All the News that Matters

• SUSE: poppler Important Security Update CVE-2025-52885 2025:21132-1
  * bsc#1251940 Cross-References: * CVE-2025-52885

• SUSE: runc Important Container Breakout Fix Advisory 2025:21136-1
  * bsc#1252110 * bsc#1252232 Cross-References: * CVE-2025-31133

• SUSE: Alloy Moderate Info Leak Fixed 2025:21137-1 CVE-2025-11065
  * bsc#1248960 * bsc#1250621 Cross-References: * CVE-2025-11065

• SUSE: kernel Critical Vulnerabilities Update 2025:21139-1
  * bsc#1215199 * bsc#1218644 * bsc#1230062 * bsc#1234634 * bsc#1234693

• SUSE: Lasso Critical Denial of Service & Code Exec Advisories 2025:21140-1
  * bsc#1253092 * bsc#1253093 * bsc#1253095 Cross-References:

• SUSE: MySQL Connector Java Important Patch CVE-2025-30706
  * bsc#1241693 Cross-References: * CVE-2025-30706

• Monado 25.1.0: Enabling tomorrow’s OpenXR experiences
  Released as UnitedXR wraps up in Brussels, this latest update to the cross-platform Open-Source OpenXR runtime delivers major improvements across hand tracking, device support, and the core runtime infrastructure. Whether you are an XR platform maker, XR OEM, researcher, developer, or XR enthusiast, version 25.1.0 introduces new capabilities that make Monado even more reliable, more flexible, and better prepared for tomorrow’s XR experiences.

• VLC 3.0.22: Dark Mode, Game Music, and Smoother Playback
  This week’s App of the Week takes a fresh look at VLC 3.0.22, from dark mode on Plasma and Cosmic to niche perks like proper playback of classic Doom and Hexen music files

• Budgie 10.10 Desktop Approved For Fedora 44 Packaging, Fedora Budgie Spin All-Wayland
  In addition to approving Fedora Cloud switching /boot to a Btrfs subvolume, another change approved this week by the Fedora Engineering and Steering Committee (FESCo) is for shipping the Budgie 10.10 desktop packages in Fedora 44...

• Beginners Guide for Rename Command in Linux
  In Linux, the rename command is an amazing utility that allows you to rename single or multiple files at once, based on a set of rules or regular expressions you specify.

• Why So Many Software Projects Are Quitting Microsoft and GitHub
  In a nutshell, they eventually figure out it's not 'free hosting' but a trap

• Thunderbird 146 Introduces Configuration UI for Setting Up OpenPGP Keyservers
  With the release of the Firefox 146 web browser earlier today, the Mozilla Thunderbird 146 open-source email client is out now as well, introducing various new features and plenty of improvements.

• Find out how your Fedora system really feels (with the linux-mcp-server!)
  Generative AI systems are changing the way people interact with computers. MCP (model context protocol) is a way that enables generate AI systems to run commands and use tools to enable live, conversational interaction with systems. Using the new linux-mcp-server, let’s walk through how you can talk with your Fedora system for understanding your system […]

• AerynOS 2025.12 Released with GNOME 49.2, Mesa 25.3, and KDE Plasma 6.5.4
  The AerynOS team released AerynOS 2025.12 today as the latest development ISO snapshot of this independent distribution created by ex-Solus maker Ikey Doherty.

• Window Maker Live 13.2 brings 32-bit life to Debian 13
  Trixie may have gone 64-bit for installs, but WMLive still ships an i686-bootable buildWindow Maker Live 13.2 is stubbornly keeping 32-bit PCs alive on Debian 13 "Trixie," shipping a new release that boots on i686 hardware.…

• Firefox 147 Beta Released With XDG Base Directory Support
  With Firefox 146 released, which is exciting for delivering fractional scaling on Wayland, Firefox 147 Beta is now available and it's also quite exciting to Linux users for another reason...

• Operation Bluebird Wants To Relaunch 'Twitter' For a New Social Network
  A startup called Operation Bluebird is petitioning the US Patent and Trademark Office to strip X Corp of the "Twitter" and "tweet" trademarks, hoping to relaunch a new Twitter with the old brand, bird logo, and "town square" vibe. "The TWITTER and TWEET brands have been eradicated from X Corp.'s products, services, and marketing, effectively abandoning the storied brand, with no intention to resume use of the mark," the petition states. "The TWITTER bird was grounded." Ars Technica reports: If successful, two leaders of the group tell Ars, Operation Bluebird would launch a social network under the name Twitter.new, possibly as early as late next year. (Twitter.new has created a working prototype and is already inviting users to reserve handles.) Michael Peroff, an Illinois attorney and founder of Operation Bluebird, said that in the intervening years, more Twitter-like social media networks have sprung up or gained traction -- like Threads, Mastodon, and Bluesky. But none have the scale or brand recognition that Twitter did prior to Musk's takeover. "There certainly are alternatives," Peroff said. "I don't know that any of them at this point in time are at the scale that would make a difference in the national conversation, whereas a new Twitter really could." Similarly, Peroff's business partner, Stephen Coates, an attorney who formerly served as Twitter's general counsel, said that Operation Bluebird aims to recreate some of the magic that Twitter once had. "I remember some time ago, I've had celebrities react to my content on Twitter during the Super Bowl or events," he told Ars. "And we want that experience to come back, that whole town square, where we are all meshed in there." "Mere 'token use' won't be enough to reserve the mark," said Mark Lemley, a Stanford Law professor and expert in trademark law. "Or [X] could defend if it can show that it plans to go back to using Twitter. Consumers obviously still know the brand name. It seems weird to think someone else could grab the name when consumers still associate it with the ex-social media site of that name. But that's what the law says."
  
  
  Read more of this story at Slashdot.
  

• Google Faces Fines Over Google Play If It Doesn't Make More Concessions
  EU regulators say Google's Play Store changes still don't meet fairness rules and are preparing a potentially hefty 2026 fine unless Google makes deeper concessions. Reuters reports: Google Play has been in the European Commission's crosshairs since March, with regulators singling out technical restrictions preventing app developers from steering users to other channels for cheaper offers. Another issue is the service fee charged by Google for facilitating an app developer's initial acquisition of a new customer via Google Play which the regulator said goes beyond what is justified. Tweaks to Google Play announced in August to make it easier for app developers to direct customers to other channels and choose a fee model are still falling short, the people said, with the EU antitrust regulator viewing Apple's recent changes to its App Store as a benchmark. [...] Google can still offer to make more changes before regulators impose a fine, likely in the first quarter of the next year, the people said, adding that the timing of any sanction can still change. "We continue to work closely with the European Commission in its ongoing investigation but have serious concerns that further changes would put Android and Play users at risk of malware, scams and data theft. Unlike iOS, Android is already open by design," a Google spokesperson said.
  
  
  Read more of this story at Slashdot.
  

• India Proposes Charging OpenAI, Google For Training AI On Copyrighted Content
  An anonymous reader quotes a report from TechCrunch: On Tuesday, India's Department for Promotion of Industry and Internal Trade released a proposed framework that would give AI companies access to all copyrighted works for training in exchange for paying royalties to a new collecting body composed of rights-holding organizations, with payments then distributed to creators. The proposal argues that this "mandatory blanket license" would lower compliance costs for AI firms while ensuring that writers, musicians, artists, and other rights holders are compensated when their work is scraped to train commercial models. [...] The eight-member committee, formed by the Indian government in late April, argues the system would avoid years of legal uncertainty while ensuring creators are compensated from the outset. Defending the system, the committee says in a 125-page submission (PDF) that a blanket license "aims to provide an easy access to content for AI developers reduce transaction costs [and] ensure fair compensation for rightsholders," calling it the least burdensome way to manage large-scale AI training. The submission adds that the single collecting body would function as a "single window," eliminating the need for individual negotiations and enabling royalties to flow to both registered and unregistered creators.
  
  
  Read more of this story at Slashdot.
  

• Qualcomm Acquires RISC-V Chip Designer Ventana Micro Systems
  Qualcomm has acquired RISC-V startup Ventana to strengthen its CPU ambitions beyond mobile, "reinforcing its commitment and leadership in the development of the RISC-V standard and ecosystem," the company said in a press release. CRN Magazine reports: The San Diego-based company said Ventana's expertise in RISC-V, a free and open alternative to the Arm and x86 instruction set architectures, will enhance its CPU engineering capabilities and complement "existing efforts to develop custom Oryon CPU technology." Financial terms of the deal were not disclosed. Qualcomm, which has already been using RISC-V for some products outside the PC and server markets, said Ventana's contributions will boost its "technology leadership in the AI era across all businesses," indicating the broad impact expected by this acquisition. "We believe the RISC-V instruction set architecture has the potential to advance the frontier on CPU technology, enabling innovation across products," Durga Malladi, executive vice president and general manager of technology planning, edge solutions and data center for Qualcomm, said in a statement. "The acquisition of Ventana Micro Systems marks a pivotal step in our journey to deliver industry-leading RISC-V-based CPU technology across products." Further reading: Qualcomm Is Buying Arduino, Releases New Raspberry Pi-Esque Arduino Board
  
  
  Read more of this story at Slashdot.
  

