Nixers Newsletter

Unix

• Vanilla OS
  https://vanillaos.org/
  https://github.com/Vanilla-OS/ABRoot
  https://documentation.vanillaos.org/docs/apx/
  https://ostreedev.github.io/ostree/introduction/

  An OS based on Ubuntu that has gained recent traction. It's another immutable istro where the core is locked, similar to silverblue. To achieve immutability it has created its own system called ABRoot and considers using OSTree in the future, which also does atomic upgrades. As for the package manager, it uses apx a package manager that runs programs within containers. All considered, this sounds pretty good.

• DistroWatch Weekly, Issue 1000
  https://distrowatch.com/weekly-mobile.php?issue=20230102

  That's a lot of issues, 1k, 827 more than the nixers newsletter, can you imagine. DistroWatch is a blessing to all of us, those deep reviews, the listing, ranking based on site views, and more, it's priceless.

• sd a script directory
  https://github.com/ianthehenry/sd

  "Write a solution to your own problems", that's the best motto ever and this is the case here. It structures commands within a tree and let you call them as subcommands to sd, sort of like what Plan9 achieves, pretty cool.

• Supply Chain, Are We Suppliers?
  https://www.softwaremaxims.com/blog/not-a-supplier

  A really well-put article summarizing the situation of software libraries reuse today. It puts into light why licenses providing the software as-is are so important in this equation.

• Getting acquainted with the Linux Kernel
  https://lwn.net/Kernel/LDD3/
  https://linux-kernel-labs.github.io/refs/heads/master/

  Two huge resource to learn about the Linux kernel and operating systems in general. I really enjoyed skimming through the second links, it covers a lot of ground.

• System Security Services Daemon
  https://sssd.io/

  Ever wondered how the identity management systems integrate with Unix, well you'd think they'd use PAM but they don't. They rely on SSSD instead, intercepting syscalls. See also issue 172 "FreeBSD integration with RedHat IdM".

• Linux Enumeration and Privilege Escalation Checks
  https://github.com/rebootuser/LinEnum

  Whether you're in a red team, or blue team, or even just want to make sure your system is secure, this tool can come handy.

• Find hidden Linux Kernel Modules
  https://github.com/jafarlihi/modreveal

  A utility to show possible rootkits that might be hidden as kernel modules.

• A Decade of HardenedBSD
  https://git.hardenedbsd.org/shawn.webb/articles/-/blob/master/hardenedbsd/2023-01_decade/article.md

  I've been reading a ton of access control content to feed my appetite for the article I'm currently in the process of writing, and HardenedBSD and TrustedBSD have come up a lot. HardenedBSD went further than TrustedBSD which introduced things like MAC policies, and it added ASLR and other interesting security features. There's also the personal aspect to the post, the story of the author, what brought them there, and what they're looking for in the future.

• systemd timer, architecture, and administration
  https://trstringer.com/systemd-timer-vs-cronjob/
  http://0pointer.de/blog/projects/systemd-for-admins-1.html
  https://opensource.com/sites/default/files/uploads/systemd-architecture.png

  In continuation with our series on Init systems and service managers, this week we focus on systemd huge service manager framework, specifically timers and general administration.

• File descriptors, pipes, terminals, user sessions, process groups and daemons
  https://biriukov.dev/docs/fd-pipe-session-terminal/0-sre-should-know-about-gnu-linux-shell-related-internals-file-descriptors-pipes-terminals-user-sessions-process-groups-and-daemons/

  A walk though some unix file manipulation and shell and terminal management through a couple of python examples.

• A new pager
  https://github.com/noborus/ov

  A pretty neat feature complete pager.

Life & Other

• Write more more
  https://candrewlee14.github.io/blog/i-will-write-more/

  Alright, alright, it's been a couple of motivational writing weeks, so let's keep it going! In 2023 I'll indeed write more.

• Security and privacy
  https://invisv.com/articles/privacy-and-security.html

  I find this sort of discussion confusing, because often the terms are misused and barely defined properly. As I'm currently writing on the topic of security I've found that the definitions can be conflicting, but once you settle on one that is scientifically sound (as in measurable) then you can move from there. One policy that is often taken as the definition of security is the CIA: confidentiality, integrity, and availability. Now if confidentiality contains the one of the users of the system, and not only the internals, their privacy is included.

Thoughts

People are usually afraid of change because they fear the unknown. But the single greatest constant of history is that everything changes. — Yuval Noah Harari

What a great quote to initiate the year, start with a change and growth mindset.

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• A Survey of (Linux) Init Systems
  https://www.linux-magazine.com/Online/Features/A-Survey-of-Init-Systems

  A quick tour of six different init systems on Linux.

• From WM to DE
  https://michaelneuper.com/posts/turning-a-window-manager-into-a-desktop-environment/

  A step-by-step guide of the pieces used to build a desktop environment. You don't often find such articles, it's the type that's good to send to newcomers that are wondering how to set their own DE from scratch.

• NixOS on the laptop
  https://bmcgee.ie/posts/2022/12/setting-up-my-new-laptop-nix-style/

  A continuation with immutable distributions, let's see how to setup a laptop with NixOS. It's interesting that you can even create the filesystems using nix scripts.

• The X11 Conservancy Project
  https://x11cp.org/
  https://codeberg.org/x11cp/x11cp

  A site dedicating to grouping and maintaining a list of X11 softwares that were created between the 80s and 90s. So far there's only one program in that list, so there's a long way to go.

• A year of building a terminal application
  https://textual.textualize.io/blog/2022/12/20/a-year-of-building-for-the-terminal/
  https://github.com/Textualize/textual

  A truly impressive feat from devs working on terminal tooling. The TUI they've come with is smooth and full of neat features (even animation!).

• Doing Repos the right way, the Zen of Comprehensive Archive Networks
  https://www.cpan.org/misc/ZCAN.html

  Notes on how CPAN philosophy works, in general. It's very: make it work, and put things together, no over the top over-engineering, and I like that.

• Use-after-free to a privilege exploitation using io_uring
  https://exploiter.dev/blog/2022/CVE-2022-2602.html

  The authors take a possible CVE and turn it into a real PoC. I admire this because usually CVEs are mostly abstract and theoretical, but real exploits based on them are rare.

• The TTY, again
  https://thevaluable.dev/guide-terminal-shell-console/

  With the amount of similar articles coming out, I guess you should get more and more familiar with this topic.

• Get your env right
  https://bvnf.space/blog/008-sudo-make-install.html

  A tale on how sometimes you should beware of the environment you run things in (or otherwise embrace containers).

Life & Other

• SuperNormal Stimuli
  https://www.sparringmind.com/supernormal-stimuli/

  I thought this was presented in a fabulous way, with illustrations and links to further research for those who are interested.

Thoughts

Happy end of year!
Let's hope for more adventures and cool newsletter links for the next one.

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• Using group passwords
  https://blog.mirch.io/2019/01/09/linux-persistence-idea-using-group-passwords/

  A feature I found myself recently writing about but that is rarely used these days: group passwords. In this article we see it from an attacker's perspective.

• Why polkit
  https://www.collabora.com/about-us/blog/2015/06/08/why-polkit-(or,-how-to-mount-a-disk-on-modern-linux)

  A very good article at explaining polkit in simple terms. A highly advised read if you've always wondered what or why this was needed.

• Linux TTY
  https://linuxtldr.com/tty-and-pty/
  https://linuxtldr.com/chvt-command/

  A quick historical detour and a couple of explanation of terminologies about terminals.

• Understanding Linux' Readahead
  https://lwn.net/Articles/888715/

  Lots of efforts put into documenting and refactoring the readahead code. I like this "documentation as a means for finding and fixing bugs"... "to ensure that I understood the code and ensure that others would be able to understand my motivation for changes to that code".

• Get some cool graphics in your terminal
  https://www.linuxlinks.com/linux-candy-ctree-christmas-tree-terminal/

  ctree is an xmas tree in the terminal.

• A small linux computer
  https://thelittleengineerthatcould.blogspot.com/2022/12/the-8-linux-computer.html

  "It looks like a microcontroller, but behaves like a UNIX machine." A struggling start to get things going on a miniature single board computer. I've always loved to try that out, but I would have no idea what to do with it other than posting on the internet that I got it running.

• Init process by YoLinux
  http://www.yolinux.com/TUTORIALS/LinuxTutorialInitProcess.html

  A generic look at the Linux init process, mostly SysV and systemd.

• What can you do with a PID
  https://will-keleher.com/posts/What-can-you-do-with-a-pid.html

  While these are sort of obvious for a lot of people, I still find it nice to have a whole list set up like this. It's pretty good for debugging.

• Persistent Memory Allocation
  https://queue.acm.org/detail.cfm?id=3534855

  An overview of some of the capability that persistent memory can bring to programming.

Life & Other

• Selfish Writing
  https://collabfund.com/blog/selfish-writing/

  It feels like every few weeks I'm posting inspiration and motivational posts about writing. Yet, I do indeed need that motivation right now, and I'm always excited to read blog posts.

• Breaking a Monopoly
  https://arstechnica.com/gadgets/2022/12/linux-amazon-meta-and-microsoft-want-to-break-the-google-maps-monopoly/
  https://overturemaps.org/

  A few tech giants get together to try to create a competitor to Google Maps, they'll achieve this through a foundation called Overture Maps that will help share and collectively strengthen each others map data. Now, in reality, how much they'll cooperate with one another is still something that remains to be seen.

Thoughts

Take a glance at "The Most Productive Ways to Disagree Across Cultures", it's a nifty article. These cultural trivia, differences, points of confluence, are often hidden or misinterpreted until the moment they finally float up and unfold on top of the water of our minds like lily pads. That shows how blind we can be without realizing it.

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• Custom Silverblue
  https://www.ypsidanger.com/building-your-own-fedora-silverblue-image/

  A lot of new jargon has emerged around immutable distros: "package entropy", "image-based desktop". It's fun to think that your OS could be a docker image.

• DAX and read-only memory file systems
  https://www.kernel.org/doc/html/v5.19/filesystems/dax.html
  https://www.kernel.org/doc/html/v5.19/filesystems/erofs.html
  https://lwn.net/SubscriberLink/917097/88e6e29487df7947/

  You know when they say you need a solution for a problem you created, then that's exactly what I thought when I read about Direct Access for files/DAX.

• Using certificates for SSH authentication
  https://lwn.net/Articles/913971/

  Another review of certificate hierarchy use with SSH, see also "SSH as a hierarchy" in 119.

• dir, vdir, and ls
  https://askubuntu.com/questions/103913/difference-between-dir-and-ls-terminal-commands

  Call me late, but I really didn't know dir was a command part of GNU coreutils.

• Even more talk on mimmutable
  https://lwn.net/SubscriberLink/915640/53bc300d11179c62/

  There's been quite a lot of talk about, and now it reached the Linux folks for inspo. (Yeah I know, it's a lot of lwn links this week)

• FreeBSD vs Linux
  https://klarasystems.com/articles/freebsd-vs-linux-networking/
  https://klarasystems.com/articles/virtualization-showdown-freebsd-bhyve-linux-kvm/

  While the titles are a bit cliché, the contents are pretty good with a lot of performance analysis.

• Your own IM and VOIP
  https://マリウス.com/run-your-own-instant-messaging-service-on-freebsd/
  https://www.linphone.org/
  https://computingforgeeks.com/how-to-install-kamailio-sip-server-on-ubuntu/
  https://www.alibabacloud.com/blog/how-to-setup-kamailio-sip-server-on-ubuntu-18-04_595714

  These days it's relatively easy to host these chat and video applications. The big issue is to get everyone else you want to communicate with to use them.

• An argument about not fixing what's not broken
  http://groups.di.unipi.it/~nids/docs/the_plan-9_effect.html

  While the argument portrayed in the article is sensible, it dismisses what research is about and it's purpose, it also favors specific narrow thinking instead of seeing a more holistic view of the environment explaining why Plan9 didn't prosper as much as its predecessor. It also will irks some people when it calls Plan9 a version of Unix, which it isn't...

• The birth of stderr
  https://www.spinellis.gr/blog/20131211/

  I love these small historical stories explaining where stuff come from, it's always something benign and hilarious.

• A reply to a couple of arguments on systemd
  https://shibumi.dev/posts/why-suckless-is-wrong/

  Lots of people don't like systemd for some one reason or another, but there's also a lot of mysticism surrounding the topic and frankly false assumptions too. This article tackles a couple of point, but with a tone that's definitely angry.

Life & Other

• Scams these days
  https://indeedjobscam.pages.dev/

  A bit technical, and also an entertaining read, that's why I added it.

• IPv6 is broken
  https://adminhacks.com/broken-IPv6.html

  An article that made it all around tech news websites. The conclusion most had in the comments was to blame the mentioned AS provider. That's probably the first thing that would come to mind, but I'd also fall down to the Five Whys.

Thoughts

A system that is trustworthy is not the same as a system we must trust. This distinction is important because systems that need to be trusted are not necessarily trustworthy.

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• Powerup your GNU Readline skills
  https://www.masteringemacs.org/article/keyboard-shortcuts-every-command-line-hacker-should-know-about-gnu-readline

  Not everyone is an emacs user, thus might not be familiar with all keybinds available. This article goes over some common and extra ones that are omnipresent all over software that rely on GNU readline.

• Creating your own TTF font on Linux
  https://gordonlesti.com/creating-a-handwritten-truetype-font-in-linux/

  Ever wondered if you could create your own font and how hard that would be, then this article is for you. It starts with letters on papers, scanning them, adjusting contrast, converting to vector graphic, from svg to character path, some adjustments, and here we go!

• Drag and drop integration with terminal
  https://blog.meain.io/2022/terminal-drag-and-drop/
  https://github.com/mwh/dragon

  While this works one way only, from terminal to other applications, it's something I've found myself requiring. I don't actually use the same method as in the post, I actually do the cumbersome part described in the intro: xdg-open . and drag the file from the file manager. It'd definitely be smoother with what's described here and it's actually genius to mix it with tmux.

• xcompose
  https://linux.die.net/man/3/xcompose

  You learn something everyday and last week I found that xcompose could actually be configured through a .XCompose in the home directory.

• UEFI boot
  https://www.happyassassin.net/posts/2014/01/25/uefi-boot-how-does-that-actually-work-then/

  A superbly written article about UEFI that covers many of the inner workings and misconceptions. If you have a few hours to spend, it's a highly recommended read.

• TPM Key Hierarchy
  https://ericchiang.github.io/post/tpm-keys/

  The latest TPM specs are very new. This is a sort of standard key hierarchy and usage for OS, similar to an HSM.

• runit
  http://smarden.org/runit/
  https://docs.voidlinux.org/config/services/index.html
  https://wiki.archlinux.org/title/Runit

  In continuation with the series on init systems, this week we take a look at runit. It is an extremely simple init/supervision system based on directories and scripts.

• Tending your digital garden
  https://www.taniarascia.com/digital-gardening/

  This topic has been one that keep emerging in the current zeitgeist, the past 2-3 years the terms have gotten polished and now it's something people talk about more openly even in small update blogs (which I find refreshing to read in general).

• Sustainability in IT
  https://blog.siphos.be/2022/09/sustainability-in-IT/

  An excellent brainstorming about what it takes to be sustainable in IT.

• Losing the magic
  https://lwn.net/SubscriberLink/915163/ba83480903b82cb8/

  The magic number at the start of structs were there because "The kernel community has, for many years now, tried to use type-safe interfaces rather than passing void pointers around, making it less likely that the wrong structure type will be passed into a function."

• SSH as a public service
  <gopher://phlog.z3bra.org/0/ssh-as-a-public-service.txt>

  Here's a neat trick to give public access to users via ssh that directly launches a special executable.

Life & Other

• 100 days to offload
  https://major.io/p/100-days-to-offload/

  A challenge that's super hard to achieve, unblocking your writer's block.

Thoughts

Not all who wander are lost, not all who are lost have wandered

https://www.publicstreet.org/derive

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• A tour of fzf
  https://www.redhat.com/sysadmin/fzf-linux-fuzzy-finder

  You know your tool is successful when lots of people start to talk about it in details, not just in a listicle but in deep details. If you haven't tried fzf yet, you're in for a life-changing paradigm.

• Inside the Linux CFS from 2.6
  https://developer.ibm.com/tutorials/l-completely-fair-scheduler/

  A follow up on last weeks 172 "Linux 2.6, the classic". This is a deeper dive into CFS and schedulers in general.

• The History and Future of Core Dumps in FreeBSD
  https://github.com/gwydirsam/bsd-coredump-history/blob/master/freebsd-coredump-history.org

  A paper going over how the coredumps work on FreeBSD, different types: full, mini, and text, and compres it with MacOS. It then goes to talk about future ideas regarding coredumps such as transfering over the network, compressing dumps, and how to modularized the dump code so that changing the behavior wouldn't need recompilation.

• Introduction to the Internet Protocols (1987)
  https://home.ifa.hawaii.edu/users/gmm/intro_ip/index.html

  An oldie doc about TCP/IP inner workings that is a blessing to read. "Of course this should be impossible, but well-designed networks are built to cope with "impossible" conditions."

• Wayland cool updates
  https://zamundaaa.github.io/wayland/2021/12/14/about-gaming-on-wayland.html
  https://www.phoronix.com/news/Wayland-Fractional-Scale-Ready
  https://github.com/flatpak/xdg-desktop-portal/issues/624
  https://github.com/flatpak/xdg-desktop-portal/pull/711

  A series of links discussion the introduction of fractional scaling in the Wayland proto, along with keyboard shortcut. The first link goes over how gaming rendering works on Wayland compared with X.

• mdoc (repost)
  https://mandoc.bsd.lv/man/mdoc.7.html

  A repost of issue 73 "mdoc". This is a one-page full documentation on how to write manpages using mdoc.

• OpenBSD Webzine
  https://webzine.puffy.cafe/issue-12.html

  I wasn't aware of this webzine project, it's pretty cool, sign up!

• Porting a Unix-like OS to your own CPU and compiler
  https://fuel.edby.coffee/posts/how-we-ported-xv6-os-to-a-home-built-cpu-with-a-home-built-c-compiler/
  https://nullpo-head.github.io/emcc-gaia-simu/xv6.html

  A behemoth student dream project. The team buils their own ISA, their own CPU, port xv6 to it, write their own stack for curses and more. Truly impressive.

• Unix's (technical) history is mostly old now
  https://utcc.utoronto.ca/~cks/space/blog/unix/UnixHistoryMostlyOldNow

  An article that has stirred a lot of discussion about what change really means: does it stop at the kernel or does it include user-space too.

• A pragmatic approach to shell completion
  https://dev.to/rsteube/a-pragmatic-approach-to-shell-completion-4gp0
  https://medium.com/@browninfosecguy/powershell-pipeline-182ea25c622

  The author brings forward a way to generate shell completion scripts dynamically, that is compatible with multiple shells.

• Reasoning about colors
  https://notes.neeasade.net/color-spaces.html

  A post I should've shared a long time ago about color spaces and how to reason about them. Very informative!

Life & Other

• The Ultimate Guide to ffmpeg
  https://img.ly/blog/ultimate-guide-to-ffmpeg
  https://developer.mozilla.org/en-US/docs/Web/Media/Formats/Video_codecs

  A well-rounded and very approachable guide to ffmeg, from start to end. Long time ffmpeg users won't learn much but it's a great reminder, or a must if you've always wondered about video encoding/decoding.

• I/O is no longer the bottleneck
  https://benhoyt.com/writings/io-is-no-longer-the-bottleneck/

  An article that was controversial mostly because of its title. I agree with the general argument as its presented. It's somewhat similar to "A book on Algorithms For Modern Hardware" in issue 144.

• Programming paradigm can be applied to more tha one place
  http://boston.conman.org/2022/11/25.1

  If one thing is true it's that there often are clans and holy wars between programming language advocates. This articles takes a step back to theories to make us remember that paradigms are paradigms and the things we learn somewhere, even research programming language (See "Ownership and capability, in language and hardware" in 171), can often be applied somewhere else.

Thoughts

Niklaus Wirth, wrote "the belief that complex systems require armies of designers and programmers is wrong. A system that is not understood in its entirety, or at least to a significant degree of detail by a single individual, should probably not be built." Not only have we built such systems, all our collective livelihoods depend on them!

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• FreeBSD integration with RedHat IdM
  https://vermaden.wordpress.com/2022/11/17/connect-freebsd-freeipa-idm/

  I'm currently researching the topic of access control and I had stumbled upon the above RedHat solution of FreeIPA. The article goes into how it can be integrated with FreeBSD so it finds a purpose outside the corporate space.

• Solving software issues using hardware
  https://spectrum.ieee.org/computers-its-time-to-start-over

  In the past years we've seen a lot of software and hardware bugs leading to vulnerabilities (spectre and meltdown). There's a new mindset of compartmentalization at the hardware level, such as project CHERI.

• Averting excessive oopses
  https://lwn.net/SubscriberLink/914878/dca7e15b44396f16/

  Oopses are kernel crashes, by default Linux keeps going trying to keep the system alive as much as possible. The researcher here found that this could possibly lead to security vulnerabilities, and so set up a way to monitor oopses from user-space along with a configurable hard-limit to them before rebooting cleanly. (NB: subscriber only content, if you have the ability it would be nice to contribute to LWN).

• Linux 2.6, the classic
  https://www.linuxjournal.com/article/6530
  https://www.theregister.com/2022/10/02/linux_kernel_6_0_released/

  One of the most well-known version that came with a lot of new features such as a new O(1) scheduler with SMP scalability (which afterward has been improved). I like how changes were explained properly and in an approachable way on linuxjournal, compare it with other articles about the latest stable release.

• The Orange Book
  http://ftp.ntu.edu.tw/pub/linux/libs/security/Orange-Linux/refs/Orange/Orange0-4.html#ss4.1

  A reference book that set up clear definition of what secure systems requirements and different levels should be about, along with a discussion on MAC.
  "Secure systems will control, through use of specific security features, access to information such that only properly authorized individuals, or processes operating on their behalf, will have access to read, write, create, or delete information. Six fundamental requirements are derived from this basic statement of objective: four deal with what needs to be provided to control access to information; and two deal with how one can obtain credible assurances that this is accomplished in a trusted computer system."

• Beowulf cluster
  https://en.wikipedia.org/wiki/Beowulf_cluster
  http://ibiblio.org/pub/Linux/docs/HOWTO/archive/Beowulf-HOWTO.html#ss2.2
  https://webhome.phy.duke.edu/~rgb/brahma/Resources/beowulf/

  This is the equivalent of RAID but for a computer cluster. There's a link to the original Beowulf cluster project ran for NASA. Similar to the Orange Book, we have different classifications of clusters.

• An unexpected bug
  http://blog.pkh.me/p/35-investigating-why-steam-started-picking-a-random-font.html

  2038 is indeed going to be very fun, ... Get ready!

• OpenBSD immutable userland, the quest continues
  https://undeadly.org/cgi?action=article;sid=20221120115616

  The syscall to make mmap immutable mimmutable is close to done.

• OpenZFS on OS X
  https://openzfsonosx.org/wiki/Install
  https://github.com/openzfsonosx
  https://support.apple.com/en-lb/guide/security/sec8e454101b/web

  Since OS X is a BSD derivative, you'd think it would be simple to run ZFS on it however it isn't. It is loaded as a kexts, kernel extension, which usually need to be signed, loaded at boot, and explicitly enabled.

• Criticizing Computers
  https://annasofia.xyz/2022/11/05/criticizing-computers.html

  Your typical rant about software quality decline, over-reliance on hardware improvement, and more. The article talks about pipeable programs, and argues that most GUIs aren't, see also "Relational Pipes" in 137.

Life & Other

• Discussion on state machines
  https://www.embeddedrelated.com/showarticle/543.php

  I found that this article did a good job at covering the topic of state machines implementation using C.

Thoughts

"You know what's truly weird about any financial crisis? We made it up. Currency, money, finance, they're all social inventions. When the sun comes up in the morning it's shining on the same physical landscape, all the atoms are in place." ― Bruce Sterling

And now that there are talks of central banks digital currency along with cryptocurrency amongst others, plus a global economic crisis, this quote is even more obvious. We're left dumbstruck wondering why all this is happening.

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• The path to Linux
  https://www.abortretry.fail/p/the-path-to-linux

  One of these articles that take you on a historical journey leading to the present situation, with pitstops on details concerning government and corporate interests.

• Simple pipelines to help machine learning training
  https://jott.live/markdown/ml_pipes

  Making programs pipeline friendly is something that could make some tasks easier. Here's an example of doing this for a machine learning project.

• Why the ISO format has to die
  https://easyos.org/about/why-the-iso-format-has-to-die.html

  A series of posts and points on why images format on USB should be used instead of ISO.

• Debugging slow shell
  https://pickard.cc/posts/why-does-zsh-start-slowly/

  I remember similar posts in the newsletter about finding out why a shell starts slowly such as "Making zsh faster" in 79, but I'm sure there were others. This is one is similar but uses a profiling tool.

• immutable userland mappings on OpenBSD (Applied)
  https://marc.info/?l=openbsd-tech&m=166203784715942

  The changes from "immutable userland mappings on OpenBSD" in 161 that are finally taking place.

• Ownership and capability, in language and hardware
  https://github.com/microsoft/verona
  https://www.cl.cam.ac.uk/research/security/ctsrd/cheri/
  https://www.cl.cam.ac.uk/research/security/ctsrd/cheri/cheribsd.html

  If you've heard of Rust's ownership mechanism, then you'll also understand Verona ownership idea as something similar. CHERI, or Capability Hardware Enhanced RISC Instructions, are extensions to RISC ISAs to add memory-protection and compartmentalization.

• OpenBSD Kiosk
  https://dataswamp.org/~solene/2022-10-11-openbsd-kiosk.html

  We previously shared a couple of posts about kiosks in general, such as "Kiosks" in 154 and "Unix in the library" in 32. This one is also straight forward, a few of lines to start a browser in fullscreen.

• MPV with Pipewire backend and Xorg present
  https://www.phoronix.com/news/MPV-0.35-Released
  https://cgit.freedesktop.org/xorg/lib/libXpresent/tree/README.md
  https://cgit.freedesktop.org/xorg/proto/presentproto/tree/presentproto.txt

  Two updates that you can look forward to in MPV. I didn't know about the present extension either so I've added links to check it out.

Life & Other

• Learning to learn
  https://cambridge-community.org.uk/professional-development/gswmeta/index.html
  https://journals.sagepub.com/doi/10.1177/0027432114552569

  Metacognition is often indirectly mentioned in the tech world. I believe it could possibly be helpful to learn about what learning to learn is about.

• Preserving content for the future
  https://www.dpconline.org/docs/miscellaneous/events/270-future-r-d-wheatley/file
  https://blog.archive.org/2022/11/15/digital-books-wear-out-faster-than-physical-books/
  https://www.theguardian.com/technology/2003/jan/09/onlinesupplement3

  Bitrot is something we mentioned in other issues, however I couldn't find those about digital dark age, so here we are.

Thoughts

"The spectacle is not a collection of images, but a social relation among people, mediated by images." — Guy Debord, The Society of the Spectacle

Don't forget the online sphere is often a digital world of facades and templates. The rules we make up are all spectacles that we willingly choose to abide by. It's good to be reminded of that.

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• Overview of "The Linux Scheduler: a Decade of Wasted Cores"
  https://blog.acolyer.org/2016/04/26/the-linux-scheduler-a-decade-of-wasted-cores/

  Similar to "papers we love", this newsletter goes over papers and explain them in a more approachable manner. On the paper itself, it's a fantastic one that dives into the issues with how the Linux scheduler was initially made without multi-core and NUMA in mind, which led to a lot of slow downs.

• Linux Boot Partitions
  https://0pointer.net/blog/linux-boot-partitions.html

  This is in continuation with "UAPI — User-Space API". The blog posts goes into depth into what the current boot partition space on Linux is like and how it possibly could evolve.

• ZFS Boot menu
  https://zfsbootmenu.org/
  https://github.com/zbm-dev/zfsbootmenu/

  In contrast with the above, we take a look at a ZFS boot menu. The bootloader is implemented as a small Linux distro and allows manipulating ZFS pools that would contain different images/OSes.

• backlight testing on Linux
  https://hansdegoede.livejournal.com/27130.html

  A change to /sys/class/backlight that should make things simpler. If you got two entries in there, then it will affect you.

• If your process starts with X it might be acting differently on X
  https://lore.kernel.org/lkml/20221105222012.4226-1-Jason@zx2c4.com/
  https://gitlab.freedesktop.org/mesa/mesa/-/blob/main/src/gallium/frontends/va/image.c#L240
  https://www.phoronix.com/news/Linux-DRM-Process-Start-With-X

  A kludge that was committed so that a process wouldn't affect another, and got forgotten.

• How To Corrupt An SQLite Database File
  https://www.sqlite.org/howtocorrupt.html

  SQLite being a file-based db, you'd guessed there are a few ways to corrupt it, from rogue processed, to use of the wrong file descriptor, filesystem issues, hardware failures, etc..

• Unix in automotive
  https://blog.centos.org/2022/03/centos-automotive-sig-announces-new-autosd-distro/
  https://web.archive.org/web/20110903112040/http://www.mp3car.com/show-off-your-project/76345-2004-subaru-impreza-wrx-carpc-install.html
  https://docs.automotivelinux.org/en/lamprey/

  It's been quite some time that Unix systems have made their ways into the automotive industry, both as entertainment system and as core piece. While this has always been possible, we now see more corporate touch pushing it. See also "Kernel Fastboot" in 140.

• Another container from-scratch explanation
  https://earthly.dev/blog/chroot/

  This one emphasizes on chroot, even though there are countless other syscalls involved in containarization. See also "Container piece by piece" in 142, "Containers from scratch" in 51 and "Docker Internals" in 105.

• User-Agent Reduction
  https://www.akamai.com/blog/developers/user-agent-reduction

  I really thought that these days user-agents were mostly useless. Yet, I couldn't be further from the truth, firewalls, tracking/ads, and filter tech are all using it.

• f.lux, but for your house
  https://tylercipriani.com/blog/2022/10/17/whole-house-circadian-lighting-with-home-assistant/

  This is an over engineered upgrade on ambient light systems. See also "Want to try something more responsive than of flux/redshift?".

Life & Other

• More ideas on what to blog/discuss about
  https://simonwillison.net/2022/Nov/6/what-to-blog-about/

  It's tough to write and share what you learn, blogging is the best way to keep track of what you were doing, a sort of diary.

Thoughts

I have always wished for my computer to be as easy to use as my telephone; my wish has come true because I can no longer figure out how to use my telephone." - Aloha (on an HN thread)

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• UAPI — User-Space API
  https://uapi-group.org/specifications/
  https://github.com/uapi-group/specifications

  Currently three sets of specifications, boot loader menu entry specs, an extension of the XDG base dir, and discovery of usual partitions under GPT based on uuid.

• Hishtory
  https://github.com/ddworken/hishtory

  I'm one of these person that keeps very big shell history for later reuse. This project is a more advanced version of that mindset.

• OpenSSL Sec Advisory
  https://www.openssl.org/news/secadv/20221101.txt

  It seems a lot of issues in TLS comes from parsing ASN.1 X.509 certs. Even with all the static checks and sanity, we're not fully covered.

• The Golden Age of Ballooning
  https://9front.org/releases/2022/10/31/0/

  Development never ceases, if you weren't aware, the release pace is every 6 months

• Powertop
  https://github.com/fenrus75/powertop

  We've already seen this topic but it's always a great reminder. See also issue "Linux power management" in issue 51.

• Setting up home permissions
  https://distrowatch.com/weekly.php?issue=20221031#qa

  A pretty basic overview of the typical Unix permissions and recommendations on limiting it for home directories.

• Daemon Management Under systemd
  https://www.usenix.org/system/files/login/articles/login_june_06_jedrzejewski-szmek.pdf

  A general overview of multiple aspects of systemd's daemon management.

Life & Other

• Political critics of software, does it matter?
  https://unixsheikh.com/articles/is-criticizing-tech-on-political-grounds-valid.html

  A lot of valid points have been raised in this article. What do you think?

Thoughts

No == "can't you be more creative than that?"

The newsletter is a bit shorter this week, I was on holiday and didn't get the time to read more content.

Have a great start of end of day, wherever you are in the world!

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• FreeBSD's package management quick history
  https://klarasystems.com/articles/a-quick-look-at-the-history-of-package-management-on-freebsd/

  A look at some of the history of FreeBSD's package managers, from inception port tree, to the newer pkgng.

• Config file for malloc
  https://man.openbsd.org/OpenBSD-5.3/man5/malloc.conf.5#MALLOC_OPTIONS

  I'm not sure if this is present on other systems, but openBSD offers an malloc.conf file with different options ranging from security to optimization, but mostly security.

• Rethink Service Managers
  https://skarnet.com/projects/service-manager.html

  The author of the s6 process supervision system takes us on a ride to understand the requirement around service management.

• How the clipboard works
  https://whynothugo.nl/journal/2022/10/21/how-the-clipboard-works/

  We already dived a bit into the keyboard (X11) in "Dear old vain teaches us yet again" in 34 and "X11 Clipboard" in 9. This one focuses on Wayland, which clipboard management standard was a real pain before (and probably still now).

• Is the Unity Desktop better or good today?
  https://www.dedoimedo.com/computers/unity-desktop-2022.html

  If you've ever used Ubuntu with Unity desktop then none of the content of that page should be new. It stands as a review in a time where Ubuntu has moved to GNOME and where Unity is seen as a soon-to-be-unmaintained project.

