|
1825 Monetary Lane Suite #104 Carrollton, TX
Do a presentation at NTLUG.
What is the Linux Installation Project?
Real companies using Linux!
Not just for business anymore.
Providing ready to run platforms on Linux
|
Show Descriptions... (Show All)
(Two Column)
- [$] Fedora considers conflict-of-interest policy
The FedoraCouncil is consideringa conflict-of-interest (COI) policy for its decision-making bodies,such as the Fedora EngineeringSteering Committee (FESCo), special-interest groups (SIGs), andany other groups or individuals that report to the council andare responsible for decisions that impact the Fedora project. Thecurrent draft does not, however, apply to the council itself. The publicdiscussion for the COI policy began on July 23 and seems to benearing completion, with the council set to discuss the topic againduring its meeting on August 13.
- Another npm worm
StepSecurity is reporting the emergence of a new worm affecting npm packages.The design of the worm is nothing new, but the rapidity with which it isexploiting captured npmpackager credentials is noteworthy.
TL;DR: A self-propagating worm, which we are calling ChainDrop, is spreading rapidly through the npm ecosystem. So far 435 packages and more than 1,550 compromised versions have been flagged, starting with keyv@6.0.0. If you are using any of the packages listed below, assume your environment is compromised. We are still investigating the full scope; check back on this post for updates.
- [$] The beginning of a process-builder API
The recent discussion on "spawn templates"raised questions about whether it was time to provide an alternative to theclassic Unix fork()/exec() pattern for process creation.One idea that was raised there was to shift the template pattern into aninterface that could be used to efficiently assemble new processes frombare cloth, without duplicating the parent process. Preferably, thatinterface would be able to implement posix_spawn().Li Chen, the author of the spawn-template work, has now responded with a patch series(written with significant LLM assistance) showing what a process-builderAPI for Linux might look like.
- Security updates for Tuesday
Security updates have been issued by AlmaLinux (frr, ldns, mingw-glib2, and perl-Archive-Tar), Debian (ruby2.7), Fedora (borgbackup, nebula, python-nh3, rust-ammonia, and seamonkey), Mageia (librabbitmq, libvncserver, packages, perl, perl-GD, perl-Unicode-LineBreak, squid, and unbound), Oracle (compat-libtiff3, frr, gstreamer1-plugins-good, javapackages-tools:201801, libreswan, nodejs:22, nodejs:24, p11-kit, perl-Archive-Tar, perl-DBI, php, pki-deps:10.6, and python-tornado), and SUSE (aws-iam-authenticator, bind, containerd, gawk, google-cloud-sap-agent, ignition, ImageMagick, java-11-openjdk, libpng16, libssh, mcphost, nginx, openssh, openssl-1_1, perl-DBI, perl-HTTP-Date, perl-Net-DNS, python-urwid, python3-dulwich, python312, python313, python3, python313-pydantic, python313-sentry-sdk, rrdtool, s390-tools, samba, spice-vdagent, vim, and xen).
- Twenty years of Pandoc
John MacFarlane has published a lengthyretrospective to commemorate twenty years of the Pandoc document converter.
On August 3, 2006, I uploaded the first version of pandoc to mywebsite, releasing it under the free GPL license. Pandoc 0.1 consistedof about 3000 lines of Haskell code, with no dependencies aside fromGHC's standard library. It could convert Markdown, reStructuredText,HTML, and LaTeX documents into any of these formats, plus RTF or S5. Ihad no idea at the time that this would just be the first of over twohundred releases over the next twenty years; that the project wouldbecome the mostpopular program written in Haskell; that I would spend countlesshours on bug-fixes, improvement, and project management; that I wouldcollaborate with programmers in many other countries; that pandocwould come to support over fifty document formats; that it would allowautomatic generation of citations and bibliographies; that it wouldbecome integrated into academic writing tools like Quarto and Jupyter Notebook; that it would beinstalled on millions of computers around the world.
How did this happen? I want to take advantage of pandoc's birthdayto tell the story of the project, as best I can remember it.
- C-Kermit 11 released
For those of us with a long memory: John Goerzen has announcedthe release of C-Kermit 11, the first release of this file-transferutility in 15 years.
As Debian maintainer of Kermit, I noticed some areas where it wasn't matching modern expectations. One area was, not surprising for a project of its age, security. Another area was that its character set or line-ending conversions are usually not desired now; we are used to byte-identical binary transfers, and the defaults caused confusion and even some rare instances of data corruption. So I started making a few patches last year.
See thechangelog for details on the work that has been done.
Most of us probably haven't thought about C-Kermit in years (if ever), butthere was a time when it was an essential tool for moving files betweenmachines.
- [$] Buffer sizes for FUSE io_uring
The Filesystem inUserspace (FUSE) subsystem provides a way to service filesystemrequests from a user-space server, which moves the format-handling code outof the kernel. The FUSE server can use the io_uringfacility for better performance, but Bernd Schubert is concerned thatmemory is being wasted because the current implementation has a single,large buffer size that is excessive for small I/O operations. He led a discussion on that topicin the filesystem track of the 2026 Linux Storage,Filesystem, Memory Management, and BPF Summit in Zagreb, Croatia.
- SQLite Critical CVEs or LLM Slop? (JFrog blog)
The JFrog blog examinessome reported vulnerabilities in SQLite, some of which made their wayinto high-profile vulnerability databases, that turned out to be entirelyfabricated by LLMs.
These LLM slop CVEs can cause organizations to waste time investigating and patching vulnerabilities that do not actually exist, as well as polluting vulnerability databases. In environments where Critical vulnerabilities are automatically prioritized or tickets are opened based on vulnerability scores, such fabricated CVEs can turn into a real burden.
In environments where AI is used to automate vulnerability triage and remediation this becomes even more concerning. An AI agent that encounters a fabricated CVE may attempt to locate the vulnerable function, generate a patch, or recommend changes based on code that does not even exist. Instead of helping security teams remediate real vulnerabilities, it can lead them down a completely wrong path, potentially introducing unnecessary changes and wasting time.
- Four stable kernels for Monday
Greg Kroah-Hartman has announced the release of the 7.1.6, 6.18.42, 6.12.101, and 6.6.148 stable kernels. Each containshundreds of patches—the 7.1.6 kernel has more than700—with fixes throughout the tree. Users are advised toupgrade.
- NetBSD 11.0 released
The release of NetBSD 11.0, the 19th major version of the operatingsystem, has been announced. There aremany changes and enhancements since the 10.1 release, including a newport to RISC-V, better support for Linux system calls in compat_linux(),as well as improvements to the NPFfirewall.
As you are probably aware, the number of security issues found orsuspected everywhere has massively increased with the advent of AItools. As a consequence, we can't publish a release without openissues. Instead of delaying the release further to fix them (new onesare being reported all the time), we've instead chosen to betransparent about this.
See the full releasenotes for links to the binary distributions and links to the fullchange logs.
- Banana Pi BPI-AI2N Goes on Sale with Yocto and Armbian Images
Banana Pi has announced public availability of its BPI-AI2N embedded vision platform, following the hardware introduction covered last year. The platform combines a system-on-module based on the Renesas RZ/V2N Vision AI MPU with a separate carrier board designed for smart cameras, industrial vision, robotics, and other edge AI applications. As previously covered in June 2025, […]
- Linux's Staging Area To Now Reject LLM-Generated Patches, Except For Real Security Fixes
While Linux's second-in-command Greg Kroah-Hartman does use AI / LLMs himself to success in the Linux kernel, given the "onslaught" of kernel patches produced by large language models and the intent on the Linux kernel's staging area being an area for newcomers to get involved, moving forward he's now rejecting AI/LLM-generated staging patches. But there is one exception and that is for genuinely valid security fixes...
