Greg Kroah-Hartman Turns To New "Clanker T1000" Fuzzing Tools For Uncovering Kernel Bugs
Two Linux kernel APIs from 1999 that fix credential theft in ssh-agent, gpg-agent, and every Unix socket daemon
Built a credential broker for AI agents and found that ssh-agent, gpg-agent, and every UDS-based credential tool trusts the same boundary: the Unix UID. The assumption "if theyre running as you youve already lost" breaks when AI agents execute arbitrary code as your UID by design.
The Exploit
SO_PEERCRED records who called connect() but fds survive fork()+exec(). Attacker connects, forks, child execs the legit binary, parent sends on inherited fd. Daemon hashes the childs binary — matches. Token issued to the attacker.
Tried eight mitigations. All failed because attacker controls exec timing.
The Fix
1.
Linux made my laptop last forever. When is it OK to buy a new one?
When my laptop was getting sluggish on windows I switched to debian. Honestly it's working pretty well, with a few hitches here and there, but I suspect this will lead to the laptop not dying ever. It's already 6 years old.
When am I allowed to buy a new one I want to play BG3
[link] [comments]
Lemonade 10.1 released for latest improvements for local LLMs on AMD GPUs & NPUs
If the Rust Coreutils can use the MIT license, does that mean that any open-source project can be rewritten with a different license?
I didn't know rewriting code was enough to allow you to change the license, but that seems to be the case for the coreutils. I understand there is more to it than just rewriting the code, and you need to be able to prove you didn't copy the existing code.
With how AI is progressing, having a team of developers rewriting code could become less of an obstacle.
I don't think anyone is just going to rewrite the Linux kernel, but it does seem as if it could become a problem for smaller projects, where a bad-faith actor wants to use the code with a different license.
What do you guys have against Zorin OS?
I mean it's a perfect newcomer distro and great for people who just want something non-exotic. Except that you guys don't like it. It's at the bottom of nearly every tierlist i saw. I'm seriously wondering why.
[link] [comments]
[Update] Mend v0.6.0: A personal recovery tool now supporting multiple distros
Hello all,
I have been working on a personal project called Mend, which is a modular Zsh plugin designed to help with system recovery. Instead of digging through wikis when a command fails, it uses fzf to help resolve package conflicts, map missing libraries, offers to refresh mirrors if needed, clearing orphans and clear database locks.
The main reason I have moved this to a cross-distro model is that I wanted users on other systems to be able to test it if they are interested. It now supports Arch, Fedora, openSUSE, and Debian-based systems. While it has been fully tested on my own Arch machine and within containers for the other distributions, I cannot simulate a real-world system that has months or years of personal tweaks and updates. Be
Trying to install Mech Arena on Ubuntu 26.04
Alright so Im trying to install Mech Arena on 26.04 which I was able to install it from the launcher in steam but whenever I try to run it it tries to load but then just quits the process. I would really appreciate some help
[link] [comments]
Is it the sign of total SSD hardware failure?
So I can't boot into ubuntu in my laptop anymore and I am dual booting with windows.I have two separate SSDs on my laptop.It boots fine into windows 11 from Bios.When I check disk management from control panel and run diskpart- list disk from CMD,they only shows Disk 0.Also in bios,there is windows SSD with 512 gb,but another one shows like this,"Generic loader name device" with (0.0 GB).It means the drive is completely bricked?I feel like something is wrong when there is complete session crashes that I can't do nothing but to hard restart with holding power buttons in past few weeks.
CESS — Cryptologically Enchanted Shamir's Secret , a open standard.
CESS was created to fix these issues:
GnuPG provides strong encryption and signing, but it does not support modern AEAD and Shamir's secret.
Autocrypt focuses on opportunistic mail encryption, threshold splitting of long-term secrets with PIN-wrapped shares is not supported.
SLIP-0039 standardises mnemonic encoding of Shamir shares but it does not support encrypted shares.
Shamir's secret sharing has been around since 1979.
CESS is an open cryptographic standard for threshold secret sharing. It also supports mixing of cryptographic chiphers.
One can as a example do:
BrainpoolP384r1 + Twofish-256-CTR + Poly1305.
That profile has the internal suite id 0x0004. So recipients of coded mess
My First Open-Source Fork Experience With Thunar
I've used linux for the last 3 years now. I started with Ubuntu, it had a lot of problems with my hardware, I switched to Mint, and my hardware worked. Most of it, at least. Enough to use for daily work and internet browsing. Before I committed to learning how to use this OS, I had been on Windows since 3.0 at home, and went to 8.1 with the exception of ME as I grew up and as a young adult.
to put this bluntly: I HATE. HATE. HATE. the Linux drive naming conventions. The way I have had this explained to me is that linux uses a single tree and all drives are theoretically a space on that single tree. This is bullshit. It was bullshit back then, and it is bullshit now. All linux boots off of a single drive, whether or not it is physical or networked, a
beautiful alternative to microsoft office
First, please avoid suggesting LibreOffice. I’m specifically looking for alternatives that closely resemble the design, interface, and user experience of Microsoft Office. Any suitable recommendations?
[link] [comments]
Ubuntu MATE Dev Leaving After 12 years
Martin Wimpress, the maintainer of Ubuntu MATE, is now searching for his successor. Are you the next in line?
Wine 11.6 is an exciting release to make modding Windows games on Linux simpler
Read the full article on GamingOnLinux.
The Best of Humble: Fight 4 Your Friends game bundle brings multiplayer madness
Read the full article on GamingOnLinux.
DOOM Eternal is now available on GOG
Read the full article on GamingOnLinux.
NVIDIA reveal more GeForce NOW games for April including PRAGMATA
Read the full article on GamingOnLinux.