• Ubuntu Will Have Native AMD ROCm AI/ML and HPC Libraries In Next LTS Release
  Longtime Slashdot reader MadCow42 writes: Canonical just announced that they're packaging AMD's ROCm libraries (for AIML and HPC with both data-center GPUs as well as desktop/laptop GPUs), directly into the Ubuntu Universe archive. You can run ROCm on Ubuntu today but you have to install it via a script from AMD and manually remove and reinstall for any upgrades or bug fixes. Having it in Ubuntu as a normal Debian package will make it much easier to install and also to maintain in the long run via normal apt tooling ('apt upgrade'). This also means that ROCm can be an automatically-installed dependency for other packages, which doesn't happen today. And, interestingly, Canonical has committed to providing long-term-support for ROCm in Ubuntu -- which is particularly exciting for edge and IoT devices that may have a long life in the field and need regular security patches and updates.
  
  
  Read more of this story at Slashdot.
  

• Adobe Integrates With ChatGPT
  Adobe is integrating Photoshop, Express, and Acrobat directly into ChatGPT so users can edit photos, design graphics, and tweak PDFs through the chatbot. The Verge reports: The Adobe apps are free to use, and can be activated by typing the name of the app alongside an uploaded file and conversational instruction, such as "Adobe Photoshop, help me blur the background of this image." ChatGPT users won't have to specify the name of the app again during the same conversation to make additional changes. Depending on the instructions, Adobe's apps may offer a selection of results to choose from, or provide a UI element that the user can manually control -- such as Photoshop sliders for adjusting contrast and brightness. The ChatGPT apps don't provide the full functionality of Adobe's desktop software. Adobe says the Photoshop app can edit specific sections of images, apply creative effects, and adjust image settings like brightness, contrast and exposure. Acrobat in ChatGPT can edit existing PDFs, compress and convert other documents into a PDF format, extract text or tables, and merge multiple files together. The Adobe Express app allows ChatGPT users to both generate and edit designs, such as posters, invitations, and social media graphics. Everything in the design can be edited without leaving ChatGPT, from replacing text or images, to altering colors and animating specific sections. If ChatGPT users do want more granular control over a project they started in the chatbot, those photos, PDFs, and designs can be opened directly in Adobe's native apps to pick up where they left off.
  
  
  Read more of this story at Slashdot.
  

• Cable Channel Subscribers Grew For the First Time In 8 Years Last Quarter
  An anonymous reader quotes a report from Ars Technica: On Monday, research analyst MoffettNathanson released its "Cord-Cutting Monitor Q3 2025: Signs of Life?" report. It found that the pay TV operators, including cable companies, satellite companies, and virtual multichannel video programming distributors (vMVPDs) like YouTube TV and Fubo, added 303,000 net subscribers in Q3 2025. According to the report, "There are more linear video subscribers now than there were three months ago. That's the first time we've been able to say that since 2017." In Q3 2017, MoffettNathanson reported that pay TV gained 318,000 net new subscribers. But since then, the industry's subscriber count has been declining, with 1,045,000 customers in Q2 2025, as depicted in the graph [here]. The world's largest vMVPD by subscriber count, YouTube TV, claimed 8 million subscribers in February 2024; some analysts estimate that number is now at 9.4 million. In its report, MoffettNathanson estimated that YouTube TV added 750,000 subscribers in Q3 2025, compared to 1 million in Q3 2024. Traditional pay TV companies also contributed to the industry's unexpected growth by bundling its services with streaming subscriptions. Charter Communications offers bundles with nine streaming services, including Disney+, Hulu, and HBO Max. In Q3 2024, it saw net attrition of 294,000 customers, compared to about 70,000 in Q3 2025. Other cable companies have made similar moves. Comcast, for example, launched a streaming bundle with Netflix, Peacock, and Apple TV in May 2024. For Q3 2025, Comcast reported its best pay TV subscriber count in almost five years, which was a net loss of 257,000 customers. "Traditional pay TV -- i.e. cable and satellite -- still declined quarter over quarter in Q3, but again, by less," noted SteamTV Insider. "The [year-over-year] rate of attrition dropped from -12.4 percent to -10.2 percent over 12 months." MoffettNathanson added: "Yes, Q3 saw a positive net add number for [pay TV for] the first time in eight years, but that positive result came in the year's seasonally strongest quarter. We're not yet close to seeing the category actually grow again..."
  
  
  Read more of this story at Slashdot.
  

• Wells Fargo CEO Says More Job Cuts Coming at the Bank as AI Prompts 'Efficiency'
  Wells Fargo expects more job cuts and higher severance costs in this quarter that ends in three weeks, bank CEO and President Charlie Scharf said Tuesday at an investors conference in New York. He's also betting on AI to drive efficiency and, eventually, further workforce reduction.From a report: "As we've gone through the budgeting process, and even pre AI, we do expect to have less people as we go into next year," Scharf said at the Goldman Sachs Financial Services Conference in New York City. "We'll likely have more severance in the fourth quarter." The fourth quarter runs Oct. 1 through Dec. 31 for the San Francisco-basaed bank. Wells Fargo already has shrunk from 275,000 employees to about 210,000 since Scharf joined the bank in 2019 -- about a 24% decrease. Its largest employee base remains in Charlotte, with about 27,000 workers.
  
  
  Read more of this story at Slashdot.
  

• Democrats Warn Their Party May Try To Unravel Any Paramount-Warner Bros. Discovery Deal
  As the battle over Warner Bros. Discovery grows, two Democratic lawmakers are warning that their party may try to block or unravel anyacquisition by Paramount when it returns to power. Semafor: In a letter to the WBD board and Treasury Secretary Scott Bessent first shared with Semafor, Reps. Sam Liccardo (D-Calif.) and Ayanna Pressley (D-Mass.) said they were concerned about the national security risk of letting foreign entities control a large portion of the US entertainment and media industry. They also hinted that a future Democratic Congress and administration could try to unravel any Paramount-WBD deal. "Future Congresses ... will review many of the decisions of the current Administration, and may recommend that regulators push for divestitures, which would undermine the strategic logic of this merger," they wrote. "We urge the Board to weigh these national security and regulatory liabilities in evaluating a transaction burdened by uncertain but potentially extensive mitigation obligations, foreign influence risks, or adverse regulatory action."
  
  
  Read more of this story at Slashdot.
  

• Amazon Changes How Copyright Protection is Applied To Kindle Direct's Self-Published Ebooks
  Amazon says it will allow authors to offer their DRM-free ebooks in the EPUB and PDF formats through its self-publishing platform, Kindle Direct Publishing. Starting on January 20, 2026, authors who set their titles as DRM-free will see their books made available in these more open formats. From a report: The decision to use Digital Rights Management (DRM), a copyright protection mechanism, is set by the authors when they publish their ebooks on Amazon's platform. The company notes these changes won't impact previously published titles. If authors want to change the status of older titles, they'll have to log into the Kindle Direct Publishing (KDP) author portal and change an option in the settings. (Instructions on how to make that change are on Amazon's KDP support site here.) This move may actually incentivize authors to apply DRM to their ebooks.
  
  
  Read more of this story at Slashdot.
  

• Disaggregated Routing with SONiC and VPP: Lab Demo and Performance Insights  Part Two
  In Part One of this series, we examined how the SONiC control plane and the VPP data plane form a cohesive, software-defined routing stack through the Switch Abstraction Interface.` We outlined how SONiC’s Redis-based orchestration and VPP’s user-space packet engine come together to create a high-performance, open router architecture. In this second part, we’ll turn [0]
  
  The post Disaggregated Routing with SONiC and VPP: Lab Demo and Performance Insights  Part Two appeared first on Linux.com.
  

• Disaggregated Routing with SONiC and VPP: Architecture and Integration  Part One
  The networking industry is undergoing a fundamental architectural transformation, driven by the relentless demands of cloud-scale data centers and the rise of software-defined infrastructure. At the heart of this evolution is the principle of disaggregation: the systematic unbundling of components that were once tightly integrated within proprietary, monolithic systems.` This movement began with the separation [0]
  
  The post Disaggregated Routing with SONiC and VPP: Architecture and Integration  Part One appeared first on Linux.com.
  

