<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" encoding="UTF-8" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:sy="http://purl.org/rss/1.0/modules/syndication/" xmlns:admin="http://webns.net/mvcb/" xmlns:atom="http://www.w3.org/2005/Atom/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:googleplay="http://www.google.com/schemas/play-podcasts/1.0" xmlns:itunes="http://www.itunes.com/dtds/podcast-1.0.dtd" xmlns:fireside="http://fireside.fm/modules/rss/fireside">
  <channel>
    <fireside:hostname>web02.fireside.fm</fireside:hostname>
    <fireside:genDate>Tue, 14 Apr 2026 07:09:18 -0500</fireside:genDate>
    <generator>Fireside (https://fireside.fm)</generator>
    <title>LINUX Unplugged - Episodes Tagged with “Mitm”</title>
    <link>https://linuxunplugged.com/tags/mitm</link>
    <pubDate>Tue, 07 Apr 2020 19:00:00 -0700</pubDate>
    <description>An open show powered by community LINUX Unplugged takes the best attributes of open collaboration and turns it into a weekly show about Linux.
</description>
    <language>en-us</language>
    <itunes:type>episodic</itunes:type>
    <itunes:subtitle>Weekly Linux talk show with no script, no limits, surprise guests and tons of opinion.</itunes:subtitle>
    <itunes:author>Jupiter Broadcasting</itunes:author>
    <itunes:summary>An open show powered by community LINUX Unplugged takes the best attributes of open collaboration and turns it into a weekly show about Linux.
</itunes:summary>
    <itunes:image href="https://media24.fireside.fm/file/fireside-images-2024/podcasts/images/f/f31a453c-fa15-491f-8618-3f71f1d565e5/cover.jpg?v=3"/>
    <itunes:explicit>no</itunes:explicit>
    <itunes:owner>
      <itunes:name>Jupiter Broadcasting</itunes:name>
      <itunes:email>chris@jupiterbroadcasting.com</itunes:email>
    </itunes:owner>
<itunes:category text="Technology"/>
<itunes:category text="News">
  <itunes:category text="Tech News"/>
</itunes:category>
<item>
  <title>348: OK OOMer</title>
  <link>https://linuxunplugged.com/348</link>
  <guid isPermaLink="false">5649c0ba-ade7-468c-a135-99ccd41a0f36</guid>
  <pubDate>Tue, 07 Apr 2020 19:00:00 -0700</pubDate>
  <author>Jupiter Broadcasting</author>
  <enclosure url="https://aphid.fireside.fm/d/1437767933/f31a453c-fa15-491f-8618-3f71f1d565e5/5649c0ba-ade7-468c-a135-99ccd41a0f36.mp3" length="46033838" type="audio/mp3"/>
  <itunes:episodeType>full</itunes:episodeType>
  <itunes:author>Jupiter Broadcasting</itunes:author>
  <itunes:subtitle>Today we make nice with a killer, an early out-of-memory daemon, and one of the new features in Fedora 32. We put EarlyOOM to the test in a real-world workload and are shocked by the results.</itunes:subtitle>
  <itunes:duration>1:03:56</itunes:duration>
  <itunes:explicit>no</itunes:explicit>
  <itunes:image href="https://media24.fireside.fm/file/fireside-images-2024/podcasts/images/f/f31a453c-fa15-491f-8618-3f71f1d565e5/cover.jpg?v=3"/>
  <description>Today we make nice with a killer, an early out-of-memory daemon, and one of the new features in Fedora 32. We put EarlyOOM to the test in a real-world workload and are shocked by the results.
Plus we debate if OpenWrt is still the best router solution, and chew on Microsoft's new SELinux competitor. Special Guests: Alex Kretzschmar and Neal Gompa.
