Bruce Perens: “Open Source Has Failed Its Users.”

Bruce Perens: “Open Source Has Failed Its Users.”

Bruce Perens has finally admitted that “Open Source has failed its users.” from the angle that users who expect to have Freedom from Open Source usually get no such thing at all.

Ever since the Open Source “movement” started, it has not been about the Freedom of the user at all.

The Free Software Movement is more than a decade and a half older, and Free Software is about protecting the Freedom of the user who gets a copy.

“Open Source” started out in the late 1990s to persuade businesses of a “superior method to develop software which works better, and you can even have free labor too”, and by the benchmarks that the movement itself set for itself, it has been a raging success.

Almost everyone on the planet today has some Open Source software, whether they realize it or not. It’s in Android, it’s in Mac OS, it’s in the iPhone, it’s in cars, it’s even in Windows, bits and pieces of this Open Source.

But these companies have packaged it, often, in ways where the user cannot run a different version of it, or at least not easily, and enjoy any sort of Freedom to improve on it, or to remove malicious features and replace it with a version of the program without the malicious feature.

What finally sent Bruce Perens off the edge?

IBM. IBM and Red Hat.

Today, Red Hat is owned by IBM and it is not at all like the Red Hat from 10 or 20 years ago. Today, we have a Red Hat that is a major parasite and a troll, and something that might as well be another Oracle, or another Google, or another Apple.

Whenever they “deal with” the GPL, they have lawyers on standby trying to figure out how to sabotage the GPL and make it effectively meaningless to the user.

The GNU General Public License was created as a Free Software License, to make sure that the user would always have the Freedom to use modified copies, to share the improvements in that copy, and to compile and run a different version of that copy.

Over the years, and especially culminating under IBM’s ownership and tenure of “Red Hat Enterprise Linux”, Red Hat has been doing increasingly nastier things with “their” Linux kernel.

They think that there’s some magic words that their lawyers can sprinkle into some other agreement that lets them retaliate against their customers for flexing their rights under the GPL, and most of their customers won’t dare to question this, much less sue Red Hat, which in my opinion, they definitely deserve for trying to pull this shit.

Over the years I’ve fought off some nasty companies who just figured they could throw a Linux kernel and some other stuff over the fence and walk off and refuse to hand over the source code. Probably the biggest one was Samsung, with a Blu Ray player, model BD-C5500, around 2009-2010.

I argued, as the Vizio lawsuit does now, that when they sold me one, they made a “contract” with me, that the GPL was a “contract” with the user, and that I wanted the source code or they’d better prepare to argue that it was not a contract.

No court has ruled on whether the GPL is or isn’t a contract. If the GPL is a contract, as they seem to be moving in the direction that it is, then every software license is a contract, and potentially any user can sue for the distributor’s failure to perform a thing under that contract.

This will not help “Open Source” users at all, because those licenses don’t involve the author or the distributor promising to do anything.

In the specific case of Samsung, I was able to get them to turn over the GPL/LGPL stuff in a ZIP file pretty quickly once I started down that road, but they should have just complied.

Thanks to “Open Source” software elsewhere that didn’t protect my Freedoms at all, there was still no way to study the code and run a different version on my player.

Companies hoard source code and violate licenses even when there is absolutely no practical benefit for them to do so. These companies, serial GPL violators, are usually just a “bag of dicks”. They’re usually not even trying to hide it because they can prevent you from doing something by hiding it.

Red Hat even falls into this category now, under IBM, as it pertains to trying to hide the kernel and call it “theirs” even though it is GPL-licensed. A “bag of dicks” that I believe are violating “the spirit of the license” even if what they are doing is legal.

The GNU GPL is Open Source, but it isn’t Open Source.

The goal of the GNU GPL is to give users the Freedom to do anything they want, as users. It meets the “Open Source Definition” by that measure, but it is a disservice to refer to it as an “Open Source license”. It is a “Free Software License”.

Open Source tends to degenerate into proprietary software that the user cannot actually do anything with except run, often almost immediately as soon as anyone else who finds it to be a handy program gets it and cobbles it into something else.

The GNU GPLv2 was released in 1991, when computer users faced different threats.

Most users of the PC were not faced with malicious software that controlled which operating system was allowed to boot. This malicious software that users face today is called “UEFI” and “Secure Boot”. On non-x86 systems, you frequently can’t turn it off at all and boot a different operating system, and on x86 systems, it’s only possible for legacy reasons which Microsoft is increasingly not supporting anymore at all.

It’s designed so that Microsoft can throw a switch later and force their partners to, and they can say “All ours now….All ours now.” about the PC and leave the user with no choices except whatever Microsoft allows.

And a lot of really terrible human beings have collaborated with Microsoft to “support” this system on the PC from the Linux side, and not only to support it, but to put a backdoor into the OS. This backdoor is even in Debian. The backdoor is called Linux Vendor Firmware Service.

LVFS “dials home” and uploads “blacklists” of things Microsoft doesn’t want you to have on your computer, and then sneaks these blacklists into your UEFI firmware, quietly.

In fact, you will only find out about LVFS doing this when it, like everything IBM and Microsoft have a hand in, breaks down and starts throwing weird indecipherable error messages.

I recommend purging LVFS out of the system and not giving the OS a network connection until it is gone.

