Here's something you don't see every day. The logs from my SSH honeypot show someone brute-forcing the password for root and then executing: ls /data/data/com.android.providers.telephony/databases This is a strange directory to look for because it's where Android devices store the SQLite databases for SMS …| Carter Yagemann
As part of my Ph.D. research, I play around with Intel Processor Trace a lot. As a result, I frequently use libipt; both as a library for my own software and for the reference programs it includes. ptdump and ptxed are my goto utilities for quickly checking and manipulating …| Carter Yagemann
The other day I was playing around with CVE-2013-2028 along with my peer Hong Hu when we came across something odd: CVE-2013-2028 is only exploitable on 64-bit GNU/Linux when ASLR is enabled. After confirming this observation multiple times, we were left very surprised. How could ASLR possibly worsen the …| Carter Yagemann
Full Disclosure: I am a researcher in Georgia Tech's ISTC-ARSA, which is funded by Intel. Although I reference two publications that share Xinyang Ge and Weidong Cui as authors, I am neither associated with them nor Microsoft Research at the time of writing. Intel Processor Trace (PT) is a powerful …| Carter Yagemann
Lately, I've been playing around with Intel Processor Trace (PT); a x86 hardware feature that allows for complete tracing of process control flows. As part of my research, I've been developing my own Linux driver and user program to control PT. Tracing can be configured using a handful of model …| Carter Yagemann
Writing low level code can be difficult due to the lack of examples on the internet. The answer is generally sitting somewhere in a 3,000 page manual where only the most dedicated programmers will find it. Last week I had such an experience. Currently my research involves a lot …| Carter Yagemann
Originally written for the Syracuse University College of Engineering blog. Everyone at Syracuse University knows that orange is the very best college color, but who knew it could also help you sleep? Research conducted in recent years has shown that sleep problems are on the rise and one theory gaining …| Carter Yagemann
Over the weekend, the lab I work in experienced a power outage. After power was restored, one of our servers failed to boot. It ultimately became my responsibility to figure out if the server could be repaired and failure wasn't an option because the server was configured (with no backups …| Carter Yagemann
I've been fooling around with IDS and specifically psad and I thought it would be fun to try installing psad on my raspberry pi. Little did I know, installing psad on an ARM processor running Arch Linux with systemd is not a simple process. It took me great effort to …| carteryagemann.com
Chromium, the open-source upstream project for Google's Chrome web browser, is the browser of c [...]| LWN.net
RAM's expensive again. Can existing software run faster with 50% less RAM via an unloved compiler flag?| Alex Alejandre's Recent Posts
Free advice from the printer fixer| The Autodidacts
Comments| Lobsters
Reflexión personal sobre por qué, tras años de distrohopping y ver morir muchas distros, he acabado quedándome en Fedora.| El blog de Lázaro
Forgot your root password? It happens. We're not judging. We'll help you get it back, either through the SolusVM panel or at the command line with a rescue image if you need it. The post Forgot Your Root Password? Here’s the Easy Way (and the Hard Way) to Recover It appeared first on LowEndBox.| LowEndBox
Google Compute Engine’s e2-micro instances are a staple of the GCP Free Tier, offering 2 vCPUs and roughly 1 GB of RAM (969 MiB usable). They are ideal for lightweight bastions, cron runners, and small test beds. However, if you run memory-sensitive workloads—such as Go builds, package extractions, or continuous process forks—you may have experienced intermittent, baffling SSH connection timeouts and unresponsive terminals. The root cause is rarely your application alone. By default, GC...| Tony Metzidis
After installing Debian Linux on the CuBox-i1, CuBox-i2, CuBox-i2eX, or CuBox-i4Pro, additional firmware files are required for Wi-Fi, SDMA, and hardware-accelerated video decoding. Specifically, the VPU needs proprietary firmware, the Wi-Fi module relies on symlinking files from an official Debian package, and the SDMA engine depends on the non-free firmware package. For context, the following dmesg output from a CuBox-i4Pro demonstrates the missing firmware warnings: This article explains h...| James Cherti
