Episode 280: The Weaponization of Open Source

The Weaponization of Open Source is happening but does it enact real change or are we hurting the reputation of FOSS? We tackle your questions, your feedback and this question this week! -- During The Show -- 01:55 Authentication Options - Jordan Single Sign On (SSO) LDAP Red Hat IDM/389DS/FreeIPA OAuth Front End Proxy 08:35 Digital Announcements? - Michael Software * Tight Rope Media (https://www.trms.com/) * Screenly (https://www.screenly.io/ose/) * Yo Deck (https://www.yodeck.com/) * Pi Signage (https://pisignage.com/) * Info Beamer (https://info-beamer.com/) Hardware * Argon One Case (https://www.argon40.com/en-de/products/argon-one-v2-case-for-raspberry-pi-4) * Buy a Commercial TV 14:38 Open Source Engineering - Zac BricsCAD (https://www.bricsys.com/) 16:24 Power Monitoring Plugs - Kevin Sys Log Server MQTT OpenHAB (https://www.openhab.org/) Home Assistant (https://www.home-assistant.io/) Purchased Plug (https://cloudfree.shop/product/cloudfree-smart-plug-runs-tasmota/) Tasmota Device Recovery (https://tasmota.github.io/docs/Device-Recovery/) 23:00 Pick of the Week Peergos (https://peergos.org/) Peer to Peer Open Source Cloud Storage Mini Social Network Private Social Network Metadata Protection Decentralized (IPFS) 26:30 Gadget of the Week Home built charging station Want the ability to charge any device at one location Want to take some fire precautions Want to take some privacy precautions DON'T want to be limited to just cell phones Anker PIQ 3.0 PPS Compact Fast Charger (https://www.amazon.com/dp/B08F28BH7C/?tag=minddripmedia-20) 6 Outlet Metal Power Strip (https://www.amazon.com/dp/B07Y2ZM855/?tag=minddripmedia-20) ARK Fault Circuit Breaker 12 Gauge Wire on the power bar 36:09 News Wire Red Hat Common Criteria Certification for RHEL 8 (https://www.hpcwire.com/off-the-wire/red-hat-adds-common-criteria-certification-for-red-hat-enterprise-linux-8/) GitLab Critical Security Fixes (https://about.gitlab.com/releases/2022/03/31/critical-security-release-gitlab-14-9-2-released/#static-passwords-inadvertently-set-during-omniauth-based-registration) Apple, Facebook, and Discord Fell for Social Engineering (https://www.bloomberg.com/news/articles/2022-03-30/apple-meta-gave-user-data-to-hackers-who-forged-legal-requests?sref=10lNAhZ9) Matthew Miller Calls Out Nvidia (https://twitter.com/mattdm/status/1510664957465178118) Fedora and PopOS on PS4 (https://wololo.net/2022/04/04/release-popos-21-10-for-ps4-with-cyberpunk-2077-gameplay-fedora-35-for-ps4-how-to-make-your-own-ps4-linux-distro/) Fedora 36 Beta (https://betanews.com/2022/03/29/fedora-linux-36-beta/) Fedora GUI Recovery Disccustion (https://www.phoronix.com/scan.php?page=news_item&px=Fedora-GUI-Based-Linux-Recovery) Alma Linux on WSL (https://www.theregister.com/2022/04/04/almalinux_wsl/) Deepin Offers Face Unlock (https://news.itsfoss.com/deepin-os-20-5-release/) Ubuntu 22.04 Released (https://www.zdnet.com/article/ubuntu-22-04-has-arrived-and-its-one-of-the-best-releases-from-canonical-yet/) Nitrux 2.1 Released (https://9to5linux.com/nitrux-2-1-released-with-support-for-linux-kernel-5-17-latest-kde-plasma-goodies) CarbonOS (https://carbon.sh/blog/2022-03-31-release.html) Thunderbird 102 (https://www.ghacks.net/2022/03/29/thunderbird-102-next-major-release-of-the-open-source-email-client/) Budgie 10.6.1 (https://blog.buddiesofbudgie.org/budgie-10-6-1-released/) LibreOffice 7.3.2 (https://blog.documentfoundation.org/blog/2022/03/31/libreoffice-732-community/) Cassidy James left Elementary OS Thurrott.com (https://www.thurrott.com/linux/265207/elementary-founder-exits-the-company) Cassidy James Blog (https://cassidyjames.com/blog/farewell-elementary/) Lockheed Martin On-Orbit Satellite Mission Extension and Augmentation (https://www.defensenews.com/battlefield-tech/space/2022/04/04/lockheed-releases-open-source-standard-for-on-orbit-spacecraft-docking-interface/) Peergos (https://itsfoss.com/peergos/) IBM GT4SD (https://thenewstack.io/ibms-open-source-gt4sd-generates-ideas-for-scientists/) 38:52 The Weaponisation of Open Source Weaponization of Open Source (https://beny23.github.io/posts/on_weaponisation_of_open_source/) Github Comment (https://github.com/RIAEvangelist/node-ipc/issues/233#issuecomment-1068182278) Mongo DB Terminates Russian Customers (https://www.theregister.com/2022/03/15/mongodb_terminates_russian_saas/) Terraform Module (https://github.com/terraform-aws-modules/terraform-aws-ec2-instance/commit/6867788411a202b61187f9935e9eaa72a18f0bbe) Terms of Service changes won't cause the change you want Targeting people based on IP is flawed Arbitrary Code Opensource.org (https://opensource.org/blog/open-source-protestware-harms-open-source) TechTarget (https://www.techtarget.com/searchitoperations/news/252515031/Pro-Ukraine-sabotage-renews-scrutiny-on-open-source-security) Whats App banned Daily Mail (https://www.dailymail.co.uk/news/article-10633873/British-soldiers-ordered-WhatsApp-hacking-fears.html) -- The Extra Credit Section -- For links to the articles and material referenced in this week's episode check out this week's page from our podcast dashboard! This Episode's Podcast Dashboard (http://podcast.asknoahshow.com/280) Phone Systems for Ask Noah provided by Voxtelesys (http://www.voxtelesys.com/asknoah) Join us in our dedicated chatroom #GeekLab:linuxdelta.com on Matrix (https://element.linuxdelta.com/#/room/#geeklab:linuxdelta.com) -- Stay In Touch -- Find all the resources for this show on the Ask Noah Dashboard Ask Noah Dashboard (http://www.asknoahshow.com) Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show! Altispeed Technologies (http://www.altispeed.com/) Contact Noah live [at] asknoahshow.com -- Twitter -- Noah - Kernellinux (https://twitter.com/kernellinux) Ask Noah Show (https://twitter.com/asknoahshow) Altispeed Technologies (https://twitter.com/altispeed) Special Guest: Steve Ovens.