</description>
  <itunes:keywords>Microsoft, IPE, LSM, security, Integrity Policy Enforcement, OpenWrt, Opkg, MitM, Linux router, pfSense, OPNsense, Fedora, Fedora 32, EarlyOOM, oomd, Facebook, PSI, memory pressure, Nohang, low-memory-monitor, Nushell, timekpr-next, time tracking, shell, Linux, command line, performance, Linux Podcast, Unplugged, A Cloud Guru, Jupiter Broadcasting</itunes:keywords>
  <content:encoded>
    <![CDATA[<p>Today we make nice with a killer, an early out-of-memory daemon, and one of the new features in Fedora 32. We put EarlyOOM to the test in a real-world workload and are shocked by the results.</p>

<p>Plus we debate if OpenWrt is still the best router solution, and chew on Microsoft&#39;s new SELinux competitor.</p><p>Special Guests: Alex Kretzschmar and Neal Gompa.</p><p><a rel="payment" href="https://jupitersignal.memberful.com/checkout?plan=52946">Support LINUX Unplugged</a></p><p>Links:</p><ul><li><a title="Window Maker Version 0.95.9 Released" rel="nofollow" href="http://www.windowmaker.org/news/">Window Maker Version 0.95.9 Released</a></li><li><a title="Microsoft announces IPE, a new code integrity feature for Linux" rel="nofollow" href="https://www.zdnet.com/article/microsoft-announces-ipe-a-new-code-integrity-feature-for-linux/">Microsoft announces IPE, a new code integrity feature for Linux</a> &mdash; Microsoft says that IPE is not intended for general-purpose computing. The IPE LSM was designed for very specific use cases where security is paramount, and administrators need to be in full control of what runs on their systems. Examples include embedded systems, such as network firewall devices running in a data center, or Linux servers running strict and immutable configurations and applications.</li><li><a title="OpenWrt - Opkg susceptible to MITM" rel="nofollow" href="https://openwrt.org/advisory/2020-01-31-1">OpenWrt - Opkg susceptible to MITM</a></li><li><a title="Brent sits down with Daniel Foré, founder of elementary OS" rel="nofollow" href="https://extras.show/68">Brent sits down with Daniel Foré, founder of elementary OS</a></li><li><a title="Know when we&#39;re going to be live. Check out the calendar!" rel="nofollow" href="https://www.jupiterbroadcasting.com/release-calendar/">Know when we're going to be live. Check out the calendar!</a></li><li><a title="Keep the conversation going join us on Telegram" rel="nofollow" href="https://jupiterbroadcasting.com/telegram">Keep the conversation going join us on Telegram</a></li><li><a title="Fedora nightly compose finder" rel="nofollow" href="http://happyassassin.net/nightlies.html">Fedora nightly compose finder</a></li><li><a title="Fedora 32 Looking At Using EarlyOOM By Default To Better Deal With Low Memory Situations" rel="nofollow" href="https://www.phoronix.com/scan.php?page=news_item&amp;px=Fedora-32-Default-EarlyOOM">Fedora 32 Looking At Using EarlyOOM By Default To Better Deal With Low Memory Situations</a> &mdash; The oom-killer generally has a bad reputation among Linux users. This may be part of the reason Linux invokes it only when it has absolutely no other choice. It will swap out the desktop environment, drop the whole page cache and empty every buffer before it will ultimately kill a process. At least that's what I think that it will do. I have yet to be patient enough to wait for it, sitting in front of an unresponsive system.
</li><li><a title="earlyoom - Early OOM Daemon for Linux" rel="nofollow" href="https://github.com/rfjakob/earlyoom">earlyoom - Early OOM Daemon for Linux</a> &mdash; The oom-killer generally has a bad reputation among Linux users. This may be part of the reason Linux invokes it only when it has absolutely no other choice. It will swap out the desktop environment, drop the whole page cache and empty every buffer before it will ultimately kill a process. At least that's what I think that it will do. I have yet to be patient enough to wait for it, sitting in front of an unresponsive system.