• Kubernetes on Bare Metal for Maximum Performance
  When teams consider deploying Kubernetes, one of the first questions that arises is: where should it run? The default answer is often the public cloud, thanks to its flexibility and ease of use. However, a growing number of organizations are revisiting the advantages of running Kubernetes directly on bare metal servers. For workloads that demand [0]
  
  The post Kubernetes on Bare Metal for Maximum Performance appeared first on Linux.com.
  

• How to Deploy Lightweight Language Models on Embedded Linux with LiteLLM
  This article was contributed by Vedrana Vidulin, Head of Responsible AI Unit at Intellias (LinkedIn). As AI becomes central to smart devices, embedded systems, and edge computing, the ability to run language models locally — without relying on the cloud — is essential. Whether its for reducing latency, improving data privacy, or enabling offline functionality, local AI [0]
  
  The post How to Deploy Lightweight Language Models on Embedded Linux with LiteLLM appeared first on Linux.com.
  

• Automating Compliance Management with UTMStacks Open Source SIEM 8 XDR
  Achieving and maintaining compliance with regulatory frameworks can be challenging for many organizations. Managing security controls manually often leads to excessive use of time and resources, leaving less available for strategic initiatives and business growth. Standards such as CMMC, HIPAA, PCI DSS, SOC2 and GDPR demand ongoing monitoring, detailed documentation, and rigorous evidence collection. Solutions [0]
  
  The post Automating Compliance Management with UTMStacks Open Source SIEM & XDR appeared first on Linux.com.
  

• A Simple Way to Install Talos Linux on Any Machine, with Any Provider
  Talos Linux is a specialized operating system designed for running Kubernetes. First and foremost it handles full lifecycle management for Kubernetes control-plane components. On the other hand, Talos Linux focuses on security, minimizing the user’s ability to influence the system. A distinctive feature of this OS is the near-complete absence of executables, including the absence [0]
  
  The post A Simple Way to Install Talos Linux on Any Machine, with Any Provider appeared first on Linux.com.
  

• Using OpenTelemetry and the OTel Collector for Logs, Metrics, and Traces
  OpenTelemetry (fondly known as OTel) is an open-source project that provides a unified set of APIs, libraries, agents, and instrumentation to capture and export logs, metrics, and traces from applications. The project’s goal is to standardize observability across various services and applications, enabling better monitoring and troubleshooting. Read More at Causely
  
  The post Using OpenTelemetry and the OTel Collector for Logs, Metrics, and Traces appeared first on Linux.com.
  

• Project Tazama, A Project Hosted by LF Charities With Support From the Gates Foundation, Receives Digital Public Good Designation.
  Exciting news! The Tazama project is officially a Digital Public Good having met the criteria to be accepted to the Digital Public Goods Alliance ! Tazama is a groundbreaking open source software solution for real-time fraud prevention, and offers the first-ever open source platform dedicated to enhancing fraud management in digital payments. Historically, the financial [0]
  
  The post Project Tazama, A Project Hosted by LF Charities With Support From the Gates Foundation, Receives Digital Public Good Designation. appeared first on Linux.com.
  

• Xen 4.19 is released
  Xen Project 4.19 has been officially out since July 31st, 2024, and it brings significant updates. With enhancements in performance, security, and versatility across various architectures like Arm, PPC, RISC-V, and x86, this release is an important milestone for the Xen community. Read more at XCP-ng Blog
  
  The post Xen 4.19 is released appeared first on Linux.com.
  

• Advancing Xen on RISC-V: key updates
  At Vates, we are heavily invested in the advancement of Xen and the RISC-V architecture. RISC-V, a rapidly emerging open-source hardware architecture, is gaining traction due to its flexibility, scalability and openness, which align perfectly with our ethos of fostering open development ecosystems. Although the upstream version of Xen for RISC-V is not yet fully [0]
  
  The post Advancing Xen on RISC-V: key updates appeared first on Linux.com.
  

Engadget"Engadget is a web magazine with obsessive daily coverage of everything new in gadgets and consumer electronics"

• Mewgenics, the next game from The Binding of Isaac's developer, will arrive next February on PC
  Indie game developer Edmund McMillen hosted a Reddit AMA today offering some more details about his upcoming game Mewgenics. For starters, the Steam release date for this turn-based cat-breeding RPG has been slightly delayed to February 10. The game was first announced all the way back in 2012 and had most recently been slated for a launch some time this year. Part of the long development cycle was so that McMillen could pause to launch Super Meat Boy Forever, the sequel to his Super Meat Boy platforming hit from 2010. Gamers may also know McMillen for The Binding of Isaac, which has had some notable crossovers with titles like Balatro in recent years.   
  
  Other tidbits from the AMA include the promise that McMillen already has DLC ideas, so expect to have additional content release after the base game is available. Although there doesn9t seem to be any lack of replayability in Mewgenics; McMillen said "I currently have 300+ hours across 2 saves and have only beaten the game on one save so far." There is also a plan to have some console versions of the game, although likely not until much later next year at the soonest, the dev added.
  This article originally appeared on Engadget at https://www.engadget.com/gaming/mewgenics-the-next-game-from-the-binding-of-isaacs-developer-will-arrive-next-february-on-pc-235740063.html?src=rss

• The NES game Jaws is getting a retro physical re-release on Switch and PS5
  The year is 1987. Beverly Hills Cop II is the highest-grossing movie. "Walk Like an Egyptian" is the hottest song. The Iran-Contra scandal dominates American political headlines, while Konami’s Contra sucks up coins in arcades. But towering above them all is the watershed moment of Jaws arriving on the NES. ("This time there9s no escape!", warned the box art.) Now, 38 years later, the 8-bit game is returning as a Limited Run Games physical re-release.
  
  The retro release coincides with the Spielberg movie9s 50th anniversary. From December 19 to January 18, you can pre-order a physical copy for Switch and PS5.
  
  It will be available in two physical editions: a standard ("Retro Edition") one for $35, and a deluxe ("The Bigger Boat Edition") one for $100. The latter adds an NES-inspired box, a physical CD of the game soundtrack, a keychain and — best of all — a pixelated shark lamp. Both versions include original and "enhanced" versions of the 1987 game.
  Promo art for the Jaws NES reissueLimited Run Games
  The game is split mainly between a birds-eye view (where you pilot your boat around the map) and an underwater side view (where you harpoon the shit out of marine wildlife). Eventually, you9ll encounter Jaws. After several of these encounters, gradually diminishing his hit points, you9ll try to finish him off in a faux-3D perspective on the water9s surface. If you think this sounds like a minor variation of what you found in a handful of other licensed NES games from that era, you wouldn9t be wrong.
  
  You can pre-order the Jaws re-release from Limited Run Games9 website, starting on December 19 at 10 AM ET. In the meantime, you can refresh your memory of the 8-bit game with the video below.
  
  
  This article originally appeared on Engadget at https://www.engadget.com/gaming/the-nes-game-jaws-is-getting-a-retro-physical-re-release-on-switch-and-ps5-221052996.html?src=rss

• Apple TV and Apple Music were down for some users
  Apple Music and Apple TV were briefly down during outage, according to Apple’s System Status page. The outage was logged on Apple’s own system at around 2:53PM ET and affected both of the company’s streaming services, along with Apple TV’s Channels feature, until the company resolved the issue around 4:31PM ET.
  
  On DownDetector, reports of issues with Apple TV and Apple Music first appeared right around 2:33PM ET, a little before Apple officially confirmed the outage on its own site. Only “some” users were affected by the outage, according to Apple, and anecdotally, multiple members of Engadget’s staff were still able to stream content while the services were reportedly out.
  
  Engadget has reached out to Apple for more information on the outage and how many people were impacted. We’ll update this article if we hear back.
  
  Apple relies on cloud services from third-party companies like Amazon, and is ultimately only as stable the data centers it’s paying for. In October 2025, the company was impacted by the same Amazon Web Services outage that took down services and apps like Alexa, Fortnite and Snapchat for hours.
  
  Update, December 10, 5:09PM ET: Article and headline updated to reflect that the outage has been resolved.
  This article originally appeared on Engadget at https://www.engadget.com/entertainment/streaming/apple-tv-and-apple-music-were-down-for-some-users-214425802.html?src=rss

• Meta is reportedly working on a new AI model called 'Avocado' and it might not be open source
  Mark Zuckerberg has for months publicly hinted that he is backing away from open-source AI models. Now, Meta9s latest AI pivot is starting to come into focus. The company is reportedly working on a new model, known inside of Meta as "Avocado," which could mark a major shift away from its previous open-source approach to AI development. 
  
  Both CNBC and delayed for months; The New York Times reported earlier this year that Wang and other execs had "discussed abandoning" it altogether. And developers have reportedly been unimpressed with the Llama 4 models that are available. 
  
