iXsystems: focusing on Linux makes more sense than FreeBSD

A few weeks ago we talked about how iXsystems, the company behind TrueNAS CORE and SCALE, has all but confirmed that its FreeBSD-based CORE product will be put in maintenance mode, while the Linux-based SCALE product will get all the attention and focus from here on out. In an interview with Blocks & Files, the company gave more insight into this choice.

“We had a huge chunk of our engineering staff spending time improving FreeBSD as opposed to working on features and functionalities. What’s happened now with the transition to having a Debian basis, the people I used to have 90 percent of their time working on FreeBSD, they’re working on ZFS features now … That’s what I want to see; value add for everybody versus sitting around, implementing something Linux had a years ago. And trying to maintain or backport, or just deal with something that you just didn’t get out of box on FreeBSD.”

“It’s not knocking against FreeBSD. We love it. That’s our heritage. That’s our roots, I was on the CORE team elected twice. So believe me, if I felt like I could have stayed on FreeBSD for the next 20 years, I would have absolutely preferred to do that … But at some point, you gotta read the writing on the wall and say, well, all the the vendor supported-innovations are happening on the Linux side these days.”

[…]

BSD aficionados don’t like this change. Moore said: “Talk is cheap and complaints are free. You know, everyone loves to complain about it. But … if people wanted to push FreeBSD forward for the last 15 years, they would have.”

↫ Chris Mellor at Blocks & Files

Above all else, my personal north star is choice, especially in technology, and as such, I want iXsystems to keep focusing on FreeBSD so that not everyone is using Linux for server- and server-like workloads. The fact that TrueNAS was a FreeBSD-based product for this long was amazing, and I would definitely have preferred if it stayed that way for many, many more years to come.

However, I don’t think the people of TrueNAS are saying anything wrong or outrageous here. They’ve got employees to feed, and the money is in Linux, not FreeBSD. If they spend more money, time, and resources on getting FreeBSD on par with features Linux has had for ages than on actually developing their own product – TrueNAS – then they’re fighting a losing battle. Honestly, I’m surprised it’s taken them this long to take this controversial step.

All we can hope for is that the things they work on, the features they develop, will make it to FreeBSD regardless.

HP 200LX and related palmtops

The HP 200 LX was a successful palmtop computer introduced in 1994. HP continued to sell it through 1999, an unusually long run for a 1990s computer model. In this blog post, we’ll dig into this largely forgotten form factor and why it became such a quiet success.

↫ Dave Farquhar

These devices are incredibly cool, but I disagree that they disappeared, as the blog post states. Just recently I reviewed my main laptop, a very small Chuwi MiniBook (2023) with the N100, and in that article I also listed some other similar options that are still being made and sold today, from companies like GPD and OneNetbook.

Beeper leaves beta, acquired by Automattic

If you haven’t already heard of Beeper, welcome! Beeper is a universal chat app for Android, iOS and desktop. Our goal is to build the best chat app on earth.

[…]

Beeper is built on an open source chat protocol called Matrix. Over time, we’ll help people migrate from proprietary, siloed chat networks to an open standard for chat. If you’re interested in learning about this, we’ve written more about our intentions.

↫ Beeper team

Beeper is just great. Because I’m European and have ties to two different countries with vastly different chat preferences, as well as a number of friends living all over Europe and the US, I’ve always had to deal with at least four different instant messaging applications. Beeper, and especially the recent completely redesigned Android version, is so good and seamless that I no longer need to use the individual applications at all.

It’s not perfect – the new Android version (the iOS version is old and outdated compared to the Android one) still has some issues. If you receive a video and play it, it doesn’t maximise unless you perform a very delicate zoom in pinch. Sometimes, sending video fails. Some emoji replies on some services look huge and pixellated. I’m sure these are all relatively low-hanging fruit types of bugs that’ll get fixes over the coming weeks and months now that the application is out of beta. However, the actual core of the application has been working amazingly well for me.

Beeper also has another major announcement.

I’m excited to announce that Beeper has been acquired by Automattic. This acquisition marks the beginning of an exciting new chapter as we continue our mission to create the best chat app on earth.

↫ Eric Migicovsky

Automattic is the company behind WordPress, Tumblr, Pocket Casts, and a whole load of other products and services. Beeper seems like a good fit, since Automattic recently also acquired Texts.com, another multi-platform messaging client.

