All the News that Matters

• Zellij 0.46 released
  Version0.46 of the Zellij terminal workspace hasbeen released.
  
  This release includes a major addition in Zellij: Zellij is now also adesktop terminal. To run it: zellij terminal. It works on linux, mac andwindows.
  
  Nothing changes for the normal multiplexer - Zellij can still run insideanother terminal. Both sessions are the same and can be shared.
  
  Additional features in this release include aGUI settings screen, session previews, and right-click menu. See this walkthroughfor more on the 0.46 release.
  
  
  

• In Memoriam: Tim Peters 1952–2026
  Guido van Rossum conveysthe sad (and somewhat delayed) news of the passing of Tim Peters.
  It's hard to overestimate Tim's influence on Python. He's probably best known for writing the Zen of Python (PEP 20), but to me he was a mentor and language co-designer long before that.
  Tim found Python not long after its initial release. His first deed was to convince me that Python should support mixed arithmetic between int and float, because most users would expect them to work that way. And he never stopped contributing.

• [$] Additional hardening for the glibc dynamic linker
  TheNode.js project recently had asecurity vulnerability thataffected itsBrotli decoder. The bugwas a buffer overflow,but the particular way that official Node.js binaries are built for Linux meant that one of themain protections against turning a buffer overflow into remote code execution,address space layout randomization (ASLR) could not be turned on. If ASLR had beenenabled, the bug would still be exploitable in theory, but much more difficultto exploit in practice. In response, the GNU C Library (glibc) isconsidering a new set oftunable settings to allow administrators to forbid programs that do notsupport ASLR. The new settings, while a welcome hardening measure, may notaddress the root problem.
  

• Security updates for Wednesday
  Security updates have been issued by AlmaLinux (edk2), Debian (openexr, rsyslog, and srt), Fedora (alertmanager, dotnet11.0, gdal, mstflint, nextcloud, python-crate-ingredients, rust-ingredients, rust-pore, rust-pulldown-cmark, rust-rbw, rust-sequoia-sq, rust-siguldry-fedora-autopen, tigervnc, unbound, and zchunk), Gentoo (Brotli, git, and libde265), Mageia (mopidy, python-dulwich, rust-similar3, rclone, and sofia-sip), Oracle (dpdk, edk2, firefox, glibc, kernel, kernel-uek, nodejs-nodemon, nodejs22, nodejs:24, patch, ruby, ruby4.0, squid:4, and thunderbird), Red Hat (.NET 10.0, .NET 11.0, .NET 8.0, .NET 9.0, bind, bind9.16, bind9.18, buildah, c-ares, containernetworking-plugins, delve, flatpak-builder, gcc, gcc-toolset-15-gcc, gcc-toolset-16-gcc, go-fdo-client, go-fdo-server, golang-github-openprinting-ipp-usb, grafana, grafana-pcp, gstreamer1-plugins-bad-free, gstreamer1-plugins-good, gvfs, gvisor-tap-vsock, nginx, nginx:1.24, nginx:1.26, oci-delta, podman, python-oauthlib, python3, python3.12, python3.9, qt5-qtbase, qt6-qtbase, rhc, runc, skopeo, squid, squid:4, tesseract, util-linux, xdg-dbus-proxy, and yggdrasil), Slackware (xorg-server), SUSE (aliyun-cli, amazon-cloudwatch-agent, ansible-core, aspell, azure-storage-azcopy, bind, cups, dlib-devel, docker, dolphin, dpdk, evolution, firefox, flannel, fuse-overlayfs, gnome-podcasts, google-cloud-sap-agent, GraphicsMagick, graphicsmagick, haproxy, istioctl, kernel, kubevirt, kured, libvips-devel, libXi, mozilla-nss, nvidia-open-driver-G06-signed-check, okteto, openssl-1_1, pcre2, poppler, poppler-qt, poppler-qt5, poppler, poppler-qt5, proftpd, psqlodbc, python-graphql-core, python-M2Crypto, python-pillow, python-soupsieve, python-urllib3_1, python313-wyoming, qt6-coap, rust-keylime, sbc, scribus, SDL2_image, tar, terraform-provider-susepubliccloud, the linux kernel (live patch 18 for suse linux, vsftpd, xen, xorg-x11-server, and zchunk), and Ubuntu (ca-certificates-java, gst-plugins-good1.0, gst-plugins-base1.0, hplip, linux-azure-fde, linux-nvidia, linux-nvidia-7.0, linux-nvidia-bos, linux-nvidia-lowlatency, python-tornado, rust-coreutils, and unbound).

• Three new stable kernels for Tuesday
  Greg Kroah-Hartman has released the 7.3.4,6.18.63, and 6.12.117 stable kernels. The 7.3.4 kernel has morethan 1,250 patches, 6.18.63 contains more than 860, and 6.12.117 includes morethan 1,530 patches. Users of these kernels are, of course, encouraged to upgrade.
  
  
  

• [$] Synaptics patent claims stop work on DisplayLink drivers
  Mike Lothian owns a docking station (or dock) that uses a DisplayLink chipsetthat had, at least in his opinion, subpar performance on Linux. Hedecided to try improving the Linux driver, with LLM assistance, but ran into oneproblem that he could not solve—so he asked for help, hoping thatSynaptics's developers would lend a hand. (DisplayLink was acquired bySynaptics in 2022.) Rather than help him in improving thedriver, however, the Synaptics legal team responded with patent infringementclaims, a demandthat he cease unauthorized implementation of DisplayLink technology, and threatsof expensive legal penalties. For now, it appears that Linux users of thecompany's docks will have to continue to live without feature parity with otherplatforms.
  

• Firefox 160 released
  Version160 of the Firefox web browser has been released. Notable features in thisrelease include the ability to block sites from asking to handle"mailto:" links, ability to play Matroska files with FLAC, MP3, or PCMaudio, playback speed controls in the picture-in-picturevideo player, and a new MiniWindow feature that is in early development.
  
  
  

• Security updates for Tuesday
  Security updates have been issued by AlmaLinux (curl, dpdk, glibc, kernel, nodejs-nodemon, nodejs22, nodejs24, nodejs:18, nodejs:22, patch, qt5, qt5-qtdeclarative, ruby, ruby4.0, ruby:3.3, ruby:4.0, squid:4, tomcat, util-linux, and webkit2gtk3), Debian (symfony and tomcat10), Fedora (bind, dnf5, kernel, kernel-headers, libmodulemd, maturin, perl-CGI, perl-Net-IDN-Encode, perl-Starlet, python-jiter, python-pydantic-core, python-pysequoia, python3-docs, python3.14, python3.15, ruff, rust-afterburn, rust-astral_async_zip, rust-clearscreen, rust-jiter, rust-lzma-rust2, rust-mailparse, rust-pyo3-introspection, rust-python-pkginfo, rust-serde_json, rust-testresult, rust-zip, selenium-manager, ty, and uutils-coreutils), Mageia (glibc, packages, php-smarty, python-aiohttp, and thunderbird), Oracle (curl, firefox, gdb, glibc, kernel, oVirt 4.5 ovirt-engine-wildfly, perl-YAML:1.24, and tesseract), Slackware (krb5), SUSE (ansible-core, apr-util, aspell, buildpacks-cli, dpdk22, firefox, git-bug, glib2, google-cloud-sap-agent, haproxy, jsoup, kernel, krb5, libjxl, librsvg, libruby4_0-4_0, libunbound8, libXtst, nodejs24, nvidia-open-driver-G07-signed, PackageKit, perl-XS-Parse-Keyword, poppler, python, python-Brotli, rsyslog, tekton-cli, tomcat, tomcat10, tomcat11, trivy, udisks2, xen, zchunk, and zk), and Ubuntu (apache2, ca-certificates, fetchmail, freerdp3, kernel, libgphoto2, libheif, libnfs, libsoup3, linux, linux-aws, linux-aws-5.15, linux-aws-fips, linux-azure, linux-azure-5.15, linux-azure-fde-5.15, linux-azure-fips, linux-gcp, linux-gcp-5.15, linux-gcp-fips, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iot-realtime, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-oracle, linux-oracle-5.15, linux-realtime, linux, linux-aws, linux-aws-fips, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-azure-fips, linux-fips, linux-gcp, linux-gcp-4.15, linux-gcp-fips, linux-hwe, linux-kvm, linux-oracle, linux, linux-aws, linux-aws-fips, linux-azure, linux-azure-5.4, linux-azure-fips, linux-bluefield, linux-fips, linux-gcp, linux-gcp-5.4, linux-gcp-fips, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-iot, linux-kvm, linux-oracle, linux-oracle-5.4, linux-xilinx-zynqmp, linux, linux-aws, linux-azure, linux-azure-fips, linux-gcp, linux-gke, linux-ibm, linux-lowlatency, linux-oracle, linux-vmware, linux, linux-aws, linux-gcp, linux-ibm, linux-oem-7.0, linux-oracle, linux, linux-aws, linux-kvm, linux-lts-xenial, linux-aws, linux-aws-5.4, linux-raspi, linux-raspi-5.4, linux-aws-6.8, linux-gcp-6.8, linux-ibm-6.8, linux-lowlatency-hwe-6.8, linux-nvidia, linux-realtime-6.8, linux-aws-7.0, linux-azure-fde, linux-azure-fde-7.0, linux-gcp-7.0, linux-gke, linux-oracle-7.0, linux-realtime, linux-aws-fips, linux-gcp-fips, linux-gkeop, linux-realtime, linux-azure, linux-azure-6.8, linux-azure-fde-6.8, linux-azure-fde, linux-oracle-6.8, linux-raspi, linux-raspi-realtime, linux-raspi, openjdk-17, openjdk-21, openjdk-25, openjdk-27, openjdk-8, openjdk-lts, perl, and pyasn1).

• [$] Git considers voting to determine its LLM policy
  One of the dominant themes of 2026 has been the debate within developmentprojects about the terms under which LLM-written contributions should beaccepted — if, indeed, they should be accepted at all. The Git project has not been immune to thistrend; the topic was discussedat the recent Git Contributor's Summit. In this case, the path to aresolution may be somewhat circuitous; the project, which has never beengoverned as a democracy, is considering adopting a voting process as a wayof bringing the discussion to an acceptable conclusion.

