Untitled Linux Show 254

Tech/Product/Analysis Summary (Untitled Linux Show 254)

1) Raspberry Pi Imager 2.0.9 (pre-release) + Raspberry Pi Connect (org/device provisioning)

• Raspberry Pi Imager 2.0.9 revamps secure boot provisioning and adds a new reprovisioning pipeline for Compute Module 5 (CM5).
• Adds a wizard for registering devices into a PiConnect organization, including:
  • On-device key signing
  • Connect Device Registrar communication over HTTPS
  • Tracking organization enrollment tokens during image writing
  • Device identity registration in PiConnect after a fast-boot flash
• Improves write reliability:
  • Better overflow handling for GPT/MBR/FAT partition wrappers
  • Better handling of long file names and FAT partitions
  • ZSTD header parsing to recover extraction size for local archives
  • Handles extremely large sectors per FAT in disk formatter
  • Removes a 512-byte alignment requirement
• Cloud-init customization changes:
  • Drops older enable SSH channel handling
  • Uses systemctl run command instead
  • Switches to singular user configuration
  • Fixes behavior when the serial interface is disabled
• Mention of an additional article focusing on Raspberry Pi Connect for organizations (device management concept).

2) AI in Qt Creator (Cute Creator 20 beta) — agent-based coding integration

• Qt Creator 20 beta expands AI support via the Agent Client Protocol (ACP).
• ACP enables AI agents to communicate directly with the IDE, allowing the AI to:
  • Understand the codebase
  • Edit files
  • Run commands
  • Trigger builds
• Adds additional MCP (Model Context Protocol) server integrations and provides a UI to manage MCP servers and model context.
• Discussion highlights the tradeoff:
  • Productivity gains (documentation, boilerplate, tests, code explanations)
  • Security/trust concerns because agents can perform automated actions (permissions, review, what changed)
• Participants compare it to earlier “autocomplete/assistant” tools and frame it as a step toward true agentic workflows.

3) Valve/Steam update — controller handling + new Steam Controller hardware

• Valve’s Steam client update focuses on controller handling:
  • Popup notifications when a controller connects/disconnects
  • Setting to enable/disable controller battery notifications
  • Improvements to the “add a controller” interface
• Steam Controller is highlighted as officially released, with features including:
  • 4 haptic motors
  • Magnetic thumb sticks with capacitive touch
  • 6-axis IMU
  • Capacitive touch areas, USB-C
  • A USB-C “puck” acting as wireless transmitter + charging station
  • Battery: ~8.39 Wh, up to 35 hours gameplay
  • Works with Steam Input and supports preloaded community configurations
  • Price mentioned: $99 (with suggestion to read articles for details)
• Discussion note: participants generally prefer keyboard/mouse for precision, while controller reliability concerns like joystick drift were mentioned.

4) Ubuntu security/social engineering issues

Two separate security topics were discussed:

1. Prior Ubuntu web infrastructure DoS attack
   • Canonical services like ubuntu.com, Launchpad, Snap Store were affected.
   • Restored after several days.
2. New social media compromise / phishing scam
   • Canonical’s official X/Twitter account posted a suspicious thread promoting an AI agent called “Numbat” (aligned with “Noble Numbat”/Ubuntu naming to seem plausible).
   • Uses heavy buzzwords (AI, blockchain, decentralized, Solana) and a look-alike domain: ai-ubuntu.com.
   • Leads users to connect a crypto wallet via “check eligibility/explore” buttons.
   • Contains common crypto scam signals like token allocation urgency and FOMO.
   • No confirmed evidence that Ubuntu repositories/ISOs or user software were compromised—described as brand impersonation/phishing.

Advice theme: even trusted brands can be abused; don’t trust official-looking posts that prompt wallet connections or logins.

