Recent Changes - Search:
NTLUG

Linux is free.
Life is good.

Linux Training
10am on Meeting Days!

1825 Monetary Lane Suite #104 Carrollton, TX

Do a presentation at NTLUG.

What is the Linux Installation Project?

Real companies using Linux!

Not just for business anymore.

Providing ready to run platforms on Linux

Show Descriptions... (Show All/All+Images) (Single Column)

LWN.net

  • Kernel prepatch 7.4-rc1
    The 7.4-rc1 kernel prepatch is out, andthe merge window is closed for this development cycle.
    This is a *BIG* merge window. I think the reason is the by now obvious one, but I'm actually taking it as a good sign: I'm *much* happier with the flood of AI triggered work going into the merge window than it showing up mainly as extra fixes during the -rc period. So I'm hoping that this merge window being larger than usual is a sign that the AI fixes are becoming more part of the "normal development" than a flood of fixes that go into the whole stabilization phase. I think that's a much healthier model.
    There were 18,591 non-merge changesets brought in during this merge window— this is not just a record, but it nearly matches the patch volume duringthe entire (record-setting) 7.3 development cycle. So far, 2,678developers have contributed to 7.4; 625 of them are first-time kernelcontributors. Subscribers can find more details in the KSDB 7.4 page.


  • Final release for the 7.2 stable series
    Greg Kroah-Hartman has announced the release of the 7.2.15 kernel, with a handful of updates.

    Note, this is the LAST 7.2.y kernel release. After this one the 7.2.y kerneltree is end-of-life. Please move to 7.3.y at this time.

    And yes, you aren't imagining things, this one went "end-of-life" a bit soonerthan normal. But based on the release cycle at the moment, and the number ofpending cc: stable patches in the queue, I figured it was better this way so wecan focus on the latest 7.3.y release as it would require us to keep 8different branches alive at the same moment, a taxing task under the best oftimes.



  • A massive pile of security updates for Saturday
    Security updates have been issued by AlmaLinux (.NET 10.0, .NET 11.0, .NET 8.0, .NET 9.0, aspell, bind, bind9.18, container-tools:1.0, container-tools:rhel8, curl, dogtag-pki, ignition, java-21-openjdk, python-pillow, tomcat, and virt:rhel, virt-devel:rhel), Debian (antiword, cyrus-sasl2, dovecot, dpdk, nss, python-git, and thunderbird), Fedora (7zip, aegisub, aom, apptainer, arm-none-eabi-binutils-cs, assimp, avr-binutils, baresip, barman, bind9-next, btrfs-backup-ng, chezmoi, chromium, cifs-utils, clevis-pin-trustee, composer, containerd, curl, docker-buildx, dotnet10.0, evolution, evolution-data-server, evolution-ews, exim, fips-provider, firefox, flare-im, forgejo, freeipa, freerdp, gcc, gegl04, ghostscript, GitPython, glib-networking, gnome-shell-extension-gsconnect, golang-x-mobile, hcloud, helix, httpd, ImageMagick, iperf3, jfrog-cli, jupyterlab, keepassxc, kernel, knot-resolver, krb5, kryoptic, libdigidocpp, libheif, libindi, libinstpatch, libpng12, libpng15, librabbitmq, libre, libXi, libzip, linux-firmware, Lmod, log4net, markdownlint-cli2, mingw-freetype, mingw-gstreamer1, mingw-gstreamer1-plugins-bad-free, mingw-gstreamer1-plugins-base, mingw-gstreamer1-plugins-good, mingw-libpng, mingw-LibRaw, mingw-python-certifi, mingw-python3, mongo-c-driver, mstflint, mutt, nant, nebula, nix, nsd, ntpsec, openbao, openjpeg, openssl3, openvpn, perl-Badger, perl-CLI-Simple, perl-Cpanel-JSON-XS, perl-CSS-Inliner, perl-Encoding-FixLatin, perl-ExtUtils-Typemaps-Default, perl-GD-SecurityImage, perl-HTML-Query, perl-libnet, perl-Markdown-Render, perl-Net-IDN-Encode, perl-Net-Whois-Raw, perl-Plack, perl-Plack-Middleware-ReverseProxy, perl-Text-CSV_XS, pgbouncer, php-getid3, php-pecl-mongodb2, python-boto3, python-botocore, python-cairosvg, python-django5, python-django6, python-jupyter-builder, python-mkdocs-rss-plugin, python-nbdime, python-nh3, python-notebook, python-pydantic-core, python-pypdf, python-uv-build, python3.10, python3.11, python3.12, python3.13, python3.14, qdigidoc, qdl, qt5-qtbase, radicale, rclone, rt, ruff, rust-ammonia, rust-archive-trait, rust-astral-html, rust-astral-ini, rust-astral-mail-headers, rust-astral-pubgrub, rust-astral-version-ranges, rust-astral_async_http_range_reader, rust-astral_async_zip, rust-asyncband, rust-backtrace, rust-blake2b_simd, rust-blake3, rust-cargo-semver-checks, rust-chrono, rust-clap-cargo, rust-constant_time_eq, rust-dua-cli, rust-faster-hex, rust-gengo-bin, rust-gitui, rust-lzma-rust2, rust-object, rust-object0.37, rust-object0.38, rust-object0.39, rust-onefetch, rust-ppmd-rust, rust-quick-junit, rust-rbw, rust-regorus, rust-reqsign, rust-reqsign-aliyun-oss, rust-reqsign-aws-core, rust-reqsign-aws-v4, rust-reqsign-aws-v4a, rust-reqsign-azure-storage, rust-reqsign-command-execute-tokio, rust-reqsign-core, rust-reqsign-file-read-tokio, rust-reqsign-google, rust-reqsign-http-send-reqwest, rust-reqsign-huaweicloud-obs, rust-reqsign-oracle, rust-reqsign-tencent-cos, rust-reqsign-volcengine-tos, rust-routinator, rust-rustls, rust-ruzstd, rust-sccache, rust-tar-codec, rust-tar-framing, rust-tokei, rust-totp-rs, rust-trustfall-rustdoc-adapter, rust-trustfall-rustdoc-adapter57, rust-trustfall-rustdoc-adapter60, rust-typed-path, rust-zip, rust-zip0.6, rust-zip2, rustup, samba, SDL3_image, socat, stargz-snapshotter, stgit, sudo, syncthing, thunderbird, tor, trafficserver, ty, unbound, unshield, uv, webkitgtk, wordpress, xorg-x11-server, xorg-x11-server-Xwayland, zchunk, and zvbi), Mageia (libgit2), Red Hat (go-toolset:rhel8 and rhc), SUSE (ab-av1, ansible-core, aws-nitro-enclaves-cli, bouncycastle, cadvisor, chromium, cifs-utils, coredns, crun, dr_libs-devel-20260901, dssim, epiphany, expat, forgejo, freetype2-devel, fuseiso-20260614, gh, ghostscript, gosec, gvfs, hashcat, hauler, hugo, ImageMagick, kernel-devel, kubevirt1.9, libmikmod, libsoup, percona-toolkit, perl-cpanel-json-xs, perl-dancer2-plugin-auth-extensible, perl-mozilla-ca, pocketbase, putty, python-brotli, python-CairoSVG, python-cairosvg, python-django, python-pypdf, python-urllib3_1, roundcubemail, rsyslog, shadowsocks-rust, shadowsocks-libev, stgit, suseconnect-ng, tailscale, trivy, and vlc), and Ubuntu (brotli).


  • How We Could Have Backdoored Bash (Hacktron blog)
    The Hacktron blog documents howthe group was able to compromise the GNU Savannah forge and could havepushed malware into any of the projects hosted there.
    Using Hacktron, we found that an email address like `touch${IFS}/tmp/savane-rce-proof`@attacker.example gave any registered user code execution on its backend. From there, we made our account a superuser, impersonated Bash's maintainer, and confirmed we could add an SSH key with push access to the upstream Bash repository. An unpatched kernel gave us root access and access to a GNU backup server. We reported it to the FSF on May 11, 2026.


  • [$] Removing binder.c
    The final talk at Kangrejos 2026 was about the removal of the C implementationof Android'sBinder driver, the primary interprocess communication mechanismused on Android devices. Carlos Llamas announced that he had deleted the Ccode to general applause, and then shared some insights about what went intoreplacing the C implementation. Alice Ryhl, who has worked on the Rustimplementation for some years, added her own thoughts about what the mostdifficult and interesting parts of the transition were.


  • Haas: Postgres 19 is late, and it's AI's fault
    PostgreSQL developer Robert Haas writesabout the struggles the project has encountered in putting together itsnext release.
    In the end, I don't think that the delay in shipping PostgreSQL 19 is particularly concerning. It is not a long delay in the grand scheme of things, and it emerges directly from the project's concern for quality.
    The long-term picture is less clear and in some ways more troubling: given that we have forty years of bugs that humans were unable to find but LLMs are quite capable of discovering, how are we ever going to catch up, and how will PostgreSQL continue to innovate? Right now, I'm not sure. What I do know is that I, and many others, are working really hard to figure it out.
    LWN looked at the PostgreSQL 19 releaseand its challenges in September.


  • Remote code execution on Linux systems with multipath TCP
    On October 27, LLM provider Anthropicreportedon aremotely exploitable use-after-free bug affecting systems withmultipath TCP listeners open. The bug works by triggering a response to aretransmitted SYN packet at the same moment that the TCP connection isestablished in another thread, causing the first thread to access theconnection's options structure after the second thread has freed it. The firstthread can then disclose kernel memory or cause a buffer overflow, writing anattacker-controlled payload. The fix wasto only free the structure after an RCU grace period.On October 29, the Go security teamadvisedthat all programs written in Go use multipath TCP by default, so manysystems may be unknowingly vulnerable. And, of course, there is always thepossibility of related bugs in other sections of the TCP stack. Users may bewise to update to a patched kernel as soon as one becomes available for theirdistribution.




