Linux Dev Time – Episode 151

What makes a good library?               Support us on Patreon and get an ad-free RSS feed with early episodes sometimes   See our contact page for ways to get in touch. Subscribe to the RSS feed

It’s a Linux Dev Time style hot questions episode. Is “cloud native” more about where the workload is going or how you deploy it? What is a skill that is really important in your job that may surprise people? Is the cloud more or less secure than a company-controlled data centre or on-prem?  Would you recommend what you do to your kids/nephews etc?             Support us on patreon and get an ad-free RSS feed with early episodes sometimes           Subscribe to the RSS feed.

It looks like Bitlocker had a back door in it, how a listener accidentally broke Gitea for users of the snap version, Google accidentally published an unpatched exploit for Chromium-based browsers, why people are starting to ditch Bitwarden, and moving a tech stack away from large corporations.   Plugs Support us on patreon and get an ad-free RSS feed with some early episodes How Klara and TrueNAS fixed ZFS’s longest standing limitation Webinar: June 25th @ 11am EDT: Understanding AnyRAID with Jon from HexOS   News/discussion YellowKey Bitlocker Bypass Vulnerability Microsoft shares mitigation for YellowKey Windows zero-day How I Broke Gitea for Everyone Google publishes exploit code threatening millions of Chromium users The Quiet Renovation at Bitwarden   Free consulting We were asked about moving a tech stack away from large corporations.                 See our contact page for ways to get in touch.  

Debian’s ambitious aim to make all packages reproducible pushes us closer to a better future, yet more talk about age verification for VPNs, Firefox gets more users on mobile thanks to regulation, Opera’s gaming browser comes to Linux, Valve releases CAD files for the Steam Controller, and the Steam Frame might be coming soon. With guest host Andy from Linux Dev Time.   News/discussion Debian Release Team: Debian Must Now Ship Reproducible Packages EU calls VPNs “a loophole that needs closing” in age verification push EU browser choice rules send millions more users Firefox’s way Opera GX Lands on Linux Steam Controller and Puck CAD files officially released under a Creative Commons license — Valve encourages users to create accessories for the device Steam Frame coming soon?                     See our contact page for ways to get in touch. RSS: Subscribe to the RSS feeds here

We all seem to be moving away from Ubuntu, but there are still quite a few reasons to keep using it.   WG Tunnel PiVPN Charlie’s OggCamp talk about infrastructure as code                 Support us on Patreon and get an ad-free RSS feed with some early episodes         See our contact page for ways to get in touch. Subscribe to the RSS feed.

Why a proposal for an alternative to IPv6 is unlikely to be viable, Microsoft really doesn’t want you to run Exchange Server on-prem, Google will finally stop being a proper search engine, setting up an email server for internal use, and mitigating DDoS attacks without Cloudflare.   Plugs Support us on patreon and get an ad-free RSS feed with some early episodes Tuning ZFS for Databases Webinar: May 27th at 11am EDT: Database Performance on ZFS with Tom Lawrence   News/discussion Veteran network architect proposes IPv8 – to improve IPv4, not leapfrog v6 Exchange Server zero-day vulnerability can be triggered by opening a malicious email Google Search as you know it is over   Free consulting We were asked about setting up an email server for internal use, and mitigating DDoS attacks without Cloudflare.                 See our contact page for ways to get in touch.  

Great funding news for LVFS and KDE, why Europe probably needs some more home-grown distros, a conspiracy theory about Cloudflare seems unlikely, and we wonder what can be done about all the irresponsibly disclosed vulnerabilities that new tools are discovering. With guest host Andy from Linux Dev Time.   News LVFS Sponsorship Announcement Sovereign Tech Fund invests over €1 million in KDE software development KDE bags €1.3M as Europe realizes it might need an OS of its own Can Someone Please Explain Whether Cloudflare Blackmailed Canonical? ‘Dirty Frag’ Linux flaw one-ups CopyFail with no patches and public root exploit Dirty Frag gets a sequel as Fragnesia hands Linux attackers root-level access Linux kernel maintainers pitch emergency killswitch after CopyFail and Dirty Frag chaos DirtyCBC: When Linux Kernel Decrypt-Before-MAC Turns Authenticated Encryption Into a Page-Cache Write                   See our contact page for ways to get in touch. RSS: Subscribe to the RSS feeds here

Andy has been taking the One Billion Row Challenge, and has been thinking about the broader question of what makes software fast.   Andy’s videos on Peertube and YouTube.             Support us on Patreon and get an ad-free RSS feed with early episodes sometimes   See our contact page for ways to get in touch. Subscribe to the RSS feed

We get into some homelab updates. Sean has been consolidating hardware, Gary has been implementing high availability with Proxmox, and Shane has been working hard to get Home Assistant working with Kubernetes, as well as downloading YouTube videos.   Shane’s homelab           Support us on patreon and get an ad-free RSS feed with early episodes sometimes           Subscribe to the RSS feed.

People trying to return defective hard drives and RAM are finding out why consumer protection laws would be good, GoDaddy accidentally gave someone’s domain name away, and when and how to fix ZFS fragmentation.   Plugs Support us on patreon and get an ad-free RSS feed with some early episodes Fast Dedup Economics: When Deduplication Beats Buying New Disks   News/discussion Toshiba refuses to replace large hard drive that was under warranty — company offers refund at the purchase price, not the higher current retail price GoDaddy Gave a Domain to a Stranger Without Any Documentation   Free consulting We were asked about when and how to fix ZFS fragmentation.                 See our contact page for ways to get in touch.