We explain the one-packet attack on CUPS and discuss its real-world implications. Plus, a Meshtastic update and more. Sponsored By: Jupiter Party Annual Membership: Put your support on automatic with our annual plan, and get one month of membership for free! Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices! 1Password Extended Access Management: 1Password Extended Access Management is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps. Support LINUX Unplugged Links: 💥 Gets Sats Quick and Easy with Strike 📻 LINUX Unplugged on Fountain.FM Attacking UNIX Systems via CUPS — A remote unauthenticated attacker can silently replace existing printers’ (or install new ones) IPP urls with a malicious one, resulting in arbitrary command execution (on the computer) when a print job is started (from that computer). Marcus Hutchins Scan finds 107,287 servers responding to the UDP port 631 — Instead of relying on Shodan data, I performed my own internet-wide scan using a distributed network of servers. This resulted in discovering drastically more exposed cups-browsed instances, causing my total count to rise from 13,289 to 107,287. Shodan on X: 75,000 exposed CUPS daemons on the Internet Annual Membership — Put your support on automatic with our annual plan, and get one month of membership for free! nodeboard — Your Ultimate Digital Inventory Manager Lightning Pay activate-linux — The "Activate Windows" watermark ported to Linux Install Frog on Linux | Flathub — Extract text from images, websites, videos, and QR codes by taking a picture of the source. Clapgrep — Ever had a folder full of PDF files, where you knew, somewhere in there, is what you're looking for. But you did not know in which file. So you had to search each of them at a time...

What if we had to abandon ship and stop using Desktop Linux? We've come up with a master plan, and put it to the test. Sponsored By: Jupiter Party Annual Membership: Put your support on automatic with our annual plan, and get one month of membership for free! Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices! 1Password Extended Access Management: 1Password Extended Access Management is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps. Support LINUX Unplugged Links: 💥 Gets Sats Quick and Easy with Strike 📻 LINUX Unplugged on Fountain.FM Meshtastic Linux-Native Application MeshMap — Meshtastic Node Map LINUX Unplugged 269 — What if desktop computing went a very different direction in the late 90s? Deeply multithreaded from the start, fast, intuitive, and extremely stable. This is the world of Haiku, and we go for a visit. The Dawn of Haiku OS — Haiku, unlike its more established competitors, is exceedingly good at tackling one of the toughest challenges of modern computing: multicore microprocessors. Let's take a look at why that is, how Haiku came to be, and whether the operating system running on your computer really performs as well as it should. Haiku Project History Haiku R1/beta5 Release Notes — The fifth beta for Haiku R1 over a year and a half of hard work to improve Haiku’s hardware support and its overall stability, and to make lots more software ports available for use. docker-qemu-haiku — A Docker image for the Haiku operating system. golang-haiku/go — The Haiku port of the Go programming language for upstream support. Changes are made in 'golang-1.11-haiku' or 'golang-haiku-master'. Using the remote app server | Haiku Project JB Haiku Server Lighttpd DHH Talks Apple, Linux, and Running Servers Annual Membership — Put your support on automatic with our annual plan, and get one month of membership for free! dadjoke-cli colmena spectorus' NixOS Config Pick: rustpad — Efficient and minimal collaborative code editor, self-hosted, no database required Is the Nostr moment officially here?

The things we like in the new Nextcloud release, and we attempt to upgrade our production server live—from a big blue bus. Sponsored By: Core Contributor Membership: Take $1 a month of your membership for a lifetime! Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices! 1Password Extended Access Management: 1Password Extended Access Management is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps. Support LINUX Unplugged Links: 💥 Gets Sats Quick and Easy with Strike 📻 LINUX Unplugged on Fountain.FM OpenSats Grants Long-Term Support for WireGuard Creator Jason Donenfeld OpenSats Lightning Node Nextcloud Hub 9 Introducing Nextcloud Hub 9 - the world's leading open source collaboration platform! - YouTube Day 1: Nextcloud Community Conference 2024 - YouTube Day 2: Nextcloud Community Conference 2024 - YouTube Nextcloud Community Conference 2024 Mailvelope — Mailvelope is a browser add-on that you can use in Chrome, Edge and Firefox to securely encrypt your emails with PGP using webmail providers Nextcloud Server Releases nextcloud/docker: ⛴ Docker image of Nextcloud Bug: Unable to update background execution mode: conflict between new type (mixed) and old type (string) VLESS hacompanion: Daemon that sends local hardware information to Home Assistant. LNXlink: 🖥 Effortlessly manage your Linux machine using MQTT. Waycheck — Waycheck is a simple graphical application that connects to your Wayland compositor and displays the list of Wayland protocols that it supports, along with the list of protocols that it doesn't. Supersonic — A lightweight cross-platform desktop client for Subsonic and Jellyfin music servers.

