All the News that Matters

• [$] User namespaces + file capabilities = trouble
  User namespaces are a key part of thekernel's toolkit for assembling containers; processes within a usernamespace can appear to have full root access to the system while gainingno extra privileges in the wider system. At least, that is the intent. Inpractice, keeping privilege contained within a user namespace has oftenturned out to be difficult. As an example, consider thissmall patch series from Josef Bacik, which is intended to address somesituations where a process within a user namespace can elevate theprivileges of processes outside of it.

• Security updates for Thursday
  Security updates have been issued by AlmaLinux (dpdk, httpd:2.4, kernel, kernel-rt, mysql:8.0, php:7.4, php:8.0, qt5, ruby:2.7, ruby:3.0, tesseract, webkit2gtk3, and xorg-x11-server-Xwayland), Debian (imagemagick, puppet-agent, symfony, trapperkeeper-authorization-clojure, and xen), Fedora (3proxy, bind, bind-dyndb-ldap, curl, dhcpcd, erlang-jose, forgejo, freetype, laszip, libical, libmongocrypt, markdownlint-cli2, mongo-c-driver, openbao, pipx, python-boto3, python-botocore, python-crate-ingredients, python-lxml-html-clean, python3.11, python3.13, python3.14, python3.15, roundcubemail, rply, ruby-build, rust-app-store-connect, rust-qemu-rdp, rust-redlib, scribus, and valkey), Mageia (minetest, python-pypdf, stunnel, znc, and zvbi), Oracle (.NET 10.0, bind, brotli, cockpit, dpdk, fence-agents, freerdp, gimp, glibc, grafana, gvfs, host-metering, kernel, python-dns, qemu-kvm, raptor2, tesseract, webkit2gtk3, and xorg-x11-server-Xwayland), Red Hat (grafana and pcs), Slackware (rsync), SUSE (amazon-cloudwatch-agent, apache2, aws-efs-utils, brotli, cephfs, coredns, cramfs-tools, firefox-esr, fuse-overlayfs, ghostscript, GraphicsMagick, libpolkit-agent-1-0-128, libsoup, nvidia-open-driver-G07-signed, perl-Dancer2, python-PyJWT, python313-joserfc, rsyslog, switcheroo, trivy, valkey, vexctl, and xdg-desktop-portal), and Ubuntu (apt, libphp-adodb, net-snmp, pillow, squid, and twisted).

• Critical security vulnerability affects OpenSSH on Alpine Linux systems
  Version 10.6p2 ofOpenSSH has been released with a workaround for a critical vulnerability thataffects Linux systems that use musl libcwith PAM disabled, such as AlpineLinux. OpenSSH developer Damien Miller said:
  
  If you operate a Linux system that uses musl libc without PAM (Alpine Linuxis one example) then stop reading and set PasswordAuthentication=no or disableSSH for these systems IMMEDIATELY.
  
  This vulnerability does not exist on non-Linux systems, Linux/glibc systemsand Linux systems that use PAM for password authentication.
  
  We consider the root cause of this bug to be outside OpenSSH itself, butwe're in a good position to deliver a mitigation quickly.
  
  The Alpine Linux project has announced thatit will be backporting the OpenSSH fix "all the way back to Alpine 3.16",which was released in May2022.
  

• [$] LWN.net Weekly Edition for November 5, 2026
  Inside this week's LWN.net Weekly Edition:
  Front: Kernel cells; Debian LLM reviews; glibc system-call wrappers; Binder in Rust; Kernel CVE flood; Fedora KDE and X11 removal; 7.4 merge window part two; Portable Python. Briefs: MTCP RCE; Bash security; XCPE botnet; Bazzite 45; Fedora 45; openSUSE Leap 16.1; Tor Browser 16.0; Quotes; ... Announcements: Newsletters, conferences, security updates, patches, and more.

• [$] Plasma X11 session removal surprises some Fedora users
  The KDE Project announced, in 2025, that Plasma 6.7 wouldbe the last version of the desktop environment that would support X11sessions. Those who keep up with KDE's announcements no doubt expected it whenPlasma 6.8dropped X11 support as promised. What seems to have come as a surprise, atleast to a number of Fedora KDE PlasmaDesktop users, is that the Fedora 44 release—which shipped inApril with Plasma 6.6—receivedan update to Plasma 6.8 that swept away the X11 session without much warning.Despite the surprise, it is gone for good: the Fedora Engineering SteeringCommittee (FESCo) has votedagainst a request to revert the update for Fedora 44 and the just-releasedFedora 45.
  

• Bazzite 45 released
  Version45 of Bazzite, the image-based gaming distribution based onFedora Linux, has been released. Notable changes in this release include arebase to Fedora 45, updated Open Gaming Collective (OGC)kernels, support for Logitech TrueWheel devices, and more.
  
  LWN covered Bazzite inDecember 2025.
  

• [$] Portable Python scripts with dependencies
  A basic Python script is portable: it can be copied between machines with little concern about compatibility.A script that depends on third-party packages requires quite a bit morecare and consideration, however.In 2023, PEP723 ("Inline script metadata") introduced a standard for declaring a Python script'sdependencies inside the script itself.Several third-party tools can now automatically install and manage those dependencies, but there is still little official support for this standard within Python itself.

• Security updates for Wednesday
  Security updates have been issued by AlmaLinux (cockpit, dpdk, fence-agents, firefox, freerdp, gimp, opentelemetry-collector, python-dns, qemu-kvm, and raptor2), Debian (apt and squid), Fedora (ags, apptainer, chromium, fractal, mingw-harfbuzz, mingw-qt5-qtwebkit, mingw-qt6-qt5compat, python-mistune, python3-docs, python3.14, python3.9, rubygem-gist, rust-app-store-connect, rust-qemu-rdp, rust-redlib, and selenium-manager), Mageia (java-latest-openjdk, java-17-openjdk, java-21-openjdk, timezone), Oracle (.NET 10.0, .NET 8.0, .NET 9.0, bind, bind9.16, cockpit, firefox, freerdp, gcc, ghostscript, glibc, grafana, java-17-openjdk, java-21-openjdk, kernel, kernel-uek, libXi, pipewire, pki-deps:10.6, podman, python-jwt, python-pillow, python-pyasn1, qt5-qtbase, thunderbird, tomcat, util-linux, and wireshark), Red Hat (dnsmasq, fence-agents, freerdp, pki-core:10.6, and thunderbird), SUSE (amazon-ssm-agent, aom-tools, apache2, brotli, cadvisor, chromium, cups, curl, distribution-registry, eog, gh, go-containerregistry, google-guest-agent, gvfs, haproxy, hauler, helm3, kernel, libBasicUsageEnvironment2, libcdio, libinstpatch-1_0-2, libosmocore, libreoffice, libX11, nodejs22, nvidia-open-driver-G06-signed, openssh, parted, perl-DBI, perl-mime-tools, python-pypdf, rootlesskit, rqlite, rsyslog, sssd, tomcat10, warewulf4, and xen), and Ubuntu (apt-cacher, bind9, bitlbee, cakephp, deluge, dmitry, e17, feh, gnome-shell, golang-github-gin-contrib-cors, gvfs, haproxy, jabberd2, libmspack, libnet-easytcp-perl, libphp-swiftmailer, libsoup2.4, libsoup3, libuser, pcre2, rear, ruby-rack, ruby-sprockets, rxvt-unicode, shapelib, sogo, vips, and yaws).

• OpenSUSE Leap 16.1
  The openSUSE project has announced the release of openSUSE Leap 16.1. The release is notable for allowing both traditional installations and immutable images with transactional updates. While immutable images had previously been available for Leap Micro, they are now available across all platforms that Leap supports, including servers, desktops, and virtual machines.
  "Leap's image gives the best of both for traditional and immutable users, and we expect that Tumbleweed will follow when Agama becomes the default installer for Tumbleweed as well." said Leap release manager Lubos Kocman. "The Leap Micro experience people relied on is still here, but now it shares the same release, the same life cycle and the same maintenance updates as the rest of Leap, so users only have to pick the mode that fits their workload."

• [$] LLM reviews for Debian's new queue spark debate
  The Debian project has wrestled with the topic of LLM usage for years, whichculminated in a general-resolutionvote this August. The project voted in favor of the fifth, out ofeight, option: "Responsible Use ofGenerative AI". With the door open to LLM use, the DFSG, Licensing & New PackagesTeam (usually shortened to "DFSG team"), which is relatively new, has started to employ LLMs insending out reviews of packages entering Debian's new queue. The practice hasraised a number of objections and questions about where lines should be drawn inthe use of LLM-generated output.
  

• Fedora Linux 45 released
  Fedora Linux45 has been released. This includes all editions: Fedora Workstation, Fedora KDE Plasma Desktop, Fedora Server, Fedora Cloud, Fedora CoreOS, and Fedora IoT, as well as the Atomic Desktops and Spins.
  
  This release adds support for installationon Stratis storage using Anaconda or Kickstart installs, retiresunmaintained VPN plugins for NetworkManager, and updates Fedora's desktopenvironments, developer toolchains, and system packages. See the Fedora wikiChangeSet page for a list of major changes.
  