</li><li><a title="rfjakob/systembus-notify: systembus-notify - system bus notification daemon" rel="nofollow" href="https://github.com/rfjakob/systembus-notify">rfjakob/systembus-notify: systembus-notify - system bus notification daemon</a></li><li><a title="oomd" rel="nofollow" href="https://github.com/facebookincubator/oomd">oomd</a> &mdash; Out of memory killing has historically happened inside kernel space. On a memory overcommitted linux system, malloc(2) and friends usually never fail. However, if an application dereferences the returned pointer and the system has run out of physical memory, the linux kernel is forced to take extreme measures, up to and including killing processes. This is sometimes a slow and painful process because the kernel can spend an unbounded amount of time swapping in and out pages and evicting the page cache. Furthermore, configuring policy is not very flexible while being somewhat complicated.</li><li><a title="low-memory-monitor on GitLab" rel="nofollow" href="https://gitlab.freedesktop.org/hadess/low-memory-monitor/">low-memory-monitor on GitLab</a></li><li><a title="low-memory-monitor" rel="nofollow" href="http://www.hadess.net/2019/08/low-memory-monitor-new-project.html">low-memory-monitor</a> &mdash; low-memory-monitor, as its name implies, monitors the amount of free physical memory on the system and will shoot off signals to interested user-space applications, usually session managers, or sandboxing helpers, when that memory runs low, making it possible for applications to shrink their memory footprints before it's too late either to recover a usable system, or avoid taking a performance hit.
</li><li><a title="Nohang" rel="nofollow" href="https://github.com/hakavlad/nohang">Nohang</a> &mdash; Nohang is a highly configurable daemon for Linux which is able to correctly prevent out of memory (OOM) and keep system responsiveness in low memory conditions.

</li><li><a title="Better interactivity in low-memory situations - devel - Fedora Mailing-Lists" rel="nofollow" href="https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/XUZLHJ5O32OX24LG44R7UZ2TMN6NY47N/#XUZLHJ5O32OX24LG44R7UZ2TMN6NY47N">Better interactivity in low-memory situations - devel - Fedora Mailing-Lists</a></li><li><a title="EnableEarlyoom - Fedora Project Wiki" rel="nofollow" href="https://fedoraproject.org/wiki/Changes/EnableEarlyoom#Enable_EarlyOOM">EnableEarlyoom - Fedora Project Wiki</a></li><li><a title="Nushell - The Unix philosophy of shells, where pipes connect simple commands together, and bring it to the modern style of development." rel="nofollow" href="https://www.nushell.sh/">Nushell - The Unix philosophy of shells, where pipes connect simple commands together, and bring it to the modern style of development.</a></li><li><a title="Timekpr - simple and easy to use time managing software that helps optimizing time spent at computer." rel="nofollow" href="https://launchpad.net/timekpr-next">Timekpr - simple and easy to use time managing software that helps optimizing time spent at computer.</a></li></ul>]]>
  </content:encoded>
  <itunes:summary>
    <![CDATA[<p>Today we make nice with a killer, an early out-of-memory daemon, and one of the new features in Fedora 32. We put EarlyOOM to the test in a real-world workload and are shocked by the results.</p>

<p>Plus we debate if OpenWrt is still the best router solution, and chew on Microsoft&#39;s new SELinux competitor.</p><p>Special Guests: Alex Kretzschmar and Neal Gompa.</p><p><a rel="payment" href="https://jupitersignal.memberful.com/checkout?plan=52946">Support LINUX Unplugged</a></p><p>Links:</p><ul><li><a title="Window Maker Version 0.95.9 Released" rel="nofollow" href="http://www.windowmaker.org/news/">Window Maker Version 0.95.9 Released</a></li><li><a title="Microsoft announces IPE, a new code integrity feature for Linux" rel="nofollow" href="https://www.zdnet.com/article/microsoft-announces-ipe-a-new-code-integrity-feature-for-linux/">Microsoft announces IPE, a new code integrity feature for Linux</a> &mdash; Microsoft says that IPE is not intended for general-purpose computing. The IPE LSM was designed for very specific use cases where security is paramount, and administrators need to be in full control of what runs on their systems. Examples include embedded systems, such as network firewall devices running in a data center, or Linux servers running strict and immutable configurations and applications.