All the News that Matters

• Shutting the Door on the XCPE Botnet (Threat Intelligence)
  The Google Threat Intelligence blog describes,in great detail, the XCPE botnet, which has just been taken down.
  Last week, Google and industry partners dismantled the XCPE backdoor which enrolled more than 1.3 million set-top boxes into a botnet. We assess with high confidence that the backdoor and botnet were intentionally developed, deployed, and operated for financial gain by Videostrong Technology Co., an Android Original Equipment Manufacturer (OEM) and Original Device Manufacturer (ODM).
  Videostrong monetized the backdoor by selling access to criminal affiliates and loading those affiliates' malware modules onto infected devices. These secondary modules were conducting ad-fraud; silently enrolling infected devices into residential proxy networks; and loading additional malware onto XCPE-compromised devices.

• [$] Managing the kernel CVE flood
  We recently looked at how thekernel community is dealing with the firehose of vulnerability reports, butsaid little about how users of the kernel are responding. At the 2026 Linux Plumbers Conference, Amazon employeesDylan Johnson and Justinien Bouron discussed the problem from the point ofview of engineers trying to keep AWS running and secure in the face of astorm of CVE disclosures. The kernel community's longstanding advice is torun current kernels, and that turns out to work — sort of.

• Tor Browser 16.0 released
  Version16.0 of the Tor Browserhas been released. This is the first stable version based on Firefox ESR153. Notable changes in this release include support for Linux on 64-bit Arm,redesigned settings, and a "generic window titles" feature to help prevent otherapplications from snooping on one's browser activity. Tor Browser forAndroid has had a number of interface updates to Google's MaterialDesign 3 design language.
  
  This release also follows Firefox in ending support for 32-bit x86 Linuxsystems. See the fullchangelog for all of the updates and bug fixes.
  

• Security updates for Monday
  Security updates have been issued by AlmaLinux (firefox, java-17-openjdk, kernel, kernel-rt, mariadb:10.5, podman, python-jwt, python27:2.7, python38:3.8 and python38-devel:3.8, python39:3.9 and python39-devel:3.9, ruby:2.5, ruby:2.7, thunderbird, util-linux, and virt:rhel and virt-devel:rhel), Debian (chromium, eog, imagemagick, python-aiohttp, thunderbird, and vim), Fedora (asciinema, atuin, btrfs-backup-ng, clevis, gcc, janus, kernel, libheif, libreswan, mingw-expat, mupdf, nautilus, nicotine+, ntpd-rs, openscap, perl-DBI, python-streamlink, python3.12, retsnoop, ruby, rust-cargo-deny, rust-cargo-rpmstatus, rust-ctutils, rust-gst-plugin-reqwest, rust-rbspy, rust-resctl-bench, rust-rpki, rust-rustls-webpki, rust-sequoia-chameleon-gnupg, rust-sequoia-git, rust-sequoia-octopus-librnp, rust-webpki-root-certs, rust-webpki-roots, tpm2-tss, and vhs), Oracle (.NET 8.0, .NET 9.0, aspell, bind9.18, curl, httpd:2.4, java-1.8.0-openjdk, kernel, libXi, mod_auth_openidc:2.3, nodejs:24, python-pillow, and tomcat), Red Hat (libxml2), Slackware (libarchive), and SUSE (buildah, curl, docker, gnutls, nodejs22, and suseconnect-ng).

• Kernel prepatch 7.4-rc1
  The 7.4-rc1 kernel prepatch is out, andthe merge window is closed for this development cycle.
  This is a *BIG* merge window. I think the reason is the by now obvious one, but I'm actually taking it as a good sign: I'm *much* happier with the flood of AI triggered work going into the merge window than it showing up mainly as extra fixes during the -rc period. So I'm hoping that this merge window being larger than usual is a sign that the AI fixes are becoming more part of the "normal development" than a flood of fixes that go into the whole stabilization phase. I think that's a much healthier model.
  There were 18,591 non-merge changesets brought in during this merge window— this is not just a record, but it nearly matches the patch volume duringthe entire (record-setting) 7.3 development cycle. So far, 2,678developers have contributed to 7.4; 625 of them are first-time kernelcontributors. Subscribers can find more details in the KSDB 7.4 page.

• Final release for the 7.2 stable series
  Greg Kroah-Hartman has announced the release of the 7.2.15 kernel, with a handful of updates.
  
  Note, this is the LAST 7.2.y kernel release. After this one the 7.2.y kerneltree is end-of-life. Please move to 7.3.y at this time.
  
  And yes, you aren't imagining things, this one went "end-of-life" a bit soonerthan normal. But based on the release cycle at the moment, and the number ofpending cc: stable patches in the queue, I figured it was better this way so wecan focus on the latest 7.3.y release as it would require us to keep 8different branches alive at the same moment, a taxing task under the best oftimes.
  
  
  

• A massive pile of security updates for Saturday
  Security updates have been issued by AlmaLinux (.NET 10.0, .NET 11.0, .NET 8.0, .NET 9.0, aspell, bind, bind9.18, container-tools:1.0, container-tools:rhel8, curl, dogtag-pki, ignition, java-21-openjdk, python-pillow, tomcat, and virt:rhel, virt-devel:rhel), Debian (antiword, cyrus-sasl2, dovecot, dpdk, nss, python-git, and thunderbird), Fedora (7zip, aegisub, aom, apptainer, arm-none-eabi-binutils-cs, assimp, avr-binutils, baresip, barman, bind9-next, btrfs-backup-ng, chezmoi, chromium, cifs-utils, clevis-pin-trustee, composer, containerd, curl, docker-buildx, dotnet10.0, evolution, evolution-data-server, evolution-ews, exim, fips-provider, firefox, flare-im, forgejo, freeipa, freerdp, gcc, gegl04, ghostscript, GitPython, glib-networking, gnome-shell-extension-gsconnect, golang-x-mobile, hcloud, helix, httpd, ImageMagick, iperf3, jfrog-cli, jupyterlab, keepassxc, kernel, knot-resolver, krb5, kryoptic, libdigidocpp, libheif, libindi, libinstpatch, libpng12, libpng15, librabbitmq, libre, libXi, libzip, linux-firmware, Lmod, log4net, markdownlint-cli2, mingw-freetype, mingw-gstreamer1, mingw-gstreamer1-plugins-bad-free, mingw-gstreamer1-plugins-base, mingw-gstreamer1-plugins-good, mingw-libpng, mingw-LibRaw, mingw-python-certifi, mingw-python3, mongo-c-driver, mstflint, mutt, nant, nebula, nix, nsd, ntpsec, openbao, openjpeg, openssl3, openvpn, perl-Badger, perl-CLI-Simple, perl-Cpanel-JSON-XS, perl-CSS-Inliner, perl-Encoding-FixLatin, perl-ExtUtils-Typemaps-Default, perl-GD-SecurityImage, perl-HTML-Query, perl-libnet, perl-Markdown-Render, perl-Net-IDN-Encode, perl-Net-Whois-Raw, perl-Plack, perl-Plack-Middleware-ReverseProxy, perl-Text-CSV_XS, pgbouncer, php-getid3, php-pecl-mongodb2, python-boto3, python-botocore, python-cairosvg, python-django5, python-django6, python-jupyter-builder, python-mkdocs-rss-plugin, python-nbdime, python-nh3, python-notebook, python-pydantic-core, python-pypdf, python-uv-build, python3.10, python3.11, python3.12, python3.13, python3.14, qdigidoc, qdl, qt5-qtbase, radicale, rclone, rt, ruff, rust-ammonia, rust-archive-trait, rust-astral-html, rust-astral-ini, rust-astral-mail-headers, rust-astral-pubgrub, rust-astral-version-ranges, rust-astral_async_http_range_reader, rust-astral_async_zip, rust-asyncband, rust-backtrace, rust-blake2b_simd, rust-blake3, rust-cargo-semver-checks, rust-chrono, rust-clap-cargo, rust-constant_time_eq, rust-dua-cli, rust-faster-hex, rust-gengo-bin, rust-gitui, rust-lzma-rust2, rust-object, rust-object0.37, rust-object0.38, rust-object0.39, rust-onefetch, rust-ppmd-rust, rust-quick-junit, rust-rbw, rust-regorus, rust-reqsign, rust-reqsign-aliyun-oss, rust-reqsign-aws-core, rust-reqsign-aws-v4, rust-reqsign-aws-v4a, rust-reqsign-azure-storage, rust-reqsign-command-execute-tokio, rust-reqsign-core, rust-reqsign-file-read-tokio, rust-reqsign-google, rust-reqsign-http-send-reqwest, rust-reqsign-huaweicloud-obs, rust-reqsign-oracle, rust-reqsign-tencent-cos, rust-reqsign-volcengine-tos, rust-routinator, rust-rustls, rust-ruzstd, rust-sccache, rust-tar-codec, rust-tar-framing, rust-tokei, rust-totp-rs, rust-trustfall-rustdoc-adapter, rust-trustfall-rustdoc-adapter57, rust-trustfall-rustdoc-adapter60, rust-typed-path, rust-zip, rust-zip0.6, rust-zip2, rustup, samba, SDL3_image, socat, stargz-snapshotter, stgit, sudo, syncthing, thunderbird, tor, trafficserver, ty, unbound, unshield, uv, webkitgtk, wordpress, xorg-x11-server, xorg-x11-server-Xwayland, zchunk, and zvbi), Mageia (libgit2), Red Hat (go-toolset:rhel8 and rhc), SUSE (ab-av1, ansible-core, aws-nitro-enclaves-cli, bouncycastle, cadvisor, chromium, cifs-utils, coredns, crun, dr_libs-devel-20260901, dssim, epiphany, expat, forgejo, freetype2-devel, fuseiso-20260614, gh, ghostscript, gosec, gvfs, hashcat, hauler, hugo, ImageMagick, kernel-devel, kubevirt1.9, libmikmod, libsoup, percona-toolkit, perl-cpanel-json-xs, perl-dancer2-plugin-auth-extensible, perl-mozilla-ca, pocketbase, putty, python-brotli, python-CairoSVG, python-cairosvg, python-django, python-pypdf, python-urllib3_1, roundcubemail, rsyslog, shadowsocks-rust, shadowsocks-libev, stgit, suseconnect-ng, tailscale, trivy, and vlc), and Ubuntu (brotli).

• How We Could Have Backdoored Bash (Hacktron blog)
  The Hacktron blog documents howthe group was able to compromise the GNU Savannah forge and could havepushed malware into any of the projects hosted there.
  Using Hacktron, we found that an email address like a`touch${IFS}/tmp/savane-rce-proof`@attacker.example gave any registered user code execution on its backend. From there, we made our account a superuser, impersonated Bash's maintainer, and confirmed we could add an SSH key with push access to the upstream Bash repository. An unpatched kernel gave us root access and access to a GNU backup server. We reported it to the FSF on May 11, 2026.

• [$] Removing binder.c
  The final talk at Kangrejos 2026 was about the removal of the C implementationof Android'sBinder driver, the primary interprocess communication mechanismused on Android devices. Carlos Llamas announced that he had deleted the Ccode to general applause, and then shared some insights about what went intoreplacing the C implementation. Alice Ryhl, who has worked on the Rustimplementation for some years, added her own thoughts about what the mostdifficult and interesting parts of the transition were.
  