  
  

• Security updates for Tuesday
  Security updates have been issued by AlmaLinux (bind, bind9.16, firefox, freerdp, ghostscript, kernel, kernel-rt, libXi, perl-YAML:1.24, perl:5.32, pipewire, qt5-qtbase, redis:6, tomcat, and wireshark), Debian (chromium, git-annex, incus, kernel, and strongswan), Fedora (barman, erlang-hex_core, glib-networking, kernel, knot, liblerc, libsoup3, mingw-cfitsio, openjpeg, perl-libnet, pipx, python-pillow, python-uv-build, radicale, ruff, rust-archive-trait, rust-astral-ini, rust-astral-mail-headers, rust-astral-pubgrub, rust-astral-version-ranges, rust-astral_async_zip, rust-quick-junit, rust-tar-codec, rust-tar-framing, tpm2-tss, ty, uv, and zvbi), Mageia (unbound), Red Hat (buildah, compat-openssl10, compat-openssl11, container-tools:rhel8, delve, golang-github-openprinting-ipp-usb, grafana, grafana-pcp, kernel, oci-seccomp-bpf-hook, openssl, opentelemetry-collector, osbuild-composer, podman, rhc, and skopeo), Slackware (expat), SUSE (ansible-core, apache-arrow, apache-commons-codec, apache-commons-io, apache-commons- logging, avalon-framework, avalon-logkit, glassfish-jsp, jsch, maven-file- management, opentest4j, aws-nitro-enclaves-cli, bouncycastle, chromedriver, chromium, cifs-utils, expat, firefox, gcc48, ghostscript, GraphicsMagick, guava, j2objc-annotations, gvfs, ImageMagick, in-toto, libsoup, nodejs22, nodejs24, praat, python-Pillow, python-PyJWT, python-soupsieve, python-sqlparse, python313-OpenEXR, python313-vllm, rootlesskit, and rqlite), and Ubuntu (kernel, linux, linux-aws, linux-aws-5.15, linux-aws-fips, linux-azure, linux-azure-5.15, linux-azure-fde-5.15, linux-azure-fips, linux-fips, linux-gcp, linux-gcp-5.15, linux-gcp-fips, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iot-realtime, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-oracle, linux-oracle-5.15, linux-realtime, linux, linux-aws, linux-aws-fips, linux-azure, linux-azure-5.4, linux-azure-fips, linux-fips, linux-gcp, linux-gcp-5.4, linux-gcp-fips, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-iot, linux-kvm, linux-oracle, linux-oracle-5.4, linux-xilinx-zynqmp, linux, linux-aws, linux-fips, linux-kvm, linux-lts-xenial, linux, linux-aws, linux-gcp, linux-hwe-7.0, linux-ibm, linux-oracle, linux-aws, linux-azure-fde, linux-bluefield, linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-nvidia-tegra-igx, and linux-oem-7.0).

• [$] The second part of the 7.4 merge window
  The 7.4 merge window, whichclosed on November 1,included a record-breaking 18,591 non-merge changesets.That is almost as many as the entire 7.3 development cycle, which had 18,765, itself a record breaker. Ofthose, 11,838 landed after the article covering thefirst part of the merge window. Most of those were bug fixes ofvarious forms; it seems as though bug fixes may be crowding out featureadditions across the open-source ecosystem tosome extent. Still, a good number of new features were included, and a handfulremoved, in the tail end of the merge window.
  

• Shutting the Door on the XCPE Botnet (Threat Intelligence)
  The Google Threat Intelligence blog describes,in great detail, the XCPE botnet, which has just been taken down.
  Last week, Google and industry partners dismantled the XCPE backdoor which enrolled more than 1.3 million set-top boxes into a botnet. We assess with high confidence that the backdoor and botnet were intentionally developed, deployed, and operated for financial gain by Videostrong Technology Co., an Android Original Equipment Manufacturer (OEM) and Original Device Manufacturer (ODM).
  Videostrong monetized the backdoor by selling access to criminal affiliates and loading those affiliates' malware modules onto infected devices. These secondary modules were conducting ad-fraud; silently enrolling infected devices into residential proxy networks; and loading additional malware onto XCPE-compromised devices.

• [$] Managing the kernel CVE flood
  We recently looked at how thekernel community is dealing with the firehose of vulnerability reports, butsaid little about how users of the kernel are responding. At the 2026 Linux Plumbers Conference, Amazon employeesDylan Johnson and Justinien Bouron discussed the problem from the point ofview of engineers trying to keep AWS running and secure in the face of astorm of CVE disclosures. The kernel community's longstanding advice is torun current kernels, and that turns out to work — sort of.

• OpenAI Finds 948 Local Privilege Escalation Bugs In The Linux Kernel
  OpenAI published a blog post outlining their work on autonomous vulnerability discovery. To showcase their AI potential, they found 948 valid local privilege escalation vulnerabilities within the Linux kernel0

• Install Docker and Docker Compose in Linux (Ultimate Guide)
  In this article, you will learn what Docker and Docker Compose are, their usage and drawbacks, and how to install them in major Linux distributions.

• Systemd-Free Artix Linux 2026.11 Is Out with Wayland-Only KDE Plasma Desktop
  The Artix Linux development team released Artix Linux 2026.11 today as the official ISO refresh for this Arch Linux-based, systemd-free distribution, which features multiple editions and init systems.

• Critical security vulnerability affects OpenSSH on Alpine Linux systems
  Version 10.6p2 of OpenSSH has been released with a workaround for a critical vulnerability that affects Linux systems that use musl libc with PAM disabled, such as Alpine Linux. OpenSSH developer Damien Miller said: If you operate a Linux system that uses musl libc without PAM (Alpine Linux is one example) then stop reading and set PasswordAuthentication=no or disable SSH for these systems0

• MPV 0.42 Media Player Brings Wayland Improvements, Improved HDR
  MPV as the open-source, cross-platform media player originally based on MPlayer/mplayer2 is finally out with a new release0

• Linux 7.3 Will More Than Likely Be This Year's LTS Kernel
  While the Linux 7.4 kernel will be released in the 2026 calendar year in the last week or two of December if the schedule holds, it turns out Linux 7.3 is likely to be this year's Long Term Support kernel version0

• Ubuntu users say Canonical asleep at the wheel! over critical Linux kernel bug
  Canonical is fixing a critical Linux kernel flaw in Ubuntu, weeks after Debian and other distros did  and users arent happy about the wait. As of 3 November, patched kernels for CVE-2026-98432 are in testing for Ubuntu 22.04, 24.04 and 26.04 LTS, but are yet to hit the stable updates pocket. Canonical hasnt given a date for when it expects them to. 9.8 CVE on Linux servers since 2016 The CVE0

• Best System Monitors for Linux in 2026: What to Use and Why
  top, htop, btop, Glances, Netdata. Which Linux system monitor is worth installing? We compare features, resource use, and the best use case for each.

• Two weeks on: what happened to October's critical vulnerabilities
  Which of PHP2Shell, Node2Shell, Plex2Shell, the CVSS 10 GitLab bug and eMudhras CA keys are exploited in the wild, whats fixed, and whats still open.

• Debian's APT Affected By Man-In-The-Middle Attack For Arbitrary Code Execution As Root
  A new vulnerability was disclosed today affecting Debian's APT package manager where a man-in-the-middle attacker could carry out arbitrary code execution as root0

• Schools That Say No to Googles AI Will Be Saying Goodbye to its Search Too
  Meanwhile, schools in six German states can choose an open source cloud solution.

• openSUSE Leap 16.1 Unifies Traditional and Immutable Linux With Transactional Updates
  The openSUSE Project has officially released openSUSE Leap 16.1, introducing a major change to how the distribution can be installed, maintained, and deployed. Released on November 3, 2026, the update brings an integrated Immutable Mode that allows users to install a transactionally updated operating system with a read-only root filesystem, while continuing to offer the traditional Linux0

• Pocket-sized Linux AI box runs on 256-TOPS Axera chip
  Sipeed has recently shared additional details about the MaixStation, a Linux AI workstation powered by Axeras AX8860P processor, which combines a 16-core Arm CPU with an NPU rated at 256 TOPS FP4. The system supports up to 128GB of LPDDR5X memory, 273GB/s memory bandwidth, 10G SFP+ networking, and PCIe 5.0 expansion for local AI inference0

• Rocky Linux Unveils Testrarc for Transparent Release Testing
  Rocky Linux unveils Testrarc, a new open-source platform for tracking release testing, validation results, and community contributions.

• NVIDIA 620 Linux Graphics Driver Released with Wayland Improvements
  NVIDIA released the NVIDIA 620 series of graphics drivers for Linux, FreeBSD, and Solaris systems, with new features, improvements, and the usual bug fixes.

• Linux 7.4 Showing Few Performance Gains With Initial Benchmarks On AMD Ryzen Threadripper
  In the first round of benchmarking the in-development Linux 7.4 kernel there are some performance improvements -- and some small regressions -- worth noting over the current Linux 7.3 stable kernel. This first round of Linux 7.4 kernel benchmarking was on a System76 Thelio Major workstation with AMD Ryzen Threadripper 9980X.

• CVE-2026-109518 APT vulnerability fixes available
  Fixes are available in Ubuntu for the CVE-2026-109518 vulnerability affecting APT.

• Simulation Agama Web UI in Virtual environment as KVM Guest
  Simulating the Agama Web UI in a virtualized environment as a KVM guest provides a sandboxed, easily reproducible, and risk-free environment to test next-generation installer workflows, remote deployment configurations, and automated storage provisioning without modifying bare-metal hardware. Web UI Native Testing: Agama is designed with a decoupled architecture where the installer engine runs as a service and exposes a Web UI. A KVM guest allows you to easily simulate a true headless server deployment, letting you test connecting to the installer's port from a host web browser.

• Rsync 3.5.2 Fixes Security Vulnerability, Improves Interrupted Transfers
  Rsync 3.5.2 addresses CVE-2026-119741, fixes interrupted file transfers, and introduces new options for process priorities and symlink handling.

• LibreOffice project and community recap: October 2026
  Heres our summary of updates, events and activities in the LibreOffice project in October  click the links to learn more0 We announced LibreOffice 26.8.1, with around 40 bug fixes focused on compatibility with Microsoft Office files, along with more reliable text and CSV import across a range of character

Error: It's not possible to reach RSS file http://services.digg.com/2.0/story.getTopNews?type=rss&topic=technology ...

