Recent Changes - Search:
NTLUG

Linux is free.
Life is good.

Linux Training
10am on Meeting Days!

1825 Monetary Lane Suite #104 Carrollton, TX

Do a presentation at NTLUG.

What is the Linux Installation Project?

Real companies using Linux!

Not just for business anymore.

Providing ready to run platforms on Linux

Show Descriptions... (Show All/All+Images) (Single Column)

LinuxSecurity - Security Advisories







LWN.net

  • Rust 1.92.0 released
    Version1.92.0 of Rust has been released. This release includes a numberof stabilized APIs, emits unwind tables by default on Linux, validatesinput to #[macro_export], and much more. See the separaterelease notes for Rust,Cargo,and Clippy.



  • [$] Toward a policy for machine-learning tools in kernel development
    The first topic of discussion at the 2025 Maintainers Summit has been inthe air for a while: what role — if any — should machine-learning-basedtools have in the kernel development process? While there has been a fairamount of controversy around these tools, and concerns remain, it seemsthat the kernel community, or at least its high-level maintainership, iscomfortable with these tools becoming a significant part of the developmentprocess.


  • Security updates for Thursday
    Security updates have been issued by Debian (ffmpeg, firefox-esr, libsndfile, and rear), Fedora (httpd, perl-CGI-Simple, and tinyproxy), Oracle (firefox, kernel, libsoup, mysql8.4, tigervnc, tomcat, tomcat9, and uek-kernel), SUSE (alloy, curl, dovecot24, fontforge, glib2, himmelblau, java-17-openjdk, java-21-openjdk, kernel, krb5, lasso, libvirt, mozjs128, mysql-connector-java, nvidia-open-driver-G07-signed-check, openssh, poppler, postgresql17, postgresql18, python-cbor2, python-Django, python310, python311-Django, runc, strongswan, tomcat11, and xwayland), and Ubuntu (binutils, libpng1.6, linux, linux-aws, linux-aws-5.4, linux-gcp, linux-gcp-5.4, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-kvm, linux-oracle, linux-xilinx-zynqmp, linux, linux-aws, linux-aws-6.14, linux-gcp, linux-hwe-6.14, linux-raspi, linux, linux-aws, linux-gcp, linux-realtime, and qtbase-opensource-src).


  • [$] LWN.net Weekly Edition for December 11, 2025
    Inside this week's LWN.net Weekly Edition:
    Front: Rust in CPython; Python frozendict; Bazzite; IETF post-quantum disagreement; Distrobox; 6.19 merge window; Leaving the TAB. Briefs: Let's Encrypt retrospective; PKI infrastructure; Rust in kernel to stay; CNA series; Alpine 3.23.0; cmocka 2.0; Firefox 146; 2024 Free Software Awards; Quotes; ... Announcements: Newsletters, conferences, security updates, patches, and more.


  • 10 Years of Let's Encrypt Certificates
    Let's Encrypt has publisheda retrospective that covers the decade since it published its firstpublicly trusted certificate in September 2015:
    In March 2016, we issued our one millionth certificate. Just two yearslater, in September 2018, we were issuing a million certificates everyday. In 2020 we reached a billion total certificates issued and as oflate 2025 we're frequently issuing ten million certificates perday. We're now on track to reach a billion active sites, probablysometime in the coming year.


  • Kroah-Hartman: Linux CVEs, more than you ever wanted to know
    Greg Kroah-Hartman is writinga series of blog posts about Linux becoming a CertificateNumbering Authority (CNA):

    It's been almost 2 full years since Linux became a CNA (CertificateNumbering Authority) which meant that we (i.e. the kernel.orgcommunity) are now responsible for issuing all CVEs for the Linuxkernel. During this time, we've become one of the largest creators ofCVEs by quantity, going from nothing to number 3 in 2024 to number 1in 2025. Naturally, this has caused some questions about how we areboth doing all of this work, and how people can keep track of it.

    So far, Kroah-Hartman has published the introductory post, as wellas a detailedpost about kernel version numbers that is well worth reading.