• Haas: Postgres 19 is late, and it's AI's fault
  PostgreSQL developer Robert Haas writesabout the struggles the project has encountered in putting together itsnext release.
  In the end, I don't think that the delay in shipping PostgreSQL 19 is particularly concerning. It is not a long delay in the grand scheme of things, and it emerges directly from the project's concern for quality.
  The long-term picture is less clear and in some ways more troubling: given that we have forty years of bugs that humans were unable to find but LLMs are quite capable of discovering, how are we ever going to catch up, and how will PostgreSQL continue to innovate? Right now, I'm not sure. What I do know is that I, and many others, are working really hard to figure it out.
  LWN looked at the PostgreSQL 19 releaseand its challenges in September.

• Remote code execution on Linux systems with multipath TCP
  On October 27, LLM provider Anthropicreportedon aremotely exploitable use-after-free bug affecting systems withmultipath TCP listeners open. The bug works by triggering a response to aretransmitted SYN packet at the same moment that the TCP connection isestablished in another thread, causing the first thread to access theconnection's options structure after the second thread has freed it. The firstthread can then disclose kernel memory or cause a buffer overflow, writing anattacker-controlled payload. The fix wasto only free the structure after an RCU grace period.On October 29, the Go security teamadvisedthat all programs written in Go use multipath TCP by default, so manysystems may be unknowingly vulnerable. And, of course, there is always thepossibility of related bugs in other sections of the TCP stack. Users may bewise to update to a patched kernel as soon as one becomes available for theirdistribution.
  

• [$] System-call wrappers for glibc
  In a followup to his session at the2025 Linux Plumbers Conference (LPC), Carlos O'Donell returned to the topicof system-callwrappers for the GNU C library (glibc) at this year's event. This timearound, he was joined by Florian Weimer, who is another glibc maintainer.The idea was to give an update on what has happened over the last year withregard to Linux system calls that lack a glibc wrapper, thus are onlyaccessible viasyscall(). In addition, they wanted to hear from attendees about theirneeds in this area.

• Eight more stable kernel updates
  Greg Kroah-Hartman has announced the release of the 7.3.1,7.2.14,6.18.60,6.12.115,6.6.161,6.1.191,5.15.224, and5.10.273 stable kernels. As usual, he advisesall users to update—advice that seems especially wise given theincreased number of security-relevant bug fixes that the kernel is seeing these days.[Edit: the 7.2.15 stable release is already in review as well.]
  

• Security updates for Friday
  Security updates have been issued by AlmaLinux (aspell, cjose, curl, gcc-toolset-15-gcc, httpd:2.4, ignition, java-21-openjdk, libX11, libXi, libXrender, libXtst, mariadb:10.11, nodejs:24, python-pillow, python3.12-urllib3, and webkit2gtk3), Debian (imagemagick, libdatetime-timezone-perl, python-git, tor, tzdata, vlc, and wordpress), Fedora (accessibility-inspector, akonadi-calendar, akonadi-calendar-tools, akonadi-contacts, akonadi-import-wizard, akonadi-mime, akonadi-search, akonadi-server, akonadiconsole, akregator, alligator, analitza, angelfish, applet-window-buttons, arianna, ark, artikulate, audex, audiocd-kio, audiotube, aurorae, baloo-widgets, blinken, bluedevil, bomber, bovo, breeze-gtk, brotli, bup, calendarsupport, calindori, calligra, cantor, colord-kde, cxx-rust-cssparser, dolphin, dolphin-plugins, dragon, elisa-player, eventviews, falkon, fcitx-configtool, ffmpegthumbs, filelight, firefox, flatpak-kcm, francis, ghostwriter, granatier, grantlee-editor, grantleetheme, grub2-breeze-theme, gwenview, incidenceeditor, isoimagewriter, itinerary, juk, k3b, kaccounts-integration, kaccounts-providers, kactivitymanagerd, kaddressbook, kajongg, kalarm, kalgebra, kalk, kalm, kalzium, kamera, kamoso, kanagram, kapman, kapptemplate, kasts, kate, katomic, kbackup, kblackbox, kblocks, kbounce, kbruch, kcachegrind, kcalc, kcalutils, kcharselect, kclock, kcolorchooser, kcron, kde-cli-tools, kde-connect, kde-dev-scripts, kde-dev-utils, kde-gtk-config, kde-inotify-survey, kde-partitionmanager, kdebugsettings, kdecoration, kdeedu-data, kdegraphics-mobipocket, kdegraphics-thumbnailers, kdenetwork-filesharing, kdenlive, kdepim-addons, kdepim-runtime, kdeplasma-addons, kdesdk-kioslaves, kdesdk-thumbnailers, kdevelop, kdevelop-php, kdevelop-python, kdf, kdialog, kdiamond, kdnssd, kdominate, keditbookmarks, keepsecret, keysmith, kf6-baloo, kfind, kfourinline, kgeography, kget, kglobalacceld, kgoldrunner, kgpg, kgraphviewer, khangman, khealthcertificate, khelpcenter, kidentitymanagement, kig, kigo, killbots, kimagemapeditor, kimap, kinfocenter, kio-admin, kio-extras, kio-gdrive, kirigami-gallery, kiriki, kiten, kitinerary, kjournald, kjumpingcube, kldap, kleopatra, klettres, klickety, klines, kmag, kmahjongg, kmail, kmail-account-wizard, kmailtransport, kmbox, kmenuedit, kmines, kmix, kmousetool, kmouth, kmplot, knavalbattle, knetwalk, knights, knighttime, knot, koko, kolf, kollision, kolourpaint, kompare, kongress, konqueror, konquest, konsole, kontact, kontactinterface, kontrast, konversation, kopeninghours, korganizer, kosmindoormap, kpat, kpimtextedit, kpipewire, kpkpass, kpmcore, kpublictransport, kqtquickcharts, krdc, krdp, krecorder, kreversi, krfb, kruler, ksanecore, kscreen, kscreenlocker, kshisen, ksirk, ksmtp, ksnakeduel, kspaceduel, ksquares, ksshaskpass, ksudoku, ksystemlog, ksystemstats, kteatime, ktimer, ktnef, ktorrent, ktouch, ktrip, ktuberling, kturtle, kubrick, kunifiedpush, kup-backup, kwalletmanager5, kwave, kwayland, kwayland-integration, kweather, kweathercore, kwin, kwin-zones, kwordquiz, kwrited, layer-shell-qt, libgravatar, libkcddb, libkdcraw, libkdegames, libkdepim, libkeduvocdocument, libkexiv2, libkgapi, libkleo, libkmahjongg, libkomparediff2, libksane, libkscreen, libksieve, libksysguard, libktorrent, libplasma, libquotient, lokalize, lskat, mailcommon, mailimporter, marble, markdownpart, massif-visualizer, mbox-importer, merkuro, messagelib, mimetreeparser, mingw-python-certifi, minuet, neochat, ocean-sound-theme, okular, oxygen-sounds, palapeli, pam-kwallet, parley, perl-Alien-Brotli, picmi, pim-data-exporter, pim-sieve-editor, pimcommon, plasma-activities, plasma-activities-stats, plasma-bigscreen, plasma-breeze, plasma-browser-integration, plasma-camera, plasma-desktop, plasma-dialer, plasma-discover, plasma-disks, plasma-drkonqi, plasma-firewall, plasma-integration, plasma-keyboard, plasma-login-manager, plasma-milou, plasma-mobile, plasma-nano, plasma-nm, plasma-oxygen, plasma-pa, plasma-phonebook, plasma-print-manager, plasma-sdk, plasma-settings, plasma-setup, plasma-systemmonitor, plasma-systemsettings, plasma-thunderbolt, plasma-union, plasma-vault, plasma-wayland-protocols, plasma-welcome, plasma-workspace, plasma-workspace-wallpapers, plasma5support, plasmatube, plymouth-kcm, plymouth-theme-breeze, polkit-kde, powerdevil, poxml, qmlkonsole, qqc2-breeze-style, qrca, rocs, sddm-kcm, signon-kwallet-extension, skanlite, skanpage, skladnik, spacebar, spectacle, step, svgpart, sweeper, tokodon, trafficserver, umbrello, xdg-desktop-portal-kde, yakuake, and zanshin), Mageia (cfitsio, libsolv, tomcat, and xrdp), Oracle (bind, cjose, curl, dogtag-pki, expat, gcc-toolset-15-gcc, ignition, kernel, libX11, libXrender, libXtst, php, python3.12-urllib3, and webkit2gtk3), SUSE (389-ds, aws-nitro-enclaves-binaryblobs-upstream, brotli, chromium, firefox, flatpak, gnutls, google-osconfig-agent, haproxy, hawk2, kernel, libapr1, libtcnative-1-0, tomcat, liboath-devel, libpcre2-16-0, librecad, libXi-devel, libXtst-devel, python311, python313, python313-markdown2, python313-xhtml2pdf, rabbitmq-server, roundcubemail, rust-keylime, and xen), and Ubuntu (dotnet8, dotnet10, dotnet11).

• [$] Containers as a recognized kernel object
  The foundation of the design for containers in the kernel is that thereisn't one; there is no container abstraction that the kernel recognizes.Instead, the kernel provides a long list of components — namespaces,control groups, sandboxing mechanisms, and more — along with a note thatsays, in effect, "some assembly required". There have been attempts (repeatedly) over the years to turn containersinto first-class objects with kernel support, but they have never gottenfar. Now Josef Bacik is making atry with a concept that he calls "cells".

• Ubuntu vs CentOS: Which Linux Server OS Should You Run in 2026?
  CentOS Linux is gone, but CentOS Stream and Ubuntu Server are still here. See how they compare on support, security, packages and cost before you deploy.

• India floats AI plan under which The model travels to the data, rather than the data travelling to the model
  Wants more local AI, without Big Tech getting open access to everything

• (Updated) 16-TOPS AI SBC with SATA 3.0 runs on octa-core Sophgo BM1688
  Orange Pi has published hardware details for the OrangePi O1, a 90  70mm SBC based on the Sophgo BM1688 processor. It pairs eight Arm Cortex-A53 cores with a RISC-V C906 coprocessor and a 16-TOPS INT8 TPU, along with up to 16GB of LPDDR4/LPDDR4X memory. The BM1688 integrates eight Arm Cortex-A53 cores operating at up0

• Frances Weird Per-Gigabyte Data Tax Could Cost VLC Over d1 Million a Year!
  France's National Assembly has voted in favour of a new "internet tax" that would charge companies for every gigabyte of data they send to users in France. It may get messier than GDPR.

• Migrating small businesses to LibreOffice and Linux
  We often talk on this blog about large-scale migrations to LibreOffice, such as in the Austrian Military. But many small businesses are switching away from Microsoft, Google and other tech giants too. Today were talking to MiSo Oroz from Zerolock, a company in Italy that helps small businesses to switch

• Price rises for some 16GB Raspberry Pi products
  Rising component costs drive price increases for 16GB Raspberry Pi 5 and Compute Module 5, but not Raspberry Pi 500+.