</li><li><a title="OpenWrt - Opkg susceptible to MITM" rel="nofollow" href="https://openwrt.org/advisory/2020-01-31-1">OpenWrt - Opkg susceptible to MITM</a></li><li><a title="Brent sits down with Daniel Foré, founder of elementary OS" rel="nofollow" href="https://extras.show/68">Brent sits down with Daniel Foré, founder of elementary OS</a></li><li><a title="Know when we&#39;re going to be live. Check out the calendar!" rel="nofollow" href="https://www.jupiterbroadcasting.com/release-calendar/">Know when we're going to be live. Check out the calendar!</a></li><li><a title="Keep the conversation going join us on Telegram" rel="nofollow" href="https://jupiterbroadcasting.com/telegram">Keep the conversation going join us on Telegram</a></li><li><a title="Fedora nightly compose finder" rel="nofollow" href="http://happyassassin.net/nightlies.html">Fedora nightly compose finder</a></li><li><a title="Fedora 32 Looking At Using EarlyOOM By Default To Better Deal With Low Memory Situations" rel="nofollow" href="https://www.phoronix.com/scan.php?page=news_item&amp;px=Fedora-32-Default-EarlyOOM">Fedora 32 Looking At Using EarlyOOM By Default To Better Deal With Low Memory Situations</a> &mdash; The oom-killer generally has a bad reputation among Linux users. This may be part of the reason Linux invokes it only when it has absolutely no other choice. It will swap out the desktop environment, drop the whole page cache and empty every buffer before it will ultimately kill a process. At least that's what I think that it will do. I have yet to be patient enough to wait for it, sitting in front of an unresponsive system.
</li><li><a title="earlyoom - Early OOM Daemon for Linux" rel="nofollow" href="https://github.com/rfjakob/earlyoom">earlyoom - Early OOM Daemon for Linux</a> &mdash; The oom-killer generally has a bad reputation among Linux users. This may be part of the reason Linux invokes it only when it has absolutely no other choice. It will swap out the desktop environment, drop the whole page cache and empty every buffer before it will ultimately kill a process. At least that's what I think that it will do. I have yet to be patient enough to wait for it, sitting in front of an unresponsive system.
</li><li><a title="rfjakob/systembus-notify: systembus-notify - system bus notification daemon" rel="nofollow" href="https://github.com/rfjakob/systembus-notify">rfjakob/systembus-notify: systembus-notify - system bus notification daemon</a></li><li><a title="oomd" rel="nofollow" href="https://github.com/facebookincubator/oomd">oomd</a> &mdash; Out of memory killing has historically happened inside kernel space. On a memory overcommitted linux system, malloc(2) and friends usually never fail. However, if an application dereferences the returned pointer and the system has run out of physical memory, the linux kernel is forced to take extreme measures, up to and including killing processes. This is sometimes a slow and painful process because the kernel can spend an unbounded amount of time swapping in and out pages and evicting the page cache. Furthermore, configuring policy is not very flexible while being somewhat complicated.</li><li><a title="low-memory-monitor on GitLab" rel="nofollow" href="https://gitlab.freedesktop.org/hadess/low-memory-monitor/">low-memory-monitor on GitLab</a></li><li><a title="low-memory-monitor" rel="nofollow" href="http://www.hadess.net/2019/08/low-memory-monitor-new-project.html">low-memory-monitor</a> &mdash; low-memory-monitor, as its name implies, monitors the amount of free physical memory on the system and will shoot off signals to interested user-space applications, usually session managers, or sandboxing helpers, when that memory runs low, making it possible for applications to shrink their memory footprints before it's too late either to recover a usable system, or avoid taking a performance hit.
</li><li><a title="Nohang" rel="nofollow" href="https://github.com/hakavlad/nohang">Nohang</a> &mdash; Nohang is a highly configurable daemon for Linux which is able to correctly prevent out of memory (OOM) and keep system responsiveness in low memory conditions.

