Microsoft has issued a critical security advisory concerning a backdoor vulnerability (CVE-2024-3094) found within the widely used XZ Utils file compressor. This major flaw, with a maximum severity score of 10.0 on the CVSS scale, affects several popular Linux distributions including Fedora, Kali Linux, OpenSUSE, and Alpine Linux. Potentially, this vulnerability could have had a widespread global impact.

Andres Freund was investigating a 500-millisecond delay in SSH connections

Thankfully, a Microsoft Linux developer, Andres Freund, stumbled upon the issue while investigating a suspicious 500-millisecond delay in SSH connections. He uncovered a malicious backdoor embedded within the XZ software itself.

At the time of writing, only four out of 63 security vendors on VirtusTotal are correctly flagging this exploit as harmful. This incident highlights the importance of vigilance, as many users might have overlooked the seemingly minor delay. It also brings to attention the potential vulnerability of open-source software to malicious actors.

If you’re concerned about your system’s safety, versions 5.6.0 and 5.6.1 of XZ Utils are confirmed to be compromised. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) recommends using older, verified versions of the software as a precaution.

Several third-party tools can also help identify the vulnerability. Security firms Qualys and Binarly offer free scanners:

• Qualys: Look for VULNSIGS version 2.6.15-6, with the vulnerability ID (QID) “379548.”
• Binary: This free XZ backdoor scanner will display a message like “XZ malicious implant detected” if your system is affected.

RELATED:

• Tongue Gestures? Microsoft’s Future Products may Redefine Gesture Control (Or Not)
• Microsoft & OpenAI planning $100 billion supercomputer Stargate AI
• Lenovo Legion Y700 2023: Save $100 on this 8-inch gaming Android tablet
• Xiaomi Band 8 Genshin Impact custom edion get a huge discount.
• Best of MWC 2024: AI Phone, Transparent Laptop, 3D Tablet & More

(Via)

The post Microsoft Employee Discovers Critical Flaw in Linux Utility, Prevents Widespread Global Impact appeared first on Gizmochina.

A hidden malware operation has infiltrated the Linux community for a solid three years without raising alarms, says Kaspersky, a Russian cybersecurity firm. Despite Linux being hailed as a secure alternative to mainstream operating systems like Windows and macOS, it appears even the cybersecurity experts missed this one.

This quiet attack particularly exploited a so-called free download manager designed for Debian users. What’s unusual? This software was laced with malicious code way back since January 2020. It contained a hidden post-installation script that set off the malware, complete with comments in both Russian and Ukrainian.

Kaspersky’s investigation further revealed that once installed, the software acted as a Bash stealer, collecting sensitive data from the system. This includes saved passwords, browsing history, and even credentials for high-profile cloud services like AWS and Google Cloud.

Interestingly, the malware wasn’t distributed through the official website of the download manager but had been subtly posted on forums like Reddit and StackOverflow over two years. This crafty move allowed the malware to stay under the radar, essentially weaponizing the community’s trust.

The real kicker is the reason behind targeting Linux systems: they’re simply overlooked. According to Kaspersky, the actors exploited the fact that Linux machines don’t get as much scrutiny as their Windows and macOS counterparts.

While the genuine makers of the Free Download Manager remain tight-lipped, this incident should serve as a wake-up call. Being security savvy isn’t just for Windows or Mac users. The first step in safeguarding your system is sticking to verified download sources. Had users double-checked where they were downloading from, they would have dodged this malware bullet.

In an age where Linux is gaining popularity, it’s time the community revisits its assumptions about its in-built security. If even the experts missed this, what else is lurking in the corners of the Linux world?

RELATED:

• Samsung’s Linux on Galaxy Arriving Soon for Seamless Linux OS Access Through DeX
• ZTE executive elected as chairman of Linux Foundation AI and Data Foundation governing board
• Download the Best GCam APK for Vivo V27 Pro

(Via)

The post Linux was Being Infiltrated by Malware for 3 Years Without Raising any Alarms appeared first on Gizmochina.

Kubuntu has released the second generation of its flagship laptop, the Kubuntu Focus XE. With its sleek design, high-end hardware, and pre-installed Kubuntu 22.04 LTS GNU/Linux distribution, the Kubuntu Focus XE Gen 2 is aimed at power users and developers who demand top-notch performance and stability.