  There have been other shakeups within the ranks of Meta9s AI groups as Zuckerberg has spent billions of dollars building a team dedicated to superintelligence. The company laid off several hundred workers from its Fundamental Artificial Intelligence Research (FAIR) unit. And Meta veteran and Chief AI Scientist Yann LeCun, who has been a proponent for open-source and skeptical of LLMs, recently announced he was leaving the company. 
  
  That Meta may now be pursuing a closed AI model is a significant shift for Zuckerberg, who just last year said "fuck that" about closed platforms and penned a lengthy memo titled "Open Source AI is the Path Forward." But the notoriously competitive CEO is also apparently intensely worried about falling behind OpenAI, Google and other rivals. Meta has said it expects to spend $600 billion over the next few years to fund its AI ambitions.
  
  
  This article originally appeared on Engadget at https://www.engadget.com/ai/meta-is-reportedly-working-on-a-new-ai-model-called-avocado-and-it-might-not-be-open-source-215426778.html?src=rss

• Spotify's new playlist feature gives users more control over their recommendation algorithm
  Spotify is attempting to give users more control over the music the streaming service recommends with a new playlist feature called "Prompted Playlist." The beta feature is rolling out in New Zealand starting on December 11, and will let users write a custom prompt that Spotify can use — alongside their listening history — to create a playlist of new music.
  
  By tapping on Prompted Playlist, Spotify subscribers participating in the beta will be presented with a prompt field where they can type exactly what they want to hear and how they want Spotify9s algorithm to respond. And while past AI features took users9 individual taste into consideration, Spotify claims Prompted Playlist "taps into your entire Spotify listening history, all the way back to day one." 
  Prompted Playlist will exist alongside Spotify9s other playlist features.Spotify
  Prompts can be as broad or specific as users want, and Spotify says playlists can also be set to automatically update with new songs on a specific cadence. An "Ideas" tab in the Prompted Playlist setup screen can provide suggestions for users who need inspiration for their prompt. And interestingly, Spotify says each song in the playlist will be presented with a short description explaining why the algorithm chose it, which could help direct future fine-tuning.
  
  If this all sounds familiar, it9s because Spotify has already tried AI-generated playlists in the past. The difference here, besides Spotify framing the new feature as giving users more "control," is the detail of the prompts, the depth of user data Spotify is applying and the options users will have to keep playlists up-to-date. Prompted Playlist is only available in English for now, but Spotify says the feature will evolve as it adds more users.
  
  Spotify isn9t the first company to offer users more direct control over how content is recommended to them. Meta has recently started experimenting with algorithm-tuning options in Threads and Instagram, and TikTok lets users completely reset their For You page to start fresh. The irony of all these features is that algorithm-driven feeds were supposed to be able to recommend good music, posts and videos without additional prompting. Now that prompting is being pitched as a feature, rather than extra work.
  This article originally appeared on Engadget at https://www.engadget.com/entertainment/music/spotifys-new-playlist-feature-gives-users-more-control-over-their-recommendation-algorithm-203237903.html?src=rss

• Intel loses its latest challenge to 16-year-old EU antitrust case
  Intel will have to pay up in an antitrust case dating back to 2009, Reuters reported on Wednesday. The company has lost its challenge against a €376 million ($438.7 million) regulatory fine levied by the European Commission. However, Intel managed to get the amount reduced to 237 million euros ($276.6 million).
  
  The case began in 2009, when mobile computing was in its infancy and netbooks (remember those?) were all the rage in the PC space. At the time, the EU ruled that Intel violated antitrust laws on multiple fronts. First, it used illegal hidden rebates to push rivals out of the PC processor market. Second, it paid manufacturers to delay or stop production of AMD-powered products.
  
  The latter, the portion that today9s fine deals with, was classified as "naked restrictions." It regarded anticompetitive payments Intel made to HP, Acer and Lenovo between 2002 and 2006.
  
  As often happens in these situations, the legal process bounced back and forth through the courts for years. In 2017, Europe9s highest court ordered the case to be re-examined, citing a lack of proper economic assessment of how Intel9s behavior affected its rivals. Europe9s second-highest court then overturned the judgment from the first (hidden rebates) portion of the fine in 2022, a move confirmed by the EU Court of Justice last year. That penalty, initially set at a whopping €1.06 billion ($1.2 billion), was wiped off the books.
  
  The second ("naked restrictions") fine was imposed in 2023 after European courts upheld that portion. Intel9s latest challenge sought to have that one removed, too. Instead, it will have to settle for shaving one-third off the initial sum.
  
  With today’s judgment, it9s tempting to declare the matter over and done with. But the Commission and Intel can still appeal the decision to the EU Court of Justice on points of law. Tune in next year to see if this long, strange saga has another chapter.
  This article originally appeared on Engadget at https://www.engadget.com/big-tech/intel-loses-its-latest-challenge-to-16-year-old-eu-antitrust-case-200746004.html?src=rss

• The 10 best white elephant gifts worth fighting over for 2025
  There are a lot of competing ideas as to what a white elephant gift exchange really is. The origins of the term “white elephant” point to one definition: According to legend, the King of Siam would give a white elephant to courtiers who had upset them. It was a far more devious punishment than simply having them executed. The recipient had no choice but to simply thank the king for such an opulent gift, knowing that they likely could not afford the upkeep for such an animal. It would inevitably lead them to financial ruin.
  
  While that story is almost certainly untrue, it can inform one approach to the white elephant gift exchange: gifting something just useful or amusing enough that it won’t immediately get tossed into the trash, but is also somewhat of a burden. However, every workplace, friend group and family unit has their own approach to white elephant gift exchanges nowadays. Some compete to get a gift that others will surely want to steal, while others scavenge for the most niche and targeted gag gifts. Almost all of them, though, typically have a price limit that keeps the burden of gift giving to a minimum — usually $50 or less. So with all of that in mind, here are some white elephant gift ideas that will get you a few chuckles without requiring you to spend too much (or think too hard about it).
  Best white elephant gift ideas
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  White elephant FAQs What is white elephant?
  A white elephant gift exchange is a party game typically played around the holidays in which people exchange funny, impractical gifts.
  How does white elephant work?
  A group of people each bring one wrapped gift to the white elephant gift exchange, and each gift is typically of a similar value. All gifts are then placed together and the group decides the order in which they will each claim a gift. The first person picks a white elephant gift from the pile, unwraps it and their turn ends. The following players can either decide to unwrap another gift and claim it as their own, or steal a gift from someone who has already taken a turn. The rules can vary from there, including the guidelines around how often a single item can be stolen — some say twice, max. The game ends when every person has a white elephant gift.
  Why is it called white elephant?
  The term “white elephant” is said to come from the legend of the King of Siam gifting white elephants to courtiers who upset him. While it seems like a lavish gift on its face, the belief is that the courtiers would be ruined by the animal’s upkeep costs.
  
  Check out the rest of our gift ideas here.
  This article originally appeared on Engadget at https://www.engadget.com/the-10-best-white-elephant-gifts-worth-fighting-over-for-2025-150516281.html?src=rss

• The world premieres and other hotness from The Game Awards 2025 Day of the Devs stream
  You gotta love that post-Day of the Devs showcase feeling. The organization, founded by Double Fine Productions and iam8bit, consistently highlights top-tier games from independent developers across the globe, providing space for creators to share their stories in both online and in-person events. This year’s Day of the Devs: The Game Awards Digital Showcase was an hour-long celebration of 22 upcoming indie games, including six world premieres and three release date announcements.
  
  Settle in and bask in the afterglow with us:
  World PremieresVirtue and a Sledgehammer - Deconstructeam
  Deconstructeam is a small Spanish studio that’s responsible for some of the most cerebral, sexy and darkly philosophical games around, including Gods Will Be Watching, The Red Strings Club and The Cosmic Wheel Sisterhood. The team’s next project is Virtue and a Sledgehammer, and it represents a new look with 3D, cel-shaded animations and a third-person perspective rather than the studio’s typical pixelated planar fare. The vibes are just as sinister and introspective as expected, though.
  
  Virtue and a Sledgehammer is a moody coming-of-age experience set in a wooded ghost town dotted with robots and lost locals. Spend quiet moments with old friends and then swing the sledgehammer to raze your hometown and uncover memories that can help you move on. The game’s buildings and objects are highly reactive, which can only help with the catharsis of it all.
  
  Virtue and a Sledgehammer is due to hit Steam in 2026, published by Devolver Digital.
  UN:Me - Shueisha Games
  Now, this is a horror game. UN:Me comes from Japanese publisher Shueisha Games and developer Historia, and it’s a creepy, mind-bending exploration of primal fear. It stars a young woman with four souls trapped inside of her body, fighting for control of her consciousness. She wanders sterile, illogical hallways and encounters grotesque horrors representing common human fears like heights, authority figures and confined spaces. The souls switch randomly, each one manifesting a specific anxiety. As she wanders, the player has to choose souls to eliminate until only one remains. Whether it’s her real soul or a fake isn’t disclosed until the very end.
  
