×
Microsoft

Linux on Windows Exposes a New Attack Surface (eweek.com) 228

An anonymous Slashdot reader writes: The Linux in Windows 10 isn't running inside of a hypervisor; it's "running on the raw hardware, getting all the benefits of performance and system access, as well as expanding the potential attack surface." eWeek reports on a new threat discovered by Alex Ionescu, the chief architect at cybersecurity company Crowdstrike, which begins with the fact that "The Windows file system is also mapped to Linux, such that Linux will get access to the same files and directories."

Ionescu says "There are a number of ways that Windows applications could inject code, modify memory and add new threats to a Linux application running on Windows." According to eWeek, "The modified Linux code in turn could then call Windows APIs and get access to system calls to perform malicious actions that might not be mitigated."
Ionescu describes it as "a two-headed beast that can do a little Linux and can also be used to attack the Windows side of the system."
Microsoft

Microsoft Brings ChakraCore to Linux and OS X (cio.com) 106

An anonymous reader quotes a columnist at CIO: A few days ago I wrote about Microsoft's revival of Skype for Linux. I called it "a big deal" -- less because of Skype itself and more because it signified Microsoft's recognition that Linux is a platform worth supporting... Now the company has done it again. At Node Summit this week, Microsoft announced the availability of ChakraCore for Linux. ChakraCore is the core part of the Chakra JavaScript engine that powers Microsoft Edge and Universal Windows Platform. With this move, Microsoft is putting one of its core technologies on a competing platform. This, more than any other Linux-friendly move the company has made, is a clear departure from the Microsoft of Gates and Ballmer that used its technologies to lock users into Windows...

While Ubuntu is the primary Linux distribution that Microsoft is using to showcase its ChakraCore technologies, the company said that the support should easily translate to other modern Linux distributions.

Microsoft's blog post says the experimental implementation runs not only on x64 Linux but also on OS X.
Security

Ubuntu Linux Forums Hacked -- IP Address, Username, Email of 2M Accounts Compromised (betanews.com) 85

Canonical announced on Friday that Ubuntu forums have been hacked. The company adds that data such as IP address, username, and email address of over two million users have been compromised. BetaNews reports: Keep in mind, this does not mean that the operating system has experienced a vulnerability or weakness. The only thing affected are the online forums that people use to discuss the OS. Still, such a hack is embarrassing as it happened due to Canonical's failure to install a patch.In a blog post, Jane Silber, Chief Executive Officer, Canonical said, "after some initial investigation, we were able to confirm there had been an exposure of data and shut down the Forums as a precautionary measure. Deeper investigation revealed that there was a known SQL injection vulnerability in the Forumrunner add-on in the Forums which had not yet been patched."
Ubuntu

Ubuntu's Unity desktop environment can run in Windows (wordpress.com) 170

An anonymous Slashdot reader writes: "This is one of the coolest tickets I've seen on GitHub," writes Ubuntu developer Adolfo Jayme Barrientos, adding "this kind of surreal compatibility between platforms is now enabled...the fact that you can execute and use Linux window managers there, without virtual machines, is simply mind-blowing."

"The Windows 10 Anniversary Update coming in August includes an unusual feature aimed at developers: an Ubuntu sub-system that lets you run Linux software using a command-line interface," explains Liliputing.com "Preview versions have been available since April, and while Microsoft and Canonical worked together to bring support for the Bash terminal to Windows 10, it didn't take long for some users to figure out that they could get some desktop Linux apps to run in Windows. Now it looks like you can even load Ubuntu's Unity desktop environment, making windows 10 look like Ubuntu.