  • Security updates for Friday
    Security updates have been issued by AlmaLinux (aspell, cjose, curl, gcc-toolset-15-gcc, httpd:2.4, ignition, java-21-openjdk, libX11, libXi, libXrender, libXtst, mariadb:10.11, nodejs:24, python-pillow, python3.12-urllib3, and webkit2gtk3), Debian (imagemagick, libdatetime-timezone-perl, python-git, tor, tzdata, vlc, and wordpress), Fedora (accessibility-inspector, akonadi-calendar, akonadi-calendar-tools, akonadi-contacts, akonadi-import-wizard, akonadi-mime, akonadi-search, akonadi-server, akonadiconsole, akregator, alligator, analitza, angelfish, applet-window-buttons, arianna, ark, artikulate, audex, audiocd-kio, audiotube, aurorae, baloo-widgets, blinken, bluedevil, bomber, bovo, breeze-gtk, brotli, bup, calendarsupport, calindori, calligra, cantor, colord-kde, cxx-rust-cssparser, dolphin, dolphin-plugins, dragon, elisa-player, eventviews, falkon, fcitx-configtool, ffmpegthumbs, filelight, firefox, flatpak-kcm, francis, ghostwriter, granatier, grantlee-editor, grantleetheme, grub2-breeze-theme, gwenview, incidenceeditor, isoimagewriter, itinerary, juk, k3b, kaccounts-integration, kaccounts-providers, kactivitymanagerd, kaddressbook, kajongg, kalarm, kalgebra, kalk, kalm, kalzium, kamera, kamoso, kanagram, kapman, kapptemplate, kasts, kate, katomic, kbackup, kblackbox, kblocks, kbounce, kbruch, kcachegrind, kcalc, kcalutils, kcharselect, kclock, kcolorchooser, kcron, kde-cli-tools, kde-connect, kde-dev-scripts, kde-dev-utils, kde-gtk-config, kde-inotify-survey, kde-partitionmanager, kdebugsettings, kdecoration, kdeedu-data, kdegraphics-mobipocket, kdegraphics-thumbnailers, kdenetwork-filesharing, kdenlive, kdepim-addons, kdepim-runtime, kdeplasma-addons, kdesdk-kioslaves, kdesdk-thumbnailers, kdevelop, kdevelop-php, kdevelop-python, kdf, kdialog, kdiamond, kdnssd, kdominate, keditbookmarks, keepsecret, keysmith, kf6-baloo, kfind, kfourinline, kgeography, kget, kglobalacceld, kgoldrunner, kgpg, kgraphviewer, khangman, khealthcertificate, khelpcenter, kidentitymanagement, kig, kigo, killbots, kimagemapeditor, kimap, kinfocenter, kio-admin, kio-extras, kio-gdrive, kirigami-gallery, kiriki, kiten, kitinerary, kjournald, kjumpingcube, kldap, kleopatra, klettres, klickety, klines, kmag, kmahjongg, kmail, kmail-account-wizard, kmailtransport, kmbox, kmenuedit, kmines, kmix, kmousetool, kmouth, kmplot, knavalbattle, knetwalk, knights, knighttime, knot, koko, kolf, kollision, kolourpaint, kompare, kongress, konqueror, konquest, konsole, kontact, kontactinterface, kontrast, konversation, kopeninghours, korganizer, kosmindoormap, kpat, kpimtextedit, kpipewire, kpkpass, kpmcore, kpublictransport, kqtquickcharts, krdc, krdp, krecorder, kreversi, krfb, kruler, ksanecore, kscreen, kscreenlocker, kshisen, ksirk, ksmtp, ksnakeduel, kspaceduel, ksquares, ksshaskpass, ksudoku, ksystemlog, ksystemstats, kteatime, ktimer, ktnef, ktorrent, ktouch, ktrip, ktuberling, kturtle, kubrick, kunifiedpush, kup-backup, kwalletmanager5, kwave, kwayland, kwayland-integration, kweather, kweathercore, kwin, kwin-zones, kwordquiz, kwrited, layer-shell-qt, libgravatar, libkcddb, libkdcraw, libkdegames, libkdepim, libkeduvocdocument, libkexiv2, libkgapi, libkleo, libkmahjongg, libkomparediff2, libksane, libkscreen, libksieve, libksysguard, libktorrent, libplasma, libquotient, lokalize, lskat, mailcommon, mailimporter, marble, markdownpart, massif-visualizer, mbox-importer, merkuro, messagelib, mimetreeparser, mingw-python-certifi, minuet, neochat, ocean-sound-theme, okular, oxygen-sounds, palapeli, pam-kwallet, parley, perl-Alien-Brotli, picmi, pim-data-exporter, pim-sieve-editor, pimcommon, plasma-activities, plasma-activities-stats, plasma-bigscreen, plasma-breeze, plasma-browser-integration, plasma-camera, plasma-desktop, plasma-dialer, plasma-discover, plasma-disks, plasma-drkonqi, plasma-firewall, plasma-integration, plasma-keyboard, plasma-login-manager, plasma-milou, plasma-mobile, plasma-nano, plasma-nm, plasma-oxygen, plasma-pa, plasma-phonebook, plasma-print-manager, plasma-sdk, plasma-settings, plasma-setup, plasma-systemmonitor, plasma-systemsettings, plasma-thunderbolt, plasma-union, plasma-vault, plasma-wayland-protocols, plasma-welcome, plasma-workspace, plasma-workspace-wallpapers, plasma5support, plasmatube, plymouth-kcm, plymouth-theme-breeze, polkit-kde, powerdevil, poxml, qmlkonsole, qqc2-breeze-style, qrca, rocs, sddm-kcm, signon-kwallet-extension, skanlite, skanpage, skladnik, spacebar, spectacle, step, svgpart, sweeper, tokodon, trafficserver, umbrello, xdg-desktop-portal-kde, yakuake, and zanshin), Mageia (cfitsio, libsolv, tomcat, and xrdp), Oracle (bind, cjose, curl, dogtag-pki, expat, gcc-toolset-15-gcc, ignition, kernel, libX11, libXrender, libXtst, php, python3.12-urllib3, and webkit2gtk3), SUSE (389-ds, aws-nitro-enclaves-binaryblobs-upstream, brotli, chromium, firefox, flatpak, gnutls, google-osconfig-agent, haproxy, hawk2, kernel, libapr1, libtcnative-1-0, tomcat, liboath-devel, libpcre2-16-0, librecad, libXi-devel, libXtst-devel, python311, python313, python313-markdown2, python313-xhtml2pdf, rabbitmq-server, roundcubemail, rust-keylime, and xen), and Ubuntu (dotnet8, dotnet10, dotnet11).


  • [$] Containers as a recognized kernel object
    The foundation of the design for containers in the kernel is that thereisn't one; there is no container abstraction that the kernel recognizes.Instead, the kernel provides a long list of components — namespaces,control groups, sandboxing mechanisms, and more — along with a note thatsays, in effect, "some assembly required". There have been attempts (repeatedly) over the years to turn containersinto first-class objects with kernel support, but they have never gottenfar. Now Josef Bacik is making atry with a concept that he calls "cells".


  • Security updates for Thursday
    Security updates have been issued by AlmaLinux (cjose, emacs, expat, gcc-toolset-15-gcc, java-17-openjdk, java-25-openjdk, kernel, kernel-rt, libX11, libXi, libXrender, libXtst, mod_auth_openidc:2.3, pki-deps:10.6, thunderbird, webkit2gtk3, and yggdrasil), Debian (chromium, firefox-esr, and openjdk-25), Fedora (firefox, librabbitmq, libreswan, python-pillow, and unbound), Mageia (fio and python3, python-pip), Oracle (buildah, cjose, container-tools:ol8, emacs, flute, libbase, libfonts, libformula, liblayout, libloader, libreoffice, librepository, libserializer, pentaho-libxml, pentaho-reporting-flow-engine, and sac, kernel, libX11, libXi, libXrender, libXtst, podman, python-urllib3, thunderbird, and yggdrasil), Red Hat (firefox, goose, kernel, kernel package, kernel-rt, librsvg2, multiple packages, php:7.4, sudo, thunderbird, and xorg-x11-server), and SUSE (alsa, ca-certificates-mozilla, chromedriver, cifs-utils, coredns, coreutils, cpupower, curl, cyrus-sasl, docker, dpdk, haproxy, kernel, libpoppler-cpp3, libsndfile-devel, libzbar-devel, mozilla-nss, MozillaFirefox, nginx, openai-codex, and perl-Cpanel-JSON-XS).


  • [$] LWN.net Weekly Edition for October 29, 2026
    Inside this week's LWN.net Weekly Edition:
    Front: Python JIT; Kernel clean up; Rust panics; Future Rust features; Northstar browser; 7.4 merge window; Smaller kernel stacks. Briefs: KeePassXC 2.8.0; Redox ring buffers; Rust in systemd; Quotes; ... Announcements: Newsletters, conferences, security updates, patches, and more.


  • A report from the LPC sched_ext microconference
    The Linux Plumbers Conference blog has areport from the sched_ext microconference held in Prague.
    Three main topics dominated the discussions Priority inversion and how to handle it in sched_ext: lock holder and lock waiter preemption, time slice extension, and making proxy execution work together with BPF schedulers. Paravirtualized scheduling: letting the host and guest schedulers cooperate across the VM boundary, with sched_ext as the policy engine on the host. Device and topology-aware scheduling: using hardware feedback (Intel HFI), device/accelerator locality and cache topology to drive task placement.


  • [$] The campaign to push Northstar into Linux distributions
    There is not a broad selection of mature, open-source web-browser enginesfor Linux users. Most of the browsers available for Linux are based on one ofjust three projects: Chromium's Blink, Firefox'sGecko, or WebKit. A new entrant wouldgenerally be seen as a welcome alternative, but the recent campaign to push oneof the LLM-written Nordstjernen browsersinto Debian and Arch Linux has raised some questions aboutthe project's development and security processes.



LXer Linux News


  • RISC-V compute module brings ESP32-P4 to Raspberry Pi CM4/CM5 carriers
    The SCINTIX P4 is a compact compute module developed by RELOC around Espressifs ESP32-P4 microcontroller, using the 55  40mm form factor of Raspberry Pi CM4 and CM5 modules. It combines dual-core RISC-V processing with an ESP32-C6 wireless companion, Ethernet, and MIPI display and camera interfaces for embedded control and HMI applications. Unlike conventional Raspberry0


  • Enlightenment desktop 0.28 released with better networking
    Enlightenment 0.28 has been released, the first major update to the open-source desktop environment since early 2025. Given the time between this and the previous 0.27 release, the changelog is suitably lengthy. Networking and audio stack enhancements, UI and UX tweaks and, of course, plenty of bug fixes are listed  no jaw-dropping UI changes, though. v0.28 adds a new Network Manager module.0


  • Compact AI workstation runs Ubuntu on Jetson AGX Thor with dual 10GbE
    The MINIX T4000/T5000 is a compact AI workstation based on NVIDIAs Jetson AGX Thor platform, combining Blackwell GPU architecture with Arm Neoverse-V3AE processors. The system supports up to 128GB of LPDDR5X memory, dual 10GbE networking, PCIe 4.0 NVMe storage, and Ubuntu 24.04 for local AI inference and development. The T4000 configuration uses NVIDIAs Jetson T40000




  • Tumbleweed Monthly Update - October 2026
    As openSUSE Tumbleweed barrels through the autumn, the month of October brought Linux enthusiasts several changes for this premier rolling release. October was a heavy month for both features and fixes, with 23 snapshots landing between Oct. 1 and 28. KDE Plasma 6.8.0 and KDE Frameworks 6.31.0 arrived as new0


  • AI Use In The Linux Kernel, Microsoft Defender On Linux & Other October Highlights
    October brought the releases of Linux 7.3, Ubuntu 26.10, the KDE Plasma 6.8 desktop, and a wealth of other open-source software releases. The expanding use of AI/LLMs within Linux kernel development also made for interesting discussions in October. Microsoft bringing their Defender software to the Linux desktop was perhaps the biggest surprise out of October. Here is a look back at the past month0



  • 9to5Linux Weekly Roundup: November 1st, 2026
    The 316th installment of the 9to5Linux Weekly Roundup is here for the week ending November 1st, 2026, keeping you updated on the most important developments in the Linux world.




