Sponsored By:

• Core Contributor Membership: Take $1 a month of your membership for a lifetime! Promo Code: summer
• Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices!
• 1Password Extended Access Management: Secure every sign-in for every app on every device.

Support LINUX Unplugged

Links:

• 💥 Gets Sats Quick and Easy with Strike
• 📻 LINUX Unplugged on Fountain.FM
• Berlin with Brent: September Meetup @ Nextcloud Conference, Sat, Sep 14, 2024
• Berlin Buds on Matrix
• Linus Torvalds talks AI, Rust adoption, and why the Linux kernel is 'the only thing that matters'
• KubeCon + CloudNativeCon + Open Source Summit + AI_Dev China 2024
• Rust for filesystems — At the 2024 Linux Storage, Filesystem, Memory Management, and BPF Summit, Wedson Almeida Filho and Kent Overstreet led a combined storage and filesystem session on using Rust for Linux filesystems.
• Filesystem in Rust - Kent Overstreet and Wedson Almeida Filho
• Asahi Lina: "I think people really don't appreciate just how incomplete Linux kernel API docs are, and how Rust solves part of the problem."
• One Of The Rust Linux Kernel Maintainers Steps Down - Cites "Nontechnical Nonsense" — One of the several Rust for Linux kernel maintainers has decided to step away from the project. The move is being driven at least in part due to having to deal with increased "nontechnical nonsense" raised around Rust programming language use within the Linux kernel.
• [PATCH 0/1] Retiring from the Rust for Linux project - Wedson Almeida Filho
• On Rust, Linux, developers, maintainers — There's been a couple of mentions of Rust4Linux in the past week or two, one from Linus on the speed of engagement and one about Wedson departing the project due to non-technical concerns. This got me thinking about project phases and developer types.
• The revival of the Linux C++ discussion
• Membership Summer Discount — Take $1 a month of your membership for a lifetime!
• Thank you Core Contributors
• BrewHouse by the Lake – Amsterdam Brewery Shop
• BITCOIN WELL — The fastest and safest way to buy bitcoin in Canada
• The new JB server - KTZ systems — Join Alex, Chris, and Brent as we fly to Toronto to deploy our shiny new colo server in Canada. We'll be deploying the 45homelab HL15 server.
• Projectivy Launcher
• Aerial Views Screensaver
• OpenEBS — OpenEBS is a modern Block-Mode storage platform, a Hyper-Converged software Storage System and virtual NVMe-oF SAN (vSAN) Fabric that is natively integrates into the core of Kubernetes.
• oppy1984's Satoshi Survey
• Coder Radio 582
• Keybase Filesystem Storage Limits
• I Don't Care for Gnome
• DAVx5 — DAVx⁵ DAVx⁵ – CalDAV / CardDAV / WebDAV for Android
• Flock 2024 Universal Blue: Building the Future using Fedora Atomic
• Pick: Shotcut - New Version 24.08
• Install Shotcut on Flathub — Shotcut supports many video, audio, and image formats via FFmpeg and screen, webcam, and audio capture. It uses a time-line for non-linear video editing of multiple tracks that may be composed of various file formats. Scrubbing and transport control are assisted by OpenGL GPU-based processing and a number of video and audio filters are available.
• Bonus Pick: Butler — Access your Home Assistant dashboard from a native companion UI, integrating better with your OS.
• Butler on GitHub
• Rust for Linux revisited
• Redox OS — Redox is a Unix-like general-purpose microkernel-based operating system written in Rust, aiming to bring the innovations of Rust to a modern microkernel, a full set of programs and be a complete alternative to Linux and BSD.

Sponsored By:

• Core Contributor Membership: Take $1 a month of your membership for a lifetime! Promo Code: summer
• Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices!
• 1Password Extended Access Management: Secure every sign-in for every app on every device.

