brie

joined 2 years ago
 

Fedora 40's Changeset

It's mostly minor changes, but the most noticable one for me was that Gnome 46 now has expandable notifications, no extensions needed. (Making it impossible to read the full notification text was one of the design choices of all time.)

 

TL;DR: Update immediately, especially if SSH is enabled. xz versions 5.6.0 & 5.6.1 are impacted. The article contains links to each distro's specific instructions of what to do.

https://news.opensuse.org/2024/03/29/xz-backdoor/

Current research indicates that the backdoor is active in the SSH Daemon, allowing malicious actors to access systems where SSH is exposed to the internet.

In summary, the conditions for exploitation seem to be:

  • xz version 5.6.0 or 5.6.1
  • SSH with a patch that causes xz to be loaded
  • SSH daemon enabled

Impact on distros

  • Arch Linux: Backdoor was present, but shouldn't be able to activate. Updating is still strongly recommended.

  • Debian: Testing, Unstable, and Experimental are affected (update to xz-utils version 5.6.1+really5.4.5-1). Stable is not affected.

  • Fedora: 41 is affected and should not be used. Fedora 40 may be affected (check the version of xz). Fedora 39 is not affected.

  • FreeBSD: Not affected.

  • Kali: Affected.

  • NixOS: NixOS unstable has the backdoor, but it should not be able to activate. NixOS stable is not affected.

  • OpenSUSE: Tumbleweed and MicroOS are affected. Update to liblzma5 version 5.6.1.revertto5.4. Leap is not affected.

CVE-2024-3094

[–] brie@beehaw.org 1 points 2 years ago (1 children)

I guess it kind of depends. Not really sure what most people actually use, but for those who use MS's services, Office web isn't great, and Skype for Linux is rather temperamental. A lot of games work under Proton, but not all.

My perception of "average user" is probably skewed towards being not technical enough to troubleshoot on their own, but skilled enough to run through a tutorial of what keys to press. For someone used to Windows, patching things up is simpler than learning all the ins and outs of a new OS.

I don't disagree that most people would be fine using Linux, but there needs to be a compelling reason why Linux would be significantly better, or else the switching cost makes it not worthwhile.

[–] brie@beehaw.org 1 points 2 years ago (3 children)

When going from Windows to Linux, all of the tradeoffs are involved. For me what I don't like about Windows outweighs the pain points of my choice of Linux distro, but for some they'd weigh the sides and Windows still comes out on top.

Anyway my take is that Linux is better ideologically, but for the average consumer who justs want to use their favorite apps, Windows works fine and they're not really going to care until Windows piles on enough garbage to make switching worthwhile.

[–] brie@beehaw.org 1 points 2 years ago (5 children)

(Not the person you replied to)

Windows has issues, but so does Linux. My personal experience with Fedora (Silverblue) has been fairly good with minimal hassle (Gnome Software breaks sometimes with auto updates, but is leaps and bounds ahead of the Synaptic days). However, someone using other hardware, another distro, or using other software might have a lot more problems to contend with.

There's a lot of case-by-case nuance that in my opinion makes broad switch from A to B recommendations less meaningful than discussing the pros and cons and letting people decide on their own whether Linux could be useful for them.

1
submitted 2 years ago* (last edited 2 years ago) by brie@beehaw.org to c/operating_systems@beehaw.org
[–] brie@beehaw.org 0 points 2 years ago

Not sure about UI font color, but user style tweaks can change book font colors.

:root {
	color: yellow;
	background-color: navy;
}
[–] brie@beehaw.org 1 points 2 years ago

In the EEA, much more is on the way:

Bing's web search from the Start menu and the Edge browser can be uninstalled Third parties can add to the Windows Widgets Board feeds Third parties, like Google or DuckDuckGo, can provide the built-in web search results that Bing once had exclusively Windows users who choose to sync their Microsoft accounts will have their pinned apps and preferences synced, seemingly keeping their EEA-enabled choices Windows will now "always use customers' configured app default settings for link and file types"

Good to see Microsoft just blatantly confirming that these are anti-competitive measures rather than any sort of technical limitation.

 

I rebased my Silverblue install yesterday. The most notable change in my opinion is the tweaks to the UI and theming of Gnome 45.

Changeset

[–] brie@beehaw.org 0 points 2 years ago

I'd say the curve is just long, not steep. Most of the capabilities in Org-mode can in my opinion be ignored for a To-Do list.