• Kernel prepatch 7.4-rc2
  Linus Torvalds has released the 7.4-rc2prepatch and it will come as no surprise that it is a large one ("abig -rc2 to go with the largest ever -rc1"). Much of the size was madeup of some automated Coccinelle updates that were spread out all over thetree; once those are factored out, the rest looks fairly normal:When masking that noise out from the diffstat, the shape of it changes- not spread out over thousands of files any more. But it does notlook unusual: a third is drivers (gpu, networking and sound accountfor most of it, but there's a bit of everything), another third isnetworking and bpf, and the final third is "the rest" (mostlyfilesystems, mm, arch updates).
  And yes, much of this was driven by various AI fixes. I think I'llstop repeating that, and we can just take it for granted. But thistime around Alexei [Starovoitov] claims that on the bpf side at least the fixes arenow coming in faster than the new reports, and that sounds lovely iftrue.

• OpenIndiana 2026.10 released
  Version2026.10 of the OpenIndiana operatingsystem has been released. OpenIndiana is based on Illumos, which in turn wasbased on OpenSolarisafter Oracle discontinued it.
  
  Notable changes in this release include UEFI framebuffer support for the liveimage, updates to many applications and development tools, as well as theinclusion of new applications such as TeX Live 2026, the Foliate ebook reader,and more.
  
  
  

• Security updates for Monday
  Security updates have been issued by Debian (cjose, kernel, libreoffice, rsync, ruby3.3, telegram-desktop, vim, and zlib), Fedora (bind, composer, copyparty, dnf5, elixir, fasterxml-oss-parent, gnome-remote-desktop, goose, jackson-annotations, jackson-bom, jackson-core, jackson-databind, jackson-jaxrs-providers, jackson-modules-base, jackson-parent, java-21-openjdk, java-21-openjdk-portable, jupyterlab, kryoptic, luksmeta, mingw-cfitsio, mingw-expat, mingw-freetype, mingw-glib-networking, mingw-harfbuzz, mingw-qt5-qtbase, mingw-qt5-qtdeclarative, mingw-qt5-qtwebkit, mingw-qt6-qtbase, mtools, NetworkManager-l2tp, nginx, nginx-mod-brotli, nginx-mod-fancyindex, nginx-mod-headers-more, nginx-mod-js-challenge, nginx-mod-modsecurity, nginx-mod-naxsi, nginx-mod-vts, nodejs-pnpm12, pcre2, perl-Spreadsheet-XLSX, pie, python-boto3, python-botocore, python-joserfc, python-jupyter-builder, python-jupyterlab-server, python-jupytext, python-nbdime, python-notebook, python-s3transfer, python3.12, rccl, rsync, rust-blake2b_simd, rust-blake3, rust-constant_time_eq, rust-lzma-rust2, rust-ppmd-rust, rust-regorus, rust-sccache, rust-totp-rs, rust-typed-path, rust-zip, rust-zip0.6, rust-zip2, sofia-sip, suricata, wordpress, and xen), Mageia (gimp, python-gitpython, and suricata), Red Hat (osbuild-composer), Slackware (httpd), SUSE (bind, brotli, ca-certificates-mozilla, chromedriver, containerized-data-importer1.65-api, corepack24, docker-compose, flatpak, fuse-overlayfs, git-lfs, gitoxide, go1.27, google-cloud-sap-agent, google-guest-agent, gotosocial, kubevirt1.8, kubevirt1.8-container-disk, kubevirt1.9-container-disk, libmariadbd-devel, libntpc1, libopenscap33, libsndfile-devel, libspice-server-devel, libtirpc-devel, matomo, mihomo, mozilla-nss, nano, nmap, nodejs22, perl-Mozilla-CA, python-Brotli, python-CairoSVG, python-certifi, python313-Pillow, rsyslog, stgit, and thunderbird), and Ubuntu (python-tornado).

• Asahi Linux 7.3 progress report
  The Asahi Linux developers have put out a new reporton their progress toward a Linux distribution for Apple devices.
  Some time ago, we were made aware of multiple attempts to exploit our permissive licensing to hijack our work, with a direct view to replacing the project and aggressively monetising Linux on Apple Silicon. In some extreme cases, in-development feature code was being lifted straight out of our personal forks and published without attribution or lazily rewritten with LLM assistance to obfuscate its origin. The MIT licence explicitly allows this, and has no carveouts to protect against bad faith actors.
  As such, we made the difficult decision to begin the process of transitioning all of our repositories to the GNU General Public License version 2 or later. Going forward all Asahi Linux code will be licenced under strong copyleft licences only. Those who do not learn from history are doomed to repeat it.

• Amutable Foundations: A Technical Overview
  Lennart Poettering, Michael Vogt, and Joaquim Rocha have put together adetailed overview of what the Amutable Operating System (AOS) andassociated infrastructure will look like.
  The image-based OS approach enables us to enforce some very strict but powerful security properties, which elevate the security posture of the system substantially above traditional Linux systems. Specifically, let's highlight seven major essential security properties of AOS here: No Shell + No SSH + No Language Interpreters. By default AOS does not install a UNIX shell, nor makes remote access via SSH available on the nodes. Moreover, we do not install any of the usual language interpreters (Python, Perl, …) by default. For most nodes a shell or interpreted language support is not required and it removes a whole class of attacks. Signed Images Only. On AOS only images that come with Verity data signed by a signing key listed in the Verity keyring may be activated. [...]

• Videos from XDC 2026 are available
  Videos from the 2026 X.Org Developers Conference (XDC) are now available on YouTube. XDC was held in Toronto, Ontario, Canada September 28-30.

• The Evolution of Commercial Open Source Software
  The Early Days

• AMD EPYC 9006 Venice vs. NVIDIA Vera Benchmarks For HPC Performance
  Yesterday in the AMD EPYC 9006 "Venice" SP7 launch testing were reviews of the AMD EPYC 9996 256-core processor as well as the EPYC 9686F 96-core high frequency part. There were hundreds of benchmarks looking at the gen-on-gen performance from EPYC Turin to EPYC Venice as well as against the Intel Xeon 6 Granite Rapids competition. For those wondering about how AMD EPYC Venice is competing with0

• OSM dev board supports NXP i.MX and Qualcomm IQ615 SoCs
  Tria Technologies has unveiled its OSM-SB-EP5, a 146  102mm development platform supporting Open Standard Module (OSM) Size-S, Size-M, and Size-L modules. The carrier board combines dual Gigabit Ethernet, USB 3.0, MIPI camera and display interfaces ti intended for industrial IoT, edge AI, robotics, and embedded vision development. Introduced at electronica 2026, the OSM-SB-EP5 follows0

• Tails 7.17 Privacy-Focused Linux Distro Updates Tor Browser and Linux Kernel
  The privacy-focused Tails 7.17 Linux distro updates Tor Browser, Tor client, and the Linux kernel, with automatic upgrades from version 7.0 onward.

• The AI-Assisted Linux Driver for DisplayLink Gets Legal Notice
  Mike Lothian got Vino working on three generations of DisplayLink docks, but Synaptics told him to take it down.

• Flipper One Linux handheld rocks RK3576 with SDR and cellular options via M.2
  Flipper Devices is preparing a Kickstarter campaign for its Flipper One,! a portable Linux computer powered by an octa-core Rockchip RK3576 processor and a Raspberry Pi RP2350 microcontroller. The handheld combines 8GB LPDDR5, Wi-Fi 6E, dual Gigabit Ethernet, and M.2 expansion for cellular modems, SDR modules, and other peripherals. The Rockchip RK3576 combines four Arm0

• Distro of the Week: Fedora 45 Workstation/KDE Plasma
  Like clockwork, the semi-annual Fedora Project release - this one Fedora 45 - pops up on our radar.This week you get a two-fer, in the form of road-testing both Workstation (a.k.a. Gnome 51) and the KDE Plasma version. As you might expect, both excelled but we picked one over the other..

• Agama Unattended installation openSUSE Tumbleweed via profile.json on remote host (bare metal )
  Unattended openSUSE Tumbleweed deployments on bare metal are critical because they eliminate manual intervention, ensure configuration consistency, and drastically reduce provisioning time across physical infrastructure. While Tumbleweed is a rolling-release distribution - traditionally favored by developers and power users on personal machines - deploying it at scale on bare metal using unattended methods providing by Agama Installer serves several vital engineering and operational purposes:

• Tumbleweed ARM Monthly Update - November 2026
  This past month has brought several software package updates for openSUSE Tumbleweed ARM with less than a handful of snapshots reaching the ARM port. The second half of October brought a two-version jump of GRUB2 to 2.16 with serial console and NVMe boot features, a security-focused Linux kernel 7.2.11 and0

• Nautilus file manager may section headers
  Nautilus might be getting a neater way to organise its file views, with section headers breaking up long lists of content into groups. GNOMEs Christian Hergertr recently added support for section headers to GTKs gridView, the widget Nautilus (among other apps) use to display items, noting it is useful for organising items being displayed. Nautilus developer Peter Eisenmann commented to say he0

• Anthropic tiptoes into MS Office territory
  Sheets, Whiteboards, and Data artifact types bring Claude closer to a productivity suite

• 14-year-old creates tool for AI agents to band together like a team
  Autark can act without constant prompting, but leaves users to enforce their own security boundaries

• High Tide (Linux TIDAL Client) adds playlist editing, artist blocking + more
  A new version of High Tide, an unofficial TIDAL music streaming app for Linux built with GTK4/libdwaita, is out. Hight Tide 1.6.0 plumbs in support more features found in the paid streaming services official clients, including the ability to block artists and tracks for appearing in playlists or auto-play queues, with a new preferences panel to see and manage your blocks. Play buttons are now0

• Zucks Minions Ban Me From Posting to Facebook0 Because DistroWatch & Lunduke???
  Sharing Linux release announcements is apparently a cybersecurity threat. Fortunately, Facebooks keeping an eye on me to make sure that doesn't happen again.

