Mint disables unverified apps, Recall hacked already, KDE as ks for feedback
S02:E23

Mint disables unverified apps, Recall hacked already, KDE as ks for feedback

Episode description

👏 Support the show here: 👏

Patreon supporters get the daily Linux & Open Source audio show!

https://www.patreon.com/thelinuxexperiment

https://www.paypal.com/paypalme/thelinuxexp

https://liberapay.com/TheLinuxExperiment/

👕 Buy TLE Merch: 👕

https://the-linux-experiment.creator-spring.com/

📹 Watch Linux videos: 📹

https://www.youtube.com/thelinuxexperiment

🎙️ Leave your feedback here: 🎙️

https://podcast.thelinuxexp.com


00:00 Intro

01:30 Linux Mint disables unverified flatpaks

https://blog.linuxmint.com/?p=4719

06:35 Windows Recall is already hacked

https://yro.slashdot.org/story/24/06/05/0040225/hacker-tool-extracts-all-the-data-collected-by-windows-new-recall-ai?utm_source=rss1.0mainlinkanon&utm_medium=feed

08:42 Google wants its own Windows Recall like feature

https://www.pcworld.com/article/2358215/google-is-working-on-a-version-of-recall-too.html

13:43 KDE wants you to help them set their goals

https://blog.lydiapintscher.de/2024/06/05/what-should-kde-focus-on-for-the-next-2-years-you-can-propose-a-goal/

15:42 elementary OS 8 updates

https://blog.elementary.io/updates-for-june-2024/

19:26 Thunderbird making solid progress on Exchange support

https://blog.thunderbird.net/2024/05/thunderbird-monthly-development-digest-may-2024/

22:03 Proton pass is available for Linux

https://www.omgubuntu.co.uk/2024/06/proton-pass-for-linux

24:46 Nouveau drivers will gain more features

https://www.phoronix.com/news/DRM-Misc-6.11-Nouveau-Intel-NPU

26:36 Vulkan driver for Apple Silicon Macs

https://rosenzweig.io/blog/vk13-on-the-m1-in-1-month.html

29:24 Open AI employees warn about the dangers of AI

https://www.wired.com/story/openai-right-to-warn-open-letter-ai-risk/

33:32 Duck Duck GO offers anonymous AI chatbots

https://arstechnica.com/information-technology/2024/06/duckduckgo-offers-anonymous-access-to-ai-chatbots-through-new-service/

35:33 Linux passes the 2% market share on Steam

https://www.gamingonlinux.com/2024/06/linux-user-share-on-steam-breaks-2pc-thanks-to-steam-deck/

39:09 Outro


Download transcript (.srt)
1:00:00

Hey everyone and welcome back to your

1:00:02

weekly Linux and open

1:00:03

source news show. I'm your host

1:00:05

Nick and this is a podcast where we

1:00:07

discuss everything that

1:00:08

happened in the Linux,

1:00:10

open source, privacy and open web spaces.

1:00:13

So this week we have

1:00:15

Linux Mint, disabling

1:00:17

unverified flatpacks all together from

1:00:20

their app store. We have

1:00:21

Windows Recall, that nightmarish

1:00:23

feature that is basically a Trojan or

1:00:26

spyware already being

1:00:28

hacked even though it's not even

1:00:29

available to the public yet. We have KDE

1:00:32

asking you to help them

1:00:33

define their goals for the next

1:00:35

two years. We've got some solid updates

1:00:38

to elementary OS 8 to

1:00:39

Thunderbird. We've got

1:00:41

Proton Pass now available as a desktop

1:00:43

client for Linux. We've got

1:00:45

some driver work being done

1:00:46

and the usual AI related stuff which

1:00:50

still paints a pretty bleak picture plus

1:00:52

Linux passing the 2%

1:00:54

market share on Steam. So if as always

1:00:57

you want to dive deeper

1:00:58

on any of these topics,

1:01:00

all the links that I used to write this

1:01:02

show are in the show notes

1:01:03

and if you want me to keep

1:01:05

making this podcast and you want to

1:01:07

support it, you can also find links to do

1:01:09

just that in the show

1:01:10

notes and if you become a Patreon member,

1:01:12

you will actually get a

1:01:14

daily version of that show

1:01:16

from Monday to Friday. Also important to

1:01:19

note, next week there won't be a Linux

1:01:21

and open source news

1:01:23

show because I will be on vacation,

1:01:25

things will pick back up the week after

1:01:27

that. So now let's begin.

1:01:30

So Linux Mint is making some moves on

1:01:33

their software store

1:01:34

and on their repos. First,

1:01:36

they have apparently implemented a bit of

1:01:39

anonymous tracking on their

1:01:41

repos to see when people are

1:01:43

downloading the most things, the speed

1:01:46

with which every package is

1:01:47

looked up or delivered and also

1:01:49

the various bottlenecks that might slow

1:01:52

down your experience in

1:01:53

downloading and installing

1:01:54

packages on your system. The goal is to

1:01:57

have their repos be as fast

1:01:59

as possible but also to try and

1:02:01

optimize how much they will pay because

1:02:03

they are moving to a CDN

1:02:05

instead of having just various

1:02:07

mirrors everywhere which should be much

1:02:09

faster for most people but

1:02:10

also will cost them a bit of money

1:02:12

so they need to optimize all of that.

1:02:15

Apparently all of this data

1:02:16

is completely anonymous, they

1:02:18

don't log any IP addresses, any data, so

1:02:20

don't worry about this.

1:02:22

More importantly, they have

1:02:23

improved their software manager a lot in

1:02:26

the current version of

1:02:27

Mint, it should now load

1:02:29

much faster, they say the window should

1:02:30

even open instantly which

1:02:32

is really nice and they have

1:02:35

disabled unverified flatbacks inside of

1:02:38

this software store

1:02:39

meaning that by default when you

1:02:41

search for stuff, the only flatback apps

1:02:44

from FlatHub for example

1:02:45

that you will see are the ones

1:02:47

that have been verified as in they've

1:02:49

been published by their

1:02:50

original developer, anything

1:02:52

published or packaged by a third party

1:02:55

which isn't the original

1:02:56

developers will be hidden.

