All the News that Matters

• [$] 25 years of Buildroot
  Buildroot maintainer Peter Korsgaardgave a presentation about the long history of the build tool for embeddedLinux systems at the 2026 EmbeddedLinux Conference Europe. In it, he covered more than just the past 25years, looking at the current status of the project as well as what toexpect in Buildroot's future. It was an interesting view inside this long-running project thathas been a mainstay of the embedded-Linux world throughout almost all ofthis century.

• Announcing XRAID: declustered parity RAID for zoned XFS
  Christoph Hellwig has announced theinitial public release of XRAID—declustered parity RAID that is integratedinto XFS.
  
  The two primary aims of XRAID are to support parity RAID on zoned deviceslike SMR hard drives, and to provide a fast RAID implementation withoutinherent data integrity problems. XRAID, just like zoned XFS also workson conventional hard drives and SSDs. Optimizing for SSD performance hasnot been a focus, but even without that, writes are up to 20 times fasterthan mdraid. [...]
  
  Work on XRAID has been ongoing for a year and a half, and while we aren'tanywhere near ready for an upstream submission, we are interested infeedback and testing from a wider audience now. The currentimplementation supports zero to 2 parities. We did experiments with theSnapRAID parity library to support 3 and more parities, and while thatis not included in the current version, support for more parities isplanned and the code is prepared for it.
  
  The xfsprogs branch includes mkfs support and a new "xraid" utility formanaging devices and inspecting an XRAID file-systems. We have alsoextended Zonar (The zoned file-system visualisation tool) to show howeach logical zone maps onto physical zones on devices.
  
  Hellwig gave a presentation atFOSSY in August on this topic; video of the talk does not seem to be availableyet, but his slides areavailable.
  

• Security updates for Friday
  Security updates have been issued by AlmaLinux (.NET 10.0, .NET 8.0, .NET 9.0, firefox, gcc, grafana, grafana-pcp, gstreamer1, gstreamer1-plugins-base, java-1.8.0-openjdk, kernel, kernel-rt, libimobiledevice, mingw-libpng, nginx:1.24, nodejs:22, nodejs:24, perl-CGI, perl-DBI, qt5-qtbase, tigervnc, vim, and xorg-x11-server), Debian (apache2, c-ares, linux-6.12, node-shell-quote, nova, parted, postgresql-17, python-django, sympa, and tomcat10), Fedora (cockpit, erlang-ssl_verify_fun, httpd, ignition, jackson-bom, jackson-core, jackson-databind, jackson-modules-base, libvirt, mod_http2, mongo-c-driver, poppler, prometheus, pylint, python-discovery, python-loguru, python-PyMuPDF, rabbitmq-server, rust-crypto-bigint, rust-ctutils, rust-elliptic-curve, rust-num-bigint, rust-num-bigint0.4, rust-num-modular, rust-num-modular0.6, rust-num-prime, rust-routinator, rust-zmij, strongswan, xen, xorg-x11-server, and zvbi), Mageia (amule, peazip, and python-pytest), Red Hat (buildah, fence-agents, go-fdo-server, grafana, grafana-pcp, oci-seccomp-bpf-hook, osbuild-composer, podman, and rhc), SUSE (ansible-core, apr-util, aspell, brotli, cadvisor, civetweb, distribution-registry, elemental, elemental-register,, elemental-operator, elemental-system-agent, elemental- toolkit, ffmpeg, firefox, gimp, git-annex, go1.26, go1.27, golang-github-prometheus-prometheus, google-cloud-sap-agent, google-guest-agent, google-osconfig-agent, goose, gosec, graphicsmagick, haproxy, hauler, hawk-apiserver, hawk2, hcloud-cli, jhead, jsoup, kernel, librsvg, libXtst, libxtst, nodejs24, nvidia-open-driver-G07-signed, nvidia-open-driver-g07-signed, open-iscsi, perl-XS-Parse-Keyword, perl-xs-parse-keyword, python-asyncssh, python-Brotli, python-django, python-joserfc, python-M2Crypto, python-Pillow, python-pillow, python313-setuptools, rsyslog, speex, tiff, trivy, udisks2, vsftpd, xen, and xorg-x11-server), and Ubuntu (apache2, charybdis, debian-lan-config, glibc, golang-github-seccomp-libseccomp-golang, hiredis, httpie, imapfilter, lhasa, libjgraphx-java, libjwt, libsolv, linux-fips, linux-hwe-6.8, linux-hwe-7.0, linux-nvidia-tegra, minissdpd, ncmpc, nfdump, node-tough-cookie, openconnect, pillow, pngquant, python-gevent, radicale, ruby-openid, sa-exim, signing-party, sudo, tigervnc, and x11vnc).

• Rust 1.100.0 released
  Version1.100.0 of the Rust language has been released. Notable changes include thestabilization of the never type,core parts of the Allocator API, reporting of unused dependencies inCargo, and more.
  
  
  

• Glasswing overwhelms maintainers with underwhelming findings (VulnCheck)
  Patrick Garrity of VulnCheck has written a blogpost that looks at vulnerabilities found by Anthropic's Project Glasswing since itlaunched on April 7, and finds it wanting:
  
  Of the 37,966 findings Anthropic reports, only 7,349 (19.4%) have been madepublic. Just 217 of those have been marked fixed. The more glaring number isthat 4.4% (1,654) of the project's findings have already been marked asduplicates, 7.5x more duplicates than fixes. On top of that, 419 findings havebeen withdrawn. It seems odd that the ledger now claims a 94.2% true positiverate, up from 90.8% at launch, when more findings have been withdrawn or markedas duplicates than fixed, likely a feedback loop missing to the triage rateslisted as "True Positives".
  
  [...] AI is a valuable tool for finding vulnerabilities, and I'm notdiscounting that. But seven months in, the evidence still doesn't match thelaunch narrative. The CVEs are a sliver of this year's total, almost none arebeing exploited, fixes have stalled while duplicates and withdrawals pile up,and the triage burden is shifting onto the open source maintainers Glasswingpromised to help. The receipts keep coming in. They still don't reconcile.
  

• Introducing Polo: a Wayland MATE compositor
  Kerem Söke has announcedthe 1.0release of Polo, aWayland compositor for the MATE DesktopEnvironment:
  
  The idea is to keep MATE behaving as closely as possible to how it does onX11, rather than changing the desktop to fit a different compositor. [...]
  
  Window management, metacity, workspaces, tiling, XWayland, clipboard andclipman support, multiple monitors, display scaling, hotplugging, screenshots,screen sharing, and session management are all working.
  
  I've also added desktop effects: fade, zoom, zap, spin, squeemize, magiclamp, desktop cube, expo, and wobbly windows.
  
  Söke is looking for people to test Polo, particularly on multi-monitorsetups, and report back with problems.
  
  
  

• [$] C++26 contract confusion
  TheInternational Organization for Standardization (ISO) has blessed seven C++language revisions since 1998.The language is mostly developed by ISO'sWorking Group 21, whichconsiders proposed additions and amendments, integrates them into a document,and then presents that document to the main ISO body to be voted on as astandard. On October 23, for the first time ever, ISO declined to ratify a documentpresented by Working Group 21, leaving the future of the C++26 standard indoubt. The decision was driven by controversy around a proposed new "contracts"feature that would add pre- and post-conditions to function signatures.
  

• Stenberg: 30 years of Internet transfers with curl
  Daniel Stenberg reflectson the 30th anniversary of the curl project.
  libcurl runs in an estimated thirty billion installations today. It is a rough estimate since the majority of all libcurl users never tell us they use it, but we need to find it mentioned in their credit screens, open source license windows or their manuals. A super popular app might use libcurl today and not tomorrow, or vice versa, which can make the numbers shift by several billions overnight. In reality of course, once the pulse raise has calmed down and your ego is content, these numbers do not matter. In our corner of the world, things don't change notably when we go from a thousand installs to billions. We still work with similar people, in similar ways, with similar challenges.

• Security updates for Thursday
  Security updates have been issued by Debian (aodh, apache2, dnspython, firefox-esr, mutt, octavia, spip, thunderbird, and watcher), Fedora (epiphany, firefox, freerdp, java-25-openjdk, java-latest-openjdk, libsoup3, perl-HTTP-Parser-XS, perl-libnet, php-getid3, pipx, python-crate-ingredients, python-pillow, python-robotframework, python3.9, rsync, rubygem-nokogiri, tpm2-tss, udns, and xorg-x11-server-Xwayland), Gentoo (curl, ImageMagick, libheif, and PCRE2), Mageia (nginx and python-django), Oracle (go-toolset:rhel8, libimobiledevice, nodejs:22, util-linux, and vim), Red Hat (.NET 10.0, .NET 8.0, .NET 9.0, cockpit, freerdp, gdb, go-fdo-client, grafana-pcp, ignition, kernel, kernel-rt, krb5, openssh, openssl, osbuild-composer, rpm, rsync, and webkit2gtk3), Slackware (git, httpd, and tigervnc), SUSE (aliyun-cli, alloy, apache-parent, aqute-bnd, google-gson, logback, maven, maven-artifact-transfer, maven-parent, maven-resolver, methanol, osgi-service- subsystem, slf4j, xmvn, bcel, benchdnn, containerd, distribution, dpdk, efivar, elemental, elemental-register, elemental-system-agent, elemental-toolkit, firefox, kernel, liblldpctl4, libonnxruntime1, openssl-1_0_0, openssl-1_1, openvpn, pcre2, perl-Net-DNS, perl-Plack, perl-Starman, psqlODBC, python-M2Crypto, python-Pillow, python-Twisted, python-urllib3_1, python313-djangorestframework, python313-fpdf2, python313-langgraph-sdk, python313-nltk, rust-keylime, skopeo, traefik, zchunk, and zvbi), and Ubuntu (asyncpg, awl, btrbk, davical, dotnet8, dotnet10, dotnet11, libfcgi, linux-raspi, logback, mysql-8.0, mysql-8.4, mysql-9.7, network-manager-ssh, node-babel, php-pecl-http, prosody-modules, rkhunter, ruby-actionpack-page-caching, ruby-jwt, ruby-kramdown, shiro, snmptt, and yodl).

• [$] LWN.net Weekly Edition for November 12, 2026
  Inside this week's LWN.net Weekly Edition:
  Front: Synaptics patent claims; Git LLM policy; Hibernation and lockdown; User namespaces; glibc tunables. Briefs: *sshole; Amutable foundations; Asahi Linux 7.3; OpenIndiana 2026.10; Firefox 160; Quotes; ... Announcements: Newsletters, conferences, security updates, patches, and more.

• Zellij 0.46 released
  Version0.46 of the Zellij terminal workspace hasbeen released.
  
  This release includes a major addition in Zellij: Zellij is now also adesktop terminal. To run it: zellij terminal. It works on linux, mac andwindows.
  
  Nothing changes for the normal multiplexer - Zellij can still run insideanother terminal. Both sessions are the same and can be shared.
  
  Additional features in this release include aGUI settings screen, session previews, and right-click menu. See this walkthroughfor more on the 0.46 release.
  