Secret moments from the show you've never heard before. We kick off with some hardware hurdles, then dive into the news and share a few surprising stories. Sponsored By: Core Contributor Membership: Take $1 a month of your membership for a lifetime! Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices! 1Password Extended Access Management: 1Password Extended Access Management is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps. Support LINUX Unplugged Links: 💥 Gets Sats Quick and Easy with Strike 📻 LINUX Unplugged on Fountain.FM

Rust meets Linux in a clash of coding cultures. Why some developers are resisting, and where things go from here. Sponsored By: Core Contributor Membership: Take $1 a month of your membership for a lifetime! Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices! 1Password Extended Access Management: 1Password Extended Access Management is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps. Support LINUX Unplugged Links: 💥 Gets Sats Quick and Easy with Strike 📻 LINUX Unplugged on Fountain.FM Berlin with Brent: September Meetup @ Nextcloud Conference, Sat, Sep 14, 2024 Berlin Buds on Matrix Linus Torvalds talks AI, Rust adoption, and why the Linux kernel is 'the only thing that matters' KubeCon + CloudNativeCon + Open Source Summit + AI_Dev China 2024 Rust for filesystems — At the 2024 Linux Storage, Filesystem, Memory Management, and BPF Summit, Wedson Almeida Filho and Kent Overstreet led a combined storage and filesystem session on using Rust for Linux filesystems. Filesystem in Rust - Kent Overstreet and Wedson Almeida Filho Asahi Lina: "I think people really don't appreciate just how incomplete Linux kernel API docs are, and how Rust solves part of the problem." One Of The Rust Linux Kernel Maintainers Steps Down - Cites "Nontechnical Nonsense" — One of the several Rust for Linux kernel maintainers has decided to step away from the project. The move is being driven at least in part due to having to deal with increased "nontechnical nonsense" raised around Rust programming language use within the Linux kernel. [PATCH 0/1] Retiring from the Rust for Linux project - Wedson Almeida Filho On Rust, Linux, developers, maintainers — There's been a couple of mentions of Rust4Linux in the past week or two, one from Linus on the speed of engagement and one about Wedson departing the project due to non-technical concerns. This got me thinking about project phases and developer types. The revival of the Linux C++ discussion Membership Summer Discount — Take $1 a month of your membership for a lifetime! Thank you Core Contributors BrewHouse by the Lake – Amsterdam Brewery Shop BITCOIN WELL — The fastest and safest way to buy bitcoin in Canada The new JB server - KTZ systems — Join Alex, Chris, and Brent as we fly to Toronto to deploy our shiny new colo server in Canada. We'll be deploying the 45homelab HL15 server. Projectivy Launcher Aerial Views Screensaver OpenEBS — OpenEBS is a modern Block-Mode storage platform, a Hyper-Converged software Storage System and virtual NVMe-oF SAN (vSAN) Fabric that is natively integrates into the core of Kubernetes. oppy1984's Satoshi Survey Coder Radio 582 Keybase Filesystem Storage Limits I Don't Care for Gnome DAVx5 — DAVx⁵ DAVx⁵ – CalDAV / CardDAV / WebDAV for Android Flock 2024 Universal Blue: Building the Future using Fedora Atomic Pick: Shotcut - New Version 24.08 Install Shotcut on Flathub — Shotcut supports many video, audio, and image formats via FFmpeg and screen, webcam, and audio capture. It uses a time-line for non-linear video editing of multiple tracks that may be composed of various file formats. Scrubbing and transport control are assisted by OpenGL GPU-based processing and a number of video and audio filters are available. Bonus Pick: Butler — Access your Home Assistant dashboard from a native companion UI, integrating better with your OS. Butler on GitHub Rust for Linux revisited Redox OS — Redox is a Unix-like general-purpose microkernel-based operating system written in Rust, aiming to bring the innovations of Rust to a modern microkernel, a full set of programs and be a complete alternative to Linux and BSD.

Sixty vulnerabilities and exposures disclosed in one week sounds like a lot. We'll explain why it's just business as usual. Sponsored By: Core Contributor Membership: Take $1 a month of your membership for a lifetime! Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices! 1Password Extended Access Management: 1Password Extended Access Management is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps. Support LINUX Unplugged Links: 💥 Gets Sats Quick and Easy with Strike 📻 LINUX Unplugged on Fountain.FM Toronto Meetup — Thursday, Aug 29, 2024 Berlin with Brent — September Meetup @ Nextcloud Conference, Saturday, Sep 14, 2024 Check out Alex’s “Building a Colo Server” video Microsoft’s latest security update has ruined dual-boot Windows and Linux PCs — The cause: an update Microsoft issued as part of its monthly patch release. It was intended to close a 2-year-old vulnerability in GRUB, an open source boot loader used to start up many Linux devices. What the f*** is an SBAT and why does everyone suddenly care — This update was not supposed to apply to dual-boot systems, but did anyway. SBAT Revocations: Boot Process - Ubuntu Community Hub “Something has gone seriously wrong,” dual-boot systems warn after Microsoft update Ubuntu Will Be Skipping Non-Critical Linux Kernel Updates For September - Phoronix SRU Mailing List Annoucement Canonical Moves To Shipping Very Latest Upstream Kernel Code For Ubuntu Releases Kernel Version Selection for Ubuntu Releases - Kernel - Ubuntu Community Hub Linus Torvalds Begins Expressing Regrets Merging Bcachefs — The bcachefs patches have become these kinds of "lots of development during the release cycles rather than before it", to the point where I'm starting to regret merging bcachefs. Re: [GIT PULL] bcachefs fixes for 6.11-rc5 - Linus Torvalds — No one is being jerks here, Linus and I are just sitting in different places with different perspectives. He has a resonsibility as someone managing a huge project to enforce rules as he sees best, while I have a responsibility to support users with working code, and to do that to the best of my abilities. LINUX Unplugged 545: 3,062 Days Later — Kent Overstreet, the creator of bcachefs, helps us understand where his new filesystem fits, what it's like to upstream a new filesystem, and how they've solved the RAID write hole. Linux is a CNA — As was recently announced, the Linux kernel project has been accepted as a CNA as a CVE Numbering Authority (CNA) for vulnerabilities found in Linux. The Linux security team issues 60 CVEs a week, but don't stress. Do this instead What is a "good" Linux Kernel bug? Keynote: Linux Kernel Security Demystified - Greg Kroah-Hartman - YouTube Membership Summer Discount — Take $1 a month of your membership for a lifetime! added pihole nix module by Tdback · Pull Request #3 · JupiterBroadcasting/nixconfigs — Recently, I wanted to start 'nixifying' some of my docker-compose setup. I've created a simple module for spinning up a podman container running pihole as a systemd service, so that way I can just stick it on any NixOS machine and easily make it my DNS server. NetworkManager cli (nmci) wrapper to easily create a new network connection Distrohopper Wheel No idea where to distrohop next? Let the ultimate distrohopper decide for you! Proxmox Virtual Environment - NixOS Wiki Pick: SaunaFS is a distributed file system — A robust distributed POSIX file system meticulously designed to revolutionize your storage solutions by offering unmatched efficiency, security, and redundancy. At its core, SaunaFS is a distributed file system primarily written in C++, inspired by the pioneering concepts introduced by Google File System. Google File System - Wikipedia saunafs/INSTALL.md

