WebDesktopGL Framework Turns Web Sites into Desktop Apps on Astra Linux via Chromium
WebDesktopGL is a new open-source framework that allows developers to run web sites as native desktop applications on Astra Linux and other Linux distributions by leveraging a local Chromium instance.
The project was created after an information system based on an existing web platform had to be delivered under strict licensing constraints that forbade the use of unlicensed software. Instead of adopting Electron, the author built a custom solution using Bash scripts, a recompiled VirtualGL, and a local copy of ungoogled-chromium.
Technical Implementation
The framework supports both X11 and Wayland sessions. On X11 it can launch Chromium inside an Xephyr virtual display with GPU acceleration provided by the modified VirtualGL build. Clipboard synchronization between the host and the virtual display is handled by xclip.
Two main launch scripts are included:
- InfoDoc.sh – full version that creates an isolated Xephyr session, applies window icon and title via the custom xdotool_xseticon utility, and enables GPU acceleration where available.
- InfoDoc_light.sh – simplified version that runs Chromium directly without a virtual display, making it suitable for remote deployment over scp.
The repository also contains the source for xdotool_xseticon, example animated icons, and a demo web application featuring a 3D scene, PDF viewer based on pdf.js, and image viewer supporting common formats.
Installation is automated by Install_bash_WebDesktopGL.sh, which installs build dependencies, compiles VirtualGL and the icon utility, and unpacks the bundled Chromium archive. The framework has been verified on Ubuntu 24.04 (KDE), Ubuntu 22.04 (KDE), and Astra Linux 1.8.
Related articles
DNS Resolver Operator Discovers Missing DNSSEC Validation After Six Months via External Test
A solo developer running VantageDNS, a recursive DNS resolver with filtering, discovered that DNSSEC validation had been disabled for six months after running an external DNS-OARC test. The test flagged "Lookup succeeded while signature was invalid," revealing that the resolver was accepting and returning responses with invalid DNSSEC signatures instead of returning SERVFAIL. Internal monitoring remained green throughout because the absence of validation does not trigger latency spikes, error rates, or availability alerts. The root cause traced back to a comment in the Unbound configuration left from an MVP phase that referenced enabling validation in Sprint 5, which never occurred. After enabling validation using a static trust-anchor-file, the operator documented the correct verification steps using dnssec-failed.org and domains with the AD flag, while noting that performance impact was negligible. The incident highlighted that security properties like DNSSEC validation require active, periodic external probing rather than passive monitoring.
1000 AI Builders Gather for 96-Hour SheNicest Hackathon in Beijing to Build Working Demos
Nearly 1000 creators from technology, product, design, hardware and imaging fields have assembled at the Beijing National Convention Center for the SheNicest 2026 Summer Thousand-Person Hackathon. Over 96 hours participants form teams, iterate rapidly and attempt to convert initial ideas into functional, demonstrable AI products across native applications, agents, intelligent hardware, games and AIGC imagery. A workshop led by Hu Xiaona of 360AI Business Development, HackingClub and AikerWorld examined the transition from individual AI tool use to full organizational adoption. She outlined three progressive stages: tool empowerment, workflow automation and true AI-native organizational redesign. The discussion stressed that simply purchasing AI tools does not change outcomes unless processes, roles and collaboration mechanisms are restructured around human-plus-AI teams. The event concludes with Demo Day on August 30, after which builders must address sales, delivery and sustained value creation.
Why 99% Attack Detection Rules Generate 99.9% False Positives in Real SOC Environments
A detection rule claiming 99% attack coverage with only 1% false positive rate sounds effective on paper, yet in practice it produces roughly one thousand false alerts for every genuine incident. Using a realistic example of 200,000 daily logins containing just two real compromises, the article demonstrates that 1.98 true positives are buried among 2,000 false positives. Bayes' theorem explains why sensitivity improvements barely move the needle while reducing the false-positive rate or narrowing the population yields dramatic gains in precision. The piece outlines three practical levers—lowering FPR, scoping rules to high-risk accounts, and cascading cheap-then-expensive checks—that cut analyst workload by orders of magnitude without sacrificing meaningful coverage. It also warns that chronically low-precision rules train analysts to ignore alerts, eventually leading to the rule being disabled despite remaining in compliance matrices. The recommended metric pair is therefore confirmed detections alongside coverage, rather than coverage alone.
ChatGPT Knows Your Company but Google Doesn't: Step-by-Step Guide to Diagnosing AI Visibility Issues
The complaint that a brand is missing from AI answers often masks six distinct technical problems that require opposite fixes. The guide separates three visibility layers—model knowledge without search, pre-indexed search bots such as OAI-SearchBot, and on-demand agent bots such as ChatGPT-User—and explains how to measure each one. It details checks for robots.txt entries, nosnippet and max-snippet meta tags, Cloudflare AI bot toggles, and server logs that reveal 403, 429, and 404 responses from specific crawlers. Additional steps cover JavaScript-rendered content, repeated query testing across 20 prompts, official reports in Yandex Webmaster and Google Search Console, and hidden prompt-injection instructions that may have been planted in page metadata. The article stresses that aggregated “AI visibility” percentages are meaningless without layer separation and warns that blocking training can unintentionally harm ordinary search indexing.