309: The Future is Open

LINUX Unplugged

Open Source has taken over the world, as IBM's purchase of Red Hat closes. We reflect on this historic moment.

Plus Mozilla's been labeled an Internet Villian, we deep dive into the tech behind all the controversy and how you can self-host secure DNS.

Special Guests: Alex Kretzschmar, Brent Gervais, and Drew DeVore.

Support LINUX Unplugged

Links:

• Red Hat, Inc. on Twitter — As #RedHat's acquisition by @IBM closes, Red Hat will maintain independence and neutrality to give customers freedom, choice and flexibility.
• IBM Closes Landmark Acquisition of Red Hat for $34 Billion; Defines Open, Hybrid Cloud Future — Joining forces with IBM gives Red Hat the opportunity to bring more open source innovation to an even broader range of organizations and will enable us to scale to meet the need for hybrid cloud solutions that deliver true choice and agility.
• Ubuntu-Maker Canonical’s GitHub Account Gets Hacked — An unknown hacker yesterday successfully managed to hack into the official GitHub account of Canonical, the company behind the Ubuntu Linux project and created 11 new empty repositories.
• Ubuntu Security on Twitter — We can confirm that on 2019-07-06 there was a Canonical owned account on GitHub whose credentials were compromised and used to create repositories and issues among other activities.
• Raspberry Pi admits to faulty USB-C design on the Pi 4 — After reports started popping up on the Internet, Raspberry Pi cofounder Eben Upton admitted to TechRepublic that "A smart charger with an e-marked cable will incorrectly identify the Raspberry Pi 4 as an audio adapter accessory and refuse to provide power." Upton went on to say, "I expect this will be fixed in a future board revision, but for now users will need to apply one of the suggested workarounds. It's surprising this didn't show up in our (quite extensive) field testing program."
• Firefox 68.0, See All New Features, Updates and Fixes — Dark mode in reader view expands so that windows are also dark on the controls, sidebars and toolbars.
• Linux Millionaire Question Form — Jupiter Broadcasting wants to create a fun game for Linux enthusiasts to test their knowledge on the depths of technology and Linux history. Please help by providing us your thoughtful questions and suggested answers!
• Linux Academy on Twitter — The AWS #DevOps Professional certification exam has just been updated with new emphasis on the AWS #Developer Tools suite.
• Choose Linux 12: Regolith, Rosa, and Antsy Alien Attack — Two new hosts join Joe to talk about a nice i3 implementation and an amazing arcade game written in Bash.
• Linux Academy is Hiring!
• Passing the AWS Cloud Practitioner Exam — Whether you need the Cloud Practitioner certification for work or as a personal goal, studying and staying on track is hard because life gets in the way. Join this study group and we’ll help you pass the exam by meeting on a bi-weekly basis and going over the main topics covered in the certification exam.
• Emma on Twitter — Hey @system76 fans! I'm looking for a few people to join the HAPPINESS TEAM at System76!
• Understanding Burnout Study Group
• ISPA announces finalists for 2019 Internet Heroes and Villains: Trump and Mozilla lead the way as Villain nominees — Mozilla, for their proposed approach to introduce DNS-over-HTTPS in such a way as to bypass UK filtering obligations and parental controls, undermining internet safety standards in the UK.
• How to enable DNS-over-HTTPS (DoH) in Firefox | ZDNet — The DNS-over-HTTPS (DoH) protocol is currently the talk of the town, and the Firefox browser is the only one to support it.
• DNS-over-HTTPS (DoH) | Public DNS | Google Developers — Google Public DNS provides two distinct DoH APIs
• Public recursive name server - Wikipedia — List of public DNS service operators
• DNS Over HTTPS Proxy — A set of python 3 scripts that supports proxying DNS over HTTPS as specified in the IETF Draft draft-ietf-doh-dns-over-https.
• DNS Privacy Project
• dnscrypt-proxy 2 — A flexible DNS proxy, with support for modern encrypted DNS protocols such as DNSCrypt v2 and DNS-over-HTTPS.
• Running a DNS over HTTPS Client — There are several DNS over HTTPS (DoH) clients you can use to connect to 1.1.1.1 in order to protect your DNS queries from privacy intrusions and tampering.
• curl/doh — A libcurl-using application that resolves a host name using DNS-over-HTTPS (DOH).
• RFC 7858 — Specification for DNS over Transport Layer Security
• DNS Security with DNSCrypt — While OpenDNS has provided world-class security using DNS for years, and OpenDNS is the most secure DNS service available, the underlying DNS protocol has not been secure enough for our comfort.
• DNSSEC – What Is It and Why Is It Important? - ICANN — Engineers in the Internet Engineering Task Force (IETF), the organization responsible for the DNS protocol standards, long realized the lack of stronger authentication in DNS was a problem. Work on a solution began in the 1990s and the result was the DNSSEC Security Extensions (DNSSEC).
• DNS Security and Privacy — Choosing the right provider — However, with all great options out there (eg: 1.1.1.1, 8.8.8.8, 9.9.9.9), come great responsibilities. Which provider to choose? Which protocol to choose? DNSCrypt? DNS over HTTPS or TLS? What about DNSSEC? …
• pi-hole/pi-hole: A black hole for Internet advertisements — Those who want to get started quickly and conveniently may install Pi-hole using the following command
• Configuring DNS-Over-HTTPS on Pi-hole - Pi-hole documentation — DNS-Over-HTTPS is a protocol for performing DNS lookups via the same protocol you use to browse the web securely: HTTPS.
• Segmentation fault on raspberry pi 2 model b · Issue #38 · cloudflare/cloudflared
• DevilsPie — A totally crack-ridden program for freaks and weirdos who want precise control over what windows do when they appear. If you want all XChat windows to be on desktop 3, in the lower-left, at 40% transparency, you can do it.
• Devilspie2 — Devilspie2 is a window matching utility, allowing the user to perform scripted actions on windows as they are created.