  
  

• In Memoriam: Tim Peters 1952–2026
  Guido van Rossum conveysthe sad (and somewhat delayed) news of the passing of Tim Peters.
  It's hard to overestimate Tim's influence on Python. He's probably best known for writing the Zen of Python (PEP 20), but to me he was a mentor and language co-designer long before that.
  Tim found Python not long after its initial release. His first deed was to convince me that Python should support mixed arithmetic between int and float, because most users would expect them to work that way. And he never stopped contributing.

• [$] Additional hardening for the glibc dynamic linker
  TheNode.js project recently had asecurity vulnerability thataffected itsBrotli decoder. The bugwas a buffer overflow,but the particular way that official Node.js binaries are built for Linux meant that one of themain protections against turning a buffer overflow into remote code execution,address space layout randomization (ASLR) could not be turned on. If ASLR had beenenabled, the bug would still be exploitable in theory, but much more difficultto exploit in practice. In response, the GNU C Library (glibc) isconsidering a new set oftunable settings to allow administrators to forbid programs that do notsupport ASLR. The new settings, while a welcome hardening measure, may notaddress the root problem.
  

• Security updates for Wednesday
  Security updates have been issued by AlmaLinux (edk2), Debian (openexr, rsyslog, and srt), Fedora (alertmanager, dotnet11.0, gdal, mstflint, nextcloud, python-crate-ingredients, rust-ingredients, rust-pore, rust-pulldown-cmark, rust-rbw, rust-sequoia-sq, rust-siguldry-fedora-autopen, tigervnc, unbound, and zchunk), Gentoo (Brotli, git, and libde265), Mageia (mopidy, python-dulwich, rust-similar3, rclone, and sofia-sip), Oracle (dpdk, edk2, firefox, glibc, kernel, kernel-uek, nodejs-nodemon, nodejs22, nodejs:24, patch, ruby, ruby4.0, squid:4, and thunderbird), Red Hat (.NET 10.0, .NET 11.0, .NET 8.0, .NET 9.0, bind, bind9.16, bind9.18, buildah, c-ares, containernetworking-plugins, delve, flatpak-builder, gcc, gcc-toolset-15-gcc, gcc-toolset-16-gcc, go-fdo-client, go-fdo-server, golang-github-openprinting-ipp-usb, grafana, grafana-pcp, gstreamer1-plugins-bad-free, gstreamer1-plugins-good, gvfs, gvisor-tap-vsock, nginx, nginx:1.24, nginx:1.26, oci-delta, podman, python-oauthlib, python3, python3.12, python3.9, qt5-qtbase, qt6-qtbase, rhc, runc, skopeo, squid, squid:4, tesseract, util-linux, xdg-dbus-proxy, and yggdrasil), Slackware (xorg-server), SUSE (aliyun-cli, amazon-cloudwatch-agent, ansible-core, aspell, azure-storage-azcopy, bind, cups, dlib-devel, docker, dolphin, dpdk, evolution, firefox, flannel, fuse-overlayfs, gnome-podcasts, google-cloud-sap-agent, GraphicsMagick, graphicsmagick, haproxy, istioctl, kernel, kubevirt, kured, libvips-devel, libXi, mozilla-nss, nvidia-open-driver-G06-signed-check, okteto, openssl-1_1, pcre2, poppler, poppler-qt, poppler-qt5, poppler, poppler-qt5, proftpd, psqlodbc, python-graphql-core, python-M2Crypto, python-pillow, python-soupsieve, python-urllib3_1, python313-wyoming, qt6-coap, rust-keylime, sbc, scribus, SDL2_image, tar, terraform-provider-susepubliccloud, the linux kernel (live patch 18 for suse linux, vsftpd, xen, xorg-x11-server, and zchunk), and Ubuntu (ca-certificates-java, gst-plugins-good1.0, gst-plugins-base1.0, hplip, linux-azure-fde, linux-nvidia, linux-nvidia-7.0, linux-nvidia-bos, linux-nvidia-lowlatency, python-tornado, rust-coreutils, and unbound).

• Three new stable kernels for Tuesday
  Greg Kroah-Hartman has released the 7.3.4,6.18.63, and 6.12.117 stable kernels. The 7.3.4 kernel has morethan 1,250 patches, 6.18.63 contains more than 860, and 6.12.117 includes morethan 1,530 patches. Users of these kernels are, of course, encouraged to upgrade.
  
  
  

• KDE Plasma 6.9 Will Launch XWayland Only When Needed
  KDE Plasma 6.9 will introduce on-demand XWayland startup, faster widget loading, redesigned settings pages, and desktop improvements.

• Redox OS Gets Golang Working, GIMP Ported & Simplified AI Policy
  The Rust-based Redox OS open-source operating system is now out with its October development summary that highlights recent software ports, progress on NUMA, and other enhancements made to this from-scratch platform0

• Best Linux Terminal Emulators in 2026: Ranked, Tested, and Mostly Free
  Your distros default terminal works fine, but these dont just work, theyre faster, more capable, and free. Heres the full 2026 ranking, FOSS and paid.

• Ubuntu 27.04 Tenacious T-Rex! Daily Builds Are Now Available for Download
  As of today, November 14th, 2026, Canonical has published the first daily build ISO images of the upcoming Ubuntu 27.04 (codename Tenacious T-Rex) release for early adopters, application developers, and general public testing.

• AMD openSIL Achieves Its Production Goal With 6th Gen EPYC "Venice"
  Since 2023 I and many open-source advocates have been very eager for AMD's openSIL project for delivering open-source CPU silicon initialization as a replacement to the traditional AGESA code. With Zen 5 there was proof-of-concept support that we have enjoyed with Coreboot on an MSI Ryzen motherboard and a Gigabyte EPYC server motherboard thanks to the Coreboot-based Dasharo ports by 3mdeb. The0

• Manjaro Linux Moves Toward Independent Community Governance
  Manjaro developers establish a German nonprofit association following months of governance disputes and concerns over project leadership.

• Euro-Office is now available on desktop (as Nextcloud Office Desktop)
  Euro-Office, the Nextcloud-backed fork of ONLYOFFICE, is now available to download and install on desktops, as Nextcloud Office Desktop. Announced in March 2026 as a European-based alternative to Microsoft 365, Euro-Office is a fork of ONLYOFFICE. Like that suite, its something users can host (or pay someone to host) and then access via a web browser or mobile. Nextcloud Office Desktop is0

• Modular GPS smartwatch with STM32 MCU and open-source SDK
  Pimoroni now lists the UNA Watch, a modular GPS smartwatch built around an open-source software platform and replaceable hardware components. The wearable combines an STMicroelectronics STM32U595 microcontroller, multi-satellite GPS, fitness sensors, and a public C++ SDK for developing custom applications. Originally introduced through a Kickstarter campaign in April 2025, the UNA Watch also0

• Open Open and openALT 2026 in Brno
  This was a busy weekend in Brno! It started on Friday with Open Open and continued on Saturday with openALT 2026. Two events, new partnership opportunities for openSUSE and SUSE, and this time my kids came along too. Open Open 2026, Brno Friday started at 9am with Open Open, an0

• Cloudflare Open Sources Kitesurf: Their Web Browser For AI Agents
  Earlier this year Cloudflare announced Kitesurf as a stateless web browser for AI agents. After building out its features, they have now made good on their word to open-source it0

• Slim industrial panel PC lineup spans 10.1 to 21.5 inches
  Cincoze recently expanded its CV-200/P Series of industrial panel PCs with 28 new configurations spanning 10.1-inch to 18.5-inch displays. The additions complement the existing 21.5-inch models, combining Intel Core, N-series, and Atom processors with modular display technology for industrial HMI and automation applications. The lineup includes high-performance CV-200/P2000 models powered by0

• Installing the official Claude Desktop Linux beta on Fedora Linux
  Anthropic ships its Claude Desktop beta for Linux only as a .deb. This article shows how to install that same package on Fedora with a small MIT-licensed script that verifies it first, installs it without root, and removes it cleanly.

• Planet News Roundup
  This is a roundup of articles from the openSUSE community listed on planet.opensuse.org. This community blog feed aggregator lists the featured highlights below from Nov. 6 - 12. This week highlights the 2026 Google Summer of Code Mentor Summit, a malware warning about a third-party Plasma wallpaper, the openSUSE News0

• Beyond AI Applications: How openEuler Is Rethinking the Agentic Infra OS
  From secure execution and intelligent caching to persistent memory and elastic data services, openEuler is building an infrastructure foundation for large-scale, production-ready AI agents.

• From desktop to cloud to road
  In an era where software defines vehicle value, engineering teams face a friction bottleneck. They spend hours fighting dependency conflicts, toolchain mismatches, and integration failures instead of writing vehicle features. As vehicles effectively become data centers, teams waste hours resolving dependency conflicts across desktop workstations, cloud, and physical targets. This article explores0

• Linus Torvalds Says AI-Assisted Linux Kernel Fixes Are Becoming the Norm
  Linux kernel 7.4-rc2 includes numerous AI-assisted fixes, as Torvalds highlights encouraging progress in reducing kernel bugs.

• Slax Linux Makes a Comeback
  Slax now runs on Debian 13 with a built-in AI assistant, and it can boot with Secure Boot on compatible PCs.

• Massive Microsoft outage disrupts businesses, schools and governments around the world
  A massive Microsoft outage has left people around the world without access to Outlook email, Teams meeting tools and other staples of modern office life... And there was no quick fix. As of 3:30 a.m. GMT on Friday, the outage was still widespread, affecting untold millions of people.

• Miniature industrial IoT gateway with dual Gigabit Ethernet and optional Wi-Fi 6, LTE
  Compulab has detailed its IOT-GATE-IMX8PV2, a fanless industrial IoT gateway powered by NXPs i.MX8M Plus processor. The small-form-factor system combines dual Gigabit Ethernet, optional Wi-Fi 6 and LTE connectivity, and isolated industrial I/O in a 105  80  30mm aluminum enclosure. The gateway uses a quad-core Arm Cortex-A53 processor running at up to 1.8GHz,0

• Google Summer of Code mentor summit 2026
  Every year, the Google Summer of Code (GSoC) Mentor Summit brings together open source maintainers, community leads, and mentors from across the globe. It is an energizing unconference where the diversity of open source can be touched. This is a unique occasion to share what works (and what doesnt) across0

Error: It's not possible to reach RSS file http://services.digg.com/2.0/story.getTopNews?type=rss&topic=technology ...

• Hundreds of Fake Accounts Defended Jensen Huang On Social Media
  The Washington Post reports on something peculiar about support for Nvidia CEO Jensen Huang online after he'd told the world he'd been unfaithful to his wife (before reports of his second extramarital affair):Joining the chorus online were voices of seemingly everyday people: a chef, a stock trader, a Hebrew teacher and several environmental activists. But at least 400 of them were fake, according to research from the nonprofit Midas Project, with links to a public relations firm involved in previous so-called "sockpuppet" campaigns... Many of the fake accounts, according to Midas Project executive director Tyler Johnston, replied to journalists, former U.S. officials and other prominent figures and backed not just Huang but Nvidia's push to sell its cutting-edge chips to Chinese firms. Like other documented influence campaigns, the posts appeared to have limited reach; the most-viewed tweet garnered about 8,000 views and 32 likes. Still, some of the posts targeted lawmakers, including accounts for the [U.S.] House Select Committee on China, Republicans on the House Foreign Affairs Committee and Sen. Elizabeth Warren (D-Massachusetts). "That's a place where you might not need a lot of views, but maybe the staffers who are running the lawmakers' account are paying attention to how their messages are received," said Johnston, whose group advocates for safe AI development... There were other clues that helped identify accounts as being part of an apparently coordinated campaign, according to the Midas Project. Some of them were created minutes or hours apart, and had user names and profile photos refreshed at similar times. They also sometimes engaged on oddly specific issues ranging from Qatar to Nippon Steel's bid for U.S. Steel and a waste management plant in Oregon.... Any one one of the posts — often replies to other posts — might have not looked suspicious in isolation. But the various clues taken together, Johnston said, gave evidence that they were linked. Some of the accounts then rushed to delete posts after he posted his findings online, and at least 260 of them have been deactivated or suspended by X.
  
