Episode 512: Ask Noah Show 512

This week we talk about yet another CVE! A use-after-free vulnerability was found in the Linux kernel's IPv4 networking subsystem. A remote, unauthenticated attacker could exploit a race condition during TCP connection request processing to trigger remote code execution. -- During The Show -- 00:45 CVE 2026-98432 Unprecedented ability to find CVEs Last weeks CVE was difficult to exploit CVE Ratings This CVE is worst case "Use After Fee" via network stack Only need to send specially crafted IPv4 traffic Race condition Affects all Linux Kernels Conflicted on self hosting IPv6 publicly accessible Network Address Translation (NAT) Easy to self host beyond one's skill to trouble shoot Red Hat Ubuntu 13:40 Brave Being Sued Several publishers sue Brave Alleged that: Brave provided data to train AI, bypassing paywalls Journalism has to make some decisions Archive.ph Cost vs value Noah wouldn't pick this fight 22:34 News Wire Squid 7.8 - github.com Openshot 4.1 - openshot.org Enlightenment 0.28 - enlightenment.org Tor Browser 16.0 - torproject.org Thunderbird 159 - thunderbird.net Firefox 159 - firefox.com Open Source VDDK replacement - theregister.com Linux 7.2 EOL - kernel.org PorteuX 2.9 - porteus.org LinuxLite 8.2 - linuxliteos.com Ubuntu Core Desktop - itsfoss.com And the Kali linux team has announed its 2026.03 release Kali Linux 2026.03 - kali.org Nano Pro Gen15 Mini PC - techpowerup.com System76 AMD Machine - phoronix.com Linux TCP Flaw - thehackernews.com Government Linux Servers Targeted - thehackernews.com Replica AI - github.blog EMACS Turned 50 - technologyreview.com 24:24 Red Hat Interview Gunnar Hellekson - Vice President and General Manager RHEL AI vs OpenShift AI How does the community influence RHEL 2023 "flash point" and change in communication Open Source for America Government, Open Source, and AI Biggest barrier to more Open Source in Government Have you seen a move from "check boxes" in audits OpenSCAP Image Mode vs Package Mode Bootc system Guidance around image mode? Does image mode belong in home labs? Year of collaboration 48:18 Google TV Bot Net XCPE Botnet on Google TV devices 1.3 Million devices Google certified boxes got infected Malware was sneaky Devices were from an official Google partner Malware did all kinds of terrible Google is working with multiple governments to mitigate the bot net Devices are still infected LWN.net -- The Extra Credit Section -- For links to the articles and material referenced in this week's episode check out this week's page from our podcast dashboard! This Episode's Podcast Dashboard Phone Systems for Ask Noah provided by Voxtelesys Join us in our dedicated chatroom #GeekLab:linuxdelta.com on Matrix -- Stay In Touch -- Find all the resources for this show on the Ask Noah Dashboard Ask Noah Dashboard Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show! Altispeed Technologies Contact Noah live [at] asknoahshow.com -- Twitter -- Noah - Kernellinux Ask Noah Show Altispeed Technologies

This week we talk about PHP2Shell an AI uncovered critical RCE vulnerabilities affecting 70% of the Internet! -- During The Show -- 00:50 Intro Common names Getting other people's emails 02:15 Ubuntu Upgrade Experience - David LTS to LTS broke my system Upgrading machines Steve "runs Arch BTW" Fundamental shift in the KDE Plasma project BootC, Arch Linux, others Patching/update strategy 3 categories of computers Appliance Servers Multi use/client sites There is no "ideal" "Patch to Production" pipeline Home lab vs "tied to revenue" 16:26 Learning and Feedback - Anonymous Love the educational content Happy to share A dude who reads some stuff 18:50 News Wire Peazip 11.4 - github.io Firefox 158 - firefox.com Thunderbird 158 - thunderbird.net KDE Plasma - kde.org Libreboot 26.10 - libreboot.org JOREK Magneto-Hydro-Dynamic Simulation - iter.org Molecule Computational Tool - ohio.edu Ubuntu 26.10 - ubuntu.com Gnome OS Preview - gnome.org Tails 7.15 - torproject.org PwnEscape - thehackernews.com Klein Version of Flux3 - bfl.ai Moss-Image - openmoss.ai Deepseek V4.1 - huggingface.co IBM's llm-d 1.0 - research.ibm Microsoft Defender on Linux - theregister.com KDE turns 30 - kde.org youtube.com 20:15 3D Printing Steve has been using 3D printers for over a decade Why Creality 3D printers Snapmaker What features would you look for in a new printer Bigger bed Faster print speed Multi filament printing Enclosed print area Stronger plastics/off gassing Temperature is very dependant on specific filament not filament type Starting the print close to the bed Thingiverse Process of fixing Noah's watch measure with digital calipers make the model in parametric CAD Learning curve to CAD Learn from videos online Trying to improve the show, let us know Best way to start a kid printing download someone else's print learn from downloaded prints Overture filament Creality filament Blender Picking filament Bottom barrel price, bad, full of air bubbles Stick to similar brands Allowing a child to use a 3D printer 49:05 PHP2Shell Created lots of work for Noah and Altispeed This vulnerability was found in 2024 via a security audit, but humans couldn't reproduce Vast majority of places got fixes out quickly Yahoo.com Wikipedia

This week Matt Hicks CEO of Red Hat joins the program to talk about the people behind the mission critical infrastructure, and AI. -- During The Show -- 00:50 Intro The show requires feedback Best way call in 1-855-450-NOAH(6624) 02:20 Feedback - David Show notes should be available same day now 06:20 Distro Challenges - Randy Give Fedora a try Canonical and Snaps Arch GTK Pod Rockbox 19:50 News Wire Peazip 11.4 - github.io Firefox 158 - firefox.com Thunderbird 158 - thunderbird.net KDE Plasma - kde.org Libreboot 26.10 - libreboot.org JOREK Magneto-Hydro-Dynamic Simulation - iter.org Molecule Computational Tool - ohio.edu Ubuntu 26.10 - ubuntu.com Gnome OS Preview - gnome.org Tails 7.15 - torproject.org PwnEscape - thehackernews.com Klein Version of Flux3 - bfl.ai Moss-Image - openmoss.ai Deepseek V4.1 - huggingface.co IBM's llm-d 1.0 - research.ibm Microsoft Defender on Linux - theregister.com KDE turns 30 - kde.org youtube.com 21:15 Red Hat interview Matt Hicks People behind mission critical infrastructure Red Hat's "Any Cloud, Any AI" Journey of migrating platforms Red Hat and supporting AI on GPUs, the use case wins What keeps your passion for open source alive What does "Open Source AI" mean? How do Open Source models compare? Local AI Podman desktop Has Red Hat changed since you joined Doorbell project Effect of What have you left out of Red Hat AI? 47:17 3D Printing and Maker Creality Two approaches, "magic button" vs "learning the tool" Thingiverse Cults 3D Cura slicer Snap maker -- The Extra Credit Section -- For links to the articles and material referenced in this week's episode check out this week's page from our podcast dashboard! This Episode's Podcast Dashboard Phone Systems for Ask Noah provided by Voxtelesys Join us in our dedicated chatroom #GeekLab:linuxdelta.com on Matrix -- Stay In Touch -- Find all the resources for this show on the Ask Noah Dashboard Ask Noah Dashboard Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show! Altispeed Technologies Contact Noah live [at] asknoahshow.com -- Twitter -- Noah - Kernellinux Ask Noah Show Altispeed Technologies Special Guest: Matt Hicks.