The fact that this horseshit is even in Debian shows that Debian no longer meaningfully respects the user’s Freedom. It’s up to the user to know that Debian, even, is doing things behind their back and stop it.

Bruce Perens is right that Open Source has failed its users. Why has it failed? Money is a corrupting factor.

Microsoft and others have basically bought and bribed their way in. They pay generous salaries to people without any form of conscience to assist them in harming billions of computer users.

So what do we do about it?

Well, we will have to remain apprised of the situation. For now, do we have to panic and run for the fire escapes from the PC? No. There’s a very good chance that the computer you use right now will continue working for years, and all you should do to it is turn off “Secure Boot” and remove LVFS.

In the future, we’ll have to be much more careful to buy from PC vendors that include firmware that’s not a pile of garbage that hides bugs and locks you out calling itself “Security”. OEMs like System76 appear to be concerned about your Freedom as of the time of this writing, but as always, stay informed. Things can change.

The various “Pi” devices are cheap, and always getting faster. Each iteration gets multiples faster than the last one, and they can be built for between $100-150.

More work is being focused on emulating x86 for Wine, and at the rate the Pi systems are improving, they should be able to run the majority of Windows software, if not now, eventually. The faster the CPU, the less the dynamic binary translation even matters.

I personally, am going to use whatever keeps Microsoft’s operating system out of my life, even if it means not using the x86 PC anymore. The only thing Microsoft is bringing to computing anywhere they go is more viruses and data breaches.

Recently, the Lake County, Illinois Health Department had their second data breach this year, and third in the past two years. They implicated Microsoft in passing.

Microsoft is responsible for thousands of data breaches. Every scammer on the planet probably has your Social Security Number and other stuff because someone else paid Microsoft to do things for them.

Microsoft is an option for when you don’t give a damn about Security because it’s someone else who will suffer every time you get attacked.

And some of their victims, direct customers who do get attacked later and lose something keep going back, a lot of the time.

“Did Microsoft do this to you?”

“Yeah, but you gotta understand, deep down, they really love me!”

The kind of Nazis and morons that they hire to work at Azure, who brag about their drug binges and venereal disease and all the coworkers who should “be deported”, and how the Indian CEOs are ruining tech companies, who cap it off with a good stabbing on the Microsoft Campus, should have been your first clue.

We absolutely cannot depend upon proprietary software companies.

So instead of stewing on the fact that the “Open Source” people kind of suck because “Open Source” isn’t about Freedom, let’s move this in a more positive direction.

It’s unfortunate every time a software developer chooses to use an “Open Source” license instead of a “Free Software” one with copyleft features, because it means there’s another program out there where the freeloaders in the Fortune 500 can use gulag labor to build roads only they can benefit from, so to speak.

That library or that utility you release under the Open Source license instead of the Copyleft one, there might be an improved version floating around in Windows, Apple, or Android that only those companies can use.

They can quietly run off with it, not even tell you they used it at all, and then you find out that Intel has created an entire malware program designed to undermine the security of the user’s OS, out of your OS, like the MINIX incident.

Everyone with a post-2016 Intel computer is running an entire UNIX-like OS on the CPU, which is there to spy on them and act as a backdoor that is impossible for the user to remove and which the OS you see is unaware of, and cannot control.

MINIX is “Open Source”. Open Source means it’s only a matter of time before a program you release like this gets turned around and used to attack the user, or at the very least, by Tech Company jerks on the Left Coast, or maybe even a Communist regime, to harm people and benefit themselves at the expense of millions or billions.

Don’t be a promoter of “Open Source”. Be a promoter of “Free Software”. Make sure your users keep their rights no matter whose hands your program has passed through.

This is not to say that the GPLv2 is perfect. It is not. It is deprecated by the GPLv3, which was designed with more modern threats to the users in mind.

The only real opposition to GPLv3, are malicious entities that want to harm your users, and they have a lot of anti-GPL propaganda out there to try to discourage developers from choosing this license.

In the context of booting a computer, the whole “systemd-boot” setup is designed to replace GRUB2, in order to impose Microsoft’s “Secure Boot” malware on the user.

Microsoft refuses to directly sign anything under the GPLv3 because then they would have to tell you how to work around Secure Boot, so the current setup is using a program called “shim” to load GRUB.

Shim is a binary the user is not allowed to control, and it’s licensed under an “Open Source” license, which makes it easy to attack the user’s Freedom.

The problem with this setup is that it’s flakier. There’s no technical reason why GRUB2 can’t boot a PC directly. They’ve made the system crankier and more prone to weird failures purely to appease Microsoft and help them attack the user.

Open Source has “failed its users”. It was designed to, so it is doing what it was made to do.

According to Wikipedia, the UK and Canada Fought for Manuel Noriega and the Nazis Assisted the United States. Corporate Vandalism is More Serious.

According to Wikipedia, the United Kingdom Fought on the Side of Manuel Noriega and the Nazis Assisted the United States. Corporate Vandalism is More Serious.

I went to read the article on the US invasion of Panama to remove Manuel Noriega, and found this:

Of course, you can probably see what the problems are.

For starters, the Canadians and British were supposedly at war with the United States, taking the side of Panamanian dictator Noriega, and the United States was assisted by Nazi Germany and Fascist Italy, which ceased to exist at the end of World War II, over 40 years prior to the intervention in Panama.