Google details privacy and security features of its new Find My Device network

Yesterday, I posted an item about the updated Find My Device network Google launched for Android, but I forgot to link to an additional blog post by Google about the various security and privacy precautions they’ve taken. One aspect in particular stands out as something new that Apple’s Find My network doesn’t do (yet):

This is a first-of-its-kind safety protection that makes unwanted tracking to a private location, like your home, more difficult. By default, the Find My Device network requires multiple nearby Android devices to detect a tag before reporting its location to the tag’s owner. Our research found that the Find My Device network is most valuable in public settings like cafes and airports, where there are likely many devices nearby. By implementing aggregation before showing a tag’s location to its owner, the network can take advantage of its biggest strength – over a billion Android devices that can participate. This helps tag owners find their lost devices in these busier locations while prioritizing safety from unwanted tracking near private locations. In less busy areas, last known location and Nest finding are reliable ways to locate items.

↫ Dave Kleidermacher

In addition, when you’re at home, your devices won’t contribute any information either. There’s a whole bunch of other things in there, too, so head on over if you’re curious.

Ten years ago, Windows XP received its final update

Exactly ten years ago, on April 8, 2014, Microsoft released the final security patch for Windows XP. The day marked the end of the road for one of the most iconic Windows versions ever released.

↫ Taras Buria at Neowin

I never liked Windows XP. Compared to the operating systems I was using at the time – BeOS, Mandrake Linux 8.x – Windows XP felt kind of like a bad joke I wasn’t in on. It looked ridiculous, didn’t seem to offer anything substantial, and it didn’t take long for major security incidents related to Windows XP to start dominating the news. It wasn’t until several service packs had been released that Windows XP came into its own, but by that point, I had already found a much better alternative for my Windows needs at the time. I’m of course talking about Windows Server 2003, the better Windows than Windows XP.

Today though, I do have an odd fondness for Windows XP, as I grow older and XP has become something from my teenage years. The look and feel of Windows XP – the classic theme, not that horrendous Fisher Price nonsense – the sound set, the wallpaper of course – has become iconic, warts and all, and whole generations of people will feel instant feelings as soon as they see Bliss or hear that iconic startup sound.

Windows XP with a few service packs now belongs to the small group of Windows releases that I would call the peak of the platform, together with Windows 95 and Windows 7 (and perhaps Server 2003, but that’s more of a personal thing and not a consumer operating system). Everything else has not exactly been great or even aged well, and I doubt Windows 10 and 11 will suddenly get good, either.

Google launches Axion processors, new Arm-based CPUs for the data centre

Built using the Arm Neoverse V2 CPU, Axion processors deliver giant leaps in performance for general-purpose workloads like web and app servers, containerized microservices, open-source databases, in-memory caches, data analytics engines, media processing, CPU-based AI training and inferencing, and more.

Axion is underpinned by Titanium, a system of purpose-built custom silicon microcontrollers and tiered scale-out offloads. Titanium offloads take care of platform operations like networking and security, so Axion processors have more capacity and improved performance for customer workloads. Titanium also offloads storage I/O processing to Hyperdisk, our new block storage service that decouples performance from instance size and that can be dynamically provisioned in real time.

↫ Amin Vahdat on the Google blog

Fancy new ARM processors from Google, designed explicitly for the data centre. In other words, we’ll never get to play with it unless one makes its way to eBay in a few years.

Embedding the Servo web engine in Qt

I’ve been talking about Servo, the Rust browser engine project originally started at Mozilla, for a while now, and while the project’s still got a long way to go, it’s definitely a serious contender to become a competitive browser engine in the future. It seems it’s starting to get some traction already, as The KDAB Group is working on bringing Servo to Qt.

At KDAB we managed to embed the Servo web engine inside Qt, by using our CXX-Qt library as a bridge between Rust and C++. This means that we can now use Servo as an alternative to Chromium for webviews in Qt applications.

↫ Andrew Hayzen and Magnus Groß

They’re already showing off a basic QML application rendering websites using Servo, which is pretty cool. It goes to show that Servo can definitely eventually fulfill the role that Chromium, WebKit, and Gecko fulfill now.