Older Lenovo ThinkPad models such as the T420, T420s, T520, X220, W520, and T430 provide BIOS settings that control CPU power management, processor features, storage controllers, and boot behavior. Adjusting some of these settings can improve responsiveness or reduce boot time. CPU and Power Delivery CPU Power Management Disabling CPU Power Management turns off the BIOS feature that stops the processor clock during periods of inactivity. The benefit is that the operating system gains unrestri...| James Cherti
The default sudo configuration caches successful authentication using a timestamp, allowing commands to execute without a password prompt for a limited period. This can cause security risks, such as local privilege escalation if an attacker accesses an unlocked terminal session or if a malicious script automatically escalates its own privileges within the cached timeframe. Additionally, restricting the execution path ensures that sudo only executes verified, system-installed packages. Here is...| James Cherti
The CuBox-i is a series of compact, fanless computers, by SolidRun, that feature a cube-shaped enclosure. Installing Debian Linux on CuBox-i series computers, such as the CuBox-i1, CuBox-i2, CuBox-i2eX, or a CuBox-i4Pro, requires specific bootloader preparation. After spending four hours troubleshooting multiple failed installations, I found the reliable solution documented here. This article details a deployment strategy using the Debian hd-media offline installation method over a serial con...| James Cherti
Brute-force attacks against SSH frequently target internet facing Linux systems, such as Debian, Ubuntu, Arch Linux, Linux Mint, Kali Linux, Raspberry Pi OS (Raspbian), Gentoo, etc. Fail2ban resolves this by monitoring authentication logs and dynamically updating firewall rules to block IP addresses that show malicious behavior such as repeated failed login attempts. This article covers configuring custom jail parameters and applying the rules to protect SSH. When does Fail2ban actually impro...| James Cherti
Even after configuring Linux on a Lenovo ThinkPad, such as the Thinkpad T420s, the laptop can still experience unexplained CPU throttling that degrades perfo...| James Cherti
A twenty-year-old computer can still be useful if you stop asking it to behave like a new one.| Dead Parrot BBS
If security is a top priority, you should consider one of these five Linux distributions. They’re all free to install and use.| ZDNET
Podman is a daemonless Docker alternative for Linux that can run without root access. However, it is less well known that Podman can expose a UNIX-domain socket compatible with the Docker API. This makes it work with most tools in the Docker ecosystem, such as docker-compose.| Elouworld
If you need to rotate logs Linux, the standard tool to use is logrotate. It automatically rotates, compresses, removes, and manages old log files so they do not consume all available disk space. Linux servers can generate thousands of log entries every day. Web servers, applications, authentication services, databases, firewalls, and system processes can all […]| CyberPanel
Flatpak is today's preferred distribution platform for graphical desktop apps, yet it isn't popular for terminal apps, and for good reason! Launching CLI apps is difficult and not very user-friendly. However, Flatpak can take inspiration from other systems to improve CLI app usage.| kowalski7cc
Occasionally, I will forget to link something from the mailing list in this post. To see my full mailing list activity (patches, reviews, and reports), you can view it on lore.kernel.org. Linux kernel patches Build errors: These are patches to fix various build errors that I found through testing different configurations with LLVM or were exposed by our continuous integration setup. The kernel needs to build in order to be run :)| Nathan Chancellor
My journey from macOS to Linux, the mistakes I made along the way, and the Fedora + Niri setup that became my daily driver.| Ivan Tolkunov
Mount EFS from on-premises Linux over private connectivity with TLS, explicit Region selection, and network and application checks.| OneUptime Blog
Locate EFS files restored under aws-backup-restore directories, account for access-point roots, and promote data through a verified staging path.| OneUptime Blog