This week we dig into the major story that a developer has created a clean room version of the Adobe Creative Cloud! We give some career advice to a long time teacher, and we talk about the effects of ai in software development. -- During The Show -- 00:50 Intro We want to be your Linux IT Guys If you want deeper dives write in! Please send your feed back and questions, or call in 04:04 Career - Lou "Grey beard techniques" Adapting skills to an interview College degrees Being able to answer questions knowledgeably Current and applicable certifications Ask about career academies Offer to teach IT courses 16:42 News Wire KDE Frameworks 6.31.0 - kde.org Python 3.15 - python.org Rust 1.99 - blog.rust-lang.org Snapd 2.78 - launchpad.net Docker 29.9 - docker.com Deno - deno.com Q4OS 6.10 - q4os.org Ubuntu on RISC-V - ubuntu.com QGIS AI Ban - github.com Kernel Devs Remove "Assisted By" Tag - phoronix.com Free AI Scanner - thehackernews.com Ubuntu Summit - ubuntu.com 17:55 AI Created Adobe Clones Artcraft Clean room design Decompiling code Covered all over, more than just "nerds" This project and developer has started something arstechnica.com 28:56 Effect of AI on Software Development Major thought points Why does AI not allow better software? Automated testing Non-critical vs critical software Maintainer ship over time Using AI and CI CD to continue a project Danger of AI being too enticing Managing AI Time boxing -- The Extra Credit Section -- For links to the articles and material referenced in this week's episode check out this week's page from our podcast dashboard! This Episode's Podcast Dashboard Phone Systems for Ask Noah provided by Voxtelesys Join us in our dedicated chatroom #GeekLab:linuxdelta.com on Matrix -- Stay In Touch -- Find all the resources for this show on the Ask Noah Dashboard Ask Noah Dashboard Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show! Altispeed Technologies Contact Noah live [at] asknoahshow.com -- Twitter -- Noah - Kernellinux Ask Noah Show Altispeed Technologies

This week Steve gives us a deep dive into performance tuning, and we talk about how your body's memory functions. -- During The Show -- 00:50 Intro Subsisting greeting variables Accessible memory Strength of memory Reading and writing builds "Accessible memory" Teaching builds "Strength of memory" Go look up "space repetition" Reader come home book YouTube if you check their sources 17:55 News Wire OpenSSL Security Update - github.com Git 2.56 - github.blog Thunderbird 157 - thunderbird.net Firefox 157 firefox.com - firefox.com Shotcut 26.9 - phoronix.com Tails 7.14 - torproject.org Parrot OS 7.4 - parrotsec.org OpenMandriva ROME 26.09 - openmandriva.org Nitrux 7.0 - opensourcefeed.org Antix 26.1 - antixlinux.com SMTP Backdoors - infosecurity-magazine.com COSMIC Desktop No Longer Accepts AI Content - reddit.com Beam AI - fortune.com Google Halts Open Source Bug Bounty Program - bleepingcomputer.com 19:15 Performance Tuning Defaults are someone guessing at a "safe option" Three hosts being tuned NAS (file server) vHost (virtual disks live here) Container Host When should you performance tune? Broadcasting Networks (ISPs) The more "dense" the more benefits TuneD ZFS "Adaptive Replacement Cache" (ARC) Default is 50% of RAM Swap file System doesn't empty on its own ARC stats Hits and misses Resets on reboot Memory pressure Swapyness 60 is the default the "cliff rate" Tuned to around 10%-30% on "performance profiles" System starts swapping before you hit zero RAM ZFS record size Record size is the "Maximum" not "Fixed size" Media Library 1M Postgres 16K ZFS write amplification (8k writes to 1M records hurt) AI study bot rules Man systemd.directives Write in and tell us if you want more! Extra Credit: What to search after the show ZFS ARC Tuning ZFS Record Size ZFS send receive preserves record size Record size is per "data set" not directory Record size