The new Kubuntu Focus XE Gen 2 laptop boasts several improvements over its predecessor, the Kubuntu Focus XE. It features a choice of 28-watt Intel Core i5-1240P or Core i7-1260P processors, which are part of Intel’s latest 12th-gen Core “Alder Lake” architecture. This results in up to a 60% boost in multi-core performance compared to the previous model, without raising the starting price of $895. The laptop also sports up to 64GB of RAM, and PCIe 4 NVMe storage.

The laptop also features a larger 53 Wh battery, providing longer battery life than the previous model. However, the 120Hz display of the previous model has been replaced by a 14-inch, 1920 x 1080 pixel matte display with a 60 Hz refresh rate.

Under the hood, the Kubuntu Focus XE Gen 2 features two SODIMM slots for DDR4-3200 memory and a single M.2 2280 slot for PCIe 4 storage. Additionally, the laptop includes a Thunderbolt 4 port, a USB 3.2 Gen 2 Type-C port (data only), two USB 3.2 Gen 1 Type-A ports, an HDMI 1.4b port, a Gigabit Ethernet port, a 3.5mm audio combo jack, an SD card reader.

The Kubuntu Focus XE Gen 2 comes equipped with a 1MP webcam with support for 720p video, stereo 2W speakers, an Intel AX201 wireless card with support for Wi-Fi 6 and Bluetooth 5.2, and a backlit keyboard. The laptop with dual fans and heat pipes is actively cooled, ensuring reliable and efficient performance.

Measuring 325 x 225 x 17.6mm (12.8″ x 8.9″ x 0.7″), and weighing only 1.45 kg (3.2 pounds), the Kubuntu Focus XE Gen 2 is a highly portable notebook. It has an aluminum lid and keyboard deck, along with a “resin” bottom and screen bezel, adding to its overall durability.

In conclusion, the Kubuntu Focus XE Gen 2 offers an excellent balance of performance, portability, and features. With its latest hardware and software configurations, the laptop caters to the needs of power users and developers who demand reliability, stability, and top-notch performance. The Kubuntu Focus XE Gen 2 is available now from the Kubuntu Focus website.

RELATED:

• HarmonyOS Performed Surprisingly Well when Installed on a PC
• Lenovo Savior Y9000P Gets Rid of one of the Biggest Disadvantage of Gaming Laptops
• Apple Reportedly Plans To Launch 15.5-inch MacBook Air in April
• Lenovo Introduces New Windows Laptops Based on Alder Lake-N & Ryzen 7000
• Global Notebook Computer Market Records Lowest Shipments in a Decade

The post Kubuntu Focus XE Gen 2 Linux laptop launches with 12th Gen Intel CPUs, up to 64GB RAM appeared first on Gizmochina.

Planet Computers has announced that it is entering the desktop PC market segment with new ARM powered Linux computers. The new lineup is a part of its latest XR line of mini PCs, which is the first ever from the company. So lets have a look.

As per the official MWC 2023 announcement earlier today (27th February 2023), the London based tech startup’s latest PCs run on the Ubuntu OS. It will also be a part of its new range of Linux mini desktop PCs that are being crowdfunding on Indiegogo. CEO Janko Mrsic-Flogel stated that “The XR series is Planet’s first foray into the personal computer market. By productizing Linux into a mini desktop PC, the XR is another step towards creating a more open and inclusive computing ecosystem.”

The new line includes the XR1 and XR2 with former being powered by a 4 core processor, while the latter is equipped with an 8 core CPU. The XR1 features 4GB of RAM and 32GB of internal storage. On the other hand, the XR2 houses a Mali G610 GPU, 4GB to 32GB of RAM, and 32GB to 256Gb of internal storage. One can even expand this to include 2TB with add ons. Notably, the Linux mini PC also sports a colored touchscreen that offers controls and details on system performance.

Mrsic-Flogel further added that “Planet has always innovated with device form factors and we are especially excited about the XR’s integrated color touchscreen, which gives Linux users a new level of control and confidence, as well as the perfect platform for developers to access smart Linux appliances.” The XR lineup will be made available on Indiegogo, with the XR1 costing around £399 while the XR2 costs £499.

