Please tell your friends about federated social media site that speaks several fediverse protocols thus serving as a hub uniting them, hubzilla.eskimo.com, also check out friendica.eskimo.com, federated
macroblogging social media site, mastodon.eskimo.com a federated microblogging site, and yacy.eskimo.com an uncensored federated search engine. All Free!
New design for video management and publication pages, rework of the display and filter system for sensitive content... this new version is ready for the summer! ☀️
New design for video management and publication pages, rework of the display and filter system for sensitive content… this new version is ready for th...
Previous slide Next slide EVENTOS POETAS DEL MUNDO Festival De la Parole Francia Más Información Encuentro de Poetas del Mundo en Colombia Más Información MOVIMIENTO POETAS DEL MUNDO POETAS DEL MUNDO El Movimiento Poetas del mundo es una iniciativa g…
You can also protect your privacy by using this extension from Startpage, each install helps the channel with a small commission: add.startpage.com/en/protectio…
00:00 Intro 00:37 Sponsor: 100$ off your own Linux, or gaming server! 01:29 What does THAT mean? 02:03 Fedora Pushes Toward the Future of Linux 04:19 The Excitement Factor 05:22 Fedora keeps stability while being current 08:06 Fedora has the default experience 09:46 Fedora has a big community 10:27 Parting Thoughts 11:42 Sponsor: Get your Linux laptop or desktop with Slimbook 12:07 Support the channel
Just to be clear, when I say that Fedora is the new Ubuntu, I mean that Fedora now occupies the place that Ubuntu used to have in terms of Linux distributions. It's a GOOD thing.
One of the things I really enjoy about using Fedora, is that they push the Linux desktop towards the future. Some call it bleeding edge, but it's not. It's cutting edge: you don't get the absolute latest, but you get the best that's also stable.
Fedora was among the first to adopt Wayland, the first to adopt Pipewire, to push Flatpak, portals, the first mainstream distro to push immutable filesystems in Fedora Silverblue.
This drive towards modern tech was what Ubuntu was doing back in the day: they were implementing the latest versions of GNOME, adopted newly developed programs at the time, like Banshee, or F-Spot, they pushed to have better driver integration, and more software available.
Using Fedora, I got that same excitement I used to get when I was using Ubuntu: every 6 months, there's a new drop of amazing updates. You get more modern technologies, you get improved security, you get new features right as they're being released, and you get that sense of really taking advantage of all that new stuff the Linux community talks about.
Fedora is a "current" distro, which means that you get the latest release of all the interesting stuff, like the desktop environments, the linux kernel, the graphics drivers, or wayland. And they do this without sacrificing stability.
Fedora, in my experience with it, has been rock solid. In general, I didn't have many problems with any Linux distro that I daily drove, but all of them tended to exhibit small issues after a while.
My experience with Fedora has been fantastic thanks to this: Flatpak is wonderfully integrated in the GNOME Software app, it's all a one click install, all updates are handled there, I just never think about my system anymore, I just use it. That peace of mind is something I never truly achieved with any other Linux distro
Another thing I really like is that Fedora has the DEFAULT experience. They ship the desktop as is, without any meaningful extensions, themes, configurations, or tweaks.
It's just productivity central. GNOME, for me, doesn't need anything else than the default experience. It is extremely efficient once you wrap your head around how it works, and providing me with a crutch, like an always visible dock, or desktop icons, would just compromise that productivity.
Moving to Fedora also had me learn a few things, especially how to use dnf. I didn't need to use it, but I wanted to; and since I was a lot more familiar with APT, I had no idea what I was doing.
Turns out, Fedora has a huge community as well, something Ubuntu has had since it began, so it's another checkmark next to my "Fedora is the next Ubuntu" checklist
Jean-Luc Mélenchon est intervenu sur Al Jazeera pour un échange avec Rima Hassan qui est à bord de la Freedom Flotilla, aux côtés de Greta Thunberg, l’équipa...
Une évaluation des mois passés par Trump à la Maison Blanche par un éminent commentateur de CNN.
Stephen Collinson a déclaré :
Au cours de ses quatre mois à la Maison Blanche, Trump s’est livré à des menaces de droits de douane, à des déclarations sur son désir d’annexer le Canada et le Groenland et à la destruction de programmes humanitaires dans le monde entier.
Le résultat, selon lui, est :
« À l'heure actuelle, les dirigeants chinois, russes, israéliens, européens et canadiens ont constaté que Trump n'est plus aussi puissant qu'ils le pensent. Ils en concluent donc qu'il est possible de lui désobéir sans conséquences. » (E)
Seuls les Arabes prennent au sérieux ses bêtises quotidiennes, achètent ses faveurs et lui offrent des concessions, tout en soulignant nécessairement leur rejet de son plan de déplacement de Gaza, mais sans prendre de positions qui contrecarreraient son potentiel ultérieur.
❗️Gaza hospital warns 50,000 pregnant and nursing women at serious risk
Al-Aqsa Martyrs Hospital in central Gaza has warned that around 50,000 pregnant women and nursing mothers face life-threatening conditions amid severe shortages of food and medicine. 1/3
Hospital spokesperson Khalil al-Daqran told WAFA that miscarriage rates have increased six-fold since the war began, alongside a sharp rise in premature births, overwhelming Gaza’s already crippled neonatal units. 2/3
He said Israel’s repeated targeting of Gaza’s health system has pushed it to the brink of collapse, leaving over 23 hospitals non-operational and thousands of cancer and dialysis patients without care, resulting in an average of five cancer-related deaths per day. 3/3
Covert Web-to-App Tracking via Localhost on Android
"a novel tracking method by Meta and Yandex potentially affecting billions of Android users. We found that native Android apps—including Facebook, Instagram, and several Yandex apps including Maps and Browser—silently listen on fixed local ports for tracking purposes.
These native Android apps receive browsers' metadata, cookies and commands from the Meta Pixel and Yandex Metrica scripts embedded on thousands of web sites. These JavaScripts load on users' mobile browsers and silently connect with native apps running on the same device through localhost sockets [WebRTC]. As native apps access programatically device identifiers like the Android Advertising ID (AAID) or handle user identities as in the case of Meta apps, this method effectively allows these organizations to link mobile browsing sessions and web cookies to user identities, hence de-anonymizing users' visiting sites embedding their scripts."
similar to what ebay does. seems like facebook wants another maximum GDPR fine (which should be increased btw). these attacks should be mitigated by disabling (e.g. uBlockO), blocking tracking scripts (e.g. uBlockO), android without Android Advertising ID (GrapheneOS) and avoiding facebook and yandex sites and apps or better yet all proprietary spyware apps (f-droid.org)
F-Droid is an installable catalogue of FOSS (Free and Open Source Software) applications for the Android platform. The client makes it easy to browse, install, and keep track of updates on your device.