  • The Linux 7.4 Merge Window Is Easily The Largest In Kernel History
    After writing this morning with some stats about the size of the Linux 7.4 merge window and the kernel's source tree approaching 42 million lines, I was curious to run some numbers for putting the size of the merge window into perspective against the major kernel releases of the past 15 years. This shows the definite recent uptick due to AI/LLM activity0






  • Sanket lets you redesign GNOMEs date menu and Quick Settings
    Sanket is a GNOME Shell extension that lets you rejig how the desktops date menu, calendar, notifications and Quick Settings look and behave  and then some. It can put notifications beneath the Quick Settings menu in a floating island, or embedded inside of it. Quick Settings toggles can shrink to dots when space is tight, and expand again as and when needed, Android-style. As well as shrinking0




Linux Insider"LinuxInsider"












Slashdot

  • Experts Expect 'Security Reckoning' As AI Tools Find And Exploit Software Bugs
    The Washington Post reports:Tens of thousands of South Koreans had their financial data exposed online in recent weeks after at least nine major banks there suffered cyberattacks that suggested a dark future for online security. One man, a 26-year-old living in southern China, was allegedly behind the attacks, according to an investigation by cybersecurity company CrowdStrike. Traces left online and failure to secure his own systems allowed investigators to piece together the man's name, age, location and what he allegedly did. The clues revealed that the devastating assault on some of Asia's most sophisticated financial institutions was the work of an amateur. The attacks were launched with help from a few artificial intelligence chatbots, CrowdStrike found, before asking one to help sell the stolen data online and draft a fake résumé touting cybersecurity skills... The hacker who broke into the South Korean banks had access to Anthropic's Claude, but because the U.S. firm's tools generally refuse to take illegal actions, free Chinese models were also used, including DeepSeek, CrowdStrike found. "The models are interchangeable," said Meyers, the CrowdStrike executive. The Post calls it "part of a wave of AI-enabled hacking that is advancing across the world, triggering alarm inside national governments as well as multinational companies.""Basically any pedestrian, non-hacker can take these frameworks and start leveraging them to go after different targets," said Adam Meyers, senior vice president of counter adversary operations at CrowdStrike. The company has tracked an increase in the speed with which cyberattacks can move once inside a target's networks, as seasoned hackers and rank amateurs alike get a boost from AI tools. "Anyone can be a super-hacker now," Meyers said... Many cyber experts still expect the security reckoning to intensify as AI tools that can find and exploit software bugs become more widely distributed and understood. [Last] Monday, The Post reported that cybersecurity researchers from the start-up Cathedral who set out to test Anthropic's security found that they could access internal messages and meeting transcripts. Cathedral reported its findings to Anthropic, which said it resolved the newly discovered problems... Security experts say it's unlikely that any hacker is forgoing the use of AI tools right now. Even in America, critical infrastructure like energy and water companies need to be "immediately and comprehensively" tested for exploitable bugs, according to Snehal Antani, chief executive of cybersecurity company Horizon3. He tells the Post the government might need to fund that remediation, and even form "a public and private partnership to accelerate incident response."


    Read more of this story at Slashdot.


  • Binance Reopens to $3.64 in Net Outflows. '98% Choose to Stay', Says Its Founder
    Binance now says it's replenished 90% of assets stolen last week in a $6.3 billion security breach, its customers still "rushed to move funds off the platform" when it reopened Sunday, CNBC reports, and Binance "said it recorded $3.64 billion in net outflows after reopening withdrawals on Sunday."The exchange processed $4.65 billion in withdrawals and $1.01 billion in deposits between 6 a.m. and 3:30 p.m. UTC on Nov. 1, Binance said in a post on X. The resulting net outflows represented 2.1% of Binance's $171 billion in total assets, based on its latest available proof-of-reserves data as of Oct. 28. Binance said withdrawal volumes had declined and were stabilizing following an initial spike, while deposit volumes remained substantial. The exchange began restoring withdrawals in phases at 6 a.m. UTC on Sunday, with services resuming across all 15 networks and assets included in the initial phase by 12:36 p.m. UTC. It said testing was continuing for the remaining networks and assets. Binance founder and former CEO Changpeng Zhao sought to reassure users following the breach, writing on X that "98% choose to stay!" He said most of the net outflows occurred within the first couple of hours after withdrawals resumed.


    Read more of this story at Slashdot.


  • Stack Overflow: 'Reports of Our Death are Greatly Exaggerated'
    Stack Overflow's senior VP of community says predictions of their demise "make for compelling headlines, but they confuse a change in how people access knowledge with the disappearance of the knowledge — and the company — behind it.AI has changed developer behavior. In our recently released 2026 Developer Survey, 64% of respondents said they visit Stack Overflow less frequently for simple questions. But developers also report asking more advanced questions and visiting the site to verify AI-generated answers. Stack Overflow remains a place where people can challenge assumptions, compare approaches, and validate solutions. But it's also important to understand that our public Q&A site is only one part of Stack Overflow, the company. The knowledge created on the Q&A site helps power the AI ecosystem itself. Stack Overflow's human-validated content is used to train and improve models, strengthen retrieval systems, and make AI assistants and other tools more reliable. Developers and technologists may encounter an answer through a different interface — such as their IDE — but the underlying knowledge may still have begun the same way it did in the past: with a developer sharing what they learned on Stack Overflow. We're also building for what comes next. We recently launched the beta of Stack Overflow for Agents, an API-first knowledge exchange where agents can share knowledge and verify solutions. We also brought back Developer Story, giving developers a verifiable way to showcase their expertise, accomplishments, and contributions beyond a traditional résumé. And we have much more planned and in development to give people compelling new reasons to visit the site beyond Q&A. Several years ago, we pivoted aggressively toward the enterprise. In September, we launched the next generation of Stack Internal, our governed AI context layer for companies. It captures and curates organizational knowledge, adds provenance and trust signals, and brings in subject-matter experts when validation is needed. The goal is straightforward: to make sure employees and AI agents are working from accurate, current, permission-aware information — not confidently acting on whatever context happens to be nearby. That is the thread connecting everything we do: making human knowledge useful and trustworthy, whether it is being consumed by another developer, an enterprise team, or an AI agent. Stack Overflow is not standing still, and it is not disappearing. We are evolving from a website people visit for answers into knowledge infrastructure that supports developers, companies, and AI systems wherever they work. Reports of our death are, indeed, exaggerated.


    Read more of this story at Slashdot.


  • Toyota's EV Sales More Than Doubled In a Year, While Its Gas Car Sales Dropped 20% In China
    Toyota's EV sales have jumped 127% through September, reports Electrek:Including Lexus, Toyota sold 309,766 battery electric vehicles (BEVs) globally through the first nine months of 2026, up 127.4% from the same period last year. Except for January (+87.5%), Toyota's EV sales have more than doubled every month this year compared with 2025... While its EVs are catching on, Toyota Motor's global sales fell for the third straight month in September. Toyota sold 860,107 vehicles in September, down 2.2% from the previous year. The company said that although overall demand remained steady, sales in China fell, leading to lower overall sales than last year. Through September, Toyota sold 7.51 million vehicles globally, down 3.4%. In China, Toyota's sales plunged nearly 20%, marking its eighth consecutive month with lower sales. Toyota said the overall market in China "remained weak due in part to rising gasoline prices, while the market for gasoline vehicles and hybrid vehicles was particularly affected," resulting in lower sales. In the first nine months of 2026, Toyota sold just over 1.05 million vehicles in China, 18.9% fewer than in the same period last year... After the US, China is Toyota's second-largest market.


    Read more of this story at Slashdot.


  • SystemD's Creator Opens Signups for Private Preview of Amutable's Cryptographically Verified Linux Systems
    SystemD creator Lennart Poettering left Red Hat for Microsoft in 2022, but 10 months ago left to co-found Amutable a company that aims to build cryptographically verified Linux systems that stay trusted over time. It's FOSS calls it "a read-only, image-based system where every machine produces signed reports of its own state" — and signups are now open for a private preview:Before announcing this Linux-based implementation, Amutable had released two open source tools. tine, a Buck2-based build system that composes OS images; available under MPL-2.0, and Quarry, a TUF-based tool that distributes those images to machines; available under Apache-2.0. What Amutable Foundations brings to the table is a service where Amutable runs the images, update repositories, control plane and vulnerability fixes for organizations and individuals who operate their own systems. No license has been stated for those company-run parts, and the preview announcement does not say how much of Foundations beyond tine and Quarry will be open source. Software and configuration both ship as signed images, and a machine boots only what is signed. Because there is no package manager and no SSH or interactive shell, a change means giving every machine in your fleet a new signed image. Its images are reproducible, come with a software bill of materials (SBOM) and are built from pinned inputs of whichever distribution you pick, with tine being able to import packages from Fedora or CentOS Stream. Each machine sends a signed report that records what it booted, from the firmware and boot loader up to the kernel and OS, plus the configuration it runs... Amutable's control plane verifies reports from systemd-report, an experimental command in systemd 260 that the company helped build. It compares each one with the declared state and flags machines that deviate. A rollout only continues while machines can show they are in a good state... Amutable is signup formlooking for teams that manage Linux fleets and need to show what state each machine is in. It expects to start bringing the first 'design partners,' as it calls them, on board over the coming weeks.


    Read more of this story at Slashdot.


  • Religious Exemption from Using AI in Workplace Granted to Humanist
    "David Durman, a nontheistic humanist, recently secured a religious exemption from using AI in the workplace," reports TechCrunch.Durman, a University of Kentucky administrator, told TechCrunch that humanism centers on "human well-being and flourishing, both individually and collectively ... and implores a person to try to improve both their well-being and their flourishing as well as the others around them."He believes that using the technology runs counter to his beliefs. "The way we become moral actors for ourselves and for others is through the active application of our minds, and the diminishing of that [through AI use] is going to necessarily have a negative impact on our ability to do so," he said, reflecting on how overreliance on AI might affect critical thinking...." [Humanism] tends to appeal to people who are skeptical of a god or other supernatural power yet still seek a scientific and moral framework to ground themselves in. [Alexandria Huiskens, staff attorney at the American Humanist Association, told TechCrunch] "Concern about AI and human dignity can run through several different faiths and traditions, whether that's Catholic teachings, or Universalism, or Humanism, and we want Humanists or nontheists to know that they fall into these categories — that they are also protected by the law at work...." In Durman's administrative role, in which he supports researchers applying for grants, he has not been required to use AI at work. Like many workers across fields, some of his colleagues and leadership have recommended that employees try out these tools, so he sought to secure his exemption now, in case the suggestion becomes a mandate in the future. "I hope that if [others] have similar feelings, that they feel encouraged to pursue some kind of resolution," Durman said. A University of Kentucky spokesperson told TechCrunch they "determined that an accommodation could be provided while allowing the employee to continue performing the essential functions of their position." (They added that "As technology and job responsibilities evolve, accommodations may be reviewed to ensure they remain reasonable and workable.")


    Read more of this story at Slashdot.


  • AI Makes Linux 7.4 Merge Window the Largest in Kernel History
    "On a Git commit basis, the Linux 7.4 merge window has been the busiest on record," writes Phoronix," with 19,671 commits since Linux 7.3: As of this morning in Linux Git ahead of v7.4-rc1, the kernel source tree is up to 41,605,120 lines. That's from 5,193,578 blank lines, 4,993,604 lines of comments, and 31,417,938 lines of detected code. Or nearly half a million lines of code added during the Linux 7.4 merge window, ignoring comments and blank lines [as detected by cloc ]. A historical graph of commits shows a clear spike for Linux 7.4, which Phoronix argues shows the definite recent uptick due to AI/LLM activity."With Linux kernel maintainers being "completely overwhelmed" due to both AI generated bug reports and patches/fixes, the Git commit activity has been surging as a result... The upward trend has continued building the past several kernel releases. Typically the merge windows saw 13~14k commits or less and now we are pushing 20k.... Linux 6.14: 10,034Linux 6.15: 13,568 Linux 6.16: 13,805 Linux 6.17: 12,289 Linux 6.18: 12,910 Linux 6.19: 13,229 Linux 7.0: 12,468 Linux 7.1: 13,963 Linux 7.2: 14,395 Linux 7.3: 16,267 Linux 7.4: 19,671 And "we could still see a few more trickle in today for Linux 7.4 ahead of the expected Linux 7.4-rc1 kernel release later in the day." UPDATE:"People are expecting 7.4 to be the next long-term support release," Linus Torvalds wrote today in his weekly state of the kernel update, saying that's also "another independent reason why some releases tend larger than others. So it may not *just* be the flood of AI patches." The Register reports:Torvalds also seems not to be completely convinced that all AI submissions are entirely helpful, by describing this release as "Large, and full of fixes for issues found by AI (and more and more the patches have been suggested by AI too, although they often get rewritten)."