RELATED:

• Our Entire MWC 2023 Coverage Here
• Get up to $100 OFF on Beelink Ser6/ Ser6 Pro Mini PC (Coupon)
• Morefine M9 mini-pc With Intel Alder Lake-N Processors Now Selling for $199
• Asus unveils PL64 mini PC with Intel Alderlake processors and a tough shell
• Download Gcam Go 3.8.47 APK for all Android devices
• Best smart photo printers: Canon, HP, and others

The post Planet Computers Announces Linux Mini Desktop PCs with Touchscreen Support appeared first on Gizmochina.

Apple is growing its laptop market withApple continues its growth in the laptop market with M series processors and setting new performance standards. However, MacBooks have weaknesses. Traditional processors outperform M-series silicon in terms of software support. Nevertheless, Apple is quickly catching up with its competitors. Lastly, the release of the Linux 6.2 kernel brought a significant milestone for new Mac users. Here are the details…

Linux 6.2: The First Mainstream Linux Kernel for Apple M1 Chips Arrives

The release of the Linux 6.2 kernel brought with it a significant milestone for Apple Mac users. With upstream support for the Apple M1 Pro, M1 Max, and M1 Ultra chips, users with newer Macs can now run Linux on their machines. This is particularly exciting news for tech enthusiasts who have been eagerly waiting for Linux to run on the M1-powered machines.

The release of the Linux 6.2 kernel brought with it a significant milestone for Mac users. With upstream support for the Apple M1 Pro, M1 Max, and M1 Ultra chips, users with newer Macs can now run Linux on their machines. This is particularly exciting news for tech enthusiasts who have been eagerly waiting for Linux to run on the M1-powered machines.

Fortunately, the Asahi Linux team, led by software engineer Alyssa Rosenzweig, was up to the challenge. By July 2022, Linux on ARM and the M1 became a reality. Today, this support is finally ready for mainline Linux users. The inclusion of M1 support in the Linux 6.2 kernel is expected to be a game-changer for Linux Mac users. While the support is still experimental at this point, it is expected to become the default kernel for Ubuntu 23.04 and to be included in Fedora 38 before the late April release of Linux 6.3.

However, M1 support is not the only notable addition to the Linux 6.2 kernel. Contributions from companies such as Intel, AMD, Google, and Red Hat have resulted in numerous features being added to the kernel. For example, the kernel now includes stable support for Intel Arc Graphics and initial support for Nvidia GeForce RTX 30 series “Ampere” accelerated graphics with Nouveau open-source code.

Updated drivers have also been included, such as support for Sony DualShock 4 gamepads, sensors, and fans in the OneXPlayer gaming handheld, Habana Labs’ Gaudi2 AI accelerator, and Asus motherboards. Moreover, the Linux 6.2 kernel includes Call Depth Tracking to help improve performance on older Intel Skylake-era PCs, along with various file-system driver enhancements and security improvements. The NTFS3 file kernel driver has also been improved and updated with new mount options. Overall, the Linux 6.2 kernel provides significant new hardware enablement and features for Linux users.

RELATED:

• Apple’s Latest Press Event Showcases Upcoming Games for iPhone, iPad, Apple TV, and Mac
• Apple First Gen iPhone That Is Still in the Box Sees an Auction Bid…
• Poco C55 Launched in India with 6.71-inch HD+ display, Helio G85, 5,000mAh Battery and More
• Realme GT 3 for China Likely to Feature Snapdragon 8 Gen 3, Launch Timeframe Confirmed
• TWS Shipments In India Record A Whopping 85 Percent YoY Growth In 2022: Counterpoint Research

(via)

The post Linux 6.2 Offers Game-Changing Support for Apple M1-Powered Macs appeared first on Gizmochina.

The upcoming Linux 6.2 kernel will include new features for ChromeOS, Google’s operating system for Chromebooks. One of the key new features is a driver for the ChromeOS Human Presence Sensor (HPS), which is used for detecting when one or more humans are present in front of a Chromebook.