The tracking technique described at https://arstechnica.com/security/2025/06/meta-and-yandex-are-de-anonymizing-android-users-web-browsing-identifiers/ is prevented by Vanadium's default "Disabled non-proxied UDP" value.
After an extraordinary six-week voyage from northern Norway, the iconic Norwegian tall ship Statsraad Lehmkuhl has docked in Nice, France, concluding ESA’s 2025 Advanced Ocean Training course. Braving everything from wild storms to calm near-freezing seas, students aboard mastered techniques for collecting ocean measurements and harnessed satellite data to unlock insights into our blue planet.
Led by experts, this real-world expedition offered more than education – it sparked curiosity and a deeper commitment to understanding and protecting our oceans.
Ukraine could attack Russian bombers like sitting ducks because the New START treaty. That's why US nuclear bombers (B-1Bs, B-2s, B-52s) are also parked visibly at Diego Garcia and elsewhere; China, who didn't sign the treaty, hides its bombers away in underground concrete shelters.
So of course the US must feign ignorance, else it would obviously constitute unilateral break of a treaty, that could call for thermonuclear retaliation. That's how close we come to global annihilation but, hey, "the good guys scored a point". Morons.
The shop I preordered my Switch 2 from has this odd feature where they send you a photo of your package before it ships. Just got my photo. It’s happening! 😃📦🎮
"Nucléaire : la relance de l’atome rejetée en commission à l’Assemblée à la suite d’un imbroglio
Mais un amendement de la députée (Isère, Parti socialiste, PS) Marie-Noëlle Battistel @BattistelMarie a déposé, semble-t-il d’abord par erreur, un amendement supprimant la construction de six nouveaux EPR2 d’ici à 2026 et de huit autres ainsi qu’un petit réacteur modulaire d’ici à 2030. Elle a finalement maintenu cet amendement, qui a été adopté. Le rapporteur du texte, le député (Haute-Savoie, Renaissance) et ancien ministre Antoine Armand @antoine_armand , lui a alors signifié son erreur, l’invitant à retirer son amendement, mais celle-ci a finalement décidé de le maintenir. Il a donc été adopté, supprimant les objectifs de relance pour les cinq prochaines années."
ouf ! une connerie de moins ! C'est criminel de vouloir construire des nouvelles centrales nucléaires alors qu'on ne sait que faire de leurs déchets et qu'on laisse se détériorer les anciennes !
New: CISA has already lost ~1,000 employees to Trump's workforce purge, with the marquee Cybersecurity Division hit hard and many departures from the agency's field force of local cyber advisers. www.cybersecuritydive.com/news/cisa-de... Confirming @samsabin.bsky.social's scoop.
The agency has lost roughly 1,000 staffers in the wake of the Trump administration’s workforce cuts, losses that could imperil its ability to protect government computer systems and critical infrastructure.
Public figures and activists in the #UK, including Steve Coogan, Juliet Stevenson, Chris O’Dowd and Misan Harriman, joined an 18-hour-long vigil in #London to read aloud the names of thousands of Palestinian children killed in Israel’s genocide in #Gaza.
Liberalism flourished after WW2 due to the US's unparalleled economic advantage, which was built on the massive expansion of its industrial base during the war while the rest of the world burned.
The economic supremacy that legitimized western system has now faded and liberal democracies face a crisis of confidence while China's model is emerging as a successful alternative.
'Indeed, the Soviet bloc, having started from a position of post-war devastation, was never able to close the economic development gap with the massive head start enjoyed by the United States.'
I beg to differ... the gap was closing, and had it not been for the subversion of the USSR, it most likely would have been closed by now.
@Arindam I'm not saying USSR economy was inferior in nature, merely that the US had a massive head start. The US leveraged this advantageous position during the Cold War to pull of the world economy into its orbit which further shifted the balance of power in its favor.
The problem USSR had was that it was stuck in an ideological struggle with the US where countries were forced to pick bloc allegiance. China managed to avoid falling into that trap.
(Not just Vietnam, but also the defeat of Pakistan by India in 1971 were indicative of declining American power).
The ideological struggle wasn't the problem - especially since the existence of the Non-Aligned Movement demonstrates that countries didn't have to pick sides. The problem was that the Soviets made a few critical mistakes (the Sino-Soviet split, the war in Afghanistan, the failure to push forward in IT, etc...) - and were subverted. The latter is of utmost importance.. and a key source on it is:
Revolution From Above: The Demise of the Soviet System
In light of recent cybersecurity events, we would like to remind FortiEDR customers and partners about our software and content update release process, as well as our overarching release strategy.
@GossiTheDog I wonder if Microsoft will move their own Defender/ATP out of kernel. Will they next remove their defender/ATP from needing to run in the Linux kernel?
@GossiTheDog I hope #DeltaAirlines will take the objectively correct consequences and fire both #Microsoft (#Windows) and #CrowdStrike amd ban them and their products for 3x the time it take them to apologize and reimbuse the costs of their fuckup + interest!
@GossiTheDog Wrote about this last month. Customers are the beta testing infrastructure and damages to them do not constitute a significant cost. there is no incentive to protet them. cyberprotection-magazine.com/d…
So, to answer the question, "Do corporations really care about your security?", it's hard to believe. Customers cannot rely on the corporations collecting their data to keep it safe. Our fate is in our own hands in this war.
@GossiTheDog I was involved in another issue where an organization wanted to sue a couple of people for fraud. Their lawyers told them, "Well, the problem here is that your bookkeeping practices and approvals showed you knew exactly what was happening, so you would be held liable as well." That' is what would happen with Delta if they sued. Theyr own negligence contributed to the scale of the problem, after others had resolved it.
@GossiTheDog IANAL, but with the antitrust ruling against Google this week, the heat is especially on in avoiding court and any legal questions about monopolies and widespread global impacts
Crowdstrike published a faulty update. Causes Windows to bluescreen. Driver is C-00000291*.sys. Will cause worldwide outages. Thread follows, I suspect. 🧵
If anybody is wondering the impact of the Crowdstrike thing - it’s really bad. Machines don’t boot.
The recovery is boot in safe mode, log in as local admin and delete things - which isn’t automateable. Basically Crowdstrike will be in very hot water.
Favour to IT folks fixing - could you please copy the C-00000291*.sys file to somewhere and upload it to Virustotal, and reply with the Virustotal link or file hash? It's still unclear if the update was malicious or just a bug.
The .sys files causing the issue are channel update files, they cause the top level CS driver to crash as they're invalidly formatted. It's unclear how/why Crowdstrike delivered the files and I'd pause all Crowdstrikes updates temporarily until they can explain.
This is going to turn out to be the biggest 'cyber' incident ever in terms of impact, just a spoiler, as recovery is so difficult.
I'm seeing people posting scripts for automated recovery.. Scripts don't work if the machine won't boot (it causes instant BSOD) -- you still need to manually boot the system in safe mode, get through BitLocker recovery (needs per system key), then execute anything.