We reveal how we turned our humble LAN into a public server farm, all while keeping our IP address under wraps and our ISP blissfully unaware. Sponsored By: Core Contributor Membership: Take $1 a month of your membership for a lifetime! Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices! 1Password Extended Access Management: 1Password Extended Access Management is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps. Support LINUX Unplugged Links: 💥 Gets Sats Quick and Easy with Strike 📻 LINUX Unplugged on Fountain.FM Toronto Meetup — Thursday, Aug 29, 2024 Berlin with Brent — September Meetup @ Nextcloud Conference, Saturday, Sep 14, 2024 Check out Alex's "Building a Colo Server" video — Building a colo server for Jupiter Broadcasting using the 45Homelab HL15 server. Firewall - NixOS Wiki nftables wiki The netfilter.org "nftables" project Gentoo Nftables Examples networking/nftables: add .tables property and disable ruleset flushing by default by mkg20001 Example nftables config Olympia Mike on "verified only Flatpaks" — I'm curious your take on a recent update that happened in Linux Mint, and the possible knock on effect of it. Incus is a next generation system container and virtual machine manager. Incus - NixOS Wiki Moving from Proxmox to Incus Membership Summer Discount — Take $1 a month of your membership for a lifetime! Referral Code eXchange auto-tab-discard tab-session-manager OneTab extension for Google Chrome and Firefox Tubular — A fork of NewPipe that implements SponsorBlock and ReturnYouTubeDislike.

Brent's computer pulls an all-nighter at the worst possible moment, and the hits keep coming for open-source Android distributions and our new 2FA tool. Sponsored By: Core Contributor Membership: Take $1 a month of your membership for a lifetime! Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices! 1Password Extended Access Management: 1Password Extended Access Management is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps. Support LINUX Unplugged Links: 💥 Gets Sats Quick and Easy with Strike 📻 LINUX Unplugged on Fountain.FM Toronto Meetup — Thursday, August 29, 2024 from 6:00 PM to 8:00 PM EDT Sacramento LUG Meetup — Saturday September 7th, 2024 from 10:00 AM to 2:00 PM PDT Anker PowerConf S330 USB Speakerphone Corsair Void RGB Elite Wireless Premium Gaming Headset Loss of popular 2FA tool puts security-minded GrapheneOS in a paradox GrapheneOS on X — Google can either permit GrapheneOS in the Play Integrity API in the near future GrapheneOS on X — If Authy insists on using it, they should use the standard Android hardware attestation API to permit using GrapheneOS too. Banning 250k+ people with the most secure smartphones from using your app is anti-security, not pro-security. GrapheneOS on X — Authy simply delegated checking device integrity to Google. It's Google choosing to block GrapheneOS users from using Authy. Google chooses to allow using a device with no security patches for the past 8 years but bans using an OS much more secure than the stock Pixel OS. Twilio kills off Authy for desktop, forcibly logs out all users GrapheneOS on X — Our latest release with prevention for most VPN app DNS leaks is currently available in our Alpha and Beta channels. We need more feedback from testing VPN apps and services with leak blocking toggled on, which GrapheneOS already enables by default. GrapheneOS on X — Our current approach to DNS leak blocking appears to work well without breaking compatibility. We've made progress towards fixing a related issue for some VPN apps where rare connections are made to VPN DNS outside of the tunnel. We can hopefully ship stricter enforcement soon. GrapheneOS on X — We've become aware of another company selling devices with GrapheneOS while spreading harmful misinformation about it to promote insecure products. We're making our usual attempt at resolving things privately. However, we need to quickly address what has been claimed regardless. Membership Summer Discount — Take $1 a month of your membership for a lifetime! How You Guys Expect to Beat Me? Blue Iris Container netbird — Connect your devices into a secure WireGuard®-based overlay network with SSO, MFA and granular access controls. netbird on GitHub OpenZiti — Open Source Zero Trust Networking OpenZiti on GitHub Collapse OS — Bootstrap post-collapse technology Docker-OSX — Run macOS VM in a Docker! Run near native OSX-KVM in Docker! X11 Forwarding! CI/CD for OS X Security Research! Docker mac Containers.

