Home Blog Page 906

This Week in Linux News: Linux Vulnerability Puts Millions of Devices at Risk, Ubuntu Beats Microsoft & IBM for AT&T Contract, & More

Canonical Cloud 1This week in Linux news, a major Linux vulnerability leaves Linux servers and PCs at risk, Canonical scores a contract with AT&T, and more! Don’t miss the biggest Linux headlines of the past week. 

1) A Linux kernel zero-day vulnerability has exposed Linux PCs, servers, & 66% of Android phones/tablets. 

Hack Brief: Years-Old Linux Bug Exposes Millions of Devices– WIRED

2) AT&T has chosen Canonical over Microsoft Azure and IBM for a network and cloud contract.

Ubuntu Linux Beats IBM and Microsoft Azure to Lucrative AT&T Contract– The Inquirer

3) Tiny Core Linux now offers a distro that supports Pi 1 and 2 from the same media.

Hands-on with piCore 7.0: Tiny Core Linux for the Raspberry Pi– ZDNet

4) This flaw isn’t nearly as bad as first reported, but Linux administrators still need to fix it.

​How to Fix the Latest Linux and Android Zero Day Flaw– ZDNet

5) Students from diverse backgrounds will receive free Linux training and certification, thanks to The Linux Foundation & Goodwill.

Linux Foundation Partners With Goodwill to Offer Free Training and Lucrative Career Opportunities to Underserved Communities– IT Business Net

6) Linux Foundation board member Alan Clark talks about the importance of open source at OpenStack Seattle.

Where Open Source is Influencing | #OpenStackSeattle– siliconAngle

N1 Email Client — A User-Friendly Option

jack-n1 aIf you’ve paid close enough attention to the news, you know that the Mozilla Foundation has cut the cord to Thunderbird. Considering that, for years, Thunderbird has been the most user-friendly desktop email client for Linux, this could have been a disaster for the open source platform. Fortunately, there’s a new kid on the block with plenty to offer. That new kid is N1 by Nylas.

N1 is an extensible, open source email client that not only gets the job done, it does so with style and an ease of use that Thunderbird couldn’t match. N1’s feature list isn’t nearly as impressive as, say, the likes of Claws Mail. But, it makes up for that by bringing a modern UI and just enough features to make it usable for nearly anyone. The features include:

  • Fully cross-platform: N1 can work with Gmail, Yahoo, iCloud, Microsoft Exchange, IMAP, and more; as well as run on Linux, Windows, and Mac

  • Offline mode

  • Javascript plugin architecture to enable you to create your own plugins

  • Full screen mode

  • Multi-account support

  • Single or two-panel layout

  • Notifications integration (works with most notification systems)

  • Quick Replies

  • Desktop shortcuts

There is, however, one avoidable caveat to using N1. Out of the box, N1 actually works with the Nylas servers to route your email. This means all of your emails are pulled from your server (they don’t delete them, though) into the Nylas sync servers and then transmitted to the client. This is done to enable easier integration with the various types of mail services and servers.

Nylas incorporates its own Nylas Platform APIs (powered by its open source sync engine) in order to pull this off. If the idea of a third-party manipulating your email rubs you the wrong way, you can get around that by installing the sync engine on a VirtualBox host (the process is documented by the Nylas team here). But, if you’re not concerned with a third-party in your email route, then the out-of-the-box N1 client will work just fine.

Installation

The first thing we are going to do is install N1. I’ll demonstrate on a System76 Lemur, running Ubuntu 15.10. Here are the installation steps:

  1. Download the .deb file from the N1 download page

  2. Save the file to your ~/Downloads directory

  3. Open up your file manager and navigate to the ~/Downloads directory

  4. Double-click on the N1.deb file

  5. Once the Software Center presents you with the Install button, click it

  6. If you are presented with a “Bad Quality” warning, click Ignore and install

  7. When prompted, type your user password and hit Enter

  8. Allow the installation to complete

If you prefer installing via the command line, follow these steps:

  1. Download the .deb file from the N1 download page

  2. Save the file to your ~/Downloads directory

  3. Open a terminal window and change to the ~/Downloads directory

  4. Issue the command sudo dpkg -i N1.deb

  5. Type your sudo password and hit enter

  6. Allow the installation to complete

When you first run N1, you will be greeted by a welcome screen. Click through that and you’ll be able to start the account setup process. This setup wizard is incredibly simple: Select the account type (Figure 1 above), enter your account credentials, and continue to the next step of the setup wizard. NOTE: If you connect N1 to a Gmail account, you will have to give N1 permission to have offline access to your account. Also, if you’re already signed into your Gmail account (via the default web browser), you won’t have to actually enter your account credentials to set up the account.

