timattrn

I wonder about this too, at least in a testing/honeypot build

Another independent maintainer would have helped too. Many eyes make bugs shallow, but just one extra genuine maintainer would have helped enormously. Clearly the existing maintainer trusted the attacker completely, but a second maintainer would not have. That's another social dimension to this attack: doing enough real work to suppress other maintainers coming along.

so this backdoor is a package which installs a fake sshd? what is selinux for?

Your "product" is what you sell. The owners of redis labs don't sell redis, they sell hosting, as far as I can see, in which case they made themselves a competitor to AWS, Azure, etc. And they don't have a competitive advantage in that. Also, why should AWS not compete back? Is a hosting company supposed to sit back and watch another hosting company just win business?

You don't have to throw it away. You can give it away. Your gift displaces for some time the purchase of a new item. This still proves the point that you should aim to buy products where the consumable components are repairable and where the non-repairable components are durable.

bypass paywall clean is excellent. And you can use it on your phone, at least if you have the relative freedom of Android. You need firefox nightly, which allows any extension to be added; other versions of Firefox limit add-ons to a curated list. There are other builds of Firefox for Android that allow any add-on, but Firefox Nightly is an easy install from the Play Store.

Then you need to make a personal collection of addons at the firefox addon site, link firefox nightly to your Add-On collection, and as long as you added bypass paywall clean (custom) to your collection, you're off the races. The "custom" version of the add-on has a simplified UI with better defaults for a mobile phone. This is not a tutorial, but it's not too hard to get this addon working on Android. Firefox nightly despite the name is stable on my Pixel 6 pro.

This has greatly improved my browsing experience on my phone. For the record, I subscribe to the Economist, Wired, NY Times, Telegraph (UK), the Guardian, The Age, lwn and the Conversation (via repeating donation) so I don't think I am much of a free-loader.

Use a 2fa app with backups, or one that syncs to different devices (e.g. authy). It's distributed TFA. The phone number is not very secure, so I don't think it should be a part of TFA. I therefore agree that it is unwise to allow Google to use it for this. I also have a fake dob on my phone account to make Sim porting harder, but you can't trust that you have control over your phone number.

Let's hope lwn doesn't suffer the same fate... if there are any LJ subscribers who don't subscribe to lwn, I hope they may take out a lwn subscription.

this isn't open source, it's media. I am/was a LJ subscriber, sad to see it go, but I don't feel starved of similar material.

I reluctantly decided that my MacBook days were over with these 2016 machines. But moving to linux was a huge step. So I bought a $360 2011 ThinkPad W520. A quad core laptop (with 32gb ram capacity). To experiment. Well, it was a dream machine, so now I'm using a quadore ThinkPad p50 (xubuntu) (with NVIDIA graphics). This is a great experience. It runs VMware way better than macos, and the keyboard ....

Me too. I wanted to move to a quad core. I was ready to get the new 15" but 16gb? My son has a hand-me-down 2010 MacBook Pro with 16gb. Anyway now I have a P50 quad core, with a 95whr battery, 7w idle power consumption, expandable to 3 HDD, two of which are as fast as the Mac, and a keyboard which is ridiculously good. It runs xubuntu. And I got change after selling my 18month old 13" MacBook pro. reality distortion bubble has been popped a bit.

I have it working with two DP monitors and the laptop screen. But this only works in XFCE not Unity, even though I use lightdm with XFCE. Optimus actually probably would have worked out of the box except that I added a brightness control xorg.conf tweak which broke Optimus (the problem with 2011 hardware is a lot of neolithic advice). With 16.04.2's 4.8 kernel and Nvidia 367 driver that tweak isn't necessary anyway.

I bought a $360 Thinkpad w520 quad core mostly to see if I could move from linux in VMs to it being a daily driver. That was two weeks ago. I'm amazed at how well it works: this laptop has a nightmare graphics setup (Nvidia Optimus) but it works very well when you pick a card in the bios; the Optimus setup doesn't work very well. On the other hand, it isn't even supported in Windows 10: I tried it anyway, and it keep crashing. Meanwhile, Ubuntu 16.04 is a revelation (I mostly used Linux Mint in the VMs). Fast, very stable, 7 hour battery on integrated graphics, works with one DP monitor (haven't tried two yet, waiting for a docking station to arrive). I use it for development, VMs and RDP, fantastic experience so far. To my amazement, Wine can even run Excel & Word (2010). I have never got Office working in Linux before, this is quite amazing, although ultimately not very useful since it seems to run Windows VMs better than my 2015 i7 mac (which is only dual core), and LibreOffice is almost different software on Linux vs the mac, it's so much better. Ubuntu is really good to use, it's very fast to move around apps and workpaces, great keyboard shortcuts. There are a lot of moving parts but it seems to hang together. Plus my bluetooth magic trackpad worked. So I'm probably going to get an entrylevel quad-core P50 in the next month or two, and sell the macbook; I think I'll finish ahead, so I'll put the change towards a good Chromebook.