The correct version is this:

I always correct Wikipedia vandalism when I see it and request article protection of some kind when it’s getting out of control.

The unfortunate thing is, that anyone who links to an article gets the article, in a vandalized state. Sometimes the vandalism is stupid or obvious like a bunch of random letters or saying that the Axis from World War II was involved in a military intervention of the late 1980s, and sometimes it’s a corporate PR firm from the oil and tobacco companies, Walmart, Microsoft, etc.

Many corporate trolls pay a lot of money to make sure that their vandalism of Wikipedia “sticks”. They have PR firms that provide “editors” who rack up a lot of edits and win “elections” to watch over Wikipedia as a whole, and then as a backstop, they make sure that the foundation behind Wikipedia is subservient to the moneyed interests.

After George W. Bush started defunding the Corporation for Public Broadcasting in the 2000s, I started seeing ads for BP and Walmart, now there are ads everywhere.

They say that these “don’t affect their content”, but with government funding being “only 1.6% of the budget”, who affects the content? The people paying for the lights to be kept on.

You don’t shit on who is paying the bills. “This guy gets whatever he wants.”

The Wikipedia “project” is as much of a charity as NPR was after BP’s Deepwater Horizon disaster. They needed PR and they needed it fast, after dumping 134 million gallons of crude oil into the Gulf of Mexico.

Then spraying it with toxic “dispersants” which caused it to fall to the sea floor and cause a disaster where the news cameras couldn’t see it.

Where did they go? Why, NPR and PBS of course. Then there were “documentaries” about BP washing oil off of birds. Where did the oil come from? Don’t let your tiny little smooth brain worry about that, my friend.

With Microsoft, Bill Gates, and Wikipedia, it’s the same song and dance.

Kiwi Farms Re-Listed by Microsoft Bing and Their Pet, DuckDuckGo.

Kiwi Farms Re-Listed by Microsoft Bing and Their Pet, DuckDuckGo.

Today (November 15th, 2023), I noticed that DuckDuckGo, which is just a skin for Microsoft Bing, was returning Kiwi Farms to the top of the search again.

Google is still blacklisting it.

I wonder if the actual Nazis at Microsoft (see the full list of posts about the MicroSSoft Nazi, Joseph Cantrell) have removed the blacklist deliberately or if this is just another “something happened something happened”.

Until today, no American search engine would even tell you that the Kiwi Farms existed, or at least where to find it, but now thanks to MicroSSoft Bing, there are two (if you count the DuckDuckGo skin, which is hosted in MicroSSoft Azure and pays MicroSSoft Bing for results).

Yandex, a Russian engine with an English language version (they’re like the Russian Google), never removed Kiwi Farms to begin with.

Linus Torvalds on the Lenovo UEFI Bugs. “When You Can’t Trust Kernel Updates, People Will Stop Updating the Kernel.”

“One thing I find myself wondering about is whether we shouldn’t try and make the “ACPI” extensions somehow Windows specific.

It seems unfortunate if we do this work and get our partners to do the work and the result is that Linux works great without having to do the work.

Maybe there is no way Io avoid this problem but it does bother me. Maybe we could define the APIs so that they work well with NT and not the others even if they are open.

Or maybe we could patent something related to this.

-Bill Gates, 1999

Linus Torvalds on the Lenovo UEFI Bugs. “When You Can’t Trust Kernel Updates, People Will Stop Updating the Kernel.”

In my post yesterday, I mentioned the nightmare that’s going on in Lenovo laptops from the last 3-4 years due to a Chinese developer at Loongson bumbling around in some really hacky ACPI (power management and device info) code in the Linux kernel.

Let’s face it, Lenovo is never not a nightmare.

They’re so filthy and corrupt, and they put such cheap shit (keyboards are always a problem after a few years in my observation, I also had to have them replace the entire mainboard in this laptop when it was less than a year old due to USB port malfunctions), that they’re always being sued for SOMETHING even if it isn’t Linux-related.

Like the Superfish malware they pre-installed to get ad money on some computers, or the time they abused a Windows anti-theft feature by having a BIOS that re-installed all the OEM “crapware” every time a user uninstalled it, or for a different adware incident where they ended up paying me some money, or all of their defective laptop monitors (which you can still claim money from if you have those systems.)

ACPI, though, is a Microsoft standard that started out in the 90s.

From the beginning, Bill Gates (who presided over Microsoft during its high water mark of making money through criminal activities) was E-Mailing people at Microsoft trying to figure out how they could make the ACPI standard so bad that it was either Windows-only or at least difficult to get working right in a competently-designed OS.

So it is not the fault of Linux that the PC has so many problems.

Most of the actual, worst, parts of the PC’s Legacy BIOS. The parts, like ACPI, which have brought so much swearing and cursing from users when their computers don’t work, was hashed out by Microsoft, and for the purpose of deliberately bricking non-Windows systems, or at least to cause annoying malfunctions.

Then, because re-writing things costs money, this crap was basically copied and pasted, verbatim, into the even bigger PC firmware trash fire, called UEFI.

As bad as ACPI in general is, it’s more of a problem with some manufacturers, mainly ones that use a particularly heinous supplier of UEFI firmware. (Lenovo tends to use Insyde.)