- Linux 7.3 Adding Support For MCTP-Over-USB v1.1
Within the Linux networking subsystem's "net-next" Git branch there is now queued up support for MCTP-over-USB v1.1. This is the newest version of the standard for sending Management Component Transport Protocol (MCTP) packets over USB for tasks loike crash dumps, logging, and firmware updates...
- Apple Says More Ex-Employees May Have Taken Confidential Data to OpenAI
Apple is now seeking a preliminary injunction to prevent OpenAI and Jony Ive's io startup from developing AI hardware allegedly based on stolen Apple trade secrets. "The iPhone maker also claims that more of its former employees may be involved with the trade secrets theft," reports TechCrunch. From the report: In a new filing, Apple is requesting expedited discovery from the accused OpenAI employees, senior systems engineer Chang Liu and Chief Hardware Officer Tang Yew Tan; OpenAI, and its foundation; and io, the device startup co-founded by Apple's former lead designer Jony Ive. Apple also notes that its continued investigation has so far revealed 11 other former Apple employees beyond Liu and Tan may have been witnesses or otherwise involved in the case, and others who were previously named in the original complaint, like OpenAI employee Yu-Ting Peng. The filing marks an escalation in Apple's legal battle with OpenAI, as it suggests Apple has uncovered new evidence that the misconduct goes beyond the former employees named in the original complaint. "For example, another former Apple employee seems to have met with Mr. Liu and Ms. Peng in advance of Ms. Peng's interview at OpenAI and discussed with them during that meeting Apple proprietary information relating to unannounced products," the filing states. "Yet another former Apple employee took screenshots of confidential Apple documents relating to an unannounced Apple product before an interview at OpenAI." "And, after Apple filed its complaint, multiple former Apple employees now working at OpenAI reached out to discuss returning Apple-issued work devices they kept when they left Apple," Apple claims, suggesting there were more who were possibly involved with the scheme. Apple is pushing the court to allow for expedited discovery because it believes it has good cause to suspect that there are others involved in the theft of its intellectual property. The company noted that its motion for a preliminary injunction is also pending. Apple's request for a preliminary injunction is "both based on false information and completely unnecessary because we do not have, nor want, any of their trade secrets," said OpenAI in a blog post. "We're much more interested in building innovative products and technologies that push the frontier," OpenAI's statement reads.
Read more of this story at Slashdot.
- Apple Launches Legal Challenge Against UK Demand To Access Encrypted User Data
An anonymous reader quotes a report from The Guardian: Apple has launched a new legal challenge against a UK government demand to access its customers' highly encrypted data, a year after the Home Office agreed to abandon its previous request. The US tech company launched the legal complaint last month at the Investigatory Powers Tribunal (IPT), an independent court that has the power to investigate claims that the UK intelligence services have acted unlawfully. The UK government had made a second request to Apple to grant it a "back door" to encrypted iCloud data belonging to British users, according to an order issued by the court. Britain backed down on its original demand for access to data from UK and US customers last year, after a heated transatlantic tussle over encryption between London and Washington. UK authorities subsequently issued a new "technical capability notice" (TCN) to Apple that did not apply to American users. Apple is seeking to challenge the British government's powers to issue TCNs under the UK Investigatory Powers Act, according to the details of the new legal case first reported by the Financial Times. [...] The original TCN issued last year asked Apple for the right to see users' encrypted data protected by its advanced data protection (ADP) program in the event of a national security risk. Apple said the removal of the tool -- which not even it can access -- would make users more vulnerable to data breaches from bad actors and other threats to customer privacy. Creating a "back door" would also mean all data was accessible by Apple, which it could be forced to share with law enforcement possessing a warrant. As a result, Apple withdrew UK customers' access to its ADP program in January 2025. The Home Office has maintained that the Investigatory Powers Act, under which such orders are issued, contains robust safeguards and is used only when absolutely necessary.
Read more of this story at Slashdot.
- Sandisk and SK Hynix Publish First Open High Bandwidth Flash Standard
BrianFagioli writes: Sandisk and SK hynix have published the first open technical specification for High Bandwidth Flash (HBF) through the Open Compute Project. HBF is designed to create a new memory tier between High Bandwidth Memory and traditional SSD storage, giving AI inference systems more near compute capacity without relying entirely on expensive HBM. The specification supports capacities up to 512GB using 8-high and 16-high NAND stacks, with bandwidth tiers ranging from about 0.4TB per second to 3.0TB per second. It also uses the UCIe chiplet interface, which could make HBF easier to integrate with CPUs, GPUs, and other accelerators. Google and Tenstorrent participated in the standardization effort, but commercial products and independent benchmarks are still missing.
Read more of this story at Slashdot.
- Russia-Linked 'Midnight Blizzard' Group Hijacks Hotel Wi-Fi With CaptiveCrunch
A Russia-linked group tracked as Midnight Blizzard has compromised hotel and conference Wi-Fi portals worldwide, redirecting guests to phishing pages and fake software updates that steal credentials, session tokens, and other sensitive data. Microsoft says the campaign, dubbed CaptiveCrunch, "targets traveling employees generally rather than a particular sector," reports iTNews. From the report: Midnight Blizzard, tracked internally by Microsoft under its earlier codename NOBELIUM, is attributed by the US and UK governments to Russia's SVR (Sluzhba Vneshney Razvedki) foreign intelligence service. Microsoft's technical analysis said compromises occurred in "several countries" without naming them, and it did not give a total number of affected venues, organisations or individuals. A related investigation published earlier in July by security firm ReliaQuest, and which Microsoft cited in its report, found compromised captive portal gateways across multiple United States cities as well as in India and Saudi Arabia, mostly at hotels. ReliaQuest said the traffic it observed came from organizations across financial services, professional services, legal, health care, energy and retail, suggesting the campaign targets traveling employees generally rather than a particular sector. [...] Where attackers gained a foothold, Microsoft said they deployed two main tools: CornFlake, a Windows remote access trojan (RAT) written in Go capable of keylogging, screenshot and webcam capture, audio surveillance and credential and session token theft. They would also drop ChocoShell, an in-memory PowerShell infostealer targeting browser cookies, saved passwords, Microsoft 365 single sign-on (SSO) tokens and wi-fi credentials. Microsoft also said it has seen indications the attackers might be targeting Android devices with similar prompts urging victims to download and install an APK file.
Read more of this story at Slashdot.
- Spain Offers $1.14 Billion To Get Thirty Meter Telescope Moved To Canary Islands
Longtime Slashdot reader schwit1 shares a report from Behind the Black: In a new bid to get the Thirty Meter Telescope (TMT) to move from Hawaii, which has blocked its construction for more than a decade, the Spanish government has put together a $1.14 billion package that would not only pay for construction on the Canary Islands, but would finance an additional half century of operations. Tech Times provides some additional details: The package is conditional on the TMT International Observatory formally choosing La Palma as its construction site. The financing architecture has three pillars and two additional contingent instruments. The first pillar is 400 million euros (approximately $456 million USD) from Spain's Ministry of Science, Innovation and Universities, routed through the Centre for Technological Development and Innovation (CDTI). This figure was first pledged a year ago in July 2025 as Spain's initial bid. The second pillar is a 300 million-euro (approximately $342 million USD) loan from the EIB [European Investment Bank] itself -- subject to satisfactory completion of the bank's technical, financial, and legal due diligence and approval by its governing bodies. The third is a potential 300 million-euro (approximately $342 million USD) participation from the Instituto de Credito Oficial (ICO), Spain's state development finance institution, evaluated under equivalent conditions to the EIB loan but subject to its own separate analysis. Spain's export credit agency, Cesce, may also provide coverage instruments, and the EIB has left open the possibility of expanding its support through intermediated financing mechanisms or guarantees.
