Linux 6.9, Red Hat AI, Telegram vs Signal Drama, Manjaro 24 & more Linux news

Sponsored by Kolide: If a device isn't secure, it can't access your apps. It's device trust for Okta. Visit thisweekinlinux.com/kolide to learn more and watch a demo.
Support the show by becoming a patron at tuxdigital.com/membership or get some swag at tuxdigital.com/store
SHOW NOTES ►► thisweekinlinux.com/263
Forum Thread ►► forum.tuxdigital.com/t/263-li...
Chapters:
00:00 Intro
00:36 Linux 6.9 Released
02:04 Red Hat Summit: AI, Image Mode & more
04:28 Endless OS 6.0 Released
06:07 Sponsored by Kolide
07:15 Telegram vs Signal Drama
19:24 Fedora Asahi Remix 40 Released
20:29 Destination Linux: Interview with GloriousEggroll
21:19 Manjaro 24.0 Released
22:26 Rescuezilla 2.5 Released
23:36 Dillo 3.1 (Web Browser) Released
25:52 Outro
SHOW NOTES ►► thisweekinlinux.com/263
-----------------------------------------------------------------------------------
- Linux 6.9 Released
- lkml.org/lkml/2024/5/12/224
- www.omgubuntu.co.uk/2024/05/l...
- www.phoronix.com/news/Linux-6...
- Red Hat Summit: AI, Image Mode & more
- www.redhat.com/en/blog/open-s...
- www.redhat.com/en/about/press...
- www.redhat.com/en/about/press...
- www.redhat.com/en/topics/ai/w...
- github.com/instructlab
- www.redhat.com/en/summit
- • Unleashing the Power o...
- Endless OS 6.0 Released
- distrowatch.com/?newsid=12146
- 9to5linux.com/endless-os-6-is...
- Telegram vs Signal Drama
- t.me/durov/274
- x.com/jack/status/17878957691...
- / 1787589564917490059
- www.cvedetails.com/vulnerabil...
- signal.org/bigbrother/
- nitter.poast.org/matthew_d_gr...
- github.com/signalapp/Signal-i...
- community.signalusers.org/t/a...
- Fedora Asahi Remix 40 Released
- fedoramagazine.org/fedora-asa...
- Interview with GloriousEggroll
- destinationlinux.net/370
- Manjaro 24.0 Released
- forum.manjaro.org/t/manjaro-2...
- Rescuezilla 2.5 Released
- rescuezilla.com/
- github.com/rescuezilla/rescue...
- Dillo 3.1 (Web Browser) Released
- dillo-browser.github.io/
- github.com/dillo-browser/dill...
-----------------------------------------------------------------------------------
Thanks For Watching!
#Linux #TechNews #Podcast

[@def1nt]

Telegram is a great messenger overall, but using "Telegram" and "privacy" in the same sentence... haha, no.

[@michael_tunnell]

I agree. Telegram has a lot of great features but calling it a privacy focused messenger is laughable

[@MattVickers]

It's also become a favourite of unhinged conspiracy theorists and spreads boatloads of disinformation. Not surprising the far-right tech bros are on board with it. Fun segment!

[@FlameForgedSoul]

Linux 6.9... _nice._ Come now, it's *right there.*

[@borremoonkey]

Say you're a redditor without saying you're a redditor. 😂

[@michael_tunnell]

lol yep, missed opportunity 🤷‍♂️🤣

[@monotonehell]

commit a38297e3fb012ddfa7ce0321a7e5a8daeb1872b6 NAME = Hurr durr I'ma ninja sloth Oh well , never mind.

[@ys1197]

The funny number

[@st.altair4936]

The nicest update to Linux so far imo

[@walter_lesaulnier]

Thank you for the mention of the Rescuezilla update. The last version had a quirky bug (at least on my machine) where it would sometimes crash on the opening selection screen. Just tried it and that issue seems to be fixed.

[@acubley]

Microsoft Bob, Intel Fred. We need a George next. 😜

[@michael_tunnell]

Google George for sure lol

[@acubley]

@@michael_tunnell I just slapped my own head. Why didn't I think of that. Knowing Google they'll kill it within two years. :-)

[@Tuxon86]

No Kyle please! Nobody likes Kyle.

[@michael_tunnell]

How about KDE Kevin? 🤣

[@acubley]

@@michael_tunnell Oh, that's funny, YT offered to translate your comment. KDE became 'where'. It's like the Marvel movies "Where is Gamora?" bit.

