LTS distros and their "security updates"

Okay I'm not trying to throw shade at Ubuntu here, but I'm trying to understand. I've been using their LTS distros for quite a while under the guise that when a package gets a security update, they would backport that update into the repositories. However, from what I've seen lately, that's not really the case. The whole VLC fiasco was caused by Ubuntu 18.04 packaging an outdated version of libeml ([https://twitter.com/videolan/status/1153963312981389312](https://twitter.com/videolan/status/1153963312981389312)), and meanwhile I've had my own discoveries regarding 16.04 still carrying the OpenSSL 1.0 branch when the 1.1 branch has made some pretty serious security improvements ([https://github.com/openssl/openssl/pull/2083](https://github.com/openssl/openssl/pull/2083))

I mean, I kind of understand them not rushing to offer security updates for libeml to the LTS versions. It seems like a somewhat obscure library, it's in their 'universe' repository, and the specific flaw wasn't even discovered until recently; not to mention the flaw itself isn't really a huge deal. But on the other hand, how do they justify leaving OpenSSL security improvements out? I mean, that's a hugely ubiquitous piece of software, and its specifically geared *for* security purposes, yet they're still packaging a version which contains codes that the developers unanimously agreed needed to be stronger. Not compromised, but definitely weak.

I thought that the point of LTS versions was that you would lose out on "feature" updates to software, but "security" updates you'd still get. But how do they decide what merits a "security" update. Do they think that including a version of OpenSSL with the command-line encryption tool that follows best practices is just a new "feature" and not requisite to "security". I mean granted, there seems to be a lot of insinuation that OpenSSL's command-line encryption tool is somehow not intended for serious use, but that seems like a bit of a cop-out when the developers themselves chose to update it to reflect best practices. I guess the idea is that it's supposed to just be a demonstration of the OpenSSL toolkit for developers. Even in that capacity, it's just demonstrating how to use OpenSSL wrong. So why not update it? Especially since OpenSSL strives for legacy compatibility and is probably one of the least likely pieces of software to break other things when updated.

Anyway I'm not trying to be overly critical, but it's making me rethink this whole idea of LTS versions being kept secure, or if they're just fixed when they're broken. It seems a bit like re-actively throwing water on the fire once it's burning rather than pro-actively taking steps to remove any fuel sources before it breaks out.

https://redd.it/ci0tvl
@r_linux

How can Linux performance be SO MUCH better on my 3700X?
https://www.reddit.com/r/Amd/comments/ci1fp2/how_can_linux_performance_be_so_much_better_on_my/

https://redd.it/ci1ghe
@r_linux

What are the main differences between modern Centos and Ubuntu ? I know 1 is based on Debian and the other on Caos Linux but outside of that, Is it possible to learn your RHCE on Ubuntu or the syntax / commands are too different ?

**1)** What are the main differences between modern Centos and Ubuntu ? I know 1 is based on Debian and the other on Caos Linux but outside of that, Is it possible to learn your RHCE on Ubuntu or the syntax / commands are too different ?

**2)** The reason I ask this is because I am a WinAdmin and I want to learn Ubuntu Server and Centos etc been told Ubuntu is taking a large part of the pie now, it's popular

**3)** Do you feel Powershell on linux is at a point where it can replace Bash/Python or its just better off to learn Bash and later on Chef, Puppett, Ansible etc etc ? any senior Linux admin who knows PS well here ?

https://redd.it/ci0tv8
@r_linux

BeginnerQuestion : Is Linux safe enough for me to do banking and trading on it?

I know this sounds stupid or whatever, but I'm just wondering. I installed Deepin a while back and then on read on some forum where people said that it's run by a chinese community/group and they're watching your data...and then I uninstalled it. I know it's an OS same as Windows, but I do have this concern. I'm a little paranoid too because my paypal and bitcoin account did get hacked once(on windows). And I want to move to Linux for security reasons.

I hope you got the gist of what I"m trying to fucking say, sorry for being all over the place with this. Just want a little assurance and confirmation (and possibly, suggestions for distros).


Thanks!

https://redd.it/ci2oqb
@r_linux

Happy SysAdmin Day to all of you!
https://redd.it/ci2j32
@r_linux

Today we've got new ssh banner
https://redd.it/ci3ybv
@r_linux

I see your macbook decals and raise you mine
https://redd.it/ci47r0
@r_linux

Weekend Fluff / Linux in the Wild Thread - July 26, 2019

Welcome to the weekend! This stickied thread is for you to post pictures of your ubuntu 2006 install disk, slackware floppies, on-topic memes or more.

