An X11-related bug issue I contributed to just got closed because the latest KDE release is Wayland-only.
Congrats to KDE but I am now gonna be violently booted to Wayland/XWayland which is not great for my workflow.
Some people are trying to work here!
And rely on closed-source commercial apps which are in no hurry to support Wayland with all of its quirks.
I mean, in Wayland mode, it crashes when you, for example, rotate a mesh. It also, as you move a mesh the slightest bit, will suddenly lurch the mesh off the screen. You're still attached to it. You can drag it back with the mouse like you're reeling in a trout. When you try to minimize a screen, it won't do it. You have to drag the screen somewhere else. Then it usually will. If it won't, drag it again.
I'm going back to X11 mode, where it still crashes, but with less stupidity along the way.
Unreal consistently gives Linux developers the middle finger.
The labwc project has released version 0.20.3 of its lightweight, stacking Wayland compositor inspired by Openbox.
This update adds support for libinput's native custom pointer acceleration profile, allowing users to configure accelProfile, motionCurve, scrollCurve, and fallbackCurve settings.
It also expands libinput configuration with clickfingerButtonMap and rotationAngle options, fixes a screen-locking input focus issue, and r…
en.hacks.gr/kykloforise-to-lab…
#Wayland #Linux #Openbox #Compositor
Labwc 0.20.3 adds settings for pointer movement, scrolling, and touchpad buttons, along with fixes for screen locking and windows.Anastasis Vasileiadis (Hacks.gr)
Upgraded to PopOS 24.04 and Cosmic and kept getting stream freezes on OBS until I switched back to Cinammon + #x11
Curious if anyone got tips or had more success on how to make streaming stable on Cosmic and/or #Wayland in general
Behavior was basically ever few minutes video would freeze but audio was fine (Pipewire Window capture, OBS v 33 flatpak)
Googled a lot and only ran into audio troubleshooting or general "Use windows for streaming" advice
I found something unexpected today:
the “milk” X11 Window Manager
github.com/mirvoxtm/milk
It is written in the Odin programming language (compiled). The install script pulls down the source and Odin compiler and compiles and installs after after you questions about how you’d like it set up.
I had trouble getting audio and brightness working. I was on Devuan, but decided to install a Void derivative distro. Had the same problems on that. It ended up being that I needed to create an .xinitrc file and put a line in it to start dbus and pulseaudio (I removed pipewire from Neko-Void).
cat ~/.xinitrc
dbus-run-session pulseaudio --start#WindowManager #Linux #Void #Odin #X11
A lightweight, beautiful, and beginner-friendly X11 desktop and window manager. - mirvoxtm/milkGitHub
KDE developers shared upcoming improvements for Plasma 6.9, scheduled for release in late February 2027.
Updates include Wayland Picture-in-Picture protocol support enabled by default in KWin, improved multi-monitor window position memory, XWayland input restriction settings, browser download controls in native notifications, and Brave browser support in Plasma Browser Integration.
en.hacks.gr/ti-fernei-to-kde-p…
#KDE #Linux #Wayland #OpenSource
The creators of KDE have presented the next changes they are preparing for Plasma 6.9, which is scheduled for release at the end of February 2027.Alexandros Vyzantios (Hacks.gr)
Switching to @netbsd from Linux has been one of the most enjoyable and rewarding things I have done in the tech world in years.
All of it. The community, the software, reading blogs again to get something to work, joining forums, joining IRC channels. Absolutely all of it.
I'm actually finding joy in tech again.
🔐 The offline master keys were not offline. Zimmer, who ran the largest group of hijacked Tor relays, said so in his post-mortem. Copies sat in a backup on his management server, encrypted with a password the attacker already found. 😬
He was just as blunt about the cause: The root cause was ours: one password reused for SSH login, sudo, and the backup passphrase, stored in plaintext on both servers, plus SSH password authentication left enabled on the internet-facing management server. Credit to him for putting that in writing. 👏 I'd guess plenty of servers out there would earn the same sentence, maybe a few of yours.
In early October, attackers took over more than 300 Tor exit relays and rerouted SSH connections to 12 interception servers. At the peak on October 4, those relays carried 7.46% of Tor's exit capacity, according to an analysis of public directory data. Zimmer's own break-in came earlier. On August 28, the attacker logged into his management server with the account password on the first try and gained root within five minutes.
The victims got hit through passwords too. To get burned, you had to accept the interceptor's host key and type a password. Some people saw an OpenSSH warning that the server had changed... others just got the usual prompt to accept a new key. If you used key-based login, the attacker couldn't pass it through to the real server because the signature is tied to that session.
The backdoor is Ebury version 1.8.3, a single library file that leaves the packaged library alone, so the normal package checks come back clean. Zimmer's servers showed none of the host-level signs on the Tor Projects checklist. The only thing that gave it away was the changed exit policy.
🚨 If you run anything with SSH open to the internet, turn off password login and use keys. If you accepted an unfamiliar or changed host key over Tor between October 1 and 5, assume that password is stolen, change it, and check the server. And if you're poking around a box you suspect, log in with a key, since Ebury captures typed passwords.