  • [$] Mix and match Linux distributions with Distrobox
    Linux containers have made it reasonably easy to develop, distribute, anddeploy server applications along with all the distribution dependencies that theyneed. For example, anyone can deploy and run a Debian-based PostgreSQL container on a Fedora Linux host. Distrobox is a project that is designed tobring the cross-distribution compatibility to the desktop and allow users tomix-and-match Linux distributions without fussing with dual-booting, virtualmachines, or multiple computers. It is an ideal way to installadditional software on image-based systems, such as Fedora's Atomic Desktopsor Bazzite, and alsoprovides a convenient way to move a development environment orfavorite applications to a new system.


  • Security updates for Wednesday
    Security updates have been issued by AlmaLinux (abrt and kernel), Debian (libpng1.6, libsoup2.4, pdns-recursor, webkit2gtk, and wordpress), Fedora (imhex, libwebsockets, lunasvg, python3-docs, and python3.14), Mageia (python3 and webkit2), Red Hat (abrt, firefox, mysql8.4, and postgresql:15), Slackware (mozilla), SUSE (gegl, gnutls, go1.24, go1.25, libpng16-16, openssh, postgresql13, python-Jinja2, and sssd), and Ubuntu (fonttools and netty).


  • The (successful) end of the kernel Rust experiment
    The topic of the Rust experiment was just discussed at the annualMaintainers Summit. The consensus among the assembled developers is thatRust in the kernel is no longer experimental — it is now a core part of thekernel and is here to stay. So the "experimental" tag will be coming off.Congratulations are in order for all of the Rust for Linux team.
    (Stay tuned for details in our Maintainers Summit coverage.)


  • The 2024 Free Software Awards winners
    The Free Software Foundation has announcedthe recipients of its 2024 (even though 2025 is almost over) Free SoftwareAwards. Andy Wingo won the award for the advancement of free software, AlxSa is the outstanding new free-software contributor, and Govdirectory takesthe award for projects of social benefit.



LXer Linux News


  • Ubuntu 26.04 Snapshot 2 Released As Latest Monthly ISOs
    It was just at the end of month that Ubuntu 26.04 Snapshot 1 ISOs were published for the first "Resolute Raccoon" milestone. Out already is now Snapshot 2 with Canonical releasing these images ahead of their engineers having time off for end-of-year holidays...






  • Linux Kernel 5.4 Reaches End-of-Life: Time to Retire a Workhorse
    One of the most widely deployed Linux kernels has officially reached the end of its lifecycle. The maintainers of the Linux kernel have confirmed that Linux 5.4, once a cornerstone of countless servers, desktops, and embedded devices, is now end-of-life (EOL). After years of long-term support, the branch has been retired and will no longer receive upstream fixes or security updates.



  • Updated Intel LLM-Scaler-Omni Improves ComfyUI Performance For Arc Graphics
    The past several months Intel software engineers have been quite busy with LLM-Scaler as part of Project Battlematrix. LLM-Scaler is a Docker-based solution for AI workloads on Intel graphics hardware to ship an optimized vLLM stack and other AI frameworks. Out today is a new LLM-Scaler-Omni release to help enhance ComfyUI performance on Intel hardware...



Linux Insider"LinuxInsider"












Slashdot

  • GPT-5.2 Arrives as OpenAI Scrambles To Respond To Gemini 3's Gains
    OpenAI on Thursday released GPT-5.2, its latest and what the company calls its "best model yet for everyday professional use," just days after CEO Sam Altman declared a "code red" internally to marshal resources toward improving ChatGPT amid intensifying competition from Google's well-received Gemini 3 model. The GPT-5.2 series ships in three tiers: Instant, designed for faster responses and information retrieval; Thinking, optimized for coding, math, and planning; and Pro, the most powerful tier targeting difficult questions requiring high accuracy. OpenAI says the Thinking model hallucinated 38% less than GPT-5.1 on benchmarks measuring factual accuracy. Fidji Simo, OpenAI's CEO of applications, denied that the launch was moved up in response to the code red, saying the company has been working on GPT-5.2 for "many, many months." She described the internal directive as a way to "really signal to the company that we want to marshal resources in this one particular area." The competitive pressure is real. Google's Gemini app now has more than 650 million monthly active users, compared to OpenAI's 800 million weekly active users. In October, OpenAI's head of ChatGPT Nick Turley sent an internal memo declaring the company was facing "the greatest competitive pressure we've ever seen," setting a goal to increase daily active users by 5 percent before 2026. GPT-5.2 is rolling out to paid ChatGPT users starting Thursday, and GPT-5.1 will remain available under "legacy models" for three months before being sunset.


