Recent Changes - Search:
NTLUG

Linux is free.
Life is good.

Linux Training
10am on Meeting Days!

1825 Monetary Lane Suite #104 Carrollton, TX

Do a presentation at NTLUG.

What is the Linux Installation Project?

Real companies using Linux!

Not just for business anymore.

Providing ready to run platforms on Linux

Show Descriptions... (Show All/All+Images) (Single Column)

LWN.net

  • [$] Changes in shadow-utils password-expiration features
    The shadow-utilsproject provides the tools that handle /etc/shadow,/etc/passwd, and other related databases; ingeneral, it manages users and groups on many Linux systems. While mostsoftware releases are notable for what is added, the recent shadow-utils 4.20.0release is most noteworthy for what has been removed. Specifically,several utilities and functionality related to periodic passwordexpiry, which were deprecated in the December 2025 4.19.0release, have been removed as planned. It is still possible to managesome aspects of password aging with shadow-utils, but organizationsthat depend on such features should start planning for their completeremoval within a few years.


  • The Software Stewardship Lab launches
    The Software Stewardship Lab, anonprofit organization based in Scotland, has announcedits existence.
    Our current research focuses are:
    Software supply chain security — We're working on an observatory that allows users to identify and monitor the world's critical Open Source packages in real time, including previously hidden parts of the dependency graph. Maintainer burnout — Our report on burnout in Open Source has been well-received. We're working on yearly follow-ups, plus a companion report on how AI is affecting maintainer burnout.
    Moving forward, the Lab's experts will direct funding to and supervise OpenSource sustainability researchers doing critical work. We are alreadyworking with universities to teach the next generations of software supplychain experts.


  • LightDM lives: version 1.33.0 released
    Version1.33.0 of the LightDMdisplay manager has been released. This is the firstrelease in four years: the project had been sponsored by Canonicalbut was effectivelyunmaintained in recent years. It has been transferredto a new community repository and is now maintained by JoshuaPeisach and Neal Gompa.

    The new release includes Qt6 support, code optimizations, and alist of other fixes that had been in limbo pending a new release.


  • Stable kernel releases for Friday with a single bug fix
    Greg Kroah-Hartman has announced the release of the 6.12.102, 6.6.150, 6.1.182, 5.15.215, 5.10.264 stable kernels. This round ofstable kernel releases contains a fix for a single bug, foundby Thomas Lamprecht, that affected several of the kernels released yesterday inresponse to a securityvulnerability (CVE-2026-68480)that could allow data leakage through speculative execution.

    The 6.12.102 release adds the backported security fix for CVE-2026-68480 to the 6.12series. As always, users are advised to upgrade.



  • Security updates for Friday
    Security updates have been issued by AlmaLinux (compat-libtiff3, fence-agents, firefox, freerdp, frr, gimp, gstreamer1-plugins-bad-free, java-25-openjdk, kernel, kernel-rt, ldns, libgcrypt, libXfont2, nodejs:22, nodejs:24, p11-kit, pipewire, resource-agents, sg3_utils, thunderbird, and yelp), Debian (async-http-client, jq, kernel, linux-6.1, linux-6.12, redis, and udisks2), Fedora (abrt, chromium, coreutils, curl, freeipa, gst-devtools, gst-editing-services, gstreamer1, gstreamer1-doc, gstreamer1-plugin-libav, gstreamer1-plugins-bad-free, gstreamer1-plugins-base, gstreamer1-plugins-good, gstreamer1-plugins-ugly-free, gstreamer1-rtsp-server, ImageMagick, kernel, libXfont2, php, python-gstreamer1, samba, tcpreplay, and trafficserver), Mageia (firefox, nss, rootcerts, python-django, and thunderbird), Oracle (freerdp, gimp, gpsd, kernel, kernel-uek, and osbuild-composer), Red Hat (buildah and container-tools:rhel8), Slackware (libXfont2 and p11-kit), and SUSE (amazon-ecs-init, azure-storage-azcopy, bind, bouncycastle, cockpit-repos, cockpit-subscriptions, dnsdist, ffmpeg-4, hawk-apiserver, nodejs22, nodejs24, OpenImageIO, openssl-1_1, openssl-3, perl-Mojo-JWT, php8, rsyslog, sssd, and wireshark).


  • Six stable kernels with a security fix
    Greg Kroah-Hartman has announced the release of the 7.1.7, 6.18.43, 6.6.149, 6.1.181, 5.15.214, and 5.10.263 stable kernels. These kernelsfix a singlesecurity vulnerability (CVE-2026-68480)that could allow data leakage through speculative execution. Users ofthose kernels are advised to upgrade.



  • [$] Bringing BPF to binfmt_misc
    The kernel is able to run a few types of executable files, including nativebinaries in the ELF format and interpreted programs that begin with the#! marker. It also, however, has a mechanism, called binfmt_misc,that can be configured from user space to enable the transparent executionof programs in just about any format. This feature has been relativelystatic for years, but it seems likely to receive some significant updatesin the near future, including the ability to load BPF programs that candecide how to run a given program.


  • Rust Coreutils 0.10 released
    Version0.10 of the uutils project's Rust Coreutils has been released. Thisrelease focused on compatibility with the GNU Core Utilities suite,with Rust Coreutils now passing 645 of 690 tests, up from 625 with version 0.9.0. Notablechanges in this release include addition of the mv --exchangeoption, an OpenSSL backend for checksum utilities, applying SELinux labels atcreation when using mkdir, mkfifo, and mknod, as wellas a number of performance and security improvements.

    The project has anonline playground that runs theRust Coreutils directly in the browser via WebAssembly for those who would liketo try the utilities without installing them. LWN covered the uutils project inFebruary 2025.



  • Security updates for Thursday
    Security updates have been issued by Debian (7zip, kernel, libde265, and p7zip), Mageia (tomcat), Oracle (fence-agents, frr10, kernel, ldns, libgcrypt, mingw-glib2, nodejs24, osbuild-composer, p11-kit, php8.4, sg3_utils, and thunderbird), Red Hat (libXfont2), and SUSE (containerd, evince, libXfont2, nginx, openssl-3, pcp, php7, php8, python-Django, python-httplib2, python-nltk, rrdtool, vifm, and wireshark).


  • [$] LWN.net Weekly Edition for August 6, 2026
    Inside this week's LWN.net Weekly Edition:
    Front: Process-builder API; Fedora COI; FUSE io_uring buffer sizes; BPF network namespaces; FUSE plans; BPF libraries; directory creation system call. Briefs: AISI hack; JFrog on CVEs; npm worm; AUR adoption; NetBSD 11.0; b4 0.16.0; C-Kermit 11; Rust LLM policy; Servo 0.4.0; Quotes; ... Announcements: Newsletters, conferences, security updates, patches, and more.



LXer Linux News



  • HWMON Fixes For Linux 7.2-rc7: "Most Of Them Fixing Critical Or High Severity Bugs"
    It's been another busy week in the Linux kernel camp with increased patch activity continuing due to AI/LLM coding agents / bots continuing to uncover different defects in the open-source codebase. The hardware monitoring (HWMON) subsystem saw many fixes this week for issues mostly raised by the Sashiko AI bot with the issues being described as mostly critical or high severity bugs...



  • AI Helped Create A DirectX 11 Driver For QEMU VMs
    Thanks in part to the power of Claude Opus 5 and Claude Fable 5, a new Windows DirectX 11 driver for QEMU has been created to help improve graphics acceleration for Microsoft Windows guests running under QEMU virtual machines...