Nobody knows yet how the other 58 operators got hit. On FranTech, the network behind BuyVM, 71 of 101 relays switched to the attackers' policy, compared with 13 of 9,054 hosted elsewhere. The researcher who spotted this asked whether the attackers got in at the hosting provider level, and so far nobody has answered.
thehackernews.com/2026/10/atta…
#Cybersecurity #InfoSec #Tor #SSH #Linux #Malware #ThreatIntel #IncidentResponse #RiskManagement #security #privacy #cloud #darkweb
Attackers hijacked over 300 Tor exit relays to intercept SSH connections and steal passwords from users who accepted changed host keys.The Hacker News
Yesterday, as I sat here, using a laptop running on Free software written and maintained by volunteers, to connect, by means of a secure tunnel formed by Free software written and maintained by volunteers, to multiple servers, all running Free software written and maintained by volunteers, to apply patches prepared urgently by volunteers to resolve security vulnerabilities, I felt *incredibly* grateful for every single one of those volunteers, who makes the fact that I could do *any* of this possible.
Thank you, genuinely.
If you run #Friendica or maintain a #Linux web #server running #PHP, whether bare metal, #Docker, or anything in between: **update PHP immediately.**
Two critical #RCE (Remote Code Execution) vulnerabilities affect PHP:
• CVE-2026-109618
• CVE-2026-109619
Currently fixed versions:
• PHP 8.5.12
• PHP 8.4.27
• PHP 8.3.36
• PHP 8.2.35
This affects PHP servers, PHP-FPM, Docker images and containers containing PHP, and applications such as Friendica.
Update your PHP packages. If you're using containers, pull/rebuild your images and recreate the containers.
Don't just update the application. Make sure the underlying PHP runtime is patched too.
Ugh: I've now completely lost the ability to unlock the screen on this Debian/Wayland/nVidia hardware setup. What complicates it is the Gigabyte display with built-in KVM.
I used to be able to unlock the screen with "loginctl unlock-session" from an ssh session from the other machine on the KVM. Now all I get is a blank screen with a single '_' character at upper left. Changing TTY starts another gdm greeter, which hangs. This is not fun
This seems like a Fediverse question: spouse has a Logitech G502 HERO mouse and wants to configure one of the buttons to act as a shift key, which seems to be a rare goal. I've found no helpful forum posts about doing this on #Wayland at all. (Running #Bazzite #Linux.)
Piper is failing to make changes, looks like maybe a timeout. However, on-device profiles seem to be set up right, per Solaar. Going to dive deeper into logs soon, but thought I'd see if I could snare any gaming-on-Linux experts.
Linux users are not allowed to make fun of Microsoft for breaking things and making the user experience generally worse as long as Wayland exists
#Linux #Ubuntu #Wayland #Tech #Technology
Die LUG Reutlingen und LUG Tübingen zeigen, was es mit Linux auf sich hat.
Datum und Uhrzeit: 17.10.2026, 10:30 - 13:30
Wir zeigen:
• Linux auf dem Desktop
• Linux und freie Apps im Alltag
• Linux zum Spielen
• Linux für ältere Computer
Stadtbücherei Tübingen
Hauptstelle Thekla-Waitz-Studio
Nonnengasse 19
72070 Tübingen
#lpd #linux #reutlingen #tübingen
RT
After 30 years of free alternatives
>We still don't know what audio system we should use
>We still don't know what display server we should use
>We still don't know what widget toolkit we should use
>We still don't know what DE we should use
>We still don't know how to fix most DE bugs
>We still don't know what init system we should use
And the funniest one
>We still haven't figured out what's the best way to install software
📢 XDC 2026 update!
The full schedule of talks is now available! Check out what's coming to Toronto, Canada this September:
🔗 xdc2026.x.org
The CfP has also reopened for Lightning Talks, Workshops, Meetings & Hacking Sessions (subject to available time in the schedule):
🔗 indico.freedesktop.org/event/1…
Planning to attend? Registration is free, make sure to sign up:
🔗 indico.freedesktop.org/event/1…
why can't I fuckiNG MIDDLE CLICK PASTE IN GAJIM
(I'm sure it's because the Gnome people decided to fuck us over)
I miss X11, where things ACTUALLY WORKED. Where shit like middle-click paste couldn't be arbitrarily blocked by the GUI-toolkit people because they don't like us Users™ having such nice things as /features/.
"oh but X needs to die!!" no it doesn't.
"oh but Wayland is BETTER!" no it isn't.
"oh but you need Wayland for HDR and stuff!" yeah that was a /choice/ to not implement those for X11.
"oh but SECURITY!" this isn't a phone, we're not running random proprietary crap.
bonus: "oh but you can use a different DE!" and ditch /everything/ that's nice about KDE? (and land on something that uses GTK and is beholden to the Gnome people, who are the type of people to arbitrarily block middle-click paste in their GUI toolkit?)
What South Tyrol or Pordenone in Italy are doing now—including collecting old computers from businesses, reinstalling Linux on them, and sending them to schools—or creating a free software operating system that includes free software and educational resources, is exactly what we were doing twenty to ten years ago. The same valuable work is still being done in Europe, but Taiwan has almost given up?