</li><li><a title="Better interactivity in low-memory situations - devel - Fedora Mailing-Lists" rel="nofollow" href="https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/XUZLHJ5O32OX24LG44R7UZ2TMN6NY47N/#XUZLHJ5O32OX24LG44R7UZ2TMN6NY47N">Better interactivity in low-memory situations - devel - Fedora Mailing-Lists</a></li><li><a title="EnableEarlyoom - Fedora Project Wiki" rel="nofollow" href="https://fedoraproject.org/wiki/Changes/EnableEarlyoom#Enable_EarlyOOM">EnableEarlyoom - Fedora Project Wiki</a></li><li><a title="Nushell - The Unix philosophy of shells, where pipes connect simple commands together, and bring it to the modern style of development." rel="nofollow" href="https://www.nushell.sh/">Nushell - The Unix philosophy of shells, where pipes connect simple commands together, and bring it to the modern style of development.</a></li><li><a title="Timekpr - simple and easy to use time managing software that helps optimizing time spent at computer." rel="nofollow" href="https://launchpad.net/timekpr-next">Timekpr - simple and easy to use time managing software that helps optimizing time spent at computer.</a></li></ul>]]>
  </itunes:summary>
</item>
<item>
  <title>285: Pain the APT</title>
  <link>https://linuxunplugged.com/285</link>
  <guid isPermaLink="false">b37be25b-89fa-40f9-a64c-41fbf767131c</guid>
  <pubDate>Tue, 22 Jan 2019 19:45:00 -0800</pubDate>
  <author>Jupiter Broadcasting</author>
  <enclosure url="https://aphid.fireside.fm/d/1437767933/f31a453c-fa15-491f-8618-3f71f1d565e5/b37be25b-89fa-40f9-a64c-41fbf767131c.mp3" length="67291416" type="audio/mpeg"/>
  <itunes:episodeType>full</itunes:episodeType>
  <itunes:author>Jupiter Broadcasting</itunes:author>
  <itunes:subtitle>An embarrassing vulnerability has been found in the apt package manager, we’ll break it all down. Plus Alessandro Castellani tells us about his plans to build a professional design tool for Linux.</itunes:subtitle>
  <itunes:duration>1:19:51</itunes:duration>
  <itunes:explicit>yes</itunes:explicit>
  <itunes:image href="https://media24.fireside.fm/file/fireside-images-2024/podcasts/images/f/f31a453c-fa15-491f-8618-3f71f1d565e5/cover.jpg?v=3"/>
  <description>An embarrassing vulnerability has been found in the apt package manager, we’ll break it all down. Plus Alessandro Castellani tells us about his plans to build a professional design tool for Linux.
We also have a batch of big community news, and the case for the cloud killing Open Source. Special Guests: Alessandro Castellani and Brent Gervais.
</description>
  <itunes:keywords>OGGCAMP, Apt, apt-get, RCE, security, mitm, man in the middle, GPG, https, eBGP, io, ssd, scheduler, linux, kernel, circonus, metrics, benchmarks, Windows, Windows 10, Windows Core, Powershell, Azure Sphere, Multipass, Ubuntu, Canonical, Akira, UX, UI, Design, Elementary, Vala, GTK, Native apps, sketch, Taxi, sequeler, SCALE, LFNW, Texas Linux Fest, MongoDB, DocumentDB, Open Source Business Models, Redis, Kafka, AWS, Azure, Freemium, Linux Podcast, Unplugged, Jupiter Broadcasting</itunes:keywords>
  <content:encoded>
    <![CDATA[<p>An embarrassing vulnerability has been found in the apt package manager, we’ll break it all down. Plus Alessandro Castellani tells us about his plans to build a professional design tool for Linux.</p>