Linux Insider"LinuxInsider"












Slashdot

  • Google Should Still Be Forced To Shed Chrome, Advocacy Group Argues
    "Google should be required to divest the Chrome browser, and prohibited from paying Apple to distribute Google's search engine, the nonprofit advocacy group Public Knowledge argues in a new court filing," MediaPost reports, citing a friend-of-the-court brief filed Tuesday in the D.C. Circuit Court of Appeals:The group adds that "independent ownership" of Chrome "would open the distribution channel Google controls and allow Chrome to serve browser users when it makes privacy decisions and determines how to integrate search and (artificial intelligence)..." In September 2025, [U.S. District Court Judge] Mehta issued a remedies order that requires Google to share some data about users' searches with "qualified" competitors and to provide syndicated search results and ads to those competitors. The order also prohibits Google from entering into exclusive distribution contracts for Google Search, Chrome, Google Assistant and the Gemini app for six years, but allows the company to continue to make payments for search-ad revenue or distribution to Apple, Mozilla and others... Google recently appealed Mehta's order. The company argued in its written brief that it "prevailed in the marketplace fair and square," adding that Apple and Mozilla "sensibly chose" Google as the default search engine "because it gave their users the best experience," and because Apple and Mozilla would earn the most ad revenue through the deals. The [U.S.] Justice Department and states countered to the appellate court last week that the liability finding should stand, and also argued that Google should have been banned from paying Apple and Mozilla for placement as the default search engine on their browsers. [Antitrust enforcers had originally asked the judge to order Google to divest Chrome, but he's already rejected that request.] The government did not argue in its appellate papers that Google should be forced to sell Chrome. But Public Knowledge independently contends in its friend-of-the-court brief that divestiture would benefit consumers... "Divestiture would place those decisions with an institution whose success depends on serving browser users primarily...." The group is calling the appellate court's attention to Google's April 2025 decision to preserve tracking cookies — a reversal from its earlier plans to block third-party cookies by default. "Google is in the position of both deciding Chrome's tracking rules while running the advertising business affected by them," Public Knowledge writes. "An independent Chrome could make those decisions on behalf of users alone." But Firefox developer Mozilla filed its own friend-of-the-court brief Thursday warning Firefox could be forced to "exit the browser and browser engine markets" if it can't receive payment from Google for distributing its search engine, according to a later report from MediaPost:Federal and state antitrust enforcers recently asked the appellate court to reverse the portion of Mehta's order that allows those payments to continue. But Mozilla counters in its new friend-of-the-court brief that Mehta's decision regarding those payments was supported by the evidence --including a study it conducted concluding that its revenue would "decline dramatically" if forced to replace Google with Bing as Firefox's default search engine...Google is expected to file new arguments with the appellate court next month.


    Read more of this story at Slashdot.


  • Slashdot Reader Builds a Photo-Verification App for iPhones
    Long-time Slashdot reader BrianFagioli is announcing that he's released a new iPhone app that creates a cryptographic witness for photos without uploading the original image.The app hashes the file, signs the hash using a dedicated identity stored in Apple Keychain, and publishes the witness to Nostr relays while keeping the photo inside the app unless the user chooses to export it. Rather than trying to determine whether a scene was genuine, the app — named Veridenz — answers a narrower question, by verifying whether a photo file matches the one that was originally witnessed.Users do not need a Nostr account because the app creates its own signing identity, keeping private documentation separate from a public Nostr profile. "The developer does not collect any data from this app," says its page in Apple's iPhone store. The app's tagline is "Capture. Prove. Verify."


    Read more of this story at Slashdot.


  • New Orleans Will Use AI To Answer 911 Calls Instead of a Human
    "If you call 911 in New Orleans, you may hear the sound of an artificial intelligence (AI) agent answering your call instead of a human voice," reports the Shreveport Times:The Orleans Parish Communication District (OPCD) is currently testing out the new tool designed to reduce the volume of calls human dispatchers must handle, which is over a thousand emergency calls a day.New Orleans implemented AI in April to answer 311 calls for non-emergencies. The AI was trained and programmed to provide information to callers, as the OPCD says 50% of 311 calls are for information, according to GovTech. AI is now answering 911 emergency calls in Louisiana's largest city and one of the cities with the highest call rates in the U.S. The OPCD is using Carbyne's AI Emergency Call Triage, with triage being the process of analyzing and prioritizing emergency calls. The AI system assesses incoming calls and can provide immediate feedback to callers. This is intended to handle the increase of calls that are related to one incident, so callers get automatically routed to an AI agent who asks if they are calling regarding the incident. If the answer is yes, then callers can receive information or updates, and if it's no, then the callers are transferred to a human. This combats multitudes of calls piling up and taking longer time to potentially answer an emergency call. The OPCD said the AI will not be used to handle emergency calls, only to direct such calls to a human dispatcher.


    Read more of this story at Slashdot.


  • More Police Officers Fired, Investigated, or Arrested for Misusing Flock Camera Systems
    In Georgia the Savannah Police Department "terminated four sworn officers and two civilian employees following an internal investigation into misuse of the department's Flock Safety License Plate Reader system," according to a local news report:All six cases are also under independent criminal investigation by the Georgia Bureau of Investigation... Investigators found that employees were running searches on personal acquaintances and family members. One officer was found to have given someone from an outside law enforcement agency access to SPD's Flock Safety system, which they weren't authorized to do. Elsewhere ABC News reports that a female North Carolina police officer was arrested Wednesday "for allegedly using Flock license plate readers to track her boyfriend's ex-wife, according to police..." The officer is accused of accessing the system for personal use 31 different times, including at least twice when she was off-duty, and listing most of the lookups as motor vehicle infractions. [Police chief Ron] Campurciani "added that the department is looking at 10 other potential misuse cases and said three 'look like they could be problematic.'" And an Ohio news station reports a police officer who recently resigned "while under internal investigation repeatedly used the Flock license plate reader system to search a vehicle registered to someone investigators identified as his likely domestic partner." Meanwhile, 404 Media reported this week that an Iowa county's usage police specifically tells police officers — in all capital letters — not to tell occupants of a vehicle that an automated license plate reader was used for a traffic stop. It also instructs officers to not even mention the use of the ALPR technology in their reports "unless absolutely necessary," according to information they'd obtained from a public records request," suggesting they instead they call the cameras "county resources":It is not just local police in small communities who are creating policies designed to obfuscate Flock usage. Earlier this year, we reported that police in multiple states were being told to be "as vague as permissible" about why they were using Flock because their searches could be obtained using public records requests, and that warning was being shared by the FBI and Department of Justice... In the [Iowa county] public records request, Sheriff Don Phillips said "there is no need" to tell people about the use of Flock... "because the information is verified by the deputy running the license plate. It is common practice for law enforcement to refrain from disclosing investigative methods and sources to prevent criminals from learning how to circumvent them."


    Read more of this story at Slashdot.