• Free space with ZFS
  https://taras.glek.net/post/curious-case-of-maintaining-sufficient-free-space-with-zfs/

  A case of delayed deletion on ZFS due to multiple factors, be it because it's transactional, because of multiple checks, because of journaling, or deduplication checks, queueing, etc..

• Helping people with issues on their Linux machine
  https://matklad.github.io/2022/10/19/why-linux-troubleshooting-advice-sucks.html

  Most of the comments related to this article rotate around different mentalities in sending feedbacks: by providing snippets to try out directly, or to actually spend some time to understand what's happening, or a combination of both, or maybe just a RTFM.

• What can you epoll
  https://darkcoding.net/software/linux-what-can-you-epoll/

  Async/non-block everything to make it event/notification driven!

• A consideration to drop i486 in Linux
  https://itwire.com/business-it-news/open-source/removing-i486-support-in-linux-only-at-discussion-stage-torvalds.html

  Some system pick which older hardware they support, others choose to keep up backward compatibility with toasters.

• Another blog posts about setting up a smartcard
  https://pandasauce.org/post/how-i-picked-set-up-smartcard/

  This one relies on NitroKey and GPG.

• Unix time issues
  https://www.netmeister.org/blog/epoch.html

  A blog post listing a couple of issues with unix time, differences between Unix-like OSes, and a lot of play with Y2K38.

Life & Other

• Do you want to be tracked :D
  https://noyb.eu/en/where-did-all-reject-buttons-come

  Some great numbers on these cookie consent popups.

Thoughts

Why think! We have computers to do that for us. — Jean Rostand

Jean Rostand was a half-baked futurist/scholar in biology and other fields, interested in human evolution along with the degeneration of mankind and how to remediate it. A more famous quote of him is "Kill one man, and you are a murderer. Kill millions of men, and you are a conqueror. Kill them all, and you are a God."

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• MultiPath TCP
  https://www.multipath-tcp.org/
  http://multipath-tcp.org/data/MultipathTCP-netsys.pdf
  https://freebsdfoundation.org/project/multipath-tcp-for-freebsd/
  https://www.freebsd.org/status/report-2020-10-2020-12.html#Scalable-routing-multipath-support
  https://www.multipath-tcp.org/pmwiki.php/Users/Android

  MultiPath TCP is a cool concept that is starting to gain more traction, along with other protocols and stacks that allow consistent and reliable use over different networks and interfaces (mosh for instance). Android devices also have the option to use WiFi and mobile data at the same time.

• Lash#Cat9 a newcomer to the Arcan land
  https://arcan-fe.com/2022/10/15/whipping-up-a-new-shell-lashcat9/

  A rethinking of what shell issues are and how it could be better. As usual Arcan is driving its own future, with novel ideas, touching things others wouldn't even try in the desktop environment space. It's a sort of mix of fish shell along with more ideas. Kudos!

• nosh
  https://web.archive.org/web/20151115152101/http://homepage.ntlworld.com/jonathan.deboynepollard/Softwares/nosh.html
  https://web.archive.org/web/20151023055305/http://homepage.ntlworld.com/jonathan.deboynepollard/FGA/daemontools-family.html
  https://github.com/zoujiaqing/nosh/tree/master/source

  To continue the series on init/service managers, we're looking at nosh, which is now apparently unmaintained. It is a pretty advanced init system, well-thought, covering multiple features in a nice way. It is part of the daemontools family, which is explained in the second link.

• Tracing Linux kernel with retsnoop
  https://nakryiko.com/posts/retsnoop-intro/
  https://github.com/anakryiko/retsnoop

  retsnoop is a tool that relies on BPF to help debug and trace Linux kernel issues.

• User input cleaning
  https://codeofhonor.substack.com/p/escaping-user-input-is-ridonkulously

  Some thought from someone in the security industry about the security theatre that sometimes happens around user-input sanitization. There's good ideas in there, and a lot of fun rant too.

• A good personality
  https://linux.die.net/man/2/personality
  https://linux.die.net/man/8/setarch

  These are two features that are used to swap between architectures or binary formats. I've seen personality mainly used in chroot environment to run 32 bit on 64 bit systems, but if anyone got more use of this let me know, I'm interested.

• Udica
  https://github.com/containers/udica

  Generating your own SELinux policies is a painstaking task. You should most often rely on the reference policy (see issue 165). With a tool such as udica, you can more easily generate profiles for container scenarios (at least the usual: docker, podman, containerd, etc..).

• KataOS
  https://www.theregister.com/2022/10/17/google_kata_os/
  https://opensource.googleblog.com/2022/10/announcing-kataos-and-sparrow.html

  You've heard of ChromeOS, Android, and Fuchsia, now it's time for KataOS.

• Exotic Silicon Blog
  https://archive.ph/3gziv
  https://archive.ph/Drd9k
  https://research.exoticsilicon.com/articles/candlelit_console
  https://research.exoticsilicon.com/series/real_programming

  A truly amazing and full of inner jokes blog but that unfortunately went offline. Peruse whatever is left, and if you can find better archives of it, please let me know.

• FreeBSD's Firecracker
  https://www.daemonology.net/blog/2022-10-18-FreeBSD-Firecracker.html
  https://firecracker-microvm.github.io/
  https://github.com/firecracker-microvm/firecracker/blob/main/docs/getting-started.md

  Firecracker is a VMM, virtual machine manager/monitor. The big news is that it now runs on FreeBSD. Now why run this instead of another VMM, I'm not sure, but there's a lot of AWS branding on this.

Life & Other

• Better check this
  https://ciechanow.ski/archives/

  A blog full of explorable explanations done beautifully. See also "Awesome GAMES for kids!" in 23 and "This week we have fun in space" in 100.

Thoughts

"Experience is the name everyone gives to their mistakes." — Oscar Wilde

This is related to the quote in issue 125, "Experience is what you get when you didn't get what you wanted.".

All and all, it seems that anything wrong, unexpected, and mistakes, will lead to more experience. Isn't that a tautology: Anything new will be an experience.

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• Beyond process supervisors
  http://catern.com/supervisors.html

  In continuation with the series on init systems, let's read more about process supervision and beyond. The article makes the point that not all long-running child-processes should necessarily be daemons, they could rely on their normal-process parent instead.

• Historical GUI
  https://guidebookgallery.org/

  A compendium gallery of user interfaces (gui, components, and icons) from different OSes, along with tutorials, ads, and lots of great content. It was shared on the forums by seninha but I thought it was too good not to push again in the newsletter.

• Unix Signals Age
  https://utcc.utoronto.ca/~cks/space/blog/unix/SignalsHowOld

  Unix history has become it's own research topic, people become archaeologist of the gritty details in it and attempt to discover more and more.

• Subtitle Editors
  https://www.debugpoint.com/3-great-subtitle-editors-in-linux-systems/

  I had never really given any thought about such software before. Now if needed I could possibly write my own subtitle files or edit existing ones.

• NILFS on Linux
  https://dataswamp.org/~solene/2022-10-05-linux-nilfs-filesystem.html

  NILFS is a special file system that not many have heard of but that has a cool feature worth mentioning. Namely, the snapshot/checkpoint feature is what the article focuses on.

• tar without gzip option, is that fast? https://lowendbox.com/blog/how-much-faster-is-making-a-tar-archive-without-gzip/

  With tar we often remember a few flags and reuse them as-is but there comes a time when it's not necessary to compress the archive. In such case, compressing will consume way more processing power than what you'd actually want, especially if you'll extract the data right after.

• Perceptual Hashing
  https://matt-rickard.com/perceptual-hashing

  I swear I thought linked something about perceptual hashing before. This is somewhat related to differential privacy (see issue 45).

• Firefox speed up on macOS
  https://hacks.mozilla.org/2022/10/improving-firefox-responsiveness-on-macos/

  I had no clue Firefox uses its own memory allocator. We also learn about abstraction of lock mechanism that aren't as efficient, and the "hack" to make it faster on macOS.

• Embedded Linux
  https://ubuntu.com/blog/what-is-embedded-linux
  https://ubuntu.com/blog/embedded-systems

  A well-rounded quick overview of the Linux embedded landscape (Apart from the Ubuntu Core placement). In continuation with our review of RTOS in last week's issue.

• How wine works
  https://werat.dev/blog/how-wine-works-101/

  If you've ever wondered how wine worked then this is for you, and even if you didn't, then it's still insightful. It dives into the linker, executable format, and the actual reason why we say that we don't need an emulator.

Life & Other

• Ripples on the brain
  https://nautil.us/how-we-remember-last-weekend-240328/

  A theory related to the soft-problem of consciousness that argues ripples are behind it.

• Get that habit out of your mind
  https://bakadesuyo.com/2022/10/ritual-2/

  We all have habit/routines/rituals that we perform. What lies behind them, are they beneficial, how so?

Thoughts

The only truly secure system is one that is powered off, cast in a block of concrete and sealed in a lead-lined room with armed guards. — Gene Spafford

Is that why cold storage is great?

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• Composable desktop environment
  https://mmcthrow-musings.blogspot.com/2020/04/a-proposal-for-flexible-composable.html

  Sounds like the author of the first post has never heard of freedesktop standards, dbus, desktop portals, Arcan, and even of Plan9's plumbing. See also this thread on the forums.

• Password expiry on Linux with chage
  https://linux.die.net/man/1/chage
  https://linux.die.net/man/8/faillock
  https://man.openbsd.org/login.conf

  I'm not sure what's the equivalent command on OpenBSD but the same feature is present there too.

• The Inevitability of Failure: The Flawed Assumption of Security in Modern Computing Environments
  https://web.archive.org/web/20070621155813/http://jya.com/paperF1.htm

  A classic paper pointing out some of the features that would be needed at the OS level, not application level, to have a secure environment.

• Comparing SystemTap and bpftrace
  https://lwn.net/Articles/852112/

  There are a few system tracing utilities, DTrace, SystemTap, bpftrace, etc.. They make more sense when comparing them together in a generic overview, like here.

• Printing the easy way
  https://unixorn.github.io/post/home-assistant-printer-power-management/

  With smart devices these days it's pretty simple to setup such system. (A huge license on a one line file, are you as surprised as me?).

• Don't reinvent the wheel
  https://ilya-sher.org/2020/01/04/use-dumb-shell-dont-reinvent-the-wheel/

  The premise of the article is mostly based on interpreting an argument as a slipery slope. The discussion around these types of articles can bring some good ideas.

• Real-time programming on Linux
  https://shuhaowu.com/blog/2022/01-linux-rt-appdev-part1.html

  A great, pragmatic, and understandable series of articles on real-time programming. Highly recommended!

• Modern unix
  https://github.com/ibraheemdev/modern-unix

  Want to change up from classic Unix userland, try to swap a few of the commands with these fancy colorful ones.

• InitKit
  https://github.com/InitKit/InitKit

  This week we're checking another init system, one also trying to be an in-place swap of systemd. The project is still in early phase and the docs are lacking, but the idea is promising.

• SELinux Reference Policy
  https://github.com/SELinuxProject/refpolicy/wiki

  Without this project, SELinux would be an extreme pain to use. It has presets for rules related to user, role, type, and sensitivity, all the goodies from SELinux.

Life & Other

• Eternal September
  https://en.wikipedia.org/wiki/Eternal_September

  Is that a rosy-retrospection, or do newcomers really spoil everything?

Thoughts

There are only two hard things in Computer Science: cache invalidation and naming things. — Phil Karlton

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• Emulating input devices
  https://docs.kernel.org/input/uinput.html
  https://github.com/ReimuNotMoe/ydotool

  uinput is a module that allows creating virtual devices on Linux to emulate input devices in user-space. An example of a tool that uses it is ydotool, it shows how you don't need necessarily to have a graphic server such as X11 to do these things.

• AWK, a better understanding of field manipulation
  https://kau.sh/blog/awk-1-oneliner-dollar-explanation/

  A rich explanation of an example that brings up many features of AWK and slowly but certainly makes us grasp the intricacies of it.

• Funky way to write crontab and achieve results
  https://blog.healthchecks.io/2022/09/schedule-cron-job-the-funky-way/

  A post about trying so much with a technology you reach a point where you can play with its intricacy, in this case its crontab syntax twists.

• Orderly
  https://github.com/andrewchambers/orderly
  https://github.com/andrewchambers/orderly/blob/master/man/orderly.1.md

  In continuation with our series on init and service manager systems, this week we take a look at "orderly". This project aims at a simple, linear, foreground running, service management and supervision system. It targets container environment but can be used anywhere.

• Port Knocking
  https://www.linux.com/news/critique-port-knocking/
  https://www.idealintegrations.net/what-is-port-knocking-and-why-should-you-use-it/
  https://linux.die.net/man/1/knockd

  Obfuscation-as-security or security through obscurity is not a very good security practice. Yet, as an additional layer of security it could help thwart simple attacks.

• The Insecurity of OpenBSD
  https://allthatiswrong.wordpress.com/2010/01/20/the-insecurity-of-openbsd/

  To implement strong access control, MAC, and isolation or instead to focus on minimizing attack surface and correctness. OpenBSD has chosen the later, however, recently with pledge/unveil we're seing that it's also implementing isolation in its own way.

• "X For Linux", but it's always "Linux in X"
  https://github.com/haileys/doslinux
  https://github.com/macbian-linux/macos-subsystem-for-linux
  https://learn.microsoft.com/en-us/windows/wsl/about

  This recent naming trend regarding emulating or running in a vm a Linux box within another OS is funny.

• Trying out Plan9 again
  https://boxbase.org/entries/2020/nov/1/return-to-plan9/

  There's always something to learn by exploring other OSes, especially Plan9. I wasn't aware of the wloc command, I would really like to have something as easy for X11/Wayland.

• Where do argc and argv come from?
  https://briancallahan.net/blog/20200808.html

  A dive into how argc/argv are passed to programs on OpenBSD (calling convention).

• A long running bug
  https://www.phoronix.com/news/Linux-AMD-Old-Chipset-WA

  A fix for old AMD hardware that was related to idle operation lead to downgrade for the efficiency of more modern processors which didn't need the fix. The new benchmarks are clearly showing that anyone with AMD should update to the latest kernel and will notice a difference.

Life & Other

• It always degenerates real quick on the internet
  https://fringeassociation.com/2019/01/07/2019-my-year-of-color/
  https://fringeassociation.com/2019/01/12/words-matter/

  An online example I caught in a book I was reading about how online comments and misrepresentation quickly happens online. In the comment section it starts to go downhill starting at "Alex"'s comment. This is related to "Social Cooling" in issue 160.

Thoughts

The most potent weapon of mass destruction is the humiliated mind — Dr Evelin Lindner

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• Multiseat example usage
  https://www.apalrd.net/posts/2022/multiseat_intro/

  I've read a lot about multiseat systems but never really saw anyone use one. I've also heard it's used in car entertainment systems but I got no more info on that. See also "Multiseat" in 27.

• Linux kthreadd
  https://www.cs.fsu.edu/~cop4610t/lectures/project2/kthreads/kthreads.pdf
  https://stackoverflow.com/questions/17988526/what-is-kthreadd-process-and-children-and-how-it-is-different-from-init-and-chil
  https://www.kernel.org/doc/Documentation/kernel-per-CPU-kthreads.txt
  https://unix.stackexchange.com/questions/152819/how-interpret-kworker-threads-names
  https://access.redhat.com/discussions/683863
  https://man.openbsd.org/kthread

  kthreads on Linux are a barely documented feature of Linux, yet everyone asks themselves what is up with them showing up in the process tree with as parent PID 2 kthreadd. One simple explanation is that they are threads as kernel modules. The 5th link give at least an explanation of some of them, which is insightful when trying to debug what is taking a lot of processing. They are also present on OpenBSD but in a different way.

• Random PIDs
  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sys/kern/kern_fork.c#rev1.8
  https://svnweb.freebsd.org/base/stable/4/sys/kern/kern_fork.c#rev53842
  https://sysctl-explorer.net/kernel/ns_last_pid/
  https://utcc.utoronto.ca/~cks/space/blog/unix/PidRollover

  We're used to random PIDs, at least that sounds like a good idea, but that wasn't always the case and still isn't the case on Linux. "If something can be random, make it random."

• Linux RNG's evolution
  https://www.zx2c4.com/projects/linux-rng-5.17-5.18/inside-linux-kernel-rng-presentation-sept-13-2022.pdf

  A look inside the Linux kernel RNG and its features and evolution.

• What's AppArmor
  https://medium.com/information-and-technology/so-what-is-apparmor-64d7ae211ed

  Unlike a lot of solutions for isolating software today, AppArmor is an easy MAC to use. It doesn't require modifying the source code like some other privilege separation implementations need (landlock/seccomp, capsicum, unveil/pledge, etc). It works by having a profile per application/path that will decide what access is allowed. Like the name implies, it is suited per App policies, and not really as a system-wide access control.

• Eavesdropping On Serial
  https://hackaday.com/2022/09/07/linux-fu-eavesdropping-on-serial/
  https://github.com/geoffmeyers/interceptty

  A post about interceptty, how to use it and interpret its output.

• InitWare
  https://github.com/InitWare/InitWare
  https://github.com/InitWare/InitWare/wiki/Architectural-plan

  In continuation with last week's "dinit" of 162, we take a look at another lesser-known init system/service manager InitWare. It is highly portable and modular. It offers a job scheduler, a logging system, and more. Internally, it's a sort of in-place replacement for systemd while making every piece optional instead of monolithic. It has unit files and uses svcctl, sessionctl, and evlogctl as replacement for systemctl, loginctl, and journalctl commands respectively. An interesting project to follow if you like some of the ideas of systemd but not the all-encompassing system you'd have to buy into.

• OS-Release
  https://www.freedesktop.org/software/systemd/man/os-release.html

  I never really pondered about why this file exists or if there were others like it, I just knew it was sort of standard.

• Breaking LUKS encryption
  https://eforensicsmag.com/breaking-luks-encryption-by-oleg-afonin/

  While the article focuses on Elcomsoft Forensic's proprietary tool on Windows, the first few parts are good insights into disk encryption features.

• Avoid loosing what's important
  https://xenodium.com/rm-important-txt-oh-sht/

  This post shows how to use the system trash (here macOS) interfacing with emacs. This is related to a discussion on nixers and the specs.

Life & Other

• scooby-doo by-doo
  https://minikino.org/articles/why-do-we-do-what-we-do/

  "To fully appreciate a great ending, I think you must first understand the beginning and the middle." Related to last week's "Need for closure", here we can clearly see it in the intro.

• Reasons you aren't updating your personal site
  https://brianlovin.com/writing/reasons-you-arent-updating-your-personal-site

  A couple of reasons why it's hard to maintain an activity in general, I think all of the ideas could be extended for any hobbies.

Thoughts

• Thought Terminating Cliché (bis)
  https://prowritingaid.com/thought-terminating-cliche

  It's an idea we've dealt with in a previous newsletter but that I think should be reviewed now and then.

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• A look at the future after POSIX
  https://www.usenix.org/publications/loginonline/transcending-posix-end-era

  The article summarizes some of POSIX abstractions, files, processes, vm, etc.. To then propose novel ideas that go beyond them: computation offloading to domain specific cores, async IO, cross machine APIs, etc..

• BSD Auth
  https://blog.lambda.cx/posts/how-bsd-authentication-works/

  BSD Auth, originating from BSD/OS, wasn't initially part of OpenBSD but the choice was made to ditched PAM in favor of it. In a way, it's similar to PAM, one big difference is the use of external programs and not libraries.

• PAM Duress
  https://github.com/nuvious/pam-duress

  I think that's one of the example of something that solves really well a problem you didn't even think you could have.

• If it ain't broke don't fix it or should we release more often
  https://www.redhat.com/en/blog/balancing-if-it-aint-broke-dont-fix-it-vs-release-early-and-often

  The type of blog posts I like: lots of life stories, some brainstorming, but everything left to the reader to assess, no big conclusion only hints and ideas. See also "Google's Linux" in 156.

• The chrome is a webpage
  <chrome://browser/content/browser.xhtml>
  https://hg.mozilla.org/mozilla-central/file/tip/browser/base/content/browser.xhtml

  The links above are only relevant to Firefox users. I had been searching for the old browser.xul page, however it seems to have changed to the above xhtml one. Obviously, this is can be customized via the userChrome.css too.

• Put everything in the kernel, it makes it faster!
  https://www.kernel.org/doc/html/latest/networking/tls.html
  https://en.wikipedia.org/wiki/In-kernel_web_server

  There's a recent addition in Linux, it's TLS in the kernel. It reminded me of the in-kernel web-server that used to be there, along with all its flaws, which are probably going to be replicated here too.

• Netlink
  https://en.wikipedia.org/wiki/Netlink

  Related to the previous link, netlink is an IPC between userspace and kernelspace. What's nice about it is that it uses the usual socket interface.

• Auditing
  https://goteleport.com/blog/linux-audit/
  https://docs.freebsd.org/en/books/handbook/audit/
  https://github.com/openbsm/openbsm

  FreeBSD audit is based on the POSIX.1e draft using the open BSM format for storage and interaction. Meanwhile, Linux uses it's own recipe for auditing but the mindset is mostly the same.

• dinit
  https://github.com/davmac314/dinit/
  https://davmac.org/projects/dinit/man-pages-html/dinit-service.5.html

  dinit is an interesting dependency manager/init system, it's got a lot of things down. I'm thinking that we should we do a round-robin tour of init systems in the newsletter, let me know what you think of that idea.

• A FreeBSD WiFi Setup
  https://vermaden.wordpress.com/2022/09/14/freebsd-cope-with-wifi-fuckup/

  Setting up WiFi on FreeBSD is a pain, this article regroups a couple of tricks to go around the issue.

Life & Other

• Need for closure
  https://psychology.fandom.com/wiki/Need_for_closure
  https://tvtropes.org/pmwiki/pmwiki.php/Main/NoEnding

  One of the reason why I enjoy the sci-fi genre is that often the stories end ambiguously, leaving room for the imagination.

Thoughts

Your sixth sense works quickly and is not prone to second guessing — Nicholas Epley

We tend to think we got skills we sometimes don't have. One of them is reading other's minds, we can't do that.

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• Libinput and handling evdev
  https://who-t.blogspot.com/2018/07/why-its-not-good-idea-to-handle-evdev.html
  https://wayland.freedesktop.org/libinput/doc/latest/

  An article that shows how it's not as simple as it seems to handle input devices. See also "Gestures Related Stuff" in 145, and "Libinput and Synaptics driver" in 119.

• Landlock
  https://infosecadalid.com/2021/08/19/introduction-to-landlock/

  Landlock is the equivalent of OpenBSD unveil but for Linux systems. Meanwhile, seccomp is the equivalent of OpenBSD pledge. See also "Security on top of seccomp" in 143.

• A Brief History of Sudo
  https://www.sudo.ws/sudo/history.html

  Sometimes it's good to review history, even if just for personal curiosity.

• nologin
  https://man.archlinux.org/man/nologin.8

  You can simply lock a machine by creating the file /etc/nologin, did you know that?

• vsyscall and vDSO on Linux
  https://lwn.net/Articles/446528/
  https://manpages.ubuntu.com/manpages/kinetic/en/man7/vdso.7.html

  Ever heard of vdso on Linux, then time to read a bit about it and learn what it consists of.

• immutable userland mappings on OpenBSD
  https://undeadly.org/cgi?action=article;sid=20220902100648
  https://marc.info/?l=openbsd-tech&m=166203784715942&w=2

  A new userland attack minimization feature has been added to OpenBSD. This one is very useful, mitigating overflow attacks and injection to run arbitrary code, it's going to make this almost impossible for attackers. Good stuff!

• Oberon, Plan9, and Inferno
  https://blog.tsr-podcast.com/index.php/2021/05/13/episode-76-oberon-plan-9-inferno/

  I had no clue an OS has a zooming user interface as a default UI (see). As for the rest, I'll let you enjoy the read.

• Linux system activity reporter
  https://www.linuxjournal.com/content/how-use-sar-system-activity-reporter

  A basic and straight forward tutorial on running sar on your system.

• FUSE for macOS
  https://www.fuse-t.org/

  This isn't actually a kernel extension, as explained, it's a translation layer from FUSE to NFS, which in theory would apply to other systems than macOS (but wouldn't be as efficient as normal FUSE).

Life & Other

• We've all been there and felt the pain
  https://cfenollosa.com/blog/after-self-hosting-my-email-for-twenty-three-years-i-have-thrown-in-the-towel-the-oligopoly-has-won.html

  Are you still receiving this newsletter? Then we're good for now!

• Task conflicts vs relationship conflicts
  https://www.collaboration-dynamics.com/blog/m3dtj2s0gyx13zy453ai19ommvla1t

  "Hold your identity lightly", that's something we need to keep in mind more often.

Thoughts

"Clothes make the man", "don't judge a book by its cover"
"birds of feather flock together", "opposites attract"
"just be yourself", "when in Rome, do as the Romans do"

We just got to admit sometimes, we have no clue what we're doing.

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• privsep/privdrop
  https://medium.com/@jan.schreib/introduction-into-privilege-dropping-in-c-b0dca6f47b82

  Privilege separation and dropping are practices that are now more and more apparent when developing software. It's something that is obvious but that needs to be said out loud. Additionally, there are system calls in different OS that are being added to facilitate this.

• Minijail
  https://github.com/google/minijail
  https://google.github.io/minijail/minijail0.1
  https://google.github.io/minijail/minijail0.5

  Minijail is a tool that I've seen only used with Chrome. However, the idea is quite good, it's a wrapper tool over multiple Linux security features. systemd does similar things for services, but doesn't have such command line interface.

• Secure coding standards
  https://wiki.sei.cmu.edu/confluence/display/c/SEI+CERT+C+Coding+Standard
  https://en.wikipedia.org/wiki/CERT_Coding_Standards

  This page regroups a really good list of secure practices, have a look, browse around. It's based on SEI CERT standard guidelines.

• Custom info in extended attributes
  https://blog.siphos.be/2013/06/using-extended-attributes-for-custom-information/

  Extended attributes aren't standardized, so these commands will change depending on the OS and how they are implemented. These can be used as metadata on Linux by using the user namespace. Now that might give some ideas for CTF challenges.

• Syscalls list
  https://john-millikin.com/unix-syscalls

  A huge catalog of system call invocation and workings on different Unix-like systems. In relation with the previous link check the calls having attr in them.

• Tasty Wafers
  https://randomascii.wordpress.com/2022/01/12/5-5-mm-in-1-25-nanoseconds/
  https://en.algorithmica.org/hpc/cpu-cache/latency/

  One of these cool hardware stories where you learn so much from all the small details. I've added some docs on how to measure CPU cache latency.

• Bypassing aliases
  https://www.cyberciti.biz/faq/bash-bypass-alias-command-on-linux-macos-unix/

  While the article says it's for MacOS, it applies to other Unix-like OS too. There's probably a few alias-bypass tricks you were not aware in there, at least I did learn a few.

• Raw sockets
  https://linux.die.net/man/7/raw
  https://squidarth.com/networking/systems/rc/2018/05/28/using-raw-sockets.html
  https://www.schoenitzer.de/blog/2018/Linux%20Raw%20Sockets.html
  https://stevendanna.github.io/blog/2013/06/23/a-short-sock-raw-adventure/

  Ever wanted to implement your own transport layer protocol, then raw socket is a must. It also let's you explore raw packets (duh) and let you learn about how to parse them (but there's Wireshark too for that).

• Unstripping
  https://lock.cmpxchg8b.com/symbols.html

  If you've heard of DWARD, then get ready to learn about STABS, a deprecating debugging format. See also "WordPerfect for UNIX" in 154.

• Intro to pipewire
  https://bootlin.com/blog/an-introduction-to-pipewire/

  Another great intro that covers well most pieces of pipewire.

Life & Other

• Stick to Tinkering
  https://walid.dev/blog/stick-to-tinkering/
  https://www.hanselman.com/blog/systems-thinking-as-important-as-ever-for-new-coders

  It's been shared around everywhere, but I feel it's a great article, pondering on the nature of our work.

• Social Cooling
  https://vadimkravcenko.com/shorts/the-silent-majority/
  https://reasonandmeaning.com/2017/10/31/what-is-social-cooling/
  https://venam.nixers.net/blog/psychology/2021/04/16/internet_communication_narrative_control_part4_section1_paralysis.html

  Dismiss the intro of the silent majority article, also sorry for my shameless plug of my writing. All of these deals with the topic of who talks online and who is vocal and trying to be representative. See also "Language and programming" in 147.

• Not getting locked out
  https://log.pyratebeard.net/entry/20220830-a_well-fortified_position.html

  A follow up on "tied up, locked out" of issue 151.

Thoughts

Prevention is better than cure.

It's definitely better to be proactive than reactive. Yet, we can't be proactive with everything, we all have a limited amount of power.

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• chattr and chflags
  https://blog.ononoki.org/chattr-and-lsattr-usage/
  https://www.unix.com/man-page/OSX/1/chflags/
  https://www.linuxintheshell.com/2013/04/23/episode-028-extended-attributes-lsattr-and-chattr/

  chflags for BSD-like systems and chattr on Linux systems are per-filesystem utilities that allow setting extended attributes that control what happens to a file. Some of these extended attributes require elevated permission to be set on files. Indirectly, this can be used for access control, namely immutability or making files read-only or undeletable.

• Common Criteria
  https://www.redhat.com/en/blog/common-criteria
  https://en.wikipedia.org/wiki/Common_Criteria

  Common criteria is a stringent security evaluation for OS along with its hardware, the whole computer system. There are different levels of assurance that can be reached, the last one even requiring a formally verified design and testing of the whole system. Most of the common criteria systems are embedded and often unheard of in daily life, things such as sim cards that have a small OS with a small attack vector.

• IKEv2 and VPNs
  https://www.cactusvpn.com/beginners-guide-to-vpn/what-is-ikev2/
  https://wiki.archlinux.org/title/StrongSwan
  https://www.strongswan.org/download.html
  https://github.com/sshuttle/sshuttle
  https://youtu.be/WVDQEoe6ZWY

  The word "VPN" has been twisted to a non-sense marketing buzzword rotating around some arguable "privacy feature" in the same way "anti-virus" were brought to the general public, through FUD. Yet, for those who use it practically everyday to connect to servers, often separated from public internet, and do sysadmin stuffs, it has a totally different meaning which non-technical users subjected to the previous buzzword wouldn't necessarily understand. I've shared a few articles showing the IKEv2 protocol (forgive me because I couldn't find one without at least one ad for their own "service"), and how to setup a client using StrongSwan. If all fails, go for ssh tunneling, be it with wrappers like sshuttle, or directly with binding.

• systrace — if you haven't heard, it's not the same as strace
  http://www.citi.umich.edu/u/provos/systrace/
  https://man.openbsd.org/OpenBSD-5.9/systrace
  https://marc.info/?l=openbsd-cvs&m=146161509612179&w=2
  https://www.linux.com/news/add-extra-layer-security-systrace/

  systrace is a tool that initially interactively traces system calls, to then generate a profile which can be used to whitelist the ones allowed by the application. Initially, it was part of the OpenBSD project but removed in 2016 in favor of pledge which doesn't require an external program but requires developers to write the rules explicitly within their code. The project has also been ported to Linux, but was not maintained, it achieved something similar to seccomp-bpf, also configuring a dynamic policy (as BPF rules) to filter system calls.

• ucspi-unix
  https://untroubled.org/ucspi-unix/

  ucspi stands for the UNIX Client-Server Program Interface. To put it simply, it's similar to what netcat does. Here we have the command line interface for creating unix domain sockets. After compiling the project you'll get both a unixclient and unixserver binary.

• Netflix's optimizations to serve data at 800Gb/s
  http://nabstreamingsummit.com/wp-content/uploads/2022/05/2022-Streaming-Summit-Netflix.pdf

  A fun presentation to go over to get a glimpse at optimizations done at the edge of computing.

• aio and io_uring
  https://lwn.net/Articles/903855/
  https://www.unix.com/man-page/FreeBSD/4/aio/
  https://www.freebsd.org/cgi/man.cgi?query=aio_read&apropos=0&sektion=0&manpath=SunOS+5.5.1&format

  io_uring isn't that easy to understand, but it seems like some next level-async mechanism that would allow fast block devices in user-space. aio on the other hand is much more sane.

• A text-based accounting software
  https://hledger.org/

  I'm not the type of person to use these anymore but maybe someone else will find this useful.

• I know I know
  https://trendoceans.com/ls-command-usage/

  Sometimes it's good to take some distance from the commands we use everyday and check if there are options we aren't aware of. See also issue 125 "Speedup ls(1) command by setting proper LS_COLORS environment variable."

• nmcli
  https://linuxcommandlibrary.com/man/nmcli-device

  I'm sharing that one specifically for the qr code trick, but the rest is fun too.

Life & Other

• A real capability-based system
  https://sandstorm.io/how-it-works#grains
  https://sandstorm.io/how-it-works#capabilities
  https://capnproto.org/

  Sandstorm is mostly used as a proof of concept of capabilities through a WYSIWYG suite. The particularity is that in the backend it implements a capability based system, permissions are dynamic, through tokens exchanged moving from person to person, with all the management around it. See also "Don’t separate designation from authority" in 158.