  UN:Me is available to wishlist now on Steam.
  Scramble Knights Royale - Funktronic Labs
  Funktronic Labs is mainly known as a VR studio, with games like Cosmic Trip, Fujii and The Light Brigade under its belt, but its latest project doesn’t require a headset at all. Scramble Knights Royale is coming to PC and Xbox in 2026, and it’s a battle royale with adventure game twists. You begin on a boat with 30 to 40 other online players, make your way to land on the back of a turtle, and then it’s essentially Naked and Afraid from there. Find resources, fight creatures, upgrade your gear and play your own game, only battling other players when you encounter them in the wild.
  
  Don’t let the sweet, clay-like animations fool you, either — Funktronic says the combat mechanics are incredibly deep and finely honed. Scramble Knights Royale also supports local split-screen.
  Mirria - Mografi
  Mografi made a name for itself with the adorable Jenny LeClue detective game, but now it’s time for something different. Mirria is an atmospheric puzzle experience from on Steam and Itch.io.
  Frog Sqwad - Panic Stations
  If the former Fall Guys developers at Panic Stations know how to do one thing, it’s make a silly-physics multiplayer game, so that’s exactly what they’re doing. Frog Sqwad is a co-op experience where you and your fellow frogs search the sewers for food in order to satiate the swamp king. You can eat food to grow bigger and become the mega frog, vomit to shrink, and use your long sticky tongue to swing, hang and slingshot your friends. The sewer levels are procedurally generated, so your froggy playground will always be different, and each run gets harder as the swamp king requires more food.
  
  Frog Sqwad is coming to Steam in 2026, with a playtest beforehand.
  Release dates
  pre-order now on iam8bit. Proceeds will benefit the Video Game History Foundation.
  This article originally appeared on Engadget at https://www.engadget.com/gaming/the-world-premieres-and-other-hotness-from-the-game-awards-2025-day-of-the-devs-stream-200000447.html?src=rss

• PS Plus Game Catalog additions for December include Assassin's Creed Mirage
  Sony just announced December9s Game Catalog additions for PS Plus subscribers and it9s a pretty decent lineup. All of these titles will be ready to play on December 16, except Skate Story which is already available.
  
  Speaking of Skate Story, it9s a really weird skateboarding sim that9s set in a glass-covered world. The reviews have been positive, with many people praising the outlandish story, surreal locations and the satisfying trick mechanics. It9s made by Sam Eng, who was behind the indie shooter Zarvot. This new game is only available for PS5 subscribers.
  
  Assassin9s Creed Mirage will be available for both PS4 and PS5 players. This is the mainline entry from 2023 and it9s actually really fun. It boasts a "back to basics" design that old-school fans of the franchise should appreciate.
  
  Granblue Fantasy: Relink is a 3D action RPG that started its life as a mobile game. However, this particular RPG features music compositions from Nobuo Uematsu and art direction from Hideo Minaba. Both worked together on some games in a mom-and-pop franchise called Final Fantasy. This console port will be playable on PS4 and PS5
  
  Cat Quest III is a simple action RPG starring, well, cats (and dogs.) This one brings open world tomfoolery to a land teeming with islands, so expect plenty of pirate puns. I enjoyed the first two, as the gameplay loop is pretty addictive and the quests are fun. It9ll be available on PS4 and PS5.
  
  Other forthcoming games include Wo Long: Fallen Dynasty, Lego Horizon Adventures, Paw Patrol: Grand Prix and Planet Coaster 2. Sony is also offering a holiday promotion in which new annual PS Plus subscribers receive download credits for movies.
  This article originally appeared on Engadget at https://www.engadget.com/gaming/playstation/ps-plus-game-catalog-additions-for-december-include-assassins-creed-mirage-193731745.html?src=rss

• 12 steps you can take right now to be safer online
  There9s a fundamental question you can ask of both the internet and real life: "How do I enjoy my time here without taking unnecessary risks?" In grass-touching meatspace, you can cut out processed foods, carry pepper spray and avoid skydiving without a partner.
  
  But the best methods for staying safe online aren9t as intuitive. The internet is a massive town square where people are constantly bellowing deeply personal facts about themselves. It9s no surprise that it9s become a breeding ground for scams, theft and other criminal activity.
  
  Given the breadth of dangers, it may feel easier to throw up your hands and say that whatever happens will happen. I9m here to tell you, though, that cybersecurity doesn9t have to be complex, difficult or time-consuming. You don9t need to be a hacker to foil a hacker — you only have to take advantage of simple tips and free apps designed to make you safer online. Whether you commit to all 12 detailed here or only focus on one, you9ll be much more secure for it.
  1. Install security updates immediately
  One of the most important things you can do to ensure your digital security is to install all software updates as soon as they become available on your devices. When you see the notification, don9t wait — train yourself to download the update immediately.
  
  Not all software updates are about security, but the ones that are form your best line of defense against technical hacks. When developers discover a flaw that can be exploited, they ship an update to fix it. By the time the flaw gets patched, chances are very high that hackers also know about it, so any time lost means you could be the next to get exploited.
  
  As you go down this list, you9ll learn that cybersecurity threats are less technical than you think. To counter the ones that are, however, there9s nothing more important you can do than install security updates.
  2. Use strong passwords
  Weak, easily guessed passwords are one of the most frequent causes of data breaches and malware attacks. If a password is one of the ten or so most common, an attacker may be able to guess it with no other information. If it9s connected to you — your birthday, say, or mother9s maiden name — it may be guessable from information anyone can look up online.
  
  Even if your password is a random string of characters, it might still be guessable if it9s too short. Hackers can use programs to guess all possible combinations and try each one on a target account. The longer a password is, the more exponentially difficult it is to guess.
  SEAN GLADWELL via Getty Images
  That means you need passwords that are both long and meaningless to you. You might rightly complain that these are bastards to remember, but you9re in luck: password managers can do that for you. A password manager app or browser extension can create passwords when you need them, store them securely and fill them in automatically. All you have to remember is the one master password that unlocks all the others.
  3. Set up two-factor authentication
  Even the strongest password might get revealed through no fault of your own, like if it9s stored without encryption and leaked in a data breach. That9s why it helps to have two-factor authentication (2FA), also known as multi-factor authentication (MFA), as a second secure layer on every account.
  
  You probably already know 2FA as the irritating extra step that makes you go get your phone — but that9s not the only way to do it. Many apps, including Google and Apple, now let you log in through passkeys. These not only don9t require you to enter a code or password, but use asymmetric encryption, sharing credentials between your device and the service that runs the passkeys. It9s a lot quicker for you, and leaves nothing to steal.
  4. Back everything up
  Ransomware and its cousins are a growth industry within the cybercrime economy. These attacks corrupt your files or lock you out of them until you pay a fee to get them back. The easiest way to foil a ransomware attack, or to clear any other kind of malware off a device, is to restore the entire system from the most recent backup.
  
  To make sure you actually have a backup, experts recommend the 3-2-1 rule: three different backups, on two different types of storage, with at least one physically distant from the main system. For example, you could have one backup on another device in your house, one in the cloud and one on a portable hard drive. Automatic backup services can save disk images for you at set intervals so you don9t have to remember to do it yourself.
  5. Learn to spot social engineering
  Despite all the technobabble flying around the cybersecurity world, a great many scams and hacks are accomplished through methods a 19th-century con artist would recognize. Scammers pose as experts or authority figures to gain your trust, and use frightening language to bypass your critical thinking. Ticking clocks, emotional manipulation and fake identities are all in the toolbox.
  Alex Cristi via Getty Images
  Take phishing, in which hackers trick you into giving up your information willingly. A typical phishing email might pose as a bank, credit bureau or other authoritative service. In red letters, it may demand your bank password or social security number to immediately fix an irregularity with your account. Other common approaches include warning you about speeding tickets you never incurred or sending receipts for subscriptions you never bought.
  
  Social engineering attacks are constantly evolving, but they often fall back on the same strategies. The best way to foil them is to take a deep breath every time you receive a frightening email or text message, then research it in detail: look up the email address, check the visual design to make sure the sender is who they claim to be, and ask yourself if there9s any way the message could be true. I highly recommend working through this phishing quiz — it9s tough, but fair, and extremely educational.
  6. Always check links before clicking
  This is a companion to the previous tip. Social engineering scams don9t always try to get you to give up information yourself. They also get you to click on links that put secret malware on your device — like keyloggers that watch you type your passwords or ransomware programs that corrupt your files.
  