  • America's First Grid-Scale Sodium-Ion Battery Plant Gets Its First Big Test
    "In a milestone for energy storage technology, Peak Energy has selected Sacramento, California, as the home of America's first manufacturing facility dedicated to grid-scale sodium-ion battery systems," according to the sustainability news site Intelligent Living. The move "represents the first large-scale test of whether sodium-ion technology can deliver on its promise of cheaper, safer, and more sustainable grid storage at a scale that actually moves the needle for the U.S. electricity system."The 183,000-square-foot plant, representing a $71 million investment, will produce up to 4 gigawatt-hours of storage annually when production begins in early 2027. That is enough output each year to serve nearly four million homes, and it signals that sodium-ion technology has moved from laboratory promise to commercial reality... Peak Energy, founded in 2023 by former engineers from Tesla, Enovix, and Fluence, announced its Sacramento site selection on July 8, 2026, after a nationwide search that ultimately chose California over Texas... The factory is designed as a system assembly plant rather than a cell fabrication facility. Peak will receive sodium-ion cells, manufactured to its specifications by Chinese suppliers, and assemble them into complete 30-foot-long, 100,000-pound containerized storage systems. Each GS1.1 unit stores 3.1 megawatt-hours, enough to fully charge more than 40 electric vehicles... In the United States, Peak Energy has emerged as the most advanced grid-scale player. It has secured more than 6 GWh of customer commitments, including a landmark deal with Jupiter Power for up to 4.75 GWh through 2030, valued at up to $500 million. Energy Vault has committed to 1.5 GWh of sodium-ion storage for AI data center applications, and RWE Americas has already deployed Peak's first grid-scale system on the MISO grid in Wisconsin, energized in March 2026. General Motors is codeveloping sodium-ion cells with Peak at its Wallace Battery Cell Innovation Center in Michigan, testing 170- and 190-amp-hour cell formats with domestic production targeted for 2028. China, however, remains the global heavyweight. CATL, the world's largest battery manufacturer, unveiled its TENER Sodium energy storage system in June 2026 with a rated cycle life of 15,000 cycles and a projected 25-to-30-year service life. In April 2026, CATL signed a 60 GWh supply agreement with HyperStrong, the largest sodium-ion deal announced to date. BYD, HiNa Battery, and Farasis are also shipping commercial sodium-ion products, including batteries for a $400 electric scooter already on sale in China... Peak Energy's first commercial shipments from Sacramento are slated for the first quarter of 2027, with contracted deliveries to Jupiter Power, Energy Vault, and RWE Americas following shortly after. The company has publicly stated it needs to deploy over $100 million in product in 2026, up from roughly $10 million in 2025, and the Sacramento facility is sized to meet that demand. At the system level, sodium-ion grid storage is already operating. Peak's pilot installation at the SolarTAC testing facility in Watkins, Colorado, stores 3.5 MWh and has been running since 2025. The RWE Americas deployment in Wisconsin, energized in March 2026, marks the first time sodium-ion batteries have backed up the MISO grid, which serves 15 central U.S. states and the Canadian province of Manitoba... According to the International Energy Agency, sodium-ion manufacturing capacity announcements have accelerated sharply since 2024, with global pipelines now exceeding 400 GWh annually... Researchers are also pushing the technology forward. In May 2026, a team at the National University of Singapore published a breakthrough in all-solid-state sodium batteries that could further reduce costs and eliminate the flammable liquid electrolytes found in both lithium-ion and current sodium-ion designs. "The technology's sweet spot is utility-scale, multi-megawatt-hour installations," the article points out, "where the system-level cost savings from passive cooling and longer cycle life outweigh the per-cell energy density penalty..." The article also points out observations from the American Battery Leadership Coalition, an industry group advocating for sodium-ion policy support, that sodium-ion batteries can be built almost entirely from American materials, including coal, sawdust, and agricultural waste. This week Syntropic Power and UNIGRID Inc. also announced "a major partnership to commercialize UNIGRID's proprietary sodium chromium oxide (NaCrO2) battery technology across North America," reports Interesting Engineering, "targeting one gigawatt-hour (1 GWh) of deployments in 2027. The technology could be used in residential, virtual power plant, and large-scale stationary grid applications..."Independent testing by the ISO-accredited Rochester Institute of Technology (RIT) Battery Development Center revealed something surprising. UNIGRID's 210Ah cells displayed endothermic behavior during charging. This means the chemical reaction actually absorbs heat rather than dumping it into the environment. Coupled with a 97.9% cell-level round-trip energy efficiency and remarkable thermal stability under abuse testing, the battery stays cool on its own. The 210Ah sodium-ion cells deliver up to 218Ah of discharge capacity. It demonstrated exceptional durability, retaining over 99% of its capacity after 1,000 full discharge cycles, as well as heat-absorbing behavior during charging. These validated strengths allow Syntropic to optimize its product designs, enabling platforms like GridSpan [its modular DC platform designed for large-scale energy applications with flexible discharge durations ranging from 20 minutes to 20 hours] to operate safely and efficiently at grid scale without needing complex mechanical cooling systems... Commercialization kicks off with Tenet, a safety-focused, wall-mounted system for residential, light-commercial, and virtual power plant uses... Relying on abundant and widely distributed raw materials like sodium and chromium — rather than lithium and cobalt — protects manufacturers from geopolitical price spikes and material shortages. Apart from offering an alternative to lithium, a successful rollout will demonstrate that the most durable energy storage is the kind that could stay cool entirely on its own. Thanks to Slashdot reader fjo3 for sharing the news.


    Read more of this story at Slashdot.


  • Paper Goods Company Is Investigating an Alternative to Trees
    The Dallas Business Journal reported Monday that the U.S. multinational paper goods company Kimberly-Clark announced "that its researchers identified and advanced patented technology transforming fibers from hesperaloe, a low-water-use plant with pointy leaves that thrives in the southwest region of the country, into material for paper towels." Discovering an alternative to conventional wood fiber "could reshape how the company, and the industry at large, manufactures products," according to article. And the move comes "amid growing pressure on manufacturers regarding their reliance on wood fibre from freshly felled trees," reports The Telegraph. "Campaigners claim that more than one million trees are cut down every day..."Unlike trees, hesperaloe can be grown on dry, low-quality farmland unsuitable for most food crops and harvested much more quickly. Kimberly-Clark said it had tested more than 70 potential materials before settling on hesperaloe. Earlier candidates included wheat straw, corn waste, seaweed, algae and chicken feathers. The US consumer goods giant will now develop the fibre at a pilot factory in Yuma, Arizona, working with local growers to determine whether the crop can be cultivated for commercial use in its tissue products. "This represents an exciting moonshot for Kimberly-Clark and the culmination of more than two decades of materials and plant science expertise," said Craig Slavtcheff, who is helping develop the new toilet paper. However, the company said products made from hesperaloe remained years away from supermarket shelves, with further research needed before the fibre could be produced at the scale required for global manufacturing. The US-based company has invested about $250m (£190m) in the project and filed more than 30 patents linked to the technology.


    Read more of this story at Slashdot.


  • Microsoft, Google, Amazon, Meta and Oracle Expect a Negative Cash Flow of $125 Billion Next Year
    The Washington Post shared surprising news this week about five top AI companies. Microsoft, Google, Amazon, Meta and Oracle "are spending so much on developing AI and delivering it to customers that they're expected to bleed cash in the coming year, according to a Washington Post analysis of data compiled by S&P Global Market Intelligence."Free cash flow, which measures the cash left over after paying expenses and AI infrastructure costs, is now expected to shrink to almost nothing for the five companies combined in 2026, and decline again to negative $125 billion the following year... AI spending by Amazon and Google pushed the companies to an ignominious milestone: They lost more cash in the past three months than any other large U.S. companies, according to S&P Global data. Investment analysts expect Elon Musk's SpaceX to show even worse cash bleeding this week.


    Read more of this story at Slashdot.