1:02:59

You can show them back up because you can

1:03:01

take a trip to the

1:03:02

settings and enable those,

1:03:04

you'll get a little warning telling you

1:03:06

that these applications

1:03:07

are not official and could be

1:03:09

maintained by anyone so you shouldn't

1:03:12

probably trust them all

1:03:13

that much. Now even when you

1:03:15

enable those unverified flatback

1:03:17

applications, they will have a red

1:03:19

warning under the application's

1:03:21

name, they will not have any reviews

1:03:23

attached to them, they

1:03:25

won't have a score as in like no

1:03:26

score, no little stars across it, they

1:03:29

are just really treated

1:03:30

as a second class citizen.

1:03:32

Now as per their move away from GNOME

1:03:34

apps because Mint said

1:03:36

they wanted to fork previous

1:03:37

version of GNOME apps instead of shipping

1:03:39

GNOME apps directly

1:03:41

because they want to build

1:03:42

applications that look well on Linux Mint

1:03:45

and would also look well

1:03:46

on other desktops like XFC

1:03:48

or Mate for example, they are apparently

1:03:51

talking with a lot of

1:03:52

involved parties including some

1:03:54

GNOME developers on how best to do that

1:03:57

and how not to create friction or

1:03:59

problems or how GTK could

1:04:01

be adapted to help Linux Mint support all

1:04:04

of that and they're saying all those

1:04:06

discussions are very

1:04:07

constructive, they haven't reached any

1:04:09

big decision yet or a specific path on

1:04:11

which they're going to

1:04:13

whether it's forking the current apps or

1:04:15

I don't know maybe shipping

1:04:16

current apps with a different

1:04:18

style sheet, whatever, they didn't say if

1:04:21

they had reached a

1:04:21

conclusion, well they specifically said

1:04:23

they didn't but at least they're talking

1:04:24

constructively which is nice

1:04:26

because this kind of stuff can

1:04:27

always devolve into a little ego fight

1:04:30

and apparently that's

1:04:31

not the case here. So it's

1:04:32

good to see that people are communicating

1:04:34

and collaborating

1:04:35

between platforms and projects,

1:04:38

hopefully there won't be too much

1:04:39

duplication and those apps will be able

1:04:42

to be as well supported

1:04:43

as GNOME apps could be. Now as per the

1:04:46

Flatpak thing, I think

1:04:48

they're right to hide unverified

1:04:51

apps by default, they could be made by

1:04:52

anyone but honestly if you decided to

1:04:56

manually re-enable them

1:04:57

I would have left the reviews in there

1:04:59

because if you're going to be

1:05:00

exposed to apps made by third

1:05:02

parties you should be able to see what

1:05:05

other users think about it

1:05:06

and if those apps have been like

1:05:09

noticeably worse or badly packaged or

1:05:11

have problems, security or privacy

1:05:13

related problems in them

1:05:15

it would be nice to have other users

1:05:16

comments and reviews to know that hey

1:05:19

actually this third party

1:05:20

thing you should not install it is pretty

1:05:21

crap. And also if you think

1:05:24

about it what Mint provides

1:05:26

in their repos which are based on

1:05:28

Ubuntu's repos is unofficial packages,

1:05:31

they have not been created

1:05:33

by the original developers if you install

1:05:35

GIMP from the Ubuntu repos.

1:05:38

This app is not distributed

1:05:40

or packaged by the GIMP developers, it's

1:05:42

made by the Ubuntu

1:05:43

developers, it's a third party or at

1:05:46

least an Ubuntu maintainer, it is a third

1:05:48

party so it should probably

1:05:50

have the exact same warnings

1:05:51

and it probably should not have reviews

1:05:53

either. This is something that has

1:05:55

surprised me quite a bit

1:05:57

recently with Flat Hub and Snaps and

1:05:59

stuff like that because yes you have

1:06:02

applications distributed

1:06:04

by like random individuals on these

1:06:06

stores, that is also the case of every

1:06:09

repo for every distro.

1:06:11

If you install something from the AUR

1:06:12

it's all random stuff from a Rendo

1:06:15

individual and there's

1:06:16

as much control on Flat Hub and the

1:06:18

application published there

1:06:19

as there is on the AUR or on

1:06:22

Ubuntu's repos so if you want to treat

1:06:25

those unofficial Flat

1:06:26

Paks or Snaps or app images

1:06:28

as second-class citizens you should do

1:06:29

the exact same with the

1:06:31

apps in your repos probably.

1:06:35

Now I talked about Windows Recall last

1:06:37

week, Microsoft's

1:06:39

horrendous new feature that will

1:06:41

take screenshots of your screen regularly

1:06:43

and pass them to an AI so you

1:06:45

can find stuff you have done

1:06:47

in the past. This tool has already been

1:06:50

hacked by someone, even

1:06:51

though it is not available yet,

1:06:53

it will only be available on Copilot plus

1:06:56

PCs meaning AI enabled PCs from

1:06:58

Microsoft, current PCs

1:07:00

that could absolutely run this feature

1:07:02

perfectly will just not support it but

1:07:05

still someone managed

1:07:05

to enable it and hack it immediately.

1:07:08

It's supposed to be

1:07:08

released on June 18 so in 11 days

1:07:12

at the day I'm recording this and so

1:07:14

obviously anything that has

1:07:15

been hacked here or detected

1:07:17

here will probably not see any fixes or

1:07:20

changes before it's released. So the

1:07:22

hacking tool is called

1:07:23

Total Recall and it can pull everything

1:07:26

that Recall recorded

1:07:27

because apparently the entire

1:07:29

database is left unencrypted and

1:07:32

available in plain text. So the hacker

1:07:34

said Recall is basically

1:07:36

a built-in Trojan and they share the tool

1:07:38

publicly to incite

1:07:40

Microsoft to fix the feature

1:07:42

before they release it to everyone. Well

1:07:44

at least to everyone

1:07:45

that has a compatible PC.