Software

Linux Letting Go: 32-bit Builds On the Way Out (theregister.co.uk) 378

An anonymous shares a report on The Register:Major Linux distributions are in agreement: it's time to stop developing new versions for 32-bit processors. Simply: it's a waste of time, both to create the 32-bit port, and to keep 32-bit hardware around to test it on. At the end of June, Ubuntu developer Dimitri Ledkov chipped into the debate with this mailing list post, saying bluntly that 32-bit ports are a waste of resources. "Building i386 images is not 'for free', it comes at the cost of utilising our build farm, QA and validation time. Whilst we have scalable build-farms, i386 still requires all packages, autopackage tests, and ISOs to be revalidated across our infrastructure." His proposal is that Ubuntu version 18.10 would be 64-bit-only, and if users desperately need to run 32-bit legacy applications, the'll have to do so in containers or virtual machines. [...] In a forum thread, the OpenSUSE Chairman account says 32-bit support "doubles our testing burden (actually, more so, do you know how hard it is to find 32-bit hardware these days?). It also doubles our build load on OBS".
Ubuntu

Ubuntu-Based Peppermint 7 Released (peppermintos.com) 74

Softpedia reports on the newest version of Peppermint OS, "a lightweight, stable, elegant, and fast computer operating system based on GNU/Linux and Open Source technologies." An anonymous Slashdot reader quotes their report: It's a bit earlier than expected, but the Peppermint OS 7 GNU/Linux distribution has been officially unveiled...based on the Ubuntu 16.04 LTS (Xenial Xerus) operating system [with] a lot of packages from the Ubuntu 16.04 LTS distro, which means that it will also be a long-term support release.... "Along with the shift to the 16.04 (Xenial) code base, Peppermint 7 continues our policy of choosing the best components from other desktop environments, wherever that may be, and integrating them into a cohesive whole with our own software," reads today's announcement.
"Team Peppermint" says they're switching to Firefox as their default browser for site-specific browser functionality (similar to Chrome's -app mode) after Google dropped their 32-bit version of Chrome and moved to PPAPI plugins "which effectively ends Flash support in 32-bit Chromium"... But you can also still choose Chrome or Chromium for site-specific browsing (and the OS comes in 32-bit and 64-bit editions).
KDE

KDE Bug Fixed After 13 Years (kate-editor.org) 118

About 50 KDE developers met this week in the Swiss Alps for the annual Randa Meetings, "seven days of intense in-person work, pushing KDE technologies forward and discussing how to address the next-generation demands for software systems." Christoph Cullmann, who maintains the Kate editor, blogs that during this year's sprint, they finally fixed a 13-year-old bug. He'd filed the bug report himself -- back in 2003 -- and writes that over the next 13 years, no one ever found the time to fix it. (Even though the bug received 333 "importance" votes...) After finally being marked Resolved, the bug's tracking page at KDE.org began receiving additional comments marveling at how much time had passed. Just think, when this bug was first reported:
-- The current Linux Kernel was 2.6.31...
-- Windows XP was the most current desktop verison. Vista was still 3 years away.
-- Top 2 Linux verions? Mandrake and Redhat (Fedora wouldn't be released for another 2 months, Ubuntu's first was more than a year away.)

Debian

Fedora QA Lead Pans Canonical 'Propaganda' On Snap Apps (happyassassin.net) 170

Long-time Slashdot reader JImbob0i0 shares a scathing article by Red Hat's Fedora QA "community monkey"/senior QA engineer on Canonical's announcement about their application delivery mechanism "snap"... ...and how it's going to unite all distributions and kill apt and rpm! This is, to put it diplomatically, a heaping pile of steaming bullshit... The press release and the stories together give you the strong impression that this thing called Snappy is going to be the cross-distribution future of application delivery, and it's all ready for use today and lots of major distributions are buying into it... The stories have headlines like "Adios apt and yum? Ubuntu's snap apps are coming to distros everywhere" and "Snap Packages Become Universal Binary Format for All GNU/Linux Distributions"...