  • Prime Minister Leaves Door Open For Reviewing Policy of No Nuclear Weapons in Japan
    At a Hiroshima memorial ceremony, Japan's prime minister said the country "maintains" its three long-standing non-nuclear principles, reports UPI. But the prime minister "stopped short of promising that the policy would remain unchanged, fueling speculation that her government could review a longstanding ban on allowing nuclear weapons into the country."[Prime Minister Sanae] Takaichi made the remarks Thursday at the Hiroshima Peace Memorial Ceremony marking the 81st anniversary of the U.S. atomic bombing of the city... Unlike previous prime ministers who pledged that Japan would "continue to uphold" the principles, Takaichi described the government's current position without making an explicit commitment about the future [only saying that Japan has "a mission to continue efforts toward realizing a world without nuclear weapon..."] The wording has drawn attention because her government plans to revise Japan's three key national security documents by the end of the year. At a news conference after the ceremony, Takaichi again said the government "maintains the Three Non-Nuclear Principles as a matter of policy." Asked whether the principles would continue to be included in the revised security documents, however, she declined to commit, saying she would refrain from prejudging the outcome. Japan's Three Non-Nuclear Principles state that the country will not possess nuclear weapons, will not produce them and will not permit their introduction into Japanese territory. The principles originated with a 1967 statement by then-Prime Minister Eisaku Sato and have remained a central element of Japan's postwar nuclear policy. Takaichi has previously questioned the third principle — the prohibition on allowing nuclear weapons into Japan. Before becoming prime minister, she argued in a 2024 book that Japan should retain the commitments not to possess or produce nuclear weapons but that an absolute prohibition on their introduction was unrealistic. Her argument was that barring port calls by U.S. vessels carrying nuclear weapons could limit the effectiveness of the U.S. nuclear umbrella protecting Japan... The Japan Innovation Party has also called for a review of the third principle. In security policy recommendations submitted to the government in June, the party called for a "realistic review" of the ban on allowing nuclear weapons into Japan... Under existing government interpretations, Japan could respond flexibly in an extreme national emergency involving a U.S. vessel carrying nuclear weapons. Some within the ruling party therefore question whether formally revising the non-nuclear principles would provide enough practical benefit to justify the political controversy it would create. Critics also warn that changing the policy when Washington has not publicly demanded such a move could give China and North Korea additional grounds to portray Japan as expanding its military role... If Japan were to allow temporary entry by U.S. nuclear weapons or port calls by nuclear-armed vessels, Washington would gain additional operational options for its nuclear forces in Northeast Asia. Such a development could strengthen deterrence against North Korea and China but could also intensify debate over differences between U.S. extended deterrence arrangements with Japan and South Korea. "How the principles are addressed in Japan's revised security documents later this year could determine whether the issue develops into a broader debate over the future of extended nuclear deterrence among Japan, South Korea and the United States..."


    Read more of this story at Slashdot.


  • Before and After Views of SpaceX Rocket's Moon Crash
    A South Korean lunar orbiter has captured the first before-and-after images of the Moon's crash scene caused by a stray SpaceX Falcon 9 rocket. The Associated Press reports: The Korea Aerospace Research Institute's Danuri spacecraft flew over the impact site soon after the Falcon 9 upper stage inadvertently plowed into the moon on Wednesday. Danuri made multiple passes, snapping photos from lunar orbit that were released by the space agency Thursday. The terrain is noticeably darker where the rocket hit and carved out a crater, sending dust and rock everywhere. Korean space officials said Danuri gathered before and after shots. NASA expects its Lunar Reconnaissance Orbiter to fly over the crash site next week to view the aftermath. You can view the images here.


    Read more of this story at Slashdot.


  • NASA Figured Out How To Keep Its 48-Year-Old Voyager 2 Probe Running For Yet Another Year
    NASA has squeezed at least another year of science out of Voyager 2 by cutting power to nonessential systems and switching to lower-power alternatives. Voyager 1 is expected to receive the same power-saving changes in the coming months. Space.com reports: Voyager 2 and its twin launched in 1977, called Voyager 1, rely on a form of nuclear battery known as a radioisotope thermoelectric generator that uses the heat produced by the decay of plutonium. But the supply of plutonium on each probe drops at about four watts a year on each spacecraft. To keep the probe running on this dwindling power supply, engineers recently reduced Voyager 2's power requirements by turning off a few non-science devices and using "lower-power alternatives" that are still effective enough to keep the spacecraft warm while it's so far from the sun, NASA officials said in a statement. "The spacecraft power margins have grown razor thin, requiring the team to conserve energy by shutting off non-essential devices and systems," NASA officials wrote of the mission, which is managed by the agency's Jet Propulsion Laboratory. The drop in power is having a measurable science impact on both spacecraft -- each has turned off two of their science instruments since 2024 alone. While some of these instruments were shut off after the spacecraft finished their historic planetary flybys decades ago, others were turned off due to power requirements. Each spacecraft initially launched with 10 instruments, and Voyager 2 is now down to only three instruments. At first it looked as though Voyager 2 would have to shut down another of these instruments later this year, but luckily, the new power shifts will allow all three to operate "for at least another year," NASA said.


    Read more of this story at Slashdot.


www.theregister.com - Articles












Linux.com




  • From DHCP to SZTP – The Trust Revolution
    By Juha Holkkola, FusionLayer Group The Dawn of Effortless Connectivity In the transformative years of the late 1990s, a quiet revolution took place, fundamentally altering how we connect to networks. The introduction of DHCP answered a crucial question, Where are you on the network?!, by automating IP address assignment. This innovation eradicated the manual configuration [0]

    The post From DHCP to SZTP – The Trust Revolution appeared first on Linux.com.








Phoronix



  • Polychromatic 0.9.8 Released With Razer Blade 16 2023 Support
    For those looking to manage the RGB lighting and other features of their Razer devices on Linux, Polychromatic 0.9.8 is now available for that UI front-end that interacts with the OpenRazer kernel drivers for providing a decent albeit unofficial Linux configuration experience...




  • HWMON Fixes For Linux 7.2-rc7: "Most Of Them Fixing Critical Or High Severity Bugs"
    It's been another busy week in the Linux kernel camp with increased patch activity continuing due to AI/LLM coding agents / bots continuing to uncover different defects in the open-source codebase. The hardware monitoring (HWMON) subsystem saw many fixes this week for issues mostly raised by the Sashiko AI bot with the issues being described as mostly critical or high severity bugs...


  • AI Helped Create A DirectX 11 Driver For QEMU VMs
    Thanks in part to the power of Claude Opus 5 and Claude Fable 5, a new Windows DirectX 11 driver for QEMU has been created to help improve graphics acceleration for Microsoft Windows guests running under QEMU virtual machines...


  • Linux 7.2-rc7 Adding Support For The Most Unique Or Very Funky Gaming Controller
    The input subsystem fixes for the week include a number of AI-driven patches to address various information leaks, out-of-bounds accesses, validation fixes, and other coding issues that have turned up recently. Plus some device quirks and also adding support for a rather funky gaming controller to the common XPad Linux driver used by many different gaming controllers...





Engadget"Engadget - Technology News & Expert Reviews"











OSnews

  • Thanks to the EUs Digital Markets Act, EU citizens are getting copy and paste between iOS and Windows
    The European Unions Digital Markets Act keeps delivering for EU citizens. Apple is working on a new feature that will support cross-device copy and paste between iOS devices and Windows PCs. Microsoft asked for the feature using Apples EU interoperability request system for developers, which Apple implemented to comply with the Digital Markets Act. Apple began evaluating the request in March, and on June 26, proposed a project plan. ↫ Juli Clover at MacRumors According to Apple, this minor feature is going to cost Apple significant engineering effort!; Id estimate itll cost them about one to two golden statues.