  
  Read more of this story at Slashdot.
  

• Amazon Expands Drone Deliveries, and Gets Noise Complaints. 'Like a Swarm of Bees'
  "In August, Amazon announced it was expanding its airborne shipping to suburban areas in nearly 500 U.S. cities," reports the Chicago Sun-Times, "including the Chicago, Atlanta, Cleveland and Boise, Idaho, metro areas." And on Tuesday Amazon cut the ribbon on its new drone delivery center Tuesday 24 miles south of Chicago. But Amazon's drones are already servicing parts of Texas, notes the Houston Chronicle. And north of Houston, Theresa Gibbons complains "It was kind of cool and fascinating at first, but now it is driving me crazy."Her home in the Bridgestone neighborhood is nestled right in the flight path of Amazon's drone service. Gibson said she hears roughly a dozen drones flying over her home each day. Noise pollution has become a frequent complaint in Texas neighborhoods where the service operates. Residents have compared the sound to everything from a massive beehive to a full-on air raid. "It does not sound like a [single] bumble bee. It sounds like a large swarm of bees at a much higher volume than a normal swarm of bees. And it's all day long," said Gibson. Amazon's drone delivery service is currently operating in four Texas cities, including Houston, Waco, San Antonio and Richardson. The company announced major expansion plans in August, but growing complaints in pilot neighborhoods could foreshadow complications later down the line, with regions such as Harris County already taking legal action in response... So far, a group of fifteen states, plus Harris County, [Texas] have formed a coalition that has filed a petition in the US Court of Appeals challenging the Federal Aviation Administration's environmental review, citing that it failed to adequately address the effects of expanding drone deliveries. And meanwhile near Boise, Idaho, local news station KTVB reports....Less than two weeks after Amazon began delivering packages by drone in Nampa, the cities of Nampa and Meridian say they have received complaints over the noise and how often the drones fly... Amazon began Prime Air drone deliveries Oct. 30 from its East Franklin Road fulfillment center, making Nampa the company's first Idaho drone site... How people feel about the drones depends on whom you ask. A Meridian man who has received drone deliveries says the noise doesn't bother him. Neighbors closest to the launch site say the drones fly from sunup to sundown and are disturbing their peace. Randy Nye, who has lived in Cherry Creek Estates for 17 years, compared it to living in a beehive. "It's just a constant presence," he said.... Nye, who works from home, said he and his neighbors who technically are just outside city limits had no idea this was coming. He said the city approved the drones in May, and they were never given written notice this was coming, despite living so close. He said they were shocked when deliveries started by drones just 12 days ago. Nye said he hopes something can change. A few homes down, Kerri Wattier has started counting. On Wednesday with KTVB, she clicked a handheld counter each time a drone passed over her home. She started at 3:30 p.m. By 4:18 p.m., she had counted 39. "It sounds like lawnmowers and leaf blowers flying over our house," Wattier said. "Amazon says it is evaluating changes, including adjusting flight paths," the article adds. Ironically at that ribbon-cutting ceremony near Chicago, the speakers were occasionally drowned out by the roar of the drones, reports the Chicago Tribune, since they're "relatively loud when they are close to the ground." ("At the point of delivery they top out at 68 decibels," said Amazon economic development manager Sam Bailey, adding that "It's very brief exposure and it only occurs during daytime hours.") But that site has been operational since October 12, and has "generally" hit its maximum capacity of 300 drone orders daily, Bailey told the Chicago Tribune, adding that scaling up is "something that we're always considering." And since October 12 they've already seen "thousands" of orders delivered by their 21 drones just across that 7.5-mile radius:Bailey said customers should clear the area when a drone delivery is incoming. The drones drop packages from about 12 feet. If the drone detects movement in the area, he said, the delivery will be canceled. "You want your kids inside the house," Bailey said. "We will not drop a package in an unsafe location. People who want to stand below and try to catch it, don't do that." The Chicago Sun-Times points out that Walmart already offers some drone deliveries from over 75 stores across Arkansas, Florida, North Carolina, Georgia and Texas, and "earlier this year said it planned to expand drone delivery service to 150 more stores in partnership with Wing, a division of Google parent company Alphabet, giving it 270 drone delivery locations by 2027."
  
  
  Read more of this story at Slashdot.
  

• Was America's Nationwide Grounding of Aircraft Caused By Its New AI System?
  America's nationwide grounding of flights on Friday happened "amid growing scrutiny... of a new AI-powered air traffic management system" deployed by America's Federal Aviation Administration, reports Texas news station KXAN. Ironically, the system is called SMART — but the outage happened "following warnings" from members of the U.S. Congress about this new AI system's safety, reliability and oversight:In an Oct. 13 letter to the Government Accountability Office, more than 20 members of Congress requested an independent review of the FAA's development and implementation of its Strategic Management of Airspace, Routes and Trajectories system, known as SMART. The lawmakers questioned whether the technology was being deployed with adequate input from frontline air traffic controllers, sufficient training and appropriate safety evaluations... In their letter to the GAO, the lawmakers specifically questioned whether the FAA had adequately evaluated risks associated with SMART's artificial intelligence capabilities, including the potential for the technology to interfere with experienced controllers' decision-making or generate inaccurate safety-critical information. "The nation's frontline aviation safety workforce apparently had little to no input into SMART's development and have received limited training and information during the current deployment process," the lawmakers wrote. The letter also questioned the FAA's decision to initially pilot the technology in heavily congested airspace, including the National Capital Region. "Our switches, our routers, actually got overloaded with data," U.S. Transportation Secretary Sean Duffy acknowledged Friday. But an article from The Hill.com notes that Duffy also said the new AI tool had nothing to do with the ground stop, and that he said the system "isn't plugged in.""This is completely disconnected, and I love that some people have said this would be the root cause. By the way, if it was, I'll tell you that, but this is not even plugged in," he said. "So, there's no possible way SMART would have impacted." Duffy also asked Congress for $50 billion to rebuild what he described as an "incredibly old" air traffic control system. Duffy had posted the day before that the AI system had been at least partially rolled out and that it was already working (adding "Soon this technology is going NATIONWIDE") And Friday CNN's aviation analyst said they believed that AI system could be connected to the nationwide outage, calling it "a tremendous amount of coincidence," according to a report from Mediaite: CNN Aviation Analyst: "Many times in the past, what we have seen, and this has gone back decades, is that because air traffic control is this piecemeal, mishmash of a whole bunch of different systems... some going back to radio, telephones and floppy disks... when they put in new computer systems, they often have difficulty talking with, communicating with, or working with the much older systems. And I have to say, it's a tremendous amount of coincidence... If they're putting in new software now, this new SMART system to start managing that, and now we have a communications outage, I'm — we've seen this so many times in the past. I don't know if they're linked, but it's just too much coincidence that they were trying to start that moving today, and now we have problems with the en route system. So if I was to guess — and we haven't heard any, you know, it's not that it's threats or criminals or terrorists. We haven't heard anything like that. So I am guessing that once again we have a problem with new air traffic control computer systems, AI — you know, modern systems trying to communicate with old systems. And we have just seen this so many times in the past, and it's a big problem... Our whole national airspace system is you know, pieces and parts. It's kind of a Franken-system. And that would be my guess, that they are having computer issues by putting the new software in with the old, just because today they announced that that were going to do this new system. KXAN describes some of the complexity of the newly-launched AI system:According to the FAA, the system consolidates approximately 200 data streams, including airline schedules, flight paths, weather patterns, airport capacity, airspace conditions and air traffic controller staffing metrics. The agency says SMART uses artificial intelligence to analyze that information, predict traffic flows, identify potential conflicts and recommend adjustments to flight routes and departure schedules before disruptions occur. The FAA describes the technology as a shift from a reactive approach to a predictive one, allowing aviation officials to identify congestion, weather-related restrictions and other operational problems hours, days or even weeks in advance... The congressional letter raised questions about whether the FAA's implementation strategy was moving faster than its safety evaluations, workforce training and independent oversight could support. Ironically, the article points out that the FAA promoted anticipated benefits from the technology including fewer delays and flight cancellations. (Other anticipated benefits included improved on-time performance and faster recovery from weather disruptions.) Although the FAA has realized one of the system's anticipated benefits: reduced fuel consumption.
  
  
  Read more of this story at Slashdot.
  

• Linus Torvalds Wonders If Linux's AI-Prompted Patch Flood Has Peaked
  The Register writes that "The worst of the patchpocalypse may be behind us, according to Linus Torvalds." In his weekly kernel update post, Torvalds said Linux 7.4 rc2 was a big release partly because it contained code he'd left out of rc1 because he'd been busy and it was already the largest such release in kernel history. But Torvalds said the other reason rc2 was big was "various AI fixes."Such fixes are necessary because ever since Anthropic launched its Mythos bug-finding model in April, developers have been able to find more software flaws than was previously possible. Microsoft, for example, addressed a record 974 flaws in September — its third record fixing spree this year after it whacked 622 flaws in July and 206 in June. Oracle addressed 1,449 flaws in a single month. That's many more patches than IT teams are set up to handle, yet they must find ways to deal with bugs more quickly because attackers are increasingly targeting flaws found by AI. Torvalds' post suggests that, perhaps, the worst of this is behind us. "This time around Alexei claims that on the bpf side at least the fixes are now coming in faster than the new reports, and that sounds lovely if true," he wrote. That's a reference to Alexei Starovoitov, co-creator and lead dev on the Extended Berkeley Packet Filter (eBPF), the project that makes it possible to run sandboxed programs within the Linux kernel. "I think most other areas haven't reached that point yet, but it's at least a sign that we _may_ be starting to see the tide starting to turn," he added. The patchpocalypse has already affected Linux kernel developer Lorenzo Stoakes, a principal software engineer at Arm, The Register reported Friday:Earlier this week he posted an email to the Linux kernel mailing list to say that he was planning to drop some of his workload. He explained: "Given the current throughput in the kernel resulting from AI-generated series, I unfortunately lack the bandwidth to generally be able to offer review except in those areas I maintain. [...] Apologies for doing this, but given the current trends I'd like to do something to make my inbox a little more manageable." Stoakes told The Register, "I just want my inbox to be less horrendous. And yeah, AI is part of the reason; in general, it's gone from 'once a week' to 'daily' to 'half of what I see in review'."
  
  
  Read more of this story at Slashdot.
  

