Recap of week 52, covering open source and sysadmin related news, articles, guides, talks, discussions and fun stuff.
Comic by Kris Wilson, From Cyanide and Happiness
If you like this website and want to support it AND get $10 Digital Ocean credit (2 months free), use this link to order: https://www.digitalocean.com/?refcode=7435ae6b8212 (referral link).
Earlier editions can be found here
News, tutorials and articles
- SysAdvent blog. Just like last year, great articles.
- The software freedom conservancy needs 2400 supporters to continue their efforts in Free Software. I signed up for a monthly donation, so should you.
- The Register writes about the SFC's struggle as well, specificly because of vmware.
- Check broken links with wget.
- IPSEC VPN on Ubuntu 15.04 with StrongSwan.
- An HTTP Status Code to Report Legal Obstacles, but why 451?
- Tutorial series on how Tor works.
- Magic plugins that promise optimizations and speedup probably don't.
- Atlassian's products are good and earn a lot of revenue, because they are so simple and wel integrated.
- Running Windows on FreeBSD's bhyve hypervisor.
- Some software lasts forever and some just a few years.
- DigitalOcean from two data centers to 11 in three years.
- A recap of development for the curl project, 8 curl releases, a total of 575 bugs fixed, 1,200 commits by 107 different individuals in 2015. Amazing that is.
- The ScreenOS backdoor that has been in Juniper devices since 2012 is explained a bit more here including the backdoor password.
- Adam Langley from Google also talks about one of the Juniper vulnerabilities announced last week.
- And Matthew Green is talking on the Juniper Netscreen backdoors. Big names on a big issue.
- Adam Langley also wrote a nice article on post-quantum key agreement. What will happen to crypto when quantumcomputers get mainstream?
- Taking Let's Encrypt for a spin. It's really that easy.
- Rails 5.0.0 beta, with special API mode.
- Distrowatch reviews Arch linux.
- Distrowatch also reviews OpenBSD 5.8.
- Microsoft will remove these 14 root CA certificates from their trust store.
- Forget the SSH Key passphrase on laptop suspend with systemd.
- A short article on practical SSL commands and more
- Review of the System76 Meerkat. A fast small PC running Linux out of the box.
- Why it's harder to forge a SHA-1 certificate than it is to find a SHA-1 collision..
- A practical example of Kdenlive's advanced video-editing features: Combining various video clips into one using multiple masks (aka advanced split screening).
- The firefox add-on landscape will face some big changes in the next year. Let's hope my favorite extensions get updated. Good to see progress here.
- Run DragonFly BSD on a Digital Ocean VPS (referral link).
- Automate to save mental energy, not to save time. And, IMHO, to transfer knowledge out of your head, reducing the busfactor.
- Steam has an oops with security.
- Open letter to Mozilla, bring back persona.
- GPL enforcement is a social good.
Software and releases
- Streisand sets up a new server running L2TP/IPsec, OpenSSH, OpenVPN, Shadowsocks, sslh, Stunnel, and a Tor bridge, using Ansible. Supports major cloudproviders, sets up a VPN server very fast.
- Wine 1.8 released after 17 months of development. That means that Wine 1.9 dev is available.
- LibreOffice 5.1 released. Release notes here.
- A list of all 311 vulnerabilities patched in Flash in 2015.
- Mediagoblin, the open source media publishing platform, released version 0.8.1.
- RSSGuard, A Qt desktop rss client with support for Tiny Tiny RSS.
- pfSense 2.2.6 released, fixing security issues like SQL injection, local file inclusion and more.
- SuperTux 0.4.0 released, after 10 years of development. New levels, new bosses, add-on manager in game, new badguys, bonuses and power-ups (air-, earth- and ice-flower). I've played a lot of SuperTux, I'm going to try this new version.
- Fedora 24 ships gcc 6, all packages need a rebuild.
- Mir, the display manager, got a new release, version 0.18. Bugfixes and new features, but I don't understand half of the words in the changelog.
- Capcom announces Steam OS/Linux support for Street Fighter 5!
- A great blog about mainframe hacking and security.
- Full disk Encryption with LUKS is trivial to hack by editing the bootloader and initrd. Secure boot is the solution here, sadly.
- Darktable 2.0 released. Open source lightroom alternative.
- Manjaro 15.12 (Capella) released. Based on Arch, but very friendly.
- Hardware actually. freetserv: a free open-source hardware build-it-yourself serial terminal server to remote-control up to 48 devices via their RS-232 serial port.
- Some AD checks you should be running often.
Talks, videos, slides and podcasts
Container Hacks and Fun Images, by Jessica Frazelle, from DockerCon 2015
Fun and nifty things and discussions