The COSMIC desktop is just around the corner. We get the inside scoop from System76 and go hands-on with an early press build. Sponsored By: Core Contributor Membership: Take $1 a month of your membership for a lifetime! Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices! 1Password Extended Access Management: 1Password Extended Access Management is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps. Support LINUX Unplugged Links: 💥 Gets Sats Quick and Easy with Strike 📻 LINUX Unplugged on Fountain.FM System76 tips Fedora Cosmic spin for 2025 release with Fedora 42 — It looks like System76's exciting new Rust-based Cosmic DE will get an official Fedora spin in the upcoming Fedora 42, potentially giving Linux users with bleeding-edge hardware an official way to try Cosmic. Pop!_OS Mattermost — An excellent place to engage if you want to bring COSMIC to a distro near you. iced — A cross-platform GUI library for Rust Smithay — A smithy for rusty wayland compositor Testing COSMIC — The easiest way to test COSMIC DE currently is by building a systemd system extension. Membership Summer Discount — Take $1 a month of your membership for a lifetime! Portal:Kalpa - openSUSE Wiki — openSUSE MicroOS Desktop Gnome was renamed to openSUSE Aeon, and the Plasma Desktop version is being renamed to openSUSE Kalpa. pop-os/kernelstub: A simple EFI boot manager manager for Linux Alpaca — GTK App to Chat with local AI models Alpaca on FlatHub

Think Silverblue, but with cloud-native tooling used to build it. From Aurora to Bazzite, our impressions of the ambitious Universal Blue project. Sponsored By: Core Contributor Membership: Take $1 a month of your membership for a lifetime! Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices! 1Password Extended Access Management: 1Password Extended Access Management is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps. Support LINUX Unplugged Links: 💥 Gets Sats Quick and Easy with Strike 📻 LINUX Unplugged on Fountain.FM Universal Blue — The Universal Blue project builds a diverse set of continuously delivered operating system images using Fedora Atomic Desktop's support for OCI/Docker containers. Universal Blue Architecture Diagram Aurora — Aurora is a clean and reliable desktop operating system for every type of user. Many batteries included. Bluefin — Bluefin is a custom image of Fedora Silverblue offering the best of both worlds: The reliability and ease of use of a Chromebook and the power of a GNOME desktop. Bazzite — The next generation of Linux Gaming for all of your devices - including your favorite handheld. uCore — An OCI base image of Fedora CoreOS with batteries included; a lightweight server image including most used services or the building blocks to host them. Bazzite Desktop Environment Tweaks - Bazzite - Docs - Universal Blue Installing and Managing AppImages on Bazzite - Bazzite - Docs - Universal Blue Universal Blue Contributing Guide Jazz up your Bluefin command line with some bling! [YouTube] Jorge Castro on YouTube Membership Summer Discount — Take $1 a month of your membership for a lifetime! zap.store — a permissionless app store. Asking AI To Make A Caveman Rock Song - Me Like Rock winapps — Run Windows applications (including Microsoft 365 and Adobe Creative Cloud) on GNU/Linux with KDE, GNOME or XFCE, integrated seamlessly as if they were native to the OS. The Mooltipass Hardware Authenticator — A Simple Hardware Authenticator ptyxis — Ptyxis is a terminal for GNOME with first-class support for containers. Gearlever — Manage AppImages with ease 📦

Wes' self-decrypting bcachefs disk and a GrapheneOS twist that'll make you ditch your iPhone. Sponsored By: Core Contributor Membership: Take $1 a month of your membership for a lifetime! Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices! 1Password Extended Access Management: 1Password Extended Access Management is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps. Support LINUX Unplugged Links: 💥 Gets Sats Quick and Easy with Strike 📻 LINUX Unplugged on Fountain.FM clevis — Clevis is a pluggable framework for automated decryption. It can be used to provide automated decryption of data or even automated unlocking of LUKS volumes. bcachefs Encryption What measured boot and trusted boot means for Linux Automatically decrypt your disk using TPM2 — Entering the passphrase to decrypt the disk at boot can become quite tedious. On modern systems a secure hardware chip called “TPM” (Trusted Platform Module) can store a secret and automatically decrypt your disk. This is an alternative factor, not a second factor. Keep that in mind. Use systemd-cryptenroll with FIDO U2F or TPM2 to decrypt your disk Automatic LUKS 2 disk decryption with TPM 2 on Fedora Safe automatic decryption of LUKS partition using TPM2 | 221b FOSDEM 2024: Clevis/Tang - unattended boot of an encrypted NixOS system Clevis & Tang on NixOS Slides Decrypt LUKS volumes with a TPM on Fedora Linux Self-Hosted 127: Can't Fix What You Don't Track Garmin Forerunner 265 — Forerunner 265 is a running smartwatch with a touchscreen AMOLED display, training metrics, phone-free music, & up to 13 days of battery life in smartwatch HRV Status Garmin Sleep Tracking Nap Detection Garmin Pay Tribit Stormbox Micro 2 Wireless Portable Speaker: 10W USB-C Charging Converter for Garmin Watch Without Charger Cable Obtainium — Obtainium allows you to install and update apps directly from their releases pages, and receive notifications when new releases are made available. Managing your personal access tokens Membership Summer Discount — Take $1 a month of your membership for a lifetime! Iotas — Iotas aims to provide distraction-free note taking with optional speedy sync with Nextcloud Notes. LINUX Unplugged 567: So Long sudo Celeste — GUI file synchronization client that can sync with any cloud provider vt52's Blog: Migrating from NixOS channels to Flakes FUTO Keyboard autossh LINUX Unplugged 570: RegreSSHion Strikes Aeon — The Linux Desktop for people who want to "get stuff done" Aeon: openSUSE for lazy developers Grayjay — Follow Creators Not Platforms Grayjay on GitLab CrowdSec Bustle — Bustle draws sequence diagrams of D-Bus activity. It shows signal emissions, method calls and their corresponding returns, with time stamps for each individual event and the duration of each method call. This can help you check for unwanted D-Bus traffic, and pinpoint why your D-Bus-based application is not performing as well as you like. It also provides statistics like signal frequencies and average method call times. open-and-shut — Type in Morse code by repeatedly slamming your laptop shut