1:07:47

Total Recall can automatically find where

1:07:50

the database is located

1:07:51

on your system, they can

1:07:52

copy it while it passes its content, it

1:07:55

can extract data from a set time range

1:07:58

and it does so in about

1:07:59

two seconds for a day's worth of

1:08:02

screenshots. You can also even search for

1:08:04

specific terms in the

1:08:06

database to find anything the user might

1:08:08

have done in any

1:08:09

application no matter how protected,

1:08:12

encrypted or secure the app is because

1:08:14

these are screenshots so

1:08:16

they have all the info, you are

1:08:17

accessing a screenshot of the application

1:08:20

no matter how it's

1:08:21

secured you see what the people

1:08:23

see on screen. It is truly nightmarish

1:08:26

stuff, I hope Microsoft

1:08:28

will fix this before releasing

1:08:30

the feature or even better maybe they'll

1:08:33

realize no one really

1:08:34

wants this or needs this in its

1:08:36

current form and will just decide to

1:08:38

postpone or completely

1:08:39

cancel it but I highly doubt it.

1:08:42

And despite the unmitigated disaster that

1:08:46

is Windows Recall, at

1:08:47

least in terms of security

1:08:48

and privacy it looks like Google wants

1:08:51

the exact same feature for Chrome OS

1:08:53

which they refer to as

1:08:55

"memory". They've said that what they

1:08:58

think creeped users out in

1:09:00

Windows Recall is the lack of user

1:09:02

control over when and what is being

1:09:05

recorded which shows they

1:09:07

haven't read enough blog posts

1:09:09

recently because first you can disable

1:09:11

Windows Recall on any PC

1:09:13

that supports it, a trip to the

1:09:14

settings will let you disable it entirely

1:09:16

and second what creeps

1:09:18

people out isn't the fact that

1:09:20

they don't have a few combo boxes to say

1:09:22

if each app has the right

1:09:23

to be recorded or not. What

1:09:25

creeps people out is the very nature of

1:09:28

the feature, your computer being

1:09:30

screenshotted all the time and

1:09:32

the contents being stored in an

1:09:33

unencrypted database that has

1:09:35

been hacked less than a week

1:09:37

after the feature was announced that is

1:09:39

what is creepy now just

1:09:41

having a few more controls.

1:09:43

Now Google talked about a specific use

1:09:45

case which was a meeting

1:09:47

which you would record with their

1:09:48

version of Recall and at the end of the

1:09:50

meeting it would generate

1:09:51

meeting notes and the action

1:09:53

items which sure sounds cool but first

1:09:56

that's not what Recall does

1:09:58

at all so I don't know if they

1:10:00

really understood this or maybe I read

1:10:02

the article wrong but yeah Recall doesn't

1:10:04

do that. Recall lets

1:10:05

you search through things that you've

1:10:07

done so you type A I saw a brown bag

1:10:11

probably like in the last

1:10:13

month can you show me that and it's gonna

1:10:15

display you screenshots of

1:10:16

the web pages you visited that

1:10:18

have a brown bag displayed on those pages

1:10:20

it doesn't generate

1:10:22

meeting notes or whatever else.

1:10:24

Second this should be an

1:10:26

application-based feature the video

1:10:29

conferencing app should

1:10:30

handle doing those things generating

1:10:33

meeting notes and action

1:10:34

items the operating system

1:10:36

should not be able to access that kind of

1:10:39

data and potentially let other

1:10:41

applications also access

1:10:42

it because it's stored OS wide.

1:10:45

Personally I think those Windows Recall

1:10:47

efforts are misguided at best

1:10:49

the feature in itself is very interesting

1:10:52

having full system-wide

1:10:54

ability to search for things

1:10:56

that have been categorized and analyzed

1:10:58

so it's there's like a whole

1:11:01

cementing thing around this

1:11:03

meaning that your OS recognizes or your

1:11:05

applications recognize

1:11:06

what you've been doing

1:11:08

it's not a find me this website it's I

1:11:11

don't remember the website

1:11:12

I don't know when I saw it

1:11:13

but I remember there was a photo of a

1:11:15

superbly well painted

1:11:17

landscape and it's gonna look for

1:11:19

that through what you've browsed I think

1:11:21

that's cool. The problem is

1:11:23

this should be application

1:11:24

based not OS based the applications you

1:11:27

trust should be able to

1:11:29

access their own data as they

1:11:31

already do and to display it in a way

1:11:33

that is relevant for the

1:11:34

type of content they handle.