• Australian STEM Videogame Challenge Canceled Due To AI
  PC Gamer reports:The Australian STEM Videogame Challenge, a "free national videogame development competition for students," has confirmed that the rise of generative AI means this year's event will be the last...Speculation as to the cause of the program's cancellation focused primarily on the presence of AI in entries: Another self-proclaimed judge said the problem wasn't merely the use of AI in itself but that "some students just completely generate their games with AI...." [T]he Australian Council for Educational Research has confirmed that the cancellation was in fact due to AI.... "making it harder to judge what students made themselves, and moving the program away from its original purpose." Thanks to long-time Slashdot reader neoRUR for sharing the news.
  
  
  Read more of this story at Slashdot.
  

• Ex-Nvidia CEO Misled Company Leaders On Affair With Chinese Businesswoman
  An anonymous reader quotes a report from Reuters: Former Nvidia CEO Jensen Huang misled several of the company's leaders, including general counsel Tim Teter and chief marketing officer Alison Wagonfeld, about the nature of his relationship with Chinese businesswoman Alice Huang, with whom he had an affair, according to two people familiar with the matter and internal correspondence reviewed by Reuters. [...] During the autumn of 2025 and in October 2026, in response to press queries that drew some Nvidia leaders' attention to his relationship with Megaspeed and Alice Huang, Huang at both times described their interactions as appropriate, the people said, speaking on the condition of anonymity. Reuters only reviewed messages from the exchanges in October, not the ones from 2025. In two separate messages in October, Huang told Nvidia leaders, including Teter and Wagonfeld, that the interactions reflected standard business dealings with customers. In other messages, Huang affirmed the routine nature of his interactions with Megaspeed. Nvidia's Huang also discussed taking legal action against the New York Times after it published an article in October of last year that drew attention to his meetings in public with Alice Huang, the people said. That article had prompted Jensen Huang to communicate with some Nvidia leaders in 2025 about their interactions, which he did not describe as an affair, the people said. Ultimately, neither Nvidia nor Huang filed a lawsuit against the paper. A spokesperson for the New York Times said the paper received no legal demand. It is unclear when his relationship with Alice Huang became intimate. Photos posted online and verified by Reuters show them together in the US, China and elsewhere, dating as far back as December 2023.
  
  
  Read more of this story at Slashdot.
  

• Amazon's Plan to Index the World's Online Shopping Data
  Amazon is considering a "World Product Graph" that would index information about products sold across the internet in an effort to keep shoppers and AI agents from turning to Google, Reddit or other sources for product research. The proposed database could also improve Amazon's AI shopping assistant by addressing inaccurate or incomplete answers and allowing it to use cheaper models. "Amazon cannot be the go-destination for every shopping mission if customers must leave to research product relationships on Google, brand websites, and review sites," according to an internal Amazon document. "These answers exist, but the only way to find them has been to leave Amazon for painstaking research on brand websites, third party review sites and tech forums." Reuters could not determine if or when this plan may be implemented, though the document, written like a press release, has an aspirational future release date of October 1, 2027. Amazon said in a statement: "Draft, outdated documents often paint an incomplete picture and the existence of a brainstorming document such as this one doesn't necessarily reflect our current plans. We're constantly working on new ideas and technologies to make Amazon's product catalog comprehensive, accurate, and helpful for customers."
  
  
  Read more of this story at Slashdot.
  

• Windows 0-Day Dropped By Disgruntled Researcher Hands Hackers System Rights
  An anonymous reader quotes a report from Ars Technica: Nightmare Eclipse, the pseudonym of a researcher with an ongoing, very public beef with Microsoft, has dropped yet another Windows zero-day. On Tuesday, Nightmare Eclipse disclosed SignDrop, a vulnerability that gives local users full System rights on some versions of Windows. The vulnerability resides in the Common Log File System, which Microsoft describes as a "general-purpose logging service used by software clients running in user-mode or kernel-mode." By forcing a privileged process such as Windows Defender to open a crafted CLFS container, an attacker with ordinary user rights can abuse the privileged file creation to elevate privileges to System. [...] Researcher Will Dormann said in an interview that he has been able to reproduce the exploit and that it works as described, but not on all versions of Windows 11. But there's a catch, he said. "The requirements are important in that it seems to require Windows 26H2, and one that has existed for more than 90 days, it seems," he explained. "That is, you can't just take a new 26H2 system and install updates and have it work." For a system to be vulnerable, Dormann said, the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CLFS\Authentication\Modevalue must be 0 or 1." Of the many machines Dormann uses, only a single one met this requirement. Microsoft said in a statement that it was investigating the vulnerability and had no evidence it was being exploited in the wild. The company also said Defender blocks potential exploitation attempts.
  
  
  Read more of this story at Slashdot.
  

• FAA Lifts Nationwide Ground Stop for All Aircraft [UPDATE]
  Longtime Slashdot readers cold fjord and sinij share news that the FAA grounded flights nationwide after a communications failure disrupted air traffic control centers across the country. By Friday evening, the outage had resulted in nearly 5,000 flight cancellations and roughly 10,000 delays, with no timeline for restoring normal operations. Rumors are swirling that this could be related to the FAA's newly deployed SMART AI system or Microsoft's recent global outage, but both the agency and Microsoft said they had no indication that their technology was responsible. Business Insider reports: US Transportation Secretary Sean Duffy said just after 4:15 pm. Eastern time that the nationwide flight traffic halt came "following a communication issue impacting all Air Route Traffic Control Centers." "FAA technicians are investigating the issue," he said in a post on X. The outage comes the same week as the FAA deployed SMART, a new AI tool to help air traffic control. ASI, the company that makes the SMART system for the FAA, said that Friday's issues weren't "based on or a result of the SMART system, any product of ASI or our integration with FAA and ATC." Homeland Security Secretary Markwayne Mullin said in a press conference Friday, when asked if the AI system might be related to the outage: "That's what we're looking at." Microsoft, which faced massive issues across its services this week, also said that it had "no indication" the ground stop was related to any Microsoft services. Meanwhile, the FAA said that the ground stop was due to "extraordinary circumstances and for reasons of safety." UPDATE 1:33 UTC: Secretary Mullin and Secretary Duffy are currently briefing members of the press on the issue. UPDATE 1:46 UTC: The FAA has lifted the nationwide ground stop after more than four hours. Officials said the disruption appears to have stemmed from a network router issue that cascaded nationwide, with no evidence of a cyberattack or connection to Microsoft's recent outage. Airlines warned that disruptions could continue in Saturday.
  
  
  Read more of this story at Slashdot.
  

• SpaceX Falls Short of Historic Double Starship Catch
  SpaceX's 15th Starship test flight successfully reached orbit Friday, but its historic attempt to catch both stages at the launch tower was derailed when the Super Heavy booster malfunctioned, forcing controllers to abort its return before it exploded after splashing down in the Gulf of Mexico. The upper-stage Starship did, however, successfully deploy 26 Starlink satellites and is scheduled to complete 15 orbits before attempting an unprecedented tower catch on Saturday. If successful, it would mark the first time a spacecraft has returned from orbit to land vertically at a launch tower. The Bakersfield Californian reports: The original goal was to retrieve every single piece of the rocket for the purpose of future recycling, something yet to be achieved anywhere in the world. Musk sees this leading to the kind of fast and consistent launch rates necessary for building moon bases and sending people to Mars. Shortly after reaching orbit, Starship dropped off 26 of the company's most advanced Starlink satellites. The plan is for Starship to complete 15 laps around the world at an altitude of around 170 miles (275 kilometers) before heading back to the launch site for Saturday's grand finale. SpaceX had already made three booster grabs at the company's sprawling Starbase near the U.S.-Mexico border. That made Friday's miss all the more surprising. "Well, that certainly isn't the news that we had hoped to hear for today," observed SpaceX launch commentator Kate Tice, adding that it was in line with the many rigorous safety checks to protect the pad. No explanation was provided for what went wrong. This was the first attempt to capture the upgraded version of the booster that stretches 236 feet (72 meters) -- the production model for moon and Mars expeditions. It will also be the first time the company attempts to catch the spacecraft, which spans 171 feet (52 meters). Together, they form the world's biggest and most powerful rocket -- an astounding 407 feet (124 meters) in height. The spacecraft portion of the 14 previous Starships ended up in the ocean, either by design at flight's end or by accident in a stream of flaming wreckage. During the first full-scale test flight in 2023, multiple engines failed to ignite and the tumbling rocket's self-destruct system was activated. The last test, in September, was the first to reach orbit, but SpaceX did not try to recover any of the rocket stages. You can watch a recorded livestream of the launch on YouTube.
  
  
  Read more of this story at Slashdot.
  

• Lego's BrickLink Marketplace Back Online After Week-Long Outage Caused By 'Cyber Incident'
  LEGO's BrickLink marketplace is back online after a week-long outage caused by what the company described as a "cyber incident," during which an unauthorized third party accessed some user data. Details about exactly what data was accessed remain unclear. The site went offline on November 5 and remained unavailable until November 12, preventing users from buying or selling LEGO sets and parts during the busy holiday shopping season. According to Brick Fanatics, LEGO initially described the outage as "necessary work" before confirming that the platform had suffered a security incident. In an email to users, LEGO acknowledged that "some of the information associated with your account was accessed and disclosed by an unauthorized party," including potentially usernames and IP addresses. However, the company insisted that "your password, postal address, and financial information were not disclosed." Those assurances have since come under scrutiny following reports of convincing phishing emails containing detailed personal and purchase information. The outage also dealt a significant blow to independent sellers who rely on BrickLink for income. Simon Webster, who operates stores on both BrickLink and rival marketplace Brick Owl, reported that his overall sales revenue fell 52% over a four-day period, even as sales through Brick Owl rose 79%. "Their comms are amateur at the best of times, but surely they should be able to send an email to let sellers and buyers alike know what is happening and what they're doing to rectify it," Webster said. "But no, we're all left in the dark." The incident has renewed concerns about BrickLink's aging infrastructure. Founded in 2000 and acquired by LEGO in 2019, the marketplace reportedly runs on a complex collection of interconnected systems that makes modernization difficult. The Brick Fanatics report questions whether the 25-year-old platform remains fit for purpose and whether prolonged outages and security concerns could push sellers toward competing marketplaces like Brick Owl.
  
  
  Read more of this story at Slashdot.
  

• US Seizes $1.2 Billion In Crypto Stolen From Binance
  U.S. authorities have seized or restrained more than $1.2 billion in cryptocurrency stolen during Binance's $6 billion October hack, which the FBI attributes to North Korean military-linked hackers known as "TraderTraitor." The DOJ also said it disrupted infrastructure behind the "FaceStealer" deepfake scam, blamed for stealing more than $400 million in cryptocurrency. CNBC reports: Collective efforts between the U.S. government and private sector have resulted in more than $2.7 billion of that amount being frozen. [...] The DOJ said it was taking coordinated action against what it called the North Korean government's "schemes to fund its regime through the massive theft of cryptocurrency." That includes "the court-authorized seizure and restraint of more than $1.2 billion worth of cryptocurrency recently stolen from Binance," it said. DOJ units, law enforcement partners and virtual asset service providers have been working to intercept the stolen assets. But efforts to track and freeze the assets are ongoing, as TraderTraitor actors continue to launder them through various cryptocurrency channels. Authorities have also seized cloud-based infrastructure used in a massive identity impersonation scam known as "FaceStealer," which has seen more than $400 million worth of cryptocurrency stolen over 18 months, the DOJ said. The scheme sees hackers set up fake video meetings using stolen accounts and recordings of people known to the target by using AI-generated deepfakes. The hackers then say a technical problem requires a fix, install malware on a computer and take over the victim's communications, steal their cryptocurrency and target their contacts -- sometimes months or more than a year after the initial compromise.
  
