ZombieLoad: Cross Privilege-Boundary Data Leakage - a new side-channel attack affecting Intel CPUs
https://www.cyberus-technology.de/posts/2019-05-14-zombieload.html
https://redd.it/booowk
@r_linux
https://www.cyberus-technology.de/posts/2019-05-14-zombieload.html
https://redd.it/booowk
@r_linux
www.cyberus-technology.de
Cyberus Technology: ZombieLoad: Cross Privilege-Boundary Data Leakage
Cyberus Technology - Where Virtualization Meets German Engineering
LuneOS running with hardware accelerated graphics on the Pinephone devkit
https://www.youtube.com/watch?v=hIok2W5fyk0
https://redd.it/boq7sb
@r_linux
https://www.youtube.com/watch?v=hIok2W5fyk0
https://redd.it/boq7sb
@r_linux
YouTube
LuneOS_on_devkit_alpha.mp4
LuneOS homescreen on Pinephone devkit, with graphic acceleration.
After years of not having to touch office tools I tried to use LibreOffice writer. I'm sad to see it's light years behind its Microsoft counterpart.
Installing a language pack for spellchecking takes an awful lot of work. Truly sad to see.
There is a massive amount of work on Linux everyday and that's a great thing, but has the community lost its drive to make linux usable for the average (non-engineer) user?
https://redd.it/borl30
@r_linux
Installing a language pack for spellchecking takes an awful lot of work. Truly sad to see.
There is a massive amount of work on Linux everyday and that's a great thing, but has the community lost its drive to make linux usable for the average (non-engineer) user?
https://redd.it/borl30
@r_linux
reddit
r/linux - After years of not having to touch office tools I tried to use LibreOffice writer. I'm sad to see it's light years behind…
0 votes and 8 comments so far on Reddit
Linux printing
I'm putting together a design document for printing on Linux but the only exposure I have are with consumer inkjet and laser models.
The print driver support seems to better with the enterprise multifunction devices, I've looked into the Canon models in the current environment as its a fair assumption that the new environment will probably end up with Canons as well and they are fully supported with deb and rpm drivers available.
What I need to know is if there are any printer manufacturers that are actively ignoring Linux these days or is support pretty good across the board?
https://redd.it/borukx
@r_linux
I'm putting together a design document for printing on Linux but the only exposure I have are with consumer inkjet and laser models.
The print driver support seems to better with the enterprise multifunction devices, I've looked into the Canon models in the current environment as its a fair assumption that the new environment will probably end up with Canons as well and they are fully supported with deb and rpm drivers available.
What I need to know is if there are any printer manufacturers that are actively ignoring Linux these days or is support pretty good across the board?
https://redd.it/borukx
@r_linux
reddit
r/linux - Linux printing
0 votes and 1 comment so far on Reddit
Weekly Questions and Hardware Thread - May 15, 2019
Welcome to r/linux! If you're new to Linux or trying to get started this thread is for you. Get help here or as always, check out r/linuxquestions or r/linux4noobs
This megathread is for all your question needs. As we don't allow questions on r/linux outside of this megathread, please consider using r/linuxquestions or r/linux4noobs for the best solution to your problem.
Ask your hardware requests here too or try r/linuxhardware!
https://redd.it/bot5ow
@r_linux
Welcome to r/linux! If you're new to Linux or trying to get started this thread is for you. Get help here or as always, check out r/linuxquestions or r/linux4noobs
This megathread is for all your question needs. As we don't allow questions on r/linux outside of this megathread, please consider using r/linuxquestions or r/linux4noobs for the best solution to your problem.
Ask your hardware requests here too or try r/linuxhardware!
https://redd.it/bot5ow
@r_linux
reddit
r/linux - Weekly Questions and Hardware Thread - May 15, 2019
0 votes and 0 comments so far on Reddit
Intel's Clear Linux OS Gets New Developer Edition And Installer
https://www.forbes.com/sites/jasonevangelho/2019/05/14/intels-clear-linux-os-is-getting-a-new-developer-edition-and-installer/#24337a863fdc
https://redd.it/boqoyh
@r_linux
https://www.forbes.com/sites/jasonevangelho/2019/05/14/intels-clear-linux-os-is-getting-a-new-developer-edition-and-installer/#24337a863fdc
https://redd.it/boqoyh
@r_linux
Forbes
Intel's Clear Linux OS Gets New Developer Edition And Installer
Intel's starting to fire on all cylinders when it comes to Clear Linux OS. At the Open Source Technology Summit, Intel announced a new Developer Edition targeting Deep Learning and Data Analytics software stacks.
