https://github.com/0xmfbk/ebpf-container-escape-framework
Audit only eBPF EDR for Linux 5.15+ LTS: 14 kernel hooks, 15 actions (13 MITRE techniques), process lineage, SIEM export, K8s/Docker ready.
XFEDI
ActivityPub#Linux
Public posts with this hashtag.
A new #Linux release is a great reason to get together. Whether your local #community favors a traditional gathering or something more immutable, if you plan to host an #openSUSE #release party, please list it on the https://en.opensuse.org/openSUSE:Launch_parties so others can find and join you.
I still believe eBPF, if not managed correctly, is a big security issue. Containers isolate processes, not the kernel. eBPF runs in the kernel.
Netfilter was fixed for this: a container's firewall rules only apply to its own network namespace. Scoped by design.
eBPF tracing hooks weren't. A kprobe loaded from one container sees every process on the host. CAP_BPF in a container is really a host-wide grant.
Anyway, my 2 cents.
Fake Arch Linux packages posing as yay and paru ran root-level malware from the AUR. Learn how to check and respond.
#ArchLinux #AUR #yay #paru #Malware #SupplyChainAttack #Linux #DirtyBlanket
https://meterpreter.org/fake-arch-linux-packages/?utm_source=mastodon&utm_medium=jetpack_social
Emote 5.0 has officially been released. It's quite a big upgrade and modernization.
It had been about 4 years since I'd last worked on Emote in anger, so this was a long time coming!
Release notes: https://github.com/tom-james-watson/Emote/releases/tag/v5.0.0
The Linux Assisted-by tag is going away after maintainers agreed it misreports AI use, but human accountability stays.
#Linux #LinuxKernel #AssistedBy #AIAssistedCoding #OpenSource #LinusTorvalds #KernelDevelopment #Checkpatch
https://securityonline.info/linux-assisted-by-tag/?utm_source=mastodon&utm_medium=jetpack_social
https://akawashiro.com/articles/procinsh-en
Do you like Ghost in the Shell? In Linux?
GitHub - noboruma/ebpfexplorer · GitHub
https://github.com/noboruma/ebpfexplorer
🚀 @ONLYOFFICE Desktop Editors 10.0 released!
Νέο AI Chat & AI Tools ως προαιρετικό module (beta), επανασχεδιασμένο start window, Odoo ως cloud provider και βελτιώσεις σε Linux & macOS. Το AI δεν είναι προεγκατεστημένο — το ενεργοποιείτε μόνο αν θέλετε.
Διαβάστε: https://www.onlyoffice.com/blog/el/2026/10/onlyoffice-desktop-editors-10
#ONLYOFFICE #OpenSource #Linux #macOS #AI #Odoo #DesktopEditors #FOSS #Productivity #Tech
ONLYOFFICE BlogONLYOFFICE Desktop 10.0: Νέα ΤΝ & Odoo! | ONLYOFFICE BlogΤο ONLYOFFICE Desktop Editors 10.0 έρχεται με νέα εργαλεία ΤΝ, AI Chat, επανασχεδιασμένο παράθυρο εκκίνησης, Odoo και νέο UI στο desktop. Δείτε τι νέο υπάρχει.
theregisterLinux KVM guest-host escape rated critical, may represent a new way to attack penguin-powered networkingParty like it’s CVE-2026-99999 – a 9.3-rated nasty called PwnEscape
The Ubuntu 26.10 release delivers GNOME 51, Rust-powered uutils core tools, local Myna voice AI, and expanded TPM hardware encryption.
"BleachBit 6.0.6 released with fixes for admin cleaning on Linux"
"BleachBit 6.0.6 introduces cleaners for the Helium browser and Docker Desktop (including its AI assistant). BleachBit, the free, open-source and cross-platform system cleaning utility has a new maintenance release out – with support for Ubuntu 26.10."
https://www.omgubuntu.co.uk/2026/10/bleachbit-606-update-speed-boost
OMG! UbuntuBleachBit 6.0.6 released with fixes for admin cleaning on Linux - OMG! UbuntuBleachBit, the free, open-source and cross-platform system cleaning utility has a new maintenance release out – with support for Ubuntu 26.10. BleachBit
Welcoming Myna, and where EasySpeak fits in
(Link has details for what's next)
https://github.com/ctsdownloads/easyspeak/discussions/244
#Linux #Accessibility #OpenSource #VoiceControl #Ubuntu #GNOME #Myna
🐧 SIGINT // Linux Watch — 2026-10-20
A critical KVM guest-to-host escape is working its way into Debian, RHEL, and Ubuntu — if you run multi-tenant VMs on bare metal, this is the patch Tuesday that actually matters.
