Recent Changes - Search:
NTLUG

Linux is free.
Life is good.

Linux Training
10am on Meeting Days!

1825 Monetary Lane Suite #104 Carrollton, TX

Do a presentation at NTLUG.

What is the Linux Installation Project?

Real companies using Linux!

Not just for business anymore.

Providing ready to run platforms on Linux

Show Descriptions... (Show All) (Two Column)

LWN.net

  • [$] BPF, continuous testing, and stable kernels
    Ihor Solodrai and Shung-Hsi Yu wrapped up the BPF track at the 2026LinuxStorage, Filesystem, Memory-Management, and BPF Summit with a pair ofsessions related to testing.Solodrai spoke about what has changed for BPF's continuous-integration (CI)testing. Yu spoke about what may beneeded to test BPF updates in stable kernels more thoroughly. TheBPF subsystem's CI tests are in a good place, they said; even so, Solodrai and Yu have ahandful of possible avenues toward enabling better test coverage in the future.


  • Python packaging council candidates announced
    The Python Software Foundation (PSF) has announcedthe candidatesrunning for the Python packaging council that was approved by the Python steering councilin April.

    This inaugural election fills all five seats on the PPC. The two candidatesreceiving the highest number of votes shall be designated Cohort A with a twoyear term, and the three candidates receiving the next highest number of votesshall be designated Cohort B with a one year term.

    In future elections, each cohort will be elected for a full two-year term inalternating years, so that roughly half of the PPC turns over each cycle.

    There are 17 candidates running for the five open seats. PSF voting-eligiblemembers must affirmtheir intention to vote in this election by August 25. Voting begins onSeptember 1, and ends on September 15.



  • Security updates for Friday
    Security updates have been issued by AlmaLinux (.NET 10.0, .NET 8.0, .NET 9.0, bind, bind9.16, and dracut), Debian (apr-util, chromium, postgresql-17, python-httplib2, unzip, and zip), Fedora (erlang-cowboy, erlang-cowlib, flatpak, and libnfs), Gentoo (Apache HTTPD, Bubblewrap, Dnsmasq, Exim, Flatpak, libinput, and rsync), Mageia (dhcpcd, qemu, and roundcubemail), Oracle (.NET 8.0, .NET 9.0, bind, bind9.16, freerdp, glib2, gnome-remote-desktop, grafana, gstreamer1-plugins-good, isns-utils, java-17-openjdk, kernel, libpng, libXfont2, nghttp2, perl-DBI:1.641, python-idna, python3.9, and xorg-x11-server), Slackware (rsync), SUSE (bouncycastle, chromium, dnsdist, dracut, java-1_8_0-ibm, kernel, libXfont2, nodejs22, nodejs24, php8, python-httplib2, rrdtool, rsyslog, samba, and wireshark), and Ubuntu (linux, linux-aws, linux-kvm, linux-aws-hwe, linux-aws-hwe, linux-azure, linux-gcp, linux-hwe, linux-azure, linux-gcp, linux-hwe, linux-oracle, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-nvidia-tegra, linux-oracle, linux-nvidia-tegra-igx, linux-oem-7.0, linux-oracle, and node-axios).


  • Domas: Bypassing memory protection with AMD's memory controllers
    Christopher Domas haspublished a proof of concept with a description showing how to use AMD memory controllers' bank swizzle mode to bypass memory protection and read or write arbitrary data, including CPU microcode definitions and memory belonging to the platform security processor. Among other things, this allows code running at the kernel level to directly manipulate the meaning of processor instructions, potentially bypassing other security measures such as memory encryption and virtual machine isolation.

    This is not, strictly, unexpected behavior: it is documented in AMD's manual (on page 113 of that PDF). But the fact that it can be used to access arbitrary memory and thereby rewrite supposedly immutable parts of the computer's firmware without crashing the host machine seems like an unintentional side-effect of the design. Fortunately, since enabling bank swizzle mode requires kernel-level privileges, the vulnerability is not an immediate problem for most software. Still, it seems likely that this technique will end up being used for nefarious purposes eventually.


  • rsync 3.5.0 released
    Version3.5.0 of rsync has been released with a hugenumber of security fixes:
    This release fixes 33 security issues found during a focused audit ofrsync's path handling and daemon protocol, a companion daemon-protocolfuzzing pass, and reports from external researchers -⁠-⁠ plus severalrobustness hardenings. CVE IDs were assigned by VulnCheck (CNA); theprecise "introduced in" version ranges accompany each advisory, andmany are much narrower than "everything before 3.5.0". Every fix shipswith a regression test in the test suite that fails on the unfixedtree.


  • [$] 128-Bit page tables for Arm
    The size of a processor's page-table entries directly limits how muchphysical memory that processor is able to access. Back in the 32-bit days,that limit was 4GB, an amount of memory that once seemed nearly infinite,but which would now struggle to hold a basic AI-enabled "hello world" app.The expansion to 64 bits on most popular architectures would seem tohave removed those limits now; some Arm systems, for example, can use56 of those bits to access up to 72PB of memory. So it might besurprising that the Arm architecture is evolving to support even largerpage-table entries (PTEs). Thispatch set from Anshuman Khandual adds support for 128-bit PTEs, butwho will benefit from this capability is not entirely clear.


  • Security updates for Thursday
    Security updates have been issued by AlmaLinux (abrt, dhcpcd, edk2, freerdp, gegl04, grafana, gstreamer1-plugins-good, iscsi-initiator-utils, isns-utils, kernel, kernel-rt, keylime, libarchive, libyang, nodejs-nodemon, opencryptoki, osbuild-composer, pacemaker, postgresql-jdbc, postgresql18, python-idna, python3.9, udisks2, valkey, vim, xorg-x11-server-Xwayland, and yggdrasil-worker-package-manager), Debian (flatpak, lemonldap-ng, neutron, python-django, spip, xdg-dbus-proxy, and xorg-server), Fedora (apr-util, cri-o1.34, libcupsfilters, linux-firmware, sqlite, and vaultwarden), Gentoo (FreeType), Oracle (dovecot, evince, fence-agents, gnutls, gstreamer1-plugins-bad-free, gstreamer1-plugins-good, isns-utils, java-1.8.0-openjdk, kernel, libarchive, osbuild-composer, pipewire, postgresql, ruby, ruby:3.3, sudo, and udisks2), Red Hat (bind, bind9.16, gnome-remote-desktop, grafana, opentelemetry-collector, python-pillow, python3, python3.12, python3.14, python3.9, and rhc), SUSE (chromium, clusterctl, dracut, gd, git-cliff, gleam, govulncheck-vulndb, graphicsmagick, gzip, kernel, kubevirt, libheif, librest0_7, nodejs22, nodejs24, openssh, openvpn, python3, python313-scikit-learn, rpm, stunnel, and zk), and Ubuntu (kernel, libgit2, linux, linux-aws, linux-aws-fips, linux-azure, linux-azure-6.8, linux-azure-fde, linux-azure-fde-6.8, linux-azure-fips, linux-fips, linux-gcp, linux-gcp-6.8, linux-gcp-fips, linux-gke, linux-gkeop, linux-ibm, linux-ibm-6.8, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-realtime, linux-realtime-6.8, linux-xilinx, linux, linux-aws, linux-aws-fips, linux-azure, linux-azure-fde, linux-azure-fips, linux-gkeop, linux-ibm, linux-ibm-5.15, linux-intel-iot-realtime, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-oracle-5.15, linux-realtime, linux-xilinx-zynqmp, linux, linux-aws, linux-aws-fips, linux-azure-4.15, linux-azure-fips, linux-fips, linux-gcp-4.15, linux-gcp-fips, linux-kvm, linux, linux-aws, linux-azure, linux-azure-fde, linux-ibm, linux-oracle, linux-raspi, linux-realtime, linux-azure, linux-azure-6.17, linux-gcp-6.17, linux-hwe-6.17, linux-oem-6.17, linux-realtime-6.17, node-follow-redirects, and yelp).


  • [$] LWN.net Weekly Edition for August 13, 2026
    Inside this week's LWN.net Weekly Edition:
    Front: BPF and binfmt_misc; CrossPoint ebook firmware; KVM planes; BPF formal verification; shadow-utils; new storage-code testing features. Briefs: Django releases; GNOME shell; LightDM 1.33.0; QEMU 11.1; uutils 0.10; Software Stewardship Lab; Quotes; ... Announcements: Newsletters, conferences, security updates, patches, and more.


  • [$] Block-layer error injection
    Storage code has to cope with hardware that fails in inconvenientways, but coaxing a healthy disk into producing those failures ondemand, for testing, is usually not possible. The kernelprovides several ways to inject block-layer I/O errors, but none of those can select the operation to fail, pick the status code to return, or target a diskdirectly without employing a stacked device on top. Use of a stacked device meansthe test runs against the mapper device, not the disk it was meant toexercise. A patchseries from Christoph Hellwig adds a configurable error-injectioninterface that does all three things that the current error-injection codelacks, controlled by a per-disk debugfsfile.


  • [$] A look at CrossPoint e-reader firmware
    There are a number of small,inexpensive, low-powered e-reader or e-paper devices that have promise asebook readers with one minor problem: the firmware they ship with does notrealize their full potential. To solve that problem, the CrossPoint Reader project looks toprovide replacement firmware that offers necessary features, better performance,and a more pleasant reading experience. On August 7, the project released version1.5.0, which opens large EPUBs more quickly, providesoffline dictionary lookups, and has reworked settings for changing layout andfont options. The release also improves support for right-to-left text as wellas Chinese, Japanese, andKorean (CJK) text rendering.


  • QEMU 11.1 released
    Version11.1 of the QEMU emulator has been released. The release containsmore than 3,200 commits from 285 authors and includes a long list ofimprovements; see the announcement and changelog for thedetails.