• Motorola's Ultra Premium Smartphone Is Its First With GrapheneOS Support
  Motorola's $1,600 Signature 27 will become the company's first smartphone to support the security- and privacy-focused GrapheneOS that completely strips out native Google services and telemetry at the OS level. To help justify the price, Motorola equipped the Signature 27 with top-of-the-line specs, including a tandem OLED display, Qualcomm's Snapdragon 8 Elite Extreme Gen 6, up to 16GB of LPDDR5X RAM and 512GB of UFS 4.1 storage (up from a base configuration of 12GB and 256GB), and a 200-megapixel periscope telephoto camera. According to Motorola, the EVS action sensor (telephoto camera) is the first in a smartphone, offering "new possibilities for photographing moving subjects and captures even fast movement with impressive clarity and precision." It'll be available in markets worldwide in the coming months.
  
  
  Read more of this story at Slashdot.
  

• Major Digital Bank In Paraguay Collapses With Half of Population's Savings
  Paraguayan President Santiago Pena resigned Thursday amid mass protests and impeachment threats following the collapse of Ueno Bank, a major digital lender with close ties to his administration and more than 60% of the country's adults as customers. Regulators seized the bank after uncovering risky insider lending and accounting irregularities that left its capital below legal requirements, locking millions of customers out of their savings. The Associated Press reports: Soon after winning its banking license in 2023, Ueno seemed to be everywhere in Paraguay. The digital lender, a rebranded version of a decades-old finance company, lured customers with generous cash-back offers on groceries, grew to more than 70 locations, sponsored Paraguay's national soccer team and plastered its name on the country's main stadium. Government money poured into Ueno's coffers under Pena. He also appointed Carlos Carvallo, president of Financiera Ueno, the predecessor to Ueno Bank, to run the central bank, the agency charged with supervising the digital lender. As of last month, Ueno reported holding roughly $800 million in public deposits, about a quarter of its total, including money from the state pension and health fund and the operators of Paraguay's giant hydroelectric dams. Even as retirees' savings and other public money piled up at Ueno, worries were escalating inside the central bank. In June, its inspectors found a pattern of risky lending to insiders, reported ABC Color, a leading Paraguayan newspaper. Ueno had extended large sums to companies tied to its owners, beyond what the law allows and without enough collateral to cover the debts if they went bad. On a single day in September 2025, nearly $39 million had gone to three such companies. Pena repeatedly brushed off the warnings. As recently as last month, he defended Ueno and the central bank's oversight, dismissing the concerns as a smear campaign that was spooking the public. But on Monday, it all came crashing down. Regulators investigating Ueno's loans to companies linked to its owners found poorly documented lending, the central bank said, as well as expenses the bank had wrongly counted as assets. Once the books were corrected, Ueno's capital, the cushion banks must keep to absorb losses, fell to less than half the legal minimum. The central bank seized the lender Tuesday and announced plans to move customers' accounts, along with whatever assets still hold value, to other banks before liquidating what's left. Ueno's app, cards and transfers went dark and its branches locked their doors, leaving desperate depositors lined up outside with no way to cash out their savings. On Wednesday, a rush to open new accounts elsewhere crashed other banks' mobile apps, fueling public panic. Officials say they had begun repaying depositors and opening accounts at other banks for the roughly 280,000 customers who had banked exclusively with Ueno. "The banking system is sound," insisted Pedro Acosta Bernal, appointed interim central bank president Wednesday after Carvallo resigned at Pena's request. Meanwhile, eight senior Ueno executives have been detained, including founder Miguel Vazquez and bank President Juan Manuel Gustale. "Prosecutors also charged 27 bank officials and business associates with offenses including breach of trust and attempted fraud," reports the AP.
  
  
  Read more of this story at Slashdot.
  

• Microsoft's Imagine Cup 'Evolves' From Student Competition To AI Startup Contest
  theodp writes: That Was Then: The Imagine Cup competition, Microsoft explained in a 2003 press release, "seeks to provide students [aged 16-and-up] around the world with resources to use technology and Web services to solve everyday problems [...] Imagine Cup is about empowering students to apply their creativity and knowledge toward making the world a more-connected place." This Is Now: "Building is Hard. Selling is Harder." begins the "Why Imagine Cup?" promo video for the 2027 Imagine Cup competition, which is pivoting to an AI startup-first focus in recognition that "A new era for founders is here." "Since 2003, Imagine Cup has empowered emerging innovators to turn ambitious ideas into real-world solutions with Microsoft technology," Microsoft writes of the Imagine Cup Evolution. "Now part of Microsoft for Startups, Imagine Cup enters its next chapter in 2027, opening the competition to eligible early-stage startups and founders everywhere." An Eligibility FAQ drives home the point that Imagine Cup is no longer a student-only competition: "Imagine Cup 2027 welcomes eligible early-stage startups across seven categories; founders do not need to be students." And if you think making high school students compete against seasoned full-time employees of startup companies seems a tad unfair, Microsoft advises: "Eligible student-led startups are encouraged to enter the Student Startup category but may choose an industry category instead." The #1 overall startup will win a $250,000 cash award and $1,000,000 in startup credits. However, Student Startup category entrants are ineligible for the open category prizes (where the 2nd-place winner gets $50,000 cash and $350,000 in credits, while 3rd place is good for $25,000 and $350,000 in credits); they will instead compete for a single prize of $25,000 cash and $250,000 in credits. The Official Rules (PDF) note that all startups must have a valid Azure Subscription ID and a Microsoft for Startups account.
  
  
  Read more of this story at Slashdot.
  

• NASA Announces X-70 Experimental Aircraft to Advance Flight Research
  NASA has unveiled the X-70 Fractal, a new crewed experimental aircraft "designed to accelerate the development and testing of advanced aviation technologies." From a press release: The crewed X-70 features advanced, rapidly reconfigurable flight-control technology that will allow NASA to explore aircraft maneuverability in ways never before demonstrated in crewed flight. The aircraft can also accommodate up to 2,000 pounds of experimental payloads in internal and external locations, enabling a wide range of research and flight-testing opportunities. The X-70 Fractal has a takeoff weight of 10,000 pounds and is designed to cruise at Mach .75, reach altitudes of up to 45,000 feet, and provide an operational range exceeding about 1,726 miles (1,500 nautical miles). These capabilities will enable NASA to conduct demanding flight research across a broad range of operating conditions. The X-70 joins a storied legacy of experimental aircraft that have helped establish America's leadership in aviation. From the Bell X-1, which first broke the sound barrier in 1947, to the X-15 hypersonic research aircraft and today's X-59 quiet supersonic demonstrator, NASA has spent decades pushing the boundaries of flight. With the X-70, NASA will expand its capacity to conduct experimental flight research, accelerate the testing of emerging technologies, and advance the next generation of American aviation.
  
  
  Read more of this story at Slashdot.
  

• 3M To Pay Over $7 Billion To Settle 'Forever Chemical' Groundwater Claims
  3M has agreed to pay up to $7.35 billion over nine years to settle claims from as many as 120,000 people who say they were sickened by PFAS-contaminated groundwater near military bases, airports and other locations where firefighting foam was used. The Associated Press reports that 3M "did not admit liability," noting that the settlement comes on top of the more than $10 billion the company previously agreed to pay U.S. public drinking water systems over PFAS contamination. From the report: 3M chairman William Brown called the settlement a "significant milestone" that substantially reduces uncertainty from the litigation. [...] Fred Thompson, an attorney with the Motley Rice law firm that helped negotiate the 3M settlement for the plaintiffs, called it welcome news for "the thousands of victims who have sought answers and accountability for nearly a decade." He said in a news release that the plaintiffs urgently need help covering mounting medical bills and other costs. Under the terms of the settlement, the payouts will begin with $50 million this year, followed by yearly payments of more than $1 billion each year from 2028 to 2033. 3M could make additional payments if enough plaintiffs participate. If too few sign on, 3M has the option to cancel the settlement and continue fighting the lawsuit.
  
  
  Read more of this story at Slashdot.
  

• Vietnam Jails Pirate Football Streamers For Up To a Year
  An anonymous reader quotes a report from TorrentFreak: A Vietnamese court has sentenced 14 people who worked on the pirate football streaming site Bun Cha TV, handing out the first prison terms we've seen since the country's piracy crackdown began earlier this year. [...] Four defendants, including the heads of the content, programming and operations teams, were sentenced to 12 months in prison. Five others received ten months, and two were sentenced to eight months. Notably, three of the site's commentators were not sent to prison. Their ten-month sentences were suspended. All 14 defendants reportedly admitted the charges and cooperated with the authorities. According to investigators, Bun Cha TV streamed more than 150,000 sports matches and it allegedly made more than 20 billion dong, roughly $760,000, in illegal profits from betting and gambling ads. The verdict reports don't mention a total. Instead, they list illegal gains per person or team. The leader of the content team allegedly gained more than 430 million dong, while commentators made from more than 31 million to more than 480 million dong each. The verdict was picked up by Rouse, the law firm that represents the Motion Picture Association in Vietnam. In an article headlined "Strong Vietnam criminal penalties," published on Lexology on November 3, the firm calls the ruling another victory for Vietnam's IP landscape. "The defendants were all sentenced to terms of 8-12 months in prison," Rouse writes. While Rouse is correct on the length of the terms, it doesn't mention that three of the sentences were suspended. Instead, Rouse stresses that the ruling is part of a tougher enforcement trend. "This ruling reflects a shift in enforcement strategy by Vietnamese authorities, who are increasingly moving past preliminary domain blocking to deliver criminal convictions against the operators of commercial-scale piracy rings," the firm notes. "This perhaps reflects the strength of the national crackdown following the USTR pressure in May," the firm adds. According to the indictment, Bui Ba Hien, who runs a company called S24, allegedly directed employees and collaborators to build and operate Bun Cha TV. However, Hien is not among the 14 defendants named in reports, which also do not identify the affected rightsholders. "Interestingly, in September, Bac Ninh police issued a wanted notice for a man of the same name, Bui Ba Hien, CEO of esports company Box Vietnam," reports TorrentFreak. "This person is also charged under the same copyright statute."
  
  
  Read more of this story at Slashdot.
  