    Read more of this story at Slashdot.


  • Which Tech Companies Started Using Trump's Phrase 'Super Intelligence'?
    CNBC reports:A month after President Donald Trump ordered that "super intelligence" replace the term artificial intelligence within executive branch departments and agencies, his leading tech allies, Elon Musk and Mark Zuckerberg, followed suit on earnings calls. Their fellow tech CEOs were less eager to do the same... SpaceX and Tesla adhered to Trump's wishes on earnings calls last week after Musk, earlier in October, changed the name of his rocket company's AI division to SpaceXSI. Speaking on Tesla's call about his work on humanoid robots, Musk said, "Some of them look very impressive, but they're not really using any kind of advanced AI or SI." Zuckerberg was equally compliant on Meta's earnings call on Oct. 21, emphasizing his company's "goal of delivering personal superintelligence to everyone." However, Meta was already using the term, having created a unit called Meta Superintelligence Labs last year.... [Some other tech CEOs are holding out.] Amazon CEO Andy Jassy peppered his call with use of "AI" on Thursday, uttering the abbreviation well over a dozen times in his introductory remarks. A day earlier, Microsoft CEO Satya Nadella said one of the company's three points of focus is "designing AI to empower people." And Alphabet CEO Sundar Pichai was seconds into his quarterly earnings commentary when he said the search giant's "AI investments are driving increased usage and overall user growth...." Trump's preferred term is seeping into other correspondence and documents. Microsoft's annual report, filed last week, included eight mentions of "super intelligence," starting at the top of the letter to shareholders...IBM CEO Arvind Krishna, who didn't attend Trump's September lunch, used "SI" alongside "AI" during his company's earnings call last week.... Lip-Bu Tan, CEO of chipmaker Intel, said Thursday the supply shortage the chip industry is navigating has been "driven by the unprecedented demand for super intelligence." Some in the tech industry have been explicit in their support of Trump's terminology ahead of their forthcoming earnings reports next month. Palo Alto Networks CEO Nikesh Arora repeatedly referred to "SI" on CNBC, and posted on X on Sept. 30, "The meeting at the WH on SI was an epic moment...." Like Arora, [Nvidia CEO Jensen] Huang took to X after last month's AI meeting to praise the "White House Accord on Super Intelligence."


    Read more of this story at Slashdot.


  • College Students are Pushing Colleges to 'De-Flock'
    Inside Higher Ed reports:In September, Emory University removed a dozen license plate-reading cameras from its campus in Atlanta and declined to renew its contract with Flock Safety, the company that sells and operates the automatic license plate readers and other mass-surveillance technology. For the coalition of Emory students and employees who had spent months pushing the university to "de-Flock," this was a victory... "We made it very clear that these cameras were unneeded surveillance considering we already have regular security cameras," [said Tony Torres, a sophomore biology major]... Through campus protests, petitions, meetings and teach-ins during the spring and summer, DeFlock Emory broadcast their concerns about the devices: Opaque data-sharing agreements could leave undocumented students vulnerable, the cameras could be hacked, institutions could use them to retaliate against student protesters and they could make students who fear being surveilled less likely go to class, see their friends or seek medical attention when they need it. Such concerns aren't unique to DeFlock Emory. College students across the country — including at Indiana University Bloomington, the University of Florida and the University of North Georgia — are mobilizing to de-Flock their campuses. And like Emory, other institutions are nixing their contracts. Cornell University announced last week it had not renewed its contract with Flock Safety and would be removing the cameras. Pennsylvania State University officials also announced earlier this month plans to end their contract with Flock. An Emory spokesperson told Inside Higher Edthat eliminating Flock's cameras "retains institutional control over our safety infrastructure." But the article also includes a quote from media/technology studies professor Torin Monahan at the University of North Carolina at Chapel Hill. He's spoken with campus police officers about how they're using Flock's cameras, and learned police departments have upgraded surveillance efforts in recent years. "They have an elaborate arsenal in place of high-tech surveillance equipment that really seems overpowered for what their day-to-day needs are, and also incredibly expensive."


    Read more of this story at Slashdot.


  • Amid AI Bans, Microsoft and OpenAI Plan a 'Joyful' Hour of AI for Kids
    Generative AI was recently banned in America's two largest school districts, just weeks after OpenAI launched ChatGPT for Teens. But forging ahead, tech-backed nonprofit Code.org — now renamed CodeAI — has named OpenAI the "Lead Partner" for its 2026 Hour of AI (which last year replaced its signature event, "the Hour of Code"). Long-time Slashdot reader theodp explains:In August, OpenAI announced a new signature partnership with CodeAI to "prepare the first AI generation", explaining that "through the Hour of AI, OpenAI and CodeAI will introduce millions of students to the basics of using AI thoughtfully and responsibly." The updated Hour of AI website also listed OpenAI's investor/partner Microsoft as one of two "supporters" for the Hour of AI. Now, Microsoft is calling all K-12 teachers around the globe to register for What's working now: Making AI literacy joyful for every learner, a November 17th Microsoft Teams webinar where it will unveil its Minecraft-branded "Hour of AI experience." "Discover how AI literacy can be engaging, approachable, and joyful for students... and hear practical ideas from educators bringing AI learning into their schools and classrooms." Speakers include a marketing lead for Microsoft's AI training initiative plus the head of marketing for Microsoft Minecraft Education.


    Read more of this story at Slashdot.


  • Meta Discussed 'Whisper Strategy' to Discredit Social Media Critic Jonathan Haidt, Files Show
    The Guardian reports:Meta staff discussed deploying a "whisper strategy" to undermine the influential US academic whose work has inspired a global social media crackdown, according to court documents. Employees at the parent group of Facebook and Instagram sought to discredit Jonathan Haidt, the social psychologist and author of The Anxious Generation, a book that helped tip the debate about online safety towards more stringent measures such as the under-16 ban in Australia. Minutes of internal meetings contained in a recent legal filing in the US showed that staff discussed how to "get the academic community to disavow Haidt". They appear in a document titled "Well-being Meeting Sound-check Notes", which refers to discussions of how Meta could "turn other academics against Haidt" and to a "whisper strategy" aimed at achieving that goal. It also mentions "debunking" his work. Minutes from a meeting on 8 March 2023 mention "Curtiss", an apparent reference to Meta's then vice-president of research, Curtiss Cobb. It states: "Curtiss's goal for this work: how do we get the academic community to disavow Haidt. Can't co-opt them, so how do we enrage them ... so the media finds him not credible." It then adds: "Not thinking about this as a loud strategy. A below-the-line campaign...." The minutes were produced before Haidt published his book in 2024 and discuss responding to a Substack post written by the academic in which he reviews "a bunch of articles". "It is not clear whether Meta acted on the ideas outlined in the minutes."


    Read more of this story at Slashdot.


  • America's Clocks Are Still Falling Back Tonight Despite Trump's Daylight Saving Push
    Clocks "fall back" one hour tonight to end Daylight Saving Time — though many Americans want to end the twice-yearly clock change, reports Axios. But the U.S. Congress "remains deadlocked about how to make that happen."The clocks are falling back despite a bipartisan House vote in July to make daylight saving time permanent and Trump's subsequent push for Senate action... While most Americans want to end the twice-yearly clock changes, they don't necessarily favor Trump's solution. Gallup found 48% of Americans support permanent standard time the entire year, compared with 24% who prefer permanent daylight saving time, as Trump wants... In 1974, the U.S. experimented with year-round daylight saving time but reversed course amid concerns about children going to school in the dark>. Experts still debate whether permanent DST is good for people. Supporters argue that permanent daylight saving time would provide more afternoon and evening sunlight, encouraging outdoor activities. But sleep experts warn that darker mornings and lighter evenings can disrupt sleep cycles, while permanent daylight saving time could force millions of children to travel to school in the dark. The bottom line: The American Academy of Sleep Medicine says it prefers permanent standard time because it better aligns with natural sleep cycles. "Hawaii and most of Arizona don't observe daylight saving time, so their clocks won't change," the article points out, adding that eliminating it for the rest of America "still faces opposition in the Senate and isn't expected to be considered by the end of the year. But "the upcoming midterms could change the balance of power in Congress, potentially shifting the debate."


    Read more of this story at Slashdot.


  • Xbox Manager: AI Already Being Used In Xbox Game Development - And Throughout the Game Industry
    Should generative AI be used for videogame development? Brandon Stirrup, a strategy manager at Xbox, claims Xbox is already using AI, reports Engadget. And he also says that those who say they aren't are merely "pretending." Stirrup deactivated his social media account shortly after (though his posts have been archived elsewhere), igniting conversations about what role generative AI actually has or should have in game development. In some ways, it would be unsurprising to learn that Xbox is using AI to the extent that Stirrup implies. Xbox recently announced the formation of Xbox Labs at least in part as a response to a rising trend of AI-coded game ports; the announcement heavily implied that the new team would use AI as well but didn't say it outright. Xbox owner Microsoft is also a major player in AI development... Developers including Capcom, Square Enix, Sega, Nexon and Activision have all either used AI in their games or pledged to do so. Fortnite developer Epic Games has been particularly up-front about its AI use, and CEO Tim Sweeney has aggressively promoted it on social media... On the other hand, there are large pockets of the game industry vocally opposed to generative AI. Notably, these tend to be smaller, independent studios without shareholders to impress by touting the cost-savings of AI. These studios include Tunic publisher Finji, Stardew Valley developer ConcernedApe and Clickolding developer Strange Scaffold, among many more. Due to the sheer number and variety of game studios, it's impossible to say just how much of the industry actually uses AI at this point, but claims that "everyone" is using it are clearly false. There's a similar divide among players about whether generative AI should be embraced or avoided at all costs. While some simply accept AI as part of games going forward, others have pledged to avoid games that use the technology outright due to its environmental costs, labor issues or pure aesthetic preference. That's led to the popularity of tools like a browser extension that makes Steam's AI disclosures more visible and grassroots efforts by developers to implement labels certifying their games as AI-free... Many players and developers alike justify the use of AI in generating code, even if they're opposed to it in other areas. "Gaming is the only industry slow-walking the transition," Xbox's Stirrup allegedly said, "because users have negative sentiment. Everyone else accepts reality." "Gaming is the only industry pretending to not use AI."


    Read more of this story at Slashdot.