Crowdstrike are huge, at a global scale that's going to take.. some time.
For anybody wondering why Microsoft keep ending up in the frame, they had an Azure outage and- this may be news to some people- a lot of Microsoft support staff are actually external vendors, eg TCS, Mindtree, Accenture etc.
Some of those vendors use Crowdstrike, and so those support staff have no systems.
By far my fave thing with the Crowdstrike thing is Microsoft saying to try turning impacted PCs off and on again in a loop until you get the magic reboot where CrowdStrike updates before it blue screens.
The chuckle brothers at NoName attempting to claim they caused the incident. To be super clear, NoName can barely DDoS a bike shed website, and once asked me to make their logo in Minecraft.
The CrowdStrike outage affecting Microsoft Windows systems caused error messages worldwide on Friday. Here are some images of the weirdest ones we’ve found.
Truthfully these issues happen across all vendors - I’ve had my orgs totalled twice now by AV vendors, one while I was on holiday abroad and had to suspend said holiday.
Btw, that isn’t to excuse it or any vendor. CrowdStrike have gotta be better at this stuff. And they’ll have to, as if they aren’t transparent customers will flee.
It’s a warning shot to all AV/EDR/XDR vendors that if you fuck up availability, your brand will become failure. It’s harsh but that’s the media cycle and modern world.
Microsoft estimate almost 9 million Windows devices are impacted by the CrowdStrike incident (likely from crash telemetry). blogs.microsoft.com/blog/2024/…
The Verge has a quick look at the orgs trying to recover from the Crowdstrike incident.
If you’re wondering why it’s dropped off the radar of most press, they think it’s over as Down Detector looks okay (which, to be clear, is not good logic).
Interesting - did anybody keep a list of tweets by CrowdStrike staff during the start of the incident? This one has been deleted. x.com/brody_n77/status/1814186…
Crowdstrike are touting auto remediation of blue screen as an opt in feature.
However, I just tried it - it’s not very successful, most boots still blue screen of death. I think CS need to be careful on messaging about this as it sounds like they’re offering it as a silver bullet. It only works if networking kicks in and the agent updates before Windows finishes booting.
Microsoft's statement that a faulty CrowdStrike update affected less than 1% of active Windows systems doesn't tell the full story, since large organizations in critical sectors make up a disproportionate part of the user base, as the outages in heal…
This video for remote users with local administrator privileges, outlines the steps required to self-remediate a Windows laptop experiencing a blue screen of...
If anybody wonders what the file that took down 8.5 million Windows systems looks like.. it was 41kb in size. The only validity checking I can see CrowdStrike driver does is to check the first few bytes match the pattern seen in the screenshot before loading and executing.
The initial Post Incident Review is out from CrowdStrike. It’s good and really honest.
There’s some wordsmithing (eg channel updates aren’t code - their parameters control code).
The key take away - channel updates are currently deployed globally, instantly. They plan to change this at a later date to operate in waves. This is smart (and what Microsoft do for similar EPP updates).
By ‘this is smart’ I mean ‘this is smart… now’. Obviously they shouldn’t have been globally, simultaneously deploying kernel driver parameter changes across all customers: it was waiting to go wrong.
They still are btw, as it will take a while to engineer the correct way of doing it.
On insurance and CrowdStrike, Parametrix claim amongst just the Fortune 500 companies, they are facing $5.4bn in losses, of which around 10% will be covered by insurance. theguardian.com/technology/art…
- This year TCS migrated their EDR to CrowdStrike - Then they announced a strategic partnership with CrowdStrike - Then they lost all their systems - They’re just finishing recovery today, 6 days in - Then they got a $10 Uber Eats voucher - …which got cancelled due to Uber flagging CrowdStrike’s account as fraudulent
Questions for your EDR providers (do not assume they are experts in availability):
- What are your different update processes? - How do you test them? - Do you dogfood test them? - Do you roll them out in waves? What are the details, eg what percentages and when? - Do you monitor failures and roll back?
Microsoft has started responding with changes it wants to see in the wake of the CrowdStrike botched update. It looks like Windows kernel access is on the agenda.
Risky Business host Patrick Gray talks to SentinelOne's Chris Krebs and Alex Stamos about CrowdStrike's baffling failure and what it means for the wider secu...
Re the Delta case - the lawyer they’ve hired successfully sued Microsoft previously on behalf of the US government, and the decision was upheld on appeal too. The ruling almost lead to the breaking up of Microsoft.
The following US government backed out of the case.
Bill Gates said at the time the lawyer was “out to destroy Microsoft”.
So there’s a chance here the CrowdStrike incident may end up having implications across vendor industry around warranties etc, we’ll see.
Spirit Airlines in the US anticipates a $7.2 million hit to its third-quarter operating income due to operational disruptions caused by the CrowdStrike incident, which forced the carrier to cancel 470 flights.
Here's the Delta boss on his thoughts about the CrowdStrike incident.
They had 40k Windows Server boxes alone, all with BitLocker full disk encryption enabled, all of which wouldn't boot and weren't fixable without manually unlocking BitLocker. That had gone all in with CrowdStrike + Microsoft's most premium offerings.
He has a really good point about how tech companies have become obsessed with growth as their only metric of success, and customer satisfaction is not on the radar.
There's a really mad moment in that interview where they ask them what assistance CrowdStrike have offered, and he essentially says nothing, not even a lunch voucher.
New alliance combines best-of-breed platforms, accelerating partners’ ability to drive vendor consolidation by securing the network and stopping breaches across device endpoints, cloud, identity, data, and applications
Austin, TX and San Francisco, …
360 takes a look at the Crowdstrike kernel drivers - finds they implement an eBPF like system, contain a wide attack surface, don’t check validity of update files (eg no signing of updates) and claim they contain conditions for LPE and RCE vulnerabilities. mp.weixin.qq.com/s/uD7mhzyRSX1…
Before people write this off as ‘the Chinese’, I’ll give you a hint: there really, really should be security research about the security of security products across all vendors. I’ve seen things.
Previously on Crowdstrike Falcon vulnerability research, check out this timeline where they tried to use NDAs to avoid disclosure, then fixed it without telling anybody. modzero.com/modlog/archives/20…
Last month’s unprecedented global IT failure should be a wakeup call. Decades of antitrust inaction have made many industries dangerously reliant on the same tools, making such crises inevitable.
Bloomberg report a vast majority of the CrowdStrike losses reported by customers will be judged by insurance as not covered by policies. bloomberg.com/news/articles/20…
Cloudflare took the website offline. Cloudflare are famous for platforming nazis, and refuse to take the sites offline or terminate the customers in the name of free speech. Pretty obviously, parody…
Microsoft have now queued up to try publicly throw their customer under the bus, claiming (without evidence) Delta’s CrowdStrike woes were due to non-Windows systems. The CrowdStrike issue only impacted Windows systems so I hope somebody at Microsoft knows what they are doing.