• Steam On Linux Just Under 4% For October 2026
  Valve just published their Steam Survey results for October and point to a small uptick in Linux gaming use on a relative basis0

• Linux App Release Roundup (October 2026)
  Octobers Linux app releases brought plenty of treats, a couple of tricks and mercifully few frights. In this post, I recap the updates that landed last month. There were other spooks in the shadows with a spotlight. October gave us a double-whammy of Firefox and Calibre updates, with JEPG XL support added in the former and AI reading voices in the latter  among other changes in both. It also0

• Linuxiac Weekly Wrap-Up: Week 43, 2026 (October 26  November 1)
  Catch up on the latest Linux news: Kali 2026.3, Linux Lite 8.2, Budgie 10.10.4, Enlightenment 0.28, Hyprland 0.57, Firefox 159, Ghostty 1.4, Fedora 45 delayed again, and more.

• Trinity Desktop Environment R14.1.7 Is Out with Support for Ubuntu 26.10
  Trinity Desktop Environment (TDE) R14.1.7 desktop environment has been released today for nostalgic KDE 3.5 users as the seventh maintenance release of the R14.1.x series, adding new features and enhancements.

• Agilex 2X FPGA portfolio supports PCIe 7.0 and QuartusIQ AI design tool
  Agilex 2X is Alteras latest FPGA and SoC portfolio, consisting of four device families for applications ranging from industrial control to high-performance computing. The first announced family, Agilex 27, incorporates 256Gbps transceivers, PCIe 7.0 support, and a distributed HyperFlow data network. The company has also released QuartusIQ, an AI-assisted development tool integrated into Quartus0

• Linus Torvalds Announces First Linux Kernel 7.4 Release Candidate
  Linus Torvalds announced today the general availability of the first Release Candidate (RC) of the upcoming Linux 7.4 kernel series for public testing and early adopters.

• RISC-V compute module brings ESP32-P4 to Raspberry Pi CM4/CM5 carriers
  The SCINTIX P4 is a compact compute module developed by RELOC around Espressifs ESP32-P4 microcontroller, using the 55  40mm form factor of Raspberry Pi CM4 and CM5 modules. It combines dual-core RISC-V processing with an ESP32-C6 wireless companion, Ethernet, and MIPI display and camera interfaces for embedded control and HMI applications. Unlike conventional Raspberry0

• Enlightenment desktop 0.28 released with better networking
  Enlightenment 0.28 has been released, the first major update to the open-source desktop environment since early 2025. Given the time between this and the previous 0.27 release, the changelog is suitably lengthy. Networking and audio stack enhancements, UI and UX tweaks and, of course, plenty of bug fixes are listed  no jaw-dropping UI changes, though. v0.28 adds a new Network Manager module.0

• Compact AI workstation runs Ubuntu on Jetson AGX Thor with dual 10GbE
  The MINIX T4000/T5000 is a compact AI workstation based on NVIDIAs Jetson AGX Thor platform, combining Blackwell GPU architecture with Arm Neoverse-V3AE processors. The system supports up to 128GB of LPDDR5X memory, dual 10GbE networking, PCIe 4.0 NVMe storage, and Ubuntu 24.04 for local AI inference and development. The T4000 configuration uses NVIDIAs Jetson T40000

• Linux 7.4-rc1 Released With Nice Performance Improvements, AMD Ryzen Zen 6 Preparations & AMDGPU HDMI 2.1 Default
  Even with Linus Torvalds having been on holiday, Linux 7.4-rc1 is out today on-schedule for capping off the Linux 7.4 merge window0

• Linux 7.4 Merge Window Saw Nearly 20k Commits, Source Tree Approaching 42 Million Lines
  Linux 7.3 started out just under 41 million lines in total in the kernel source tree. In the end the Linux v7.3 tag came in at 41,019,555 lines as measured by cloc while now with Linux 7.4 we are inching ever closer to 42 million lines. On a Git commit basis, the Linux 7.4 merge window has been the busiest on record0

• Tumbleweed Monthly Update - October 2026
  As openSUSE Tumbleweed barrels through the autumn, the month of October brought Linux enthusiasts several changes for this premier rolling release. October was a heavy month for both features and fixes, with 23 snapshots landing between Oct. 1 and 28. KDE Plasma 6.8.0 and KDE Frameworks 6.31.0 arrived as new0

• AI Use In The Linux Kernel, Microsoft Defender On Linux & Other October Highlights
  October brought the releases of Linux 7.3, Ubuntu 26.10, the KDE Plasma 6.8 desktop, and a wealth of other open-source software releases. The expanding use of AI/LLMs within Linux kernel development also made for interesting discussions in October. Microsoft bringing their Defender software to the Linux desktop was perhaps the biggest surprise out of October. Here is a look back at the past month0

• Budgie 10.10.4 Desktop Environment Improves Wayland Panel Auto-Hiding
  Budgie 10.10.4 improves Wayland panel auto-hiding, reworks dock mode, adds keyboard shortcuts, and fixes several desktop issues.

Error: It's not possible to reach RSS file http://services.digg.com/2.0/story.getTopNews?type=rss&topic=technology ...

• Marvell to Buy Lumentum In $115 Billion Bet On AI Connectivity
  Marvell has agreed to acquire optical components maker Lumentum in an all-stock deal with an implied enterprise value of $115 billion. "AI infrastructure is undergoing a fundamental architectural shift toward optical connectivity, creating an opportunity that comes along once in a generation," said Marvell Chairman and CEO Matt Murphy. "The companies that move first and help define this transition will set the standard for decades to come." CNBC reports: Through the acquisition, Marvell said it can combine electrical and optical technologies to meet accelerating and shifting AI connectivity demands across regions and systems. Companies are increasingly relying on optical connections to piece together chips used to run and train large language models. Lumentum shareholders will receive 4.5 Marvell shares for each Lumentum share under the agreement. The deal is expected to close during the first half of 2028. Marvell's takeover marks one of the most significant bets on AI in 2026 and comes despite recent concerns over the long-term sustainability of infrastructure spending.
  
  
  Read more of this story at Slashdot.
  

• Supermarket Freezers Across Europe Hit By Second Suspected Cyberattack
  An anonymous reader quotes a report from The Guardian: Supermarket chains in Sweden, Belgium and Luxembourg have said the temperatures of their refrigerators and freezers in dozens of stores rose overnight, prompting fears of a cyber-attack similar to one that caused millions of euros of food losses in France. Sweden's Coop chain told the daily Aftonbladet on Monday that six of its stores had been affected, while ICA said it was "aware that a limited number of stores were affected by an incident overnight which impacted their refrigeration and freezer systems". The Dutch retailer Ahold Delhaize, which last month reported a cybersecurity incident to police in the Netherlands, said an "IT incident" had hit fridges and freezers in dozens of its supermarkets in Belgium and Luxembourg. A company spokesperson, Sarah De Meester, said the supermarket chain had established that temperatures in the cooling systems had increased, adding that the incident was being investigated. Belgium's Le Soir newspaper reported that dozens of stores and supermarkets were affected, including five Spar outlets, multiple Shop & Go convenience stores attached to Q8 service stations, and a number of smaller Proxy Delhaize minimarkets. "We started mobilizing technicians at 1am," Stephan Moelans, the chief executive of Sabcobel, which specialises in refrigeration system installations, told the paper. "We spent all night and morning disconnecting the affected installations from the grid."
  
  
  Read more of this story at Slashdot.
  

• Itch Is Being Flooded By AI-Generated Garbage
  The number of game pages being created per-day on Itch has doubled, the indie games site announced Saturday on Bluesky. When asked why, they responded: "take a guess." As the gaming news site Aftermath puts it, "the surge has been almost entirely down to AI-created garbage racing onto the platform as the popularity of vibe-coded theft, copycats and machine-built slop explodes."Back in 2024, when the spectre of AI-'created' video games was still in its infancy, indie platform itch.io decided that the best it could do to combat this growing threat was, like Valve has done with Steam, institute a voluntary 'AI' filter when adding new projects to the site. By November 2026, as itch buckles under the weight of new AI-generated 'games' pouring onto the site, that filter is proving about as robust as a wet paper bag.... Shopfronts are being deluged by this shit, and it's making it a terrible user experience for customers. And while in Valve's case there's a compelling case for stronger human moderation of the store, I'm not sure that's a viable option for a relatively tiny, community-run platform like itch... [A]t time of writing I visited the latest releases section and there was still a huge number of clearly AI-generated titles (or titles making extensive use of AI in their visual assets) which made no use of itch's voluntary tag system. The issue here isn't that these games are making money--itch themselves say in a reply that while the number of projects listed has doubled, "the number of downloads and purchases has not"--it's that an inability to combat this surge makes the site worse for every single person using it. It gets harder to find real games, for example, and it also makes the shopfront look like a clearance rack.
  
  
  Read more of this story at Slashdot.
  

• Bad Flock Info Leads Police To Tow Wrong Car, Then Towing Company Totals It
  "Police continue to blindly trust Flock cameras above and beyond the evidence in front of their own eyes," reports Jalopnik.com. "After incorrectly connecting Rosalyn Crump's car to a shooting that had occurred the previous day, police had her car towed and impounded as evidence, reports Moneywise..."According to WWBT 12 On Your Side, Richmond, Virginia, police didn't have a license plate number for the suspect's car, making it impossible to search Flock's records for that plate. Flock cameras collect more than just license plate information, so police searched for a make, model, color, and approximate model year. Based on this extremely vague description, police zeroed in on Crump's 2012 Hyundai Elantra. Around 2 a.m. they started looking through the windows with flashlights to see what was in plain sight, which isn't technically a "search" — at least, not one that would require a warrant... [Crump was asleep, but left her home to speak to the police officers to tell them they had the wrong car. But they didn't believe her.] Other body cam footage shows an officer expressing doubt that Crump's car is the right one, since child seats and other items inside seem inconsistent with a shooting. Another officer replies, "Don't be surprised if they would have set that up like that." Instead of believing the evidence, or Crump, or interviewing witnesses who could have corroborated her story, police called Seibert's Towing to impound the car... [Later] Police identified a similar-looking car that seemed to be actually connected to the shooting, and released Crump's Elantra. Nobody actually told Crump this until four days later. Seibert's told Moneywise that police didn't actually release the car until then. Either way, they didn't tell her that Seibert's had ripped the front bumper off during the towing process — leaving the car undrivable — until she arrived to pick it up. Seibert's took responsibility for causing the cosmetic damage, and was willing to cover the $2,212.30 bill to paint and replace the bumper cover, fog lights, and wheel liners. Then Crump asked for a full mechanical inspection, which revealed damaged tie rods and ball joints, jacking the bill beyond $6,000. Seibert's says it didn't cause this damage. Regardless of how it occurred, Seibert's insurer and Crump agree that her Hyundai is now a total loss due to the cost of the repairs it needs. It had been drivable, if mechanically worn, before police ordered it towed, damaging it for nothing more than a case of mistaken identity. The president of Seibert's towing told Moneywise that while they'd originally offered $2,200 to repair the bumper damage, Crump must now negotiate with their insurance company. Crump has now resorted to a GoFundMe campaign to attempt to raise $17,100 for rental car expenses, a new car, and the expenses of moving to a different neighborhood. 130 donors have already contributed $7,431. Reached for comment, the Richmond Police Department told local newscasters they "understand that Ms. Crump did not ask to become part of this investigation," and that they recognize the "frustration of having a vehicle towed and subsequently damaged." But they also said they were following a "credible" lead, which is their responsibility. The department "appreciates Ms. Crump's cooperation" (and "sincerely hopes the remaining concerns about her vehicle can be resolved.") The city of Richmond has "already started backing away from Flock before Crump's story aired," reports Moneywise. "Mayor Danny Avula has decided not to renew Richmond's license plate reader deal with Flock, which ends June 30, 2027. As of September, the city had 99 Flock readers on its streets." They note that the Institute for Justice, a public interest law firm in Arlington, Virginia, "has tallied at least 27 cases since 2018" of similar police errors. "In each case, a license plate reader mistake led police to stop, jail or point guns at drivers who'd done nothing wrong. More than half came in 2023 or later."
  