Wes reports from the Skunkworks lab, and Brent tells us about his new computing lifestyle. Sponsored By: Core Contributor Membership: Take $1 a month of your membership for a lifetime! Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices! 1Password Extended Access Management: 1Password Extended Access Management is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps. Support LINUX Unplugged Links: 💥 Gets Sats Quick and Easy with Strike 📻 LINUX Unplugged on Fountain.FM Nix Nerds Matrix Room Beelink SER5 Mini PC Minisforum UM690 Pro pyenv-flake: experimental nix flake that can build pyenv pythons dotenvx-flake: A nix flake for dotenvx auto-patchelf.sh - NixOS/nixpkgs Packaging/Binaries - NixOS Wiki Membership Summer Discount — Take $1 a month of your membership for a lifetime! Try the JB Test Gathio Instance hosted by HybridSarcasm Berlin with Brent: September Meetup at Nextcloud Conference · JB Events Fix Kate sudo saves - use Plasma 6 version of Kate by MarkSort · Pull Request #3 · ChrisLAS/nix Running OpenBSD 7.5 on your laptop is really hard (not) — I couldn't use OpenBSD exclusively; there's software that I need/want which isn't available. But I do appreciate certain of OpenBSD's qualities: it's a simple, ultra-lightweight, traditional UNIX. I have an ancient ThinkPad running OpenBSD configured as a minimalist desktop: it's nice for focused work. Sure, it can't run Steam or play Netflix, but sometimes that's a plus... @fabean's NixOS configs IBM Classroom LAN Administration System V 1.30 User Guide 0xchat: Secure chat built on Nostr Get NIP-05 verified Pick: termscp — 🖥 A feature rich terminal UI file transfer and explorer with support for SCP/SFTP/FTP/S3/SMB Learn Nix The Fun Way — Sure, it’s sort of portable, if you tell the person running it to have curl and jq. What if you relied on a specific version of either though? Nix guarantees portability.

We dig into the RegreSSHion bug, debate it's real threat and explore clever tools to build a tasty fried onion around your system. Sponsored By: Core Contributor Membership: Take $1 a month of your membership for a lifetime! Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices! 1Password Extended Access Management: 1Password Extended Access Management is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps. Support LINUX Unplugged Links: 💥 Gets Sats Quick and Easy with Strike 📻 LINUX Unplugged on Fountain.FM Spokane Meetup - No-Li Brewhouse · JB Events on Gathio Plasma/Krunner Docs — Brent's tip: 'https://search.nixos.org/options?query=\{@}' (the '\{@}' is the magic sauce) autossh — Automatically restart SSH sessions and tunnels autossh on GitHub Spokane Meetup — No-Li Brewhouse, Sat, Jul 13, 2024, 4:00 PM RegreSSHion — Remote Code Execution Vulnerability In OpenSSH Server regreSSHion — Remote Unauthenticated Code Execution Vulnerability in OpenSSH server. NixOS Security advisory: OpenSSH CVE-2024-6387 “regreSSHion” – update your servers ASAP Nasty regreSSHion bug affects around 700K Linux systems Qualys CVE-2024-6387 Write-up Letmein: Authenticating port knocker - Written in Rust — Letmein is a simple port knocker with a simple and secure authentication mechanism. It can be used to harden against pre-authentication attacks on services like SSH, VPN, IMAP and many more. fwknop: Single Packet Authorization > Port Knocking — fwknop stands for the "FireWall KNock OPerator", and implements an authorization scheme called Single Packet Authorization (SPA). This method of authorization is based around a default-drop packet filter Membership Summer Discount — Take $1 a month of your membership for a lifetime! Jeff links: How to run non-nix executables? pick: stu — TUI (Terminal/Text UI) application for AWS S3

