|
1825 Monetary Lane Suite #104 Carrollton, TX
Do a presentation at NTLUG.
What is the Linux Installation Project?
Real companies using Linux!
Not just for business anymore.
Providing ready to run platforms on Linux
|
Show Descriptions... (Show All/All+Images)
(Single Column)
- Kernel prepatch 6.18-rc1
Linus has released 6.18-rc1 and closed themerge window for this development cycle. "This was one of the goodmerge windows where I didn't end up having to bisect any particular problemon nay of the machines I was testing. Let's hope that success mostlytranslates to the bigger picture too."
- [$] Enhancing FineIBT
At the LinuxSecurity Summit Europe (LSS EU), Scott Constable and SebastianÖsterlund gave a talk on an enhancement to a control-flowintegrity (CFI)protection that was added to the kernel several years ago. The "FineIBT: Fine-grain Control-flowEnforcement with Indirect Branch Tracking" mechanism was merged forLinux 6.2 in early 2023 to harden the kernel against CFI attacks of varioussorts, but needed some fixes andenhancements more recently. The talk looked at the CFI vulnerabilityproblem, FineIBT, and an enhanced version that is hoped to be able to unifyall of the disparate hardware and software mitigations to address bothregular and speculative CFI vulnerabilities.
- Security updates for Friday
Security updates have been issued by Debian (redis and valkey), Fedora (docker-buildkit, ibus-bamboo, pgadmin4, webkitgtk, and wordpress), Mageia (kernel-linus, kmod-virtualbox & kmod-xtables-addons, and microcode), Oracle (compat-libtiff3 and udisks2), Red Hat (rsync), Slackware (python3), SUSE (chromium, cJSON, digger-cli, glow, go1.24, go1.25, go1.25-openssl, grafana, libexslt0, libruby3_4-3_4, pgadmin4, python311-python-socketio, and squid), and Ubuntu (dpdk, libhtp, vim, and webkit2gtk).
- [$] Gccrs after libcore
Despite its increasing popularity, the Rust programming language is stillsupported by a single compiler, the LLVM-based rustc. At the 2025 GNU ToolsCauldron, Pierre-Emmanuel Patry said that a lot of people are waitingfor a GCC-based Rust compiler before jumping into the language. Patry, whois working on just that compiler (known as "gccrs"), provided an update onthe status of that project and what is coming next.
- [$] Last-minute /boot boost for Fedora 43
Sudden increases in the size of Fedora's initramfsfiles have prompted the project to fast-track a proposal to increasethe default size of the /boot partition for new installs ofFedora 43 and later. The project has also walked back a fewchanges that have contributed to larger initramfs files, but theever-increasing size of firmware means that the need for more room isunavoidable. The Fedora Engineering Steering Council (FESCo) hasapproved a last-minute changejust before the final freeze for Fedora 43 to increase thedefault size of the /boot partition from 1GB to 2GB; thiswill leave plenty of space for kernels and initramfs images if a useris installing from scratch, but it is of no help for users upgradingfrom Fedora 42.
- Ubuntu 25.10 released
Ubuntu25.10, "Questing Quokka", has been released. This release includesLinux 6.17, GNOME 49, GCC 15, Python 3.13.7,Rust 1.85, and more. This release also features Rust-basedimplementations of sudo and coreutils; LWN covered the switch to theRust-based tools in March. The 25.10 version of Ubuntu flavorsEdubuntu, Kubuntu, Lubuntu, Ubuntu Budgie, Ubuntu Cinnamon, UbuntuKylin, Ubuntu MATE, Ubuntu Studio, and Xubuntu have alsobeen released.
- Security updates for Thursday
Security updates have been issued by AlmaLinux (gnutls, kernel, kernel-rt, and open-vm-tools), Debian (chromium, python-django, and redis), Fedora (chromium, insight, mirrorlist-server, oci-seccomp-bpf-hook, rust-maxminddb, rust-prometheus, rust-prometheus_exporter, rust-protobuf, rust-protobuf-codegen, rust-protobuf-parse, rust-protobuf-support, turbo-attack, and yarnpkg), Oracle (iputils, kernel, open-vm-tools, redis, and valkey), Red Hat (perl-File-Find-Rule and perl-File-Find-Rule-Perl), SUSE (expat, ImageMagick, matrix-synapse, python-xmltodict, redis, redis7, and valkey), and Ubuntu (fort-validator and imagemagick).
- [$] LWN.net Weekly Edition for October 9, 2025
Inside this week's LWN.net Weekly Edition:
Front: Kernel Rust features; systemd v258, part 2; Cauldron kernel hackers; BPF for GNU tools; 6.18 merge window, part 1; Lifetime-end pointer zapping; Robot Operating System. Briefs: OpenSSH 10.1; Firefox profiles; Python 3.14; U-Boot v2025.10; FSF presidency; Quotes; ... Announcements: Newsletters, conferences, security updates, patches, and more.
- Better profile management coming to Firefox
Firefox has long had support for multiple profilesto store personal information such as bookmarks, passwords, and userpreferences. However, Firefox did not make profiles particularlydiscoverable or easy to manage. That is about to change; Mozilla hasannouncedthat it is launching a profile-management feature that will make iteasier to create and switch between profiles. According to the supportpage for the feature, it will be rolled out to users graduallybeginning on October 14.
- [$] Upcoming Rust language features for kernel development
TheRust for Linux project has been good for Rust, Tyler Mandry, one of theco-leads of Rust's language-design team, said. Hegave a talk atKangrejos 2025 covering upcoming Rust language features and thankingthe Rust for Linux developers for helping drive them forward. Afterward, Benno Lossin and Xiangfei Dingwent into more detail about their work on the three most important languagefeatures for kernel development: field projections, in-place initialization, and arbitrary self types.
- Security updates for Wednesday
Security updates have been issued by Fedora (apptainer, civetweb, mod_http2, openssl, pandoc, and pandoc-cli), Oracle (kernel), Red Hat (gstreamer1-plugins-bad-free, iputils, kernel, open-vm-tools, and podman), SUSE (cairo, firefox, ghostscript, gimp, gstreamer-plugins-rs, libxslt, logback, openssl-1_0_0, openssl-1_1, python-xmltodict, and rubygem-puma), and Ubuntu (gst-plugins-base1.0, linux-aws-6.8, linux-aws-fips, linux-azure, linux-azure-nvidia, linux-gke, linux-nvidia-tegra-igx, and linux-raspi).
- Python 3.14.0 released
Version3.14.0 of the Python language has been released. There are a lot ofchanges this time around, including official support for free threading, template string literals, and much more; seethe announcement for details.
- [$] Progress on defeating lifetime-end pointer zapping
Paul McKenney gave a remote presentation atKangrejos 2025 following up on thetalk he gave last year about thelifetime-end-pointer-zapping problem: certain common patterns for multithreaded code aretechnically undefined behavior, and changes to the C and C++ specificationswill be needed to correct that. Those changes could also impact code that usesunsafe Rust, such as the kernel's Rust bindings. Progress on the problem has been slow,but McKenney believes that a solution is near at hand.
- [$] Highlights from systemd v258: part two
Systemdv258 was released on September 17 after more than nine monthsof development. LWN has already covered some of thefeatures and changes being readied for v258 before it was final. Nowthat the release is out, it is time to look at more of what came inv258, including a sandbox shell, new boot options, service-level diskquotas, and enhancements to systemd-resolved.
- Compact M5Stack Unit C6L Integrates RISC-V ESP32-C6 and SX1262 for LoRa Meshtastic Use
The M5Stack Unit C6L is a compact LoRa module featuring the ESP32-C6 SoC and SX1262 transceiver. It supports 868 to 923 MHz operation for private LoRa networks with Meshtastic compatibility and options for custom development. The ESP32-C6 integrates a dual RISC-V architecture consisting of a high-performance 32-bit core running at 160 MHz and a low-power […]
- How to Easily Add a Live Wallpaper on KDE Plasma 6
In this tutorial, I’ll show you how to add a live wallpaper on KDE Plasma 6 using a video from the internet. We’ll turn a regular video into a dynamic desktop wallpaper, making your Plasma desktop look more lively and interesting.
- GCC Patches Posted For C++26 SIMD Support
One of the exciting additions on the way for the C++26 programming language is a standardized library around Single Instruction Multiple Data (SIMD) operations. This portable SIMD implementation makes it easier to leverage SIMD and data parallelism in C++ for better performance and to work across SIMD architectures like AVX-512...
- Orange Pi Previews Orange Pi 6 Plus with 12-core architecture and dual 5G Ethernet ports
Orange Pi has introduced the Orange Pi 6 Plus, a single-board computer intended for high-performance and AI-oriented computing tasks. It uses the CIX CD8180/CD8160 SoC with a 12-core 64-bit CPU and an NPU rated at up to 45 TOPS. The SoC includes a 12-core architecture paired with an integrated graphics processor supporting hardware-accelerated ray tracing […]
- Python 3.14 Performance Looking Good In Benchmarks
With this week's release of Python 3.14 bringing performance improvements, debugging improvements, a new Zstd compression module, and other enhancements I have been eager to run some benchmarks seeing how Python 3.14 compares to prior Python releases.
- AMD Amps Up Chip War - But Nvidia's Still Leading
The Wall Street Journal marvelled at AMD's "game-changing deal" this week with OpenAI, calling it "the culmination of an extraordinary, decade-long turnaround effort, solidifying AMD's status as Nvidia's most legitimate competitor."Shortly after taking charge of the company in 2014, [CEO] Su implemented a systematic plan to eat Intel's lunch, which she accomplished by going after Intel's main product lines while it was bogged down by manufacturing problems. Now, Su has set her sights on Nvidia, the $4.5 trillion chips behemoth led by her cousin, Jensen Huang. Some analysts believe that if Su can sign up more big customers for its AI chips, AMD could join the $1 trillion valuation club before too long. "With this, it's natural to ask: Did AMD just say checkmate to Nvidia?" asks the Motley Fool investment site. But their answer seems to be "no"...AMD has increased its push into the AI market over the past few years, launching the AMD Instinct line of accelerators, and in the latest quarter, predicted its MI350 series would drive revenue growth in the second half of the year. Some analysts have said that AMD's innovations position it to compete with Nvidia's Blackwell architecture and chip — released late last year — but Nvidia's commitment to release upgrades on an annual basis could keep it a step ahead when it comes to overall GPU performance and therefore revenue. Big tech companies are looking for the most powerful compute available — and so far, they know they can find that at Nvidia... [AMD's deal this week] is indeed an interesting operation, ensuring the company a major position in this infrastructure scale-up phase. [Nvidia CEO] Huang has said AI infrastructure spending may reach $4 trillion by the end of the decade, and this represents an enormous opportunity for chip designers such as AMD and Nvidia. So, the OpenAI deal is positive for AMD — but I wouldn't say it's negative for Nvidia. This chip giant signed its own deal with OpenAI last month, and it involves the deployment of 10 gigawatts of Nvidia systems across data centers... A quick comparison of the two deals: The Nvidia-OpenAI agreement involves more gigawatts, and Nvidia isn't giving up a stake in its business — on top of this, though Nvidia is offering OpenAI funding, this will result in revenue growth as OpenAI returns to Nvidia to order GPUs. This pretty much guarantees that Nvidia will be the chip designer to benefit the most as OpenAI expands — and AMD isn't about to step ahead of the market leader. All of this means that, yes, AMD should score a win thanks to its agreement with OpenAI and this may boost its growth in the market. But the chip designer can't say "checkmate" to its bigger rival as Nvidia is perfectly positioned to maintain its lead over the long term.