1:11:36

For example if you're looking for a

1:11:38

document the app handling this document

1:11:41

is the best place to

1:11:42

recall what you've worked on and

1:11:44

displayed the proper way if you're

1:11:45

looking for a website the

1:11:47

web browser is the right place not the

1:11:49

operating system and if you

1:11:51

want to have an OS wide feature

1:11:54

then sure develop the AI and the API

1:11:57

around it at the OS

1:11:59

level but then use something

1:12:01

akin to portals that we have on Linux to

1:12:03

let each application send

1:12:05

that data through the portal

1:12:07

to the OS analyzing tool the results go

1:12:10

back to the application

1:12:11

itself where you trust them

1:12:13

because you use that app so obviously you

1:12:15

trust that app technically

1:12:16

and then the app is in charge

1:12:18

of displaying everything and then the

1:12:20

system could also display

1:12:21

a full recap through all

1:12:24

applications but the OS shouldn't be the

1:12:26

source of the of the data storage and

1:12:28

shouldn't be the one

1:12:29

to analyze everything applications should

1:12:32

be the source of all of

1:12:34

this and the OS should just be

1:12:35

able to collect that without really

1:12:37

knowing what it is they should just

1:12:39

display it OS wide having

1:12:42

this done through screenshots is a

1:12:44

terrible terrible thing and

1:12:46

it's it's pretty lazy as well

1:12:48

because like there are other more

1:12:50

intelligent ways to develop this but of

1:12:52

course they take a bit

1:12:53

longer now of course uh Microsoft and

1:12:56

Google will never do it in this way

1:12:59

because the real reason

1:13:00

why they're developing these features is

1:13:02

not to give you an OS wide

1:13:04

system history they are doing

1:13:06

this because they want to use those

1:13:07

screenshots to train their own AI tools

1:13:10

and that's very likely

1:13:11

what they're already doing with those

1:13:13

features well Microsoft at

1:13:14

least Google hasn't implemented

1:13:15

it yet or what they will do in the future

1:13:18

at some point Google

1:13:20

will train Gemini with those

1:13:21

screenshots and Microsoft will train an

1:13:23

open AI replacement because

1:13:25

there have been inklings that

1:13:26

they want to get more independence from

1:13:29

open AI and chat GPT so

1:13:31

they will never do it in an API

1:13:33

based privacy based portal based way they

1:13:36

will always do it in a way

1:13:37

that lets them grab all the

1:13:39

data and don't let apps handle that data

1:13:42

instead now more fun stuff

1:13:45

Kady is asking you and all the

1:13:47

Kady plasma community to help them define

1:13:50

their goals for the next

1:13:52

two years they created a board

1:13:54

where you can open a ticket to explain

1:13:56

your idea that would improve

1:13:58

Kady so active contributors

1:14:00

will then go through all those ideas and

1:14:03

proposals they will

1:14:04

identify issues request

1:14:06

clarifications they will refine the goals

1:14:08

if maybe some of them

1:14:09

could work together or just

1:14:10

be grouped in one single one they will do

1:14:13

that they will just tidy

1:14:14

the board up and then they

1:14:16

will vote on these goals and the selected

1:14:18

ones will be announced at

1:14:20

academy in early September

1:14:22

the process is open to non-Kady

1:14:24

contributors and also to

1:14:26

non-developers although the person

1:14:29

submitting the goal is sort of expected

1:14:31

to be the champion of

1:14:33

their goal and to rally people

1:14:35

around it to ensure it can get done now

1:14:37

it could be someone that

1:14:39

hasn't written the goal on the

1:14:41

board but you will need to provide

1:14:42

someone that is the champion for that

1:14:45

goal and pushes it forward

1:14:46

even if it's not through code or

1:14:48

development you have until

1:14:50

July the 5th to submit yours

1:14:52

there are already a few in the board

1:14:55

including for example improving

1:14:57

compatibility between Kady

1:14:59

desktops and mobile devices polishing

1:15:02

things up like adding for example a

1:15:04

visual representation

1:15:05

for the clipboard letting people

1:15:07

configure touchpad gestures stuff like

1:15:09

that there's an idea to

1:15:11

sandbox everything that is Kady related

1:15:13

so everything is nice and

1:15:15

compartmentalized and

1:15:16

access to portals and a lot of stuff to

1:15:19

rework workspaces and the

1:15:21

tiling managing feature and

1:15:23

stuff like that so if you want to

1:15:25

contribute you absolutely can there's a

1:15:27

board where you can just

1:15:28

create your idea goals can be very small

1:15:30

like a new feature or they

1:15:32

can be much bigger so don't

1:15:34

hold back as long as you're ready to

1:15:36

potentially get involved after that to

1:15:38

help guide that goal

1:15:39

so it can be reached now we also have

1:15:43

some interesting updates

1:15:44

for elementary os8 first

1:15:46

there's confirmation that they won't lock

1:15:48

you into wayland they said

1:15:50

they wanted to have wayland as

1:15:52

the default session but they will let you

1:15:54

choose in the login manager

1:15:55

between x11 or wayland they

1:15:57

hadn't really talked about that so now

1:15:59

it's a nice confirmation that

1:16:01

you will be still able to use

1:16:03

x11 if you want their dock will also gain

1:16:06

a new feature which lets

1:16:07

you just launch apps by

1:16:09

pressing super plus a number like most

1:16:11

other docks out there the

1:16:13

system settings also received some

1:16:15

work judging from the screenshots they

1:16:17

look really nice really

1:16:18

legible basically they look

1:16:20

like GNOME system settings but with a lot

1:16:23

more color better icons

1:16:24

and just a more visual flair

1:16:27

that is way more user friendly in my

1:16:29

opinion they also moved

1:16:31

the page to let you install

1:16:33

additional drivers like the proprietary

1:16:35

nvidia drivers to the

1:16:37

system settings so they're no

1:16:38

longer in the app center meaning that the

1:16:41

app center has nothing

1:16:42

to do with the dev package

1:16:44

repos anymore it just handles flat packs

1:16:47

it won't offer apps from the

1:16:49

Ubuntu repos just like in the

1:16:51

previous version but more importantly

1:16:53

they will offer flat hub as

1:16:55

a remote by default meaning

1:16:57

that when you start elementary os you

1:16:59

won't have to go to the flat

1:17:00

hub website download a flat a

1:17:02

flat pack ref file install it manually

1:17:05

and then you'll get flat

1:17:06

hub you will get flat hub by

1:17:08

default so you will have all the apps you

1:17:10

need out of the box and

1:17:11

you can still obviously use