    Read more of this story at Slashdot.


  • College Campuses Have Become a Front Line in America's Sports-Betting Boom
    Since the Supreme Court struck down the federal prohibition on sports betting in 2018, 39 states have legalized the activity, and college campuses have emerged as ground zero for what appears to be a generational gambling problem among young men. A 2023 NCAA survey found that 60% of college students have gambled on sports, and 16% of 18-to-22-year-olds engage in what the organization classifies as problematic gambling. A Siena University poll from January found that 28% of men aged 18-to-34 who use sports-betting apps have had trouble meeting a financial obligation because of a lost bet. Timothy Fong, a psychiatry professor at UCLA, says every one of his recent clients has been an 18-to-24-year-old man seeking help for a sports-betting or cryptocurrency addiction. John Simonian, a personal-bankruptcy lawyer in Rhode Island, says he never used to see young men filing for bankruptcy -- now it's common. On November 7th, the NCAA announced it had uncovered three separate betting scandals in men's basketball where athletes intentionally played poorly in games on which they or a friend had placed wagers.


    Read more of this story at Slashdot.


  • The Game Awards Are Losing Their Luster
    The Game Awards, which broadcasts tonight on Twitch, YouTube, and Prime Video, has become the biggest night on the video game calendar since launching in 2014, but the show's treatment of developers has drawn increasing criticism. At the 2023 ceremony, acceptance speeches were often cut off after roughly 30 seconds while Hideo Kojima received five minutes to discuss his upcoming game OD -- enough time for 13 acceptance speeches, Aftermath calculated. That year's show also ignored the industry's mass layoffs entirely; host Geoff Keighley acknowledged the labor crisis only at the 2024 ceremony. The show's Future Class program, launched in 2020 to celebrate game makers representing an inclusive future for the industry, has quietly ended. No new class has been named for two years. "At this time, we are not planning a new Future Class for this year," organizer Emily Weir told Game Developer.


    Read more of this story at Slashdot.


  • Why Switzerland Is Weighing a 10 Million Population Limit
    An anonymous reader shares a report: Growing support for far-right parties is pressuring European governments to introduce stricter controls on immigration. Switzerland is set to vote on a proposal that would take the idea to the next level -- imposing a cap on its population [non-paywalled link]. The initiative could lead eventually to a blanket ban on new arrivals if the number of residents rises from around 9 million currently to above 10 million, with little distinction made between refugees, skilled workers and top managers on six-figure salaries. Citizens will likely vote on the proposal next year under the country's unique system of plebiscites on constitutional amendments and policy, and polls suggest there's a chance they'll approve it. The risk is it could lead to shortages of critical skills that end up harming Switzerland's competitiveness. The outcome will show how far citizens are willing to go to preserve some of the traits that made their country such an appealing destination. [...] The right-wing Swiss People's Party, or SVP, won 28% of the vote in the last election with a campaign that presented Swiss citizenship as a privilege, not a right. It came up with the idea of a population limit in 2023, presenting it as a way to preserve the Swiss lifestyle and protect its environment from excessive human activity.


    Read more of this story at Slashdot.


  • AI Hackers Are Coming Dangerously Close to Beating Humans
    Stanford researchers spent much of the past year building an AI bot called Artemis that scans networks for software vulnerabilities, and when they pitted it against ten professional penetration testers on the university's own engineering network, the bot outperformed nine of them. The experiment offers a window into how rapidly AI hacking tools have improved after years of underwhelming performance. "We thought it would probably be below average," said Justin Lin, a Stanford cybersecurity researcher. Artemis found bugs at a fraction of human cost -- just under $60 per hour compared to the $2,000 to $2,500 per day that professional pen testers typically charge. But its performance wasn't flawless. About 18% of its bug reports were false positives, and it completely missed an obvious vulnerability on a webpage that most human testers caught. In one case, Artemis found a bug on an outdated page that didn't render in standard browsers; it used a command-line tool called Curl instead of Chrome or Firefox. Dan Boneh, a Stanford computer science professor who advised the researchers, noted that vast amounts of software shipped without being vetted by LLMs could now be at risk. "We're in this moment of time where many actors can increase their productivity to find bugs at an extreme scale," said Jacob Klein, head of threat intelligence at Anthropic.