theregisterLinux KVM guest-host escape rated critical, may represent a new way to attack penguin-powered networkingParty like it’s CVE-2026-99999 – a 9.3-rated nasty called PwnEscape
Packaging week paid off. Seven of my little Linux apps now ship an AppImage, so they run on Ubuntu, Fedora, openSUSE and the rest, not just Omarchy: Repokase, Jubako, Dogear, omaforge, Rune, Bahá'í Reader and Hyprfall. Python and Qt (or Quickshell) ride along inside, and --install-desktop-entry puts the app in your menu with proper icons. Bahá'í Reader has a Flatpak bundle too. Omarchy is still home.
https://blog.ninepointlabs.com/2026/10/appimages-for-every-linux/
The Word from Nine Point LabsSeven Nine Point Labs apps now run on any Linux, with AppImagesNine Point Labs apps are made for Omarchy first, and that isn’t changing. But they shouldn’t stop at Omarchy. As of today, seven of them also run on Ubuntu, Fedora, openSUSE and most other Linux distributions: every release now comes with an AppImage that runs on most x86_64 Linux systems and fits…
For when you really need root... #Linux
(Yeah, there's dozen of ways to make a joke here.. I'm just going with the lawyers' advice)
🐧 SIGINT // Ubuntu Watch — 2026-10-20
Kernel escape vuln with real patching urgency. This roundup gives actual check commands and per-distro fix status for Ubuntu, Debian, RHEL, Proxmox - more actionable than the bare CVE entry for patching your fleet tonight.
🔗 https://smartscope.blog/en/blog/cve-2026-99999-pwnescape-linux-kernel-vulnerability-affected-2026/
SmartScopeCVE-2026-99999 (PwnEscape): Am I affected? Fix status for RHEL, Ubuntu, Debian, Amazon Linux and ProxmoxAm I affected by CVE-2026-99999 (PwnEscape)? Check commands and OS fix status for RHEL, Ubuntu, Debian, Amazon Linux, Proxmox VE and SUSE, including confirmed Debian, Amazon Linux and Proxmox kernels, unconfirmed fixes, and host update and reboot steps.
Working on qZypper, a Qt 6 / QML package manager GUI for openSUSE (Leap 16 / Tumbleweed), built on libzypp.
• Updates tab with one-click update / dist-upgrade
• RPM Groups & Languages views
• Multi-select + single-key status changes (+ - > < ! *)
• Search modes: wildcards, regex, exact, file lists
• Update Unconditionally (reinstall / downgrade)
Root ops go through a D-Bus backend + Polkit, with a bundled SELinux policy.
Είπα, γιατί μου σπάει το tcp_rmem, ε κάποια μαλακία θα έκανα, τι πείραξα πάλι πανάθεμα 'μαι;
E ή πιωμένος θα ήμουν; ΜΠΑ δε τα κάνω γω τέτοια λάθη δε πάνε μαζί, ε μετά απο το κλασικό κρυφτό και jourrnalctl με τα στάνταρ Χριστουγεννιάτικα λαμπάκια μου που άναψαν μιας και πλησιάζουν, τελικά ο Kernel αποφάσισε να ανεβάσει το buffer 4096, ρίχνω test τον παλιό περνάει, στον καινούριο "πιστόλι", μέχρι το 4096, καθίστε βρε παιδιά, μη βιάζεστεεεε, να προλαβαίνουμε το spoofing maintenance. Ένας είμαι δεν έχω λόχο πίσω μου.
Σιγά βρε...
Σε λίγο θα χρειάζομαι το μεγάλο πεύκο να σας προλάβω, μην τα κάνετε έτσι απότομα αυτά, έχουμε ευαισθησίες ναούμ, μη μας ρίχνετε τέτοια καρδιακά, δεν έχουμε και υποδομές.
@torvalds βρε σάτηρε, θες να μας πεθάνεις; Κανόνισε γιατί τα έξοδα τα αναλαμβάνεις.
Θα σου βάλω Madonna, πρόσεχε.
