southernwolf

cross-posted from: https://lemmy.blahaj.zone/post/15137437

(not really pipewire itself but an interaction with wireplumber/libcamera/the kernel, but pipewire is what triggers the problem)

As seen in https://gitlab.freedesktop.org/pipewire/pipewire/-/issues/2669 and https://gitlab.freedesktop.org/pipewire/pipewire/-/issues/4115

The camera's /dev/video file is kept open (without streaming), sadly causing the camera to be powered on what looks to be most devices. For some reason, this completely nullifies the soc power management on modern laptops and can result in increases from 3W to 8W at idle!

On Intel laptops it's a bit easier to debug because you can see the Cstates in powertop not going low but it also wrecks AMD ones. Some laptops can reach lower cstates, but the camera module wastes a few W anyway.

I can't believe this shipped in Ubuntu, Fedora etc without anyone noticing, and for so long. This bug is quite literally wasting GWh of power and destroys the user experience of distros in laptops.

If you have a laptop with a switch that detaches the camera from the usb bus you are probably out of the water, just plug it when you use it and the problem is sidestepped. Removing uvcvideo and modprobing it on demand can also work. Disabling the camera in Lenovo's UEFI is what I did for a year until I finally found the issue on the tracker. Some laptops also seem to not be affected, but for me it happens to every machine I've tested.

Thanks to this comment for another workaround that tells wireplumber to ignore cameras. ~/.config/wireplumber/wireplumber.conf.d/10-disable-camera.conf

wireplumber.profiles = { main = { monitor.libcamera = disabled } }

Software that only captures cameras using pipewire is rare and this hasn't given me any problem. This should probably be shipped by distros while the problem is sorted out.

Note that most laptops will have other problems stopping them from reaching deep cstates, borked pcie sd card readers, ancient ethernet nics that don't support pcie sleep properly, outdated nvme firwmare... those are separate issues that most of the time can also be tackled with some dose of tlp, but it's all for nothing if the usb camera is keeping the soc awake!

cross-posted from: https://feddit.nl/post/18702221

cross-posted from: https://lemmy.ml/post/17747926

Back in June the developers of Fishards put out a bit of an ultimatum: fight them in-game and win to make the game open source, or they will nuke the game from orbit.

Thankfully, the community came together, and won. So now Fishards has been made open source, and it's still free to play on Steam too.

cross-posted from: https://discuss.tchncs.de/post/18099780

Bazzite comes ready to rock with Steam and Lutris pre-installed, HDR support, BORE CPU scheduler for smooth and responsive gameplay, and numerous community-developed tools for your gaming needs.

(This review is a cross-post of one I posted on the furry.engineer mastodon instance. I wanted to cross-post it here so folks here on the Lemmy side of things could see it as well.)

“Lago’s eyes reflected the sickly yellow bursts of sapfire blazing in the distance…” and thus begins the epic second book, Masks of the Miscam, of Joaquin Baldwin’s Noss Saga series. From the start, we are thrown right into the action, where we left off from the end of the first book, Wolf of Withervale. We follow the group as they explore further into the stories and histories that surround the mysterious domes located across the lands of Noss. We see much more of the world too, branching far beyond what was shown in Book I. With this are found new allies and friends, mysterious new civilizations, enemies old and new, and the hint at what is to come in the Noss Saga.

With Book II of the Noss Saga, we see how the story is now going to start unfolding before our heroes. What has started as a simple discovery of a strange mask is rapidly turning into a tale well worthy of being called a saga. Joaquin Baldwin has, like with Book I: Wolf of Withervale, expertly crafted a beautifully profound story, rich with storytelling, world building, character design, and more. Each chapter pulls in the reader, leaving them wanting more with each page they read. Masks of the Miscam is a beautiful story, and sets in motion so much more to come. It leaves us all desiring to what know what lies on the path forwards for our heroes of the Noss Saga, and I truly cannot wait to see what is in store for them!

cross-posted from: https://discuss.tchncs.de/post/13377347

openSUSE addresses supply chain attack against xz compression library

openSUSE maintainers received notification of a supply chain attack against the “xz” compression tool and “liblzma5” library.

Background

Security Researcher Andres Freund reported to Debian that the xz / liblzma library had been backdoored.

This backdoor was introduced in the upstream github xz project with release 5.6.0 in February 2024.

Our rolling release distribution openSUSE Tumbleweed and openSUSE MicroOS included this version between March 7th and March 28th.

SUSE Linux Enterprise and Leap are built in isolation from openSUSE. Code, functionality and characteristics of Tumbleweed are not automatically introduced in SUSE Linux Enterprise and/or Leap. It has been established that the malicious file introduced into Tumbleweed is not present in SUSE Linux Enterprise and/or Leap.

Impact

Current research indicates that the backdoor is active in the SSH Daemon, allowing malicious actors to access systems where SSH is exposed to the internet.

As of March 29th reverse engineering of the backdoor is still ongoing.

Mitigations

openSUSE Maintainers have rolled back the version of xz on Tumbleweed on March 28th and have released a new Tumbleweed snapshot (20240328 or later) that was built from a safe backup.

The reversed version is versioned 5.6.1.revertto5.4 and can be queried with rpm -q liblzma5.

User recommendation

For our openSUSE Tumbleweed users where SSH is exposed to the internet we recommend installing fresh, as it’s unknown if the backdoor has been exploited. Due to the sophisticated nature of the backdoor an on-system detection of a breach is likely not possible. Also rotation of any credentials that could have been fetched from the system is highly recommended. Otherwise, simply update to openSUSE Tumbleweed 20240328 or later and reboot the system.

• SUSE Security CVE-2024-3094 information page
• OSS Security disclosure of the vulnerability

More Information about openSUSE:

• https://news.opensuse.org/
• https://discuss.tchncs.de/c/[email protected]

cross-posted from: https://lemmy.ml/post/13397700

Malicious KDE theme can wipe out all your data

Or is it just buggy?

SomeOrdinaryGamer just gave one of the best 1st-time Linux tutorial videos I've seen in quite some time. The fact he did so with an audience of 3.7 million subscribers is even more incredible.

Great video, and while I'm not necessarily a huge fan of Mint, it's still a great starting out point for newbies. Definitely a good video to pass along to any potential/prospective Linux users so they can learn the ropes of things.

cross-posted from: https://sh.itjust.works/post/16308770

Proton Mail Finally Releases Desktop Apps With a Linux Beta Version

cross-posted from: https://lemmy.nz/post/7859245

The Great Linux Uprising

Bonus color version ft. Madagascar Penguins:

cross-posted from: https://lemmy.world/post/12722680

Died from reading this