(cache)social.kernel.org

6h ago

Edited 6 hours ago

I'll install sequoia and try to gather a list what works and what does not for some basic tasks that often come up to get some idea...

1

Jarkko Sakkinen

7h ago

I'm not sure if anyone in the kernel community likes GPG TBH. It's more like a curse I guess.

fancy for GPG ? :-)

1

2

Jarkko Sakkinen

7h ago

Managing keys is complicated enough in GPG making it one of the unattractive tasks to accomplish with a computer.

1

Jarkko Sakkinen

7h ago

Edited 7 hours ago

Thank you for the update (s)!

I had issues on using Sequoia for kernel work but the specifics have been erased from my memory.

I would not mind to scraping GPG, and switching to Sequoia. After 17-20 years of proactive use or something like that, I still get lost in the configuration and forget what I was supposed to be doing 😅

GPG is also an over the top complex stack (gpg, pcscd, systemd services, gpgconf. ...). So yeah, it's bad 100% agree on that part :-) I don't have anything else good to say about GPG except compatibility...

1

Greg K-H

just filter on the issuing CNA. For wordpress I think it is 'wordfence' as they issue most/many of the wordpress plugin CVEs, or look at the urls in the records, as they show 'wordpress' somewhere as part of the path/domain.

2

Greg K-H

Nope, I was wrong, wordpress is properly splitting the cves out to call out the vendor of the plugin affected, and not use them as the vendor. Which I guess is the proper thing to do overall.

All of this is in easily searchable json for anyone to look at if you want to do your own queries, just download it from https://github.com/CVEProject/cvelistV5.git

github.com

GitHub - CVEProject/cvelistV5: CVE cache of the official CVE List in CVE JSON 5 format

CVE cache of the official CVE List in CVE JSON 5 format - CVEProject/cvelistV5

2

5

Greg K-H

Yeah, looks like wordpress has given up in reporting anything in 2026, probably due to their "issues" at the moment...

1

5

Greg K-H

For “products” (which makes the vendor issue where a CNA issues for multiple software products go away), the numbers are a bit different:

   2309 "product": "Linux",
   1584 "product": "Chrome",
    888 "product": "n/a",
    497 "product": "OpenClaw",
    284 "product": "Windows 10 Version 1607",
    255 "product": "Firefox",
    153 "product": "Android",
    141 "product": "AVideo",
    136 "product": "Red Hat Enterprise Linux 10",
    124 "product": "iOS and iPadOS",

Again, remember, vendors like Apple, Microsoft, and others only report the ones they determine to be “high” to CVE, while open source, as we can not dictate use of our code, have to report everything as we don’t know how it is used by others (i.e. severity is hard, if not impossible, to properly judge.)

Again, gotta give props to OpenClaw for properly documenting all of their issues, I wish more vendors would learn from them…

1

13

Greg K-H

9h ago

"CVEmaxxing", if you don't mind, I'm going to steal that for my next talk!

And the Google/Microsoft codebases are for _different_ products from those vendors, not just a single codebase, so you can't really compare them that way at all. Look at the product if you wish to compare for products. For products, our numbers are way way higher because most commercial vendors do not report all CVEs, only the "high" ones.

1

3

Greg K-H

9h ago

CVE issue stats for the first 6 months of the year, by vendor, sorted by quantity:

   2308 "vendor": "Linux",
   1752 "vendor": "Google",
   1308 "vendor": "n/a",
    843 "vendor": "Microsoft",
    495 "vendor": "OpenClaw",
    445 "vendor": "Oracle Corporation",
    395 "vendor": "Adobe",
    340 "vendor": "Red Hat",
    310 "vendor": "Apache Software Foundation",
    284 "vendor": "Apple",

I gotta change my talk where I say “we are #2” as that’s not the case by far anymore. Hopefully the other vendors get their act together and start properly reporting all CVEs to the system, not just the ones that they feel like submitting…

And the numbers for OpenClaw is quite impressive, nice to see someone take responsibility there :)

2

11

42

Jarkko Sakkinen

10h ago

, Hey, I see your name appearing in Google search hits; do you know anything to do with this ? :-)

Jarkko Sakkinen

10h ago

BTW how is PQC in linux-crypto? I recall it had similar ripples as GPG had (last time I checked) but nothing reasonable. Just interested/query.

For OpenSSL, v3.5 was the milestone release i.e., it is in some sense done.