    Read more of this story at Slashdot.


  • Disney Puts $1 Billion Into OpenAI, Licenses 200+ Characters for AI-Generated Videos and Images
    Disney is investing $1 billion in OpenAI and has entered into a three-year licensing deal that will let users generate AI-powered short videos and images featuring more than 200 characters from its Disney, Marvel, Star Wars and Pixar franchises. The new features are expected to launch in 2026 through Sora, OpenAI's short-form video platform, and ChatGPT. A selection of user-generated short videos will also be available to stream on Disney+. The licensing agreement excludes any talent likenesses or voices. Disney will receive warrants to purchase additional OpenAI equity as part of the arrangement, and its employees will gain access to OpenAI tools including ChatGPT for building new products.


    Read more of this story at Slashdot.


  • Opera Wants You To Pay $20 a Month For Its AI Browser
    Opera has opened its AI-powered browser Neon to the public after a couple of months of testing, and anyone interested in trying it will need to pay $19.90 per month. The Norway-based company first unveiled Neon in May and launched it in early access to select users in October. Like Perplexity's Comet, OpenAI's Atlas, and The Browser Company's Dia, Neon bakes an AI chatbot into its interface that can answer questions about pages, create mini apps and videos, and perform tasks. The browser uses your browsing history as context, so you can ask it to fetch details from a YouTube video you watched last week. The subscription also grants access to AI models including Gemini 3 Pro and GPT-5.1.


    Read more of this story at Slashdot.


  • US Could Ask Foreign Tourists For Five-Year Social Media History Before Entry
    Tourists from dozens of countries including the UK could be asked to provide a five-year social media history as a condition of entry to the United States, under a new proposal unveiled by American officials. From a report: The new condition would affect people from dozens of countries who are eligible to visit the US for 90 days without a visa, as long as they have filled out an Electronic System for Travel Authorization (ESTA) form. Since returning to the White House in January, President Donald Trump has moved to toughen US borders more generally - citing national security as a reason. Analysts say the new plan could pose an obstacle to potential visitors, or harm their digital rights. Asked whether the proposal could lead to a steep drop-off in tourism to the US, Trump said he was not concerned. "No. We're doing so well," the president said on Wednesday. "We just want people to come over here, and safe. We want safety. We want security. We want to make sure we're not letting the wrong people come enter our country."


    Read more of this story at Slashdot.


  • New OpenAI Models Likely Pose 'High' Cybersecurity Risk, Company Says
    An anonymous reader quotes a report from Axios: OpenAI says the cyber capabilities of its frontier AI models are accelerating and warns Wednesday that upcoming models are likely to pose a "high" risk, according to a report shared first with Axios. The models' growing capabilities could significantly expand the number of people able to carry out cyberattacks. OpenAI said it has already seen a significant increase in capabilities in recent releases, particularly as models are able to operate longer autonomously, paving the way for brute force attacks. The company notes that GPT-5 scored a 27% on a capture-the-flag exercise in August, GPT-5.1-Codex-Max was able to score 76% last month. "We expect that upcoming AI models will continue on this trajectory," the company says in the report. "In preparation, we are planning and evaluating as though each new model could reach 'high' levels of cybersecurity capability as measured by our Preparedness Framework." "High" is the second-highest level, below the "critical" level at which models are unsafe to be released publicly. "What I would explicitly call out as the forcing function for this is the model's ability to work for extended periods of time," said OpenAI's Fouad Matin.


    Read more of this story at Slashdot.