  
  Read more of this story at Slashdot.
  

• Mozilla to Shut Down Solo, Deleting Users' Websites and Data
  Mozilla is shutting down Solo, its AI-powered website builder and hosting service, on November 30. A notice on the Soloist.ai homepage reads: "We've made the difficult decision to close Solo. We have appreciated all of your support building and growing this product, and the feedback we've received from all of you. Solo will cease operations on Nov 30, 2026." The Register reports: Mozilla launched Solo in December 2023 as a "Mozilla Innovation Project," aimed at helping sole traders to build themselves a webpage for their services. Some 54,000 people used its LLM to build pages, and relied on Mozilla to host them -- complete with custom domain names. Users now have just over two weeks left to find a new home for their pages, although Mozilla says it first notified them on October 1. According to the support FAQ, users can download a ZIP containing an HTML export, contact form and newsletter submissions, and a CSV linking to their images. The images themselves must be downloaded separately. Domains purchased through Solo Domains must also be moved to Name.com, with Mozilla handling the transfer after users create an account and supply its code.
  
  
  Read more of this story at Slashdot.
  

• Microsoft's Global Outage May Be Worse Than Amazon's Or Crowdstrike's, Expert Says
  An anonymous reader quotes a report from Ars Technica: A global outage taking down a wide range of Microsoft 365 services remains ongoing Friday morning. The outage started midday Thursday, impacting users of Microsoft email, cloud, and AI services. Microsoft has documented the full list of services impacted by the error, while moving early Friday morning to protect customers around the world from losing emails during the extended disruptions. "Recovery actions are ongoing," the Microsoft 365 Status account confirmed on X. "To help preserve delayed mail during this event, we've extended email timeout to 48 hours." Similar to recent world-shaking outages of widely used tech like Amazon Web Services and CrowdStrike, the Microsoft disruption looks like "one of the biggest outages of all time," Ciaran Martin, the former head of the UK's National Cyber Security Centre, told NBC News. Possibly even "worse," he suggested. Businesses, hospitals, police departments, and schools were among those scrambling to work around the outage. In Japan, it disrupted government IT infrastructure, according to deputy chief cabinet secretary Masanao Ozaki. NBC's report documented various harms, noting that "few public bodies were immune from the outage." In some cases, doctors couldn't send patients "important" updates on medication changes or follow-up care. The financial sector suffered, too, with people blocked from making bank transfers since they couldn't receive verification codes. Justice systems were also hobbled. The Supreme Court in the Philippines saw its legal work derailed, NBC reported. And one US sheriff's office in Colorado reported that the outage made it difficult for people to post bond for prisoners' immediate release. It's unclear how many users were affected, but Microsoft estimated in January that the total number of paid Microsoft 365 commercial subscriptions exceeded 450 million. Microsoft's most recent updates confirmed that it's seeing "broader improvements in North America, sustained improvements across much of Europe, and encouraging recovery signals in Asia Pacific." "Some users may still experience intermittent access issues or delayed email delivery as mitigation continues across remaining affected infrastructure," Microsoft said. "Our focus remains on stabilizing recovered infrastructure, completing mitigation in remaining impacted areas, and reducing delayed email queues and backlogs while we validate service consistency across connection methods."
  
  
  Read more of this story at Slashdot.
  

• ChatGPT's New Wallet Lets AI Agents Shop For You
  OpenAI has launched ChatGPT Wallet, a feature that lets its Dots AI agents help users choose products and complete purchases on their behalf. TechCrunch reports: The option will initially be available to a limited number of U.S. ChatGPT Pro subscribers, ages 18 and up, with a U.S.-issued Visa, Mastercard, or American Express. OpenAI says that users are fully in control of the purchases, as they're able to review the items, the total, and the payment card that will be used to complete the transaction before the checkout occurs. In addition, users will approve the purchases directly with a security check like Face ID or a fingerprint, which creates a record of their transaction. [...] The company notes that customers who shop via their dots will still be able to earn their credit card rewards and be able to take advantage of protections that typically come with cards, like being able to dispute transactions.
  
  
  Read more of this story at Slashdot.
  

• Security: Why Linux Is Better Than Windows Or Mac OS
  Linux is a free and open source operating system that was released in 1991 developed and released by Linus Torvalds. Since its release it has reached a user base that is greatly widespread worldwide. Linux users swear by the reliability and freedom that this operating system offers, especially when compared to its counterparts, windows and [0]

• Essential Software That Are Not Available On Linux OS
  An operating system is essentially the most important component in a computer. It manages the different hardware and software components of a computer in the most effective way. There are different types of operating system and everything comes with their own set of programs and software. You cannot expect a Linux program to have all [0]

• Things You Never Knew About Your Operating System
  The advent of computers has brought about a revolution in our daily life. From computers that were so huge to fit in a room, we have come a very long way to desktops and even palmtops. These machines have become our virtual lockers, and a life without these network machines have become unimaginable. Sending mails, [0]

• How To Fully Optimize Your Operating System
  Computers and systems are tricky and complicated. If you lack a thorough knowledge or even basic knowledge of computers, you will often find yourself in a bind. You must understand that something as complicated as a computer requires constant care and constant cleaning up of junk files. Unless you put in the time to configure [0]

• The Top Problems With Major Operating Systems
  There is no such system which does not give you any problems. Even if the system and the operating system of your system is easy to understand, there will be some times when certain problems will arise. Most of these problems are easy to handle and easy to get rid of. But you must be [0]

• 8 Benefits Of Linux OS
  Linux is a small and a fast-growing operating system. However, we can’t term it as software yet. As discussed in the article about what can a Linux OS do Linux is a kernel. Now, kernels are used for software and programs. These kernels are used by the computer and can be used with various third-party software [0]

• Things Linux OS Can Do That Other OS Cant
  What Is Linux OS?  Linux, similar to U-bix is an operating system which can be used for various computers, hand held devices, embedded devices, etc. The reason why Linux operated system is preferred by many, is because it is easy to use and re-use. Linux based operating system is technically not an Operating System. Operating [0]

• Packagekit Interview
  Packagekit aims to make the management of applications in the Linux and GNU systems. The main objective to remove the pains it takes to create a system. Along with this in an interview, Richard Hughes, the developer of Packagekit said that he aims to make the Linux systems just as powerful as the Windows or [0]

• What’s New in Ubuntu?
  What Is Ubuntu? Ubuntu is open source software. It is useful for Linux based computers. The software is marketed by the Canonical Ltd., Ubuntu community. Ubuntu was first released in late October in 2004. The Ubuntu program uses Java, Python, C, C++ and C# programming languages. What Is New? The version 17.04 is now available here [0]

• Ext3 Reiserfs Xfs In Windows With Regards To Colinux
  The problem with Windows is that there are various limitations to the computer and there is only so much you can do with it. You can access the Ext3 Reiserfs Xfs by using the coLinux tool. Download the tool from the  official site or from the  sourceforge site. Edit the connection to “TAP Win32 Adapter [0]

• MenuetOS keeps steadily improving
  MenuetOS, the operating system written in x86-64 assembly, has seen a few new releases since we last looked at it, delivering some welcome improvements. Secure network connections are now faster, theres a TrueType font demo, and, of course, the usual bugfixes and smaller improvements. The game Wizord EXL100 has been ported, and a few drivers have been improved as well. You can get the latest releases from the downloads page.

• ReactOS makes strides in SMP, 64bit, and more
  The ReactOS project organised two hackfests this year, and the work done during those in-person sessions, combined with the ongoing regular progress, has led to some pretty significant breakthroughs and progress. More NT6+ syscalls have been added, ReactOS supports floppy disks now, NTFS support has been vastly improved, and much more. Theres also a new USB3/4 stack, which is now merged and offers basic support for these versions of USB. One of the biggest additions is a new kernel shim engine which gives ReactOS the ability to work around buggy drivers and implement quirks, moreso than even Windows itself can. For instance, thanks to this new shim, XP-era NVIDIA drivers can run on NT6 ReactOS. The ongoing efforts to implement SMP are yielding results too: ReactOS can now run with SMP for days on end while doing tasks in the background, which is quite promising. The team is showing off Steam and the game Among Us running on ReactOS, which is definitely impressive.

• Polo: a new Wayland compositor for MATE
  MATE is probably the last X11-only holdout among the major desktop environments, but thats about to change if Kerem Söke has anything to say about it. Polo is a port of Marcos behavior and window management policies to Wayland, built on libweston and written in Vala and C. Its a window manager, compositor, and session authority for the MATE Wayland desktop. It takes over, step by step, what Marco, mate-session-manager and the compositor-facing parts of mate-settings-daemon do on X11. ↫ Polos GitHub page Söke is looking for testers with this very first Polo 1.0.0 release  cute name, too  which is available on its GitHub page.

• IBM to offer access to a dual-processor quantum system in 2027
  Ars Technica published a short write-up about changes to IBMs quantum computing plans. The changes greatly expand the scope of its next-generation Nighthawk general-use processors by adding a version with over 500 programmable qubits. At the same time, it’s stepping back a bit on its plan to link multiple Nighthawk processors together, dropping the intended number of linked systems from nine to two. The total number of qubits planned for next year will remain the same; how the company is getting there, however, will be different. Meanwhile, the company is touting the performance boost achieved via a major change that was made in the generation of Nighthawk processors released in September: hardware-based qubit resets. ↫ John Timmer at Ars Technica Im convinced quantum computing will eventually have a big impact in the areas its characteristics are presumed to be well-suited for. Also, it just looks and sounds incredibly cool, even if as the technology currently stands its not particularly useful yet.