Read more of this story at Slashdot.
- OpenAI's Astra Solved Decades-Old Math Problems For $2,000
An anonymous reader quotes a report from Forbes: The cost of producing new results on ten longstanding mathematical problems just fell to $2,000, according to OpenAI, which says its Astra model generated machine-checkable proofs for questions that had resisted human progress for decades. OpenAI published the work on August 1 and used it to give its next major model family a name: Astra. The results run across group theory, high-dimensional geometry, coding theory, quantum complexity, lattice cryptography and extremal combinatorics. They arrived as a 249-page manuscript collection and, alongside it, something the field has not seen attached to an AI claim before at this scale: a machine-checkable certificate for every single result. The problems were not textbook exercises dressed up as discoveries. Each had been open for at least ten years, most of them far longer, and several sit at the center of their subfields:- A construction establishing the existence of non-sofic groups, a question that has occupied group theorists for years.- A disproof of Connes's rigidity conjecture, a long-standing problem in the theory of von Neumann algebras.- An improvement to the general upper bound on sphere-packing density in high dimensions, a bound that had stood since 1978.- Three problems come from the catalogue of open questions left behind by Paul Erdos. The announcement follows another result from May, when OpenAI used a similar reasoning model to produce an original mathematical proof disproving a famous unsolved conjecture in geometry, which was first posed by Paul Erdos in 1946.
Read more of this story at Slashdot.
- An AI-Supervised Remote Exam Went So Badly That 58,000 Students Must Retake It
An anonymous reader quotes a report from Ars Technica: Earlier this summer, nearly 160,000 applicants took the entrance exam for UNAM, Mexico's largest university. For the first time, they did it completely remotely, using a "lockdown" browser and AI-powered webcam proctoring software, over several weeks from late May through early June. It was a disaster. When exam results came in, they bore little resemblance to past results, especially at the top. Between 2021 and 2025, 3.5 percent of test takers scored 100 or more on the 120-question UNAM test. This year, 16.3 percent did so. The story was even worse at the highest of the high end. Between 2021 and 2025, 0.9 percent of test takers scored 110 or more; this year, 5.5 percent did so. The surge in top scores led to accusations of widespread cheating, and UNAM appointed a commission of experts to investigate the situation. The group was given the unwieldy name "la Comision Tecnica de Personas Expertas para la Revision del Proceso de Seleccion de Ingreso a Licenciatura para el Circlo Escolar 2026-2027/1," and it has just submitted its recommendations. The commission believes that the best path forward, given all the concerns, is to administer a "control exam" -- that is, applicants will have to sit for another test, and they will do so in person. This control exam will apply not only to those who secured a spot at UNAM based on this year's test but also to everyone who would have been admitted based on minimum successful scores in their program of study since 2021. About 58,000 people could be affected, and places at UNAM will now depend on the results of the new test. (Details on the control exam should appear soon; classes are currently scheduled to begin on August 10, so everything will have to move quickly unless the school decides to delay classes.) According to Gaceta UNAM, the school's official news publication, the university rector has apologized to honest applicants, since they will now have to prepare for and take the test again despite doing nothing wrong. Still, the control exam is "necessary to give certainty and guarantee equity in access," the rector added.
Read more of this story at Slashdot.
- Schools Are Ditching Chromebooks For MacBooks By the Thousands
Apple says its lower-cost MacBook Neo is beginning to displace Windows laptops and Chromebooks in K-12 schools, with several districts purchasing thousands of units. According to the company's latest earnings call, nearly half of the large MacBook Neo purchases made by U.S. educational institutions last quarter reportedly replaced competing platforms. 9to5Mac reports: Apple's commentary highlighted some large district deployments moving to Neo Pinellas County Schools, one of the largest districts in Florida, which is moving its 25k students off Windows and onto MacBook Neo across its 18 high schools. In Washington, Peninsula School District 401 moved over its 8,000 students from Chromebooks to MacBook Neo. Midwest City-Del City School District in Oklahoma purchased more than 6,000 MacBook Neos to become an all-Apple district for students.
Read more of this story at Slashdot.
- Microsoft Is Bringing Xbox 360 Games to PC
Microsoft reportedly plans to let developers bring Xbox 360 games to PC and next-generation Xbox devices, with a gradual rollout expected between 2027 and 2028. A separate disc-to-digital program would also give players transferable digital licenses tied to their physical Xbox discs, preserving the ability to resell or trade them. The Verge reports: With 360 games, developers can opt into making them backward compatible, and they will have control over things like a game's price and if it's available on Game Pass. The feature is expected to have a "gradual" rollout between 2027 and 2028 "across next-gen devices." The "full launch" of original Xbox games on PC is also set for October 2026; the initial program announced in July included just four games. The document also includes details about a way for players to get a digital version of a game that they already own on a physical disc, which The Verge's Tom Warren reported on in July. The document says that if a player puts an Xbox One or Series game on disc into an Xbox One or Series X console with a disc drive, they'll be granted a digital license that's bound to "that disc and the player's account." The license will stay with a player across Xbox devices, but if the disc "changes hands," the license will transfer to the new person. That should mean that gamers can still trade and sell discs; once the original owner of a disc does so, they can't play the digital version they got from that disc anymore. According to the document, a public beta for the disc-to-digital program was set for July with general availability set for August. We understand Microsoft had originally planned to test its disc-to-digital program with Xbox Insiders in July, but the beta was delayed. It's unclear if the timeline of August general availability is still accurate.
Read more of this story at Slashdot.