#linux #crypto #openssl

2

Greg K-H

10h ago

Podcast I did a few weeks ago with OpenSSF is finally up:
https://openssf.org/podcast/2026/06/30/whats-in-the-soss-podcast-64-s3e16-the-heartbeat-of-the-kernel-why-upstream-is-the-ultimate-security-strategy-with-greg-kroah-hartman/

4

11

Jarkko Sakkinen

20h ago

It proves to me at least that I stick to versatility, and how important it is drive the code and not the spec :-)

Jarkko Sakkinen

20h ago

pi-landstrip and pi-readseek in the front page charts with circa 10 k/mo rates:

https://pi.dev/packages

this was unexpected...

pi.dev

Pi Coding Agent

A terminal-based coding agent

1

Jonathan Corbet

@corbet

21h ago

Hopefully that will help, at least for a while. The takedown of IPIDEA earlier this year calmed things considerably for a few months. They always seem to rebuild their botnets, though...

1

Jarkko Sakkinen

60 years anniversary edition :-) There's no guitar that I would swap this for. It's as far as I'm concerned as good as it gets...

1

Jarkko Sakkinen

Looks amazing but I think I'm going stick to my strato for the time being :-)

1

Jarkko Sakkinen

four week holiday starting next week... so except some delay at LKML. I'll do a weekly skim. And now I actually will call to LSM call and I mean it :-) Just have been busy with other stuff, thus always missed it.

Four weeks of holiday means four weeks working on my MS-DOS stack :-)

Greg K-H

Edited 1 day ago

Good, don't let the haters get you down, you're doing great work.

1

6

K. Ryabitsev-Prime 🍁

@monsieuricon

Edited 1 day ago

There was an unfortunate error while changing the kernel.org primary/secondary mirroring infrastructure, which resulted in the /pub tree suddenly becoming empty. No data was lost, just public mirror copies. Everything is now being restored, but deletes are fast and restores are slow, so thank you for your patience!

EDITED: You can follow the official incident here: https://status.linuxfoundation.org/incidents/3y1k8b4ky71t

1

58

61

Jarkko Sakkinen

NOT THE FINAL VERSION :-( was missing the rocket and Vulcan salute

1

Jarkko Sakkinen

i had boring time so...

1

5

Richard Weinberger

@rw

$ curl https://www.kernel.org/pub/linux/kernel/
<html>
<head><title>404 Not Found</title></head>
<body>
<center><h1>404 Not Found</h1></center>
<hr><center>nginx</center>
</body>
</html>

🤔

Jarkko Sakkinen

this i would get: let's fund instead inference with some amount of money, and buy some popcorn and watch while the world burns or something.

Jarkko Sakkinen

name sucks too...

1

Jarkko Sakkinen

digital-strategy.ec.europa.eu

Oh dear:

https://digital-strategy.ec.europa.eu/en/policies/genai4eu
And obviously no chance to vote against it :-)

Negative ROI from the get go... and nothing really justifies this waste of money.

GenAI4EU: Funding opportunities to boost Generative AI “made in Europe”

The European Commission has launched a first wave of EU funding opportunities to integrate generative Artificial Intelligence (AI) in Europe’s strategic sectors, and keep their competitive edge.

1

Jarkko Sakkinen

Sorry for harsh expression but I tried to capture the feeling, or what it must feel to be in that situation.

1

Jarkko Sakkinen

Edited 1 day ago

Here's what I've recommended to a some 20 something people who are beginning of their career, as understandably don't have like similar privileges as I might have to pick AI, or scrape it. Most likely ur ass-raped by the chatbots on a daily basis.

I've told them to learn assembly of some retro computer and write stuff for that hardware platform (e.g. 6502, Z80, m68k, x86 based from 80s/90s era), perhaps buy something like DE-10 Nano FPGA and start experimenting.

I just thought that figuring things out in that type of microversum would be the best antidote for the poison in question :-) For me it was at least good therapy to write amode and mxmplay2 (and more MS-DOS stuff to come in future), as the world felt too weird...

I myself learned most of my programming skills first with Turbo Pascal and later on with Turbo Assembler. That's why I still have hard time dealing with the kernel's horrible AT&T syntax :-) I

1

2

Pavel Machek

First, there's nothing wrong with Pascal. Second, dynamic vs. status typing. You really can't compare the two.

1

Jarkko Sakkinen

career development... #ai #native

1

Jarkko Sakkinen

I think I buy the basic jolla phone at some point :-) it's a boring smart phone, which is great. with C=-phone i actually dislike explicit blockers for social media. IMHO, it should be an option and is a bit silly tbh. I mean I would buy a Sailfish OS phone exactly that have more policy-free alternative than my iPhone.

1

kdave

@kdave

At that age you can start using company social media.

2

Pavel Machek

To add insult to the injury, that revocable, non-transferable license was still advertised as "sale" :-(.

