Ask Noah Show 390

This week Vincent Danen the VP of product security from Red Hat joins the Ask Noah Show to talk about Open Source security practices. We take your calls, answer your questions, and give you an update about The Linux Challenge Coin. -- During The Show -- 01:50 Caller Nitro Phone Pixel 8 with GrapheneOS flashed on it 05:58 Remote Access Via Browser? - Craig Ethical/Liability issues Work policy violations Retroactive punishment Apache Guacamole (https://guacamole.apache.org/) Security concerns Set up a box on a VPS Boot off a flashdrive 13:42 App Image Allows Total Control - Charlie Apps Steve "pins" CurseForge News Wire Firefox 126 - Mozila (https://www.mozilla.org/en-US/firefox/126.0/releasenotes/) Mir 2.17 - Phoronix (https://www.phoronix.com/news/Mir-2.17-Released) Tails 6.3 - Tails (https://tails.net/news/version_6.3/) Endless OS 6 - Endless OS (https://www.endlessos.org/post/getting-started-with-endless-os-6) Wine 9.9 - Wine HQ (https://gitlab.winehq.org/wine/wine/-/releases/wine-9.9) XFS - Phoronix (https://www.phoronix.com/news/Linux-6.10-XFS) Open Smart Glasses - Gizmodo (https://gizmodo.com/cerebral-valley-hackers-build-20-open-source-smart-gla-1851476656) Hackbat - ZDnet (https://www.zdnet.com/article/meet-hackbat-an-open-source-more-powerful-flipper-zero-alternative/) 2 Year Infection - ArsTechnica (https://arstechnica.com/security/2024/05/ssh-backdoor-has-infected-400000-linux-servers-over-15-years-and-keeps-on-spreading/) Open Source AI OSI Initiative - IT Pro (https://www.itpro.com/software/open-source/the-debate-over-open-source-ai-has-reached-boiling-point-this-new-osi-initiative-looks-to-set-the-record-straight) 16:50 Linux Challenge Coin Not sure how to do this 4 Pillars People are behind the tech When Technology is at it's best it is Open Source Knowledge should be shared to empower users Be willing to do the work they don't want to do Mind Drip Doc (https://docs.minddripone.com/challenge-coin/) LinuxChallengeCoin.com (linuxchallengecoin.com) 34:45 Red Hat Interview Vincent Danen - Red Hat VP of Product Security SBOMs & Red Hat's response to the XZ vulnerability Benefit of open source Firebird project Don't restrict who can be a maintainer Red Hat's reaction to XZ vulnerability Effect of people supporting up stream Paths and tactics Investment in Open Source 48:30 AlmaLinux Engineering Steering Committee (ALESCo) Alma Blog (https://almalinux.org/blog/2024-05-21-introducing-alesco/) Open ELA (https://openela.org/about/) What standards are being "centered on"? How is this different from Open ELA? 52:00 SELF MeetUp Join Remotely Book your rooms now Register now ANS/SELF Meetup Pinkys (https://eatatpinkys.com/) Friday 6:00 PM -- The Extra Credit Section -- For links to the articles and material referenced in this week's episode check out this week's page from our podcast dashboard! This Episode's Podcast Dashboard (http://podcast.asknoahshow.com/390) Phone Systems for Ask Noah provided by Voxtelesys (http://www.voxtelesys.com/asknoah) Join us in our dedicated chatroom #GeekLab:linuxdelta.com on Matrix (https://element.linuxdelta.com/#/room/#geeklab:linuxdelta.com) -- Stay In Touch -- Find all the resources for this show on the Ask Noah Dashboard Ask Noah Dashboard (http://www.asknoahshow.com) Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show! Altispeed Technologies (http://www.altispeed.com/) Contact Noah live [at] asknoahshow.com -- Twitter -- Noah - Kernellinux (https://twitter.com/kernellinux) Ask Noah Show (https://twitter.com/asknoahshow) Altispeed Technologies (https://twitter.com/altispeed)