  • Security updates for Wednesday
    Security updates have been issued by AlmaLinux (fence-agents, firefox, frr10, gstreamer1-plugins-good, iscsi-initiator-utils, isns-utils, kernel, kernel-rt, perl-DBI:1.641, postgresql, postgresql:12, and resource-agents), Debian (libgd2, openjdk-25, php7.4, php8.2, and postfix), Fedora (clamav, domoticz, and libidn), Red Hat (delve, edk2, firefox, go-fdo-client, go-fdo-server, grafana, host-metering, ignition, kernel, kernel package, kernel-rt, ldns, libarchive, mariadb10.11, mariadb:10.11, multiple packages, rhc, rhc-worker-playbook, rhc-worker-script, sssd, thunderbird, yggdrasil, and yggdrasil-worker-package-manager), Slackware (expat and openssh), and SUSE (avahi, chromedriver, erlang26, gawk, glib2, go-sendxmpp, google-guest-agent, google-osconfig-agent, gpg2, gstreamer-plugins-bad, gstreamer-plugins-base, helm, ignition, ImageMagick, java-11-openj9, java-17-openj9, java-1_8_0-openj9, java-21-openj9, java-25-openj9, libarchive, libkrun, libpcp-devel, libpng16, libssh, libssh2_org, multipath-tools, net-tools, nmap, openssl-1_1, openssl-3, pcp, perl, python-pip, python-pyasn1, python-urllib3, python3-pip, python313-Django5, runc, samba, snpguest, spice-vdagent, sssd, unbound, wget, wild, wpa_supplicant, xmlrpc-c, and zpaqfranz).


  • [$] KVM planes head for takeoff
    Virtualization places a guest system into a separate security domain,typically with fewer privileges than software running directly on the host.Increasingly, there is interest in creating multiple security domainswithin a single virtualized system as well. CPU vendors (and softwarevendors too) are implementing solutions; each of which, of course, isdifferent from all of the others. KVM planes, currently under developmentby Jörg Rödel, Paolo Bonzini, and others in the KVM community, is anattempt to provide an abstraction layer that makes all of these featuresavailable on Linux systems; it is not a small task.


  • Bernard: GNOME Shell design dreams
    GNOME contributor Tobias Bernard has publisheda blog post that details some of the design team's ideas for theGNOME Shell over the long term:

    Some of these we have relatively complete plans for, others aremore vague ideas that need more research and prototyping. As always,getting things like these implemented depends on developer capacityand interest (and sometimes funding).

    While each of these ideas may require additional discussion,prototyping, and testing, we (the design team) have collected them alltogether here to share our longer-term vision and to give each ideamore visibility.



  • Security updates for Tuesday
    Security updates have been issued by AlmaLinux (gpsd), Debian (caddy, libyaml-syck-perl, nss, and wordpress), Fedora (chezmoi, chromium, emacs, kernel, knot, libcupsfilters, mingw-gstreamer1-plugins-good, mingw-libidn, mingw-python-pip, nghttp2, p11-kit, python-webob, suricata, and xen), Mageia (bind, openslide, php8.4, and php8.5), Oracle (gpsd-minimal, kernel, libarchive, libpng12, nodejs-nodemon, php:8.3, ruby:3.3, and ruby:4.0), SUSE (agama-web-ui, bind, bouncycastle, dhcpcd, ffmpeg, ffmpeg-4, freerdp, gd, gitoxide, kak-lsp, kernel-devel, librest-1_0-0, libsdb2_5_0, libssh2_org, nodejs22, PackageKit, perl, perl-Date-Manip, python-ujson, python3-sqlparse, python311, python312, python313-pymongo, ruby2.5, runc, suseconnect-ng, thunderbird, vlang, webkit2gtk3, and weechat), and Ubuntu (imagemagick and systemd).


LXer Linux News


  • Linux 7.1, Linux 7.2 Performance On The Intel Xeon 600 Series
    With Linux 7.2 expected for its stable release this weekend, today's testing has some additional testing of the Linux 7.2 Git kernel as well as Linux 7.1 stable compared to Linux 7.0 as used by default on Ubuntu 26.04 LTS. Phoronix testing previously conducted of Linux 7.2 have shown benefits for Intel Arc B390 Xe3 in some configurations, faster poll performance on AMD Ryzen Threadripper and other hardware, and some nice I/O performance gains on AMD EPYC Turin. Today's kernel benchmarks are with the Intel Xeon 678X Granite Rapids WS currently in the lab as part of the HP Z4 G6i workstation testing.








  • Blue Pill-Style STM32C5 Board Adds Oberon-2 Firmware Support
    Norwegian-based Tenko has released an open-hardware development board based on STMicroelectronics’ STM32C5 microcontroller family. The compact board follows the familiar Blue Pill form factor while adding USB-C power, onboard USB-to-UART connectivity, and an alternative firmware environment based on Oberon-2. The board uses the recently introduced STM32C551CE, a 32-bit Arm Cortex-M33 microcontroller operating at up to […]




  • Test Days for Fedora 45: Help Us Test the Big Changes
    Fedora 45 has several system-level changes that need testing on real hardware. The first test day up is GNOME 51, starting on 17 August, with more events planned for RPM 6.1, installation media and others. You can participate with a VM for most tests; some hardware-specific testing is more useful on a real machine. Details […]










Error: It's not possible to reach RSS file http://services.digg.com/2.0/story.getTopNews?type=rss&topic=technology ...

Slashdot

  • It's Not Just RAM: Windows Licenses Are Also Pushing Up PC Prices
    It's not just RAM prices that are going up, writes CNET. "Reports suggest the cost of Windows licenses for manufacturers is rising by up to 10%."Several sites that closely follow Microsoft news, including Windows Central and Windows Latest, have published articles citing a report from Taiwan's Economic Daily News that claims some PC manufacturers are seeing a 7% to 10% increase in the cost of Windows 11 licenses... Because they buy licenses in bulk, they get a sizeable discount over what a consumer would pay for a new copy of Windows 11. But given the existing cost pressures from other components, a big Windows 11 price hike could lead them to pass on some of the added cost to PC buyers. According to the EDN story, PC makers could raise prices by about 5% over the next quarter due to the reported Windows price hike. .. A translated version of the Economic Daily News article contains information from an unnamed PC brand executive. It says that while Microsoft typically raises licensing costs every year by single-digit percentages, that hike has reached 7% to 10% this year, a significant increase. "A representative for Microsoft declined to comment on the report," according to the article. But it also notes that three weeks ago laptop maker Framework blamed price hikes and reconfigurations for some of their models on processor, memory, storage, "and other silicon costs — but also "an increase in Windows license costs." Thanks to Slashdot reader joshuark for sharing the article.


    Read more of this story at Slashdot.


  • Europe's Record Heatwave Kills 25,000, Dries Rivers, Shuts Nuclear Plant, Exposes Submerged Warships
    "The European Union's Copernicus climate monitoring service confirmed Monday that June and July were the hottest on record in western Europe," .according to a report from the CBC. "The period saw an estimated 25,000 heat-related deaths." CNN has before-and-after photos of Europe's dried rivers, calling it "a crisis so dire it can be seen from space"River levels are so low that commercial ships have had to reduce their loads by as much as 80% to avoid running aground. It's disrupting supply chains and making shipping more expensive. Other effects of Europe's drying riversThe BBC reports that Romania has "shut down its only nuclear power station because of extremely low water levels in the Danube river."A bridge built in the year 39 AD by the Roman emperor Caligula "is usually entirely underwater," reports CNN, but this year full blocks of the ancient structure are visible, giving archaeologists a rare opportunity to study it." The reports adds that drying Tiber has also now also revealed formerly submerged e-bikes, scooters, refrigerators and a car."The CBC reports a dozen Nazi warships scuttled in a river during the Second World War are now resurfacing as water levels plunge. "Elsewhere, the drying Danube has revealed a German military motorcycle in Hungary, an unexploded 700-kilogram British bomb in Slovakia, and what are believed to be the ancient remains of a mammoth in Bulgaria."


    Read more of this story at Slashdot.


  • Why Are Big Tech CEOs Writing Long Manifestos About AI?
    This week Meta CEO Mark Zuckerberg published a 6,500 word open letter titled "The Future is for Everyone". But the BBC is more interested in why big tech executives keep writing manifestos about AI:[Zuckerberg's] vision echoes what AI leaders have expressed in various forms: the product they are building is among the "most important technologies in history." Marc Andreessen, co-founder of early web titan Netscape, perhaps started this trend in 2023 with a 5,000-word essay he called "The Techno-Optimist Manifesto", which argued innovation was the way to solve life's problems... As the International Monetary Fund warns AI could affect nearly 40% of jobs and worsen global financial inequality, Zuckerberg says he believes there will be an abundance of jobs in the future. "I do not understand why anyone who believes that AI will eliminate most jobs and much of humanity's relevance would rush to build that future." Never mind that Zuckerberg's Meta has cut 10% of its global workforce — about 8,000 jobs — as the company reorganizes to focus on AI. Zuckerberg's manifesto is the latest to land in our social media feeds in an effort to put a positive spin on AI. In 2024, ChatGPT-maker OpenAI boss Sam Altman released a manifesto called "The Intelligence Age", a sweeping expression of optimism about the tech's potential... That same year, in a manifesto titled "Machines of Loving Grace", Anthropic CEO Dario Amodei touted the potential of AI to transform everything from healthcare to politics. So what's going on with these tech executives' manifestos? Economics blogger Noah Smith suggested to the BBC "they all feel like it's such an important moment that it's incumbent upon them to do whatever they can to shape the direction that this technology is going." Although he does see some value in their engagement with important issues. "Should we open-source something that has the ability to kill humanity? If you don't take that seriously, you're just a fool." But Rob Lalka, a business professor at Tulane University, had a different explanation for the BBC:Lalka said the timing of Zuckerberg's manifesto coincides with rising anger over AI's impact on everything from jobs to the environment. And while tech journalists and academics might pore over them trying to glean nuggets of meaning, these executive manifestos are not necessarily landing with the general public. "They're trying to make the case that the positives will far outweigh some of those negatives that the public backlash is pointing out," he said. "But I think a lot of the reasons for optimism are still yet to be seen."