The ACPI code in the Linux kernel is some of the worst code because it deals with some of the worst firmware, PC firmware.

Microsoft designed it to sabotage other systems to maintain a Windows monopoly.

So Torvalds was right when he says if you do something to fix one thing, it often breaks something else. It’s pissing him off, it’s pissing me off. I’d imagine that it pisses off anyone who is not in Microsoft’s orbit, to be honest.

And it’s why I’ll either buy a System76 x86 laptop next time, with open source firmware, that isn’t some binary blob designed by Lenovo, a Chinese company that only barely tests to see if Windows boots and then calls it, or just start over with something like the 8 GB RAM Raspberry Pi 5 with Linux on some flash memory.

(Check your Windows system logs sometime if you have a typical Lenovo system. The firmware certainly isn’t harmless even on Windows. It fills the logs with errors, Windows hides them. It’s a fantastic arrangement they have.)

I’m smart enough to make an RPi 5 work, and they only set you back about $100-ish plus maybe some peripheral expenses. It’s not a hole in the bank account like some $1,000 lulzy laptop made out of Chinesium.

(I do wonder whether ZStd or lzo-rle would be the way to go for the ZRam device though. You’d definitely want the fastest algorithm for a compressed RAM device on a Pi 5 even if it is 4-5 times as fast as the Pi 4. So far, the only things going for an x86 PC are compatibility with proprietary Windows software in Wine, Steam for some people, and the fact that Windows coming with it made it bog standard for cheap mass produced garbage to throw Linux on, until now anyway.)

Linus Torvalds brought up a good point though. Even though these ACPI disasters are not the fault of Linux, he’s also not allowed to do interviews and bring this to public attention.

Linus Torvalds can’t tell you how pissed he is at this, because the Microsoft-controlled (buying influence and voting seats, along with partners) “Linux Foundation” is his paycheck.

Abuse has historically been hurled at Linus by criminals, monsters, and mobsters.

Sometimes abuse comes from incompetent fucktards who may not be criminals, but they’re at least doing bad work. Often from IBM/Red Hat (related to systemd and the idea to put dbus in the Linux kernel, among their other greatest hits), which kept bringing him bad code and even worse ideas.

I could see why Red Hat wanted dbus in the kernel. I really can. If it’s in the kernel, it makes the problem everyone’s problem. They were also hoping to lob it in there like a grenade without fixing any of their bugs, like random disconnects from the bus, and then run away without fixing anything. A drive-by dbus-ing.

These types of toxic people were the reason Linus was forced into “therapy” to keep his job (on a project he started), but although he can’t be as straightforward as he once was, he did at least let on that he’s badly annoyed that if things like the Lenovo incidents keep occurring nobody will trust kernel updates.

And he’s right.

Fedora once broke power management on my 2016 Yoga 900 ISK2 for over 3 months when Intel turned it off to investigate a security hole in their graphics card. Then they turned it back on without ever fixing that hole three months later. I had to version lock an older kernel with DNF and let dozens of much more serious CVEs pile up.

My mistake was that it was easier to keep Fedora then and do that than undertake the transition away from Fedora, which I eventually did years later because they’re in such a bad shape now that they’re ruining the distribution by dropping packages, making incompetent design decisions, and can’t even manage a release anymore without multiple delays.

Now that I am on Debian 12 and Linux 6.1 LTS will just keep getting bug fix backports indefinitely from upstream, this laptop is going to use Linux 6.1 until Debian 12 doesn’t work anymore or the hardware konks out.

I’m done pulling in major component updates that nobody can support because they don’t know what my exact computer will do when they get them. If I wanted broken shit every month, I could just grab the Windows 11 ISO and install that.

Thankfully, Debian has long term releases. They do what they do the day you install them, and it probably just gets better later on because it’s low risk stability patches and security patches.

Some people have chided me and say I should be using something even “edgier” than Fedora, like Manjaro. They claim that with little or no testing, I can just deploy what someone managed to run through a compiler yesterday that has thousands of major changes, deploy it, and it will never ever break down on me.

No thank you. You’re basically throwing darts at a board and hoping they at least land somewhere on the board when you run a distribution that doesn’t commit to conservative, semi-frozen releases, that are supported for years.

Debian 12 doesn’t have to be completely stuffy.

There are ways to target and backport individual releases of newer software to it.

Even Mozilla figured out the other day how to run an Apt repository, apparently, after a tradition that ran back to Netscape Navigator of putting it in a tarball and saying “Linux”. *slow claps*

There’s Flatpaks, there’s Debian Backports.

I’ve found out, at some great burden on myself, that it’s better to learn how to administer Debian than get something like Fedora installed really quickly by slapping “next” a bunch of times and then finding out that you “passed it to find out what’s in it”, as former House Speaker Nancy Pelosi put it with Obamacare.

In America, Congress passes gigantic bills in the middle of the night which contain 3,000 pages of new laws, which no voting member has even read, then you need hundreds of pages of “trailer bills” to fix the mistakes and the stuff that nobody even knew was there.

Then there are court cases to determine what Congress even meant because they used the wrong words in a draft and it made it into the law, and someone thinks they can bring the law down because of a draft error.

While all this is playing out, they’ve done 100 more laws just like that one.

That’s sort of what trying to deal with a distribution that’s constantly bringing new software in is like. Problems come and go. There’s no time to even figure out what’s gone wrong and where at.

