Special Guest: Hannah Anderson.

Sponsored By:

• Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices!
• 1Password Extended Access Management: Secure every sign-in for every app on every device.
• River - Buy Bitcoin. Easy & Secure.: River is the most trusted place in the U.S. for individuals and businesses to buy, sell, send, and receive Bitcoin.

Support LINUX Unplugged

Links:

• Get started with River
• 💥 Gets Sats Quick and Easy with Strike
• 📻 LINUX Unplugged on Fountain.FM
• Planet Nix - Speakers
• SCALE 22x
• Greg Kroah-Hartman Makes A Compelling Case For New Linux Kernel Drivers To Be Written In Rust — Yes, mixed language codebases are rough, and hard to maintain, but we are kernel developers dammit, we've been maintaining and strengthening Linux for longer than anyone ever thought was going to be possible. We've turned our development model into a well-oiled engineering marvel creating something that no one else has ever been able to accomplish. Adding another language really shouldn't be a problem, we've handled much worse things in the past and we shouldn't give up now on wanting to ensure that our project succeeds for the next 20+ years. We've got to keep pushing forward when confronted with new good ideas, and embrace the people offering to join us in actually doing the work to help make sure that we all succeed together.
• Kees Cook on Rust in the kernel — In other words, I don't see any reason to focus on replacing existing code -- doing so would actually carry a lot of risk. But writing new stuff in Rust is very effective. Old code is more stable and has fewer bugs already, and yet, we're still going to continue the work of hardening C, because we still need to shake those bugs out. But new code can be written in Rust, and not have any of these classes of bugs at all from day one.
• Linus Re: Rust kernel policy — You are not forced to take any Rust code, or care about any Rust code in the DMA code. You can ignore it. But "ignore the Rust side" automatically also means that you don't have any say on the Rust side.
• Texas Linux Fest is back again in 2025!
• Pick: treetrum/amazon-kindle-bulk-downloader — Allows you to bulk download all your Kindle eBook in a more automated fashion. This tool allows you to create backup copies of the books you've already purchased.
• Amazon removes your right to download Kindle books
• Amazon will stop allowing Kindle book downloads to your PC soon
• How to Download Kindle Books to Your Computer Before Amazon Kills the Feature
• Simplest Way to Remove DRM from Books – No Kindle Serial Number Needed!
• Pick: nping — 🏎 Nping mean NB Ping, A Ping Tool in Rust with Real-Time Data and Visualizations

Sponsored By:

• Core Contributor Membership: Take $1 a month of your membership for a lifetime! Promo Code: summer
• Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices!
• 1Password Extended Access Management: Secure every sign-in for every app on every device.

Support LINUX Unplugged

Links:

• 💥 Gets Sats Quick and Easy with Strike
• 📻 LINUX Unplugged on Fountain.FM
• Toronto Meetup — Thursday, August 29, 2024 from 6:00 PM to 8:00 PM EDT
• Sacramento LUG Meetup — Saturday September 7th, 2024 from 10:00 AM to 2:00 PM PDT
• Anker PowerConf S330 USB Speakerphone
• Corsair Void RGB Elite Wireless Premium Gaming Headset
• Loss of popular 2FA tool puts security-minded GrapheneOS in a paradox
• GrapheneOS on X — Google can either permit GrapheneOS in the Play Integrity API in the near future
• GrapheneOS on X — If Authy insists on using it, they should use the standard Android hardware attestation API to permit using GrapheneOS too. Banning 250k+ people with the most secure smartphones from using your app is anti-security, not pro-security.
• GrapheneOS on X — Authy simply delegated checking device integrity to Google. It's Google choosing to block GrapheneOS users from using Authy. Google chooses to allow using a device with no security patches for the past 8 years but bans using an OS much more secure than the stock Pixel OS.
• Twilio kills off Authy for desktop, forcibly logs out all users
• GrapheneOS on X — Our latest release with prevention for most VPN app DNS leaks is currently available in our Alpha and Beta channels. We need more feedback from testing VPN apps and services with leak blocking toggled on, which GrapheneOS already enables by default.
• GrapheneOS on X — Our current approach to DNS leak blocking appears to work well without breaking compatibility. We've made progress towards fixing a related issue for some VPN apps where rare connections are made to VPN DNS outside of the tunnel. We can hopefully ship stricter enforcement soon.
• GrapheneOS on X — We've become aware of another company selling devices with GrapheneOS while spreading harmful misinformation about it to promote insecure products. We're making our usual attempt at resolving things privately. However, we need to quickly address what has been claimed regardless.
• Membership Summer Discount — Take $1 a month of your membership for a lifetime!
• How You Guys Expect to Beat Me?
• Blue Iris Container
• netbird — Connect your devices into a secure WireGuard®-based overlay network with SSO, MFA and granular access controls.
• OpenZiti — Open Source Zero Trust Networking
• OpenZiti on GitHub
• Collapse OS — Bootstrap post-collapse technology
• Docker-OSX — Run macOS VM in a Docker! Run near native OSX-KVM in Docker! X11 Forwarding! CI/CD for OS X Security Research! Docker mac Containers.