• Axon Sued Over AI-Powered License Plate Reader Network
  Axon has been sued in a proposed class action accusing the Taser and police body-camera maker of illegally collecting and storing license plate data on millions of California drivers through its AI-powered surveillance network. Reuters reports the details: - The lawsuit (PDF), filed on Tuesday in federal court in San Francisco by law firms Hausfeld and Gibbs Mura, alleges Axon has failed to comply with a California privacy provision by not disclosing how it collects, uses and shares plate data gathered through its camera systems- "Axon has created a mass-surveillance infrastructure that is practically impossible to avoid," the lawsuit said- Scottsdale, Arizona-based Axon did not immediately respond to a request for comment. The lawsuit said the company has more than 1,000 cameras in California and alleges millions of drivers may have been affected- Some Axon cameras are installed in high-traffic areas and collect plate information as vehicles pass by. Other cameras are placed inside police vehicles, the lawsuit said- The proposed class covers drivers whose vehicle plate information was captured by an automated license plate reader in California and processed or stored by Axon's system since 2023- The lawsuit seeks more than $5 million in damages, in addition to a court order stopping Axon from its allegedly unlawful practices
  
  
  Read more of this story at Slashdot.
  

• OpenAI Says ChatGPT Is Catching Up to Google In Search
  Adam Fry, OpenAI's consumer product lead for ChatGPT, says the number of searches performed through ChatGPT has grown to roughly 20% of Google's search volume. The company defines a search as a ChatGPT query that triggers a web search, suggesting the chatbot is becoming an increasingly significant competitor to traditional search engines. The Verge reports: Having one-fifth as many searches as Google is still a long way from overtaking it, but for comparison, Microsoft CEO Satya Nadella said during Google's 2023 antitrust trial that Bing had about 3 percent of the search engine market share after trying for more than a decade. During the trial, Google described AI as a potential disruptor, arguing ChatGPT was poised to seriously compete with it -- now, OpenAI seems to agree. (OpenAI likely uses Microsoft Bing for a significant part of its searches, along with its in-house search index, although there is still some speculation that it routes some queries through Google.) As for ads, which OpenAI started testing earlier this year, Fry said they haven't produced a lasting backlash. "Ads have not negatively impacted the product or the usage of the product," he said, adding that "most people do not seem to mind ads in the product." Last month, OpenAI announced plans to introduce images of sponsored products and services in ChatGPT.
  
  
  Read more of this story at Slashdot.
  

• Netflix Launches First AI-Branded Content Recommendations Feature on TVs
  Netflix is testing its first consumer-facing feature explicitly branded as AI-powered. Called "AI Discover," the feature generates personalized TV and movie recommendations in real time based on viewing history, preferences, trending content and selectable themes like "Something Light" or "Quick Watches." Variety reports: The streamer will begin rolling out AI Discover in the U.S. to customers who use Netflix in English on supported smart TVs. If you have access to it, you will see a "Discover" tab with a red gem-shaped icon and a "New" label in the top navigation bar on your TV. The company plans to expand the feature to more regions and customers in the coming weeks. Netflix has long used machine-learning and AI technologies to personalize content recommendations, but AI Discover is the first user-facing application that the company is branding as powered by artificial intelligence. The hope is that the AI-recommended titles will be another tool to drive up Netflix's total watch time among viewers, especially in the U.S.
  
  
  Read more of this story at Slashdot.
  

• Waymo Cuts Ties With Uber, Will Serve Riders Directly
  Waymo plans to end its exclusive Uber robotaxi partnership in Austin and Atlanta in January 2028 and let customers hail its vehicles directly through the Waymo app. In an interview on The Circuit, Waymo co-CEO Tekedra Mawakana called the current Uber experience a "crapshoot" because riders aren't guaranteed a Waymo. Bloomberg reports: "In the early days, we would partner because we didn't have the scale, and in that partnering, it was a little bit of a crapshoot. Will I get a Waymo? Will I not get a Waymo?," Mawakana said in a wide-ranging interview on The Circuit with Emily Chang. She cited customers' growing demand for a consistent offering from a single app, especially from riders from San Francisco or other markets, where Waymo offers the self-driving service via its own consumer app that competes with Uber. "It's important for us to have that relationship with the rider. We've gotten that feedback from the riders in those markets," Mawakana said. "And at the same time, learning and partnering with Uber has been a really important part of our journey," she added. [...] The comments reflect Waymo's evolving relationship with the ride-hailing giant as the Alphabet unit trials different pathways to commercialize its capital-intensive autonomous technology. Waymo has leaned on partners like Uber and Lyft, as well as fleet management companies, to help operate its roughly 4,000 vehicles across the US. The company currently does more than 500,000 trips per week in 14 cities.
  
  
  Read more of this story at Slashdot.
  

• OpenAI Acquires Pierre Computer to Supercharge Codex
  OpenAI has acquired developer tools startup Pierre Computer Company to strengthen Codex. "The deal, announced today, signals OpenAI's aggressive push into the developer tools market as the AI arms race intensifies," reports The Tech Buzz. Financial terms weren't disclosed. From the report: Pierre Computer Company had been building specialized tools for code analysis and review, capabilities that complement Codex's existing strength in code generation. For developers, this could mean a more seamless experience -- using AI not just to write initial code snippets, but to understand legacy codebases, spot potential bugs, and conduct thorough reviews before deployment. That's a workflow improvement that enterprise engineering teams have been demanding. [...] For Pierre Computer Company, the acquisition likely provides the resources and distribution that startups in this space desperately need. Building AI developer tools requires massive compute infrastructure and access to cutting-edge models -- both of which OpenAI has in abundance. Pierre's team will now have access to OpenAI's latest models, including the technology behind ChatGPT and the recently announced Shepherd model for AI research validation. The integration timeline remains unclear, but developers using Codex should expect to see Pierre's capabilities rolling out in the coming months. OpenAI has been moving quickly to ship new features -- it just launched Dots, transforming its coding tools into an always-on AI assistant. Adding Pierre's code review and analysis features could make Codex a genuine end-to-end solution for software development teams.
  
  
  Read more of this story at Slashdot.
  

• French Blood Banks Hit Alongside Cyberattack On European Supermarkets
  An anonymous reader quotes a report from Reuters: The refrigerators at three regional blood banks in France were hit by a cyberattack overnight between Sunday and Monday, at the same time hackers struck supermarkets from Sweden to Belgium. "Several regional facilities of the French Blood Establishment (EFS) were affected by a cybersecurity incident that impacted certain cold storage room monitoring and control systems," the health ministry said in a statement. The incident had no impact on blood supplies, EFS spokesperson Charley Dubois said. "We have staff round the clock since blood can be needed at any time. They were warned about the problems by alerts and moved the blood to other refrigerators that were not connected," she said. [...] Investigations are under way into how the attack was carried out, what equipment may have been affected and when systems can safely return to service. The attack followed a similar incident in France last month when police said hackers seized control of cooling units at hundreds of supermarkets, causing fires and food losses.
  
  
  Read more of this story at Slashdot.
  

• AMD Expects To Outsell Intel For the First Time
  AMD expects its fourth-quarter revenue to reach roughly $17 billion, potentially surpassing Intel's projected $15 billion to $16 billion and putting AMD ahead of its longtime rival in quarterly sales for the first time. The milestone is being driven largely by booming demand for Epyc server processors and Instinct AI accelerators, with AMD's data center business already accounting for 64% of revenue and expected to exceed 80% in 2027. Tom's Hardware reports: For those of our readers who have been following the CPU market in general as well as AMD and Intel in particular for decades, arguably the most earth-shattering part of AMD's earnings report is its outlook for the fourth quarter. The company expects revenue of approximately $17 billion, plus or minus 3%, which implies a 66% year-over-year increase and 27% sequential growth at the midpoint. In contrast, Intel expects fourth-quarter revenue of $15 billion to $16 billion amid weakening PC demand and manufacturing capacity constraints. If AMD meets its guidance, its quarterly sales will surpass those of its considerably bigger rival Intel for the first time in history. In fact, AMD will not only leave Intel formally behind, but its projected advantage will be approximately $1.5 billion at the midpoint of both companies' forecasts, which is a tangible lead. The development reflects the companies' increasingly different positions on the market: AMD is rapidly expanding its data center CPU and AI accelerator businesses, while Intel continues to depend heavily on PC and enterprise server processors, which sales face headwinds due to high memory prices and components shortages.
  
  
  Read more of this story at Slashdot.
  

• Japanese Bank to Stop Allowing ATM Cards, PCs For Account Access
  Mitsubishi UFJ Financial Group plans to launch Emut Bank in early 2027 as the first digital bank affiliated with a major Japanese financial institution to eliminate ATM cards, "instead having customers confirm identities using the bank's smartphone app for additional security amid a rising tide of cyberattacks," reports Nikkei Asia Review. The smartphone app will also be the only way to manage deposits, with no PC-based banking. From the report: Security has become a greater concern recently. As artificial intelligence advances, Japan has seen a surge in cyberattacks targeting companies, as well as a rise in phishing attacks aimed at stealing personal information, often targeting bank accounts. The technology being used by Emut was developed by Seven Bank, the consumer finance unit of Seven & i Holdings, operator of 7-Eleven convenience stores. Emut customers will be able to withdraw money from Seven Bank's roughly 28,000 ATMs. The network is expected to gradually expand to cover the 16,000 or so ATMs at FamilyMart convenience stores. Although MUFG Bank ATMs will not be accessible, MUFG will consider changing this in the future. Scrapping cash cards represents a shift in what has for decades been consumers' main method of withdrawing money. The former Sumitomo Bank -- a predecessor of Sumitomo Mitsui Banking Corp. -- is believed to have been Japan's first bank to implement cash cards, in 1969. The step away from cash cards by MUFG, Japan's largest financial institution, is likely to spur other banks to follow suit. [...] Eschewing cash cards will reduce Emut's costs, which will let it offer interest rates on deposits that are expected to be higher than MUFG Bank's usual 0.5%, depending on the terms. Interest can be paid out daily, rather than twice a year -- a first for a Japanese bank.
  