Read more of this story at Slashdot.
- Toxic Workplaces Are Worsening: 80% of U.S. Workers Say Their Job Hurts Mental Health
Slashdot reader joshuark shared this report from Fast Company:According to Monster's newly released 2025 Mental Health in the Workplace survey of 1,100 workers, 80% of respondents described their workplace environment as toxic. The alarming statistic is an increase from 67% just a year ago. The challenging environment has major implications. An astonishing 71% of workers say their mental health is poor (40%) or fair (31%), while only 29% rank it positively: 20% said it was good and 9% described it as great. Workers say that a toxic workplace culture is the top cause of their poor mental health (59%), followed closely by having a bad manager (54%)... Mental health is incredibly important to employees. The majority (63%) care more about it than having a "brag-worthy" job. Likewise, many would pass on a promotion (43%) or opt out of a raise (33%) if it was better for their mental health... The vast majority (93%) say their employer isn't focused on supporting employee mental health — a statistic that rose drastically since just a year ago, with 78% claiming the same. "According to the survey, more than half of workers (57%) say they'd rather quit their job than continue working in an environment they feel is toxic and overall, causing major strains to their mental wellbeing..."
Read more of this story at Slashdot.
- There's No 'AI Bubble', Says Yahoo Finance Executive Editor
"I'm here to say we have to give these AI bubble predictions a rest," says Yahoo Finance executive editor Brian Sozzi.First of all, AI is a real technology being deployed in real ways inside of Corporate America. Second, this technology is requiring more physical assets in the ground — which are being built to support AI's real-world application. What Zach Dell (son of Michael Dell) is working on at startup Base Power (which just raised $1 billion) impressed me this week. It's addressing a key issue — power availability and costs in part because of rising stress on the grid due to AI development. Next, the spending on AI infrastructure doesn't strike me as reckless. I talk to CFOs and they walk me through their thinking, which seems logical. They aren't foaming at the mouth with wild-eyed predictions of grandeur similar to the late '90s. Plus, the tech giants making the biggest AI investments are fueling their ambitions by cash on hand — not loading up balance sheets with debt. The upstarts in AI are well funded, not being 100% stupid in their organizational build-outs. They're working on tangible technology that has actual orders behind it... Lastly here in my scolding of the AI worrywarts is that valuations don't support the warning calls. According to new research out of Goldman Sachs this week, the median forward P/E ratio across the Magnificent Seven is 27 times, or 26 times if excluding Tesla (TSLA), which has a much higher multiple than the other companies. This is roughly half the equivalent valuation of the biggest seven companies in the late 1990s, while the dominant companies in Japan (mostly banks) traded at higher valuations still. What's more, the current enterprise-to-sales ratios are also much lower than those of the dominant companies in the late 1990s. "So it is true that valuations are high but, in our view, generally not at levels that are as high as are typically seen at the height of a financial bubble," said Goldman Sachs strategist Peter Oppenheimer.
Read more of this story at Slashdot.
- Amazon Smart Displays Are Now Being Bombarded With Ads
"Amazon Echo Show owners are reporting an uptick in advertisements on their smart displays," reports Ars Technica.The company's Echo Show smart displays have previously shown ads through the company's Shopping Lists feature, as well as advertising for Alexa skills. Additionally, Echo Shows may play audio ads when users listen to Amazon Music on Alexa. However, reports on Reddit (examples here, here, and here) and from The Verge's Jennifer Pattison Tuohy, who owns more than one Echo Show, suggest that Amazon has increased the amount of ads it shows on its smart displays' home screens. The Echo Show's apparent increase in ads is pushing people to stop using or even return their Echo Shows. The article notes Amazon's smart displays have also started showing ads for Alexa+ — and The Verge's reporter saw ads on one (but not all) of her Echo Shows this week. (Even when the display is set to show personal photos, ads sometimes appear for herbal supplements, Quest sports chips, and tabletop picture frames. Ars Technica notes that users "are unable to disable the home screen ads."When reached for comment, an Amazon spokesperson told Ars Technica: "Advertising is a small part of the experience, and it helps customers discover new content and products they may be interested in..." Amazon declined to comment on whether it has increased Echo Show ad loads... According to Amazon, Echo Show home screen ads change based on how close someone is to the gadget. "When the customer is more than four feet away from their device, ads will display full-screen in rotation with other content such as weather, recipes, sports, and news..."
Read more of this story at Slashdot.
- 'Death to Spotify' Event Draws Interest From Some Musicians to Try Alternatives
An anonymous reader shared this report from the Guardian:This month, indie musicians in San Francisco gathered for a series of talks called Death to Spotify, where attenders explored "what it means to decentralize music discovery, production and listening from capitalist economies". The events, held at Bathers library, featured speakers from indie station KEXP, labels Cherub Dream Records and Dandy Boy Records, and DJ collectives No Bias and Amor Digital. What began as a small run of talks quickly sold out and drew international interest. People as far away as Barcelona and Bengaluru emailed the organizers asking how to host similar events. The talks come as the global movement against Spotify edges into the mainstream. In January, music journalist Liz Pelly released Mood Machine, a critical history arguing the streaming company has ruined the industry and turned listeners into "passive, uninspired consumers". Spotify's model, she writes, depends on paying artists a pittance — less still if they agree to be "playlisted" on its Discovery mode, which rewards the kind of bland, coffee-shop muzak that fades neatly into the background... The Death to Spotify organizers say their goal is not necessarily to shut the app down. "We just want everyone to think a little bit harder about the ways they listen to music," says [event co-founder] Manasa Karthikeyan. "It just flattens culture at its core if we only stick to this algorithmically built comfort zone." So the goal was "down with algorithmic listening, down with royalty theft, down with AI-generated music," according to the event's other co-founder, Stephanie Dukich. Basically some artists "are questioning whether it's doing much for them," says a professor of music at the University of Texas at Austin. The article cites performers who are trying Spotify alternatives, like pop-rock songwriter Caroline Rose, who released her new album only on vinyl and Bandcamp. "I find it pretty lame that we put our heart and soul into something and then just put it online for free," Rose says.
Read more of this story at Slashdot.
- Three-Wheeled Solar Car Maker Aptera is About to Go Public
Last November Aptera successfully tested its first production-intent three-wheel solar-powered EV — and said it already had over 50,000 reservations. The vehicles had a solar charge range of 40 miles per day, reported Digital Trends, noting the crowdfunded company's cars also had an NCAS charging port. ("Solar-powered electric vehicles are also being developed by the likes of Germany's Sono Motors and the Netherlands' Lightyear, and by big automakers such as Hyundai and Mercedes-Benz.") But this week the EV site Electrek pointed out that "There have been a handful of 'solar car' projects and they all have failed so far."Aptera is one of the rare survivors, thanks to a couple of relatively successful crowdfunding efforts. The company has been inching closer to bringing its vehicle to production, but it still appears to need some investments to make it happen. Now, Aptera is going public. Generally, that's good news. An initial public offering (IPO) means that a company is going to raise capital for its operations and give more people the opportunity to invest in the company. However, Aptera is not doing a traditional IPO. It's not even doing a SPAC deal. It's doing a direct listing, which means that if approved by NASDAQ, it will allow shareholders to trade their shares on the public market. This is usually an exit strategy for existing shareholders. Aptera won't receive any proceeds from going public... The company needs to be infused with capital soon, and this direct listing is not it. The top-rated comment on the site suggests "Open market trading will establish a fair price for exchanges among the holders. I don't think this necessarily indicates they are trying to wind down the company." And the article does also acknowledge the possibility of "public demand for the stock amid this crazy bubble we are in — resulting in a price increase, which Aptera takes advantage of with a public offering..." "Aptera has now confirmed that it has received NASDAQ approval and the stock will start trading on October 16."
Read more of this story at Slashdot.
- AI Slop? Not This Time. AI Tools Found 50 Real Bugs In cURL
The Register reports:Over the past two years, the open source curl project has been flooded with bogus bug reports generated by AI models. The deluge prompted project maintainer Daniel Stenberg to publish several blog posts about the issue in an effort to convince bug bounty hunters to show some restraint and not waste contributors' time with invalid issues. Shoddy AI-generated bug reports have been a problem not just for curl, but also for the Python community, Open Collective, and the Mesa Project. It turns out the problem is people rather than technology. Last month, the curl project received dozens of potential issues from Joshua Rogers, a security researcher based in Poland. Rogers identified assorted bugs and vulnerabilities with the help of various AI scanning tools. And his reports were not only valid but appreciated. Stenberg in a Mastodon post last month remarked, "Actually truly awesome findings." In his mailing list update last week, Stenberg said, "most of them were tiny mistakes and nits in ordinary static code analyzer style, but they were still mistakes that we are better off having addressed. Several of the found issues were quite impressive findings...." Stenberg told The Register that about 50 bugfixes based on Rogers' reports have been merged. "In my view, this list of issues achieved with the help of AI tooling shows that AI can be used for good," he said in an email. "Powerful tools in the hand of a clever human is certainly a good combination. It always was...!" Rogers wrote up a summary of the AI vulnerability scanning tools he tested. He concluded that these tools — Almanax, Corgea, ZeroPath, Gecko, and Amplify — are capable of finding real vulnerabilities in complex code. The Register's conclusion? AI tools "when applied with human intelligence by someone with meaningful domain experience, can be quite helpful." jantangring (Slashdot reader #79,804) has published an article on Stenberg's new position, including recently published comments from Stenberg that "It really looks like these new tools are finding problems that none of the old, established tools detect."
Read more of this story at Slashdot.
- California 'Privacy Protection Agency' Targets Tractor Supply's Tricky Tracking
California's Privacy Protection Agency "issued a record fine earlier this month to Tractor Supply," according to an EFF Deeplinks blog post — for "apparently ducking its responsibilities under the California Consumer Privacy Act."Under that law, companies are required to respect California customers' and job applicants' rights to know, delete, and correct information that businesses collect about them, and to opt-out of some types of sharing and use. The law also requires companies to give notice of these rights, along with other information, to customers, job applicants, and others. The CPPA said that Tractor Supply failed several of these requirements. This is the first time the agency has enforced this data privacy law to protect job applicants... Tractor Supply, which has 2,500 stores in 49 states, will pay for their actions to the tune of $1,350,000 — the largest fine the agency has issued to date. Specifically, the agency said, Tractor Supply violated the law by: - Failing to maintain a privacy policy that notified consumers of their rights; - Failing to notify California job applicants of their privacy rights and how to exercise them; - Failing to provide consumers with an effective mechanism to opt-out of the selling and sharing of their personal information, including through opt-out preference signals such as Global Privacy Control; and - Disclosing personal information to other companies without entering into contracts that contain privacy protections. In addition to the fine, the company also must take an inventory of its digital properties and tracking technologies and will have to certify its compliance with the California privacy law for the next four years. The agency's web site says it "continues to actively enforce California's cutting-edge privacy laws." It's recently issued decisions (and fines) against American Honda Motor Company and clothing retailer Todd Snyder. Other recent actions include: Securing a settlement agreement requiring data broker Background Alert — which promoted its ability to dig up "scary" amounts of information about people — to shut down or pay a steep fine. Launching the bipartisan Consortium of Privacy Regulators to collaborate with states across the country to implement and enforce privacy laws nationwide. Partnering with the data protection authorities in Korea, France, and the United Kingdom to share information and advance privacy protections for Californians.The agency has secured more than half a dozen successful enforcement actions against unregistered data brokers following an investigative sweep launched late last year to assess compliance with the Delete Act.
