today's leftovers

posted by Roy Schestowitz on Nov 24, 2022

• FreeTTS: Cross-platform Text-To-Speech App

  FreeTTS is a speech synthesis system written entirely in the JavaTM programming language. It is based upon Flite: a small run-time speech synthesis engine developed at Carnegie Mellon University. Flite is derived from the Festival Speech Synthesis System from the University of Edinburgh and the FestVox project from Carnegie Mellon University.

• Pluralistic: 13 Nov 2022 The Framework is the most exciting laptop I've ever broken

  From the moment I started using computers, I wanted to help other people use them. I was everyone's tech support for years, which prepared me for the decade or so when I was a CIO-for-hire. In the early days of the internet, I spent endless hours helping my BBS friends find their way onto the net.

  Helping other people use technology requires humility: you have to want to help them realize their goals, which may be totally unlike your own. You have to listen carefully and take care not to make assumptions about how they "should" use tech. You may be a tech expert, but they are experts on themselves.

  This is a balancing act, because it's possible to be too deferential to someone else's needs. As much as other people know about how they want technology to work, if you're their guide, you have to help them understand how technology will fail.

• Linux Foundation Announces Partnership with Rancher Government Solutions

• InfoSec Handlers Diary Blog - SANS Internet Storm Center

  In this diary, we are assuming PC-like devices with state-of-the-art disk encryption (full disk encryption, FDE) and a "normal" desktop OS (Linux, Windows, ...).

• Use After Free vulnerability in Linux Kernel allows Privilege Escalation. Patch your kernel

  Redhat has just just published a risk advisory about a vulnerability in the Linux Kernel that allows for local privilege escalation. This vulnerability is tracked as CVE-2022-3910 (CVSS score: 7.4). This vulnerability is referred to be a use-after-free problem, and it can be found in io uring on the Update of Reference Count. io uring is an interface for making system calls in Linux. It made its debut for the very first time in the mainline Linux Kernel version 5.1 in the year 2019. It gives an application the ability to start system calls that may be carried out in an asynchronous manner.