only affects new writes "zfs_dirty_data_max" vs "vm.dirty_ratio" "QEMU "cache=none" O_DIRECT" Postgres on NFS PGDATA caveats "Tuned-adm virtual-host" hypervisor profile (The one nobody mentions) Tuned profile format "sysctl" vs "main" the plugin/argument split NFS mount options (the client side fix) "vmstat" reading swap columns correctly -- The Extra Credit Section -- For links to the articles and material referenced in this week's episode check out this week's page from our podcast dashboard! This Episode's Podcast Dashboard Phone Systems for Ask Noah provided by Voxtelesys Join us in our dedicated chatroom #GeekLab:linuxdelta.com on Matrix -- Stay In Touch -- Find all the resources for this show on the Ask Noah Dashboard Ask Noah Dashboard Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show! Altispeed Technologies Contact Noah live [at] asknoahshow.com -- Twitter -- Noah - Kernellinux Ask Noah Show Altispeed Technologies

This week Steve gives a brief overview into human factors that lead to distraction, Steve finally finds a use for KDE and we talk IP cameras and NVRs! -- During The Show -- 00:50 distractions Human minds work kinda like RAM Learning how to learn Computers are terrible for learning Short term memory slots Long term memory slots Noah's method Typing vs writing Always outliers Minimizing distractions Non-constructive hobbies 19:30 Steve's Use for KDE Nvidia Shield Plasma Big Screen Comes with everything Steve's customisation Early days Pro series Nvidia Shield Special "DRM Code" Vero V Waydroid Emulator vs Browser DRM 30:00 efivarfs full - John Screenshot EFI vars partition Proceed with caution 33:45 Frigate ONVIF compliant cameras Isoloate camera's from the internet POE ReoLink cameras Axis cameras Axis P3226 Cameras with SD cards OpenSurv ANS 483 ANS 474 - drive longevity, replacement strategies, and setup maintenance ANS 404 - Steve's personal adventures and configuration tips using Frigate ANS 402 - hardware demands of running Frigate, noting performance hurdles 46:50 News Wire Systemd 262 - phoronix.com GNU Cash 5.17 - gnucash.org Peazip 11.3 - github.io GNU wget 2.3 - gnu.org Gnome 50.5 - gnome.org Mir 2.30 - canonical.com Cosmic 1.9 - phoronix.com Gravity Linux - github.com File notification system vulnerability - techxplore.com New Spectre Vulnerability - thehackernews.com 10 Second Kernel Compile Times - tomshardware.com Dutch Government Linux - trendingtopics.eu The GNU project has turned 43. 48:28 Chrome Web Browser Chrome caused KDE Plasma to crash Culprit is Chrome 154.0.8037.57 Symptom is screen locker malfunctions -- The Extra Credit Section -- For links to the articles and material referenced in this week's episode check out this week's page from our podcast dashboard! This Episode's Podcast Dashboard Phone Systems for Ask Noah provided by Voxtelesys Join us in our dedicated chatroom #GeekLab:linuxdelta.com on Matrix -- Stay In Touch -- Find all the resources for this show on the Ask Noah Dashboard Ask Noah Dashboard Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show! Altispeed Technologies Contact Noah live [at] asknoahshow.com -- Twitter -- Noah - Kernellinux Ask Noah Show Altispeed Technologies

This week Mike McGrath Vice President, Core Platforms for Red Hat joins us to give us the deep dive on Lightwell! -- During The Show -- 00:50 Intro Iron sharpens Iron Feedback 01:50 Show Feedback - Joshua Talking fast at the end of the show Inserting tutorial style content 04:05 Lightwell Interview Mike McGrath - Vice President, Core Platforms What is Red Hat Lightwell Where Lightwell came from Illustration scenario Using AI but interfacing "Human to Human" Two tiers of Lightwell Lightwell "Network" repo Lightwell "Remediated" repo Lightwell "Undisclosed" repo How it works Does Lightwell address compliance requirements? Remediation What does using Lightwell look like? Software Bill of Materials Clearing