  
  Read more of this story at Slashdot.
  

• Canva To Cut Or Relocate 22% of Global Workforce
  An anonymous reader quotes a report from The Guardian: Canva is cutting or relocating more than 1,200 jobs, representing 22% of its global workforce, as part of a major restructure that includes laying off staff who helped build the Australian-founded design platform. The changes mirror a trend across the technology sector, where software companies are fighting to stay competitive against cheaper artificial intelligence disrupters while aggressively embedding AI tools themselves. [...] The restructure will affect 1,271 people, according to the company, as it focuses on "collapsing layers" and bringing "more teams together in person." [...] Those leaving Canva will receive at least six months of salary and retain healthcare coverage for a further 12 months in countries where workers receive that benefit. They can also keep their laptops. Those leaving can also apply for US$10,000 (A$14,000) grants to start their own ventures. Canva's chief executive, Melanie Perkins, said the restructure was "without doubt the hardest moment in our thirteen-year history." "For some people, this will mean changes to their roles or being asked to relocate to centralized hubs," she said. "Sadly, it will also mean saying goodbye to teammates and friends who have helped build Canva into what it is today."
  
  
  Read more of this story at Slashdot.
  

• Security: Why Linux Is Better Than Windows Or Mac OS
  Linux is a free and open source operating system that was released in 1991 developed and released by Linus Torvalds. Since its release it has reached a user base that is greatly widespread worldwide. Linux users swear by the reliability and freedom that this operating system offers, especially when compared to its counterparts, windows and [0]

• Essential Software That Are Not Available On Linux OS
  An operating system is essentially the most important component in a computer. It manages the different hardware and software components of a computer in the most effective way. There are different types of operating system and everything comes with their own set of programs and software. You cannot expect a Linux program to have all [0]

• Things You Never Knew About Your Operating System
  The advent of computers has brought about a revolution in our daily life. From computers that were so huge to fit in a room, we have come a very long way to desktops and even palmtops. These machines have become our virtual lockers, and a life without these network machines have become unimaginable. Sending mails, [0]

• How To Fully Optimize Your Operating System
  Computers and systems are tricky and complicated. If you lack a thorough knowledge or even basic knowledge of computers, you will often find yourself in a bind. You must understand that something as complicated as a computer requires constant care and constant cleaning up of junk files. Unless you put in the time to configure [0]

• The Top Problems With Major Operating Systems
  There is no such system which does not give you any problems. Even if the system and the operating system of your system is easy to understand, there will be some times when certain problems will arise. Most of these problems are easy to handle and easy to get rid of. But you must be [0]

• 8 Benefits Of Linux OS
  Linux is a small and a fast-growing operating system. However, we can’t term it as software yet. As discussed in the article about what can a Linux OS do Linux is a kernel. Now, kernels are used for software and programs. These kernels are used by the computer and can be used with various third-party software [0]

• Things Linux OS Can Do That Other OS Cant
  What Is Linux OS?  Linux, similar to U-bix is an operating system which can be used for various computers, hand held devices, embedded devices, etc. The reason why Linux operated system is preferred by many, is because it is easy to use and re-use. Linux based operating system is technically not an Operating System. Operating [0]

• Packagekit Interview
  Packagekit aims to make the management of applications in the Linux and GNU systems. The main objective to remove the pains it takes to create a system. Along with this in an interview, Richard Hughes, the developer of Packagekit said that he aims to make the Linux systems just as powerful as the Windows or [0]

• What’s New in Ubuntu?
  What Is Ubuntu? Ubuntu is open source software. It is useful for Linux based computers. The software is marketed by the Canonical Ltd., Ubuntu community. Ubuntu was first released in late October in 2004. The Ubuntu program uses Java, Python, C, C++ and C# programming languages. What Is New? The version 17.04 is now available here [0]

• Ext3 Reiserfs Xfs In Windows With Regards To Colinux
  The problem with Windows is that there are various limitations to the computer and there is only so much you can do with it. You can access the Ext3 Reiserfs Xfs by using the coLinux tool. Download the tool from the  official site or from the  sourceforge site. Edit the connection to “TAP Win32 Adapter [0]

• The Ubuntu 26.04 Rust sudo is not compatible with standard sudo
  Ubuntu has been at the forefront of replacing the traditional versions of basic tools like sudo with replacements written in Rust, but aside from worries about replacing battle-tested code with brand new, relatively untested code, theres new things to worry about it. As it turns out, sudo-rs, the Rust replacement for sudo, is intentionally incompatible with the classic version in dangerous ways, as Chris Siebenmann discovered to his dismay. Basically, the classic sudo supports the use of wildcards defined using square brackets, so that if you allow a user to run, say, /usr/sbin/exim -bp, without a password, they can run exim -bpa, exim -bpc, exim -bpr, or exim -bpu without having to supply a password. This allows for very specific, fine-grained access control, which is quite a nice capability to have if youre managing many systems and users. Sadly, sudo-rs intentionally does not support this, opting to only allow you to use the generic * wildcard. Worse yet, it doesnt really make this clear, either. ↫ Chris Siebenmann I do not really have words for this. The Rust sudo has apparently opted to keep the single most dangerous wildcard while disallowing all of the wildcards that allow one to be narrow and specific about what youre allowing, and it buries this at the end of a section that devotes a bunch of words to describing functionality it doesnt have and doesnt support, with absolutely nothing else in that section to say this (either up front or in the descriptions of how all the wildcards would work if sudo-rs supported them, which it doesnt). If youre going to replace such vital, core tools like sudo that god knows how many people rely on every single day, you better be damn sure youre feature-complete and can act as a drop-in replacement. If someone switches from sudo to doas, nobody expects the experience to be identical. However, if youre consistently being told that sudo-rs is a drop-in replacement and you shouldnt expect any disruptions, you better be able to make true on that promise. Ubuntu isnt some also-ran small hobby distribution, and its developers should act like it. What a clown show.

• LXQt 2.5.0 released
  The second desktop environment release Ive got for you today is LXQt 2.5.0. This new version excises its last LXDE dependency, and QTerminal and QTermWidget received considerable improvements, like new background image modes, a visual bell, support for OSC-8 hyperlinks, and more. Theres a ton of smaller changes and improvements as well, but do note that due to a bug, 2.5.0 broke LXQts Monitor Settings on X11. The project intends to fix this as quickly as possible and push a point release to address this issue.

• Cinnamon 6.8 desktop environment released with hibernation support
  Its desktop environment Thursday, as Ive got two new releases for you today. First, Cinnamon, the desktop environment primarily associated with Linux Mint, has hit version 6.8. This version will officially ship with Linux Mint 27, scheduled for around Christmas of this year. Highlights of Cinnamon 6.8 include hibernation support via a Suspend action in the main menu, modern one-to-one trackpad gestures for both Wayland and Xorg sessions, support for the oo7 Secret Service provider, support for multiple instances in the Sound applet, and a more unified Network applet that merges the WireGuard and VPN sections. ↫ Marcus Nestor at 9To5Linux While Cinnamon is first and foremost a Linux Mint project, its available on countless other distributions as well, including dedicated variants for popular distributions like Fedora and Ubuntu. Its Wayland support is finally materialising too, which is long overdue.

• NetBSD 11.1 released
  The first point release for NetBSD 11 has been released. As the version number suggests, theres no major changes here. This release includes security updates for mozilla-rootcerts, brotli, xorg-server, hdaudio(4), compat_linux(8), unbound(8), and ipfilter. Among the non-security related changes are improved USB device stability on Raspberry Pi, fixed hot-plugging bugs in various USB Wi-Fi drivers, support for battery monitoring on the Microsoft Surface Go 3, fixed thread-local storage on ARMv5, fixes for running the MIPS Malta and PA-RISC ports under QEMU, support for the Zhaoxin KX-7000 CPU, and support for sensors, i2c, real-time clocks, and fan control on Sun Ultra 25/45 and Sun Fire V215/V245 machines. ↫ Nia Alarie on the NetBSD blog The full release notes provide more details.

• Why don’t we run the taskbar and Task Manager at high priority, so they can remain responsive?!
  Another interesting post from Raymond Chen, this time about the difficulty of dealing with a system thats become CPU-starved. The question is simple: why not just run Task Manager and important parts of the UI like the taskbar at a higher priority? The catch with running anything at high priority is that unless you have been very careful to avoid it, you will eventually run into a shared resource that you will have to wait for, and you are now stuck. Your priority checkout pass gets you to the front of the line, but if the person at the register has a large shopping cart full of groceries, you just have to wait until they are done before you get your chance. Even if the code that protects the shared resource is careful to avoid priority inversion by transferring the priority of the waiter to the thread that owns the resource, you are still stuck waiting, and that owning thread might be doing something that takes a long time, like, say, accessing a file over the network. ↫ Raymond Chen If a system has reached a state where even accessing or using something like a task manager becomes a problem, I personally just bonk my computer over the head with a forced shutdown using the power button. Honestly though, I cant remember the last time Ive had to do this, as my Linux machines all seem to handle problematic applications just fine. That being said, Im sure people managing tons of servers and/or workstations and developers debugging their own running code run into catastrophic problems like this far more often, making forced shutdowns not as practical. Have a terminal window open with top and easy access to the kill command, or make sure you can just ssh into it remotely if the UI has gone completely nuts.

• Jailbreaking my cars navigation system just so I can change the time!
  What if you want to change the time in your cars infotainment system, but its so locked down that you cant even open the time settings menu without a very specific, DRMd SD card? Well, you try to jailbreak it, of course, but the amount of effort required can kind of spiral out of control. And then, all the way at the end, its just an offset. The first thing I did was use this to create a full backup of the internal eMMC using dd. With a more complete dump of the system, I pretty quickly figured out that the date 8 time settings that Im interested in are in /mnt/flash/settings.dat, which is a custom binary format. After some more reverse engineering, it turned out the unit doesnt really have a concept of timezones at all. It gets the time from GPS and stores the local offset as a number of minutes. Mine was set to 180. I changed it to 120. That is how I was finally able to fix my cars timezone. ↫ Rasmus Moorats This harrowing story involved an older car  a 2014 Renault Latitude  but with the number of screens and the amount of user-facing software only increasing every year, requiring jailbreaks to get your car to do what you want it to do are only going to become more common. I wouldnt be surprised if whole generations of cars are going to become much harder to sell in the near future, cratering the used market, because people are not willing to put up with software problems nobody wants to or can fix. He just wanted to change the goddamn time.