Support LINUX Unplugged

Links:

• 💥 Gets Sats Quick and Easy with Strike
• 📻 LINUX Unplugged on Fountain.FM
• Toronto Meetup — Thursday, Aug 29, 2024
• Berlin with Brent — September Meetup @ Nextcloud Conference, Saturday, Sep 14, 2024
• Check out Alex’s “Building a Colo Server” video
• Microsoft’s latest security update has ruined dual-boot Windows and Linux PCs — The cause: an update Microsoft issued as part of its monthly patch release. It was intended to close a 2-year-old vulnerability in GRUB, an open source boot loader used to start up many Linux devices.
• What the f*** is an SBAT and why does everyone suddenly care — This update was not supposed to apply to dual-boot systems, but did anyway.
• SBAT Revocations: Boot Process - Ubuntu Community Hub
• “Something has gone seriously wrong,” dual-boot systems warn after Microsoft update
• Ubuntu Will Be Skipping Non-Critical Linux Kernel Updates For September - Phoronix
• SRU Mailing List Annoucement
• Canonical Moves To Shipping Very Latest Upstream Kernel Code For Ubuntu Releases
• Kernel Version Selection for Ubuntu Releases - Kernel - Ubuntu Community Hub
• Linus Torvalds Begins Expressing Regrets Merging Bcachefs — The bcachefs patches have become these kinds of "lots of development during the release cycles rather than before it", to the point where I'm starting to regret merging bcachefs.
• Re: [GIT PULL] bcachefs fixes for 6.11-rc5 - Linus Torvalds — No one is being jerks here, Linus and I are just sitting in different places with different perspectives. He has a resonsibility as someone managing a huge project to enforce rules as he sees best, while I have a responsibility to support users with working code, and to do that to the best of my abilities.
• LINUX Unplugged 545: 3,062 Days Later — Kent Overstreet, the creator of bcachefs, helps us understand where his new filesystem fits, what it's like to upstream a new filesystem, and how they've solved the RAID write hole.
• Linux is a CNA — As was recently announced, the Linux kernel project has been accepted as a CNA as a CVE Numbering Authority (CNA) for vulnerabilities found in Linux.
• The Linux security team issues 60 CVEs a week, but don't stress. Do this instead
• What is a "good" Linux Kernel bug?
• Keynote: Linux Kernel Security Demystified - Greg Kroah-Hartman - YouTube
• Membership Summer Discount — Take $1 a month of your membership for a lifetime!
• added pihole nix module by Tdback · Pull Request #3 · JupiterBroadcasting/nixconfigs — Recently, I wanted to start 'nixifying' some of my docker-compose setup. I've created a simple module for spinning up a podman container running pihole as a systemd service, so that way I can just stick it on any NixOS machine and easily make it my DNS server.
• NetworkManager cli (nmci) wrapper to easily create a new network connection
• Distrohopper Wheel
• No idea where to distrohop next? Let the ultimate distrohopper decide for you!
• Proxmox Virtual Environment - NixOS Wiki
• Pick: SaunaFS is a distributed file system — A robust distributed POSIX file system meticulously designed to revolutionize your storage solutions by offering unmatched efficiency, security, and redundancy. At its core, SaunaFS is a distributed file system primarily written in C++, inspired by the pioneering concepts introduced by Google File System.
• Google File System - Wikipedia
• saunafs/INSTALL.md

Sponsored By:

• Core Contributor Membership: Take $1 a month of your membership for a lifetime! Promo Code: summer
• Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices!
• 1Password Extended Access Management: Secure every sign-in for every app on every device.

Support LINUX Unplugged

Links:

• 💥 Gets Sats Quick and Easy with Strike
• 📻 LINUX Unplugged on Fountain.FM
• Toronto Meetup — Thursday, Aug 29, 2024
• Berlin with Brent — September Meetup @ Nextcloud Conference, Saturday, Sep 14, 2024
• Check out Alex's "Building a Colo Server" video — Building a colo server for Jupiter Broadcasting using the 45Homelab HL15 server.
• Firewall - NixOS Wiki
• nftables wiki
• The netfilter.org "nftables" project
• Gentoo Nftables Examples
• networking/nftables: add .tables property and disable ruleset flushing by default by mkg20001
• Example nftables config
• Olympia Mike on "verified only Flatpaks" — I'm curious your take on a recent update that happened in Linux Mint, and the possible knock on effect of it.
• Incus is a next generation system container and virtual machine manager.
• Moving from Proxmox to Incus
• Membership Summer Discount — Take $1 a month of your membership for a lifetime!
• Referral Code eXchange
• auto-tab-discard
• tab-session-manager
• OneTab extension for Google Chrome and Firefox
• Tubular — A fork of NewPipe that implements SponsorBlock and ReturnYouTubeDislike.

