Episode 4:18: Open Source Isn't Safe!

Coming up in this episode

• Does it do Passkeys tho?
• So What Happened to Xz anyway?
• How do we fix the internet?

The Video Version
https://www.youtube.com/watch?v=I3bN3PRmHJY

Timestamps
0:00 Cold Open
1:36 Amazingly Self-Hosted
34:13 The History of Xz and the Hack*!
49:58 How to Fix Open Source
1:15:56 Next Time
1:20:42 Stinger

💻Self Hosting and Passkeys🔑

• Audiobookshelf
• Immich
• Tailscale
• What are Passkeys - Tom's Guide
• Passkeys - FIDO Alliance

📣Announcements📣

This program was made possible by:

• 📺️Youtube
• 📽️TILvids
• And by contributions to your L-U-S station by Patrons like you 😍

📖The History of XZ🦜

• LZMA
• Andrey Markov
• LZ77 and LZ78
• 7zip history
• Slackels
• LZMA in the form of the GCC compiled LZMA SDK
• Tukanni Linux Project was officially gone
• LZMA Utils was left behind in favor of the similarly LZMA-backed Xz Utils.
• version 5.0 is the transition from LZMA to XZ.
• Some distributions would eventually migrate to using Z Standard compression, including Arch in 2019 and Fedora and Ubuntu would make the switch in 2020.
• A new face, Jigar Kumar, shows up.
• January 7th, 2023, Jia Tan was finally able to merge their own commits to Xz on Github.
• Jia tries to convince the OSS-Fuzz team to accept a patch that disabled Indrect Function.
• Adding the test files which weren't test files at all.
• Andres Freund's Mastodon post
• On April 2nd, 2024, Collin adds a page to his tukaani.org domain.

📣More Announcements📣

• Want to have a topic covered or have some feedback? - send us an email, contact@linuxuserspace.show OR jump on over to the open forum on Lemmy

🧹Housekeeping🧹

Catch these and other great topics as they unfold on our Subreddit or our News channel on Discord.

• 🗞️ Linux User Space Lemmy
• 📰 Linux User Space subreddit
• ⌨️ Linux User Space Discord Server
• 📲 Linux User Space Telegram
• ✉️ Linux User Space Matrix
• 📽️ Linux User Space Twitch
• 🐘 Linux User Space Mastodon
• 📜 Linux User Space Twitter
• 📺️ Linux User Space TILVids

⚒️How To Fix Open Source🛠️

• Heartbleed
• I'm not a supplier
• XKCD 2347

🔭Next Time🔭

We plan to explore your feedback and some other topics. Our final history episode of the season will be Gentoo.

Come back in two weeks for more Linux User Space

Stay tuned 📡 and interact with us on Lemmy, Twitter, Mastodon, Telegram, Matrix, Discord whatever. Give us your suggestions on our subreddit r/LinuxUserSpace Join the conversation. Talk to us, and give us more ideas. All the links in the show notes and on linuxuserspace.show.

We would like to acknowledge 🤩 our top patrons. Thank you 🙏 for your support!

Producer

• Bruno
• Dave
• John
• Johnny
• Visaggio & Co

Co-Producer

• --verbose
• Tim
• GrouchyM

Super User

• A.J.
• Advait
• CubicleNate
• Eduardo S.
• Hausken
• Jeff3ix
• Jefferson
• Jill and Steve
• Larry
• LiNuXsys666
• Livet
• Musical Coder
• Nicholas
• Nick
• pjol
• sleepyeyesvince
• The Saigoneer
• Tobias