kde transparency
iv tried the desktop effect called "translucency" but it only does so much. the "special application settings" seems perfect to set the transparency settings i want BUT only seems to effect one app. i really dont want to have to do them individually as this will take me hours just for the apps i have and then if i install new things later ill have to set it for them later. is there a way i can set this for all applications in one go and make it the default for everything so new apps will have it automatically set?
https://redd.it/bos6ge
@r_linux
iv tried the desktop effect called "translucency" but it only does so much. the "special application settings" seems perfect to set the transparency settings i want BUT only seems to effect one app. i really dont want to have to do them individually as this will take me hours just for the apps i have and then if i install new things later ill have to set it for them later. is there a way i can set this for all applications in one go and make it the default for everything so new apps will have it automatically set?
https://redd.it/bos6ge
@r_linux
reddit
r/linux - kde transparency
2 votes and 4 comments so far on Reddit
Visual Studio Code vs Jetbrains
I see a lot of folks are using VSC over other IDEs like Jetbrains, Eclipse, etc. I'm a python developer who switched to full Pycharm from VIM a couple years ago. I've tried VSC, but still can't get into it. For those who have worked with Pycharm, Jetbrains, etc, what made you choose one over the other?
https://redd.it/boszgo
@r_linux
I see a lot of folks are using VSC over other IDEs like Jetbrains, Eclipse, etc. I'm a python developer who switched to full Pycharm from VIM a couple years ago. I've tried VSC, but still can't get into it. For those who have worked with Pycharm, Jetbrains, etc, what made you choose one over the other?
https://redd.it/boszgo
@r_linux
reddit
r/linux - Visual Studio Code vs Jetbrains
1 vote and 7 comments so far on Reddit
Plasma shipping WireGuard GUI in upcoming 5.16 release
http://jgrulich.cz/2019/05/14/upcoming-news-in-plasma-5-16/
https://redd.it/bovely
@r_linux
http://jgrulich.cz/2019/05/14/upcoming-news-in-plasma-5-16/
https://redd.it/bovely
@r_linux
reddit
r/linux - Plasma shipping WireGuard GUI in upcoming 5.16 release
0 votes and 0 comments so far on Reddit
Linux Server benchmarking noscripts
https://haydenjames.io/linux-benchmark-noscripts-tools/
https://redd.it/bok9yb
@r_linux
https://haydenjames.io/linux-benchmark-noscripts-tools/
https://redd.it/bok9yb
@r_linux
Linux Blog
Linux benchmark noscripts and tools
Linux benchmark of CPU, storage, memory and network, This is a list of Linux benchmark noscripts and tools for quick Linux benchmark of servers and VPS.
KDE5 minimize to tray (solved with KDE4 ksystraycmd)
As you may know kde-4 had a very useful feature, you could minimize to tray almost any application.
It's useful for example for:
\- mailing clients (thunderbird, which doesn't have any extension for it now)
\- notes applications (treeline for example, I think no one uses it here, ha-ha)
\- any other types of application which you want to keep open permanently (spotify?)
​
But kde-5 removes this option, there was a checkbox in some early versions, but it didn't work cause ksystraycmd was removed from the bundle.
But today I found, ksystraycmd still works!
You just need to extract this single file from "kde-workspace-bin" package from kde-4.
​
So to run any application in "tray mode" you need just to modify shortcut, for example:
\- "/path/to/ksystraycmd --hidden /usr/bin/thunderbird %u" (for thunderbird).
\- "/path/to/ksystraycmd --hidden --window TreeLine treeline" (--window is for regexp which window should be used, treeline asks for password in a separated window)
​
A lot of help is available by "./ksystraycmd --help-all" from console.