• Homoglyph attack
  https://util.unicode.org/UnicodeJsps/confusables.jsp?a=nixers.net

  We've had a couple of linked related to unicode before such as "Unicode" in 116, "Normalization of unicode" in 120, "Text on computers" in 137. Additionally, we've also dealt with normalization of URL on the forums in a thread called "having fun with domain names". What this can give rise to are homoglyph attacks.

Thoughts

https://en.wikipedia.org/wiki/Semantic_satiation

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• POSIX.1e Draft
  http://wt.tuxomania.net/topics/1999_06_Posix_1e/download/Posix_1003.1e-990310.pdf

  In continuation with the series on access control "POSIX (draft) ACL" in 157. I finally finished reading the POSIX.1e draft so I'm linking it this week. This was a trend setting draft that set the pace for OS to implement some of the feature in their "trusted" extension, even though it was kept as a draft and never made part of the standard. It deals with Access Control Lists (ACL), Security Auditing, Capability, Mandatory Access Control (MAC), and Information Labeling (IL).

• Sandboxing using systemd
  https://www.ctrl.blog/entry/systemd-service-hardening.html
  https://www.linuxjournal.com/content/systemd-service-strengthening

  The security analysis feature of systemd services is quite a nice introspective one into learning what are the sandbox possibilities.

• mDNS on linux what is it how does it work
  https://wlog.viltstigen.se/articles/2021/05/02/mdns-for-linux/
  https://avahi.org/

  A follow up on last week's "How chromecast protocol works", we now take a look at mDNS and clients to interact with the protocol.

• Snapper and borgmatic
  http://snapper.io/
  https://torsion.org/borgmatic/

  These two tools are often mentioned in conjunction with one another, the first to take snapshots and move between them, and the second to backup the file using deduplication and host them safely somewhere else. There has been alreay a couple of links mentioning backup and restore, some related to Borg too such as "Deduplication" in 57. NB: "Supports Access Control Lists and Extended Attributes", this is a feature only a few tools with custom flags support, such as GNU version of tar (not standard flags).

• virtiofs
  https://virtio-fs.gitlab.io/
  https://wiki.qemu.org/Documentation/9p

  virtiofs is an interesting project, technically speaking. It uses FUSE on the host to transport message on a driver (VIRTIO device) in the guest as a standard PCI driver. Before this, share drives needed to speak a network protocol, such as 9p virtio.

• What's a (Linux) kernel headers package anyway
  https://www.labbott.name/blog/2019/11/16/what-s-a-kernel-headers-package-anyway/

  Just a simple article on what different kernel headers packages are used for.

• A refresher on TTY tech
  https://www.kawabangga.com/posts/4515
  https://www.sobyte.net/post/2022-05/tty/
  https://susam.net/blog/from-xon-xoff-to-forward-incremental-search.html

  Once every now and then people rediscover what A TTY actually is, control sequences, line discipline, virtual terminals, and others. See also "Terminal madness (continue)" in 95, among others for more in-depth content. NB: You'll notice that some screenshots from the sobyte.net article are stolen from another website without attribution, that is because all of the post was stolen and translated from the kawabangga.com blog, which does have attribution. I find this a bit infuriating and disrespectful, let me know what you think of the ethicality of this).

• Project ACRN
  https://projectacrn.org/

  A new Virtual Machine Manager specifically targeted at IoT ecosystems.

• If you want games, you got to explicitly say it
  https://undeadly.org/cgi?action=article;sid=20220810120423

  This is a pretty insignificant commit but that I found funny to mention. /usr/games has all the classic games on OpenBSD, and it was removed from the $PATH, so now you have to explicitly put the full path to play them. Obviously, this was done because of the security implication of old unmaintained and buggy code, so understandable.

• 9 months without JS
  <gemini://blog.schmidhuberj.de/2022/08/12/nine-months-without-js/>
  https://portal.mozz.us/gemini/blog.schmidhuberj.de/2022/08/12/nine-months-without-js/ (Gemini proxy)

  This person went the extra way and spent a whole gestation period without javascript. In this post you can find some of the knowledge that came out of this.

Life & Other

• A take on learning to program
  https://headlinedev.xyz/2022/08/12/how-to-learn-to-program.html

  While I don't agree on the learning pyramid because learning changes from person to person, nor am I a fan of didactic learning and putting boxes around people; yet, I find that having more of these small ideas about better learning tricks is good to have around and read about.

• Don’t separate designation from authority
  http://habitatchronicles.com/2017/05/what-are-capabilities/
  https://en.wikipedia.org/wiki/Confused_deputy_problem

  A nitpick clarification on "POSIX (draft) ACL" of last week's issue 157 for those who want to dive further into real capability-based security.

Thoughts

https://en.wikipedia.org/wiki/Great_Resignation

I find it fascinating to read about current social phenomena from a Wikipedia's retrospective.

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• Want to try something more responsive than of flux/redshift?
  https://www.linuxuprising.com/2019/08/gammy-adaptive-screen-brightness-tool.html
  https://github.com/anishathalye/lumen
  https://github.com/FedeDP/Clight
  https://github.com/maximbaz/wluma

  "ALS = Ambient Light Sensor". In the above links you can find other ways to adapt backlight based on either ALS or screen content, you can use it in combination with redshift/flux, I'm currently trying it out this week.

• mat2 lib
  https://0xacab.org/jvoisin/mat2

  "keep your data, trash your meta", A metadata removal tool, what is that? It's a tool that is made to automatically guess file format, find metadata in it, and scrub it. It could be really useful to have this running in a cron job for specific directories on your system, especially media files (the xdg XDG_DOWNLOAD_DIR, XDG_MUSIC_DIR, XDG_PICTURES_DIR, XDG_VIDEOS_DIR, among others).

• ClamAV
  https://docs.clamav.net/manual/Usage.html
  https://docs.clamav.net/manual/Usage/Scanning.html
  https://askubuntu.com/questions/749129/how-to-schedule-clamav-to-perform-a-daily-scan

  Sometimes you're required by certain work policies to run AV scans, my choice is clamAV. Full scans are often too costly, so I'm not always sure how to go about that. Should I have a cron job like what is mentioned in the last link or should I have another script checking for timestamp on files before scanning it?

• POSIX (draft) ACL
  https://www.usenix.org/legacy/publications/library/proceedings/usenix03/tech/freenix03/full_papers/gruenbacher/gruenbacher_html/main.html
  https://rofi.roger-ferrer.org/eiciel/

  On a roll with last week "POSIX Capabilities, Not a Capability-Based System" issue 156, this week we take a look at another one of the feature of the draft 1e, ACL (a discretionary access control list). I've also added a gnome software that is a GUI to edit these, which I haven't found any other (sadly, but if you have any that I missed let me know).

• Nix – taming Unix with functional programming
  https://www.tweag.io/blog/2022-07-14-taming-unix-with-nix/

  A great article reviewing some history and where Nix stands, along with where it aims to be. Well, at least it starts with that mindset but then only spares half a line to that purpose while instead delving into the theory of functional programming applied to system build and entire OS file management. See also "Immutable distros" for the nix pill in 137 and "Convinced about nix and nixOS or not yet?" in 45.

• lcarsde
  https://lcarsde.github.io/index.html

  A pretty cool project with its own WM that recreates the LCARS OS from Star Trek. I really love these fantasy/movie UI project, this one is stunning because it's actually usable and not only some eye-candy.

• How chromecast protocol works
  https://kyteinsky.github.io/p/chromecast-protocol/

  An overview of the chromecast protocol interaction and how to play a video.

• FreeAstro, free world encyclopaedia for astronomy software
  https://free-astro.org/index.php?title=Main_Page

  This is somewhat in continuation with "What’s behind the world’s largest crowd-sourced microbiome project" in 153, seeing again free software helping big scientific projects.

• Jon "maddog" Hall reflects on his career
  https://www.linux-magazine.com/Issues/2021/250/maddog-s-Doghouse

  Retrospective on life are generally full of insights.

Life & Other

• A website I thought I had linked before
  https://emotionalgranularity.com/

  This is quite a fun site to visite, especially to learn about how to express some things that are hard to put things into word.

Thoughts

You can learn from anyone, you simply have to approach the situation with this intent and keep reminding yourself of this.

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• Linux Around the world
  https://www.linuxlinks.com/linux-slovenia/
  https://www.linuxlinks.com/author/erik-karlsson/

  An interesting website showing the Linux usage and local groups and meetups/workshops. This is an example of Slovenia, a beautiful country.

• Build UNIX, not Uber
  https://thesephist.com/posts/legacy/

  I love it when people find threads in their daily life, and then ponders in brainstorm sessions that take the form of articles. Maybe you like that too, like me, let me know. Apart from what is mentioned in the article, I'd add the concept of intangible economy to it, with the book of the same name.

• Google's Linux
  https://www.computerworld.com/article/3668548/the-story-behind-google-s-in-house-desktop-linux.html

  Sort of similar to "The trendy distro: Oracle Linux" in previous issue 155, this time we look at an internal corp distro gLinux. LTS "meant that we had to upgrade every machine in our fleet of over 100,000 devices before the end-of-life date of the OS." This is also one of the reason I have issues with LTS, it's a one-shot pain that I don't want to deal with on the desktop. What do you think, do you prefer rolling distros?

• Should we still package this or that?
  https://odysee.com/@TheLinuxExperiment:e/should-linux-distros-still-package:4

  See also "Discussions on Package Management" in 144 and all the immutable package management series we had, see "Immutable distros" in 137. Now a common discussion, so much you get pop-video about it, and not a bad explanation at that.

• Adwaita UI lib
  https://theevilskeleton.gitlab.io/2022/07/28/libadwaita-fixing-usability-problems-on-the-linux-desktop.html

  A tour of gtk Adwaita theme and the logic behind it. It's a very comprehensive article.

• Why windows registry sucks
  https://rwmj.wordpress.com/2010/02/18/why-the-windows-registry-sucks-technically/
  https://raduzaharia.medium.com/configuring-gnome-with-gsettings-and-dconf-91c264843ea6
  https://fosspost.org/dconf-gsettings-gnome/

  Nothing to do with Unix particularly, but lots to learn from design/architecture decisions related to a centralize configuration (Gsettings/dconf). In a way it's also related to format exploration, see "Tar & Quadratic Time" in 155.

• Wasting disk space
  https://www.ypsidanger.com/wasting-disk-space/
  https://blogs.gnome.org/wjjt/2021/11/24/on-flatpak-disk-usage-and-deduplication/
  https://en.wikipedia.org/wiki/UnionFS

  A comparison of an OS that only ships with containarized applications versus one that doesn't.

• But you can RTFM to know that
  https://medium.com/@rmolsen/ssh-tricks-escape-sequences-4a7a5d889d70
  https://private-article-reader.vercel.app/article?url=https://medium.com/@rmolsen/ssh-tricks-escape-sequences-4a7a5d889d70

  Yes, but I've rarely seen people bring the escape sequences up when using ssh.

• POSIX Capabilities, Not a Capability-Based System
  https://blog.ploetzli.ch/2014/understanding-linux-capabilities/
  https://en.wikipedia.org/wiki/Capability-based_security
  https://en.wikipedia.org/wiki/Capsicum_(Unix)

  In continuation with last week's "Tutorial of applied MAC on TrustedBsd" in 155. If you want to understand this in a few words: That's how you split the capabilities of a super-user into fragments, instead of having it all as a big blob. I've also added a link to what a real capability-based system is. Next week I'll add POSIX.1e extension/amendment (never accepted draft), but I got to read it first.

Life & Other

• "Deserve" what does it even mean
  https://kaashif.co.uk/2022/07/31/what-does-it-mean-for-someone-to-deserve-success/

  I like blog posts that put their ideas out there, in their raw form. That's one of the best way to make sense of things.

Thoughts

If someone shares some piece of information that doesn't mean they agree with it, nor support it, nor imply it has anything to do with them.

Just some common sense, but that needs so often to be reminded.

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• Tutorial of applied MAC on TrustedBsd
  https://networksynapse.net/freebsd/mandatory-access-control-mac-part-1-bsd-extended-tutorial/
  https://networksynapse.net/freebsd/trustedbsd-mac-processes/
  https://networksynapse.net/freebsd/trustedbsd-mandatory-access-control-part-3-policy-mac-biba/

  I've been diving into the world of permission and integrity models. In these 3 articles we see the application of some MAC models in TrustedBsd. If you've never glanced at such content before, brace yourself for a whole new world in security.

• Tar & Quadratic Time
  https://mort.coffee/home/tar/

  I never knew there were so many different extensions to the tar format and the effect on extraction. A great post about file format!

• The trouble with symbolic links
  https://lwn.net/Articles/899543/

  In synchronization with the above post, tar is mentioned as one program that had issues with symbolic links.

• Docker usage
  https://matt-rickard.com/non-obvious-docker-uses/

  Docker is a container environment builder/runner, now some might be bound to limit that to microservices only, but the idea goea much further, it's only recently that trendy-devs have been less imaginative about their usage. See also "Docker as a Universal Package Manager" in 142.

• Wallpaper Setter Using systemd
  https://randthoughts.github.io/random-wallpaper-with-just-bash-and-systemd/

  A simpler script than I thought, some curl along with gsettings (could've been any other background setter too). Sprinkle on that some systemd timer and the author got themselves a wallpaper setter.

• Beets
  https://beets.io/

  An open source automatic music collection manager. You can combine it with your favorite music player.

• The trendy distro: Oracle Linux
  https://www.makeuseof.com/what-is-oracle-linux-explained/

  It's the first time I see a distro review of Oracle Linux similar to what you'd get from other ones. That's peculiar, to say the least.

• Three trends in automation
  https://enterprisersproject.com/article/2022/7/automation-3-emerging-issues-watch

  If you want a summary: Edge computing automation, automated security and security of automation, and automation as a job creator and career killer. Lots of mumbo jumbo business words in there.

• Podcast on mistakes
  https://www.redhat.com/en/compiler-podcast/big-mistakes-part-1

  "We're not defined by our mistakes." That's a good take, we all do big blunders from time to time.

• If you press a key in a terminal what processes the input
  https://jvns.ca/blog/2022/07/20/pseudoterminals/

  This is something we've been talking about previous on the forums here, the input redirection and what catches what. Definitely something that teaches you a lot about the architecture of the system.

Life & Other

• A science blog and solar innovations
  https://caseyhandmer.wordpress.com/2020/12/27/the-future-of-electricity-is-local/
  https://caseyhandmer.wordpress.com/2022/07/22/were-going-to-need-a-lot-of-solar-panels/
  https://singularityhub.com/2022/07/25/this-solar-tower-system-produces-jet-fuel-from-co2-water-and-sunlight/

  There's a lot of good insights into energy future in these two blog posts.

Thoughts

It might just be a lonely rainy night on the side of mount Everest — A random sentence from a podcast

Life's hard, sometimes we focus on momentary pain while we're on our path to something else.

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• Digging into Linux Namespaces
  https://blog.quarkslab.com/digging-into-linux-namespaces-part-1.html
  https://blog.quarkslab.com/digging-into-linux-namespaces-part-2.html

  A series of two posts on Linux namespaces that will, in a practical way, teach you what this is all about and how to use them.

• Performance Analysis
  https://netflixtechblog.com/linux-performance-analysis-in-60-000-milliseconds-accc10403c55

  A series of steps to debug performance issues.

• Less annoying gdb usage
  https://begriffs.com/posts/2022-07-17-debugging-gdb-ddd.html

  In continuation with the debugging trend, here's how to wrap up gdb to make it easier to debug things. These should come in handy.

• Console Tiling
  http://joeyh.name/blog/entry/a_tiling_region_manager_for_the_console/

  A homemade Haskell console "region manager".

• Reptyr
  https://ostechnix.com/reptyr-move-running-process-new-terminal/

  If you've heard or are using a terminal multiplexer, then this is somewhat similar to abduco (often used alongside dvtm).

• no-look, no-leap Shell script dependencies
  https://t-ravis.com/post/shell/no_look_no_leap_shell_with_nix/

  An article about fixing the complication it takes to double check if a command is present or not. The solution relies on Nix, so it's a selling point for the whole thing, but is it really a generic solution to the problem... I don't think so.

• A lifehack for your shell
  https://xenodium.com/a-lifehack-for-your-shell/

  This is the typical aliasing for extracting files in a unified manner. Most people have a similar way to do that, if you don't then you're missing out.

• Kiosks
  http://tuxdiary.com/2014/11/05/linux-distros-for-kiosks/
  https://porteus-kiosk.org/

  What's a kiosks and what would you use it for? Which OS and software should you set on it? The first article lists possible distros and scripts, and the second link is an example.

• SqueakPhone
  https://syndicate-lang.org/journal/2022/06/03/phone-progress

  A herculean project, truly impressive, building of both a new-gen init system, and a mobile operating system.

• Smart Mirror
  https://magicmirror.builders/
  https://blog.ronrecord.com/index.php/2020/02/18/magicmirror-open-source-smart-mirror-platform/

  Since someone mentioned smart mirrors on IRC and it was my first time learning about them, I thought I'd share. Maybe someone out there hasn't heard of this too, along with the open source possibilities.

• A new tool in town
  https://github.com/untitaker/quickenv

  This is the brother tool of direnv, which we've seen in "A manager for env variables" of 142. Personally, I see that it mostly achieves the same thing.

• WordPerfect for UNIX
  https://lock.cmpxchg8b.com/wordperfect.html

  In continuation with the "Old ads pamphlet" from 152, we now see someone being intrigued by what's mentioned in one and testing it to see what it's about.

Life & Other

• Serendipitously Making Online Friends
  https://ferrucc.io/posts/friendcatchers/

  Call if friend catchers or anything else, I think it's more about connection through shared interests and hobbies.

Thoughts

Slowdown.

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• Soname
  https://wiki.linuxquestions.org/wiki/Library#soname
  https://tldp.org/HOWTO/Program-Library-HOWTO/shared-libraries.html#AEN46

  Shared libraries are something that's part of our daily usage. The two links above are small overall refreshers of the cogs making them work, not the library format itself but the file layout and conventions.

• The Demise of Workstations
  https://deprogrammaticaipsum.com/the-untimely-demise-of-workstations/

  A review of the history of workstations, top-down vs bottom-up view of computing, along with the take of the author on where this is all going.

• Coding vs Programming
  https://www.ubuntupit.com/coding-vs-programming-an-in-depth-comparison/

  A light semantic scuffle, which I think most of us didn't even pay attention to before. I think the article doesn't do a bad job at presenting the difference, yet I'm torn if it's actually a meaningful one or not, it feels a bit stretched.

• A journey into the Linux scheduler
  https://blog.maxgio.me/posts/linux-scheduler-journey/

  One of the best way to share knowledge is to write about it while learning. See also "Thread Scheduling" in 145 and "Threads" in 139, "Schedulers" in 48, and, "Evolutionary scheduler" in 52 (find the dead link here instead).

• KaiOS
  https://www.kaiostech.com
  https://yourstory.com/2018/06/google-puts-22-m-linux-based-mobile-operating-system-kaios/
  https://github.com/kaiostech/B2G

  Google invested quiet a lot back then in KaiOS. The stats are saying there are millions of people using it, but will it go the same route as FirefoxOS or other lightweight mobile OS, which frankly had the exact same mission. Interestingly, it's a fork of Boot to Gecko, B2G, which was also the base for FirefoxOS.

• Automation and Risks
  https://linux.codehelp.co.uk/automation-and-risk.html
  https://docs.lavasoftware.org/lava/index.html
  https://docs.lavasoftware.org/lava/lava_ci.html

  LAVA is part of the validation, CI, and QA tasks. It's an infrastructure to run your tests for OS deployment unto hardware made as a continuous integration system.

• Pipeline + Unix
  https://nanxiao.me/en/what-you-need-may-be-pipeline-unix-commands-only/
  http://widgetsandshit.com/teddziuba/2010/10/taco-bell-programming.html

  Maybe all you need is some Unix pipeline. See also "AWK fast" in 139.

• What’s behind the world’s largest crowd-sourced microbiome project
  https://www.selectscience.net/editorial-articles/whats-behind-the-worlds-largest-crowd-sourced-microbiome-project/?artID=49784
  https://qiime2.org/
  https://qiita.ucsd.edu/emp/

  Open source bioinformatic platforms look so impressive to me, like magic. But that's probably because I know nothing of that domain, and as they say anything that is beyond your knowledge looks like magic.

• Container vs Unikernel
  https://containerjournal.com/2019/03/28/containers-vs-unikernels-an-apples-to-oranges-comparison/

  I hadn't heard of unikernel before, so this was insightful. Now it's time to learn the differences with containers, or why unikernels were created (or recreated because that's going back in time), or again, why we're reinventing the wheel over and over again.

• TripleCross Privilege Escalation
  https://github.com/h3xduck/TripleCross

  A privilege escalation that installs a rootkit using eBPF.

Life & Other

• I'll Just Leave These Here
  https://ferfal.blogspot.com/2015/07/argentine-and-greek-collapse-12.html
  https://greekpreparedness.blogspot.com/2015/07/greek-capital-controls-lessons-learned.html
  https://betterhumans.pub/what-losing-95-of-my-money-taught-me-and-my-fellow-countrymen-c5e9e6f47169?gi=ccceaa99bcb3

  Wherever you are, maybe we can learn a lesson or two from the similarities and not repeat the same mistakes, yet it seems to keep repeating.

Thoughts

"Read a Lot, Forget Most of What You Read, and Be Slow-witted"
https://fs.blog/what-did-montaigne-like-to-read/
https://www.theatlantic.com/daily-dish/archive/2010/02/-read-a-lot-forget-most-of-what-you-read-and-be-slow-witted/190691/

Sometimes we dwell too much on the appearances or efficacy of all our minute actions. Why not take things more lightly this week, read and let it imprint you in whatever way it does, without forcing it.

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• Managing a Repo of Binary Pkgs
  https://sleepmap.de/2022/packaging-for-arch-linux/
  https://sleepmap.de/2022/managing-binary-package-repositories/

  A look into what it means to be part of a software distribution team, the ins and outs, along with the background knowledge that we need to understand the mechanisms. A fantastic blog. See also "Discussions on Package Management" in 144.

• Old ads pamphlet
  http://archive.computerhistory.org/resources/text/LSI/LSI.ADM31.1978.102646290.pdf
  http://www.bitsavers.org/magazines/Datamation/197708.pdf
  http://www.bitsavers.org/magazines/Datamation/197709.pdf
  https://www.trademarkelite.com/trademark/trademark-detail/73110312/DUMB-TERMINAL
  https://tsdr.uspto.gov/#caseNumber=73110312&caseType=SERIAL_NO&searchType=statusSearch

  It's interesting to see how many details they explained about terminals in the marketing pamphlet. That also got me researching trademarks, "Dump Terminal" seems to have been held by Lear Siegler from 1978 till 1999. So technically, all the terminals that claimed to be "dumb terminals" between these dates and not from Lear Siegler are wrong.

• Is UNIX dead?
  https://www.cio.com/article/297153/enterprise-software-is-unix-dead.html

  A glance at the usage of UNIX today (2011), and its future, from an enterprise perspective. See also "Is FreeBSD a real Unix" in 150 and "Awesome UNIX®. Exploration of the world of UNIX® including UNIX history and its relevance of today." in 105.

• The case of the supersized shebang
  https://lwn.net/Articles/779997/

  The story of a bug that made it around the web back then (2019). It's still a good lesson to see how regressions have snowball effects.

• Remote Host Information Gathering Techniques
  https://web.archive.org/web/20210225135806/https://linuxconfig.org/how-to-determine-os-of-the-remote-host
  https://nmap.org/book/osdetect-methods.html

  In continuation with "Networking tracing and debugging" in 150, we see an application of what was explained to fingerprint hosts.

• A web around the world series
  https://www.filfre.net/2022/05/a-web-around-the-world-part-10-a-web-of-associations/

  A big series of long-form articles on the history of the web and computing. The metaphor with cars at the beginning of that article (part of a series) is the same one found in "2006 presentation on the future of storage" in 150 (slide 11).

• V4L
  https://jayrambhia.com/blog/capture-v4l2
  https://wiki.archlinux.org/title/PipeWire#Video
  https://uvtutorial.blogspot.com/2011/10/reverse-engineering-usb-device.html

  I started testing the pw-v4l2 wrapper that catche v4l2 calls and reroutes them to pipewire, but it crashes all applications I've tried it with. Last article is about reverse engineering hardware, which is always fun.

• TTS and STT for commands
  https://fedoramagazine.org/your-personal-voice-assistant-on-fedora-linux/

  Emojis aside, the project looks more mature than a lot of the ones I've seen out there. See also "More on accessibility" in 145 and "Thinking About Accessibility" in 144.

• Disk/FS encryption
  https://hugo.barrera.io/journal/2021/09/03/how-disk-encryption-works/
  https://www.openbsd.org/faq/faq14.html#softraid
  https://people.freebsd.org/~rodrigc/doc/handbook/disks-encrypting.html
  https://www.ecryptfs.org/
  https://www.linux.com/training-tutorials/how-encrypt-linux-file-system-dm-crypt/
  https://www.askdavetaylor.com/what_is_hardware-based_disk_encryption/ (WARNING: corporate talk about FIPS 140-2 lvl3)

  There's multiple way to encrypt file systems, either at the hardware level, VFS level, RAID leve, FS level, software level, and others. Pick your favorite one.

• Machine Layout Optimization
  https://dendibakh.github.io/blog/2019/03/27/Machine-code-layout-optimizatoins

  An explanation of machine code layout, along with ways to optimize your binary code to match it. See also the book "A book on Algorithms For Modern Hardware" in issue 144 there's a section on compiler optimizations similar to the ones mentioned.

• Simulating a CPU
  https://djharper.dev/post/2019/05/21/i-dont-know-how-cpus-work-so-i-simulated-one-in-code/

  One of the best way to learn something is to try and experience it first hand. But even more important than this, it's to first be comfortable with knowing what you don't know and are willing to know.

Life & Other

• Software Over Time
  https://blog.jim-nielsen.com/2022/software-over-time/

  Pondering about the implications of an observation: Will this piece of software live long enough, or can it only live a small burst of time. What does it take for software to be maintainable, changeable, and adaptable? All good software architecture and engineering questions. Somehow this reminds me of the credo of chaos engineering and the stringent stress it incurs on software to make it resilient and flexible.

• A Very Regional Thing
  https://text.npr.org/1109498551

  Plastic is omnipresent. Some places use it more than others, some places use it less but don't recycle, some places have litter issues, some have waste management issues, and some have very different issues. This article puts you in the shoes of someone in the USA, take it with a grain of salt if you're not from there and can't relate.

• Open Source Pain Logger for Patients
  https://medevel.com/pain-diary/

  I had read about these scales in the past, and their gruesome history. It makes me happy to see that we can do that without being tracked by Big Corp, thanks to this team in Germany.

Thoughts

We all gradually change, sometimes more abruptly than others, but we all do. What are some changes others have noticed in you that you might not have yet? Think back to the Johari window I mentioned back in issue 141, apart from relationships, what are other changes happening.
Boring?
Have a fun week!

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• A Great Blog
  https://calomel.org/

  A blog I've discovered and that is full of useful articles on multiple topics rotating aroun Unix and programming.

• FreeBSD Guide
  https://www.over-yonder.net/~fullermd/rants/bsd4linux/01

  A comprehensive explanative series of articles on FreeBSD system. It's written in a way that starts with the assumption that users know Linux and want to get acquainted with the BSD philosophy and more precisely FreeBSD. If you're in that category or if you want to take a glance, go for it.

• Virtual/Memory Disks, RAM disks, and Transportable Systems
  http://openbsd.wikia.com/wiki/Creating_a_custom_OpenBSD_RAM_disk
  https://www.freebsd.org/doc/handbook/disks-virtual.html
  http://unix.stackexchange.com/questions/66329/creating-a-ram-disk-on-linux#66331

  Virtual disks, in memory chunk of storage, RAM disks booted entirely in RAM, can be created in different ways on different systems. The concept got its usefulness, especially in infosec.

• Security Importance
  https://github.com/lattera/articles/blob/master/opsec/2018-02-23_good-opsec/article.md
  https://github.com/lattera/articles/blob/master/infosec/Exploit%20Mitigations/General/2017-03-21-importance/article.md

  Two articles on security practices and exploit mitigation. The subjects is approached properly, yet it isn't novel, but a good reminder of spy-level infosec.

• Flatpak Security Model
  https://blogs.gnome.org/alexl/2017/01/18/the-flatpak-security-model-part-1-the-basics/

  An explanation of the security model used by flatpak, relying on bubblewrap and other mechanism.

• The evolution of Unix Architecture
  https://www.spinellis.gr/blog/20210618/index.html

  Studying the architecture of a complex software over time can give some golden insights. Which element are conserved, which get morphed, what grows, what issues are always repeated. Specifically, we're looking at elements in user-space and kernel-space, the basic blocks of OSs.

• Interactive UNIX
  https://computeradsfromthepast.substack.com/p/interactive-unix

  Let's go back in time and relive the release of INTERACTIVE™ UNIX® operating system.

• Per-app bandwidth tracking using eBPF on Linux
  https://github.com/elesiuta/picosnitch
  https://humdi.net/vnstat/

  A nifty tool that let you granularly interact with app and their network connection, getting notified when they use it, and monitor their usage. It's a bit similar to vnstat, so I've linked it too.

• Terminal Wiki
  http://terminals-wiki.org/wiki/index.php/Main_Page
  http://www.epocalc.net/php/liste_models.php?texte=&look=All+fields&yearmax=2018&nocomp=pc&cat=Terminal

  An up-to-date wiki about terminals, it has an immense amount of info about hundreds of models and their specificities.

• tput
  https://www.linuxcommand.org/lc3_adv_tput.php
  https://www.man7.org/linux/man-pages/man1/tput.1.html
  https://docs.oracle.com/cd/E19253-01/816-5165/tput-1/index.html

  In continuation with the previous link, tput a command used to manipulate the terminal and get info through the terminfo db.

Life & Other

• Tied Up, Locked Out
  https://shkspr.mobi/blog/2022/06/ive-locked-myself-out-of-my-digital-life/
  https://log.pyratebeard.net/entry/20220512-distrust,_but_verify.html
  https://shkspr.mobi/blog/2022/06/ive-locked-myself-out-of-my-digital-life/#comments
  https://lobste.rs/s/tqull2/i_ve_locked_myself_out_my_digital_life
  https://nixers.net/Thread-Less-Ties-With-A-Machine

  The nightmare for people who hadn't considered this very imminent scenario. The comments regarding this topic are especially important as this discussion is one that must be had.

• Optimizing Game Software
  http://blog.system11.org/?p=1442

  The game development world is full of these tales. I've personally experienced the slowdown even when running the game in an emulator.

• Negative Space
  http://www.mosaikhomes.com/blog/the-power-of-negative-space-in-interior-design/
  https://artignition.com/negative-space-in-art/

  Who said negativity was always bad. The powerful concept of negative space is one that once enters your mind, you then see it everywhere. One of these frequency bias thing. Do you think it's related or could be related to digital minimalism, or minimalism in general? Try to visit one of today's popular news website, it'll give you an idea of what negative space isn't.

Thoughts

Take the time to really listen to someone this week, we often forget that.
Have a great day!

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• A true random number generator
  https://www.valerionappi.it/brng-en/

  While not as advanced as "Lavarand" from 93, it's cooler when it's homemade like this.

• Networking tracing and debugging
  https://www.rumble.run/blog/lean-network-discovery-icmp/
  https://www.linux.com/news/linux-security-fundamentals-part-5-introduction-tcpdump-and-wireshark/

  The first article gets us thinking about all the information we can extract from simple ping (ICMP) packets. I've also added an intro, even though the images are dead, it's a good and quick tutorial.

• The rsync series
  https://michael.stapelberg.ch/posts/2022-06-18-rsync-overview/
  https://michael.stapelberg.ch/posts/2022-06-18-rsync-article-1-scenarios/

  A series of posts (planned) on rsync. The first one is already captivating so stay updated.

• Curves and crypto
  https://curves.ulfheim.net/

  We've seen that website for TLS in "TLS and crypto" in 141, similarly this is some content about TLS and elliptical curves.

• faketime
  https://github.com/wolfcw/libfaketime

  The readme of this project is all-encompassing, informative. If you've never dealt with this lib then I urge you to. Maybe test Y2K and 2K38 year issues too while at it.

• Another shell comparison
  http://linuxclass.heinz.cmu.edu/misc/shell-comparison.htm

  In the same spirit as when we compare distros, we always like to compare. This guide is really great, give it a read. See also What shell do you guys use?.

• pushd and popd
  https://docstore.mik.ua/orelly/unix/upt/ch14_06.htm
  https://www.baeldung.com/linux/pushd-popd
  https://dev.to/andyanderson/comment/127pb

  I've known pushd and popd for a long while, however never really used it. Here are explanations and a way to use it efficiently.

• Is FreeBSD a real Unix
  https://vermaden.wordpress.com/2022/06/19/is-freebsd-a-real-unix/

  A review of the concept of Unix certification and what it means to have it or not.

• XPRA
  https://www.xpra.org/
  https://subuser.org/
  https://subuser.org/news/0.3.html#the-xpra-x11-bridge

  X11 forwarding in SSH is well-known, VNC too, XPRA is a lesser-known option. It comes with an easy to use client. subuser is a software that can rely on xpra to help with containers gui applications.

