Episode 257: Supply Chain Attacks

Researchers at the University of Cambridge discovered a bug that affects most computer code compilers. Fedora 35 is out, Matrix is now offering a bridging service for $5/mo. We tackle your questions, plus our picks! -- During The Show -- 01:00 Steve's House Steve's Home Automation Disaster Zigbee 07:42 Questions about the Industry - Jackson Direction of the IT industry Cloud/User Devices Managed Hosted Services Start at the "Edge" move to the "Center" 15:44 Open Source Security Keys? - Matthew SoloKey (https://solokeys.com/) NitroKey (https://www.nitrokey.com/) OnlyKey (https://onlykey.io/) 1832 TwoBit Asks: SDR to find wireless mic interferance RTL-SDR (http://www.amazon.com/dp/B0129EBDS2/?tag=minddripmedia-20) 19:55 How to Learn Servers & Networking? - Cody Setup a Virtual Host Spin up Virtual Machines File Server Setup a Wiki Put the database and Wiki in different VLans TP Link Switch that supports VLans (http://www.amazon.com/dp/B00N0OHEMA/?tag=minddripmedia-20) GNS3 (https://www.gns3.com/software/download) 26:55 Planning Center / MDM solutions for IPads? - Brett Seafile (https://www.seafile.com/en/home/) 3CX (https://www.3cx.com/) Zabbix (https://www.zabbix.com/) SnipeIT (https://snipeitapp.com/) Pi-hole (https://pi-hole.net/) iPad MDM? OpenLP (https://openlp.org/) 30:30 Risc V & CPU Fragmentation - Chris Competition is good 34:38 Matrix Web Chat - Chris Yes Matrix will work! 37:20 Ticketing System - Matt OCS Inventory (https://ocsinventory-ng.org/?lang=en) 40:15 Pick of the Week Beautiful Cross-Platform Open-Source Download Manager Motrix (https://motrix.app/) Its Foss Atricle (https://itsfoss.com/motrix/) 41:55 Gadget of the Week Elecrow Raspberry Pi Touchscreen Monitor 5" 800x480 HDMI/USB Amazon Affiliate Link (http://www.amazon.com/dp/B07FDYXPT7/?tag=minddripmedia-20) 44:00 Element One A new service from matrix folks to bridge whatsapp, signal, telegram, and more Element Blog post (https://element.io/element-one) Element One is not a dedicated home server 50:26 Fedora 35 Fedora Cloud now uses BTRFS Wireplumber for Pipewire (Audio and Video) Fedora Kinoite And much more! Fedora Magazine Article (https://fedoramagazine.org/announcing-fedora-35/) 52:48 Supply Chain Attacks Unicode "Bidi" Vulnerability Krebs on Security Post (https://krebsonsecurity.com/2021/11/trojan-source-bug-threatens-the-security-of-all-code/) Red Hat shell line (https://access.redhat.com/security/vulnerabilities/RHSB-2021-007) Fedora Pagure PR (https://pagure.io/pagure/c/8bacd4da4fa6de578b818aa7a4b36bbeaaa243d7?branch=master) Original Vulnerability Site (https://www.trojansource.codes/)#### 01:00 Steve's House Steve's Home Automation Disaster Zigbee 07:42 Questions about the Industry - Jackson Direction of the IT industry Cloud/User Devices Managed Hosted Services Start at the "Edge" move to the "Center" 15:44 Open Source Security Keys? - Matthew SoloKey (https://solokeys.com/) NitroKey (https://www.nitrokey.com/) OnlyKey (https://onlykey.io/) 1832 TwoBit Asks: SDR to find wireless mic interferance RTL-SDR (http://www.amazon.com/dp/B0129EBDS2/?tag=minddripmedia-20) 19:55 How to Learn Servers & Networking? - Cody Setup a Virtual Host Spin up Virtual Machines File Server Setup a Wiki Put the database and Wiki in different VLans TP Link Switch that supports VLans (http://www.amazon.com/dp/B00N0OHEMA/?tag=minddripmedia-20) GNS3 (https://www.gns3.com/software/download) 26:55 Planning Center / MDM solutions for IPads? - Brett Seafile (https://www.seafile.com/en/home/) 3CX (https://www.3cx.com/) Zabbix (https://www.zabbix.com/) SnipeIT (https://snipeitapp.com/) Pi-hole (https://pi-hole.net/) iPad MDM? OpenLP (https://openlp.org/) 30:30 Risc V & CPU Fragmentation - Chris Competition is good 34:38 Matrix Web Chat - Chris Yes Matrix will work! 37:20 Ticketing System - Matt OCS Inventory (https://ocsinventory-ng.org/?lang=en) 40:15 Pick of the Week Beautiful Cross-Platform Open-Source Download Manager Motrix (https://motrix.app/) Its Foss Atricle (https://itsfoss.com/motrix/) 41:55 Gadget of the Week Elecrow Raspberry Pi Touchscreen Monitor 5" 800x480 HDMI/USB Amazon Affiliate Link (http://www.amazon.com/dp/B07FDYXPT7/?tag=minddripmedia-20) 44:00 Element One A new service from matrix folks to bridge whatsapp, signal, telegram, and more Element Blog post (https://element.io/element-one) Element One is not a dedicated home server 50:26 Fedora 35 Fedora Cloud now uses BTRFS Wireplumber for Pipewire (Audio and Video) Fedora Kinoite And much more! Fedora Magazine Article (https://fedoramagazine.org/announcing-fedora-35/) 52:48 Supply Chain Attacks Unicode "Bidi" Vulnerability Krebs on Security Post (https://krebsonsecurity.com/2021/11/trojan-source-bug-threatens-the-security-of-all-code/) Red Hat shell line (https://access.redhat.com/security/vulnerabilities/RHSB-2021-007) Fedora Pagure PR (https://pagure.io/pagure/c/8bacd4da4fa6de578b818aa7a4b36bbeaaa243d7?branch=master) Original Vulnerability Site (https://www.trojansource.codes/) -- The Extra Credit Section -- Interview with Gregory Kurtzur of Rocky Linux on OSV Podcast (https://www.opensourcevoices.org/21) For links to the articles and material referenced in this week's episode check out this week's page from our podcast dashboard! This Episode's Podcast Dashboard (http://podcast.asknoahshow.com/257) Phone Systems for Ask Noah provided by Voxtelesys (http://www.voxtelesys.com/asknoah) Join us in our dedicated chatroom #GeekLab:linuxdelta.com on Matrix (https://element.linuxdelta.com/#/room/#geeklab:linuxdelta.com) -- Stay In Touch -- Find all the resources for this show on the Ask Noah Dashboard Ask Noah Dashboard (http://www.asknoahshow.com) Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show! Altispeed Technologies (http://www.altispeed.com/) Contact Noah live [at] asknoahshow.com -- Twitter -- Noah - Kernellinux (https://twitter.com/kernellinux) Ask Noah Show (https://twitter.com/asknoahshow) Altispeed Technologies (https://twitter.com/altispeed)