  • IceWM 4.1.0 released
    IceWM, the venerable X11 window manager, has put up a new maintenance release, version 4.1.0. Its got a small number of fixes, two very minor new features, as well a few updated translations. Thats it.


  • Microsoft CVP explains why killing Windows legacy code takes so long
    Theres been a small flurry of articles from a variety of sources, all talking about more or less the same thing: Microsoft is trying to explain why Windows 11 is as difficult to develop as it is, in turn justifying why its become such a mess over the years. Im picking this one from Windows Central, which is an interview with Microsofts CVP of Design and Research for Windows and Devices, Marcus Ash. Taking the long, still ongoing transition from the Control Panel to the Settings application as an example, Ash explains why this is such a long and difficult process. Unsurprisingly, Ash says that the reason this has taken so long is that Microsoft prides itself on compatibility with legacy tooling and workflows, so it cant just rush in and modernize everything without first ensuring the modern replacements maintain functionality with what came before. ↫ Zac Bowden at Windows Central This isnt really news to anyone. One of Windows prized strong points is its often excellent backwards compatibility. This doesnt just apply to individual applications, but also to things like software makers adding settings panels to Control Panel, or complex business applications expecting certain entry points into the Control Panel to exist  and much, much more, all over the operating system. Im exaggerating, but you cant so much as move a single pixel in the taskbar without breaking some component of some obscure corporate middleware suite from 1999 that somehow still functions as the beating heart of like 187 Fortune 500 companies. Sometimes I wonder if Microsoft is going about this the wrong way entirely. Of course, I have no idea what Im talking about, but I feel like Microsoft has so man tools at its disposal to deal with this issue that its not really using to their fullest potential. Specifically, Windows itself has a number of incredibly capable tools in its toolbox to make sure any application ever written for Windows and even DOS, regardless of how many bits it requires, can run. Windows has advanced and highly capable tools for virtualisation and containerisation, and on top of that, Windows NT has a very capable personalities system that feels underutilised, too. Couldnt these tools be harnessed to effectively isolate the entire backwards compatibility problem from the actual Windows operating system people use, and turn them into optional components installed and activated when required by an older application? Isolating backwards compatibility this way would then leave the Windows team much less shackled and more free to improve Windows at every level without having to worry so much about maintaining backwards compatibility. If the components an older application needs are virtualised, containerised, or part of a Windows NT personality and thus frozen in time, the Windows team would be free to work on the current! version of said component without breaking the application in question. I feel like Microsoft has tried to use these technologies to address backwards compatibility in the past, but in true Microsoft fashion, it always seems to do so halfheartedly, without any real coherent vision behind it. Again, I wish to reiterate Im by no means qualified enough to make any definitive statements about this, but it sure does feel like Microsoft is underutilising a lot of the tools it already has at its disposal.


  • Developing a windowed OS for a homebrew Am29000 computer
    Once upon a time in the mysterious lands of Mexico, starting in Fall 1996 and through Spring 1997, I coded a windowed operating system in 32-bit machine code, fit it into a floppy, and jumped in excitement as it boot up. Of course, I knew it was a great thing because you couldnt boot Windows 3.1 or GEM from a floppy disk, but I was very far from knowing how so cool it was. Unfortunately, not a thing I could give away for everyone to see, as it was written for a homebrew computer based on the Am29000 processor. Let’s go back to my memories, some notes, and the ride of discovering again what I forgotten. ↫ Óscar Toledo Gutiérrez Trying to summarise this absolute gem of an article and all of the amazing effort and skill involved would be a huge disservice to Óscar Toledo Gutiérrez. I enjoyed this so much. Be sure to try out his custom emulator of a custom computer to run his custom operating system.


  • How to make a Nintendo 64 game in 2026
    Two years ago, I was Porting my JavaScript Game Engine to C for No Reason. I have since found a reason: making a new N64 game! The result is Xibalba 64 – a Wolfenstein 3D-like FPS. Modretro agreed to publish the game as a physical launch title for their M64 (a modern N64 clone), complete with cartridge, packaging and manual! ↫ Dominic Szablewski The article details the development process, from setting up the correct tooling to actually getting the game to play on a real Nintendo 64, and everything in between  including optimising the game to get it to run at a steady 60fps. The biggest issue is that the Nintendo 64 is quite a complex and quirky console, and in order to develop for it, you needed access to Nintendos officially sanctioned platform library, libultra. These days, though, theres an open source alternative, libdragon, enabling homebrew development. Its awesome that, thanks to the hard work of volunteers, people can still develop top-notch games for something like the Nintendo 64. If we had left it up to Nintendo, wed be seeing nothing of the sort today.


  • Tribblix Milestone 41 for x86 released
    Tribblix, the Illumos distribution focused on giving you a classic UNIX-style experience, has been updated with the release of Milestone 41. According to the release notes, it contains the latest security fixes from Illumos, but beyond that its just a number of small point releases for certain components. Still, its a new release, and Tribblix rocks, so here we are.


  • Corporate players in Amiga community sign various agreements to clear up some of the decades-old licensing and ownership mess
    Few things in technology are more complex, convoluted, and riddled with literally decades of drama than the Amiga community. Luckily for all of us, a significant step forward has been made today: several of the key corporate players in the community have struck agreements to settle their legal disputes. CIC licenses software and documentation for Commodores 8-bit computers from Amiga. In return, Amiga is permitted to continue using the Commodore trademarks in a historical or descriptive context,! such as old documentation, copyright notices in existing software, or as symbols on a keyboard. The agreement with Hyperion does not change the status of AmigaOS 4` which was never a point of contention, according to Amiga` but it does specify exactly which code and trademarks the Belgian company is permitted to use . But Hyperions involvement in the 68k market will end on December 31, 2027: the licensee may continue to distribute versions of AmigaOS 3 until then, including the as-yet-unreleased AmigaOS 3.3. After that, Hyperion will deliver source code, revision history, and documentation for AmigaOS 3.1.4 and its updates, including all fixes and updates, but excluding AmigaOS 4 code backported into AmigaOS 3.2 or 3.3, to Amiga Corporation and release the developers involved in the project from all obligations to Hyperion. Amiga itself will then take over further development of AmigaOS`3 in the future. ↫ Post on amiga-news.de Hyperion is the company most known for developing AmigaOS 4, and with these agreements in place, they claim they can finally spend time focusing on getting AmigaOS 4.2 out the door. These agreements will also consolidate most of the AmigaOS 3.x code and IP under a single banner, which should make its status quite a bit clearer going forward. Whether or not any of this is actually good and beneficial to the Amiga platform as a whole and its individual branches  3.x and 4.x, in particular  is anyones guess. I dont think theres anyone here on OSNews who wouldnt be interested in, say, an affordable and  most importantly  available AmigaOS 4 machine. While I have no clue if clearing up some of the licensing, IP, and ownership confusions will aid in getting new AmigaOS 4 hardware, it surely wont make it any harder.