• Im not descending into madness because mount and unmount icons make no sense
  There are many problems in this world  some big, some small, some so minute nobody ought to put them to paper at all. The problem Im going to highlight here is even smaller than that. This literally  the actual literally  does not matter and absolutely nobody should care about it, let alone put any work into changing it or addressing it some other way. I want to talk about the iconography GNOMEs Disks utility uses to symbolise mount! and unmount!. No, Im not descending into madness. GNOMEs Disks utility uses the play! symbol on the mount button, and the stop! symbol on the unmount button. Inexplicably, considering the state of the world in general and the rapidly deteriorating quality of software specifically, this bothers me. Out in the real world, built on decades of consistent use, these symbols have gained clearly defined meanings, and mounting and unmounting disks definitely isnt one of them. In fact, the meaning of these symbols isnt mere convention; theyre defined in a variety of international standards for symbols for use in software and on equipment, such as ISO/IEC 18035 (which you need to buy to read; my copy fell of a truck): ISO/IEC 18035:2002 defines a consistent set of icons and related functions that are represented by multimedia applications on a computer screen and that users interact with to control such applications. It describes controls applying to such functions as: Play, Pause, Stop, Rewind, Scan forward, Scan backward, Replay backward, Loop, Go to beginning, Go to previous, Go to next, Go to end, Set volume and Mute. ↫ ISO/IEC 18035:2003 Theyre also part of ISO 7000/IEC 60417, a much larger, more encompassing standard that also contains things like the various symbols used on laundry machines, tumble dryers, in cars, and so on. The symbols themselves are much older than the standards, of course, with many of them dating back to the 1960s and possibly even 1950s. The point remains, though: the play and stop symbols have clearly defined meanings, and I dont think they are at all a good fit for mount and unmount. The function of the play! symbol according to ISO/IEC 18035: To enable the user to start the presentation of dynamic media, except where the task requires automatic playing of that media. ↫ ISO/IEC 18035:2003 And of the stop! symbol: To enable the user to stop the presentation of dynamic media. ↫ ISO/IEC 18035:2003 Neither of these descriptions match what mounting and unmounting mean or do. Mounting a drive or partition doesnt present any media at all; it merely makes the drive or partition in question accessible. Unmounting also doesnt eject anything; it merely makes the drive or partition inaccessible. I would argue that play and pause act upon contents of a drive or volume, and not upon the drive or volume itself. As it stands right now, you play! a drive! to play! a video stored on said drive. Madness. I already know what youre thinking, and yes, I agree that the Disks utility is a tool aimed at more advanced use cases and users, and most normal, average users will never even know it exists, let alone open it at all. Very few people get to see these symbols, and those that do already know full well what mounting and unmounting mean, reducing the importance of said symbols considerably. But now its time for the big surprise, the twist in the story that turns this entire thing on its head. Files, GNOMEs file manager, uses an entirely different symbol for unmounting! Instead of the stop! symbol, Files uses the eject! symbol. You may think this is a more accurate visual representation of what unmounting means, but I strongly disagree. Lets turn to ISO/IEC 18035:2003 once again: To enable the user to eject the current physical media from the appropriate drive. ↫ ISO/IEC 18035:2003 Unmounting doesnt eject anything! If you unmount a USB stick, the stick doesnt get fired out of the USB port. If you unmount a volume, it doesnt get removed from the SSD. Hell, if you unmount a CD-ROM, it doesnt even eject it! Ejecting a CD-ROM  opening the drives tray or spitting the CD-ROM out of a slot-loader  is an entirely different act! Are we really ejecting! a CD-ROM twice? Are we mounting! a CD-ROM when we merely close the tray? No! Madness! The real underlying problem here is, of course, that mounting and unmounting are deeply weird and confusing concepts, bordering on the esoteric, that simply do not have physical equivalents to fall back on. Using symbols and iconography designed in the 1960s explicitly for playing music or stopping a video or ejecting a cassette tape are not a good fit for something as difficult to explain to most people as mounting and unmounting. Its like putting an eject symbol on a cars door handle or a play symbol on a soap dispenser. Should GNOME developers waste any time or resources to address this? No, of course not, that would be stupid. Nobody should care about this but me. I should suffer in silence, every time I need to mount or unmount something, forced to look for an eject or stop symbol in whatever user interface I happen to be using. Every time, I should die a little inside. Please, dont be like me and waste precious resources thinking about this. Im not descending into madness. I just want mount and unmount symbols that make sense. Im not descending into madness.

• Haiku gets multifinger touchpad taps
  Were almost halfway through November, but we hadnt seen Haikus monthly activity report for October yet. Its here now, and theres quite a few good things in here, like support for two and three-finger tap gestures on touchpads for right and middle-click, a new driver that adds Universal Flash Storage support, and even some build fixes for Haikus SPARC port as well as some fixes on the RISC-V side. Of course, thats just a selection, as theres the usual long list of smaller changes, bugfixes, and improvements as well.

• Microsoft releases .NET 11
  Today, we’re excited to announce the release of .NET 11! This year’s release makes building modern applications faster, more productive, and has improvements across C# 15, ASP.NET Core, .NET MAUI, and Windows development. With hundreds of runtime optimizations, more responsive SDK tooling, and less overhead in everyday commands, you can spend less time waiting and more time creating. Build richer web and cross-platform applications, take advantage of new C# language features, and explore AI-powered development with improved tools and agentic capabilities. ↫ .NET Team Im not going to pretend to care about .NET, but I know many of you have to care on a professional level, because .NET is remarkably popular in places where the spotlights dont often shine.

• What if any process could handle SIGKILL?
  An interesting question, and a detailed technical rundown of how to make this happen, which involved building a custom Linux kernel, of course. I really, really enjoy the conclusion. And you know? It turned out fine. Nothing exploded on my system. As I could predict, because this was otherwise impossible, nobody did it. The signal system was setup in such a way that you would most likely realize something you were doing was wrong, and not try it. To pull back further, it is interesting to notice how the rules we all take for granted are just set somewhere in code. They were written by someone, at some point. If there is code restricting you from doing something, someone wrote it. Either they did not think anyone would want to do that thing, or they specifically prevented you from doing it. Those rules are written somewhere, and you can take it in your paws to go sniff around the code, pull out the relevant parts, and hack around the things that bother you. For fun, learning, or convenience. Snoop around. Sniff code. Put your paws in it. Hack shit. ↫ lux at VulpineCitrus Even if theres no real reason to do, even if its just to satiate an odd and possibly slightly morbid sense of curiosity, fuck with code.

• OpenIndiana Hipster 2026.10 released
  OpenIndiana is a rolling-release illumos distribution, but they do release snapshots twice a year to serve as a base for installations, which they call Hipster. The projects just released OpenIndiana Hipster 2026.10, and it brings a number of welcome changes. First, theres UEFI framebuffer support on the live image, which is automatically configured when loading up the image. Second, Firefox and Thunderbird versions have been bumped to 159.0, and a whole slew of development tools have been updated to newer versions as well. This snapshot also brings QEMU 11.1.2 and VirtualBox 7.2.22, and a number of new applications have been added as well. In addition, SPARC build support has been improved to enable new and updated packages for Suns dead ISA as well. You can download a fresh image, or update an existing installation through IPS.

• Making musl and proprietary NVIDIA drivers work together
  Creator and lead developer of Chimera Linux, Nina q66!, write about their efforts to get NVIDIA drivers to work properly on musl-based distributions. As you may be aware, one of the limitations of musl-based distributions is that they will not function to their proper extent when used in computers with various NVIDIA graphics cards. This is due to the proprietary nature of the driver, being built for glibc. I have been experimenting with trying to make this work, and this post is the summary of that effort. ↫ Nina q66! on the Chimera blog What follows is a deeply technical exploration of the problem, and the steps Nina q66 and the Chimera team are taking to try and fix it. With how popular and widespread NVIDIA hardware still is, this is a hugely important issue to try and address, and Im grateful theyre trying to address it.

• MorphOS 3.21 released with new office suite
  About five months after the previous release, the MorphOS team has released MorphOS 3.21. It brings the usual list of big fixes and smaller improvements, but theres a few big ticket items in here as well. MorphOS 3.21 introduces BasicWorks, an office suite made up of CellBasics and PageBasics. It offers document and spreadsheet authoring and loads and saves Microsoft Office and OpenOffice documents. Also new are NVMEMount, an auto-mounter for booting from and mounting NVMe partitions, and the Marbles and Cyber 3D blankers. Graphics performance has been improved, with a faster Radeon driver on cards with little video memory thanks to GART backed bitmap transfers, quicker TinyGL texture copies, hardware accelerated antialiased text in TTEngine and much faster color SVG glyph rendering in Cairo. The Bcm43xx wireless driver has been substantially reworked, with automatic transmit rate selection, updated firmware and numerous connection fixes. PowerBook and iMac hotkeys are now fully configurable. ↫ MorphOS 3.21 release announcement The BasicWorks office suite has been in the works for a while now, and more information on it can be found in a thread on the MorphZone forums and on the website for the spreadsheet component of the suite, CellBasics. The formula loaders and xlsx loaders are ports of open source projects, but the rest of the application is new code based on ObjectiveC++ and Cairo/Harfbuzz. It uses its own file format, but can import csv and xslsx files, so Im assuming the same more or else applies to the word processor (but with docx, of course). Alongside MorphOS 3.21 also comes a new release for Wayfarer, the web browser the Amiga-inspired operating system uses. Wayfarer 12.0 moves to WebKitGTK 2.52.5 (which was released in July of 2026, so its quite up to date), and now uses the Skia graphics library. R300-R500 Radeons will render websites with Skia-GL for some massive performance improvements, helped further along by a slew of additional performance optimisations. Adblocking has been improved as well, YouTube should work a lot better now, and much more. The full release notes for MorphOS 3.21 give you all the details.

• The port that does not exist
  Ask any program to listen on port 0 and it will hand you a socket on port 471930or 580370or whatever the kernel felt like that day. Port 0 is not a port you can have. It is the number you pass when you want the operating system to pick one for you. But a TCP header is just bytes. The destination port field is 16 bits wide, and 0x0000 fits in 16 bits as well as anything else does. Nothing on the wire stops a packet from being addressed to port 0. Your tools will refuse it, your browser will block it, and your scanners default port list skips it, because everyone agrees it isnt a real port. Which makes it a pretty good place to hide things, whether anyone meant to or not. So we did some TCP cowboy shit 8 port scanned the entire fucking internet for open ports on port 0, which uncovered some interesting unexpected findings. ↫ acidvegas An awesome and entertaining read. Dont skip this one.

• Windows 11 27H2 might be a more substantial upgrade
  A little tidbit of news regarding the nest major update to Windows, known as Windows 11 27H2. Apparently, its going to come with some more serious changes to the codebase, therefore necessitating a full operating system swap instead of a mere enablement package, much like Windows 11 24H2 was. For those who need a refresher, Microsoft has long been rumored to be running on a three-year release cadence and for a while, it was even thought that the company would launch Windows 12 in 2H 2024. That evidently didnt happen, as instead we got Windows 11 24H2, but it was a major upgrade, a full OS swap compared to Windows 11 23H2 and 22H2. Essentially, it looks like every three releases, Microsoft is performing a full swap with major changes in the underlying codebase, and it seems to line up with Windows 11 27H2 as well. At the moment its not known if system requirements will change or not. ↫ Sayan Sen at Neowin.net Microsoft is currently testing adding support for Intels Advanced Performance Extensions, which should yield improved 64bit performance and reduced power consumption. It makes sense to assume this support will be coming with Windows 11 27H2, which should hopefully lead to tangible performance improvements across the board. Also, theres going to be a new default wallpaper. Be still my beating heart.