Ascenders: Beyond the Peak has my attention with vertical turn-based roguelite survival
Read the full article on GamingOnLinux.
Pixel art horror adventure Two Realms: Whispers from the Rift gets a demo
Read the full article on GamingOnLinux.
Valve recently confirmed Steam game pricing updates across different regions
Read the full article on GamingOnLinux.
Wall run and slice up massive machines in the upcoming MotorSlice arrives in May
Read the full article on GamingOnLinux.
Chiaki-ng the open-source PlayStation Remote Play app gets better streaming quality and stability
Read the full article on GamingOnLinux.
OpenGOAL project adds the Naughty Dog classic Jak 3
Read the full article on GamingOnLinux.
Steam Beta adds Remote Downloads Management
Read the full article on GamingOnLinux.
MX Linux Pushes Back Against Age Verification: A Stand for Privacy and Open Source Principles
![[link]](https://i.redd.it/ykae4ncsvrtg1.jpeg){kind=link}
Death Stranding 2 gets a performance patch, including improvements for Steam Deck
Read the full article on GamingOnLinux.
Counter-Strike 2 gets a Beta with a fancy new animation system
Read the full article on GamingOnLinux.
A future Wine release could use Zink to run OpenGL via Vulkan
Read the full article on GamingOnLinux.
The US Patent Office have rejected a Nintendo Pokemon patent for summoning subcharacters
Read the full article on GamingOnLinux.
Breath of Fire IV plus classic Resident Evil 1-3 from GOG arrive on Steam - but with DRM
Read the full article on GamingOnLinux.
Mesa 26.0.4 open source graphics drivers released for Linux
Read the full article on GamingOnLinux.
Steam store home page gets a refresh in Beta, plus another Linux SteamRT3 Beta fix
Read the full article on GamingOnLinux.
Linux smashes past 5% on the Steam Survey for the first time
Read the full article on GamingOnLinux.
NVIDIA announce a preview of "DRM Per-Plane Color Pipeline API" support on Linux (good for HDR)
Read the full article on GamingOnLinux.
From Linux to Blockchain: The Infrastructure Behind Modern Financial Systems
Kali Linux Waxes Nostalgic with BackTrack Mode
For those who've used Kali Linux since its inception, the changes with the new release are sure to put a smile on your face.
Gnome 50 Smooths Out NVIDIA GPU Issues
Gamers rejoice, your favorite pastime just got better with Gnome 50 and NVIDIA GPUs.
System76 Retools Thelio Desktop
The new Thelio Mira has landed with improved performance, repairability, and front-facing ports alongside a high-quality tempered glass facade.
Some Linux Distros Skirt Age Verification Laws
After California introduced an age verification law recently, open source operating system developers have had to get creative with how they deal with it.
The Need for Cloud Security in a Modern Business Environment
UN Creates Open Source Portal
In a quest to strengthen open source collaboration, the United Nations Office of Information and Communications Technology has created a new portal.
Latest Linux Kernel RC Contains Changes Galore
Linux kernel 7.0-rc3 includes more changes than have been made in a single release in recent history.
Ignite Your Next Career Moveπ The Formula for Opportunity Starts Here — SAVE UP TO 40%!Ignite Your Next Career Move
Save up to 75% in celebration of Lunar New Year!Renew Your Skills. Accelerate Your Future.Offer ends February 24. SAVE NOW
The post Ignite Your Next Career Moveπ The Formula for Opportunity Starts Here — SAVE UP TO 40%!Ignite Your Next Career Move appeared first on Linux.com.
Implementing Secure Zero-Touch Provisioning in AI and Edge Infrastructure
By Juha Holkkola, FusionLayer Group How DHCP Changed Connectivity In the late 1990s, the DHCP (Dynamic Host Configuration Protocol) quietly catalyzed a revolution in digital connectivity. Before DHCP was introduced, connecting devices to a network involved manual entry of IP addresses, DNS servers, subnet masks, and gateways. Networks were fragile, prone to errors, and severely […]
The post Implementing Secure Zero-Touch Provisioning in AI and Edge Infrastructure appeared first on Linux.com.
Nitrux 6.0 Now Ready to Rock Your World
The latest iteration of the Debian-based distribution includes all kinds of newness.
Intel Expands Linux Graphics Team to Boost Drivers and Gaming Support
Linux Foundation Reports that Open Source Delivers Better ROI
In a report that may surprise no one in the Linux community, the Linux Foundation found that businesses are finding a 5X return on investment with open source software.
Keep Android Open
Google has announced that, soon, anyone looking to develop Android apps will have to first register centrally with Google.
Kernel 7.0 Now in Testing
Linus Torvalds has announced the first Release Candidate (RC) for the 7.x kernel is available for those who want to test it.
Introducing matrixOS, an Immutable Gentoo-Based Linux Distro
It was only a matter of time before a developer decided one of the most challenging Linux distributions needed to be immutable.
Chaos Comes to KDE in KaOS
KaOS devs are making a major change to the distribution, and it all comes down to one system.
Gentoo Charts a New Path: Moving Away from GitHub Toward Codeberg
New Linux Botnet Discovered
The SSHStalker botnet uses IRC C2 to control systems via legacy Linux kernel exploits.
Ignite Your Next Career Move
Save up to 75% in celebration of Lunar New Year!Renew Your Skills. Accelerate Your Future.Offer ends February 24. SAVE NOW
The post Ignite Your Next Career Move appeared first on Linux.com.
The Next Linux Kernel Turns 7.0
Linus Torvalds has announced that after Linux kernel 6.19, we'll finally reach the 7.0 iteration stage.
Linux From Scratch Drops SysVinit Support
LFS will no longer support SysVinit.
GOG Moves Toward Native Linux Support: A Major Shift for DRM-Free Gaming