Intel’s ambitious Meteor Lake iGPU

Intel and AMD both tried to ship iGPUs fast enough to compete with low end discrete cards over the past 10 years with mixed results. Recently though, powerful iGPUs have been thrown back into the spotlight. Handhelds like Valve’s Steam Deck and ASUS’s ROG Ally demonstrated that consumers are willing to accept compromises to play games on the go. AMD has dominated that market so far. Valve’s Steam Deck uses AMD’s Van Gogh APU, and the ROG Ally uses the newer Phoenix APU. Unlike Van Gogh, Phoenix is a general purpose mobile chip with both a powerful CPU and GPU. Phoenix doesn’t stop at targeting the handheld segment, and threatens Intel’s laptop market share too.

In response, Meteor Lake brings a powerful iGPU to the party. It has the equivalent of 128 EUs and clocks up to 2.25 GHz, making it modestly wider and much faster than Raptor Lake’s 96 EU, 1.5 GHz iGPU. Raptor Lake’s Xe-LP graphics architecture gets replaced by Xe-LPG, a close relative of the Xe-HPG architecture used in Intel’s A770 discrete GPU. At the system level, Meteor Lake moves to a GPU integration scheme that better suits a chiplet configuration where the iGPU gets significant transistor and area budget.

I’ll be testing Meteor Lake’s iGPU with the Core Ultra 7 155H, as implemented in the ASUS Zenbook 14. I purchased the device myself in late February.

↫ Chips and Cheese

I’m absolutely here for the resurgence in capable integrated GPUs, both for PC gaming on the go and for better graphics performance even in thinner, smaller laptops. I would love to have just a bit more graphics power on my thin and small laptop so I can do some basic gaming with it.

Google launches new Find My Device network on Android

Today, the all-new Find My Device is rolling out to Android devices around the world, starting in the U.S. and Canada. With a new, crowdsourced network of over a billion Android devices, Find My Device can help you find your misplaced Android devices and everyday items quickly and securely. Here are five ways you can try it out.

↫ Erik Kay on the Google blog

This old Android feature has basically been updated to be the same thing as Apple’s Find My, but with more than just one vendor making the tracking tags. Of course, this means it also comes with the same problems, from its use by stalkers to controlling partners, and everything in between. This is a very problematic technology, one which I think is almost impossible to make safe.

Still, I have a Samsung tracker that I don’t use anymore – because I bought a Pixel 8 Pro, and don’t want to install any Samsung applications – and I do plan on getting a new tracker that’s compatible with this new Find My Device network. With two small kids, it’s easy to lose track of something like my car keys, and instead of stressing about where they are when we need to leave on time, I can just ping them using our Google Home devices instead.

Sometimes, these silly smart technologies really do take just that little bit of stress out of your life – you just have to be really picky and honest with yourself about what you really need.

Microsoft adds driver to Windows that prevents changing the default browser using the registry

There are various ways you can change the default browser and similar defaults on Windows, but oneof the ways many third-party tools do this is by editing the relevant registry strings. It turns out that Microsoft is not particularly happy with this, as they’ve recently introduced a new driver specifically designed to prevent this from happening, by blocking tools like regedit or PowerShell from editing a number of registry keys for setting default applications. The driver was discovered by Christoph Kolbicz.

Microsoft implemented a driver based protection to block changes to http/https and .pdf associations by 3rd party utilities. The rollout was staggered and activated “randomly”, but in the meantime I got many reports – also from business or education environments (but not Server OS).

Microsoft also updated the driver during my tests (from 2.0 to 2.1) and extended the deny list of executables. This means, they can change the behavior almost on the fly and add new tricks or block additional extensions/protocols!

↫ Christoph Kolbicz

Digging further into what, exactly, this driver can do, Microsoft also made it so that even if you disable the driver, an additional scheduled task will run to re-enable the driver and revert the registry changes. It also seems this is somehow related to the changes Microsoft has to make to comply with the EU’s DMA, but the driver is also installed on systems outside of the EU, so it’s all a bit unclear at the moment.

Just how much faster are the GNOME 46 terminals?

Over the GNOME 46 cycle, VTE has seen a lot of performance improvements. Christian Hergert mentioned some of them in his blog posts about VTE and about his work in GNOME 46. But how much did the performance actually improve? What should you, the user, expect to feel after installing a fresh Fedora 40 update and launching your favorite terminal?

Let’s measure and find out!

↫ Ivan Molodetskikh

The short version is that the improvements are definitely noticeable during genera use – for the long version, read the actual article.

