CUPS Vulnerability, Tails OS + Tor, Ubuntu 24.10, COSMIC Alpha 2 & more Linux news

[@SirRoundPotato]

Your channel isn't that big yet. But this news format is great, and it will get big eventually. I already thank you for the work you do.

[@michael_tunnell]

Thank you very much! I hope it gets big like you say 😎

[@grilsegrils9330]

I already subscribed. First time and not even 2 minutes into video 😆 I love the thumbnails that is used. What an effective way of displaying content before you even open it.

[@NiffirgkcaJ]

Valve is such a godsend to the Linux community! Thank you to everyone that working on Valve!

[@Batwam0]

I love these Ubuntu Easter eggs, 20 years is a big deal. I spent so much time playing with Ubuntu 4.10, installing it, breaking it, repairing it. Can’t wait to hear the bongo drums again🪘

[@michael_tunnell]

The bongo drums are not the sound they brought back since that’s not the original sound they used but I agree that was what I remembered too

[@Batwam0]

@@michael_tunnell oh I see, must be the one with the bells then 👍

[@JPs-q1o]

So if it can see existing printers can it replace or spoof and existing printer so a user "just hitting print" as per their daily routine woukd trigger the root access portion of the exploit?

[@michael_tunnell]

There are some reports saying that it can spoof but it is not clear if it can replace it this not showing the real one. This has not been confirmed either way that I’ve seen. I suspect it’s possible but I don’t know

[@antinatalope]

Tor/Tails merger makes total sense.... Cosmic alpha 2!? I just installed alpha 1!

[@outforbeer]

Value is seeing the trend. Windows days are numbered. Linux will be future gaming platform

[@grilsegrils9330]

Possibly, maybe. At least if Microsoft continue the trend they are on. Destroying what they have built. But I'm not sure yet. I have been cold to Linux since 1994. Installed a test on an old laptop with Linux Mint. Wow, impressive. Might setup a dedicated Linux soon. I don't like the command prompt / terminal side. Despite this also having its strengths

[@michael_tunnell]

@grilsegrils9330 Linux no longer requires using the terminal especially distros like Mint and Zorin OS. The difference between your last experience to now is not “night and day” that’s not enough advancement. Instead think “printing press to rocket ship” because the improvements are insanely high compared to 1994

[@javabeanz8549]

Yeah, the rim shot sound bite would have gone really well right there ;o) That or "Pah-rum-pum"

[@dansanger5340]

I think you might have underplayed the CUPS vulnerability a bit. The prerequisites are defaults on many popular distros, which means the user doesn't have to do anything but print. I think a vulnerability like this could be particularly easy to exploit at someplace like a university with public or semi-public WiFi and lots of shared printers.

[@michael_tunnell]

Thank you for the feedback. I agree it’s bad but a 9.9 is something catastrophic that affects everyone like Heartbleed or Log4Shell. This affects a lot but not everyone and sure it’s bad but not 9.9 bad. That’s basically what I was saying.

[@dansanger5340]

@@michael_tunnell Yes, it's definitely not a 9.9, because it requires user interaction. I think it finally got officially scored as a 9.1. I think people's perspective on this depends on whether they ever print anything on Linux. I do so often, so it seems more serious to me. But, even people who don't ever print to a physical printer could still potentially get bitten if the fake printer advertises itself as "Print to PDF."

[@MattVickers]

As I see it, the malicious actor needs to *already* be on your network, unless you're opening port 631 to the internet or running some crazy insecure upnp setup. It's like if you're compromised, they can compromise you further. A giant nothing burger for basically everybody.

[@dansanger5340]

@@MattVickers You're assuming everyone is on a secure network. People connect their laptop to public or semi-public WiFi at the library, at the university, at a coffee shop, at the airport, etc. That's a very common scenario. It could be used by an untrustworthy employee on a corporate network to compromise machines connected to the network. It could be combined with other vulnerabilities, which is a very common thing for hackers to do.