    Read more of this story at Slashdot.


  • Vulnerability Giving Attackers Full Control of Macs Is Under Active Exploitation
    joshuark shares a report from Ars Technica: Dutch officials have warned that a high-severity macOS vulnerability that allows attackers to execute malicious code is under active exploitation. "The NCSC has received a notification indicating that active abuse of this vulnerability has been observed on multiple systems on which port 5900 was accessible from the Internet," the Netherlands National Cyber Security Centrum warned earlier this week. "In all these cases, root had been accessed on the affected system and a Monero crypto miner had been placed." The vulnerability, tracked as CVE-2026-65400, received a patch from Apple last week for macOS Tahoe, Sequoia, and Sonoma. The vulnerability, with a severity rating of 7.1 out of 10, stems from a bug in the macOS screen sharing capability, which allows a remote party to view the screen and control the keyboard and mouse while a machine is turned on. A flaw in the "state management," which keeps track of preceding events, user interactions, variables, and other system states, is the underlying cause. A video of the exploit in action can be found here. Details of CVE-2026-65400 became public at last week's Black Hat security conference. Apple said last week that CVE-2026-65400 "may" allow an attacker without credentials to gain access to a Mac. It's unclear why Apple hedged, but softening language is common among most tech developers when disclosing vulnerabilities. As noted by the NCSC, the vulnerability is being exploited when port 5900 is exposed to the Internet. When screen sharing is turned on, the macOS firewall opens the port. Routers and dedicated firewalls generally block the port unless configured to override that setting. Security practitioners generally advise Mac users to keep the port closed even when using screen sharing and to instead connect over a VPN or through SSH tunneling. The alternatives require actions that aren't within the capabilities of most users. The safest practice is to block screen sharing, enable it only when screen sharing is needed, and to turn the feature off once a session has ended. Screen sharing can be turned on or off by accessing System Settings > General > Sharing and toggling the switch for Screen Sharing. Of course, installing last week's security update is also a must. Sharing is not caring.


    Read more of this story at Slashdot.


  • Astronomers Discover a New Kind of Cosmic Object: a Black Hole 'Star'
    Astronomers using the James Webb Space Telescope say they may have found a new class of object: a "black hole star," in which a black hole is wrapped in dense gas and radiates in ways that resemble an enormous star. The Guardian reports: The international team made the breakthrough after focusing their attention on a mysterious red spot in images of the early universe captured by Nasa's James Webb space telescope. The object was lurking in the constellation of Cetus, the Whale, billions of light years from Earth. It is thought to have formed 660m years after the big bang, astronomers' leading theory as to how the universe began. Measurements of the exotic body found that while it resembles an immense star, it releases 100bn times more energy than any known star can produce. The energy output is far closer to that observed from black holes than stars. The findings have been published in the journal Nature.


    Read more of this story at Slashdot.


  • Meta Patents AI Glasses to Use Facial Recognition to Identify People, Make Highlight Reels of Your Dinner Party
    Meta has patented a smart-glasses system that could use facial recognition to identify people and automatically create personalized highlight reels of events such as dinner parties. The patent doesn't guarantee the feature will ship, but it offers a detailed look at how Meta is exploring facial recognition and AI-powered memory capture for its wearable devices. 404 Media reports: "I've generated some highlights of tonight's dinner party. Would you like to see them?" a prompt from the system says, alongside various thumbnails of what look like people laughing, according to one illustration in the patent. One section says the system may personalize highlight files using "user relationship data." The illustrations clearly show a person wearing a pair of glasses, looking at a group of people, then the glasses focusing on one or more people in particular. Patentlyze, an organization that tracks patents, first alerted 404 Media to the patent on Friday. The patent is dense with how such a system would work, but in sum, the system with one or more cameras receives an input from the user, then uses machine-learning and "sensory data" to figure out points of interest in the camera's field of view. That can include detecting people in the shot "based on one or more facial recognition algorithms," identifying those specific people, detecting their facial expressions, using "eye gaze data of the user captured by the client system," and figuring out other points of interest "based on scene and semantic understanding." Although the patent is for "particular camera-based tasks by particular systems in a particular manner" -- in this case, the company's smart glasses -- Meta writes it "contemplates assisting users in any suitable camera-based task by any suitable system in any suitable manner." Meaning that although this technology is focused on the glasses, maybe the company will use it for other purposes in the future.


    Read more of this story at Slashdot.


  • Robots That Walk and Talk Are Coming To Car Factories
    An anonymous reader quotes a report from The New York Times: At a BMW factory in South Carolina, a human-shaped robot with a screen for a face recently stepped from a charging station toward a stack of green plastic boxes. It grasped an auto part from one of the boxes, pivoted, placed the part in a trolley, then pulled the trolley across the floor. The robot's slow, stiff movements suggested a worker with a bad hangover rather than a technological revolution. "They're still slower than humans," Ulrich Wieland, a BMW vice president in charge of logistics at the factory, in Spartanburg, told reporters invited to see the robot in June. But, he added, "they're advancing fast." Automakers have used robots for decades, but they are usually powerful, one-armed machines that are fixed in place and perform repetitive tasks like welding body frames or applying adhesives to door panels. Now, most major automakers are betting that robots designed to resemble human beings, known as humanoids, will usher in a new wave of automation and efficiency. Equipped with artificial intelligence, they are expected to move around and do tasks now done by humans without any modifications to factories or heavy equipment. Unlike most of the robots now in use, humanoids would respond to voice commands and theoretically solve problems and react to unforeseen events. They would never take a lunch break, join a union or require health insurance. To optimists, robots could rescue U.S. manufacturing by increasing productivity, solving shortages of skilled workers and giving Western carmakers a fighting chance at competing with Chinese rivals that enjoy lower costs. Boring but important jobs like sorting parts would be done by robots, freeing humans for more interesting and specialized work.


    Read more of this story at Slashdot.


  • Ex-Cambridge Professor At Center of Plagiarism Row Found Dead
    Former Cambridge professor Jason Arday, who resigned last week amid allegations of plagiarism and questions about his academic record, has been found dead at age 41 in London. The BBC reports: Jason Arday was found "unresponsive" at an address in Battersea, south London, on Friday afternoon, emergency services said. Metropolitan Police officers were called by the London Ambulance Service. A 41-year-old man was pronounced dead at the scene and his next of kin have been informed, the force said.Arday resigned as a Cambridge professor of sociology of education last week after allegations of plagiarism and questions about some of his achievements. He had denied the claims. In a statement, the Met Police said: "At this time his death is being treated as unexpected, but is not believed to be suspicious." The 41-year-old academic had denied any plagiarism - but admitted errors in his work - and last week said the recent furore had led to "an unrelenting level of public scrutiny and personal attack." The row first erupted after another academic -- self-defined "race realist" Nathan Cofnas, who was sacked from his Cambridge role in 2024 -- said he found numerous instances of plagiarism in Prof Arday's work and questioned some of his stated achievements. [...] Announcing his resignation last week, Arday said the "personal cost" of the scrutiny had become "too great." He said: "While criticism is an inevitable part of academic life, what I have experienced has gone far beyond scholarly disagreement. "The relentless accusations, speculation and public commentary have taken a profound toll on me and on those I love." He stressed that his resignation should not "be mistaken for an acceptance of the narratives that have surrounded me."


    Read more of this story at Slashdot.


  • Flock Announces Changes Amid Backlash Over Its License Plate Reader Network
    Flock Safety is tightening controls on its nationwide license plate reader network after mounting backlash over privacy and documented police misuse. By January 1, law enforcement customers will be required to use automated auditing, tie searches to specific case numbers, and accept a shorter seven-day default retention period. Critics, including the ACLU, argue the changes still leave too much surveillance power in police hands. The Associated Press reports: In an interview, Flock CEO Garrett Langley said many of the product changes will make what were once optional guardrails mandatory for its users to implement by Jan. 1. Among them: All law enforcement customers will have to implement an audit tool that's intended to flag abnormal search behavior. When the system detects abnormal behavior, the user would be locked out pending an internal review, the company said in a description of the changes provided ahead of Thursday's announcement. Flock, which says its customers own the data that the cameras record, is also shortening the standard data retention window from 30 days to seven. It said it will allow data to be preserved for longer when it is evidence tied to a case number. Law enforcement users will now also be required to enter a code from their records management system tying each search to a specific case before it is run, something Langley said civil liberties advocates have long been calling for. Overrides for emergencies would be automatically flagged for review, the company said. Customers will also be allowed to decide which offense types -- such as homicide or arson -- outside agencies can search their data for, which would allow a customer to block outside searches related to immigration enforcement, the company said. Langley said that change will give individual cities and departments control to use the system in a manner "consistent with community values." Critics say Flock's changes don't address the core problem: police can still decide for themselves when and whom to search without judicial oversight. The ACLU called the shorter data-retention period "a step in the right direction," but dismissed the other safeguards as "retreads" of inadequate protections, while Institute for Justice attorney Robert Frommer called the reforms "window dressing" from a company in "panic mode." He argued that searches should instead be approved "by judges with real warrants."


    Read more of this story at Slashdot.


  • France's Top Court Blocks Social Media Ban For Under-15s
    France's Constitutional Council has struck down a law that would have banned children under 15 from social media, ruling that it disproportionately restricted freedom of expression and lacked adequate privacy safeguards around age verification. President Emmanuel Macron has asked the government to rewrite the measure, with the goal of putting a revised version in place before spring 2027. Reuters reports: "The Council holds that the contested provisions, on the one hand, disproportionately infringe upon the freedom of expression and communication and, on the other, fail to provide the legal safeguards necessary to ensure the right to respect for private life," it said. French lawmakers had approved the bill in July, becoming the first in Europe to follow Australia, whose world-first ban barred access to platforms including Facebook, Snapchat, TikTok and YouTube for under-16s in December. Lawmakers there are considering stricter penalties after data showed mixed success. Countries around the globe, including China, the United Arab Emirates and Turkey, have either instituted measures intended to curtail or bar access to social media for young people, or have said they were planning them. The European Union has said it was planning to seek stronger protections for children from harmful social media features.