1:17:12

the repos from the command line even

1:17:14

though it would probably be

1:17:15

better if they still let you

1:17:17

use the repos in the app center now as

1:17:20

per their developer

1:17:21

platform to make elementary os apps

1:17:24

they've also updated that one it is now

1:17:26

available from elementories

1:17:28

flat pack remote meaning that

1:17:29

developers can either start working on

1:17:32

new applications or

1:17:33

update their current ones

1:17:35

this developer platform is based on the

1:17:37

GNOME 46 platform it

1:17:39

includes all the things that makes

1:17:41

elementary os apps look like elementary

1:17:44

os apps so there's their

1:17:46

own style sheet there's their

1:17:47

granite widget library which is sort of

1:17:50

like libviter but for

1:17:51

elementary os and there's lib portal

1:17:54

to work properly with all the system

1:17:56

features even when sandboxed with a flat

1:17:59

pack now i think the

1:18:01

elementary os app ecosystem used to be

1:18:03

really fantastic before

1:18:05

GNOME started with libviter

1:18:08

now as far as i can see most apps that

1:18:10

would have been distributed

1:18:11

as elementary os apps are now

1:18:13

distributed as simple GNOME applications

1:18:16

which obviously will work

1:18:17

on elementary os but won't

1:18:19

look right because elementary will not

1:18:21

theme them and since GNOME

1:18:23

also doesn't support the accent

1:18:26

color portal then they also won't have

1:18:28

the right color either so

1:18:30

yeah it's nice to have flat hub

1:18:32

it's nice to have access to most

1:18:33

applications because the elementary os

1:18:35

app ecosystem has not

1:18:37

grown all that much since the release of

1:18:40

elementary os 7 probably most people have

1:18:43

gone to developing GNOME apps instead

1:18:45

still i am very interested in

1:18:47

elementary os 8 i started this

1:18:49

channel on making elementary os videos i

1:18:52

think it's a fantastic

1:18:53

well polished good looking

1:18:55

operating system and desktop and they are

1:18:58

fixing the mistakes that

1:18:59

well what i consider it as

1:19:00

mistakes which was not shipping flat hub

1:19:03

by default for example so

1:19:05

if that's corrected that's

1:19:06

going to make the system way more

1:19:08

accessible for most people and visually

1:19:10

it does look really nice

1:19:11

so i am excited to try it out when it

1:19:13

officially releases hopefully it's not

1:19:15

too far in the future

1:19:17

because they tend to take a long time to

1:19:20

release those new versions

1:19:21

after the LTS they're based on

1:19:23

actually sees the light of day now in

1:19:26

terms of applications

1:19:27

we'll start by talking about

1:19:29

thunderbird they're making good progress

1:19:31

on a bunch of cool

1:19:33

features chief among which is

1:19:35

exchange support this is almost finished

1:19:38

with the main workflow now being

1:19:40

implemented you can set

1:19:41

up your exchange account in thunderbird

1:19:43

it will automatically grab

1:19:45

all your folders all your

1:19:46

messages when you click on an email it's

1:19:49

going to display it

1:19:49

correctly and they still have some

1:19:52

work to do on making sure messages are

1:19:54

properly sent properly

1:19:56

stored and then there will be a

1:19:58

broader call for testing before this

1:20:00

feature goes out to everyone you can

1:20:03

enable it uh in the i

1:20:05

think it's in the nightly releases of

1:20:06

thunderbird already but obviously if

1:20:09

that's your main like

1:20:10

work account you probably should not test

1:20:12

that on that account because well you

1:20:14

never know they will

1:20:16

also add support for the system tray on

1:20:18

linux in thunderbird for

1:20:20

people who use the system tray

1:20:21

this is apparently due to thunderbird

1:20:23

using rust to build certain

1:20:25

modules in thunderbird i don't

1:20:27

really know why they needed to use rust

1:20:29

to build a system tray icon a

1:20:31

lot of apps that don't use rust

1:20:33

have system tray icons but maybe it made

1:20:36

it easier for them i don't

1:20:38

know other things include

1:20:39

letting you choose an accent caller in

1:20:41

the application itself

1:20:43

hopefully they will integrate

1:20:44

that with the accent caller portal that

1:20:47

exists the accent caller

1:20:48

preference that exists in kde and

1:20:50

other desktops they will also add

1:20:52

multi-folder selection probably for

1:20:54

reorganizing your folders

1:20:56

and they will rewrite folder compaction

1:20:58

entirely to save some space

1:21:00

for windows users they will add

1:21:02

native notification support as well but

1:21:04

we don't care about that

1:21:05

here because we use linux now

1:21:08

that's pretty good progress on this

1:21:10

application thunderbird is

1:21:12

still my email client of choice

1:21:13

for my work email my my personal email is

1:21:16

handled through protonmail

1:21:18

so i use the desktop client

1:21:19

which is just an electron app but for the

1:21:21

rest i use thunderbird it's

1:21:23

great having exchange support

1:21:25

doesn't matter to me but it will

1:21:26

definitely make it easier for people to

1:21:28

move to linux or just to

1:21:30

move to open source applications instead

1:21:32

of using outlook so that's nice the

1:21:34

system tray has been a

1:21:35

well requested feature for a while for

1:21:37

thunderbird so cool for people who need

1:21:40

it me personally the

1:21:41

only thing i really want them to change

1:21:43

is the search the current

1:21:44

search i think is really bad

1:21:46

not super usable really doesn't return

1:21:48

the things i want i have a hard time

1:21:50

finding what i need so

1:21:51

if they could improve that i would be

1:21:53

happier than with all

1:21:54

those features but i guess for

1:21:56

most people the features they're working

1:21:58

on will be much more

1:22:00

useful and still on applications

1:22:04

this week we've got the release of proton

1:22:06

pass the password manager

1:22:08

from the makers of protonmail

1:22:09

as a desktop client on linux there are a

1:22:13

bunch of caveats here and

1:22:14

i'm saying this proton is a

1:22:16

regular sponsor of my youtube channel

1:22:18

they never sponsored a podcast those

1:22:20

things are now completely

1:22:22

sponsor free they're just reliant on your

1:22:24

contributions but yeah i

1:22:27

will say this beforehand

1:22:28

proton does sponsor the channel from time

1:22:30

to time and i do use

1:22:31

proton mail and proton pass

1:22:34

but that doesn't mean i can't complain

1:22:35

about a few things first proton pass is

1:22:38

only distributed as a

1:22:40

deb and an rpm you don't have a flat pack

1:22:42

you don't have a snap