- Microsoft CEO Touts His Own DIY AI Project To Wall Street and His 20 Million Followers
theodp writes: During Microsoft's 2026Q4 earnings call, CEO Microsoft Satya Nadella took time to tout a dashboard he personally created using AI from a Morgan Stanley analyst's PDF research report, which suggested a rosy payback for the so-called MAG7's ('Magnificent 7' companies) massive capital expenditures on AI (to which Nadella later added a "not financial advice" disclaimer). "It would be fun for you, Adam. I think one of your colleagues put out an ROIC [Return on Invested Capital] document. I took that document to Copilot, which is a PDF, and I said, 'Build me a new Power BI dashboard, essentially.' But here is the thing. It built a rich semantic model that went into my Fabric with OneLake that brought all the data in from the external sources. In fact, it was current with all the SEC filings of all the MAG7. And then on top of that, the repo itself is in GitHub, but the artifact is sitting in my Copilot as a site. That, to me, is a classic example of an enterprise-wide workflow. I, as a knowledge worker, could go create a dashboard. The data engineer can go to Fabric and find the artifact. The professional developer can go to the repo and find it in GitHub. And by the way, it's all registered with Agent 365. That's a little bit of what Amy is describing as the coming together of a new way to work, even while at the same time, bringing IT, security and manageability of it." After Nadella's show-and-tell drew an underwhelming response during the call ("That's very helpful. Thank you." said the Morgan Stanley analyst whose team's work Nadella scraped with AI), Nadella turned to social media with posts on LinkedIn (12M followers) and Twitter/X (8M followers) to make the case for why his DIY project was such a brilliant demonstration of how AI enables governance, controls, security, development, testing, deployment, maintenance, data analysis/modeling, visualization, usability, and value. "Some more detail on the ROIC Intelligence App I built yesterday and mentioned on today's earnings call," Nadella wrote on LinkedIn. "I took the PDF that Brian Nowak at Morgan Stanley put together for Hyperscale ROIC this week and used Copilot code (coming in our new superapp) with a single prompt + skill (/drill-me) to create the plan, then used autopilot in auto to create the full app (with history, lookups, scenarios, what-ifs, etc). And /rubber-duck to test. And the best part is that all the artifacts are in my enterprise environment. My app is in Copilot, my code is in GitHub Enterprise; all my data pipelines/lake/semantic models are in Fabric. And everything is under Agent 365 IT/Sec/FinOps control! So this is not about Tokenmaxxing or vibe coding. Every step of the way the rails are engineered to create value, making everything a long-term reusable asset, with governance/security, and cost controls. This is the full system to drive business value. Disclosures: This is all pulled from public sources, and for illustrative purposes only...not financial advice! :) Here is the app and architecture..." Not unexpectedly, the accompanying screenshot of a splash page for the BI app and a buzzword-laden complicated architecture diagram drew universal praise from LinkedIn fans, but also a few barbs from less-than-impressed commenters on Nadella's Twitter/X post, some of whom suggested Nadella's project might even represent a jump-the-shark moment for AI mania. "That he doesn't see whats wrong with saying 'My app is in Copilot, my code is in GitHub Enterprise; all my data pipelines/lake/semantic models are in Fabric' is exactly why MS is failing at AI,'" replied @PassingPixels on X/Twitter. "Dude is having to run 5 different systems to emulate babies first vibe code." @zigmund_ignatov added, "Why do we call glorified slide show an app?" @Mathupiriyan quipped, "Looks like Copilot just turned a PDF into a profit crystal ball." Unimpressed, @Markusndnb remarked, "So you created a web page using tons of proprietary MS tools." And @FishyAccounting called on Nadella to show-his-work, saying "Post the prompt or it didn't happen." (btw, Microsoft President Brad Smith similarly declined to provide the prompt for his own self-described amazing AI DIY reporting project that he touted at Microsoft's Shareholder Meeting last December). So, does Nadella's self-promoted AI reworking of someone else's PDF research report strike you as an amazing example of everything that's good about AI, or does it conjure up memories of The Emperor's New Clothes?
Read more of this story at Slashdot.
- Security: Why Linux Is Better Than Windows Or Mac OS
Linux is a free and open source operating system that was released in 1991 developed and released by Linus Torvalds. Since its release it has reached a user base that is greatly widespread worldwide. Linux users swear by the reliability and freedom that this operating system offers, especially when compared to its counterparts, windows and [0]
- Essential Software That Are Not Available On Linux OS
An operating system is essentially the most important component in a computer. It manages the different hardware and software components of a computer in the most effective way. There are different types of operating system and everything comes with their own set of programs and software. You cannot expect a Linux program to have all [0]
- Things You Never Knew About Your Operating System
The advent of computers has brought about a revolution in our daily life. From computers that were so huge to fit in a room, we have come a very long way to desktops and even palmtops. These machines have become our virtual lockers, and a life without these network machines have become unimaginable. Sending mails, [0]
- How To Fully Optimize Your Operating System
Computers and systems are tricky and complicated. If you lack a thorough knowledge or even basic knowledge of computers, you will often find yourself in a bind. You must understand that something as complicated as a computer requires constant care and constant cleaning up of junk files. Unless you put in the time to configure [0]
- The Top Problems With Major Operating Systems
There is no such system which does not give you any problems. Even if the system and the operating system of your system is easy to understand, there will be some times when certain problems will arise. Most of these problems are easy to handle and easy to get rid of. But you must be [0]
- 8 Benefits Of Linux OS
Linux is a small and a fast-growing operating system. However, we can’t term it as software yet. As discussed in the article about what can a Linux OS do Linux is a kernel. Now, kernels are used for software and programs. These kernels are used by the computer and can be used with various third-party software [0]
- Things Linux OS Can Do That Other OS Cant
What Is Linux OS? Linux, similar to U-bix is an operating system which can be used for various computers, hand held devices, embedded devices, etc. The reason why Linux operated system is preferred by many, is because it is easy to use and re-use. Linux based operating system is technically not an Operating System. Operating [0]
- Packagekit Interview
Packagekit aims to make the management of applications in the Linux and GNU systems. The main objective to remove the pains it takes to create a system. Along with this in an interview, Richard Hughes, the developer of Packagekit said that he aims to make the Linux systems just as powerful as the Windows or [0]
- What’s New in Ubuntu?
What Is Ubuntu? Ubuntu is open source software. It is useful for Linux based computers. The software is marketed by the Canonical Ltd., Ubuntu community. Ubuntu was first released in late October in 2004. The Ubuntu program uses Java, Python, C, C++ and C# programming languages. What Is New? The version 17.04 is now available here [0]
- Ext3 Reiserfs Xfs In Windows With Regards To Colinux
The problem with Windows is that there are various limitations to the computer and there is only so much you can do with it. You can access the Ext3 Reiserfs Xfs by using the coLinux tool. Download the tool from the official site or from the sourceforge site. Edit the connection to “TAP Win32 Adapter [0]
- 9front THIS WAS SUPPOSED TO BE FUN! released
The best operating system in the world, 9front, released its latest version, THIS WAS SUPPOSED TO BE FUN!. As Im sure you know, 9front is a fork of plan9, and one thats actually consistently maintained and developed. It brings an improved affinewarp API for scaling and zooming, a new Synaptics driver, and a new driver for UPSs. Theres also a new tool called gdbfs, which allows you to mount a remote gdb at /proc. Of course, theres much more than this, including the usual list of bugfixes and small changes. Few of us are worthy of using 9front, but if you are, you already know where to get it and how to update.
- MkLinux and the pimped-out Apple Workgroup Server 9150
Cameron Kaisers articles are always a right treat, and this ones no different. Its about running MkLinux on the Apple Workgroup Server, the regular Mac rebadged into a server product and predecessor to Apples first real server product, the Apple Network Server running AIX. The Workgroup Servers were originally marketed with Apples UNIX variant, A/UX, but with this operating system not surviving the transition to PowerPC processors, Apple started offering other options. A/UX ultimately didnt survive the 1994 68K transition to PowerPC, but in 1996 Apple publicly offered another option: run Linux, using the Mach microkernel. Although MkLinux emerged after the 9150s discontinuation, its still just an overgrown NuBus Power Mac, so between more RAM, a beefier CPU upgrade and various video cards, by the end of this article we ought to have a configuration that gives us the best of two worlds — classic MacOS and MkLinux — in one server. ↫ Cameron Kaiser I never really stopped to think that MkLinux really was, but its a lot more interesting than just an early Linux port to PowerPC Macs. In fact, it ran the monolithic Linux kernel as a userspace process on top of the Mach microkernel, which made it a valuable testing ground for Apples later XNU efforts. Its wild that Apple had an official, blessed Linux operating system as early as the mid 90s, even if its performance was apparently not particularly great due to the overhead of running it atop Mach and Jobs canned it as soon as he came back to the company.
- A big win for Android interoperability!
