Russell Coker: Wayland
https://etbe.coker.com.au/2022/03/25/wayland/
March 25, 2022, 7:52 AM
The Wayland protocol [1] is designed to be more secure than X, when X was designed there wasn’t much thought given to the possibility of programs with different access levels displaying on the same desktop. The Xephyr nested X server [2] is good for running an entire session from a remote untrusted host on a local display but isn’t suitable for multiple applications in the same session.
GNOME supported Wayland by default in Debian since the Bullseye release and for KDE support you can instal...
--------------------
Reproducible Builds (diffoscope): diffoscope 208 released
https://diffoscope.org/news/diffoscope-208-released/
March 25, 2022, 12:00 AM
The diffoscope maintainers are pleased to announce the release of diffoscope
version 208. This version includes the following changes:
[ Brent Spillner ]
* Add graceful handling for UNIX sockets and named pipes.
  (Closes: reproducible-builds/diffoscope#292)
* Remove a superfluous log message and reformatt comment lines.
[ Chris Lamb ]
* Reformat various files to satisfy current version of Black.
You find out more by visiting the project homepage....
--------------------
Ingo Juergensmann: New Server  – NVMe Issues
https://blog.windfluechter.net/2022/03/24/new-server-nvme-issues/
March 24, 2022, 9:49 AM
My current server is somewhat aged. I bought it new in July 2014 with a 6-core Xeon E5-2630L, 32 GB RAM and 4x 3.5″ hot-swappable drives. Gladly I had the opportunity to extend the memory to 128 GB RAM at no additional cost by using memory from my ex-employer. It also has 4x 2 TB WD Red HDDs with 5400 rpm hooked up to the SATA backplane, but unfortunately only two of them are SATA-3 with 6 Gbit/s. The new server is a used/refurbished Supermicro server with 2x 14-core Xeon E5-2683 and 256 G...
--------------------
Matthew Garrett: AMD's Pluton implementation seems to be controllable
https://mjg59.dreamwidth.org/58879.html
March 23, 2022, 8:42 AM
I've been digging through the firmware for an AMD laptop with a Ryzen 6000 that incorporates Pluton for the past couple of weeks, and I've got some rough conclusions. Note that these are extremely preliminary and may not be accurate, but I'm going to try to encourage others to look into this in more detail. For those of you at home, I'm using an image from here, specifically version 309. The installer is happy to run under Wine, and if you tell it to "Extract" rather than "Install" it'll leave a...
--------------------
Ulrike Uhlig: Workshops about anger, saying NO, and mapping one’s capacities and desires
https://curlybracket.net/2022/03/23/workshops.html
March 22, 2022, 11:00 PM
For the second year in a row, I proposed some workshops at the feminist
hackers assembly at the remote C3. I’m sharing them here because I
believe they might be useful to others.
Anger workshop
Based on my readings about the subject and a mediation training, I
created a first workshop about dealing with one’s own anger for the
feminist hackers assembly in 2020.  Many women who attended said they
recognized themselves in what I was talking about. I created the
exercises in the workshop with...
--------------------
Tollef Fog Heen: DNSSEC, ssh and VerifyHostKeyDNS
https://err.no/personal/blog/tech/2022-03-22-dnssec-ssh/
March 22, 2022, 7:30 PM
OpenSSH has this very nice setting, VerifyHostKeyDNS, which when enabled, will pull SSH host keys from DNS, and you no longer need to either trust on first use, or copy host keys around out of band.
Naturally, trusting unsecured DNS is a bit scary, so this requires the record to be signed using DNSSEC. This has worked for a long time, but then broke, seemingly out of the blue. Running ssh -vvv gave output similar to
debug1: found 4 insecure fingerprints in DNS debug3: verify_host_key_dns: checki...
--------------------
Gunnar Wolf: Long, long, long live Emacs after 39 years
https://gwolf.org/2022/03/long-long-long-live-emacs_after_39_years.html
March 21, 2022, 5:45 PM
Reading Planet Debian (see, Sam, we are
still having a conversation over
there? 😉), I read
Anarcat’s 20+ years of
Emacs. And.. Well,
should I brag contribute to the discussion? Of
course, why not?