1:22:43

you don't have an app image

1:22:44

meaning that there are a bunch of distros

1:22:46

that just won't be able

1:22:47

to use that desktop client

1:22:49

and that kind of sucks second it is an

1:22:52

electron app meaning it will not

1:22:54

integrate properly with

1:22:56

your system it won't support your accent

1:22:57

color your theme whatever

1:22:59

it will just look like the

1:23:01

web page where you can access proton pass

1:23:04

and third it is not

1:23:06

completely well integrated with

1:23:07

the systems authentication system meaning

1:23:10

that when you unlock your

1:23:11

session you won't automatically

1:23:13

unlock the password manager as well

1:23:14

that's something they want

1:23:16

to do in the future whether

1:23:17

you use a password a fingerprint face

1:23:19

unlock with howdy or

1:23:21

whatever else at some point it

1:23:23

will support that for now though it

1:23:25

doesn't in terms of features

1:23:27

though since it is an electron

1:23:29

app you get all the features that you

1:23:31

might know from a password manager or

1:23:33

that you might use from

1:23:34

proton pass on the web it supports pass

1:23:36

keys sharing passwords

1:23:38

two-factor authentication

1:23:39

email masking aliases and handling of all

1:23:43

your logins and passwords

1:23:44

and of course you obviously

1:23:46

have the web browser extensions to

1:23:48

automatically fill those

1:23:50

passwords inside your web browser

1:23:52

now proton pass is the password manager i

1:23:55

moved to i used to use a

1:23:57

firefox account but to be more

1:23:59

portable and since i'm starting to look

1:24:01

at other web browsers i

1:24:03

wanted something that would work

1:24:04

everywhere and since i already pay for

1:24:06

proton mail for my personal email i

1:24:08

decided to go with proton

1:24:10

i'm happy about it i just wish the

1:24:12

desktop client would be not

1:24:14

electron just look like a normal

1:24:17

linux app that follows my theme and and

1:24:19

the look of my system i

1:24:21

wish they had sandboxed it into

1:24:23

an official flatback but it is a first

1:24:25

step now really what i

1:24:27

reasonably need to be super happy

1:24:29

with proton is the proton drive desktop

1:24:32

client for linux a

1:24:34

syncing client that syncs in the

1:24:35

background automatically when they get

1:24:38

that i will be 100 happy

1:24:39

still nice to have the desktop

1:24:41

client it's not the best it could be but

1:24:43

at least it exists now we've got some

1:24:47

good news for nvidia

1:24:49

users as well in the linux kernel 6.11

1:24:52

the nouveau drivers which

1:24:54

are the open source drivers for

1:24:56

nvidia will gain support for using the

1:24:59

command line to pass

1:25:00

options and interact with the gpu

1:25:03

system processor firmware or the gsp this

1:25:06

is the thing that lets you

1:25:08

control your gpu properly so

1:25:10

things like changing the display

1:25:12

brightness through the gpu or changing

1:25:14

the performance levels of your

1:25:15

nvidia gpu should thus be possible at

1:25:19

least through the command line but it

1:25:20

also means that anyone could

1:25:22

develop a graphical tool that lets you

1:25:24

manage your gpu properly at least for

1:25:27

recent nvidia gpu's the

1:25:29

rtx 2000 series and newer it also means

1:25:32

that desktop

1:25:33

environments could decide that their

1:25:35

performance profiles like for example a

1:25:38

battery saving or

1:25:39

performance could also automatically

1:25:41

change the power level of your dedicated

1:25:44

nvidia gpu even in hybrid

1:25:46

graphics mode meaning that

1:25:47

the system should just be more reactive

1:25:49

in general and should just work better

1:25:51

even with open source

1:25:53

drivers and since the nouveau drivers

1:25:55

will also be used if you use

1:25:57

nvk the new open source vulkan

1:25:59

drivers for nvidia which are shaping up

1:26:01

to be really really nice

1:26:03

that's pretty cool you can

1:26:04

already change those settings to the

1:26:06

proprietary drivers if you

1:26:07

have nvidia settings app but it

1:26:10

tends to not really save the changes from

1:26:13

session to session that there's

1:26:15

apparently a method but it

1:26:16

never worked for me ever and also if you

1:26:19

use wayland most of those settings are

1:26:20

just not available in

1:26:22

the nvidia app but they would be with

1:26:24

nouveau and nvk and any

1:26:26

interface anyone could develop

1:26:28

around that so it's really cool to see

1:26:30

and it's going to make the

1:26:31

open source experience of using

1:26:33

nvidia gpu's much much better and still

1:26:37

on the topic of drivers

1:26:38

there's a new one for apple

1:26:40

silicon max and it is a vulkan driver

1:26:43

this time which is what was

1:26:45

missing from the azahi linux

1:26:47

experience to really have solid graphics

1:26:49

support on apple silicon

1:26:52

max so the driver is called

1:26:54

honey crisp with a k probably for vulkan

1:26:56

and it is apparently

1:26:58

derived from nvk the open source

1:27:00

nvidia vulkan driver it's been started by

1:27:03

azahi and mesa developers and

1:27:05

it hasn't been upstreamed yet

1:27:07

it is very early days and i say early

1:27:11

days but they've already

1:27:12

done a lot the driver already is

1:27:15

vulkan 1.3 conformance meaning it does

1:27:18

pass the test suite and

1:27:19

supports most of the necessary

1:27:22

extensions to be considered a valid

1:27:24

vulkan driver it does need some more work

1:27:27

to support extensions

1:27:28

needed by dxvk and vkd3d but at some

1:27:32

point in the near future this should let

1:27:34

people run steam games

1:27:36

or just win those games in general on an

1:27:39

apple silicon mac running

1:27:40

linux at least if you use an

1:27:42

x86 emulator like fex which proved it was

1:27:45

quite capable already as

1:27:47

the developers for this thing

1:27:48

already showed a god of war running on an

1:27:52

arm computer using the

1:27:53

x86 binaries through protom

1:27:56

now the reason the developers based their

1:27:58

work on nvk isn't that

1:28:00

apple's graphics platform has

1:28:02

anything in common with nvds it's just

1:28:05

that these nvk drivers are

1:28:06

brand new and there's a lot of

1:28:08

vulkan code that isn't specifically tied

1:28:11

to the nvidia architecture

1:28:13

and probably at some point that

1:28:15

more generic vulkan code will be moved

1:28:18

into the common vulkan runtime of mesa

1:28:20

that they're working

1:28:21

on that all drivers could take advantage

1:28:23

of so they grabbed the

1:28:25

nvk code they removed nvidia

1:28:27

specific stuff and they developed the

1:28:29

apple silicon specific

1:28:30

stuff there's a giant blog post