Whenever the EU steps in to regulate the big technology companies, the response from news outlets and bloggers (often funded or outright owned by right-wing extremists) is to claim its just a bunch of dumb , tech-illiterate bureaucrats telling the vastly more intelligent and superior technology companies what to do. Of course, this is just propaganda. Case in point: Something big just happened. As the Open Home Foundation’s Android developer for Home Assistant, I was invited by the European Commission (EC) to consult on Android interoperability. The call for feedback was part of the Commission’s work under the Digital Markets Act (DMA). For anyone unfamiliar, the DMA is an EU law that defines and regulates “gatekeeper platforms” – those that offer “core” services like search engines, app stores, and messaging platforms – to make digital markets fairer and more open to competition. As you might imagine, I had plenty to say about Google’s restrictions on Android, especially the tech giant limiting wake word detection to its own Gemini assistant, a concern I surfaced in our Home Assistant 2026.3 Release Party. To put it plainly, Google had no grounds for limiting Android interoperability in the first place, other than to give itself the upper hand. We knew our community deserved better, and that’s what we told the Commission. The result? The EC listened to us and all the other organizations that contributed. On July 16, 2026, the European Commission adopted a decision under the DMA that requires Alphabet (Google’s parent company) to open up eleven Android features, including always-on wake word detection, ambient sensor access, and screen automation – to all assistants, on equal terms. ↫ Timothy Nibeaudeau Whats really interesting is just how deeply technical and detailed this new EU decision really is. Timothy Nibeaudeau laid out the technical details of how wake word detection on Android works for the European Commission in short, a DSP runs a really tiny model in a process isolated from the network to detect just a specific wakeword, and only once that wakeword is detected does it hand things off to a larger model running on the actual main SoC and the ECs new decision accurately and precisely describes this method and wrote their decision to take every detail into account. When I was invited to share these limitations (and others) with the Commission, I didn’t hold back. Which is why we were thrilled to discover an impressively precise and technically accurate decision from the EU: it correctly describes the two-stage wake word architecture, the DSP, the isolated process, and the role coupling. The report went down to details we only figured out by reading Androids source code ourselves. ↫ Timothy Nibeaudeau The idea that the European Union and Commission are a bunch of dumb, illiterate bureaucrats imposing impossible, unworkable, unrealistic demands on poor, hardworking, honest technology companies is a bunch of propaganda paid for by these very same companies, and every decision and ruling by the EU around the Digital Markets Act further confirms this by having strong technological underpinnings and being based on the actual workings of the technologies they cover. The EU does a lot of dumb things as any government body does but you dont get to enjoy a nearly two-thirds approval rating for nothing, especially not in the face of the state of the world today. The Digital Markets Act has already proven to be incredibly effective, and this is exactly why the right-wing propaganda against it is reaching an ever crazier fever pitch. When basic consumer protection legislation makes the most powerful companies, right-wing media empires, and even the most powerful country in the world throw tamper tantrums like toddlers, you know youre doing something right.
- NetBSD 11.0 released
NetBSD, the operating system specifically designed to run on anything from a supercomputer to a toothpick, just released version 11.0. Theres a ton of changes and improvements here, such as a brand new port to RISC-V, which supports a number of the more popular RISC-V SoCs (sadly, not the one I have just yet). NetBSD 11.0 also adds initial support for the Qualcomm Snapdragon X Elite platform, as well as a port to the virt68k platform, which means the Motorola 68000 port in QEMU using paravirtualized devices. Speaking of virtualisation, theyre also introducing a new MICROVM kernel for x86: New MICROVM kernel for x86, supporting both i386 and amd64, NetBSD 11.0 introduces a dedicated MICROVM kernel designed for extremely fast virtual machine boot, leveraging PVH boot, VirtIO MMIO, and multiple kernel optimizations, it can boot in about 10 ms on 2020-era x86 CPUs. ↫ NetBSD 11.0 release notes Theres also improved support for Linux system calls in compat_linux, the npf firewall, and much more. Of course, the list of other improvements, buigfixes, and smaller changes is long, including many changes for old, outdated, or otherwise odd architectures and platforms, as is the NetBSD way. Which other operating system proudly lists substantial improvements to their PA-RISC, Motorola 68000, and Alpha ports, among others?
- CallMeMaybe: runtime reflection library built on C++26 static reflection
I have a policy to effectively never link to YouTube videos. Ill gladly make an exception for this one. Reflection is one of the most powerful concepts in Computer Science. Unfortunately, not every programming language is blessed enough to have it. In the 1980s, one company, Symbolics took the concept to the logical extreme. By representing EVERYTHING as objects; they created the most powerful (and inadvertently) least private operating system ever created! The company collapsed, but the ideas live on. Some modern languages got a full dose of reflection. Some…weren’t so lucky. I ranked them all, and in the end I’ll show you how I dragged C++ up a tier with my brand new runtime reflection library, CallMeMaybe! ↫ Laurie Wired The GitHub description of CallMeMaybe: CallMeMaybe (CMM) is a C++ runtime reflection library built on top of P2996 static reflection introduced in C++26. CMM purposefully mirrors many of the std::meta functions to provide a uniform interface, but allows runtime introspection, dynamic invocation, and instantiation by building a runtime reflection registry. Class members can be automatically traversed and reflected by simply adding ] as an annotation. CMM implements a custom type system to completely avoid RTTI requirements. ↫ CallMeMaybe GitHub page My YouTube linking policy will remain in place.
- Develop cross-platform CLI and GUI tools with Tcl/Tk
Tcl, or the Tool Command Language , created and released by John Ousterhout in 1990, deserves a place among the greatest products of the human mind. Especially when combined with its better known graphical user interface Toolkit — Tk. In 1997 Ousterhout was awarded the ACM Software System Award for Tcl/Tk, an award given to institutions or individuals recognized for developing software systems with a lasting influence, reflected in contributions to concepts, in commercial acceptance, or both. ↫ Armen Barsegyan Everything you could ever possibly want to know about Tcl/Tk. Theres nothing to add here; if this is up your alley and you know if it is just go ahead and read it, and stop wasting time here.
- LLVM toolchain coming to OpenBSD/sparc64 and SPARC Solaris (snv_151a)
Speaking of OpenBSD: Yes, you read that right. Modern development tools in the form of the LLVM compiler infrastructure is well on its way to supporting OpenBSD/sparc64 along with other more conventional architectures. The support is now ready for testing, via a patch set presented by Kirill A. Korinsky in a message to the tech@ mailing list, with the subject LLVM toolchain for sparc64. ↫ Peter N. M. Hansteen On a related note, the the entire LLVM stack (version 19.1.7, including llvms binutils, clang, ldd) has also been ported to the SPARC version of Solaris 11 Express (snv_151a). This should make it possible to also port things like Rust and Zig to this same version of Solaris on SPARC, which is good news, because this release supports SPARC hardware long dropped by the current Solaris builds from Oracle.
- Dead software walking: the ongoing evolution of relayd(8) and httpd(8)
As I mentioned in my OpenBSD 7.8 highlights post, development of relayd(8) and httpd(8) had stalled. Many diffs appeared on the tech@ mailing list from different contributors, but few were committed into the repository. The main reason was simple: Established OpenBSD developers weren’t interested in these daemons anymore. Call it momentum, or timing. Around the same time, kirill@ and I started working on these daemons more actively. We both use them regularly and have real-world use cases. I support customers with OpenBSD setups that often involve complex httpd(8) and relayd(8) configurations. This practical need motivated me on many levels. ↫ Rafael Sadowski Theyve managed to do a ton of work on these two daemons, fixing many long-standing issues and reviewing tons of stalled patch submissions, while also modernising the code and adding new features. Its great to see people contribute significant time and energy to fixing up the tools they use for everyone elses benefit.