  
  Read more of this story at Slashdot.
  

• Rocky Linux Creator Built a New 'Not Linux' Kernel in 11 Days Using AI
  From the blog It's FOSSGregory Kurtzer is no stranger to the Linux world. He created CentOS, and when Red Hat messed it up, he started Rocky Linux as the community replacement. He also co-founded CIQ, the company offering enterprise support around Rocky. His latest project has nothing to do with rebuilding another Linux distro, though. He has built an entirely new operating system kernel, and he didn't write most of the code himself. An AI agent did. Meet Ginux, Linux userspace without Linux underneath... It's an independent, Rust-first x86-64 kernel. Which simply means it is NOT a fork of the Linux kernel. It has its own memory management, scheduler, process model, filesystems, networking, and device support, all written from scratch. The most interesting part is that even though it is not Linux, it is Linux-compatible. Ginux implements the Linux ABI (the binary interface compiled programs use to talk to the kernel), so existing Linux binaries can run on it unmodified. In the project's own terms, Linux is a "personality" that Ginux exposes, not the kernel running underneath... Right now, Ginux runs only in a QEMU virtual machine, with no physical hardware profile, no GPU or NVMe support, and no independent security audit.
  
  
  Read more of this story at Slashdot.
  

• Experts Expect 'Security Reckoning' As AI Tools Find And Exploit Software Bugs
  The Washington Post reports:Tens of thousands of South Koreans had their financial data exposed online in recent weeks after at least nine major banks there suffered cyberattacks that suggested a dark future for online security. One man, a 26-year-old living in southern China, was allegedly behind the attacks, according to an investigation by cybersecurity company CrowdStrike. Traces left online and failure to secure his own systems allowed investigators to piece together the man's name, age, location and what he allegedly did. The clues revealed that the devastating assault on some of Asia's most sophisticated financial institutions was the work of an amateur. The attacks were launched with help from a few artificial intelligence chatbots, CrowdStrike found, before asking one to help sell the stolen data online and draft a fake résumé touting cybersecurity skills... The hacker who broke into the South Korean banks had access to Anthropic's Claude, but because the U.S. firm's tools generally refuse to take illegal actions, free Chinese models were also used, including DeepSeek, CrowdStrike found. "The models are interchangeable," said Meyers, the CrowdStrike executive. The Post calls it "part of a wave of AI-enabled hacking that is advancing across the world, triggering alarm inside national governments as well as multinational companies.""Basically any pedestrian, non-hacker can take these frameworks and start leveraging them to go after different targets," said Adam Meyers, senior vice president of counter adversary operations at CrowdStrike. The company has tracked an increase in the speed with which cyberattacks can move once inside a target's networks, as seasoned hackers and rank amateurs alike get a boost from AI tools. "Anyone can be a super-hacker now," Meyers said... Many cyber experts still expect the security reckoning to intensify as AI tools that can find and exploit software bugs become more widely distributed and understood. [Last] Monday, The Post reported that cybersecurity researchers from the start-up Cathedral who set out to test Anthropic's security found that they could access internal messages and meeting transcripts. Cathedral reported its findings to Anthropic, which said it resolved the newly discovered problems... Security experts say it's unlikely that any hacker is forgoing the use of AI tools right now. Even in America, critical infrastructure like energy and water companies need to be "immediately and comprehensively" tested for exploitable bugs, according to Snehal Antani, chief executive of cybersecurity company Horizon3. He tells the Post the government might need to fund that remediation, and even form "a public and private partnership to accelerate incident response."
  
  
  Read more of this story at Slashdot.
  

• Binance Reopens to $3.64 in Net Outflows. '98% Choose to Stay', Says Its Founder
  Binance now says it's replenished 90% of assets stolen last week in a $6.3 billion security breach, its customers still "rushed to move funds off the platform" when it reopened Sunday, CNBC reports, and Binance "said it recorded $3.64 billion in net outflows after reopening withdrawals on Sunday."The exchange processed $4.65 billion in withdrawals and $1.01 billion in deposits between 6 a.m. and 3:30 p.m. UTC on Nov. 1, Binance said in a post on X. The resulting net outflows represented 2.1% of Binance's $171 billion in total assets, based on its latest available proof-of-reserves data as of Oct. 28. Binance said withdrawal volumes had declined and were stabilizing following an initial spike, while deposit volumes remained substantial. The exchange began restoring withdrawals in phases at 6 a.m. UTC on Sunday, with services resuming across all 15 networks and assets included in the initial phase by 12:36 p.m. UTC. It said testing was continuing for the remaining networks and assets. Binance founder and former CEO Changpeng Zhao sought to reassure users following the breach, writing on X that "98% choose to stay!" He said most of the net outflows occurred within the first couple of hours after withdrawals resumed.
  
  
  Read more of this story at Slashdot.
  

• Stack Overflow: 'Reports of Our Death are Greatly Exaggerated'
  Stack Overflow's senior VP of community says predictions of their demise "make for compelling headlines, but they confuse a change in how people access knowledge with the disappearance of the knowledge — and the company — behind it.AI has changed developer behavior. In our recently released 2026 Developer Survey, 64% of respondents said they visit Stack Overflow less frequently for simple questions. But developers also report asking more advanced questions and visiting the site to verify AI-generated answers. Stack Overflow remains a place where people can challenge assumptions, compare approaches, and validate solutions. But it's also important to understand that our public Q&A site is only one part of Stack Overflow, the company. The knowledge created on the Q&A site helps power the AI ecosystem itself. Stack Overflow's human-validated content is used to train and improve models, strengthen retrieval systems, and make AI assistants and other tools more reliable. Developers and technologists may encounter an answer through a different interface — such as their IDE — but the underlying knowledge may still have begun the same way it did in the past: with a developer sharing what they learned on Stack Overflow. We're also building for what comes next. We recently launched the beta of Stack Overflow for Agents, an API-first knowledge exchange where agents can share knowledge and verify solutions. We also brought back Developer Story, giving developers a verifiable way to showcase their expertise, accomplishments, and contributions beyond a traditional résumé. And we have much more planned and in development to give people compelling new reasons to visit the site beyond Q&A. Several years ago, we pivoted aggressively toward the enterprise. In September, we launched the next generation of Stack Internal, our governed AI context layer for companies. It captures and curates organizational knowledge, adds provenance and trust signals, and brings in subject-matter experts when validation is needed. The goal is straightforward: to make sure employees and AI agents are working from accurate, current, permission-aware information — not confidently acting on whatever context happens to be nearby. That is the thread connecting everything we do: making human knowledge useful and trustworthy, whether it is being consumed by another developer, an enterprise team, or an AI agent. Stack Overflow is not standing still, and it is not disappearing. We are evolving from a website people visit for answers into knowledge infrastructure that supports developers, companies, and AI systems wherever they work. Reports of our death are, indeed, exaggerated.
  
  
  Read more of this story at Slashdot.
  

• Toyota's EV Sales More Than Doubled In a Year, While Its Gas Car Sales Dropped 20% In China
  Toyota's EV sales have jumped 127% through September, reports Electrek:Including Lexus, Toyota sold 309,766 battery electric vehicles (BEVs) globally through the first nine months of 2026, up 127.4% from the same period last year. Except for January (+87.5%), Toyota's EV sales have more than doubled every month this year compared with 2025... While its EVs are catching on, Toyota Motor's global sales fell for the third straight month in September. Toyota sold 860,107 vehicles in September, down 2.2% from the previous year. The company said that although overall demand remained steady, sales in China fell, leading to lower overall sales than last year. Through September, Toyota sold 7.51 million vehicles globally, down 3.4%. In China, Toyota's sales plunged nearly 20%, marking its eighth consecutive month with lower sales. Toyota said the overall market in China "remained weak due in part to rising gasoline prices, while the market for gasoline vehicles and hybrid vehicles was particularly affected," resulting in lower sales. In the first nine months of 2026, Toyota sold just over 1.05 million vehicles in China, 18.9% fewer than in the same period last year... After the US, China is Toyota's second-largest market.
  
  
  Read more of this story at Slashdot.
  

• SystemD's Creator Opens Signups for Private Preview of Amutable's Cryptographically Verified Linux Systems
  SystemD creator Lennart Poettering left Red Hat for Microsoft in 2022, but 10 months ago left to co-found Amutable a company that aims to build cryptographically verified Linux systems that stay trusted over time. It's FOSS calls it "a read-only, image-based system where every machine produces signed reports of its own state" — and signups are now open for a private preview:Before announcing this Linux-based implementation, Amutable had released two open source tools. tine, a Buck2-based build system that composes OS images; available under MPL-2.0, and Quarry, a TUF-based tool that distributes those images to machines; available under Apache-2.0. What Amutable Foundations brings to the table is a service where Amutable runs the images, update repositories, control plane and vulnerability fixes for organizations and individuals who operate their own systems. No license has been stated for those company-run parts, and the preview announcement does not say how much of Foundations beyond tine and Quarry will be open source. Software and configuration both ship as signed images, and a machine boots only what is signed. Because there is no package manager and no SSH or interactive shell, a change means giving every machine in your fleet a new signed image. Its images are reproducible, come with a software bill of materials (SBOM) and are built from pinned inputs of whichever distribution you pick, with tine being able to import packages from Fedora or CentOS Stream. Each machine sends a signed report that records what it booted, from the firmware and boot loader up to the kernel and OS, plus the configuration it runs... Amutable's control plane verifies reports from systemd-report, an experimental command in systemd 260 that the company helped build. It compares each one with the declared state and flags machines that deviate. A rollout only continues while machines can show they are in a good state... Amutable is signup formlooking for teams that manage Linux fleets and need to show what state each machine is in. It expects to start bringing the first 'design partners,' as it calls them, on board over the coming weeks.
  
  
  Read more of this story at Slashdot.
  

• Religious Exemption from Using AI in Workplace Granted to Humanist
  "David Durman, a nontheistic humanist, recently secured a religious exemption from using AI in the workplace," reports TechCrunch.Durman, a University of Kentucky administrator, told TechCrunch that humanism centers on "human well-being and flourishing, both individually and collectively ... and implores a person to try to improve both their well-being and their flourishing as well as the others around them."He believes that using the technology runs counter to his beliefs. "The way we become moral actors for ourselves and for others is through the active application of our minds, and the diminishing of that [through AI use] is going to necessarily have a negative impact on our ability to do so," he said, reflecting on how overreliance on AI might affect critical thinking...." [Humanism] tends to appeal to people who are skeptical of a god or other supernatural power yet still seek a scientific and moral framework to ground themselves in. [Alexandria Huiskens, staff attorney at the American Humanist Association, told TechCrunch] "Concern about AI and human dignity can run through several different faiths and traditions, whether that's Catholic teachings, or Universalism, or Humanism, and we want Humanists or nontheists to know that they fall into these categories — that they are also protected by the law at work...." In Durman's administrative role, in which he supports researchers applying for grants, he has not been required to use AI at work. Like many workers across fields, some of his colleagues and leadership have recommended that employees try out these tools, so he sought to secure his exemption now, in case the suggestion becomes a mandate in the future. "I hope that if [others] have similar feelings, that they feel encouraged to pursue some kind of resolution," Durman said. A University of Kentucky spokesperson told TechCrunch they "determined that an accommodation could be provided while allowing the employee to continue performing the essential functions of their position." (They added that "As technology and job responsibilities evolve, accommodations may be reviewed to ensure they remain reasonable and workable.")
  