Read more of this story at Slashdot.
- Cryptologist DJB Alleges NSA is Pushing an End to Backup Algorithms for Post-Quantum Cryptography
Cryptologist/CS professor Daniel J. Bernstein is alleging that America's National Security Agency is attempting to influence NIST post-quantum cryptography standards. Bernstein first emphasizes that it's normal for post-quantum cryptography (or "PQ") to be part of "hybrid" security that also includes traditional pre-quantum cryptography. (Bernstein says this is important because since 2016, "We've seen many breaks of post-quantum proposals...") "The problem in a nutshell. Surveillance agency NSA and its [UK counterpart] GCHQ are trying to have standards-development organizations endorse weakening [pre-quantum] ECC+PQ down to just PQ."Part of this is that NSA and GCHQ have been endlessly repeating arguments that this weakening is a good thing... I'm instead looking at how easy it is for NSA to simply spend money to corrupt the standardization process.... The massive U.S. military budget now publicly requires cryptographic "components" to have NSA approval... In June 2024, NSA's William Layton wrote that "we do not anticipate supporting hybrid in national security systems"... [Later a Cisco employee wrote of selling non-hybrid cryptography to a significant customer, "that's what they're willing to buy. Hence, Cisco will implement it".] What do you do with your control over the U.S. military budget? That's another opportunity to "shape the worldwide commercial cryptography marketplace". You can tell people that you won't authorize purchasing double encryption. You can even follow through on having the military publicly purchase single encryption. Meanwhile you quietly spend a negligible amount of money on an independent encryption layer to protect the data that you care about, so you're actually using double encryption. This seems to be a speculative scenario. But Bernstein is also concerned about how the Internet Engineering Task Force handled two drafts specifying post-quantum encryption mechanisms for TLS ("the security layer inside HTTPS and inside various other protocols"). For a draft suggesting "non-hybrid" encryption, there were 20 statements of support (plus 2 more only conditionally supporting it), but 7 more statements unequivocally opposing adoption, including one from Bernstein. The IETF has at times said they aim for "rough consensus" — or for "broad consensus" — but Bernstein insists 7 opposers in a field of 29 (24.13%) can't be said to match the legal definition of consensus (which is "general agreement"). "I've filed a formal complaint regarding the claim of consensus to adopt." He's also written a second blog post analyzing the IETF's decision-making process in detail. "It's already bad that the IETF TLS working group adopted non-hybrid post-quantum encryption without official answers to the objections that were raised. It's much worse if the objections can't be raised in the first place." Thanks to alanw (Slashdot reader #1,822) for spotting the blog posts.
Read more of this story at Slashdot.
- Ferrari Announces Its First Electric Sports Car, Promising Real Engine Noises - Sort Of
Ferrari's first electric car arrives next summer, reports Carscoops, with a top speed of 193 mph (310 km/h) and accelerating from 0 to 62 mph (0 to 100 km/h) in just 2.5 seconds. "The Elettrica" will also have a large high-density battery for over 329 miles (530 km) of range, ultra-fast DC charging up to 350 kW, and a 122 kWh capacity and an energy density of 195 Wh/kg that Ferrari "claims is the highest among production EVs." But what's really interesting is its engine noises:Ferrari's approach to the Elettrica's sound moves away from artificial engine simulation. Instead, a sensor mounted on the inverter detects the powertrain's real mechanical vibrations, which are then amplified to create what the company describes as a natural, evolving tone that reflects how the car is being driven... a reactive soundtrack. Antonio Palermo [Ferrari's head of sound and vibration] calls it "language and connection," a way to keep drivers emotionally engaged with the car without resorting to synthetic gimmicks... Needless to say, how convincing this synthesized feedback will feel in practice remains to be seen, as much of Ferrari's allure has traditionally rested on the emotional impact of its combustion engines. "The Torque Shift Engagement system offers five selectable levels of power and torque using the right paddle, while the left paddle adjusts braking intensity," the article points out. But if the engine noises are well-executed, argues the EV news site Electrek, "I even think it might convince some petrolheads to give EVs a try," .Whether you like them or not, engine sounds are essential, especially in performance vehicles. They are part of the identity of certain cars — a sort of signature. They can be emotional. They can give a sense of power. But beyond that, they are information. The pitch, volume, and texture of the engine sound provide critical, real-time feedback to the driver about RPM, load, and the car's health. Some electric automakers are using curated soundscapes (like BMW with Hans Zimmer) or trying to mimic V8s (like Dodge with its "Fratzonic Chambered Exhaust")... Other automakers are simply letting the natural sounds of the electric motors exist. There's nothing wrong with that. However, considering that electric motors produce minimal sounds, which are then trapped inside a metal casing, you rarely hear anything significant, especially in modern vehicles with quiet cabins and even active noise cancellation. For most EVs, this is not a problem, but for a performance electric vehicle, it does feel like something is missing... Ferrari insists the sound will only be used when "functionally useful" to provide feedback to the driver and will be directly tied to torque requests... The entire system was reportedly developed in-house, giving Ferrari complete control over the vehicle's final acoustic signature... [T]hey are embracing the new technology rather than hiding it. They are making a confident statement that an electric powertrain can be emotionally engaging on its own terms, without having to pretend to be something it's not... If you prefer a completely silent drive, you can disable it. Electrek's conclusion? "The purists who were worried that Ferrari would lose its soul in the EV transition should be encouraged by this."
Read more of this story at Slashdot.
- In Copilot In Excel Demo, AI Told Teacher a 27% Exam Score Is of No Concern
A demo of educational AI-powered tools by a Microsoft product manager (in March of 2024) showed "how AI has the possibility to transform various job sectors and the education system," according to one report. But that demo "includes a segment on Copilot in Excel that is likely to resonate with AI-wary software developers," writes long-time Slashdot theodp:The Copilot in Excel segment purports to show how even teachers who were too "afraid of" or "intimidated" to use Excel in the past can now just use natural language prompts to conduct Excel analysis. But Copilot advises the teacher there are no 'outliers' in the exam scores for their 17 students, whose test scores range from 27%-100%. (This is apparently due to Copilot's choice of an inappropriate outlier detection method for this size population and score range). Fittingly, the student whose 27% score is confidently-but-incorrectly deemed to be of no concern by Copilot is named after Michael Scott, the largely incompetent and unprofessional boss of The Office. (Microsoft also named the other exam takers after characters from The Office). The additional Copilot student score "analysis" touted by Microsoft in the demo is also less than impressive. It includes: 1. A vertical bar chart that fails to convey the test score distribution that a histogram would have (a rookie chart choice mistake), 2. A horizontal bar chart of student scores that only displays every other student's name and shows no score values (a rookie formatting error)... So, will teachers — like programmers — be spending a significant amount of time in the future reviewing, editing, and refining the outputs of their AI agent helpers? "Not only does it illustrate how the realities of AI assistants sometimes fall maddeningly short of the promises," argues the original submission. "The demo also shows how AI vendors and customers alike sometimes forget to review promotional AI content closely in all the AI excitement!"
Read more of this story at Slashdot.
- New Large Coral Reef Discovered Off Naples Containing Rare Ancient Corals
Off the southwest cost of Italy, a remotely operated submarine made "a significant and rare discovery," reports the Independent — a vast white coral reef that was 80 metres tall (262 feet) and 2 metres wide (6.56 feet) "containing important species and fossil traces."Often dubbed the "rainforests of the sea", coral reefs are of immense scientific interest due to their status as some of the planet's richest marine ecosystems, harbouring millions of species. They play a crucial role in sustaining marine life but are currently under considerable threat... hese impressive formations are composed of deep-water hard corals, commonly referred to as "white corals" because of their lack of colour, specifically identified as Lophelia pertusa and Madrepora oculata species. The reef also contains black corals, solitary corals, sponges, and other ecologically important species, as well as fossil traces of oysters and ancient corals, the Italian Research Council said. It called them "true geological testimonies of a distant past." Mission leader Giorgio Castellan said the finding was "exceptional for Italian seas: bioconstructions of this kind, and of such magnitude, had never been observed in the Dohrn Canyon, and are rarely seen elsewhere in our Mediterranean". The discovery will help scientists understand the ecological role of deep coral habitats and their distribution, especially in the context of conservation and restoration efforts, he added. The undersea research was funded by the EU. Thanks to davidone (Slashdot reader #12,252) for sharing the article.
Read more of this story at Slashdot.
- 'Tron: Ares' Mode Turns Teslas Into Glowing Light Cycles — Despite Bad Box Office
An anonymous reader shared this report from The WrapTesla this weekend introduced a new "Tron: Ares" mode, giving drivers an opportunity to turn their on-screen vehicles into the glowing Light Cycles that have been a big part of the Disney franchise since 1982. The optional update started rolling out on Friday, as Tron: Ares debuted in theaters. Tesla announced the update on X: "The grid has expanded to your Tesla — Tron: Ares update rolling out now." The feature is activated in Tesla's Toybox "infotainment" system, and turns the driver's vehicle avatar into a red Light Cycle. For drivers who have the "ambient lighting" feature, the mode will also expand the theme throughout the cabin. There was also a sleek black Tesla Optimus robot at the premier of Tron: Ares. Ironically, the Hollywood Reporter writes that by box office figures, "Tron is in big trouble," selling fewer tickets than expected (despite the movie's $180 million pre-marketing budget). While Tron's audience reviews gave it an 86% score on Rotten Tomatoes, its score with critics is just 57%. The Los Angeles Times says the movie "has glowing style, but its storytelling doesn't compute." (Or, as the New York Times puts it, "Who needs logic when you have neon?")
Read more of this story at Slashdot.
- German State of Schlesiwg-Holstein Migrates To FOSS Groupware. Next Up: Linux OS
Long-time Slashdot reader Qbertino writes: German IT news outlet Heise reports [German-language article] that the northern most state Schleswig-Holstein has, after half a year of frantic data migration work, successfully migrated their MS Outlook mail and groupware setups to a FOSS solution using Open-Xchange and Thunderbird. Stakeholders consider the move a major success and milestone to digital sovereignty and saving costs. This move makes the state a pioneer in Germany. As a next major step Schleswig-Holstein plans to migrate their authorities and administrations desktop PCs to Linux. The state has achieved "digital sovereignty by ditching Microsoft for open source solutions," writes the site It's FOSS, adding that European nations "have generally been more progressive in adopting open source solutions for government operations."The migration affected around 30,000 employees across various government departments. This includes the State Chancellery, ministries, judiciary, state police, and other state authorities. Over 40,000 mailboxes containing more than 100 million emails and calendar entries were moved to the new system. The state has adopted Open-Xchange as its email server solution and Thunderbird as the email client.... [Digitization Minister Dirk Schrödter] emphasized that "We are real pioneers. We can't fall back on the experience of others -, there is hardly a comparable project of this magnitude anywhere in the world."