  If you9re ever not sure about an email attachment or a link you9re being asked to click, copy the link (without opening it) and paste it into a URL checker like this one from NordVPN. These free tools can tell you if a link is associated with any known malware domains.
  Sam Chapman for Engadget
  You can also mouse over any link, then look at the bottom-left of your browser to see what URL it will take you to. If an email is from your bank, any links within it should go to your bank9s website. If it9s going anywhere else, especially to an unidentifiable string of characters, be suspicious.
  
  A related tip is to never copy and paste something into your URL bar if you aren9t absolutely sure of what it will do. Social engineering doesn9t always get you to click the link — sometimes attackers leave it un-hyperlinked so mousing over it doesn9t reveal anything. This also goes for the command modules on desktop and laptop computers. In a recent documented attack, hackers convinced AI chatbots to suggest a command that gave them root access to the victim9s device. Never copy-paste anything into the command window without verifying it first, especially if an AI told you to do it.
  7. Don9t overshare
  Over the last two decades, lots of us have gotten into the habit of dumping all sorts of personal information on social media. This trend has supercharged the scam economy. It may seem harmless to broadcast the names of your kids or the dates you9ll be on vacation, but every piece of data you put into the world makes it easier for a stranger to get hooks into you.
  
  For example, "grandparent scams" are on the rise right now. Grifters contact a target, usually a senior, pretending to be their grandchild. They9ll claim to be in a crisis and need money fast. The more information they have on their target, the more convincing their tale of woe will be. Social media is a prime place to study a potential victim.
  
  Oversharing can also be a compounding problem. If you use weak passwords, your public information can be used to guess your credentials or answer your security questions. So, if you don9t have a password manager yet, think twice before you engage with that quiz post on Facebook that asks for the name of your childhood pet.
  8. Use a VPN
  I9m a big booster of virtual private networks (VPNs), but it9s important to be realistic about what they can and can9t do. Even the best VPNs aren9t total cybersecurity solutions — you can9t just set one and assume you9re safe forever. A VPN can9t protect you if you use easily guessed passwords, for example, or click on a malware link. It9s about hiding your identity, not making you invulnerable.
  
  So what can a VPN do? In short, it replaces your IP address (a fingerprint that identifies you online) with another IP address, belonging to a server owned by the VPN. The VPN server does business with the internet on your behalf, while its conversations with your device are encrypted so it can9t be traced back to you.
  Sam Chapman for Engadget
  This means no third party can connect your online actions with your real-world identity. Nobody will be harvesting data on the websites you visit to sell to advertisers, nor building a file on you that an unscrupulous government might misuse. VPNs also protect you from fake public Wi-Fi networks set up by cybercriminals — even if a hacker tricks you with a man-in-the-middle attack, they can9t do much without your real IP address.
  
  Many top VPNs, including my top pick Proton VPN, include ad blockers that can also keep cookies and tracking pixels from latching onto you. So, even if a VPN can9t do everything, you9ll be far safer and more private with one than without one. If you don’t want to pay for a new subscription right now, I9ve also compiled a list of the best free VPNs that are actually safe to use.
  9. Run regular virus scans
  The most important time to look for malware is when you9re downloading a file from the internet. Not only can unwanted apps hitch rides on seemingly safe files, but links can start downloads in secret, even if you don9t think they9re meant to be downloading anything. A solid antivirus program can catch malware as it arrives on your system, and if it9s uncertain, can lock suspicious files in quarantine until it knows whether they9re safe or not.
  
  Dedicated antivirus apps are sometimes even capable of catching malware that hasn9t been seen or used yet. AV software uses machine learning to identify the common patterns of malware, filtering out new viruses that behave like old ones.
  
  But what about malware that9s already gotten through the perimeter? An antivirus app can also check your computer at set intervals in search of unwanted apps, including those that might be masquerading as system files. Windows computers now come pre-installed with Windows Defender, which is enough to handle most of these tasks, but I recommend at least one anti-malware program on any device.
  10. Use email maskers and private search engines
  If you9re concerned about your information being misused or mishandled, remember that the less you put out into the world, the less danger you9re in. Keeping your private data off social media is one important step, but there are other ways your data gets disseminated — and other options for responding.
  
  For example, you often need an email address to sign up for an online account. If you use your real email, your contact information is now floating around online, increasing the chance of someone using it to scam you (or at least adding you to mailing lists you never signed up for). To stay safe, use an email masker. These services give you a fake email address you can use to create accounts, which automatically forwards messages to your real address.
  Sam Chapman for Engadget
  Search engines, especially Google, are also notorious for building profiles on users by watching the terms they search for. You can dodge that by switching to a private search engine like DuckDuckGo, which doesn9t track anything you do — it9s funded by non-targeted ad sales on its search results pages, not by selling your data to brokers.
  11. Use a data removal service
  Speaking of data brokers: unfortunately, if you9ve been on the internet at any point in the last 10 years without taking intense precautions, your data is probably in the hands of at least one business that makes money by hoarding and selling it. These data brokers range from public-facing, people-search sites to private backend dealers.
  
  Data brokers are poorly regulated and lax about safety. The longer one has your personal information, the more likely it is to leak. The good news is that most brokers (though not all of them) are legally required to delete your data if you ask them to.
  
  However, there are a lot of data brokers out there, and they really want to keep your data. Each one makes opting out harder than uninstalling a Norton product — and hundreds of them may have files on you. To make the process easier, you can use a data removal service like DeleteMe or Surfshark VPN9s partner service Incogni.
  12. Practice physical security
  Let9s close out the list by getting a little old school. I9ve already discussed how many online scams depend on classic con artistry to work. By the same token, physical infiltration and smash-and-grab tactics still pose a threat to cybersecurity.
  
  It doesn9t take too much imagination to see how this could work. If you leave your laptop or phone unattended in public, for example, someone might insert a flash drive that loads malware onto the system. In one illustrative case, a thief in the Minneapolis area would loiter in bars, watch people unlock their phones, then steal those phones and unlock them himself.
  
  I9m not saying you need to be paranoid every second you9re in public. Just use the same level of caution you9d use to protect your car. Lock your phone with a biometric key so only you can open it, and make sure not to leave any device lying around if it can access your online accounts. And at work, be careful not to let anyone into a secure area if they don9t have the proper credentials.
  This article originally appeared on Engadget at https://www.engadget.com/cybersecurity/12-steps-you-can-take-right-now-to-be-safer-online-130008335.html?src=rss

• EU OS: A Bold Step Toward Digital Sovereignty for Europe
  Image
  A new initiative, called "EU OS," has been launched to develop a Linux-based operating system tailored specifically for the public sector organizations of the European Union (EU). This community-driven project aims to address the EU's unique needs and challenges, focusing on fostering digital sovereignty, reducing dependency on external vendors, and building a secure, self-sufficient digital ecosystem.
  What Is EU OS?
  EU OS is not an entirely novel operating system. Instead, it builds upon a Linux foundation derived from Fedora, with the KDE Plasma desktop environment. It draws inspiration from previous efforts such as France's GendBuntu and Munich's LiMux, which aimed to provide Linux-based systems for public sector use. The goal remains the same: to create a standardized Linux distribution that can be adapted to different regional, national, and sector-specific needs within the EU.
  
  Rather than reinventing the wheel, EU OS focuses on standardization, offering a solid Linux foundation that can be customized according to the unique requirements of various organizations. This approach makes EU OS a practical choice for the public sector, ensuring broad compatibility and ease of implementation across diverse environments.
  The Vision Behind EU OS
  The guiding principle of EU OS is the concept of "public money – public code," ensuring that taxpayer money is used transparently and effectively. By adopting an open-source model, EU OS eliminates licensing fees, which not only lowers costs but also reduces the dependency on a select group of software vendors. This provides the EU’s public sector organizations with greater flexibility and control over their IT infrastructure, free from the constraints of vendor lock-in.
  
  Additionally, EU OS offers flexibility in terms of software migration and hardware upgrades. Organizations can adapt to new technologies and manage their IT evolution at a manageable cost, both in terms of finances and time.
  
  However, there are some concerns about the choice of Fedora as the base for EU OS. While Fedora is a solid and reliable distribution, it is backed by the United States-based Red Hat. Some argue that using European-backed projects such as openSUSE or KDE's upcoming distribution might have aligned better with the EU's goal of strengthening digital sovereignty.
  Conclusion
  EU OS marks a significant step towards Europe's digital independence by providing a robust, standardized Linux distribution for the public sector. By reducing reliance on proprietary software and vendors, it paves the way for a more flexible, cost-effective, and secure digital ecosystem. While the choice of Fedora as the base for the project has raised some questions, the overall vision of EU OS offers a promising future for Europe's public sector in the digital age.
  