Linux 6.2 Adding Driver for Google’s ChromeOS Human Presence Sensor

The Linux 6.2 kernel is set to include a new driver for Google’s ChromeOS Human Presence Sensor (HPS), which is used for detecting when one or more humans are present in front of a Chromebook. The cros_hps_i2c driver will be mainlined in the Linux 6.2 kernel to support the HPS, which is found on newer Chromebooks.

The driver doesn’t report on the presence of humans, but user-space interfacing with the sensor can be done through an exposed character device. The HPS is used for a variety of purposes, such as adaptive backlight handling and deferring the screensaver. The patch-set from Google explains the new driver and its capabilities:

“This patch introduces a driver for the ChromeOS human presence sensor (aka. HPS). The driver supports a sensor connected to the I2C bus and identified as “GOOG0020” in the ACPI tables. 

When loaded, the driver exports the sensor to userspace through a character device. This device only supports power management, i.e., communication with the sensor must be done through regular I2C transmissions from userspace. 

Power management is implemented by enabling the respective power GPIO while at least one userspace process holds an open fd on the character device. By default, the device is powered down if there are no active clients.”

Privacy-conscious users can rest easy knowing that the hardware firmware for the HPS is open-source. The firmware, I2C protocol, and other technical documentation can be found on GoogleSource.com. The new driver was sent in as part of the Chrome platform updates for the Linux 6.2 merge window. In addition to the new HPS driver, other updates in the pull request include setting PROBE_PREFER_ASYNCHRONOUS for more ChromeOS drivers to speed up boot times for Chromebooks.

RELATED:

• Google Pixel December 2022 Feature Drop – Check out what’s new
• MIUI 14 Brings Xiao AI 6.0 With Pixel Call Assistant-like Features and More
• Google Pixel Fold Surfaces in High-quality Leaked Renders, Dimensions and Screen Size Tipped
• Google Chrome Will Now Consume Much Less RAM And Energy
• Google debuts Android 13 QPR2 Beta 1 update for Pixel smartphones

(via)

The post Google’s ChromeOS Gets an Update to Detect Number of People Sitting at a Computer appeared first on Gizmochina.

The Dell XPS 13 Plus is the first OEM PC certified for Ubuntu 22.04 Long-Term Support, according to an announcement from Dell and Canonical. This comes ten years after Project Sputnik introduced a groundbreaking mix of Linux preloaded on a commercial notebook (LTS). This makes it a simple process to have a PC that simply functions without having to worry about whether or not each component is prepared to work with Linux.

The laptop already had Linux-equipped Developer Edition units that started at $1,289.00, but they still come pre-installed with the 20.04 LTS operating system. The end of normal support for this version is set for 2027, and the end of life is set for 2032, so long-term support releases do exactly what they say on the tin. As each component of certified devices is verified in a lab to ensure compatibility, your device will have the correct drivers loaded to ensure that all of its functions operate as intended.

That certainly applies to laptops that come pre-installed with Linux on Developer Edition models, but it also holds true if you’re upgrading an older computer that was pre-installed with Windows 11. Barton George, a marketing executive at Dell, was one of the persons in charge of Project Sputnik. He said that the Developer Edition label was added on purpose, to prevent users from inadvertently purchasing a Linux laptop to save a few dollars and experiencing an unexpected experience, in an interview with Forbes in 2019. It seems unlikely that the authorized list will remain this small indefinitely given that Dell already offers Ubuntu on a variety of other devices.

There were many improvements included in the Ubuntu 22.04 LTS package, which was launched on April 21 this year. These include improved Bluetooth audio device support, new touchpad gestures, and improved battery management.

There are several ways, according to Dell, to configure your XPS 13 Plus and its “capacitive touch function row” with a hardware-optimized version of 22.04. A new XPS 13 Plus laptop may be ordered and is expected to ship starting in August. If not, you can run a fresh install and be ready to go if you’re in a rush (and you should be). The final option is to postpone the upgrade process until Ubuntu 22.04.1 is released on August 4 so you may do as little work as possible. This will turn on the upgrade path for all LTS users.