- Microsoft claims its going to improve Windows 11s context menus
When I had to use Windows 11 for a month because you people paid me to do so, the one seemingly small thing that really ground my gears were Windows 11s terrible right-click (context) menus. They were full of stuff I didnt put there, slow to open, and in some places, a modern Windows 11 context menu would have its own old Win32 context menu with even more stuff. It seems Microsoft is finally going to fix all of this. This new compact menu will be much faster and more reliable, as it foregoes needing to load in all the third-party actions that slow it down currently. Additionally, at the Windows Insider Meetup in London, Microsoft showed me a new context menu customization feature coming soon that will let users configure what apps and actions appear in the right-click menu. ↫ Zac Bowden at Windows Central Look, I know to us non-Windows users this seem like an incredibly small and dumb thing to focus on, but when your operating system is as much of a trashfire as Windows has become, improved context menus are massive improvements that make a meaningful difference. Of course, Microsoft makes these types of promises all the time, so Ill believe it when I see it.
- Chrome gets live patching!
We may all have a disdain for Chrome OSNews users probably use Chrome a lot less than the average public but that doesnt mean the browser doesnt sometimes do interesting things other browsers should copy. Chrome is in the the process of increasing its release cadence, but getting users to restart their browser more often than they already do to apply these higher number of updates is going to be a problem. As such, Google is working on something that seems quite obvious now that theyve talking about it: Investing in dynamic patching! that will eliminate the need for a full browser restart in most cases. By leveraging Chrome’s multi-process architecture, dynamic patching sequentially replaces background child processes (like the Renderer and GPU) with updated binaries on the fly. Stay tuned to learn more as we research and develop this feature. ↫ Chrome Security Team Chrome was the first browser to use multiple processes, isolating tabs from one another so that if one website or tab went haywire, your other tabs would be unaffected. It makes perfect sense to have the browser use new, updated binaries for new tabs you open as soon as they become available, in a sort of ship-of-Theseus kind of approach to updating. Of course, you cant postpone the inevitable forever, but this should provide real-world benefits to users. Neat. The linked blog post goes into much more detail about other things too, like various low-level mitigations to prevent bugs and security issues from causing too much harm.
- GNU Binutils 2.47 Released with New RISC-V Features, Linker Improvements, and Reproducible Builds
by George Whittaker
The GNU Project has officially released GNU Binutils 2.47, the latest version of its essential collection of binary development tools for Linux and other Unix-like systems. The release delivers numerous bug fixes alongside new assembler, linker, and disassembler capabilities, expanded RISC-V support, reproducible source archives, and continued modernization of the GNU toolchain.
Used by developers worldwide, GNU Binutils forms a core part of the software development ecosystem, providing the low-level tools needed to assemble, link, inspect, and manipulate executable programs and object files.
What Is GNU Binutils?
GNU Binutils is a collection of command-line utilities that work closely with compilers such as GCC and Clang. While a compiler translates source code into object files, Binutils provides the tools needed to transform those object files into executable programs and libraries.
The package includes well-known utilities such as:
ld (GNU Linker) as (GNU Assembler) objdump objcopy readelf nm strip ar strings
Together, these tools are used daily by Linux distributions, embedded developers, operating system projects, and software engineers building applications in C, C++, Rust, Go, and many other languages.
Expanded Support for RISC-V
One of the biggest improvements in Binutils 2.47 is expanded support for the rapidly growing RISC-V architecture.
The release adds support for several additional standard RISC-V extensions, allowing developers targeting modern RISC-V processors to work with newer instruction sets and hardware capabilities. These additions continue the GNU toolchain's strong commitment to one of the fastest-growing open processor architectures.
As more Linux distributions, development boards, and enterprise hardware adopt RISC-V, keeping development tools current is becoming increasingly important.
New Assembler Options
GNU Assembler (gas) gains several useful enhancements in version 2.47.
Among the most notable is a new command-line option:
--reloc-section-sym=[all|internal|none]
This option gives developers finer control over how relocations referencing locally bound symbols are converted to section symbols, improving flexibility for certain assembly and linking workflows.
The release also introduces numerous assembler improvements across multiple CPU architectures.
Better Disassembly for AArch64
Developers working with Arm-based systems also benefit from new functionality.
Go to Full Article
- GOG Officially Expands Linux Support with Native Galaxy Client in Development
by George Whittaker
After years of requests from the Linux gaming community, GOG has officially confirmed that it is developing native Linux support for the GOG Galaxy launcher. The announcement marks one of the biggest shifts in the company's history and signals a stronger commitment to Linux as a first-class gaming platform. While GOG has offered DRM-free Linux game downloads since 2014, its Galaxy launcher has remained exclusive to Windows and macOS—until now.
Although the company has not announced a release date, GOG says Linux has become a major area of investment, with development already underway.
A Long-Requested Feature Finally Becomes Reality
Native GOG Galaxy support has consistently ranked among the most requested features from Linux users. Until now, players who wanted to use Galaxy's library management, cloud saves, achievements, and automatic updates had to rely on compatibility layers or community-developed launchers.
In a statement to GamingOnLinux, GOG joint CEO Krzysztof Papliński said the company has hired a dedicated specialist and is actively exploring the best approach for bringing Galaxy to Linux. He described Linux as "one of the topics we hear the most about from our community," emphasizing that the project is now an active development priority.
Why GOG Galaxy Matters
Unlike the web-based game downloads that Linux users already have access to, GOG Galaxy serves as a full-featured game management application.
The launcher currently offers features including:
Automatic game installation and updates Cloud save synchronization Achievement tracking Playtime statistics Game library organization Integrated storefront browsing Friends lists and social features Cross-platform launcher integration
Today, Linux users typically access these capabilities through community projects such as Heroic Games Launcher, Lutris, or Bottles. A native Galaxy client would provide an officially supported alternative with direct integration into GOG's ecosystem.
Linux Is No Longer an Afterthought
GOG's announcement reflects the growing importance of Linux gaming over the past several years.
The rapid adoption of Valve's Steam Deck, continuous improvements to Proton, and increasing hardware compatibility have significantly expanded Linux's role in PC gaming. As Linux's share of Steam users has grown, more developers and publishers have begun treating the platform as a viable target rather than a niche operating system.
For GOG, supporting Linux more fully aligns with its philosophy of giving users greater control over their purchased games.
Go to Full Article
- Linux Kernel 7.1.4 Released with Bug Fixes, Security Updates, and Hardware Improvements
by George Whittaker
Greg Kroah-Hartman has announced the release of Linux Kernel 7.1.4, the latest stable maintenance update for the Linux 7.1 series. As with other stable kernel releases, version 7.1.4 focuses on fixing bugs, improving hardware compatibility, and addressing security and reliability issues without introducing new features. The update became available on July 18, 2026, and users of the Linux 7.1 branch are encouraged to upgrade as soon as possible.
Rather than changing the kernel's feature set, Linux 7.1.4 delivers dozens of targeted fixes collected from developers across multiple kernel subsystems, helping ensure a more stable experience for desktops, servers, embedded devices, and cloud deployments.
Another Important Stable Maintenance Release
The Linux stable branch exists to provide safe updates between major kernel versions. Every stable release undergoes review before being published and contains fixes that have already been tested in the mainline kernel.
Linux 7.1.4 continues this process by incorporating patches that resolve regressions, improve system stability, and fix issues reported by users since the release of Linux 7.1.3.
For most users, these maintenance updates are recommended because they improve reliability without altering existing functionality.
Bug Fixes Across Multiple Kernel Subsystems
Like previous stable releases, Linux 7.1.4 includes fixes spanning many areas of the kernel.
The update addresses issues affecting:
Memory management File systems Networking Device drivers Architecture-specific code Core kernel infrastructure USB and storage subsystems
These targeted patches help eliminate crashes, improve compatibility with newer hardware, and resolve edge cases that may only appear under specific workloads.
Improved Hardware Compatibility
One of the ongoing goals of Linux stable releases is expanding support for existing and newly released hardware.