Inventory EFS clients, drain active mounts, and verify dependencies before deleting a mount target without stranding NFS processes.| OneUptime Blog
Investigate EFS stalls after a network interruption and apply noresvport through a controlled mount replacement and reconnection test.| OneUptime Blog
Fix EFS boot-time mounts by comparing manual and fstab options, ordering network readiness, and making application services require the mount.| OneUptime Blog
Separate EFS client write authorization from numeric POSIX identities, directory modes, access-point enforcement, and root squashing.| OneUptime Blog
A portable replacement for the xxd command.| OVERHEAD
Linux 6.3 trae importantes mejoras para los procesadores y las gráficas de AMD, los mandos de videojuegos y las placas base de ASUS para AMD.| MuyLinux
Sony está poniendo al día el driver "hid-playstation" para soportar en Linux el DualSense Edge, su próximo controlador tope de gama.| MuyLinux
A pesar de que el Linux Gaming es en porcentaje insignificante, con el paso de los años ha sabido hacerse un hueco lo suficientemente grande como para atraer| MuyLinux
The forgetful CPU (Linux on| yuka.dev
Qualcomm, yesterday, promising Linux support for the new Snapdragon X2 processors: Linux on Snapdragon X2 Series is moving from early bring-up toward a more complete upstream developer experience. Core support is landing, Hexagon NPU and Adreno GPU work is progressing, and real laptops with Snapdragon X2 Series processors are already beginning to boot Linux. ↫ Qualcomm’s promises from 2026 Interesting, but I feel like I’ve heard these exact words before. Qualcomm, two years ago, promisi...| OSnews
SPECviewperf 15.0.1 Linux Edition brings real-world OpenGL workloads, a new interface, and Arm support to the operating system that many studios, and labs, already run.| Jon Peddie Research
PrologueThe /sys directory is commonly mounted with a virtual file system called sysfs. This is a pesudo file system exporting various internal knobs| blog.kimiblock.top
Static Permissions Portab| Kimiblock's Blog
In the previous article we followed a packet all the way in from the wire and all the way back out. At every step something was reading or writing memory — the page the driver handed the card, the skb wrapped around it, the buffer the bytes were finally copied into. We never once asked which memory. A page was a page. That’s been the quiet assumption under this whole series. On a laptop it’s a fine one. On a two-socket server it falls apart, because there the RAM isn’t wired to the ma...| Internals for Interns
This report covers statistics on vulnerabilities, exploits, and C2 frameworks in Q2 2026. For the first time ever, we aggregate data on vulnerabilities in open-source AI agents and AI frameworks.| Securelist
C++ programmers should note that while global variables are zero-initialized by default, local variables are not, which can lead to errors if they remain uninitialized. Recent C++26 enhancements ensure local variables are zero-filled, a behavior not present in C++23. This difference is evident in assembly code comparisons across optimization levels.| Tech For Talk
One of the more secure Linux distributions has added another feature to help further lock it down.| ZDNET
El proyecto GNU cumple 43 años desde que Richard Stallman anunció en septiembre de 1983 su intención de crear un sistema operativo libre compatible con Unix. El proyecto no llegó a completar su propio núcleo en el momento previsto, pero sus herramientas, bibliotecas y licencias acabaron formando una parte esencial de la historia del software […]| Redes Sociales
MeshCentral это открытая бесплатная система для удаленного доступа и управления устройствами через веб интерфейс. Является отличной self-hosted альтернативной таким известным средствам удаленного доступа к рабочим столам компьютеров через Интернет, как TeamViewer и AnyDesk. Позволяет л...| Windows для системных администраторов
I am very happy that the work Vaxry and outfoxxed are doing is being sponsored and paid for. I also have a few worries.| LibreNews
A configurable stacking window manager for Wayland, built on River and inspired by FVWM and MWM.| cow-wm.codeberg.page
A Linux rootkit targeting F5 BIG-IP APM environments hides a PHP web shell inside Apache process memory, forcing defenders to rethink file-centric incident response.| Andrea Fortuna
