A significant follow-up to one of the biggest Linux stories, the Pandora's box the MIT Technology Review claims open-source devs just opened, and Linux on the M1 finally ships.

Sponsored By:

• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.
• Ting: Save $25 off your first device, or $25 in service credit if you bring one!

Support Linux Action News

Links:

• Documentation/process: Add Researcher Guidelines — This document seeks to clarify what the Linux kernel community considers acceptable and non-acceptable practices when conducting such research. At the very least, such research and related activities should follow standard research ethics rules.
• Guidelines for research on the kernel community [LWN.net]
• Activists are targeting Russians with open-source "protestware" — At least one open-source software project has had malicious code added which aimed to wipe computers located in Russia and Belarus.
• Activists are targeting Russians with open-source "protestware"
• SiFive bags $175m to further challenge Arm with RISC-V — The Silicon Valley-based chip designer said Wednesday it had raised a $175m Series F financing round at a more than $2.5bn valuation
• Ubuntu 22.04 LTS Will Default To Wayland With NVIDIA — Ubuntu 22.04 LTS will now default to using the GNOME Wayland session when running the NVIDIA proprietary driver.
• The first Asahi Linux Alpha Release is here! — We’re really excited to finally take this step and start bringing Linux on Apple Silicon to everyone. This is only the beginning, and things will move even more quickly going forward!
• Hector Martin on Twitter — We've been getting a steady trickle of users with the installation failing because the APFS resizer does a fsck and finds corruption.

This confirms my personal experience that Apple's APFS code is just buggy... it seems a lot of people have latent filesystem corruption :(

Apple enters full panic mode over sideloading, and our plan to push back against industry-wide consolidation kicks off.

Sponsored By:

• Linode: Receive a $100 60-day credit towards your new account. Promo Code: linode.com/coder
• Datadog: Try Datadog free by starting a your 14-day trial and receive a free t-shirt once you install the agent.

Support Coder Radio

Links:

• You can't install your own SSD into a Mac Studio despite there being slots — In news that should surprise nobody, you can't install your own SSD into a Mac Studio.
• Jupiter Broadcasting East Coast Meetup — Let's hang out at the park across the street from Prime BBQ.
• Install and Configure NixOS on a Linode — You can use a pre-existing Linode, or you can create a new one. If you’re using a pre-existing Linode, go to the Create Disks for Nix section, and resize your images into that approximate format.
• iCloud and Many Other Apple Services Are Down — Affected services and apps include the App Store, iCloud, Siri, iMessage, iTunes Store, Apple Maps, Apple Music, Apple Podcasts, Apple Arcade, Apple Fitness+, Apple TV+, Find My, FaceTime, Notes, Stocks, and many others, according to complaints across Twitter and other platforms. Apple's developer website is also inaccessible due to server issues.
• Upcoming EU Sideloading Bill — The Digital Markets Act has been in development for some time and the finalized version that could be completed as soon as this month will allow for sideloading and alternate app store options. Apple will be required to allow customers in Europe to download apps outside of the app stores, and it will also allow developers to use alternate purchase methods.
• Consolidation in podcasting: happening fast — If you wanted to reach 50% of all weekly podcast consumers a year ago, you would need to have advertised on the top seven podcast networks. But after considerable acquisition of big independent shows in the past twelve months, you can now reach 50% of weekly listeners if you buy advertising on just four podcast networks, he says
• On the weaponisation of open source | Tales about Software Engineering — As part of this post, I’m going to look at the decision by MongoDB to cut off services in Russia, the destructive change in a node library that deleted files on Russian IPs, a change in code/licence in a community terraform module.
• New sanctions bill targets publishing code — It additionally calls for sanctions on anyone who “significantly and materially assisted, sponsored, or provided financial, material, or technological support for, or goods or services to or in support of any [sanctioned] person.”
• [PDF] Digital Asset Sanctions Compliance Enhancement Act

Why GNOME 42 is the release we’ve all been waiting for.

Plus, we attempt to install Linux on an M1 MacBook live on the show.