I'm using debian buster for now so for debian this deb could be downloaded from [https://packages.debian.org/jessie/kde-workspace-bin](https://packages.debian.org/jessie/kde-workspace-bin)
Not sure about kubuntu users, I was unlucky to find it in ubuntu packages, it looks like the executable name is changed there, any help for this?
​
PS: Dear KDE developers, maybe this solution isn't good, but I have no other idea how to minimize my apps to tray and I needed it too much, alltray and kdocker works in general but much worse (artifacts, broken icons and so on), so I hope this way will work in KDE6 too :)
​
I've posted this to r/kde too, not sure is it allowed to duplicate, sorry if so.
https://redd.it/boiydv
@r_linux
As you may know kde-4 had a very useful feature, you could minimize to tray almost any application.
It's useful for example for:
\- mailing clients (thunderbird, which doesn't have any extension for it now)
\- notes applications (treeline for example, I think no one uses it here, ha-ha)
\- any other types of application which you want to keep open permanently (spotify?)
​
But kde-5 removes this option, there was a checkbox in some early versions, but it didn't work cause ksystraycmd was removed from the bundle.
But today I found, ksystraycmd still works!
You just need to extract this single file from "kde-workspace-bin" package from kde-4.
​
So to run any application in "tray mode" you need just to modify shortcut, for example:
\- "/path/to/ksystraycmd --hidden /usr/bin/thunderbird %u" (for thunderbird).
\- "/path/to/ksystraycmd --hidden --window TreeLine treeline" (--window is for regexp which window should be used, treeline asks for password in a separated window)
​
A lot of help is available by "./ksystraycmd --help-all" from console.
I'm using debian buster for now so for debian this deb could be downloaded from [https://packages.debian.org/jessie/kde-workspace-bin](https://packages.debian.org/jessie/kde-workspace-bin)
Not sure about kubuntu users, I was unlucky to find it in ubuntu packages, it looks like the executable name is changed there, any help for this?
​
PS: Dear KDE developers, maybe this solution isn't good, but I have no other idea how to minimize my apps to tray and I needed it too much, alltray and kdocker works in general but much worse (artifacts, broken icons and so on), so I hope this way will work in KDE6 too :)
​
I've posted this to r/kde too, not sure is it allowed to duplicate, sorry if so.
https://redd.it/boiydv
@r_linux
packages.debian.org
Debian -- Details of package kde-workspace-bin in jessie
core binaries for the KDE Plasma Workspace
Are any of these free (as in freedom; as in no Canonical): Manjaro, Zorin OS, POP! OS
I'm new to linux and am very worried about Canonical and the idea that some distros send your data to other companies.
I like these 3 distros and just wanted to be sure that they are not doing these things.
I know that Zorin and Pop are based on Ubuntu, and the original Ubuntu does have Canonical. But do these distros also have Canonical or anything similar?
https://redd.it/botq3c
@r_linux
I'm new to linux and am very worried about Canonical and the idea that some distros send your data to other companies.
I like these 3 distros and just wanted to be sure that they are not doing these things.
I know that Zorin and Pop are based on Ubuntu, and the original Ubuntu does have Canonical. But do these distros also have Canonical or anything similar?
https://redd.it/botq3c
@r_linux
reddit
r/linux - Are any of these free (as in freedom; as in no Canonical): Manjaro, Zorin OS, POP! OS
0 votes and 17 comments so far on Reddit
Multibooting repairing os
I'm creating a multibooting iso with multiple repairing os's does anyone have suggestions about which os's I should add
https://redd.it/boy2ux
@r_linux
I'm creating a multibooting iso with multiple repairing os's does anyone have suggestions about which os's I should add
https://redd.it/boy2ux
@r_linux
reddit
r/linux - Multibooting repairing os
0 votes and 1 comment so far on Reddit
Please test improved Plasma Theme switching for Plasma 5.16
https://www.reddit.com/r/kde/comments/boxl64/please_test_improved_plasma_theme_switching_for/
https://redd.it/boyriy
@r_linux
https://www.reddit.com/r/kde/comments/boxl64/please_test_improved_plasma_theme_switching_for/
https://redd.it/boyriy
@r_linux
reddit
r/kde - Please test improved Plasma Theme switching for Plasma 5.16
25 votes and 3 comments so far on Reddit
The performance benefits of Not protecting against Zombieload, Spectre, Meltdown.