house with SLA Details really matter Package versioning Scanner false positives based on versioning OSV.dev, Vulnerability Exploitability eXchange (VEX) data Open Source packages, scanning and remediation How often does upstream reject patches? Has Lightwell opened doors? Any notable success stories? What does Lightwell's roadmap look like? Where is Lightwell appropriate? What metrics and KPIs should IT leaders look for? Walk me through a typical developer workflow Cost benefit analysis How does Lightwell integrate with existing Red Hat products? Previously on ANS 343, ANS 416, ANS 443, ANS 494 43:55 News Wire GNU Core Utils 9.12 - phoronix.com Calibre 9.15 - https://calibre-ebook.com/whats-new Thunderbird 156 - thunderbird.net Firefox 156 - firefox.com Gnome 51 - gnome.org Q4OS 6.9 - q4os.org Garuda Nix - garudalinux.org MXLinus 25.3 - mxlinux.org Ovirt-engine on Oracle Linux - oracle.com Qwen Image 2.1 - qwen.ai US District Court AI Ruling - devops.com 45:10 Microsoft Ports Co-pilot with Ai $120,000 in AI tokens spent to port 800,000 lines of code 5,300 human hours to review 16x faster based on benchmarks Reaction of an actual developer Can't put toothpaste back in the tube Effect of Microsoft doing this The Register -- The Extra Credit Section -- For links to the articles and material referenced in this week's episode check out this week's page from our podcast dashboard! This Episode's Podcast Dashboard Phone Systems for Ask Noah provided by Voxtelesys Join us in our dedicated chatroom #GeekLab:linuxdelta.com on Matrix -- Stay In Touch -- Find all the resources for this show on the Ask Noah Dashboard Ask Noah Dashboard Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show! Altispeed Technologies Contact Noah live [at] asknoahshow.com -- Twitter -- Noah - Kernellinux Ask Noah Show Altispeed Technologies Special Guest: Mike McGrath.

This week Steve gives the deep dive into the reason and the how for documentation. It's an essential thing in any IT environment, it doesn't get nearly enough love so we shine a spotlight on it. -- During The Show -- 00:45 Intro Sound effects RPG Web UI Never Winter Nights Kansas City Steve and traveling 09:18 News Wire GTK 4.24 - gnome.org Shotwell 33 - gnome.org Agama Installer 24 - github.io Cosmic v1.8 https://www.phoronix.com/news/COSMIC-Epoch-1.8 Debian 13.7 Trixie - debian.org MocaccinoOS 26.09 - mocaccino.org DietPi 10.7 - dietpi.com KaOS 2026.09 - kaosx.us Ubuntu 24.04.5 - phoronix.com Sandbox Challenge - securityweek.com Lunar Exploration Model - ibm.com CUDA-Q Expands - nvidia.com 10:30 Documentation Document "why" something was done Assumption and argument What needs to be documented Reproducer - Blow it away and set it up again Document everything Why do people resist documenting Executive vs Technical Summaries Tribal knowledge Styles of documentation White papers CMA What should you NOT document Process of documenting Where do you document Wiki.js Markdown Steve's container documentation Steve's GitHub Steve's Red Hat profile Hackaday -- The Extra Credit Section -- For links to the articles and material referenced in this week's episode check out this week's page from our podcast dashboard! This Episode's Podcast Dashboard Phone Systems for Ask Noah provided by Voxtelesys Join us in our dedicated chatroom #GeekLab:linuxdelta.com on Matrix -- Stay In Touch -- Find all the resources for this show on the Ask Noah Dashboard Ask Noah Dashboard Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show! Altispeed Technologies Contact Noah live [at] asknoahshow.com -- Twitter -- Noah - Kernellinux Ask Noah Show Altispeed Technologies