Nheko is my current favourite client for the Matrix IM system, which is my favourite IM system. Matrix is an open system with end to end encryption and Nheko is free software and runs well on Linux…| etbe - Russell Coker
Skip to content| TekWeis.com
Choose the right platform for your next electronics project| TechRadar
Turn everyday ideas into real, working devices| TechRadar
记录一下最近排查的一个问题:某台机器一上线就有丢包,同 Rack 同规格的其他机器都没有问题,由于负载都是一样的,所以问题集中到这台机器本身的问题。已经可以 100% 复现,只要一接流量,网卡就开始时不时的丢包。| www.kawabangga.com
Réclamé de longue date par les développeurs, le support officiel de Linux arrive sur les puces PC de Qualcomm. Seuls les Snapdragon X2 Elite et X2 Plus sont concernés pour le moment.| L'Éclaireur Fnac
systemd 262 es la nueva versión del gestor de servicios de Linux y, como es habitual, llega repleta de cambios, buena parte de ellos relacionados con el arranque, el cifrado y la gestión del sistema. Sin embargo, e particular y controvertido componente va, una vez más, un paso más allá de lo que cabría esperar […] La entrada systemd 262 mejora la gestión de contenedores y las actualizaciones en vivo es original de MuyLinux| MuyLinux
La pasada primavera conocimos el proyecto PS5 Linux, una iniciativa de hacking a cargo de Andy Nguyen que logró ejecutar juegos de Steam y emuladores, aprovechando al máximo el hardware de la consola de Sony. Lamentablemente, el desarrollador ha anunciado que se retira por completo del mundo del hacking de PS5 y que también deja […] La entrada Adiós al proyecto PS5 Linux es original de MuyLinux| MuyLinux
Disclaimer: This post was indirectly inspired by a similar (and very enjoyable) post by the amazing Stefano, but it was germinating in my brain long before I realized the thematic similarities. I've been programming in UNIX shell (mainly ksh, then bash, and now a bit more POSIX shell) for about …| R.L. Dane
It's wise to create a disk image of your Nextcloud server periodically, but even better to see if you can actually restore your server from a saved image.| Welcome to The Privacy Dad's Blog!
Porting USB wake support to JetKVM took a small kernel patch and a Saturday of debugging. Most of the debugging turned out not to be about the patch.| John Lian
Кольцевой буфер (он же ring buffer) – это структура данных #datastructure, которая позволяет тебе писать с одного конца (write) и читать с другого (read). Она классно подходит, когда тебе нужны FIFO очереди, потоки и всякие системы, где читатели с писателями работают отдельно друг от друга.| flapenguin.me
The Steam Deck? I get it. It's a handheld device that would be pretty tricky to replicate on my own. The thermals, the price-to-performance, the battery life. For a handheld, it's an intricate balancing act where each concern is as important as the next.| The Bryant Review
Fuzzel is a versatile app and utility launcher for Wayland. If you are familiar with dmenu and rofi, fuzzel is largely compatible with them. Screenshots What's Fuzzel good for? Besides launching applications, as a dmenu alternative Fuzzel can be used for many utility tasks. These include: * Emoji picker with| Mark Stosberg
Fuzzel, a popular Linux app-launcher and menu building tool on Linux has recently released version 1.13. While Fuzzel may be best known as an app launcher, it's a popular choice for building little menus. See What's Fuzzel Good For? for examples. In the 1.| Mark Stosberg
On Linux, Control-C and Control-V don't work for copying and pasting in terminals. The Control modifier is used for its original purpose of inserting control codes. Instead, terminal apps require an extra Shift modifier, like Control+Shift+C. But what if there were hidden shortcut combos| Mark Stosberg
Fuzzel is a Wayland-native app launcher and fuzzy finder for Linux, inspired by Rofi and dmenu. The five-year-old Fuzzel project recently had a feature-packed 1.11 release. Here's a visual rundown of what's new. Instant filtering of huge lists Fuzzel can now| Mark Stosberg
Last updated: August, 2025 Rofi is a popular window switcher, application launcher and dmenu replacement for Linux. dmenu was a tiny text-only utility to display a list of lines of text and select one. The dmenu design follows the Unix philosophy to "do one thing well". Simple!| Mark Stosberg
Fuzzel is a rofi alternative for Wayland. It's a versatile picker and launcher utility for desktop Linux. The last time I gave an update on Fuzzel was when 1.8 released which compared it to some altenatives. Let's look at some recent feature additions since then.| Mark Stosberg