  • Binance Replenishes 90% of Stolen $6.3B, Pledges They'll Cover It All, Reopen Sunday
    "We've now replenished 90% of the stolen assets, and we're committed to covering the remaining 10%," Binance co-CEO Richard Teng posted on X, adding that "Our users will not bear the financial impact of this incident." "Binance said it was able to replace the funds taken in the record hack by using company money to buy new tokens," reports NBC News:The remaining 10% consists of tokens that are less liquid, meaning they may take longer to buy, it said in a statement posted on X... Binance said it has set aside around $6.34 billion of company funds internally to cover the losses. The money spent re-buying tokens came from using part of its $1 billion Secure Asset Fund for Users, a bitcoin reserve it holds to protect customers in the event of security breaches, as well as some of its Futures Insurance Fund, and the company's own corporate treasury, it said on X. NBC News reports that the FBI blames the breach on a North Korea-sponsored group known as TraderTraitor:Members of [TraderTraitor] were observed by law enforcement converting stolen assets into the cryptocurrency ethereum, the FBI said in a statement, adding that it expects "further laundering" of the assets through the use of related technology... After the hack, the exchange stopped allowing customers to withdraw their funds, but it said Saturday it was still on track to reopen withdrawals Sunday. CNBC reports:The world's largest crypto exchange initially said the hack may involve "a compromised DevOps engineer's laptop, which allowed an attacker to gain access to a service container and submit unauthorized withdrawal transactions." However, Co-CEO Richard Teng later said the attack involved a more complex process rather than the misuse of a single engineer's permissions. The New York Times describes what happened when Binance first spotted "a multibillion-dollar deluge of digital coins" pouring out of its accounts:As the news spread, Binance's top executives put together an informal war room on Wea, the company's internal messaging system, with about 100 participants, including specialized cryptocurrency tracers and security personnel. They eventually transitioned to a mass conference call, with 100 boxes on the screen, where employees took turns muting and then unmuting, communicating in a mixture of English and Chinese. Among them was He Yi, Binance's co-chief executive, who is seven months pregnant, and worked through the night from her base in Abu Dhabi, taking a call at 3 a.m. local time.... Much of the drama played out in public. Almost all crypto transactions are recorded on the blockchain, a ledger of money movements that anyone can look up. That meant crypto analysts could see funds leaving Binance in real time... North Koreans have targeted crypto companies for years, using the proceeds of those thefts to fund its nuclear program, according to Western officials. The hackers have developed increasingly complex strategies to steal crypto and launder the proceeds, a painstaking endeavor that can take months to complete. In a blog post on Friday, Chainalysis said the attackers had deployed "laundering patterns we have not seen before," conducting thousands of transactions over a short period, probably with the help of automation. At the same time, Binance's colleagues in the industry mobilized to intercept some of the laundered crypto. Certain digital coin issuers can freeze funds, allowing them to halt a money-laundering operation in its tracks. Soon after the hack, Tether and Circle, two major issuers, announced that they had frozen stashes of their own coins that the hackers had seized from Binance, a combined total of more than $2 billion in crypto. Binance is now working to gain access to those funds, the company said. But $2.4 billion in crypto is already "beyond any issuer's reach," according to [blockchain intelligence firmm] TRM. The article also includes President Trump's reaction when asked Friday about the breach. "I've always felt it was a little bit dangerous. But they say they have it pretty much under control. We'll see."


    Read more of this story at Slashdot.


  • Computer Simulations Suggest Building Blocks of Life Didn't Arrive on Prehistoric Comets
    CNN reports:The popular theory that comets were crucial in kick-starting life on Earth billions of years ago may not hold up, according to new computer simulations that counter decades of scientific thinking. The finding suggests the fragile organic molecules supposedly carried by the icy objects would have been destroyed on impact, upending an established origin of life theory that dates back to at least 1961 [with earlier versions postulated in 1908]... Early in its history — over 4 billion years ago — Earth may have experienced a period of heavy bombardment from more than 100,000 comets larger than 100 meters (328 feet), according to the new study, published Wednesday in the journal Scientific Reports. Those impacts, however, were mostly too heavy for life-starting molecules to withstand. The team used the latest models of comet formation and evolution to simulate this early planetary period 100,000 times. "Given what we know about surface environments on the early Earth, on average, our simulations found that there were no successful impacts," said lead study author Richard Anslow, who conducted the research while completing his doctorate at the Institute of Astronomy of the University of Cambridge in the United Kingdom... "The typical velocities of these comets when they impact the Earth meant that actually very few, if any, would have been able to deliver intact organic molecules, so comets actually don't seem to be as useful for prebiotic chemistry as was previously thought," Anslow said. More precisely, 54% of the simulations showed no impact at all, while the remaining 46% had at least one and a "tiny minority" returned up to three collisions, Anslow said. "We can't rule out confidently that there was never a successful impact — there could have been one of these fluke impacts." However, such flukes had to occur in a "perfect location" that already met several important conditions, including the presence of liquid water and other chemicals needed to support life. That combination makes the overall process unlikely, he added. The article notes his argument that even if a successful impact occurred, it's unlikely an important chemical like hydrogen cyanide (HCN) could survive the impact, and would've dissolved in an ocean impact. Plus, "many other precursor molecules are also needed, such as compounds that contain phosphorus and sulfur, but these are not routinely found in comets, Anslow said."An alternative cosmic source of organic material could have been asteroids, which typically struck Earth more slowly and in greater numbers. Anslow pointed to recent findings on samples from asteroids Bennu and Ryugu, which contain the majority of protein-building amino acids. The recent study also raises another intriguing possibility: While Earth may not have had the ideal conditions to foster HCN from comet impacts, ancient Mars might have been better suited. "Because Mars is much smaller than Earth and further away from the sun, the typical impact velocity of comets is much lower, so while these impacts on Earth were destroying most of the HCN, this wasn't the case so much for Mars," Anslow said. This idea could add another dimension to the long-standing question of whether the red planet once supported life. While the authors closely analyzed how HCN could have survived comet impact, the chemical may have undergone reactions before the icy bodies entered Earth's atmosphere, said Queenie Chan, an associate professor of Earth sciences at Royal Holloway University of London, who was not involved with the study. This process could have created biologically important compounds, such as those protein building blocks, that are less volatile and more likely to survive.


    Read more of this story at Slashdot.



Linux.com






  • From DHCP to SZTP – The Trust Revolution
    By Juha Holkkola, FusionLayer Group The Dawn of Effortless Connectivity In the transformative years of the late 1990s, a quiet revolution took place, fundamentally altering how we connect to networks. The introduction of DHCP answered a crucial question, Where are you on the network?!, by automating IP address assignment. This innovation eradicated the manual configuration [0]

    The post From DHCP to SZTP – The Trust Revolution appeared first on Linux.com.






Phoronix




  • The Linux 7.4 Merge Window Is Easily The Largest In Kernel History
    After writing this morning with some stats about the size of the Linux 7.4 merge window and the kernel's source tree approaching 42 million lines, I was curious to run some numbers for putting the size of the merge window into perspective against the major kernel releases of the past 15 years. This shows the definite recent uptick due to AI/LLM activity...



  • AI Use In The Linux Kernel, Microsoft Defender On Linux & Other October Highlights
    October brought the releases of Linux 7.3, Ubuntu 26.10, the KDE Plasma 6.8 desktop, and a wealth of other open-source software releases. The expanding use of AI/LLMs within Linux kernel development also made for interesting discussions in October. Microsoft bringing their Defender software to the Linux desktop was perhaps the biggest surprise out of October. Here is a look back at the past month...




  • Brief Server Downtime Expected Tonight
    Just a friendly heads up that Phoronix.com and associated sites will be down briefly at around midnight PST / 3AM EST on 1 November for a failed drive in the NVMe SSD RAID array...



  • Enlightenment 0.28 Released With Many Improvements
    Enlightenment 0.27 released at the beginning of 2025 and since then there's been no major feature update, falling off their roughly 12 month release cadence. But out this Halloween is Enlightenment 0.28 now with the better part of two years worth of changes...










  • Wine 11.21 Released With Better WoW64 OpenGL Performance
    Wine 11.21 is out as the newest bi-weekly development release of Wine and as we near Wine 12.0 stable release happenings getting underway in about one month with the official v12.0 release expected early in the new year...


  • PostgreSQL 19 Running Behind Schedule Due To AI/LLM Burden
    The PostgreSQL database server typically sees its annual feature release every September~October, but it's not coming until at least November if not longer this year. Due to the increased developer burden due to increased bug reporting and patches via AI/LLM activity, the PostgreSQL developers have been overwhelmed...




  • Another Week, Another Vibe Coded OS; Closed-Source In The Name Of Security
    With today's AI/LLM capabilities, there is almost a new operating system heard about each week "coded from scratch" predominantly via AI agents. This week was no exception with another project hitting our email inbox. Though most of them are open-source, this one is closed-source in the name of security...



  • Apple Silicon Linux Driver Adapted To Help Older Intel-Powered Macs
    The Linux kernel's "macsmc" driver was developed for supporting the system management controller (SMC) on Apple Silicon Macs for supporting the light sensor, fan control, and other sensors. That macsmc driver now is seeing work to extend it for better supporting older Intel-powered Macs...






  • NVIDIA Vera Single vs. Dual Socket CPU Performance
    For those curious how NVIDIA Vera is scaling between single and dual socket deployments, here are some benchmarks I carried out a while back exploring the power and performance from one to two Vera CPUs.


  • CachyOS vs. Fedora 45 vs. Ubuntu 26.10 Performance On AMD Ryzen 9
    With the recently released Ubuntu 26.10 and the nearly-released Fedora Workstation 45, Phoronix readers have begun inquiring about fresh benchmarks looking at how they stack up against the performance-optimized, Arch Linux based CachyOS. Up today are our first CachyOS vs. Fedora 45 vs. Ubuntu 26.10 benchmarks on an AMD Ryzen 9 9900X3D2 desktop system.



Engadget"Engadget - Technology News & Expert Reviews"





















OSnews

  • Sculpt OS 26.10 releases
    Sculpt OS 26.10 brings quite a few new features, like scalable cursors, support for UK keyboards, better webcam support, and more, but the real meat of this release is much tastier. First, Sculpt 26.10 is the first version based on Genodes custom microkernel instead of relying on a 3rd-party kernel. This kernel  designed from the ground up for the needs of Genode and Sculpt OS in particular  is not only more micro! than any other of the microkernels supported by Genode, it also solves long-standing deficiencies concerning CPU scheduling and kernel-memory management. Sculpt OS finally stands on Genodes own footing! Finally, Sculpt OS 26.10 pays tribute to this years overall theme of building bridges! by featuring our software development kit (Goa SDK) running directly on Sculpt OS without virtualization. This entails a wealth of tooling including GCC, Binutils, Git, Sequoia, Expect, Curl, man, Make, and CMake having landed on Genode. Although still young and not time-tested yet, it shows whats possible today and allows us developers to gradually shift more and more development routine into this self-hosted environment, stressing the general-purpose qualities of Genode and motivating further optimizations. ↫ Sculpt OS release 26.10 announcement This new release also completes the transition from XML to Genodes own HID language for configuration, moves from VirtualBox 6 to 7, and upgrades a whole slew of its Linux-based drivers