• KORA Announced As Linux Desktop OS "For The Age of Intelligence"
  Backed by Samsung, Square Enix, and others, KORA Systems announced KORA OS today as a Linux distribution built for the age of "intelligent PCs"0

• openSUSE Tumbleweed Transitioning To Agama Installer
  With openSUSE Leap making use of the modern Agama installer developed by SUSE engineers, the rolling-release openSUSE Tumbleweed is now preparing to make the same transitioning in replacing the YaST Installer0

• Blender 5.3 Released with Gaussian Splatting, Vulkan by Default
  Blender 5.3 adds native Gaussian Splatting support, enables Vulkan by default on Linux, and improves rendering, animation, and video editing.

• KDE Plasma 6.8.3 Released with More Improvements for Multi-Monitor Setups
  The KDE Project released KDE Plasma 6.8.3 today as the third maintenance update to the latest KDE Plasma 6.8 desktop environment series, with more bug fixes and various improvements.

• RPM v6 Format Approved For Fedora 46, ThinLTO Flag Rejected
  With Fedora 45 having shipped last week, developers are turning more of their attention to Fedora 46 that will debut by the end of next April0

• I Tried The Weird New Mini Window Feature in Firefox 160
  An early version has arrived with Firefox 160, letting you move a tab or a selected part of a page into its own mini window. Does that serve any purpose?

Error: It's not possible to reach RSS file http://services.digg.com/2.0/story.getTopNews?type=rss&topic=technology ...

• Ukraine Strikes Cause Permanent Data Loss at Russia's Yandex Cloud
  Russia's Yandex says 2.84% of customer data has been permanently lost following Ukrainian strikes on data centers in the country. "According to the company, recovery is impossible because of critical damage to equipment and the lack of backup copies on the platform," reports UNITED24 Media. From the report: Yandex clarified that customers who had previously enabled the platform's backup tools did not experience any data loss, as their information remained fully preserved. The incident has prompted the company to revise its approach to data protection and disaster recovery, particularly the default settings for cloud infrastructure. Under the updated policy, automatic backups will be enabled by default whenever customers create new virtual machines on Yandex Cloud. Users will retain the option to disable the feature manually through the management console. In addition to changing its backup policy, Yandex Cloud announced the launch of a new availability zone, designated ru-central1-f. The new availability zone operates from a separate location, improving the resilience and reliability of the services. The report says Ukrainian drones targeted three Yandex data centers in Russia over four days, beginning October 8 with a strike on a facility in the Ryazan region that houses two of the company's three supercomputers. A second attack hit Yandex's largest data center in the Kaluga region on October 9, followed by a third strike on October 11 targeting a facility in the Vladimir region that houses the company's remaining supercomputer.
  
  
  Read more of this story at Slashdot.
  

• Court Says Trump Can't Use Leaks To Justify Spying On Journalists' LinkedIn DMs
  An anonymous reader quotes a report from Ars Technica: The Trump administration's fight to stop suspected leaks of top-secret military information on LinkedIn can't sweep in "a vast number of confidential sources" of random journalists "who have no conceivable relationship" to the Department of Justice's investigation, an appeals court ruled (PDF) Tuesday. The order came after the DOJ asked LinkedIn to turn over 18 months of communications from targeted journalists who collectively published more than 1,000 articles on many different topics over that time period. The request was not limited to journalists involved in a controversial report from a news outlet that Trump said exposed confidential military information in a foreign country. (The outlet is not being named to protect national security secrets.) Instead, the DOJ cast a wide net, requesting extensive LinkedIn data on journalists who had any possible link to the journalists around the time the report was drafted. The majority of journalists have LinkedIn accounts and publish their contact information to encourage sources to connect on the platform, LinkedIn argued. So allowing that government overreach went beyond harming targeted journalists and threatened to undermine a critical platform where journalists frequently connect with confidential sources, judges ruled. Even more concerning, the Trump administration secured a secrecy order barring LinkedIn from telling anyone about the sweeping request for a year. That left journalists unaware for far too long that their First Amendment rights had been compromised, judges ruled. "A request by the government to scoop up reporters' records wholesale and ascertain the identity of their sources would tip the balance against informed discourse in a manner inimical to democratic health," Wilkinson wrote. He criticized the lower court for approving the request simply because the records were technically feasible to collect, emphasizing that "serious security and speech claims are in tension in this case. There is space under law for both." While declining to quash the order entirely, Wilkinson also directed the lower court to reconsider a limited exception to the government's secrecy order that would allow LinkedIn to notify an attorney representing the news outlet under investigation. Bruce D. Brown, President of The Reporters Committee for Freedom of the Press (RCFP), celebrated the ruling, saying: "This ruling is a big deal and will quickly become one of the leading opinions in the area -- one we will be quoting from it for a long time. The court recognized that confidential sources are the 'lifeblood' of investigative reporting and that dragnet demands from technology companies to reveal those sources violate the law."
  
  
  Read more of this story at Slashdot.
  

• Logitech Giving All 7,000 Employees the Day Off to Play GTA 6
  Under a new "Logi Game Day" initiative, Logitech is giving all 7,000 of its employees an extra paid day off to play GTA 6 when it launches on November 19. Employees and interns can use the day off anytime over the next year. Tom's Hardware reports: As for Logitech, the company believes that it's time for people to move away from the belief that playing games is a waste of time, hence its new initiative. It makes sense for a company that makes gaming accessories to say that, of course, but CEO Hanneke Faber argues that the company sees "how engagement in one sphere supports performance in the other." The hope will be that, by allowing employees to play games, a productivity boost will follow.
  
  
  Read more of this story at Slashdot.
  

• Apple Is Killing Its Support Community Forum Next Week
  Apple is shutting down its Apple Support Community forum on November 20, ending a user-to-user support platform whose history stretches back to the 1998 launch as the Apple Tech Exchange. The forum is already read-only, and Apple has not said whether the nearly three decades of community posts will be preserved or disappear when the site closes. Here's the full banner notice that's currently displayed on the website: "The Apple Support Community will permanently close on November 20, 2026. Starting today, the site will no longer accept new posts and is available in a read-only state. You can continue to find trusted guidance and support on the official Apple Support site. We want to thank the community members who have contributed their time and expertise to help others with their Apple products." Apple told MacRumors that it decided to sunset the forum after a careful evaluation of strategy and customer needs.
  
  
  Read more of this story at Slashdot.
  

• Amazon's Ring Unveils Flying Drone and Robot To Patrol Homes and Businesses
  An anonymous reader quotes a report from CNBC: Amazon's Ring is going deeper into surveillance with an indoor drone for home monitoring and an autonomous robot designed to patrol businesses. The company on Tuesday unveiled the $250 Ring Drone Cam, a security camera that can fly from room to room, including upstairs, as well as capture footage during the day or at night. When an alarm or sensor on windows, doors and home security devices is triggered, the textbook-sized drone travels a preset path to investigate suspicious activity. Users can also deploy the drone at any time, the company said. [...] The company on Tuesday also debuted the $1,000 Ring Rover Cam. The device repurposes Amazon's Astro home robot, which had a short life as a business device and has seen few upgrades since its 2021 debut, for companies to use to patrol offices, warehouses and other workspaces. Ring said it "leveraged the best of Astro" to build the Ring Rover Cam, which it describes as a "purpose-built security robot." Similar to the Astro, the device is a display mounted on a two-wheeled base with an extendable periscope camera. It also features a "built-in siren," two-way audio and a "light tower" that shines onto the ceiling to help users keep track of its whereabouts. The Ring Drone Cam ships in the U.S. on Jan. 27, while the Ring Rover Cam will begin shipping to users on Dec. 16.
  
  
  Read more of this story at Slashdot.
  

• GTA VI Is Now Available For Preloading
  Ancient Slashdot reader Lank writes: GTA VI is now available for preloading. The download weighs in at a whopping 210+ gigabytes on the PS5! Start downloading now and remember to take Nov. 19th off from work. "On Xbox, preloads for digital versions went live at 12 a.m. GMT on November 10 for Series X and Series S, which translates to 7 p.m. EST / 6 p.m. CST / 5 p.m. MST / 4 p.m. PT on Monday, November 9," notes PCMag. "For PlayStation 5 and PS5 Pro owners, preloading started on Tuesday, November 10 at midnight local time." "If you ordered a physical copy of GTA 6, games will begin arriving at retailers and shipping to buyers on November 12. You can use the code in your box to preload your copy of the game."
  
  
  Read more of this story at Slashdot.
  

• US and Rest of World Must Follow China's Lead On Green Energy, Says John Kerry
  Longtime Slashdot reader AmiMoJo shares a report from The Guardian: China is leading the world in moving away from fossil fuels, and the rest of the globe -- including the US -- must now follow, the former US secretary of state John Kerry has told the Guardian, as Cop watchers wonder exactly how China is going to approach this year's climate summit. As Cop31 opens -- this year the climate conference is in Turkey -- there is plenty of speculation about whether China will finally step into the leadership role that it has long avoided. In its latest "five-year plan" adopted in March 2026, China for the first time pledged to "actively participate in and lead global climate governance". Cop31 could provide the first indications Beijing is ready to put that rhetoric into action, something it has historically been reluctant to do. In 2025, clean-tech exports surpassed $220 billion, and they should grow again this year; the world's largest emitter is now the world's leading supplier of clean energy technology. China accounts for about 85% of solar and 80% of lithium-ion battery supply chain production capacity, and in 2025, nearly 75% of electric cars were manufactured there. Smart moves now by China would position it as a linchpin in a future electrostate world order, persuade rivals to cooperate, and solidify its influence in the global south. "The only country that has hugely accelerated is China," said Kerry. "The rest of the world is stumbling along while Mother Nature is sending us more powerful signals every week, every day." "[China] realized suddenly they had way too much dependency on oil and gas from other places, and they decided they needed to be independent. Other countries, since the war in Iran, and since the strait of Hormuz has been interrupted, have made a similar decision, and they're moving independently. There's been a massive uptick in deployment of renewables. Thank you, Donald Trump." For autocratic states without free and fair elections, seeing the economic benefits reaped by China would be the spur to adopt low-carbon growth, he added. "They'll see where the market is going, and they will recognize where the cheaper alternatives are. Even they can read a spreadsheet, and understand where costs are exorbitant [in fossil fuels], and where you have a better deal," Kerry said. "Right now, renewables together with storage, together with some transitional gas, is cheaper and more effective, than just going with fossil fuels." He added: "The marketplace has made its decision and globally is moving to electrons, and electrostate status. People are going to electricity and they're going to try to do that as clean as humanly possible. That's the choice that I see being implemented in many different places. It is unstoppable."
  
