December 2025 - Talk - lists.gtalug.org

Debian "testing" -- not bad
by William Park 13 Jan '26

13 Jan '26

(Double posted, so reply to your list) I've been looking for a distro with recent KDE and recent kerne*l*. So, the benchmark was *Kubuntu* 25.10 (v6.4 KDE, v6.17 kernel). 1. Started with *Mint* + "apt install kde-full". Result was comparable to Kubuntu LTS, ie. v5.27 KDE, v6.14 kernel. Makes sense, since Mint is based on Ubuntu LTS. 2. Then, tried *LMDE* + "apt install kde-full". I was surprised to get a rather recent v6.3 KDE with v6.12 kernel. I was expecting an old KDE, even older than Mint version. 3. So, decided to try *Debian* *testing* + KDE. I got v6.5.4 KDE (latest) and v6.17.12 kernel. Not bad. Right now, *Debian testing* is compiling v6.12.62 and v6.18.1 kernels for Raspberry Pi Zero 2W. We'll see how it goes. To those using Debian testing, how would you rate its stability? Is it suitable for daily PC?

8 30

Linux on a phone
by Michael Hill 04 Jan '26

04 Jan '26

I was going to ask for a phone recommendation because my latest phone (a Sony XPeria) doesn't do WiFi calling (thanks to Sony's reduced presence in North America). Then I read this article: https://www.aclu.org/news/free-speech/app-store-oligopoly I've been following Phosh since I applied for a job at Purism before covid. Debian and postmarketOS now seem mature enough to convince me to spring for the hardware and I was thinking of a PinePhone. It requires less of a financial commitment and runs less hot than a Librem 5, and my son has the watch (PineTime). Casual searching tells me the PinePhone's supported by Freedom and Telus. Does anyone have any experience? Mike

14 67

Zero 2W reboots when plugging/unplugging micro USB OTG cable
by William Park 03 Jan '26

03 Jan '26

(Double posted, so reply to your list) To anyone with Raspberry Pi Zero 2W... I just got Zero 2W + mini HDMI adapter + micro USB OTG cable combo, from Amazon last week. All seem to be working. *Except*, whenever I plug or unplug OTG cable, the Zero 2W *reboots*. Nothing is connected to the USB cable, so it's not "power" issue. I don't know if the problem is Zero 2W side or USB cable side. Does your Zero 2W reboot, when you plug/unplug OTG cable? It's strange that plugging/unplugging just USB cable, would cause a reboot.

3 4

npm and the worm...
by Colin McGregor 29 Dec '25

29 Dec '25

For those who don't know, npm is a JavaScript library manager that makes installing, managing JavaScript library programs much easier. npm is available on a number Linux distributions, Debian, Ubuntu, RedHat and a number of others. In my case my concern is doing some software development on a Raspberry Pi using Raspberry Pi OS (a Debian variant) using npm to bring in a library program that makes it more-or-less painless to bring in a library program that converts .xml files to .json files. npm does what it was supposed to, bringing in JavaScript, but it makes a false assumption that software developers are NOT malicious. Since September 2025 security researchers have been aware of a worm program dubbed "Shai-Hulud 2.0" (named after the giant worm in Frank Herbert's science fiction novel "Dune"), details here : https://securitylabs.datadoghq.com/articles/shai-hulud-2.0-npm-worm/ . Shai-Hulud 2.0 can do a number of things, all of them bad. So, how can you protect yourself from Shai-Hulud 2.0 when using npm?

2 1

(info) Mint vs LMDE vs Kubuntu -- speed
by William Park 27 Dec '25

27 Dec '25

Just FYI... While compiling kernels for BeagleBone Black and Raspberry Pi Zero 2W, I encountered the following speed ranking: - Kubuntu -- bronze medal (~130min) - Mint -- silver medal (~120min) - LMDE -- gold medal (~110min) I don't know why there is difference between Kubuntu and Mint. Both are on LTS base, and kernel compile doesn't go through desktop.