• History fuzzed search
  https://ane.iki.fi/2022/06/21/beenthere-donethat.html

  I also keep my shell history huge and find it very useful, what do you think? See also "Are we our tools" in 68 for a similar topic.

Life & Other

• 2006 presentation on the future of storage
  https://web.archive.org/web/20060717001830/http://www.snwusa.com/documents/presentations-s06/MarkKryder.pdf

  While heavy on the technical content (at least visually), this presentation is worth every slide.

Thoughts

Live your life so that whenever you lose, you are ahead. — Will Rogers

Yet another cheesy quote! Not one to take too literally, but one to ponder upon. This isn't a call for action to let go and keep your head high, nor to lose everything, but about what it means to take risks and learning from experience. At least that's how I see it.
Have a nice week!

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• Browser Cache
  https://wiki.archlinux.org/title/Firefox/Tweaks
  https://www.ghacks.net/2015/12/11/an-analysis-of-firefox-local-cache-locations/

  The second article is a bit outdated, but it's a quick summary of different types of caches that FF uses. As for the first link, it's an awesome resource for FF tweaks, check out the ones on cache too.

• TCL and Expect
  https://www2.lib.uchicago.edu/keith/tcl-course/topics/expect.html
  https://core.tcl-lang.org/expect/file?name=README&ci=tip

  "Good Unix programs are written as tools, and are meant to be programmed with. The primary mechanism for hooking tools together is the pipe, combined with the standard input / standard output filter model (though pipes can also work with more file descriptors). However, there is a class of Unix programs that can't be hooked together this way: programs which talk directly to a terminal device (i.e., interactive programs)." This summarizes it clearly. See also "Automating tasks using expect" in 1.

• Kernel Processes
  https://www.uninformativ.de/blog/postings/2022-06-11/0/POSTING-en.html
  https://www.uninformativ.de/blog/postings/2022-06-12/0/POSTING-en.html

  An investigative post that leads into learning about kernel spawned threads, and bpfilter.

• Another one of these CLI good pracices
  https://lucasfcosta.com/2022/06/01/ux-patterns-cli-tools.html
  https://seirdy.one/posts/2022/06/10/cli-best-practices/

  While I don't agree with a lot of the tips given, I like to see the conversation going and ideas flowing. See also "CLI Conventions and Doc" in 144 and "Making those object cli compatible" in 134.

• Runlevels, what are they and why?
  http://www.linfo.org/runlevel_def.html
  https://wiki.linuxquestions.org/wiki/Run_Levels
  https://www.unix.com/unix-for-dummies-questions-and-answers/9777-runlevel-freebsd.html

  What does it mean to boot, when is it reached? The runlevels are a sort of abstraction over this, along with different states the system can be in. Do you miss this style of init? See also "Different runlevels" in 8, the link is dead but it's on archive.org.

• Why sbin and bin
  https://hn.svelte.dev/item/31336396
  https://gobolinux.org/
  https://refspecs.linuxfoundation.org/fhs.shtml

  Historical decisions don't necessary make sense in the present, however always think of the [Chesterton's Fence]https://fs.blog/chestertons-fence/) first. "Do not remove a fence until you know why it was put up in the first place." See also "Convinced about nix and nixOS or not yet?" in 45, and this thread.

• The growth of command line options
  https://danluu.com/cli-complexity/

  In tandem with the previous link, a research into what has accumulated over the years as options for classic unix tools.

• Window management features and costs
  https://hal.inria.fr/hal-01497472/document
  https://arxiv.org/pdf/1810.04673.pdf

  The first paper goes into a stack & tile group feature for the Haiku OS and then let the community test it. It's a feature that is also found in the shod WM as tabs. The second paper is about a classification of what WM tasks are about when doing sequential multitasking, what hinders them, to then be used to measure efficiency.

• Linux in Higher Education
  https://www.linuxjournal.com/article/5071

  An article from 2000 who goes over the case for using open source software and Linux as the base for university computing. I'm not sure that's true for all majors but for certain ones and in research it's somewhat true. What do you think of the opinions laid out?

• FS Fragmentation
  https://web.archive.org/web/20120527192204/http://geekblog.oneandoneis2.org/index.php/2006/08/17/why_doesn_t_linux_need_defragmenting
  https://jmmv.dev/2005/06/fragmentation-in-unix-file-systems.html
  https://www.man7.org/linux/man-pages/man8/e4defrag.8.html

  An explanation of fragmentation and why some fs have this issue, along with a counter example of fragmentation still happening.

Life & Other

• Apple's codenames
  https://appleinsider.com/articles/14/11/07/inside-apples-secret-confidentiality-agreements-code-names-security-requirements-fines-more
  https://en.wikipedia.org/wiki/List_of_Apple_codenames
  https://www.pingdom.com/blog/the-developer-obsession-with-code-names-186-interesting-examples/

  As anyone who's worked at or with Apple can assess, there's a lot of secrecy involved. The first article gives an insider's look into it.

Thoughts

Those who promise us paradise on earth never produced anything but a hell. — Karl Popper

Great quote that asks for due diligence. Rhetoric is an art and those who master it can often be only about talk and no actions.
Have a phenomenal week!

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• A look at distro from a "customer"
  https://www.ypsidanger.com/lets-just-kill-the-silly-myths/

  It's hard to sell the desktop, this article portrays a down to earth look at the current situation. See also "Discussions on Package Management" in 144 and all the immutable package management series we had, see "Immutable distros" in 137 for example.

• Why suckless
  https://xeiaso.net/blog/why-i-use-suckless-tools-2020-06-05

  Some people enjoy simplicity and being able to build things by combining unitary blocks. This post takes a window manager as an example from suckless software to show that, displaying what are the pieces making their desktop environment.

• Plumbing from Plan9 within Xorg
  https://dataswamp.org/~lich/musings/plumbing.html

  This is a thought, which I've seen in a couple of places and implemented too, about having plumbing work within Xorg.

• Track file changes (continue)
  https://github.com/spieglt/whatfiles

  In continuation with last week's file change follow up. Here's another project aiming at doing that (specific to Linux).

• How do I know it's an init system?
  https://leahneukirchen.org/blog/archive/2022/01/how-to-check-you-re-in-the-initial-pid-namespace.html

  This also begs the question of whether we should even be able to when running containers.

• Fuzzing and Learning About Pipes Speed
  https://mazzo.li/posts/fast-pipes.html
  https://www.freebsd.org/cgi/man.cgi?query=netmap&sektion=4&n=1

  A tale of optimization that leads us into understanding pipes and specific system calls for them on Linux. As an extra there's a link to something similar on FreeBSD.

• Teleforking
  https://thume.ca/2020/04/18/telefork-forking-a-process-onto-a-different-computer/
  https://en.wikipedia.org/wiki/LOCUS

  What if you could fork a process unto another computer. This blog post goes into implemented this for Linux. It is inspired by CRIU, see also "Cryogenic on Unix" in issue 24.

• Spaces in passwords
  https://security.stackexchange.com/questions/32691/why-not-allow-spaces-in-a-password/32694#32694
  https://stackoverflow.com/questions/47154078/linux-password-manager-trims-trailing-spaces-in-passwords

  This is somewhat related to a discussion we had on the forums in the past about Spaces in password and special characters, see it here.

• Do you need atime?
  https://opensource.com/article/20/6/linux-noatime

  An insightful article about atime, the noatime feature, relatime, and anything in between.

• In defence of swap
  https://chrisdown.name/2018/01/02/in-defence-of-swap.html

  A comprehensive article about swap and its utility, or the lack thereof.

Life & Other

• Software engineers and woodworking
  https://www.zainrizvi.io/blog/why-software-engineers-like-woodworking/

  The online cliché of software engineers wanting to leave their jobs to do woodworking or live on a farm has always been foreign to me. Maybe it's a cultural thing very specific to certain regions. This article sheds some light on the subject.

Thoughts

Everyone should know how to program a computer, because it teaches you how to think! — Steve Jobs

What a cheesy quote, right? Also a big hyperbole! Yet, I think there's some truth to it, programming computers does change the way you think about some things and approach problems. It probably doesn't teach you to "think" but it does teach you how to apply a certain methodological way to look a things, similar to how learning a new skill set would.
How did that affect you in your life?

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• Linux Insides
  https://0xax.gitbooks.io/linux-insides/content/

  An advanced book on the Linux kernel's internal working. I've only read and glanced at a few chapters but I'll definitely recommend to bookmark this and read a few things from time to time as documentation.

• OOM Killer Killing too Much
  https://old.reddit.com/r/Ubuntu/comments/uyl4i6/ubuntu_2204s_new_oom_killing_system_is_killing/
  https://support.mozilla.org/en-US/kb/unload-inactive-tabs-save-system-memory-firefox
  https://man7.org/linux/man-pages/man5/oomd.conf.5.html

  Redditors redditing in a reddit manner about the OOM killer (shipped with systemd) on Ubuntu acting wild and killing important processes while there seems to be enough memory on the system. Yet, what is memory, and why did the OOM pick them if the usage wasn't above the threshold. That leads into checking the configs of the OOM, and of Firefox to remediate the issue. In retrospect, I'm not sure if I've experienced the same issue on Ubuntu before, maybe I have. See also "In userspace OOM manager" in 85.

• On finger and social networks
  https://www.somanymachines.com/tx/finger-the-first-social-software/

  A small piece on a thought: what's a social network and how can we connect people using software. See also "Let me put my finger on that" in 30.

• Why Wheel
  https://unix.stackexchange.com/questions/1262/where-did-the-wheel-group-get-its-name
  http://www.catb.org/jargon/html/W/wheel-bit.html
  https://en.wikipedia.org/wiki/Wheel_(computing)#Origins
  http://www.poker-vibe.com/poker/terms/wheel/

  These links are about the phenomenon related to picking a name for a project one day and not thinking about it much. Then time passes, and as time passes with the project becoming more popular, people start wondering about the history behind the name, scavenging, searching, software archaeology. What seems obvious today might not be in the future. It's fascinating how there are so many theories behind the wheel name, enjoy!

• su as GNU
  https://ftp.gnu.org/old-gnu/Manuals/coreutils-4.5.4/html_node/coreutils_149.html#SEC150

  In continuation with the previous links, more trivia. GNU su doesn't support the wheel group, and for one heck of a reason. Make what you want out of this, yet it's something worth reading.

• To avoid
  https://linuxfx.org/
  https://kernal.gitlab.io/posts/linuxfx/
  https://kernal.gitlab.io/posts/linuxfx-part-2/

  A beautiful reverse engineering writeup of a distribution that nastily claims to be secure while employing dubious means. A good lesson in why security through obscurity never works.

• File system monitoring
  https://mmonit.com/monit/
  https://github.com/rflament/loggedfs
  https://github.com/gorakhargosh/watchdog
  https://github.com/inotify-tools/inotify-tools/wiki
  https://lwn.net/Articles/604686/

  There's so many different ways to track file system changes, and it's not the same on all Unix-like systems. Fortunately, there are a lot of tools and people trying to do that type of monitoring. Unfortunately, the space is fragmented, and you don't always get the behavior or granularity you want.

• newgrp and passwords
  https://utcc.utoronto.ca/~cks/space/blog/unix/NewgrpCommandWhy

  Unix groups can have passwords, I think this was discussed once on IRC. Along with that you'll see why newgrp was added.

• Unfixable Designs
  https://lwn.net/Articles/414618/

  Unix signals and the permission model are here to stay. In this article, the authors ponder on what can actually be done about them, and why we're stuck.

• The self-pipe trick
  http://cr.yp.to/docs/selfpipe.html

  A small trick to be able to avoid one of the issue with signals mixed with polling/select.

Life & Other

• Quartz and Time Keeping
  https://www.explainthatstuff.com/quartzclockwatch.html
  https://www.engineersgarage.com/insight-how-piezoelectric-gas-lighter-igniter-works/

  I love these types of articles, just enough to spark curiosity into the topic and initiate more research.

• Language and programming
  http://labs.theguardian.com/digital-language-divide/
  https://games.greggman.com/game/2022-06-02-western-naming-convensions-wasting-time_md/

  When something is created by someone, it's inherently imbued with their way of approaching the world, and people who will subsequently use that creation will then embrace it as is. Yet it could possibly be different, a sort of "the winner writes history" type of scenario. See also "Locality Bias" in 139 and "Reminding Ourselves of the Importance of Internationalization" in 144.

Thoughts

Don't worry about what anybody else is going to do. The best way to predict the future is to invent it. — Alan Kay

An inspirational quote that you can listen to while working out. In all seriousness, sometimes we pay more attention to what is happening around us, what others are planning for, than what we would like to see. Think about this for next week.
Cheers!

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• Kernel Storage and Circular Buffer
  https://www.kernel.org/doc/html/latest/core-api/circular-buffers.html
  https://blogs.oracle.com/linux/post/pstore-linux-kernel-persistent-storage-file-system

  Circular buffers are one of the most important data structure in most kernels, while simple in nature, and one of the basic structure students learn, there are many sub-details in their implementation. Additionally, we're taking a look at kernel persistent storage. For info ACPI ERST, that is used for persistent storage stands for "Error Record Serialization Table", as you can find here.

• KV Stores Tech
  https://www.gnu.org.ua/software/gdbm/
  https://dbdb.io/db/berkeley-db
  https://www.oracle.com/database/technologies/related/berkeleydb.html
  https://github.com/tiebingzhang/nildb
  https://git.kernel.org/pub/scm/fs/fuse/dbfs.git/tree/README
  https://github.com/basho/innostore
  https://dbmx.net/kyotocabinet/
  https://riak.com/assets/bitcask-intro.pdf

  In continuation with the above. There are so many key-value stores out there, some of them tied with Unix-like systems history. Which ones do you use?

• REBOOT
  https://keunwoo.com/notes/rebooting/

  To reboot or not to reboot, what should it even affect? That's a long running question. We've had a discussion in a forums thread before, and you can also see "No reboot" in 118, and "Don't REBOOT IT!" in 46.

• Block Manipulation
  https://eklitzke.org/the-cult-of-dd
  https://sortix.org/rw/
  https://pub.sortix.org/sortix/release/nightly/man/man1/rw.1.html

  Do you like dd, here are some food for thought that will make you rethink it.

• Corkami
  https://corkami.github.io/

  A must-known resource for visualizing certain file format and understanding them, either for reverse engineering, development, or simply fun.

• GRUB, LILO, and LOADER
  https://davmac.wordpress.com/2007/01/22/grub-vs-lilo/
  https://www.freebsd.org/cgi/man.cgi?loader(8)

  We usually don't pay much attention bootloaders unless we have multiple OS on one machine or when the system doesn't actually start. See also "Learn GRUB commands" in 106.

• Dracut
  https://dracut.wiki.kernel.org/index.php/Main_Page
  https://wiki.archlinux.org/title/Dracut

  I wasn't aware of dracut, maybe you weren't too. Time to learn something new.

• PPG Implementation and Complexity, Lessons to Learn
  https://articles.59.ca/doku.php?id=pgpfan:tpp
  https://www.arp242.net/signing-emails.html
  https://secushare.org/PGP
  https://autocrypt.org/

  See also "PGP keys and the usual nag" in issue 134, "Chrome and crypto" in issue 94, and "Why we should use plain text emails" in 75, and "Don't use PGP? Why?" in 42. Suffice to say, that's a topic everyone seems to have an opinion on, kind of like any topic that resonates as to why any specific thing never took off and retrospectively explaining it.

• v4l2 and gstreamer
  https://aweirdimagination.net/2020/07/05/gstreamer-webrtc/
  https://aweirdimagination.net/2020/07/12/virtual-web-cam-using-gstreamer-and-v4l2loopback/

  The above are related to a new personal project/research I got interested in. While, similar to the second post, I'm still figuring it out why it doesn't work in some place. I got the camera to show up on one of my machine when the resolution was either 320x240 or 1280x720, or probably any multiple of that. Weirdly, the same approach that worked on Arch Linux didn't work on Ubuntu. I'll write more on that when I actually understand what's happening. If you want to give it a shot, be sure to specify the aspect ratio, otherwise even the test source won't show up in applications, example: gst-launch-1.0 -vet videotestsrc ! video/x-raw, format=YUY2, width=1280, height=720 ! v4l2sink device=/dev/video42

• Debian, People Like to Hate on It..
  https://unixsheikh.com/articles/the-delusions-of-debian.html

  To me this sounds like generic issues of any community. See also "Extra because we've already followed this stuff before" in 118, and "Nagging about Debian" in 64.

Life & Other

• Geeks, MOPS, and Sociopaths
  https://meaningness.com/geeks-mops-sociopaths

  A twist on the classical path that community/niche takes, or even any trend takes. In marketing terms, from early adopters to late adopters.

Thoughts

There are no shortcuts to any place worth going ― Helen Keller

Life can take us on so many path, some of them taken deliberately, some of them serendipitously. Yet, when we yearn for something, we want to arrive there early, but for things that matter, it's the road that is more important than the end.
Enough sentimental jargon, enjoy the week!

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• Unix For poets
  https://web.stanford.edu/class/cs124/kwc-unix-for-poets.pdf
  https://www.everything2.com/title/UNIX+poetry

  Frankly, I don't think I got the first joke, but the rest of the content is amazing. Somewhat related to this thread on the forums.

• Gestures Related Stuff
  https://github.com/JoseExposito/touchegg
  https://github.com/NayamAmarshe/ToucheggKDE
  https://github.com/Coffee2CodeNL/gebaar-libinput
  https://linuxtouchpad.org/docs/

  Gestures on Laptops are not everyone's cup of tea, yet they open a world of possibilities akin to what is seen in sci-fi movies. See "Libinput and Synaptics driver" in 119 and also "UX and scrolling" in the recent 143 issue.

• Pondering About System Design and System Thinking
  https://apenwarr.ca/log/20201227

  A lengthy article about system design, put aside your previous knowledge on the topic and you'll enjoy it. It tackles many facets of why things are never as obvious as they seem.

• Thread Scheduling
  https://web.archive.org/web/20190427214335/http://www.unobvious.com/bsd/freebsd-threads.html
  https://en.wikipedia.org/wiki/LinuxThreads
  https://www.icir.org/gregor/tools/pthread-scheduling.html

  Two docs that are quite dated yet they give insight into the attempt at improving and trying out different threading features. See also "pthread scheduling on FreeBSD and Linux" in 35 and "Threads" in 139.

• A Start With eBPF
  https://devopsspiral.com/articles/linux/ebpf-unlock/
  https://filipnikolovski.com/posts/ebpf/
  https://jvns.ca/blog/2017/06/28/notes-on-bpf---ebpf/

  These are some good and approachable content to get started with eBPF.

• nftables, iptables, and pf
  https://www.openbsd.org/faq/pf/
  https://www.openbsd.org/faq/pf/filter.html
  https://linuxhandbook.com/iptables-vs-nftables/
  https://wyssmann.com/blog/2021/07/packet-filtering-in-linux-iptables-nftables-and-firewalld/

  Firewalls as they are commonly called, or packet filtering, are some of the tech that I find the most confusing. Hopefully, there's always good online content to read, and re-read, in case I need help figuring things out. See also 'translate("douane") == "customs"' in 22, "Firewalls" in 3, "Packet Filter Rule Editor for OpenBSD pf Firewall." in 127, "Firewalls on Linux" in 72,, and more

• Fail2ban: an enemy of script-kiddies
  https://debaday.debian.net/2007/04/29/fail2ban-an-enemy-of-script-kiddies/
  https://blog.sailed.io/fail2ban-wordpress-digitalocean/
  https://mvcp007.wordpress.com/2017/05/22/how-to-protect-ssh-with-fail2ban-on-rhel-7/

  Fail2ban is one piece of software that has saved me against attacks more than once. However, I can't say I fully understood it before reading the above articles.

• Overview of system protection and Linux CAP
  https://www.cs.uic.edu/~jbell/CourseNotes/OperatingSystems/14_Protection.html
  https://k3a.me/linux-capabilities-in-a-nutshell/

  Permissions, privileges, capabilities, policies, access control, authentication, authorization, trust mechanism, ownership policies, domains policies, it can get confusing when this type of jargon intermixes. The above links are great overview of basic OS security concepts. Additionally there's a section in the classic "dinosaur book" about that.

• It's Hard to Stay Idle
  https://web.archive.org/web/20150531232807/http://www.hardwaresecrets.com/article/611
  https://lwn.net/Articles/602479/
  https://www.kernel.org/doc/html/v5.0/admin-guide/pm/cpuidle.html
  https://lwn.net/Articles/767630/

  It seems natural to think that doing nothing, staying idle, is the natural state of affairs, on computers it's quite the oppostire. See also 'Some lwn with Linux inspired by BSDs' in 97 and "Power consumption control" in 137.

• More on accessibility
  https://christianheilmann.com/2021/07/20/the-accessibility-stalemate/
  https://scribe.rip/@r.d.t.prater/linux-accessibility-an-unmaintained-mess-8fbf9decaf8a

  A continuation of last week's accessibility related articles, this time with a bunch of rants.

Life & Other

• Vintage computing
  https://ub.fnwi.uva.nl/computermuseum/X1.html

  Reading specs of older machines is a way to travel in time, especially when comparing them with today.

Thoughts

Wear sunscreen
https://www.goodreads.com/work/quotes/1198000-wear-sunscreen

A classic monologue, with a single punchline. Yet, I also think sunscreen is very important, put some today maybe.

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• Thinking About Accessibility
  https://wiki.gnome.org/Accessibility
  https://wiki.gnome.org/Accessibility/IntroATs
  https://community.kde.org/Accessibility
  https://opensource.com/life/15/5/accessibility-linux

  Accessibility is something we often dismiss, so here are a few links from two of the most used desktop environment on free Unix-like OSes. On one side we have a suite of software such as magnifier, automatic clicker, gestures, text-to-speech (screen readers), Braille display, and speech recognition. On the other side we have generic UX guidelines (which I found the link was dead for KDE) and then the software counterpart shown as an instance or solution to certain guidelines. Additionally, there is a list of distributions that catters to specific needs listed in that last article.

• Reminding Ourselves of the Importance of Internationalization
  https://www.linuxjournal.com/article/6176
  https://www.linuxjournal.com/article/3286

  While internationalization is not as overlooked as accessibility, it's also something that isn't easy to do properly (especially outside of business settings). See also "Text on computers" in 137, "Unicode" in 72, Unicode in 116, and many others.

• Sabayon Linux
  https://www.unixmen.com/interview-with-fabio-erculiani-of-sabayon-linux/
  http://www.sabayon.org/

  Sabayon is a unique Linux distro, it combined source based package management, rolling release, and friendliness. It's my first time hearing the term "meta-distribution" but I think it resonates well, a distribution used as a building block for another one.

• Discussions on Package Management
  https://distrowatch.com/dwres.php?resource=package-management
  https://web.archive.org/web/20171017151526/http://aptitude.alioth.debian.org/doc/en/pr01s02.html
  http://ianmurdock.debian.net/index.html%3Fp=437.html
  http://www.cs.cornell.edu/courses/cs2043/2019sp/_data/lecture-source/lecture-slides/light/17_package_management.pdf
  https://github.com/jordansissel/fpm
  https://en.wikipedia.org/wiki/List_of_software_package_management_systems
  https://www.haskellforall.com/2022/05/the-golden-rule-of-software.html

  We're drowning in package management systems, from language-specific ones to distributions one. But what is a package manager?

• CLI Conventions and Doc
  https://blog.liw.fi/posts/2022/05/07/unix-cli/
  https://explainshell.com/
  https://dashdash.io
  https://tldr.sh/
  https://www.mankier.com/

  Multiple of these websites have the same function, they act as "easier" or more "approachable" and quick documentation than man pages. Somewhat related to this forums thread and this one also, especially the links in it.

• Another one of these Brain Dump
  https://furbo.org/2014/09/03/the-terminal/

  Similar to "Dumps that everyone just glimpse at for 5min and forget" in 141, this is a tips and tricks article that was posted on most tech news websites. You can glimpse at it, maybe you'll find something useful.

• How to Use GNU Info
  https://znpy.wordpress.com/2016/12/08/learn-how-to-use-gnu-info/
  https://linuxhint.com/read-gnu-info-without-emacs/
  https://gist.github.com/egmontkob/eb114294efbcd5adb1944c9f3cb5feda

  Info pages are one of the lesser used documentation system, at least the people I know have been avoiding it. Yet, it is a very complete and deep system that covers a lot. I've also added a link to a terminal escape sequence for hyperlink, as it's something I've seen a lot there.

• Advanced sudo-ing techniques
  https://www.sudo.ws/posts/2022/05/sudo-for-blue-teams-how-to-control-and-log-better/
  https://manpages.debian.org/unstable/libpam-modules/faillock.conf.5.en.html

  Frankly, I had no clue sudo had all these features, but I can't say I've used it that much either. Additionally, I've linked faillock, because I always forget this even exists.

• Perl History
  https://history.perl.org/PerlTimeline.html

  Everyone loves Perl (presumptuous to say), it's tied to Unix history and the web. The history laid down on this page show this clearly, very interesting to go through all this.

• A book on Algorithms For Modern Hardware
  https://en.algorithmica.org/hpc/

  I just started reading this book, it's still a work-in-progress, yet so far it's extremely valuable. It breaks many of the misconception about algorithm complexity calculations and how to achieve fast code in the current age.

Life & Other

• Thought Terminating Cliché
  https://fernandogros.com/cliches-and-thought-terminating-cliches/

  Some insightful article on the topic of "thought terminating cliché". Let me know if you enjoy this stuff too.

Thoughts

Never wrestle with a pig. You’ll both get dirty and the pig likes it.

In continuation with the previous link, sometimes a fight isn't worth fighting.

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• Security on top of seccomp
  https://firejail.wordpress.com/
  https://github.com/projectatomic/bubblewrap
  https://wiki.archlinux.org/title/Bubblewrap
  https://www.chromium.org/chromium-os/developer-guide/chromium-os-sandboxing/
  https://chromium.googlesource.com/chromiumos/docs/+/HEAD/sandboxing.md

  There are now countless tech that rely on "container/sandbox" features of the Linux kernel. Here we're taking a look at some that use seccomp, along others, which we've seen in the previous issue (140). An indicator of a good building block technology is how useful it is. Related, check out "Unveil @ BSDCan" of issue 128, "Capsicum" in 101, and "execpromises" in 69.

• Jails
  https://freebsdfoundation.org/freebsd-project/resources/introduction-to-freebsd-jails/
  https://eerielinux.wordpress.com/2017/03/30/freebsd-jails-12-introduction-and-frameworks/
  https://blog.jessfraz.com/post/containers-zones-jails-vms/
  https://serverfault.com/a/944359

  In sync with the previous links, let's explore jail, a FreeBSD pioneering containerization technology. First we got some definition, then an introduction to the usage, afterward comparisons with similar technologies.

• umask and sticky bit
  http://www.bodenzord.com/archives/53
  https://abcofaix.wordpress.com/tag/sticky-bit/

  A topic that is pretty basic but that I thought of reviewing, because why not refresh our memories on these. For other special attributes, see also "Setuid... again!" in 28, "Oh so confusing setuid" in 8, and "Allow changing uid in range" in 89.

• netbsd's pkgsrc
  https://www.pkgsrc.org/
  https://coderoasis.com/package-source-an-introduction/

  In continuation with our series on universal package managers, this week we're giving pkgsrc a glance. Unlike most of the previous ones, this is a source base package manager, but that incidentally also supports binary package in pkgin instead of pkgsrc (unlike the reverse which is more common today). See also "A series on NetBSD pkgsrc" in 91.

• Nix vs Guix
  https://gist.github.com/abcdw/e54807b0a25e61fe2cf1bf8991410f83
  https://news.ycombinator.com/item?id=16490027

  Extra links for our universal package manager series, with some package manager that could also possibly be considered source based, but with a "reproducible" touch to them.

• Some ZFS good stuff
  https://web.archive.org/web/20170829215812/https://wiki.illumos.org/download/attachments/1146951/zfs_last.pdf
  https://papers.freebsd.org/2019/COSCUP/philip-ZFS-filesystem.files/The%20ZFS%20filesystem.pdf
  https://pages.cs.wisc.edu/~remzi/Classes/736/Fall2007/Projects/BrianKynan/paper.pdf
  https://web.archive.org/web/20151208192725/https://blogs.oracle.com/dcb/entry/zfs_boils_the_ocean_consumes
  https://arstechnica.com/information-technology/2015/12/rsync-net-zfs-replication-to-the-cloud-is-finally-here-and-its-fast/

  ZFS has been a true game changer in the file system space. We're going through a series of link, from two dated presentation on ZFS presenting the goals and ideas (both are very similar) to more up-to-date critics, practical applications, and examples.

• The Plain Text and "Low-Tech" Trend
  https://solar.lowtechmagazine.com/power.html
  https://danluu.com/web-bloat/
  https://100r.co/site/home.html
  https://tilde.town/
  https://plaintextproject.online/tools.html
  https://sjmulder.nl/en/textonly.html
  https://250kb.club/
  https://utcc.utoronto.ca/~cks/space/blog/web/PlainHTMLAppeal
  https://utcc.utoronto.ca/~cks/space/blog/web/OnNeedingJavascript

  I find such initiatives both beautiful, useful, and humane. Maybe in the next weeks we can focus on a series of link about accessibility and internationalization. See also "Slowing down your internet" in 130 and "Website obesity" in 17.

• Web Tracking and Fingerprinting
  https://owasp.org/www-pdf-archive/OWASP_AppSec_Research_2013_-_Webfingerprinting.pdf
  https://resources.infosecinstitute.com/topic/means-and-methods-of-web-tracking-its-effects-on-privacy-and-ways-to-avoid-getting-tracked/
  https://www.usenix.org/system/files/sec21-laperdrix.pdf
  https://www.researchgate.net/publication/330716497_A_Web_Browser_Fingerprinting_Method_Based_on_the_Web_Audio_API
  https://dl.acm.org/doi/10.1145/2976749.2978313
  https://www.securitee.org/files/trackblock_eurosp2017.pdf

  A stack of links about fingerprinting techniques research, yet this only covers a small subset of all the probably proprietary techniques out there. We were wondering on IRC if there was a comprehensive list of all the possible fingerprinting ways and the frequency of their usage, the last two links should give an approximate idea. There's a reason so much money is poured into this nefarious space.

• Multicast Networking
  https://www.firewall.cx/networking-topics/general-networking/107-network-multicast.html
  https://myopsblog.wordpress.com/2016/07/11/how-to-enable-multicast-on-linux-network-interface/
  https://docs.freebsd.org/en/books/handbook/advanced-networking/
  https://manpages.debian.org/testing/tstools/tsplay.1.en.html

  I didn't find a command line tool similar to ipcalc but for mac address, showing vendors and other useful info. If anyone has a link let me know. I did find an online one though.

• UX and scrolling
  https://bootcamp.uxdesign.cc/natural-scrolling-mac-vs-reverse-scrolling-windows-e48656275081?gi=946b1f52038c
  https://jessequinnlee.com/2015/07/25/natural-scrolling-vs-reverse-scrolling/
  https://slate.com/technology/2011/09/apple-s-mousetrap-why-did-apple-reverse-the-way-we-scroll-up-and-down.html
  https://tedium.co/2021/12/29/natural-scrolling-history/

  Ever wondered about what "natural scrolling" means, or if it's even "natural"? Or just wondered why Apple always does their own thing, then these are for you. Generally, it's a philosophy on what the intent of the user is, pushing the page, or moving the text/viewport. See also "skeuomorphism" in 16. What setup do you have on your current machine, do you like it, and why?

Life & Other

• Information Bias
  https://sphweb.bumc.bu.edu/otlt/MPH-Modules/PH717-QuantCore/PH717-Module10-Bias/PH717-Module10-Bias6.html
  https://sph.unc.edu/wp-content/uploads/sites/112/2015/07/nciph_ERIC14.pdf
  https://catalogofbias.org/biases/information-bias/

  In a world of analytics, it's good to be aware that collection of information can be biased and sometimes not reflective of expectations.

Thoughts

A ship in harbor is safe, but that is not what ships are built for. — John A. Shedd, according to Quote Investigator

There's a lot of things we prepare for indirectly, unconsciously, but never actually practically do. Maybe because we're afraid of failure, consequences, or the unknown. This week, let's ponder on such scenarios, turning them from tacit to explicit and deliberate.

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• A manager for env variables
  https://direnv.net/

  This has been posted everywhere, but worth sharing again. A tool that makes a lot of sense in retrospect and makes you wonder why this wasn't done before. The idea is very simple and intuitive too, so kudos for that.

• Some shell scripting tips
  http://cfaj.ca/shell/cus-faq-2.html

  I appreciate that they included the behavior on at least 3 differnt shells, there's a lot of things I wasn't aware of. Take a look maybe there are things you'll find useful too.

• Shell startup
  https://blog.flowblok.id.au/2013-02/shell-startup-scripts.html
  https://heptapod.host/flowblok/shell-startup
  https://www.vanimpe.eu/2014/01/18/different-shell-types-interactive-non-interactive-login/

  The first link was already posted in "Bash and shells" 57 and "The Janetsh project and other shell related things" 129 but I feel like it needs to be reviewed from time to time, especially the flowchart in the Implementation section.

• FreeBSD POSIX compliance
  https://people.freebsd.org/~schweikh/posix-utilities.html
  https://people.freebsd.org/~mike/.c99/
  https://wiki.freebsd.org/FreeBSD_and_Standards?highlight=%28POSIX%29

  While quite old, and I couldn't find an updated version of this initiative other than the last wiki page, I'm wondering what it would look like today. Have we drifted more or not, and is that overall good to take more flexibility away from POSIX. I'd also be interested in seeing the same list of utilities compared with some other distros.