Here's how I set up my keybindings for the Sway window manager for Linux. Most of the tips here would apply to any keyboard, but let's get one detail out of the way first that's specific to 40% keyboards like the Corne. It doesn't have a| Mark Stosberg
Explanation of my newly released tool: pactropy. Keeps a clean list of essential packages.| Felipe Contreras
After 15 years since the first reports ruby gems remain broken, even tough I wrote the patch that fixes everything years ago.| Felipe Contreras
A few tips to show how I manually compile stuff.| Felipe Contreras
Configure NGINX as a reverse proxy with SSL termination, HTTPS redirects, correct proxy headers, secure certificate paths, testing, and fixes. The post How to Configure NGINX as a Reverse Proxy with SSL Termination on Linux in 2026 first appeared on The Back Room Tech.| The Back Room Tech
If you spend a lot of time in a Linux terminal, you probably already know the commands you use dozens of times a day: cd, ls, grep, find, ssh, and systemctl. But some of the most useful shell features are easy to overlook. A command gets stuck longer than expected. You run df -h again just to check whether a disk is filling […] The post Using Linux Commands Every Day? Explore Advanced Features to Simplify Your Routine appeared first on howtouselinux.| howtouselinux
You install the OpenAI Codex CLI, open a new terminal, type codex—and zsh throws this back at you: This error is almost never a broken installation. It simply means your shell can’t find an executable named codex in any directory listed in your PATH. There are a handful of reasons that happens, and each has a quick fix. Why this […]| howtouselinux
The big KDE Plasma 6.7 release ushered in the summer. Now, as summer draws to a close, a new 6.8 release is cooking, due to arrive in about a month’s time. Most of the development is done at …| Filip Fila's blog
A shell finder is a type of reconnaissance tool that is used by threat actors to identify websites that have already been compromised and contain backdoor shells. A backdoor shell is a form of malware that is added by a threat actor after gaining unauthorized access to a website. The purpose of a backdoor shell is […]| WPScan 4.0.0: We're Back
Four Linux kernel vulnerabilities now have public root exploits, while CISA warns of three actively exploited kernel flaws. CVEs, affected versions, fixes and mitigations This post first appeared at - The CyberSec Guru| The CyberSec Guru
Backstory I have a small laptop-server that runs my home. It serves as a container host (Home Assistant, WireGuard, …), an HTPC (KDE Bigscreen, Kodi, Steam), and random file storage. It works well enough. One of the long-living items on my personal backlog is capturing that laptop’s configuration somewhere. I keep tinkering with it, and I know that one day, when I break something and need to reinstall it, I won’t remember all of the tiny changes I made, and will spend several years chas...| BackSlasher
(I worked on this feature last year, before being moved off desktop related projects, but I never saw it documented anywhere other than in the original commit messages, so here's the opportunity to shine a little light on a feature that could probably see more use)| /bɑs ˈtjɛ̃ no ˈse ʁɑ/ (hadess) | News
KDE is on the news because of a controversial proposal to define an official “AI” (LLM) policy (archived link). Other projects have tried their hand at similar policies and stances but, in my opinion, they miss the mark about the goal of such initiatives. I think that the point of these statements is shaping social...| Rust in Peace
Ramen has released its Aura game development agent for Unity and Unreal Engine with automated playtesting verification. The commercial 1.0 release introduces a redesigned interface, persistent project memory, multi-project environments, and expanded platform availability across macOS and Windows. Ramen has also launched the tool on Epic Games’ Fab store, offering C++ source code access for […] The post Ramen Aura automates Unity and Unreal Engine playtesting appeared first on Developer Te...| Developer Tech News