[@petar0402]

"How many people are using your protocol? Just you?! Hm. ... Okay." 😂😂

[@tcavalo]

I have been having problems recently with Telegram not loading on my computer. Switched to Signal again, no problem.

[@benmeuker4921]

if you make a comment on twitter and elon replies with "yep, concerning", then its saver to assume that the opposite is actually true.

[@DanI-xf6ym]

Awesome episode once again, Thanks Michael! I really liked your coverage of the Signal vs. Telegram debate. Skepticism of the strongman mentality is required now-a-days. "I HAVE BIG BETTER THING! YOU THING NO GOOD, CAUSE MINE BE BETTER!" is not validation of anything. Strongman and Strawman arguments seem to work so well on the internet to manipulate a lot of people, I'm glad you are not one of them! Please Linux community, don't fall for this! We all need to be especially skeptical of this after the massive liblzma backdoor, and the mal-intending maintainer take-over by beating down the original maintainer with similar baseless arguments and spam accounts agreeing with them... (I agree it was more complicated, but the fundamental methods are similar. I also don't blame the original maintainer of liblzma, I think they're more a victim than anyone). Thanks for the researched and informed reporting Michael! Granted, there's always reason to be skeptical of messaging apps for anything private (including Signal), that doesn't mean they become vulnerable by a big long rant about how vulnerable they must be "because I said so!". Also, if you're scared to death your government is going to figure out what you're doing, you either live in a dystopia or are doing something you know is wrong... Just because it can be either doesn't mean you get to "choose" you're government must just be overbearing because you don't want to admit to doing something wrong... Also, while we can't all be security researchers, and we do have to rely on expert opinions often, we need to make sure those "experts" don't have ulterior motives or aren't just making things up. It's not so much "do your own research" as much as it is "check your sources", and back up your "facts". I hope you had fun at the RedHat Summit! I hope you and Ryan will talk more about it in Destination Linux! - Dan

[@MrSnivvel]

We're living in a dystopia, sorry you didn't get the memo on this matter but I hope this clears it up.

[@BabiIak]

"No matter what happens, stay away from red hat" I remember that from my enginering college teacher back in the early 2000's.

[@michael_tunnell]

What did you think about that statement then and what do you think about it now?

[@BabiIak]

@@michael_tunnell At that time I had no idea what he was talking about, but as time went by, I understood what he meant.

[@michael_tunnell]

I’m not sure what he meant. I mean Red Hat was in a transition period with RHEL and Fedora around that time but not sure why you’d need to stay away. At this point though, Red Hat is involved in so many projects and core components of the Linux ecosystem that there is no way to avoid their stuff entirely

[@Stazdude]

Good work.Appreciate you. Subscribed.

[@pid1790]

nice

[@swagmuffin9000]

How does signal compare to briar?

[@colorfulmoth]

IIRC, Briar is the exact same as Signal, but without requiring a phone number to create an account.

[@michael_tunnell]

based on my quick research, (first I've heard of Briar), it looks like Briar is quite different in some good ways and some bad ways. Briar doesnt require a centralized server which is great making it P2P but that also causes downsides because it lowers delivery time and reliability. For example, what happens if one device is online while the other isnt, without a server to store it then in theory it might go into the ether. Briar doesnt have an iOS app which limits it's usefulness drastically in my opinion. I switched to an iPhone last year so I cant test it but more importantly the amount of people on iPhones, not supporting it as a communication device is basically bad enough to eliminate it from my recommendations list regardless of which platform I use. It might be a good option for a few but not most.

[@philipcollier7805]

08:40 Pavel and Elon were stirring up crap. Real operators use Tor-compatible and Tor-like tools for encrypted messaging.

[@Your_Degenerate]

Walking with just one hand in a pocket is sus. That grin also sus. ✅

[@NADEEMKHAN-sj5hn]

Signal: Look who's talking

[@esra_erimez]

Edward Snowden thinks Signal is good, so it is good enough for me.

[@mojejaje2073]

Based signal

[@abhabh6896]

empy signal... the only signal user I know is myself... I installed it once... it was empty for months... then I deleted it.... same like mastadon before the arrival of twitter karens..... Whats the userbase. App cna be designed to be perfect but if the userbase doesnt fit me or if there is none... I am not using that app.

[@guilherme5094]

👍!