• Container piece by piece
  https://jvns.ca/blog/2016/10/10/what-even-is-a-container/
  https://avatao.com/blog-life-before-docker-and-beyond-a-brief-history-of-container-security/
  https://blog.lizzie.io/linux-containers-in-500-loc.html

  Another topic that we've seen before in "Containers from scratch" in 51 and "Docker Internals" in 105. Yet, again, always good to take it apart to see the inner piece and not the brands/trends that were built on top of the basic components, a make-pretend. Next week we'll focus on jails.

• Seccomp
  https://code.google.com/archive/p/seccompsandbox/wikis/overview.wiki
  https://www.kernel.org/doc/Documentation/prctl/seccomp_filter.txt
  https://www.kernel.org/doc/html/latest/userspace-api/seccomp_filter.html
  https://lwn.net/Articles/656307/

  Since we're at it, seccomp was mentioned in the previous section, so let's have a look at the Linux secure computing mode. The two links in the middle are mostly the same, just differently formatted. We can also have a series on more security infrastructure/components which are sometimes mostly based on top of seccomp, MAC such as SELinux see also "LSM" in 139, and also e?BPF (since it seems to be used to implement seccomp).

• Docker as a Universal Package Manager
  https://dzone.com/articles/docker-as-package-manager-for-linux
  https://alexander.holbreich.org/package-manager-vs-docker/

  In continuation with the previous links and the series on containarized universal package managers, let's consider docker as an instance of that. Do you think it's a good idea, should it be used for particular programs that have complex setup only, for temporary testing, or for most things. What do you think?

• More on Secure Distros
  https://subgraph.com/
  https://subgraph.com/sgos/graph/index.en.html
  https://fuchsia.dev/fuchsia-src/concepts/principles/secure
  http://isyou.info/jowua/papers/jowua-v12n3-3.pdf

  Two different OS that are considered "secure": Subgraph (Linux based) and Fuchsia (custom with POSIX compatibility). See also "Immutable distros" in 137. Similarly, the same mindset is applied to Subgraph, applications are sandboxed from each others and the system, Fucshia adds a new concept of kernel object-capabilities.

• PAM and OAuth2
  https://warlord0blog.wordpress.com/2021/01/13/pam-and-oauth2/
  https://github.com/shimt/pam-exec-oauth2
  https://www.aplawrence.com/Basics/understandingpam.html

  The first article uses the second link (repo) to achieve authentication using PAM via OAuth2. Having personally worked with OAuth2 implementation, and knowing we had a fascinating talk on that at the nixers conf, I think it's pretty relevant. I've also added a link on understanding some sequential PAM configs in general, it's a messy piece of software.

• initramfs, ramdisk, initrd
  https://landley.net/writing/rootfs-intro.html
  https://web.archive.org/web/20150402090928/https://www.kernel.org/doc/Documentation/initrd.txt

  Read up on the small history of initramfs, why it's used, and its advantages over other solutions.

Life & Other

• Since when have we been polite?
  https://www.youtube.com/watch?v=U9qIwF5YcjA

  There's a lot of things we take for granted because we're inundated with them and haven't experienced otherwise. This channel (with videos translated in multiple languages) offers a lot of valuable historical distance to these topics.

Thoughts

Friendship is always a sweet responsibility, never an opportunity. — Khalil Gibran

Be there for the people around you, this is something these past few years have made even more apparent. "A friendship isn’t a forced duty or responsibility, it’s a relation that we choose to keep out of love."

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• CGI and x?inetd
  https://github.com/xinetd-org/xinetd
  https://developer.ibm.com/articles/au-spunix-inetd/
  http://talby.rcs.manchester.ac.uk/~isd/_unix_security/unix_security_survey.8.html
  https://www.oreilly.com/openbook/cgi/ch01_01.html
  https://rickcarlino.com/2019/what-were-cgi-scripts.html
  https://datatracker.ietf.org/doc/html/rfc3875

  xinetd is an upgrade to inetd (a socket wrapper) with access control features and others added, nothing new here, it's been around for a long time. We've also seen it in issue 58 "Network and servers". Along with that classic piece of software, we can also wonder about the difference with CGI scripts. CGI scripts are similar, but have standardized params that they receive from the server (Blame or praise them for the advent of web 2.0).

• Visualising routes
  https://github.com/ocochard/graphpath

  There are countless of these terminal tools to visualise anything. Let's try to highlight one every week. Send inspirations, especially those without dependencies.

• TLS and crypto
  https://blog.boot.dev/cryptography/elliptic-curve-cryptography/
  https://tls.ulfheim.net/

  Some content about TLS and elliptical curves. See also "NIST P-256" in issue 27. The TLS byte-by-byte explanation is very useful, at least one of the most useful I've seen.

• A Story About Logging Caveats
  https://www.uninformativ.de/blog/postings/2022-04-15/0/POSTING-en.html

  On the first point about time, you also got to consider that the machine should not drift away, thus needs a solid NTP on it. On the context part, I'd also add that it's useful to have a context ID for related logs in the same "session" or whatever the equivalent is. I agree with the conclusion, logs are always more complex than we think, a rookie mistake is to underestimate their importance!

• Linux Load Average
  https://utcc.utoronto.ca/~cks/space/blog/linux/LoadAverageWhereFrom
  http://www.brendangregg.com/blog/2017-08-08/linux-load-averages.html

  The load average metric is quirky, not easily understood by newcomers, but sort of useful for long-term vision on servers. On your daily-local-machine I'm not sure it's very useful.

• Documentation Tips
  https://documentation.divio.com/
  https://www.heinrichhartmann.com/posts/writing/

  There are many of these didactic articles about how to write for other devs, be it documentation or other tech-related article. Personally, I've enjoyed that first system, even though it's simplistic it's a good basis to start from. Valuable information, in the Shannon-Weaver model, is that which reduces ambiguity.

• Dumps that everyone just glimpse at for 5min and forget
  https://github.com/jlevy/the-art-of-command-line
  https://github.com/trimstray/the-book-of-secret-knowledge

  These types of GH pages that aggregate links and ideas from everywhere, that are somewhat related to a single topic, are not the cup of tea of everyone. Personally, I find that they're good to glimpse at quickly, maybe get inspired to dive into a thing that caught the attention, something new.

• NetBSD kernel modules
  https://saurvs.github.io/post/writing-netbsd-kern-mod/
  https://www.netbsd.org/~lneto/bsdconbr15.pdf
  https://www.netbsd.org/gallery/presentations/mbalmer/fosdem2012/kernel_mode_lua

  NetBSD has multiple ways to write code that uses the kernel, modules or scripting using lua. In a way it's sort of similar to eBPF these days and in the presentation is shown as doing something like it.

• AppImage, run a standalone application on Linux
  https://appimage.org/
  https://docs.appimage.org/introduction/quickstart.html
  https://www.techrepublic.com/article/why-i-have-a-problem-with-appimages-on-linux/
  https://github.com/rb6-cyber/awesome-appimage

  In continuation with our series on standalone universal containarized package managers, this week we'll take a look at AppImage. Unlike Flatpak and Snap, AppImage isn't really a package manager but a format that let people distribute applications in a single binary, standalone, but that isn't containarizing them. In the "awesome" links there are some links to wrapper that create a package manager around it, fetching from different repositories.

• Internationalization
  https://linux.die.net/man/1/idn
  https://www.gnu.org/software/libidn/manual/html_node/Invoking-idn.html
  https://docs.oracle.com/cd/E23824_01/html/E26033/glmbx.html

  This is in continuation with "Text on computers" of issue 137. Be sure to try the --debug option when issuing idn to see what happens in between. If you want to have more fun, also check iconv and dive into the sections of the last link to compare the different formats.

Life & Other

• Google's Arts and Culture Exploration
  https://artsandculture.google.com/

  Yes, I know it's evil Google, but I'm personally enjoying that website quite a bit and thought of sharing. Tell me if it's worth it and whether you know other similar pages.

Thoughts

If you can't say something nice don't say anything at all. — Everybody's parents, friends, and teachers

I'd take this further and put it as: prioritize talking about what you love or learned instead of what bothered you, and if you absolutely have to, at least put in a constructive way. I'm definitely guilty of this too, and I know it's hard to get out when you start going down this spiral. In the age of the internet, toxicity is omnipresent. Take some time to revise your own Johari Window too, this might help.
Have a wonderful week.

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• ACME Protocol
  https://datatracker.ietf.org/doc/html/rfc8555
  https://www.thesslstore.com/blog/acme-protocol-what-it-is-and-how-it-works/
  https://letsencrypt.org/how-it-works/
  https://man.openbsd.org/acme-client.1

  Automated Certificate Management Environment is a pretty neat, simple, and flexible protocol that got created around letsencrypt. It is now ever present, with multiple clients found in most package managers.

• Core War
  https://en.wikipedia.org/wiki/Core_War
  <https://en.wikipedia.org/wiki/TIS-100 and redcode>
  http://corewars.org/
  http://vyznev.net/corewar/guide.html
  https://www.youtube.com/watch?v=HxFYva9lNzU
  https://www.youtube.com/watch?v=WqkXtWQwuTs
  https://www.youtube.com/watch?v=A8DPfQL3uO0
  http://corewar.co.uk/pmars/index.htm

  I don't think I can ever write good core war code, but I find it really fascinating to watch and run locally (with pmars emulator).

• Another way to make a tunnel to a home network machine
  https://kiwiziti.com/~matt/wireguard/

  The intro to the technical content is very approachable and entertaining. This solution still requires your home machine to have a fixed IP address, otherwise you'd need some private service like noip.

• Udev
  https://opensource.com/article/18/11/udev
  http://jasonwryan.com/blog/2014/01/20/udev/
  http://www.reactivated.net/writing_udev_rules.html
  https://www.man7.org/linux/man-pages/man7/udev.7.html
  https://wiki.gentoo.org/wiki/Mdev
  https://wiki.archlinux.org/title/Udev

  The first article is well-written, a fantastic intro to writing udev scripts. The reactivated.net article is dated, but the content still applies today. Addionally, I've added a link to the Arch wiki, and one to mdev on the Gentoo wiki, which can be used instead of udev.

• WSLg Architecture
  https://devblogs.microsoft.com/commandline/wslg-architecture/

  WSLg is a feat of integration. Reading that blog gives insight in what can be done and what is needed to interface with a Linux when embedded within another system.

• Boot Splash
  https://people.freebsd.org/~rodrigc/doc/handbook/boot-splash.html
  https://www.freebsd.org/cgi/man.cgi?query=splash&sektion=4
  https://en.wikipedia.org/wiki/Bootsplash
  https://unix.stackexchange.com/questions/17439/creating-a-boot-splash-screen
  https://man.openbsd.org/boot.8
  https://codeberg.org/castagnini/bsdsplash/src/branch/master

  I use PabloDraw for drawing ascii, I had no clue this could be used for splash screen on FreeBSD. Enjoy different ways to set this up.

• Snap
  https://hackaday.com/2020/06/24/whats-the-deal-with-snap-packages/
  https://www.omgubuntu.co.uk/2022/01/canonical-announces-big-changes-for-future-of-snapcraft
  https://phoenixnap.com/kb/snap-packages
  https://www.freecodecamp.org/news/managing-ubuntu-snaps/
  https://www.zdnet.com/article/multiple-vulnerabilities-found-in-snap-confine-function-on-linux-systems/
  https://www.qualys.com/2022/02/17/cve-2021-44731/oh-snap-more-lemmings.txt

  Last week we've taken a look at Flatpak now it's time for Snap. Snap is one of these software that gathers black and white thinking: it is either heavily criticized or really liked, I'll let you decide on your opinion on it.

• A foray into Linux kernel exploitation on Android
  https://mcyoloswagham.github.io/linux/
  https://github.com/OWASP/owasp-mstg

  Reverse engineering is amazing, the sequence of questions, seeking, and looking for ways around is so perfectly executed. It's like watching one of these movies where the protagonist put the clues of the mysteries together to finally solve it (However, here the author didn't actually find a real solutino).

• A pause to read on signals
  https://blog.cloudflare.com/why-is-there-a-v-in-sigsegv-segmentation-fault/
  https://rachelbythebay.com/w/2018/04/16/signal/

  Signals is the IPC mechanism that is the most feeble, yet the one that stood the test of time, whatever your opinion on them. See also "30s review of signals under Linux" in issue 129 (links dead, you can use archive.org to retrieve them) and "Signals for IPC? NO!" in issue 81.

• Kernel Fastboot
  https://lpc.events/event/4/contributions/281/
  https://www.youtube.com/watch?v=A7N_O8pnyTw

  It seems a lot of inovations and sponsorship these days is coming from the automotive industry and iot. This is coming with particular requirements for this specific environment. What's interesting here is that most of the optimization consist of just adding cmdline kernel params when booting. (PS Note that this is different than Android Fastboot protocol)

• Extra: Dotfiles history
  https://myme.no/posts/2022-04-11-a-dotfile-history.html

  The iterative historical approach to story telling and learning is one of my favorite explanation technique.

Life & Other

• Escapism
  https://tvtropes.org/pmwiki/pmwiki.php/Main/Escapism
  https://www.researchgate.net/publication/348327788_Are_There_Two_Types_of_Escapism_Exploring_a_Dualistic_Model_of_Escapism_in_Digital_Gaming_and_Online_Streaming

  Tv Tropes is one of my goto website, it's a place that says outloud what we keep within. Since art often is a reflection of reality, these tropes are also a reflections of our humanity. What do you think of escapism?

Thoughts

Each picture has some sort of rhythm which only the director can give it. He has to be like the captain of a ship. - Fritz Lang

Coming from a film mastermind like Fritz Lang, this quote displays the difference in quality between craftmanship and mere industrial consumption. Do you feel the passion that you put in work, or that other put, shows up in the end?

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• Flatpak and critics
  https://flatpak.org/
  https://github.com/flatpak/flatpak
  https://docs.flatpak.org/en/latest/getting-started.html
  http://flatkill.org/
  http://flatkill.org/2020
  https://ludocode.com/blog/flatpak-is-not-the-future
  https://flatpak.github.io/xdg-desktop-portal/portal-docs.html

  There are different standalone package managers technologies out there, some using the idea of containarized applications, some not. For this week, let's focus on flatpak and its philosophy and critics.

• pipewire and video
  https://pipewire.org/
  https://blogs.gnome.org/uraeus/2021/10/01/pipewire-and-fixing-the-linux-video-capture-stack/
  https://gitlab.freedesktop.org/pipewire/pipewire/-/wikis/home
  https://gstreamer.freedesktop.org/

  If you haven't heard of pipewire yet, check it out. It's a new multimedia server that covers both video and audio. Their homepage got a relooking some while ago, it's more straight to the point. While they had mainly focused on audio for the past years (the whole wiki is about that), they're now putting back efforts on the video side which, when I tested it and dived into the audio stack in general, it was still a bit immature. While you're at it, you can take a look at gstreamer too. Maybe a dive into the video and video-capture stack of different Unix-like systems is needed!

• UnionFS
  https://en.wikipedia.org/wiki/UnionFS
  https://www.unix.com/man-page/FreeBSD/8/mount_unionfs/
  https://unionfs.filesystems.org/

  A stackable unification file system. We saw it while reading during the book club, from Plan9 intro to OS, it' similar to union mount. It's pretty fascinating that the idea has been ported to so many places.

• AWK fast
  https://ketancmaheshwari.github.io/posts/2020/05/24/SMC18-Data-Challenge-4.html
  https://lwn.net/Articles/820829/
  https://blog.jpalardy.com/posts/why-learn-awk/

  AWK is a must-known, even if just a little. It's so versatile and useful. See also "Special tejr" in issue 23, the link itself is dead but you can find it on archive.org.

• Less confusion about terminal colors
  https://github.com/termstandard/colors

  A follow up on last week's issue 138 "Colorful scripts". This doc does a pretty good job at summarizing the different ways to display color on terminal and checking for support.

• Smartcards
  https://wiki.archlinux.org/title/Smartcards
  https://ludovicrousseau.blogspot.com/2014/03/level-1-smart-card-support-on-gnulinux.html
  https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/system-level_authentication_guide/smartcards
  https://help.ubuntu.com/community/CommonAccessCard
  https://tech.springcard.com/guides/pcsc-unix-with-pcsclite/
  https://www.mutek.com/mutek-pcsc-readers-pcsc-lite-linux/

  Smartcards are part of our everyday life, however they can be hard or intimidating to interface with. Yet, they're cheap to acquire along with a reader, and very common. The above links should get you started on this journey.

• LSM
  https://en.wikipedia.org/wiki/Linux_Security_Modules
  https://docs.kernel.org/security/lsm.html
  https://www.usenix.org/legacy/event/sec02/full_papers/wright/wright.pdf
  https://kernelnewbies.org/Documents/Kernel-Docbooks?action=AttachFile&do=get&target=lsm_2.6.29.pdf

  The Linux Security Module was implemented by the initiative to create Mandatory Access Control (MAC) in the kernel. It was proposed by the NSA as a patch to include SELinux but wasn't directly accepted as is, and LSM was created as the more flexible base for layers of security modules that have hooks in specific kernel APIs. The paper introducing it is an easy read for anyone that wants to have a generic idea on the matter.

• Threads
  https://www.icir.org/gregor/tools/pthread-scheduling.html
  https://papers.freebsd.org/2020/bsdcan/mckusick-scheduling_in_the_freebsd_kernel/
  https://people.freebsd.org/~hsu/publications/dragonflybsd.asiabsdcon04.pdf
  https://www.ibm.com/docs/en/aix/7.1?topic=processes-kernel-threads-user-threads

  A list of linkes about threads and scheduling on different Unix-like systems. The first link is sort of dated but gives a good coverage of thread terminologies.

• DNS unmystification
  https://ariadne.space/2022/03/27/the-tragedy-of-gethostbyname/
  https://venam.nixers.net/blog/unix/2020/11/01/resolving-a-hostname.html
  https://tailscale.com/blog/sisyphean-dns-client-linux/

  We posted some content related to DNS before such as "glibc and DNS" issue 123, "DoH implementation" issue 116, "Networking" issue 89. Here's some additional analysis of this essential piece of tech.

• Rethink the shell
  https://arcan-fe.com/2022/04/02/the-day-of-a-new-command-line-interface-shell/

  The shell/TTY/terminal interaction is hard to replace because of legacy, yet the author of Arcan is putting forward a strong case for how to reinvent it.

Life & Other

• Locality Bias
  https://www.scmp.com/infographics/article/1810040/infographic-world-languages
  https://www.lucasinfografia.com/Mother-tongues

  Language shapes how we see the world and what information is accessible to us along with how it's interpreted. These infographic are but a small piece of the equation, think about all the other factors that make us pay attention to certain things and not others.

Thoughts

When a thing looks complicated, it's possible that we're looking at it wrong and missing some of the pieces of the puzzle.

I like this quote, it applies in multiple places. Sometimes the pieces of the puzzle are missed because they're out of our expertise, touching domains that weren't even in our concern when approaching the problem.

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• systemd by example
  https://seb.jambor.dev/posts/systemd-by-example-part-1-minimization/
  https://seb.jambor.dev/posts/systemd-by-example-part-2-dependencies/
  https://seb.jambor.dev/posts/systemd-by-example-part-3-defining-services/

  Some people have an adverse reaction to systemd, yet it's always good to understand it, even if you have feelings about it. This series of posts is really informative, especially that there aren't that many like it.

• Thinking about PID1 in containers
  https://blog.phusion.nl/2015/01/20/docker-and-the-pid-1-zombie-reaping-problem/
  https://petermalmgren.com/signal-handling-docker/
  https://stackoverflow.com/a/32575543
  https://blog.no42.org/code/docker-java-signals-pid1/
  https://github.com/fpco/pid1
  https://github.com/Yelp/dumb-init

  When running random processes as PID1 you are bound to find issues, and that's what people have been doing, noticing and fixing. In the first article you can skip directly to the section "Relationship with Docker", the same idea is repeated in the second one.

• Building at home
  https://nullprogram.com/blog/2017/06/19/

  Let's start slowly with the idea of installing in $HOME. Next we can dive into separate solutions, chroot, jails, nix, Flatpak and others, send me interesting links you got on these for next week. Somewhat related, to https://nixers.net/Thread-How-do-you-tidy-your-home-aka-tree-L2 on the forums. On the man page in home getting automatically picked up, man has the --path option on some systems, it's explained here, with additional content here. Basically it's something in either /etc/man_db.conf or /etc/manpath.conf. I personally never realized that man pages had such config files.

• Check your FUSE
  https://github.com/libfuse/libfuse/
  https://www.kernel.org/doc/html/latest/filesystems/fuse.html
  https://www.kiebot.com/linux-fuse-the-most-underrated-linux-feature/
  https://github.com/koding/awesome-fuse-fs
  https://9fans.github.io/plan9port/man/man4/9pfuse.html
  https://github.com/libfuse/sshfs
  https://github.com/ChrisRx/dungeonfs

  Filesystem in Userspace is fantastic feature of Linux (and others apparently). The libfuse even comes with an example, that is not so hard to read. Apart from this, we can think of why this is a good feature and take a look at different implementations of the concept, some more for fun than utility.

• Shrinking the kernel
  https://lwn.net/Articles/748198/
  https://elinux.org/Kernel_Size_Reduction_Work
  https://www.linux.com/news/shrinking-linux-kernel-and-file-system-iot/

  A discussion on Linux kernel size reduction, which some points could be applied to other kernels too. "Linux on 8-bit microcontroller" of issue 125, was some quite amazing size reduction, check it out also.

• Networking: Linux bridge
  https://goyalankit.com/blog/linux-bridge

  We often talk in networking about layer 3 and 4 (network and transport in the OSI). This time let's focus on layer 2, the data link, and how it can be interfaced with using Linux bridge. Think of it like getting programming access to a (virtual) switch.

• Dmesg basics
  https://blog.ycrash.io/2021/06/28/dmesg-unix-linux-command-beginners-introduction-with-examples/
  https://man.openbsd.org/dmesg
  https://www.unix.com/man-page/FreeBSD/8/dmesg/

  A simple kernel buffer debug check, but that's a bit different from OS to OS. It's good to revisit and compare it.

• Virtual memory cache control
  https://hoytech.com/vmtouch/
  https://github.com/caisonglu/cachemaster

  A very useful tool to get info and manage fs virtual mem. The hot-standby possibility could be a useful one, but would it be more practical than to have a fs in mem like tmpfs or others. All and all, a wonderful and simple tool.

• What's a platform, what does compatibility mean, and why a platform
  https://www.jwestman.net/2021/10/26/platforms-compatibility-the-future-of-the-free-desktop.html

  A meditation on the meaning of platforms and whether there are any in open source OS. This is a question that is relevant, but that often comes up and only makes sense when comparing one OS to another. What even is an operating system, what are its boundaries?

• Colorful scripts
  https://hackaday.com/2021/06/21/a-collection-of-linux-tools-on-steroids/
  https://nixers.net/Thread-What-are-your-opinions-on-replacement-programs-for-core-utilities
  https://nixers.net/Thread-Share-your-file-opener-script

  Some posts to bring up the topic of core tools replacement and "colorization". Do you think it's worth it, do you prefer to have a separate colorization script or shell plugin?

• Extra: On last week's random
  https://lwn.net/SubscriberLink/889452/953e190af78809a7/

  A continuation to last week's newsletter. Well, that didn't last long, they found issues pretty fast.

Life & Other

• The Joy of Perl
  https://www.salon.com/1998/10/13/feature_269/

  Getting into the human side of Perl, an expressive language.

• Economic stuff
  https://www.lynalden.com/what-is-money/
  https://www.youtube.com/watch?v=B_AY4a3_-GQ
  https://bam.kalzumeus.com/archive/moving-money-internationally/

  I'm not an economist but I find it interesting to read about the above topics. Some of them related to abstractions in society such as money, another one is about a disruptive system and explanation of banking, and lastly an un-mystification of what it means to transfer money.

Thoughts

The best writing is rewriting.

It's good to have the newsletter back. Think about people, hobbies, and others that you haven't given much attention to lately, maybe it's time to rekindle, to re-form bounds.

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• Relational Pipes
  https://relational-pipes.globalcode.info/v_0/index.xhtml

  A project focusing on the pipe interface and principles plus sets of tools to convert from format to format. On that page there's a some good content about philosophy of pipes in general. Somehow this reminds me of a thread on the forums we had called "Interfaces of the future https://nixers.net/Thread-Interfaces-of-the-future which forced us to look at old problems and solutions with a set of new eyes.

• STOP, shells BAD
  https://pythonspeed.com/articles/shell-scripts/
  https://utcc.utoronto.ca/%7Ecks/space/blog/programming/BourneShellLimitation

  Shell scripts have their drawbacks, it's good to be aware of them. However, it does bring the old question of choosing at which point a script is too big to be written in shell (and which shell to run on also), and which language should be used instead. In my opinion Perl is a good option. Apart from this, we did discuss our personal opinions on the forums too here.

• An obvious privilege escalation
  https://rachelbythebay.com/w/2022/03/15/link/
  https://lkml.org/lkml/2003/11/24/86

  The bug presented is somewhat apparent, but as with a lot of security issues, it's only in retrospect that we realize how obvious it all is.

• Learn sudo the pragmatic way
  https://rtpg.co/2022/02/13/your-own-sudo.html

  An introspective exercise to build sudo in a pragmatic manner as a way to learn its inner workings. I'm a fan of this type of article, a sort of Socratic question/answer dive into things, a public brainstorming session.

• No more blocking random in the Linux kernel (LRNG)
  https://portswigger.net/daily-swig/secure-development-new-and-improved-linux-random-number-generator-ready-for-testing
  https://www.youtube.com/watch?v=8DuhbwWkMQw&list=PLbzoR-pLrL6owx0I6v2MSwjxhtsRdtFzG&index=16
  https://blogs.oracle.com/linux/post/rngd1
  https://lore.kernel.org/lkml/2036923.9o76ZdvQCi@positron.chronox.de/T/

  There's been ongoing work to merge /dev/random and /dev/urandom to have the same behavior and both be unblocking in the Linux kernel, and it has finally landed.

• Certs, keys, and keyrings
  https://blog.apnic.net/2022/03/22/whats-going-on-with-certificate-revocation/
  https://people.csail.mit.edu/rivest/pubs/Riv98b.pdf
  https://nixers.net/Thread-Key-And-Trust-Store-on-Unix-like-OS
  https://rtfm.co.ua/en/what-is-linux-keyring-gnome-keyring-secret-service-and-d-bus/

  Some related articles, one on certificate expiry, the PKI and X509 format, another on how relevant that is, and the last two on keystores, keyrings, and Linux kernel secret storage. While you're at it, you can refresh your memory about OpenSSL commands by reviewing issue 122 "CheatSheet for OpenSSL".

• Immutable distros
  https://silverblue.fedoraproject.org/
  https://www.qubes-os.org/doc/getting-started/
  https://nixos.org/guides/nix-pills/
  https://venam.nixers.net/blog/programming/2021/01/26/future-of-distros.html
  https://earthly.dev/blog/lxc-vs-docker/
  https://best-web-hosting.org/xen-vs-kvm-comparison-reviews/)

  A long while back we had countless discussions on IRC about containerization, packaging and what it actually means to have a distribution these days. We also discussed the usual containers vs VM, advantages and disadvantages. So here are a couple of links on the topic, with some immutable distro based on fedora that uses sandboxed applications, another distro called qubes OS that uses a VM manager (xen in this case) to separate programs safely, the classic Nix Pills, and more discussions about some of the tech involved in both. When I wrote that post about the "future of distros" I've received multiple toxic comments interpreting it as if it was some sort of personal dream that should be reached, meanwhile my attempt was to document the emerging trends of the day to make them more obvious. These were not things I was hoping to or willing to use (I'm definitely not a fan of all that I listed, but you know: Internet). Let's have more discussion on these!

• Power consumption control
  https://www.neelc.org/posts/freebsd-speed-shift-laptop/
  https://vermaden.wordpress.com/2018/11/28/the-power-to-serve-freebsd-power-management/
  https://www.kernel.org/doc/html/latest/admin-guide/pm/cpuidle.html

  A series of articles on how to control knobs, mostly at the kernel level, to reduce power consumption. The first two are focused on FreeBSD, and the last one is a link to the Linux kernel documentation about what the CPU does when idle.

• Linker scripts
  https://mcyoung.xyz/2021/06/01/linker-script/

  A new well-written addition to our list of linker related articles. See also, issue 131 "Demystifying firmware linker scripts", "Guide to linker" in issue 129, "Linker" in issue 106, "A simple linker example" in issue 93, and "And override libc" in issue 52.

• Nixers Conf 2021
  https://nixers.net/Thread-Nixers-net-Conf-2021

  It's already been a year, but we didn't have the newsletter up back then. So for those who missed it, this is a link to the talks that took place at the Nixers conf 2021.

Life & Other

• Text on computers
  https://www.youtube.com/watch?v=oYd2KkuZLbE

  It's always fun to talk about the assumptions we have about textual representation on machines. This talk by Dylan Beattie does a pretty good job at going into historical tidbits and anecdotes. This is somewhat related to this forums thread on unicode.

• Taking distance from war propaganda
  https://venam.nixers.net/blog/internet_communication_narrative_control_booklet.pdf

  This is a shameless plug of something I've written. Internet propaganda is thriving and everyone is attempting to drive others into their camp of vilification. This is a short research I did on the topic of narrative control on the internet, the first section is especially relevant today (The Artifacts And Spaces). Opinions are my own, so take everything with a grain of salt, and stay safe!

Thoughts

The newsletter is alive once more!
For the first edition, as you might have noticed, we're starting the easy way by sharing stuff you might have already seen on links aggregator websites. There's some re-contextualization, and extra content, and I hope it's enough to open an appetite for the newsletter again. In the next one we'll try to touch things that aren't stuck in the zeitgeist.
Let me know what you think, if it encourages you to read more, and get in touch on IRC, or help out.
Thank you!

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• Text shaping
  https://blogs.gnome.org/mclasen/2019/07/27/more-text-rendering-updates/
  https://gitlab.gnome.org/GNOME/pango/issues/386
  https://developer.gnome.org/pango/stable/pango-Markup.html

  A fantastic update to the Pango library brings us closer to true beautiful typography. Bitmap font support is dropped but I guess for those you don't really need Pango to begin with.

• xargs, the one we fear
  https://medium.com/@aarontharris/xargs-wtf-34d2618286b7

  There are only specific cases where I would personally use xargs, usually something similar to what's described in this post. Do you have other usages? Let us know.

• Containers, yes, again
  https://tutorials.ubuntu.com/tutorial/introduction-to-lxd-projects

  LXD is a cool management platform. I'm still new to all the virtualisation possibilities but I'm looking forward to trying some soon for the easy handling of future projects. I'll probably go for docker though.

• Resuming ZFS send
  https://oshogbo.vexillium.org/blog/66/

  ZFS is one amazing piece of software, and now it's even more flexible.

• What to do when it's too large
  http://moo.nac.uci.edu/~hjm/HOWTO_move_data.html

  In continuation with the previous link, how do you transfer large chunks of data on the wire. This is the goto article when it comes to transfer, it's more than complete and covers everything you need to know. We mentioned a lot of the tools in the newsletter before.

• Google data sharing protocol
  https://github.com/google/data-transfer-project/blob/master/Documentation/Overview.md

  "Users should be able to easily transfer their data directly between online service providers." So are we finally going to get the real "digital identity" we've been waiting for, the one we own? Refer back to everything we've said about digital identity previously in the archive.

• Streams and terminals
  https://lucasfcosta.com/2019/04/07/streams-introduction.html

  We've seen this blog before in "Terminal prevalence" of 119, the author is continuing on the quest of bringing knowledge about terminals. It's well done, quick and straight to the point, explanation of what terminal emulators are in relation to streams.

• Legacy of war
  https://jacoby.github.io/computer_history/2018/02/09/the-legacy-of-the-unix-wars-is-still-around-us.html

  Recalling and telling tales of the Unix war through a bug that happened today. I like wise old words.

• Making the old work again
  https://tiffnix.com/blog/2014/10/19/refactoring-legacy.html

  Who's reading this newsletter and feeling they are in the same position as the author? Well, it's not easy to maintain code over decades, through unexpected changes. This field fascinates me, how can you design a software so that it's resilient against time. Also give this game a try, it's terminal friendly!

• Portability of Tar
  https://invisible-island.net/autoconf/portability-tar.html

  This isn't a new article, far from it, but I hadn't really taken the time to read it properly before. Reading through you can really grasp how standardization is important across platform, you can refer to the Unix war article above.

• Haveged
  https://wiki.archlinux.org/index.php/Haveged
  https://issihosts.com/haveged/

  In continuation with all the randomness talk we've had. A must have for virtual machines and docker.

• Keys and truststores
  https://nixers.net/showthread.php?tid=2269

  A thread on the forums of some weeks ago about the hodgepodge of keys and certificates on your Unix machine.

• Low level is beautiful, don't be afraid
  https://www.youtube.com/watch?v=Z5JC9Ve1sfI
  http://yosefk.com/blog/low-level-is-easy.html

  In relation with most of the links in this newsletter, we are discussing the mental burden of understanding software, at every level and over time. Those links emphasize on the low-level part.