Microsoft has responded to Delta’s calls for compensation over the CrowdStrike outage. The software giant blames Delta’s IT infrastructure and refusals of help.
If anybody wants the subtext of what is happening here, CrowdStrike and Microsoft both really do not want to get sued by Delta and have it go to court as it would potentially be explosive for both orgs and the wider security industry.
The customers are always plebs to be milked, as is status quo.
It is very verbose but doesn’t say much. Some of the wording will confuse people - eg it talks about rings (waves) in a way which makes you think it is already implemented. It isn’t. They’re saying they plan to implement it later.
Channel updates weren’t tested on a real Windows PC prior to deployment, they relied on automated bespoke code testing. They don’t mention that and it’s the real reason.
Risky Business take on CrowdStrike root cause report is good.
You can see the confusion the report provides in this discussion I think, eg some of the things are talked about as being implemented - but they’re down as findings for improvement. It’s the way the report is worded, to make you believe certain things existed.. that don’t yet.
On this week’s show, Patrick Gray and Adam Boileau discuss the week’s security news, including:* Crowdstrike talks loud in its postmortem, but says very litt...
Really good piece about CrowdStrike (technically CSC) misusing DMCA takedown notices over trademark disputes.
CrowdStrike probably want to have a word with CSC about this and Cloudflare should tighten process as DMCA isn’t supposed to be used for this. I know CSC do it.. but they shouldn’t be.
Wider point: cyber industry abusing process in takedowns.
CrowdStrike have responded to two claimed vulnerabilities in CrowdStrike Falcon, including one made by a former staff member: crowdstrike.com/blog/tech-anal…
Our analysis outlines why the Channel File 291 incident is not exploitable in a way that achieves privilege escalation or remote code execution and we detail how we secure the Falcon sensor’s channel files from being tampered with and abused.
The Germany government interviewed over 300 companies to find out the CrowdStrike impact to their orgs. Over 60% were impacted, and around half had to halt all operation, for an average of 10 hours. bsi.bund.de/DE/Service-Navi/Pr…
Gestrichene Flüge, ausgefallene Server und PCs, Unternehmen, die ihre Beschäftigten nach Hause schicken mussten – vor zwei Monaten, am 19. Juli 2024, ging vielerorts nichts mehr.
CrowdStrike are now counter suing their own customer 🤣
I really hope this heads to discovery and trial as Delta are correct about the testing on one system thing. CrowdStrike know that. They just aren’t admitting it.
CrowdStrike still expects to take around another $65m in costs from their update snafu last year, they retained customers by offering financial incentives reuters.com/business/crowdstri…
"Financial incentives" did not include discounts, contract extensions, or additional license counts. It was features that you didn't already have at a reduced rate...which will go up to full-boat pricing after the discount period.
They turned a disaster into a sales tool.
But, I still don't understand the complaints about airlines. There were companies who recovered in hours, or were able to stave off 100% penetration of the update....and recovered in hours.
The organizations who took days and weeks didn't have a Crowdstrike problem. They had a management problem and some technical debt that got cashed in that night.
I heard from someone in the know that Crowdstrike had been _begging_ Delta to upgrade certain parts of their infrastructure, that they knew something like this could happen any day and tried to warn Delta about it. That Delta was uniquely lax in keeping up its technology.
(doesn't assuage Crowdstrike from partial blame, just saying)
Itll be a very interesting court case if it goes that far. Like SCO vs. everyone level tedious (but technically verya interesting)
I mean technically they were true to their word; they promised to be a "provider that delivers without compromise" and they sure didn't compromise on delivering their borked update to a global fleet of devices 🤷🏼♂️
I've read one of the reports they are talking about. I didn't post about it here, because I found its arguments tenuous at best, although I could have misunderstood them, given that I can't read Chinese and automatic translation usually makes a mess of it.
However, there are places in CrowdStrike's refutation of it that make me go "Hmmm".
1) Certificate pinning will ensure integrity of the delivered content but would do nothing to preserve this integrity of the content once stored on the disk. So, yeah, a MitM attach might not be possible but it's a bit disingenuous to talk about it in the same breadth while "refuting" that the downloaded files can be tampered with on the disk.
Love how they shoehorned "AI" into the report as well as still kinda lauding their product...I struggled to continue reading after that first paragraph...ugh
Also, am I crazy, or is there no discussion about runtime defences? "Load a rule that looks like nonsense" should probably default to "ignore rule, keep other rules, but don't hard crash", no? I know there were bugs in the handling, but all the discussions of fixes seems focused on process fixes upstream (which absolutely should be fixed)... but hardening the CS in-kernel code limit BSODs / fail-gracefully doesn't seem to be there, in my reading. Did I miss it?
one things I also noticed is they dont mention a more general reliable improvement, like what happens when the next horrible update happens and the agent crashes, how to allow recovery from that?
But only mentioning a single test that failed to catch this makes it easier to blame only one person at the end of the food chain, while it’s in fact a matter of management, not to have integration and end-to-end testing.
For "automated bespoke code testing", I keep thinking I'd say "validation" instead of "testing". What they were doing struck me as being much more like "input validation". I tend to think that "testing" implies *running the code*.
"Microsoft does not send unsolicited email messages or make unsolicited phone calls to request personal or financial information, or to provide technical support to fix your computer. If you didn't ask us to, we won't call you to offer support."
I'm told crowdstrike regularly screws up linux machines in our environment... it's just that we don't run enough of the same version of linux to have it cause a major impact.
Not that I think that's what happened here, but maybe that's what they're trying to imply.
That statement is leaving out a lot of critical detail. And would a jury go along with the idea that an outage was caused by not “modernizing their IT infrastructure“?
By analogy, if I'd trusted a mechanic to maintain my car and it broke down due to their work, I can see most people ignoring an "offer" (that means it's a choice) of help and had it towed elsewhere.
Microsoft was forced by law to open that segment of code to third parties. now they'll close it again and CrowdStroke will be resident in the BIOS/UEFI. And if they succeed, they will be resident in the physical Power Button. So they can also sell hardware.
the article says "That suggests that Delta was hit by the CrowdStrike outage on its Windows systems and that those failures then impacted its IT infrastructure that was serviced by IBM and others" That sounds possible? That the Windows servers being down bricked the other systems so badly they took days to run again even after the Windows systems were back. I have to agree with Microsoft that one shouldn't have critical systems depend on Microsoft systems working reliably.
If the First Rule of Holes is "Stop Digging", the Second Rule should be "stop, look around, and think about what your predicament looks like to the regulators standing at the top of the hole".
You're gonna need to call them and ask them to toss down a rope eventually. Might as well make that call while they're still laughing.