  • How long do you need to hold down the power button to turn off a PC?
    Raymond Chen published another story from the Windows development trenches, this time about what happens when you hold down the power button. If you hold a PC’s power button for 12 seconds, it will turn off at the hardware level without notifying the operating system. This is a safety feature so that you can turn of the computer even if the operating system’s “Shut down” command isn’t working. After eight seconds of the power button being held down, the Windows kernel realizes that the user is trying to do a force-power-off of the system, and it quickly takes a kernel dump that can be uploaded to the Windows Error Reporting service the next time you turn the system on. ↫ Raymond Chen Im a bit confused by these numbers, because I have never seen a PC take this long to power off when holding down the power button; usually it takes only a few seconds to do so, meaning Windows would never generate said kernel dump. I tried reading through the various ATX specification documents to find more information on this, but then I remembered Im not an electrical engineer so I have no idea what Im looking at. The baseline is that ATX always provides standby power to the motherboard, and pressing the power button shorts the power button pin to ground, telling the PSU to power on fully. Pressing the power button if the computer is running tells the operating system to initiate a shutdown (although you can change this behaviour), but if you hold the button down for a certain number of seconds, it forces a power-off. So far, so good; basic information. It seems that the length of time you need to hold down the power button to force a power-off is dependent on the motherboard in question, handled by a microcontroller or some other IC. Virtually every source I can find says this timing is set to about 4-5 seconds, which is quite a bit shorter than the number of seconds given by Chen. Perhaps motherboard manufacturers consider the 12 seconds to be too long, and just do their own thing, regardless what the ATX specification suggests? What further complicates matters is that Chen details how the kernel dumps created after pressing the power button for 8 seconds do, in fact, get sent to Microsoft once the computer turns on again. In fact, he is one of the people who gets to see these dumps and respond to them, so obviously they are indeed rolling in. Does this mean theres a huge number of computers out there that require you to hold down the power button for 12 seconds to force a shutdown that nobodys ever seen? These emergency kernel dumps are internally classified as “long power button hold” (LPBH) failures. One of the pieces of information recorded in these emergency kernel dumps is whether the screen consists entirely of black pixels. Those failures are sub-classified as “black screen LPBH”, and they go to a special virtual team for analysis. (I happen to be a member of this black screen LPBH team.) ↫ Raymond Chen Whats going on here? Obviously, Im not going to doubt Chen, so there must be something here I dont quite understand or that Im missing. The ATX specification might suggest 12 seconds, but could Windows perhaps adapt its kernel dump behaviour  dumping much sooner than 8 seconds  based on the motherboard its running on, maybe through information provided by the chipset drivers? I would love it if someone more knowledgeable than me can help us unravel this small mystery.


  • How curl was accidentally Turing-complete for nine months
    From curl 8.12 through 8.16, config files could slice variable values and include other config files without an explicit depth cap. Together, these features let curl simulate any two-counter Minsky program. Under the usual idealization of unbounded strings and resources, this construction was Turing-complete. Curl 8.17.0 added a five-level include cap that breaks this reduction. ↫ Nicolas Seriot Neat.


  • AlpineBSD combines NetBSD with Alpines apk package manager
    AlpineBSD is an operating system based on the NetBSD kernel with a userspace inspired by Alpine Linux and the objective of making it possible to use as little AI-generated software as possible. There is no LLM output included in the base system or main package repository (AlpineBSD AI policy). ↫ AlpineBSDs website AlpineBSD uses the NetBSD kernel, libc, and essential tools, and combines them with Alpines apk-tools package manager, busybox, and generlaly preferring GNU tools over their BSD equivalents. It uses the s6 init system, but the project intends to add OpenRC as an alternative. The project is in its very early stages, so dont expect things like an installer; youre on your own, basically.


  • My favourite PowerMac is a Nintendo Wii!
    The Nintendo Wii (and its related consoles) were already made to run the PowerPC version of Windows NT as well as Mac OS X, but now we can add another milestone to the list: classic Mac OS. So today I reached a nice milestone in one of my projects: my work porting classic Mac OS to PowerPC systems with what I affectionately call ArtX chipsets (Nintendo GameCube, Wii, eventually Wii U; the GameCube’s Flipper integrated chipset was very much designed by ArtX as it was effectively finished when ATI acquired the company, and the Wii’s Vegas (and its later revision Bollywood) and Wii U’s Latte are effectively straight successors) reached the desktop for the first time, most likely the first time since the CHRP clone era that someone outside of Apple brought up classic Mac OS on a new system to the desktop. Despite still being nowhere near ready for a public release, I want to talk about the challenges I faced with this project so far. ↫ Rairii at Virtuallyfun Various versions of Mac OS boot to the desktop, including Mac OS 9.2.2, the last ever version, but theres still a ton or work to be done before this is ready for release. Still, with Rairii amazing track record of porting all kinds of things to various PowerPC machines, including getting the PowerPC version of Windows NT to run on various PowerPC Macs, I have little doubt theyll manager to get this to a releasable state. I absolutely love this kind of work.


  • Microsoft hopefully fixes Modern Standby and adds online Windows reinstallation
    I think its safe to say that Windows Modern Standby feature isnt exactly free from issues. The biggest problem seems to be that its not very good at actually determining when to transition between regular sleep and hibernation, often leaving users with an empty battery as they open their laptops lid. Microsoft has now released an update to hopefully address this long-standing problem. This update improves the adaptive hibernate policy to provide more instant-on resumes from Modern Standby while helping preserve battery life when the charge is low. Noticeable changes include less hibernation while the battery is above 80% and hibernating sooner when the battery is below 10%. ↫ KB5127936 Among other new features and changes this update brings are Cloud Rebuild, a way for devices to install Windows without needing a local image. Cloud Rebuild can be started form within an existing installation, remotely by administrators, or through the Windows Recovery Environment. Obviously, a working internet connection, wired or wireless, is required for this feature to work. This is the same update that introduces CLAT, which we talked about yesterday, to smooth the transition from IPv4 to IPv6.


  • NetBSD adds nano-like text editor to base system
    Flag LinuxNetBSD made a seemingly small, but very welcome announcement today: theyre adding a more user-friendly, easier to use command-line text editor to the base install. To ease the transition for new users, NetBSD -current now includes an alternative editor to vi(1) and xedit(1) in its base system, atto(1). It is a modeless screen-based editor similar to nano, pico, xedit, or emacs. It is only 48 kilobytes, making it suitable for inclusion in the rescue system. ↫ NetBSD Foundation on Fedi Most guides and how-to article for operating systems like NetBSD assume the use of vi, and while I dont want to ignite a flamewar, vi isnt exactly the most approachable or friendly piece of software out there. My occassional text editing in the command line is all done through nano, but now Im definitely curious to give atto a go. While other tech news websites are plastered with articles about a PC maker adding a touch screen to one of their laptops, were talking about a new CLI text editor in NetBSDs base system. Priorities, folks.


  • Windows CLAT is now generally available
    Windows 11 25H2, starting with build 26200.9550, now comes with something called CLAT. As organizations move toward IPv6-only and IPv6-mostly networks, some applications still depend on IPv4-only applications or services. Windows CLAT helps those applications continue to work when a network does not provide native IPv4 connectivity. CLAT is the client-side component of`464XLAT. It statelessly translates IPv4 traffic from the Windows client into IPv6 for transport across the network to a provider-side translator (PLAT), which provides stateful NAT64 translation to IPv4. ↫ Jim Alumbaugh at Microsofts Networking Blog Yet another important component of the long, neverending transition to IPv6. Like endlessly cutting a cucumber in half, youll never quite run out of cucumber to cut.


  • Sylphide OS: an operating system for computers based on microcontrollers
    Do you want a hobby operating system with a desktop for a microcontroller-based computer? Sylphide OS is a new project aiming to build just that. For the last few weeks, I’ve worked on a new pet project: an operating system for computers based on microcontrollers. There aren’t many yet, but I expect them to be more and more common. Why MCU computers ? You get a relatively very simple platform, booting straight to your code (or almost), and you can understand the whole architecture. Exactly as it was with home computers long ago. And not at all what you get with modern computers. Even booting involves lot of very different systems, black magic, and even blog/proprietary software. ↫ Thomas Capricelli Its very early in development, but by building it atop FreeRTOS, Capricelli had a head-start. Its got a basic desktop, one that might need some changes to avoid the lawyers. The codes open source, of course.


  • Oldest GUI application that still runs on Windows 11
    Whats the oldest Windows GUI application you can still run on Windows 11 today, without any modifications? For now, the best answer Boris Popik can come up with is an innocuous application from build 347 of Windows NT 3.1, an early prerelease: CDPLAYER.EXE. You cant go any older than that, because earlier prerelease builds had not yet finalised its PE format and calling convention. Neat find. Popik also mentions a few other contenders, but I wont spoil those here.


  • Another month of Redox improvements
    Another month has crumbled to dust under the oppressive boots of time, so its time for another month of Redox improvements. This past month, Redox build system gained support for Clang, SDL2 saw performance improvements, and WebKitGTK3s HTML layout rendering was fixed. Users of Intel Tiger Lake processors can now enjoy external display hot-plugging, and overall system performance has been improved in a variety of ways. And as always, theres the long lists of kernel, relibc, and driver improvements and fixes as well. Redox keeps making big strides every month, and its definitely one of the few alternative operating systems that actually feels like it might, one day, be an actual contender for general purpose use.


  • Microsoft.UI.Reactor: a C#-first way to build WinUI apps
    Thew day ends in a Y, so Microsoft is launching a new way to build Windows applications. Get excited, Windows application developers! If you caught our session at Microsoft Build 2026 or you’ve been watching the repo, you’ve seen this one taking shape in public for a while now, and a lot has changed since Build. Here’s the longer tour: Microsoft.UI.Reactor, an experimental C# framework that brings the MVU (Model-View-Update) pattern to WinUI desktop apps. No XAML files, no code-behind, no ViewModels. Two things before the fun part. Reactor is experimental: no support policy, no API guarantees, published this early on purpose because we’d rather hear we got the design wrong now than once people have shipped on it. And it is not a replacement for XAML or MVVM, which we’ll come back to. ↫ Alexandre Zollinger Chohfi at Microsofts Dev Blogs At multiple points in the linked blog post, Microsoft underlines that no, Reactor is not going to replace XAML. Im sure Windows developers who learned Win32, Silverlight, WinRT XAML, WPF, UWP, WinUI 2 and 3, and all the others, over the past two decades will feel deeply comforted by Microsofts insistence that Reactor will not replace XAML. Microsoft repeats: this wont replace XAML. They swear.


  • MacOS Extensions pack for the Apple Network Server v1.0
    Weve been following along with Carmen Kaisers Apple Network Server exploits, and by now things are really starting to come together for owners of this machine. When we last left off, the ROM to allow Mac OS to run on the machine which normally runs IBMs AIX, but there were still a number of bugs, limitations, and issues to be worked out. A lot of progress on that front has been made. The good news is, many of the issues with the preproduction ROM in Mac OS can be fixed or worked around in software. So Ive fixed or worked around many of them in software: the MACE Ethernet is fixed, the on-board video is now supported, and the ANS can restart properly back into Mac OS. Plus, because its the preproduction ROM, you can still boot AIX, thus preserving the entire historical reason for Shiners existence. Heres the first cut of that software and how it was developed. ↫ Cameron Kaiser Theres still two issues Kaiser wishes to address  the internal SCSI bays dont work, and the ROM doesnt properly register parity RAM  but the progress here is amazing.