    Read more of this story at Slashdot.


  • PBS Station Fears Losing 50TB of Data After Being Ghosted By Cloud Provider
    An anonymous reader quotes a report from Ars Technica: After its cloud storage provider went defunct, a PBS affiliate decided to sue a data center provider to regain access to 50TB of TV shows, videos, and other data dating back 70 years. As reported this week by Current, a trade newspaper covering public broadcasting, St. Louis affiliate Nine PBS filed a lawsuit against Iron Mountain Data Centers on July 28, seeking access to the data. In the litigation filed in Denver District Court, Nine PBS says that its cloud storage provider, Open Source Storage (OSS), used one of Iron Mountain's Denver data centers to store the channel's data. However, OSS is being unresponsive, and Nine PBS says Iron Mountain has refused to release its data. The data in question includes the station's coverage of the COVID-19 pandemic, East St. Louis' history, The Great Flood of 1993, and over 11,000 files, The Denver Post reported in July. The lawsuit claims that "most" of the data is "unique and irreplaceable," according to the Post. Last month, a judge blocked Iron Mountain from deleting or modifying the data. In a hearing on Wednesday, a judge ruled that Iron Mountain must hand over any physical devices holding the data, Current reported today. The judge also said that Nine PBS must find a third party, such as a former OSS worker, who can help retrieve the data within 30 days and without sharing or corrupting data belonging to other OSS clients. Nine PBS is already communicating with a former OSS employee "who is willing to help," the report said. If complications arise, such as from the data being encrypted, another hearing will be scheduled. Nine PBS and Iron Mountain must provide updates by September 14. Iron Mountain's spokesperson said the company only provides physical infrastructure, such as the building, network connectivity, power, and environmental controls. "Our customers rent space for their servers and other hardware. These are the client's assets. We don't have access to the data on the hardware/servers because they belong to our customers," the company said. If it granted "unauthorized access to third-party hardware without a court order," Iron Mountain said the company would violate basic data privacy protocols, breach its contract with OSS, and "potentially [expose] confidential data belonging to other clients of OSS."


    Read more of this story at Slashdot.


  • Ukraine Finds Nvidia AI Chip In New Russian Missile
    Longtime Slashdot reader AmiMoJo shares a report from Kyiv Post: Ukraine's military intelligence (HUR) has identified an Nvidia Jetson Orin computer module inside Russia's new S-71 Monochrome air-launched cruise missile, potentially indicating the use of artificial intelligence technology in the weapon, the agency said Wednesday, Aug. 12. The finding was published in the 'Components in Weapons' section of the HUR's War&Sanctions portal, which documents foreign electronic components found in Russian weapons used against Ukraine. The latest research identified 35 electronic components in Russian weapons, according to the HUR. HUR specialists identified the Nvidia Jetson Orin module in the S-71 Monochrome, a new Russian air-launched cruise missile. The agency said the use of the computer module may indicate the integration of artificial intelligence technologies into the missile. The HUR did not provide further details on the specific functions performed by the Nvidia module in the weapon.


    Read more of this story at Slashdot.


  • Judge Orders Google To Make Rival App Store Installs Easier
    A federal judge has ordered Google to remove what he called "anticompetitive friction" that makes rival Android app stores harder to find and install. The order is part of the remedies stemming from Epic's antitrust victory, which already requires Google to carry competing app stores inside Google Play and give them access to its app catalog. The Verge reports: It's been nearly three years since a jury unanimously decided that Google had an illegal monopoly over Android apps, and almost two years since Judge James Donato decided the best way of undoing that monopoly would be to crack open Android app distribution. Donato ordered Google to carry rival Android app stores inside its own Google Play Store, and to provide rivals with complete access to Google's full catalog of apps, for several years. But Epic argued that Google is still making it too difficult to install rival app stores, showing the entire courtroom a live demo of how many steps it currently takes -- and Judge Donato agreed that some of those steps were unnecessary "anticompetitive friction" and ordered Google to remove them. [...] The judge wants these changes fast. "Have it done by a week from today," he told Google. "If there's some problem with that, let me know."


    Read more of this story at Slashdot.


  • Trump Slaps a 100% Tariff On Heavy and 'Sensitive' Drones
    President Trump has imposed tariffs of up to 100% on heavier and "sensitive" drones, including models over 55 pounds or equipped with docking stations or thermal imaging. "Those include commercial models from DJI and others used for operations like power line inspection, crop spraying and search and rescue, along with any parts used in their manufacturing," reports Engadget. Meanwhile, smaller drones face a 25% tariff "that will apply to new and existing drones by DJI and other already approved by the FCC." The White House says the measures are meant to strengthen national security and encourage U.S. drone manufacturing.


    Read more of this story at Slashdot.


  • Apple Wants to Charge Developers Up to 15 Percent for Linking Outside the App Store
    Apple is proposing to charge U.S. developers up to 15% when users leave an app through an external purchase link, with lower rates of 10% or 5% for certain programs and smaller developers. The proposal follows years of litigation with Epic Games and a contempt ruling that temporarily barred Apple from collecting any link-out fees. A federal judge will now decide what commission, if any, is reasonable. MacRumors reports: These proposed fees are what developers would pay when someone uses their app, taps a link in the app, and then makes a purchase on the website in the link. So if someone using the Spotify app clicked a link in the app to go to the Spotify website and then purchased a subscription, Spotify would owe Apple a 15 percent fee. Apple says the fees were calculated based on expert analysis, and they are lower than the link-out rates Google is charging in the Epic v. Google case. Apple submitted the proposal to the U.S. District Court for the Northern District of California, where Judge Yvonne Gonzalez Rogers has been tasked with determining a reasonable fee for Apple to charge for its intellectual property. The appeals court suggested the commission could be limited to the direct costs of facilitating link-outs, and under that approach, the fee would be zero. Apple says a zero commission would not reflect the value that it provides developers, and its suggested commission gives it fair compensation for the App Store platform.


    Read more of this story at Slashdot.


www.theregister.com - Articles



















































Polish Linux

  • Security: Why Linux Is Better Than Windows Or Mac OS
    Linux is a free and open source operating system that was released in 1991 developed and released by Linus Torvalds. Since its release it has reached a user base that is greatly widespread worldwide. Linux users swear by the reliability and freedom that this operating system offers, especially when compared to its counterparts, windows and [0]


  • Essential Software That Are Not Available On Linux OS
    An operating system is essentially the most important component in a computer. It manages the different hardware and software components of a computer in the most effective way. There are different types of operating system and everything comes with their own set of programs and software. You cannot expect a Linux program to have all [0]


  • Things You Never Knew About Your Operating System
    The advent of computers has brought about a revolution in our daily life. From computers that were so huge to fit in a room, we have come a very long way to desktops and even palmtops. These machines have become our virtual lockers, and a life without these network machines have become unimaginable. Sending mails, [0]


  • How To Fully Optimize Your Operating System
    Computers and systems are tricky and complicated. If you lack a thorough knowledge or even basic knowledge of computers, you will often find yourself in a bind. You must understand that something as complicated as a computer requires constant care and constant cleaning up of junk files. Unless you put in the time to configure [0]


  • The Top Problems With Major Operating Systems
    There is no such system which does not give you any problems. Even if the system and the operating system of your system is easy to understand, there will be some times when certain problems will arise. Most of these problems are easy to handle and easy to get rid of. But you must be [0]


  • 8 Benefits Of Linux OS
    Linux is a small and a fast-growing operating system. However, we can’t term it as software yet. As discussed in the article about what can a Linux OS do Linux is a kernel. Now, kernels are used for software and programs. These kernels are used by the computer and can be used with various third-party software [0]


  • Things Linux OS Can Do That Other OS Cant
    What Is Linux OS?  Linux, similar to U-bix is an operating system which can be used for various computers, hand held devices, embedded devices, etc. The reason why Linux operated system is preferred by many, is because it is easy to use and re-use. Linux based operating system is technically not an Operating System. Operating [0]


  • Packagekit Interview
    Packagekit aims to make the management of applications in the Linux and GNU systems. The main objective to remove the pains it takes to create a system. Along with this in an interview, Richard Hughes, the developer of Packagekit said that he aims to make the Linux systems just as powerful as the Windows or [0]


  • What’s New in Ubuntu?
    What Is Ubuntu? Ubuntu is open source software. It is useful for Linux based computers. The software is marketed by the Canonical Ltd., Ubuntu community. Ubuntu was first released in late October in 2004. The Ubuntu program uses Java, Python, C, C++ and C# programming languages. What Is New? The version 17.04 is now available here [0]


  • Ext3 Reiserfs Xfs In Windows With Regards To Colinux
    The problem with Windows is that there are various limitations to the computer and there is only so much you can do with it. You can access the Ext3 Reiserfs Xfs by using the coLinux tool. Download the tool from the  official site or from the  sourceforge site. Edit the connection to “TAP Win32 Adapter [0]