2 1

What's going on with Linux kernel?
by William Park 15 Dec '25

15 Dec '25

(Double posted, so reply to your list) What's going on with Linux kernel? v6.18 was just released, and it's moving to v6.19.

2 1

Fwd: safety warning on zoom: STOP fireflies.ai
by CAREY SCHUG 13 Dec '25

13 Dec '25

Maybe this is only a serious issue with people hosting meetings, I do not know. See below for further information. Once it gains access to your calendar, it will attempt to join other sessions. DO NOT LET IT JOIN or kick it out. and warn attendies to REFUSE it. It might be wise to turn on the waiting room so as not to let it in. There is apparently an add-on to zoom (and other conferencing sessions) called fireflies, purportedly doing an AI analysis of your session. It will try to act like it is part of the session and ask attendees to click and approve it, infecting them. An AI search seems to indicate it is hard to get rid of. As an attendee, in the session where I clicked "yes" thinking the host supported it, I deleted all cookies; I do not know if that was sufficient. Here are the full AI instructions to remove it if you get infected. Since it seems to update your Zoom account, a complaint should probably be made to them to not allow that (by somebody paying them money). To remove yourself from Fireflies.ai, follow these steps: 1. Disconnect from Meetings: If Fireflies is integrated with your Microsoft Teams or Zoom meetings, disconnect it through the Fireflies settings page. In Teams, scroll to the bottom of the Fireflies settings and click "Disconnect". In Zoom, go to the Zoom App Marketplace, sign in, click your profile icon, select Manage, then Installed Apps, find Fireflies.ai, and click Uninstall. 2. Delete Your Account: Log in to your Fireflies web app, navigate to Settings > Account Settings, and scroll down to the "Delete Account" section. Click "Delete my account". You will be prompted to select a reason for leaving and can optionally provide feedback. Confirm the deletion when prompted. 3. Account Deletion Process: Your account will be deactivated immediately, but the permanent deletion of your data will occur after a 30-day grace period. During this time, you can contact support to recover your data if needed. After 30 days, your data will be permanently erased and cannot be recovered. 4. Remove App Integrations: Ensure all linked integrations, such as calendar connections, are disabled to prevent lingering access. 5. Uninstall the Application: If you have the Fireflies app installed on your computer, uninstall it. On Windows, go to Settings > Apps > Installed Apps, search for Fireflies.ai, click the three dots, and select Uninstall. On Mac, open Finder, locate Fireflies.ai in the Applications folder, drag it to the Trash, and empty the Trash. 6. Remove Browser Extensions: If you have the Fireflies extension installed in your browser, go to your browser's settings, navigate to Extensions, find Fireflies.ai, and click Remove. 7. Check for Residual Files: Search your computer for any remaining Fireflies.ai files. On Windows, search for %AppData% in File Explorer and delete any related folders. On Mac, check ~/Library/Application Support/ and remove any Fireflies.ai-related files. 8. Admin Actions (if applicable): If you are an administrator and need to block Fireflies for your organization, you can do so through the Microsoft Teams Admin Center by managing apps and blocking Fireflies.ai, or through Google's API controls to block traffic. Further information: The presence of Fireflies.ai in Zoom and other online sessions is considered a serious privacy and security concern by users and IT administrators alike. The issue stems from Fireflies.ai's ability to join meetings unexpectedly, often without explicit user consent, due to its integration with calendar services like Google Calendar and Outlook. This behavior has been described as "creepy" and invasive, with users reporting that the bot appears in meetings even after accounts are deactivated or the app is uninstalled. A major concern is that Fireflies.ai can gain access to meetings through calendar integrations, allowing it to auto-join meetings it knows about, even if the user never authorized it. This persistence is likened to a "plague" that is difficult to remove, with some users stating that simply disconnecting the app from their calendar or removing it from Zoom's app marketplace does not fully stop its intrusion. The issue is compounded by the fact that the bot may have already been granted access to previously scheduled meetings, requiring manual removal from each event. The situation is particularly problematic for organizations, as Fireflies.ai can automatically join meetings across a company's network if a single user has previously connected their account, potentially exposing sensitive information. Despite attempts to block the app via API controls or admin settings, some users report that Fireflies.ai continues to join meetings, indicating that the issue may not be fully resolved by standard administrative measures. Furthermore, the bot's behavior raises legal and compliance concerns. Users are legally responsible for ensuring that all participants consent to being recorded, and if Fireflies.ai joins a meeting without consent, the host could face liability. This is especially critical in contexts involving healthcare, legal, financial, or government discussions where confidentiality is paramount. In summary, the "infection" of Zoom and other online sessions by Fireflies.ai is serious due to its invasive auto-join behavior, difficulty in removal, potential for unauthorized recording, and the legal risks it poses to users and organizations. My experience: I joined a session, it asked me to approve it, in the process it asked me for access to my calendar, which I turned off. it then asked again, without the option to refuse access to my calendar. Since I thought it was something the host wanted, i accepted. I am sure others will have accepted the first time. When the host said she did not know what it was, I deleted all cookies, but I do not think that is sufficient. I have made my Google calendar private; if you can do that, it is probably wise. to do that, click on the gear at the upper right of your calendar page click "settings" under settings for your calendars, click on your calendar under "access permissions for events" UNclick "make available to the public" Carey

