Brief items
Security
Security quote of the week
[...] installing a "backdoor" or "lawful access" to encrypted
communications is not a simple technical problem. As cryptography expert
Matt Blaze once said, it's like saying "well, if you can land a man on the
moon, why can't you land a man on the sun." A backdoor to encryption
literally breaks the encryption and opens up a huge host of other problems,
none of which are readily solvable. Instead, you just find more and more
problems, each of which makes everyone less secure.
— Mike
Masnick on yet another bad encryption bill introduced in the US Congress
Kernel development
Kernel release status
The current development kernel is 5.8-rc2, released on June 21. Quoth Linus: "So rc2 isn't particularly big or scary, and falls right in the normal range".
Stable updates: 5.7.4 (a single-fix release) came out on June 18. 5.7.5, 5.4.48, 4.19.129, 4.14.185, 4.9.228, and 4.4.228 all showed up on June 22.
The huge 5.7.6, 5.4.49, 4.19.130, and 4.14.186 updates are in the review process; they are due on June 25.
Distributions
Distribution quotes of the week
It is always good to push the boundaries and search for better ideas
and improvements, and that is part of what makes Fedora great. We are
doing this in the context of the RHEL 9 release as well, so our near
term timeline and requirements mean we are working on evolving
modularity, not a revolution or a replacement. We are excited by ELN
[Enterprise Linux Next],
as it presents a possible space to allow those that want to continue
to iterate on modules a place to do so without necessarily impacting
the broader Fedora distribution in its entirety. It is my personal
hope that we can use that opportunity to improve modules and
modularity in the open source, Fedora-first way we’d prefer. Our near
term effort to improve the existing modularity implementation ahead of
RHEL 9 needs to occur, and we’d like to do that work in Fedora, rather
than in closed product development. Longer term, we are open to
contributing to a better replacement that meets many of the same
goals. This is what makes our distribution ecosystem work well, and
not having that upstream lessens the value we all get from such
experimentation in the open.
— Josh Boyer
Lastly before we dive in, I want to highlight a theme we’ll be revisiting:
Users. There are many. They are diverse. They have different and
sometimes conflicting needs. They are awesome. Red Hat wants more of
them. From what I have observed in communications from Fedora’s Council
and Project Leader, Fedora wants more of them too. Again, Users are
awesome. They are the reason we are doing this. How can we empower them
to benefit from Fedora and be an answer to their problems and goals?
Without them, what are we doing all of this for?
— Terry Bowling
Development
Krita 4.3.0 released
Version 4.3.0 of the Krita painting application is out. "There’s a whole new set of brush presets that evoke watercolor painting. There’s a color mode in the gradient map filter and a brand new palettize filter and a high pass filter. The scripting API has been extended. It’s now possible to adjust the opacity and lightness on colored brush tips separately. You can now create animated brush tips that select brush along multiple dimensions. We’ve made it possible to put the canvas area in a window of its own, so on a multi monitor setup, you can have all the controls on one monitor, and your images on the other. The color selector has had a big update. There’s a new snapshot docker that stores states of your image, and you can switch between those. There’s a brand new magnetic selection tool. Gradients can now be painting as spirals."
Perl 7 launches
The Perl project has announced the upcoming release of Perl 7. Unlike Perl 6, though, this is not a radical departure, yet at least: "Perl 7.0 is going to be v5.32 but with different, saner, more modern defaults. You won’t have to enable most of the things you are already doing because they are enabled for you. The major version jump sets the boundary between how we have been doing things and what we can do in the future." The plan is to have a Perl 7 release "
within the next year".
Development quotes of the week
At the time of the rpm.org upstream reboot back in 2006, the idea
was to split out popt from the rpm codebase and then ... something. Only
we were too busy dealing with rpm itself and popt got left behind. The
last popt release is from 2010 and about a year ago it's download site
dropped off the net. People have been prodding us about this for some
time now, popt being a mandatory dependency of rpm but also used by
several other prominent OSS projects such as Samba, SSSD and Gnome. So
after heroic efforts of Neal Gompa to convert the rusty old CVS (anybody
still remember *that* horror?) repo into a nice shiny git repo, here goes.
— POPT 1.18 release announcement
So. Someone pushes the doorbell. That sends a signal to a machine that's bridged onto that network via an access point. That machine then sends a protobuf command to speakers on a separate network, asking them to stream a sample it's providing. Those speakers call back to that machine, grab the sample and play it. At this point, multiple speakers in the house say "Someone is at the door". I then say "Hey Google, activate the front gate" - the device I'm closest to picks this up and sends it to Google, where something turns my speech back into text. It then looks at my home structure data and realises that the "Front Gate" device is associated with my Home Assistant integration. It then calls out to the home automation machine that received the notification in the first place, asking it to trigger the front gate relay. That device calls out to the Doorbird and asks it to open the gate. And now I have functionality equivalent to a doorbell that completes a circuit and rings a bell inside my home, and a button inside my home that completes a circuit and opens the gate, except it involves two networks inside my building, callouts to the cloud, at least 7 devices inside my home that are running Linux and I really don't want to know how many computational cycles.
— Matthew Garrett
The future is wonderful.
Miscellaneous
Linux Plumbers Conference virtual town hall
Mark your calendars: the Linux Plumbers Conference has scheduled an online town hall for June 25 at 15:00 GMT. "The first purpose is to test our remote conference set up. This is the first time we are holding Linux Plumbers virtually and while we can run simulated tests, it’s much more effective to test our setup with actual participants with differing hardware set ups around the world. The second purpose is to present on our planning and give everyone a little bit of an idea of what to expect when we hold Plumbers at the end of August. We plan to have time for questions." Testing the scalability of the conference system requires a lot of participants; the LPC organizers would appreciate it if a lot of people can find a moment to connect and help out.
FOSS Contributor Survey
The Linux Foundation's Core Infrastructure Initiative (CII) and the Laboratory for Innovation Science at Harvard (LISH) have developed a survey for contributors to free and open-source software (FOSS) projects. The aim is "to identify how to improve security, including the sustainability of the FOSS ecosystem, especially the FOSS systems heavily relied upon by organizations worldwide."
Page editor: Jake Edge
Next page:
Announcements>>