Sponsored By:

• Linode Cloud Hosting: A special offer for all Linux Unplugged Podcast listeners and new Linode customers, visit linode.com/unplugged, and receive $100 towards your new account.

Support LINUX Unplugged

Links:

• Jupiter Broadcasting East Coast Meetup
• The first Asahi Linux Alpha Release is here! — It’s been a long while since we updated the blog! Truth be told, we wanted to write a couple more progress reports, but there was always “one more thing”… So, instead, we decided to take the plunge and publish the first public alpha release of the Asahi Linux reference distribution!
• Introduction to Apple Silicon · AsahiLinux/docs Wiki
• OpenBSD/arm64 on Apple M1 systems — It has taken a while, but I'm pleased to announce that OpenBSD/arm64 works well enough on Apple M1 systems for some wider testing.
• The Best New Features in GNOME 42 — GNOME 42 features a plethora of GTK4/libawaita app ports, intros a retooled screenshot experience, and makes several notable performance upticks.
• A look at what’s new in GNOME 42
• GNOME MR - Dynamic triple/double buffering (v4) — Use triple buffering if and when the previous frame is running late. This means the next frame will be dispatched on time instead of also starting late.
• Ubuntu 22.04 LTS To Carry GNOME Triple Buffering Support
• GNOME Dynamic Triple Buffering Can 2x The Desktop Performance For Intel Graphics, Raspberry Pi
• Port Extensions to GNOME Shell 42
• Fountain 0.3.10 — Fountain transcribes each episode so you can easily create and edit clips. With Fountain 0.3.10 we've introduced better transcription accuracy and faster processing speeds.
• AntennaPod 2.5 — The key feature that we added in this release? That would be synchronisation with “GPodder Sync” app for Nextcloud, implemented by @thrillfall.
• AntennaPod Issue - Support for podcast:value

Steam comes to ChromeOS, our thoughts on Arch turning 20, and our first look at GNOME 42.

Sponsored By:

• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.
• Ting: Save $25 off your first device, or $25 in service credit if you bring one!

Support Linux Action News

Links:

• Arch Linux turned 20 years old
• Steam for Chrome OS teased at Google for Games Developer Summit — Steam for Chrome OS was announced as being available "right now" at the Google for Games Developer Summit on March 15, 2022.
• Google Finally Announces Steam For Chrome OS
• Valve sent the developer of Lutris a Steam Deck to help development
• Steam Survey Results For February 2022 Put Linux Right Above 1.0%
• Roadtest Proposed As A New Driver Testing Framework For Linux — Roadtest is a device driver testing framework whereby drivers are tested under User-Mode Linux against mocked/modelled hardware.
• GNOME 42 News
• The Best New Features in GNOME 42
• Download Fedora 36 Beta
• Ubuntu 22.04 LTS (Jammy Jellyfish) Daily Build

Our take on big tech's return to office, AT&T's RCS boondoggle, and the concerning territory tech is racing towards.

Sponsored By:

• Linode: Receive a $100 60-day credit towards your new account. Promo Code: linode.com/coder
• Datadog: Try Datadog free by starting a your 14-day trial and receive a free t-shirt once you install the agent.

Support Coder Radio

Links:

• remembertoremember on Twitter — @ChrisLAS

How each of us asks for features and help from free software projects, and one of our most prescient soapboxes in a while.

Sponsored By:

• Linode Cloud Hosting: A special offer for all Linux Unplugged Podcast listeners and new Linode customers, visit linode.com/unplugged, and receive $100 towards your new account.

Support LINUX Unplugged

Links:

• Jupiter Broadcasting East Coast Meetup — Saturday, Apr 9, 2022 · 3:00 PM EDT
• Obsidian — Obsidian is a powerful knowledge base on top of a local folder of plain text Markdown files.
• How To ADHD — Those of us with ADHD have brains that work differently, which means we need to work differently.
• Onion Share — OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network.
• OnionShare on Flathub
• Kevin Rooke on Twitter — 5,000 podcasts are now on the Lightning Network. 4.2 million to go.⚡️
• Heroic Games Launcher on Flathub — An Open Source GOG and Epic Games Launcher.
• Ubuntu 22.04 Jammy Jellyfish testing week
• Ubuntu ISO Testing Tracker
• New Podcast Apps — The Podcast Index is here to preserve, protect and extend the open, independent podcasting ecosystem.
• The Pomp Podcast — What is the Lightning Network?
• What’s in a Boostagram?
• How the Lightning Network is Innovating Podcasting — Podcast Index allows podcasters to add their podcast and connect your podcast to your own node, or use their service and they run a node for you. Users can set a specific sats per minute to listen, and the content creators stream payment by sats.
• Fountain Podcast App
• BoostCLI — Command line tool to send and review Podcasting 2.0 Value.
• LINUX Unplugged on Podcastindex.org

We look back at our favorite moments from the last ten years of the Raspberry Pi, why you might want to start considering one, and where we want to see the platform evolve.

Sponsored By:

• Linode: Receive a $100 60-day credit towards your new account. Promo Code: linode.com/ssh
• Tailscale: Tailscale is a Zero config VPN. It installs on any device in minutes, manages firewall rules for you, and works from anywhere. Get 20 devices for free for a personal account.

Support Self-Hosted

Links:

• 10 years of Raspberry Pi - YouTube — Almost exactly ten years ago today, thousands of you set your alarms, and woke on leap-day morning to discover that we’d started selling Raspberry Pi computers. By the time our all-volunteer team gathered in the pub that evening for celebratory drinks, our licensees Farnell and RS Components had taken over 100,000 orders (despite struggling to keep their websites online under the load); we had (briefly) out-trended Lady Gaga; and Raspberry Pi was on the road to becoming a little larger than we’d planned.
• Too expensive to run in the UK now?! — My server uses 136 watts, and will costs £1.80 a day to run from June when the price increases kick in costing £54 a month. I'm starting to think maybe it's not worth it anymore having it run all the time!

Is anyone else re-thinking their home servers given the current cost situation?

Why Dirty Pipe is a dirty dog, the explosive adoption of Linux at AMD, and an important update on elementary OS.

Sponsored By:

• Ting: Save $25 off your first device, or $25 in service credit if you bring one!
• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.

Support Linux Action News

Links:

• Linux has been bitten by its most high-severity vulnerability in years — Dirty Pipe has the potential to smudge people using Linux and Linux derivitives.
• Catalin Cimpanu on Twitter — “DirtyPipe (CVE-2022-0847) is a vulnerability in the Linux kernel since 5.8 which allows overwriting data in arbitrary read-only files. This leads to privilege escalation. It is similar to CVE-2016-5195 “Dirty Cow” but is easier to exploit.
• Ron Amadeo on Twitter — “By my count, Dirty Pipe affects only brand-new Android 12 devices like the Pixel 6 and S22. Linux 5.8 and above has only been an Android option for five months."
• Canonical Patches “Dirty Pipe” Vulnerability in Ubuntu 21.10 and 20.04 LTS
• BLASTY on Twitter: “Hacked up a quick Dirty Pipe PoC that spawns a shell by hijacking (and restoring) the contents of a setuid binary.”
• The Dirty Pipe Vulnerability — The Dirty Pipe Vulnerability documentation
• AMD Posts Some New Linux Job Openings From Client CPU To Server — AMD would need a lot more Linux engineers to achieve the same level of timely Linux support and low-level kernel enhancements that Intel has been focused on for years, especially when it comes to Intel's open-source work beyond just the actual hardware device enablement.
• Introducing Native Matrix VoIP with Element Call! — What’s more, Element Call is built entirely on Matrix: it doesn’t need any additional servers to get going. You can run it against your existing Matrix homeserver to provide complete self-sovereignty… while still being able to talk to anyone else anywhere on the wider Matrix network! We will also be able to automatically use Matrix’s end-to-end encryption to secure all Element Call conferences
• call.element.io
• https://github.com/vector-im/element-call/issues
• Extending Matrix’s E2EE calls to multiparty
• Danielle Foré on Twitter — Okay it’s been a full month and this situation still isn’t resolved, and it sucks for you to just be completely in the dark and it’s pretty obvious something is up and people are asking what’s going on, so here is my side of the story 🧵
• Danielle gives an update on elementary Reddit Thread
• Jupiter Broadcasting East Coast Meetup

We revisit one of the core theses of the show and expand on it in a new way, leading us to ponder just what a wild ride the next eight years are going to be.

