-- During The Show --
00:45 Steve's OpenSuse Experience
Splash Screen
Kernel Panic
03:10 Caller Ed
Best VM server
Proxmox (https://www.proxmox.com/en/)
Libvirt (https://libvirt.org/) + Cockpit (https://cockpit-project.org/)
Ovirt (https://www.ovirt.org/)
08:08 Sleuth Asked
Is there software to send and receive audio over the network that work on phones and Linux machines? My usecase is I want to listen to podcasts from antennapod on my computer and to monitor jitsi and mumble from my phone.
Alsa Mixer
IceCast (https://icecast.org/)
09:58 TwoBit Asked
Still using the Google Glass?
Yes
10:43 Docker Server - Mathieu
TLS/HTTPS is more than a cert
HAProxy (https://www.haproxy.org/)/Nginx Reverse Proxy
Check documentation for the project
Security is more than closing ports
LetsEncrypt (https://letsencrypt.org/)
19:25 Archiving Emails? - Jose
Download an archive + Thunderbird
23:26 SIP Questions - Andrew
3CX SBC (https://www.3cx.com/docs/3cx-tunnel-session-border-controller/)
Upgrade Router to PFSense/OPNSense
28:10 Pick of the Week
CasaOS (https://www.casaos.io/)
Help Net Security Article (https://www.helpnetsecurity.com/2021/12/13/casaos-home-cloud-system/)
Based on Docker
Easy Self Hosted Services
30:23 Gadget of the Week
M5stick (https://shop.m5stack.com/products/m5stickc-plus-esp32-pico-mini-iot-development-kit?variant=35275856609444)
$14 ESP32 Dev Kit
32:52 Centos 8 EOL
ZDNet Article (https://www.zdnet.com/article/centos-linux-8-is-about-to-die-what-do-you-do-next/)
CentOS EOL Dec 31 2021
Zero Day security patches until Jan 31 2022
Options
Red Hat Proper
Free Red Hat Developer License's
CentOS Stream (https://www.centos.org/centos-stream/)
Alma Linux (https://almalinux.org/)
Cloud Linux OS
Rocky Linux
38:00 Toyota Makes Keyfob a Service
The Drive Article (https://www.thedrive.com/news/43329/toyota-made-its-key-fob-remote-start-into-a-subscription-service)
Requiring subscription to use local keyfob functions
40:38 Pop!_OS 21.10 Released
System76 Blog Post (https://blog.system76.com/post/670564272872488960/popos-2110-has-landed)
Tech preview of Pop!_OS 21.10 for the RaspberryPi
System Refresh feature
Lots of new features
42:44 Main Segment - log4j Vulnerability
CVE-2021-44228
Remote Code Execution
Actively being exploited in the wild
Used in embedded and IOT devices as well
Minecraft Exploit Example (https://www.youtube.com/watch?v=7qoPDq41xhQ)
2.14.1 and earlier vulnerable
Fixed in Log4j 2.15.0
Github Attack Surface List (https://github.com/YfryTchsGD/Log4jAttackSurface)
Responsible disclosure was not followed
Alternative mitigations available
Flip the environmental variable ES JAVA OPTS= -D log4j2.formatMsgNoLookups=True
Cloudflare Mitigation (https://blog.cloudflare.com/cve-2021-44228-log4j-rce-0-day-mitigation/)
Help Net Security Article (https://www.helpnetsecurity.com/2021/12/12/week-in-review-apache-log4j-0day-exploited-kali-linux-2021-4-released-patch-tuesday-forecast/)
Fortune Article (https://fortune.com/2021/12/13/cyber-security-log4j-hacker-breach/)
We Live Securtiy Article (https://www.welivesecurity.com/2021/12/13/log4shell-vulnerability-what-we-know-so-far/)
The Next Web Article (https://thenextweb.com/news/log4j-bug-internet-open-source-contributors-analysis)
-- The Extra Credit Section --
For links to the articles and material referenced in this week's episode check out this week's page from our podcast dashboard!
This Episode's Podcast Dashboard (http://podcast.asknoahshow.com/263)
Phone Systems for Ask Noah provided by Voxtelesys (http://www.voxtelesys.com/asknoah)
Join us in our dedicated chatroom #GeekLab:linuxdelta.com on Matrix (https://element.linuxdelta.com/#/room/#geeklab:linuxdelta.com)
-- Stay In Touch --
Find all the resources for this show on the Ask Noah Dashboard
Ask Noah Dashboard (http://www.asknoahshow.com)
Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!
Altispeed Technologies (http://www.altispeed.com/)
Contact Noah
live [at] asknoahshow.com
-- Twitter --
Noah - Kernellinux (https://twitter.com/kernellinux)
Ask Noah Show (https://twitter.com/asknoahshow)
Altispeed Technologies (https://twitter.com/altispeed)