  
  Read more of this story at Slashdot.
  

• M John Harrison Becomes First Sci-Fi Author To Win Booker Prize
  An anonymous reader quotes a report from The Guardian: Eighty-one-year-old M John Harrison has won the Booker prize for The End of Everything, a postapocalyptic novel set on a near-future Kent coast, becoming the oldest winner in the award's history. Gaby Wood, chief executive of the Booker Prize Foundation, said that while plenty of previous winners had dabbled in science fiction, Harrison's was "the first Booker winner to have emerged from the bona fide SF world." She called it "a historic win, for a writer whose decades of work are lightly worn on every page". Harrison, who has been publishing for six decades, overtakes Margaret Atwood, who was 79 when she shared the prize in 2019 for The Testaments. He received the 50,000-pound award and trophy at a ceremony in London on Monday evening. The End of Everything, Harrison's first Booker nomination, is set a few decades from now, years after a disaster nobody can properly account for. Set on the Kent coast, the novel sees Phillip Tennent and his ageing aunt Marnie attempting to survive alongside the looming threat of the mysterious iGhetti: vast, shape-changing beings whose origins and intentions are never explained. At 198 pages, it was the shortest book on the shortlist. Mary Beard, chair of the judges, said the decision was unanimous, reached after a full day of discussion. "It's a book that turns you upside down, raises a wry smile -- and surprisingly, given the subject matter, leaves you with a twinge of optimism," she said. "One main point of the book is that if, or when, such an apocalypse comes it will be incomprehensible. And the old rules won't matter either This is the politics of now seen through the lens of the future."
  
  
  Read more of this story at Slashdot.
  

• Google Fi Brings Back Network Switching With 'Secondary' Partner
  Google Fi is bringing back network switching through an unnamed "secondary" 5G carrier. "Most users will be on the 'Primary network,' but Google Fi will automatically switch users to the 'Secondary network' if it meaningfully improves performance with so-called 'smart thresholds' for doing so," reports 9to5Google. "At launch, there is no manual switching." When Project Fi first launched the service included support with both Sprint and T-Mobile. That went away when T-Mobile acquired Sprint in 2020. 9to5Google reports: Google is not naming the second network today, but did share that Ultra Wideband is supported. Officially, you are switching between "two of America's fastest 5G networks." Fi Wireless does note that users have top priority, so data is never deprioritized on the Primary network. Meanwhile, there's "highest QCI priority" on the backup network that means subscribers are among the last to be slowed down when there's congestion. This is also available internationally when local partner networks are available with the Flexible and Unlimited Premium plans. Network switching will first be supported on Pixel 9 and newer devices that have a Google Fi eSIM (and no other SIM active). It makes use of Android's Multiple Enabled Profiles (MEP) eSIM technology that allows for two carrier profiles on a single chip. [...] These Google Fi updates start rolling out today, with network switching seeing gradual availability.
  
  
  Read more of this story at Slashdot.
  

• Fireworks AI Confirms Wider Breach Affecting Notion AI Chats
  Fireworks AI says its October breach was broader than initially disclosed, with attackers gaining access to customer account and billing information as well as some datasets, incomplete model weights and secrets. Notion, the popular productivity and note-taking app, disclosed that it was impacted in the breach but "fewer than 1% of Notion workspaces" were involved. "Upon analysis of the new data, we discovered that it included Notion AI chat transcripts used for the Insights feature, which for the vast majority of impacted workspaces were unattributable," it said. "'Unattributable' means the chats weren't labeled with who wrote them or which workspace they came from, and the transcripts did not contain tool call results." The Hacker News reports: In a notice published on October 10, 2026, [Fireworks AI] said it detected unauthorized use of internal Fireworks credentials that allowed an unauthorized third-party to access environment variables used in evaluation jobs in a limited number of customer accounts. The activity was detected on October 6, 2026, at 9 a.m. PDT. [...] The latest bulletin from the company reveals that the scope of the breach may have been broader than previously thought. The company said attackers reached its development environment via an unnamed third-party cloud provider that hosted Fireworks research and development (R&D) machines on October 23, 2026. "On October 24, the unauthorized third party used it to reach Fireworks development machines and then run an unauthorized workload that led to additional customer data impact," it added. "As of October 25, we have not detected further evidence of successful unauthorized access by the threat actor on the Fireworks platform customers use." The breach is said to have provided access to the following types of information: [Resource metadata; Billing information; and Model weights and datasets]. Fireworks AI said payment card numbers are not stored by the company and were not impacted by the security incident. It also said it's alerting customers whose data was impacted.
  
  
  Read more of this story at Slashdot.
  

• New York Launches Nation's First State AI Testing Program
  New York is launching a state-backed AI safety research center at Binghamton University that will independently study and test AI systems, develop safety and security techniques, and train researchers in responsible AI. "While the federal government fails to act, New York is leading the way on AI safety and holding big tech accountable," New York Gov. Kathy Hochul said. "The stakes are too high to simply take AI companies at their word." Politico reports: The center -- which is funded by a $30 million gift from Bloomberg co-founder Tom Secunda and a $25 million research investment from SUNY and New York state -- is set to launch before New York's major AI safety law, the RAISE Act, comes into effect on Jan. 1. That will require submissions of detailed safety frameworks from AI companies operating in New York State, which Hochul's office hopes will be scrutinized by researchers at the new center. "AI is opening up questions that scientists could not tackle before," said Secunda, who also serves as the board chair of Empire AI, a $500 million public-private partnership. "With Empire AI and researchers across New York, the Center can test systems independently and give public officials evidence they can use." Over 80 leading scientists and researchers on AI systems from across New York state will contribute to the effort, which will be run by the New York Center for AI Responsibility and Research at Binghamton University, according to details shared by Hochul's office. The initiative will be led by Jeannette Wing, the executive vice president for research at Columbia University, and Greg Morrisett, the vice provost of Cornell Tech. "We need new techniques that can be applied to this new kind of system with swarms of autonomous agents acting independently and without control. How can you first detect that they're going to do harm, and how can you prevent them from doing harm?" said Wing. "The beauty of what's being proposed is that this state is committing resources to really light this up."
  
  
  Read more of this story at Slashdot.
  

• Anthropic Launches New Workplace Features To Take On Microsoft and Google
  An anonymous reader quotes a report from TechCrunch: Anthropic announced new workplace features on Tuesday, including Claude Meetings, which brings Claude into video calls to begin working on tasks while participants are still talking. The company also unveiled Claude Whiteboards and Claude Sheets. The launch of Anthropic's new productivity-focused features comes just a few weeks after OpenAI unveiled a series of workplace tools that allow users to collaborate with ChatGPT to do things like visualize company information and create presentations, as both companies compete to turn their products into office suites of sorts to take on Microsoft and Google. Meta is also joining the competition with its Muse AI agent, which can build mini-apps on the fly to help users complete specific tasks. Here's a summary of each of the offerings Anthropic announced today: Claude Meetings: Allows Claude to join video calls as a visible participant, take notes, answer questions, retrieve information from connected apps, and create plans, timelines, and action items in real time. Available in beta for Team and Enterprise plans, initially supporting Google Meet. Claude Whiteboards: A collaborative visual workspace where teams can brainstorm with Claude, organize ideas into timelines and plans, and turn their work into documents or slide decks. It also integrates with Claude Meetings to build whiteboards during conversations. Claude Sheets: Lets teams create and collaboratively edit spreadsheets with Claude, including budgets and trackers with multiple tabs, formulas, formatting, and dropdown menus. Claude can make changes directly in cells while explaining its edits. Anthropic also announced the general availability of Claude Data (formerly Claude Dashboards) that connects Claude to business systems like CRMs and data warehouses. "Users can ask questions, and Claude responds with dashboards, written data stories, or narrated videos," reports TechCrunch. Additionally, the company announced new interactive connectors that let users open Claude and work within third-party apps like Adobe, Atlassian, and HubSpot.
  
  
  Read more of this story at Slashdot.
  

• Starlink Mini 2 Adds a Swappable Battery, Wi-Fi 6
  SpaceX has unveiled the Starlink Mini 2, equipping the company's smallest satellite internet terminal with a removable 71Wh battery and Wi-Fi 6. Preorders are opening to select U.S. customers for $999, which also includes a year of Roam Unlimited service. Shipments are expected to begin in mid-December. InterestingEngineering reports: The removable battery represents the biggest functional upgrade over the original Starlink Mini. Previously, users needed an external power source to operate the satellite terminal. That meant carrying additional equipment for camping trips, remote work, or extended journeys. Mini 2 addresses that limitation with a detachable 71 Wh battery pack. It weighs approximately 1.08 pounds (490 grams) and delivers up to 4.5 hours of connectivity. Owners can replace it with another charged battery when necessary. The battery also features LED indicators and its own USB-C charging port. SpaceX supports 60-watt USB-C Power Delivery charging for the pack. The retail kit includes a compatible 60-watt wall adapter and a three-meter USB-C cable. Users can also power the terminal through USB-C without relying on its battery. A physical power button replaces the original model's simpler plug-and-play arrangement. [...] SpaceX has also upgraded the wireless hardware from Wi-Fi 5 to Wi-Fi 6. The integrated router supports coverage across approximately 1,800 square feet (167 square meters). An IP67 rating provides additional protection against dust and water. Other hardware details include a foldable kickstand and a standard 1/4-inch-20 tripod mounting thread. The terminal also offers a 55-degree field of view for satellite acquisition.
  
