Linux

Details: https://seclists.org/oss-sec/2025/q3/75

CVE: https://nvd.nist.gov/vuln/detail/cve-2025-55014

cross-posted from: https://programming.dev/post/35273912

Hi, all!

I love Linux. I LOVE open source. I suck at designing anything artistic.

I just got into skateboarding and I am going to order a new deck for this old board we have. The deck is a cruiser style with a fish tail.

What FOSS characters or designs/references would be cool to see?

I was just thinking of Tux, but I need some more ideas. Especially for the griptape.

Thanks! This is truly the year of the Linux desktop.

Finally back in Linux after so many years! My first recent attempt was waylaid by a locked down bios beyond my ability to bypass, but I’m done! Thank you, to everyone who helped out in my previous post!

We love to praise linux constantly and tell everyone to change to it (they should) but what are your biggest annoyances ?

Mine would be, installing software (made even more complex by flatpaks being added, among the 5 other ways there already were to install software) and probably wifi power management issues.

A family member gave me an old convertible Chromebook, which I (of course) installed Linux on for the fun of it. It has convinced me there's a place in my life for a Linux tablet, though it's not quite the right device for me.

The Surface Go 2 seems about right with less size and more memory than the Chromebook, but I figured I should ask if people like anything else. Here are some preferences:

• 500-600g weight seems about right; the Chromebook is 1100g and that's a bit much
• 10" or so, 3:2 or 4:3, nothing more oblong
• Pressure-sensitive stylus support
• Expandable storage - an SSD I can swap without a heat gun is ideal, but an SD card slot will do
• Headphone jack
• x86-64, not ARM
• 8gb RAM
• $100ish for used B-grade

Final edit: having now done more research, the bios is secured and to get to boot options would essentially involve manually editing the bios with a second computer and downloading Chinese software to finish the job. I think I’m just returning this one. This is a bit beyond my skill level

I purchased a Lenovo mini pc online to turn into my second ever Linux machine (whoo), and when I tried booting it up for the first time, I found it asking for a network to sync data from an Amazon employee. I will be frank, fuck Amazon. If someone stole it, I hope the lost money was enough to cause Bezos to shit himself and die, only for a clone to rise in his place to do the same in a never-ending Sisyphean hellscape of skin peeling feculent horror. The fantasy that my holding on to this, and it is likely a fantasy, will affect Amazon is a bonus, not a detriment.

Now, that said, it was probably resold from Amazon’s stock at a decent discount, but not wiped. How can I install Linux on a machine that I don’t actually have full access to? I’m passably tech savvy, and more than willing to learn more to get back on Linux after 10 years of Microsoft pissing me off.

TLDR: How can I install Linux on an Amazon OS machine that I don’t actually have full access to?

Edit: my flash drive is ready, just struggling to get to the boot menu at this point. I can only mash so hard for so long!

https://blog.thc.org/infecting-ssh-public-keys-with-backdoors

I am not a security expert and I wonder:

1. Does the described method infect the remote or local machine (from which I connect)?
2. Can this method be prevented? For example, correctly configuring your etc/ssh/ssh_config

It seems that every VPS supplier can hack you? The description shows that AWS does "harmless", but what if my hosting is a bad actor?

I'm setting up a computer with linux mint debian editon, and the computer is going to be used by a lot of people who sign in via AD. I have custom display settings (background, pinned applications, theme, custom menu icon) that I would like to apply to all users, but right now they only show up when I log into the account that I set it up on.

Also, is there a way to get a custom firefox esr config to apply to all users as well? I want to remove pocket and make duckduckgo the default browser.

Many thanks.

From the blog post:

Hello everyone!

As it’s been not much of a secret anymore, Hyprperks has been a few months in the making, and now it’s all come together.

Hyprperks is now open to purchase to everyone!

If you want to support the development for 5€ + tax a month, and also get a few goodies from us, please check out the pricing page

You will get:

• Member-only forum access, with dev Q&A, support from me, and more
• Premium desktop experience, which is a set of preconfigured dotfiles with a one-click install and update
• And of course, support the continued development.

If you don’t have a Hyprland Account yet, consider making one! It’s free, and gives you access to our public forums, where you can find answers, ask questions, and interact with the community.

Also, thank you for all the support, guys. You are awesome!

Cheers, vax.

Was curious about this on a family member’s new laptop running Windows 11. Is there anything Linux can do with this processor yet?

I just want to modify an easy to use Linux distro to come with certain themes and software preinstalled, as a joke.

Hello people, just switched to Alpine and it would be great if some of the Apine users could share some dotfiles that are running Wayland compositors. I have not figured out to make swayidle work and some other stuff. By the way I am running River but this happened aswell on a fresh install with the Sway option of setup-desktop script.

I get some errors of unknown session with swayidle and conky, but I have set the corresponding environment variables and launching with dbus-run-session -- river

River init file:

export XDG_SESSION_DESKTOP=river
export XDG_CURRENT_DESKTOP=river
dbus-update-activation-environment WAYLAND_DISPLAY XDG_CURRENT_DESKTOP=river

Shell env file:

export XDG_RUNTIME_DIR="$(mkrundir)"
export XDG_SESSION_TYPE=wayland
export QT_QPA_PLATFORM=wayland
export SDL_VIDEODRIVER=wayland
export GDK_BACKEND=wayland
export MOZ_ENABLE_WAYLAND=1
export _JAVA_AWT_WM_NONREPARENTING=1

If you encountered some quirks of your own please let me know. Thanks in advance!

Gemini version: gemini://ploum.net/2025-07-23-linux_desktop4.gmi

Sounds like a good way to make use of old eMachines, at a large discount too.

Finally, the year of the Linux Desktop! (eMachine edition)

I am sure to upset a lot of purists with this, but as a hobby "sysadmin" of my own linux server at home, an AI built into the shell would do wonders to me.

I found bash-ai, but that seems to me like little more than a wrapper for ChatGPT queries.

In an ideal scenario, I'd like to employ a pre-trained, locally run AI that has access to all files, including config files and the list of installed packages, so it can, for example, tell me what specific lines in config files do or if a package I have already installed is good for a task I want to do or what the merge conflict between configs during an upgrade is about.

Is there such a built-in AI?

Okay so I found this old MacBook (I mean OLD, it even has a hot-swappable battery and an optical drive) and I have no idea if it’s even worth the effort of installing anything on it. What do you guys think I could do with it?

Edit: note that this is just from a live usb, it has 120GB storage

I can't find some lightweight dm compression layer. Only one i found is VDO and for some reason it uses a lot of memory to operate (on the order of 500 MiB). Why is that? My idea was to use it on a normal laptop/pc that does not have a lot of memory to waste. Only other alternative is btrfs, but it is already slow by itself (compared to other fs like ext4). Idealy what i would want is something like ext4 on VDO (only compression with VDO, and of course there would be LVM in there), only problem with this is that VDO is heavy on memory.