B') contacts.csv | cut -d, -f2) # for contact number

We can also use awk '{print $1}' to just get first name.

# Step 4 -

Now we Generate message. I am generating a very simple happy birthday message.

msg="Haaappppy Birthday ${name} .. Many Many happy returns of the day."

But you guys can go creative and make list of variety of messages and use shuf to get a random message string. Also It's good if you add name in your messages.

In last

tgsend $phone "$msg"

# Step 5 -

Create a cronjob at random time in mid night .. don't set this to exact 00:00 (24 hours format) otherwise this will look fishy. Also run this on your VPS server or somewhere online. like PythonAnywhere. You can also create a log file for yourself. If you want.

# Conclusion -

This idea was very simple but it changed my life. Now I wish all my friends on their birthday automatically and when they reply Thank you. At that time I realize ohh.. She is having birthday today and this way I don't have to worry about forgetting birthdays.

Also I use this to wish people on festivals .. Now I am just doing it with telegram but you guys can find some whatsapp libraries written in javanoscript. I know there are some. Also There is a way of sending messages from phone numbers too.

I will highly recommend doing this .. You can save so much time of sending these stupid messages to people you don't really care about.

I know this is Autism at its peak. But I am happy like this.

https://redd.it/l5mxg7
@r_linux

CVE-2021-3156: Heap-Based Buffer Overflow in Sudo

Serious looking vulnerability in sudo

Run command “sudoedit -s /”

If the system is vulnerable, it will respond with an
error that starts with “sudoedit:”

If the system is patched, it will respond with an error that starts with “usage:”

Arch have released a patch in the last few hours (1.9.5.p2)
Running on my system after updating produces

sudoedit -s /
usage: sudoedit [-AknS] [-C num] [-D directory] [-g group] [-h host] [-p prompt] [-R directory] [-T timeout] [-u user] file ...

Which looks like it's patched.

https://blog.qualys.com/vulnerabilities-research/2021/01/26/cve-2021-3156-heap-based-buffer-overflow-in-sudo-baron-samedit

/edit: just checked on a Ubuntu 18.04 server and it seems to have been patched so I assume later versions are patched also

/edit2: /u/WarriorXK has confirmed patched on Debian 10 - and it appears not to be patched on Debian 8.

https://redd.it/l5n12d
@r_linux

RHEL no-cost* vs openSUSE Leap

Red Hat allows its clients to use RHEL for free on up to 16 machines. On the other hand, openSUSE Leap boasts binary compatibility with SUSE Linux Enterprise and comes without any restriction on usage.

[https://sysadmin-journal.com/rhel-no-cost-vs-opensuse-leap/](https://sysadmin-journal.com/rhel-no-cost-vs-opensuse-leap/)

https://redd.it/l5nbzv
@r_linux

cryfs - Keep your data safe in the cloud
https://www.cryfs.org/

https://redd.it/l5ecq6
@r_linux