1

Jarkko Sakkinen

i guess... "it's not a chatbot psychosis". well... that's good to know :-D i don't have vocabulary to say much about this as I'm not yet an interdimensional ayahuasca traveller....

Jarkko Sakkinen

i was searching for information about k3s configuration and bumped into https://www.theregister.com/software/2026/02/25/bcachefs-creator-claims-his-custom-llm-is-fully-conscious/4671792

www.theregister.com

Bcachefs creator claims his custom LLM is 'fully conscious'

: It's not chatbot psychosis, it's 'math and engineering and neuroscience'

1

Jarkko Sakkinen

kent overstreet what o_O

1

Jarkko Sakkinen

I think I'll pass this. I mean there is a discount BUT still too expensive. By large this is thanks to crazy prices of semiconductors ATM.

One thing AI boom has caused this year is that I've almost completely stop spending money except buying food and groceries. This mustt make economy strong, especially given that almost all of semiconductor supply is bought with debt money 🤷

1

Jonathan Corbet

@corbet

Obrigado!

1

Krzysztof Kozlowski

@krzk

Myself is much busier than me.

$ git log --no-merges --oneline MAINTAINERS | grep " me "

Jarkko Sakkinen

and no headphone jack...

1

2

Pavel Machek

I don't know about NekoCWD's fork, but I can get you help if you want to do some autofocus development.

Pavel Machek

Vypnete na svem telefonu podporu 4G, zvlaste kdyz nepouzivate data. Operatori by radi vypnuli 2G, coz bude z mnoha duvodu problem (pokryti v lesich? starsi telefony budou na vyhozeni, ruzne GPS trackery a podobne hracky prestanou fungovat). Kdyz lide budou 2G pouzivat, vydrzi dele.

Jarkko Sakkinen

Edited 2 days ago

"Acorn Computers Employee #1 - Chris Turner | TNMoC Talks"

https://www.youtube.com/watch?v=itGd11j3HdI

www.youtube.com

Acorn Computers Employee #1 - Chris Turner | TNMoC Talks

Employee #1, and Chief Engineer from 1979 to 1985, Chris shares his memories of working at Acorn Computers in the early days. We hear details about the devel...

1

Jarkko Sakkinen

removable battery o_O welcome to the future.

someone should pick this for laptops...

4

2

6

Jarkko Sakkinen

it's quite pretty

4

Jarkko Sakkinen

I put all the cool stuff to Codeberg and things like coding agent sandboxing plugins to Github :-) Github is my landfill.

1

Jarkko Sakkinen

Edited 2 days ago

My MS-DOS stash:

1. https://codeberg.org/jarkko/amode
2. https://codeberg.org/jarkko/mxmplay2

I've been postponing setting up ao486 GUS fork so thus no example program yet available :-) and i should make a track to supplement that.

I know some demo coders who work on MS-DOS on retro demoscene productions but cannot really recommend these before bare metal testing shows green. Especially GUS playback routine needs to be verified.d

#msdos #x86 #fpga

codeberg.org

amode

A MS-DOS protected mode extender

1

Takashi Sakamoto (坂本貴史)

@takaswie

@takaswie

Replied:

Re: [PATCH v3 00/16] mod_devicetable.h: Split into per subsystem headers
https://lore.kernel.org/lkml/20260629235804.GA414914@sakamocchi.jp/

Jarkko Sakkinen

will do and ya, it's my privilege to buy mastodon swag. it's one of the bright lights in this slopverse we're living in...

Jarkko Sakkinen

✅ can't wait for my t-shirt...

1

Jarkko Sakkinen

Ah they are pins! There's another area to level up :-) I'll order the shirt but look forward to get a fridge magnet too some time in future.

1

Jarkko Sakkinen

Yes, very cool! As we speak making an order. Maybe I take of those silly fridge magnets too, while at it. They look so inviting... can't resist ;-)

1

Jarkko Sakkinen

Two years ago I complained #Mastodon merch not having T-shirts.

Apparently, now it has: https://shop.joinmastodon.org/

shop.joinmastodon.org

Mastodon Merch Store

The official merch store of the open-source, decentralized social media platform Mastodon.

1

2

Jarkko Sakkinen

4d ago

I have pretty simple-minded perspective when it comes to interacting with people, and applies to anyone starting from a street junkie and ending up to tech company CEO or some PhD with crazy scientific achievements. I always assume that people who I interact with me are also smarter than me. That way I can focus on topics and have least risk of making fool of myself :-) I don't look down on anyone but instead put everyone to the same level as I am regardless of their social or economical status.

1

Jarkko Sakkinen