Read more of this story at Slashdot.
- New California Privacy Law Will Require Chrome/Edge/Safari to Offer Easy Opt-Outs for Data Sharing
"California Governor Gavin Newsom signed the 'California Opt Me Out Act', which will require web browsers to include an easy, universal way for users to opt out of data collection and sales," reports the blog 9to5Mac:[The law] requires browsers to provide a clear, one-click mechanism for Californians to opt out of data sharing across websites. The bill reads: "A business shall not develop or maintain a browser that does not include functionality configurable by a consumer that enables the browser to send an opt-out preference signal to businesses with which the consumer interacts through the browser...."Californians will need patience, though, as the law doesn't take effect until January 1, 2027. Americans in some states — including California, Texas, Colorado, New Jersey and Maryland — "have the option to make those opt-out demands automatic whenever they surf the web," reports the Washington Post. "But they can only do so if they use small browsers that voluntarily offer that option, such as DuckDuckGo, Firefox and Brave. What's new in California's law is that all browsers must give people the same option." That means soon in California, just using Google's Chrome, Apple's Safari and Microsoft's Edge can command companies not to sell your data or pass it along for ad targeting... It's an imperfect but potent and simple way to flex privacy rights — and becomes even more powerful with another simple privacy measure in California. Starting on January 1, California residents can fill out an online form once to completely and repeatedly wipe their data from hundreds of data brokers that package your personal information for sale. But their article also suggests other ways readers can "try a one-click privacy option now.""[S]ome national companies respect one-click privacy opt-out requests from everyone... This happens automatically if you use DuckDuckGo and Brave. You need to change a setting with Firefox.""Download Privacy Badger: The software from the Electronic Frontier Foundation, a consumer privacy advocacy group, works in the background to order websites not to sell information they're collecting about you.""Use Permission Slip from Consumer Reports. Give the app basic information, and it will help you do much of the legwork to tell companies not to sell your information or to delete it, if you have the right to do so."
Read more of this story at Slashdot.
- Weird ideas welcome: VC fund looking to make science fiction factual
Nuclear power is getting hot, but don't hold your breath for everlasting batteries
A venture capital fund is looking for ideas that are out of bounds for traditional investors, seeding technology that may only come to fruition decades down the line, but where researchers can show real results in the lab.…
- Who gets a Mac at work? Here's how companies decide
You can't always get what you want
Most corporate laptop fleets consist primarily of PCs. However, there’s always a contingent of users who beg for Macs. Deciding who gets a Mac in your organization involves balancing IT’s need for simplicity, finance’s requirement to keep costs under control, and users’ desire to work with their preferred tools.…
- Kyndryl sued for firing non-white workers, disabled vet
Security team cuts allegedly targeted workers based on race, national origin, age, and whistleblowing
Five former members of Kyndryl's internal IT security team have sued the IBM spinoff alleging that they were terminated as part of a campaign targeting employees based on their race, national origin, age, disability, and whistleblowing activities.…
- Pro-Russia hacktivist group dies of cringe after falling into researchers' trap
Forescout's phony water plant fooled TwoNet into claiming a fake cyber victory – then it quietly shut up shop
Security researchers say they duped pro-Russia cybercriminals into targeting a fake critical infrastructure organization, which the crew later claimed - via their Telegram group - to be a real-world attack.…
- Climate goals go up in smoke as US datacenters turn to coal
High gas prices and surging AI demand send operators back to the dirtiest fuel in the stack
US datacenters are experiencing a significant shift toward coal-powered energy due to elevated natural gas prices and rapidly growing electricity demand.…
- Amazon's Quick Suite is like agentic AI training wheels for enterprises
Slow down there Andy; you wouldn't want to bump into any hallucinations
Despite ongoing concerns over the accuracy, reliability, and trustworthiness of AI in the enterprise, Amazon believes that if it can just make building agents easier for the average worker, they'll be automating the boring parts of their job in no time.…
- Google rearranges Agentspace into Gemini Enterprise
A new spin on workflow automation as Chocolate Factory tries to displace Microsoft as the enterprise go-to
Google on Thursday announced the launch of Gemini Enterprise, a platform for automating business workflows using the company's Gemini family of machine learning models.…
- Crims had 3-month head start on defenders in Oracle EBS invasion
The miscreants started their attack all the way back on July 10
The raid on Oracle E-Business Suite (EBS) likely began as early as July - about three months before any public detections - with extortionists compromising "dozens" of organizations, a Google investigation has determined.…
- Space Shuttle war of words takes off as senator blasts 'woke Smithsonian'
Houston, we have a custody battle
Exclusive The war of words over the possible relocation of Space Shuttle Discovery has ratcheted up, with the office of Senator John Cornyn (R-TX) telling The Register that the orbiter belongs in Houston "whether the woke Smithsonian and its cronies in Congress like it or not."…
- Gartner warns agentic AI startups: Prepare to be consolidated
Analyst predicts over-supply will trigger a market correction in favor of deep-pocketed incumbents
Gartner has signaled that the supply of "agentic AI" in terms of models, platforms, and products far outstrips demand, creating a situation that will lead to consolidation and market correction.…
- China moves to extend control over tech industry's critical rare earths
New laws restrict goods that are manufactured outside of China
China is hitting back at US export restrictions with some of its own, tightening its control on so-called rare earth minerals and introducing laws that require companies to get licenses before they can ship goods containing rare earths, even those made outside of the country.…
- Windows 11 gets a fresh Start in latest Canary build
Meanwhile, Microsoft resurrects Edit and kills .NET 3.5 SP1 on demand
It's taken a while, but Microsoft has finally made its redesigned Start menu available to Canary Channel Windows Insiders, while also removing .NET Framework 3.5 SP1 as a Feature On Demand, and adding Edit, the command-line text editor.…
- Kubernetes kicks down Azure Front Door
This time outage was not actually Microsoft's fault
If you struggled to access the Azure Portal or Microsoft Entra this morning, you weren't alone – Microsoft has blamed a Kubernetes crash for the outage.…
- SonicWall breach hits every cloud backup customer after 5% claim goes up in smoke
Affects users regardless of when their backups were created
SonicWall has admitted that all customers who used its cloud backup service to store firewall configuration files were affected by a cybersecurity incident first disclosed in mid-September, walking back earlier assurances that only a small fraction of users were impacted.…
- Hundreds of millions of business PCs are still on Windows 10 as D-Day nears
It's the end of support as we know it and users feel fine
With days to go before Microsoft finally pulls the plug on Windows 10 support, there are hundreds of millions of computers that have yet to upgrade to Windows 11, despite the best efforts of hardware manufacturers and the operating system's marketers.…
- McKinsey wonders how to sell AI apps with no measurable benefits
Consultant says software vendors risk hiking prices without cutting costs or boosting productivity
Software vendors keen to monetize AI should tread cautiously, since they risk inflating costs for their customers without delivering any promised benefits such as reducing employee head count.…
- Using OpenTelemetry and the OTel Collector for Logs, Metrics, and Traces
OpenTelemetry (fondly known as OTel) is an open-source project that provides a unified set of APIs, libraries, agents, and instrumentation to capture and export logs, metrics, and traces from applications. The project’s goal is to standardize observability across various services and applications, enabling better monitoring and troubleshooting. Read More at Causely
The post Using OpenTelemetry and the OTel Collector for Logs, Metrics, and Traces appeared first on Linux.com.
- Xen 4.19 is released
Xen Project 4.19 has been officially out since July 31st, 2024, and it brings significant updates. With enhancements in performance, security, and versatility across various architectures like Arm, PPC, RISC-V, and x86, this release is an important milestone for the Xen community. Read more at XCP-ng Blog
The post Xen 4.19 is released appeared first on Linux.com.
- Advancing Xen on RISC-V: key updates
At Vates, we are heavily invested in the advancement of Xen and the RISC-V architecture. RISC-V, a rapidly emerging open-source hardware architecture, is gaining traction due to its flexibility, scalability and openness, which align perfectly with our ethos of fostering open development ecosystems. Although the upstream version of Xen for RISC-V is not yet fully [0]
The post Advancing Xen on RISC-V: key updates appeared first on Linux.com.
- AI Produces Data-driven OpenFOAM Speedup (HPC Wire)
Researchers from TU Darmstadt, TU Dresden, Hewlett Packard Enterprise (HPE), and Intel have developed advanced applications that combine HPC simulations with AI techniques using the open-source computational fluid dynamics solver OpenFOAM and the HPE-led SmartSim AI/ML library. These applications show promise for improving the accuracy and capabilities of traditional scientific and engineering modelling with data-driven [0]
The post AI Produces Data-driven OpenFOAM Speedup (HPC Wire) appeared first on Linux.com.
- Linux Patches Posted For Microsoft9s ACPI Fan Extensions
Patches were posted this week for implementing Microsoft's extensions around the ACPI fan device for allowing the operating system to set fan speed trip points. In turn this should help some HP systems and likely other OEMs too in getting fan information working under Linux...
- Intel XPU Manager Deprecates Data Center GPU Max Series & GPU Flex Series
Last week during the Intel Tech Tour in Arizona, the Intel XPU Manager 1.3.3 software was released. Intel XPU Manager is a management and monitoring tool focused on Intel data center GPUs for simplifying administration, reliability, and maximizing utilization. Somewhat surprisingly, the Intel XPU Manager now deprecated the Data Center GPU Max Series as well as the Data Center GPU Flex Series...
- Intel Simplifying P-State Driver9s Energy Model For Newer Core Ultra CPUs
Intel engineer and Linux power management subsystem maintainer Rafael Wysocki posted a set of patches this week to simplify the energy model used by Core Ultra hybrid systems with a mix of P and E cores while lacking SMT support, such as with the current Lunar Lake SoCs and upcoming Panther Lake...
- KDE Plasma 6.5 Fixing Some Of The Most Common Crashes, Other Bugs Fixed Too
KDE developer Nate Graham describes this week as having seen a "massive amount of stability work" for the Plasma 6.5 desktop. Among the many fixes to land this week for this next Plasma desktop release were fixing the second and third most common causes of Plasma crashes. Additionally, the most prolific common crash scenario was discovered to be caused by third-party code...
- Linux Now Disabling TPM Bus Encryption By Default For Performance Reasons
Introduced last year in Linux 6.10 was TPM bus encryption and integration protection for Trusted Platform Module 2 (TPM2) handling. The intent was on better TPM security after a prior security demonstration showed TPM key recovery from Microsoft Windows BitLocker as well as TPM sniffing attacks. Shortly after being merged it was limited to just an x86_64 default where it had been tested the most at the time. Now more than one year later, this feature is being disabled by default in the mainline Linux kernel...
- Python 3.14 Performance Looking Good In Benchmarks
With this week9s release of Python 3.14 bringing performance improvements, debugging improvements, a new Zstd compression module, and other enhancements I have been eager to run some benchmarks seeing how Python 3.14 compares to prior Python releases.
