643: The Sunday Soapbox

We pull on a few loose threads from recent episodes, and some of them unravel into way more than we expected.
Sponsored By:
Managed Nebula: Meet Managed Nebula from Defined Networking. A decentralized VPN built on the open-source Nebula platform that we love.
1Password Extended Access Management: 1Password Extended Access Management is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps.
CrowdHealth: Discover a Better Way to Pay for Healthcare with Crowdfunded Memberships. Join CrowdHealth to get started today for $99 for your first three months using UNPLUGGED.
Unraid: A powerful, easy operating system for servers and storage. Maximize your hardware with unmatched flexibility.
Support LINUX Unplugged
Links:
💥 Gets Sats Quick and Easy with Strike
📻 LINUX Unplugged on Fountain.FM
LUP's Great Holiday Homelab Form
LUP's Great Holiday Homelab Old Fart Form (markdown)
Jellyswarrm — Bring all your Jellyfin servers together
LiveTV support · Issue #9 · LLukas22/Jellyswarrm
pangolin — Identity-Aware Tunneled Reverse Proxy Server with Dashboard UI.
Pangolin | Secure Access Platform
NixOS Search - Options - Pangolin
Youtarr — Self-hosted web app that automates downloading, organizing, and scheduling YouTube channel content with support for Plex, Kodi, Emby and Jellyfin
Add ability to set subfolder for manual downloads · Issue #287 · DialmasterOrg/Youtarr
Dawarich — Your favorite self-hostable alternative to Google Timeline (Google Location History)
dawarich CHANGELOG.md
CVE-2025-40090 | Ubuntu — Since commit 305853cce3794 ksmbd_session_rpc_method() attempts to lock sess->rpc_lock. This causes hung connections / tasks when a client attempts to open a named pipe.
SMB3 & KSMBD See Performance Improvements With Linux 6.18 — KSMBD also now adds a max IP connections parameter to optionally limit the maximum number of connections permitted per IP address.
ksmbd vulnerability research · Doyensec's Blog
ksmbd - Fuzzing Improvements and Vulnerability Discovery (2/3)
ksmbd - Exploiting CVE-2025-37947 (3/3)
doyensec's KSMBD-CVE-2025-37947 PoC
GrapheneOS bails on OVHcloud over France's privacy stance
GrapheneOS exits France — what it means for encryption
France's Encryption War Escalates: GrapheneOS Exodus Signals Dangerous Precedent for Open Source Privacy Tech
Seems like the GrapheneOS phone collab may be with Motorolla.
Rust For Linux Kernel Co-Maintainer Formally Steps Down
Bcachefs Ousted from Mainline Kernel: The Move to DKMS and What It Means
Red Hat Introduces Project Hummingbird for “Zero-CVE” Strategies
Richard Hipp - Git: Just Say No - YouTube
2011 SouthEast LinuxFest - Richard Hipp - Fossilize Your Code - YouTube
Pick: Gopher64 — Highly compatible N64 emulator.
Gopher64 — simple64's official and spiritual successor - Libretro — It’s made by the same developer(s). Unlike simple64 however, it’s not based entirely on Mupen64Plus. And it’s aiming for a more LowSpec hardware overhang.
Install Gopher64 on Linux | Flathub