Thoughts

HE is lucky who realizes that "luck" is the point where preparation meets opportunity.

This is going to be the last newsletter in quite a while. I'm going to take a pause and free up time to study software architecture, a topic that captivates me. I'll foster my love of diagrams explaning complex software stacks.

vermaden will shortly send an email to the currently subscribed readers of this newsletter with a link to his to those who are interested.

I hope you have a wonderful week!

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• A series on text rendering on Linux
  https://mrandri19.github.io/2019/07/18/modern-text-rendering-linux-ep1.html

  Just reading the title and I'm already a fan. I've been pushing this topic a lot, "Font rendering" in 118, Unicode in 116, "Another one about fonts" in 107, "Font rendering" in 105, "Designing a font" in 102, "Again in the world of typography" in 98, "Xft but for xcb" in 91, "Font shaping" in 82, "Choosing the right typography" of 74, "Unicode" in 72, "Chinese fonts" in 71, "More on typography" in issue 63, "Font editing done good" in 56, the "Xero's Weekly Ricing Tips" of issue 34, "Fonts on Unix" in 12, "The best font dialogs" in 11.

• Arduino typewriters
  https://makezine.com/2015/07/01/48-solenoids-transform-1960s-typewriter-computer-printer/
  https://blog.arduino.cc/2017/07/05/hack-an-old-typewriter-with-arduino-for-digital-input/

  Bring back life by combining mechanics with electronics.

• Rundown on vim history
  https://begriffs.com/posts/2019-07-19-history-use-vim.html

  A really good quick overview of the history of vim and then a dive into multiple features and usage of vim.

• Hey, look here, I know the hidden secret truth
  http://www.ceri.memphis.edu/people/smalley/ESCI7205_misc_files/The_truth_about_Unix_cleaned.pdf

  1981, that was quite a while ago and the paper is dated. There are some good points in it, mostly about the system not being so straight forward.

• The evil gnome
  https://www.intezer.com/blog-evilgnome-rare-malware-spying-on-linux-desktop-users/

  Targeting the Gnome desktop on Linux is a pretty specific endeavour. It's the default on RedHat so that may be lucrative for this group. I'm not sure how difficult it is to attack a highly skilled group of sysadmin via phishing.

• Audio on NetBSD
  https://netbsd.org/gallery/presentations/nia/netbsd-audio/

  A list of changes and great work done to use the native audio API of NetBSD instead of wrappers over wrappers.

• Ansible or Puppet
  https://www.upguard.com/articles/ansible-puppet
  https://www.simplilearn.com/ansible-vs-puppet-the-key-differences-to-know-article
  https://www.devopsgroup.com/blog/puppet-vs-ansible/

  Those are not really fancy links, this is a common question asked in the world of sysop, deployment management, configuration management. If you've ever worked with a cluster of nodes you need to look into those, and also PaaS and IaaS.

• What better way to learn about syscall
  http://notes.eatonphil.com/emulator-basics-system-calls.html

  If you don't know how a technology works, then try to check underneath, if that doesn't help then try to implement it yourself.

• Letting the compiler optimize
  https://lwn.net/SubscriberLink/793253/6ff74ecfb804c410/
  http://www2.rdrop.com/users/paulmck/RCU/whatisRCU.html

  Compiler optimization is tricky, heck, those cases make me think of the gamma rays flipping bits. But compilers are allowed according to the specs, which I've just skimmed through. RCU, read-copy,update, is magic too. The world of the kernel space is full of super optimizations.

• Random (2)
  https://ericlippert.com/2019/01/31/fixing-random-part-1/
  https://ericlippert.com/2019/02/04/fixing-random-part-2/

  Following the previous week "Random oh random" of 132, we keep the talk about seeds and what are the best practices.

• Signing a wobbly format
  https://latacora.micro.blog/2019/07/24/how-not-to.html

  I've dealt with something similar not so long ago, but in XML... Oh the horror, it's the one mentioned in the post. It's tricky to do right.

• If you're curious
  https://waitbutwhy.com/
  https://what-if.xkcd.com/

  Not Unix but definitely worth sharing. Two very popular blog about asking questions and doing research to find how deep it can go.

vermaden valuable news

UNIX (vermaden)

• ZFS Command Line Reference Cheat Sheet by The IceMan Blog.
  https://www.cheatography.com/the-iceman-blog/cheat-sheets/zfs-command-line-reference/?utm_source=twitter

• Getting Bhyve to Behave on OmniOS.
  http://greymeister.net/blog/2019/07/15/getting-bhyve-to-behave-on-omnios-ce/

• ZFS on Linux Still Has Annoying Issues with ARC Size.
  https://utcc.utoronto.ca/~cks/space/blog/linux/ZFSOnLinuxARCShrinkage

• Recover Deleted Files from FreeBSD UFS.
  https://lists.freebsd.org/pipermail/freebsd-questions/2016-May/271785.html

• Insurgo PrivacyBeast (ThinkPad) X230 Laptop Meets Qubes 4.0 Hardware Certification.
  https://www.qubes-os.org/news/2019/07/18/insurgo-privacybeast-qubes-certification/
  https://insurgo.ca/produit/qubesos-certified-privacybeast_x230-reasonably-secured-laptop/

• Recommended Steps for New FreeBSD 12.0 Servers.
  https://www.digitalocean.com/community/tutorials/recommended-steps-for-new-freebsd-12-0-servers

• BSD Now 307 - Twitching with OpenBSD.
  https://www.bsdnow.tv/307

• Theo de Raadt - "FreeBSD has no exploit mitigations, at all".
  https://www.youtube.com/watch?v=OXS8ljif9b8&t=80s

• Debugging rcctl in OpenBSD.
  https://dev.to/nabbisen/debugging-opensmtpd-openbsd-s-smtpd-failed-when-starting-pl

• In Other BSDs for 2019/07/20.
  https://www.dragonflydigest.com/2019/07/20/23188.html

• Resuming ZFS send.
  https://oshogbo.vexillium.org/blog/66

• Netwait on FreeBSD.
  https://blog.danielisz.org/2019/07/20/netwait/

Hardware (vermaden)

• Cisco UCS C4200 Review with C125 M5 AMD EPYC Compute Nodes. Four (4) Compute Nodes in 2U Case.
  https://www.servethehome.com/cisco-ucs-c4200-review-c125-m5-amd-epyc/

• AMD Joins CXL.
  https://www.servethehome.com/cxl-may-have-just-won-as-amd-joins-cxl/
  https://www.servethehome.com/intel-cxl-compute-express-link-interconnect-announced/

Life & Others (vermaden)

• Hackers Breach FSB Contractor and Expose Tor Deanonymization Project and More.
  https://www.zdnet.com/article/hackers-breach-fsb-contractor-expose-tor-deanonymization-project/

Thoughts

Don't praise the knowledge, praise the thirst for knowledge.

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• Don't attack my storage
  https://threatpost.com/linux-ransomware-nas-servers/146441/

  I love how it's written as a true fight.

• Gnu Parallel examples
  https://vfoley.xyz/parallel/

  For the people who have 40 cores to spare, it sure is going to speed things up. For me, I'm not really sure.

• Making those object cli compatible
  https://codeclimate.com/blog/your-objects-the-unix-way/

  This is simple good software practice, I'm not sure it's even Unix specific. Prioritize simplicity.

• If you've never done that do it now
  https://ablagoev.github.io/linux/adventures/commands/2017/02/19/adventures-in-usr-bin.html

  A lot of things get installed as dependencies sometimes, it's hard to track down what does what. In this article you'll find, maybe, some tools you haven't seen before. I personally hadn't heard of chrt.

• PGP keys and the usual nag
  https://latacora.micro.blog/2019/07/16/the-pgp-problem.html
  https://magic-wormhole.readthedocs.io/en/latest/welcome.html
  https://riseup.net/en/security/message-security/openpgp/best-practices

  And if you want to use them please specificy and pay attention to the algorithm you support and their respected strength. Check the last article to set your personal cipher preferences.

• The metadata talk we need to have
  https://people.well.com/user/doctorow/metacrap.htm

  A must read. Why is it hard to classify things, why can't we have metadata-utopia.

• Process in-memory structure
  https://manybutfinite.com/post/anatomy-of-a-program-in-memory/

  We've seen this blog in issue 116 "Linux boot", it has great content. This one tackles a fundamental of computer science: virtual address space, process layout.

• I'll try to convince you to buy something
  https://fosspost.org/opinions/amd-on-linux

  It's an ad-article but still fun to read, don't be too influenced when buying something.

• Any disk image to virtualbox disk format
  https://blog.sleeplessbeastie.eu/2012/04/29/virtualbox-convert-raw-image-to-vdi-and-otherwise/

  I've always wanted to learn how to do this. It's quite easy now.

• The conundrum of Linux to Windows
  https://medium.com/microsoft-open-source-stories/when-linux-came-to-windows-204cf9abb3d6

  The journey to do this weird feat of porting Linux to Windows. To be honest I'm not sure where this would lead, it's been a while since the release now. Does it turn people that are working on Windows to like Linux more and try it, does it make people that prefer Linux working on Windows bear with it and not complain as much. Maybe both, we'll see how it develops.

• reproducible build of FF
  https://glandium.org/blog/?p=3923

  An extra popular topic these days, it seems like everyone is talking about reproducible builds. The FF builds are also PGO, see issue 60 for "Lots of C, or more precisely compiler, preprocessor, and linker features".

vermaden valuable news

UNIX (vermaden)

• FreeBSD 11.3-RELEASE Available.
  https://lists.freebsd.org/pipermail/freebsd-announce/2019-July/001891.html
  https://www.freebsd.org/releases/11.3R/announce.html
  https://www.freebsd.org/releases/11.3R/relnotes.html

• FreeBSD Adds Small Tool trim(8) to Delete Contents for SSD Blocks.
  https://svnweb.freebsd.org/base?view=revision&revision=343118

venam: I'm surprised the tool wasn't there by default, it's a must have for SSD.

• FreeBSD - Lesson in Poor Defaults - (Updated 2019/07/07).
  https://vez.mrsk.me/freebsd-defaults.html

• GSoC 2019 Report - Incorporating Memory Hard ARGON2 Hashing Scheme Into NetBSD.
  https://blog.netbsd.org/tnf/entry/gsoc_2019_report_incorporating_the

• This Month in RabbitMQ - July 2019.
  https://www.rabbitmq.com/blog/2019/07/09/this-month-in-rabbitmq-july-2019/

• Exploiting FreeBSD-SA-19:02.fd Security Advisory.
  https://secfault-security.com/blog/FreeBSD-SA-1902.fd.html

• MapSCII is Braille & ASCII World Map Renderer for Console. % telnet mapscii.me
  https://github.com/rastapasta/mapscii
  https://asciinema.org/a/117813

• FreeBSD as Desktop with Nvidia.
  https://forum.admindev.tech/t/freebsd-as-a-desktop-with-nvidia/

• Document Foundation Announces LibreOffice 6.2.5.
  https://blog.documentfoundation.org/blog/2019/07/04/tdf-announces-libreoffice-625/

• OpenBSD Laptop with vmd/pf and OpenVPN.
  https://gist.github.com/niamtokik/7bbf042b57af67b6ffe5d6692d875a4f

• Illumos Makes Me Nostalgic.
  https://nanxiao.me/en/illumos-makes-me-nostalgic/

• Nextcloud 16.0.2/15.0.9/14.0.13 Available.
  https://nextcloud.com/blog/nextcloud-16.0.2-15.0.9-and-14.0.13-available-now/

• BSD Now 306 - Comparing Hammers.
  https://www.bsdnow.tv/306

• DragonFly BSD Upgrade Script.
  http://lists.dragonflybsd.org/pipermail/users/2019-July/358224.html

• Streaming Netflix on NetBSD Using Ubuntu Linux in VM.
  https://www.unitedbsd.com/d/68-streaming-netflix-on-netbsd

• Talospace - FreeBSD on POWER.
  https://www.talospace.com/2019/07/freebsd-on-power.html

• Talospace - Firefox 68 on POWER.
  https://www.talospace.com/2019/07/firefox-68-on-power.html

• Haiku Monthly Activity Report - 2019/06.
  https://www.haiku-os.org/blog/pulkomandy/2019-07-11_haiku_monthly_activity_report_june_2019/

• In Other BSDs for 2019/07/13.
  https://www.dragonflydigest.com/2019/07/13/23170.html

• The X New Developers Guide.
  https://www.x.org/wiki/guide/

venam: They didn't change much from the look of it.

• FreeBSD 12 Runs Refreshingly Easy on AMD Ryzen 9 3900X.
  https://www.phoronix.com/scan.php?page=article&item=amd-3900x-freebsd

• Testing OmniOSce on Real Hardware.
  https://eerielinux.wordpress.com/2019/06/30/testing-omniosce-on-real-hardware/

• OpenBSD Adds aggr(4) Driver.
  https://undeadly.org/cgi?action=article;sid=20190710071440

Hardware (vermaden)

• Easy SSD Guide - SATA/mSATA/M.2/U.2 - Explained.
  https://rog.asus.com/articles/hands-on/easy-guide-to-ssds-sata-msata-m-2-and-u-2/

• Raspberry Pi 4 B+ with PCI Express.
  http://mloduchowski.com/en/blog/raspberry-pi-4-b-pci-express/

• AMD Ryzen 3000 Post Review BIOS Update Recap - Mostly Gains.
  https://www.anandtech.com/show/14632/amd-ryzen-3000-review-bios-update-recap

• RISC-V Foundation Announces Ratification of RISC-V Base ISA and Privileged Architecture Specifications.
  https://riscv.org/2019/07/risc-v-foundation-announces-ratification-of-the-risc-v-base-isa-and-privileged-architecture-specifications/

Life & Others (vermaden)

• Research Finds That as a Group Only Men Pay Taxes.
  https://motoristoppression.wordpress.com/2016/11/03/32/

• Why Being Bored Is Good.
  https://thewalrus.ca/why-being-bored-is-good/

• It's Never Going to Be Perfect - Just Get It Done.
  https://www.nytimes.com/2019/07/07/smarter-living/its-never-going-to-be-perfect-so-just-get-it-done.html

• Nobody Wants to Be Woken Up at 4 AM.
  https://www.farfetchtechblog.com/en/blog/post/nobody-wants-to-be-woken-up-at-4-am/

• Timeless Writing Advice From William Zinsser - On Writing Well.
  https://medium.com/better-marketing/10-must-read-lessons-on-writing-from-literary-critic-william-zinsser-35f7a281250c

• Firefox 68.0 Release Notes.
  https://www.mozilla.org/en-US/firefox/68.0/releasenotes/

• Thaddeus Kosciusko - Polish Engineer You Never Heard of Who Saved America.
  https://angrystaffofficer.com/2019/07/09/thaddeus-kosciusko-the-polish-engineer-you-never-heard-of-who-saved-america/

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• Playing with Linux in userspace
  https://christine.website/blog/howto-usermode-linux-2019-07-07

  I had no idea this existed before today. Kudos to the author for that super cool post and setup. The knowledge of old arcane tools left me breathless.

• Fantasy development
  https://people.kernel.org/monsieuricon/patches-carved-into-developer-sigchains

  What would happen in a world of decentralize and secure development, everything signed, easily shareable. It's convenient, maybe the idea will take off, maybe not.

• What's an idempotent script and how to make shell script that way https://arslan.io/2019/07/03/how-to-write-idempotent-bash-scripts/

  Those are certainly tips to remember next time you write a script that could possibly, and most probably, fail in the middle and be restarted.

• When you want to be a detective
  https://bsdimp.blogspot.com/2019/07/the-pdp-7-where-unix-began.html

  Pretty impressive to go to such extent to recollect history pieces, stitching them together and construct a possible lead to a question maybe no one thought of asking.

• Will X11 get deprecated?
  https://utcc.utoronto.ca/%7Ecks/space/blog/unix/XDeathwatchStarts

  Might be a single developer talking, or it might be a way to show the world a stance on the topic. Regardless, we'll see what happens.

• Jumping on the Rust train
  https://nora.codes/tutorial/speedy-desktop-apps-with-gtk-and-rust/

  As far as I'm concerned I have yet to try it. Sick of fat Electron apps, then this tutorial should be very enticing.

• Having troubles getting used to your Windows machine sub-linuxy system?
  https://timvisee.com/blog/fix-windows-terminals-use-linux-terminal/
  https://www.analyticsindiamag.com/linux-vs-windows-which-is-the-best-os-for-data-scientists/

  A post about setting up your favorite terminal on through Windows Linux sub-system and another, not so fancy, sort of listicle.

• Gnuplot step by step initiation https://raymii.org/s/tutorials/GNUplot_tips_for_nice_looking_charts_from_a_CSV_file.html

  It's kind of hard to use gnuplot compared to graph editors found in WYSIWYG editors. This is the kind of tutorial that let you build a script that you can rely on for automation, unlike with fancy editors.

• But I already wake up at that time
  https://www.farfetchtechblog.com/en/blog/post/nobody-wants-to-be-woken-up-at-4-am/
  https://www.weave.works/blog/the-red-method-key-metrics-for-microservices-architecture/

  Not necessarily related to Unix but to sysadmin in general. Monitoring is a wide topic see also "Log navigation" in 129 and "Monitoring" in issue 108.

vermaden valuable news

UNIX (vermaden)

• FreeBSD Turns 26.
  https://lwn.net/SubscriberLink/791609/c9fb51359883f096/

• Porting Wine to amd64 on NetBSD - First Evaluation Report.
  https://blog.netbsd.org/tnf/entry/porting_wine_to_amd64_on

• Quick Steps to Run i3wm on OpenBSD.
  http://w00t.eu.org/m/station.html

• FreeBSD Call for 2019Q2 Quarterly Status Reports.
  https://lists.freebsd.org/pipermail/freebsd-hackers/2019-July/054827.html

• FreeBSD Updates FUSE from Protocol 7.8 to 7.23 with New Functionality and Performance Improvements.
  https://twitter.com/ed_maste/status/1146081918028591104
  https://reviews.freebsd.org/D20805

• FreeBSD bhyve Snapshot Save and Restore.
  https://reviews.freebsd.org/D19495

• FreeBSD Adds Protection Against Unlimited Atomic Operations from Userland.
  https://twitter.com/ed_maste/status/1146090442158759938
  https://reviews.freebsd.org/D20772

• FreeBSD Security Advisories 2019-07.
  https://www.freebsd.org/security/advisories/FreeBSD-SA-19:09.iconv.asc
  https://www.freebsd.org/security/advisories/FreeBSD-SA-19:10.ufs.asc
  https://www.freebsd.org/security/advisories/FreeBSD-SA-19:11.cd_ioctl.asc

• DragonFly BSD Refactors Scheduler Weightings.
  http://lists.dragonflybsd.org/pipermail/commits/2019-May/718947.html
  http://lists.dragonflybsd.org/pipermail/commits/2019-May/718955.html

• OPNsense 19.1.10 Released.
  https://forum.opnsense.org/index.php?topic=13380.0

• NetBSD Forking Code Support in ptrace(2).
  https://blog.netbsd.org/tnf/entry/forking_code_support_in_ptrace

• OpenBSD is Now My Workstation.
  https://sogubsys.com/openbsd-is-now-my-workstation-operating-system/
  https://news.ycombinator.com/item?id=20344766
  https://lobste.rs/s/m8cxke/openbsd_is_now_my_workstation

• Replacing (Silently) Failing Disk in ZFS Pool.
  https://imil.net/blog/2019/07/02/Replacing-a-silently-failing-disk-in-a-ZFS-pool/

• BSD Now 305 - Changing Face of Unix.
  https://www.bsdnow.tv/305

• Web Application Firewall (WAF) for Website Protection with OPNsense.
  https://medium.com/@jccwbb/website-protection-with-opnsense-3586a529d487

• How Much Has UNIX Changed?
  https://adventofcomputing.libsyn.com/episode-5-notes-how-much-has-unix-changed

• Running Arch Linux using OpenBSD vmd(8).
  https://www.tumfatig.net/20190705/running-arch-linux-using-openbsd-vmd8/

• FreeBSD Call for Testing - Package Base - Round 2.
  https://lists.freebsd.org/pipermail/freebsd-pkgbase/2019-July/000466.html

• OpenBSD Amsterdam - rdist(1) - when Ansible is Too Much.
  https://chargen.one/obsdams/rdist-1-when-ansible-is-too-much

• DigitalOcean - Install FAMP (FreeBSD/Apache/MySQL/PHP (FAMP) on 12.0-RELEASE.
  https://www.digitalocean.com/community/tutorials/how-to-install-an-apache-mysql-and-php-famp-stack-on-freebsd-12-0

• FreeBSD Restructures cache_handle_range for 9% Time Reduce on Amazon EC2 a1.2xlarge Instance.
  https://twitter.com/FreeBSDHelp/status/1147769563460694017
  https://svnweb.freebsd.org/base?view=revision&revision=349768

• In Other BSDs for 2019/07/06.
  https://www.dragonflydigest.com/2019/07/06/23152.html

• OpenBSD Community goes Platinum for 2019!
  https://undeadly.org/cgi?action=article;sid=20190707065226
  https://www.openbsdfoundation.org/contributors.html

• Per Project PostgreSQL.
  https://jamey.thesharps.us/2019/05/29/per-project-postgres/

• NetBSD LLDB - Watchpoints/XSTATE in ptrace()/Core Dumps.
  https://blog.netbsd.org/tnf/entry/lldb_watchpoints_xstate_in_ptrace

• The meli Pre Alpha Release.
  https://meli.delivery/posts/2019-06-15-pre-alpha.html

Hardware (vermaden)

• AMD Unveils Radeon Pro WX 3200 - Professional Graphics Card for $200.
  https://www.anandtech.com/print/14609/amd-unveils-radeon-pro-wx-3200-a-professional-graphics-card-for-sub200

• SilverStone CS280 Review - 8 x 2.5 Disk Bay DIY NAS Build.
  https://www.servethehome.com/silverstone-cs280-review-8-bay-asrock-rack-diy-nas-build/

• Mini STX Build from Scratch using Aluminium Plates.
  https://www.fanlesstech.com/2019/07/from-scratch-build-mini-stx.html

• ASRock 4X4 Box-R1000 - Ryzen Based 0.87-Liter PC - 110x119x68mm.
  https://www.anandtech.com/print/14615/asrocks-4x4-boxr1000-a-ryzenbased-087liter-pc

• AMD Adjusts Launch Price of Radeon RX 5700 Series.
  https://www.anandtech.com/print/14616/amd-adjusts-launch-price-of-radeon-rx-5700-series-50-for-anniversary-xt-20-for-regular

• How PINE64 is Creating Community to Compete with Raspberry Pi.
  https://www.techrepublic.com/article/developers-how-pine64-is-creating-a-community-to-compete-with-raspberry-pis/

• AMD 3rd Generation Ryzen (ZEN 2) Deep Dive Review - 3700X and 3900X Raising the Bar.
  https://www.anandtech.com/print/14605/the-and-ryzen-3700x-3900x-review-raising-the-bar

• AMD Radeon RX 5700 (XT) Review - Navi Renews Competition in Midrange Market.
  https://www.anandtech.com/print/14618/the-amd-radeon-rx-5700-xt-rx-5700-review

• AMD ZEN 2 Microarchitecture Analysis - Ryzen 3000 and EPYC Rome.
  https://www.anandtech.com/print/14525/amd-zen-2-microarchitecture-analysis-ryzen-3000-and-epyc-rome

Life & Others (vermaden)

• Why Remote Work is not Going Away Anytime Soon.
  https://www.fastcompany.com/90318974/the-rise-of-remote-working-will-continue

• China Forces Tourists to Install Text Stealing Malware at its Border.
  https://www.vice.com/en_us/article/7xgame/at-chinese-border-tourists-forced-to-install-a-text-stealing-piece-of-malware

• Company Tracking Reach - Proportion of Web Traffic Tracked Their Trackers.
  https://whotracks.me/companies/reach-chart.html

• Google Youtube Ban on Hacking Techniques Threatens to Shut Down All of Infosec Content.
  https://boingboing.net/2019/07/03/nobus-r-us.html
  https://news.ycombinator.com/item?id=20346865
  https://news.ycombinator.com/item?id=20350306

• GitLab Ends Support for MySQL in 12.1. Just use PostgreSQL.
  https://about.gitlab.com/2019/06/27/removing-mysql-support/

Thoughts

vermaden joins us again for this issue. Be sure to check his blog there's some awesome content out there.

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• We didn't have the week in the TTY
  https://www.linuxjournal.com/content/without-gui-how-live-entirely-terminal

  I was out of the picture in June, maybe we should reschule it for this month. What do you say, bump the previous thread on the forums with your opinion (https://nixers.net/showthread.php?tid=2205).

• Branch prediction
  https://danluu.com/branch-prediction/

  An overview of the algorithm used for branch prediction in the 90s.

• Random oh random
  https://flak.tedunangst.com/post/random-in-the-wild
  https://lwn.net/Articles/686033/
  https://blog.demofox.org/2019/05/25/generating-random-numbers-from-a-specific-distribution-with-the-metropolis-algorithm-mcmc/
  http://qrng.anu.edu.au/

  That first article is epic, a must read. The sort of stuffs you can come up with to create pseudo-random algorithms is insane. The other posts are related to randomness in general, feeding you the seeds you need for this week. That last blog has a lot of articles related to all kinds of RNGs.

• All you need about eBPF
  https://qmonnet.github.io/whirl-offload/2016/09/01/dive-into-bpf/

  I'm new to bpf and started going through the resources provided here. It's a real gold mine.

• Trusted BGP
  https://tools.ietf.org/html/rfc6480
  https://medium.com/@jobsnijders/a-proposal-for-a-new-rpki-validator-openbsd-rpki-client-1-15b74e7a3f65
  https://github.com/openbsd/src/tree/master/usr.sbin/rpki-client
  https://marc.info/?l=openbsd-cvs&m=156078373619043&w=2

  Validating route statements, origin validation, RPKI is fascinating. I love how we're moving in a direction of secure by default, at all layers, now IP included. Great job OpenBSD, making the internet, and by consequence, the world a better place.

• Networking from the ground up
  https://www.privateinternetaccess.com/blog/2016/01/linux-networking-stack-from-the-ground-up-part-1/
  https://www.privateinternetaccess.com/blog/2016/01/linux-networking-stack-from-the-ground-up-part-2/
  https://www.privateinternetaccess.com/blog/2016/01/linux-networking-stack-from-the-ground-up-part-3/
  https://www.privateinternetaccess.com/blog/2016/01/linux-networking-stack-from-the-ground-up-part-4/
  https://www.privateinternetaccess.com/blog/2016/02/linux-networking-stack-from-the-ground-up-part-4-2/

  We've seen this blog in issue 63 "Privacy, confidentiality, and anonymity", this time we're diving into the network stack. A really insightful series, plenty of information I had no idea about.

• Replace ZFS disk
  https://imil.net/blog/2019/07/02/Replacing-a-silently-failing-disk-in-a-ZFS-pool/

  Probably the most humane way to explain how to replace a disk in a ZFS pool. A well written tutorial.

• A debug story
  https://rkeene.org/projects/info/wiki/173

  Yet another debug story. Oh how it's funny when it ends with "it magically started working again".

• Waypipe
  https://mstoeckl.com/notes/gsoc/blog.html
  https://gitlab.freedesktop.org/mstoeckl/waypipe/

  Looks like it is quite tricky to implement a message and data passing/proxy way between Wayland client and compositor such that it can be used over sockets. Hint: Read from bottom up.

• IRC is fine
  https://drewdevault.com//2019/07/01/Absence-of-features-in-IRC.html

  Also from someone contributing heavily to Wayland but unrelated. Ever used IRC? If you're reading this email then you must have. Do you agree with what's being said in this post?

Thoughts

https://theblog.adobe.com/the-half-life-of-your-skills-is-shrinking-heres-what-you-can-do-about-it/

Keep learning, whatever it is, keep moving.

Have a great week!

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• Slow computer optimizations
  http://www.akitaonrails.com/2017/01/17/optimizing-linux-for-slow-computers

  A reminder of all our talk about real time, what it means for the desktop users. There are lots of great little tricks in this article, they'd need more in depth explanation but it suffices for the job. It's my first time hearing of Ananicy.

• Desktop environment research
  https://desktop.institute/

  Still a WIP but I'm highly looking forward to what this could lead to. I know a lot of my readers could actually help by providing some content to the author of the website.

• Another OS for phones
  https://postmarketos.org/blog/2019/06/23/two-years/

  You caught me at "Wouldn't it be great if you could take any obsolete smartphone from the past ten years and replace its outdated and insecure software with a maintained, modular free software stack". This sounds promising.

• The CLI as a relational DB
  https://spin.atomicobject.com/2019/06/16/unix-cli-relational-database/

  It's the usual cli as a data manipulation tool talk but taken from the perspective and mapping with relational DB. Though there's a little misinterpretation of what sum(1) does.

• Groups in namespaces
  http://ifeanyi.co/posts/linux-namespaces-part-1/

  A typical "build your own container to learn how they are made" type of article. This one emphasizes on cgroups and their utility.

• Eyecandy for ssh-askpass
  https://adi.tilde.institute/Customize%20ssh-askpass%281%29%27s%20appearance.html

  I'm a fan of the old school blocky GUI. They are clean in my opinion. But if you want something more minimal you can get inspired by the config shared here.

• File creation time
  https://www.anmolsarma.in/post/linux-file-creation-time/

  It's the normal writeup about why there's no creation time on Linux. The whole story behind why it took so much to add changes to the kernel, the filesystems, and libc.

• libc using LLVM
  http://lists.llvm.org/pipermail/llvm-dev/2019-June/133308.html
  https://www.phoronix.com/scan.php?page=news_item&px=Google-New-LLVM-Libc-Thoughts

  A team at Google wants to create their own libc, as an LLVM libc. Lots of ups in downs in the talk. I'm personally not sure it's a good idea, there are a lot of toy project libc that gets thrown away or live as historical monuments.

• Demystifying firmware linker scripts
  https://interrupt.memfault.com/blog/how-to-write-linker-scripts-for-firmware

  Ever wondered what those linkers scripts with their weird syntaxes were about, this is for you. It's not a full coverage of the topic but it's a start, extra cool in my opinion, especially when speaking of embedded solutions.

• Recovering corrupted zip files
  https://www.7-zip.org/recover.html

  Oh the world of formats and specifications. Want to fix your 7z archive manually, then here's the guide.

• Deprecating a.out
  https://www.linuxjournal.com/content/deprecating-aout-binaries

  This is something we've already seen in "Removing a.out" of issue 118. This post adds the background story behind the change, the intricacies and discussions happening.

• Fresh administrators
  https://www.linuxforfreshers.com/

  A blog dedicated to learning all sorts of topics for Linux administration. Some topics are super basic while others are kind of advanced. Take a look at the sidebar and see if something interests you.

Thoughts

Just go back from vacations.
This newsletter was super hard to put together but I did it.

Also, I'm surprised that after 2 weeks nobody has even started the scavenger hunt: https://nixers.net/showthread.php?tid=2275

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• Why does it have its current name
  https://wiki.debian.org/WhyTheName

  A little follow up on the pronunciation guide from last issue (129). Linguistic is important ladies and gentlemen, you got to get your things right. You'd be surprised by some of the names, most acronyms, most cryptic inside jokes, oh Unix.

• Files
  https://linuxmeerkat.wordpress.com/2011/12/02/file-descriptors-explained/
  https://www.devever.net/~hl/objectworld
  https://eklitzke.org/efficient-file-copying-on-linux
  https://www.networkworld.com/article/2931534/what-are-unix-swap-swp-files.html
  https://www.networkworld.com/article/2704805/unix---when-pipes-get-names.html
  http://events17.linuxfoundation.org/sites/events/files/slides/fd_0.pdf

  Getting sick already of always discussing about files, don't be because there's much more content to come. From discussions about file descriptors, to what a nexus is, to filesystem and HDD readahead cache buffer, to swap files, and much more.

• File manip
  https://medium.com/@jmsmistral/on-transposing-data-884a04a8c1bf

  Data science fans will enjoy this article. It has a good rundown on all the solutions to a specific issue.

• Chroot history
  https://utcc.utoronto.ca/~cks/space/blog/unix/ChrootHistory https://utcc.utoronto.ca/~cks/space/blog/unix/ChrootHistory?showcomments#comments
  https://lwn.net/Articles/252794/

  Quite an old syscall that has arguably changed its original meaning and purpose over time. There's some argument that the security aspect of it was taken in consideration to begin with, others argue that it wasn't the point.

• The design of find
  http://doc.cat-v.org/unix/find-history

  Following specs to the letter without discussion is one skill of its own. Until you can't change anything about it years later.

• Graduating from vim school
  https://www.hillelwayne.com/post/intermediate-vim/

  I love how the author splits the article between purist vim users and exobrains vim users. Lots of great and useful content in there, I personally know that there's 2 tricks I'm going to start using from now on.

• Still on the quest of DE/WM
  https://bitcannon.net/post/pro-desktop/
  https://www.cdevn.com/my-os/
  https://hookrace.net/blog/linux-desktop-setup/
  https://github.com/mikadosoftware/workstation

  Everyone have their opinion about desktop environments, there's discussion about the lack in some sense and the advantages in others. One thing that is recurrent these days is using docker/immutable/nixOS as a base. Reproducibility is key.