<p>We also have a batch of big community news, and the case for the cloud killing Open Source.</p><p>Special Guests: Alessandro Castellani and Brent Gervais.</p><p><a rel="payment" href="https://jupitersignal.memberful.com/checkout?plan=52946">Support LINUX Unplugged</a></p><p>Links:</p><ul><li><a title="OggCamp 19" rel="nofollow" href="https://oggcamp.org/">OggCamp 19</a> &mdash; OggCamp is an unconference celebrating Free Culture, Free and Open Source Software, hardware hacking, digital rights, and all manner of collaborative cultural activities.</li><li><a title="OggCamp on Twitter" rel="nofollow" href="https://twitter.com/oggcamp">OggCamp on Twitter</a></li><li><a title="Remote Code Execution in apt-get" rel="nofollow" href="https://justi.cz/security/2019/01/22/apt-rce.html">Remote Code Execution in apt-get</a> &mdash; A vulnerability in apt allows a network man-in-the-middle (or a malicious package mirror) to execute arbitrary code as root on a machine installing any package. The bug has been fixed in the latest versions of apt.</li><li><a title="Why does APT not use HTTPS?" rel="nofollow" href="https://whydoesaptnotusehttps.com/">Why does APT not use HTTPS?</a></li><li><a title="Turkish ISP Swapped Downloads of Popular Software with Spyware-Infected Apps" rel="nofollow" href="https://www.bleepingcomputer.com/news/security/turkish-isp-swapped-downloads-of-popular-software-with-spyware-infected-apps/">Turkish ISP Swapped Downloads of Popular Software with Spyware-Infected Apps</a></li><li><a title="Which block I/O scheduler is the best? We asked eBPF." rel="nofollow" href="https://www.circonus.com/2019/01/which-block-i-o-scheduler-is-the-best-we-asked-ebpf/">Which block I/O scheduler is the best? We asked eBPF.</a> &mdash; I set out expecting to see differing distributions of latencies for each block scheduler, but ultimately found that I didn’t understand low-level systems behavior to the degree I thought I did.</li><li><a title="Want to spin up Ubuntu VMs from Windows 10&#39;s command line, eh? We&#39;ll need to see a Multipass." rel="nofollow" href="https://www.theregister.co.uk/2019/01/22/multipass/">Want to spin up Ubuntu VMs from Windows 10's command line, eh? We'll need to see a Multipass.</a> &mdash; Windows 10 developers have been gifted yet another way of running Linux on their desktop in the form of Canonical's Multipass.

</li><li><a title="Microsoft Employee Hints at Windows Core OS Open Source Components" rel="nofollow" href="https://www.tomshardware.com/news/microsoft-employee-leaks-windows-core-open-source-components,38476.html">Microsoft Employee Hints at Windows Core OS Open Source Components</a></li><li><a title="TechSNAP Episode 395: The ACME Era" rel="nofollow" href="https://techsnap.systems/395">TechSNAP Episode 395: The ACME Era</a></li><li><a title="LinuxFest Northwest 20th Anniversary" rel="nofollow" href="https://linuxfestnorthwest.org/conferences/2019">LinuxFest Northwest 20th Anniversary</a></li><li><a title="LFNW Telegram Group" rel="nofollow" href="https://t.me/linuxfest2019">LFNW Telegram Group</a></li><li><a title="LinuxFest Northwest Parking Lot BBQ Meetup" rel="nofollow" href="https://www.meetup.com/jupiterbroadcasting/events/258303320/">LinuxFest Northwest Parking Lot BBQ Meetup</a></li><li><a title="SCALE 17x" rel="nofollow" href="https://www.socallinuxexpo.org/scale/17x">SCALE 17x</a></li><li><a title="SCALE Telegram Group" rel="nofollow" href="https://t.me/joinchat/DgyWhBZyAm7Q18a2NBkElw">SCALE Telegram Group</a></li><li><a title="Texas Linux Fest 2019" rel="nofollow" href="https://2019.texaslinuxfest.org/">Texas Linux Fest 2019</a></li><li><a title="Public Speaking: A repository of resources about public speaking, specifically in the context of software development and IT conferences." rel="nofollow" href="https://github.com/vmbrasseur/Public_Speaking#proposing-talks">Public Speaking: A repository of resources about public speaking, specifically in the context of software development and IT conferences.</a></li><li><a title="Linux Operating System Fundamentals" rel="nofollow" href="https://linuxacademy.com/linux/training/course/name/linux-operating-system-fundamentals">Linux Operating System Fundamentals</a> &mdash; Have you heard of Linux, but don't really know anything about it? Are you a non-technical person just wanting to know what this 'Linux' thing is? Then this course is for you.