OSnews

  • The worst PDA of all time
    Today, you can get low-quality knockoffs of just about any popular smartphone on sites like AliExpress or Temu, whether they be iPhones, Galaxy phones, or whatever else. They have terrible build quality, bottom-of-the-barrel components and specifications, and all run outdated versions of Android  badly. At the same time, various consumer electronics brands, once popular in a bygone era, sell the rights to their brand name to unknown companies, who then put these brands on generic hardware to give their products a sheen of legitimacy. Thats why today, you can still buy Nokia smartphones, Polaroid cameras, and low-effort Hi-Fi equipment from various once-respected brands. None of this is new, however. In the late 90s and early 2000s, companies were already doing the same thing. In fact, theres one device from this era which combines both business practices  its both a cheap knockoff of a wildly successful device, and it carries a once-revered brand name. Also, just to add some juice, this story involves stolen source code. Lets take a look at the worst PDA of all time, the Olivetti daVinci. In 1997, Palm launched the Palm Pilot, and it and its successors proved to be a massive hit. Where countless before it had failed, Palm found the magic formula to make pocket computing work. I wrote an in-depth article about Palm over 13 years ago which goes into much (much) more detail, but the reason the Palm Pilot succeeded where things like the Newton, PenPoint OS, and Windows for Pen Computing failed, is that Palms founder, Jeff Hawkins, realised that they were competing with paper, not with desktop computers. Instead of trying to shove the capabilities of a full personal computer into a (barely) pockatable device, a pocket computer had to be as fast and convenient as paper, and therefore extremely strict about which features to add, and which to omit. To this day, the entirety of smartphone computing stands on the shoulders of Palm. Palms ideas, implementations, approaches, paradigms, and even people were absorbed by Apple and Google, where they shaped both iOS and Android. The phone youre looking at right now has a ton of Palm DNA in it, still. After all, youre still using the homescreen-with-apps paradigm Palm already perfected in the late 90s and early 2000s. The success of the Palm Pilot and its successors did not go unnoticed. Microsoft, most prominently, felt incredibly threatened by Palms success: The success of Palm’s products got the attention of Microsoft, and the company pretty much announced it was going to crush Palm. According to Hawkins, Microsoft had a sales conference, where, at some point, a big target appeared on the projector screen, with the Palm logo dead in the centre of it: “we are going to crush and kill these guys”, was the central message. Hawkins recalls that he got condolence letters after that, stating things like “Sorry Jeff. Too bad.” ↫ Thom Holwerda While Microsoft proved to be unable to kill and crush! Palm, it did manage to build a relatively successful business selling PDAs running various incarnations of Windows CE. Together, Palm and Microsoft dominated the PDA market pretty much throughout its entire existence, and while the market was a mere fraction of the smartphone market of today, other companies still wanted a piece of this pie too. One of these companies was Olivetti, a storied Italian company with a long history making typewriters, computers, and other electronics. Im not going into detail about Olivettis history, but the company was renowned for its attention to design, creating iconic products like the Lexikon 80, Lettera 22, Elea 9003, Programma 101, and so, so many more. Olivetti also entered the personal computer market, first with a variety of custom machines featuring Z80 and later Motorola 68000 processors running a variety of custom operating systems developed by Olivetti (including its own UNIX variant, X/OS). After a few machines using MIPS and Alpha processors in the early 90s, the company would eventually focus entirely on Intel-based PCs (including this amazing failure) running Windows. Like so many other computer makers from that era, Olivetti eventually left the PC business by selling it off in 1997. To this day, Olivetti PCs tend to cost more on the used market than those from other brands, despite no technical merits dictating so. At around this time, our current story begins. Seeing the success of the Palm Pilot and the emergence of copycat devices running Microsofts Windows CE, Olivetti wanted in on the action. And so, in the late 90s, the company introduced the Olivetti daVinci, a line of PDAs whose software looked suspiciously like Palm OS. Theres not a ton of information out there about the development history, but it seems that while Olivetti designed the hardware, it contracted the development of the operating system out to a company from Hong Kong, Echolink Design. And this is where things went horribly wrong for Olivetti. The software Echolink Design developed for the daVinci didnt just look like Palm OS, it was Palm OS  at least, according to Palm. After being on the market for about a year, the Palm Pilot maker, then a subsidiary of 3Com, filed for an injunction, alleging that the daVinci operating system designed by Echolink Design contained actual Palm OS source code. In addition, Palm also filed suit against CompanionLink Software, the company that developed the Outlook synchronisation software for the daVinci. Palm won handily, and within a day of the filing, temporary restraining orders were put in place on both Olivetti and CompanionLink, stopping sales of the daVinci and its software dead in its tracks. It seemed to have been a pretty clear-cut case. From The Wall Street Journal at the time: U.S. District Judge James Ware ruled Olivettis Royal daVinci organizer contains software that appears to have been copied from the operating system for 3Coms Palm organizers. Judge Ware said a review by a software expert found the daVinci software contains private Palm code and even grammatical


  • Making a game on a custom bytecode VM in 7 days and 3kB
    In the last few days, I built a shoot ’em up game by embedding a tiny custom bytecode VM and rendering the graphics using a fullscreen pixel shader. The result is a 3kB Windows executable. This was done for Langjam Gamejam, a 7-day challenge where you create a programming language and then use it to build a game. The project combines several interests of mine: language tooling, game development, procedural graphics, and demoscene-style size constraints. The game jam format forced me to keep the scope small and explore new ideas. Also, it was fun! ↫ Laurent Le Brun In seven days, Le Brun created a brand new programming language, compiler, bytecode interpreter, a game written in the new language, and rendered it, ending up with a 3kB self-contained executable. Its amazing what humans can do.


  • Why tiny JPEGs look different in Chrome
    A while back, when chatting with a colleague over their computer, I noticed that a logo did not look exactly the same as it did on mine. It looked thinner on theirs and more faithful to the original image. It was rendered at 15px; here is an upscaled version. If you squint, or take a step back, the one from Chrome looks thicker. A bit weird, but swapping the image for an SVG fixed it. Still, I was curious: why was it rendering like this in the first place? I did some digging and found a nifty optimization that Chrome uses when rendering JPEGs at small scales. ↫ Guillaume Técher I love it when people detail their discoveries like this.


  • Redox gets installer improvements, merges new CPU scheduler
    Another month started almost two weeks ago, so weve got a new monthly report from Redox, the general purpose operating system written in Rust. The month of July  it seems the report was published with a bit of a delay, regardless of what the date on their site says  brought improvements to the installer, with new options commonly found in most installers, such as a choice of installation method, network-based installation, and more. The Google Summer of Code work on the new CPU scheduler has also been merged, including a number of related performance enhancements. Theres improvements to the ARM port, Amlogic Meson UART ARM64 support, and uutils grep and sed have been successfully built on Redox, replacing their their GNU counterparts in the os-test test suite. In addition, a whole slew of demos were ported as well, from Ratatui demos to various Iced demos covering things like reading QR codes and processing Markdown. Of course, this is all topped off with the usual long list of lower-level, smaller changes and improvements to the kernel, drivers, Relibc, and more.


  • The OSNews Fundraiser continues: you made me use Windows, now make me use macOS
    The OSNews Fundraiser, to celebrate the fact I posted 20000 stories in 21 years, is still underway. The first major incentive was reached, and I, a long-time Linux user, published my experiences using Windows 11 for a month. It wasnt a success. Keep donating if you want to find out what a Linux user thinks of the current state of macOS! Why support OSNews? I want to make sure I can run OSNews for another two decades and another 20000 posts, and I need your help to do so. Since my wife, who has a tough, underpaid job in elderly care, is largely unable to work due to health reasons caused by that very same job, my income has become a lot more crucial for our kids, my wife, and myself. With OSNews readers being more skeptical of subscription-like things like our Patreon than most people, it’s exactly these one-time donations that make up the bulk of your support. Thank you.


  • The little-known winstart.bat batch file
    Raymond Chen explains what, exactly, the file winstart.bat in Windows 95 is used for. In Windows 95, you could create a winstart.bat file in your Windows directory. During startup, the virtual machine manager initializes and creates the so-called “System virtual machine” (the “System VM”), which is the virtual machine that all Windows programs run in. But before running the user-mode kernel in that virtual machine, the virtual machine manager runs the winstart.bat batch file if it exists. ↫ Raymond Chen Chen needs to use several diagrams to really explain what the batch file is used for, but as a very crude summary, it allows you to load TSRs that only apply to Windows programs, while not affecting any additional DOS command prompts you may load later after Windows is already running. While many think its a Windows 95 feature, it was already present in Windows 3.x. A unique feature that I doubt many people made active use of.


  • Delphi 13 Community Edition released
    Delphi is still very much a thing, and still very much in active development. The current stewards of Delphi, Embarcadero, released the Delphi 13 Community Edition today. Delphi Community Edition is a full-featured, free edition of Delphi for building native applications with the Delphi language. It includes a professional IDE, visual designers, integrated compilers and debuggers, the VCL framework for Windows development, and the FireMonkey framework for creating native applications from a shared codebase across Windows, macOS, iOS, and Android. It is designed for students, hobbyists, freelancers, and small teams that meet the Community Edition license requirements. ↫ Marco Cantu at the Embarcadero blog Delphi has been around since 1995, first released for Windows 3.1. Its both a programming language, a variant of Object Pascal, and the accompanying IDE and related tooling and frameworks, originally developed by legendary company Borland. This latest version of course adds a number of new features to the programming language, and further improves the IDE as well, this time with a brand new 64bit version. The two frameworks for visual application development, VCL and FireMonkey, have also been updated and improved. Sadly, its not open source, and the Community Edition is intended for mostly non-commercial, hobbyist use. If you want to actually earn any money using Delphi, youre going to have to step up to Delphi 13 Florence, which isnt free.


