Ask Noah Show 390

This week Vincent Danen the VP of product security from Red Hat joins the Ask Noah Show to talk about Open Source security practices. We take your calls, answer your questions, and give you an update about The Linux Challenge Coin.
-- During The Show --
01:50 Caller
Nitro Phone
Pixel 8 with GrapheneOS flashed on it
05:58 Remote Access Via Browser? - Craig
Ethical/Liability issues
Work policy violations
Retroactive punishment
Apache Guacamole (https://guacamole.apache.org/)
Security concerns
Set up a box on a VPS
Boot off a flashdrive
13:42 App Image Allows Total Control - Charlie
Apps Steve "pins"
CurseForge
News Wire
Firefox 126 - Mozila (https://www.mozilla.org/en-US/firefox/126.0/releasenotes/)
Mir 2.17 - Phoronix (https://www.phoronix.com/news/Mir-2.17-Released)
Tails 6.3 - Tails (https://tails.net/news/version_6.3/)
Endless OS 6 - Endless OS (https://www.endlessos.org/post/getting-started-with-endless-os-6)
Wine 9.9 - Wine HQ (https://gitlab.winehq.org/wine/wine/-/releases/wine-9.9)
XFS - Phoronix (https://www.phoronix.com/news/Linux-6.10-XFS)
Open Smart Glasses - Gizmodo (https://gizmodo.com/cerebral-valley-hackers-build-20-open-source-smart-gla-1851476656)
Hackbat - ZDnet (https://www.zdnet.com/article/meet-hackbat-an-open-source-more-powerful-flipper-zero-alternative/)
2 Year Infection - ArsTechnica (https://arstechnica.com/security/2024/05/ssh-backdoor-has-infected-400000-linux-servers-over-15-years-and-keeps-on-spreading/)
Open Source AI OSI Initiative - IT Pro (https://www.itpro.com/software/open-source/the-debate-over-open-source-ai-has-reached-boiling-point-this-new-osi-initiative-looks-to-set-the-record-straight)
16:50 Linux Challenge Coin
Not sure how to do this
4 Pillars
People are behind the tech
When Technology is at it's best it is Open Source
Knowledge should be shared to empower users
Be willing to do the work they don't want to do
Mind Drip Doc (https://docs.minddripone.com/challenge-coin/)
LinuxChallengeCoin.com (linuxchallengecoin.com)
34:45 Red Hat Interview
Vincent Danen - Red Hat VP of Product Security
SBOMs & Red Hat's response to the XZ vulnerability
Benefit of open source
Firebird project
Don't restrict who can be a maintainer
Red Hat's reaction to XZ vulnerability
Effect of people supporting up stream
Paths and tactics
Investment in Open Source
48:30 AlmaLinux Engineering Steering Committee (ALESCo)
Alma Blog (https://almalinux.org/blog/2024-05-21-introducing-alesco/)
Open ELA (https://openela.org/about/)
What standards are being "centered on"?
How is this different from Open ELA?
52:00 SELF MeetUp
Join Remotely
Book your rooms now
Register now
ANS/SELF Meetup
Pinkys (https://eatatpinkys.com/)
Friday 6:00 PM
-- The Extra Credit Section --
For links to the articles and material referenced in this week's episode check out this week's page from our podcast dashboard!
This Episode's Podcast Dashboard (http://podcast.asknoahshow.com/390)
Phone Systems for Ask Noah provided by Voxtelesys (http://www.voxtelesys.com/asknoah)
Join us in our dedicated chatroom #GeekLab:linuxdelta.com on Matrix (https://element.linuxdelta.com/#/room/#geeklab:linuxdelta.com)
-- Stay In Touch --
Find all the resources for this show on the Ask Noah Dashboard
Ask Noah Dashboard (http://www.asknoahshow.com)
Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!
Altispeed Technologies (http://www.altispeed.com/)
Contact Noah
live [at] asknoahshow.com
-- Twitter --
Noah - Kernellinux (https://twitter.com/kernellinux)
Ask Noah Show (https://twitter.com/asknoahshow)
Altispeed Technologies (https://twitter.com/altispeed)

This week Vincent Danen the VP of product security from Red Hat joins the Ask Noah Show to talk about Open Source security practices. We take your calls, answer your questions, and give you an update about The Linux Challenge Coin.

-- During The Show --

01:50 Caller

Nitro Phone
Pixel 8 with GrapheneOS flashed on it

05:58 Remote Access Via Browser? - Craig

Ethical/Liability issues

Work policy violations
Retroactive punishment

Apache Guacamole
Security concerns
Set up a box on a VPS
Boot off a flashdrive

13:42 App Image Allows Total Control - Charlie

Apps Steve "pins"
CurseForge

News Wire

Firefox 126 - Mozila

Mir 2.17 - Phoronix

Tails 6.3 - Tails

Endless OS 6 - Endless OS

Wine 9.9 - Wine HQ

XFS - Phoronix

Open Smart Glasses - Gizmodo

Hackbat - ZDnet

2 Year Infection - ArsTechnica

Open Source AI OSI Initiative - IT Pro

16:50 Linux Challenge Coin

Not sure how to do this
4 Pillars

People are behind the tech
When Technology is at it's best it is Open Source
Knowledge should be shared to empower users
Be willing to do the work they don't want to do

Mind Drip Doc
[LinuxChallengeCoin.com](linuxchallengecoin.com)

34:45 Red Hat Interview

Vincent Danen - Red Hat VP of Product Security
SBOMs & Red Hat's response to the XZ vulnerability
Benefit of open source
Firebird project
Don't restrict who can be a maintainer
Red Hat's reaction to XZ vulnerability
Effect of people supporting up stream
Paths and tactics
Investment in Open Source

48:30 AlmaLinux Engineering Steering Committee (ALESCo)

Alma Blog
Open ELA
What standards are being "centered on"?
How is this different from Open ELA?

52:00 SELF MeetUp

Join Remotely
Book your rooms now
Register now
ANS/SELF Meetup

Pinkys
Friday 6:00 PM

-- The Extra Credit Section --

For links to the articles and material referenced in this week's episode check out this week's page from our podcast dashboard!

This Episode's Podcast Dashboard

Phone Systems for Ask Noah provided by Voxtelesys

Join us in our dedicated chatroom #GeekLab:linuxdelta.com on Matrix

-- Stay In Touch --

Find all the resources for this show on the Ask Noah Dashboard

Ask Noah Dashboard

Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!

Altispeed Technologies

Contact Noah

live [at] asknoahshow.com

-- Twitter --

Noah - Kernellinux
Ask Noah Show
Altispeed Technologies

Support Ask Noah Show