  
  Read more of this story at Slashdot.
  

• Nintendo Is Officially Investing In Game Preservation
  Nintendo is hiring a digital archivist to help ensure the company's historical records are "preserved for future generations." The 12-month position is tasked with designing and implementing a "structured framework for organizing technical records, engineering documentation, source materials, and institutional knowledge related to legacy systems and platforms." Polygon reports: In the past, Nintendo has drawn criticism from the preservation community. In 2022, the Video Game History Foundation publicly criticized the company for announcing it would be closing the Wii U and 3DS eShops. The foundation released a statement saying that Nintendo's decision was "actively destructive to video game history." The statement also pointed out that Nintendo is part of the Entertainment Software Association, which funds lobbying that prevents a number of preservation efforts.
  
  
  Read more of this story at Slashdot.
  

• Blender 5.3 Released With Nvidia DLSS 4.5 Ray Reconstruction, Vulkan Default
  Blender 5.3 has been released with support for 3D Gaussian Splats, Nvidia DLSS 4.5 Ray Reconstruction and Vulkan as the default graphics backend on Linux. Phoronix reports: Blender now allows importing Gaussian Splats from PLY, SPZ, and glTF files. Also new to Blender 5.3 is NVIDIA DLSS 4.5 Ray Reconstruction support as a new denoiser. Blender 5.3 also brings support for NVIDIA RTX Spark devices. For the Cycles code in Blender 5.3 the Principled BSDF for shader nodes now supports dispersion. Another notable change with Blender 5.3 is the Vulkan back-end now being the default on Windows (except for Windows on ARM) and Linux systems. Vulkan 1.1 or newer is required and should deliver better performance than OpenGL.
  
  
  Read more of this story at Slashdot.
  

• Security: Why Linux Is Better Than Windows Or Mac OS
  Linux is a free and open source operating system that was released in 1991 developed and released by Linus Torvalds. Since its release it has reached a user base that is greatly widespread worldwide. Linux users swear by the reliability and freedom that this operating system offers, especially when compared to its counterparts, windows and [0]

• Essential Software That Are Not Available On Linux OS
  An operating system is essentially the most important component in a computer. It manages the different hardware and software components of a computer in the most effective way. There are different types of operating system and everything comes with their own set of programs and software. You cannot expect a Linux program to have all [0]

• Things You Never Knew About Your Operating System
  The advent of computers has brought about a revolution in our daily life. From computers that were so huge to fit in a room, we have come a very long way to desktops and even palmtops. These machines have become our virtual lockers, and a life without these network machines have become unimaginable. Sending mails, [0]

• How To Fully Optimize Your Operating System
  Computers and systems are tricky and complicated. If you lack a thorough knowledge or even basic knowledge of computers, you will often find yourself in a bind. You must understand that something as complicated as a computer requires constant care and constant cleaning up of junk files. Unless you put in the time to configure [0]

• The Top Problems With Major Operating Systems
  There is no such system which does not give you any problems. Even if the system and the operating system of your system is easy to understand, there will be some times when certain problems will arise. Most of these problems are easy to handle and easy to get rid of. But you must be [0]

• 8 Benefits Of Linux OS
  Linux is a small and a fast-growing operating system. However, we can’t term it as software yet. As discussed in the article about what can a Linux OS do Linux is a kernel. Now, kernels are used for software and programs. These kernels are used by the computer and can be used with various third-party software [0]

• Things Linux OS Can Do That Other OS Cant
  What Is Linux OS?  Linux, similar to U-bix is an operating system which can be used for various computers, hand held devices, embedded devices, etc. The reason why Linux operated system is preferred by many, is because it is easy to use and re-use. Linux based operating system is technically not an Operating System. Operating [0]

• Packagekit Interview
  Packagekit aims to make the management of applications in the Linux and GNU systems. The main objective to remove the pains it takes to create a system. Along with this in an interview, Richard Hughes, the developer of Packagekit said that he aims to make the Linux systems just as powerful as the Windows or [0]

• What’s New in Ubuntu?
  What Is Ubuntu? Ubuntu is open source software. It is useful for Linux based computers. The software is marketed by the Canonical Ltd., Ubuntu community. Ubuntu was first released in late October in 2004. The Ubuntu program uses Java, Python, C, C++ and C# programming languages. What Is New? The version 17.04 is now available here [0]

• Ext3 Reiserfs Xfs In Windows With Regards To Colinux
  The problem with Windows is that there are various limitations to the computer and there is only so much you can do with it. You can access the Ext3 Reiserfs Xfs by using the coLinux tool. Download the tool from the  official site or from the  sourceforge site. Edit the connection to “TAP Win32 Adapter [0]

• Haiku gets multifinger touchpad taps
  Were almost halfway through November, but we hadnt seen Haikus monthly activity report for October yet. Its here now, and theres quite a few good things in here, like support for two and three-finger tap gestures on touchpads for right and middle-click, a new driver that adds Universal Flash Storage support, and even some build fixes for Haikus SPARC port as well as some fixes on the RISC-V side. Of course, thats just a selection, as theres the usual long list of smaller changes, bugfixes, and improvements as well.

• Microsoft releases .NET 11
  Today, we’re excited to announce the release of .NET 11! This year’s release makes building modern applications faster, more productive, and has improvements across C# 15, ASP.NET Core, .NET MAUI, and Windows development. With hundreds of runtime optimizations, more responsive SDK tooling, and less overhead in everyday commands, you can spend less time waiting and more time creating. Build richer web and cross-platform applications, take advantage of new C# language features, and explore AI-powered development with improved tools and agentic capabilities. ↫ .NET Team Im not going to pretend to care about .NET, but I know many of you have to care on a professional level, because .NET is remarkably popular in places where the spotlights dont often shine.

• What if any process could handle SIGKILL?
  An interesting question, and a detailed technical rundown of how to make this happen, which involved building a custom Linux kernel, of course. I really, really enjoy the conclusion. And you know? It turned out fine. Nothing exploded on my system. As I could predict, because this was otherwise impossible, nobody did it. The signal system was setup in such a way that you would most likely realize something you were doing was wrong, and not try it. To pull back further, it is interesting to notice how the rules we all take for granted are just set somewhere in code. They were written by someone, at some point. If there is code restricting you from doing something, someone wrote it. Either they did not think anyone would want to do that thing, or they specifically prevented you from doing it. Those rules are written somewhere, and you can take it in your paws to go sniff around the code, pull out the relevant parts, and hack around the things that bother you. For fun, learning, or convenience. Snoop around. Sniff code. Put your paws in it. Hack shit. ↫ lux at VulpineCitrus Even if theres no real reason to do, even if its just to satiate an odd and possibly slightly morbid sense of curiosity, fuck with code.

• OpenIndiana Hipster 2026.10 released
  OpenIndiana is a rolling-release illumos distribution, but they do release snapshots twice a year to serve as a base for installations, which they call Hipster. The projects just released OpenIndiana Hipster 2026.10, and it brings a number of welcome changes. First, theres UEFI framebuffer support on the live image, which is automatically configured when loading up the image. Second, Firefox and Thunderbird versions have been bumped to 159.0, and a whole slew of development tools have been updated to newer versions as well. This snapshot also brings QEMU 11.1.2 and VirtualBox 7.2.22, and a number of new applications have been added as well. In addition, SPARC build support has been improved to enable new and updated packages for Suns dead ISA as well. You can download a fresh image, or update an existing installation through IPS.

• Making musl and proprietary NVIDIA drivers work together
  Creator and lead developer of Chimera Linux, Nina q66!, write about their efforts to get NVIDIA drivers to work properly on musl-based distributions. As you may be aware, one of the limitations of musl-based distributions is that they will not function to their proper extent when used in computers with various NVIDIA graphics cards. This is due to the proprietary nature of the driver, being built for glibc. I have been experimenting with trying to make this work, and this post is the summary of that effort. ↫ Nina q66! on the Chimera blog What follows is a deeply technical exploration of the problem, and the steps Nina q66 and the Chimera team are taking to try and fix it. With how popular and widespread NVIDIA hardware still is, this is a hugely important issue to try and address, and Im grateful theyre trying to address it.

• MorphOS 3.21 released with new office suite
  About five months after the previous release, the MorphOS team has released MorphOS 3.21. It brings the usual list of big fixes and smaller improvements, but theres a few big ticket items in here as well. MorphOS 3.21 introduces BasicWorks, an office suite made up of CellBasics and PageBasics. It offers document and spreadsheet authoring and loads and saves Microsoft Office and OpenOffice documents. Also new are NVMEMount, an auto-mounter for booting from and mounting NVMe partitions, and the Marbles and Cyber 3D blankers. Graphics performance has been improved, with a faster Radeon driver on cards with little video memory thanks to GART backed bitmap transfers, quicker TinyGL texture copies, hardware accelerated antialiased text in TTEngine and much faster color SVG glyph rendering in Cairo. The Bcm43xx wireless driver has been substantially reworked, with automatic transmit rate selection, updated firmware and numerous connection fixes. PowerBook and iMac hotkeys are now fully configurable. ↫ MorphOS 3.21 release announcement The BasicWorks office suite has been in the works for a while now, and more information on it can be found in a thread on the MorphZone forums and on the website for the spreadsheet component of the suite, CellBasics. The formula loaders and xlsx loaders are ports of open source projects, but the rest of the application is new code based on ObjectiveC++ and Cairo/Harfbuzz. It uses its own file format, but can import csv and xslsx files, so Im assuming the same more or else applies to the word processor (but with docx, of course). Alongside MorphOS 3.21 also comes a new release for Wayfarer, the web browser the Amiga-inspired operating system uses. Wayfarer 12.0 moves to WebKitGTK 2.52.5 (which was released in July of 2026, so its quite up to date), and now uses the Skia graphics library. R300-R500 Radeons will render websites with Skia-GL for some massive performance improvements, helped further along by a slew of additional performance optimisations. Adblocking has been improved as well, YouTube should work a lot better now, and much more. The full release notes for MorphOS 3.21 give you all the details.