Microsoft blocks even more customization apps in Windows 11 version 24H2

Users recently noticed that third-party apps for customizing the user interface no longer work in the upcoming Windows 11 version 24H2. Not only does Microsoft not allow you to run those apps, but it even blocks you from upgrading to newer builds. StartAllBack, a popular tool for tweaking the taskbar and Start menu in Windows 11, was among the first to fail on 24H2. Sadly, it is not the only one. ExplorerPatcher also no longer works in Windows 11 24H2.

ExplorerPatcher from Valinet is quite a popular app that lets you bring back the old Windows 10 taskbar in Windows 11, apply additional modifications to make Windows 11 slightly better, and restore some of its missing features. Windows 11 version 24H2 is now flagging ExplorerPatcher as incompatible due to “security or performance issues” with the following message.

↫ Taras Buria at Neowin

I guess the taskbar and Start menu are incredibly important real estate for Microsoft, since it’s the absolute prime spot for showing ads. If users replace their taskbar and Start menu with something from a third party, that prime real estate is gone. Major conspiracy vibes, yes, and I know this isn’t the reason, but why else would they be blocking these applications?

I can’t think of anything that makes more sense.

Outlook is Microsoft’s new data collection service

With Microsoft’s rollout of the new Outlook for Windows, it appears the company has transformed its email app into a surveillance tool for targeted advertising.

Everyone talks about the privacy-washing campaigns of Google and Apple as they mine your online data to generate advertising revenue. But now it looks like Outlook is no longer simply an email service; it’s a data collection mechanism for Microsoft’s 801 external partners and an ad delivery system for Microsoft itself.

↫ Edward Komenda on the Proton blog

Now, note that this is an article written by Proton, posted on the company blog, so of course they’re not going to be too kind towards their competitors. That being said, the article’s not wrong: the new Outlook web application, now the default in Windows, not only shared your data with around 800 partners, it also displays ads inside of the application. On macOS, it will even show yo fake emails that are, in fact, ads.

Furthermore, once you add your accounts to this new Outlook web application, you’ll also be uploading your username and password to Microsoft, giving them access to your email accounts for advertising and data collection purposes, a shady practice a ton of email clients on mobile devices tend to do as well.

Suffice it to say you really shouldn’t be using this new Outlook, and you should make sure friends and family don’t either. This is yet another nail in the coffin of Windows, now an advertising and data collection platform first, and operating system second.

WinBtrfs: an open-source btrfs driver for Windows

WinBtrfs is a Windows driver for the next-generation Linux filesystem Btrfs. A reimplementation from scratch, it contains no code from the Linux kernel, and should work on any version from Windows XP onwards. It is also included as part of the free operating system ReactOS.

↫ WinBtrfs GitHub page

If you’re running a distribution that defaults to Btrfs, or you actively choose to use it on other distributions, and you also happen to dual-boot Windows because your boss makes you use some garbage corpo software, this driver will make your setup a bit easier to manage.

The rise and fall of Silicon Graphics

Clark founded Silicon Graphics Inc on the 9th of November in 1981, and he left Stanford early in 1982 to pursue building the company full time with just $25000 in funding (around $85000 in 2024) from a friend and the contents of his own accounts. Accompanying Clark in this adventure were Kurt Akeley, Dave Brown, Tom Davis, Mark Grossman, Marc Hannah, Herb Kuta, Rocky Rhodes, and Abbey Silverstone. While SGI knew they would deal in computers outfitted with a powerful GPU, they did not know precisely what else those computers should feature. As a result, Clark asked potential customers what they’d like to see in a workstation. While at least one potential customer was interested in VMS, NASA’s new Advanced Supercomputing division was very interested in UNIX and they were willing to pay. The division’s director at the time spoke with Clark, and (verbally) committed to purchasing at least eighteen workstations in their first order.

↫ Bradford Morgan White

SGI machines are by far the most sought-after and most expensive of the retro UNIX workstation market today, with machines still netting thousands of euros, even for damaged or less than ideal examples. IRIX is probably also the dead UNIX with the most active fanbase, still releasing software and updates to this very day.

An SGI machine is high on my list, and writing an article about using IRIX today is something I’ve been wanting to do for decades. Sadly, the odds of finding one that’s both affordable and shippable to the Arctic part of Sweden – especially now that OSNews is my full-time job and I’m dependent on Patreons and donations – are very, very slim.

