mdeslaur

So I expect to pay less for his product now that his biggest cost has been cut in half.

So it's "political" to show tariffs, but it's not "political" to show sales tax?

Bug was filed here: https://bugs.launchpad.net/ubuntu/+source/cloud-init/+bug/20...

https://wiki.ubuntu.com/SecurityTeam/FAQ#Official%20Support

In the past, Universe packages only got security updates if a member of the Ubuntu community submitted a fix for sponsoring. The community can still do this, but additionally, Ubuntu Pro exists which also updates universe packages.

Ubuntu Pro covers Universe packages, which weren't previously covered by official security updates. All the packages in main still get the same security updates as before without requiring Ubuntu Pro.

I don't understand how anyone manages to use a touchpad after getting used to how great trackpoints are. I have to use an external mouse on laptops that only have touchpads.

Oh no, our terrible secret is out! :)

Ubuntu has never seemed to take security particularly seriously.

I haven't heard that before. Care to elaborate what we do that makes you believe we don't take security seriously?

where Ubuntu just unilaterally reverted Mozilla’s removal of a cert in their package, because it was breaking nuget… Note that this was early 2021 — Mozilla removed Symantec from their trust store in October 2018!

Mozilla actually removed the certs from their trust store in February 2021: https://hg.mozilla.org/projects/nss/rev/9718a34c84429b1e5dc6...

Debian and Ubuntu had jumped the gun by a few weeks and there were certificates still being used that had not been renewed yet, so we had to revert temporarily.

Mozilla had used the CKA_NSS_SERVER_DISTRUST_AFTER tag with a date to specify newer certs issued by that CA were not valid, but as the article above states, the crypto libraries being used in Linux don't support that kind of thing.

Yes, this.

Can a device still be wiped when this happens? I'm wondering how to recycle or recover locked devices if the USB port is disabled...

Actually, Ubuntu 16.10 is listed as not-affected (4.8.0-11.12).

The "needs triage" you're seeing for Ubuntu 16.10 is for the "linux-goldfish" and "linux-flo" kernel packages for specific android devices.

I will remove it in our next updates.

I don't see any Unity-specific patches in the glib package in Ubuntu. What are you referring to?

Three exciting colours to hide behind your tv! :)

That bug was fixed in all releases last july. This was the bug:

https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1443735

"Unlimited" until they retire the service 18 months from now.

What a misleading title.

Seriously? Couldn't they have put _two_ ports in it so you can plug something in while it's being charged without lugging around a usb hub?

Proposed patch for CVE-2014-7169 here:

http://www.openwall.com/lists/oss-security/2014/09/25/10

I am building bash updates for Ubuntu containing the proposed fix here and will publish them once the fix has been made official:

https://launchpad.net/~ubuntu-security-proposed/+archive/ubu...

The urgency tag isn't used in Ubuntu, only in Debian.

Yes, that was a typo. Thanks for spotting it, I have updated the advisory:

http://www.ubuntu.com/usn/usn-2348-1/

So someone asks if Ubuntu Touch consumes less power, and another person replies basically "Maybe, nobody knows yet."

How is this Hacker News worthy?

Honest users couldn't care less, as long as it works.

DRM is more about having leverage over the provider of the playback device and casual piracy than it is about protecting the content against hardcore piracy.

This was fixed before 14.04 came out.

FYI, I'm currently running 14.04 on an UX32VD. I was previously running 13.10, and that worked great too.

Well, the first UNR launcher commit is from 2008-04-16, the first gnome-shell commit is from 2008-10-31. It's pretty close.

Wayland packages are in Ubuntu already and will likely be used by desktop environments other than Unity.