- GCC Patches Posted For C++26 SIMD Support
One of the exciting additions on the way for the C++26 programming language is a standardized library around Single Instruction Multiple Data (SIMD) operations. This portable SIMD implementation makes it easier to leverage SIMD and data parallelism in C++ for better performance and to work across SIMD architectures like AVX-512...
- New Input Drivers Merged For Linux 6.18
In addition to last week's HID subsystem pull that brought haptic touchpad support and other exciting additions for Linux 6.18, the input subsystem pull was merged this week to introduce a few new input drivers...
- Linux Driver Support Ready For Intel Panther Lake9s NPU 5
In addition to Intel talking up their Panther Lake SoC and its Xe3 integrated graphics at their Tech Tour in Arizona last week, they also hosted sessions on additional aspects of Panther Lake like the IPU 7.5 for web cams and the new NPU 5 IP for AI acceleration. For those wondering, the Intel NPU 5 support under Linux is already largely squared away...
- Intel9s Open-Source Strategy Is Changing At Odds With The Ethos Of Open-Source
For the past 21+ years of running Phoronix and even longer than that being a Linux user, I have loved and consistently promoted Intel9s open-source efforts and leading Linux support. Even through Intel9s difficult periods of delayed and stagnate hardware launches, what had remained consistent at the company and rather legendary had been their open-source contributions. From the Linux kernel to compiler toolchains and hundreds -- if not thousands -- of different open-source projects over the past two decades have been advanced thanks to Intel9s open-source leadership. It is with much sadness that my faith and confidence in Intel9s open-source leadership position is being questioned and questioning the direction they are now apparently steering their open-source focus/philosophy moving forward.
- Intel Announces Xeon 6+ For Clearwater Forest CPUs
Details during the Clearwater Forest briefing at Intel Tech Tour Arizona were rather light... Especially as for what9s known about the cores already from prior events like Hot Chips and other Intel disclosures around the Darkmont E-core. But we do now know the branding: Xeon 6+ for Clearwater Forest.
- Intel Teases New Inference-Optimized Enterprise GPU
Intel Tech Tour 2025 in Arizona was primarily focused on disclosures around Xeon 6+ Clearwater Forest and Panther Lake / Xe3 but during the opening keynote was also teasing a yet-to-be-announced inference-optimized GPU...
- Intel IPU 7.5 With Panther Lake Will Rely On Closed-Source Linux Libraries
At the Intel Tech Tour in Arizona, an entire slot was devoted to talking up their next-gen IPU to be found with upcoming high-end Panther Lake laptops. This was in addition to the main Intel Panther Lake / Xe3 presentation. IPU product marketing manager Tomer Rider presented on their IPU7.5 tech, but unfortunately like we have seen with Intel's IPU tech since Alder Lake, there are user-space binary blobs involved...
- Liquid Glass is cracked, and usability suffers in iOS 26
With iOS 26, Apple seems to be leaning harder into visual design and decorative UI effects — but at what cost to usability? At first glance, the system looks fluid and modern. But try to use it, and soon those shimmering surfaces and animated controls start to get in the way. Let’s strip back the frost and look at how these changes affect real use. ↫ Raluca Budiu I have not yet used Apples new Liquid Glass! graphical user interface design, so heres the usual disclaimer that my opinions are, then, effectively meaningless. That being said, the amount of detailed articles about the problems with Liquid Glass from bugs to structural design problems are legion, and this article by Raluca Budiu is an excellent example. There are so many readability problems, spacing issues, odd animations that dont actually convey anything meaningful, performance issues, and tons of bugs. It feels like it was made not by user interface specialists, but by marketeers, who were given too little time to boot. It feels incoherent and messy, and its going to take Apple a long, long time to mold and shape it into something remotely workable.
- In bizarre move, Framework embraces deeply extremist views
Framework, the maker of repairable laptops, is embroiled in a controversy, as the company and its CEO are openly supporting people with, well, questionable views. If you know a little bit about PR in social media space, you might note that, right out of the gate, a project by a vocal white nationalist known for splitting communities by their mere presence, is not a great highlight choice for an overtly non-left-right-political company like Framework. Does it get worse from here? Sadly, it does. ↫ Arya Bread Crumbs The questionable views were talking about here are0 Lets just say were not talking about milquetoast stuff like we should be a bit stricter with immigration! or lower taxes on the rich!, but views that are far, far outside of the mainstream in most places in the world. Framework has stated in no uncertain terms that it is supporting and embracing people like this. Thats a choice they are entirely free to make, but I, and many with me, then, are entirely free to choose not to buy and/or promote products by Framework. I still sincerely hope that all of this is just a massive breakdown of PR and common sense at Framework and its CEO, but since theyve already doubled-down, Im not holding my breath. This whole thing is going to haunt them, especially since Im fairly sure a huge chunk of their community and users who are buying into hardware that is, in truth, overpriced are not even remotely aligned with such extremist views. I care deeply about Frameworks mission, but I dont give a single rats ass about Framework itself. There are countless alternatives to Framework, some of which Ive even reviewed here (like the MNT Reform or the NovaCustom V54), and if you, too, feel a deep sense of the ick when it comes to supporting extremist views like the above, I urge you to take them into consideration.
- Running FreeBSD using Windows Subsystem for Linux
What if you are forced to use Windows, but want to use a real operating system instead? You could use WSL2 to use Linux inside Windows, but what if FreeBSD is more your thing? It turns out someone is working on making FreeBSD usable using WSL2. This repository hosts work-in-progress efforts to run FreeBSD inside Windows Subsystem for Linux (WSL2) with minimal to no changes to the FreeBSD base system. The project builds on the open-source components of WSL2 to enable FreeBSD to boot and run seamlessly in a Windows environment. ↫ WSL for FReeBSD GitHub page The project is experimental, and definitely not ready for production use. Its also important to note that this project is not part of Microsoft or FreeBSD. At this point in time, FreeBSD boots using WSL2 with basic functionality, and work is currently focused on networking, I/O, and process management.
- Fedoras AI! policy process highlights rift between IBM/Red Hat and Fedora
A lot of open source projects are struggling what to do with the AI! bubble, and Fedora is no different. This whole past year, the projects been struggling to formulate any official policies on the use of AI!, and LWN.nets Joe Brockmeier has just done an amazing job summarising the various positions, opinions, and people influencing this process. His conclusion: There appears to be a growing tension between what Red Hat and IBM would like to see from Fedora versus what its users and community contributors want from the project. Red Hat and IBM have already come down in favor of AI as part of their product strategies, the only real questions are what to develop and offer to the customers or partners. The Fedora community, on the other hand, has quite a few people who feel strongly against AI technologies for various ethical, practical, and social reasons. The results, so far, of turning people loose with generative AI tools on unsuspecting open-source projects has not been universally positive. People join communities to collaborate with other people, not to sift through the output of large language models. It is possible that Red Hat will persuade Fedora to formally endorse a policy of accepting AI-assisted content, but it may be at the expense of users and contributors. ↫ Joe Brockmeier at LWN.net Reading through Brockmeiers excellent article, the various forces pulling and pushing on Fedora become quite clear, and the fact weve got IBM/Red Hat in favour of AI!, and Fedoras community of developers and users against it, shouldnt come as a surprise to anyone. Wherever AI! makes an appearance, its almost exclusively a top-down process with corporate interests pushing AI! hard on a largely indifferent userbase. It seems Fedora is no different. The massive rift between IBM/Red Hat on one side, and the Fedora community on the other is probably best illustrated by a remark from Graham White, technical lead for the Granite AI agents at IBM. One of the earlier policy proposals referenced AI! slop, and White was offended by this, stating: Ive been working in the industry and building AI models for a shade over 20 years and never come across AI slop!. This seems derogatory to me and an unnecessary addition to the policy. ↫ Graham White, as quoted by Joe Brockmeier at LWN.net Us regular users are bombarded with AI! slop every day, and I just cant understand how disconnected from reality you must be to not only deny its a problem, but to deny its existence entirely, when virtually every single Google query will drop you in AI! muck. If such denial is commonplace within IBM/Red Hat, its really no wonder theres such a big rift between them and Fedora. It is wholly unsurprising, then, that Fedora is having such a hard time formulating an AI! policy. The current version of the proposed policy seems to view AI! and its use in or by Fedora mildly positively, which certainly has me, as a Fedora/KDE user, on edge. I dont want AI! anywhere near my operating system for a whole variety of reasons, and if the upcoming vote on the new policy ends up in favour of it, I might have to consider moving away from Fedora.
- Microsoft closes another loophole to enable local accounts in Windows 11
It seems like Microsoft is continuing its quest to force Windows users to use Microsoft accounts instead of local accounts, despite the fact Microsoft accounts on Windows are half-baked and potentially incredibly dangerous. In the most recent Windows 11 Insider Preview Build (26220.6772), the company has closed a few more loopholes people were using to trick the Windows installer into allowing local user accounts. We are removing known mechanisms for creating a local account in the Windows Setup experience (OOBE). While these mechanisms were often used to bypass Microsoft account setup, they also inadvertently skip critical setup screens, potentially causing users to exit OOBE with a device that is not fully configured for use. Users will need to complete OOBE with internet and a Microsoft account, to ensure device is setup correctly. ↫ Amanda Langowski at the Windows Blogs It seems that the specific workaround removed with this change is executing the command start ms-cxh:localonly! in the command prompt during the installation process (you can access cmd.exe by pressing shift+F10 during installation). Several other workarounds have also been removed in recent years, making it ever harder for people forced to use Windows 11 to use a local account, like the gods intended. The only reason Microsoft is pushing online accounts this hard is that it makes it much, much easier for them to collect your data and wrestle control over your installation away from you. A regular, proper local account with additional online accounts for various services would work just as well for users, allowing them to mix and match exactly what kind of cloud services they want integrated into their operating system. However, leaving this choice to the user invariably means people arent going to be using whatever trash services Microsoft offers. And so, Microsoft will make that choice for you, whether you like it or not. There are a million reasons to stay away from the Windows version that must be making Dave Cutler cry, and the insistence on online accounts is but one of them. Its a perfect example of how Microsoft developers Windows not to make it better for its users, but to make it better for its bottom line. I wonder how much more Microsoft can squeeze its users before we see some sort of actual revolt. Windows used to just lack taste. These days, its also actively hostile.
- Servo GTK: a widget to embed Servo in GTK4
Servo, the Rust-based browsing engine spun off from Mozilla, keeps making progress every month, and this made Ignacio Casal Quinteiro wonder: what if we make a GTK widget so we can test Servo and compare it to WebKitGTK? As part of my job at Amazon I started working in a GTK widget which will allow embedding a Servo Webview inside a GTK application. This was mostly a research project just to understand the current state of Servo and whether it was at a good enough state to migrate from WebkitGTK to it. I have to admit that it is always a pleasure to work with Rust and the great gtk-rs bindings. Instead, Servo while it is not yet ready for production, or at least not for what we need in our product, it was simple to embed and to get something running in just a few days. The community is also amazing, I had some problems along the way and they were providing good suggestions to get me unblocked in no time. ↫ Ignacio Casal Quinteiro The code is now out there, and while not yet ready for widespread use, this will make it easier for GTK developer to periodically assess the state of Servo, hopefully some day concluding it can serve as a replacement for WebKitGTK.