#Greek #Jokes #IT #Linux #Fun #Breaking #Hacking #Bullshitting #LinusTorvalds #Technology #Privacy #Kernel #ΚάτσεΚαλάΒρεΑδερφέ
Gentoo-Based MocaccinoOS 26.10 Released with COSMIC 1.10 and KDE Plasma 6.7.5 https://9to5linux.com/gentoo-based-mocaccinoos-26-10-released-with-cosmic-1-10-and-kde-plasma-6-7-5 #9to5linux #linux
I swear 90% of my home server problems boil down to permissions issues.
I was the 9-th most active Linux kernel v7.3 developer [1] in terms of the number of commits. This is my first time to be in the top ten!
I was also the 30-th most active Linux kerne v7.3l code reviewer [2] in terms of the number of Reviewed-by: tags. This must be my first time to be in the list!
Numbers are just numbers, don’t get me wrong. Those just help my memory of the moments, though.
[1] https://lwn.net/Articles/1100241/
[2] https://lwn.net/ksdb/releases/v7.3/by_tags
#linux #kernel
I was also the 30-th most active Linux kerne v7.3l code reviewer [2] in terms of the number of Reviewed-by: tags. This must be my first time to be in the list!
Numbers are just numbers, don’t get me wrong. Those just help my memory of the moments, though.
[1] https://lwn.net/Articles/1100241/
[2] https://lwn.net/ksdb/releases/v7.3/by_tags
#linux #kernel
Linux phones: could they finally become a real alternative to Android and iOS?
After years of stagnation, Linux phones may be approaching a turning point.
In a recent article, Amos Batto explains how new hardware options, more mature interfaces like Phosh and Plasma Mobile, and tools such as Waydroid could make Linux phones more practical.
But better technology alone won’t be enough.
Projects like PINE64 and Purism have faced serious challenges. Building a phone is one thing; funding software development, maintaining hardware support and keeping a company afloat are much harder.
Jolla’s latest phone also suggests there is a market for alternatives, particularly among people who want more control over their devices.
Linux phones don’t need to replace Android or iOS to matter. They need to become a practical option for people who value privacy, software freedom and digital sovereignty.
Would you consider switching to a Linux phone if it supported the apps and features you rely on every day?
https://amosbbatto.wordpress.com/2026/10/05/linux-phones-alternative/
Random thoughts, conocimiento no conocido, yachay mana yachasqachuWill Linux phones become a viable alternative to the Android/iOS duopoly?Linux phones now have the hardware and software to succeed, but it is an open question whether they will become a viable alternative to the Android/iOS duopoly.
9 Raspberry Pi Projects to Learn Linux, Coding & Networking
#raspberrypi #linux #opensource
RaspberryTips9 Raspberry Pi Projects to Learn Linux, Coding & NetworkingOver the years, I've learned more about Linux, Python, and networking by building Raspberry Pi projects than I ever would have by memorizing commands and theory. Once you have a real project to work on,
"Nginx 413 Request Entity Too Large: client_max_body_size Fix"
"Fix the Nginx 413 Request Entity Too Large error: raise client_max_body_size in the right context and match the PHP-FPM upload limits."
https://linuxize.com/post/nginx-413-request-entity-too-large/
LinuxizeNginx 413 Request Entity Too Large: client_max_body_size FixFix the Nginx 413 Request Entity Too Large error: raise client_max_body_size in the right context and match the PHP-FPM upload limits.
While pondering the fate of Linux on AI, I ran into this, from March, 2026:
Linux.org: The Linux Distro Graveyard — The Numbers Are More Telling Than You Think https://www.linux.org/threads/the-linux-graveyard.64095/ #Linux
Sauf erreur de ma part, c'est faux, mensonger, trompeur et #putaclic :
« Une faille dans le noyau Linux permet à une machine virtuelle de lire la mémoire de l’hôte »
Il suffirait pourtant d'utiliser le bon temps grammatical. Ce n'est pas si compliqué.
Purists don't want AI in their Linux code, and this release probably has it. Just saying.
9to5Linux: GNU Linux-Libre 7.3 Kernel Released for Those Seeking 100% Freedom for Their PCs https://9to5linux.com/gnu-linux-libre-7-3-kernel-released-for-those-seeking-100-freedom-for-their-pcs @9to5linux @mariusnestor #Linux