Once the account as authenticated, you will be presented with the option to select the default layout. You can choose from a single or double panel layout. You can also select the keyboard shortcut set you would prefer to use (Figure 2).

jack-n1 bYou can change both of these settings from within Edit > Preferences > General (for layout) and Edit > Preferences > Shortcuts (for keyboard shortcuts).

The next screen allows you to install from the three built-in plugins (Quick Replies, Translation, and GitHub Sidebar Info). To install these plugins, click the associated Install button (if you’re not sure what plugins you want to enable, you can enable them later from within Preferences).

N1 should now open and you’re ready to go.

Installing Plugins

During initial setup, you were able to add the three included plugins. There are, however, more plugins available (as well, it offers the ability for you to create your own plugins). How do you install them? Simple. I’ll demonstrate by installing the Nylas Jiffy Plugin (a plugin that allows you to insert gifs into email). Here are the steps:

  1. Download the latest release of Jiffy

  2. Extract the downloaded file into your ~/Downloads directory (you can extract the file from within your file manager by right-clicking on the file and selecting Extract here)

  3. Open N1

  4. Click Developer > Install a Plugin Manually

  5. Navigate to the ~/Downloads/N1-Jiffy/N1-Jiffy folder (the duplication is correct)

  6. Click OK

That’s it. You’ll get a message saying the plugin was installed successfully and you’re ready to use it.

Working with the Quick Replies Plugin

Another nice feature in N1 is the ability to send quick replies to emails. You had to have first enabled the plugin. If you did not do during first run, you can go to Edit > Preferences > Plugins and click the Enable button associated with Quick Replies.

Once enabled, here’s how you work with this handy feature.

  1. Open N1

  2. Go go Edit > Preferences > Quick Replies

  3. Click on the New button

  4. Give the Quick Reply template a name

  5. Click Save

  6. Edit the template in the template editor (Figure 3)

  7. Create variables within your template by wrapping them in {{}} such as {{NAME}}

The template autosaves, so you don’t have to worry about saving your work. Your template is ready to be used.

jack-n1 c-cropTo use one of your quick replies, do the following:

  1. Open the email to be replied to

  2. Click the reply button

  3. At the bottom of the reply composing window click the drop-down (Figure 4) and then select the Quick Reply template to be used

  4. When prompted, click Replace contents

  5. Cycle through your variables (to manually replace their content) using the Tab button

  6. When finished, click Send

jack-n1 dAlthough Nylas N1 is still very much in beta, it is quite passable for everyday use. And, more plugins will be created and features added over time.

If you’re looking for a more modern desktop email client for Linux, you cannot go wrong with N1. And, if you’re not okay with your email routing through third-party servers, you can always take the time to set up the N1 Sync Engine. If you don’t want to attempt to set up the sync engine, and want to allay your fears regarding a third-party sync service, take the time to read through the Nylas security information to ease your worries.

Linux Foundation Update

Since last Saturday, I have been engaged in meetings on behalf of The Linux Foundation in China, with limited access to email and/or Internet. As a result, I have only recently become aware of a situation playing out over the last 24-48 hours in social media that demands an immediate response.  

First, The Linux Foundation Board structure has not changed. The same individuals remain as directors, and the same ratio of corporate to community directors continues as well. What we did do was to act on a long-discussed perception that the value we provide to individual supporters could be improved, for the first time in a decade.  And that the process for recruiting community directors should be changed to be in line with other leading organizations in our community and industry.  

As such, the Board voted to keep Larry Augustin and Bdale Garbee as individual At-Large Directors in recognition of their longstanding service to the community and individual commitment to helping advance The Linux Foundation. And the kernel developers continue to appoint a director as well. We welcome and value the continuing participation of Grant Likely in that capacity. Over time, the LF Board may also choose to add additional individuals from the growing communities we now serve.

We understand that governance issues are important, and that there will be differences of opinion when such changes occur. That is normal and healthy.  What is not healthy is the type of ‘flame wars’ that too often erupt in developer communities. Sadly, it appears that is now occurring, and that the conversation relating to an LF governance change has devolved into personal, inappropriate and offensive remarks directed against some members of our community, and in particular against Karen Sandler, the Executive Director of the Software Freedom Conservancy.   