- Synology reverses policy banning third-party HDDs after NAS sales plummet
Earlier this year, popular NAS vendor Synology announced it would start requiring some of its more expensive models to only use Synology-branded drives. It seems the uproar this announcement caused has had some real chilling effect on sales, and the company just cancelled its plans. Synology has backtracked on one of its most unpopular decisions in years. After seeing NAS sales plummet in 2025, the company has decided to lift restrictions that forced users to buy its own Synology hard drives. The policy, introduced earlier this year, made third-party HDDs from brands like Seagate and WD practically unusable in newer models such as the DS925+, DS1825+, and DS425+. That change didn’t go over well. Users immediately criticised Synology for trying to lock them into buying its much more expensive drives. Many simply refused to upgrade, and reviewers called out the move as greedy and shortsighted. According to some reports, sales of Synology’s 2025 NAS models dropped sharply in the months after the restriction was introduced. ↫ Hilbert Hagedoorn at Guru3D.com If you want to screw over your users to make a few more euros, its generally a good idea to first assess just how locked-in your users really are. Synology is but one of many companies making and selling NAS devices, and even building one yourself is stupidly easy these days. Theres an entire cottage industry of motherboards and enclosures specifically designed for this purpose, and there are countless easy-to-use software options out there, too. In other words, nobody is really locked into Synology, so any unpopular move by the company was bound to make people look elsewhere, only to discover there are tons of competing options to choose from. The market seems to have spoken, and Synology can only respond by reversing its decision. Honestly, I had almost forgotten what a healthy tech market with tons of competing options looks like.
- MicroPythonOS: an Android-like operating system for microcontrollers like the ESP32
MicroPythonOS is a lightweight, fast, and versatile operating system designed to run on microcontrollers like the ESP32 and desktop systems. With a modern Android-like touch screen UI, App Store, and Over-The-Air updates, it’s the perfect OS for innovators and developers. ↫ MicroPytonOS website Its quite neat to see this running in such a constrained environment, especially considering it comes with a graphical user interface, some basic applications, and niceties like OTA updates and an application repository. As the name implies, MicroPythonOS uses native MicroPython for application and driver development, making cross-platform portability from microcontrollers to regular PCs a possibility. Its built on the MicroPython runtime, with LVGL for graphics, packaged by the lvgl_micropython project. Its still relatively early in development, but its completely open source so anyone can help out and improve the project. Im personally not too well-versed in the world of microcontrollers like the popular ESP32, so Im not entirely sure just how capable other operating systems and platforms built on top if it are. This particular operating system seems to make it rather easy and straightforward for anyone to build and distribute an application for such microcontrollers, to a point where even an idiot like myself could relatively easily buy, say, an ESP32 kit with a display and assemble my own collection of small applications. To repeat myself, it simply looks neat.
- Qualcomm gobbles up Arduino
It was good while it lasted, I guess. Arduino will retain its independent brand, tools, and mission, while continuing to support a wide range of microcontrollers and microprocessors from multiple semiconductor providers as it enters this next chapter within the Qualcomm family. Following this acquisition, the 33M+ active users in the Arduino community will gain access to Qualcomm Technologies’ powerful technology stack and global reach. Entrepreneurs, businesses, tech professionals, students, educators, and hobbyists will be empowered to rapidly prototype and test new solutions, with a clear path to commercialization supported by Qualcomm Technologies’ advanced technologies and extensive partner ecosystem. ↫ Qualcomms press release Qualcomms track record when it comes to community engagement, open source, and long-term support are absolutely atrocious, and theres no way Arduino will be able to withstand the pressures from management. Weve seen this exact story play out a million times, and it always begins with lofty promises, and always ends with all of them being broken. I have absolutely zero faith Arduino will be able to continue to do its thing like it has. Arduino devices are incredibly popular, and it makes sense for Qualcomm to acquire them. If I were using Arduinos for my open source projects, Id be a bit on edge right now.
- That small sliver of time where a QNX desktop was a real thing we did
Bradford Morgan White has published an excellent retrospective of QNX, the realtime microkernel operating system focused on embedded use cases. The final paragraph made me sad, though. QNX is a fascinating operating system. It was extremely well designed from the start, and while it has been rewritten, the core ideas that allowed it survive for 45 years persist to this day. While I am sad that Photon was deprecated, the reasoning is sound. Most vendors using QNX either do not require a GUI, or they implement their own. For example, while Boston Dynamics uses QNX in their robots, they don’t really need Photon, and neither do SpaceX’s Falcon rockets. While cars certainly have displays, most vehicle makers desire their screen interfaces to have a unique look and feel. Of course, just stating these use cases of robots, rockets, and cars speaks to the incredible reliability and versatility of QNX. Better operating systems are possible, and QNX proves it. ↫ Bradford Morgan White at Abort Retry Fail Way back in 2004, before I even joined OSNews properly, I wrote about QNX as a desktop operating system, because back then I went through a short stint where I used QNX and its amazing Photon MicroGUI as my primary desktop. Back then, there was a short-lived but very enthusiastic community using QNX on desktops, sharing tips and findings, supported by one or two QNX employees who tried their best to support this fledgling community in the face of corporate indifference. Eventually, these QNX employees left the company, and QNX started making it clearer than ever that they were not, in any way, interested in people using QNX on desktops, and in all honesty, they were most likely correct. However, I still think we had something special there, and had QNX management decided to help us out, it couldve grown into something more sustainable. An open source QNX and Photon couldve had an impact. Using QNX on the desktop back then was much easier than you might imagine, with graphical package managers, capable browsers and email clients, a massive pile of open source packages, pretty great performance, and little to no need to ever leave the GUI and use a CLI. If your hardware was properly supported, you could have a great experience. One of the very small what-ifs! form the early 2000s.
- Redox now multithreaded by default
Can these months please stop passing us by this quickly? It seems were getting a monthly Redox update every other week now, and thats not right. Anyway, what have the people behind this Rust-based operating system been up to this past month? One of the biggest changes this month is that Redox is now multithreaded by default, at least on x86 machines. Unsurprisingly, this can enable some serious performance gains. Also contributing to performance improvements this month is inode data inlining for small files, and the installation is now a lot faster too. LZ4 compression has been added to Redox, saving storage space and improving performance. As far as ports go, theres a ton of new and improved ports, like OpenSSH, Nginx, PHP, Neovim, OpenSSL 3.x, and more. On top of that, theres a long list of low-level kernel improvements, driver changes, and relibc improvements, changes to the main website, and so on.
- The case against generative AI: the numbers just dont add up (i.e., its a scam)
Every single “vibe coding is the future,” “the power of AI,” and “AI job loss” story written perpetuates a myth that will only lead to more regular people getting hurt when the bubble bursts. Every article written about OpenAI or NVIDIA or Oracle that doesn’t explicitly state that the money doesn’t exist, that the revenues are impossible, that one of the companies involved burns billions of dollars and has no path to profitability, is an act of irresponsible make believe and mythos. ↫ Edward Zitron The numbers are clear. People arent paying for AI!, and those that do, are using up way more resources than theyre actually paying for. The profits required to make all of this work just arent realistic in any way, shape, or form. The money being pumped around doesnt even exist. Its a scam of such utterly massive proportions, its easier for many of us to just assume it cant possibly be one. Too big to fail? Too many promises to be a scam. Its going to be a bloodbath, but as usual when the finance and tech bros scam entire sectors, its us normal folk who will be left to foot the bill. Lets blame immigrants some more while we implement harsh austerity measures to bail out the billionaire class. Again.
- Under pressure from US government, Apple removes ICEBlock application from the App Store
Your lovely host, late last night: Google claims they won’t be sharing developer information with governments, but we all know that’s a load of bullshit, made all the more relevant after whatever the fuck this was. If you want to oppose the genocide in Gaza or warn people of ICE raids, and want to create an Android application to coordinate such efforts, you probably should not, and stick to more anonymous organising tools. ↫ Thom Holwerda Lets check in with how that other walled garden Google is trying to emulate is doing. Apple has removed ICEBlock, an app that allowed users to monitor and report the location of immigration enforcement officers, from the App Store. We created the App Store to be a safe and trusted place to discover apps,! Apple said in a statement to Business Insider. Based on information weve received from law enforcement about the safety risks associated with ICEBlock, we have removed it and similar apps from the App Store.! ↫ Katherine Tangalakis-Lippert, Peter Kafka, and Kwan Wei Kevin Tan for Business Insider Oh. Apple and Google are but mere extensions of the state apparatus. Think twice about what device you bring with you the next time you wish to protest your governments actions.
- Google details Android developer certification requirement, and its as bad as we feared
Google has been on a bit of a marketing blitz to try and counteract some of the negative feedback following its new developer verification requirement for Android applications, and while theyre using a lot of words, none of them seem to address the core concerns. It basically comes down to that they just dont care about the consequences this new requirement has for projects like F-Droid, nor are they really bothered by any of the legitimate privacy concerns this whole thing raises. If this new requirement is implemented in its current form, F-Droid will simply not be able to continue to exist in its current form. F-Droid builds the applications in its repository themselves and signs them, and developer verification does not fit into that picture at all. F-Droid works this way to ensure its applications are built from the publicly available sources, so developers cant sneak anything nefarious into any binaries they would otherwise be submitting themselves. The privacy angle doesnt seem to bother Google much, either, which shouldnt be a surprise to anyone. With this new requirement, Android application developers can simply no longer be anonymous, which has a variety of side-effects, not least of which is that anyone developing applications for, say, dissidents, can now no longer be anonymous. Google claims they wont be sharing developer information with governments, but we all know thats a load of bullshit, made all the more relevant after whatever the fuck this was. If you want to oppose the genocide in Gaza or warn people of ICE raids, and want to create an Android application to coordinate such efforts, you probably should not, and stick to more anonymous organising tools. Students and hobbyists are getting the short end of the stick, too, as Googles promised program specifically for these two groups is incredibly limited. Yes, it waves the $25 fee, but thats about the only positive here: Developers who register with Google as a student or hobbyist will face severe app distribution restrictions, namely a limit on the number of devices that can install their apps. To enforce this, any user wanting to install software from these developers must first retrieve a unique identifier from their device. The developer then has to input this identifier into the Android Developer Console to authorize that specific device for installation. ↫ Mishaal Rahman at Android Authority Google does waive the requirement for developer certification for one particular type of user, and in doing so, highlights the only group of users Google truly cares about: enterprise users. Any application installed by an enterprise on managed devices will not need to have its developer certified. Google states that in this particular use case, the enterprises IT department is responsible for any security issues that may arise. Isnt it funny how the only group of users who wont have to deal with this nonsense are companies who pay Google tons of money for their enterprise tools? The only way were going to get out of this is if any governments step up and put a stop to this. We can safely assume the United States government wont be on our side theyre too busy with their recurring idiotic song-and-dance anyway so our only hope is the European Commission stepping in, but Im not holding my breath. After all, Apples rules and regulations regarding installing applications outside of the App Store in the EU are not that different from what Google is going to do. While the EU is not happy with the details of Apples rules, their general gist seems to be okay with them. Im afraid governments wont be stepping in to stop this one.