</li><li><a title="Akira: Native Linux App for UI and UX Design" rel="nofollow" href="https://github.com/Alecaddd/Akira">Akira: Native Linux App for UI and UX Design</a></li><li><a title="Akira on Kickstarter" rel="nofollow" href="https://www.kickstarter.com/projects/alecaddd/akira-the-linux-design-tool/?ref=kicktraq">Akira on Kickstarter</a></li><li><a title="Exponent episode 159 — Inverted Pyramids" rel="nofollow" href="https://exponent.fm/episode-159-inverted-pyramids/">Exponent episode 159 — Inverted Pyramids</a></li><li><a title="Late Night Linux – Episode 55" rel="nofollow" href="https://latenightlinux.com/late-night-linux-episode-55/">Late Night Linux – Episode 55</a> &mdash; Are you better off with the elasticity of public clouds like AWS, or should you avoid lock-in by running servers on premises?</li><li><a title="AWS, MongoDB, and the Economic Realities of Open Source" rel="nofollow" href="https://stratechery.com/2019/aws-mongodb-and-the-economic-realities-of-open-source/">AWS, MongoDB, and the Economic Realities of Open Source</a></li><li><a title="Open source confronts its midlife crisis" rel="nofollow" href="http://dtrace.org/blogs/bmc/2018/12/14/open-source-confronts-its-midlife-crisis/">Open source confronts its midlife crisis</a></li></ul>]]>
  </content:encoded>
  <itunes:summary>
    <![CDATA[<p>An embarrassing vulnerability has been found in the apt package manager, we’ll break it all down. Plus Alessandro Castellani tells us about his plans to build a professional design tool for Linux.</p>

<p>We also have a batch of big community news, and the case for the cloud killing Open Source.</p><p>Special Guests: Alessandro Castellani and Brent Gervais.</p><p><a rel="payment" href="https://jupitersignal.memberful.com/checkout?plan=52946">Support LINUX Unplugged</a></p><p>Links:</p><ul><li><a title="OggCamp 19" rel="nofollow" href="https://oggcamp.org/">OggCamp 19</a> &mdash; OggCamp is an unconference celebrating Free Culture, Free and Open Source Software, hardware hacking, digital rights, and all manner of collaborative cultural activities.</li><li><a title="OggCamp on Twitter" rel="nofollow" href="https://twitter.com/oggcamp">OggCamp on Twitter</a></li><li><a title="Remote Code Execution in apt-get" rel="nofollow" href="https://justi.cz/security/2019/01/22/apt-rce.html">Remote Code Execution in apt-get</a> &mdash; A vulnerability in apt allows a network man-in-the-middle (or a malicious package mirror) to execute arbitrary code as root on a machine installing any package. The bug has been fixed in the latest versions of apt.</li><li><a title="Why does APT not use HTTPS?" rel="nofollow" href="https://whydoesaptnotusehttps.com/">Why does APT not use HTTPS?</a></li><li><a title="Turkish ISP Swapped Downloads of Popular Software with Spyware-Infected Apps" rel="nofollow" href="https://www.bleepingcomputer.com/news/security/turkish-isp-swapped-downloads-of-popular-software-with-spyware-infected-apps/">Turkish ISP Swapped Downloads of Popular Software with Spyware-Infected Apps</a></li><li><a title="Which block I/O scheduler is the best? We asked eBPF." rel="nofollow" href="https://www.circonus.com/2019/01/which-block-i-o-scheduler-is-the-best-we-asked-ebpf/">Which block I/O scheduler is the best? We asked eBPF.</a> &mdash; I set out expecting to see differing distributions of latencies for each block scheduler, but ultimately found that I didn’t understand low-level systems behavior to the degree I thought I did.</li><li><a title="Want to spin up Ubuntu VMs from Windows 10&#39;s command line, eh? We&#39;ll need to see a Multipass." rel="nofollow" href="https://www.theregister.co.uk/2019/01/22/multipass/">Want to spin up Ubuntu VMs from Windows 10's command line, eh? We'll need to see a Multipass.</a> &mdash; Windows 10 developers have been gifted yet another way of running Linux on their desktop in the form of Canonical's Multipass.