With the news about MDS (Zombieload) I've seen a few paranoid posts and sensational headlines about intel CPU's with HT. [Looking at you Wired.](https://www.wired.com/story/intel-mds-attack-speculative-execution-buffer/)
​
From the reading I've done about these exploits they all share a few traits - they are all pretty difficult to pull off, they are all patched, and all of the patches reduce performance by some percentage.
​
For a critical system these things should of course be patched i.e., my ESXi server that runs my network with pfSense gets all security patches.
​
However, for a home user running linux as a desktop for work or play - I have a feeling that patching these things is pretty pointless in terms of security. Security is always a compromise with practicality, and most home users (even \[probably most\] advanced users) do use known insecure things (that Android phone) and mitigate (maybe) those known vulnerabilities with network segregation or something along those lines.
And lets be real, people do this for good reason - it's practical and you are almost certainly not a focused target. There are no governments trying to Stuxnet the WD Raptors in your home Plex server.
​
So my thought is, the fixes for these vulnerabilities might even be an actively bad idea for your average home user. Each one reduces performance by a little bit and protects you from an attack that isn't coming.
​
Not applying these updates is pretty easy - just don't update the BIOS, or modify the BIOS so that theese microcode updates aren't applied.
Then on the OS level you either disable or rollback your version of linux's microcode update package such as *intel-microcode*
​
The same process could re-enable TSX-NI on some CPU's - which doesn't work in some specific cases, but some users might have a use for it and be able to accept it's instabilities.
​
So my question is - how much performance could be re-gained by not protecting against these threats that almost certainly aren't worth thinking about to a home user?
https://redd.it/bozjem
@r_linux
With the news about MDS (Zombieload) I've seen a few paranoid posts and sensational headlines about intel CPU's with HT. [Looking at you Wired.](https://www.wired.com/story/intel-mds-attack-speculative-execution-buffer/)
​
From the reading I've done about these exploits they all share a few traits - they are all pretty difficult to pull off, they are all patched, and all of the patches reduce performance by some percentage.
​
For a critical system these things should of course be patched i.e., my ESXi server that runs my network with pfSense gets all security patches.
​
However, for a home user running linux as a desktop for work or play - I have a feeling that patching these things is pretty pointless in terms of security. Security is always a compromise with practicality, and most home users (even \[probably most\] advanced users) do use known insecure things (that Android phone) and mitigate (maybe) those known vulnerabilities with network segregation or something along those lines.
And lets be real, people do this for good reason - it's practical and you are almost certainly not a focused target. There are no governments trying to Stuxnet the WD Raptors in your home Plex server.
​
So my thought is, the fixes for these vulnerabilities might even be an actively bad idea for your average home user. Each one reduces performance by a little bit and protects you from an attack that isn't coming.
​
Not applying these updates is pretty easy - just don't update the BIOS, or modify the BIOS so that theese microcode updates aren't applied.
Then on the OS level you either disable or rollback your version of linux's microcode update package such as *intel-microcode*
​
The same process could re-enable TSX-NI on some CPU's - which doesn't work in some specific cases, but some users might have a use for it and be able to accept it's instabilities.
​
So my question is - how much performance could be re-gained by not protecting against these threats that almost certainly aren't worth thinking about to a home user?
https://redd.it/bozjem
@r_linux
WIRED
Meltdown Redux: Intel Flaw Lets Hackers Siphon Secrets from Millions of PCs
Two different groups of researchers found another speculative execution attack that can steal all the data a CPU touches.
Linux 5.1, Red Hat's RHEL 8, Ubuntu Touch, GCC, App Store, Alpine, WSL2 | This Week in Linux 66 (Show Notes In Comments)
https://youtu.be/3QuNqbIcyEU
https://redd.it/bp15jt
@r_linux
https://youtu.be/3QuNqbIcyEU
https://redd.it/bp15jt
@r_linux
YouTube
Linux 5.1, Red Hat's RHEL 8, Ubuntu Touch, GCC, App Store, Alpine, WSL2 | This Week in Linux 66
https://tuxdigital.com/sponsus || https://tuxdigital.com/linuxiseverywhere On this episode of This Week in Linux, we've got a lot of big news to cover like t...