RELATED

• Dell launches Alienware m17 & x17 gaming laptops with a 480Hz refresh rate
• Dell G16 Gaming laptop with 12th-gen Core i7 processor, up to 16GB RAM launched
• Ubuntu’s Publishers make it easier to run Linux on the M1 Mac
• Best Portable Monitors 2022 – Lenovo, Asus, Lepow, Viewsonic

The post Dell XPS 13 Plus, the first OEM PC certified for Ubuntu 22.04 appeared first on Gizmochina.

Earlier today, the publisher of Ubuntu, Canonical, released ‘the quickest way’ to run Linux cross-platforms on M1 Macs. Multipass allows users to launch a virtual machine image with a single command and run Linux on an M1 Mac in less than 30 seconds.

While Canonical has claimed to be the first platform to convert the M1 mac on a Linux computer, the Linux Kernel Devs on the other hand have been improving their platform monthly to offer the most pleasant experience possible on the Mac, stating their Linux project is now “Usable as a basic desktop”.

For now, Multipass is probably the easiest and most feature-rich way to use Linux on the M1 Mac. Nathen Hart, the Canonical product manager stated that “Canonical wants to get developers running on Linux faster than any other option on the market, and the Multipass team has helped accomplish that”. In other words, the Multipass would be quite useful for cloud application developers, web developers, and other Linux-based developers looking to get their hands on Apple’s M1 Mac.

Multipass can launch and run virtual machines and configure them with cloud-init like a public cloud. It allows you to prototype your cloud launches locally for free. Multipass version 1.8.0 also allows users to bind commands within a VM to commands on the host OS.

RELATED

• Apple MacBook Pro & iPad Pro to sport new OLED panels that offer higher brightness: Report
• Apple shipped 6.5 million MacBook devices in Q3 2021, reports Strategy Analytics
• Apple to roll out update that will allow iPhone 13 screen swaps without breaking Face ID

The post Ubuntu’s Publishers make it easier to run Linux on the M1 Mac appeared first on Gizmochina.

Apple‘s attempts to distinguish its iPad lineup with a dedicated operating system has been met with positive reception overall. Now, China’s first Linux based Distro (Distribution) called JingOS has just been unveiled and it aims to provide the same level of functionality that the iPadOS offers.

JingOS was built with the idea of improving the functionality and productivity of a tablet overall. So, the team behind the new operating system took inspiration from the Cupertino based giant’s iPadOS platform to offer a simple/clean, yet productive and efficient UI design that can ensure that your tablets are a mini computer that one can work on, on the go. JingOS is not only a tablet OS but a full function Linux distro.

Editor’s Pick: Top stories from last week: iQOO 7 and Galaxy S21 series launched, CES 2021, and more

With productivity in mind, the OS also supports full mouse and keyboard support. Furthermore, the current selections of apps designed for this platform also support both touch mode and desktop mode. Meaning, one can use it in the form of a laptop and as a notebook. So for those looking for an iPad like experience for their tablets, JingOS might be the next best thing.

Notably, JingOS is also being developed for smartphones as well, and will be available before the end of this year, while the tablet variant will be launch before the end of this month. At the moment, the operating system is supported on just the Huawei MateBook 14 and the Microsoft Surface 6. Unfortunately, it has yet to be tested on other devices but the company aims to bring support for other tablets including ARM based ones as well in the near future.

UP NEXT: Huawei MateBook X Pro 2021 with 3K display and 11th gen Intel chipset now up for pre order

The post JingOS arrives as China’s first Linux Distro, offers iPadOS-like features and functions appeared first on Gizmochina.

Deepin, a Linux operating system for computers, seems to be getting ready to power tablets. An image of the Deepin OS powering a laptop as well as a tablet has surfaced online through Weibo.

This seems to indicate that the company is gearing up to launch a tablet version of its operating system and thus, will support multi-terminal collaboration. Currently, not much information is available regarding this development.

EDITOR’S PICK: Sony has reportedly increased the upcoming PlayStation 5 gaming console’s production by 50 percent

For those who are unaware, the Deepin operating system is available globally and is known for having a beautiful user interface. It comes with support for 33 languages ​​worldwide and has accumulated more than 80 million downloads.

The operating system is being developed by China-based Wuhan Deepin Technology Co., Ltd. The company generates most of its revenue through the sale of technical support and other services related to the OS.