Why we think Plasma 6.1 is the desktop for people who like to mess with computers. Sponsored By: Core Contributor Membership: Take $1 a month of your membership for a lifetime! Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices! 1Password Extended Access Management: 1Password Extended Access Management is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps. Support LINUX Unplugged Links: 💥 Gets Sats Quick and Easy with Strike 📻 LINUX Unplugged on Fountain.FM Marknote - KDE Applications Marknote 1.3 - KDE Blogs — Marknote lets you create rich text notes and easily organise them into notebooks. You can personalise your notebooks by choosing an icon and accent color for each one, making it easy to distinguish between them and keep your notes at your fingertips. Your notes are saved as Markdown files in your Documents folder, making it easy to use your notes outside of Marknote as well as inside the app. Spokane Meetup - No-Li Brewhouse, Sat, Jul 13, 2024, 4:00 PM No-Li Brewhouse Menu 10 best beer gardens in the US where you can quench your thirst KDE Plasma 6.1 Desktop Environment Officially Released, Here's What's New Plasma 6.1 - KDE Community — This release introduces explicit GPU synchronization support for NVIDIA users and triple buffering support on Wayland for smoother animations. KDE Plasma 6.1.1 Desktop Environment Released with Various Bug Fixes LUP 552 — Plasma 6 is out, and we've been giving it a go. What's new, our thoughts, and the lessons other desktops should learn. KDE Plasma 6.1 Performing Much Better On Older Intel Integrated Graphics Fixing KWin's performance on old hardware plasma6-desktop package versions plasma-desktop package versions KRdp on GitLab — Currently, the main client that has been used for testing and is confirmed to work is the FreeRDP client. Open KRdp Bugs appiumtests: test adaptive panel opacity (!2324) · Merge requests · Plasma / Plasma Desktop · GitLab Why the next GNOME Release will be one of the Best Ever Membership Summer Discount — Take $1 a month of your membership for a lifetime! Gathio JB Events Gathio hosted by HybridSarcasm GitHub Issue: Can't create events — An unexpected error has occurred. Please try again later. Crossover: Run Microsoft Windows software on Mac and Linux | CodeWeavers FUTO Keyboard — Your keyboard shouldn't connect to the internet. FUTO Keyboard · Wiki

Online identity is a ticking time bomb. Are trustworthy, open-source solutions ready to disarm it? Or will we be stuck with lackluster, proprietary systems? Sponsored By: Core Contributor Membership: Take $1 a month of your membership for a lifetime! Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices! 1Password Extended Access Management: 1Password Extended Access Management is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps. Support LINUX Unplugged Links: 💥 Gets Sats Quick and Easy with Strike 📻 LINUX Unplugged on Fountain.FM Jupiter Broadcasting Meetups XZ Utils Backdoor Vulnerability (CVE-2024-3094): Comprehensive Guide The Mystery of ‘Jia Tan,’ the XZ Backdoor Mastermind Who is ‘Jia Tan,’ the coder behind the XZ Utils Linux backdoor? Reflections on Distrusting xz The Linux kernel does not accept anonymous contributions due to legal reasons. — The Linux kernel does not accept anonymous contributions due to legal reasons. Kernel.org Docs on contributions — It is imperative that all code contributed to the kernel be legitimately free software. Elon Musk wants to ‘authenticate all real humans’ on Twitter. Elon Musk claims alien identity, links human brain function to AI purpose Elon Musk Finally Realizes That Verification Requires More Than A Credit Card, Planning To Make Users Upload Gov’t ID Elon Musk can show the world how to really do ID World ID Nostr: All Your Silos Are Broken Nostr Iceberg Meme NIP-01 Mapping Nostr keys to DNS-based internet identifiers Navigating the social graph — In this paper, you will find a definition of the social graph, principles for thinking about it, and practical ideas for using it for DoS prevention, social discovery, anti-impersonation, accurate ratings, and more. Highlighter — Highlighter is like Substack & Patreon but on Nostr. Satlantis — Satlantis is like Trip Advisor, meets Instagram and Google Places. HiveTalk — Free Video Calls, Messaging and Screen Sharing zap.stream — Twitch alt powered by value for value and Nostr ostrGit — A truly censorship-resistant alternative to GitHub that has a chance of working. Blogstack — Write decentralized blogs over relay using nostr w/ ⚡ lightning tips. Ditto — Ditto is a Nostr community server. It has a built-in Nostr relay, a web UI, and it implements Mastodon's REST API. UseNostr awesome-nostr Decentralized publishing for the web Nostr Apps Nosta — New to Nostr? You're in the right place. Here you can easily set up your profile, discover apps, and browse other profiles. Amethyst amethyst: Nostr client for Android yana Primal App Dan's Nostr Relay Membership Summer Discount — Take $1 a month of your membership for a lifetime! SpeechNote — Speech Note let you take, read and translate notes in multiple languages. It uses Speech to Text, Text to Speech and Machine Translation to do so. rhasspy/piper: — A fast, local neural text to speech system. Starship — The minimal, blazing-fast, and infinitely customizable prompt for any shell! starship on GitHub ZSH Docs: ZDOTDIR distrobox-assemble — distrobox-assemble takes care of creating or destroying containers in batches, based on a manifest file. Pick: Gathio — Gathio is a simple, federated, privacy-first event hosting platform.