This week Noah and Steve get into a fireside chat about Ai. Where is it okay to turn it loose, and where do some guardrails need to be in place? -- During The Show -- 00:50 Intro Butterfly Effect movie Open AI models and weights Effect of trying to squeeze out open source 04:48 Cyclical computing - David The new topology Normal people vs home lab Long way to go Hardware costs Restricting doesn't work AI and responsibility 20:50 News Wire Audacity 4.0 - audacityteam.org Firefox 155 - firefox.com Thunderbird 155 - thunderbird.net Mir 2.29 - canonical.com Curl 8.22 - daniel.haxx.se Docker 29.8 - docs.docker.com OpenVPN 2.7.7 - openvpn.net Linux 7.1 EOL - endoflife.date Tails 7.12 - torproject.org Open Source Camera - petapixel.com Vulcan Robotics - banyanhill.com Automotive and Media Targeted - securityweek.com Abu Dhabi AI - reuters.com 22:10 AI Fireside Chat Securing the supply chain Home Lab responsibilities Transition to managed services AI security tools Passwords Steve lets AI loose on his Home Assistant AI mistakes AI breakouts Constraining AI -- The Extra Credit Section -- For links to the articles and material referenced in this week's episode check out this week's page from our podcast dashboard! This Episode's Podcast Dashboard Phone Systems for Ask Noah provided by Voxtelesys Join us in our dedicated chatroom #GeekLab:linuxdelta.com on Matrix -- Stay In Touch -- Find all the resources for this show on the Ask Noah Dashboard Ask Noah Dashboard Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show! Altispeed Technologies Contact Noah live [at] asknoahshow.com -- Twitter -- Noah - Kernellinux Ask Noah Show Altispeed Technologies

This week we spent time with Braden Stroot, a highly detail-oriented professional engineer who was a hardcore Mac enthusiast and recently switched to Linux. He walks us through his journey to Linux and shares the distro and environment he’s chosen to meet his high bar for perfection on the Linux desktop. -- During The Show -- 00:48 Intro Been a week Braden Stroot Engineer Recent Linux convert 01:55 Standing Desks - Byron Finishing final edits Will be up on the docs site 02:57 LLM Usage - Jeremy Will AI hamper innovation? Could allow people more "innovation time" Innovation vs modification Dealing with AI submissions 10:00 News Wire Libreoffice 26.8 - libreoffice.org Openshot 4.0 - openshot.org Kdenlive 26.08 - kdenlive.org Calibre 9.14 - calibre-ebook.com Cosmic 1.7 - phoronix.com Ardour 9.8 - ardor.org Vanilla OS 3 - vanillaos.org EndeavourOS Titan Nova - endeavouros.com Ur Project - phoronix.com Epic Games Store Linux Support - steamdeckhq.com Microduck - techcrunch.com Nvidia Buys Hugging Face - theinformation.com Debian Allows Responsible AI - debian.org Linus Torvalds AI Demo - freedesktop.org CA Age Verification Law Exemption - tomshardware.com Braden Stroot Interview Why did you become an engineer? What did you use before? When did you start using Linux? Started with Pop!_OS and Cosmic Building a computer Rough edges of developing DE Nobara Linux CachyOS and Hyprland Desktop performance Learning topics to fix problems Audio on Linux What rough edges did you find? Package availability Stability of Arch Update frequency What made you interested in Hyprland? My Linux 4 Work ML4W Is Linux only for geeks? Never going back "switch flip" Remote into a Mac RustDesk What hardware platform would you choose? Framework Laptop Every OS has rough edges What causes you to still reach for the Mac? What audio work do you do? Ardour Zynthian Easy Effects Room EQ Wizard -- The Extra Credit Section -- For links to the articles and material referenced in this week's episode check out this week's page from our podcast dashboard! This Episode's Podcast Dashboard Phone Systems for Ask Noah provided by Voxtelesys Join us in our dedicated chatroom #GeekLab:linuxdelta.com on Matrix -- Stay In Touch -- Find all the resources for this show on the Ask Noah Dashboard Ask Noah Dashboard Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show! Altispeed Technologies Contact Noah live [at] asknoahshow.com -- Twitter -- Noah - Kernellinux Ask Noah Show Altispeed Technologies Special Guest: Braden Stroot.