The Deepin 20 Beta, which was expected to release in January, was finally released in April this year. The new distribution features Ubuntu 20.04 coupled with the Deepin Desktop Environment. It comes with a built-in AI assistant, Cloud Sync for easily syncing commonly changed settings across multiple machines, and an overhauled Control Center.

UP NEXT: Xiaomi starts crowdfunding 8H Smart Mattress in China for a starting price of 4,599 yuan (~$657)

(Via)

The post Deepin OS could soon support tablets, suggests newly leaked images appeared first on Gizmochina.

Huawei is officially joining the OIN (Open Invention Network), the largest patent production group which will arrive as a shock to many. On the one side, the Chinese tech giant has been accused of stealing trade secrets from the US, while at the same time the company made $6 billion in patent royalties since 2001 from US based companies alone.

For those unaware, OIN is a major patent non-aggression community. Its mission is to enable Linux, its related software and programmers to develop and monetize the Linux and open source software. The primary focus of this being able to monitize without having face issues regarding patent infringement and lawsuits. This is done by practicing patent non-aggression in core Linux and its open source technology. In simpler terms, companies in the group cross license the Linux System to one another without the need for a royalty fee.

Now, with Huawei joining the group, the impacts could be huge. This is due to the Chinese brand holding a massive portfolio of IP Information and communications technology (ICT) patents. According to OIN CEO, Keith Bergelt, he “appreciates Huawei joining OIN and supporting patent non-aggression in the core of Linux and adjacent open-source software.”

Editor’s Pick: The Mi Fan Festival 2020 Sale Featuring Great Discounts, Big Coupons and Unmissable Deals Kicks Off on Gearbest

A little known fact about Huawei which is generally unknown is that the company is one of the top contributors to the Linux Kernel. It is also a Platinum member of the Linux Foundation through its other key open source projects. This move is being appreciated since it portrays Huawei’s strong support for open source and open collaboration. Meaning, shared patents, and technology that benefits all.

Huawei’s Head of Global Intellectual Property, Jianxin Ding, stated that “Huawei is committed to offering the highest quality ICT and smart devices.” He mentioned that supporting the non-aggression patent in Linux will showcase the company’s commitment to innovation. Furthermore, Jianxin also said that the company is always open to working with both US based and non-US based firms.

UP NEXT: Apple patents reveal an iPhone that can used underwater, another shows automatic screen adjustment

(Via)

The post Huawei joins the OIN, the largest open source patent protection group appeared first on Gizmochina.

The ongoing trade war between China and the U.S. has left Huawei scrambling for alternative suppliers for its products. The recently announced Mate 30 series comes without Google Apps despite running on the new Android 10 iteration. Similarly, Huawei and Honor’s notebook lineup is being relaunched with Linux on board. Today, another one of Honor’s MagicBook 2019 lineup joins this Linux club.

After the Honor MagicBook Pro, the Honor MagicBook 2019 Ryzen lineup is also getting a Linux version. This particular version naturally starts at a much cheaper price tag than the Windows model. While the Windows 10 powered Ryzen 5 model with 8GB RAM and 256GB SSD is priced at 3999 yuan ($561), the Linux version is 300 yuan ($42) cheaper for the exact same configuration.

The Honor MagicBook 2019 Ryzen edition running on the Linux platform was first made available for sale earlier today. All the units were picked up quickly and at the time of publishing this article, the model was out of stock. Unfortunately, Honor hasn’t revealed how many units were put up for sale today.

Huawei has tied up with Deepin, a Chinese software brand with a beautiful and polished desktop Linux distribution. The company already has a bunch of laptops like the Huawei Matebook X Pro, Matebook 13 and Matebook 14 running on this Linux distribution. Just like this MagicBook 2019 Ryzen Linux edition, the other Linux based Matebook laptops are priced 300 yuan (~$42) less than the Windows 10-running models.

While we may see a future where Huawei’s HarmonyOS makes it to laptops, for now, this Linux based distribution seems like a decent alternative to Microsoft’s Windows 10 OS.

UP NEXT: Huawei, OPPO, OnePlus and Realme to soon rollout unified push notifications

The post Yet another Huawei laptop lineup joins the Linux club! appeared first on Gizmochina.