When it's not the weekend, be sure to check out r/WildLinuxAppears or r/linuxmemes!

https://redd.it/ci5ldf
@r_linux

why are there so many ads on /r/linux compared to other subreddits?
https://redd.it/ci2yfb
@r_linux

Handling of public institution not offering Linux tools

Hey guys!

This is a non-technical question and I'm mainly interested in how others deal with situations like this:

So the thing is my insurance company has a web portal where one can handle a lot of the stuff, e.g. uploading pictures/scans of sick notices or certificates of enrolment for students and all sorts of stuffs that otherwise one would need to send by mail. So all in all really convenient. So far so good.

Now they implemented a "2FA" system where you have to authorize your devices once to be able to access certain functions in the web portal. The problem at hand here is that for authorizing a computer they provide an application but only for windows and macOS. So effectively I can no longer use this portal if I don't download their probably shitty mobile app, use WINE or boot windows in a VM or so.

For a lot of you folks out there I think it won't be the first time you can't use something because it's not supported but for me it's the first time. Even though it's nothing super important and there are ways around it, this sh\*t really grinds my gears. Same goes for (public) organisations not accepting/offering encrypted mail? Have you been excluded by some some-what-public organisation because you care about privacy and stuff? What are your thoughts on this?

**Just to be clear I'm not asking for help or workarounds, this was more supposed to be just an example I encountered. I am more interested in you opinions and thoughts about this general topic.**

EDIT: Mentioning WINE as known workaround and spelling.

https://redd.it/ci3wnt
@r_linux

Why so linux?

Hi everybody, I'm not used to do this but this is my fresh project that I started following a passion after 10+ years of hard work and study. If you want to give it a look you're welcome, and spread the word!

[https://varslashblog.com/why-so-linux/](https://varslashblog.com/why-so-linux/)

https://redd.it/ci7xyh
@r_linux

Recent blog post on Yubikey MFA on Linux and Windows
https://functionallyparanoid.com/2019/07/26/the-key-to-the-kingdom/

https://redd.it/ci7p9h
@r_linux

Best Linux terminal emulator period

**Disclaimer** I don't own this software. I have just been a lucky user and feel it deserves a lot more credit/attention than it has. I also feel strongly that it will improve your productivity like it is with me.

FOSS

### Features I couldn't get from other alternatives:

Multi-execution (run the same command in all of your split windows at the same time)

Bookmark sessions and passwords


https://gnunn1.github.io/tilix-web/
Tilix: A tiling terminal emulator - GitHub Pages

https://redd.it/ci59ld
@r_linux

Dotfiles must go. Start the petition. One at a time.

My fellow Tuxmen, it is time we take back control of our home directory. It is time to get rid of the dotfile jungle that rules \~. I read an article somwhere a month or two ago, and then DistroTube covered it as well. I think instead of bemoaning about the issue, we should do something about it. The good thing is, Linux being open source, there is a real chance that the software developers might actually listen to the community. [I have already opened an issue in GitHub for VS Code](https://github.com/microsoft/vscode/issues/78026). Feel free to chime in.

Next up is Mozilla, for Thunderbird and Firefox. Does anyone know where I can report the issue? Or is social media the only way?

https://redd.it/cibst1
@r_linux

Should I use tlp on a brand new laptop?

I just got a Thinkpad T495 two weeks ago and am running Ubuntu 19.04. Basically, as I said in the noscript I'm wondering if I should run tlp to increase the battery life.

My question is, will the performance trade off (if there is one) be worth the increase in battery life? I'm not super familiar with tlp so I don't really know what it does.

Thanks.

https://redd.it/cicyr3
@r_linux

I made a Hinglish to Hindi editor & other languages for GNU/Linux operating systems. It's offline & free software !
https://redd.it/cie0p8
@r_linux

Google Calendar in my Linux OS

Hi, recently saw [this post](https://www.reddit.com/r/python/comments/cidu6i/_/) in r/python and I wondered if I could do similar on my Linux OS that I'm working on. I have not started work yet so I don't know if it'll have a built in calender or not. Please let me know if it does and if I can make something like that on Linux. ;)

https://redd.it/ciea8e
@r_linux

mountjutsu - Quickly Format Clone Mount Unmount Devices - Linux MUI
https://www.youtube.com/watch?v=jipILuNW5Ks

https://redd.it/cidvjk
@r_linux

High CPU temperature in most Linux distro !!