[@fuseteam]

Steamos becoming to arch what ubuntu is to debian :D

[@kajoma1782]

ubuntu isn't game oriented

[@meow-is-edible]

@@kajoma1782does ackshually🤓 really makes you feel better in any way? Or you genuinely didn’t get the sentiment

[@fuseteam]

@@kajoma1782 that's besides the point lol

[@kajoma1782]

my bad

[@Romactu]

11:46 to 12:09 Again, here's my Warty remastered wallpaper. (For those of you people haven't notice yet)

[@GasiyuDev]

Thanks. Is the membership only available on patreon? Any plan to open a youtube membership?

[@michael_tunnell]

Hey, thanks for being interested in being a patron! That means a ton! I am thinking about how to do it here. The current problem is that we have had Patreon for years so need to retroactively make having both make sense while not hurting patrons regardless of which platform they choose. I am currently thinking to have the KZbin membership be per channel (which it has to be) and then Patreon could become for the entire network of content (podcasts and channels) but it costs more. I’m not sure if that is a good idea or not though. Any thoughts you have about that?

[@RealRajatShahare]

I really like your this linux news show. ♥️

[@the-answer-is-42]

Honestly, I just disabled CUPS since I don't have a printer anyway. It was just wasting resources.

[@MrAlhaines]

I love Linux Mint but do not print at home! When I have the rare doc that needs to be printed I save it to GDrive, go to the Public Library and pay them to print it out, I am not a business! They maintain the equipment and replace the ink, I just pay for the pages I need. In the past way too many ink carts have dried up on me and I have had to buy new ink just to print one or two pages, then the ink would sit and dry out. Also no one gets access to my hardware but me and the wife. So I feel that my system is safe, Linux Mint 22. Ubuntu 24.04 and 24.10 errors out like crazy on me during install! I have not been able to get it to install on my MSI450 with AMD 5 3400; 16gb ram; 11TB (4 drives); no GPU! On my Ventoy drive I 50 isos and distro hop every weekend or when something exciting comes along. I ALWAYS GO BACK TO LINUX MINT still the best distro running cinnamon. We are the new explorers.

[@kringkingen]

The best news was last, Valve Wayland and Valve working with Arch should be in the title.

[@michael_tunnell]

you're not wrong about it being really interesting news but thats the problem with the others being such big items that I kind of had to do it this way. However, I plan to try something tomorrow to give it more attention so we will see how that works out.

[@guilherme5094]

👍!

[@Gfish17]

I remember commenting on wanting to see a video comparing Rust to other Coding software. Personally I just want to know what the best place to start with coding is for a noob.

[@xrafter]

I think python is very good.

[@igorthelight]

Depends on what you want to code ;-) The best way would be KZbin Tutorials. * Choose C# if you want to make Windows applications (It also supports Web and console applications for Linux and Mac) * Choose JavaScript if you want to make websites (you could make other types of applications bit the main focus is Web here) * Choose Kotlin if you want to make Android applications (you could make another types of application too - it's a modern Java) * Choose Swift if you want to make iOS/MacOS applications * Choose Python if you want to make some cross platform applications, AI tools or automation scripts (it's alos not bad in Web development, just not that mainstream) * Choose C++ if you want to make professional applications (like Krita, LibreOffice and so on) or if you want to make Linux applications. Be careful - the language itself is pretty hard to learn! * Choose C if you want to make low level applications (mostly drivers and kernel modules) (!) Rust if NOT a good choice for your first ever language! You have been warned ;-) (!) If you have no goals on what to do - just learn Python. You could use it for many different things xD (!) DO NOT just watch tutorials as films - CODE immediately! Change code, play with it. Brake it in different ways. Only that way you would really understand what every line of code does!

[@fontenbleau]

New Ubuntu is so fast! Why it's so fast?

[@fuseteam]

Woohoo full wayland here we go

[@drupi.0]

thanks for this Michael 🎉

[@Appalling68]

19:13. LOL! So now you’re breaking into comedy?? 😂

[@samarbid13]

COSMIC is missing its most important feature: screen recording, not just screenshots! 🤔 I don't understand why it's not a higher priority to include this!

