643: The Sunday Soapbox

We pull on a few loose threads from recent episodes, and some of them unravel into way more than we expected.Sponsored By:Managed Nebula: Meet Managed Nebula from Defined Networking. A decentralized VPN built on the open-source Nebula platform that we love. 1Password Extended Access Management: 1Password Extended Access Management is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps. CrowdHealth: Discover a Better Way to Pay for Healthcare with Crowdfunded Memberships. Join CrowdHealth to get started today for $99 for your first three months using UNPLUGGED.Unraid: A powerful, easy operating system for servers and storage. Maximize your hardware with unmatched flexibility. Support LINUX UnpluggedLinks:💥 Gets Sats Quick and Easy with Strike📻 LINUX Unplugged on Fountain.FMLUP's Great Holiday Homelab FormLUP's Great Holiday Homelab Old Fart Form (markdown)Jellyswarrm — Bring all your Jellyfin servers togetherLiveTV support · Issue #9 · LLukas22/Jellyswarrmpangolin — Identity-Aware Tunneled Reverse Proxy Server with Dashboard UI.Pangolin | Secure Access PlatformNixOS Search - Options - PangolinYoutarr — Self-hosted web app that automates downloading, organizing, and scheduling YouTube channel content with support for Plex, Kodi, Emby and JellyfinAdd ability to set subfolder for manual downloads · Issue #287 · DialmasterOrg/YoutarrDawarich — Your favorite self-hostable alternative to Google Timeline (Google Location History)dawarich CHANGELOG.mdCVE-2025-40090 | Ubuntu — Since commit 305853cce3794 ksmbd_session_rpc_method() attempts to lock sess->rpc_lock. This causes hung connections / tasks when a client attempts to open a named pipe.SMB3 & KSMBD See Performance Improvements With Linux 6.18 — KSMBD also now adds a max IP connections parameter to optionally limit the maximum number of connections permitted per IP address.ksmbd vulnerability research · Doyensec's Blogksmbd - Fuzzing Improvements and Vulnerability Discovery (2/3)ksmbd - Exploiting CVE-2025-37947 (3/3)doyensec's KSMBD-CVE-2025-37947 PoCGrapheneOS bails on OVHcloud over France's privacy stanceGrapheneOS exits France — what it means for encryptionFrance's Encryption War Escalates: GrapheneOS Exodus Signals Dangerous Precedent for Open Source Privacy TechSeems like the GrapheneOS phone collab may be with Motorolla.Rust For Linux Kernel Co-Maintainer Formally Steps DownBcachefs Ousted from Mainline Kernel: The Move to DKMS and What It MeansRed Hat Introduces Project Hummingbird for “Zero-CVE” StrategiesRichard Hipp - Git: Just Say No - YouTube2011 SouthEast LinuxFest - Richard Hipp - Fossilize Your Code - YouTubePick: Gopher64 — Highly compatible N64 emulator.Gopher64 — simple64's official and spiritual successor - Libretro — It’s made by the same developer(s). Unlike simple64 however, it’s not based entirely on Mupen64Plus. And it’s aiming for a more LowSpec hardware overhang.Install Gopher64 on Linux | Flathub