Linux 7.1.4 includes updated drivers and compatibility fixes for various devices, helping improve support for:
Graphics hardware Storage controllers Networking devices USB peripherals Laptop components ARM development boards
Although no major driver additions are expected in a maintenance release, incremental improvements like these often resolve hardware-specific bugs reported by users after earlier releases.
Security and Reliability Updates
Stable kernel releases also include security-related fixes that have been accepted into the maintenance branch.
Go to Full Article
- Firefox 153 Released with HDR Video, Smarter PDF Tools, Better Privacy, and New Linux Improvements
by George Whittaker
Mozilla has officially released Firefox 153, bringing another round of improvements to its open-source web browser. The latest version introduces new multimedia capabilities, enhanced PDF editing tools, stronger privacy protections, better support for modern web technologies, and several features aimed at improving the browsing experience across Linux, Windows, and macOS. Firefox 153 became available on the stable release channel on July 21, 2026.
While this isn't a major redesign, Firefox 153 delivers a collection of practical updates that benefit both everyday users and web developers.
HDR Video Playback Comes to Windows
One of the headline features in Firefox 153 is support for High Dynamic Range (HDR) video playback on compatible Windows systems.
Users with HDR-capable displays and Windows HDR enabled can now enjoy richer colors, improved contrast, and brighter highlights when watching supported online video content. Mozilla notes that certain laptop displays offering only "HDR video streaming" are not currently supported, and some HDR videos recorded on mobile phones may still have limitations.
Although this feature is Windows-specific, it represents another step toward bringing Firefox in line with modern multimedia standards.
PDF Editing Becomes Even More Powerful
Mozilla continues expanding Firefox's built-in PDF editor, eliminating the need for third-party applications in many situations.
Firefox 153 introduces the ability to:
Merge multiple PDF documents Insert images as new PDF pages Continue using existing editing tools such as annotations, page organization, and text editing
These additions make Firefox an even more capable document viewer and editor, especially for users who frequently work with PDF files.
Stronger Privacy and Permission Controls
Privacy remains one of Firefox's biggest selling points, and version 153 introduces several enhancements designed to give users more visibility and control over website permissions.
New improvements include:
A visual indicator when a website is actively accessing your location More restrictive default permissions for browser extensions accessing local files Local Area Network (LAN) restrictions enabled by default for all users
These changes reduce unnecessary exposure of local resources while making it easier to understand what websites and extensions can access.
Experimental JPEG XL Support
Firefox 153 also adds experimental support for the JPEG XL image format, which many developers consider a promising successor to older image standards.
JPEG XL offers several advantages, including:
Go to Full Article
- NanoKVM-Go Brings AI-Powered Hardware Control to Linux with a Compact USB-C KVM
by George Whittaker
Sipeed has introduced NanoKVM-Go, a compact USB-C KVM-over-IP device that combines remote hardware management with AI integration. Designed for Linux, Windows, macOS, and other USB-C devices, NanoKVM-Go allows users to remotely view and control a system through a web browser while exposing its keyboard, mouse, and display functions to AI agents via the Model Context Protocol (MCP).
Unlike traditional KVM-over-IP solutions that require multiple cables and dedicated networking hardware, NanoKVM-Go simplifies the setup into a single USB-C connection, making remote administration and AI-assisted automation more accessible for developers, system administrators, and homelab enthusiasts.
A Portable USB-C KVM
NanoKVM-Go is roughly the size of a smartwatch, measuring about 45 × 40 × 15 mm, yet it combines several functions into a single device.
Key hardware features include:
USB-C connection for video, audio, keyboard, mouse, and power Wi-Fi 6 connectivity Browser-based remote management Support for virtual USB storage Built-in Tailscale integration for secure remote access Fanless aluminum enclosure with low power consumption
Because it connects over USB-C using DisplayPort Alt Mode, the device can manage a wide variety of hardware without requiring software installation on the target system.
Designed for Linux and Beyond
NanoKVM-Go supports numerous USB-C devices, including:
Linux desktops and laptops Windows PCs macOS systems Mini PCs Steam Deck Android devices with DisplayPort Alt Mode iPhone 15 and newer models Tablets supporting USB-C video output
For Linux users, this provides an easy way to perform BIOS configuration, operating system installation, kernel debugging, or remote troubleshooting—even when the operating system is unavailable.
AI Integration Through MCP
One of NanoKVM-Go's defining features is its AI-native design.
Rather than simply streaming a desktop remotely, the device exposes its KVM functions as an MCP (Model Context Protocol) server, allowing compatible AI agents to interact with the connected computer using hardware-level keyboard and mouse input.
This enables AI systems to:
View the screen Move the mouse Type on the keyboard Launch applications Navigate user interfaces Complete repetitive desktop workflows
Because control happens at the hardware level, AI agents can interact with systems regardless of the operating system installed.
Go to Full Article
- AI Uncovers a 15-Year-Old Linux Kernel Root Vulnerability Hidden Since 2011
by George Whittaker
Artificial intelligence has helped uncover one of the most significant Linux kernel security flaws in recent years. Security researchers at Nebula Security announced the discovery of GhostLock (CVE-2026-43499), a critical local privilege escalation vulnerability that remained hidden in the Linux kernel for approximately 15 years before being identified by the company's AI-powered vulnerability research platform, VEGA.
The vulnerability affects Linux kernels dating back to version 2.6.39 (2011) and allows an unprivileged local user to obtain full root privileges on vulnerable systems. Its discovery not only highlights the importance of timely kernel updates but also demonstrates how AI is beginning to transform vulnerability research.
What Is GhostLock?
GhostLock is a use-after-free (UAF) vulnerability located in the Linux kernel's futex (fast userspace mutex) implementation.
Futexes are synchronization primitives that allow user-space applications to efficiently coordinate access to shared resources while minimizing expensive kernel interactions. Because they are widely used throughout Linux, any flaw within this subsystem can have broad security implications.
According to Nebula Security, incorrect handling of the remove_waiter() function can leave behind a dangling kernel pointer that an attacker can manipulate to execute arbitrary code with kernel privileges.
A Reliable Path to Root Access
One of the reasons GhostLock has attracted so much attention is the reported reliability of the exploit.
Researchers demonstrated that an attacker with nothing more than a standard local user account can escalate privileges to root in roughly five seconds, with a reported success rate of 97% on vulnerable systems.
Unlike many kernel exploits that are unstable or require highly specific system configurations, GhostLock appears to be both practical and repeatable, making it particularly concerning for administrators.
Container Escapes Are Also Possible
The implications extend beyond traditional Linux desktops and servers.
Researchers report that GhostLock can also be used to escape containers and compromise the underlying host operating system. Because containers share the host kernel, a successful privilege escalation inside a container can potentially grant root access to the host itself.
This makes the vulnerability especially important for environments running:
Go to Full Article
- Azure Linux 4.0 Released: Microsoft Expands Its Enterprise Linux Platform Beyond the Cloud
by George Whittaker
Microsoft has officially unveiled Azure Linux 4.0, the latest version of its open-source Linux distribution designed for cloud infrastructure, enterprise workloads, and modern data centers. Formerly known as CBL-Mariner, Azure Linux has powered Microsoft's internal cloud services for years, but version 4.0 marks its biggest evolution yet by becoming a general-purpose server operating system that organizations can deploy both inside and outside Azure.
The release introduces updated core components, expanded hardware support, a predictable long-term lifecycle, and improved compatibility for enterprise environments, reinforcing Microsoft's growing investment in the Linux ecosystem.
A New Chapter for Azure Linux
Azure Linux began as Microsoft's internal operating system for Azure services, containers, and cloud infrastructure. Over time, it evolved into the foundation for many Azure-hosted workloads.