- Dutch judge to Facebook: stop secretly disregarding your users settings
And here we have yet another case of the EUs consumer protection legislation working in our favour. Dutch privacy and consumer rights organisation Bits of Freedom sued Facebook over the companys little trick of disregarding a users settings under a variety of circumstances, such as when a user opts for a chronological, non-profiled timeline, only to have Facebook reset itself to the profiled timeline upon a restart. The judge states that Meta is indeed acting in violation of the law. He says that “a non‑persistent choice option for a recommendation system runs counter to the purpose of the DSA, which is to give users genuine autonomy, freedom of choice, and control over how information is presented to them.” The judge also concludes that the way Meta has designed its platforms constitutes “a significant disruption of the autonomy of Facebook and Instagram users.” The judge orders Meta to adjust its apps so that the user’s choice is preserved, even when the user navigates to another section or restarts the app. ↫ Bits of Freedom press release This is good news, of course, but I really wish we would take this a step further: a complete ban on targeted advertising and timeline manipulation based on harvested user data. I just dont believe these business models and ragebait machines offer anything of value to society, and in fact, do far more harm than good. I am convinced that our world would be a better place without these business models. We restrict of outright ban dangerous substances or activities all the time. This should be among them.
- Ubuntu Touch 24.04-1.0 released
With Google closing up Android at a rapid pace, theres some renewed interest in mobile platforms that arent either iOS or Android, and one of those is Ubuntu Touch. Its been steadily improving over the years under the stewardship of the UBports Foundation, and today they released Ubuntu Touch 24.04-1.0. Ubuntu Touch 24.04-1.0 is the first release of Ubuntu Touch which is based on Ubuntu 24.04 LTS, a major upgrade from Ubuntu 20.04. This might not be as big compared to our last upgrade from Ubuntu 16.04 to 20.04, but this still brings newer software stack to Ubuntu Touch (such as Qt 5.15). ↫ Ubuntu Touch 24.04-1.0 release announcement In this release, aside from the upgrade to Ubuntu 24.04 LTS, theres now also a light mode for the shell, including experimental support for switching themes on the fly. Applications already supported a light theme since the previous releases, so adding support for it in the main shell is a welcome improvement. Weve also got experimental support for encrypting personal data, which needs to be enabled per device, which I think indicates not all devices support it. On top of that, theres some changes to the phone application, and a slew of smaller fixes and improvements as well. The list of supported devices has grown as well, with the Fairphone 5 as the newcomer this release. The list is still relatively small, but to be fair to the project, it includes a number of popular devices, as well as a few that are still readily available. If you want to opt for running Ubuntu Touch as your smartphone platform, theres definitely plenty of devices to choose from.
- EU OS: A Bold Step Toward Digital Sovereignty for Europe
Image
A new initiative, called "EU OS," has been launched to develop a Linux-based operating system tailored specifically for the public sector organizations of the European Union (EU). This community-driven project aims to address the EU's unique needs and challenges, focusing on fostering digital sovereignty, reducing dependency on external vendors, and building a secure, self-sufficient digital ecosystem.
What Is EU OS?
EU OS is not an entirely novel operating system. Instead, it builds upon a Linux foundation derived from Fedora, with the KDE Plasma desktop environment. It draws inspiration from previous efforts such as France's GendBuntu and Munich's LiMux, which aimed to provide Linux-based systems for public sector use. The goal remains the same: to create a standardized Linux distribution that can be adapted to different regional, national, and sector-specific needs within the EU.
Rather than reinventing the wheel, EU OS focuses on standardization, offering a solid Linux foundation that can be customized according to the unique requirements of various organizations. This approach makes EU OS a practical choice for the public sector, ensuring broad compatibility and ease of implementation across diverse environments.
The Vision Behind EU OS
The guiding principle of EU OS is the concept of "public money – public code," ensuring that taxpayer money is used transparently and effectively. By adopting an open-source model, EU OS eliminates licensing fees, which not only lowers costs but also reduces the dependency on a select group of software vendors. This provides the EU’s public sector organizations with greater flexibility and control over their IT infrastructure, free from the constraints of vendor lock-in.
Additionally, EU OS offers flexibility in terms of software migration and hardware upgrades. Organizations can adapt to new technologies and manage their IT evolution at a manageable cost, both in terms of finances and time.
However, there are some concerns about the choice of Fedora as the base for EU OS. While Fedora is a solid and reliable distribution, it is backed by the United States-based Red Hat. Some argue that using European-backed projects such as openSUSE or KDE's upcoming distribution might have aligned better with the EU's goal of strengthening digital sovereignty.
Conclusion
EU OS marks a significant step towards Europe's digital independence by providing a robust, standardized Linux distribution for the public sector. By reducing reliance on proprietary software and vendors, it paves the way for a more flexible, cost-effective, and secure digital ecosystem. While the choice of Fedora as the base for the project has raised some questions, the overall vision of EU OS offers a promising future for Europe's public sector in the digital age.
Source: It's FOSS
European Union
- Linus Torvalds Acknowledges Missed Release of Linux 6.14 Due to Oversight
Linus Torvalds Acknowledges Missed Release of Linux 6.14 Due to Oversight
Linux kernel lead developer Linus Torvalds has admitted to forgetting to release version 6.14, attributing the oversight to his own lapse in memory. Torvalds is known for releasing new Linux kernel candidates and final versions on Sunday afternoons, typically accompanied by a post detailing the release. If he is unavailable due to travel or other commitments, he usually informs the community ahead of time, so users don’t worry if there’s a delay.
In his post on March 16, Torvalds gave no indication that the release might be delayed, instead stating, “I expect to release the final 6.14 next weekend unless something very surprising happens.” However, Sunday, March 23rd passed without any announcement.
On March 24th, Torvalds wrote in a follow-up message, “I’d love to have some good excuse for why I didn’t do the 6.14 release yesterday on my regular Sunday afternoon schedule,” adding, “But no. It’s just pure incompetence.” He further explained that while he had been clearing up unrelated tasks, he simply forgot to finalize the release. “D'oh,” he joked.
Despite this minor delay, Torvalds’ track record of successfully managing the Linux kernel’s development process over the years remains strong. A single day’s delay is not critical, especially since most Linux users don't urgently need the very latest version.
The new 6.14 release introduces several important features, including enhanced support for writing drivers in Rust—an ongoing topic of discussion among developers—support for Qualcomm’s Snapdragon 8 Elite mobile chip, a fix for the GhostWrite vulnerability in certain RISC-V processors from Alibaba’s T-Head Semiconductor, and a completed NTSYNC driver update that improves the WINE emulator’s ability to run Windows applications, particularly games, on Linux.
Although the 6.14 release went smoothly aside from the delay, Torvalds expressed that version 6.15 may present more challenges due to the volume of pending pull requests. “Judging by my pending pile of pull requests, 6.15 will be much busier,” he noted.
You can download the latest kernel here.
Linus Torvalds kernel
- AerynOS 2025.03 Alpha Released with GNOME 48, Mesa 25, and Linux Kernel 6.13.8
Image
AerynOS 2025.03 has officially been released, introducing a variety of exciting features for Linux users. The release includes the highly anticipated GNOME 48 desktop environment, which comes with significant improvements like HDR support, dynamic triple buffering, and a Wayland color management protocol. Other updates include a battery charge limiting feature and a Wellbeing option aimed at improving user experience.
This release, while still in alpha, incorporates Linux kernel 6.13.8 and the updated Mesa 25.0.2 graphics stack, alongside tools like LLVM 19.1.7 and Vulkan SDK 1.4.309.0. Additionally, the Moss package manager now integrates os-info to generate more detailed OS metadata via a JSON file.
Future plans for AerynOS include automated package updates, easier rollback management, improved disk handling with Rust, and fractional scaling enabled by default. The installer has also been revamped to support full disk wipes and dynamic partitioning.
Although still considered an alpha release, AerynOS 2025.03 can be downloaded and tested right now from its official website.
Source: 9to5Linux
AerynOS
- Xojo 2025r1: Big Updates for Developers with Linux ARM Support, Web Drag and Drop, and Direct App Store Publishing
Image
Xojo has just rolled out its latest release, Xojo 2025 Release 1, and it’s packed with features that developers have been eagerly waiting for. This major update introduces support for running Xojo on Linux ARM, including Raspberry Pi, brings drag-and-drop functionality to the Web framework, and simplifies app deployment with the ability to directly submit apps to the macOS and iOS App Stores.
Here’s a quick overview of what’s new in Xojo 2025r1:
1. Linux ARM IDE Support
Xojo 2025r1 now allows developers to run the Xojo IDE on Linux ARM devices, including popular platforms like Raspberry Pi. This opens up a whole new world of possibilities for developers who want to create apps for ARM-based devices without the usual complexity. Whether you’re building for a Raspberry Pi or other ARM devices, this update makes it easier than ever to get started.
2. Web Drag and Drop
One of the standout features in this release is the addition of drag-and-drop support for web applications. Now, developers can easily drag and drop visual controls in their web projects, making it simpler to create interactive, user-friendly web applications. Plus, the WebListBox has been enhanced with support for editable cells, checkboxes, and row reordering via dragging. No JavaScript required!
3. Direct App Store Publishing
Xojo has also streamlined the process of publishing apps. With this update, developers can now directly submit macOS and iOS apps to App Store Connect right from the Xojo IDE. This eliminates the need for multiple steps and makes it much easier to get apps into the App Store, saving valuable time during the development process.
4. New Desktop and Mobile Features
This release isn’t just about web and Linux updates. Xojo 2025r1 brings some great improvements for desktop and mobile apps as well. On the desktop side, all projects now include a default window menu for macOS apps. On the mobile side, Xojo has introduced new features for Android and iOS, including support for ColorGroup and Dark Mode on Android, and a new MobileColorPicker for iOS to simplify color selection.
5. Performance and IDE Enhancements
Xojo’s IDE has also been improved in several key areas. There’s now an option to hide toolbar captions, and the toolbar has been made smaller on Windows. The IDE on Windows and Linux now features modern Bootstrap icons, and the Documentation window toolbar is more compact. In the code editor, developers can now quickly navigate to variable declarations with a simple Cmd/Ctrl + Double-click. Plus, performance for complex container layouts in the Layout Editor has been enhanced.
What Does This Mean for Developers?
Xojo 2025r1 brings significant improvements across all the platforms that Xojo supports, from desktop and mobile to web and Linux. The added Linux ARM support opens up new opportunities for Raspberry Pi and ARM-based device development, while the drag-and-drop functionality for web projects will make it easier to create modern, interactive web apps. The ability to publish directly to the App Store is a game-changer for macOS and iOS developers, reducing the friction of app distribution.
How to Get Started
Xojo is free for learning and development, as well as for building apps for Linux and Raspberry Pi. If you’re ready to dive into cross-platform development, paid licenses start at $99 for a single-platform desktop license, and $399 for cross-platform desktop, mobile, or web development. For professional developers who need additional resources and support, Xojo Pro and Pro Plus licenses start at $799. You can also find special pricing for educators and students.
Download Xojo 2025r1 today at xojo.com.
Final Thoughts
With each new release, Xojo continues to make cross-platform development more accessible and efficient. The 2025r1 release is no exception, delivering key updates that simplify the development process and open up new possibilities for developers working on a variety of platforms. Whether you’re a Raspberry Pi enthusiast or a mobile app developer, Xojo 2025r1 has something for you.