• GNOME profiling
  https://feaneron.com/2019/05/31/profiling-gnome-shell/

  An example of profiling Gnome shell using sysprof 3. This is cool, similar to the profiling tool found in popular web browsers.

• Package management done the right way
  https://www.getlazarus.org/apps/makedeb/
  https://github.com/ceejbot/economics-of-package-management/blob/master/essay.md

  I'd like to see a command line version of the makedeb program, it's simple enough that it doesn't require a GUI. That second post is about package management intermixed with ownership and money making.

• Slowing down your internet
  https://jvns.ca/blog/2017/04/01/slow-down-your-internet-with-tc/

  That's what the bloated websites of today should try. Some of us are on awfully slow connections. Also, nice to remind us of HTTP2.

• PCI devices on Linux
  https://codeofconnor.com/2019/06/01/how-the-linux-kernel-detects-pci-devices-and-pairs-them-with-their-drivers/

  A walkthrough some stacktrace to understand how the Linux kernel decides which device is handled by which driver.

• Asking the time server
  http://seriot.ch/ntp.php
  http://yellerapp.com/posts/2015-01-12-the-worst-server-setup-you-can-make.html

  Again, a continuation of the time and date series. A small command line implementation of an ntp client to fetch time and a recommendation for server admins.

• Tech veganism
  https://nolanlawson.com/2019/05/31/tech-veganism/

  Here's a new term for you, like it or not.

Vermaden Valuable News

UNIX

• OmniOS Installation in the Amazon Cloud.
  https://omniosce.org/setup/aws

• Golang Web Server in chroot(8) in OpenBSD.
  https://vetelko.gitlab.io/openbsd-golang-web-server-chroot.html

• Docker Bug Allows Root Access to Host File System.
  https://duo.com/decipher/docker-bug-allows-root-access-to-host-file-system

• Broken by Default - You Should Avoid Most DOCKERFILE Examples.
  https://pythonspeed.com/articles/dockerizing-python-is-hard/

• Running WordPress on OpenBSD.
  https://besirovic.com/post/wordpress-on-openbsd/

• FreeBSD 12-STABLE has Working Console on EC2 a1. and .metal Instances.
  https://twitter.com/cperciva/status/1133499607835537408
  https://svnweb.freebsd.org/base?view=revision&revision=348342

• BSD Now 300 - Big Three.
  https://www.bsdnow.tv/300

• FreeBSD Foundation 2019 Q1 Status Update.
  https://www.freebsdfoundation.org/blog/freebsd-foundation-q1-2019-status-update/

• Smartisan.com made $400,000 CAD donation to OpenBSD.
  https://twitter.com/canadianbryan/status/1134442873716387840
  https://www.openbsdfoundation.org/contributors.html

• DragonFly BSD | FreeBSD | Linux Benchmarks on AMD Threadripper.
  https://www.phoronix.com/scan.php?page=article&item=dragonfly-55-threadripper

• Drupal on OpenBSD.
  https://dev.to/nabbisen/drupal-on-openbsd-4n39

• Jailer is simple Proof of Concept of build system for building FreeBSD jJails from Jailfiles.
  https://gitlab.com/kwiat/jailer

• FreeBSD 11.3-BETA2 Available.
  https://lists.freebsd.org/pipermail/freebsd-stable/2019-May/091227.html

• GOG.com Summer Sale - OpenBSD Highlights.
  https://www.reddit.com/r/openbsd_gaming/comments/bvagkt/gogcom_summer_sale_openbsd_highlights/

• Check Hard Drive Health on FreeBSD.
  https://www.cyberciti.biz/faq/how-to-check-hard-drive-health-on-freebsd/

Hardware

• USB Stick as SSD - New Silicon Motion SM3282 Single-Chip Controller for USB SSDs.
  https://www.anandtech.com/show/14439/silicon-motion-sm3282-usb-ssds

Life & Others

• Kids of 1% are 10 Times More Likely to Become Inventors.
  https://bigthink.com/technology-innovation/lost-einsteins-which-kids-become-innovators

• Twitter Bans Analyst Who Revealed AntiFa Connections with Journalists.
  https://humanevents.com/2019/05/29/twitter-bans-analyst-who-revealed-journalists-antifa-connections/

• Google uses Gmail to Track History of Things You Buy.
  https://www.cnbc.com/2019/05/17/google-gmail-tracks-purchase-history-how-to-delete-it.html

• USA Demands Social Media Details from VISA Applicants.
  https://www.bbc.com/news/world-us-canada-48486672

• Why I Still Use jQuery in 2019.
  https://arp242.net/jquery.html

• Temporary Staging Ground for Firefox ppc64 JIT.
  https://github.com/classilla/jitpower

• Block Fingerprinting with Firefox.
  https://blog.mozilla.org/firefox/how-to-block-fingerprinting-with-firefox/

• Switch from Chrome to Firefox in Just Few Minutes.
  https://www.mozilla.org/en-US/firefox/switch/

• Google Just Gave 2 Billion Chrome Users Reason to Switch to Firefox.
  https://www.forbes.com/sites/kateoflahertyuk/2019/05/30/google-just-gave-2-billion-chrome-users-a-reason-to-switch-to-firefox/#1b219e42751f

• Serious Google Cloud Platform Outage - Status Dashboard.
  https://status.cloud.google.com/incident/compute/19003

https://vermaden.wordpress.com/

Thoughts

I'm going on a two week vacations, so there won't be any newsletter in a while. Let's wish everyone a sweet month of June.

Also, enjoy the scavenger hunt: https://nixers.net/showthread.php?tid=2275

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• No more OS
  http://www.fixup.fi/misc/usenix-login-2015/login_oct15_02_kantee.pdf

  Is the OS layer deprecated? Can't we delegate the role to the hardware instead of having drivers? Why are we stuck?

• pronunciation guide
  https://ss64.com/bash/syntax-pronounce.html

  When in doubt refer to this guide.

• Getting pledge on Linux
  https://notabug.org/rain1/linux-seccomp-pledge/

  With all this talk about pledge on OpenBSD some people want to get it on Linux. Good news, it's already there, not the same but close enough.

• Extra on containerization, security, and control
  https://queue.acm.org/detail.cfm?id=2430732
  https://web.archive.org/web/20170315162651/https://learntemail.sam.today/blog/selinux-concepts-but-for-humans/
  https://davmac.wordpress.com/2016/10/14/cgroups-v2-resource-management-done-even-worse-the-second-time-around/
  https://landlock.io
  https://www.linux.com/news/minijail-googles-tool-safely-run-untrusted-programs

  This is a popular topics that comes in go time and time again. Containing, mitigating, enforcing rules. It seems like a lot is wasted on this, why not review what is said in the first link of this issue "No more OS" and ditch everything.

• Libranet autobio
  https://danieldk.eu/Posts/2010-10-31-Libranet.html
  https://www.linuxjournal.com/article/8290

  Taking part in a project, investing yourself in it, to then see it crumble slowly or quickly. It's simply life, things happen, you gotta move on and learn from the experience.

• The Janetsh project and other shell related things
  https://acha.ninja/blog/road-to-janetsh-0.1/
  https://janet-shell.org/
  https://www.oilshell.org/
  https://brennan.io/2015/01/16/write-a-shell-in-c/
  https://blog.flowblok.id.au/2013-02/shell-startup-scripts.html
  http://hoelz.ro/blog/finding-the-other-end-of-a-pipe-on-linux
  https://seashells.io/

  Why not write a new shell, we've seen in "A new shell, why?" of issue 87 and "the elvish shell" in 100 that this could be a fun endeavour. So take a look at those brand new ones, there are so many more online but those are the ones getting the most traction. Along with those links you'll find other shell related content.

• Essentials
  https://www.blockloop.io/mastering-bash-and-terminal/
  http://cb.vu/unixtoolbox.xhtml
  https://www.eriwen.com/productivity/find-is-a-beautiful-tool/
  https://jvns.ca/blog/2015/03/05/how-the-locate-command-works-and-lets-rewrite-it-in-one-minute/
  https://blog.extracheese.org/2010/05/the-tar-pipe.html

  We've been sharing a lot of beginner's guides, back to square one type of articles. Maybe it would be a good idea to gather them in a list that could be easily given to someone starting out so that they can go through it and slowly learn.

• 30s review of signals under Linux
  https://freethreads.net/2019/05/27/internals-of-linux-process-signals-2/
  http://www.linuxprogrammingblog.com/all-about-linux-signals?page=show

  I like the way this website is made, compressed and summarized explanation. Kind of like cheat sheet for explanations, the sort you'd take before an exam. The next one is the complete opposite, I used it for the research of the Unix signals podcast.

• Scheduling optimizations
  http://www.ece.ubc.ca/~sasha/papers/eurosys16-final29.pdf

  NUMA, if you've never heard about this acronym then welcome to the world of big machines. The bug described in this paper (You can skim a bit if you're already aware of scheduling and go directly to section 3) reminds us of how tricky scheduling is and how depending on the hardware architecture it can be.

• More on the time series and NTP
  https://queue.acm.org/detail.cfm?id=1967009
  https://news.ntppool.org/2012/06/more-servers-please/

  Back with the leap second issue we've seen in "Keeping time and date". The discussion for leap second abolishment didn't got so well. And we still lack some public utility servers.

• FUSE and FUSE
  http://engineering.facile.it/write-filesystem-fuse/
  https://www.tagsistant.net
  https://github.com/johang/btfs
  https://github.com/immobiliare/sfs

  FUSE can be so much fun, see "I Made MPD Index SoundCloud." and "DungeonFS" in 78. "Semantic filesystem for Linux, with relation reasoner, autotagging plugins and a deduplication service" that sounds better than tagsistant. Those are all fine examples of usage of FUSE.

• Files are hard
  http://danluu.com/file-consistency/

  In relation with the previous links, it's tricky to keep file consistency over a long period of time. Read up to discover why, a bit dated though, but it makes you think about all those very Unixy tools that only rely on files, they may suffer from this condition on the long run, so beware!

• Extreme programming
  https://blog.dima23.de/post/2018-12-11-tmux-pair-programming/

  I once thought, when picking up a book, that extreme programming what about cool skateboard tricks but with computers, I was wrong but gladly so. Pair programming is fun and a good learning experience when done right.

• Profiling, server management, demo gods
  http://poormansprofiler.org
  https://sysdig.com/blog/50-shades-of-system-calls/
  https://www.usenix.org/conference/lisa13/technical-sessions/presentation/merlin

  Those three links are legendary. From building your own profiler using gdb, to sysdig mega demo, to a live upgrade of thousands of servers.

• Log navigation
  https://github.com/tstack/lnav
  http://goaccess.io

  Next up after the links of above, pale in comparison, two cool fancy log and weblog navigator and display. They should help in debugging weird issues, or at least monitoring. See also "Monitoring" in issue 108.

• Guide to linker
  http://www.lurklurk.org/linkers/linkers.html

  Still on the train with ELF, PLT, and GOT, we continue or probably should've started with this article. A well done and approachable summary of what linking is about, one of my recommended reading on the topic.

• Shared Memory
  http://blog.httrack.com/blog/2014/04/05/a-story-of-realloc-and-laziness/
  https://lwn.net/SubscriberLink/789153/b21b94232f0c84fc/

  Read the section above before this one, and maybe also the malloc implementation links in the newsletter archive. We first take a look at an inspection of a specific use of memory allocation and then check what's new (or could be new) in Linux memory sharing between processes.

• The Portable C Library book and others available online
  https://archive.org/details/ThePortableCLibrary_May75/page/n16
  https://archive.org/details/ADescriptionOfTheUNIXFileSystem_Sept75/page/n13
  https://archive.org/details/@swieros

  They are so fantastically well scanned that it feels like having them in front of you.

• X11 stack
  http://www.theresistornetwork.com/2013/12/a-testament-to-x11-backwards.html
  https://arstechnica.com/information-technology/2011/03/the-linux-graphics-stack-from-x-to-wayland/
  https://github.com/jcs/xbanish

  X11 is a fun piece of software, full of features, really full. Those three links are a testament of this.

• Reaching a dream environment for all
  https://ploum.net/195-the-aristocratic-desktop-part-1/
  https://ploum.net/201-the-aristocratic-desktop-part-2-home-is-desktop/
  https://ploum.net/219-the-aristocratic-desktop-part-3-there-s-no-tray-icon-in-gnome/
  https://ploum.net/kill-double-click/

  A series of articles very in line with the ideas shared in "OpenBSD laptop @ BSDCan" of 128, "Ever installed a Unix-like system for a friend who's not technie?" with the aunt in 54, "Usability" in 71, and "When will be created great desktop experience for OpenBSD." in this same issue. Building a sensible, default, basic environment for non-tech-enthusiast that only want to use the computer as a tool, this sounds easier than it actually is.

• Logical fallacies in development
  https://artur-martsinkovskyi.github.io/2018/logical-fallacies-in-programming/

  Not really Unix related, but there's some hint that could somewhat be associated to it. A straight forward list of behaviors we've most probably encountered in our day to day.

Vermaden Valuable News

UNIX

• Xfce 4.14pre1 Released.
  https://simon.shimmerproject.org/2019/05/19/xfce-4-14pre1-released/
  https://simon.shimmerproject.org/wp-content/uploads/2019/05/xfce4-settings-4-14pre1-300x214.png

• NetBSD 8.1 RC1 Available.
  https://www.netbsd.org/releases/formal-8/NetBSD-8.1.html

• LibreSSL 2.9.2 Available.
  https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-2.9.2-relnotes.txt

• OPNsense 19.1.8 Released.
  https://forum.opnsense.org/index.php?topic=12787.0

• Virtual Machines Manager for Bhyve. Made with <3 in Poland.

• Linux kernel RDS flaw affects Red Hat/Ubuntu/Debian/SUSE.
  https://betanews.com/2019/05/20/linux-kernel-rds-flaw/

• Lucee Installation on Solaris 11 (SPARC).
  https://youngmumpster.wordpress.com/2019/05/21/lucee-installation-on-solaris-11-sparc/

• Signal on OpenBSD.
  https://h3artbl33d.nl/communication/2019/05/20/signal-openbsd/

• DragonFly BSD 5.4.3 Released.
  https://www.dragonflybsd.org/release54/

• BSD Now 299 - NAS Fleet.
  https://www.bsdnow.tv/299

• OpenZFS ZoL 0.8.0 Released.
  https://github.com/zfsonlinux/zfs/releases/tag/zfs-0.8.0

• FreeBSD adds Chacha20 mode to Encrypted Kernel Crash Dumps.
  https://svnweb.freebsd.org/base?view=revision&revision=348197

• FreeBSD vm-bhyve config for CentOS 7.6.
  https://davidpdischer.com/2019/05/23/freebsd-vm-bhyve-config-for-centos-7-6-1810/

• Serenity - Graphical Unix-like Operating System for x86 Computers.
  https://github.com/SerenityOS/serenity
  https://raw.githubusercontent.com/awesomekling/serenity/master/Meta/screenshot-d727005.png

• Applied FreeBSD - Basic iSCSI.
  https://globalengineer.wordpress.com/2017/03/05/applied-freebsd-basic-iscsi/

• Talospace - Firefox 67 on POWER.
  https://www.talospace.com/2019/05/firefox-67-on-power.html

• The zrepl 0.1.1 Available.
  https://zrepl.github.io/changelog.html

• OmniOS Community Edition r151030c/r151028ac/r151022da Available.
  https://omniosce.org/article/030c-028ac-022da

• HTTPie is command line HTTP client with intuitive UI/JSON support/syntax highlighting/plugins and more.
  https://httpie.org/

• Solaris SMF and FMA Notifications.
  https://www.solaris.wtf/blog/solaris-smf-and-fma-notifications/

• When will be created great desktop experience for OpenBSD.
  https://marc.info/?t=155720553100001&r=3&w=2

• FreeBSD 11.3-BETA1 Available.
  https://lists.freebsd.org/pipermail/freebsd-stable/2019-May/091210.html
  https://www.freebsd.org/relnotes/11-STABLE/relnotes/article.html

• FreeBSD adds AESNI optimized version of CCM/CBC cryptographic/authentication code for ZFS encryption.
  https://svnweb.freebsd.org/base?view=revision&revision=348268

• In Other BSDs for 2019/05/25.
  https://www.dragonflydigest.com/2019/05/25/22939.html

Hardware

• Speculation Behaviour in AMD CPUs Against INTEL-SA-00233 (MDS).
  https://www.amd.com/system/files/documents/security-whitepaper.pdf
  https://pbs.twimg.com/media/D67gdt_XsAA_UEB.png

• Top 5 Raspberry Pi Alternatives in 2019.
  https://www.cnx-software.com/2019/05/20/raspberry-pi-alternatives-2019/

• Acromove ServerPack 35 SP3B Review with FreeNAS.
  https://www.storagereview.com/acromove_serverpack_35_sp3b_review

• Spectre/Meltdown/L1TF/MDS Mitigation Costs on Intel Dual Core Laptop.
  https://www.phoronix.com/scan.php?page=news_item&px=Spec-Melt-L1TF-MDS-Laptop-Run

• Chinese AMD's Zen Based CPU on Sale - Sugon Workstation with 8-Core Hugon Dhyana Processor.
  https://www.anandtech.com/show/14380/sugon-workstation-with-hugon-dhyana-cpu?

• workstation.is - Explore and discover popular setups.
  https://workstation.is/

• AMD Confirms Zen 4 EPYC Codename and Elaborates on Frontier Supercomputer CPU.
  https://www.anandtech.com/show/14419/amd-confirms-zen-4-epyc-codename-and-elaborates-frontier-cpu

• AMD Teases First Navi GPU Products - RX 5700 Series with 25% Improved Perf-Per-Clock.
  https://www.anandtech.com/show/14412/amd-teases-first-navi-gpu-products-rx-5700-series-in-july-25-improved-perf

• AMD Ryzen 3000 Announced - Five CPUs - Coming 2019/07/07.
  https://www.anandtech.com/show/14407/amd-ryzen-3000-announced-five-cpus-12-cores-for-499-up-to-46-ghz-pcie-40-coming-77

• ARM New Cortex-A77 CPU Micro-architecture - Evolving Performance.
  https://www.anandtech.com/show/14384/arm-announces-cortexa77-cpu-ip

Life & Others

• What Happens When You Always Wear Headphones.
  https://www.theatlantic.com/health/archive/2019/05/what-happens-if-you-always-wear-headphones/589474/

• JavaScript Sticker.
  https://samdbeckham.gitlab.io/javascript_sticker/

• Firefox 67.0 Available.
  https://www.mozilla.org/en-US/firefox/67.0/releasenotes/

• Google Has Stored Some Passwords in Plaintext Since 2005.
  https://www.wired.com/story/google-stored-gsuite-passwords-plaintext/

• Static Web - Back to the Roots?
  https://blog.callr.tech/static-web-roots/

https://vermaden.wordpress.com/

Thoughts

Software engineers live in a world of deep introspection. They spend most of the day solving complex problems, breaking problems apart and reconstructing them. Often, when they are distracted, their subconscious can make the most bizarre leaps, connecting half-baked ideas and partially solved algorithms. This can happen in the oddest of places, for example, in the shower, or cooking in the kitchen, or driving in a car.

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• Unveil @ BSDCan
  https://www.openbsd.org/papers/bsdcan2019-unveil/index.html

  A great overview of what unveil is about. If you never heard of it then it's time to take a look.

• OpenBSD laptop @ BSDCan
  https://www.openbsd.org/papers/bsdcan2019-accessible-openbsd-laptop.pdf
  https://bharadwaj-raju.itch.io/textsuggest
  https://simon.kde.org/

  Why the hek it's so hard to give Maurice his basic laptop. A story of accessibility on OpenBSD.

• NetBSD on VAX @ BSDCan
  https://www.bsdcan.org/2019/schedule/events/1089.en.html

  It runs everywhere! That's what we comically portray it as, but it really does.

• Atari Linux
  http://www.atari-wiki.com/index.php/Using_an_Atari_ST_as_Unix/Linux_Terminal
  https://wiki.archlinux.org/index.php/Working_with_the_serial_console

  In continuation with the previous link, it's really fun to run older machines as terminal. And it's how well it's supported that is impressive, so simple.

• SGI Indy UNIX
  https://www.youtube.com/watch?v=Qk_JjfeChQA

  The marketing around this machine is disturbingly awkward and cringy, but we love it. There are so many inputs to make you dizzy.

• Monitors of performance/health
  https://github.com/nokia/memory-profiler
  https://www.openbsd.org/papers/bsdcan2019-perform-slides.pdf

  It's a pain to track things over time, especially when it's to find out why something created a bug or how something impacted the system. These are two links with some approaches to monitoring performance.

• COM
  https://www.tablix.org/~avian/blog/archives/2016/08/linux_loader_for_dos_like_com_files/
  http://www.dosemu.org/

  Digging into binary formats is one of the best way to get accustomed to your machine and remove mystification. It's one of my favorite things.

• No systemd
  https://ungleich.ch/en-us/cms/blog/2019/05/20/linux-distros-without-systemd/

  Talking about mystification, there's a lot surrounding systemd. However, this post isn't about this, it's about all the distros that don't have it included by default. A bit of a publicity for the datacenter of the author, so take this with a grain of salt.

• Thinking out of the box
  https://shenaniganslabs.io/2019/05/21/LXD-LPE.html

  An attach to get out of the box using/privilege escalation using systemd.

• Audio latency in OS
  https://www.mindmusiclabs.com/audio-latency-demystified-part-1/
  https://www.mindmusiclabs.com/audio-latency-demystified-part-2-4-real-time-linux-approaches/

  A fantastic series of articles I'm going to follow about demystifying audio latency. Such expert content is delightful to read.

• Remove duplicates shell
  https://iridakos.com/how-to/2019/05/16/remove-duplicate-lines-preserving-order-linux.html

  Golfing with awk, that line is a killer.

• Explaining fork
  http://mohit.athwani.net/unix/understanding-the-fork-system-call-in-unix/

  A classic explanation of how fork works and the process tree on Unix.

• Another unicode must read
  https://begriffs.com/posts/2019-05-23-unicode-icu.html

  Another link to add to our list about unicode, there's so much content written about it. This one is a must read too. See "Unicode" in issue 116 and "Plain text" in issue 57.

Vermaden Valuable News

UNIX

• BSD Handbook.
  https://www.bsdhandbook.com/openbsd/

• Unlimited Drive Storage on Google Docs by splitting binary files into base64 files.
  https://github.com/stewartmcgown/uds

• BSDs Get Promptly Mitigated for MDS Side Channel Vulnerabilities in Intel CPUs.
  https://www.phoronix.com/scan.php?page=news_item&px=BSD-Mitigations-MDS

• Running FreeBSD on Pinebook - Review.
  https://blog.madadipouya.com/2018/12/19/running-freebsd-on-pinebook-a-review/

• FreeBSD Updates KDE Frameworks to 5.58.0.
  https://svnweb.freebsd.org/ports?view=revision&revision=501745

• In Other BSDs for 2019/05/11.
  https://www.dragonflydigest.com/2019/05/11/22888.html

• In Other BSDs for 2019/05/18.
  https://www.dragonflydigest.com/2019/05/18/22911.html

• Make Linux Fast Again.
  https://make-linux-fast-again.com/

• BSD Now 297 - Dragonfly in the Wild.
  https://www.bsdnow.tv/297

• BSD Now 298 - BSD on the Road.
  https://www.bsdnow.tv/298

• Confusion with Used/Free Disk Space in ZFS.
  https://oshogbo.vexillium.org/blog/65/

• OpenPOWER BSD - Leading Edge Development of FreeBSD on OpenPOWER.
  https://github.com/POWER9BSD/

• Keep Crashing Daemons Running on FreeBSD.
  https://www.babaei.net/blog/keep-crashing-daemons-running-on-freebsd/

• FOSS Project Spotlight - Bareos - Cross Network Open Source Backup Solution.
  https://www.linuxjournal.com/content/foss-project-spotlight-bareos-cross-network-open-source-backup-solution

• GPU Passthrough Reported Working with Bhyve on FreeBSD.
  https://passthroughpo.st/gpu-passthrough-reported-working-on-bhyve/

• FreeBSD 13-CURRENT on Pinebook.
  http://joancatala.net/node/1399

• The 9front (Plan 9 fork) got DTrace in 2018/11 as dtracy command.
  https://twitter.com/AmazingDim/status/1129790004153085952
  http://man.cat-v.org/9front/1/dtracy
  http://9front.org/

• Recent Intel CPU Bug FreeBSD-SA-19:07.mds Security Advisory.
  https://www.freebsd.org/security/advisories/FreeBSD-SA-19:07.mds.asc

• NetBSD for ODROID-C2.
  https://magazine.odroid.com/article/netbsd-for-the-the-odroid-c2/

• OpenIndiana Hipster 2019.04 Available - Release Notes.
  https://wiki.openindiana.org/oi/2019.04+Release+notes

• Connecting Amiga 4000 to World in 2019.
  https://chargen.one/steve/connecting-an-amiga-to-the-world-in-2019

• Sending Big ZFS Snapshots over SSH.
  https://cahuk.net/2019/05/19/sending-big-zfs-snapshots-over-ssh/

• FreeBSD Implements PTRACE_O_TRACESYSGOOD which Makes Linux strace(1) Work.
  https://svnweb.freebsd.org/base?view=revision&revision=347971

Hardware

• Following on from Meltdown and Spectre - TU Graz researchers discover new security flaws in Intel CPUs.
  https://www.tugraz.at/en/tu-graz/services/news-stories/tu-graz-news/singleview/article/nach-meltdown-und-spectre-tu-graz-forscher-entdecken-neue-sicherheitsluecken0/

• Gigabyte GA-IMB4100TN Mini ITX Motherboard.
  https://www.gigabyte.com/Motherboard/GA-IMB4100TN-rev-10

• SanDisk First 1 TB microSD Card Now Available.
  https://www.anandtech.com/show/14346/the-sandisk-extreme-1-tb-microsd-card-now-available

• Operating System Compatibility List for Raptor POWER9 Based Hardware.
  https://wiki.raptorcs.com/wiki/Operating_System_Compatibility_List

• Spec'ing Out Blackbird POWER9.
  http://www.mroach.com/2019/05/14/blackbird-power9/

• How to Hack Expensive Camera and Not Get Killed by Your Wife.
  https://alexhude.github.io/2019/01/24/hacking-leica-m240.html

Life & Others

• Why Play a Music CD? - No Ads - No Privacy Terrors - No Algorithms.
  https://www.nytimes.com/2019/05/15/technology/personaltech/music-streaming-cd.html

• Comments about Iceland Sentenced Bankers to Prison for Their Part in 2008 Collapse.
  https://news.ycombinator.com/item?id=10915710

• Can we all please stop using Medium now?
  https://www.webdistortion.com/2019/05/16/can-we-all-please-stop-using-medium-now/

• Mozilla Firefox - What we do when things go wrong.
  https://blog.mozilla.org/blog/2019/05/09/what-we-do-when-things-go-wrong/

• Banned from PayPal after 12 years of business.
  https://blog.niteo.co/paypal-ban-after-12-years/

https://vermaden.wordpress.com/

Thoughts

Haste Makes Waste.

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• Daemon restart from scratch on FreeBSD
  https://www.babaei.net/blog/keep-crashing-daemons-running-on-freebsd/

  How would you do a service manager if you didn't have one. A simple tale about rewriting something that checks for PID and restarting daemons on case of crash. As can be seen at the start of the article, things can be much easier.

• Say this to my face
  https://triosdevelopers.com/jason.eckert/blog/Entries/2019/5/12_The_Dark_Side_of_GNU.html

  That's what I call taking a meme and extending it to a "serious" article. That's entertaining!

• Kernel debug in minutia
  https://www.anmolsarma.in/post/single-step-kernel/

  You can't always add printing everywhere for debugging, I know we all do sometimes. You got to get a real debugger too. Is it possible with the Linux kernel, you'll discover how to setup a VM via QEMU and do the debugging it in this post.

• Clear Linux OS
  https://www.forbes.com/sites/jasonevangelho/2019/05/13/its-time-to-pay-attention-to-intels-clear-linux-os-project/amp/
  https://clearlinux.org/

  A Linux OS pushed and supported by a hardware vendor. That must mean that everything done by that vendor is optimized and fully working. What do you think? Their take on the package manager intrigues me.

• Recursive mutexes
  http://www.zaval.org/resources/library/butenhof1.html

  The horror of multithreading applications, the headaches, why would you complicate it with recursive mutexes. In this email thread you'll find a wonderful explanation of how bad this can get.

• Some bash scripting
  https://raymii.org/s/snippets/Bash_Bits_Check_if_command_is_available.html
  https://raymii.org/s/snippets/Bash_Bits_Find_all_files_containing_specific_text.html
  https://raymii.org/s/tags/bash-bits.html
  https://raymii.org/s/articles/Get_Started_With_The_Nitrokey_HSM.html
  https://community.letsencrypt.org/t/ca-software-and-hsms-used/14600
  https://hacks.mozilla.org/2019/05/technical-details-on-the-recent-firefox-add-on-outage/

  Bash bits are cool tips. You should never forget about the "command" command. The author needs to reformat the website code blocks a bit but the content is valuable. I've also added articles about HSMs.

• Scratch files for the shell
  http://blog.snailtext.com/posts/no-itch-to-scratch.html

  Temporary files to take notes. Not a novel idea in my opinion. Was is similar to ctrl-x ctrl-e in most of today's Bourne shells.

• NTP
  https://networking.ringofsaturn.com/Protocols/ntp.php
  https://securityintelligence.com/news/how-the-kiss-odeath-packet-and-other-ntp-vulnerabilities-could-turn-back-the-internets-clocks/
  http://doc.ntp.org/4.1.0/ntpq.htm
  http://doc.ntp.org/4.2.8/miscopt.html
  https://support.ntp.org/bin/view/Support/AddingNTPServerVariables

  I've dabbled quite a bit with NTP this week. Setting up a server for a basic use case is straight forward but once you want to do something a bit more complex the documentation lets you down and you have to figure things out by yourself.

• Unix time and leaping
  https://alexwlchan.net/2019/05/falsehoods-programmers-believe-about-unix-time/

  A reminder of our series about Keeping time and date, this one deals with Unix time and leap second.

• Tiny Curl
  https://daniel.haxx.se/blog/2019/05/11/tiny-curl/

  A toned down version of curl made for embedded and low end devices.

• Transferring files for non-tech users
  https://www.addictivetips.com/ubuntu-linux-tips/quickly-send-files-between-linux-computers-with-transporter/

  What if you don't want dropbox, nor google drive, nor box, nor any of those but a simple quick and safe solution to share files locally.

• WireGuard on OpenBSD
  https://blog.jasper.la/wireguard-on-openbsd.html
  https://www.wireguard.com/

  I've never used WireGuard instead of OpenVPN but I think that after reading this maybe I've got to give it a try.

• This world of ours
  https://www.usenix.org/system/files/1401_08-12_mickens.pdf
  https://www.cs.cornell.edu/courses/cs513/2005fa/NNLauthPeople.html
  http://collingreene.com/6_buckets_of_prodsec.html

  A mad meditation about the state of security. Followed by the good ol' mantra of "something you know, something you have, something you are." Then a list of the encapsulated methods of finding vulnerabilities.

• The game that was actually a tutorial
  https://www.worldvideogamehalloffame.org/games/microsoft-solitaire

  Not related to Unix but to HCI in general.

Vermaden Valuable News

UNIX

• FreeBSD adds support for newer Lenovo ThinkPad models in acpi_ibm module. Tested on ThinkPad T480 and ThinkPad X1 Yoga 2nd Generation.
  https://svnweb.freebsd.org/base?view=revision&revision=346647

• Install PyroCMS on FreeBSD 11.
  https://www.vultr.com/docs/how-to-install-pyrocms-on-freebsd-11

• Google Summer of Code 2019 FreeBSD Projects.
  https://summerofcode.withgoogle.com/organizations/6583387272249344/#5695528845705216

• Writing Exploit Resistant Code with OpenBSD.
  https://lteo.net/blog/2019/04/27/carolinacon-15-writing-exploit-resistant-code-with-openbsd/
  https://lteo.net/assets/pdf/lteo-openbsd-carolinacon15-20190427.pdf

• Packet Filter Rule Editor for OpenBSD pf Firewall.
  https://github.com/sonertari/PFRE
  https://github.com/sonertari/PFRE/wiki

• Packer/Ansible Configuration for Generation of Immutable OpenBSD Image.
  https://github.com/yannh/openbsd_immutable_router

• ZFS vs XFS.
  https://linuxhint.com/zfs_vs_xfs/

• Google Summer of Code 2019 NetBSD Projects.
  https://blog.netbsd.org/tnf/entry/announcing_google_summer_of_code1

• Installing PostgreSQL 11.2 Server on OpenBSD 6.5.
  https://dev.to/nabbisen/installing-postgresql-11-2-server-on-openbsd-6-5-4oh9

• Science of Why You Hate Your Open Office.
  https://www.fastcompany.com/90342214/the-science-of-why-you-hate-your-open-office

• FreeNAS 11.2-U3 and 11.2-U4 Vulnerabilities.
  https://www.ixsystems.com/community/threads/freenas-11-2-u3-vulnerabilities.75353/

• OmniOS Community Edition r151030 LTS.
  https://omniosce.org/article/release-030

Hardware

• PINE64 PINEBOOK Pro Laptop Available. Rockchip RK3399/4GB RAM/1080p IPS/m.2 NVMe SSD Slot/USB 3.0.
  https://www.pine64.org/pinebook-pro/

• Seagate Ships 16 TB PMR Hard Drives.
  https://www.anandtech.com/show/14297/seagate-starts-shipments-of-16-tb-hard-drives-preps-18-tb-smr-hdds

• DDN Announces Intent to Acquire Nexenta.
  https://nexenta.com/company/media/press-releases/ddn-acquires-nexenta-expands-ai-enterprise-footprint-enter-iot-5g-markets
  https://www.theregister.co.uk/2019/05/07/ddn_is_buying_nexenta/

• Intel (Hopeless) Process Technology Update - 10nm Server Products in 2020H1 and Accelerated 7nm in 2021.
  https://www.anandtech.com/show/14311/intel-process-technology-update-10nm-server-products-in-1h-2020-accelerated-7nm-in-2021

• 28 Cores in Mini-ITX - ASRock EPC621D4I-2M Motherboard for Xeon Scalable.
  https://www.anandtech.com/show/14299/the-asrock-rack-epc621d4i2m

• ASRock EPC621D4I-2M Motherboard Review - Xeon Scalable Mini-ITX Motherboard.
  https://www.servethehome.com/asrock-rack-epc621d4i-2m-motherboard-review/

• Cray and AMD will build 1.5 Exaflop Frontier Supercomputer.
  https://www.servethehome.com/cray-and-amd-win-big-contracts-for-1-5-exaflop-frontier-supercomputer/

https://vermaden.wordpress.com/

Thoughts

Every book you pick up has its own lesson or lessons, and quite often the bad books have more to teach than the good ones. Stephen King

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• zfs from scratch in python
  https://github.com/alcarithemad/zfsp

  An impressive feat, a pure learning experience from analysing FS structure of ZFS.