The cost of slapping next a bunch of times and having a “system that functions” is that it will turn out to not function especially well for anyone.

They have to kind of guess what a core user will want to do, and they can guess wrong.

Every decision they make can either bloat or leave something out of a “live installer”, or make a setting that works for some people, and not so well for others.

Lately, Fedora has been a really big WTF for me. First they drop LibreOffice, which I need, because that’s what IBM demanded. Then they put in a systemd-oomd that kills browser tabs when you have a ton of free memory.

Now they can’t even figure out how to make a release without at least a two week delay, and they say maybe they’ll just give up fixing the blockers and cut an ISO.

Fedora has always been an uneven distribution, but now I don’t even trust it on a laptop I mainly use 10 applications on.

Again, it comes back to making changes to the kernel, and sending them out if they compile at all. I’ve had problems with Fedora I haven’t had with any longterm distribution, ever, including “upgrade your kernel and get a panic in the Ext4 driver”.

There is a very real risk that marking things stable and compiling them without anyone really checking what’s going on, people won’t trust kernel updates anymore.

Many of these problems are happening upstream because nobody checks the work of companies like Intel. They’ve been given a license to talk in something rather like “Fedspeak” and not document what their code really does, and there’s a very “laissez faire, laissez passer“, or let them do whatever they want, with companies and their driver code. So by far, the thing that scares me the most about upgrading the kernel is not core code.

It’s the x86 branch, especially ACPI, and the drivers, from some hardware makers more than others.

I’ve been around Linux long enough that unlike some of the critics of Techrights, I know how to use git on my computer and I once spent years with my own kernel series because I got so fed up with my distributions taking forever and packaging some rather awful releases. When you own the fork, the patchset, the compile time options and compiler, you get to manage things. My kernels almost always worked better for me than the ones the distributions made.

There are lots of reasons, from slimming them down, to turning off a bunch of really godawful shit that is useful to almost nobody that makes the entire thing flakier, to making sure you’re pulling the latest features in the hardware drivers into a kernel series you know isn’t bad.

Many of the people arguing that Microsoft has become a new company that likes Linux are either sockpuppets, or really are so stupid that they don’t realize that the kind of shit Microsoft does to the PC now is a million times worse than trying to deal with a PC 20 years ago.

Maybe, hopefully, some of these people ran Arch or something and yanked in a broken kernel and got a taste of what I’ve been going through for years.

*takes a sip of coffee* Told you so.

Debian 12 keeps updating Linux 6.1 LTS, so I really don’t know what later kernels are doing on this hardware, and I don’t care, as this is the most unbroken stretch I’ve had with a computer that was not doing something ridiculous.

The “pass it to find out what’s in it” approach is a bad way to run a country, and it’s a bad way to even run some laptops.

The PC situation is rapidly becoming untenable. It’s possible that it could fall apart completely on a technical level long before Microsoft has a chance to try to mitigate further erosion of the Windows operating system by making it impossible to turn “Secure Boot” off.

The only reason they ever gave you that switch was because the state of the PC industry in the Windows 8 era meant that some hardware needed Legacy Boot (BIOS compatibility mode) and there were people with downgrade rights to Windows 7.

BIOS mode is gone and Windows 7 is out of support. Time’s almost up.

Bad Lenovo UEFI Firmware Causes Nine Models to Freeze on Resume from Suspend. Delays Linux 6.6.

Bad Lenovo UEFI Firmware Causes Nine Models to Freeze on Resume from Suspend. Delays Linux 6.6.

I don’t even want to write about Lenovo again in my life, since they are such a nasty company, but Roy asked me to say something.

Ever since 2016 when they admitted to me that there was a deal with Microsoft to lock Linux out of the Yoga 900 ISK2, but then proceeded to defame me after the media reported on a Reddit post I made on the subject that went viral, and then quietly fixed it after I took legal action against them, I’ve been telling people what a super shitty company they are.

Lenovo is a Chinese company, so it probably shouldn’t come as any shock that they banned everyone in the State that I live in from commenting on their forum until the scandal died down.

In China, when someone is talking, you typically figure out abhorrent ways to stop them from talking, which don’t work in a Free country. For Lenovo, really all they could do was try to silence people on their own support forum, but by then it was too late.

They also indiscriminately banned anyone who talked about “hacking” the board with an external flasher to unhide the “ACPI” option (to allow other operating systems to see the storage device), which was always present, but hidden as per their illegal contract with Microsoft, which they quickly got scrapped after the State of Illinois started investigating them.

The late 2020 Tiger Lake-based ThinkBook 15 I have is a little better.

Lenovo’s advice was to disable “Secure Boot”, as all it has ever done for Linux is cause problems due to extra complexity and bugs, as it is a Microsoft requirement to license Windows to OEMs, which is the default state of the laptop. “Secure Boot” actually does nothing to secure the computer from most any actual security threat that anyone really faces.

In at least one case, on my Yoga 900 ISK2, Ubuntu updated the “Secure Boot” dbx due to “Boothole”, and the revocation update (dbx) caused Fedora to fail to boot with a “Security policy violation.”

To unjam it I had to reset “Secure Boot” to the factory settings and that apparently wiped the dbx update. At that point I turned “Secure Boot” off and have never turned it on after removing Windows from a PC since then.