  • But can your calculator run Linux?
    Dont have enough computing devices on your wish list yet? Do you have a need for a graphing calculator? No? What if it can run Linux and even Windows 10? I see Ive got your attention. The HP Prime is a graphing calculator on the market since 2013, with a hardware revision in 2018 (the G2 model). It has a touch screen and as far as I can find, most people are happy with it and find it a very capable and fast calculator. Here are some pictures of the opened up calculator and here is a website with some more downloads. Im not really interested in the calculator part. For most calculations I do for my day job, embedded programming, the HP-16C is a better fit. I was interested in this device because I found posts online suggesting it could run Linux and even a Windows 10 port. ↫ Remy van Elst I had no idea just how overpowered  for a graphing calculator  the G2 really is. Its basically an Android smartphone from a few years ago, and that means that yes, it can run Linux, including X, Doom, and tons of other applications. Its not the easiest of devices to get custom software onto, but also not particularly difficult  you need to open it up and short two pads  so if you have one, its definitely a fun project. Apparently, someone also ported EUFI for Windows 10 to this thing, so you can do silly stuff like run the Windows calculator on the G2 calculator. Wild. Now I kind of want one.


  • Wireguard comes to 9front
    Want to switch to 9front, especially with the new release having just been made available, but really need Wireguard? Fret not! Wireguard is now available on 9front, experimentally.


  • IBM i (OS/400): the database operating system
    Today, I wanted to show you one of the most fascinating and surprising operating systems ever created. It’s not another Unix, Linux, or Windows. It is an architecture that went its own way and proved that systems engineering design can look completely different. I’m talking about IBM’s child, which for many might be synonymous with “boring banking systems,” but in reality, is one of the most uncompromising projects in IT history. While we get excited about abstraction and virtualization today, thinking we are discovering new lands, this system was doing it decades ago. Imagine a system that doesn’t know the concept of a “file” in the way we understand it. A system where everything is an object, and all disk and operational memory form one vast, flat space. If you are looking for proof that true engineering doesn’t need buzzwords to blow you away, I invite you to read on. ↫ Kamil Pytliński Ever since watching Clabretros detailed video about getting IBM i to work on his own IBM POWER hardware and then remoting into them, Ive been obsessed with running IBM i at home. It feels like the final boss of operating systems to dive into and explore, hidden in the deepest, darkest trenches of the ocean of technology. Everything about IBM i feels alien, complex, convoluted, opaque, and overwhelming, and you can probably dedicate your entire career to working with this platform and somehow still learn new things about it every day. Theres something brutalist about IBM i, and I so desperately want to bang my head on its concrete walls.



Linux Journal News

  • EU OS: A Bold Step Toward Digital Sovereignty for Europe
    Image
    A new initiative, called "EU OS," has been launched to develop a Linux-based operating system tailored specifically for the public sector organizations of the European Union (EU). This community-driven project aims to address the EU's unique needs and challenges, focusing on fostering digital sovereignty, reducing dependency on external vendors, and building a secure, self-sufficient digital ecosystem.
    What Is EU OS?
    EU OS is not an entirely novel operating system. Instead, it builds upon a Linux foundation derived from Fedora, with the KDE Plasma desktop environment. It draws inspiration from previous efforts such as France's GendBuntu and Munich's LiMux, which aimed to provide Linux-based systems for public sector use. The goal remains the same: to create a standardized Linux distribution that can be adapted to different regional, national, and sector-specific needs within the EU.

    Rather than reinventing the wheel, EU OS focuses on standardization, offering a solid Linux foundation that can be customized according to the unique requirements of various organizations. This approach makes EU OS a practical choice for the public sector, ensuring broad compatibility and ease of implementation across diverse environments.
    The Vision Behind EU OS
    The guiding principle of EU OS is the concept of "public money – public code," ensuring that taxpayer money is used transparently and effectively. By adopting an open-source model, EU OS eliminates licensing fees, which not only lowers costs but also reduces the dependency on a select group of software vendors. This provides the EU’s public sector organizations with greater flexibility and control over their IT infrastructure, free from the constraints of vendor lock-in.

    Additionally, EU OS offers flexibility in terms of software migration and hardware upgrades. Organizations can adapt to new technologies and manage their IT evolution at a manageable cost, both in terms of finances and time.

    However, there are some concerns about the choice of Fedora as the base for EU OS. While Fedora is a solid and reliable distribution, it is backed by the United States-based Red Hat. Some argue that using European-backed projects such as openSUSE or KDE's upcoming distribution might have aligned better with the EU's goal of strengthening digital sovereignty.
    Conclusion
    EU OS marks a significant step towards Europe's digital independence by providing a robust, standardized Linux distribution for the public sector. By reducing reliance on proprietary software and vendors, it paves the way for a more flexible, cost-effective, and secure digital ecosystem. While the choice of Fedora as the base for the project has raised some questions, the overall vision of EU OS offers a promising future for Europe's public sector in the digital age.

    Source: It's FOSS
    European Union


  • Linus Torvalds Acknowledges Missed Release of Linux 6.14 Due to Oversight

    Linus Torvalds Acknowledges Missed Release of Linux 6.14 Due to Oversight

    Linux kernel lead developer Linus Torvalds has admitted to forgetting to release version 6.14, attributing the oversight to his own lapse in memory. Torvalds is known for releasing new Linux kernel candidates and final versions on Sunday afternoons, typically accompanied by a post detailing the release. If he is unavailable due to travel or other commitments, he usually informs the community ahead of time, so users don’t worry if there’s a delay.

    In his post on March 16, Torvalds gave no indication that the release might be delayed, instead stating, “I expect to release the final 6.14 next weekend unless something very surprising happens.” However, Sunday, March 23rd passed without any announcement.

    On March 24th, Torvalds wrote in a follow-up message, “I’d love to have some good excuse for why I didn’t do the 6.14 release yesterday on my regular Sunday afternoon schedule,” adding, “But no. It’s just pure incompetence.” He further explained that while he had been clearing up unrelated tasks, he simply forgot to finalize the release. “D'oh,” he joked.

    Despite this minor delay, Torvalds’ track record of successfully managing the Linux kernel’s development process over the years remains strong. A single day’s delay is not critical, especially since most Linux users don't urgently need the very latest version.

    The new 6.14 release introduces several important features, including enhanced support for writing drivers in Rust—an ongoing topic of discussion among developers—support for Qualcomm’s Snapdragon 8 Elite mobile chip, a fix for the GhostWrite vulnerability in certain RISC-V processors from Alibaba’s T-Head Semiconductor, and a completed NTSYNC driver update that improves the WINE emulator’s ability to run Windows applications, particularly games, on Linux.

    Although the 6.14 release went smoothly aside from the delay, Torvalds expressed that version 6.15 may present more challenges due to the volume of pending pull requests. “Judging by my pending pile of pull requests, 6.15 will be much busier,” he noted.

    You can download the latest kernel here.
    Linus Torvalds kernel


  • AerynOS 2025.03 Alpha Released with GNOME 48, Mesa 25, and Linux Kernel 6.13.8
    Image
    AerynOS 2025.03 has officially been released, introducing a variety of exciting features for Linux users. The release includes the highly anticipated GNOME 48 desktop environment, which comes with significant improvements like HDR support, dynamic triple buffering, and a Wayland color management protocol. Other updates include a battery charge limiting feature and a Wellbeing option aimed at improving user experience.

    This release, while still in alpha, incorporates Linux kernel 6.13.8 and the updated Mesa 25.0.2 graphics stack, alongside tools like LLVM 19.1.7 and Vulkan SDK 1.4.309.0. Additionally, the Moss package manager now integrates os-info to generate more detailed OS metadata via a JSON file.