  • Sperm Donor With Cancer-Causing Gene Fathered Nearly 200 Children Across Europe
    schwit1 shares a report from CBS News: perm from a donor who unknowingly carried a cancer-causing gene has been used to conceive nearly 200 babies across Europe, an investigation by 14 European public service broadcasters, including CBS News' partner network BBC News, has revealed. Some children conceived using the sperm have already died from cancer, and the vast majority of those who inherited the gene will develop cancer in their lifetimes, geneticists said. The man carrying the gene passed screening checks before he became a donor at the European Sperm Bank when he was a student in 2005. His sperm has been used by women trying to conceive for 17 years across multiple countries. The cancer-causing mutation occurred in the donor's TP53 gene -- which prevents cells in the body from turning cancerous -- before his birth, according to the investigation. It causes Li Fraumeni syndrome, which gives affected people a 90% chance of developing cancers, particularly during childhood, as well as breast cancer in later life. Up to 20% of the donor's sperm contained the mutated TP53 gene. Any children conceived with affected sperm will have the dangerous mutation in every cell of their body. The affected donor sperm was discovered when doctors seeing children with cancers linked to sperm donation raised concerns at this year's European Society of Human Genetics. At the time, 23 children with the genetic mutation had been discovered, out of 67 children linked to the donor. Ten of those children with the mutation had already been diagnosed with cancer. Freedom of Information requests submitted by journalists across multiple countries revealed at least 197 children were affected, though it is not known how many inherited the genetic mutation. More affected children could be discovered as more data becomes available.


    Read more of this story at Slashdot.


The Register

  • European cloud trade group says EU should have blocked VMware-Broadcom merger
    Org argues that the approval process was flawed and regulators should have known better
    A trade group of European cloud providers has laid into the European Commission’s decision to allow the VMware-Broadcom merger to go ahead, alleging that it failed to assess the infrastructure and semiconductor company’s incentives to massively raise prices on customers.…


  • Space-power startup claims it can beam energy to solar farms
    So far, Overview Energy says it has only beamed power from a moving aircraft to standard solar panels
    You can't generate solar power at night unless your panels are in space. A startup that wants to beam orbital sunlight straight into existing solar farms has just emerged from stealth, claiming a world-first power-beaming demo, but with a lot of critical information left unreported. …


  • Google fixes super-secret 8th Chrome 0-day
    No details, no CVE, update your browser now
    Google issued an emergency fix for a Chrome vulnerability already under exploitation, which marks the world's most popular browser's eighth zero-day bug of 2025.…


  • LastPass hammered with £1.2M fine for 2022 breach fiasco
    UK data regulator says failures were unacceptable for a company managing the world's passwords
    The UK's Information Commissioner's Office (ICO) says LastPass must cough up £1.2 million ($1.6 million) after its two-part 2022 data breach compromised information from up to 1.6 million UK users.…




  • Trump's AI 'Genesis Mission' emerges from Land of Confusion
    DOE lays out $320M plan for science platform linking national labs, industry, and academia
    President Trump's "Genesis Mission" is taking shape with the award of more than $320 million from the Department of Energy (DOE) to advance AI in scientific research.…



  • Microsoft research shows chatbots seeping into everyday life
    Copilot – your cuddly companion for nighttime introspection
    Microsoft analyzed 37.5 million de-identified Copilot conversations from January to September 2025, excluding commercial and educational accounts. The findings reveal distinct usage patterns based on device, time, and day.…


  • 10K Docker images spray live cloud creds across the internet
    Flare warns devs are unwittingly publishing production-level secrets
    Docker Hub has quietly become a treasure trove of live cloud keys and credentials, with more than 10,000 public container images exposing sensitive secrets from over 100 companies, including a Fortune 500 firm and a major bank.…



Linux.com









  • Xen 4.19 is released
    Xen Project 4.19 has been officially out since July 31st, 2024, and it brings significant updates. With enhancements in performance, security, and versatility across various architectures like Arm, PPC, RISC-V, and x86, this release is an important milestone for the Xen community. Read more at XCP-ng Blog

    The post Xen 4.19 is released appeared first on Linux.com.


  • Advancing Xen on RISC-V: key updates
    At Vates, we are heavily invested in the advancement of Xen and the RISC-V architecture. RISC-V, a rapidly emerging open-source hardware architecture, is gaining traction due to its flexibility, scalability and openness, which align perfectly with our ethos of fostering open development ecosystems. Although the upstream version of Xen for RISC-V is not yet fully [0]

    The post Advancing Xen on RISC-V: key updates appeared first on Linux.com.