• The port that does not exist
  Ask any program to listen on port 0 and it will hand you a socket on port 471930or 580370or whatever the kernel felt like that day. Port 0 is not a port you can have. It is the number you pass when you want the operating system to pick one for you. But a TCP header is just bytes. The destination port field is 16 bits wide, and 0x0000 fits in 16 bits as well as anything else does. Nothing on the wire stops a packet from being addressed to port 0. Your tools will refuse it, your browser will block it, and your scanners default port list skips it, because everyone agrees it isnt a real port. Which makes it a pretty good place to hide things, whether anyone meant to or not. So we did some TCP cowboy shit 8 port scanned the entire fucking internet for open ports on port 0, which uncovered some interesting unexpected findings. ↫ acidvegas An awesome and entertaining read. Dont skip this one.

• Windows 11 27H2 might be a more substantial upgrade
  A little tidbit of news regarding the nest major update to Windows, known as Windows 11 27H2. Apparently, its going to come with some more serious changes to the codebase, therefore necessitating a full operating system swap instead of a mere enablement package, much like Windows 11 24H2 was. For those who need a refresher, Microsoft has long been rumored to be running on a three-year release cadence and for a while, it was even thought that the company would launch Windows 12 in 2H 2024. That evidently didnt happen, as instead we got Windows 11 24H2, but it was a major upgrade, a full OS swap compared to Windows 11 23H2 and 22H2. Essentially, it looks like every three releases, Microsoft is performing a full swap with major changes in the underlying codebase, and it seems to line up with Windows 11 27H2 as well. At the moment its not known if system requirements will change or not. ↫ Sayan Sen at Neowin.net Microsoft is currently testing adding support for Intels Advanced Performance Extensions, which should yield improved 64bit performance and reduced power consumption. It makes sense to assume this support will be coming with Windows 11 27H2, which should hopefully lead to tangible performance improvements across the board. Also, theres going to be a new default wallpaper. Be still my beating heart.

• The Ubuntu 26.04 Rust sudo is not compatible with standard sudo
  Ubuntu has been at the forefront of replacing the traditional versions of basic tools like sudo with replacements written in Rust, but aside from worries about replacing battle-tested code with brand new, relatively untested code, theres new things to worry about it. As it turns out, sudo-rs, the Rust replacement for sudo, is intentionally incompatible with the classic version in dangerous ways, as Chris Siebenmann discovered to his dismay. Basically, the classic sudo supports the use of wildcards defined using square brackets, so that if you allow a user to run, say, /usr/sbin/exim -bp, without a password, they can run exim -bpa, exim -bpc, exim -bpr, or exim -bpu without having to supply a password. This allows for very specific, fine-grained access control, which is quite a nice capability to have if youre managing many systems and users. Sadly, sudo-rs intentionally does not support this, opting to only allow you to use the generic * wildcard. Worse yet, it doesnt really make this clear, either. ↫ Chris Siebenmann I do not really have words for this. The Rust sudo has apparently opted to keep the single most dangerous wildcard while disallowing all of the wildcards that allow one to be narrow and specific about what youre allowing, and it buries this at the end of a section that devotes a bunch of words to describing functionality it doesnt have and doesnt support, with absolutely nothing else in that section to say this (either up front or in the descriptions of how all the wildcards would work if sudo-rs supported them, which it doesnt). If youre going to replace such vital, core tools like sudo that god knows how many people rely on every single day, you better be damn sure youre feature-complete and can act as a drop-in replacement. If someone switches from sudo to doas, nobody expects the experience to be identical. However, if youre consistently being told that sudo-rs is a drop-in replacement and you shouldnt expect any disruptions, you better be able to make true on that promise. Ubuntu isnt some also-ran small hobby distribution, and its developers should act like it. What a clown show.

• LXQt 2.5.0 released
  The second desktop environment release Ive got for you today is LXQt 2.5.0. This new version excises its last LXDE dependency, and QTerminal and QTermWidget received considerable improvements, like new background image modes, a visual bell, support for OSC-8 hyperlinks, and more. Theres a ton of smaller changes and improvements as well, but do note that due to a bug, 2.5.0 broke LXQts Monitor Settings on X11. The project intends to fix this as quickly as possible and push a point release to address this issue.

• Cinnamon 6.8 desktop environment released with hibernation support
  Its desktop environment Thursday, as Ive got two new releases for you today. First, Cinnamon, the desktop environment primarily associated with Linux Mint, has hit version 6.8. This version will officially ship with Linux Mint 27, scheduled for around Christmas of this year. Highlights of Cinnamon 6.8 include hibernation support via a Suspend action in the main menu, modern one-to-one trackpad gestures for both Wayland and Xorg sessions, support for the oo7 Secret Service provider, support for multiple instances in the Sound applet, and a more unified Network applet that merges the WireGuard and VPN sections. ↫ Marcus Nestor at 9To5Linux While Cinnamon is first and foremost a Linux Mint project, its available on countless other distributions as well, including dedicated variants for popular distributions like Fedora and Ubuntu. Its Wayland support is finally materialising too, which is long overdue.

• NetBSD 11.1 released
  The first point release for NetBSD 11 has been released. As the version number suggests, theres no major changes here. This release includes security updates for mozilla-rootcerts, brotli, xorg-server, hdaudio(4), compat_linux(8), unbound(8), and ipfilter. Among the non-security related changes are improved USB device stability on Raspberry Pi, fixed hot-plugging bugs in various USB Wi-Fi drivers, support for battery monitoring on the Microsoft Surface Go 3, fixed thread-local storage on ARMv5, fixes for running the MIPS Malta and PA-RISC ports under QEMU, support for the Zhaoxin KX-7000 CPU, and support for sensors, i2c, real-time clocks, and fan control on Sun Ultra 25/45 and Sun Fire V215/V245 machines. ↫ Nia Alarie on the NetBSD blog The full release notes provide more details.

• Why don’t we run the taskbar and Task Manager at high priority, so they can remain responsive?!
  Another interesting post from Raymond Chen, this time about the difficulty of dealing with a system thats become CPU-starved. The question is simple: why not just run Task Manager and important parts of the UI like the taskbar at a higher priority? The catch with running anything at high priority is that unless you have been very careful to avoid it, you will eventually run into a shared resource that you will have to wait for, and you are now stuck. Your priority checkout pass gets you to the front of the line, but if the person at the register has a large shopping cart full of groceries, you just have to wait until they are done before you get your chance. Even if the code that protects the shared resource is careful to avoid priority inversion by transferring the priority of the waiter to the thread that owns the resource, you are still stuck waiting, and that owning thread might be doing something that takes a long time, like, say, accessing a file over the network. ↫ Raymond Chen If a system has reached a state where even accessing or using something like a task manager becomes a problem, I personally just bonk my computer over the head with a forced shutdown using the power button. Honestly though, I cant remember the last time Ive had to do this, as my Linux machines all seem to handle problematic applications just fine. That being said, Im sure people managing tons of servers and/or workstations and developers debugging their own running code run into catastrophic problems like this far more often, making forced shutdowns not as practical. Have a terminal window open with top and easy access to the kill command, or make sure you can just ssh into it remotely if the UI has gone completely nuts.

• Jailbreaking my cars navigation system just so I can change the time!
  What if you want to change the time in your cars infotainment system, but its so locked down that you cant even open the time settings menu without a very specific, DRMd SD card? Well, you try to jailbreak it, of course, but the amount of effort required can kind of spiral out of control. And then, all the way at the end, its just an offset. The first thing I did was use this to create a full backup of the internal eMMC using dd. With a more complete dump of the system, I pretty quickly figured out that the date 8 time settings that Im interested in are in /mnt/flash/settings.dat, which is a custom binary format. After some more reverse engineering, it turned out the unit doesnt really have a concept of timezones at all. It gets the time from GPS and stores the local offset as a number of minutes. Mine was set to 180. I changed it to 120. That is how I was finally able to fix my cars timezone. ↫ Rasmus Moorats This harrowing story involved an older car  a 2014 Renault Latitude  but with the number of screens and the amount of user-facing software only increasing every year, requiring jailbreaks to get your car to do what you want it to do are only going to become more common. I wouldnt be surprised if whole generations of cars are going to become much harder to sell in the near future, cratering the used market, because people are not willing to put up with software problems nobody wants to or can fix. He just wanted to change the goddamn time.

• Enlightenment 0.28.0 released
  Enlightenment, the long-running desktop environment and associated libraries and frameworks, just released version 0.28.0. It brings initial support for NetBSD, support for Network Manager and a whole slew of related changes and fixes to make that possible, as well as native PipeWire support. Theres also a brand new clipboard manager, which brings with it modernisations and bug fixes for related UI elements. This release also reworks a ton code related to battery management, AC polling, and more, adding features like setting battery thresholds, ACPI power profile support, and so on. Of course, theres also the long list of smaller fixes and changes. You can download the release and build it yourself, or wait for your distribution of BSD variant to package it.

• GEFS on OpenBSD continues to improve
  A little while ago, we talked about 9fronts Good Enough File System being ported to OpenBSD. A lot of progress has been made on this front lately. Aside from fixing bugs and porting over fixes from the 9front side, theres also been a ton more substantial changes. Some userspace tools have been done (you can now mkfs on openbsd!), but snapshot control hasnt. Im thinking we have a userspace gefs program that lets you handle this, trying to keep the interface similar to the 9front ctl file. ↫ Ori Bernstein Theres still some major hurdles to overcome, some of which have already been addressed on the 9front side, but the progress is clear. Considering OpenBSD desperately needs a more modern file system, this is great news. A fun sidenote is that Im actually posting this news item from OpenBSD.