</li><li><a title="Microsoft Employee Hints at Windows Core OS Open Source Components" rel="nofollow" href="https://www.tomshardware.com/news/microsoft-employee-leaks-windows-core-open-source-components,38476.html">Microsoft Employee Hints at Windows Core OS Open Source Components</a></li><li><a title="TechSNAP Episode 395: The ACME Era" rel="nofollow" href="https://techsnap.systems/395">TechSNAP Episode 395: The ACME Era</a></li><li><a title="LinuxFest Northwest 20th Anniversary" rel="nofollow" href="https://linuxfestnorthwest.org/conferences/2019">LinuxFest Northwest 20th Anniversary</a></li><li><a title="LFNW Telegram Group" rel="nofollow" href="https://t.me/linuxfest2019">LFNW Telegram Group</a></li><li><a title="LinuxFest Northwest Parking Lot BBQ Meetup" rel="nofollow" href="https://www.meetup.com/jupiterbroadcasting/events/258303320/">LinuxFest Northwest Parking Lot BBQ Meetup</a></li><li><a title="SCALE 17x" rel="nofollow" href="https://www.socallinuxexpo.org/scale/17x">SCALE 17x</a></li><li><a title="SCALE Telegram Group" rel="nofollow" href="https://t.me/joinchat/DgyWhBZyAm7Q18a2NBkElw">SCALE Telegram Group</a></li><li><a title="Texas Linux Fest 2019" rel="nofollow" href="https://2019.texaslinuxfest.org/">Texas Linux Fest 2019</a></li><li><a title="Public Speaking: A repository of resources about public speaking, specifically in the context of software development and IT conferences." rel="nofollow" href="https://github.com/vmbrasseur/Public_Speaking#proposing-talks">Public Speaking: A repository of resources about public speaking, specifically in the context of software development and IT conferences.</a></li><li><a title="Linux Operating System Fundamentals" rel="nofollow" href="https://linuxacademy.com/linux/training/course/name/linux-operating-system-fundamentals">Linux Operating System Fundamentals</a> &mdash; Have you heard of Linux, but don't really know anything about it? Are you a non-technical person just wanting to know what this 'Linux' thing is? Then this course is for you.</li><li><a title="Akira: Native Linux App for UI and UX Design" rel="nofollow" href="https://github.com/Alecaddd/Akira">Akira: Native Linux App for UI and UX Design</a></li><li><a title="Akira on Kickstarter" rel="nofollow" href="https://www.kickstarter.com/projects/alecaddd/akira-the-linux-design-tool/?ref=kicktraq">Akira on Kickstarter</a></li><li><a title="Exponent episode 159 — Inverted Pyramids" rel="nofollow" href="https://exponent.fm/episode-159-inverted-pyramids/">Exponent episode 159 — Inverted Pyramids</a></li><li><a title="Late Night Linux – Episode 55" rel="nofollow" href="https://latenightlinux.com/late-night-linux-episode-55/">Late Night Linux – Episode 55</a> &mdash; Are you better off with the elasticity of public clouds like AWS, or should you avoid lock-in by running servers on premises?</li><li><a title="AWS, MongoDB, and the Economic Realities of Open Source" rel="nofollow" href="https://stratechery.com/2019/aws-mongodb-and-the-economic-realities-of-open-source/">AWS, MongoDB, and the Economic Realities of Open Source</a></li><li><a title="Open source confronts its midlife crisis" rel="nofollow" href="http://dtrace.org/blogs/bmc/2018/12/14/open-source-confronts-its-midlife-crisis/">Open source confronts its midlife crisis</a></li></ul>]]>
  </itunes:summary>
</item>
  </channel>
</rss>