• The Ubuntu 26.04 Rust sudo is not compatible with standard sudo
  Ubuntu has been at the forefront of replacing the traditional versions of basic tools like sudo with replacements written in Rust, but aside from worries about replacing battle-tested code with brand new, relatively untested code, theres new things to worry about it. As it turns out, sudo-rs, the Rust replacement for sudo, is intentionally incompatible with the classic version in dangerous ways, as Chris Siebenmann discovered to his dismay. Basically, the classic sudo supports the use of wildcards defined using square brackets, so that if you allow a user to run, say, /usr/sbin/exim -bp, without a password, they can run exim -bpa, exim -bpc, exim -bpr, or exim -bpu without having to supply a password. This allows for very specific, fine-grained access control, which is quite a nice capability to have if youre managing many systems and users. Sadly, sudo-rs intentionally does not support this, opting to only allow you to use the generic * wildcard. Worse yet, it doesnt really make this clear, either. ↫ Chris Siebenmann I do not really have words for this. The Rust sudo has apparently opted to keep the single most dangerous wildcard while disallowing all of the wildcards that allow one to be narrow and specific about what youre allowing, and it buries this at the end of a section that devotes a bunch of words to describing functionality it doesnt have and doesnt support, with absolutely nothing else in that section to say this (either up front or in the descriptions of how all the wildcards would work if sudo-rs supported them, which it doesnt). If youre going to replace such vital, core tools like sudo that god knows how many people rely on every single day, you better be damn sure youre feature-complete and can act as a drop-in replacement. If someone switches from sudo to doas, nobody expects the experience to be identical. However, if youre consistently being told that sudo-rs is a drop-in replacement and you shouldnt expect any disruptions, you better be able to make true on that promise. Ubuntu isnt some also-ran small hobby distribution, and its developers should act like it. What a clown show.

• LXQt 2.5.0 released
  The second desktop environment release Ive got for you today is LXQt 2.5.0. This new version excises its last LXDE dependency, and QTerminal and QTermWidget received considerable improvements, like new background image modes, a visual bell, support for OSC-8 hyperlinks, and more. Theres a ton of smaller changes and improvements as well, but do note that due to a bug, 2.5.0 broke LXQts Monitor Settings on X11. The project intends to fix this as quickly as possible and push a point release to address this issue.

• Cinnamon 6.8 desktop environment released with hibernation support
  Its desktop environment Thursday, as Ive got two new releases for you today. First, Cinnamon, the desktop environment primarily associated with Linux Mint, has hit version 6.8. This version will officially ship with Linux Mint 27, scheduled for around Christmas of this year. Highlights of Cinnamon 6.8 include hibernation support via a Suspend action in the main menu, modern one-to-one trackpad gestures for both Wayland and Xorg sessions, support for the oo7 Secret Service provider, support for multiple instances in the Sound applet, and a more unified Network applet that merges the WireGuard and VPN sections. ↫ Marcus Nestor at 9To5Linux While Cinnamon is first and foremost a Linux Mint project, its available on countless other distributions as well, including dedicated variants for popular distributions like Fedora and Ubuntu. Its Wayland support is finally materialising too, which is long overdue.

• Omarchy 4.5 Brings Floating Workspaces, Native Apple Silicon Installation, and a More Flexible Linux Desktop
  by George Whittaker
  The Omarchy project has released Omarchy 4.5, a major update to its Arch Linux-based operating system that introduces traditional floating desktop workspaces, native Apple Silicon installation, expanded ARM hardware support, and extensive customization improvements. Released on November 5, 2026, the update marks one of the distribution's most significant developments since the introduction of Omarchy 4.0.
  
  Known internally as Quattro RS, the release incorporates more than 740 merged pull requests from over 180 contributors during a twelve-week development period. Its most visible addition is a floating desktop mode that allows users to work with overlapping windows and a conventional application dock without abandoning Omarchy's existing tiling and scrolling layouts. The change makes the distribution more accessible to users familiar with Windows and macOS while preserving its keyboard-driven workflow.
  
  Omarchy 4.5 also expands beyond traditional x86-64 computers with native installation support for selected Apple Silicon Macs and preliminary compatibility with NVIDIA ARM-based systems. Additional improvements include localization for 50 languages, new productivity applications, expanded AI agent integration, video wallpapers, updated desktop themes, and numerous fixes affecting graphics, displays, networking, and hardware compatibility.
  Floating Workspaces Introduce a Traditional Desktop Experience
  Omarchy has traditionally emphasized tiling window management through the Hyprland Wayland compositor. In a tiling environment, application windows are arranged automatically within the available screen space, reducing the need to drag, resize, and manually position each window.
  
  This approach can be highly efficient for developers and experienced Linux users who prefer keyboard navigation. However, it can also feel unfamiliar to people accustomed to conventional desktops, where windows overlap freely and applications are launched or minimized through a dock or taskbar.
  
  Omarchy 4.5 addresses this difference by introducing floating workspaces with an integrated application dock. Users can now switch individual workspaces between tiling, scrolling, and floating layouts without changing the entire desktop configuration.
  
  The Super + L keyboard shortcut cycles through these three layout modes. When floating mode is active, application windows receive themed title bars and can be positioned independently, creating an experience closer to a conventional desktop.
  
  The dock displays pinned applications, running programs, and an application grid. Users can rearrange applications through dragging, pin frequently used programs, and access additional actions through context menus. Pressing Super + M minimizes the active window to the dock.
  Go to Full Article

• openSUSE Leap 16.1 Unifies Traditional and Immutable Linux With Transactional Updates
  by George Whittaker
  The openSUSE Project has officially released openSUSE Leap 16.1, introducing a major change to how the distribution can be installed, maintained, and deployed. Released on November 3, 2026, the update brings an integrated Immutable Mode that allows users to install a transactionally updated operating system with a read-only root filesystem, while continuing to offer the traditional Linux installation model.
  
  The new approach also marks the beginning of the end for openSUSE Leap Micro as a separate distribution. Its functionality is now incorporated into Leap 16.1, giving administrators a unified platform for desktops, conventional servers, container hosts, virtual machines, and edge computing environments. Users can select the installation model that best fits their workloads without switching to an entirely different openSUSE product.
  
  Beyond the new installation architecture, Leap 16.1 updates KDE Plasma to version 6.6, retains GNOME 48 with additional maintenance fixes, introduces LXQt 2.4, and continues using the Linux 6.12 long-term support kernel series. The release also expands container tooling, improves system monitoring, updates security components, and introduces changes designed to make enterprise-oriented Linux deployments more predictable.
  Immutable Mode Becomes the Defining Feature of Leap 16.1
  The most important addition to openSUSE Leap 16.1 is its new Immutable Mode, which allows the operating system to use a read-only root filesystem and transactional updates. Instead of modifying the active operating system directly whenever packages are installed or updated, the immutable configuration prepares changes in a separate filesystem snapshot.
  
  This approach differs from a conventional Linux installation, where package managers typically modify files in the active root filesystem. On a traditional system, an update can replace libraries, executables, and configuration components while applications continue running. Although Linux package managers handle these operations carefully, interrupted updates or incompatible package combinations can sometimes leave a system in an inconsistent state.
  
  Immutable Mode reduces this risk by preparing operating-system changes separately from the currently running environment. Updates become active after a reboot, allowing the system to start using a consistent set of packages and configuration changes. If an update introduces problems, administrators can return to an earlier snapshot rather than manually reversing individual package modifications.
  
  The underlying technology is not entirely new to openSUSE. Similar functionality has been available through Leap Micro, which was designed for lightweight, transactionally updated server and infrastructure deployments. What changes in Leap 16.1 is that this operating model becomes an installation choice within the main Leap distribution.
  Go to Full Article

• KDE Plasma 6.8.2 Released With More KWin and Wayland Fixes
  by George Whittaker
  The KDE Project has released KDE Plasma 6.8.2, delivering another round of stability improvements for its Wayland-based Linux desktop environment. Released on October 27, 2026, the update arrives one week after Plasma 6.8.1 and two weeks after the anniversary release of Plasma 6.8, which marked 30 years since the KDE project's founding.
  
  This second maintenance release concentrates on correcting regressions discovered after the initial rollout. The largest collection of changes targets KWin, KDE's window manager and Wayland compositor, with fixes involving multi-GPU synchronization, display handling, pointer constraints, color pipelines, and window stacking. Additional improvements address disappearing desktop icons, application launcher behavior, remote desktop sessions, screen recording, accessibility, and system monitoring.
  
  Although Plasma 6.8.2 does not introduce major new desktop features, its corrections are particularly important because Plasma 6.8 completed KDE's transition away from native X11 desktop sessions. With Wayland now serving as Plasma's display foundation, improvements to KWin and its supporting components directly affect the reliability of the entire desktop environment.
  KDE Continues Stabilizing Its Anniversary Release
  KDE Plasma 6.8 arrived on October 14, 2026, coinciding with the project's 30th anniversary. The release introduced significant desktop changes, including the retirement of native X11 sessions, additional HDR improvements, expanded remote desktop capabilities, NVIDIA graphics optimizations, and further development of KDE's Union theming engine.
  
  The transition represented an important architectural milestone, but major desktop releases frequently expose problems that were not encountered during development or beta testing. Linux desktops must operate across numerous combinations of graphics hardware, display configurations, drivers, input devices, and applications. Even extensive testing cannot always reproduce every environment used by the wider community.
  
  KDE acknowledged this challenge during the development cycle following Plasma 6.8, noting that users had discovered regressions that were not reported during the beta period. Contributors responded with a substantial collection of fixes, many of which have now reached the stable 6.8 branch through its first two maintenance releases.
  
  Plasma 6.8.2 continues that stabilization effort. Rather than changing the desktop's overall direction, it improves the reliability of existing functionality and addresses issues that could affect everyday workflows. The release includes corrections across KWin, Plasma Desktop, Plasma Workspace, Discover, KRDP, KPipeWire, and several other components.
  Go to Full Article

• RefreshOS 3.1 Strengthens Its Debian Foundation With Independent Package Management
  by George Whittaker
  The RefreshOS project has released RefreshOS 3.1, bringing an updated Debian foundation, a dedicated software repository, improved 32-bit application compatibility, and several refinements to its KDE Plasma desktop experience. Released on October 27, 2026, the update advances the distribution's 3.x "Colorful Cosmos" series while introducing infrastructure that could significantly improve how RefreshOS delivers its own packages and configuration changes.
  
  The new release moves from Debian 13.4 to Debian 13.7 "Trixie", incorporates Linux kernel 6.12.113, and continues using KDE Plasma 6.3.6. However, the most important development is the introduction of an official RefreshOS APT repository with separate Stable, Testing, and Experimental channels. This gives the project a more structured way to distribute customized software while continuing to benefit from Debian's established package ecosystem.
  
  RefreshOS 3.1 also enables i386 architecture support, making it easier to install compatible 32-bit software and dependencies required by applications such as Steam. Additional changes address desktop localization, KDE integration, installer configuration, package permissions, and installation image cleanup. Together, these improvements represent an effort to make RefreshOS easier to maintain while preserving its focus on a ready-to-use Linux desktop.
  RefreshOS Builds on Debian's Stable Release Model
  RefreshOS is a Debian-based Linux distribution developed by eXybit Technologies, designed to provide a polished desktop environment without requiring users to configure every component manually. The project combines Debian's stable package foundation with KDE Plasma, preinstalled applications, hardware support, multimedia capabilities, and custom desktop styling.
  
  Unlike distributions that emphasize constant adoption of the newest software versions, RefreshOS prioritizes a relatively predictable desktop experience. Its Debian foundation provides access to established security maintenance, package management, and compatibility practices, while RefreshOS adds its own configuration choices to simplify everyday use.
  