  • Google hammers another, extremely petty nail in the Android Open Source Projects coffin
    The slow but steady march to the grave for the Android Open Source Project continues. Every few months Google hammers another big nail in the coffin of Android as an open source effort, and Ive documented them all here on OSNews (nail, nail, nail, nail, nail), coming to the conclusion long ago that for all intents and purposes, Android is no longer an open source operating system. The latest move, however, is just petty. According to GrapheneOS on , Google has apparently replaced public, instant code downloads for Pixel phone drivers with a manual request form. Instead of publishing code directly to open developer platforms where anyone can grab it, Google now requires developers to fill out a Google Form and wait for someone to send them a Google Drive link. What used to take a couple of hours is now taking weeks. ↫ Hillary Keverenge at Android Authority Im perhaps misremembering, but I vaguely recall discussions decades ago about what, exactly, it meant to make source code available!, as open source licenses state in a variety of words. Would mailing a paper print-out by classic post satisfy such requirements? Could you write the source code on a brick and throw it through the users window? Could you hire a church choir to sing it? These are all silly examples, but before everyone had internet access, this was a relevant question. The widespread availability of the internet and software like git solved these issues, which makes it all the more petty that Google now requires an actual application process, waiting times, and Google Drive dumps just to get access to the source code for Pixel drivers. Google is clearly trying to kill whatevers left of the Android Open Source Projects rotting corpse, only barely technically complying with any license requirements only because theyre obligated to. The Android team at Google must be a hoot at parties.


  • GNOME showcases a number of possible GNOME Shell changes
    The GNOME Shell user interface has mostly seen minor refinements and quality of life updates in recent cycles, but on the design side we’ve explored a lot of longer-term things we’d like to do. Some of these we have relatively complete plans for, others are more vague ideas that need more research and prototyping. As always, getting things like these implemented depends on developer capacity and interest (and sometimes funding). While each of these ideas may require additional discussion, prototyping, and testing, we (the design team) have collected them all together here to share our longer-term vision and to give each idea more visibility. ↫ Tobias Bernard on the GNOME blog Theres quite a few good ideas in there, with most of them already being available in the form of various extensions. Im not entirely sure if Im a huge fan of copying Android and iOS by moving notifications into the quick settings dropdown thing, but its not like having them in the clock/calendar dropdown thing is any better. I only use notifications as they arrive and never look at the place where they end up  thats a mobile thing for me  so I dont think Ill really care either way. Things like editable quick settings, transparent top bar on certain backgrounds, the improved window drag and drop in the Exposé view, the alt+tab experiments, and some of the others do seem quite interesting though, and anything that reduces the number of GNOME extensions I need to install and keep updated gets a big thumbs up from me. If you wish to work on any of these suggestions, working on GNOME Shell has gotten a lot easier recently. In the past, GNOME Shell was significantly harder to contribute to and test than apps since you needed to use tools like jhbuild. This has changed in the past year: You can now easily build and test your branch in a nested session from Builder using Mutter Devkit. If you use GNOME OS, you can even build a sysext to install your branch on your host system. This allows daily driving experimental branches easily, which is super helpful for evaluating changes to everyday workflows. ↫ Tobias Bernard on the GNOME blog Thats quite neat.


  • Microsoft drastically increases costs of Windows licenses for OEMs
    This was bound to happen. According to a new report from Taiwanese publication United Daily News (UDC,) Microsoft is raising the cost of Windows license fees for hardware makers by a much higher amount than normal. According to the report, certain OEMs are seeing licensing price hikes of between 7% and 10%. ↫ Zac Bowden at Windows Central Like every other tech company diving head-first into AI!, Microsoft is losing money on its gamble head-over-fist, with no profitability in sight. Since admitting betting the company on AI! was a mistake is out of the question, Microsoft has to extract the money from somewhere else to make up for it. The cost of Windows licenses for OEMs is an obvious lever to pull, as OEMs really have nowhere else to turn to (yes, desktop Linux is making gains, but not in any meaningful numbers), so theyll take hit and pass the cost on to consumers. The end result will be that prices for laptops will increase even more than they already have thanks to the AI!-induced RAM and component crisis, creating a double-whammy of price increases caused by AI!, either directly or indirectly. Its just another category of products we can add to the cost of living crisis thats causing untold harm and damage to hardworking people all over the world. The price of incompetence is rarely paid for by the incompetent.


  • An ambiguity in c89 which will never be fixed
    I found some ambiguous wording in the c89(/c90) standard, where GCC and Clang disagree on the interpretation. It concerns the behavior of implicit function declarations, which were removed in c99, so this was never disambiguated. ↫ Sebastian at sebsite I am not going pretend to understand any of this.


  • NetBSD brings its Englightenment port up to snuff
    Enlightenment desktop is a low on resources desktop environment without sacrificing on visuals. NetBSD support for this BSD-licensed desktop has been left a few years behind. The aim of this project is to port the newest version of the desktop to pkgsrc and commit upstream portability fixes when necessary to ease future versions updates for NetBSD. ↫ Dimitris Gounaridis on the NetBSD blog Enlightenment seems like a natural fit for NetBSD, so Im glad they dedicated a GSoC project to getting the existing, outdated port up to snuff. The project is not complete as theres a few issues to work out before it can be packaged for easy installation, but this is great progress already.


  • Publishing schematics before “open source” was a word: 55 years of Akizuki Denshi, Japan’s legendary parts Store
    Akihabara, Tokyo’s famous “Electric Town,” is overflowing with foreign tourists these days, drawn by anime shops, maid cafes, and duty-free electronics megastores. But there is one storefront most of them walk past without a glance: Akizuki Denshi Tsusho. It may be one of those pockets of Japan that foreign visitors never see. Step inside and the narrow aisles are packed — not with tourists, but with Japanese customers hunting for electronic parts. It is a scene that has repeated itself here for more than 50 years. For readers outside Japan, imagine something between Adafruit, SparkFun, and a discount surplus warehouse. If you start tinkering with electronics in Japan, Akizuki’s website is the one you will open before any other. Generations of Japanese engineers, students, and hobbyists have treated it as the default source for parts, the way you might default to Digi-Key or Mouser. ↫ Gakuto Ochi and an uncredited translator Ive long been fascinated by places like Akizuki Denshi Tsusho and other places like it in South Korea and Chinas Shenzhen. An unending labyrinth of unimaginable amounts of technology stacked floor to ceiling. Whether they be like Akizuki, which focuses on the tiniest of electrical components, or more like the malls in Shenzhen, which seem to focus more on assembled parts, the idea of browsing through them in wonder draws me in like a moth to a flame. Im sad these places dont exist anymore (or in most cases, never did) closer to home, but perhaps someday Ill have enough time and funds to visit Tokyo or Shenzen and let myself be overwhelmed by things I dont understand, and people speaking languages entirely alien to me.


  • Cookies are not needed for fingerprinting and tracking
    Cookies are ancient technology, and in no way necessary of even particularly desirable to track you. Modern fingerprinting doesnt need them at all. A live demonstration of everything a website learns about you before you click anything with no cookies. It reads you during the connection and in the first two seconds of JavaScript, then narrates what it found back to you in plain English, as if a stranger were describing you out loud. The argument isnt look how creepy this site is.! Its: the site you visit after this one can do all of it too, and wont tell you. ↫ Kuber Mehta Also note, as the demonstration does, that if some of the things it determines about you are wrong, that doesnt really matter. In fact, it may actually make fingerprinting and tracking you easier; as long as fingerprinting consistently gets the same things wrong in the same way, it becomes a valuable part of the fingerprint, like a small scar obscuring part of your real thumbs fingerprint. Online tracking of people should be illegal.


  • First version of Word for Windows ported to modern 64bit Windows
    Back in 2014, Microsoft released the source code to the first Windows version of Word, version 1.1a. Now, Justin Marshall has ported this code to modern versions of Windows, so you can run it as if it were any other modern application. This project is a fully working native Windows x64 port of Microsoft Word for Windows 1.1a, whose historical codename was Opus. It builds the original Word source and resources together with modern replacements for the 16-bit assembly, segmented-memory, and Win16 platform boundaries. The result is the original Word application and user experience running as a 64-bit Windows executable. This is not an emulator or a reimplementation using a modern editor control. ↫ Justin Marshall Neat endeavour.


  • Idol Mahjong Final Romance: a slideshow disguised as a video game
    Top supplier of great articles Nicole Branagan is at it again. We’re back into the strip mahjong games today, here going back to 1991. Video System is a company that’s probably best known in retro-gaming circles for Aero Fighters/Sonic Wings, but mahjong games (usually branded Idol Mahjong) were one of their bigger moneymakers. And there’s something interesting going on here– Idol Mahjong Final Romance 2-R-4 Special re-releases the final three games in the series, which all also got contemporary console releases, but the first game in the series has never been seen outside of its original arcade launch. Why? ↫ Nicole Branagan Look, youre not going to get something like this from anyone else.


Linux Journal - The Original Magazine of the Linux Community

  • Intel’s Linux Vulkan Driver Adds AV1 Video Encoding for Arc Alchemist GPUs
    by George Whittaker
    Intel’s open-source Linux graphics stack has taken another step forward with hardware-accelerated AV1 encoding through Vulkan Video. New code merged for Mesa’s ANV Vulkan driver enables the VK_KHR_video_encode_av1 extension on Intel’s DG2/Alchemist graphics hardware, including Arc A-Series GPUs.

    The development expands Intel’s Vulkan Video capabilities on Linux and gives applications another standardized way to access the dedicated video encoding hardware found in modern Intel GPUs.
    AV1 Encoding Arrives in Intel ANV
    The key change is support for the Vulkan extension VK_KHR_video_encode_av1 in Mesa’s open-source Intel ANV driver.

    The extension was finalized by the Khronos Group in 2024 and provides a standardized Vulkan interface for hardware-accelerated AV1 encoding. It complements Vulkan Video’s existing AV1 decoding support and means Vulkan can provide both encoding and decoding interfaces for AV1, H.264, and H.265.

    Intel had previously stated that its Arc graphics products would support Vulkan Video AV1 encoding through a future software update.
    Initially Targeting Intel Arc Alchemist
    The newly enabled Linux support specifically targets DG2, better known commercially as Intel’s Arc Alchemist GPU generation.

    These GPUs already contain dedicated hardware capable of AV1 encoding, so the Mesa update does not add AV1 capability through software. Instead, it provides Vulkan applications with another way to access the GPU’s existing hardware video engine.