1:28:32

talking about it it seemed like it was

1:28:34

really hard i'm making it

1:28:35

look super easy but it really

1:28:37

really wasn't if you read the blog post

1:28:38

it's insane work that they

1:28:40

did but using nvk gave them

1:28:42

a pretty big head start so it is insane

1:28:45

work here again from the

1:28:47

azahi developers if you use azahi

1:28:50

linux if you use fedora azahi well at

1:28:53

some point you will get

1:28:54

access to this driver meaning that

1:28:55

you will be able to run some apps with

1:28:57

their vulkan back end instead of the open

1:28:59

gl back end which is

1:29:01

way faster and way more optimized in

1:29:03

general because vulkan is

1:29:05

a much more powerful api

1:29:06

than open gl or you will simply be able

1:29:09

to run games through an x86

1:29:11

emulator meaning that these

1:29:13

devices will be fully usable by most

1:29:16

people apart from a few

1:29:17

hardware related things that aren't

1:29:19

supported just yet so great work from the

1:29:21

azahi developers again

1:29:23

now it's time for our little

1:29:25

ai related section of the podcast some

1:29:29

employees of open ai

1:29:31

apparently wrote a public letter

1:29:33

warning that ai companies are moving

1:29:35

forward with their ai

1:29:37

tools with undue risk without

1:29:39

any good oversight and that they're also

1:29:42

silencing employees who are

1:29:44

witnessing or want to report

1:29:46

irresponsible behaviors with these tools

1:29:48

so the letter talks

1:29:50

about these ai tools having

1:29:52

a lot of potential for harm in our

1:29:54

societies for example

1:29:55

increasing current inequalities

1:29:57

by making rich people richer and like

1:30:00

poor people not even

1:30:01

having a job anymore there's

1:30:02

also potential for manipulation and

1:30:04

misinformation through the use of those

1:30:06

ai tools because if you

1:30:08

train them on completely biased data they

1:30:10

will spit out biased

1:30:12

answers all the way up to warning

1:30:14

about the loss of control of an

1:30:16

autonomous ai system if we

1:30:19

ever reach a global ai that does

1:30:21

more than just answer a few questions now

1:30:24

this public letter comes

1:30:26

after open ai threatened

1:30:28

to strip employees of their equity if

1:30:30

they didn't sign

1:30:31

agreements that forbade them from

1:30:33

criticizing the company entirely and also

1:30:36

prevented them from

1:30:37

talking about these agreements so

1:30:39

presumably some people refused to sign

1:30:41

and said hell no i'm going

1:30:42

to talk about this publicly

1:30:43

because that's really not a good sign if

1:30:45

my company tells me to

1:30:47

shut up and not discuss

1:30:48

anything that i might have as a concern

1:30:50

open ai ceo even said that

1:30:52

the clause would be removed

1:30:54

from the from the employee agreement but

1:30:57

that was only after all

1:30:58

that information was made

1:30:59

public so it was probably to avoid apr

1:31:02

disaster on top of that at

1:31:04

open ai the ai safety team was

1:31:06

disbanded very recently i talked about

1:31:08

this on this show the

1:31:10

current ceo was fired a few months

1:31:12

ago and then rehired and he was fired by

1:31:15

the board specifically

1:31:16

because he misled them and

1:31:18

failed to disclose information and when

1:31:20

he was rehired the board

1:31:21

immediately disbanded and said

1:31:23

you know what we won't work with this

1:31:24

person or how he's running this company

1:31:26

that's way too risky

1:31:28

not a good sign either and the open

1:31:30

letter signed by open ai

1:31:32

employees was also endorsed by

1:31:34

employees of other ai companies having

1:31:37

the exact same worries it

1:31:39

was endorsed by some leading ai

1:31:41

researchers and some former open ai

1:31:44

employees as well some who left

1:31:46

specifically because they

1:31:47

felt open ai would not behave responsibly

1:31:50

so obviously it is a

1:31:52

public letter it will probably

1:31:54

not accomplish anything open ai will not

1:31:56

change its work culture or

1:31:58

lack of ethics over a public

1:32:00

letter and companies that are focused on

1:32:02

building ai currently just

1:32:04

want to make it to market first

1:32:05

they want to have the biggest amount of

1:32:07

users possible first and

1:32:09

if that means ignoring any

1:32:11

roadblock whether it's copyright

1:32:12

licensing safety or societal problems

1:32:15

they will ignore those

1:32:16

roadblocks they don't care hopefully we

1:32:19

have the eu starting to look at

1:32:21

regulations we have the us

1:32:22

also starting to look at regulations on

1:32:24

that sector so we should

1:32:26

see things maybe slowing

1:32:28

down a little bit or at least being less

1:32:30

of a free-for-all with a

1:32:32

little bit more oversight

1:32:34

i personally want to use cool ai tools in

1:32:37

my day-to-day

1:32:38

applications to make my work faster

1:32:40

i already started in the vinci resolve by

1:32:43

using the automatic

1:32:44

text detection and subtitle

1:32:47

generation for this exact podcast if you

1:32:49

use a podcast client with

1:32:51

subtitles you will get them

1:32:52

through the vinci resolve and their use

1:32:54

of ai tools why not

1:32:56

those tools can be fantastic

1:32:59

but i don't want them to be done

1:33:01

irresponsibly with any

1:33:03

without any regard for anyone else's

1:33:06

work or just by encouraging the bad

1:33:08

practices that we're seeing

1:33:09

from most of these ai companies

1:33:11

nowadays so hopefully they will get some

1:33:14

oversight and the fact that some

1:33:15

employees working there

1:33:17

are also like trying to put their foot on

1:33:20

the brakes is probably a

1:33:21

good sign in general for

1:33:23

how society perceive these tools

1:33:25

hopefully this manages to

1:33:27

accomplish something but

1:33:28

open letters like this generally don't

1:33:30

but if you do like ai

1:33:34

chatbots and the like but you

1:33:36

would want to use them more privately

1:33:38

duckduck go has a solution

1:33:40

they unveiled their new ai chat

1:33:42

service which lets you choose a large

1:33:45

language model chatbot and

1:33:46

lets you use it anonymously

1:33:48

without installing anything on your

1:33:50

computer or signing up for an account

1:33:52

they support chat gpt

1:33:54

3.5 turbo clod 3 llama 3 and mix trawl

1:33:58

which is one i had never

1:33:59

heard about of course this thing

1:34:02

is free of charge from duckduck go so

1:34:04

there are daily limits in how many

1:34:06

requests you can make to

1:34:07

any of these bots so to access the

1:34:10

feature there's an item in the duckduck

1:34:12

go sidebar the little

1:34:14

hamburger menu or you can type

1:34:16