Emacs is the first computer program I can name that I ever learnt to
use to do something minimally useful. 39 years ago.
From the Space Cadet keyboard that (obviously…)
influenced Emacs’ early design
The Emacs editor was born, according to
Wikipedia, in 1976, same year as
myself. I am clear...
--------------------
Bits from Debian: New Debian Developers and Maintainers (January and February 2022)
https://bits.debian.org/2022/03/new-developers-2022-02.html
March 21, 2022, 4:00 PM
The following contributor got his Debian Developer account in the last two months:
Francisco Vilmar Cardoso Ruviaro (vilmar)
The following contributors were added as Debian Maintainers in the last two months:
Lu YaNing
Mathias Gibbens
Markus Blatt
Peter Blackman
David da Silva Polverari
Congratulations!...
--------------------
Antoine Beaupré: 20+ years of Emacs
https://anarc.at/blog/2022-03-20-20-years-emacs/
March 21, 2022, 3:08 AM
I enjoyed reading this article named "22 years of Emacs"
recently. It's kind of fascinating, because I realised I don't exactly
know for how long I've been using Emacs. It's lost in the mists of
history. If I would
have to venture a guess, it was back in the "early days", which in
that history is mapped around 1996-1997, when I installed my very own
"PC" with FreeBSD 2.2.x and painstakingly managed to make
XFree86 run on it.
Modelines. Those were the days... But I digress.
I am old...
The onl...
--------------------
Joerg Jaspert: Another shell script moved to rust
https://blog.ganneff.de/2022/03/another-shell-script-moved-to-rust.html
March 20, 2022, 12:23 PM
Shell? Rust!
Not the first shell script I took and made a rust version of, but
probably my largest yet. This time I took my little tm (tmux
helper) tool which is (well, was) a
bit more than 600 lines of shell, and converted it to
Rust.
I got most of the functionality done now, only one major part is
missing.
What’s tm?
tm started as a tiny shell script to make handling
tmux easier. The first commit in
git was in July 2013, but I started writing and using it in 2011. It
started out as a kind-...
--------------------
Russell Coker: More About the Librem 5
https://etbe.coker.com.au/2022/03/19/more-librem5/
March 19, 2022, 12:31 AM
I concluded my previous post about the Purism Librem 5 [1] with the phone working as a Debian/GNOME system with SSH access over the LAN. Before I published that post I managed to render it unbootable, making a new computer unbootable on the first day of owning it isn’t uncommon for me. In this case I tried to get SE Linux running on it and changing the kernel commandline parameter “security=apparmor” to “security=selinux” caused it to fail the checksum on kernel parameters and halt the...
--------------------
Bits from Debian: DebConf22 registration and call for proposals are open!
https://bits.debian.org/2022/03/debconf22-registration-and-call-for-proposals-are-open.html
March 18, 2022, 8:10 PM
Registration for DebConf22 is now open.
The the 23rd edition of DebConf will take place
from July 17th to 24th, 2022 at the
Innovation and Training Park (ITP) in Prizren,
Kosovo, and will be preceded by DebCamp, from July 10th to 16th.
Along with the registration, the DebConf content team announced the
call for proposals. Deadline to submit a
proposal to be considered in the main schedule is April 15th, 2022 23:59:59 UTC
(Friday).
DebConf is an event open to everyone, no matter how
you identify ...
--------------------
Louis-Philippe Véronneau: Debian Clojure Team Sprint --- May 13-14th 2022
https://veronneau.org/debian-clojure-team-sprint-may-13-14th-2022.html
March 18, 2022, 6:45 PM
I'm happy to announce the Debian Clojure Team will hold a remote sprint from
May 13th to May 14th 2022.
The goal of this sprint is to improve various aspects of the Clojure ecosystem
in Debian. As such, everyone is welcome to participate!
Here are a few items we are planning to work on, in no particular order:
Update leiningen to the latest upstream version, to let some libraries in

Click here to read the complete article