(to be clear: unless they're performong surgery at their offices, I don't think I have any regulatory authority here)
If they’ve lost $845m over the past 6 years, *and* have taken on a similar magnitude of debt, how were they a viable business even before this? And how can they possibly survive the massive lawsuits to come (even if they will the legal bills will be huge)?
their Desaster PR is the next PR Desaster 👍 Also, what are they actually complaining? Delta is pursuing claims, right? So ultimately, it's in the courts anyways, which have to be considered "just". So CS is pro-actively trying to bully Delta from having the law clarify what they are owed?
I'm wondering who the target audience for the reminder that their liability is limited is. I would say it's for their shareholders. The same way Delta's CEO was pretty clear he was forced by his own shareholders in suing Crowdstrike. I mean, Crowdstrike's terms of service were pretty clear that operating a plane company was incompatible and not recommended for their products...
Kind of an interesting argument to point out that cs hit both linux and windows, but then specifically shift focus to microsoft.
Like, yes, they've got a point, and I largely -agree- with their point, but the way this is structured, it feels like they're using this more as a justification for a long-time campaign against ms and kinda handwaving this as more-of-the-same than treating it as its own thing, and properly addressing the actual systemic problems around the specific harm that occurred.
A junior colleague found a 1-click exploit in Skype for Linux. We reported it. We didn't want any bounty money - just to be assigned a CVE that we could include in our paper. Microsoft's response was essentially "it's not an RCE, go away".
Then they silently fixed it, without crediting us.
Never every doing the "responsible disclosure" dance with Microsoft ever again.
it is always the same. Incident happens, lots of people look at that specific thing, find a lot of stuff, but no one wants to look at "other thing", which is just as much broken.
after a while people go back to using thing, because now its secure:tm: ...
also just writing it off as "the Chinese" is straight up fucking racism, there's literally 1.4bn people living there and treating them like a homogenous unit is fully bullshit
I've had the thought a few times lately - why pay for Windows endpoint protection when Defender is free? Put the money in other places like SIEM, honeypots, vulnerability management. You'd still need endpoint management though.
"...didn’t receive their prescription medication or clean underwear on time..."
That's it. I'm officially old. I've clearly reached the point in life where you have no chance of understanding what "the youth of today" are doing.
What the hell... why do you sign up to something whereby you give over the responsibility of providing your medication and underwear to you to a YouTuber??
Rookie mistake, they have to dedicate at least half of the site to racism and harassing minorities, then the Cloudflare CEO will post Op-Eds on the company blog defending them instead of taking them down
So perfectly ok taking down harmless parody sites but I guess nazis and murderous incels who try to dogpile & harass marginalized people to unalive themselves are very fine people.
"I'm not even gonna go there" lol, when the guy whose job it is to talk about precarious issues knows he can't talk about this one without absolutely popping off, you know it's bad
I have a question - is it really necessary to have your whole disk encrypted with BitLocker - as opposed to having a Windows boot partition unencrypted and keeping your sensitive data on a separate, encrypted volume? Are there any serious security problems with this approach?
I don't use BitLocker but the disk encryption software I use encrypts only some (sensitive) volumes and not the whole disk.
Kevin, I'd be curious about your take on this column of Ed Zitron's. To me, he seems to be lumping the Crowdstrike failure in with the enshittification and such at bigger tech companies like Alphabet/Google, Meta/Facebook, etc.
I usually like Ed's stuff and agree with him about what he calls the "rot economy", but I'm not so sure about his take here including Crowdstrike with all the rest of the bad actors out there.
Soundtrack: EL-P - Tasmanian Pain Coaster (feat. Omar Rodriguez-Lopez & Cedric Bixler-Zavala)
When I first began writing this newsletter, I didn't really have a goal, or a "theme," or anything that could neatly characterize what I was going to …
@paul_ipv6 the obsession with growth comes right out of Friedman and the myth of shareholder value and can be tied to the rise of the Harvard Business School MBA in the 1960s and 70s. Combine with trickle down economics and the downright wrong Laffer curve and voila, the “what have you done for me this quarter?” mentality.
And we no longer have reasonable choices in anything.
Wall Street has a perverse way of rewarding these corporations that is counter to the way business should be conducted. Prioritizing a fair value and experience to paying customers and fostering a healthy work environment ought to be the primary goal. If you can do that exceptionally, the reward comes from your customers preferring you over your competitors — not from an increasing stock price for investors as a result of enshitification practices.
does 40k servers pass the sniff test or do they mean 40k devices?
Because their servers should have had LOM, surely, and they only have ~100k staff total, many of whom would use shared endpoints (or not use one at all), so I can believe 40k endpoints.
Even the most egregious example of unintegrated acquisitions I know of was only at around 10k servers (estimated!) for 50k employees, and Delta doesn’t really have a similar acqui-problem, do they?
honestly, that’s what I expected. I‘m really looking forward to the first meeting with our crowdstrike technical advisors after the vacation. And I’m wondering what our management will decide about our future with crowdstrike, my guess is… we‘ll keep them and try to negotiate something regarding license renewal.
to be fair, Delta has a long history of negligence. I have friends who work in the Aviation space and the fact it took them this long to get back online was more on them than Crowdstrike. And the fact the CEO flew to Paris on a Delta flight for the Olympics while customers are not able to fly, and they were still suffering outages was a huge slap in the face. Most of my friends effected in the space were back up within 1-2 days. CS has also been offering boots on the ground free
@hrbrmstr This will be really interesting if it actually gets all the way through the legal system and the US legal system has to confront and figure out all the "No warranty" nonsense on services and software.
@hrbrmstr I think it'd be tough to prove causation with Microsoft given it's not a Microsoft product: they've installed a third party tool that interacts with kernel hooks that they were obliged to add by EU law.
On the other hand, you always enjoin the party with the greatest capacity to pay, where you can. And optics wise, MS will probably settle.
I suspect anyway.
(speaking as a former lawyer and current software engineer)
Until corporate malfeasance is pursued as a criminal mater, with criminal convictions of corporate officers, including los of liberty and personal property, it'll be the same old shit forever. Delta could secure a $100B ruling, and it wouldn't change a thing.
@riskybusiness @alex I wish I had this video to point last week when everyone was saying EDRs don't need kernel access. Alex's brief summary of why they do is great
@riskybusiness @alex Great discussion of the causes of the Crowdstrike debacle. "Rebuild trust in the industry"? I'm an outlier but I've seen my machines messed up multiple times by security protection/scanning software & had little trust in the industry already. Of course the massive ransom funding to threat actors has made things far worse.
Something like having a test and a validation environment before push updates in production. Something like having a primary and a backup server and not pushing updates on both servers at the sametime ( wait a week to see if there is not an effect on the first updated server ) The basis when you manage it production systems .
And don’t say it cost money. All affected entreprises made big profits .
This is exactly what I thought should happen, but I didn't want to say anything because I'm not a Windows expert, so I figured I was missing something.