Karen has dedicated her career to promoting and defending free software. Since these comments and attacks are being made in the context of online discussions relating to The Linux Foundation, I feel compelled to state in no uncertain terms that the Foundation does not condone, and stands against the type of online behavior that has too often been allowed to go on unchecked.   

I encourage those of you from our community who participate in social media conversations to fight back against the personal, and often sexist, attacks that have been launched by a very small number of community members. Such behavior does nothing to advance legitimate discussion of important matters, and cast an unfair and unfavorable light on the vast majority of community members who treat each other with respect. The LF has never condoned, and will never condone, this type of behavior.   

Read more at Jim Zemlin’s Blog

​Google Confirms New Linux Hole Not a Big Deal for Android

Secure-Android-AMSometimes a security “hole” is really a tiny security “leak.” The headlines made Perception Point-reported Linux and Android security vulnerability, aka CVE-2016-0728, sound terrible. For example, “Zero-Day Flaw Found in ‘Linux Kernel’ leaves Millions Vulnerable.” Ah… not so much, more like thousands. Maybe.

Actually, this Linux zero-day security flaw was mostly harmless. Now, Google, has revealed, as expected, on Android this security “hole” was more of a security “leak.” Adrian Ludwig, Android’s lead security engineer, wrote on Google+ that Google took the problem seriously.

Read more at ZDNet Linux and Open Source

Developer Explains Why the “Is Wayland Ready?” Question Is Wrong

developer-explains-waylandA Red Hat developer has explained why asking the question “Is Wayland ready?” is wrong and why everyone else needs to be ready for Wayland. We often see this question being asked pretty much everywhere, and everyone wants to know if Wayland is finally ready to be shipped as default. It seems that the community is asking the wrong question since Wayland is prepared and has been so for a very long time. The other ones are not ready for Wayland. 

Wayland is supposed to replace the old X protocol used right now in most of the Linux distributions. Each time a new version of GNOME gets into production…

Rust 1.6 Released

rustVersion 1.6 of the Rust programming language has been released. “The largest new feature in 1.6 is that libcore is now stable! Rust’s standard library is two-tiered: there’s a small core library, libcore, and the full standard library, libstd, that builds on top of it. libcore is completely platform agnostic, and requires only a handful of external symbols to be defined.

Read more at LWN

Linux Malware: Second Screen-Grabbing Trojan Surfaces in Space of a Week

Researchers have found Linux malware that appears to target a particular brand of Bitcoin ATM but works “just fine” on Ubuntu. 

Malware researchers at a Russian security firm have identified a new Trojan for Linux devices that takes screenshots and logs keystrokes. According to researchers at security firm Dr Web, there are signs that suggest that the Linux spyware, labelled Linux.BackDoor.Xunpes.1, has been designed to target Bitcoin ATMs from a Spain-based startup called Pay MaQ.

Read more at ZDNet News

Google’s New Managed Containers Are Brought to You by Red Hat

A new incarnation of Red Hat’s OpenShift Dedicated service for running containers will be available on Google Cloud Platform and could further Google’s plans to create a genuine open source hybrid cloud.

OpenShift Dedicated was originally hosted on Amazon EC2, but it’s based on technology that theoretically allows it to run anywhere. Now that Google and Red Hat are teaming up, instances of OpenShift Dedicated will be available on Google Cloud Platform. There are no details about pricing or availability as yet. 

Read more at InfoWorld

Meros’ Container Monitor Plots to Be a “Complete GUI” for Docker

Working with containers presents its own unique set of challenges which can be daunting to any developer. Issues continuing to plague enterprises using containers for working at scale consist of visibility, service discovery, and container health—Just to name a few of the many sharks in the water. Meros has just released a public beta of software-as-a-service (SaaS) that promises to address these pain points while offering performance where it’s needed.

“Meros is the complete GUI for Docker — and more,”…

Read more at The New Stack

Kali Linux Gets a Rolling Edition with Continuously Updated Penetration Testing Tools

kali-logoOffensive Security has announced on January 21, 2016, that their popular penetration testing operating system, Kali Linux, is getting a rolling release edition, at the request of numerous users.

Kali Linux 2016.1 is the first version of the Kali Linux Rolling Edition, and it comes after five months of thorough testing. Thus, it brings you the latest and greatest penetration testing tools, as well as a fresh base synchronized with the upstream software repositories of the stable Debian GNU/Linux 9.0 “Stretch” (Testing) operating system.

Read more at Softpedia Linux News