Sponsored By:

• Core Contributor Membership: Take $1 a month of your membership for a lifetime! Promo Code: summer
• Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices!
• 1Password Extended Access Management: Secure every sign-in for every app on every device.

Support LINUX Unplugged

Links:

• 💥 Gets Sats Quick and Easy with Strike
• 📻 LINUX Unplugged on Fountain.FM
• Toronto Meetup — Thursday, August 29, 2024 from 6:00 PM to 8:00 PM EDT
• Sacramento LUG Meetup — Saturday September 7th, 2024 from 10:00 AM to 2:00 PM PDT
• Anker PowerConf S330 USB Speakerphone
• Corsair Void RGB Elite Wireless Premium Gaming Headset
• Loss of popular 2FA tool puts security-minded GrapheneOS in a paradox
• GrapheneOS on X — Google can either permit GrapheneOS in the Play Integrity API in the near future
• GrapheneOS on X — If Authy insists on using it, they should use the standard Android hardware attestation API to permit using GrapheneOS too. Banning 250k+ people with the most secure smartphones from using your app is anti-security, not pro-security.
• GrapheneOS on X — Authy simply delegated checking device integrity to Google. It's Google choosing to block GrapheneOS users from using Authy. Google chooses to allow using a device with no security patches for the past 8 years but bans using an OS much more secure than the stock Pixel OS.
• Twilio kills off Authy for desktop, forcibly logs out all users
• GrapheneOS on X — Our latest release with prevention for most VPN app DNS leaks is currently available in our Alpha and Beta channels. We need more feedback from testing VPN apps and services with leak blocking toggled on, which GrapheneOS already enables by default.
• GrapheneOS on X — Our current approach to DNS leak blocking appears to work well without breaking compatibility. We've made progress towards fixing a related issue for some VPN apps where rare connections are made to VPN DNS outside of the tunnel. We can hopefully ship stricter enforcement soon.
• GrapheneOS on X — We've become aware of another company selling devices with GrapheneOS while spreading harmful misinformation about it to promote insecure products. We're making our usual attempt at resolving things privately. However, we need to quickly address what has been claimed regardless.
• Membership Summer Discount — Take $1 a month of your membership for a lifetime!
• How You Guys Expect to Beat Me?
• Blue Iris Container
• netbird — Connect your devices into a secure WireGuard®-based overlay network with SSO, MFA and granular access controls.
• OpenZiti — Open Source Zero Trust Networking
• OpenZiti on GitHub
• Collapse OS — Bootstrap post-collapse technology
• Docker-OSX — Run macOS VM in a Docker! Run near native OSX-KVM in Docker! X11 Forwarding! CI/CD for OS X Security Research! Docker mac Containers.

Sponsored By:

• Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices!
• Linode Cloud Hosting: A special offer for all Linux Unplugged Podcast listeners and new Linode customers, visit linode.com/unplugged, and receive $100 towards your new account.
• 1Password Extended Access Management: Secure every sign-in for every app on every device.