3 4

Videos of December KW-LUG meeting
by D. Hugh Redelmeier 12 Dec '25

12 Dec '25

I found the two talks very interesting: - perty planning with open source software [with exceptions] = Cycling Guide application (doesn't cover Toronto :-) > From: Mikalai Birukou via kwlug-disc <kwlug-disc(a)kwlug.org> > To: KWLUG discussion <kwlug-disc(a)kwlug.org> > Cc: Mikalai Birukou <mb(a)3nsoft.com> > Date: Thu, 11 Dec 2025 14:33:21 +0000 > Subject: [kwlug-disc] Videos of December meeting > > All videos are here: https://archive.org/details/kwlug_meeting_2025-12-01

1 0

looking for a recent trusted review of available analogue telephone adapters.
by CAREY SCHUG 11 Dec '25

11 Dec '25

I think my landline provider is going to discontinue my wired service soon. While a search lists many websites with "evaluations", I don't know which are impartial and which are promote one brand or another. I'd also like a table of features, I'm not sure if everything I would want is automatic. what I think i want, but maybe ignorance means i should require something else, or one of these things is foolish --battery backup --want to connect 2 phones, a minimal old style just to always be there --my current cordless base station for which I have 7 more remotes working off the same base. --ability to connect to the hotspot from my mobile if/when the wired internet access fails. --or tethered from my mobile? is it possible to use tethering from my phone to replace the entire wired network at home? Sorry, I'm ignorant, and is there an auto switch to go between my wired internet router and my home switch to make the crossover automatic in both directions? A google search says only the router can switch between one WAN and another, but it seems to me some smart person could make a minimal switch with that capability, since my router belongs to the cable company and I doubt they would want to make a failover to somebody else's internet as a source. If they do, I'm sure they'd charge an extra $100 per month even if i never did it. Almost certainly more change than I would be ready to make, but is there an open source switch setup to which some smart person has added a heartbeat monitor on the primary wan and will swtich to a second if the primary is down for some interval? Looks like I'll probably have to be happy with manually switching, as in... --Comcast cable internet goes down and stays down. --unplug it from my primary switch --have a Linux computer with bridging software idling to a USB port (or second Ethernet port?) --enable tethering on my phone and connect it to the bridging computer I assume the bridging software handles dynamic IP addresses, or is that actually built into the tethering on the phone? Carey

4 5

(wanted) BeagleBone Black
by William Park 10 Dec '25

10 Dec '25

My BeagleBone Black just died. A new one will probably arrive next year, considering holiday shipping and postal strike. So, anyone who wants to sell their BeagleBone Black (old 2GB or new 4GB), contact me off-list.

2 4