For those that don't know, a large solar storm is occurring this weekend that may allow much of the US to see the northern lights. However, the forecast calls for clouds where I am, and most of the east coast. https://www.space.com/solar-storm-coronal-mass-ejections-mothers-day-weekend-storm-watch

• Mullvad VPN's blog post: DNS traffic can leak outside the VPN tunnel on Android

Identified scenarios where the Android OS can leak DNS traffic:

• If a VPN is active without any DNS server configured.
• For a short period of time while a VPN app is re-configuring the tunnel or is being force stopped/crashes.

The leaks seem to be limited to direct calls to the C function getaddrinfo.

The above applies regardless of whether Always-on VPN and Block connections without VPN is enabled or not, which is not expected OS behavior and should therefore be fixed upstream in the OS.

We’ve been able to confirm that these leaks occur in multiple versions of Android, including the latest version (Android 14).

We have reported the issues and suggested improvements to Google and hope that they will address this quickly.

• GrapheneOS 2024050900 release changelog announcement:

prevent app-based VPN implementations from leaking DNS requests when the VPN is down/connecting (this is a preliminary defense against this issue and more research is required, along with apps preventing the leaks on their end or they'll still have leaks outside of GrapheneOS)

Archived copies of the article: archive.today web.archive.org

Tesla’s German factory, which produces electric cars and batteries, has for months been the target of protests by climate activists, who call the company’s green credentials a sham.

“Companies like Tesla are there to save the car industry, they're not there to save the climate,” Esther Kamm, spokesperson for Turn Off the Tap on Tesla (known by its German initialism TDHA) told WIRED last week.

Government adviser says low take-up of jab among pregnant women is putting young infants at particular risk

Archived version: https://archive.ph/gKBs3

I had to go full Rube Goldberg to clean up old image tags from closed PRs, while still leaving deletion of untagged image to the ECR repo's own lifecycle policy. Never go full Rube Goldberg:

• https://stackoverflow.com/questions/70065254/remove-ecr-image-tag-despite-imagereferencedbymanifestlist-error
• https://github.com/aws/containers-roadmap/issues/1567

name: ECR Retention Policy

on:
  pull_request:
    types:
      - closed
  workflow_call:
  workflow_dispatch:

jobs:
  clean-unused-ecr:
    name: Delete unused container images
    runs-on: runs-on,runner=2cpu-linux-x64,run-id=${{ github.run_id }},image=ecr_login_image
    steps:
      - name: Configure AWS credentials
        uses: aws-actions/configure-aws-credentials@v4
        with:
          aws-region: ${{ env.RUNS_ON_AWS_REGION }}
      - name: AWS ECR Login
        id: login-ecr
        uses: aws-actions/amazon-ecr-login@v2
      - name: AWS ECR Info
        shell: bash
        run: |
          echo "ECR_REGISTRY=${{ steps.login-ecr.outputs.registry }}" >> $GITHUB_ENV
          echo "ECR_REPO=$(basename ${{ github.repository }})" >> $GITHUB_ENV
      - name: Docker meta
        id: docker_meta
        uses: docker/metadata-action@v5
        with:
          images: ${{ env.ECR_REGISTRY }}/${{ env.ECR_REPO }}
          flavor: suffix=-
          tags: type=raw,value=${{ github.head_ref || github.ref_name }}
      # NOTE: This is convoluted because AWS ECR has no simple way to untag image without deletion
      # given we want to leave deletion of untagged image to the ECR repo's own lifecycle policy
      # https://stackoverflow.com/questions/70065254/remove-ecr-image-tag-despite-imagereferencedbymanifestlist-error
      # https://github.com/aws/containers-roadmap/issues/1567
      - name: AWS ECR Cleanup
        shell: bash
        run: |
          REPO_EXISTS=$(aws ecr describe-repositories --repository-names $ECR_REPO 2>&1 || true)
          if echo "${REPO_EXISTS}" | grep -q 'RepositoryNotFoundException'; then
            echo "Repository not found, skipping cleanup."
            exit 0
          fi
          IMAGE_TAGS=$(aws ecr list-images --repository-name $ECR_REPO --query 'imageIds[*].imageTag' --output text)

          docker pull busybox
          docker tag busybox $ECR_REGISTRY/$ECR_REPO:_
          docker push $ECR_REGISTRY/$ECR_REPO:_

          TEMP_IMAGE=$(
            aws ecr batch-get-image \
                --repository-name $ECR_REPO \
                --image-ids imageTag=_ )
          TEMP_MANIFEST=$(echo $TEMP_IMAGE | jq -r '.images[].imageManifest')
          TEMP_DIGEST=$(echo $TEMP_IMAGE | jq -r '.images[].imageId.imageDigest')

          TAG_PREFIX=$(echo ${{ fromJSON(steps.docker_meta.outputs.json).tags[0] }} | cut -d: -f2)
          for TAG in $IMAGE_TAGS
          do
            if [[ $TAG == $TAG_PREFIX* ]]; then
              docker tag busybox $ECR_REGISTRY/$ECR_REPO:$TAG
              docker push $ECR_REGISTRY/$ECR_REPO:$TAG
              echo "Untaged image $TAG"
            fi
          done

          # Delete the temporary image by digest
          aws ecr batch-delete-image \
            --repository-name $ECR_REPO \
            --image-ids imageDigest=$TEMP_DIGEST

FOSS - ensuring even new hardware stays in use when vendor-support eventually ends!

Whether or not you install GNU/Linux on it today, your new #Mac will eventually lose #Apple support. Thanks to the impressive work of #Asahi #Linux project (@AsahiLinux), it will not need to end up in the landfill once it does.

https://arstechnica.com/gadgets/2024/05/fedora-asahi-remix-40-is-another-big-step-forward-for-linux-on-apple-silicon-macs/

Great to see #KDE #Plasma as the default desktop environment!

@kde
@fedora
@kde@lemmy.kde.social

#KDEEco #FOSS #FreeSoftware #OpenSource #sustainability #Fedora #AsahiLinux

The US Navy said a destroyer, the USS Halsey, was exercising navigational rights near the Paracel Islands. The archipelago lies in the South China Sea, which is disputed by several countries.

Archived version: https://archive.ph/Fm2kO

At a conference meant to address the plastic crisis, pro-plastic messaging was inescapable. Meanwhile, industry insiders — some positioned as government delegates — were given access to vital negotiations.

Archived version: https://archive.ph/216Ba

I don’t even know what to think about this

The woman told police she had been living inside the grocery store sign for roughly a year, and had been able to get electricity

Which is your preferred?