Support LINUX Unplugged

Links:

• 🎉 Alby — Boost into the show, first grab Alby, top it off, and then head over to the Podcast Index.
• ⚡️ LINUX Unplugged on the Podcastindex.org — You can boost from the web. Once Alby is topped off, visit our page on the Podcast Index.
• Privacy friendly ESP32 smart doorbell with Home Assistant local integration — This project is aimed at being simple while allowing a ton of customisation and flexibility. To get started, you’ll need an instance of Home Assistant running with the ESPHome add-on as well as the Home Assistant companion app on your mobile phone to receive notifications when someone presses the doorbell button.
• Alex in Chicago, Aug 10, 2023 | Meetup
• The U.K. Government Is Dangerously Close to Eroding Encryption and Normalizing Mass Surveillance — "The U.K. government wants to grant itself the right to scan every message online for content related to child abuse or terrorism—and says it will still, somehow, magically, protect peoples’ privacy. That’s simply impossible. U.K. civil society groups have condemned the bill, as have technical experts and human rights groups around the world."
• U.K. civil society groups
• human rights groups around the world
• WhatsApp, Signal, and the UK-based Element
• Now Apple takes a bite out of encryption-bypassing 'spy clause' in UK internet law — "End-to-end encryption is a critical capability that protects the privacy of journalists, human rights activists, and diplomats," Apple argued in a statement to the media.
• Privacy | Electronic Frontier Foundation
• Snowflake ❄️ — Snowflake is a system that allows people from all over the world to access censored websites and applications. Similar to how VPNs assist users in getting around Internet censorship, Snowflake helps you avoid being noticed by Internet censors by making your Internet activity appear as though you're using the Internet for a regular video or voice call.
• Pi-hole – Network-wide Ad Blocking — Instead of browser plugins or other software on each computer, install Pi-hole in one place and your entire network is protected.
• AdGuard Home
• NextDNS - The new firewall for the modern Internet
• UnifiedPush — UnifiedPush is a set of specifications and tools that lets the user choose how push notifications* are delivered. All in a free and open source way.
• NextPush - Server App — UnifiedPush provider for Nextcloud - server application
• UnifiedPush: a decentralized, open-source push notification protocol
• Proton Drive — Proton Drive is an end-to-end encrypted Swiss vault for your files that protects your data.
• SimpleLogin — Open source anonymous email service
• Simple NixOS Mailserver
• Proton Calendar
• EteSync - Secure Data Sync — Secure, end-to-end encrypted, and privacy respecting sync for your contacts, calendars, tasks and notes.
• Nextcloud + DAVx5 — DAVx⁵ has been successfully tested with Nextcloud.
• Syncthing — Syncthing is a continuous file synchronization program. It synchronizes files between two or more computers in real time, safely protected from prying eyes. Your data is your data alone and you deserve to choose where it is stored, whether it is shared with some third party, and how it’s transmitted over the internet.
• Nextcloud - Online collaboration platform — Regain control over your data
• Send — Send lets you share files with end-to-end encryption and a link that automatically expires. So you can keep what you share private and make sure your stuff doesn’t stay online forever.
• nitter: Alternative Twitter front-end — A free and open source alternative Twitter front-end focused on privacy and performance. Inspired by the Invidious project.
• FreeTube — The Private YouTube Client
• NewPipe - a free YouTube client — NewPipe has been created with the purpose of getting the original YouTube experience on your smartphone without annoying ads and questionable permissions.
• yattee — Privacy-oriented video player for iOS, tvOS and macOS
• libredirect — A browser extension that redirects YouTube, Twitter, TikTok... requests to alternative privacy friendly frontends and backends.
• Aegis Authenticator - Secure 2FA app for Android — Aegis Authenticator is a free, secure and open source app for Android to manage your 2-step verification tokens for your online services.
• SimpleX Chat: private and secure messenger without any user IDs (not even random) — Other apps have user IDs: Signal, Matrix, Session, Briar, Jami, Cwtch, etc. SimpleX does not, not even random numbers. This radically improves your privacy.
• Element — A secure communications platform built around you.
• PrivacyGuides.org
• PrivacyTools.io
• Surveillance Self-Defense - EFF
• Funding Developers With Lightning
• Tailscale on GL.iNet Routers — Tailscale feature available since V4.2.
• Nix-on-Droid — Nix-on-Droid brings Nix package manager of NixOS fame to your mobile device.
• InvidTUI — InvidTUI is an invidious client, which fetches data from invidious instances and displays a user interface in the terminal, and allows for selecting and playing Youtube audio and video.