[@mattnordsell9760]

Microsoft keeps on making even more reason that we should all stop using them and go entirely to Linux for everything. I run a dual boot for some things that aren't working in Linux for me, proton doesn't want to boot any games that it's supposed to work with and it seems like wine isn't working either. In virtualbox, the USB devices aren't showing up even though i have the filter active. I'm going to be updating my bios and trying the 24.04 Ubuntu budgie fresh install to see if that fixes the issues

[@metalovytatko]

welcome back, Michael!!!!

[@stephenreaves3205]

InstructLab is so cool

[@bhargavjitbhuyan9394]

Well, I was searching for a BlueStacks alternative for playing android games on Linux with keyboard and mouse. Any good emulator?

[@michael_tunnell]

Waydroid might help with that

[@user-xe6sm4jv8f]

There are no "good" emulators right now, and Waydroid is not usable. The only thing I know that's usable is a very shady Chinese one, but I you probably wouldn't want to use it since it's proprietary and all in Chinese...

[@catto-from-heaven]

@@user-xe6sm4jv8f Waydroid is not only perfectly usable, but it also offers better performance than anything else because it's running android in a container

[@BeastViper007]

Why is waydroid not usable? Nvidia? ​@@user-xe6sm4jv8f

[@adriano760]

running nox on a vm might be an option

[@ultraprimez]

The drama was toooooo...... Long😅.

[@OraOraOra]

Leaving a comment for the algo.

[@tecoberg]

👍

[@danilaros]

Michael is right and I agree. Telegram is not encrypted (end to end) by default.

[@aaronplays_]

Nice video and all, but if you're gonna point out that someone is spitting baseless accusations, then you should put up sources for your points that disproves them. It helps with new people tuning in to grasp quickly on what's happening and which side is factually incorrect.

[@michael_tunnell]

I provided 8 links related to the Telegram vs Signal topic. Some of these links are directs to what was said by various people and I also included a link to a thread by Matthew Green, a cryptographer and professor at Johns Hopkins University. These links are provided in the shownotes on the website and directly in the description here on KZbin. Another source if my own personal testing. I confirmed myself that Secret Chats are as limited as I said so the source is me.

[@Sitwayen]

Are there no way to test ios apps other devices than an ios device?

[@michael_tunnell]

iOS apps only function on iOS so yea that’s the only way to test except for developer tools on a Mac but that’s not full testing, more like compatibility testing. A reproducible build requires running on the exact same environment that you normally would use it on with the same source you would normally get it from. This is not possible to do on iOS

[@alexstone691]

Apple ecosystem is locked, requiring devs to buy apple devices to make apps for them

[@Sitwayen]

@@alexstone691 Will it work as intended on the mac or not?

[@michael_tunnell]

@Sitwayen your follow up question is unclear. Alex was saying you need apple devices to make apps for them and this is true for both macOS and iOS. It is not possible to make something for iOS without macOS and it is not possible to fully test an iOS app without an iOS device. You need a Mac and an iPhone to develop for iPhone apps. This makes the commitment to sell iPhone apps rather expensive.

[@Sitwayen]

@@michael_tunnell Okay and can you fully test and android app without an android device or a window app without a windows device? What is the actual difference?

[@ChrispyNut]

4:46 "I'm a big fan of dark mode" ... he says, with loads of bright white scenes scattered through the video, suggesting not a fan of dark mode for videos. 😒

[@michael_tunnell]

It’s the design of the websites, I don’t alter websites for screenshots no 🤷‍♂️

[@ChrispyNut]

@@michael_tunnell A) Why not B) Dark mode doesn't make much sense without dark mode on websites

[@ww4102]

​@@ChrispyNutwtf dude

[@michael_tunnell]

Why not? I don’t think it’s worth the effort to alter websites during editing because it’s a lot of post production work and all the extensions alter too much to be reliable on all websites visually

[@ChrispyNut]

@@michael_tunnell Sure, doing post-production would be insane, but the Dark Reader extension works great, only occasionally needing mode altering for individual sites (under more -> "Only for current website"). But, whatevs 🤷‍♀

[@otrapersonass]

sup

[@ianakotey]

Regarding the signal versus Telegram nonsense, I believe it is not fair to say that telegram is unencrypted and plaintext outside secret chats. They claim to use their proprietary encryption algorithm, MTPROTO or something, I believe. While the CEOs arguments are utter rubbish, we should beat em fair and square

[@michael_tunnell]

Telegram only ever talks about encryption in the frame of Secret Chats because the rest is not encrypted. Check out the link in the description from Matthew Green for more info on the specifics.