Your Linux box is a-changin'. systemd has a huge new release; we'll get into the most impressive features, including the new sudo replacement. Plus, our thoughts on the new Linux Arm laptops that are just around the corner. Sponsored By: Core Contributor Membership: Take $1 a month of your membership for a lifetime! Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices! 1Password Extended Access Management: 1Password Extended Access Management is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps. Support LINUX Unplugged Links: 💥 Gets Sats Quick and Easy with Strike 📻 LINUX Unplugged on Fountain.FM Announcing systemd v256 — In the weeks leading up to this release I have posted a series of serieses of posts to Mastodon about key new features in this release. systemd changes with v2⁸: systemd 256 Released With run0, systemd-vpick, importctl & Other New Features Lennart on systemd-vpick — Basically, you can now place multiple versions of the same resource in some dir of your choice, suffix that dir's name with .v/ and the you get some basic version management in place: delete or add new versions by just removing/adding new files, and the tools will find the newest item dropped in automatically. Introduction to Portable Services — “Portable services” do not provide a fully isolated environment to the payload, like containers mostly intend to. Instead, they are more like regular system services, can be controlled with the same tools, are exposed the same way in all infrastructure, and so on. The main difference is that they use a different root directory than the rest of the system. Trying out systemd's Portable Services — All in all, the core pieces are already in place for a very promising new technology that should make it easier for 3rd parties to provide Linux system-level software in a safe and convenient way, well done to the systemd team for a well executed concept. All it lacks is some polish around the tooling and integration. systemd sleep — Putting a PC to sleep is complicated business and there are different mechanisms available to achieve this on Linux. Lennart on SSH and AF_VSOCK — This automatic ssh-via-AF_VSOCK logic is particularly useful DDIs and systemd-nspawn — Or in other words: there's now unprivileged systemd-npsawn containers. Yay! Lennart on systemd-vmspawn Lennart on sd_notify Lennart on dlopen Lennart on run0 — There's a new tool in systemd, called run0. Or actually, it's not a new tool, it's actually the long existing tool systemd-run, but when invoked under the run0 name (via a symlink) it behaves a lot like a sudo clone. But with one key difference: it's not in fact SUID. doas - dedicated openbsd application subexecutor Doas - NixOS Wiki Doas on Wikipedia The Tragedy of systemd — Join me on a journey through the bootstrap process, the history of init, the reasons why change can be scary, and the discovery of a part of your OS you may not even know existed. The Two Year Journey Funded By Arm/Qualcomm For Improving ARM Linux Laptop Support — ARM Kernel developers spent the last two years working on improving ARM Linux laptop support with a focus on the Lenovo ThinkPad X13s powered by a Qualcomm SoC. Ubuntu 24.04 LTS support to the Lenovo ThinkPad x13s Snapdragon 8cx Ubuntu Asahi project TUXEDO Working on Snapdragon X Elite Linux Laptop Membership Summer Discount — Take $1 a month of your membership for a lifetime! Spokane Meetup, Sat, Jul 13, 2024, 4:00 PM Berlin with Brent: September Meetup @ Nextcloud Conference, Fri, Sep 13, 2024 | Meetup A Nix Flake for Bitfocus Companion ChrisLAS' Beelink NixOS Config Bluetooth - NixOS Wiki nix-direnv xscreensaver on Android Rainier cherry - Wikipedia Pick: Iotas — Markdown notes that syncs with NextCloud Notes.

We try Omakub, a new opinionated Ubuntu desktop for power users and macOS expats. Sponsored By: Core Contributor Membership: Take $1 a month of your membership for a lifetime! Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices! Kolide: Kolide is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps. Support LINUX Unplugged Links: 💥 Gets Sats Quick and Easy with Strike 📻 LINUX Unplugged on Fountain.FM Have a pint with Alex in Norwich , Sun, Jun 16, 2024, 2:30 PM | Meetup Spokane Meetup, Sat, Jul 13, 2024, 4:00 PM Nextcloud Conference 2024: call for speakers - Nextcloud Nextcloud Conference 2024 - Nextcloud Berlin with Brent: September Meetup @ Nextcloud Conference, Fri, Sep 13, 2024 | Meetup notch on X — Alright, that's enough spyware in my OS. Do I go desktop Mac, or do I have the energy to go full Linux? Not sure, but I'm tired of my operating system treating me like the product. DHH on X — If I have such a fundamental misalignment with where Apple has gone, why stay? I think that was the question I finally just asked myself for the umph-teenth time, and realized I didn’t have a good answer that wasn’t just based on comfort. For the Love of Linux — In this podcast episode, REWORK host Kimberly Rhodes talks with David Heinemeier Hansson, co-founder of 37signals and CTO, about his personal shift from using Apple products to exploring Linux and Windows platforms. He discusses the expanded platform integration at 37signals, which now includes all three operating systems. DHH on X — The big YearofLinuxontheDesktop will be 2025. Snapdragon X chips will be ready. Folks will be sick of AI shoved into every crevasse of their life. Thank heaven for disagreeable nerds refusing to bend the knee to the corporate agenda! Linux as the new developer default at 37signals — I've personally been having a blast over the last few months digging deeper and deeper into the Linux rabbit hole, and it's been a delight discovering just how good its become as developer platform. Introducing Omakub — Omakub turns a fresh Ubuntu installation into a fully-configured, beautiful, and modern web development system by running a single command. Xournal++ Flameshot Pinta Framework Omakub list of installed apps Omakub — An Omakase Developer Setup for Ubuntu 24.04 by DHH Omakub on GitHub Omakub introductory video Membership Summer Discount — Take $1 a month of your membership for a lifetime! devenv — Fast, Declarative, Reproducible and Composable Developer Environments using Nix squid GeneBean on X — My dad was so happy with his desktop after I switched him to #Pop_OS! that he had me do the same to the laptop he takes on trips. Thanks for such a stellar distro @system76 Walkthrough of Nix Install and Setup on MacOS by zmre on YouTube Wildspaces.work — Wildpsaces.work is designed for remote workers interested in reconnecting with community and working from new and wild places. Chris' Amazon Tablet — 10.1 Inch Android 13 Octa-core with 8(4+4) GB+128GB Tablets, 5MP+8MP Camera, Bluetooth 5.0 Fully Kiosk Browser Lockdown Jellyfin Media Player — Desktop client using jellyfin-web with embedded MPV player. Supports Windows, Mac OS, and Linux. kthresher: Tool to remove unused kernels in Debian/Ubuntu helipad-flake — A Nix flake to provide a helipad package and NixOS module. Intended for use with nix-bitcoin. Kopia — Fast and Secure Open-Source Backup Software Pick: Multiplex — Multiplex is an app to watch torrents together, providing an experience similar to Apple's SharePlay and Amazon's Prime Video Watch Party. weron — weron provides lean, fast & secure overlay networks based on WebRTC.