• Omarchy 4.5 Brings Floating Workspaces, Native Apple Silicon Installation, and a More Flexible Linux Desktop
  by George Whittaker
  The Omarchy project has released Omarchy 4.5, a major update to its Arch Linux-based operating system that introduces traditional floating desktop workspaces, native Apple Silicon installation, expanded ARM hardware support, and extensive customization improvements. Released on November 5, 2026, the update marks one of the distribution's most significant developments since the introduction of Omarchy 4.0.
  
  Known internally as Quattro RS, the release incorporates more than 740 merged pull requests from over 180 contributors during a twelve-week development period. Its most visible addition is a floating desktop mode that allows users to work with overlapping windows and a conventional application dock without abandoning Omarchy's existing tiling and scrolling layouts. The change makes the distribution more accessible to users familiar with Windows and macOS while preserving its keyboard-driven workflow.
  
  Omarchy 4.5 also expands beyond traditional x86-64 computers with native installation support for selected Apple Silicon Macs and preliminary compatibility with NVIDIA ARM-based systems. Additional improvements include localization for 50 languages, new productivity applications, expanded AI agent integration, video wallpapers, updated desktop themes, and numerous fixes affecting graphics, displays, networking, and hardware compatibility.
  Floating Workspaces Introduce a Traditional Desktop Experience
  Omarchy has traditionally emphasized tiling window management through the Hyprland Wayland compositor. In a tiling environment, application windows are arranged automatically within the available screen space, reducing the need to drag, resize, and manually position each window.
  
  This approach can be highly efficient for developers and experienced Linux users who prefer keyboard navigation. However, it can also feel unfamiliar to people accustomed to conventional desktops, where windows overlap freely and applications are launched or minimized through a dock or taskbar.
  
  Omarchy 4.5 addresses this difference by introducing floating workspaces with an integrated application dock. Users can now switch individual workspaces between tiling, scrolling, and floating layouts without changing the entire desktop configuration.
  
  The Super + L keyboard shortcut cycles through these three layout modes. When floating mode is active, application windows receive themed title bars and can be positioned independently, creating an experience closer to a conventional desktop.
  
  The dock displays pinned applications, running programs, and an application grid. Users can rearrange applications through dragging, pin frequently used programs, and access additional actions through context menus. Pressing Super + M minimizes the active window to the dock.
  Go to Full Article

• openSUSE Leap 16.1 Unifies Traditional and Immutable Linux With Transactional Updates
  by George Whittaker
  The openSUSE Project has officially released openSUSE Leap 16.1, introducing a major change to how the distribution can be installed, maintained, and deployed. Released on November 3, 2026, the update brings an integrated Immutable Mode that allows users to install a transactionally updated operating system with a read-only root filesystem, while continuing to offer the traditional Linux installation model.
  
  The new approach also marks the beginning of the end for openSUSE Leap Micro as a separate distribution. Its functionality is now incorporated into Leap 16.1, giving administrators a unified platform for desktops, conventional servers, container hosts, virtual machines, and edge computing environments. Users can select the installation model that best fits their workloads without switching to an entirely different openSUSE product.
  
  Beyond the new installation architecture, Leap 16.1 updates KDE Plasma to version 6.6, retains GNOME 48 with additional maintenance fixes, introduces LXQt 2.4, and continues using the Linux 6.12 long-term support kernel series. The release also expands container tooling, improves system monitoring, updates security components, and introduces changes designed to make enterprise-oriented Linux deployments more predictable.
  Immutable Mode Becomes the Defining Feature of Leap 16.1
  The most important addition to openSUSE Leap 16.1 is its new Immutable Mode, which allows the operating system to use a read-only root filesystem and transactional updates. Instead of modifying the active operating system directly whenever packages are installed or updated, the immutable configuration prepares changes in a separate filesystem snapshot.
  
  This approach differs from a conventional Linux installation, where package managers typically modify files in the active root filesystem. On a traditional system, an update can replace libraries, executables, and configuration components while applications continue running. Although Linux package managers handle these operations carefully, interrupted updates or incompatible package combinations can sometimes leave a system in an inconsistent state.
  
  Immutable Mode reduces this risk by preparing operating-system changes separately from the currently running environment. Updates become active after a reboot, allowing the system to start using a consistent set of packages and configuration changes. If an update introduces problems, administrators can return to an earlier snapshot rather than manually reversing individual package modifications.
  
  The underlying technology is not entirely new to openSUSE. Similar functionality has been available through Leap Micro, which was designed for lightweight, transactionally updated server and infrastructure deployments. What changes in Leap 16.1 is that this operating model becomes an installation choice within the main Leap distribution.
  Go to Full Article

• KDE Plasma 6.8.2 Released With More KWin and Wayland Fixes
  by George Whittaker
  The KDE Project has released KDE Plasma 6.8.2, delivering another round of stability improvements for its Wayland-based Linux desktop environment. Released on October 27, 2026, the update arrives one week after Plasma 6.8.1 and two weeks after the anniversary release of Plasma 6.8, which marked 30 years since the KDE project's founding.
  
  This second maintenance release concentrates on correcting regressions discovered after the initial rollout. The largest collection of changes targets KWin, KDE's window manager and Wayland compositor, with fixes involving multi-GPU synchronization, display handling, pointer constraints, color pipelines, and window stacking. Additional improvements address disappearing desktop icons, application launcher behavior, remote desktop sessions, screen recording, accessibility, and system monitoring.
  
  Although Plasma 6.8.2 does not introduce major new desktop features, its corrections are particularly important because Plasma 6.8 completed KDE's transition away from native X11 desktop sessions. With Wayland now serving as Plasma's display foundation, improvements to KWin and its supporting components directly affect the reliability of the entire desktop environment.
  KDE Continues Stabilizing Its Anniversary Release
  KDE Plasma 6.8 arrived on October 14, 2026, coinciding with the project's 30th anniversary. The release introduced significant desktop changes, including the retirement of native X11 sessions, additional HDR improvements, expanded remote desktop capabilities, NVIDIA graphics optimizations, and further development of KDE's Union theming engine.
  
  The transition represented an important architectural milestone, but major desktop releases frequently expose problems that were not encountered during development or beta testing. Linux desktops must operate across numerous combinations of graphics hardware, display configurations, drivers, input devices, and applications. Even extensive testing cannot always reproduce every environment used by the wider community.
  
  KDE acknowledged this challenge during the development cycle following Plasma 6.8, noting that users had discovered regressions that were not reported during the beta period. Contributors responded with a substantial collection of fixes, many of which have now reached the stable 6.8 branch through its first two maintenance releases.
  
  Plasma 6.8.2 continues that stabilization effort. Rather than changing the desktop's overall direction, it improves the reliability of existing functionality and addresses issues that could affect everyday workflows. The release includes corrections across KWin, Plasma Desktop, Plasma Workspace, Discover, KRDP, KPipeWire, and several other components.
  Go to Full Article

• RefreshOS 3.1 Strengthens Its Debian Foundation With Independent Package Management
  by George Whittaker
  The RefreshOS project has released RefreshOS 3.1, bringing an updated Debian foundation, a dedicated software repository, improved 32-bit application compatibility, and several refinements to its KDE Plasma desktop experience. Released on October 27, 2026, the update advances the distribution's 3.x "Colorful Cosmos" series while introducing infrastructure that could significantly improve how RefreshOS delivers its own packages and configuration changes.
  
  The new release moves from Debian 13.4 to Debian 13.7 "Trixie", incorporates Linux kernel 6.12.113, and continues using KDE Plasma 6.3.6. However, the most important development is the introduction of an official RefreshOS APT repository with separate Stable, Testing, and Experimental channels. This gives the project a more structured way to distribute customized software while continuing to benefit from Debian's established package ecosystem.
  
  RefreshOS 3.1 also enables i386 architecture support, making it easier to install compatible 32-bit software and dependencies required by applications such as Steam. Additional changes address desktop localization, KDE integration, installer configuration, package permissions, and installation image cleanup. Together, these improvements represent an effort to make RefreshOS easier to maintain while preserving its focus on a ready-to-use Linux desktop.
  RefreshOS Builds on Debian's Stable Release Model
  RefreshOS is a Debian-based Linux distribution developed by eXybit Technologies, designed to provide a polished desktop environment without requiring users to configure every component manually. The project combines Debian's stable package foundation with KDE Plasma, preinstalled applications, hardware support, multimedia capabilities, and custom desktop styling.
  
  Unlike distributions that emphasize constant adoption of the newest software versions, RefreshOS prioritizes a relatively predictable desktop experience. Its Debian foundation provides access to established security maintenance, package management, and compatibility practices, while RefreshOS adds its own configuration choices to simplify everyday use.
  
  Version 3.1 continues that philosophy by incorporating Debian 13.7, the seventh point release of Debian 13 "Trixie." Debian published this update on September 12, 2026, primarily to consolidate security corrections and fixes for significant software problems. These point releases do not represent entirely new Debian generations. Instead, they refresh installation media and package selections so newly installed systems begin with a more current collection of fixes.
  Go to Full Article

• Tails 7.15.1 Blocks Compromised HTTPS Certificates in Urgent Privacy Security Fix
  by George Whittaker
  The Tails project has released Tails 7.15.1, an emergency security update addressing a compromised certificate authority that could allow attackers to impersonate legitimate HTTPS websites. Released on October 23, 2026, the update focuses on protecting users against a potentially serious man-in-the-middle attack involving certificates associated with eMudhra, an authority whose intermediate certificates were compromised.
  
  The emergency release updates Tor Browser to version 15.0.26, addressing CVE-2026-113470, and modifies the distribution's trusted certificate authorities to block all eMudhra certificates. These changes are particularly important for Tails because the operating system routes internet traffic through the Tor network, where malicious exit nodes or other network intermediaries could potentially exploit compromised certificates to impersonate secure websites.
  