Lenovo’s other advice for this laptop, even though the “fake RAID” support was added to Linux after the 2016 incident by Intel (after they refused to document it for over a year!), is to turn that off and set the disk controller to “AHCI”.

Matthew Garrett claimed that this had something to do with power management, but he was either wrong or lying, because when I run powertop as a system service (to set all power management tunables to on), I always get better battery life than Windows does.

He’s very obtuse, and it’s probably because his job at various points in time involved implementing Microsoft nonsense like “Secure Boot” in Linux.

They need to get rid of the “Free Software Award” because they have such a bad habit of giving it to the wrong people.

(It’s like watching Donald Trump putting the Presidential Medal of Freedom on people at this point.)

Other than a bunch of “FIRMWARE BUG” crap on my 2020 Lenovo laptop that prints to the screen (which Windows and IBM Fedora hides, but Debian doesn’t), the laptop works fine with Linux.

But Lenovo released, apparently, more than nine models of AMD-based laptops with UEFI bugs that prevent the user from resuming from suspend due to fatal ACPI errors, which includes the AMD option for the laptop model I’m writing this on.

Although, mine’s an Intel, so in your face to all those “AMD is better” people. 🙂

The Linux kernel’s 6.6 release was delayed while workarounds that added 78 more lines of firmware bug workarounds was added.

Linus Torvalds was obviously furious, but criminals and idiots put him in therapy for yelling at them with incompetent code in the past, and he put Linux under the control of a now Microsoft-controlled “Linux Foundation” and so to keep his job, he can’t say much anymore.

According to Roy Schestowitz, the culprit was something that a Chinese man exhaling some sort of smoke (to look macho I guess?) on his Microsoft GitHub page did in the ACPI code in the Linux kernel.

Apparently, his name is Huacai Chen and he works at Loongson.

Linus Torvalds very obviously wanted to scream at him (backscroll and read down) for moving ACPI code around to fix something and then breaking other things, then hiding that they were broken until users started writing in saying they upgraded their kernel, some stuff happened, and kersplat.

I don’t even plan to stay on the PC after this laptop unless I decide to buy a model with open source firmware from System76 instead of this Lenovo garbage which is barely even code.

UEFI is garbage, Microsoft is garbage, Lenovo is fucking garbaaaage. The entire PC situation is cat shit wrapped in dog shit. And the people working on things like “Secure Boot in Linux” just make it so much worse from there.

This is the worst time to own a x86 PC, EVER.

Lenovo has never supported updating your UEFI firmware on most of their products using anything available to Linux users, even LVFS, which is a backdoor, and I wouldn’t trust them not to brick my computer or make it worse if they did.

I uninstalled LVFS because it started spitting an error message into Debian. It’s in charge of updating the dbx, but fuck dbx, fuck “Secure Boot” (which makes it harder to plug actual security holes), fuck Microsoft, and fuck the people Microsoft gets to make this my problem.

As a user, I just think these things are deplorable, but large corporations have turned Linux into some shitty colony where they can put DRM malware, universal backdoors, and absolutely broken shit with no repercussions. None. Not even that Linus Torvalds might yell at them.

So the last time the UEFI in my ThinkBook 15 was updated was August 2021, when I switched it over to Linux.

By that point, they had fixed most of the really nasty bugs they shipped the laptop with, which were even causing problems in Windows, but as firmware upgrades are dangerous and I have no warranty now, and they require Windows, I don’t plan to touch the firmware on this laptop ever again.

It’s just not worth it. One of the bigger problems with UEFI is that it’s just such a monster that you can keep fixing bugs forever, and that’s why “Secure Boot” will never work even if they wanted it to.

If you could get past the issues like “This is barely even code. It’s just a pile of garbage.”, the x86 PC might be worth plodding along with.

Now that they make the Raspberry Pi 5, and it’s several times faster than its predecessor, I wonder why we’re even talking about sticking around for more abuse.

When the UEFI firmware Lenovo ships is so fragile that a guy working for a hardware company making totally unrelated MIPS processors in China bumps something and an x86 Lenovo laptop that people bought THREE GODDAMN YEARS AGO starts malfunctioning if anyone installs that kernel, it’s time to look for greener fields.

UEFI is such a catastrophe, that it’s not even just a Freedom issue.

It’s such a massive fucking colossal failure on a code level that Google, which certainly doesn’t care about your Freedom, based the Chromebook firmware on a variation of Coreboot.

My next system will probably just be Linux running off some cheap flash memory on a ~$80 ARM computer. The fact that the Pi 5 finally has a SKU with 8 GB RAM really REALLY helps. With the help of ZStandard compressed ZRam, you can make KDE work with this.

No more of these $1,000 Lenovo PC laptops full of LULZ for firmware and Chinesium keyboards where buttons randomly break and need to be remapped to another key because they’re three years old, and playing “How do I brutally murder Windows 11 this time? Hmm…. DIE DIE DIE!!!!!”

Illinois State Government: Don’t Use Microsoft Edge Due to Bugs Which Aren’t Even in Chrome.

Illinois State Government: Don’t Use Microsoft Edge Due to Bugs Which Aren’t Even in Chrome.