  • CoW, which (sort-of) brings FVWM to Wayland, reaches version 0.4
    Thomas Adam, one of the core developers of FVWM, has been working on CoW for a while now. CoW can best be described as FVWM for Wayland!, which uniquely uses the River compositor. River, in turn, is unique in that it does not combine the compositor and window manager into a single program, allowing for a more traditional X11-like approach. Adam released version 0.4 today, which comes with a load of fixes, changes, and minor improvements, as well as one bigger-ticket item: container windows. This PR introduces the concept of a top-level container window. This means a window can be subdivided into columns and rows (called panes) and can be resized independently of one another. The idea for this has been unashamedly stolen from shod. ↫ Thomas Adam Ive been keeping an eye on CoW ever since I learned about it when it was first released, and at some point soon I want to build a desktop around it for myself.


  • The many many missed opportunities of Sonic 06
    Speaking of games, if youve ever heard anything about or even played Sonic 06, you know this wasnt the most polished entry in the hedgehogs franchise. In fact, its probably one of the worst, and considering the average quality of Sonic games, thats quite an achievement. The team thats working on decompiling the game to make it run on the PC obviously had to dive deep into the games inner workings, and the process learned a lot about why, exactly, the game is so notoriously bad. It really makes you wonder what exactly went wrong? If you look at what limited footage we have of beta content, we can see many effects that aren’t present in the final game. Kingdom Valley had full bump maps, Castle Town had more complex geometry and plants, and New City’s collision implies a very different building layout at some point in development. It turns out, much of the cut content is actually still in the game, but is simply not enabled for performance reasons in vanilla. Even with the cut-back visuals, the game struggles to reach target FPS on real hardware. It’s not surprising that given the crunch Sonic Team were under to get the game out the door, these features were among the first to go. ↫ Isaac Marovitz The article details what, exactly, was turned off for the final release, and its quite an interesting read. Of course, the team intends to try and address many of these issues, and they think they can push the game and its engine to much greater heights.


  • How to run a city builder on 16 MHz
    When thinking about impressive technical achievements in retro games, most people will first point to graphical milestones set by action games like Doom or Quake. Rightfully so, but at least I am personally far more impressed by the early examples of the city builder genre. Simulating whole economies on a large scale with a fraction of today’s power seems impossible if modern builder games even struggle on modern machines. Of course this didn’t stop developers in the past to develop and run city builder games on significantly weaker hardware. The original SimCity for example lists Intel’s 386SX as the CPU in it’s system requirements. A CPU which at the time of it’s launch ran at magnificent 16 MHz. ↫ Lars Thießen Whats even more impressive are some of the other systems the origin al SimCity was ported to, which had even more limited hardware than a 386SX. The Super Nintendo got a SimCity port, which even included fun extras like a Mario statue and Bowser taking up the mantle of the Godzilla disaster, and additional systems the PC version didnt have. Hell, they even worked on a port to the NES, but it was cancelled and thought lost, until a relatively complete and working copy was discovered in 2017. Even this NES version contained features not available in the PC version. Hardware limitations really did breed a lot of innovation back in those days, and sometimes I wonder if programmers and developers could benefit from tasking themselves with working within such limitations today, if only to become a bit more prudent with resources.



Linux Journal News

  • EU OS: A Bold Step Toward Digital Sovereignty for Europe
    Image
    A new initiative, called "EU OS," has been launched to develop a Linux-based operating system tailored specifically for the public sector organizations of the European Union (EU). This community-driven project aims to address the EU's unique needs and challenges, focusing on fostering digital sovereignty, reducing dependency on external vendors, and building a secure, self-sufficient digital ecosystem.
    What Is EU OS?
    EU OS is not an entirely novel operating system. Instead, it builds upon a Linux foundation derived from Fedora, with the KDE Plasma desktop environment. It draws inspiration from previous efforts such as France's GendBuntu and Munich's LiMux, which aimed to provide Linux-based systems for public sector use. The goal remains the same: to create a standardized Linux distribution that can be adapted to different regional, national, and sector-specific needs within the EU.

    Rather than reinventing the wheel, EU OS focuses on standardization, offering a solid Linux foundation that can be customized according to the unique requirements of various organizations. This approach makes EU OS a practical choice for the public sector, ensuring broad compatibility and ease of implementation across diverse environments.
    The Vision Behind EU OS
    The guiding principle of EU OS is the concept of "public money – public code," ensuring that taxpayer money is used transparently and effectively. By adopting an open-source model, EU OS eliminates licensing fees, which not only lowers costs but also reduces the dependency on a select group of software vendors. This provides the EU’s public sector organizations with greater flexibility and control over their IT infrastructure, free from the constraints of vendor lock-in.

    Additionally, EU OS offers flexibility in terms of software migration and hardware upgrades. Organizations can adapt to new technologies and manage their IT evolution at a manageable cost, both in terms of finances and time.

    However, there are some concerns about the choice of Fedora as the base for EU OS. While Fedora is a solid and reliable distribution, it is backed by the United States-based Red Hat. Some argue that using European-backed projects such as openSUSE or KDE's upcoming distribution might have aligned better with the EU's goal of strengthening digital sovereignty.
    Conclusion
    EU OS marks a significant step towards Europe's digital independence by providing a robust, standardized Linux distribution for the public sector. By reducing reliance on proprietary software and vendors, it paves the way for a more flexible, cost-effective, and secure digital ecosystem. While the choice of Fedora as the base for the project has raised some questions, the overall vision of EU OS offers a promising future for Europe's public sector in the digital age.

    Source: It's FOSS
    European Union


  • Linus Torvalds Acknowledges Missed Release of Linux 6.14 Due to Oversight

    Linus Torvalds Acknowledges Missed Release of Linux 6.14 Due to Oversight

    Linux kernel lead developer Linus Torvalds has admitted to forgetting to release version 6.14, attributing the oversight to his own lapse in memory. Torvalds is known for releasing new Linux kernel candidates and final versions on Sunday afternoons, typically accompanied by a post detailing the release. If he is unavailable due to travel or other commitments, he usually informs the community ahead of time, so users don’t worry if there’s a delay.

    In his post on March 16, Torvalds gave no indication that the release might be delayed, instead stating, “I expect to release the final 6.14 next weekend unless something very surprising happens.” However, Sunday, March 23rd passed without any announcement.

    On March 24th, Torvalds wrote in a follow-up message, “I’d love to have some good excuse for why I didn’t do the 6.14 release yesterday on my regular Sunday afternoon schedule,” adding, “But no. It’s just pure incompetence.” He further explained that while he had been clearing up unrelated tasks, he simply forgot to finalize the release. “D'oh,” he joked.

    Despite this minor delay, Torvalds’ track record of successfully managing the Linux kernel’s development process over the years remains strong. A single day’s delay is not critical, especially since most Linux users don't urgently need the very latest version.

    The new 6.14 release introduces several important features, including enhanced support for writing drivers in Rust—an ongoing topic of discussion among developers—support for Qualcomm’s Snapdragon 8 Elite mobile chip, a fix for the GhostWrite vulnerability in certain RISC-V processors from Alibaba’s T-Head Semiconductor, and a completed NTSYNC driver update that improves the WINE emulator’s ability to run Windows applications, particularly games, on Linux.

    Although the 6.14 release went smoothly aside from the delay, Torvalds expressed that version 6.15 may present more challenges due to the volume of pending pull requests. “Judging by my pending pile of pull requests, 6.15 will be much busier,” he noted.

    You can download the latest kernel here.
    Linus Torvalds kernel


  • AerynOS 2025.03 Alpha Released with GNOME 48, Mesa 25, and Linux Kernel 6.13.8
    Image
    AerynOS 2025.03 has officially been released, introducing a variety of exciting features for Linux users. The release includes the highly anticipated GNOME 48 desktop environment, which comes with significant improvements like HDR support, dynamic triple buffering, and a Wayland color management protocol. Other updates include a battery charge limiting feature and a Wellbeing option aimed at improving user experience.

    This release, while still in alpha, incorporates Linux kernel 6.13.8 and the updated Mesa 25.0.2 graphics stack, alongside tools like LLVM 19.1.7 and Vulkan SDK 1.4.309.0. Additionally, the Moss package manager now integrates os-info to generate more detailed OS metadata via a JSON file.

    Future plans for AerynOS include automated package updates, easier rollback management, improved disk handling with Rust, and fractional scaling enabled by default. The installer has also been revamped to support full disk wipes and dynamic partitioning.

    Although still considered an alpha release, AerynOS 2025.03 can be downloaded and tested right now from its official website.

    Source: 9to5Linux
    AerynOS


  • Xojo 2025r1: Big Updates for Developers with Linux ARM Support, Web Drag and Drop, and Direct App Store Publishing
    Image
    Xojo has just rolled out its latest release, Xojo 2025 Release 1, and it’s packed with features that developers have been eagerly waiting for. This major update introduces support for running Xojo on Linux ARM, including Raspberry Pi, brings drag-and-drop functionality to the Web framework, and simplifies app deployment with the ability to directly submit apps to the macOS and iOS App Stores.

    Here’s a quick overview of what’s new in Xojo 2025r1:
    1. Linux ARM IDE Support
    Xojo 2025r1 now allows developers to run the Xojo IDE on Linux ARM devices, including popular platforms like Raspberry Pi. This opens up a whole new world of possibilities for developers who want to create apps for ARM-based devices without the usual complexity. Whether you’re building for a Raspberry Pi or other ARM devices, this update makes it easier than ever to get started.
    2. Web Drag and Drop
    One of the standout features in this release is the addition of drag-and-drop support for web applications. Now, developers can easily drag and drop visual controls in their web projects, making it simpler to create interactive, user-friendly web applications. Plus, the WebListBox has been enhanced with support for editable cells, checkboxes, and row reordering via dragging. No JavaScript required!
    3. Direct App Store Publishing
    Xojo has also streamlined the process of publishing apps. With this update, developers can now directly submit macOS and iOS apps to App Store Connect right from the Xojo IDE. This eliminates the need for multiple steps and makes it much easier to get apps into the App Store, saving valuable time during the development process.
    4. New Desktop and Mobile Features
    This release isn’t just about web and Linux updates. Xojo 2025r1 brings some great improvements for desktop and mobile apps as well. On the desktop side, all projects now include a default window menu for macOS apps. On the mobile side, Xojo has introduced new features for Android and iOS, including support for ColorGroup and Dark Mode on Android, and a new MobileColorPicker for iOS to simplify color selection.
    5. Performance and IDE Enhancements
    Xojo’s IDE has also been improved in several key areas. There’s now an option to hide toolbar captions, and the toolbar has been made smaller on Windows. The IDE on Windows and Linux now features modern Bootstrap icons, and the Documentation window toolbar is more compact. In the code editor, developers can now quickly navigate to variable declarations with a simple Cmd/Ctrl + Double-click. Plus, performance for complex container layouts in the Layout Editor has been enhanced.
    What Does This Mean for Developers?
    Xojo 2025r1 brings significant improvements across all the platforms that Xojo supports, from desktop and mobile to web and Linux. The added Linux ARM support opens up new opportunities for Raspberry Pi and ARM-based device development, while the drag-and-drop functionality for web projects will make it easier to create modern, interactive web apps. The ability to publish directly to the App Store is a game-changer for macOS and iOS developers, reducing the friction of app distribution.
    How to Get Started
    Xojo is free for learning and development, as well as for building apps for Linux and Raspberry Pi. If you’re ready to dive into cross-platform development, paid licenses start at $99 for a single-platform desktop license, and $399 for cross-platform desktop, mobile, or web development. For professional developers who need additional resources and support, Xojo Pro and Pro Plus licenses start at $799. You can also find special pricing for educators and students.