  Unlike a conventional maintenance update, Tails 7.15.1 does not introduce major desktop features, new applications, or significant interface changes. Its purpose is to close a security gap that could undermine the authenticity of HTTPS connections. The developers recommend upgrading promptly, especially for users who rely on Tails for sensitive communications, anonymous research, journalism, or other privacy-critical activities.
  Why Tails 7.15.1 Was Released as an Emergency Update
  Tails, short for The Amnesic Incognito Live System, is a Debian-based Linux distribution designed to help users preserve their privacy and reduce traces of their computing activity. It typically runs from a USB stick and routes internet connections through Tor, making it useful for people who need stronger privacy protections than those provided by a conventional desktop operating system.
  
  The distribution also emphasizes minimizing persistent data. By default, Tails operates as a live environment and does not retain ordinary session activity after shutdown. Users who need to preserve selected files and settings can configure encrypted Persistent Storage on their USB device, allowing them to maintain important information across sessions without changing the operating system's general amnesic behavior.
  
  Because Tails is built around privacy and secure communication, problems involving HTTPS certificate validation deserve particular attention. Tor helps obscure the relationship between a user's network location and the websites they visit, but it does not automatically guarantee that every website encountered through an exit node is authentic. HTTPS provides an additional layer of protection by authenticating websites and encrypting communications between the browser and the destination server.
  Go to Full Article

• Omarchy 4.0.5 Released With Better NVIDIA Laptop Support
  by George Whittaker
  The Omarchy project has released Omarchy 4.0.5, introducing a substantial collection of hardware compatibility improvements, desktop performance optimizations, security fixes, and package updates for the Arch Linux-based operating system. Released on October 18, 2026, the update focuses on refining the existing desktop experience while preparing the distribution for its next major feature release.
  
  Among the most important changes are improved NVIDIA hybrid graphics support for laptops, an updated Linux 7.2.8 kernel featuring the BORE scheduler, and compatibility improvements for Qt 6.12. The release also resolves boot-related black screens, fixes audio problems affecting certain Dell and USB speaker configurations, corrects Steam graphics driver selection, and improves the reliability of several desktop utilities.
  
  Although version 4.0.5 is primarily a maintenance release, its improvements extend across many of the components that determine how smoothly a Linux desktop operates. From faster application launches and more responsive desktop panels to stronger security defaults and more reliable hardware detection, the update demonstrates Omarchy's continued emphasis on delivering a preconfigured Linux environment that requires relatively little manual setup.
  Omarchy Continues Refining Its Arch Linux Desktop Experience
  Omarchy is an opinionated Arch Linux-based distribution designed to provide a ready-to-use development and desktop environment built around the Hyprland Wayland compositor. Rather than presenting users with a minimal installation that requires extensive customization, Omarchy combines a carefully selected collection of applications, themes, keyboard shortcuts, and system configurations into a cohesive desktop experience.
  
  The distribution has attracted attention among developers and experienced Linux users who appreciate keyboard-driven workflows, tiling window management, and the flexibility of Arch Linux without necessarily wanting to configure every component manually. Its desktop environment emphasizes efficient navigation, integrated development tools, and a consistent visual design, while retaining access to Arch's extensive software repositories.
  
  Version 4.0.5 continues that approach by concentrating on problems that can interrupt everyday workflows. The release improves hardware compatibility, corrects regressions introduced by newer software packages, and reduces unnecessary delays in common desktop operations. Rather than introducing a dramatic redesign, the developers have focused on making the existing environment more predictable and responsive.
  Go to Full Article

• KDE Plasma 6.8 Marks 30 Years With a Major Shift to Wayland and a More Powerful Linux Desktop
  by George Whittaker
  The KDE Project has officially released KDE Plasma 6.8, introducing a substantial collection of desktop improvements while celebrating three decades of open-source software development. Released on October 14, 2026, exactly 30 years after Matthias Ettrich announced the original KDE project, this anniversary edition brings significant changes to display management, accessibility, graphics performance, remote desktop functionality, system monitoring, and application theming.
  
  Perhaps the most consequential development is KDE's decision to retire native X11 desktop sessions in Plasma 6.8, completing its transition toward Wayland as the primary display architecture. The release also introduces NVIDIA triple buffering by default, improved HDR support, a more capable remote desktop server, CPU affinity controls in System Monitor, and expanded capabilities for the experimental Union theming engine. These improvements reflect KDE's effort to modernize the Linux desktop while maintaining the customization and flexibility that have defined Plasma for years.
  
  Plasma 6.8 is therefore more than a commemorative release. It represents an important architectural transition for one of Linux's most widely used desktop environments, with changes that affect both everyday users and developers building applications for the next generation of Linux desktops.
  KDE Celebrates Three Decades of Open-Source Desktop Development
  KDE's history began on October 14, 1996, when Matthias Ettrich proposed creating a consistent graphical desktop environment for Unix-like operating systems. At the time, Linux was becoming increasingly capable as a free operating system, but its graphical experience remained fragmented. Users could choose from several window managers and applications, yet there was no universally integrated desktop environment comparable to the commercial graphical systems available elsewhere.
  
  The original KDE initiative sought to address that limitation by building a cohesive desktop around the Qt application framework. Over the following decades, the project evolved through several major generations, introducing increasingly sophisticated desktop technologies while expanding into applications, development frameworks, mobile interfaces, and other open-source projects.
  
  Plasma 6.8 arrives as KDE marks its 30th anniversary, but its development priorities are focused primarily on the future. Rather than introducing a purely cosmetic anniversary edition, KDE has concentrated on modernizing underlying desktop infrastructure while improving accessibility, usability, and performance. The result is a release that combines immediately visible enhancements with architectural changes intended to support future development.
  Go to Full Article

• Building a Reliable Event-Driven Payment Service With XRP Ledger
  by Emma Clapp
  Receiving a transaction notification is only the first step. Production software still has to decide whether that event is safe to turn into application state.
  
  A WebSocket callback can arrive in milliseconds. What happens afterward is harder. The Go to Full Article

• Linux Moves Closer to Retiring the x32 ABI After Years of Limited Adoption
  by George Whittaker
  Linux kernel developers are renewing efforts to retire the x32 application binary interface (ABI), a little-used compatibility feature that attempted to combine the advantages of 64-bit processors with the smaller memory footprint of 32-bit applications. A revised patch series submitted on October 8, 2026, proposes the first steps toward disabling the interface, potentially ending support for an architecture experiment introduced more than 14 years ago.
  
  The latest proposal comes from Sebastian Andrzej Siewior, a Linux kernel developer at Linutronix who has been working on the removal effort throughout 2026. Rather than immediately deleting every component associated with x32, the proposed approach would first prevent the feature from being enabled through normal kernel configuration. This would give remaining users and distribution maintainers an opportunity to respond before the underlying implementation is removed.
  
  The effort reflects a broader challenge in Linux development: maintaining compatibility with older or rarely used technologies while keeping the kernel manageable, secure, and efficient. Although x32 offered theoretical performance and memory advantages, it never achieved widespread adoption. With conventional x86_64 software dominating modern Linux systems, developers are increasingly questioning whether the additional maintenance burden remains justified.
  Understanding the Linux x32 ABI
  The x32 ABI was introduced with Linux kernel 3.4 in 2012 as an alternative to conventional 32-bit and 64-bit application environments. Its goal was to provide applications with access to the architectural improvements of x86_64 processors while retaining smaller data types and pointers associated with 32-bit software.
  
  Traditional 32-bit x86 applications use the i386 ABI, which operates with a more limited register set and 32-bit execution conventions. Standard x86_64 applications, meanwhile, benefit from additional general-purpose registers, wider registers, and modern calling conventions, but they normally use 64-bit pointers. Those larger pointers can increase memory consumption in applications that maintain large numbers of pointer-heavy data structures.
  
  The x32 ABI attempted to offer a compromise. Applications would execute using the x86_64 instruction set and its larger register file while retaining 32-bit integers, long values, and pointers. This programming model is commonly described as ILP32, meaning that integers, long integers, and pointers are all 32 bits wide.
  
  The distinction can be illustrated by comparing the expected sizes of common C data types:
  Go to Full Article

• Google's Kage Project Rethinks Linux Kernel Security With Isolated Device Drivers
  by George Whittaker
  Google is exploring a new approach to Linux kernel security that could significantly change how device drivers interact with the operating system. The experimental project, known as Kage, uses compiler-based sandboxing to isolate drivers inside the kernel, potentially limiting the damage caused by memory corruption, programming errors, and exploitable vulnerabilities without requiring drivers to run as separate user-space processes.
  
  The research was presented at the Linux Plumbers Conference 2026, held October 5–7, with Stanford University and Google researcher Zachary Yedidia discussing how LLVM's Lightweight Fault Isolation (LFI) technology can create restricted execution environments for native kernel code. Unlike conventional isolation techniques, which often depend on separate processes or virtual machines, Kage attempts to preserve the performance advantages of kernel-space execution while reducing the amount of memory individual drivers can access.
  
  Early prototypes have already demonstrated the concept using NVMe storage, networking, and Wi-Fi drivers. However, Kage remains an experimental research project rather than a feature available in mainstream Linux distributions. Its developers are still investigating performance, hardware access, and compatibility with more complicated drivers, including graphics hardware.
  Why Device Drivers Remain a Major Linux Security Challenge
  Linux device drivers are responsible for connecting the operating system to hardware components, including graphics cards, network adapters, storage controllers, USB devices, and wireless chipsets. Most traditional Linux drivers execute in kernel space, giving them privileged access to system resources and the ability to interact directly with hardware. This architecture is one reason Linux can deliver high performance across such a broad range of devices, but it also creates a significant security challenge.
  
  When an ordinary application encounters a memory error, the operating system can often terminate that process without affecting the rest of the system. Kernel drivers operate under different conditions. Because they typically share the kernel's address space and privileges, an invalid memory access or exploitable vulnerability can affect unrelated kernel components, potentially resulting in a system crash, privilege escalation, or complete compromise of the operating system.
  
  The challenge becomes more complicated when considering the enormous number of drivers supported by Linux. Some are maintained by large organizations with extensive testing infrastructure, while others receive contributions from smaller development teams or individual maintainers. Even carefully reviewed drivers can contain bugs, particularly when they interact with complicated hardware, asynchronous operations, and memory-management mechanisms.
  Go to Full Article