Now, does Snappy actually have the cross-distribution buy-in that the press release claims (but never outright states) that it has? No... The sum total of communication between Canonical and Fedora before the release of this press release was that they mailed us asking about the process of packaging snappy for Fedora, and we told them about the main packaging process and COPR. They certainly did not in any way inform Fedora that they were going to send out a press release strongly implying that Fedora, along with every other distro in the world, was now a happy traveler on the Snappy bandwagon... They just decided to send out a wildly misleading press release and actively encourage the specialist press to report that Snappy was all set to take over the world and everyone was super happy with that.

Facebook

Facebook Adds SMS Support To Messenger (techcrunch.com) 60

Facebook Messenger already lets you send texts to your friends and other billion people on the social network, and also make voice calls and video calls. The social juggernaut is now also introducing support for SMS messages. The move comes a day after Apple introduced several new features to its Message app. Facebook Messenger used to have SMS functionality, but it was pulled in 2013 citing low usage. The feature is currently only available on Messenger for Android. TechCrunch reports: Users on any platform can receive SMS sent through Messenger, and they won't be able to tell it wasn't sent from a standard texting app. But since Apple doesn't provide as much flexibility for developers, iOS provides no option to change your SMS client, and there are no plans to bring this Facebook feature to the iPhone.In some other news, Facebook's move to retire messaging feature from its mobile website has irked Ubuntu Phone users.
Debian

Adios Apt and Yum? Ubuntu's Snap Apps Are Coming To Distros Everywhere (arstechnica.com) 274

An anonymous reader shares an Ars Technica report: Ubuntu's "snappy" new way of packaging applications is no longer exclusive to Ubuntu. Canonical today is announcing that snapd, the tool that allows snap packages to be installed on Ubuntu, has been ported to other Linux distributions including Debian, Arch, Fedora, and Gentoo among others. To install snap packages on non-Ubuntu distributions, Linux desktop and server users will have to first install the newly cross-platform snapd. This daemon verifies the integrity of snap packages, confines them into their own restricted space, and acts as a launcher. Instructions for creating snaps and installing snapd on a variety of distributions are available at this website. Snaps can exist on the same system as either deb or RPM packages. Snaps aren't the only new package manager for Linux distributions that aims to simplify installation of applications. There's also AppImage and OrbitalApps.
Handhelds

Ask Slashdot: Why Do Most Tablet Specs Suck? 231

Slashdot reader Qbertino describes himself as a "happy tablet user," moving from an old HTC Flyer to his Yoga 2. But he notes that most other tablets "have laughable battery times," and "I've yet to find a tablet that does not give me storage or memory problems in some way or other, lasts for a day or two in power and doesn't feel chintzy and like it won't stand a month of regular everyday use and carrying around..." He asks why none of the manufacturers seem willing to offer more than one gigabyte of RAM -- and why they're so stingy with storage. "Where is the rugged 16GB RAM / 1TB Storage / 20-hour battery tablet?"

So leave your educated opinions in the comments. What are your thoughts on the current tablet market? And are they the ultimate all-purpose "convergence" device that Apple and Ubuntu seem to think they are?
GNU is Not Unix

Ubuntu 16.10 To Be Powered By Linux Kernel 4.8 (softpedia.com) 58

Reader prisoninmate shares a Softpedia report: We've been monitoring the Ubuntu 16.10 development cycle for quite some time now to see what Linux kernel version the upcoming GNU/Linux operating system will be based on, and for now, it remains powered by the same kernel packages as Ubuntu 16.04 LTS (Xenial Xerus). Also, it looks like Ubuntu 16.10 has been switched to a universal local DNS resolver service. However, the Ubuntu Kernel Team published the other day a new installation of their weekly newsletter, informing the community that Ubuntu 16.10 (Yakkety Yak) would soon be rebased on the latest stable Linux 4.6 kernels. Then, it will move to the Release Candidate builds of Linux kernel 4.7, and after that, the operating system will finally be switched to Linux kernel 4.8.
Bug