Setting up a YubiKey on Linux is a mess, and it really shouldn’t be

One of the things I’ve always wanted to experiment with on my computers is logging in and authenticating things like sudo requests with a hardware tool – a fingerprint reader, a smart card, or a USB hardware security device like a YubiKey. There’s really no solid reason for me to want this other than that it just feels cool and futuristic to me (yes, even in this, the year of our lord 2024). I have no state secrets, no secret Swiss bank accounts, no whistleblower material to protect, and my computers rarely leave the house – I just want it because it’s possible and cooler than typing in my password.

Due to the flexibility and feature set of the YubiKey, I think it’s the best choice to go for. A no-name USB fingerprint reader would probably be ugly, cumbersome to position, and Linux support would be difficult to determine. A USB smart card reader would bring the same issues as the fingerprint reader, and combined with a smart card it seems like it’s just a Yubikey with extra steps. I do have to admit the idea of sliding a smart card in a slot and have it authorise you sounds really, really satisfying.

Anyway, YubiKeys come in all shapes and sizes, but I want one of the USB-A ones with a fingerprint reader built-in, since I can plug it in at the bottom of my monitor, perfectly positioned to put my thumb on it to authenticate. This way, it’s easily accessible to be used to log into my desktop session, authorise sudo requests when I’m configuring things, log into websites with Firefox, and so on.

But there’s a problem: setting up a YubiKey on Linux seems like it’s a huge ordeal.

Just look a the official instructions on the YubiKey website, or the instructions on the Fedora website, my distribution of choice. That’s absolutely insane, and nobody should be expected to understand any of this nonsense to use what is being marketed as a consumer product. It’s important to note that this is not a hardware, software, or driver issue – all the necessary support is there, and Linux can make full use of the functionality tools like the YubiKey offers. The problem is that you’re expected to set this up manually, package by package, configuration file by configuration file, PAM module by PAM module.

When I first looked into getting a YubiKey, I expected biometric and advanced authentication tools like these to be fully integrated into modern Linux distributions and desktop environments. I figured that once you plugged one of these tools into your PC, additional options would become available in GNOME’s or KDE’s user account settings, but apparently, this isn’t the case. This means that even if you manually set everything up using the official arcane incantations, your graphical user interface won’t be aware of any of that, and changing anything will mean you have to go through those official arcane incantations again.

This is entirely unacceptable. The moment you plug in an an advanced hardware security tool like a YubiKey, GNOME and KDE should recognise it, and the settings, tools, and setup ‘wizards’ relevant to it should become available. All the hardware and software support is there – and in 2024, biometric and advanced security devices like these should not be so complicated and unforgiving to set up. Smart cards and fingerprint readers have been supported by Linux for literally decades. Why isn’t this easier?

For now, I’m still in doubt about going through with buying a YubiKey. I definitely have the skills to go through with this whole insane setup process, but I really shouldn’t have to.

OpenBSD 7.5 released

OpenBSD 7.5 has hit the streets (or servers and workstations), and it comes with a metric ton of improvements and new features. Of course, the kernel has been improved in countless ways, from symmetric multiprocessing improvements to a new font usable as a console font. The graphics drivers have been updated to match Linux 6.6.19, and drivers for the Apple display coprocessor were added. Furthermore, a whole slew of additional ARM boards and SoC are now supported, and new drivers for a variety of networking chips, both wired and wireless, were added as well.

Of course, that’s just a selection of the changes, and the full changelog lists them all for those of you with specific wishes.

FFmpeg 7.0 released

A new major release, FFmpeg 7.0 “Dijkstra”, is now available for download. The most noteworthy changes for most users are a native VVC decoder (currently experimental, until more fuzzing is done), IAMF support, or a multi-threaded ffmpeg CLI tool.

This release is not backwards compatible, removing APIs deprecated before 6.0. The biggest change for most library callers will be the removal of the old bitmask-based channel layout API, replaced by the AVChannelLayout API allowing such features as custom channel ordering, or Ambisonics. Certain deprecated ffmpeg CLI options were also removed, and a C11-compliant compiler is now required to build the code.

↫ FFmpeg website

I don’t think many of directly interface with FFmpeg, but we’re most likely all using it one way or another. Even Microsoft (here‘s the referenced bug report).