With Azure Linux 4.0, Microsoft is positioning the distribution as a broader enterprise Linux platform rather than one limited to Azure infrastructure. The operating system is now available through Azure virtual machine images, container images, and downloadable ISO files for testing and deployment in a wider range of environments.
Built for Enterprise and Cloud Workloads
Unlike desktop-focused Linux distributions, Azure Linux is optimized for infrastructure, virtualization, containers, and cloud-native applications.
Typical deployment scenarios include:
Cloud virtual machines Kubernetes clusters Container hosts AI infrastructure Edge computing Enterprise servers
Microsoft has designed the distribution to provide a consistent operating system foundation across Azure services while remaining suitable for on-premises deployments.
Updated Core Components
Azure Linux 4.0 modernizes much of the operating system's software stack.
Highlights include:
Linux Kernel 7.0 glibc 2.42 OpenSSL 3.5 Python 3.13 OpenSSH 10 dnf5 as the default package manager
These updates improve hardware compatibility, application support, security, and overall system performance while providing developers with a more current software platform.
Security Remains a Primary Focus
Security continues to be one of Azure Linux's defining characteristics.
Version 4.0 includes:
Go to Full Article
- KDE Plasma 6.7.1 Released with Stability Fixes, UI Improvements, and Better Wayland Reliability
by George Whittaker
The KDE Project has officially released KDE Plasma 6.7.1, the first maintenance update for the Plasma 6.7 desktop environment. Rather than introducing major new features, this point release focuses on polishing the desktop with a broad collection of bug fixes, translation updates, and performance improvements aimed at making Plasma 6.7 more reliable for everyday use.
As with previous Plasma maintenance releases, KDE developers have concentrated on resolving issues reported by the community soon after the launch of Plasma 6.7, ensuring users receive a smoother and more stable desktop experience.
A Maintenance Release Focused on Stability
KDE Plasma 6.7 introduced numerous new capabilities, including per-display virtual desktops, Wayland session restore, improvements to Plasma Bigscreen, and a refreshed theming system. Plasma 6.7.1 builds on that foundation by addressing early regressions and fine-tuning the overall desktop experience.
The update primarily delivers:
Bug fixes across core Plasma components Updated translations Performance refinements Improved desktop reliability Better overall user experienceImprovements Across the Desktop
Several of Plasma's core applications and components receive fixes in this release.
Notable improvements include:
Better reliability in the Kickoff Application Launcher Fixes for Discover, KDE's software manager Improvements to the KWin window manager Various panel and desktop behavior corrections Better handling of notifications and user interface elements
While most of these changes are relatively small on their own, together they help eliminate many of the rough edges users may have encountered after upgrading to Plasma 6.7.
Wayland Continues to Mature
Wayland remains the primary development focus for KDE Plasma, and version 6.7.1 continues refining the experience.
The update includes fixes affecting:
Window management Session stability Input handling Display behavior General compositor reliability
Over the past several Plasma releases, KDE developers have steadily shifted their attention toward making Wayland the best possible experience while continuing limited maintenance for X11.
Translation Updates for Global Users
Like most KDE maintenance releases, Plasma 6.7.1 incorporates a fresh batch of translation updates contributed by volunteers from around the world.
These updates improve:
Go to Full Article
- PorteuX 2.6 Released with Linux 6.19, TLP Support, and Smarter Hardware Optimization
by George Whittaker
The PorteuX project has officially released PorteuX 2.6, bringing a new round of updates to the lightweight Slackware-based Linux distribution. Designed to be fast, portable, modular, and immutable, PorteuX continues to appeal to users who want a complete desktop operating system that can run efficiently from a USB drive or other removable media. The latest release introduces a newer Linux kernel, improved power management, updated desktop environments, and numerous performance and usability improvements.
Released just two months after PorteuX 2.5, version 2.6 focuses on refining the user experience while maintaining the distribution's minimalist philosophy.
Powered by Linux Kernel 6.19
At the heart of PorteuX 2.6 is the Linux 6.19 kernel series, bringing improved hardware compatibility, updated drivers, security fixes, and better support for modern processors and peripherals.
The updated kernel helps ensure smoother operation on both newer desktop hardware and laptops while continuing PorteuX's emphasis on speed and low resource usage.
Better Battery Life with TLP Support
One of the headline features in PorteuX 2.6 is support for TLP, the popular command-line utility used to optimize laptop battery life.
Available through the PorteuX AppStore, TLP automatically adjusts various power-saving settings, including CPU behavior and device power management, helping extend battery life without requiring constant manual tuning.
For laptop users, this addition makes PorteuX an even more attractive lightweight operating system.
Automatic CPU Microcode Loading
The release also introduces automatic loading of Intel and AMD CPU microcode when booting in non-fresh modes.
Microcode updates help address processor bugs, improve stability, and deliver security fixes directly from CPU manufacturers. Automating this process reduces the need for manual configuration while ensuring supported systems benefit from the latest firmware improvements.
Updated Desktop Environments
PorteuX continues to offer multiple desktop editions, each updated to recent upstream releases.
Version 2.6 includes:
GNOME 49.4 KDE Plasma 6.5.5 Xfce 4.20 Cinnamon 6.6 LXQt 2.3 MATE 1.28.2 COSMIC 1.0.8 LXDE 0.11.1
This broad selection allows users to choose between modern feature-rich desktops and extremely lightweight environments depending on their hardware and workflow.
Performance Improvements Throughout the System
Although PorteuX has always emphasized performance, version 2.6 introduces additional optimizations behind the scenes.
Developers report improvements including:
Go to Full Article
- CachyOS June 2026 ISO Released with Hyprland Noctalia, Faster Performance, and Smarter System Tools
by George Whittaker
The CachyOS team has released the June 2026 ISO, delivering another feature-packed update for its Arch Linux-based distribution. Known for its aggressive performance optimizations and gaming-focused approach, CachyOS continues refining both the user experience and the underlying system with improvements ranging from compiler tuning to installer enhancements and new desktop options.
As the project's fourth major ISO refresh of the year, the June release emphasizes speed, usability, and modern hardware support while remaining fully compatible with Arch Linux's rolling-release ecosystem.
A New Hyprland Noctalia Desktop Experience
One of the headline additions is a new Hyprland Noctalia desktop option available directly from the installer.
Noctalia provides a polished, preconfigured Hyprland environment with a modern appearance, allowing users to enjoy a highly customizable Wayland compositor without spending hours configuring dotfiles after installation. The installer even includes a preview so users can see the desktop before selecting it.
For users interested in lightweight, keyboard-driven workflows, this new option makes Hyprland much more approachable.
Performance Optimizations Continue
Performance remains the defining characteristic of CachyOS, and the June 2026 release introduces several additional optimizations.
Notable improvements include:
Python packages now built using extended Profile-Guided Optimization (PGO) A new GCC branch prediction tuning patch designed to improve performance on modern Intel and AMD processors A fix for an OpenBLAS regression affecting high-core-count CPUs Additional package-level optimizations throughout the distribution
These updates continue CachyOS's philosophy of extracting as much performance as possible from modern hardware.
Improved Package Management and Security
The June release also includes several important changes to package management.
One notable enhancement is network isolation for Pacman scriptlets and hooks, preventing installation scripts from accessing the network by default. This improves security during package installation and reduces the risk of unexpected behavior.
Additionally:
proton-cachyos has been renamed to proton-cachyos-native The installer no longer includes the paru AUR helper Users are now encouraged to use Shelly, available with both graphical and command-line interfacesInstaller Improvements
The installation experience has received considerable attention in this release.
Updates include:
Go to Full Article
|