[@michael_tunnell]

You can use OBS and SimpleScreenRecorder and others for that purpose so it’s not as pressing of a feature just yet. They are still working on the file manager so I suspect there is a LOT left to do before they get to screen recording which is more of a nice to have than necessity but I also suspect it will be something they do at some point

[@samarbid13]

@@michael_tunnell While it true, features like screen recording or Emoji support are more than mere 'nice-to-haves.' They are basic features in every major OS: Windows, MacOS, so depending on extensions or third-party apps for basic needs is inconvenient. IMO, these essential features should be prioritized, not treated as second-class citizens. Linux is no longer just for nerds 🤓.

[@JPs-q1o]

TOR browser is sus...merging with TAILS is *_very_* sus.

[@michael_tunnell]

Why … very why?

[@stephanhuebner4931]

I have to say I did love the brown theme of early Ubuntu. It was such a warm, friendly, and kinda natural looking thing and I'm really sad that there's no good replacement for it on Plasma.

[@fontenbleau]

Maybe someone knows, but what Linux distro is indestructible today (in terms of file system)? I have several cheap chinese SSDs which degrading just by storage (incredible garbage) and btrfs Ubuntu-type Pika Linux there failed miserably, it's died by corrupted certain symbols in the parts of code. This file system cannot restore itself or repair the code. Maybe someone made distro of self-repairable file system, i want to test that.

[@michael_tunnell]

there's no such thing as "indestructible" for any kind of operating system because there are way too many components and things that can go wrong. The best bet is to use something that has a long track record like Ubuntu or Fedora or something like that. I have never tried Pika Linux but it promotes itself as a gaming distro which tries to have up to date as possible and resiliency is not typically something you would find in that kind of distro. I also dont think any file system can restore itself or self repair, I've never heard of such a thing for any OS. Sorry to be the bearer of bad news.

[@fontenbleau]

@@michael_tunnell in new Ubuntu 24.10 there's new experimental feature of ZFS Storage pools partition, which i'm testing now by disks pair. By Solaris Oracle manual the ZFS storage pool provide self-healing and redundancy features by data mirroring ability.

[@ASilverNMeep886]

9.1 CVE scale, not great not terrible (/j) Looking forward to your video on COSMIC!

[@michael_tunnell]

:D well it’s not that bad which just means that the CVE is not correct. CVE is kind of a mess by the way, for example CVE actually doesn’t consider backdoors things that should have CVEs so the XZ backdoor wasn’t suppose to have one but Red Hat and others did it anyway. There’s also many times where a CVE is published and later downgraded. It’s common for CVE ratings to be overrated and then pulled back. Thanks for commenting and I am looking forward to making that COSMIC video 😎

[@SandroMedia]

🐧

[@fuseteam]

I have tor I have tails HAH! TorTails!

[@PtolemyPetrie]

GNUS GNEWS 😅

[@Scrub_Ghost]

The store seems to be down. I am already a patreon. I have been trying to buy a Das Geek TShirt for a little while.

[@michael_tunnell]

I just checked it seems to be working just fine. To be sure here's a link, store.tuxdigital.com

[@tulilirockz]

first!

[@jdenslinger]

The G in Gnome, is silent. I find it difficult to take your stories seriously with any grain of accuracy behind them when you can't pronounce "gnome" correctly.

[@michael_tunnell]

The condescending tone of your comment is rather amusing because you are in fact incorrect. 1. The official way to say it is guh-nome as confirmed by former Executive Director of GNOME In an interview we had with him in our podcast. 2. They don’t really care but that’s the official way. 3. I say both interchangeably because it’s funny. 4. If that is enough for you to question my 7 years of consistency with this show then that’s fine don’t watch. I hope you have a nice day.

[@muhammadyusoffjamaluddin]

TOR + Tails? You mean US Gov Project + US Gov Project? Like CIA + Another CIA (Pegasus...) "Internal invesigation proved that we are not the same" Bruh, can't say macOS is Linux, eh?

[@eddieoconnor4466]

Just based off of how you presented this info?...I've subscribed....ok so lets get some t-shirts....coffee mugs?....mousepads and pens going!...hahah. As for the CUPS issue? would this pertain to a laptop that secured with not only encryption (prior to login) and with the su/sudo account disabled?....(not to mention the complex PW and inability to connect to a printer without su/sudo authentication first) I think depending on the user?...this might be an issue. In regards to those who might be tech-savvy? AS long as you stay up-to-date with your updates and patches?...you should be ok.