• Enlightenment 0.28.0 released
  Enlightenment, the long-running desktop environment and associated libraries and frameworks, just released version 0.28.0. It brings initial support for NetBSD, support for Network Manager and a whole slew of related changes and fixes to make that possible, as well as native PipeWire support. Theres also a brand new clipboard manager, which brings with it modernisations and bug fixes for related UI elements. This release also reworks a ton code related to battery management, AC polling, and more, adding features like setting battery thresholds, ACPI power profile support, and so on. Of course, theres also the long list of smaller fixes and changes. You can download the release and build it yourself, or wait for your distribution of BSD variant to package it.

• GEFS on OpenBSD continues to improve
  A little while ago, we talked about 9fronts Good Enough File System being ported to OpenBSD. A lot of progress has been made on this front lately. Aside from fixing bugs and porting over fixes from the 9front side, theres also been a ton more substantial changes. Some userspace tools have been done (you can now mkfs on openbsd!), but snapshot control hasnt. Im thinking we have a userspace gefs program that lets you handle this, trying to keep the interface similar to the 9front ctl file. ↫ Ori Bernstein Theres still some major hurdles to overcome, some of which have already been addressed on the 9front side, but the progress is clear. Considering OpenBSD desperately needs a more modern file system, this is great news. A fun sidenote is that Im actually posting this news item from OpenBSD.

• Sam Altman wants to take your RAM
  From a global allocation perspective, actually, its quite terrible to have everybody have a bunch of the worlds limited supply of DRAM sitting in their own computer and being used 5% of the time,! Altman said. You want maximum utilization in the cloud if youre trying to deal with this very supply-constrained environment. And somehow many peoples intuition is the opposite of that.! ↫ Andrew E. Freedman at Toms Hardware Im installing a 32bit operating system without support for physical address extension on my laptop with 64GB of RAM, just because I can.

• Sculpt OS 26.10 releases
  Sculpt OS 26.10 brings quite a few new features, like scalable cursors, support for UK keyboards, better webcam support, and more, but the real meat of this release is much tastier. First, Sculpt 26.10 is the first version based on Genodes custom microkernel instead of relying on a 3rd-party kernel. This kernel  designed from the ground up for the needs of Genode and Sculpt OS in particular  is not only more micro! than any other of the microkernels supported by Genode, it also solves long-standing deficiencies concerning CPU scheduling and kernel-memory management. Sculpt OS finally stands on Genodes own footing! Finally, Sculpt OS 26.10 pays tribute to this years overall theme of building bridges! by featuring our software development kit (Goa SDK) running directly on Sculpt OS without virtualization. This entails a wealth of tooling including GCC, Binutils, Git, Sequoia, Expect, Curl, man, Make, and CMake having landed on Genode. Although still young and not time-tested yet, it shows whats possible today and allows us developers to gradually shift more and more development routine into this self-hosted environment, stressing the general-purpose qualities of Genode and motivating further optimizations. ↫ Sculpt OS release 26.10 announcement This new release also completes the transition from XML to Genodes own HID language for configuration, moves from VirtualBox 6 to 7, and upgrades a whole slew of its Linux-based drivers

• How long do you need to hold down the power button to turn off a PC?
  Raymond Chen published another story from the Windows development trenches, this time about what happens when you hold down the power button. If you hold a PC’s power button for 12 seconds, it will turn off at the hardware level without notifying the operating system. This is a safety feature so that you can turn of the computer even if the operating system’s “Shut down” command isn’t working. After eight seconds of the power button being held down, the Windows kernel realizes that the user is trying to do a force-power-off of the system, and it quickly takes a kernel dump that can be uploaded to the Windows Error Reporting service the next time you turn the system on. ↫ Raymond Chen Im a bit confused by these numbers, because I have never seen a PC take this long to power off when holding down the power button; usually it takes only a few seconds to do so, meaning Windows would never generate said kernel dump. I tried reading through the various ATX specification documents to find more information on this, but then I remembered Im not an electrical engineer so I have no idea what Im looking at. The baseline is that ATX always provides standby power to the motherboard, and pressing the power button shorts the power button pin to ground, telling the PSU to power on fully. Pressing the power button if the computer is running tells the operating system to initiate a shutdown (although you can change this behaviour), but if you hold the button down for a certain number of seconds, it forces a power-off. So far, so good; basic information. It seems that the length of time you need to hold down the power button to force a power-off is dependent on the motherboard in question, handled by a microcontroller or some other IC. Virtually every source I can find says this timing is set to about 4-5 seconds, which is quite a bit shorter than the number of seconds given by Chen. Perhaps motherboard manufacturers consider the 12 seconds to be too long, and just do their own thing, regardless what the ATX specification suggests? What further complicates matters is that Chen details how the kernel dumps created after pressing the power button for 8 seconds do, in fact, get sent to Microsoft once the computer turns on again. In fact, he is one of the people who gets to see these dumps and respond to them, so obviously they are indeed rolling in. Does this mean theres a huge number of computers out there that require you to hold down the power button for 12 seconds to force a shutdown that nobodys ever seen? These emergency kernel dumps are internally classified as “long power button hold” (LPBH) failures. One of the pieces of information recorded in these emergency kernel dumps is whether the screen consists entirely of black pixels. Those failures are sub-classified as “black screen LPBH”, and they go to a special virtual team for analysis. (I happen to be a member of this black screen LPBH team.) ↫ Raymond Chen Whats going on here? Obviously, Im not going to doubt Chen, so there must be something here I dont quite understand or that Im missing. The ATX specification might suggest 12 seconds, but could Windows perhaps adapt its kernel dump behaviour  dumping much sooner than 8 seconds  based on the motherboard its running on, maybe through information provided by the chipset drivers? I would love it if someone more knowledgeable than me can help us unravel this small mystery.

• How curl was accidentally Turing-complete for nine months
  From curl 8.12 through 8.16, config files could slice variable values and include other config files without an explicit depth cap. Together, these features let curl simulate any two-counter Minsky program. Under the usual idealization of unbounded strings and resources, this construction was Turing-complete. Curl 8.17.0 added a five-level include cap that breaks this reduction. ↫ Nicolas Seriot Neat.

• AlpineBSD combines NetBSD with Alpines apk package manager
  AlpineBSD is an operating system based on the NetBSD kernel with a userspace inspired by Alpine Linux and the objective of making it possible to use as little AI-generated software as possible. There is no LLM output included in the base system or main package repository (AlpineBSD AI policy). ↫ AlpineBSDs website AlpineBSD uses the NetBSD kernel, libc, and essential tools, and combines them with Alpines apk-tools package manager, busybox, and generlaly preferring GNU tools over their BSD equivalents. It uses the s6 init system, but the project intends to add OpenRC as an alternative. The project is in its very early stages, so dont expect things like an installer; youre on your own, basically.

• My favourite PowerMac is a Nintendo Wii!
  The Nintendo Wii (and its related consoles) were already made to run the PowerPC version of Windows NT as well as Mac OS X, but now we can add another milestone to the list: classic Mac OS. So today I reached a nice milestone in one of my projects: my work porting classic Mac OS to PowerPC systems with what I affectionately call ArtX chipsets (Nintendo GameCube, Wii, eventually Wii U; the GameCube’s Flipper integrated chipset was very much designed by ArtX as it was effectively finished when ATI acquired the company, and the Wii’s Vegas (and its later revision Bollywood) and Wii U’s Latte are effectively straight successors) reached the desktop for the first time, most likely the first time since the CHRP clone era that someone outside of Apple brought up classic Mac OS on a new system to the desktop. Despite still being nowhere near ready for a public release, I want to talk about the challenges I faced with this project so far. ↫ Rairii at Virtuallyfun Various versions of Mac OS boot to the desktop, including Mac OS 9.2.2, the last ever version, but theres still a ton or work to be done before this is ready for release. Still, with Rairii amazing track record of porting all kinds of things to various PowerPC machines, including getting the PowerPC version of Windows NT to run on various PowerPC Macs, I have little doubt theyll manager to get this to a releasable state. I absolutely love this kind of work.

• Microsoft hopefully fixes Modern Standby and adds online Windows reinstallation
  I think its safe to say that Windows Modern Standby feature isnt exactly free from issues. The biggest problem seems to be that its not very good at actually determining when to transition between regular sleep and hibernation, often leaving users with an empty battery as they open their laptops lid. Microsoft has now released an update to hopefully address this long-standing problem. This update improves the adaptive hibernate policy to provide more instant-on resumes from Modern Standby while helping preserve battery life when the charge is low. Noticeable changes include less hibernation while the battery is above 80% and hibernating sooner when the battery is below 10%. ↫ KB5127936 Among other new features and changes this update brings are Cloud Rebuild, a way for devices to install Windows without needing a local image. Cloud Rebuild can be started form within an existing installation, remotely by administrators, or through the Windows Recovery Environment. Obviously, a working internet connection, wired or wireless, is required for this feature to work. This is the same update that introduces CLAT, which we talked about yesterday, to smooth the transition from IPv4 to IPv6.