5) Inkscape 1.4.4 maintenance update

• Inkscape 1.4.4 fixes 24 crash/freeze issues affecting workflows such as:
  • Opening SVG and PDF
  • Connector tool usage
  • Path effects (including PowerS/corners)
  • Undo/redo around page operations
  • Breaking apart complex paths
  • Tracing raster images
• Performance/UX improvements:
  • Better zooming in documents with many paths
  • Faster copy/paste of many gradient objects
  • Layers/objects dialog opens faster with many selections
• Platform-specific and feature additions:
  • New color palette for elementary OS
  • Keyboard shortcut configurable for paste on page
  • Text rendering respects language metadata per T-span
  • New control to rotate selected star/polygon upright
  • Correct bounding box size/position when moving objects between groups using layers dialog

6) Linux kernel security: “Dirty Frag” privilege escalation

• A Linux kernel vulnerability called “Dirty Frag”:
  • Allows local privilege escalation to gain root
  • Not described as an immediate remote-internet compromise, but relevant if an attacker already has some foothold (e.g., SSH access, compromised web app, container workload, or user account).
• Related subsystems: ESP (IPsec) and RXRPC (AFS).
• Rated high severity; fixes already released.
• Mitigation emphasis:
  • Patch immediately
  • Module-blocking was mentioned, but warned as likely to break VPN/AFS use cases
• Discussion also debated the possibility of earlier proof-of-concept appearing before patches/CVE completeness (described with “zero-day” phrasing/gray area).

7) VideoLand AV2 decoder preview: “DAV 2D”

• Video decoding news:
  • VideoLand released DAV 2D version 0.1 (preview) as an open-source CPU-based AV2 decoder.
  • It’s positioned as the successor path from DAV 1D (AV1).
• AV2 goals highlighted:
  • Better support for AR/VR
  • Improved screen content handling (presentations, desktop sharing)
  • Advanced multi-program streaming, including split-screen
• Codec status:
  • Still in standardization, so DAV 2D is early implementation (not guaranteed production-ready).
• Code availability:
  • Available on VideoLand GitLab
  • Integration into stable VLC not yet announced.

8) AlmaLinux 10.2 beta — i686 user space package support

• AlmaLinux 10.2 beta introduces i686 user space package support.
• Key clarification:
  • Not restoring i686-only hardware support.
  • Enables running 32-bit user-space applications on modern 64-bit systems.
• Target use cases:
  • Legacy 32-bit software that won’t go away
  • Legacy CI pipelines
  • Containerized workloads needing i686
• Maintenance intent:
  • i686 stream planned to be maintained alongside architectures through 2035
  • Official Docker images for 386 expected around the stable release
• Other release details:
  • Based on Linux kernel 6.12
  • Updated developer/server packages mentioned: Python 3.14, PostgreSQL 18, Ruby 4, PHP 8.4, plus updates to Podman/KVM/libvirt and more
• Note: beta only; not for production yet, but recommended for testing where i686 is needed.

9) Command-line / productivity tips (tutorial-style segments)

Tip: csplit to split files by context

• Demonstrates splitting a text file using csplit patterns based on separator/context markers.
• Examples include:
  • Splitting by a literal marker line (e.g., word “separator”)
  • Changing output prefix with -f
  • Controlling number of splits using {} counts
  • Adjusting pattern matching to split by day markers (e.g., day- patterns)
• Explains that csplit creates output files like prefix00, prefix01, etc.
• Notes that an empty first segment can produce zero-byte outputs.

Tip: command-line chess app (tutorial/plugin style)

• Mentions a GitHub Go-based chess tool: “tuy” (CLI-like chess UI).
• Features mentioned:
  • Local play, multiplayer, bot game
  • Load PGN and step through moves
  • Various time controls
  • Optional skins/sound
• Mentions playing via lichess for the multiplayer/online aspect.

---

Main speakers / sources (as stated in the subtitles)

• Ken (main host/participant)
• Rob (main host/participant)
• Anthony (appears to coordinate audio/logistics; also participates in discussion)

Additional referenced writers/articles

• Bobby Boris
• Marcus Nester
• Michael Larabel (listed in multiple security/codec items)
• Surviv Rudrov (hackathon mention)
• Thomas Morane (chess project referenced by name)