  
  Read more of this story at Slashdot.
  

• AI Makes Linux 7.4 Merge Window the Largest in Kernel History
  "On a Git commit basis, the Linux 7.4 merge window has been the busiest on record," writes Phoronix," with 19,671 commits since Linux 7.3: As of this morning in Linux Git ahead of v7.4-rc1, the kernel source tree is up to 41,605,120 lines. That's from 5,193,578 blank lines, 4,993,604 lines of comments, and 31,417,938 lines of detected code. Or nearly half a million lines of code added during the Linux 7.4 merge window, ignoring comments and blank lines [as detected by cloc ]. A historical graph of commits shows a clear spike for Linux 7.4, which Phoronix argues shows the definite recent uptick due to AI/LLM activity."With Linux kernel maintainers being "completely overwhelmed" due to both AI generated bug reports and patches/fixes, the Git commit activity has been surging as a result... The upward trend has continued building the past several kernel releases. Typically the merge windows saw 13~14k commits or less and now we are pushing 20k.... Linux 6.14: 10,034Linux 6.15: 13,568 Linux 6.16: 13,805 Linux 6.17: 12,289 Linux 6.18: 12,910 Linux 6.19: 13,229 Linux 7.0: 12,468 Linux 7.1: 13,963 Linux 7.2: 14,395 Linux 7.3: 16,267 Linux 7.4: 19,671 And "we could still see a few more trickle in today for Linux 7.4 ahead of the expected Linux 7.4-rc1 kernel release later in the day." UPDATE:"People are expecting 7.4 to be the next long-term support release," Linus Torvalds wrote today in his weekly state of the kernel update, saying that's also "another independent reason why some releases tend larger than others. So it may not *just* be the flood of AI patches." The Register reports:Torvalds also seems not to be completely convinced that all AI submissions are entirely helpful, by describing this release as "Large, and full of fixes for issues found by AI (and more and more the patches have been suggested by AI too, although they often get rewritten)."
  
  
  Read more of this story at Slashdot.
  

• Which Tech Companies Started Using Trump's Phrase 'Super Intelligence'?
  CNBC reports:A month after President Donald Trump ordered that "super intelligence" replace the term artificial intelligence within executive branch departments and agencies, his leading tech allies, Elon Musk and Mark Zuckerberg, followed suit on earnings calls. Their fellow tech CEOs were less eager to do the same... SpaceX and Tesla adhered to Trump's wishes on earnings calls last week after Musk, earlier in October, changed the name of his rocket company's AI division to SpaceXSI. Speaking on Tesla's call about his work on humanoid robots, Musk said, "Some of them look very impressive, but they're not really using any kind of advanced AI or SI." Zuckerberg was equally compliant on Meta's earnings call on Oct. 21, emphasizing his company's "goal of delivering personal superintelligence to everyone." However, Meta was already using the term, having created a unit called Meta Superintelligence Labs last year.... [Some other tech CEOs are holding out.] Amazon CEO Andy Jassy peppered his call with use of "AI" on Thursday, uttering the abbreviation well over a dozen times in his introductory remarks. A day earlier, Microsoft CEO Satya Nadella said one of the company's three points of focus is "designing AI to empower people." And Alphabet CEO Sundar Pichai was seconds into his quarterly earnings commentary when he said the search giant's "AI investments are driving increased usage and overall user growth...." Trump's preferred term is seeping into other correspondence and documents. Microsoft's annual report, filed last week, included eight mentions of "super intelligence," starting at the top of the letter to shareholders...IBM CEO Arvind Krishna, who didn't attend Trump's September lunch, used "SI" alongside "AI" during his company's earnings call last week.... Lip-Bu Tan, CEO of chipmaker Intel, said Thursday the supply shortage the chip industry is navigating has been "driven by the unprecedented demand for super intelligence." Some in the tech industry have been explicit in their support of Trump's terminology ahead of their forthcoming earnings reports next month. Palo Alto Networks CEO Nikesh Arora repeatedly referred to "SI" on CNBC, and posted on X on Sept. 30, "The meeting at the WH on SI was an epic moment...." Like Arora, [Nvidia CEO Jensen] Huang took to X after last month's AI meeting to praise the "White House Accord on Super Intelligence."
  
  
  Read more of this story at Slashdot.
  

• College Students are Pushing Colleges to 'De-Flock'
  Inside Higher Ed reports:In September, Emory University removed a dozen license plate-reading cameras from its campus in Atlanta and declined to renew its contract with Flock Safety, the company that sells and operates the automatic license plate readers and other mass-surveillance technology. For the coalition of Emory students and employees who had spent months pushing the university to "de-Flock," this was a victory... "We made it very clear that these cameras were unneeded surveillance considering we already have regular security cameras," [said Tony Torres, a sophomore biology major]... Through campus protests, petitions, meetings and teach-ins during the spring and summer, DeFlock Emory broadcast their concerns about the devices: Opaque data-sharing agreements could leave undocumented students vulnerable, the cameras could be hacked, institutions could use them to retaliate against student protesters and they could make students who fear being surveilled less likely go to class, see their friends or seek medical attention when they need it. Such concerns aren't unique to DeFlock Emory. College students across the country — including at Indiana University Bloomington, the University of Florida and the University of North Georgia — are mobilizing to de-Flock their campuses. And like Emory, other institutions are nixing their contracts. Cornell University announced last week it had not renewed its contract with Flock Safety and would be removing the cameras. Pennsylvania State University officials also announced earlier this month plans to end their contract with Flock. An Emory spokesperson told Inside Higher Edthat eliminating Flock's cameras "retains institutional control over our safety infrastructure." But the article also includes a quote from media/technology studies professor Torin Monahan at the University of North Carolina at Chapel Hill. He's spoken with campus police officers about how they're using Flock's cameras, and learned police departments have upgraded surveillance efforts in recent years. "They have an elaborate arsenal in place of high-tech surveillance equipment that really seems overpowered for what their day-to-day needs are, and also incredibly expensive."
  
  
  Read more of this story at Slashdot.
  

• Amid AI Bans, Microsoft and OpenAI Plan a 'Joyful' Hour of AI for Kids
  Generative AI was recently banned in America's two largest school districts, just weeks after OpenAI launched ChatGPT for Teens. But forging ahead, tech-backed nonprofit Code.org — now renamed CodeAI — has named OpenAI the "Lead Partner" for its 2026 Hour of AI (which last year replaced its signature event, "the Hour of Code"). Long-time Slashdot reader theodp explains:In August, OpenAI announced a new signature partnership with CodeAI to "prepare the first AI generation", explaining that "through the Hour of AI, OpenAI and CodeAI will introduce millions of students to the basics of using AI thoughtfully and responsibly." The updated Hour of AI website also listed OpenAI's investor/partner Microsoft as one of two "supporters" for the Hour of AI. Now, Microsoft is calling all K-12 teachers around the globe to register for What's working now: Making AI literacy joyful for every learner, a November 17th Microsoft Teams webinar where it will unveil its Minecraft-branded "Hour of AI experience." "Discover how AI literacy can be engaging, approachable, and joyful for students... and hear practical ideas from educators bringing AI learning into their schools and classrooms." Speakers include a marketing lead for Microsoft's AI training initiative plus the head of marketing for Microsoft Minecraft Education.
  
  
  Read more of this story at Slashdot.
  

• Security: Why Linux Is Better Than Windows Or Mac OS
  Linux is a free and open source operating system that was released in 1991 developed and released by Linus Torvalds. Since its release it has reached a user base that is greatly widespread worldwide. Linux users swear by the reliability and freedom that this operating system offers, especially when compared to its counterparts, windows and [0]

• Essential Software That Are Not Available On Linux OS
  An operating system is essentially the most important component in a computer. It manages the different hardware and software components of a computer in the most effective way. There are different types of operating system and everything comes with their own set of programs and software. You cannot expect a Linux program to have all [0]

• Things You Never Knew About Your Operating System
  The advent of computers has brought about a revolution in our daily life. From computers that were so huge to fit in a room, we have come a very long way to desktops and even palmtops. These machines have become our virtual lockers, and a life without these network machines have become unimaginable. Sending mails, [0]

• How To Fully Optimize Your Operating System
  Computers and systems are tricky and complicated. If you lack a thorough knowledge or even basic knowledge of computers, you will often find yourself in a bind. You must understand that something as complicated as a computer requires constant care and constant cleaning up of junk files. Unless you put in the time to configure [0]

• The Top Problems With Major Operating Systems
  There is no such system which does not give you any problems. Even if the system and the operating system of your system is easy to understand, there will be some times when certain problems will arise. Most of these problems are easy to handle and easy to get rid of. But you must be [0]

• 8 Benefits Of Linux OS
  Linux is a small and a fast-growing operating system. However, we can’t term it as software yet. As discussed in the article about what can a Linux OS do Linux is a kernel. Now, kernels are used for software and programs. These kernels are used by the computer and can be used with various third-party software [0]

• Things Linux OS Can Do That Other OS Cant
  What Is Linux OS?  Linux, similar to U-bix is an operating system which can be used for various computers, hand held devices, embedded devices, etc. The reason why Linux operated system is preferred by many, is because it is easy to use and re-use. Linux based operating system is technically not an Operating System. Operating [0]

• Packagekit Interview
  Packagekit aims to make the management of applications in the Linux and GNU systems. The main objective to remove the pains it takes to create a system. Along with this in an interview, Richard Hughes, the developer of Packagekit said that he aims to make the Linux systems just as powerful as the Windows or [0]

• What’s New in Ubuntu?
  What Is Ubuntu? Ubuntu is open source software. It is useful for Linux based computers. The software is marketed by the Canonical Ltd., Ubuntu community. Ubuntu was first released in late October in 2004. The Ubuntu program uses Java, Python, C, C++ and C# programming languages. What Is New? The version 17.04 is now available here [0]

• Ext3 Reiserfs Xfs In Windows With Regards To Colinux
  The problem with Windows is that there are various limitations to the computer and there is only so much you can do with it. You can access the Ext3 Reiserfs Xfs by using the coLinux tool. Download the tool from the  official site or from the  sourceforge site. Edit the connection to “TAP Win32 Adapter [0]

• Sam Altman wants to take your RAM
  From a global allocation perspective, actually, its quite terrible to have everybody have a bunch of the worlds limited supply of DRAM sitting in their own computer and being used 5% of the time,! Altman said. You want maximum utilization in the cloud if youre trying to deal with this very supply-constrained environment. And somehow many peoples intuition is the opposite of that.! ↫ Andrew E. Freedman at Toms Hardware Im installing a 32bit operating system without support for physical address extension on my laptop with 64GB of RAM, just because I can.