After telling everyone to use Microsoft Edge to access government Web sites and fill out PDFs, the Illinois State Government now admits that Microsoft Edge is buggier than even Google Chrome and advises users to switch to something else.

Awkward.

Users shouldn’t use Chrome either, but Microsoft Edge is some next level shit. Basically everything wrong with Chrome, plus a third coat of spyware and a sewer of ads.

I mostly use Brave.

There is currently a bug affecting users running a newer version of Microsoft’s Edge Browser. This bug forces users to log into Illinois workNet when they click on a link to view any Office document file (Word, Excel, PowerPoint, etc.). Until this issue has been resolved by Microsoft, affected users can download the file via an alternate browser (Chrome, Firefox, Safari, etc.) or do the following to download via Edge.

1. Right click on the file.
2. Click “Save link as”
3. Download the file to your computer.

This will allow you to view the file without logging into Illinois workNet.

– Illinois WorkNet, a division of the Illinois Department of Employment Security

IRS Claws Back $122 Million From Wealthy Tax Cheats; Sends Microsoft a $29 Billion Bill.

IRS Claws Back $122 Million From Wealthy Tax Cheats; Sends Microsoft a $29 Billion Bill.

The US Internal Revenue Service is waking up from its decade long slumber, initiated by the TEA Party revolt and suppressed further still by Donald Trump’s “Tax Cuts and Jobs Act”.

Just a few years ago, Microsoft bragged about how many billions of dollars they were cheating our great nation out of while the government racked up huge deficits thanks to Trump’s “corporate free-for-all” law.

Well, now the shoe is on the other foot, as the IRS has sent Microsoft a $29 billion tax bill.

Microsoft has apparently been really naughty.

Not content with just grifting legally, they were cheating on their taxes and defrauding the IRS for over a decade and a half as well, by funneling profits through Puerto Rico, and basically daring the IRS to do anything about their scheme.

The IRS, according to the Fortune article, was “cowed” for years by the thought of fighting large corporations with endless resources, and wouldn’t do anything about Microsoft until now, even though it knew this was going on as far back as 2005.

Most of the people the IRS usually bothered, under Republican control of the government, were so utterly broke, that they couldn’t resist them, so the IRS combed over single mothers claiming an Earned Income Credit, and left Microsoft’s $29 billion dollar fraud alone.

It’s disgusting that it has taken the IRS this long to grow a spine and go after these criminals.

On a related note, the IRS conducted audits of 1,600 individuals that it believed owed $250,000 or more in back taxes and clawed back $122 million from 100 of them, so far, in an opening salvo under the fresh funding from the Inflation Reduction Act.

One of the more shocking cases closed by the IRS in September involved a former CEO, who was sentenced to a year in prison and ordered to pay more than $15 million in restitution after he falsified millions of dollars of personal expenses as deductible business expenses.

The rich tax cheat used his unlawful proceeds to build a 51,000-square-foot mansion, featuring an outdoor pool and pool house; and tennis, basketball and bocce courts. His greed didn’t stop there. The IRS found he had falsified millions of dollars of expenses for luxury vehicles, artwork, country club memberships and homes for his children.

Another case targeted a restaurant owner who filed false tax returns and skimmed more than $670,000 from his business. He then spent $502,000 of his illegally obtained funds on gambling.

-AOL

Most people get a year in prison if they slap someone down at the bar, and the guy who defrauded the IRS of $15 million (that they know of) might get out in 6 months with good behavior. Really, all he has to do is pay back what he should have paid in the first place and go to white collar resort prison for a while.

But this is why the rich were panicking about the Inflation Reduction Act, and wanting the American people to think that 87,000 IRS agents would be camped outside their house like the Siege of Waco looking for that $5 they forgot to report last year.

Whenever the IRS is going after the rich, the rich invest in firing up the crazies.

No matter how many times Treasury Secretary Janet Yellen says there will be no increased audits of anyone making under $400,000, Fox News will continue to lie.

Microsoft, Google, Apple, Facebook, and others are all under the federal government’s microscope and they all deserve worse, but they will do anything they can to throw a monkey wrench into our government so it breaks down and the looting can speed back up again. Mark my words.

Google Search is Garbage Designed to Show Ads Instead of What You Searched For.

Google Search is Garbage Designed to Show Ads Instead of What You Searched For.

Wired published and then immediately retracted an op-ed (Archive Today, Wayback Machine) about how Google quietly manipulated what you searched for by turning it into something designed to bring back a lot of ads instead, using machinery that is invisible to the user.

These “imperceptible” manipulations are actually one reason (alongside manually censoring billions of Web resources so that they can’t show up no matter what you search for, at the behest of the American government and Copyright trolls) why Google Search has descended into “garbage” quality over about the last five years or so.

The article was deleted and replaced with a message saying “it did not meet editorial standards” and was removed, but we can only really guess the real reason why.

Google, with 93% of the search engine market, has the ability to punish Web sites that are pissing it off.

Ending up being ranked lower as a way to harass sites into not saying anything bad about them is one possibility that comes to my mind, although I cannot say that’s what happened. All you have to do to destroy a site financially is cut off its ad impressions, which would be ironic if that is what’s going on, since that’s exactly the sort of thing that leads to an Anti-Trust trial in the first place.

Google is basically running the trial anyway, and this is something that leaked out that was put on a projector for a few seconds and then was whisked away.