    Future plans for AerynOS include automated package updates, easier rollback management, improved disk handling with Rust, and fractional scaling enabled by default. The installer has also been revamped to support full disk wipes and dynamic partitioning.

    Although still considered an alpha release, AerynOS 2025.03 can be downloaded and tested right now from its official website.

    Source: 9to5Linux
    AerynOS


  • Xojo 2025r1: Big Updates for Developers with Linux ARM Support, Web Drag and Drop, and Direct App Store Publishing
    Image
    Xojo has just rolled out its latest release, Xojo 2025 Release 1, and it’s packed with features that developers have been eagerly waiting for. This major update introduces support for running Xojo on Linux ARM, including Raspberry Pi, brings drag-and-drop functionality to the Web framework, and simplifies app deployment with the ability to directly submit apps to the macOS and iOS App Stores.

    Here’s a quick overview of what’s new in Xojo 2025r1:
    1. Linux ARM IDE Support
    Xojo 2025r1 now allows developers to run the Xojo IDE on Linux ARM devices, including popular platforms like Raspberry Pi. This opens up a whole new world of possibilities for developers who want to create apps for ARM-based devices without the usual complexity. Whether you’re building for a Raspberry Pi or other ARM devices, this update makes it easier than ever to get started.
    2. Web Drag and Drop
    One of the standout features in this release is the addition of drag-and-drop support for web applications. Now, developers can easily drag and drop visual controls in their web projects, making it simpler to create interactive, user-friendly web applications. Plus, the WebListBox has been enhanced with support for editable cells, checkboxes, and row reordering via dragging. No JavaScript required!
    3. Direct App Store Publishing
    Xojo has also streamlined the process of publishing apps. With this update, developers can now directly submit macOS and iOS apps to App Store Connect right from the Xojo IDE. This eliminates the need for multiple steps and makes it much easier to get apps into the App Store, saving valuable time during the development process.
    4. New Desktop and Mobile Features
    This release isn’t just about web and Linux updates. Xojo 2025r1 brings some great improvements for desktop and mobile apps as well. On the desktop side, all projects now include a default window menu for macOS apps. On the mobile side, Xojo has introduced new features for Android and iOS, including support for ColorGroup and Dark Mode on Android, and a new MobileColorPicker for iOS to simplify color selection.
    5. Performance and IDE Enhancements
    Xojo’s IDE has also been improved in several key areas. There’s now an option to hide toolbar captions, and the toolbar has been made smaller on Windows. The IDE on Windows and Linux now features modern Bootstrap icons, and the Documentation window toolbar is more compact. In the code editor, developers can now quickly navigate to variable declarations with a simple Cmd/Ctrl + Double-click. Plus, performance for complex container layouts in the Layout Editor has been enhanced.
    What Does This Mean for Developers?
    Xojo 2025r1 brings significant improvements across all the platforms that Xojo supports, from desktop and mobile to web and Linux. The added Linux ARM support opens up new opportunities for Raspberry Pi and ARM-based device development, while the drag-and-drop functionality for web projects will make it easier to create modern, interactive web apps. The ability to publish directly to the App Store is a game-changer for macOS and iOS developers, reducing the friction of app distribution.
    How to Get Started
    Xojo is free for learning and development, as well as for building apps for Linux and Raspberry Pi. If you’re ready to dive into cross-platform development, paid licenses start at $99 for a single-platform desktop license, and $399 for cross-platform desktop, mobile, or web development. For professional developers who need additional resources and support, Xojo Pro and Pro Plus licenses start at $799. You can also find special pricing for educators and students.

    Download Xojo 2025r1 today at xojo.com.
    Final Thoughts
    With each new release, Xojo continues to make cross-platform development more accessible and efficient. The 2025r1 release is no exception, delivering key updates that simplify the development process and open up new possibilities for developers working on a variety of platforms. Whether you’re a Raspberry Pi enthusiast or a mobile app developer, Xojo 2025r1 has something for you.
    Xojo ARM


  • New 'Mirrored' Network Mode Introduced in Windows Subsystem for Linux

    Microsoft's Windows Subsystem for Linux (WSL) continues to evolve with the release of WSL 2 version 0.0.2. This update introduces a set of opt-in preview features designed to enhance performance and compatibility.

    Key additions include "Automatic memory reclaim" which dynamically optimizes WSL's memory footprint, and "Sparse VHD" to shrink the size of the virtual hard disk file. These improvements aim to streamline resource usage.

    Additionally, a new "mirrored networking mode" brings expanded networking capabilities like IPv6 and multicast support. Microsoft claims this will improve VPN and LAN connectivity from both the Windows host and Linux guest. 

    Complementing this is a new "DNS Tunneling" feature that changes how DNS queries are resolved to avoid compatibility issues with certain network setups. According to Microsoft, this should reduce problems connecting to the internet or local network resources within WSL.

    Advanced firewall configuration options are also now available through Hyper-V integration. The new "autoProxy" feature ensures WSL seamlessly utilizes the Windows system proxy configuration.

    Microsoft states these features are currently rolling out to Windows Insiders running Windows 11 22H2 Build 22621.2359 or later. They remain opt-in previews to allow testing before final integration into WSL.

    By expanding WSL 2 with compelling new capabilities in areas like resource efficiency, networking, and security, Microsoft aims to make Linux on Windows more performant and compatible. This evolutionary approach based on user feedback highlights Microsoft's commitment to WSL as a key part of the Windows ecosystem.
    Windows


  • Linux Threat Report: Earth Lusca Deploys Novel SprySOCKS Backdoor in Attacks on Government Entities

    The threat actor Earth Lusca, linked to Chinese state-sponsored hacking groups, has been observed utilizing a new Linux backdoor dubbed SprySOCKS to target government organizations globally. 

    As initially reported in January 2022 by Trend Micro, Earth Lusca has been active since at least 2021 conducting cyber espionage campaigns against public and private sector targets in Asia, Australia, Europe, and North America. Their tactics include spear-phishing and watering hole attacks to gain initial access. Some of Earth Lusca's activities overlap with another Chinese threat cluster known as RedHotel.

    In new research, Trend Micro reveals Earth Lusca remains highly active, even expanding operations in the first half of 2023. Primary victims are government departments focused on foreign affairs, technology, and telecommunications. Attacks concentrate in Southeast Asia, Central Asia, and the Balkans regions. 

    After breaching internet-facing systems by exploiting flaws in Fortinet, GitLab, Microsoft Exchange, Telerik UI, and Zimbra software, Earth Lusca uses web shells and Cobalt Strike to move laterally. Their goal is exfiltrating documents and credentials, while also installing additional backdoors like ShadowPad and Winnti for long-term spying.

    The Command and Control server delivering Cobalt Strike was also found hosting SprySOCKS - an advanced backdoor not previously publicly reported. With roots in the Windows malware Trochilus, SprySOCKS contains reconnaissance, remote shell, proxy, and file operation capabilities. It communicates over TCP mimicking patterns used by a Windows trojan called RedLeaves, itself built on Trochilus.

    At least two SprySOCKS versions have been identified, indicating ongoing development. This novel Linux backdoor deployed by Earth Lusca highlights the increasing sophistication of Chinese state-sponsored threats. Robust patching, access controls, monitoring for unusual activities, and other proactive defenses remain essential to counter this advanced malware.