Linux Kernel 4.6.1 Released; Some Users Report Boot Issue 161

Marius Nestor, reporting for Softpedia (condensed): Linux kernel 4.6.1 is already here, only two weeks after the official launch of the Linux 4.6 kernel series. For those not in the loop, Linux 4.6 branch is the latest and most advanced kernel branch available right now for GNU/Linux operating systems, but it looks like its adoption is a little slow at the moment. "I'm announcing the release of the 4.6.1 kernel. All users of the 4.6 kernel series must upgrade," says Greg Kroah-Hartman. "The updated 4.6.y git tree can be browsed at the normal kernel.org git web browser."
Some users are apparently facing boot failure issue on the latest version. An anonymous tipster tells Slashdot: Several folks on the web have reported a regression in the latest Linux kernels, starting with 4.6.1 and including the 4.7 beta that prevents booting and drops to busybox, at least the one supplied by the Ubuntu PPA. The boot sequence ends with "address family not supported by protocol: error getting socket" and then, "error initializing udev control socket" (screenshot here).
Open Source

Apple Releases First Preview of Swift 3.0 (macrumors.com) 227

DaGoatSpanka quotes a report from MacRumors: Apple yesterday released the first preview build of Swift 3.0, a major update to Apple's open source Swift programming language. Swift 3.0's official release is expected to come in late 2016 after proposed changes are finalized. The Swift 3.0 preview can be downloaded from the official Swift website. There are versions of Swift 3.0 available for Xcode 7.2, Ubuntu 14.04, and Ubuntu 15.10. [Swift 3.0 is not source compatible with Swift 2.2 as it introduces source-breaking changes, but going forward, the goal is to make Swift 3.0 source compatible with future Swift language updates.] Swift 3.0 will likely be shown at Apple's upcoming Worldwide Developers Conference (WWDC).
Software

Ubuntu Phones To Feature Wireless Display Support With OTA-11 Update (softpedia.com) 31

prisoninmate writes from a report via Softpedia: The moment you've all been waiting for is almost here, as you will no longer need a cable to connect your Ubuntu Phone to your TV or a supported LCD monitor. Canonical will soon release the OTA-11 software update to supported Ubuntu Phone devices implementing the Aethercast (also known as Miracast or Display Casting) technology that provides Wireless display support to Ubuntu Phone devices, but only for Meizu PRO 5, which comes with out-of-the-box wireless display functionality. Some other features of the OTA-11 update include: the adoption of the NetworkManager 1.2 network connection manager, an updated VPN feature with username and password authentication support, a pre-loaded Home Scope which will allow for a faster startup, multiple application windows, and subtitles in the header. In addition, the positioning in location service has been greatly improved, Dynamic Grid Unit (DGU) support is now available, and many bugs have been fixed (squashed). You can view a list of the devices that support the OTA-11 update here.

UPDATE 5/31/16: The report has been updated to clarify that the Meizu PRO 5 is the only device that supports wireless display functionality out-of-the-box.
Debian

ZFS For Linux Finally Lands In Debian GNU/Linux Repos (softpedia.com) 150

prisoninmate quotes a report from Softpedia: It took the Debian developers many years to finally be able to ship a working version of ZFS for Linux on Debian GNU/Linux. For those not in the known, ZFS on Linux is the official OpenZFS implementation for Linux, which promises to offer native ZFS filesystem support for any Linux kernel-based operating system, currently supporting Arch Linux, Ubuntu, Fedora, Gentoo, Red Hat Enterprise Linux, CentOS, openSUSE, and now Debian. And it looks like their ZFS for Linux implementation borrows a lot of patches from Ubuntu, at least according to the changelog for zfs-linux 0.6.5.6-2, the version that is now available in the unstable channel for Debian users to install and test.
Open Source