• Damn, it's irreversible
  https://sabotage-linux.github.io/blog/6/
  https://github.com/rofl0r/hardcore-utils/blob/de5a4ca/fastfind.c

  I can't remember where I've read about that technique before, the good ol' saying that you should type your filename again at the top of the file in case you loose it. However, I hadn't really tried it before, nor seen a full post about actually recovering the file manually. This sounds simple enough.

• Naming files
  https://rasmuse.github.io/i-want-to-stop-naming-files.html

  A problem we've all ran into, doing tests with something, outputting different files with different names depending on situations. You then get lost which file was used for what.

• April 2019 review of reproducible build
  https://reproducible-builds.org/reports/2019-04/

  The magic of reproducibility is on its way. Lots of projects are interested in what this implies. Lovely to see this move across so many areas.

• About the Mozilla addons outage
  https://hacks.mozilla.org/2019/05/technical-details-on-the-recent-firefox-add-on-outage/

  Oh I love this read, the PKI is so entertaining. However, it annoys me that Mozilla, an entity that is maintaining one of the most, if not the most, used CA trust DB to not be aware of their own system for signing addons and not have anyone tracking the intermediate certificate expiry (and probably all other sensitive assets), not even having the thought of what would happen when this expiry date is reached. I'll let you read for more info.

• CPU governor makes it to 5.1
  https://lwn.net/Articles/775618/

  TEO (Timer events oriented) governor made it to Linux 5.1. Predicting events to save up cpu usage is not an easy endeavour, from the benchmarks this is still a thing to try first hand before judging.

• GPL rights or no rights
  https://lkml.org/lkml/2019/5/3/698
  https://lkml.org/lkml/2019/5/4/334

  A huge discussion about the revocability of free licenses when those were not explicitly given to the licensee in exchange of some goods. Legal rights differ dependong on the country, the talk is very USA centered so keep this in mind.

• Polkit and dbus
  https://www.freedesktop.org/software/polkit/docs/latest/polkit-architecture.png
  http://smcv.pseudorandom.co.uk/2015/why_polkit/
  https://www.freedesktop.org/software/polkit/docs/latest/polkit.8.html
  https://www.freedesktop.org/software/systemd/man/logind.conf.html
  https://www.freedesktop.org/software/systemd/man/pam_systemd.html
  https://www.freedesktop.org/software/polkit/docs/latest/
  https://wiki.archlinux.org/index.php/Polkit
  https://www.freedesktop.org/wiki/Software/systemd/writing-display-managers/
  https://freedesktop.org/wiki/Software/systemd/logind/
  https://www.freedesktop.org/software/systemd/man/systemd-logind.service.html
  https://www.freedesktop.org/wiki/Software/systemd/writing-display-managers/

  Lots of documentation about polkit and logind, brace yourself for lots of dbus ipc.

• Without javascript
  https://an3223.github.io/Living-without-the-modern-browser/

  The web has become so prevalent today it's unescapable. Take a lesson from this guy for our next week in the TTY that is coming soon, probably next month.

• Did you know about this feature
  https://www.anmolsarma.in/post/bash-net-redirections/

  That's a nice feature, sort of like a simpler nc you can have for quick debugging.

• VCF East 2019 interview with Brian Kernighan and Ken Thompson
  https://www.youtube.com/watch?v=EY6q5dv_B-o

  A lot of things are happenstance, listen to Ken recall his days at Bell Labs.

Vermaden Valuable News

UNIX

• Uplod FreeBSD Image to Google Cloud Platform.
  https://fabrik.red/post/google/

• OmniOS Community Edition r151028z/r151026az/r151022cx Available.
  https://omniosce.org/article/028z-026az-022cx

• Amiga before Amiga - Amiga Development System.
  https://www.osnews.com/story/129910/the-amiga-before-the-amiga-the-amiga-development-system/
  https://learn.adafruit.com/build-your-own-sparc-with-qemu-and-solaris
  https://cdn-learn.adafruit.com/downloads/pdf/build-your-own-sparc-with-qemu-and-solaris.pdf?timestamp=1556605181

• Build your own SPARC workstation with QEMU and Solaris.
  https://learn.adafruit.com/build-your-own-sparc-with-qemu-and-solaris
  https://amigalove.com/viewtopic.php?f=6&t=1031
  https://www.youtube.com/watch?v=lfUVgHsPoNU

• Ken Thompson and Dennis Ritchie will be inducted into National Inventors Hall of Fame for development of UNIX at Bell Labs.
  https://twitter.com/InventorsHOF/status/1122962516341067776
  https://pbs.twimg.com/media/D5WQdP6XkAIuoCe.jpg:large

• NomadBSD - BSD for the Road.
  https://itsfoss.com/nomadbsd

• NomadBSD 1.2 Quicklook - Installed on HDD.
  https://www.youtube.com/watch?v=KqY8JlKjYpc

• Run BSD - Request a Sticker.
  https://runbsd.info/sticker/

• OpenBSD - Setup Local Auto Installation Server.
  https://www.codemadness.org/openbsd-autoinstall.html

• Commodore 900 - Workstation with Coherent UNIX could happen instead/along AMIGA.
  https://www.floodgap.com/retrobits/ckb/secret/900.html
  https://www.floodgap.com/retrobits/ckb/secret/cbm-clip-900.jpg

• Piping curl to S(hell).
  https://0x46.net/thoughts/2019/04/27/piping-curl-to-shell/

• FreeBSD nsysctl Version 0.9 Released.
  https://alfix.gitlab.io/bsd/2019/02/19/nsysctl-tutorial.html

• Upgrading OpenBSD from 6.4 to 6.5.
  https://dev.to/nabbisen/upgrading-openbsd-from-6-4-to-6-5-43fa

• FreeBSD adds sys/devices/system/cpu/{possible,present} to linsysfs(5) so Linux lscpu(1) now works.
  https://svnweb.freebsd.org/base?view=revision&revision=347015

• FreeBSD 12.0 Installed on GPD Pocket.
  https://adventurist.me/posts/0288

• In Other BSDs for 2019/05/04.
  https://www.dragonflydigest.com/2019/05/04/22865.html

• Bad utmp Implementations in glibc and FreeBSD.
  https://davmac.wordpress.com/2019/05/04/bad-utmp-implementations-in-glibc-and-freebsd/

• Firefox Addons Broken. Use about:config and set xpinstall.signatures.required to false.
  https://blog.mozilla.org/addons/2019/05/04/update-regarding-add-ons-in-firefox/

• OPNsense 19.1.7 Released.
  https://forum.opnsense.org/index.php?topic=12611.0

• BSD Now 296 - Its Alive OpenBSD 6.5.
  https://www.bsdnow.tv/296

• Hello OpenBSD My Old Friend.
  https://westplaat-it.nl/2019/05/hello-openbsd-my-old-friend/

• Straightforward Guide for Setting Up Poudriere on FreeBSD.
  https://www.i-bsd.com/poudriere-guide/

Hardware

• Backblaze Hard Drive Stats 2019 Q1.
  https://www.backblaze.com/blog/backblaze-hard-drive-stats-q1-2019/

• AMD 7nm Navi GPU and Rome CPU to Launch in Q3.
  https://www.anandtech.com/show/14286/amd-7nm-navi-gpu-and-rome-cpu-to-launch-in-q3

Life & Other

• You should have personal web site.
  https://writing.markchristian.org/2019/04/29/personal-web-sites/

• Canada Border Services will Steal your Phone and Laptop.
  https://www.cbc.ca/news/business/cbsa-boarder-security-search-phone-travellers-openmedia-1.5119017

• Hackers went undetected in Citrix internal network for 6 months.
  https://techcrunch.com/2019/04/30/citrix-internal-network-breach/

https://vermaden.wordpress.com/

Thoughts

Enter with the intention of growing as an individual.

You may not always enjoy your days but there can still be something that could help you grow. You may not always enjoy a conversation but it could help you grow.

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• Open Source stories
  https://dirkriehle.com/
  https://dirkriehle.com/publications/2019-selected/the-innovations-of-open-source/
  http://the-mobile-network.com/2019/04/open-source-and-telco-standards-to-play-nicely/
  https://www.etsi.org/newsroom/press-releases/1590-2019-04-etsi-and-the-linux-foundation-sign-memorandum-of-understanding-enabling-industry-standards-and-open-source-collaboration

  Different blogs and articles about open source. A partnership between ETSI and the Linux foundation to have open source collaboration on network automation.

• Recalling Unix
  https://www.linuxjournal.com/content/back-day-unix-minix-and-linux
  https://www.linuxjournal.com/content/why-linux-spelled-incorrectly

  Fun recollection of first encounters with Unix-like operating systems followed by the most ridiculous argument I've ever read "I don't like it so I'll find some reasons to disavow it, whatever it is", the comments are priceless. I advice, if you feel a bit frustrated then avoid both articles, they're pretty basic.

• Linux on 8-bit microcontroller
  http://dmitry.gr/?r=05.Projects&proj=07.%20Linux%20on%208bit

  This is a repost of "Following through with the low level hacks" in 52, just felt like revisiting it because I recently got into the world of embedded devices and microcontroller. See also "Reducing/Shrinking the Linux kernel" in 66.

• Getting closer to good hidpi
  https://pointieststick.com/2019/04/28/kde-usability-productivity-week-68/

  The KDE UX team has been consistently pushing those posts every week for more than a year now. The consistency is fantastic for multiple reasons, it's a message to the world that things are moving and getting better, everyone can comment about possible changes that could be made so full fledge agile in play here, it's a message to possible devs that want to hop in and want to know what to work on, and finally it keeps the motivation for the team itself going.

• GPU card for chromebook
  https://www.androidcentral.com/will-somebody-make-me-chromebook-real-graphics-card

  Chromebooks used to be that extremely light and low hardware specs, cheap laptop, thin client. Now you can find chromebooks that are more powerful than laptops, can't we stop calling them chromebooks then?

• Misleading bug
  https://news.sherlock.stanford.edu/posts/when-setting-an-environment-variable-gives-you-a-40-x-speedup
  https://old.reddit.com/r/linux/comments/bhvwvl/when_setting_an_environment_variable_gives_you_a/

  You got to remove the fancy eye candies if you want your command line to be fast. My solution would've been way simpler than anything that was proposed in the above, just command ls instead, skip all aliases.

• Less
  https://www.lifewire.com/what-to-know-less-command-4051972
  https://ss64.com/bash/less.html

  Know your pager well, it's powerful, it has lots of features you might not know about.

• Shell and more shell madness
  http://250bpm.com/blog:153
  https://0x46.net/thoughts/2019/04/27/piping-curl-to-shell/
  http://cdaniels.net/shell_music.html

  The true hardcore Unix philosophy, having all the pieces of the programming language be represented as a file! Plus, the usual "please don't paste commands from the interwebs into your terminal blindly". The freaky one I was not aware of is the "Partial content returned by the server". And finalizing with a touch of musicality.

• Memsetting
  https://www.anmolsarma.in/post/stop-struct-memset/
  https://news.ycombinator.com/item?id=19766930
  https://lobste.rs/s/7aqidd/stop_memsetting_structures

  You probably have already seen it in tech news, I'll highlight the post here too. I like it when someone posts such "X considered harmful" or "Stop doing X" and then the flaming train falls upon the web.

• IPSec
  https://www.elastichosts.com/blog/linux-l2tpipsec-vpn-server/
  https://www.ibm.com/developerworks/library/l-ipsec/index.html

  Setting up a VPN isn't that hard, but the is it needed for your case. Is it enough to ssh and port forward instead? Isn't it faster according to "Tunneling/syncing data between machines securely" in 51?

• rdist(1)
  https://high5.nl/gist/rdist.html

  We discussed that topic a lot, distributing files over machines, so here's another take on it.

• IMSI catcher
  https://harrisonsand.com/imsi-catcher/

  Not really Unixy but it runs on Unix-like OS. Some of the equipment is hard to get your hands on in parts of the world but other than that it's nifty.

• Oh the mobile world
  https://textslashplain.com/2017/01/14/the-line-of-death/
  https://jameshfisher.com/2019/04/27/the-inception-bar-a-new-phishing-method/

  "Line of death", basically a bug because the UI is misleading. All of that to save screen estate.

Vermaden Valuable News

UNIX

• Its now possible to use FreeBSD ASR in HardenedBSD 13-CURRENT.
  https://github.com/HardenedBSD/hardenedBSD/commit/553b58b88ecd166c040c87d22ca1554361b0fad2

• DragonFly BSD 5.4.2 Released.
  https://www.dragonflybsd.org/release54/

• Categorizing OpenBSD Bugs.
  https://www.collicutt.co.uk/notebook/openbsd_bugs.html

• The End of Scientific Linux.
  https://lwn.net/Articles/786422/

• OnionBSD aims at preserving your privacy/security/anonymity using OpenBSD as base.
  https://gitlab.com/onionbsd/onionbsd
  https://gitlab.com/onionbsd/onionbsd/wikis/home
  https://gitlab.com/onionbsd/onionbsd/raw/master/etc/logo.png

• Installing Bolt CMS on FreeBSD 12.
  https://www.vultr.com/docs/installing-bolt-cms-on-freebsd-12
  https://github.com/bolt/bolt
  https://bolt.cm/

• Reimplementation of Audio Subsystem on NetBSD.
  https://mail-index.netbsd.org/source-changes/2019/04/21/msg105272.html

• Intel Cascade Lake Windows/Linux/FreeBSD Benchmarks.
  <https://www.phoronix.com/scan.php?page=article&item=cascadelake-windows-linux >

• Stunnel and Squid on FreeBSD 11.
  https://www.vcloudnine.de/stunnel-and-squid-on-freebsd-11/

• FreeBSD adds GRE-in-UDP encapsulation support as defined in RFC8086.
  https://svnweb.freebsd.org/base?view=revision&revision=346630

• The Art of Command Line. Master the command line all in one page.
  https://github.com/jlevy/the-art-of-command-line

• OS108 pairs NetBSD with MATE desktop environment to provide nice desktop. OS108 name - "1 and 0 being binary bits when represented 8 bits forms a byte also the distance of Earth from the Sun is about 108 times the diameter of the Sun. hence the name."
  https://os108.org/
  https://github.com/OS108
  https://forums.os108.org/
  https://www.phoronix.net/image.php?id=2019&image=netbsd_os108_1_large

• OpenBSD 6.5 Released.
  https://undeadly.org/cgi?action=article;sid=20190424132429
  https://www.openbsd.org/65.html
  https://www.openbsd.org/plus65.html

• QEMU 4.0.0 Released.
  https://www.qemu.org/2019/04/24/qemu-4-0-0/

• Seagate Shows Dual Actuator Speed Gains in Real World Setup on FreeBSD.
  https://blog.seagate.com/craftsman-ship/seagate-shows-dual-actuator-speed-gains-in-real-world-setup/

• FreeBSD ZFS/FreeBSD ZoL/Ubuntu ZoL Benchmarks.
  https://www.phoronix.com/scan.php?page=article&item=freebsd-zol-april

• FreeBSD Ports Got 500,000th Commit.
  https://svnweb.freebsd.org/changeset/ports/500000

• Netdata 1.14 Released.
  https://www.reddit.com/r/freebsd/comments/bhdm0x/netdata_the_opensource_realtime_performance_and/
  https://github.com/netdata/netdata/releases/tag/v1.14.0

• Dream Come True - My Very Own AMIGA A3000.
  https://amigalove.com/viewtopic.php?f=9&t=1026

• GDB Dashboard - Modular Visual Interface for GDB in Python.
  https://github.com/cyrus-and/gdb-dashboard

• OpenBSD Jumpstart Updated to 6.5.
  http://www.openbsdjumpstart.org/

• BSD Now 295 - Fun with funlinkat().
  https://www.bsdnow.tv/295

• NomadBSD Handbook.
  <nomadbsd.org/handbook/handbook.html>

• Setup Replicated PostgreSQL on Tribblix.
  https://ptribble.blogspot.com/2019/04/setting-up-replicated-postgresql-on.html

• HA PostgreSQL on Tribblix with stolon.
  https://ptribble.blogspot.com/2019/04/ha-postgresql-on-tribblix-with-stolon.html

• Setup etcd Cluster on Tribblix.
  https://ptribble.blogspot.com/2019/04/setting-up-etcd-cluster-on-tribblix.html

• In Other BSDs for 2019/04/27.
  https://www.dragonflydigest.com/2019/04/27/22827.html

• Speedup ls(1) command by setting proper LS_COLORS environment variable.
  https://news.sherlock.stanford.edu/posts/when-setting-an-environment-variable-gives-you-a-40-x-speedup

• Docker Hub Hacked - 190k Accounts (5% of Users) with Usernames and Passwords Hashes.
  https://news.ycombinator.com/item?id=19763413
  https://success.docker.com/article/docker-hub-user-notification

• FreeBSD adds nvme to arm64 GENERIC along with if_ena. These changes allow stable/12 to boot on Amazon EC2 A1 family (arm64) instances.
  https://lists.freebsd.org/pipermail/svn-src-all/2019-April/179705.html

• Pot is Container Framework Based on FreeBSD Jails.
  https://github.com/pizzamig/pot
  https://fosdem.org/2018/schedule/event/pot_container_framework/attachments/slides/2128/export/events/attachments/pot_container_framework/slides/2128/pot_slides.pdf

• Call for Testing: FreeBSD Package Base.
  https://lists.freebsd.org/pipermail/freebsd-current/2019-April/073202.html
  https://trueos.github.io/pkgbase-docs/

• Call for Testing: FreeBSD with ZoL (ZFS on Linux).
  https://lists.freebsd.org/pipermail/freebsd-stable/2019-April/090915.html

• Official OPNsense Security Platform for Azure.
  https://azuremarketplace.microsoft.com/en-us/marketplace/apps/decisosalesbv.opnsense

Hardware

• Compulab Airtop3. Fanless passively cooled server with up to 95W Intel Core i9-9900K CPU and 170W Nvidia Quadro RTX 4000.
  https://www.fanlesstech.com/2019/04/compulabs-turbocharged-airtop3.html

Life & Other

• Satanic Temple is Now Officially an IRS Approved Tax Exempt Church in USA.
  https://friendlyatheist.patheos.com/2019/04/25/the-satanic-temple-is-now-officially-an-irs-approved-tax-exempt-church/

• People Who Claim to Work 75 Hour Weeks Usually Only Work About 50 Hours.
  https://nymag.com/intelligencer/2019/04/people-who-claim-to-work-75-hour-weeks-are-lying.html

• Steve Jobs Never Wanted Us to Use Our iPhones Like This.
  https://www.nytimes.com/2019/01/25/opinion/sunday/steve-jobs-never-wanted-us-to-use-our-iphones-like-this.html

• It Took 7 Years to Recreate Super Mario Bros on Commodore 64.
  https://kotaku.com/it-took-7-years-but-now-you-can-play-super-mario-bros-1834172015

• Google is Killing our Mail.
  https://www.tablix.org/~avian/blog/archives/2019/04/google_is_eating_our_mail/

• Google Index Coverage.
  https://www.tablix.org/~avian/blog/archives/2019/02/google_index_coverage/

• Contributing to Open Source Project - How to Get Started.
  https://medium.com/mindsdb/contributing-to-an-open-source-project-how-to-get-started-6ba812301738

• Future of Firefox for Android.
  https://www.ghacks.net/2019/04/26/the-future-of-firefox-for-android/

https://vermaden.wordpress.com/

Thoughts

Experience is what you get when you didn't get what you wanted.

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• The runtimes wizard
  https://www.youtube.com/watch?v=qtEIq7fe_KQ
  http://atnan.com/blog/2011/11/04/blaine-runtimes-wizard-garst-retiring-after-21-years-at-apple/

  An interview with Blaine Garst, such a wondeful person. If you don't want only to hear about the Unix related stuffs then jump at 1h.

• Unexpected Coding
  https://utcc.utoronto.ca/~cks/space/blog/unix/EdDesignedForCookedInput
  https://utcc.utoronto.ca/~cks/space/blog/unix/EdDesignedForCookedInput?showcomments#comments
  https://utcc.utoronto.ca/~cks/space/blog/unix/EdV7CodedUnusually
  https://utcc.utoronto.ca/~cks/space/blog/unix/EdV7CodedUnusually?showcomments#comments
  https://github.com/DoctorWkt/Apout

  I like those articles about digging into old sources, someone replying with clarifications, the research intensifying, and in the end more truth coming out. It might confuse some, they might prefer a nicely polished post, but personally, I the intrigue in those keeps me reading. It's like uncovering knowledge.

• ELISA
  https://elisa.tech/
  https://lwn.net/Articles/780493/rss
  https://www.linuxfoundation.org/press-release/2019/02/the-linux-foundation-launches-elisa-project-enabling-linux-in-safety-critical-systems/
  https://sdtimes.com/softwaredev/the-linux-foundation-launches-new-project-to-enable-linux-in-safety-critical-applications/

  Oh we talked a lot about mission critical Unix-like OS, real-time OS, during our Keeping time and date series. Well, here's a new project that was launched called elisa (Enabling Linux in Safety Application), from the look of it this seems like a standardisation process with a set of tool to build a safety-critical application meeting specific requirements.

• All those X configurations
  https://nixers.net/showthread.php?tid=2271

  So many dot files for different things, it's confusing. I've tried to compact some research into this post to make things more understandable. Maybe it does the job, let me know.

• And another
  http://zge.us.to/txt/unix-harmful.html

  Unix got fundings because it was good at text editing, it moved in new directions since then. How does this relate to Electron apps these days? "The fact that we need to layer abstraction upon abstractions says more about what we see the need to abstract from than where we are abstracting towards." An interesting point of view on the topic, maybe you agree, maybe you don't.

• Got and issue with sudo
  https://fosspost.org/opinions/sudo-asking-hiding-password

  This may seem like a meaningless issue to most of us (there's a vote button at the end of the article). It's a genuine point but I just don't see non-technical users spending time in their terminal typing commands as root... That's not a great combination there. Maybe display something not related to the count, anything that's a feedback, maybe a single character that changes at every key you enter.

• File history
  https://github.com/xorhash/fh

  An interesting take at building incremental and browsable diffs between files. It's quick to run, easy to get, portable. Overall, a cool project. Not sure I'll use it, but still cool.

• Are we there yet, are we there yet, where's my desktop year
  https://www.slashgear.com/what-the-linux-desktop-must-have-to-become-mainstream-09572504/
  https://funnelfiasco.com/blog/2019/04/22/the-linux-desktop-is-not-in-trouble/
  https://robey.lag.net/2019/04/21/darter-pro-review.html
  https://www.linuxlinks.com/foreignlanguagetools/

  In my opinion, a lot of those Linux desktop article are badly misinformed, usually relying on the disparity of choices as a valid argument. Amongst those links you can also find a review from someone jumping from an OS to another, and a list of fascinating programs to learn languages.

• Do you waddle the waddle?
  http://www.tuxmachines.org/taxonomy/term/98

  No idea what that motto means, forget it for a moment and check what Roy Schestowitz has been consistently posting for a while now. Every single day a big list of tutorials about many topics.

Vermaden Valuable News

UNIX

• GhostBSD 19.04 Overview.
  https://twitter.com/ribalinux/status/1117856218251517956
  https://youtu.be/jFfVp_zfk1c

• Prometheus Exporter for FreeBSD CTL Daemon (iSCSI Target).
  https://github.com/Gandi/ctld_exporter
  https://twitter.com/_bapt_/status/1118001231384010753

• My Summer at Bell Labs (Part 1).
  https://akapugs.blog/2018/05/16/belllabspart1/

• Oracle Solaris 11.4 SRU8 Available.
  https://blogs.oracle.com/solaris/announcing-oracle-solaris-114-sru8

• FreeBSD adds initial version of DTrace support for ext2fs driver.
  https://svnweb.freebsd.org/base?view=revision&revision=346267

• OpenSSH 8.0 Released.
  https://lists.mindrot.org/pipermail/openssh-unix-dev/2019-April/037747.html

• BSD Now 294 - SSH Tarpit.
  https://www.bsdnow.tv/294

• Shawn Webb (@lattera) minimizes diffrences between HardenedBSD (ASLR) and FreeBSD (ASR) implementations.
  https://twitter.com/lattera/status/1119018409575026688

• Crossmeta ZFS - Another ZFS Port on Linux.
  https://www.crossmeta.io/another-zfs-port-on-linux/

• Minio now can behave as HDFS Gateway. # minio gateway hdfs hdfs://namenode:8200
  https://github.com/minio/minio/blob/master/docs/gateway/hdfs.md

• Unleashed 1.3 Released - Fork of Illumos for the 4th Time.
  http://lists.31bits.net/archives/devel/2019-April/000052.html

• The docbook2mdoc 1.0.0 Released.
  https://undeadly.org/cgi?action=article;sid=20190419101505

• Call for Testing - FreeBSD with ZFS on Linux Images Ready.
  https://lists.freebsd.org/pipermail/freebsd-stable/2019-April/090915.html
  https://github.com/zfsonfreebsd/ZoF
  https://pkg.trueos.org/iso/freebsd12-zol/
  https://pkg.trueos.org/iso/freebsd13-zol/

• In Other BSDs for 2019/04/20.
  https://www.dragonflydigest.com/2019/04/20/22797.html

• FreeBSD adds support in psm(4) for 4 and 5 finger touches in synaptics driver.
  https://svnweb.freebsd.org/base?view=revision&revision=346455

• LibreSSL 2.9.1 Released.
  https://marc.info/?l=openbsd-announce&m=155590112606279&w=2

• NomadBSD 1.2 Released.
  http://nomadbsd.org/

Hardware

• NSA-B-GONE - Sketchy Hardware Security Device for Lenovo ThinkPad X220.
  https://hackaday.io/project/164343-nsa-b-gone
  https://github.com/zakqwy/NSA-B-GONE

• AMD Ryzen Embedded R1000 Family Launched.
  https://www.servethehome.com/amd-ryzen-embedded-r1000-family-launched/

• TSMC Reveals 6nm Process Technology: 7nm with Higher Transistor Density.
  https://www.anandtech.com/show/14228/tsmc-reveals-6-nm-process-technology-7-nm-with-higher-transistor-density

• Samsung Completes Development of 5nm EUV Process Technology.
  https://www.anandtech.com/show/14231/samsung-completes-development-of-5-nm-euv-process-technology

• Avalue EMX-KBLU2P Mini ITX Motherboard with Intel Core i7/i5/i3 and Passive Cooling.
  https://www.avalue.com.tw/news/Avalue-introduces-EMX-KBLU2P%2c-the-thin-Mini-ITX-Embedded-Industrial-motherboard_2984

• Whiskey Lake ZBOX is Official.
  https://www.fanlesstech.com/2019/04/whiskey-lake-zbox.html

Life & Other

• Paranoid Person Guide to Online Privacy.
  https://www.fastcompany.com/90316917/the-paranoid-persons-guide-to-online-privacy

• Facebook says it 'unintentionally uploaded' 1.5 million users email contacts without permission.
  https://www.cnbc.com/2019/04/18/facebook-reportedly-uploaded-people-email-contacts-without-consent.html

• Unmasked: What 10 million passwords reveal about people who choose them.
  https://wpengine.com/unmasked/

• Evidence that Jesus ever existed is weaker than you might think.
  https://www.rawstory.com/2019/04/evidence-jesus-ever-existed-weaker-might-think/

• Former Mozilla Exec - Google Sabotaged Firefox for Years.
  https://www.zdnet.com/article/former-mozilla-exec-google-has-sabotaged-firefox-for-years/

• Vendors must add physical on/off switch to devices that can spy on us.
  https://larrysanger.org/2019/04/vendors-must-start-adding-physical-on-off-switches-to-devices-that-can-spy-on-us/

• These 17 Firefox tips make it easy to switch from Chrome.
  https://www.fastcompany.com/90333407/these-17-firefox-tips-make-the-case-for-ditching-chrome

https://vermaden.wordpress.com/

Thoughts

In science if you know what you are doing you should not be doing it.In engineering if you do not know what you are doing you should not be doing it.

Archive

You can find the archive of past newsletters here:
https://newsletter.nixers.net/entries.php

Contribute

There are many ways to contribute:

1. If you find anything interesting you can contact venam on the forums and that may be featured in the next newsletter.
2. Share it with your friends.
3. Share your point of view about the newsletter.
4. Open a thread on the forums to discuss one of the topics that has been brought by reading this newsletter.
5. If you want to help with the forums server fees or simply donate then you can send something to my btc address (ask for it) or patreon page: https://www.patreon.com/venam.

Nixers Newsletter

Unix

• Optimization, testability, and bug handling
  http://akaptur.com/blog/2017/11/12/love-your-bugs/
  https://microservices-on-my-mind.blogspot.com/2019/04/break-functional-and-orchestration.html?m=1
  http://carlos.bueno.org/optimization/

  Behind every bug there's a story, a learning experience. Bitrots, if you hear about them once, you can't forget them. Architecture issues, that's always something that morphs through time however we can apply some of the Unix philosophy to it. And finally a small book about optimization.

• Persistent memory 3
  https://www.linuxjournal.com/content/support-persistent-memory

  Follow up with "DAX on Linux" of 115 and "NOVA fs" in 114. I like where things are going, hopefully in the future we'll take advantage of those even more.

• glibc and DNS
  https://jrl.ninja/etc/2/

  A post that wonders about how DNS lookup works, for more info see "Networking" in 89 also "And an extra for the ride" in 93 for the series on DNS resolution.

• SSH forwarding issues
  https://defn.io/2019/04/12/ssh-forwarding/

  A discussion on why ssh forwarding created the situation that happened with matrix.org and to use instead ProxyJump or ProxyCommand, which are neat.

• Fixing web security
  https://www.volkerkrause.eu/2019/04/14/kde-privacy-automating-finding-fixing-insecure-http-links.html

  A nice initiative from the KDE team to fix HTTP url to HTTPS in an automated manner.

• Disk usage
  https://www.ostechnix.com/duc-a-collection-of-tools-to-inspect-and-visualize-disk-usage/

  I didn't hear about duc before, after doing the test-drive with it I'm quite surprised. It's a great tool to dive into what's taking disk space.

• Year of the Linux desktop or desktop in trouble?
  https://www.zdnet.com/article/the-linux-desktop-is-in-trouble/
  https://linux.slashdot.org/story/19/04/13/0151256/is-the-linux-desktop-in-trouble

  "I'd love to see a foundation bring together the Linux desktop community and have them hammer out out a common desktop for everyone" Isn't that what the freedesktop organization is about? A fun discussion, an old topic.

• Botnets
  https://www.aboutchromebooks.com/news/chrome-os-75-adds-usb-device-adb-android-support-linux-project-crostini/
  https://neonsea.uk/blog/2019/04/14/chroot-shenanigans-2.html

  Take ownership of your devices. Install whatever you want on them. Support for connecting external devices to it is a must.

• Jailbreaking the Subaru StarLink
  https://github.com/sgayou/subaru-starlink-research/blob/master/doc/README.md

  A continuation with the spirit of the previous links. Head units in cars have become smarter, mine is still old school but still. Now obviously the question becomes how do we run something else on that machine. Find out in this impressive post. HINT: "A follow up on this QNX Desktop" in 117, "QNX" in 114.

• Another city trial
  https://www.shareable.net/blog/deputy-mayor-moves-grenoble-toward-free-open-software

  It's not really something new but it's nice to hear cities attempting openness approaches to solve their issues.

• TempleOS, the life of Terry Davis
  https://www.youtube.com/watch?v=V6HlbpczpDM

  Not Unix, but as we all love hobbyist OS I'll still share. This is a video, more of an eulogy to Terry Davis and his fabulous work with TempleOS.