Linux has done a great job creating high-level userland APIs to audit kernel-level "things," and my first thought when I heard about this mess was, "Why doesn't Windows have an eventful API for just about everything that goes on in their kernel? Linux has Netlink, fsnotify, and ebpf. What does Windows have? And if it doesn't have those things, why doesn't it?"
Ten years ago, I don't think the world was ready for auditable systems because of privacy concerns, but in today's world, I think they're a must-have. They must be resilient to security tools and give us decent analytical hooks.
I understand these APIs can be used maliciously, but the same applies to every security feature.
...changes like building in a capability to automatically roll back an update if the reboot fails? Oh, that's hard due to the way windows is "designed"? Then what the fuck are you doing deploying a mouse-pushing bundle of backward compatibility hacks to a server role?
I understand the rest of the thread, but this is just a sensation finding post. Some people are given swag that they see no value in. So they want to give it a second life & maybe gain some $ in this case. When I quit at the end of last year **everything** related to my former employer went to Bröcki (charity shop).
Reminds me of the bright red "Y2K Survival Kit" Microsoft was handing out just prior. Contents: bagged water, thermal blanket, first aid kit, emergency radio with hand cranked dynamo. I still have mine (on the boat, or I'd include a pic)!
the correct question to ask is "how much will the gift card be for after you brick our entire company?"
(In an ideal world, the question would be about actual monetary compensation for outages caused by their incompetence, but I know we are a great distance from such a reality)
quite a widespread impact here in AU several large banks and telcos affected. Hugs go out to their IT teams trying to work to resolve it. Although shouldn’t they have tested on a small subset first 😉
I presume this is why a colleague just sent me this? bbc.co.uk/news/live/cnk4jdwp49…. If so - thanks for the detail! I knew there was a reason I followed you!
According to Sky, airport check-ins are screwed here in Berlin. Though BER Airport is so shit even at the best of times, so I'm not sure if anyone's even noticed.
Would be interesting to understand if they do progressive rollout (1%, 5%, 10%, etc.) and how this impacted so broadly if so. Or was the a timebomb element to it?
Perhaps we have fewer facilities to visit, and could have at least one person at each. I think maybe Delta does not have that many personnel who can be mobilized? Do they run support from remote call centers? (I don't have work-from-home or outsourced support here. Something breaks...somebody from I.T. is walking.)
An SOP was created and shared via standard comms, and printed out for the technicians on the floor. Non-technical I.T. staff were able to follow the SOP, which multiplied the number of people per site.
I'm saying, it's not a new event in the span of I.T. and vendor-caused outages. It has happened before.
Sophos/Utimaco and Microsoft had a similar problem with Win7 FDE, which had greater impact on us due to I.T. staff computers being offline, unable to access email, file storage, ticketing systems, and org-wide chat didn't exist.
But, we do have humans available at each site within 1-2 hours.
This is the story of Bill Kongable who served in the 89th Infantry Div as a member of the anti-tank company. He went to war at 18 years of age & saw things that no one should ever see. His unit made an assault river crossing across the Rhine River...
This is the story of Bill Kongable who served in the 89th Infantry Division as a member of the anti-tank company. He went to war at 18 years of age and saw t...
in March of 1945. The Rhine River is the border of Germany & the Germans were determined to oppose & push back the Allies but thank GOD the Germans were defeated. Mr. Kongable took part in the liberation of the concentration camp Ohrdruf which was the first camp liberated by the Allies in the West in April 1945. Ohrdruf is a subcamp of the Buchenwald complex and used forces laborers to keep the German war machine going.
My father was at Burgan Belson in 1945 when war ended they liberated the camp and rounded up the guard's he and one other drove the bull dozers to fill the mass graves. He only talked about what he had done a few weeks before he passed away aged 80 years old. RIP. My father was at Burgan Belson in 1945 when war ended they liberated the camp and rounded up the guard's he and one other drove the bull dozers to fill the mass graves. He only
L'institut allemand de sondage d'opinion Forsa déclare : 75 % des Allemands sont favorables à l’arrêt des livraisons d’armes à Israël en raison de sa guerre contre Gaza. En Europe, on s’intéresse aux sondages d’opinion et on en tient compte. L’arrêt de la fourniture d’armes européennes à Israël transforme l’armée israélienne en un tigre édenté.
Shlomo Sand nous fait aujourd'hui l'honneur de participer au podcast. Historien, professeur à l'université de Tel Aviv, ses ouvrages font polémique depuis des décennies. A travers "Comment le peuple juif fut inventé", Sand revisite l'archéologie et les faits pour remettre en cause le mythe de l'Exil, fondement du sionisme et du retour à la terre d'Israël. Plus récemment, "Deux peuples pour un État ? Relire l’histoire du sionisme", Sand remet en cause la doxa de la politique des deux états. Il propose alors d'imaginer un Etat unitaire qui réunirait juifs et arabes sur une même terre, de la rivière à la mer, égaux en droits, et libres.
Pour qui ? Les palestiniens en ont pour des décennies de supporter les effets de ce qu'ils ont vécu. Et les chocs traumatiques quand tu ressortde l'enfer? Tu as un homme de 70 ans, seul rescapé : 30 personnes de sa famille décimées en une fois.
De l'extrême ouest à l'extrême est... d'Ankara à Tokyo, de Marrakech à Naplouse, de Jakarta au Caire... la terre tremble à répétition et à un rythme accéléré !
La punition pour « trahison » sera-t-elle un tremblement de terre majeur ? Pour que chacun puisse goûter un peu aux horreurs de Gaza, mais sans missiles ni bombardiers venus du ciel, mais depuis les profondeurs, là où Dieu lui ordonne d'avancer, pour qu'il s'élève, furieux et punitif ?!
La France s’apprête à livrer des équipements militaires à Netanyahou.
Un cargo israélien fera escale demain à Fos-sur-Mer, près de Marseille.
Il transportera secrètement 14 tonnes de pièces détachées pour fusils mitrailleurs fabriquées par la société française Eurolinks. Des pièces qui doivent être livrées à l’entreprise d’armement Israel Military Industries.
Le président @EmmanuelMacron doit s'expliquer. La France ne peut être complice du génocide en cours en Palestine.
🎙️ LINUX AND OPEN SOURCE NEWS PODCAST: Listen to the latest Linux and open source news, with more in depth coverage, and ad-free! podcast.thelinuxexp.com
00:00 Intro 00:26 KasmVNC: the best remote desktop option on Linux 01:21 The Default tools kinda suck 02:22 Editing a PDF 05:14 Manual Signature of a PDF 06:47 Digitally Signing a PDF 08:49 Optical Character Recognition of a PDF 10:17 Hand Written Annotations on a PDF 11:08 Modifying pages and merging PDFs 11:53 Creating a PDF 13:05 Parting thoughts 13:39 Sponsor: Get a PC designed to run Linux with Tuxedo 14:29 Support the channel
How to edit a PDF document:
One tool that is probably already on your Linux desktop is LibreOffice Draw. It can open PDF documents, and edit them, as long as it's not an image.