Sponsored By:

• Linode: Receive a $100 60-day credit towards your new account. Promo Code: linode.com/coder
• Datadog: Try Datadog free by starting a your 14-day trial and receive a free t-shirt once you install the agent.

Support Coder Radio

Links:

• John Carmack asks why Wine isn't good enough — I truly do feel that emulation of some sort is a proper technical direction for gaming on Linux. It is obviously pragmatic in the range of possible support, but it shouldn’t have the technical stigma that it does. There really isn’t much of anything special that a native port does – we still make OpenGL calls, winsock is just BSD sockets, windows threads become pthreads, and the translation of input and audio interfaces don’t make much difference (XInput and Xaudio2 are good APIs!). A good shim layer should have far less impact on performance than the variability in driver quality.
• Jupiter Broadcasting East Coast Meetup — Let's hang out at the park across the street from Prime BBQ.
• After NVIDIA, Hacker Group Lapsus$ Targets Samsung — Global tech and electronics major Samsung became the latest target of the South America-based cyber extortion group Lapsus$. The hacker group leaked sensitive proprietary information, including source codes, for various device and online operations a week after it leaked 19 GB of data stolen from NVIDIA. Lapsus$’s has hinted that its next big target could be Vodafone, Impresa, or MercadoLibre/MercadoPago.
• Samsung confirms hackers stole Galaxy devices source code
• Hackers Who Broke Into NVIDIA's Network Leak DLSS Source Code Online
• Ransomware Group Threatens To Leak "Nvidia's Most Closely Guarded" Secrets — “We request that Nvidia commits to completely open source their graphics processing unit drivers for Windows, MacOS, and Linux from now on and forever,” the ransomware group said in a statement. Should the company not acquiesce to the request, Lapsus will “release the complete silicon, graphics, and computer chipset files for all recent Nvidia graphics processing units.”
• Russia to Legalize Software Piracy — Against the backdrop of sanctions gaining momentum, Russian authorities are urgently preparing support measures, among which is being discussed the suspension of criminal and administrative liability for use of pirated software “from countries supporting sanctions”. Such a step could temporarily soften the exit from Russia of Microsoft, IBM, Oracle, and others, say experts. But, they warn, a large part of significant software from those companies is sold on subscription, which means access to them will be blocked in any event.
• Microsoft Flight Simulator's cloud debut comes with upsides for devs — Microsoft is releasing an API for developers interested in building cloud-native games with Xbox Cloud Gaming capabilities in mind.

We surprise each other with three different topics, hidden away by encryption in our show notes - we literally have no idea what we're talking about this week.

Sponsored By:

• Linode Cloud Hosting: A special offer for all Linux Unplugged Podcast listeners and new Linode customers, visit linode.com/unplugged, and receive $100 towards your new account.

Support LINUX Unplugged

Links:

• Jupiter Broadcasting East Coast Meetup
• trilium — Build your personal knowledge base with Trilium Notes.
• pytest-asyncio — Pytest support for asyncio.
• hypothesis — Hypothesis is a powerful, flexible, and easy to use library for property-based testing.
• brainfuck
• Brainfuck Interpreter
• Brainfuck text generator
• youtube-dl-server — Web / REST interface for downloading youtube videos onto a server.
• alltube — Web GUI for youtube-dl
• BookStack
• linuxserver/bookstack - Docker Image
• Raneto — A free, open, simple Markdown powered Knowledgebase for Nodejs
• Plex-Meta-Manager — Python script to update metadata information for items in plex as well as automatically build collections and playlists. The Wiki Documentation is linked below.
• linuxserver/plex-meta-manager - Docker Image
• Heimdall Application Dashboard
• linuxserver/heimdall - Docker Image
• Ubuntu 22.04 Jammy Jellyfish testing week currently
• Snowflake
• Start9 | Sovereign Computing
• Steganography deep-dive
• Steganography tools