    That distinction is important because hardware encoding can deliver much better performance and efficiency than encoding AV1 entirely on the CPU.
    Why AV1 Matters
    AV1 has become increasingly important for streaming, screen recording, video conferencing, and online video distribution.

    The codec can provide high image quality at relatively low bitrates, making it attractive for applications where bandwidth and storage efficiency matter. It is also royalty-free, which has helped encourage adoption throughout the open-source ecosystem.

    Hardware AV1 encoding can be particularly useful for:

    Game streaming

    Desktop recording

    Live broadcasting

    Video conferencing

    Video transcoding

    Content creation

    For Linux users with supported Intel Arc hardware, Vulkan Video now has the potential to provide a common API for these workloads.
    Building on H.264 and H.265 Support
    The AV1 work follows recent improvements to Intel’s Vulkan Video encoding support for other codecs.
    Go to Full Article


  • New AMD P-State Patch Delivers Major Linux Gaming Performance Boost
    by George Whittaker
    A newly proposed patch for the Linux kernel's AMD P-State CPU frequency scaling driver is showing impressive gaming performance improvements, potentially delivering a noticeable boost for Ryzen users without requiring new hardware. Early benchmarks indicate that the optimization can significantly improve frame rates in CPU-bound games by allowing processors to respond more quickly to changing workloads. (phoronix.com)

    Although the patch has not yet been merged into the mainline Linux kernel, the initial results have generated considerable excitement among Linux gamers and kernel developers alike.
    What Is AMD P-State?
    AMD P-State is the modern CPU frequency scaling driver for AMD Ryzen processors on Linux. Rather than relying on the older ACPI CPUFreq driver, AMD P-State communicates directly with the processor to adjust clock speeds based on workload demands.

    Its goals include:
    Faster frequency scaling Improved power efficiency Better responsiveness Higher performance during demanding workloads Lower power consumption when the system is idle
    Most modern Linux distributions already support AMD P-State on compatible Ryzen processors. (kernel.org)
    A Focus on Gaming Performance
    The new patch specifically targets how quickly AMD P-State responds when a game suddenly demands additional CPU performance.

    Many games rapidly alternate between light and heavy CPU workloads. If the processor takes too long to increase its clock speed, short performance dips can occur.

    The proposed optimization reduces that delay, allowing the CPU to boost more aggressively when needed and helping maintain smoother gameplay. (phoronix.com)
    Promising Benchmark Results
    According to early testing, the patch delivers meaningful improvements across several Linux gaming workloads.

    Reported benefits include:
    Higher average frame rates Better 1% low FPS performance Faster CPU frequency response Improved responsiveness during gameplay More consistent frame delivery
    The biggest gains appear in CPU-limited games where processor performance has a greater impact than GPU performance. Systems that are already GPU-bound may see smaller improvements. (phoronix.com)
    Designed for Modern Ryzen CPUs
    The patch targets systems using the AMD P-State driver, which supports many recent Ryzen processors.

    Compatible platforms generally include:
    Go to Full Article


  • Linux Kernel Begins Phasing Out the crypto_rng Layer to Simplify Random Number Generation
    by George Whittaker
    Linux kernel developers are moving forward with plans to remove the crypto_rng API layer, a long-standing component of the kernel's cryptographic subsystem. The proposed change is part of a broader effort to simplify the kernel's internal architecture by eliminating redundant code paths and encouraging developers to rely on the kernel's modern random number generation interfaces instead. (phoronix.com)

    Although the change happens entirely behind the scenes, it reflects the Linux kernel community's ongoing commitment to reducing technical debt, improving maintainability, and modernizing core infrastructure.
    What Is the crypto_rng Layer?
    The crypto_rng framework is an API within the Linux kernel's Crypto API that provides random number generation services for kernel components.

    Historically, it allowed different kernel subsystems and drivers to request random data through a generic cryptographic interface. Over time, however, the kernel's dedicated random number generator has matured considerably, making much of the crypto_rng abstraction unnecessary. (kernel.org)

    Today, developers generally recommend using the kernel's built-in random number generation functions directly instead of routing requests through the older crypto layer.
    Why Developers Want to Remove It
    According to discussions on the Linux kernel mailing list, the crypto_rng layer has become largely redundant.

    Modern kernel code already relies on well-established interfaces such as:
    get_random_bytes() get_random_u32() get_random_u64()
    These functions are maintained as part of the kernel's primary random number generation subsystem and are widely used throughout Linux. Maintaining an additional abstraction layer increases code complexity without providing significant practical benefits. (phoronix.com)

    Removing unnecessary infrastructure also makes the kernel easier to maintain and audit over the long term.
    Simplifying the Crypto API
    The Linux Crypto API has evolved significantly over the years as new algorithms, hardware accelerators, and security features have been introduced.

    Kernel maintainers have increasingly focused on:
    Go to Full Article


  • GNU Binutils 2.47 Released with New RISC-V Features, Linker Improvements, and Reproducible Builds
    by George Whittaker
    The GNU Project has officially released GNU Binutils 2.47, the latest version of its essential collection of binary development tools for Linux and other Unix-like systems. The release delivers numerous bug fixes alongside new assembler, linker, and disassembler capabilities, expanded RISC-V support, reproducible source archives, and continued modernization of the GNU toolchain.

    Used by developers worldwide, GNU Binutils forms a core part of the software development ecosystem, providing the low-level tools needed to assemble, link, inspect, and manipulate executable programs and object files.
    What Is GNU Binutils?
    GNU Binutils is a collection of command-line utilities that work closely with compilers such as GCC and Clang. While a compiler translates source code into object files, Binutils provides the tools needed to transform those object files into executable programs and libraries.

    The package includes well-known utilities such as:
    ld (GNU Linker) as (GNU Assembler) objdump objcopy readelf nm strip ar strings
    Together, these tools are used daily by Linux distributions, embedded developers, operating system projects, and software engineers building applications in C, C++, Rust, Go, and many other languages.
    Expanded Support for RISC-V
    One of the biggest improvements in Binutils 2.47 is expanded support for the rapidly growing RISC-V architecture.

    The release adds support for several additional standard RISC-V extensions, allowing developers targeting modern RISC-V processors to work with newer instruction sets and hardware capabilities. These additions continue the GNU toolchain's strong commitment to one of the fastest-growing open processor architectures.

    As more Linux distributions, development boards, and enterprise hardware adopt RISC-V, keeping development tools current is becoming increasingly important.
    New Assembler Options
    GNU Assembler (gas) gains several useful enhancements in version 2.47.

    Among the most notable is a new command-line option:
    --reloc-section-sym=[all|internal|none]
    This option gives developers finer control over how relocations referencing locally bound symbols are converted to section symbols, improving flexibility for certain assembly and linking workflows.

    The release also introduces numerous assembler improvements across multiple CPU architectures.
    Better Disassembly for AArch64
    Developers working with Arm-based systems also benefit from new functionality.
    Go to Full Article


  • GOG Officially Expands Linux Support with Native Galaxy Client in Development
    by George Whittaker
    After years of requests from the Linux gaming community, GOG has officially confirmed that it is developing native Linux support for the GOG Galaxy launcher. The announcement marks one of the biggest shifts in the company's history and signals a stronger commitment to Linux as a first-class gaming platform. While GOG has offered DRM-free Linux game downloads since 2014, its Galaxy launcher has remained exclusive to Windows and macOS—until now.

    Although the company has not announced a release date, GOG says Linux has become a major area of investment, with development already underway.
    A Long-Requested Feature Finally Becomes Reality
    Native GOG Galaxy support has consistently ranked among the most requested features from Linux users. Until now, players who wanted to use Galaxy's library management, cloud saves, achievements, and automatic updates had to rely on compatibility layers or community-developed launchers.

    In a statement to GamingOnLinux, GOG joint CEO Krzysztof Papliński said the company has hired a dedicated specialist and is actively exploring the best approach for bringing Galaxy to Linux. He described Linux as "one of the topics we hear the most about from our community," emphasizing that the project is now an active development priority.
    Why GOG Galaxy Matters
    Unlike the web-based game downloads that Linux users already have access to, GOG Galaxy serves as a full-featured game management application.

    The launcher currently offers features including:
    Automatic game installation and updates Cloud save synchronization Achievement tracking Playtime statistics Game library organization Integrated storefront browsing Friends lists and social features Cross-platform launcher integration
    Today, Linux users typically access these capabilities through community projects such as Heroic Games Launcher, Lutris, or Bottles. A native Galaxy client would provide an officially supported alternative with direct integration into GOG's ecosystem.
    Linux Is No Longer an Afterthought
    GOG's announcement reflects the growing importance of Linux gaming over the past several years.

    The rapid adoption of Valve's Steam Deck, continuous improvements to Proton, and increasing hardware compatibility have significantly expanded Linux's role in PC gaming. As Linux's share of Steam users has grown, more developers and publishers have begun treating the platform as a viable target rather than a niche operating system.

    For GOG, supporting Linux more fully aligns with its philosophy of giving users greater control over their purchased games.
    Go to Full Article


  • Linux Kernel 7.1.4 Released with Bug Fixes, Security Updates, and Hardware Improvements
    by George Whittaker
    Greg Kroah-Hartman has announced the release of Linux Kernel 7.1.4, the latest stable maintenance update for the Linux 7.1 series. As with other stable kernel releases, version 7.1.4 focuses on fixing bugs, improving hardware compatibility, and addressing security and reliability issues without introducing new features. The update became available on July 18, 2026, and users of the Linux 7.1 branch are encouraged to upgrade as soon as possible.

    Rather than changing the kernel's feature set, Linux 7.1.4 delivers dozens of targeted fixes collected from developers across multiple kernel subsystems, helping ensure a more stable experience for desktops, servers, embedded devices, and cloud deployments.
    Another Important Stable Maintenance Release
    The Linux stable branch exists to provide safe updates between major kernel versions. Every stable release undergoes review before being published and contains fixes that have already been tested in the mainline kernel.