    Download Xojo 2025r1 today at xojo.com.
    Final Thoughts
    With each new release, Xojo continues to make cross-platform development more accessible and efficient. The 2025r1 release is no exception, delivering key updates that simplify the development process and open up new possibilities for developers working on a variety of platforms. Whether you’re a Raspberry Pi enthusiast or a mobile app developer, Xojo 2025r1 has something for you.
    Xojo ARM


  • New 'Mirrored' Network Mode Introduced in Windows Subsystem for Linux

    Microsoft's Windows Subsystem for Linux (WSL) continues to evolve with the release of WSL 2 version 0.0.2. This update introduces a set of opt-in preview features designed to enhance performance and compatibility.

    Key additions include "Automatic memory reclaim" which dynamically optimizes WSL's memory footprint, and "Sparse VHD" to shrink the size of the virtual hard disk file. These improvements aim to streamline resource usage.

    Additionally, a new "mirrored networking mode" brings expanded networking capabilities like IPv6 and multicast support. Microsoft claims this will improve VPN and LAN connectivity from both the Windows host and Linux guest. 

    Complementing this is a new "DNS Tunneling" feature that changes how DNS queries are resolved to avoid compatibility issues with certain network setups. According to Microsoft, this should reduce problems connecting to the internet or local network resources within WSL.

    Advanced firewall configuration options are also now available through Hyper-V integration. The new "autoProxy" feature ensures WSL seamlessly utilizes the Windows system proxy configuration.

    Microsoft states these features are currently rolling out to Windows Insiders running Windows 11 22H2 Build 22621.2359 or later. They remain opt-in previews to allow testing before final integration into WSL.

    By expanding WSL 2 with compelling new capabilities in areas like resource efficiency, networking, and security, Microsoft aims to make Linux on Windows more performant and compatible. This evolutionary approach based on user feedback highlights Microsoft's commitment to WSL as a key part of the Windows ecosystem.
    Windows


  • Linux Threat Report: Earth Lusca Deploys Novel SprySOCKS Backdoor in Attacks on Government Entities

    The threat actor Earth Lusca, linked to Chinese state-sponsored hacking groups, has been observed utilizing a new Linux backdoor dubbed SprySOCKS to target government organizations globally. 

    As initially reported in January 2022 by Trend Micro, Earth Lusca has been active since at least 2021 conducting cyber espionage campaigns against public and private sector targets in Asia, Australia, Europe, and North America. Their tactics include spear-phishing and watering hole attacks to gain initial access. Some of Earth Lusca's activities overlap with another Chinese threat cluster known as RedHotel.

    In new research, Trend Micro reveals Earth Lusca remains highly active, even expanding operations in the first half of 2023. Primary victims are government departments focused on foreign affairs, technology, and telecommunications. Attacks concentrate in Southeast Asia, Central Asia, and the Balkans regions. 

    After breaching internet-facing systems by exploiting flaws in Fortinet, GitLab, Microsoft Exchange, Telerik UI, and Zimbra software, Earth Lusca uses web shells and Cobalt Strike to move laterally. Their goal is exfiltrating documents and credentials, while also installing additional backdoors like ShadowPad and Winnti for long-term spying.

    The Command and Control server delivering Cobalt Strike was also found hosting SprySOCKS - an advanced backdoor not previously publicly reported. With roots in the Windows malware Trochilus, SprySOCKS contains reconnaissance, remote shell, proxy, and file operation capabilities. It communicates over TCP mimicking patterns used by a Windows trojan called RedLeaves, itself built on Trochilus.

    At least two SprySOCKS versions have been identified, indicating ongoing development. This novel Linux backdoor deployed by Earth Lusca highlights the increasing sophistication of Chinese state-sponsored threats. Robust patching, access controls, monitoring for unusual activities, and other proactive defenses remain essential to counter this advanced malware.

    The Trend Micro researchers emphasize that organizations must minimize attack surfaces, regularly update systems, and ensure robust security hygiene to interrupt the tactics, techniques, and procedures of relentless threat groups like Earth Lusca.
    Security


  • Linux Kernel Faces Reduction in Long-Term Support Due to Maintenance Challenges

    The Linux kernel is undergoing major changes that will shape its future development and adoption, according to Jonathan Corbet, Linux kernel developer and executive editor of Linux Weekly News. Speaking at the Open Source Summit Europe, Corbet provided an update on the latest Linux kernel developments and a glimpse of what's to come.

    A major change on the horizon is a reduction in long-term support (LTS) for kernel versions from six years to just two years. Corbet explained that maintaining old kernel branches indefinitely is unsustainable and most users have migrated to newer versions, so there's little point in continuing six years of support. While some may grumble about shortened support lifecycles, the reality is that constantly backporting fixes to ancient kernels strains maintainers.

    This maintainer burnout poses a serious threat, as Corbet highlighted. Maintaining Linux is largely a volunteer effort, with only about 200 of the 2,000+ developers paid for their contributions. The endless demands on maintainers' time from fuzz testing, fixing minor bugs, and reviewing contributions takes a toll. Prominent maintainers have warned they need help to avoid collapse. Companies relying on Linux must realize giving back financially is in their interest to sustain this vital ecosystem. 

    The Linux kernel is also wading into waters new with the introduction of Rust code. While Rust solves many problems, it also introduces new complexities around language integration, evolving standards, and maintainer expertise. Corbet believes Rust will pass the point of no return when core features depend on it, which may occur soon with additions like Apple M1 GPU drivers. Despite skepticism in some corners, Rust's benefits likely outweigh any transition costs.

    On the distro front, Red Hat's decision to restrict RHEL cloning sparked community backlash. While business considerations were at play, Corbet noted technical factors too. Using older kernels with backported fixes, as RHEL does, risks creating divergent, vendor-specific branches. The Android model of tracking mainline kernel dev more closely has shown security benefits. Ultimately, Linux works best when aligned with the broader community.

    In closing, Corbet recalled the saying "Linux is free like a puppy is free." Using open source seems easy at first, but sustaining it long-term requires significant care and feeding. As Linux is incorporated into more critical systems, that maintenance becomes ever more crucial. The kernel changes ahead are aimed at keeping Linux healthy and vibrant for the next generation of users, businesses, and developers.
    kernel


  • Linux Celebrates 32 Years with the Release of 6.6-rc2 Version

    Today marks the 32nd anniversary of Linus Torvalds introducing the inaugural Linux 0.01 kernel version, and celebrating this milestone, Torvalds has launched the Linux 6.6-rc2. Among the noteworthy updates are the inclusion of a feature catering to the ASUS ROG Flow X16 tablet's mode handling and the renaming of the new GenPD subsystem to pmdomain.

    The Linux 6.6 edition is progressing well, brimming with exciting new features that promise to enhance user experience. Early benchmarks are indicating promising results, especially on high-core-count servers, pointing to a potentially robust and efficient update in the Linux series.

    Here is what Linus Torvalds had to say in today's announcement:
    Another week, another -rc.I think the most notable thing about 6.6-rc2 is simply that it'sexactly 32 years to the day since the 0.01 release. And that's a roundnumber if you are a computer person.Because other than the random date, I don't see anything that reallystands out here. We've got random fixes all over, and none of it looksparticularly strange. The genpd -> pmdomain rename shows up in thediffstat, but there's no actual code changes involved (make sure touse "git diff -M" to see them as zero-line renames).And other than that, things look very normal. Sure, the architecturefixes happen to be mostly parisc this week, which isn't exactly theusual pattern, but it's also not exactly a huge amount of changes.Most of the (small) changes here are in drivers, with some tracingfixes and just random things. The shortlog below is short enough toscroll through and get a taste of what's been going on. Linus Torvalds


  • Introducing Bavarder: A User-Friendly Linux Desktop App for Quick ChatGPT Interaction

    Want to interact with ChatGPT from your Linux desktop without using a web browser?

    Bavarder, a new app, allows you to do just that.

    Developed with Python and GTK4/libadwaita, Bavarder offers a simple concept: pose a question to ChatGPT, receive a response, and promptly copy the answer (or your inquiry) to the clipboard for pasting elsewhere.

    With an incredibly user-friendly interface, you won't require AI expertise (or a novice blogger) to comprehend it. Type your question in the top box, click the blue send button, and wait for a generated response to appear at the bottom. You can edit or modify your message and repeat the process as needed.

    During our evaluation, Bavarder employed BAI Chat, a GPT-3.5/ChatGPT API-based chatbot that's free and doesn't require signups or API keys. Future app versions will incorporate support for alternative backends, such as ChatGPT 4 and Hugging Chat, and allow users to input an API key to utilize ChatGPT3.

    At present, there's no option to regenerate a response (though you can resend the same question for a potentially different answer). Due to the lack of a "conversation" view, tracking a dialogue or following up on answers can be challenging — but Bavarder excels for rapid-fire questions.

    As with any AI, standard disclaimers apply. Responses might seem plausible but could contain inaccurate or false information. Additionally, it's relatively easy to lead these models into irrational loops, like convincing them that 2 + 2 equals 106 — so stay alert!

    Overall, Bavarder is an attractive app with a well-defined purpose. If you enjoy ChatGPT and similar technologies, it's worth exploring.
    ChatGPT AI


  • LibreOffice 7.5.3 Released: Third Maintenance Update Brings 119 Bug Fixes to Popular Open-Source Office Suite

    Today, The Document Foundation unveiled the release and widespread availability of LibreOffice 7.5.3, which serves as the third maintenance update to the current LibreOffice 7.5 open-source and complimentary office suite series.

    Approximately five weeks after the launch of LibreOffice 7.5.2, LibreOffice 7.5.3 arrives with a new set of bug fixes for those who have successfully updated their GNU/Linux system to the LibreOffice 7.5 series.

    LibreOffice 7.5.3 addresses a total of 119 bugs identified by users or uncovered by LibreOffice developers. For a more comprehensive understanding of these bug fixes, consult the RC1 and RC2 changelogs.

    You can download LibreOffice 7.5.3 directly from the LibreOffice website or from SourceForge as binary installers for DEB or RPM-based GNU/Linux distributions. A source tarball is also accessible for individuals who prefer to compile the software from sources or for system integrators.

    All users operating the LibreOffice 7.5 office suite series should promptly update their installations to the new point release, which will soon appear in the stable software repositories of your GNU/Linux distributions.

    In early February 2023, LibreOffice 7.5 debuted as a substantial upgrade to the widely-used open-source office suite, introducing numerous features and improvements. These enhancements encompass major upgrades to dark mode support, new application and MIME-type icons, a refined Single Toolbar UI, enhanced PDF Export, and more.

    Seven maintenance updates will support LibreOffice 7.5 until November 30th, 2023. The next point release, LibreOffice 7.5.4, is scheduled for early June and will include additional bug fixes.

    The Document Foundation once again emphasizes that the LibreOffice office suite's "Community" edition is maintained by volunteers and members of the Open Source community. For enterprise implementations, they suggest using the LibreOffice Enterprise family of applications from ecosystem partners.
    LibreOffice


Linux Magazine News (path: lmi_news)






  • Is Linus Torvalds Vibe Coding?
    The creator of Linux has added AI into his process for Linux kernel development, and it's more than just for debugging.












  • Advanced Video Coding Still Under Patent
    Brazilian patent BRPI0109962B1 has expired, which means that DivX and Xvid are no longer problematic for Linux, but it doesn’t mean that video is all of a sudden fully unleashed.





Page last modified on November 17, 2022, at 06:39 PM