If you're familiar with vector drawing programs, then Inkscape can also edit PDF documents. For more robust solutions, you have proprietary commercial solutions, including PDF Studio, Master PDF, Foxit PDF Editor, or WPS Office, but you'll have to pay for them.
How to manually sign a PDF:
Okular can actually do that. You can use the manual drawing tool to write your signature, or you can add the ability to paste an image on top of a document, but it's convoluted. You have to go to settings, toolbars shown, enable the quick annotations toolbar, then click the "configure button", click "Add", select the type "Stamp", and click the little button next to the "stamp symbol" field, to pick your own hand drawn signature that you previously saved as an image. Afterwards, you can just add that to any document in one click from that quick annotations toolbar.
You can also open the PDF document in LibreOffice Draw or the GIMP, and add your image signature this way.
How to digitally sign a PDF:
The easiest way is to use LibreOffice. Open the LibreOffice suite, click File, then digital signatures, and then "sign existing PDF", then the "sign document" button at the top. It will list all the available existing signatures and certificates you have installed on your device, and you can pick the one you want.
By default, LibreOffice will look into Mozilla Firefox's certificates list, so you'll have to put your certificate file there. To do so, open FIrefox, then the main menu, Preferences, Privacy and Security, and then "View Certificates". Then click on "authorities" and "Import", and then the "OK" button, and you're done.
Optical Character Recognition (OCR)!
A simple option is GImageReader, an open source app that will let you import a document or image, and will recognize all the text inside, in a very large variety of languages. It can take a while to do its thing, but it works reliably, and it was able to extract text from scanned PDFs and images like a PNG.
If you prefer doing these tasks from the command line, then you have Tesseract OCR, which is actually what GImageReader uses in the background.
How to annotate a PDF:
Your best option is probably Xournal++. It lets you open PDF documents, and draw all over them. You can highlight text, add hand drawn notes, shapes, type some text. It can even handle equations and graphs, and has a very customizable interface.
How to modify pages, split and merge PDF documents:
If all you need is modifying the pages in a PDF document, like reordering them, or deleting them, then you have PDF Arranger, a simple GNOME app that will run on any Linux desktop, and is available on Flathub.
L'Espagne rejoint officiellement la plainte déposée par l'Afrique du Sud devant la Cour internationale de justice concernant le génocide commis par Israël.
Charles Malet, Brian Gerrish, Vanessa Beeley and Sandi Adams with Wednesday's UK Column News.
Sources: https://www.ukcolumn.org/video/uk-column-news-4th-june-2025
01:02 From Defence to Offence: The War Hype Hits Overdrive
09:47 The Weaponisation of …
La loi définit l'injure raciste comme « toute expression outrageante, terme de mépris ou invective adressé à une personne ou à un groupe à raison de leur origine ou de leur appartenance à une ethnie, une nation, une prétendue race ou une religion déterminée ».
Quand vous dites que « le vote musulman » est antisémite, vous rentrez exactement dans cette définition en outrangeant un groupe en raison de sa religion.
I'm sad to see so many posts mocking the use of #ContentWarnings. They're rarely used, but somehow people act like it's a major violation of their Freedums.
Have you had real, deep, lasts-for-years trauma? If you have, you might understand why a heads-up can be a welcome relief from the onslaught of triggers streaming from the media.
Flashbacks are not something you should wish on anyone, even if you Haven't had trauma yourself. Content Warnings help prevent them, period. Don't be a jag.
@VaylLarkinPoet@disabled.social But there's real societal value in learning to cope with one's triggers. I am triggered by things every day both on the fediverse and in real life and it is a valuable life skill to learn how to cope. I can't go around to people around me and ask them to change their behavior simply because I find something they do triggering. We have no choice over what happens to us in life sometimes.But we have the choice in how we choose to respond. I'm a firm believer in that. That being said, if I know that something I'm doing bothers somebody I'm not going to be a dick and continue to do it if I don't need to.
I'm sad to see so many posts mocking the use of #ContentWarnings. They're rarely used, but somehow people act like it's a major violation of their Freedums.
Have you had real, deep, lasts-for-years trauma? If you have, you might understand why a heads-up can be a welcome relief from the onslaught of triggers streaming from the media.
Flashbacks are not something you should wish on anyone, even if you Haven't had trauma yourself. Content Warnings help prevent them, period. Don't be a jag.
3 Haziran 1968’de radikal feminist yazar Valerie Solanas, Andy Warhol’u New York’taki stüdyosunda vurdu. Olay, Warhol’un hayatında derin izler bıraktı ve sanat dünyasında bü…
Robert Wyatt’ın 1 Haziran 1973’de yaşadığı kaza, felç sonrası müziğe bakışını değiştirdi ve Soft Machine’in soundunu etkiledi. 1 Haziran 1973, İngiliz progresif rock sahnesi için sıradan bir gün de…
The Freedom Flotilla Coalition is asking members of the world community to either tag on social media or write the Foreign Ministers of the countries of each of the crew members aboard the Madleen in order to offer protection as they sail en route to Gaza. Anyone can help but if you are also constituent of one of these countries, you have an advantageous influence. If you're French, Brazilian, German, Spanish, Dutch, Turkish, or Swedish, you can pressure your Foreign Ministers to fulfill their duty to their citizens and to humanity.
From Freedom Flotilla: "After drones repeatedly hovered over the #Madleen last night, we need people of the world to help tag and email their foreign ministry. The volunteers aboard are delivering life-saving aid to Gaza. They are unarmed, carrying only food, medicine, and baby formula, and acting fully within international law. It’s time for world governments to step up. Demand they protect their citizens aboard the 'Madleen' and stop enabling Israel's war crimes. Safe passage is a legal obligation, and a moral one."
I will post below graphics with the relevant information for each of the crew members. Please share the word. Thank you.
The German government has a responsibility to protect their citizen, Yasemin Acar, from Israeli or NATO interception of any kind while she sails to Gaza aboard the 'Madleen'.
The vessel carries unarmed civilians and humanitarian cargo, including baby formula and other life-saving aid for Palestinians in Gaza. It poses no threat, and is operating in full accordance with international maritime, humanitarian and human rights law.
Tag and email the German Ministry of Foreign Affairs NOW:
The Spanish government has a responsibility to protect their citizen, Sergio Toribio, from Israeli or NATO interception of any kind while he sails to Gaza aboard the 'Madleen'.
The vessel carries unarmed civilians and humanitarian cargo, including baby formula and other life-saving aid for Palestinians in Gaza. It poses no threat, and is operating in full accordance with international maritime, humanitarian and human rights law.
Tag and email the Spanish Ministry of Foreign Affairs NOW:
Early in-person voting began Tuesday in the New Jersey primaries to decide the state's next governor, with Republicans hoping to flip a blue-state governorship after coming up short in 2024.