    Linux 7.1.4 continues this process by incorporating patches that resolve regressions, improve system stability, and fix issues reported by users since the release of Linux 7.1.3.

    For most users, these maintenance updates are recommended because they improve reliability without altering existing functionality.
    Bug Fixes Across Multiple Kernel Subsystems
    Like previous stable releases, Linux 7.1.4 includes fixes spanning many areas of the kernel.

    The update addresses issues affecting:
    Memory management File systems Networking Device drivers Architecture-specific code Core kernel infrastructure USB and storage subsystems
    These targeted patches help eliminate crashes, improve compatibility with newer hardware, and resolve edge cases that may only appear under specific workloads.
    Improved Hardware Compatibility
    One of the ongoing goals of Linux stable releases is expanding support for existing and newly released hardware.

    Linux 7.1.4 includes updated drivers and compatibility fixes for various devices, helping improve support for:
    Graphics hardware Storage controllers Networking devices USB peripherals Laptop components ARM development boards
    Although no major driver additions are expected in a maintenance release, incremental improvements like these often resolve hardware-specific bugs reported by users after earlier releases.
    Security and Reliability Updates
    Stable kernel releases also include security-related fixes that have been accepted into the maintenance branch.
    Go to Full Article


  • Firefox 153 Released with HDR Video, Smarter PDF Tools, Better Privacy, and New Linux Improvements
    by George Whittaker
    Mozilla has officially released Firefox 153, bringing another round of improvements to its open-source web browser. The latest version introduces new multimedia capabilities, enhanced PDF editing tools, stronger privacy protections, better support for modern web technologies, and several features aimed at improving the browsing experience across Linux, Windows, and macOS. Firefox 153 became available on the stable release channel on July 21, 2026.

    While this isn't a major redesign, Firefox 153 delivers a collection of practical updates that benefit both everyday users and web developers.
    HDR Video Playback Comes to Windows
    One of the headline features in Firefox 153 is support for High Dynamic Range (HDR) video playback on compatible Windows systems.

    Users with HDR-capable displays and Windows HDR enabled can now enjoy richer colors, improved contrast, and brighter highlights when watching supported online video content. Mozilla notes that certain laptop displays offering only "HDR video streaming" are not currently supported, and some HDR videos recorded on mobile phones may still have limitations.

    Although this feature is Windows-specific, it represents another step toward bringing Firefox in line with modern multimedia standards.
    PDF Editing Becomes Even More Powerful
    Mozilla continues expanding Firefox's built-in PDF editor, eliminating the need for third-party applications in many situations.

    Firefox 153 introduces the ability to:
    Merge multiple PDF documents Insert images as new PDF pages Continue using existing editing tools such as annotations, page organization, and text editing
    These additions make Firefox an even more capable document viewer and editor, especially for users who frequently work with PDF files.
    Stronger Privacy and Permission Controls
    Privacy remains one of Firefox's biggest selling points, and version 153 introduces several enhancements designed to give users more visibility and control over website permissions.

    New improvements include:
    A visual indicator when a website is actively accessing your location More restrictive default permissions for browser extensions accessing local files Local Area Network (LAN) restrictions enabled by default for all users
    These changes reduce unnecessary exposure of local resources while making it easier to understand what websites and extensions can access.
    Experimental JPEG XL Support
    Firefox 153 also adds experimental support for the JPEG XL image format, which many developers consider a promising successor to older image standards.

    JPEG XL offers several advantages, including:
    Go to Full Article


  • NanoKVM-Go Brings AI-Powered Hardware Control to Linux with a Compact USB-C KVM
    by George Whittaker
    Sipeed has introduced NanoKVM-Go, a compact USB-C KVM-over-IP device that combines remote hardware management with AI integration. Designed for Linux, Windows, macOS, and other USB-C devices, NanoKVM-Go allows users to remotely view and control a system through a web browser while exposing its keyboard, mouse, and display functions to AI agents via the Model Context Protocol (MCP).

    Unlike traditional KVM-over-IP solutions that require multiple cables and dedicated networking hardware, NanoKVM-Go simplifies the setup into a single USB-C connection, making remote administration and AI-assisted automation more accessible for developers, system administrators, and homelab enthusiasts.
    A Portable USB-C KVM
    NanoKVM-Go is roughly the size of a smartwatch, measuring about 45 × 40 × 15 mm, yet it combines several functions into a single device.

    Key hardware features include:
    USB-C connection for video, audio, keyboard, mouse, and power Wi-Fi 6 connectivity Browser-based remote management Support for virtual USB storage Built-in Tailscale integration for secure remote access Fanless aluminum enclosure with low power consumption
    Because it connects over USB-C using DisplayPort Alt Mode, the device can manage a wide variety of hardware without requiring software installation on the target system.
    Designed for Linux and Beyond
    NanoKVM-Go supports numerous USB-C devices, including:
    Linux desktops and laptops Windows PCs macOS systems Mini PCs Steam Deck Android devices with DisplayPort Alt Mode iPhone 15 and newer models Tablets supporting USB-C video output
    For Linux users, this provides an easy way to perform BIOS configuration, operating system installation, kernel debugging, or remote troubleshooting—even when the operating system is unavailable.
    AI Integration Through MCP
    One of NanoKVM-Go's defining features is its AI-native design.

    Rather than simply streaming a desktop remotely, the device exposes its KVM functions as an MCP (Model Context Protocol) server, allowing compatible AI agents to interact with the connected computer using hardware-level keyboard and mouse input.

    This enables AI systems to:
    View the screen Move the mouse Type on the keyboard Launch applications Navigate user interfaces Complete repetitive desktop workflows
    Because control happens at the hardware level, AI agents can interact with systems regardless of the operating system installed.
    Go to Full Article


  • AI Uncovers a 15-Year-Old Linux Kernel Root Vulnerability Hidden Since 2011
    by George Whittaker
    Artificial intelligence has helped uncover one of the most significant Linux kernel security flaws in recent years. Security researchers at Nebula Security announced the discovery of GhostLock (CVE-2026-43499), a critical local privilege escalation vulnerability that remained hidden in the Linux kernel for approximately 15 years before being identified by the company's AI-powered vulnerability research platform, VEGA.

    The vulnerability affects Linux kernels dating back to version 2.6.39 (2011) and allows an unprivileged local user to obtain full root privileges on vulnerable systems. Its discovery not only highlights the importance of timely kernel updates but also demonstrates how AI is beginning to transform vulnerability research.
    What Is GhostLock?
    GhostLock is a use-after-free (UAF) vulnerability located in the Linux kernel's futex (fast userspace mutex) implementation.

    Futexes are synchronization primitives that allow user-space applications to efficiently coordinate access to shared resources while minimizing expensive kernel interactions. Because they are widely used throughout Linux, any flaw within this subsystem can have broad security implications.

    According to Nebula Security, incorrect handling of the remove_waiter() function can leave behind a dangling kernel pointer that an attacker can manipulate to execute arbitrary code with kernel privileges.
    A Reliable Path to Root Access
    One of the reasons GhostLock has attracted so much attention is the reported reliability of the exploit.

    Researchers demonstrated that an attacker with nothing more than a standard local user account can escalate privileges to root in roughly five seconds, with a reported success rate of 97% on vulnerable systems.

    Unlike many kernel exploits that are unstable or require highly specific system configurations, GhostLock appears to be both practical and repeatable, making it particularly concerning for administrators.
    Container Escapes Are Also Possible
    The implications extend beyond traditional Linux desktops and servers.

    Researchers report that GhostLock can also be used to escape containers and compromise the underlying host operating system. Because containers share the host kernel, a successful privilege escalation inside a container can potentially grant root access to the host itself.

    This makes the vulnerability especially important for environments running:
    Go to Full Article


  • Azure Linux 4.0 Released: Microsoft Expands Its Enterprise Linux Platform Beyond the Cloud
    by George Whittaker
    Microsoft has officially unveiled Azure Linux 4.0, the latest version of its open-source Linux distribution designed for cloud infrastructure, enterprise workloads, and modern data centers. Formerly known as CBL-Mariner, Azure Linux has powered Microsoft's internal cloud services for years, but version 4.0 marks its biggest evolution yet by becoming a general-purpose server operating system that organizations can deploy both inside and outside Azure.

    The release introduces updated core components, expanded hardware support, a predictable long-term lifecycle, and improved compatibility for enterprise environments, reinforcing Microsoft's growing investment in the Linux ecosystem.
    A New Chapter for Azure Linux
    Azure Linux began as Microsoft's internal operating system for Azure services, containers, and cloud infrastructure. Over time, it evolved into the foundation for many Azure-hosted workloads.

    With Azure Linux 4.0, Microsoft is positioning the distribution as a broader enterprise Linux platform rather than one limited to Azure infrastructure. The operating system is now available through Azure virtual machine images, container images, and downloadable ISO files for testing and deployment in a wider range of environments.
    Built for Enterprise and Cloud Workloads
    Unlike desktop-focused Linux distributions, Azure Linux is optimized for infrastructure, virtualization, containers, and cloud-native applications.

    Typical deployment scenarios include:
    Cloud virtual machines Kubernetes clusters Container hosts AI infrastructure Edge computing Enterprise servers
    Microsoft has designed the distribution to provide a consistent operating system foundation across Azure services while remaining suitable for on-premises deployments.
    Updated Core Components
    Azure Linux 4.0 modernizes much of the operating system's software stack.

    Highlights include:
    Linux Kernel 7.0 glibc 2.42 OpenSSL 3.5 Python 3.13 OpenSSH 10 dnf5 as the default package manager
    These updates improve hardware compatibility, application support, security, and overall system performance while providing developers with a more current software platform.
    Security Remains a Primary Focus
    Security continues to be one of Azure Linux's defining characteristics.

    Version 4.0 includes:
    Go to Full Article


Page last modified on November 02, 2011, at 10:01 PM