Sponsored By:

• Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices!
• 1Password Extended Access Management: Secure every sign-in for every app on every device.
• Core Contributor Membership: Take $1 a month of your membership for a lifetime! Promo Code: summer

Support LINUX Unplugged

Links:

• 💥 Gets Sats Quick and Easy with Strike
• 📻 LINUX Unplugged on Fountain.FM
• System76 tips Fedora Cosmic spin for 2025 release with Fedora 42 — It looks like System76's exciting new Rust-based Cosmic DE will get an official Fedora spin in the upcoming Fedora 42, potentially giving Linux users with bleeding-edge hardware an official way to try Cosmic.
• Pop!_OS Mattermost — An excellent place to engage if you want to bring COSMIC to a distro near you.
• iced — A cross-platform GUI library for Rust
• Smithay — A smithy for rusty wayland compositor
• Testing COSMIC — The easiest way to test COSMIC DE currently is by building a systemd system extension.
• Membership Summer Discount — Take $1 a month of your membership for a lifetime!
• Portal:Kalpa - openSUSE Wiki — openSUSE MicroOS Desktop Gnome was renamed to openSUSE Aeon, and the Plasma Desktop version is being renamed to openSUSE Kalpa.
• pop-os/kernelstub: A simple EFI boot manager manager for Linux
• Alpaca — GTK App to Chat with local AI models
• Alpaca on FlatHub

Special Guest: Tomasz Frątczak.

Sponsored By:

• Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices!
• 1Password Extended Access Management: Secure every sign-in for every app on every device.
• Core Contributor Membership: Take $1 a month of your membership for a lifetime! Promo Code: summer

Support LINUX Unplugged

Links:

• 💥 Gets Sats Quick and Easy with Strike
• 📻 LINUX Unplugged on Fountain.FM
• clevis — Clevis is a pluggable framework for automated decryption. It can be used to provide automated decryption of data or even automated unlocking of LUKS volumes.
• bcachefs Encryption
• What measured boot and trusted boot means for Linux
• Automatically decrypt your disk using TPM2 — Entering the passphrase to decrypt the disk at boot can become quite tedious. On modern systems a secure hardware chip called “TPM” (Trusted Platform Module) can store a secret and automatically decrypt your disk. This is an alternative factor, not a second factor. Keep that in mind.
• Use systemd-cryptenroll with FIDO U2F or TPM2 to decrypt your disk
• Automatic LUKS 2 disk decryption with TPM 2 on Fedora
• Safe automatic decryption of LUKS partition using TPM2 | 221b
• FOSDEM 2024: Clevis/Tang - unattended boot of an encrypted NixOS system
• Clevis & Tang on NixOS Slides
• Decrypt LUKS volumes with a TPM on Fedora Linux
• Self-Hosted 127: Can't Fix What You Don't Track
• Garmin Forerunner 265 — Forerunner 265 is a running smartwatch with a touchscreen AMOLED display, training metrics, phone-free music, & up to 13 days of battery life in smartwatch
• HRV Status
• Garmin Sleep Tracking
• Nap Detection
• Garmin Pay
• Tribit Stormbox Micro 2 Wireless Portable Speaker: 10W
• USB-C Charging Converter for Garmin Watch Without Charger Cable
• Obtainium — Obtainium allows you to install and update apps directly from their releases pages, and receive notifications when new releases are made available.
• Managing your personal access tokens
• Membership Summer Discount — Take $1 a month of your membership for a lifetime!
• Iotas — Iotas aims to provide distraction-free note taking with optional speedy sync with Nextcloud Notes.
• LINUX Unplugged 567: So Long sudo
• Celeste — GUI file synchronization client that can sync with any cloud provider
• vt52's Blog: Migrating from NixOS channels to Flakes
• FUTO Keyboard
• autossh
• LINUX Unplugged 570: RegreSSHion Strikes
• Aeon — The Linux Desktop for people who want to "get stuff done"
• Aeon: openSUSE for lazy developers
• Grayjay — Follow Creators Not Platforms
• Grayjay on GitLab
• CrowdSec
• Bustle — Bustle draws sequence diagrams of D-Bus activity. It shows signal emissions, method calls and their corresponding returns, with time stamps for each individual event and the duration of each method call. This can help you check for unwanted D-Bus traffic, and pinpoint why your D-Bus-based application is not performing as well as you like. It also provides statistics like signal frequencies and average method call times.
• open-and-shut — Type in Morse code by repeatedly slamming your laptop shut
• Zuck Comapres AI to Linux - Open Source AI Is the Path Forward — Today, Linux is the industry standard foundation for both cloud computing and the operating systems that run most mobile devices – and we all benefit from superior products because of it. I believe that AI will develop in a similar way.