The facepalm moments that make us question our sanity—and swear off sudo for a week. Sponsored By: Core Contributor Membership: Take $1 a month of your membership for a lifetime! Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices! Kolide: Kolide is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps. Support LINUX Unplugged Links: 💥 Gets Sats Quick and Easy with Strike 📻 LINUX Unplugged on Fountain.FM Linux May Be the Best Way to Avoid the AI Nightmare — What if you care about AI's environmental impact, privacy holes, and the ethical problems of training on data without the creators' permission? The answer might be to switch to Linux. Yes, Linux. Kate Asks about Mistakes to Avoid — Hey boys-Microsoft has officially gone off the deep end with this AI stuff. I'm pretty sure AI Clippy is pulling the strings behind the scenes. Any tips for escaping to Linux before I get assimilated? What are the big don'ts for a newbie? Jeremy Molina on X — sudo rm -rf ./ on the root directory 😓 Lee Ball on X — I thought I was in a backup directory when I did an rm -rf but turned out I'd forgotten the ./ and just went into /var/lib/mysql and not the backup of said directory. ChaoticHuman on X — I think my most major beginner mistake once was something like sudochownuseraccount/ because I wanted to not have to deal with file-ownership-conflicts though I no longer remember what exactly I did. I only remember that it led to completely destroying my Linux-system. Ken Starks on X — What are all these files with a dot before them. They aren't programs. Might as well delete them. PDunn on X — Using fringe distos and too much distrohopping causing loss of time and not being productive. Linux can be a time sink I don't have time for. So I installed Ubuntu and moved on. I just use what works and is easy to maintain. Unplugged contributor here. Membership Summer Discount — Take $1 a month of your membership for a lifetime! Chris' Beelink Nix Config Nix from First Principles: Flake Edition — This guide is a beginner's guide to Nix and related tooling, focusing on the newer nix command, and flake.nix compared to older tools like nix-env and default.nix. It does not require any prior Nix knowledge, and instead builds up the Flake based world from first principles, so that it can serve as an introduction to Nix itself, as well as the concept and uses of Flakes. Pick: Delfin — Delfin is a native client for the Jellyfin media server. It features a fast and clean interface to stream your media in an embedded MPV-based video player. Delfin on Flathub Delfin repo Delfin nix package A fireside chat with Nextcloud founder Frank Karlitschek - Nextcloud — Part of this talk was on LUP, now you can hear the full thing.

We're following one simple rule to build a Linux desktop so stable it could outlive us. Sponsored By: Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices! Kolide: Kolide is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps. Core Contributor Membership: Save $3 a month on your membership, and get the Bootleg and ad-free version of the show. Code: MAY Support LINUX Unplugged Links: 💥 Gets Sats Quick and Easy with Strike 📻 LINUX Unplugged on Fountain.FM Microsoft’s controversial Recall feature for Windows 11 could already be in legal hot water Apple GPT — What We Know About Apple's Work on Generative AI Chris' BeeLink — Beelink Ryzen 7 5700U Up to 4.3GHz 8C/16T RV BeeLink Nix configuration.nix Slack - NixOS Wiki Chris' Win 7 Inspired Look musnix — Real-time audio in NixOS Boost Pick: nh — NH reimplements some basic nix commands. Adding functionality on top of the existing solutions, like nixos-rebuild, home-manager cli or nix itself. Pick: gridplayer — Simple VLC-based media player that can play multiple videos at the same time. You can play as many videos as you like, the only limit is your hardware. It supports all video formats that VLC supports (which is all of them). You can save your playlist retaining information about the position, sound volume, loops, aspect ratio, etc.

After months of debate, the Nix community might be coming to a resolution. We'll examine what happened, what's changing. Sponsored By: Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices! Kolide: Kolide is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps. Core Contributor Membership: Save $3 a month on your membership, and get the Bootleg and ad-free version of the show. Code: MAY Support LINUX Unplugged Links: 💥 Gets Sats Quick and Easy with Strike 📻 LINUX Unplugged on Fountain.FM Using Tailscale for Android just got a whole lot better Report on NixOS Governance Discussions - by Chris McDonough The NixOS Foundation board announced on April 30 that Eelco Dolstra is stepping down from the board following the recent calls for his resignation. A leadership crisis in the Nix community (LWN) — On April 21, a group of anonymous authors and non-anonymous signatories published a lengthy open letter to the Nix community and Nix founder Eelco Dolstra calling for his resignation from the project. NixOS Foundation board: Giving power to the community - Announcements - NixOS Discourse NixOS Foundation Board: Constitutional Assembly Appointment - Announcements - NixOS Discourse Full Email with Graham Chris' s nginx Config NixOS Manual: Using DNS validation with web server virtual hosts NixOS Manual: SSL/TLS Certificates with ACME Unplugged Core Membership Signing up with an email address Dell OEM Replacement Parts Winamp has announced that it is opening up its source — Winamp has announced that on 24 September 2024, the application's source code will be open to developers worldwide. RcloneShuttle — Upload your files to anywhere - GTK4 GUI for Rclone