    The Trend Micro researchers emphasize that organizations must minimize attack surfaces, regularly update systems, and ensure robust security hygiene to interrupt the tactics, techniques, and procedures of relentless threat groups like Earth Lusca.
    Security


  • Linux Kernel Faces Reduction in Long-Term Support Due to Maintenance Challenges

    The Linux kernel is undergoing major changes that will shape its future development and adoption, according to Jonathan Corbet, Linux kernel developer and executive editor of Linux Weekly News. Speaking at the Open Source Summit Europe, Corbet provided an update on the latest Linux kernel developments and a glimpse of what's to come.

    A major change on the horizon is a reduction in long-term support (LTS) for kernel versions from six years to just two years. Corbet explained that maintaining old kernel branches indefinitely is unsustainable and most users have migrated to newer versions, so there's little point in continuing six years of support. While some may grumble about shortened support lifecycles, the reality is that constantly backporting fixes to ancient kernels strains maintainers.

    This maintainer burnout poses a serious threat, as Corbet highlighted. Maintaining Linux is largely a volunteer effort, with only about 200 of the 2,000+ developers paid for their contributions. The endless demands on maintainers' time from fuzz testing, fixing minor bugs, and reviewing contributions takes a toll. Prominent maintainers have warned they need help to avoid collapse. Companies relying on Linux must realize giving back financially is in their interest to sustain this vital ecosystem. 

    The Linux kernel is also wading into waters new with the introduction of Rust code. While Rust solves many problems, it also introduces new complexities around language integration, evolving standards, and maintainer expertise. Corbet believes Rust will pass the point of no return when core features depend on it, which may occur soon with additions like Apple M1 GPU drivers. Despite skepticism in some corners, Rust's benefits likely outweigh any transition costs.

    On the distro front, Red Hat's decision to restrict RHEL cloning sparked community backlash. While business considerations were at play, Corbet noted technical factors too. Using older kernels with backported fixes, as RHEL does, risks creating divergent, vendor-specific branches. The Android model of tracking mainline kernel dev more closely has shown security benefits. Ultimately, Linux works best when aligned with the broader community.

    In closing, Corbet recalled the saying "Linux is free like a puppy is free." Using open source seems easy at first, but sustaining it long-term requires significant care and feeding. As Linux is incorporated into more critical systems, that maintenance becomes ever more crucial. The kernel changes ahead are aimed at keeping Linux healthy and vibrant for the next generation of users, businesses, and developers.
    kernel


  • Linux Celebrates 32 Years with the Release of 6.6-rc2 Version

    Today marks the 32nd anniversary of Linus Torvalds introducing the inaugural Linux 0.01 kernel version, and celebrating this milestone, Torvalds has launched the Linux 6.6-rc2. Among the noteworthy updates are the inclusion of a feature catering to the ASUS ROG Flow X16 tablet's mode handling and the renaming of the new GenPD subsystem to pmdomain.

    The Linux 6.6 edition is progressing well, brimming with exciting new features that promise to enhance user experience. Early benchmarks are indicating promising results, especially on high-core-count servers, pointing to a potentially robust and efficient update in the Linux series.

    Here is what Linus Torvalds had to say in today's announcement:
    Another week, another -rc.I think the most notable thing about 6.6-rc2 is simply that it'sexactly 32 years to the day since the 0.01 release. And that's a roundnumber if you are a computer person.Because other than the random date, I don't see anything that reallystands out here. We've got random fixes all over, and none of it looksparticularly strange. The genpd -> pmdomain rename shows up in thediffstat, but there's no actual code changes involved (make sure touse "git diff -M" to see them as zero-line renames).And other than that, things look very normal. Sure, the architecturefixes happen to be mostly parisc this week, which isn't exactly theusual pattern, but it's also not exactly a huge amount of changes.Most of the (small) changes here are in drivers, with some tracingfixes and just random things. The shortlog below is short enough toscroll through and get a taste of what's been going on. Linus Torvalds


  • Introducing Bavarder: A User-Friendly Linux Desktop App for Quick ChatGPT Interaction

    Want to interact with ChatGPT from your Linux desktop without using a web browser?

    Bavarder, a new app, allows you to do just that.

    Developed with Python and GTK4/libadwaita, Bavarder offers a simple concept: pose a question to ChatGPT, receive a response, and promptly copy the answer (or your inquiry) to the clipboard for pasting elsewhere.

    With an incredibly user-friendly interface, you won't require AI expertise (or a novice blogger) to comprehend it. Type your question in the top box, click the blue send button, and wait for a generated response to appear at the bottom. You can edit or modify your message and repeat the process as needed.

    During our evaluation, Bavarder employed BAI Chat, a GPT-3.5/ChatGPT API-based chatbot that's free and doesn't require signups or API keys. Future app versions will incorporate support for alternative backends, such as ChatGPT 4 and Hugging Chat, and allow users to input an API key to utilize ChatGPT3.

    At present, there's no option to regenerate a response (though you can resend the same question for a potentially different answer). Due to the lack of a "conversation" view, tracking a dialogue or following up on answers can be challenging — but Bavarder excels for rapid-fire questions.

    As with any AI, standard disclaimers apply. Responses might seem plausible but could contain inaccurate or false information. Additionally, it's relatively easy to lead these models into irrational loops, like convincing them that 2 + 2 equals 106 — so stay alert!

    Overall, Bavarder is an attractive app with a well-defined purpose. If you enjoy ChatGPT and similar technologies, it's worth exploring.
    ChatGPT AI


  • LibreOffice 7.5.3 Released: Third Maintenance Update Brings 119 Bug Fixes to Popular Open-Source Office Suite

    Today, The Document Foundation unveiled the release and widespread availability of LibreOffice 7.5.3, which serves as the third maintenance update to the current LibreOffice 7.5 open-source and complimentary office suite series.

    Approximately five weeks after the launch of LibreOffice 7.5.2, LibreOffice 7.5.3 arrives with a new set of bug fixes for those who have successfully updated their GNU/Linux system to the LibreOffice 7.5 series.

    LibreOffice 7.5.3 addresses a total of 119 bugs identified by users or uncovered by LibreOffice developers. For a more comprehensive understanding of these bug fixes, consult the RC1 and RC2 changelogs.

    You can download LibreOffice 7.5.3 directly from the LibreOffice websiteor from SourceForge as binary installers for DEB or RPM-based GNU/Linux distributions. A source tarball is also accessible for individuals who prefer to compile the software from sources or for system integrators.

    All users operating the LibreOffice 7.5 office suite series should promptly update their installations to the new point release, which will soon appear in the stable software repositories of your GNU/Linux distributions.

    In early February 2023, LibreOffice 7.5 debuted as a substantial upgrade to the widely-used open-source office suite, introducing numerous features and improvements. These enhancements encompass major upgrades to dark mode support, new application and MIME-type icons, a refined Single Toolbar UI, enhanced PDF Export, and more.

    Seven maintenance updates will support LibreOffice 7.5 until November 30th, 2023. The next point release, LibreOffice 7.5.4, is scheduled for early June and will include additional bug fixes.

    The Document Foundation once again emphasizes that the LibreOffice office suite's "Community" edition is maintained by volunteers and members of the Open Source community. For enterprise implementations, they suggest using the LibreOffice Enterprise family of applications from ecosystem partners.
    LibreOffice


Linux Magazine News (path: lmi_news)









  • Hannah Montana Linux Is Back!
    Developer Noah Cagle decided the world needed the once obscure but beloved Linux distribution and gave it a decidedly pink refresh.



Page last modified on November 17, 2022, at 06:39 PM