  Source: It's FOSS
  European Union

• Linus Torvalds Acknowledges Missed Release of Linux 6.14 Due to Oversight
  
  Linus Torvalds Acknowledges Missed Release of Linux 6.14 Due to Oversight
  
  Linux kernel lead developer Linus Torvalds has admitted to forgetting to release version 6.14, attributing the oversight to his own lapse in memory. Torvalds is known for releasing new Linux kernel candidates and final versions on Sunday afternoons, typically accompanied by a post detailing the release. If he is unavailable due to travel or other commitments, he usually informs the community ahead of time, so users don’t worry if there’s a delay.
  
  In his post on March 16, Torvalds gave no indication that the release might be delayed, instead stating, “I expect to release the final 6.14 next weekend unless something very surprising happens.” However, Sunday, March 23rd passed without any announcement.
  
  On March 24th, Torvalds wrote in a follow-up message, “I’d love to have some good excuse for why I didn’t do the 6.14 release yesterday on my regular Sunday afternoon schedule,” adding, “But no. It’s just pure incompetence.” He further explained that while he had been clearing up unrelated tasks, he simply forgot to finalize the release. “D'oh,” he joked.
  
  Despite this minor delay, Torvalds’ track record of successfully managing the Linux kernel’s development process over the years remains strong. A single day’s delay is not critical, especially since most Linux users don't urgently need the very latest version.
  
  The new 6.14 release introduces several important features, including enhanced support for writing drivers in Rust—an ongoing topic of discussion among developers—support for Qualcomm’s Snapdragon 8 Elite mobile chip, a fix for the GhostWrite vulnerability in certain RISC-V processors from Alibaba’s T-Head Semiconductor, and a completed NTSYNC driver update that improves the WINE emulator’s ability to run Windows applications, particularly games, on Linux.
  
  Although the 6.14 release went smoothly aside from the delay, Torvalds expressed that version 6.15 may present more challenges due to the volume of pending pull requests. “Judging by my pending pile of pull requests, 6.15 will be much busier,” he noted.
  
  You can download the latest kernel here.
  Linus Torvalds kernel

• AerynOS 2025.03 Alpha Released with GNOME 48, Mesa 25, and Linux Kernel 6.13.8
  Image
  AerynOS 2025.03 has officially been released, introducing a variety of exciting features for Linux users. The release includes the highly anticipated GNOME 48 desktop environment, which comes with significant improvements like HDR support, dynamic triple buffering, and a Wayland color management protocol. Other updates include a battery charge limiting feature and a Wellbeing option aimed at improving user experience.
  
  This release, while still in alpha, incorporates Linux kernel 6.13.8 and the updated Mesa 25.0.2 graphics stack, alongside tools like LLVM 19.1.7 and Vulkan SDK 1.4.309.0. Additionally, the Moss package manager now integrates os-info to generate more detailed OS metadata via a JSON file.
  
  Future plans for AerynOS include automated package updates, easier rollback management, improved disk handling with Rust, and fractional scaling enabled by default. The installer has also been revamped to support full disk wipes and dynamic partitioning.
  
  Although still considered an alpha release, AerynOS 2025.03 can be downloaded and tested right now from its official website.
  
  Source: 9to5Linux
  AerynOS

• Xojo 2025r1: Big Updates for Developers with Linux ARM Support, Web Drag and Drop, and Direct App Store Publishing
  Image
  Xojo has just rolled out its latest release, Xojo 2025 Release 1, and it’s packed with features that developers have been eagerly waiting for. This major update introduces support for running Xojo on Linux ARM, including Raspberry Pi, brings drag-and-drop functionality to the Web framework, and simplifies app deployment with the ability to directly submit apps to the macOS and iOS App Stores.
  
  Here’s a quick overview of what’s new in Xojo 2025r1:
  1. Linux ARM IDE Support
  Xojo 2025r1 now allows developers to run the Xojo IDE on Linux ARM devices, including popular platforms like Raspberry Pi. This opens up a whole new world of possibilities for developers who want to create apps for ARM-based devices without the usual complexity. Whether you’re building for a Raspberry Pi or other ARM devices, this update makes it easier than ever to get started.
  2. Web Drag and Drop
  One of the standout features in this release is the addition of drag-and-drop support for web applications. Now, developers can easily drag and drop visual controls in their web projects, making it simpler to create interactive, user-friendly web applications. Plus, the WebListBox has been enhanced with support for editable cells, checkboxes, and row reordering via dragging. No JavaScript required!
  3. Direct App Store Publishing
  Xojo has also streamlined the process of publishing apps. With this update, developers can now directly submit macOS and iOS apps to App Store Connect right from the Xojo IDE. This eliminates the need for multiple steps and makes it much easier to get apps into the App Store, saving valuable time during the development process.
  4. New Desktop and Mobile Features
  This release isn’t just about web and Linux updates. Xojo 2025r1 brings some great improvements for desktop and mobile apps as well. On the desktop side, all projects now include a default window menu for macOS apps. On the mobile side, Xojo has introduced new features for Android and iOS, including support for ColorGroup and Dark Mode on Android, and a new MobileColorPicker for iOS to simplify color selection.
  5. Performance and IDE Enhancements
  Xojo’s IDE has also been improved in several key areas. There’s now an option to hide toolbar captions, and the toolbar has been made smaller on Windows. The IDE on Windows and Linux now features modern Bootstrap icons, and the Documentation window toolbar is more compact. In the code editor, developers can now quickly navigate to variable declarations with a simple Cmd/Ctrl + Double-click. Plus, performance for complex container layouts in the Layout Editor has been enhanced.
  What Does This Mean for Developers?
  Xojo 2025r1 brings significant improvements across all the platforms that Xojo supports, from desktop and mobile to web and Linux. The added Linux ARM support opens up new opportunities for Raspberry Pi and ARM-based device development, while the drag-and-drop functionality for web projects will make it easier to create modern, interactive web apps. The ability to publish directly to the App Store is a game-changer for macOS and iOS developers, reducing the friction of app distribution.
  How to Get Started
  Xojo is free for learning and development, as well as for building apps for Linux and Raspberry Pi. If you’re ready to dive into cross-platform development, paid licenses start at $99 for a single-platform desktop license, and $399 for cross-platform desktop, mobile, or web development. For professional developers who need additional resources and support, Xojo Pro and Pro Plus licenses start at $799. You can also find special pricing for educators and students.
  
  Download Xojo 2025r1 today at xojo.com.
  Final Thoughts
  With each new release, Xojo continues to make cross-platform development more accessible and efficient. The 2025r1 release is no exception, delivering key updates that simplify the development process and open up new possibilities for developers working on a variety of platforms. Whether you’re a Raspberry Pi enthusiast or a mobile app developer, Xojo 2025r1 has something for you.
  Xojo ARM

• New 'Mirrored' Network Mode Introduced in Windows Subsystem for Linux
  
  Microsoft's Windows Subsystem for Linux (WSL) continues to evolve with the release of WSL 2 version 0.0.2. This update introduces a set of opt-in preview features designed to enhance performance and compatibility.
  
  Key additions include "Automatic memory reclaim" which dynamically optimizes WSL's memory footprint, and "Sparse VHD" to shrink the size of the virtual hard disk file. These improvements aim to streamline resource usage.
  
  Additionally, a new "mirrored networking mode" brings expanded networking capabilities like IPv6 and multicast support. Microsoft claims this will improve VPN and LAN connectivity from both the Windows host and Linux guest. 
  
  Complementing this is a new "DNS Tunneling" feature that changes how DNS queries are resolved to avoid compatibility issues with certain network setups. According to Microsoft, this should reduce problems connecting to the internet or local network resources within WSL.
  
  Advanced firewall configuration options are also now available through Hyper-V integration. The new "autoProxy" feature ensures WSL seamlessly utilizes the Windows system proxy configuration.
  
  Microsoft states these features are currently rolling out to Windows Insiders running Windows 11 22H2 Build 22621.2359 or later. They remain opt-in previews to allow testing before final integration into WSL.
  
  By expanding WSL 2 with compelling new capabilities in areas like resource efficiency, networking, and security, Microsoft aims to make Linux on Windows more performant and compatible. This evolutionary approach based on user feedback highlights Microsoft's commitment to WSL as a key part of the Windows ecosystem.
  Windows

• Linux Threat Report: Earth Lusca Deploys Novel SprySOCKS Backdoor in Attacks on Government Entities
  
  The threat actor Earth Lusca, linked to Chinese state-sponsored hacking groups, has been observed utilizing a new Linux backdoor dubbed SprySOCKS to target government organizations globally. 
  
  As initially reported in January 2022 by Trend Micro, Earth Lusca has been active since at least 2021 conducting cyber espionage campaigns against public and private sector targets in Asia, Australia, Europe, and North America. Their tactics include spear-phishing and watering hole attacks to gain initial access. Some of Earth Lusca's activities overlap with another Chinese threat cluster known as RedHotel.
  