exclamation mark ai or exclamation mark

1:34:18

chat in the search field

1:34:20

just like you could type exclamation mark

1:34:21

g to automatically move

1:34:23

to google's results for

1:34:24

example from duckduck go that's what they

1:34:25

call banks all your chats

1:34:27

are anonymized with these

1:34:29

tools there's no metadata being

1:34:31

transmitted to them there's no ip

1:34:33

addresses being transmitted

1:34:34

either and these chats also won't be used

1:34:37

to train other ai tools

1:34:39

so duckduck go apparently

1:34:41

has agreements with the chatbot providers

1:34:44

to not provide them with

1:34:45

that info and the chatbot

1:34:46

providers also say that they will delete

1:34:49

any saved chat within 30

1:34:51

days after it was made of

1:34:53

course if you willingly give personal

1:34:55

information to the chatbot

1:34:56

then obviously the company behind

1:34:58

it will receive that information and will

1:35:00

have it for 30 days before

1:35:02

they have to delete it so

1:35:04

potentially they could access it or use

1:35:06

it or someone hacking

1:35:07

their database in the meantime

1:35:09

could also get it as well if you're only

1:35:11

concerned with these tools is

1:35:13

privacy i don't think it's a

1:35:15

bad way to access them but of course if

1:35:17

your concerns are more

1:35:19

related to the quality or

1:35:21

veracity of answers or to the potential

1:35:23

ethical and licensing issues

1:35:24

then that won't do anything

1:35:26

for you you're still using those ai tools

1:35:28

even though it's a

1:35:30

little bit more anonymous

1:35:32

okay and now let's conclude things on a

1:35:35

little bit of gaming news

1:35:36

there's just one item this week

1:35:38

a linux passed the 2 market share on

1:35:41

steam and by a pretty big

1:35:43

margin it's at 2.32 percent this

1:35:46

growth is fueled by your loss of market

1:35:49

share from windows even though it's still

1:35:51

more than 96 percent

1:35:53

of the steam gaming market share mac os

1:35:56

also progressed a bit but

1:35:58

it stays almost a full point

1:36:00

under linux's market share now of course

1:36:03

this might just be temporary for the

1:36:05

month steam market share

1:36:06

tends to fluctuate pretty wildly for

1:36:09

linux and mac os because

1:36:11

there might be more or less

1:36:12

device from china that are being counted

1:36:15

these generally earn

1:36:16

windows and so they can skew the

1:36:18

data really hard in windows's favor or in

1:36:22

this month's case really

1:36:23

hard in terms of the linux

1:36:25

data still it is interesting to see in

1:36:29

terms of distributions this

1:36:30

market share growth is fueled

1:36:32

by the steam deck obviously steam os is

1:36:35

grabbing 45 percent of

1:36:37

linux's market share on steam arch

1:36:40

is almost eight percent of that market

1:36:42

share the steam flat pack

1:36:43

interestingly is six percent

1:36:45

meaning that it's seeing a lot more use

1:36:47

than it used to and the rest

1:36:48

is pretty fragmented amongst

1:36:50

distros but steam os 45 percent of that

1:36:54

steam market share meaning

1:36:55

that yeah linux gaming is

1:36:57

only driven by the steam deck hopefully

1:37:00

this is not just a fluke with chinese

1:37:02

users reporting less

1:37:03

data this month and linux dropping back

1:37:06

down under two percent next month

1:37:08

hopefully that's not going

1:37:09

to work like that because it's great to

1:37:11

see linux making headway it is still an

1:37:14

insanely small market

1:37:16

share it's like the steam gaming market

1:37:18

share for linux is even

1:37:19

smaller than the general desktop

1:37:21

market share of linux which is at about

1:37:23

4.1 or 4.2 percent so even

1:37:26

when you say that linux is the

1:37:28

second biggest pc gaming platform it

1:37:31

doesn't mean much when the first one has

1:37:34

96 percent market share

1:37:36

but it does mean that we are getting more

1:37:38

and more games playable on

1:37:40

linux the more people have a

1:37:41

steam deck or run games on linux the more

1:37:44

developers will take notice

1:37:45

and make sure that their games

1:37:47

work with proton we still need to figure

1:37:49

out a solution for

1:37:50

antichit tools because there are

1:37:53

some going back and forth with that some

1:37:55

games let you play some

1:37:56

games did let you play but then

1:37:58

moved to another antichit solution that

1:38:00

doesn't support linux some

1:38:01

games flat out said they don't

1:38:03

want to hopefully valve has another

1:38:05

solution maybe discussions maybe trying

1:38:08

to develop a solution a

1:38:10

wrapper whatever that would reassure

1:38:13

these game developers that

1:38:14

even if you're using linux it

1:38:15

doesn't and proton it doesn't mean that

1:38:17

you're cheating maybe there

1:38:19

could be a detection way to

1:38:21

say hey this is proton this is official

1:38:23

proton so people gaming with that like

1:38:26

just give them a pass

1:38:27

for proton if you detect anything else

1:38:30

then sure block them but in

1:38:31

the meantime like it's proton

1:38:33

it's verified by us it's not like an

1:38:35

additional layer of weirdness

1:38:36

maybe that could reassure them

1:38:38

i don't know what they could do but

1:38:39

hopefully they have a

1:38:40

solution uh in the cards because

1:38:43

right now that's our biggest problem if

1:38:44

you play single player

1:38:45

titles linux gaming is fantastic

1:38:47

but if you try to play multiplayer once

1:38:49

it can vary uh widely from

1:38:52

game to game it can be very

1:38:53

hit or miss still 2.3 i would never have

1:38:56

expected that in my entire life ever

1:38:59

since i started using

1:39:00

linux in 2006 i never thought we would

1:39:03

ever be a suitable platform

1:39:04

for gaming and we definitely

1:39:06

are so that's great okay so this will

1:39:09

conclude this week's episode

1:39:11

i hope you enjoyed listening

1:39:12

to it as always if you want to learn more

1:39:14

about any of these topics

1:39:16

all the links i used are in

1:39:17

the show notes if you want me to keep

1:39:19

making these shows please

1:39:20

consider supporting them

1:39:22

there's a link a few links in the show

1:39:24

notes as well for patreon libra pay

1:39:27

whatever else and if

1:39:28

you become a patreon member you will even

1:39:30

get daily versions of

1:39:31

this show five to ten minutes

1:39:32

from monday to friday so don't hesitate

1:39:34

to check that out and also

1:39:36

just a little reminder there

1:39:37

won't be an episode next week because i

1:39:40

will be on vacation things

1:39:42

will resume normally the week

1:39:43

after that so thanks for listening and i

1:39:46

guess you will hear

1:39:46

me in the next one bye