Xojo ARM
- New 'Mirrored' Network Mode Introduced in Windows Subsystem for Linux
Microsoft's Windows Subsystem for Linux (WSL) continues to evolve with the release of WSL 2 version 0.0.2. This update introduces a set of opt-in preview features designed to enhance performance and compatibility.
Key additions include "Automatic memory reclaim" which dynamically optimizes WSL's memory footprint, and "Sparse VHD" to shrink the size of the virtual hard disk file. These improvements aim to streamline resource usage.
Additionally, a new "mirrored networking mode" brings expanded networking capabilities like IPv6 and multicast support. Microsoft claims this will improve VPN and LAN connectivity from both the Windows host and Linux guest.
Complementing this is a new "DNS Tunneling" feature that changes how DNS queries are resolved to avoid compatibility issues with certain network setups. According to Microsoft, this should reduce problems connecting to the internet or local network resources within WSL.
Advanced firewall configuration options are also now available through Hyper-V integration. The new "autoProxy" feature ensures WSL seamlessly utilizes the Windows system proxy configuration.
Microsoft states these features are currently rolling out to Windows Insiders running Windows 11 22H2 Build 22621.2359 or later. They remain opt-in previews to allow testing before final integration into WSL.
By expanding WSL 2 with compelling new capabilities in areas like resource efficiency, networking, and security, Microsoft aims to make Linux on Windows more performant and compatible. This evolutionary approach based on user feedback highlights Microsoft's commitment to WSL as a key part of the Windows ecosystem.
Windows
- Linux Threat Report: Earth Lusca Deploys Novel SprySOCKS Backdoor in Attacks on Government Entities
The threat actor Earth Lusca, linked to Chinese state-sponsored hacking groups, has been observed utilizing a new Linux backdoor dubbed SprySOCKS to target government organizations globally.
As initially reported in January 2022 by Trend Micro, Earth Lusca has been active since at least 2021 conducting cyber espionage campaigns against public and private sector targets in Asia, Australia, Europe, and North America. Their tactics include spear-phishing and watering hole attacks to gain initial access. Some of Earth Lusca's activities overlap with another Chinese threat cluster known as RedHotel.
In new research, Trend Micro reveals Earth Lusca remains highly active, even expanding operations in the first half of 2023. Primary victims are government departments focused on foreign affairs, technology, and telecommunications. Attacks concentrate in Southeast Asia, Central Asia, and the Balkans regions.
After breaching internet-facing systems by exploiting flaws in Fortinet, GitLab, Microsoft Exchange, Telerik UI, and Zimbra software, Earth Lusca uses web shells and Cobalt Strike to move laterally. Their goal is exfiltrating documents and credentials, while also installing additional backdoors like ShadowPad and Winnti for long-term spying.
The Command and Control server delivering Cobalt Strike was also found hosting SprySOCKS - an advanced backdoor not previously publicly reported. With roots in the Windows malware Trochilus, SprySOCKS contains reconnaissance, remote shell, proxy, and file operation capabilities. It communicates over TCP mimicking patterns used by a Windows trojan called RedLeaves, itself built on Trochilus.
At least two SprySOCKS versions have been identified, indicating ongoing development. This novel Linux backdoor deployed by Earth Lusca highlights the increasing sophistication of Chinese state-sponsored threats. Robust patching, access controls, monitoring for unusual activities, and other proactive defenses remain essential to counter this advanced malware.
The Trend Micro researchers emphasize that organizations must minimize attack surfaces, regularly update systems, and ensure robust security hygiene to interrupt the tactics, techniques, and procedures of relentless threat groups like Earth Lusca.
Security
- Linux Kernel Faces Reduction in Long-Term Support Due to Maintenance Challenges
The Linux kernel is undergoing major changes that will shape its future development and adoption, according to Jonathan Corbet, Linux kernel developer and executive editor of Linux Weekly News. Speaking at the Open Source Summit Europe, Corbet provided an update on the latest Linux kernel developments and a glimpse of what's to come.
A major change on the horizon is a reduction in long-term support (LTS) for kernel versions from six years to just two years. Corbet explained that maintaining old kernel branches indefinitely is unsustainable and most users have migrated to newer versions, so there's little point in continuing six years of support. While some may grumble about shortened support lifecycles, the reality is that constantly backporting fixes to ancient kernels strains maintainers.
This maintainer burnout poses a serious threat, as Corbet highlighted. Maintaining Linux is largely a volunteer effort, with only about 200 of the 2,000+ developers paid for their contributions. The endless demands on maintainers' time from fuzz testing, fixing minor bugs, and reviewing contributions takes a toll. Prominent maintainers have warned they need help to avoid collapse. Companies relying on Linux must realize giving back financially is in their interest to sustain this vital ecosystem.
The Linux kernel is also wading into waters new with the introduction of Rust code. While Rust solves many problems, it also introduces new complexities around language integration, evolving standards, and maintainer expertise. Corbet believes Rust will pass the point of no return when core features depend on it, which may occur soon with additions like Apple M1 GPU drivers. Despite skepticism in some corners, Rust's benefits likely outweigh any transition costs.
On the distro front, Red Hat's decision to restrict RHEL cloning sparked community backlash. While business considerations were at play, Corbet noted technical factors too. Using older kernels with backported fixes, as RHEL does, risks creating divergent, vendor-specific branches. The Android model of tracking mainline kernel dev more closely has shown security benefits. Ultimately, Linux works best when aligned with the broader community.
In closing, Corbet recalled the saying "Linux is free like a puppy is free." Using open source seems easy at first, but sustaining it long-term requires significant care and feeding. As Linux is incorporated into more critical systems, that maintenance becomes ever more crucial. The kernel changes ahead are aimed at keeping Linux healthy and vibrant for the next generation of users, businesses, and developers.
kernel
- Linux Celebrates 32 Years with the Release of 6.6-rc2 Version
Today marks the 32nd anniversary of Linus Torvalds introducing the inaugural Linux 0.01 kernel version, and celebrating this milestone, Torvalds has launched the Linux 6.6-rc2. Among the noteworthy updates are the inclusion of a feature catering to the ASUS ROG Flow X16 tablet's mode handling and the renaming of the new GenPD subsystem to pmdomain.
The Linux 6.6 edition is progressing well, brimming with exciting new features that promise to enhance user experience. Early benchmarks are indicating promising results, especially on high-core-count servers, pointing to a potentially robust and efficient update in the Linux series.
Here is what Linus Torvalds had to say in today's announcement:
Another week, another -rc.I think the most notable thing about 6.6-rc2 is simply that it'sexactly 32 years to the day since the 0.01 release. And that's a roundnumber if you are a computer person.Because other than the random date, I don't see anything that reallystands out here. We've got random fixes all over, and none of it looksparticularly strange. The genpd -> pmdomain rename shows up in thediffstat, but there's no actual code changes involved (make sure touse "git diff -M" to see them as zero-line renames).And other than that, things look very normal. Sure, the architecturefixes happen to be mostly parisc this week, which isn't exactly theusual pattern, but it's also not exactly a huge amount of changes.Most of the (small) changes here are in drivers, with some tracingfixes and just random things. The shortlog below is short enough toscroll through and get a taste of what's been going on. Linus Torvalds
- Introducing Bavarder: A User-Friendly Linux Desktop App for Quick ChatGPT Interaction
Want to interact with ChatGPT from your Linux desktop without using a web browser?
Bavarder, a new app, allows you to do just that.
Developed with Python and GTK4/libadwaita, Bavarder offers a simple concept: pose a question to ChatGPT, receive a response, and promptly copy the answer (or your inquiry) to the clipboard for pasting elsewhere.
With an incredibly user-friendly interface, you won't require AI expertise (or a novice blogger) to comprehend it. Type your question in the top box, click the blue send button, and wait for a generated response to appear at the bottom. You can edit or modify your message and repeat the process as needed.
During our evaluation, Bavarder employed BAI Chat, a GPT-3.5/ChatGPT API-based chatbot that's free and doesn't require signups or API keys. Future app versions will incorporate support for alternative backends, such as ChatGPT 4 and Hugging Chat, and allow users to input an API key to utilize ChatGPT3.
At present, there's no option to regenerate a response (though you can resend the same question for a potentially different answer). Due to the lack of a "conversation" view, tracking a dialogue or following up on answers can be challenging — but Bavarder excels for rapid-fire questions.
As with any AI, standard disclaimers apply. Responses might seem plausible but could contain inaccurate or false information. Additionally, it's relatively easy to lead these models into irrational loops, like convincing them that 2 + 2 equals 106 — so stay alert!
Overall, Bavarder is an attractive app with a well-defined purpose. If you enjoy ChatGPT and similar technologies, it's worth exploring.
ChatGPT AI
- LibreOffice 7.5.3 Released: Third Maintenance Update Brings 119 Bug Fixes to Popular Open-Source Office Suite
Today, The Document Foundation unveiled the release and widespread availability of LibreOffice 7.5.3, which serves as the third maintenance update to the current LibreOffice 7.5 open-source and complimentary office suite series.
Approximately five weeks after the launch of LibreOffice 7.5.2, LibreOffice 7.5.3 arrives with a new set of bug fixes for those who have successfully updated their GNU/Linux system to the LibreOffice 7.5 series.
LibreOffice 7.5.3 addresses a total of 119 bugs identified by users or uncovered by LibreOffice developers. For a more comprehensive understanding of these bug fixes, consult the RC1 and RC2 changelogs.
You can download LibreOffice 7.5.3 directly from the LibreOffice websiteor from SourceForge as binary installers for DEB or RPM-based GNU/Linux distributions. A source tarball is also accessible for individuals who prefer to compile the software from sources or for system integrators.
All users operating the LibreOffice 7.5 office suite series should promptly update their installations to the new point release, which will soon appear in the stable software repositories of your GNU/Linux distributions.
In early February 2023, LibreOffice 7.5 debuted as a substantial upgrade to the widely-used open-source office suite, introducing numerous features and improvements. These enhancements encompass major upgrades to dark mode support, new application and MIME-type icons, a refined Single Toolbar UI, enhanced PDF Export, and more.
Seven maintenance updates will support LibreOffice 7.5 until November 30th, 2023. The next point release, LibreOffice 7.5.4, is scheduled for early June and will include additional bug fixes.
The Document Foundation once again emphasizes that the LibreOffice office suite's "Community" edition is maintained by volunteers and members of the Open Source community. For enterprise implementations, they suggest using the LibreOffice Enterprise family of applications from ecosystem partners.
LibreOffice
- Linux Kernel 6.17 is Available
Linus Torvalds has announced that the latest kernel has been released with plenty of core improvements and even more hardware support.
- Zorin OS 18 Beta Available for Testing
The latest release from the team behind Zorin OS is ready for public testing, and it includes plenty of improvements to make it more powerful, user-friendly, and productive.
- USB4 Maintainer Leaves Intel
Michael Jamet, one of the primary maintainers of USB4 and Thunderbolt drivers, has left Intel, leaving a gaping hole for the Linux community to deal with.
- VirtualBox 7.2 Has Arrived
With early support for Linux kernel 6.17 and other new additions, VirtualBox 7.2 is a must-update for users.
|