@bluevelvet321 basically, the people running the empire are now running head first into the harsh reality that the empire is no longer dominating the world economy
Par Quds News Network (2 juin 2025)* Berlin - Le gouvernement allemand a approuvé des exportations d'armes vers Israël pour un montant de plus de 485 millions d'euros depuis le début du génocide de Gaza en octobre 2023, selon des données officielles.
🧵Gjovik v Apple update: I filed a Motion for Reconsideration in 9th Circuit today. The court dismissed my appeal claiming "no jurisdiction" while ignoring 28 USC §1292(a)(1) - which gives mandatory jurisdiction over injunctive relief denials (my Gobbler claims!). It's not discretionary.
But here's the kicker: While I was fighting this procedural maze, Congress was busy criminalizing Apple's exact conduct through the TAKE IT DOWN Act & AI Whistleblower Protection Act. 📊⚖️ ashleygjovik.com/blog/fighting…
The district court's plays were: ✅ Strike my legal arguments without reading them ✅ Dismiss claim for not addressing the struck arguments ✅ Deny motion to fix problems they identified ✅ Claim I waived arguments they refused to consider
That's not case mgmt!
9th Circuit now gets to decide: follow federal law requiring review of injunctive relief denials or continue enabling procedural traps that silence AI whistleblowers on matters Congress deems nationally critical & I file a new RICO suit.
Note: the Court dismissed my RICO claims without prejudice, but suggested I don't replead them, so I didn't at first, but then changed my mind, and then the Court denied my Motion to Amend. The Ninth Circuit has denied my request for Appeal twice. So, next I would refile RICO in the First Circuit.
I'm a fan of naturally aspirated V8's but this guy is interesting. His cars are way out of my price range - not that I would buy one if I had that kind of cash...
BTW: I looked at a 1975 Buick LeSabre Coupe Convertible with a 455 yesterday... totally 70's survivor. "majestic blue paint with white vinyl seats... Still had the old 8 Track player installed. LOL. it wasn't pimped out so it was still cool... didn't buy tho. They wanted $21,000.
En France Je n’ai jamais vu la police mettre autant de personnes et autant de jeunes femmes en cellules et en Garde a vue pour avoir comparé un dirigeant étranger à Hitler !
Ce harcèlement policier et judiciaire doit cesser ! @LDH_Fr @Defenseurdroits @CNCDH
👏 SUPPORT THE CHANNEL: Get access to: - a Daily Linux News show - a weekly patroncast for more personal thoughts - polls on the next topics I cover, - your name in the credits
🎙️ LINUX AND OPEN SOURCE NEWS PODCAST: Listen to the latest Linux and open source news, with more in depth coverage, and ad-free! podcast.thelinuxexp.com
Timecodes: 0:00 Intro 0:33 Sponsor: SquareSpace 01:39 Assembly 06:05 Linux Compatibility 08:49 Performance & Battery Life 11:35 Hardware quality 17:17 Parting Thoughts 18:40 Support the channel
So, I decided to install Linux on that thing. Since Fedora 41was just released, I decided to go for that, with the beta to be precise, it wasn't officially out when I started making this video.
I decided to just apply the basic updates to the distro, and not even look at firmware updates first, just to see if everything worked properly, and I wasn't disappointed. Wifi and bluetooth work fine, the keyboard backlight is supported, the touchpad is able to perform these smooth GNOME gestures, the keyboard works perfectly, suspend and resume as well, there's nothing to add or configure, which is nice., and it's really not always the case with laptops primarily meant to work with Windows.
This is all on Fedora 41, with the linux kernel 6.11, so not even the very latest. The camera, mic, and speakers also perform well, although as always, the mic's default volume is wayyy to high for a laptop mic and needs to be lowered by about half. Even the fingerprint reader located in the power button works perfectly, although registering a fingerprint is finicky. It even works from the terminal, which is cool. Hot swapping the ports fro the laptop's body also works fine, everything is just fully functional.
As per the CPU itself, it's a Ryzen 7 7840U, so not the very latest and greatest from AMD, but it's a very competent CPU nonetheless, with 8 cores and 16 threads. On Geekbench 6, it got 2570 in single core, and 11270 in multi core.
As per battery life, the framework 13 isn't a big champion, it only has a 61 Wh battery with aht specific AMD CPU. For me, resulted in about 8h of looped video playback on youtube, with hardware acceleration enabled in Firefox, over wifi, at mid brightness, on power saver mode, with a 2880x1920 display running at 120hz, with 150% fractional scaling.
As per the actual laptop's hardware, it's great. The build quality is good, and absolute proof that you don't need to sacrifice repairability and maintenance options to get a well built device. It doesn't really flex much apart from the middle of the keyboard, and it feels very rigid and solid, despite that fact that various plates can be unscrewed and removed.
Aesthetically, there is not much of a tradeoff ether, apart from the ports which look weirdly far apart from one another because, well, they have to to make this module thing work, but it's honestly not a big deal, it looks fine, and at least you don't bump multiple peripherals into one another, and you don't block ports, with a big USB drive.
The plastic bezel is fine as well, the branding is very minimal, it all looks good. I enjoyedn the screen, it's bright, colors are good and it has an anti glare coating. It goes up to 500 nits, and covers 100% of sRGB. it's also 3:2, which i like as an aspect ratio. It can go up to 120hz as well,but that's only for the 2880x1920 display I got i my review unit.
The keyboard and touchpad are great as well, among the best laptop keyboards I've used. Keys are stable, correctly sized, and have good travel, they feel really nice to type on. The touchpad is smooth glass, it works perfectly for touchpad gestures, and it'ws precise not fiddly at all. It's also centered, which is good.
Other nice things include the mic and camera privacy switches that will stop them from being used electrically.
As per the cost, it's more expensive. With everything I got in the box, the review unit costs 1748 euros, with the 20% VAT included. But, with the framework laptop, you are almost guaranteed to get just a new motherboard when you need it, and you don't need to buy an entire new laptop every 5 years, which might save some money in the long term.
ANALİZ | “Kürt Sorunu” Demekten Dahi İmtina Edenler “Sorun”u Çözemezler Proleter hareket dün olduğu gibi, bugün de Kürt sorunu siyasi bir sorun olduğu gerçeğinin altını çizer ve ulusların kendi kaderini tayın etme hakkını savunur. Yine proleter hareket dün olduğu gibi bugün de Kürt-Türk ve çeşitli azınlık milliyetlerden halkımızın birliğini savunur.
(e.g. uBlockO), blocking tracking scripts (e.g. uBlockO), android without Android Advertising ID (GrapheneOS) and avoiding facebook and yandex sites and apps or better yet all proprietary spyware apps (f-droid.org)
agitprop & absurdity
in reply to agitprop & absurdity • • •2/3
agitprop & absurdity
in reply to agitprop & absurdity • • •3/3