• Sculpt OS 26.10 releases
  Sculpt OS 26.10 brings quite a few new features, like scalable cursors, support for UK keyboards, better webcam support, and more, but the real meat of this release is much tastier. First, Sculpt 26.10 is the first version based on Genodes custom microkernel instead of relying on a 3rd-party kernel. This kernel  designed from the ground up for the needs of Genode and Sculpt OS in particular  is not only more micro! than any other of the microkernels supported by Genode, it also solves long-standing deficiencies concerning CPU scheduling and kernel-memory management. Sculpt OS finally stands on Genodes own footing! Finally, Sculpt OS 26.10 pays tribute to this years overall theme of building bridges! by featuring our software development kit (Goa SDK) running directly on Sculpt OS without virtualization. This entails a wealth of tooling including GCC, Binutils, Git, Sequoia, Expect, Curl, man, Make, and CMake having landed on Genode. Although still young and not time-tested yet, it shows whats possible today and allows us developers to gradually shift more and more development routine into this self-hosted environment, stressing the general-purpose qualities of Genode and motivating further optimizations. ↫ Sculpt OS release 26.10 announcement This new release also completes the transition from XML to Genodes own HID language for configuration, moves from VirtualBox 6 to 7, and upgrades a whole slew of its Linux-based drivers

• How long do you need to hold down the power button to turn off a PC?
  Raymond Chen published another story from the Windows development trenches, this time about what happens when you hold down the power button. If you hold a PC’s power button for 12 seconds, it will turn off at the hardware level without notifying the operating system. This is a safety feature so that you can turn of the computer even if the operating system’s “Shut down” command isn’t working. After eight seconds of the power button being held down, the Windows kernel realizes that the user is trying to do a force-power-off of the system, and it quickly takes a kernel dump that can be uploaded to the Windows Error Reporting service the next time you turn the system on. ↫ Raymond Chen Im a bit confused by these numbers, because I have never seen a PC take this long to power off when holding down the power button; usually it takes only a few seconds to do so, meaning Windows would never generate said kernel dump. I tried reading through the various ATX specification documents to find more information on this, but then I remembered Im not an electrical engineer so I have no idea what Im looking at. The baseline is that ATX always provides standby power to the motherboard, and pressing the power button shorts the power button pin to ground, telling the PSU to power on fully. Pressing the power button if the computer is running tells the operating system to initiate a shutdown (although you can change this behaviour), but if you hold the button down for a certain number of seconds, it forces a power-off. So far, so good; basic information. It seems that the length of time you need to hold down the power button to force a power-off is dependent on the motherboard in question, handled by a microcontroller or some other IC. Virtually every source I can find says this timing is set to about 4-5 seconds, which is quite a bit shorter than the number of seconds given by Chen. Perhaps motherboard manufacturers consider the 12 seconds to be too long, and just do their own thing, regardless what the ATX specification suggests? What further complicates matters is that Chen details how the kernel dumps created after pressing the power button for 8 seconds do, in fact, get sent to Microsoft once the computer turns on again. In fact, he is one of the people who gets to see these dumps and respond to them, so obviously they are indeed rolling in. Does this mean theres a huge number of computers out there that require you to hold down the power button for 12 seconds to force a shutdown that nobodys ever seen? These emergency kernel dumps are internally classified as “long power button hold” (LPBH) failures. One of the pieces of information recorded in these emergency kernel dumps is whether the screen consists entirely of black pixels. Those failures are sub-classified as “black screen LPBH”, and they go to a special virtual team for analysis. (I happen to be a member of this black screen LPBH team.) ↫ Raymond Chen Whats going on here? Obviously, Im not going to doubt Chen, so there must be something here I dont quite understand or that Im missing. The ATX specification might suggest 12 seconds, but could Windows perhaps adapt its kernel dump behaviour  dumping much sooner than 8 seconds  based on the motherboard its running on, maybe through information provided by the chipset drivers? I would love it if someone more knowledgeable than me can help us unravel this small mystery.

• How curl was accidentally Turing-complete for nine months
  From curl 8.12 through 8.16, config files could slice variable values and include other config files without an explicit depth cap. Together, these features let curl simulate any two-counter Minsky program. Under the usual idealization of unbounded strings and resources, this construction was Turing-complete. Curl 8.17.0 added a five-level include cap that breaks this reduction. ↫ Nicolas Seriot Neat.

• AlpineBSD combines NetBSD with Alpines apk package manager
  AlpineBSD is an operating system based on the NetBSD kernel with a userspace inspired by Alpine Linux and the objective of making it possible to use as little AI-generated software as possible. There is no LLM output included in the base system or main package repository (AlpineBSD AI policy). ↫ AlpineBSDs website AlpineBSD uses the NetBSD kernel, libc, and essential tools, and combines them with Alpines apk-tools package manager, busybox, and generlaly preferring GNU tools over their BSD equivalents. It uses the s6 init system, but the project intends to add OpenRC as an alternative. The project is in its very early stages, so dont expect things like an installer; youre on your own, basically.

• My favourite PowerMac is a Nintendo Wii!
  The Nintendo Wii (and its related consoles) were already made to run the PowerPC version of Windows NT as well as Mac OS X, but now we can add another milestone to the list: classic Mac OS. So today I reached a nice milestone in one of my projects: my work porting classic Mac OS to PowerPC systems with what I affectionately call ArtX chipsets (Nintendo GameCube, Wii, eventually Wii U; the GameCube’s Flipper integrated chipset was very much designed by ArtX as it was effectively finished when ATI acquired the company, and the Wii’s Vegas (and its later revision Bollywood) and Wii U’s Latte are effectively straight successors) reached the desktop for the first time, most likely the first time since the CHRP clone era that someone outside of Apple brought up classic Mac OS on a new system to the desktop. Despite still being nowhere near ready for a public release, I want to talk about the challenges I faced with this project so far. ↫ Rairii at Virtuallyfun Various versions of Mac OS boot to the desktop, including Mac OS 9.2.2, the last ever version, but theres still a ton or work to be done before this is ready for release. Still, with Rairii amazing track record of porting all kinds of things to various PowerPC machines, including getting the PowerPC version of Windows NT to run on various PowerPC Macs, I have little doubt theyll manager to get this to a releasable state. I absolutely love this kind of work.

• Microsoft hopefully fixes Modern Standby and adds online Windows reinstallation
  I think its safe to say that Windows Modern Standby feature isnt exactly free from issues. The biggest problem seems to be that its not very good at actually determining when to transition between regular sleep and hibernation, often leaving users with an empty battery as they open their laptops lid. Microsoft has now released an update to hopefully address this long-standing problem. This update improves the adaptive hibernate policy to provide more instant-on resumes from Modern Standby while helping preserve battery life when the charge is low. Noticeable changes include less hibernation while the battery is above 80% and hibernating sooner when the battery is below 10%. ↫ KB5127936 Among other new features and changes this update brings are Cloud Rebuild, a way for devices to install Windows without needing a local image. Cloud Rebuild can be started form within an existing installation, remotely by administrators, or through the Windows Recovery Environment. Obviously, a working internet connection, wired or wireless, is required for this feature to work. This is the same update that introduces CLAT, which we talked about yesterday, to smooth the transition from IPv4 to IPv6.

• NetBSD adds nano-like text editor to base system
  Flag LinuxNetBSD made a seemingly small, but very welcome announcement today: theyre adding a more user-friendly, easier to use command-line text editor to the base install. To ease the transition for new users, NetBSD -current now includes an alternative editor to vi(1) and xedit(1) in its base system, atto(1). It is a modeless screen-based editor similar to nano, pico, xedit, or emacs. It is only 48 kilobytes, making it suitable for inclusion in the rescue system. ↫ NetBSD Foundation on Fedi Most guides and how-to article for operating systems like NetBSD assume the use of vi, and while I dont want to ignite a flamewar, vi isnt exactly the most approachable or friendly piece of software out there. My occassional text editing in the command line is all done through nano, but now Im definitely curious to give atto a go. While other tech news websites are plastered with articles about a PC maker adding a touch screen to one of their laptops, were talking about a new CLI text editor in NetBSDs base system. Priorities, folks.

• Windows CLAT is now generally available
  Windows 11 25H2, starting with build 26200.9550, now comes with something called CLAT. As organizations move toward IPv6-only and IPv6-mostly networks, some applications still depend on IPv4-only applications or services. Windows CLAT helps those applications continue to work when a network does not provide native IPv4 connectivity. CLAT is the client-side component of`464XLAT. It statelessly translates IPv4 traffic from the Windows client into IPv6 for transport across the network to a provider-side translator (PLAT), which provides stateful NAT64 translation to IPv4. ↫ Jim Alumbaugh at Microsofts Networking Blog Yet another important component of the long, neverending transition to IPv6. Like endlessly cutting a cucumber in half, youll never quite run out of cucumber to cut.

• Sylphide OS: an operating system for computers based on microcontrollers
  Do you want a hobby operating system with a desktop for a microcontroller-based computer? Sylphide OS is a new project aiming to build just that. For the last few weeks, I’ve worked on a new pet project: an operating system for computers based on microcontrollers. There aren’t many yet, but I expect them to be more and more common. Why MCU computers ? You get a relatively very simple platform, booting straight to your code (or almost), and you can understand the whole architecture. Exactly as it was with home computers long ago. And not at all what you get with modern computers. Even booting involves lot of very different systems, black magic, and even blog/proprietary software. ↫ Thomas Capricelli Its very early in development, but by building it atop FreeRTOS, Capricelli had a head-start. Its got a basic desktop, one that might need some changes to avoid the lawyers. The codes open source, of course.

• Oldest GUI application that still runs on Windows 11
  Whats the oldest Windows GUI application you can still run on Windows 11 today, without any modifications? For now, the best answer Boris Popik can come up with is an innocuous application from build 347 of Windows NT 3.1, an early prerelease: CDPLAYER.EXE. You cant go any older than that, because earlier prerelease builds had not yet finalised its PE format and calling convention. Neat find. Popik also mentions a few other contenders, but I wont spoil those here.

• Another month of Redox improvements
  Another month has crumbled to dust under the oppressive boots of time, so its time for another month of Redox improvements. This past month, Redox build system gained support for Clang, SDL2 saw performance improvements, and WebKitGTK3s HTML layout rendering was fixed. Users of Intel Tiger Lake processors can now enjoy external display hot-plugging, and overall system performance has been improved in a variety of ways. And as always, theres the long lists of kernel, relibc, and driver improvements and fixes as well. Redox keeps making big strides every month, and its definitely one of the few alternative operating systems that actually feels like it might, one day, be an actual contender for general purpose use.

• Microsoft.UI.Reactor: a C#-first way to build WinUI apps
  Thew day ends in a Y, so Microsoft is launching a new way to build Windows applications. Get excited, Windows application developers! If you caught our session at Microsoft Build 2026 or you’ve been watching the repo, you’ve seen this one taking shape in public for a while now, and a lot has changed since Build. Here’s the longer tour: Microsoft.UI.Reactor, an experimental C# framework that brings the MVU (Model-View-Update) pattern to WinUI desktop apps. No XAML files, no code-behind, no ViewModels. Two things before the fun part. Reactor is experimental: no support policy, no API guarantees, published this early on purpose because we’d rather hear we got the design wrong now than once people have shipped on it. And it is not a replacement for XAML or MVVM, which we’ll come back to. ↫ Alexandre Zollinger Chohfi at Microsofts Dev Blogs At multiple points in the linked blog post, Microsoft underlines that no, Reactor is not going to replace XAML. Im sure Windows developers who learned Win32, Silverlight, WinRT XAML, WPF, UWP, WinUI 2 and 3, and all the others, over the past two decades will feel deeply comforted by Microsofts insistence that Reactor will not replace XAML. Microsoft repeats: this wont replace XAML. They swear.