I got a dell latitude 5591 i7-8850H geforce mx130/intel UHD630 and i tried a several linux disto ( ubuntu , pop os , deepin ) and what catch my attention is the cpu temperature always hitting 90C-94C with only a cpu load under 30% . can please some one explain why is that happening ?

https://redd.it/cifqej
@r_linux

Latitude 7350

Anyone know if linux will work well enough with this model.

Example: [https://www.ebay.com/itm/Dell-Latitude-7350-Touch-screen-Hybrid-Tablet-Laptop-Great-Condition/303233507758?epid=219466731&hash=item469a2021ae:g:cToAAOSw72NdG3t8](https://www.ebay.com/itm/Dell-Latitude-7350-Touch-screen-Hybrid-Tablet-Laptop-Great-Condition/303233507758?epid=219466731&hash=item469a2021ae:g:cToAAOSw72NdG3t8)

​

I am not a linux genius but I usually throw it on older laptops and use it for streaming or remoting into work. I can lookup and follow instructions but ideally I am looking for something not to difficult to set up. All my research shows there are issues with some audio but most stuff has been solved. I liked the idea of the versatility for under $300 used but I am leaning towards a chromebook or something similar as I think there may be too much hair on getting this working. Anyone use this laptop or have any experience with it and linux?

​

I know I am a newb but I like to mess around with stuff (keeps me young) so thank you in advance.

https://redd.it/cig5yb
@r_linux

My journey with window managers (aka WMs)

Forget distro-hopping! WM-hopping is way more fun, at least for me. Just wanted too reminisce here about some of the WM I used on Linux and other Unixes. This post is intended for people who are open to the idea of using a (different) WM, to give them an idea of what's out there. Please post your experiences with WMs, too.

The first WM I used on a daily basis was `openbox`. The nice thing about openbox was that it was very fast and stable. It is considered feature complete and hasn't changed in a few years at all, it only receives bug fixes. The down-sides of openbox was its configuration files. The main configuration file for openbox is in xml format and kind of hard to follow. Later on I found out there ware some tools to help with that, but I didn't try them, as I had moved on from openbox at that point. Also openbox doesn't include a taskbar, so you have to install one (like `tint2`).

Next I used `i3`. I3 is probably the most popular tiling WM. The nice thing about i3, when compared with other tiling WMs I tried is the control it gives you over the position of the windows and the number of container layouts, as they are called in i3, it supports: split (one window next to the other), stacked (one noscriptbar over the other with only one window/container visible), and tabbed (self-explanatory). You can then combine the layouts any way you like and stuff as many windows as possible on one virtual desktop without losing sight of any of them.

Then I used `fluxbox` for a while. Fluxbox is kind of similar to openbox (apparently they have some shared heritage), a stacking WM. Unlike Openbox, Fluxbox has a taskbar included and supports tabbed windows, which I found very useful. You can noscript the WM, so that new windows of a particular class always appear in tabs of the first window of that class, or you can drag the noscriptbar while holding Ctrl over the noscriptbar of another window to move the dragged window into a tab. The downside is the limited configurability of the taskbar.

Next I went through a phase of minimalism (i.e. software, in this case WMs, that have least amount of features while still being useful as a WM). I used `spectrwm` for a while (formally known as `scrotwm`), and still do occasionally. It is a tiling WM from the OpenBSD devs, of course available on many Linux distros. It does only what it's supposed to: tile windows. Titlebars, gaps, all the bells and whistles are disabled by default. It has a indicator bar for clock, workspace as well as other (optional, generated by third-party programs) system info. As a result it can't arrange windows in tabs, something I had gotten accustomed to by now. So I started using `tabbed` to create tabs for supported apps.

Also from the OpenBSD devs, I'm still using `cwm` ( aka Calm Window Manager). This is a stacking WM. It also doesn't have much in terms of features, it just draws the window in a rectangle (i.e. border), no noscriptbar, no taskbar (again you can install one yourself), zero distractions from the content, zero wasted space. Amazingly fast and lightweight.

I've also tried `dwm` from the [suckless.org](https://suckless.org) guys. This is one of the oldest tiling WMs still developed and one of the simplest. I decided against spending much time with it, as it was too minimal for me.

Lately I've been looking at Wayland and use `sway` on one of my machines. Sway, for those who don't know, is kind of like a i3 clone for Wayland, so everything from i3 applies here, too.

In conclusion there's a wide spectrum of WMs available for Linux, from very feature rich to very minimalist. WMs are a very Linux-y (and BSD-y) phenomenon. They are very fascinating for the speed, lightweight, and flexibility/noscripting capability they offer.

So, what is your experience with WMs?

https://redd.it/cig519
@r_linux