Administración de Manjaro: paquetes, actualizaciones, Flatpak y AUR Manjaro es una distribución basada en Arch Linux que busca ofrecer una experiencia de escritorio accesible manteniendo buena parte de la flexibilidad de su sistema de paquetes. Para administrarlo correctamente conviene conocer sus principales herramientas, saber de dónde procede el software que instalamos y entender las diferencias […]| Tecno y Soft - Tecno y Soft
When a disk starts working continuously, figuring out which process is responsible can mean jumping between tools such as iostat, iotop, lsof, df, smartctl, and lsblk. Diskwatch tries to bring that diagnosis into a single terminal interface written in Rust, reading information already exposed by the operating system and correlating file activity, I/O rates, and […]| System Administration
Talos Linux will no longer be exclusively an operating system designed around Kubernetes. Sidero Labs has announced Talos Hypervisor, a KVM-based virtualization layer built directly into Talos that will allow virtual machines to run without deploying KubeVirt or using Kubernetes to manage them. The project is also preparing direct execution of OCI containers outside Kubernetes, […]| System Administration
Amazon Web Services (AWS) has opened the public preview of Amazon Linux 2027 (AL2027), the next generation of its Linux distribution for servers and cloud workloads. The move from Amazon Linux 2023 brings changes that directly affect system administrators: Linux kernel 7.1, SELinux in enforcing mode by default, DNF5, systemd 260, GCC 16.1, Python 3.14, […]| System Administration
Linus Torvalds has fixed a bug in the Linux Xe graphics driver that could cause a machine with an Intel Battlemage G21 GPU with 16 GB of VRAM to end up with| System Administration
When running a Gentoo Linux system in a restricted network environment, routing package downloads and repository synchronization through a proxy is sometimes...| James Cherti
After benchmarking halogen-flash-server against Nathanw v0.7.5 on the same Strix Halo box, halogen wins cold prefill but loses warm decode at production agent depth. Community 2–4× claims compare against the wrong baseline.| Sleeping Robots
The world of Linux offers a vast landscape of distributions, but few are as respected, stable, and foundational as Debian. For many users, the journey into this powerful operating system begins with a single file: the Debian ISO. This file is more than just an installer; it’s a gateway to a free, open-source computing environment renowned [...]| TechRechard
If you were wondering, it’s the SBOM thing that I mentioned the other day. Postgres Extensions in containers with full inventory, provenance and attestation. I’ve been using plenty of AI Agents to put this together. This blog is a little scattered (apologies) but as they say, I didn’t have time to write a short letter. … Continue reading →| Ardent Performance Computing
In the past couple weeks, I’ve learned more about renovate, SBOMs, provenance and attestations than I ever wanted to know. (But if I’m being honest, I do enjoy learning a bit more about…| Ardent Performance Computing
You built something. Maybe you used Cursor, Claude Code, or just had a long conversation with an LLM that ended up generating most of your codebase. Your app works. It solves a problem. You packaged it as a Flatpak because that's what you're supposed to do on Linux| Tech blog
There is nothing more satisfying than owning, end to end, the software and the hardware you use without relying on abusive cloud corporations. Internet is us, …| David Álvarez Rosa
1. Linus on AI Linus Torvalds' recent defense of AI in the Linux kernel sparked the predictable backlash, but the real debate is far more nuanced than that. This specific blog post is in response to Simon Willison's post of the quotation below on his website. As Linus says in his message: I realize that some people really dislike AI, but this is an area where I'm willing to absolutely put my foot down as the top-level maintainer. Linux is not one of those anti-AI projects, and if somebody has...| cleberg.net
1. What is GNU Stow? GNU Stow is described as a "symlink farm manager" on its homepage, which is true, but feels a bit underwhelming. Rather, I'd describe it as a tool to systematically and logically link, organize, and version control any files on your system. 2. Installation First things first: let's install Stow. I'm on macOS, so I run the following command: brew install stow To ensure it's installed correctly, check the version: stow -V 3. Stow Dotfiles Next, let's create a directory to u...| cleberg.net