• NetBSD adds nano-like text editor to base system
  Flag LinuxNetBSD made a seemingly small, but very welcome announcement today: theyre adding a more user-friendly, easier to use command-line text editor to the base install. To ease the transition for new users, NetBSD -current now includes an alternative editor to vi(1) and xedit(1) in its base system, atto(1). It is a modeless screen-based editor similar to nano, pico, xedit, or emacs. It is only 48 kilobytes, making it suitable for inclusion in the rescue system. ↫ NetBSD Foundation on Fedi Most guides and how-to article for operating systems like NetBSD assume the use of vi, and while I dont want to ignite a flamewar, vi isnt exactly the most approachable or friendly piece of software out there. My occassional text editing in the command line is all done through nano, but now Im definitely curious to give atto a go. While other tech news websites are plastered with articles about a PC maker adding a touch screen to one of their laptops, were talking about a new CLI text editor in NetBSDs base system. Priorities, folks.

• openSUSE Leap 16.1 Unifies Traditional and Immutable Linux With Transactional Updates
  by George Whittaker
  The openSUSE Project has officially released openSUSE Leap 16.1, introducing a major change to how the distribution can be installed, maintained, and deployed. Released on November 3, 2026, the update brings an integrated Immutable Mode that allows users to install a transactionally updated operating system with a read-only root filesystem, while continuing to offer the traditional Linux installation model.
  
  The new approach also marks the beginning of the end for openSUSE Leap Micro as a separate distribution. Its functionality is now incorporated into Leap 16.1, giving administrators a unified platform for desktops, conventional servers, container hosts, virtual machines, and edge computing environments. Users can select the installation model that best fits their workloads without switching to an entirely different openSUSE product.
  
  Beyond the new installation architecture, Leap 16.1 updates KDE Plasma to version 6.6, retains GNOME 48 with additional maintenance fixes, introduces LXQt 2.4, and continues using the Linux 6.12 long-term support kernel series. The release also expands container tooling, improves system monitoring, updates security components, and introduces changes designed to make enterprise-oriented Linux deployments more predictable.
  Immutable Mode Becomes the Defining Feature of Leap 16.1
  The most important addition to openSUSE Leap 16.1 is its new Immutable Mode, which allows the operating system to use a read-only root filesystem and transactional updates. Instead of modifying the active operating system directly whenever packages are installed or updated, the immutable configuration prepares changes in a separate filesystem snapshot.
  
  This approach differs from a conventional Linux installation, where package managers typically modify files in the active root filesystem. On a traditional system, an update can replace libraries, executables, and configuration components while applications continue running. Although Linux package managers handle these operations carefully, interrupted updates or incompatible package combinations can sometimes leave a system in an inconsistent state.
  
  Immutable Mode reduces this risk by preparing operating-system changes separately from the currently running environment. Updates become active after a reboot, allowing the system to start using a consistent set of packages and configuration changes. If an update introduces problems, administrators can return to an earlier snapshot rather than manually reversing individual package modifications.
  
  The underlying technology is not entirely new to openSUSE. Similar functionality has been available through Leap Micro, which was designed for lightweight, transactionally updated server and infrastructure deployments. What changes in Leap 16.1 is that this operating model becomes an installation choice within the main Leap distribution.
  Go to Full Article

• KDE Plasma 6.8.2 Released With More KWin and Wayland Fixes
  by George Whittaker
  The KDE Project has released KDE Plasma 6.8.2, delivering another round of stability improvements for its Wayland-based Linux desktop environment. Released on October 27, 2026, the update arrives one week after Plasma 6.8.1 and two weeks after the anniversary release of Plasma 6.8, which marked 30 years since the KDE project's founding.
  
  This second maintenance release concentrates on correcting regressions discovered after the initial rollout. The largest collection of changes targets KWin, KDE's window manager and Wayland compositor, with fixes involving multi-GPU synchronization, display handling, pointer constraints, color pipelines, and window stacking. Additional improvements address disappearing desktop icons, application launcher behavior, remote desktop sessions, screen recording, accessibility, and system monitoring.
  
  Although Plasma 6.8.2 does not introduce major new desktop features, its corrections are particularly important because Plasma 6.8 completed KDE's transition away from native X11 desktop sessions. With Wayland now serving as Plasma's display foundation, improvements to KWin and its supporting components directly affect the reliability of the entire desktop environment.
  KDE Continues Stabilizing Its Anniversary Release
  KDE Plasma 6.8 arrived on October 14, 2026, coinciding with the project's 30th anniversary. The release introduced significant desktop changes, including the retirement of native X11 sessions, additional HDR improvements, expanded remote desktop capabilities, NVIDIA graphics optimizations, and further development of KDE's Union theming engine.
  
  The transition represented an important architectural milestone, but major desktop releases frequently expose problems that were not encountered during development or beta testing. Linux desktops must operate across numerous combinations of graphics hardware, display configurations, drivers, input devices, and applications. Even extensive testing cannot always reproduce every environment used by the wider community.
  
  KDE acknowledged this challenge during the development cycle following Plasma 6.8, noting that users had discovered regressions that were not reported during the beta period. Contributors responded with a substantial collection of fixes, many of which have now reached the stable 6.8 branch through its first two maintenance releases.
  
  Plasma 6.8.2 continues that stabilization effort. Rather than changing the desktop's overall direction, it improves the reliability of existing functionality and addresses issues that could affect everyday workflows. The release includes corrections across KWin, Plasma Desktop, Plasma Workspace, Discover, KRDP, KPipeWire, and several other components.
  Go to Full Article

• RefreshOS 3.1 Strengthens Its Debian Foundation With Independent Package Management
  by George Whittaker
  The RefreshOS project has released RefreshOS 3.1, bringing an updated Debian foundation, a dedicated software repository, improved 32-bit application compatibility, and several refinements to its KDE Plasma desktop experience. Released on October 27, 2026, the update advances the distribution's 3.x "Colorful Cosmos" series while introducing infrastructure that could significantly improve how RefreshOS delivers its own packages and configuration changes.
  
  The new release moves from Debian 13.4 to Debian 13.7 "Trixie", incorporates Linux kernel 6.12.113, and continues using KDE Plasma 6.3.6. However, the most important development is the introduction of an official RefreshOS APT repository with separate Stable, Testing, and Experimental channels. This gives the project a more structured way to distribute customized software while continuing to benefit from Debian's established package ecosystem.
  
  RefreshOS 3.1 also enables i386 architecture support, making it easier to install compatible 32-bit software and dependencies required by applications such as Steam. Additional changes address desktop localization, KDE integration, installer configuration, package permissions, and installation image cleanup. Together, these improvements represent an effort to make RefreshOS easier to maintain while preserving its focus on a ready-to-use Linux desktop.
  RefreshOS Builds on Debian's Stable Release Model
  RefreshOS is a Debian-based Linux distribution developed by eXybit Technologies, designed to provide a polished desktop environment without requiring users to configure every component manually. The project combines Debian's stable package foundation with KDE Plasma, preinstalled applications, hardware support, multimedia capabilities, and custom desktop styling.
  
  Unlike distributions that emphasize constant adoption of the newest software versions, RefreshOS prioritizes a relatively predictable desktop experience. Its Debian foundation provides access to established security maintenance, package management, and compatibility practices, while RefreshOS adds its own configuration choices to simplify everyday use.
  
  Version 3.1 continues that philosophy by incorporating Debian 13.7, the seventh point release of Debian 13 "Trixie." Debian published this update on September 12, 2026, primarily to consolidate security corrections and fixes for significant software problems. These point releases do not represent entirely new Debian generations. Instead, they refresh installation media and package selections so newly installed systems begin with a more current collection of fixes.
  Go to Full Article

• Tails 7.15.1 Blocks Compromised HTTPS Certificates in Urgent Privacy Security Fix
  by George Whittaker
  The Tails project has released Tails 7.15.1, an emergency security update addressing a compromised certificate authority that could allow attackers to impersonate legitimate HTTPS websites. Released on October 23, 2026, the update focuses on protecting users against a potentially serious man-in-the-middle attack involving certificates associated with eMudhra, an authority whose intermediate certificates were compromised.
  
  The emergency release updates Tor Browser to version 15.0.26, addressing CVE-2026-113470, and modifies the distribution's trusted certificate authorities to block all eMudhra certificates. These changes are particularly important for Tails because the operating system routes internet traffic through the Tor network, where malicious exit nodes or other network intermediaries could potentially exploit compromised certificates to impersonate secure websites.
  
  Unlike a conventional maintenance update, Tails 7.15.1 does not introduce major desktop features, new applications, or significant interface changes. Its purpose is to close a security gap that could undermine the authenticity of HTTPS connections. The developers recommend upgrading promptly, especially for users who rely on Tails for sensitive communications, anonymous research, journalism, or other privacy-critical activities.
  Why Tails 7.15.1 Was Released as an Emergency Update
  Tails, short for The Amnesic Incognito Live System, is a Debian-based Linux distribution designed to help users preserve their privacy and reduce traces of their computing activity. It typically runs from a USB stick and routes internet connections through Tor, making it useful for people who need stronger privacy protections than those provided by a conventional desktop operating system.
  
  The distribution also emphasizes minimizing persistent data. By default, Tails operates as a live environment and does not retain ordinary session activity after shutdown. Users who need to preserve selected files and settings can configure encrypted Persistent Storage on their USB device, allowing them to maintain important information across sessions without changing the operating system's general amnesic behavior.
  
  Because Tails is built around privacy and secure communication, problems involving HTTPS certificate validation deserve particular attention. Tor helps obscure the relationship between a user's network location and the websites they visit, but it does not automatically guarantee that every website encountered through an exit node is authentic. HTTPS provides an additional layer of protection by authenticating websites and encrypting communications between the browser and the destination server.
  Go to Full Article

• Omarchy 4.0.5 Released With Better NVIDIA Laptop Support
  by George Whittaker
  The Omarchy project has released Omarchy 4.0.5, introducing a substantial collection of hardware compatibility improvements, desktop performance optimizations, security fixes, and package updates for the Arch Linux-based operating system. Released on October 18, 2026, the update focuses on refining the existing desktop experience while preparing the distribution for its next major feature release.
  