[@ianakotey]

​@@michael_tunnell Quoting Michael Green, "Unless you manually start an encrypted “Secret Chat”, all of your data is visible on the Telegram server." This means telegram can see your messages, not that your messages are in plaintext. This is because their protocol is symmetric encryption, and Telegram holds the keys. Beeong able to see your messages, and your messages being stored in plaintext are not always the same thing. The latter implies the former, but the reverse is not always true.

[@catto-from-heaven]

@@michael_tunnell All telegram messages are encrypted. Secret chats use end-to-end encryption, which is the same Signal and WhatsApp use by default. All the other messages are cloud-based but still encrypted. If all the other messages were not encrypted, anyone could sniff your network connection and spy over your messages, which is not true (althought used to be true on WhatsApp a long time ago). You literally have no clue

[@lll_Death_lll]

​​@@michael_tunnellliterally encrypted with E2E on secret chats

[@michael_tunnell]

@gato-rs Saying all messages are encrypted and then describing “in transit encryption” and you say I don’t have a clue. lol having in transit encryption has nothing to do with the data being encrypted at all. There is a reason why E2EE is such an important piece to this conversation because “in transit” is irrelevant to data privacy, it only addresses how it is treated during transit.

[@harambeduck4110]

What about the story from Tucker Carlson, where he claims that he was approached before his russia trip, about that said russia trip, where he only communicated about this over Signal to specific trusted individuals? (Implying that his Signal messages got leaked)

[@michael_tunnell]

He never gave evidence that I know of but it’s much more likely that his phone was hacked than the encryption algorithm was compromised. It’s possible they got the messages but probably through hacking him directly

[@philipcollier7805]

12:46 "Important people" has about as much validity as a Trump "sir" story. Signal has been put to the test by experts and is known to be secure.

[@hoshi411]

I don't know why people are using Signal when we already have Session. Session gives you all the same functionality while not requiring you to give your phone number/identity and signal is located in switzerland , home of W.H.O. and W.E.P. the lovely people who caused the chaos of 2020-24

[@michael_tunnell]

Signal is located in California. It’s always been an American company even when it was called Open Whisper Systems. Session is a direct fork of Signal that was modified to not need phone numbers but it’s also more complicated for the average user making it harder to get adoption for them. I don’t like the phone number requirement but Signal is actually working on changing it so you don’t have to share numbers anymore

[@petr_v]

Session is still buggy

[@algorev8679]

As far as I could check, Signal is not Swiss. You might be confusing it with Threema. To be fair to Switzerland too, the fact the WHO is there is not normally influencing the development of the app. Switzerland does apparently have the advantage of having stronger privacy laws, though I don't know how much so.

[@billeterk]

What chaos?

[@michael_tunnell]

@algorev8679 it’s now based in Switzerland? Please provide sources for this. I looked and found no indicators of this.

[@pitape1822]

Telegram CEO ridiculed himself. Telegram is so popular here in Eastern Europe but honestly I do not trust it. I just use it for news channels on Ukraine.

[@ianakotey]

Forgot to say nice...

[@michael_tunnell]

lol missed opportunity 🤦‍♂️🤣

[@bitterseeds]

As far as the Signal thing, maybe learn how psychological manipulation works. If you don't want folks using or doing something then start throwing out rando stuff like this. If folks are tools of those with agendas and those folks don't want people to speak without being controlled ... they do stuff like this. We're talking about Dorsey and Musk ... based on the things they've done, why are we even listening to those two nitwits? SMH.

[@rouxcool1227]

Bro this comment isn't saying something.

[@MrSnivvel]

It's interesting that multiple LEO agencies like the FBI, DEA, and others have all said Telegram does have encryption and they are thwarted by it. Hmmm... And Michael admits squarely that he's not a security or programming expert so his takes have less and less value on the subject.

[@tcavalo]

Hmmmmm....maybe LEO and other alphabet agencies want you to think that?

[@MrSnivvel]

@@tcavalo Maybe, but these are coming from leaked internal documents and meetings. There's also the fact that the various alphabet agencies are not super elite masters of decryption and "hacking", the vast majority (if not basically all) of their busts are from reason unrelated to encrypted application usage, e.g. poor OpSec in IRL or other areas. Either way, Michael's claim of no encryption is shotty at best.