Linux Mint 18 Will Ship Without Multimedia Support (linuxmint.com) 75

An anonymous reader quotes this report from Distrowatch: Linux Mint 18 will no longer provide separate, codec-free installation media for OEM and magazine distribution. Instead, the distribution will ship without multimedia support while making it easy for users to acquire media codecs during the initial installation of the operating system. "OEM installation disks and NoCodec images will no longer be released. Instead, similar to other distributions, images will ship without codecs and will support both traditional and OEM installations. This will reduce our release cycle to 4 separate events and the production and testing of 12 ISO images. Multimedia codecs can be installed easily: From the welcome screen, by clicking on "Multimedia Codecs", or from the main menu, by clicking on "Menu"->"Sound and Video"->"Install Multimedia Codecs", or during the installation process, by clicking a checkbox option." Additional information on the upcoming release of Linux Mint 18 can be found in the project's monthly newsletter.
Softpedia points out that they're using Ubuntu 16.04 LTS as the package base, meaning "more hardware devices and components are now supported."
Open Source

Unity 8 And Snaps Are Conquering The Ubuntu Desktop After Ubuntu 16.10 (softpedia.com) 78

prisoninmate writes: Today is the last day of the Ubuntu Online Summit 2016, and the Ubuntu developers discussed the future of the Ubuntu Desktop for Ubuntu 16.10 (Yakkety Yak) and beyond. It looks like Snaps (Snappy) and Unity 8 with Mir are slowly conquering the Ubuntu Desktop, at least according to Canonical's Will Cooke, Ubuntu Desktop Manager. Work has already begun on pushing these new and modern technologies to the Ubuntu Desktop, as Ubuntu 16.04 LTS has just received support for installing Snaps from the Ubuntu Snappy Store. Canonical's Will Cooke has mentioned the fact that the Unity 7 desktop enters its twilight years, which means that it gets fewer features and it's being reduced to only critical and OEM work. This is because Unity 8 desktop is getting all the attention now, and it will become the default desktop session somewhere after Ubuntu 16.10 (Yakkety Yak).
Ubuntu

Ubuntu Founder Pledges No Back Doors In Linux (eweek.com) 107

Mark Shuttleworth, founder of Canonical and Ubuntu Foundation, gave an interview to eWeek this week ahead of Ubuntu Online Summit (UOS). In the wide-ranging interview, Shuttleworth teased some features that we could expect in Ubuntu 16.10, and also talked about security and privacy. From the report: One thing that Ubuntu Linux users will also continue to rely on is the strong principled stance that Shuttleworth has on encryption. With the rapid growth of the Linux Foundation's Let's Encrypt free Secure Sockets Layer/Transport Layer Security (SSL/TLS) certificate platform this year, Shuttleworth noted that it's a good idea to consider how that might work in an integrated way with Ubuntu. Overall, he said, the move to encryption as a universal expectation is really important. "We don't do encryption to hide things; we do encryption so we can choose what to share," Shuttleworth said. "That's a profound choice we should all be able to make." Shuttleworth emphasized that on the encryption debate, Canonical and Ubuntu are crystal clear. "We will never backdoor Ubuntu; we will never weaken encryption," he said.
Operating Systems

Ubuntu Quietly Raises Install Image Size to 2GB (omgubuntu.co.uk) 154

Joey-Elijah Sneddon, reporting for OMGUbuntu: You can expect to see a larger Ubuntu desktop installation image by the time the Yakkety Yak yips out. Developers are currently debating the exact size limits that official flavours will adhere to, with some favouring a 2GB hard limit while others are looking to go full-DVD size at 4.7GB+. Canonical's Steven Langasek explains the plans for Ubuntu 16.10 Yakkety Yak: "I've finally gone ahead and bumped the limit on Ubuntu desktop images to 2GB for a minimally-sized USB stick; this gives us a new limit that I think we will care about, while also leaving us headroom so we're not constantly fighting it back down to the line." The Ubuntu ISO is supposed to be around the 1GB mark but has creeped past this in recent releases. The current Ubuntu 16.04 LTS desktop .iso is 1.4GB.

Slashdot Top Deals