  Among the most important changes are improved NVIDIA hybrid graphics support for laptops, an updated Linux 7.2.8 kernel featuring the BORE scheduler, and compatibility improvements for Qt 6.12. The release also resolves boot-related black screens, fixes audio problems affecting certain Dell and USB speaker configurations, corrects Steam graphics driver selection, and improves the reliability of several desktop utilities.
  
  Although version 4.0.5 is primarily a maintenance release, its improvements extend across many of the components that determine how smoothly a Linux desktop operates. From faster application launches and more responsive desktop panels to stronger security defaults and more reliable hardware detection, the update demonstrates Omarchy's continued emphasis on delivering a preconfigured Linux environment that requires relatively little manual setup.
  Omarchy Continues Refining Its Arch Linux Desktop Experience
  Omarchy is an opinionated Arch Linux-based distribution designed to provide a ready-to-use development and desktop environment built around the Hyprland Wayland compositor. Rather than presenting users with a minimal installation that requires extensive customization, Omarchy combines a carefully selected collection of applications, themes, keyboard shortcuts, and system configurations into a cohesive desktop experience.
  
  The distribution has attracted attention among developers and experienced Linux users who appreciate keyboard-driven workflows, tiling window management, and the flexibility of Arch Linux without necessarily wanting to configure every component manually. Its desktop environment emphasizes efficient navigation, integrated development tools, and a consistent visual design, while retaining access to Arch's extensive software repositories.
  
  Version 4.0.5 continues that approach by concentrating on problems that can interrupt everyday workflows. The release improves hardware compatibility, corrects regressions introduced by newer software packages, and reduces unnecessary delays in common desktop operations. Rather than introducing a dramatic redesign, the developers have focused on making the existing environment more predictable and responsive.
  Go to Full Article

• KDE Plasma 6.8 Marks 30 Years With a Major Shift to Wayland and a More Powerful Linux Desktop
  by George Whittaker
  The KDE Project has officially released KDE Plasma 6.8, introducing a substantial collection of desktop improvements while celebrating three decades of open-source software development. Released on October 14, 2026, exactly 30 years after Matthias Ettrich announced the original KDE project, this anniversary edition brings significant changes to display management, accessibility, graphics performance, remote desktop functionality, system monitoring, and application theming.
  
  Perhaps the most consequential development is KDE's decision to retire native X11 desktop sessions in Plasma 6.8, completing its transition toward Wayland as the primary display architecture. The release also introduces NVIDIA triple buffering by default, improved HDR support, a more capable remote desktop server, CPU affinity controls in System Monitor, and expanded capabilities for the experimental Union theming engine. These improvements reflect KDE's effort to modernize the Linux desktop while maintaining the customization and flexibility that have defined Plasma for years.
  
  Plasma 6.8 is therefore more than a commemorative release. It represents an important architectural transition for one of Linux's most widely used desktop environments, with changes that affect both everyday users and developers building applications for the next generation of Linux desktops.
  KDE Celebrates Three Decades of Open-Source Desktop Development
  KDE's history began on October 14, 1996, when Matthias Ettrich proposed creating a consistent graphical desktop environment for Unix-like operating systems. At the time, Linux was becoming increasingly capable as a free operating system, but its graphical experience remained fragmented. Users could choose from several window managers and applications, yet there was no universally integrated desktop environment comparable to the commercial graphical systems available elsewhere.
  
  The original KDE initiative sought to address that limitation by building a cohesive desktop around the Qt application framework. Over the following decades, the project evolved through several major generations, introducing increasingly sophisticated desktop technologies while expanding into applications, development frameworks, mobile interfaces, and other open-source projects.
  
  Plasma 6.8 arrives as KDE marks its 30th anniversary, but its development priorities are focused primarily on the future. Rather than introducing a purely cosmetic anniversary edition, KDE has concentrated on modernizing underlying desktop infrastructure while improving accessibility, usability, and performance. The result is a release that combines immediately visible enhancements with architectural changes intended to support future development.
  Go to Full Article

• Building a Reliable Event-Driven Payment Service With XRP Ledger
  by Emma Clapp
  Receiving a transaction notification is only the first step. Production software still has to decide whether that event is safe to turn into application state.
  
  A WebSocket callback can arrive in milliseconds. What happens afterward is harder. The Go to Full Article

• Linux Moves Closer to Retiring the x32 ABI After Years of Limited Adoption
  by George Whittaker
  Linux kernel developers are renewing efforts to retire the x32 application binary interface (ABI), a little-used compatibility feature that attempted to combine the advantages of 64-bit processors with the smaller memory footprint of 32-bit applications. A revised patch series submitted on October 8, 2026, proposes the first steps toward disabling the interface, potentially ending support for an architecture experiment introduced more than 14 years ago.
  
  The latest proposal comes from Sebastian Andrzej Siewior, a Linux kernel developer at Linutronix who has been working on the removal effort throughout 2026. Rather than immediately deleting every component associated with x32, the proposed approach would first prevent the feature from being enabled through normal kernel configuration. This would give remaining users and distribution maintainers an opportunity to respond before the underlying implementation is removed.
  
  The effort reflects a broader challenge in Linux development: maintaining compatibility with older or rarely used technologies while keeping the kernel manageable, secure, and efficient. Although x32 offered theoretical performance and memory advantages, it never achieved widespread adoption. With conventional x86_64 software dominating modern Linux systems, developers are increasingly questioning whether the additional maintenance burden remains justified.
  Understanding the Linux x32 ABI
  The x32 ABI was introduced with Linux kernel 3.4 in 2012 as an alternative to conventional 32-bit and 64-bit application environments. Its goal was to provide applications with access to the architectural improvements of x86_64 processors while retaining smaller data types and pointers associated with 32-bit software.
  
  Traditional 32-bit x86 applications use the i386 ABI, which operates with a more limited register set and 32-bit execution conventions. Standard x86_64 applications, meanwhile, benefit from additional general-purpose registers, wider registers, and modern calling conventions, but they normally use 64-bit pointers. Those larger pointers can increase memory consumption in applications that maintain large numbers of pointer-heavy data structures.
  
  The x32 ABI attempted to offer a compromise. Applications would execute using the x86_64 instruction set and its larger register file while retaining 32-bit integers, long values, and pointers. This programming model is commonly described as ILP32, meaning that integers, long integers, and pointers are all 32 bits wide.
  
  The distinction can be illustrated by comparing the expected sizes of common C data types:
  Go to Full Article

• Google's Kage Project Rethinks Linux Kernel Security With Isolated Device Drivers
  by George Whittaker
  Google is exploring a new approach to Linux kernel security that could significantly change how device drivers interact with the operating system. The experimental project, known as Kage, uses compiler-based sandboxing to isolate drivers inside the kernel, potentially limiting the damage caused by memory corruption, programming errors, and exploitable vulnerabilities without requiring drivers to run as separate user-space processes.
  
  The research was presented at the Linux Plumbers Conference 2026, held October 5–7, with Stanford University and Google researcher Zachary Yedidia discussing how LLVM's Lightweight Fault Isolation (LFI) technology can create restricted execution environments for native kernel code. Unlike conventional isolation techniques, which often depend on separate processes or virtual machines, Kage attempts to preserve the performance advantages of kernel-space execution while reducing the amount of memory individual drivers can access.
  
  Early prototypes have already demonstrated the concept using NVMe storage, networking, and Wi-Fi drivers. However, Kage remains an experimental research project rather than a feature available in mainstream Linux distributions. Its developers are still investigating performance, hardware access, and compatibility with more complicated drivers, including graphics hardware.
  Why Device Drivers Remain a Major Linux Security Challenge
  Linux device drivers are responsible for connecting the operating system to hardware components, including graphics cards, network adapters, storage controllers, USB devices, and wireless chipsets. Most traditional Linux drivers execute in kernel space, giving them privileged access to system resources and the ability to interact directly with hardware. This architecture is one reason Linux can deliver high performance across such a broad range of devices, but it also creates a significant security challenge.
  
  When an ordinary application encounters a memory error, the operating system can often terminate that process without affecting the rest of the system. Kernel drivers operate under different conditions. Because they typically share the kernel's address space and privileges, an invalid memory access or exploitable vulnerability can affect unrelated kernel components, potentially resulting in a system crash, privilege escalation, or complete compromise of the operating system.
  
  The challenge becomes more complicated when considering the enormous number of drivers supported by Linux. Some are maintained by large organizations with extensive testing infrastructure, while others receive contributions from smaller development teams or individual maintainers. Even carefully reviewed drivers can contain bugs, particularly when they interact with complicated hardware, asynchronous operations, and memory-management mechanisms.
  Go to Full Article

• Speech Synthesis on Linux: Adding a Voice to Scripts and Systems
  by George Whittaker
  Linux users have long had a pragmatic relationship with text-to-speech. The classic open-source engines have been available for years, wired into accessibility tools and the occasional script, dependable but unmistakably robotic. They do the job where the job is simply to convert text to some kind of speech, but the mechanical output has kept them out of anything where the voice actually matters. The arrival of high-quality speech synthesis delivered over an API changes what is possible, letting Linux users add genuinely natural voices to scripts, services, and applications without hosting a heavyweight model themselves.
  The Familiar Trade-Off
  Anyone who has used the traditional Linux speech engines knows the trade-off. They are free, local, and scriptable, which fits the Linux ethos perfectly, but the voices are clearly synthetic. For accessibility and for utilitarian tasks where intelligibility is all that counts, that has been acceptable. For anything user-facing where the quality of the voice shapes the experience, it has not.
  
  The alternative of running a modern, high-quality speech model locally is possible but comes with real costs: significant computational requirements, model management, and the ongoing maintenance of a demanding piece of infrastructure. For many use cases, particularly on servers, embedded systems, or ordinary workstations, that overhead is disproportionate to the need. This is the gap that an API-based approach fills, offering the quality of a large modern model without the burden of hosting one.
  The API Approach on Linux
  Delivering speech synthesis over an API fits naturally into how Linux users already build things. Rather than installing and maintaining a model, you make a request to a service and receive audio back, which you can then play, save, or pipe into whatever comes next. A Go to Full Article