  In new research, Trend Micro reveals Earth Lusca remains highly active, even expanding operations in the first half of 2023. Primary victims are government departments focused on foreign affairs, technology, and telecommunications. Attacks concentrate in Southeast Asia, Central Asia, and the Balkans regions. 
  
  After breaching internet-facing systems by exploiting flaws in Fortinet, GitLab, Microsoft Exchange, Telerik UI, and Zimbra software, Earth Lusca uses web shells and Cobalt Strike to move laterally. Their goal is exfiltrating documents and credentials, while also installing additional backdoors like ShadowPad and Winnti for long-term spying.
  
  The Command and Control server delivering Cobalt Strike was also found hosting SprySOCKS - an advanced backdoor not previously publicly reported. With roots in the Windows malware Trochilus, SprySOCKS contains reconnaissance, remote shell, proxy, and file operation capabilities. It communicates over TCP mimicking patterns used by a Windows trojan called RedLeaves, itself built on Trochilus.
  
  At least two SprySOCKS versions have been identified, indicating ongoing development. This novel Linux backdoor deployed by Earth Lusca highlights the increasing sophistication of Chinese state-sponsored threats. Robust patching, access controls, monitoring for unusual activities, and other proactive defenses remain essential to counter this advanced malware.
  
  The Trend Micro researchers emphasize that organizations must minimize attack surfaces, regularly update systems, and ensure robust security hygiene to interrupt the tactics, techniques, and procedures of relentless threat groups like Earth Lusca.
  Security

• Linux Kernel Faces Reduction in Long-Term Support Due to Maintenance Challenges
  
  The Linux kernel is undergoing major changes that will shape its future development and adoption, according to Jonathan Corbet, Linux kernel developer and executive editor of Linux Weekly News. Speaking at the Open Source Summit Europe, Corbet provided an update on the latest Linux kernel developments and a glimpse of what's to come.
  
  A major change on the horizon is a reduction in long-term support (LTS) for kernel versions from six years to just two years. Corbet explained that maintaining old kernel branches indefinitely is unsustainable and most users have migrated to newer versions, so there's little point in continuing six years of support. While some may grumble about shortened support lifecycles, the reality is that constantly backporting fixes to ancient kernels strains maintainers.
  
  This maintainer burnout poses a serious threat, as Corbet highlighted. Maintaining Linux is largely a volunteer effort, with only about 200 of the 2,000+ developers paid for their contributions. The endless demands on maintainers' time from fuzz testing, fixing minor bugs, and reviewing contributions takes a toll. Prominent maintainers have warned they need help to avoid collapse. Companies relying on Linux must realize giving back financially is in their interest to sustain this vital ecosystem. 
  
  The Linux kernel is also wading into waters new with the introduction of Rust code. While Rust solves many problems, it also introduces new complexities around language integration, evolving standards, and maintainer expertise. Corbet believes Rust will pass the point of no return when core features depend on it, which may occur soon with additions like Apple M1 GPU drivers. Despite skepticism in some corners, Rust's benefits likely outweigh any transition costs.
  
  On the distro front, Red Hat's decision to restrict RHEL cloning sparked community backlash. While business considerations were at play, Corbet noted technical factors too. Using older kernels with backported fixes, as RHEL does, risks creating divergent, vendor-specific branches. The Android model of tracking mainline kernel dev more closely has shown security benefits. Ultimately, Linux works best when aligned with the broader community.
  
  In closing, Corbet recalled the saying "Linux is free like a puppy is free." Using open source seems easy at first, but sustaining it long-term requires significant care and feeding. As Linux is incorporated into more critical systems, that maintenance becomes ever more crucial. The kernel changes ahead are aimed at keeping Linux healthy and vibrant for the next generation of users, businesses, and developers.
  kernel

• Linux Celebrates 32 Years with the Release of 6.6-rc2 Version
  
  Today marks the 32nd anniversary of Linus Torvalds introducing the inaugural Linux 0.01 kernel version, and celebrating this milestone, Torvalds has launched the Linux 6.6-rc2. Among the noteworthy updates are the inclusion of a feature catering to the ASUS ROG Flow X16 tablet's mode handling and the renaming of the new GenPD subsystem to pmdomain.
  
  The Linux 6.6 edition is progressing well, brimming with exciting new features that promise to enhance user experience. Early benchmarks are indicating promising results, especially on high-core-count servers, pointing to a potentially robust and efficient update in the Linux series.
  
  Here is what Linus Torvalds had to say in today's announcement:
  Another week, another -rc.I think the most notable thing about 6.6-rc2 is simply that it'sexactly 32 years to the day since the 0.01 release. And that's a roundnumber if you are a computer person.Because other than the random date, I don't see anything that reallystands out here. We've got random fixes all over, and none of it looksparticularly strange. The genpd -> pmdomain rename shows up in thediffstat, but there's no actual code changes involved (make sure touse "git diff -M" to see them as zero-line renames).And other than that, things look very normal. Sure, the architecturefixes happen to be mostly parisc this week, which isn't exactly theusual pattern, but it's also not exactly a huge amount of changes.Most of the (small) changes here are in drivers, with some tracingfixes and just random things. The shortlog below is short enough toscroll through and get a taste of what's been going on. Linus Torvalds

• Introducing Bavarder: A User-Friendly Linux Desktop App for Quick ChatGPT Interaction
  
  Want to interact with ChatGPT from your Linux desktop without using a web browser?
  
  Bavarder, a new app, allows you to do just that.
  
  Developed with Python and GTK4/libadwaita, Bavarder offers a simple concept: pose a question to ChatGPT, receive a response, and promptly copy the answer (or your inquiry) to the clipboard for pasting elsewhere.
  
  With an incredibly user-friendly interface, you won't require AI expertise (or a novice blogger) to comprehend it. Type your question in the top box, click the blue send button, and wait for a generated response to appear at the bottom. You can edit or modify your message and repeat the process as needed.
  
  During our evaluation, Bavarder employed BAI Chat, a GPT-3.5/ChatGPT API-based chatbot that's free and doesn't require signups or API keys. Future app versions will incorporate support for alternative backends, such as ChatGPT 4 and Hugging Chat, and allow users to input an API key to utilize ChatGPT3.
  
  At present, there's no option to regenerate a response (though you can resend the same question for a potentially different answer). Due to the lack of a "conversation" view, tracking a dialogue or following up on answers can be challenging — but Bavarder excels for rapid-fire questions.
  
  As with any AI, standard disclaimers apply. Responses might seem plausible but could contain inaccurate or false information. Additionally, it's relatively easy to lead these models into irrational loops, like convincing them that 2 + 2 equals 106 — so stay alert!
  
  Overall, Bavarder is an attractive app with a well-defined purpose. If you enjoy ChatGPT and similar technologies, it's worth exploring.
  ChatGPT AI

• LibreOffice 7.5.3 Released: Third Maintenance Update Brings 119 Bug Fixes to Popular Open-Source Office Suite
  
  Today, The Document Foundation unveiled the release and widespread availability of LibreOffice 7.5.3, which serves as the third maintenance update to the current LibreOffice 7.5 open-source and complimentary office suite series.
  
  Approximately five weeks after the launch of LibreOffice 7.5.2, LibreOffice 7.5.3 arrives with a new set of bug fixes for those who have successfully updated their GNU/Linux system to the LibreOffice 7.5 series.
  
  LibreOffice 7.5.3 addresses a total of 119 bugs identified by users or uncovered by LibreOffice developers. For a more comprehensive understanding of these bug fixes, consult the RC1 and RC2 changelogs.
  
  You can download LibreOffice 7.5.3 directly from the LibreOffice website��or from SourceForge as binary installers for DEB or RPM-based GNU/Linux distributions. A source tarball is also accessible for individuals who prefer to compile the software from sources or for system integrators.
  
  All users operating the LibreOffice 7.5 office suite series should promptly update their installations to the new point release, which will soon appear in the stable software repositories of your GNU/Linux distributions.
  
  In early February 2023, LibreOffice 7.5 debuted as a substantial upgrade to the widely-used open-source office suite, introducing numerous features and improvements. These enhancements encompass major upgrades to dark mode support, new application and MIME-type icons, a refined Single Toolbar UI, enhanced PDF Export, and more.
  
  Seven maintenance updates will support LibreOffice 7.5 until November 30th, 2023. The next point release, LibreOffice 7.5.4, is scheduled for early June and will include additional bug fixes.
  
  The Document Foundation once again emphasizes that the LibreOffice office suite's "Community" edition is maintained by volunteers and members of the Open Source community. For enterprise implementations, they suggest using the LibreOffice Enterprise family of applications from ecosystem partners.
  LibreOffice