[@michael_tunnell]

I didn’t say Telegram’s Secret Chat aren’t secure or private. I said Telegram’s only form of E2EE is Secret Chat and based on the limited scope of the Secret Chats this means using Telegram is not a good solution for those wanting to use a private messenger app. Telegram simply does not qualify. It doesn’t matter if those agencies say they are thwarted by Secret Chats in Telegram or not because in Signal every message is encrypted by default no matter what. Telegram requires manual activation of that feature and doesn’t allow a conversation to include anymore than 2 people because as soon as you need to discuss with 3 or more then the Secret Chats simply don’t work

[@Aoitori365]

redhat is evil

[@michael_tunnell]

Why do you think that?

[@rtheben]

Red hat is a disgrace for the Linux world

[@michael_tunnell]

Why do you say that?

[@rtheben]

@@michael_tunnell sorry for not expanding, it’s about the closed source and paywall controversy. We can agree there is a controversy, but debate about each other stance, anyway some people left Redhat because of it

[@catto-from-heaven]

They're one of the biggest contributors to the linux kernel, and have done a lot to push the desktop experience, but if you say so...

[@michael_tunnell]

@listabambino I understand why it seems sketch on the surface especially with all the youtubers and podcasters yelling about what happened but there is a lot of nuance. People have left Red Hat for many reasons and some took it as violating the spirit of open source and I wouldnt ever deny their right to having their opinion but the term "closed source" and "paywall" mean specific things. Red Hat didnt close the source of RHEL. What they did was put the source code behind an account signup process and they dont stop anyone from taking the code and distributing it. They simply reserve the right to close those accounts. This could be considered a loophole but it does not count as closing the source because it is still accessible. It also doesnt violate the GPL because that license only requires giving source code to the people you give binaries to. By putting it behind an account system they can remove people from the getting binaries and thus having any right to the source code. The base source code is still available though since that is what CentOS is now. As for the paywall, this is also not accurate because getting those accounts and access to the source code is free with the Developer Accounts and RHEL is now free up to 16 instances. I can agree that there is a controversy around it but in this case I dont think the controversy is justified. The thing they did in 2020 with CentOS that made sense for people to get mad about but the source code thing is not in my opinion. The funny thing is CIQ / Rocky Linux literally put stuff behind a paywall and they arent getting yelled at about it. In my opinion, Red Hat has done way too much for multiple decades to label them a "disgrace". The vast majority of what makes the Linux desktop so good is thanks to Red Hat. To each their own though.

[@rtheben]

@@michael_tunnell thank you for taking the time to respond to a simple user, maybe I have an opinion, which is much of a hearsay, and not so educated. I’ll take the time to get more informed, thanks to your lengthy response. Thank you very much.

[@flightvision]

I think you misread Elon Musk's comment.

[@michael_tunnell]

How so? Look at the tweet from Elon on the Jack screenshot, he claims it’s “concerning” so pretty confident that I read it correctly

[@flightvision]

@@michael_tunnell Ah sorry, my bad. I don't know Twitter well. I've read the "Readers added context" box at 9:20 and thought it was by Musk. Sorry!

[@ROG513]

@@flightvision Just to point out, that "Readers added context" is not always accurate. A few times they were providing false information, which can pass by people who aren't well aware of the topics discussed.

[@michael_tunnell]

That’s true it’s not always correct but in this case Elon is talking nonsense

[@dangonizer]

telegram is an absolute joke as a privacy focused messenger.

[@catto-from-heaven]

"Telegram is barely encrypted" lmao what? Edit: "I'm not a security expert or a programming expert" Yeah, it shows

[@danilaros]

Yes. Michael is right and i agree. Telegram is not encrypted by default. So stop to send sand to our eyes.

[@weathercontrol0]

He is talking about end-to-end encryption, which telegram have only in limited secret chats

[@Sitwayen]

Could you expand on this a little please. I have been seeing KZbinrs say they are not encrypted, why do you say different?

[@catto-from-heaven]

@@weathercontrol0 He clearly said that most messages has no encryption and are stored as plain text in the server lol

[@catto-from-heaven]

@@Sitwayen They think the only effective encryption is the end-to-end encryption, because signal and whatsapp have made a big campaign to make it look like that, so people think telegram is unsafe. If you want to know more about this, search about end-to-end encryption vs cloud-based encryption, but in short: in the first one encrypted messages are only stored in your device and your friend's device, while in the second one the messages are first sent to telegram servers and stored there (encrypted) and then are delivered to your friend. Why? Because this way if you lose your phone, you won't lose all your chats, you can have cross-device sync and a lot more benefits that you can't get in whatsapp and signal