  Version 3.1 continues that philosophy by incorporating Debian 13.7, the seventh point release of Debian 13 "Trixie." Debian published this update on September 12, 2026, primarily to consolidate security corrections and fixes for significant software problems. These point releases do not represent entirely new Debian generations. Instead, they refresh installation media and package selections so newly installed systems begin with a more current collection of fixes.
  Go to Full Article

• Tails 7.15.1 Blocks Compromised HTTPS Certificates in Urgent Privacy Security Fix
  by George Whittaker
  The Tails project has released Tails 7.15.1, an emergency security update addressing a compromised certificate authority that could allow attackers to impersonate legitimate HTTPS websites. Released on October 23, 2026, the update focuses on protecting users against a potentially serious man-in-the-middle attack involving certificates associated with eMudhra, an authority whose intermediate certificates were compromised.
  
  The emergency release updates Tor Browser to version 15.0.26, addressing CVE-2026-113470, and modifies the distribution's trusted certificate authorities to block all eMudhra certificates. These changes are particularly important for Tails because the operating system routes internet traffic through the Tor network, where malicious exit nodes or other network intermediaries could potentially exploit compromised certificates to impersonate secure websites.
  
  Unlike a conventional maintenance update, Tails 7.15.1 does not introduce major desktop features, new applications, or significant interface changes. Its purpose is to close a security gap that could undermine the authenticity of HTTPS connections. The developers recommend upgrading promptly, especially for users who rely on Tails for sensitive communications, anonymous research, journalism, or other privacy-critical activities.
  Why Tails 7.15.1 Was Released as an Emergency Update
  Tails, short for The Amnesic Incognito Live System, is a Debian-based Linux distribution designed to help users preserve their privacy and reduce traces of their computing activity. It typically runs from a USB stick and routes internet connections through Tor, making it useful for people who need stronger privacy protections than those provided by a conventional desktop operating system.
  
  The distribution also emphasizes minimizing persistent data. By default, Tails operates as a live environment and does not retain ordinary session activity after shutdown. Users who need to preserve selected files and settings can configure encrypted Persistent Storage on their USB device, allowing them to maintain important information across sessions without changing the operating system's general amnesic behavior.
  
  Because Tails is built around privacy and secure communication, problems involving HTTPS certificate validation deserve particular attention. Tor helps obscure the relationship between a user's network location and the websites they visit, but it does not automatically guarantee that every website encountered through an exit node is authentic. HTTPS provides an additional layer of protection by authenticating websites and encrypting communications between the browser and the destination server.
  Go to Full Article

• Omarchy 4.0.5 Released With Better NVIDIA Laptop Support
  by George Whittaker
  The Omarchy project has released Omarchy 4.0.5, introducing a substantial collection of hardware compatibility improvements, desktop performance optimizations, security fixes, and package updates for the Arch Linux-based operating system. Released on October 18, 2026, the update focuses on refining the existing desktop experience while preparing the distribution for its next major feature release.
  
  Among the most important changes are improved NVIDIA hybrid graphics support for laptops, an updated Linux 7.2.8 kernel featuring the BORE scheduler, and compatibility improvements for Qt 6.12. The release also resolves boot-related black screens, fixes audio problems affecting certain Dell and USB speaker configurations, corrects Steam graphics driver selection, and improves the reliability of several desktop utilities.
  
  Although version 4.0.5 is primarily a maintenance release, its improvements extend across many of the components that determine how smoothly a Linux desktop operates. From faster application launches and more responsive desktop panels to stronger security defaults and more reliable hardware detection, the update demonstrates Omarchy's continued emphasis on delivering a preconfigured Linux environment that requires relatively little manual setup.
  Omarchy Continues Refining Its Arch Linux Desktop Experience
  Omarchy is an opinionated Arch Linux-based distribution designed to provide a ready-to-use development and desktop environment built around the Hyprland Wayland compositor. Rather than presenting users with a minimal installation that requires extensive customization, Omarchy combines a carefully selected collection of applications, themes, keyboard shortcuts, and system configurations into a cohesive desktop experience.
  
  The distribution has attracted attention among developers and experienced Linux users who appreciate keyboard-driven workflows, tiling window management, and the flexibility of Arch Linux without necessarily wanting to configure every component manually. Its desktop environment emphasizes efficient navigation, integrated development tools, and a consistent visual design, while retaining access to Arch's extensive software repositories.
  
  Version 4.0.5 continues that approach by concentrating on problems that can interrupt everyday workflows. The release improves hardware compatibility, corrects regressions introduced by newer software packages, and reduces unnecessary delays in common desktop operations. Rather than introducing a dramatic redesign, the developers have focused on making the existing environment more predictable and responsive.
  Go to Full Article

• KDE Plasma 6.8 Marks 30 Years With a Major Shift to Wayland and a More Powerful Linux Desktop
  by George Whittaker
  The KDE Project has officially released KDE Plasma 6.8, introducing a substantial collection of desktop improvements while celebrating three decades of open-source software development. Released on October 14, 2026, exactly 30 years after Matthias Ettrich announced the original KDE project, this anniversary edition brings significant changes to display management, accessibility, graphics performance, remote desktop functionality, system monitoring, and application theming.
  
  Perhaps the most consequential development is KDE's decision to retire native X11 desktop sessions in Plasma 6.8, completing its transition toward Wayland as the primary display architecture. The release also introduces NVIDIA triple buffering by default, improved HDR support, a more capable remote desktop server, CPU affinity controls in System Monitor, and expanded capabilities for the experimental Union theming engine. These improvements reflect KDE's effort to modernize the Linux desktop while maintaining the customization and flexibility that have defined Plasma for years.
  
  Plasma 6.8 is therefore more than a commemorative release. It represents an important architectural transition for one of Linux's most widely used desktop environments, with changes that affect both everyday users and developers building applications for the next generation of Linux desktops.
  KDE Celebrates Three Decades of Open-Source Desktop Development
  KDE's history began on October 14, 1996, when Matthias Ettrich proposed creating a consistent graphical desktop environment for Unix-like operating systems. At the time, Linux was becoming increasingly capable as a free operating system, but its graphical experience remained fragmented. Users could choose from several window managers and applications, yet there was no universally integrated desktop environment comparable to the commercial graphical systems available elsewhere.
  
  The original KDE initiative sought to address that limitation by building a cohesive desktop around the Qt application framework. Over the following decades, the project evolved through several major generations, introducing increasingly sophisticated desktop technologies while expanding into applications, development frameworks, mobile interfaces, and other open-source projects.
  
  Plasma 6.8 arrives as KDE marks its 30th anniversary, but its development priorities are focused primarily on the future. Rather than introducing a purely cosmetic anniversary edition, KDE has concentrated on modernizing underlying desktop infrastructure while improving accessibility, usability, and performance. The result is a release that combines immediately visible enhancements with architectural changes intended to support future development.
  Go to Full Article

• Building a Reliable Event-Driven Payment Service With XRP Ledger
  by Emma Clapp
  Receiving a transaction notification is only the first step. Production software still has to decide whether that event is safe to turn into application state.
  
  A WebSocket callback can arrive in milliseconds. What happens afterward is harder. The Go to Full Article

• Linux Moves Closer to Retiring the x32 ABI After Years of Limited Adoption
  by George Whittaker
  Linux kernel developers are renewing efforts to retire the x32 application binary interface (ABI), a little-used compatibility feature that attempted to combine the advantages of 64-bit processors with the smaller memory footprint of 32-bit applications. A revised patch series submitted on October 8, 2026, proposes the first steps toward disabling the interface, potentially ending support for an architecture experiment introduced more than 14 years ago.
  
  The latest proposal comes from Sebastian Andrzej Siewior, a Linux kernel developer at Linutronix who has been working on the removal effort throughout 2026. Rather than immediately deleting every component associated with x32, the proposed approach would first prevent the feature from being enabled through normal kernel configuration. This would give remaining users and distribution maintainers an opportunity to respond before the underlying implementation is removed.
  
  The effort reflects a broader challenge in Linux development: maintaining compatibility with older or rarely used technologies while keeping the kernel manageable, secure, and efficient. Although x32 offered theoretical performance and memory advantages, it never achieved widespread adoption. With conventional x86_64 software dominating modern Linux systems, developers are increasingly questioning whether the additional maintenance burden remains justified.
  Understanding the Linux x32 ABI
  The x32 ABI was introduced with Linux kernel 3.4 in 2012 as an alternative to conventional 32-bit and 64-bit application environments. Its goal was to provide applications with access to the architectural improvements of x86_64 processors while retaining smaller data types and pointers associated with 32-bit software.
  
  Traditional 32-bit x86 applications use the i386 ABI, which operates with a more limited register set and 32-bit execution conventions. Standard x86_64 applications, meanwhile, benefit from additional general-purpose registers, wider registers, and modern calling conventions, but they normally use 64-bit pointers. Those larger pointers can increase memory consumption in applications that maintain large numbers of pointer-heavy data structures.
  
  The x32 ABI attempted to offer a compromise. Applications would execute using the x86_64 instruction set and its larger register file while retaining 32-bit integers, long values, and pointers. This programming model is commonly described as ILP32, meaning that integers, long integers, and pointers are all 32 bits wide.
  
  The distinction can be illustrated by comparing the expected sizes of common C data types:
  Go to Full Article

• Google's Kage Project Rethinks Linux Kernel Security With Isolated Device Drivers
  by George Whittaker
  Google is exploring a new approach to Linux kernel security that could significantly change how device drivers interact with the operating system. The experimental project, known as Kage, uses compiler-based sandboxing to isolate drivers inside the kernel, potentially limiting the damage caused by memory corruption, programming errors, and exploitable vulnerabilities without requiring drivers to run as separate user-space processes.
  
  The research was presented at the Linux Plumbers Conference 2026, held October 5–7, with Stanford University and Google researcher Zachary Yedidia discussing how LLVM's Lightweight Fault Isolation (LFI) technology can create restricted execution environments for native kernel code. Unlike conventional isolation techniques, which often depend on separate processes or virtual machines, Kage attempts to preserve the performance advantages of kernel-space execution while reducing the amount of memory individual drivers can access.
  
  Early prototypes have already demonstrated the concept using NVMe storage, networking, and Wi-Fi drivers. However, Kage remains an experimental research project rather than a feature available in mainstream Linux distributions. Its developers are still investigating performance, hardware access, and compatibility with more complicated drivers, including graphics hardware.
  Why Device Drivers Remain a Major Linux Security Challenge
  Linux device drivers are responsible for connecting the operating system to hardware components, including graphics cards, network adapters, storage controllers, USB devices, and wireless chipsets. Most traditional Linux drivers execute in kernel space, giving them privileged access to system resources and the ability to interact directly with hardware. This architecture is one reason Linux can deliver high performance across such a broad range of devices, but it also creates a significant security challenge.
  
  When an ordinary application encounters a memory error, the operating system can often terminate that process without affecting the rest of the system. Kernel drivers operate under different conditions. Because they typically share the kernel's address space and privileges, an invalid memory access or exploitable vulnerability can affect unrelated kernel components, potentially resulting in a system crash, privilege escalation, or complete compromise of the operating system.
  
  The challenge becomes more complicated when considering the enormous number of drivers supported by Linux. Some are maintained by large organizations with extensive testing infrastructure, while others receive contributions from smaller development teams or individual maintainers. Even carefully reviewed drivers can contain bugs, particularly when they interact with complicated hardware, asynchronous operations, and memory-management mechanisms.
  Go to Full Article