義大利的 South Tyrol，或是 Pordenone ，現在在做的事情，包括向商業公司募集舊電腦改灌 Linux 並送到學校，或是打造一個自由軟體的作業系統收錄自由軟體與教育資源，都跟我們二十年前到十年前在做的事一樣。同樣的價值現在歐洲還在進行，但台灣已經差不多放棄了？
Last review of the season, and let's go to the point: it's a bad model. I don't recommended this one. I'm not even submitting the video to Gaomon for review before posting because I know they would ask me to not post it (it happened in the past with another brand). But I think it should be also known, that's my role in reviews: cover the bad and the good.
- On Youtube: youtube.com/watch?v=YOf02Ss4Hv…
- On Peertube: peertube.touhoppai.moe/w/eFHWM…
#linux #hardware #gaomon #review
My review of the Gaomon PD1161 V2. Let's go to the point: it's a bad model. I don't recommended this one. I'm not even submiting the video to Gaomon for review before posting because I know they wo...Krita tutorials (Touhoppai Tube)
Today marks Linux’s 35th birthday! 🎉🎂
35 years of milestones that took a hobby project from one developer’s announcement to the foundation of much of modern computing
Here is a look at the milestones that shaped its remarkable journey 😎👇
Find high-res pdf ebooks with all my Linux related infographics at study-notes.org
#linux #software #technology #computer #opensource
Explore high-quality infographics on Linux, cybersecurity, and networking. Perfect for certifications, technical knowledge, and tech career upskilling.study-notes.org
@1password is funding known racist and all around asshole #DHH's insecure #Linux distro #Omarchy? WTF is this about? I've been a #1Password customer for many years but it's not possible to recommend after this. How about you claw this money back right now and never touch any of his projects again with a ten foot pole? 😡
alilleybrinker.com/blog/1passw…
1Password has committed $300,000 to Omarchy. This is unacceptable and must be rescinded.Andrew Lilley Brinker
My review on GNU/Linux of the drawing tablet XPpen Artist 12 3rd is now published! It's a clever little display drawing tablet and relatively cheap, I’m truly loving it! I've already used it to finish a comic on the train, and it'll be my my go-to device for travelling from now on. 🩷 Taking the pink one was the best decision!
- On Youtube: youtube.com/watch?v=7deVfSmdSd…
- On Peertube: peertube.touhoppai.moe/w/hRxT1…
- Companion blog post: davidrevoy.com/article1169/xpp…
#linux #hardware #xppen #review
▶️ Technical blog-post: https://www.davidrevoy.com/index.php?tag/hardware (will appear 1 hour after the release of the video) ⭐PROMO CODE⭐: DAVIDR15 get 10€ (for a basket of more 159€) and it's som...Krita tutorials (Touhoppai Tube)
Did you just put #Linux on a computer for the first time but don't know what apps to install on it? I search every week for useful #LinuxApps , and these are three that are definitely worth a try.
newinlinux.com/3-more-neat-lin…
#OpenSource
Trying this week: a map exploration app that's fully global, a better command for reading files, and a drawing app that makes pixel art easy.Jordan Gloor (New In Linux)
"AI-generated commands on your production RHEL systems" — sounds terrifying until you see the guardrails.
The MCP server for RHEL now has guarded command execution: a gatekeeper AI validates every command, write operations require human approval, and systemd-run sandboxes the blast radius.
redhat.com/en/blog/dynamic-tro…
#RHEL #MCP #AI #SysAdmin #Linux
Learn how to troubleshoot Red Hat Enterprise Linux issues with AI-assisted guarded command execution in MCP server.Brian Smith (Red Hat)
What's good for hardware is good for the budget … and environment! 🌻
LliureX #Linux with #KDEPlasma in Valencian schools saves the public administration *3.5 million euros a year* for 110,000 computers.
[1]* School HW has lifespan up to 18 years while running up-to-date software
[2]* Cheap easy-to-manage "light clients" ideal for very old upcycled HW
[3]* LliureX-Shutdowner saves energy by turning off unused computers school-wide
[4]@kde
Okay, this is literally incomprehensible: on my Alpine v3.24 VPS, drill github.com, nslookup github.com, getent ahosts github.com, host github.com, ping github.com, lynx https://github.com/, and manually sending hand-written queries to the configured DNS servers all return/use the correct IPv4 address, and return nothing as expected when querying for AAAA records (since github is shit and doesn't support IPv6).
And yet, curl and git both have completely nonsense IPv6 addresses returned when resolving (they're random Cloudflare addresses) alongside the correct IPv4 address, and then prioritize them. Those tools also completely ignore any overrides in /etc/hosts and I can't find any way to see what fucking broken bullshit they're doing to resolve DNS (because it's apparently not fucking getaddrinfo nor manually reading /etc/resolv.conf).
There is literally no possible source for those addresses to be returned when resolving github.com AFAICT and no way to override them other than having to edit literally everything that might touch github to add -4 to those utilities' command lines
(It's also been doing it for months with multiple different DNS servers, it's not a transient issue)