• MacOS Extensions pack for the Apple Network Server v1.0
  Weve been following along with Carmen Kaisers Apple Network Server exploits, and by now things are really starting to come together for owners of this machine. When we last left off, the ROM to allow Mac OS to run on the machine which normally runs IBMs AIX, but there were still a number of bugs, limitations, and issues to be worked out. A lot of progress on that front has been made. The good news is, many of the issues with the preproduction ROM in Mac OS can be fixed or worked around in software. So Ive fixed or worked around many of them in software: the MACE Ethernet is fixed, the on-board video is now supported, and the ANS can restart properly back into Mac OS. Plus, because its the preproduction ROM, you can still boot AIX, thus preserving the entire historical reason for Shiners existence. Heres the first cut of that software and how it was developed. ↫ Cameron Kaiser Theres still two issues Kaiser wishes to address  the internal SCSI bays dont work, and the ROM doesnt properly register parity RAM  but the progress here is amazing.

• CoW, which (sort-of) brings FVWM to Wayland, reaches version 0.4
  Thomas Adam, one of the core developers of FVWM, has been working on CoW for a while now. CoW can best be described as FVWM for Wayland!, which uniquely uses the River compositor. River, in turn, is unique in that it does not combine the compositor and window manager into a single program, allowing for a more traditional X11-like approach. Adam released version 0.4 today, which comes with a load of fixes, changes, and minor improvements, as well as one bigger-ticket item: container windows. This PR introduces the concept of a top-level container window. This means a window can be subdivided into columns and rows (called panes) and can be resized independently of one another. The idea for this has been unashamedly stolen from shod. ↫ Thomas Adam Ive been keeping an eye on CoW ever since I learned about it when it was first released, and at some point soon I want to build a desktop around it for myself.

• The many many missed opportunities of Sonic 06
  Speaking of games, if youve ever heard anything about or even played Sonic 06, you know this wasnt the most polished entry in the hedgehogs franchise. In fact, its probably one of the worst, and considering the average quality of Sonic games, thats quite an achievement. The team thats working on decompiling the game to make it run on the PC obviously had to dive deep into the games inner workings, and the process learned a lot about why, exactly, the game is so notoriously bad. It really makes you wonder what exactly went wrong? If you look at what limited footage we have of beta content, we can see many effects that aren’t present in the final game. Kingdom Valley had full bump maps, Castle Town had more complex geometry and plants, and New City’s collision implies a very different building layout at some point in development. It turns out, much of the cut content is actually still in the game, but is simply not enabled for performance reasons in vanilla. Even with the cut-back visuals, the game struggles to reach target FPS on real hardware. It’s not surprising that given the crunch Sonic Team were under to get the game out the door, these features were among the first to go. ↫ Isaac Marovitz The article details what, exactly, was turned off for the final release, and its quite an interesting read. Of course, the team intends to try and address many of these issues, and they think they can push the game and its engine to much greater heights.

• KDE Plasma 6.8.2 Released With More KWin and Wayland Fixes
  by George Whittaker
  The KDE Project has released KDE Plasma 6.8.2, delivering another round of stability improvements for its Wayland-based Linux desktop environment. Released on October 27, 2026, the update arrives one week after Plasma 6.8.1 and two weeks after the anniversary release of Plasma 6.8, which marked 30 years since the KDE project's founding.
  
  This second maintenance release concentrates on correcting regressions discovered after the initial rollout. The largest collection of changes targets KWin, KDE's window manager and Wayland compositor, with fixes involving multi-GPU synchronization, display handling, pointer constraints, color pipelines, and window stacking. Additional improvements address disappearing desktop icons, application launcher behavior, remote desktop sessions, screen recording, accessibility, and system monitoring.
  
  Although Plasma 6.8.2 does not introduce major new desktop features, its corrections are particularly important because Plasma 6.8 completed KDE's transition away from native X11 desktop sessions. With Wayland now serving as Plasma's display foundation, improvements to KWin and its supporting components directly affect the reliability of the entire desktop environment.
  KDE Continues Stabilizing Its Anniversary Release
  KDE Plasma 6.8 arrived on October 14, 2026, coinciding with the project's 30th anniversary. The release introduced significant desktop changes, including the retirement of native X11 sessions, additional HDR improvements, expanded remote desktop capabilities, NVIDIA graphics optimizations, and further development of KDE's Union theming engine.
  
  The transition represented an important architectural milestone, but major desktop releases frequently expose problems that were not encountered during development or beta testing. Linux desktops must operate across numerous combinations of graphics hardware, display configurations, drivers, input devices, and applications. Even extensive testing cannot always reproduce every environment used by the wider community.
  
  KDE acknowledged this challenge during the development cycle following Plasma 6.8, noting that users had discovered regressions that were not reported during the beta period. Contributors responded with a substantial collection of fixes, many of which have now reached the stable 6.8 branch through its first two maintenance releases.
  
  Plasma 6.8.2 continues that stabilization effort. Rather than changing the desktop's overall direction, it improves the reliability of existing functionality and addresses issues that could affect everyday workflows. The release includes corrections across KWin, Plasma Desktop, Plasma Workspace, Discover, KRDP, KPipeWire, and several other components.
  Go to Full Article

• RefreshOS 3.1 Strengthens Its Debian Foundation With Independent Package Management
  by George Whittaker
  The RefreshOS project has released RefreshOS 3.1, bringing an updated Debian foundation, a dedicated software repository, improved 32-bit application compatibility, and several refinements to its KDE Plasma desktop experience. Released on October 27, 2026, the update advances the distribution's 3.x "Colorful Cosmos" series while introducing infrastructure that could significantly improve how RefreshOS delivers its own packages and configuration changes.
  
  The new release moves from Debian 13.4 to Debian 13.7 "Trixie", incorporates Linux kernel 6.12.113, and continues using KDE Plasma 6.3.6. However, the most important development is the introduction of an official RefreshOS APT repository with separate Stable, Testing, and Experimental channels. This gives the project a more structured way to distribute customized software while continuing to benefit from Debian's established package ecosystem.
  
  RefreshOS 3.1 also enables i386 architecture support, making it easier to install compatible 32-bit software and dependencies required by applications such as Steam. Additional changes address desktop localization, KDE integration, installer configuration, package permissions, and installation image cleanup. Together, these improvements represent an effort to make RefreshOS easier to maintain while preserving its focus on a ready-to-use Linux desktop.
  RefreshOS Builds on Debian's Stable Release Model
  RefreshOS is a Debian-based Linux distribution developed by eXybit Technologies, designed to provide a polished desktop environment without requiring users to configure every component manually. The project combines Debian's stable package foundation with KDE Plasma, preinstalled applications, hardware support, multimedia capabilities, and custom desktop styling.
  
  Unlike distributions that emphasize constant adoption of the newest software versions, RefreshOS prioritizes a relatively predictable desktop experience. Its Debian foundation provides access to established security maintenance, package management, and compatibility practices, while RefreshOS adds its own configuration choices to simplify everyday use.
  
  Version 3.1 continues that philosophy by incorporating Debian 13.7, the seventh point release of Debian 13 "Trixie." Debian published this update on September 12, 2026, primarily to consolidate security corrections and fixes for significant software problems. These point releases do not represent entirely new Debian generations. Instead, they refresh installation media and package selections so newly installed systems begin with a more current collection of fixes.
  Go to Full Article

• Tails 7.15.1 Blocks Compromised HTTPS Certificates in Urgent Privacy Security Fix
  by George Whittaker
  The Tails project has released Tails 7.15.1, an emergency security update addressing a compromised certificate authority that could allow attackers to impersonate legitimate HTTPS websites. Released on October 23, 2026, the update focuses on protecting users against a potentially serious man-in-the-middle attack involving certificates associated with eMudhra, an authority whose intermediate certificates were compromised.
  
  The emergency release updates Tor Browser to version 15.0.26, addressing CVE-2026-113470, and modifies the distribution's trusted certificate authorities to block all eMudhra certificates. These changes are particularly important for Tails because the operating system routes internet traffic through the Tor network, where malicious exit nodes or other network intermediaries could potentially exploit compromised certificates to impersonate secure websites.
  
  Unlike a conventional maintenance update, Tails 7.15.1 does not introduce major desktop features, new applications, or significant interface changes. Its purpose is to close a security gap that could undermine the authenticity of HTTPS connections. The developers recommend upgrading promptly, especially for users who rely on Tails for sensitive communications, anonymous research, journalism, or other privacy-critical activities.
  Why Tails 7.15.1 Was Released as an Emergency Update
  Tails, short for The Amnesic Incognito Live System, is a Debian-based Linux distribution designed to help users preserve their privacy and reduce traces of their computing activity. It typically runs from a USB stick and routes internet connections through Tor, making it useful for people who need stronger privacy protections than those provided by a conventional desktop operating system.
  
  The distribution also emphasizes minimizing persistent data. By default, Tails operates as a live environment and does not retain ordinary session activity after shutdown. Users who need to preserve selected files and settings can configure encrypted Persistent Storage on their USB device, allowing them to maintain important information across sessions without changing the operating system's general amnesic behavior.
  
  Because Tails is built around privacy and secure communication, problems involving HTTPS certificate validation deserve particular attention. Tor helps obscure the relationship between a user's network location and the websites they visit, but it does not automatically guarantee that every website encountered through an exit node is authentic. HTTPS provides an additional layer of protection by authenticating websites and encrypting communications between the browser and the destination server.
  Go to Full Article

• Omarchy 4.0.5 Released With Better NVIDIA Laptop Support
  by George Whittaker
  The Omarchy project has released Omarchy 4.0.5, introducing a substantial collection of hardware compatibility improvements, desktop performance optimizations, security fixes, and package updates for the Arch Linux-based operating system. Released on October 18, 2026, the update focuses on refining the existing desktop experience while preparing the distribution for its next major feature release.
  
  Among the most important changes are improved NVIDIA hybrid graphics support for laptops, an updated Linux 7.2.8 kernel featuring the BORE scheduler, and compatibility improvements for Qt 6.12. The release also resolves boot-related black screens, fixes audio problems affecting certain Dell and USB speaker configurations, corrects Steam graphics driver selection, and improves the reliability of several desktop utilities.
  
  Although version 4.0.5 is primarily a maintenance release, its improvements extend across many of the components that determine how smoothly a Linux desktop operates. From faster application launches and more responsive desktop panels to stronger security defaults and more reliable hardware detection, the update demonstrates Omarchy's continued emphasis on delivering a preconfigured Linux environment that requires relatively little manual setup.
  Omarchy Continues Refining Its Arch Linux Desktop Experience
  Omarchy is an opinionated Arch Linux-based distribution designed to provide a ready-to-use development and desktop environment built around the Hyprland Wayland compositor. Rather than presenting users with a minimal installation that requires extensive customization, Omarchy combines a carefully selected collection of applications, themes, keyboard shortcuts, and system configurations into a cohesive desktop experience.
  