Things that make you go “hmm”.

I don’t have a hard time believing that, with how everything in this world is designed to make it, basically illegal to exist anywhere without spending money, and also to subject you to advertising every waking moment, that Google has gotten very good with “shaking the couch cushions”.

They’re very desperate now, with the economy in the US failing and millions of people losing their jobs (Google itself recently fired over 12,000), and with express elevator inflation, and consumers pulling back, ad revenue hasn’t looked this bad since the DotCom Bubble collapse.

So Google is, getting very aggressive lately. Maybe you’ve already seen the manipulations and anti-adblock shit over at YouTube?

I doubt DuckDuckGo (which is a skin for Bing) is even this bad. First of all, Microsoft would have to invest a lot of money into being this rapacious, and they’ve been on a layoffs spree at Bing and Edge anyway, and even if they were, they’re only a few percent. A rounding error.

Google is definitely in more of a position to cause harm. Uniquely positioned to cause harm.

Again, when I saw that Wired retracted this, there was only one real plausible (to me) answer that popped into my head.

In “Being the Ricardo’s”, a dramatized documentary of sorts about Lucille Ball and Desi Arnaz, Desi argues with the studio about something and has to go to an executive that was higher up. The higher-up sends a letter to the lower official that simply reads, “Don’t fuck with the Cuban!”

And I think that’s what’s going on here.

I think that people are too afraid to make Google angry.

Now, maybe Google tapped someone on the shoulder, and maybe it didn’t have to.

Either way, I think we just witnessed part of the implosion of what remained of journalistic integrity.

Microsoft Larabel at Moronix Posts About More X11 “Security Vulnerabilities”.

And now for a bad lip reading regarding the latest “X11 security incident”.

“Hello, I have been using Google Chrome on my multi-CRT setup on a computer from 1999. I am very concerned that attack code will try to exploit a use after free in Xvfb while I use Zaphod heads.”

“May I speak to the manager?”

😀

I’m honestly surprised that anyone is even looking for bugs that are this uninteresting.

No doubt, if they are found they should be fixed. Again, the fixes are not a dramatic overhaul of anything. They boil down to a few lines of code being altered.

I do have to wonder why Trend Micro (a Windows “security” huckster) is looking for crap like this in X11.

Maybe so that “news” sites like Moronix can continue posting about “Linux security problems”.

Microsoft likes this. They benefit from the misdirection.

Microsoft is obviously paying some sites to ham it up as a distraction from constant actual Windows and Azure data breaches where people make off with everything from your banking and healthcare data, to things that are impossible to fix, like your Social Security numbers and credit files.

The realfact (I’m a realfact kind of guy.) shows that Microsoft is too dangerous to actually use or trust anywhere that data security is actually important.

Quite often these “Linux bugs” are not bugs in Linux itself, but rather anything “open source”, often stuff that’s widely used on Windows, or even a part of Windows, or in the “Corrupted Linux” called WSL, which they have extended like the Microsoft Java VM, so they’re not even Linux programs anymore if you build them that way.

The fact that “security researchers” keep finding so many bugs that are only barely important tells me that someone has an agenda. Who pays people to sit down and find trivialities? I wonder.

What to do about these X11 bugs?

Well Debian has already issued an updated set of Xorg packages. Just install them and restart X11. Big whoop.

Honestly, it’s hard to tell how this would even be exploitable, but you should always patch things ASAP.

The same media going on about this doesn’t ever talk about 30-40 emergency vulnerabilities every month in Microsoft Edge, Google Chrome, or Firefox.

Microsoft Security Theater Boot Forces Unnecessary Steps to Mitigate GNU C Library Vulnerability.

Microsoft Security Theater Boot Forces Unnecessary Steps to Mitigate GNU C Library Vulnerability.

According to Red Hat, Microsoft “Secure Boot” can actually stop you from installing a mitigation for a Severe CVE called “Looney Tunables” (CVE-2023-4911) in glibc, which Red Hat released for those who can’t patch glibc for some reason.

If you just try to load the systemtap module without screwing around with “Security Theater Boot”, your computer will fail to boot with a “security policy violation” message from your UEFI firmware.

Irony!!!!!

Here’s the original. Also, Archive Today in case IBM tries to remove this later.

If Secure Boot is enabled on a system, the SystemTap module must be signed. An external compiling server can be used to sign the generated kernel module with a key enrolled into the kernel’s keyring or starting with SystemTap 4.7 you can sign a module without a compile server. See further information here – https://www.redhat.com/sysadmin/secure-boot-systemtap

-IBM Red Hat

Of course, Security Theater Boot continues to provide no advantages, and now it actively makes securing your computer more difficult because it will block a mitigation as “unsigned module”.

We really don’t need much more evidence that Security Theater Boot and the people who implemented it on Linux are not friends of Free Software (as it is designed to put Microsoft in control of whether your operating system is allowed to load, which can be revoked later, even with a backdoor like Linux Vendor Firmware Service twinking unauthorized modifications to your UEFI dbx into your computer behind your back, unless you uninstall it), but this post should make it more obvious what the score is.

My advice? Continues to be kill LVFS, disable “Secure Boot” in the firmware, then uninstall mokutil and shim, and update grub.

Then you don’t need anyone’s permission to modify your operating system.

Which is how it should be.