  The distribution has attracted attention among developers and experienced Linux users who appreciate keyboard-driven workflows, tiling window management, and the flexibility of Arch Linux without necessarily wanting to configure every component manually. Its desktop environment emphasizes efficient navigation, integrated development tools, and a consistent visual design, while retaining access to Arch's extensive software repositories.
  
  Version 4.0.5 continues that approach by concentrating on problems that can interrupt everyday workflows. The release improves hardware compatibility, corrects regressions introduced by newer software packages, and reduces unnecessary delays in common desktop operations. Rather than introducing a dramatic redesign, the developers have focused on making the existing environment more predictable and responsive.
  Go to Full Article

• KDE Plasma 6.8 Marks 30 Years With a Major Shift to Wayland and a More Powerful Linux Desktop
  by George Whittaker
  The KDE Project has officially released KDE Plasma 6.8, introducing a substantial collection of desktop improvements while celebrating three decades of open-source software development. Released on October 14, 2026, exactly 30 years after Matthias Ettrich announced the original KDE project, this anniversary edition brings significant changes to display management, accessibility, graphics performance, remote desktop functionality, system monitoring, and application theming.
  
  Perhaps the most consequential development is KDE's decision to retire native X11 desktop sessions in Plasma 6.8, completing its transition toward Wayland as the primary display architecture. The release also introduces NVIDIA triple buffering by default, improved HDR support, a more capable remote desktop server, CPU affinity controls in System Monitor, and expanded capabilities for the experimental Union theming engine. These improvements reflect KDE's effort to modernize the Linux desktop while maintaining the customization and flexibility that have defined Plasma for years.
  
  Plasma 6.8 is therefore more than a commemorative release. It represents an important architectural transition for one of Linux's most widely used desktop environments, with changes that affect both everyday users and developers building applications for the next generation of Linux desktops.
  KDE Celebrates Three Decades of Open-Source Desktop Development
  KDE's history began on October 14, 1996, when Matthias Ettrich proposed creating a consistent graphical desktop environment for Unix-like operating systems. At the time, Linux was becoming increasingly capable as a free operating system, but its graphical experience remained fragmented. Users could choose from several window managers and applications, yet there was no universally integrated desktop environment comparable to the commercial graphical systems available elsewhere.
  
  The original KDE initiative sought to address that limitation by building a cohesive desktop around the Qt application framework. Over the following decades, the project evolved through several major generations, introducing increasingly sophisticated desktop technologies while expanding into applications, development frameworks, mobile interfaces, and other open-source projects.
  
  Plasma 6.8 arrives as KDE marks its 30th anniversary, but its development priorities are focused primarily on the future. Rather than introducing a purely cosmetic anniversary edition, KDE has concentrated on modernizing underlying desktop infrastructure while improving accessibility, usability, and performance. The result is a release that combines immediately visible enhancements with architectural changes intended to support future development.
  Go to Full Article

• Building a Reliable Event-Driven Payment Service With XRP Ledger
  by Emma Clapp
  Receiving a transaction notification is only the first step. Production software still has to decide whether that event is safe to turn into application state.
  
  A WebSocket callback can arrive in milliseconds. What happens afterward is harder. The Go to Full Article

• Linux Moves Closer to Retiring the x32 ABI After Years of Limited Adoption
  by George Whittaker
  Linux kernel developers are renewing efforts to retire the x32 application binary interface (ABI), a little-used compatibility feature that attempted to combine the advantages of 64-bit processors with the smaller memory footprint of 32-bit applications. A revised patch series submitted on October 8, 2026, proposes the first steps toward disabling the interface, potentially ending support for an architecture experiment introduced more than 14 years ago.
  
  The latest proposal comes from Sebastian Andrzej Siewior, a Linux kernel developer at Linutronix who has been working on the removal effort throughout 2026. Rather than immediately deleting every component associated with x32, the proposed approach would first prevent the feature from being enabled through normal kernel configuration. This would give remaining users and distribution maintainers an opportunity to respond before the underlying implementation is removed.
  
  The effort reflects a broader challenge in Linux development: maintaining compatibility with older or rarely used technologies while keeping the kernel manageable, secure, and efficient. Although x32 offered theoretical performance and memory advantages, it never achieved widespread adoption. With conventional x86_64 software dominating modern Linux systems, developers are increasingly questioning whether the additional maintenance burden remains justified.
  Understanding the Linux x32 ABI
  The x32 ABI was introduced with Linux kernel 3.4 in 2012 as an alternative to conventional 32-bit and 64-bit application environments. Its goal was to provide applications with access to the architectural improvements of x86_64 processors while retaining smaller data types and pointers associated with 32-bit software.
  
  Traditional 32-bit x86 applications use the i386 ABI, which operates with a more limited register set and 32-bit execution conventions. Standard x86_64 applications, meanwhile, benefit from additional general-purpose registers, wider registers, and modern calling conventions, but they normally use 64-bit pointers. Those larger pointers can increase memory consumption in applications that maintain large numbers of pointer-heavy data structures.
  
  The x32 ABI attempted to offer a compromise. Applications would execute using the x86_64 instruction set and its larger register file while retaining 32-bit integers, long values, and pointers. This programming model is commonly described as ILP32, meaning that integers, long integers, and pointers are all 32 bits wide.
  
  The distinction can be illustrated by comparing the expected sizes of common C data types:
  Go to Full Article

• Google's Kage Project Rethinks Linux Kernel Security With Isolated Device Drivers
  by George Whittaker
  Google is exploring a new approach to Linux kernel security that could significantly change how device drivers interact with the operating system. The experimental project, known as Kage, uses compiler-based sandboxing to isolate drivers inside the kernel, potentially limiting the damage caused by memory corruption, programming errors, and exploitable vulnerabilities without requiring drivers to run as separate user-space processes.
  
  The research was presented at the Linux Plumbers Conference 2026, held October 5–7, with Stanford University and Google researcher Zachary Yedidia discussing how LLVM's Lightweight Fault Isolation (LFI) technology can create restricted execution environments for native kernel code. Unlike conventional isolation techniques, which often depend on separate processes or virtual machines, Kage attempts to preserve the performance advantages of kernel-space execution while reducing the amount of memory individual drivers can access.
  
  Early prototypes have already demonstrated the concept using NVMe storage, networking, and Wi-Fi drivers. However, Kage remains an experimental research project rather than a feature available in mainstream Linux distributions. Its developers are still investigating performance, hardware access, and compatibility with more complicated drivers, including graphics hardware.
  Why Device Drivers Remain a Major Linux Security Challenge
  Linux device drivers are responsible for connecting the operating system to hardware components, including graphics cards, network adapters, storage controllers, USB devices, and wireless chipsets. Most traditional Linux drivers execute in kernel space, giving them privileged access to system resources and the ability to interact directly with hardware. This architecture is one reason Linux can deliver high performance across such a broad range of devices, but it also creates a significant security challenge.
  
  When an ordinary application encounters a memory error, the operating system can often terminate that process without affecting the rest of the system. Kernel drivers operate under different conditions. Because they typically share the kernel's address space and privileges, an invalid memory access or exploitable vulnerability can affect unrelated kernel components, potentially resulting in a system crash, privilege escalation, or complete compromise of the operating system.
  
  The challenge becomes more complicated when considering the enormous number of drivers supported by Linux. Some are maintained by large organizations with extensive testing infrastructure, while others receive contributions from smaller development teams or individual maintainers. Even carefully reviewed drivers can contain bugs, particularly when they interact with complicated hardware, asynchronous operations, and memory-management mechanisms.
  Go to Full Article

• Speech Synthesis on Linux: Adding a Voice to Scripts and Systems
  by George Whittaker
  Linux users have long had a pragmatic relationship with text-to-speech. The classic open-source engines have been available for years, wired into accessibility tools and the occasional script, dependable but unmistakably robotic. They do the job where the job is simply to convert text to some kind of speech, but the mechanical output has kept them out of anything where the voice actually matters. The arrival of high-quality speech synthesis delivered over an API changes what is possible, letting Linux users add genuinely natural voices to scripts, services, and applications without hosting a heavyweight model themselves.
  The Familiar Trade-Off
  Anyone who has used the traditional Linux speech engines knows the trade-off. They are free, local, and scriptable, which fits the Linux ethos perfectly, but the voices are clearly synthetic. For accessibility and for utilitarian tasks where intelligibility is all that counts, that has been acceptable. For anything user-facing where the quality of the voice shapes the experience, it has not.
  
  The alternative of running a modern, high-quality speech model locally is possible but comes with real costs: significant computational requirements, model management, and the ongoing maintenance of a demanding piece of infrastructure. For many use cases, particularly on servers, embedded systems, or ordinary workstations, that overhead is disproportionate to the need. This is the gap that an API-based approach fills, offering the quality of a large modern model without the burden of hosting one.
  The API Approach on Linux
  Delivering speech synthesis over an API fits naturally into how Linux users already build things. Rather than installing and maintaining a model, you make a request to a service and receive audio back, which you can then play, save, or pipe into whatever comes next. A Go to Full Article

• Archinstall 4.5 Released with AArch64 Support, Real-Time Kernels, and Major Installer Fixes
  by George Whittaker
  The Arch Linux project has released Archinstall 4.5, the latest version of its guided text-based installer, bringing expanded AArch64 support, new real-time Linux kernel options, additional translations, security improvements, and numerous fixes for installation workflows.
  
  Archinstall 4.5 was released on September 29, 2026, roughly three months after Archinstall 4.4. The new version arrives just ahead of Arch Linux's October installation media refresh and has already been packaged as archinstall 4.5-1 for Arch Linux repositories.
  
  While Archinstall remains optional, it provides users with a guided way to configure an Arch Linux installation without manually performing every step described in the Arch installation guide. Version 4.5 concentrates primarily on hardware support, installer reliability, security, and expanding the range of systems that can use the guided installation process.
  AArch64 Support Gets a Major Upgrade
  One of the biggest changes in Archinstall 4.5 is improved support for AArch64, the 64-bit ARM architecture.
  
  The installer can now handle GRUB and Limine EFI installations on AArch64 systems. It also gains support for the proper AArch64 root partition type GUID.
  
  Previously, parts of Archinstall's bootloader configuration were more heavily oriented toward x86_64 installations. The latest changes make its guided installation workflow more useful on ARM64 hardware.
  
  AArch64 has become increasingly important throughout the Linux ecosystem. The architecture can now be found in cloud servers, development boards, laptops, workstations, and specialized computing platforms.
  
  Supporting both GRUB and Limine EFI installations gives Archinstall more flexibility when preparing these systems.
  GRUB Can Now Be Installed on AArch64
  GRUB remains one of the most widely used Linux bootloaders, and Archinstall 4.5 extends its installation logic to AArch64 EFI systems.
  
  This allows ARM64 installations to use a bootloader workflow much closer to what Archinstall already provides on conventional x86_64 UEFI computers.
  
  The change doesn't mean every ARM device will automatically become compatible with Arch Linux. ARM hardware can still have highly platform-specific firmware and boot requirements.
  
  It does, however, remove an important Archinstall limitation for AArch64 machines that provide conventional UEFI environments.
  Limine EFI Support Expands to ARM64
  The same architectural expansion applies to Limine.
  
  Limine is a modern multiprotocol bootloader supported as one of Archinstall's bootloader choices. Archinstall 4.5 extends its EFI installation support to AArch64 as well.
  Go to Full Article