Phoronix

  • System76 Launches Pop!_OS 24.04 LTS With COSMIC Desktop
    Back in October System76 announced a planned release date for Pop!_OS 24.04 LTS and the COSMIC Desktop... And they've made it! The new Pop!_OS 24.04 is now available for download as the long-awaited update atop an Ubuntu 24.04 LTS base while using their Rust-based COSMIC desktop environment...


  • D7VK 1.0 Released For "Production Ready" Direct3D 7 On Vulkan
    The D7VK project recently started as the Direct3D 7 API implemented atop the Vulkan API akin to DXVK and VKD3D-Proton with newer versions of Microsoft Direct3D. Today marks the D7VK 1.0 release for this project in now declaring itself "production ready" for Linux gamers...


  • NVIDIA GTX 980 Through RTX 5080: Open-Source Nouveau/Mesa Drivers vs. NVIDIA 580 Linux Drivers
    With the NVIDIA 590 Linux driver series removing GeForce 900 series "Maxwell" and GeForce 10 series "Pascal" as part of punting it off to the latest legacy driver branch, it9s time for a last look at how the mainline NVIDIA Linux driver is performing with these aging graphics cards relative to the current state of the upstream open-source NVIDIA Linux drivers. In this article is a look at how the open-source and upstream Nouveau kernel driver with Nouveau/NVK Mesa drivers are performing relative to the NVIDIA 580 series with its Maxwell and Pascal support. For further perspective is also tossing in newer graphics cards too for providing a end-of-year GeForce 980 / 1080 / 2080 / 3080 / 4080 / 5080 series comparison between these different Linux drivers.


  • AMD GAIA 0.14 Released With Native Support For Linux & macOS
    Early this year AMD announced the open-source GAIA project for "Generative AI Is Awesome" as a showcase of AI support atop their Ryzen AI NPUs and other hardware. That began as a Windows-only project but in September AMD added Linux support to GAIA but only using Vulkan acceleration for AI on Radeon GPUs. Now today GAIA 0.14 is available with "native" support for both macOS and Linux...


  • Ubuntu 26.04 Snapshot 2 Released As Latest Monthly ISOs
    It was just at the end of month that Ubuntu 26.04 Snapshot 1 ISOs were published for the first "Resolute Raccoon" milestone. Out already is now Snapshot 2 with Canonical releasing these images ahead of their engineers having time off for end-of-year holidays...




  • Microsoft Is Back To Working On "Hornet" Security For eBPF Programs On Linux
    Earlier in the year Microsoft proposed the "Hornet" Linux security module to provide signature verification capabilities for eBPF programs to provide for better system security. It's been months since hearing anything more about it and not being merged, but yesterday they "reintroduced" it to the Linux kernel community...


  • Mesa9s "Present Timing" Vulkan Driver Support Now Feature Complete
    Last month the Vulkan VK_EXT_present_timing extension was merged after 5+ years in development. VK_EXT_present_timing ended up debuting at the end of November within the Vulkan 1.4.335 spec update to much excitement for providing functionality to obtain information on the presentation engine's display for accurate timing information and to assist in scheduling a present to happen no earlier than a desired time. This is a big win for helping avoid game stuttering and more while now the Mesa support for it is nearly complete and could be merged soon...




Engadget"Engadget is a web magazine with obsessive daily coverage of everything new in gadgets and consumer electronics"

  • OpenAI releases GPT-5.2 to take on Google and Anthropic
    OpenAI9s "code red" response to Google9s Gemini 3 Pro has arrived. On the same day the company announced a Sora licensing pact with Disney, it took the wraps off GPT-5.2. OpenAI is touting the new model as its best yet for real-world, professional use. “It’s better at creating spreadsheets, building presentations, writing code, perceiving images, understanding long contexts, using tools, and handling complex, multi-step projects,” said OpenAI.

    In a series of 10 benchmarks highlighted by OpenAI, GPT-5.2 Thinking, the most advanced version of the model, outperformed its GPT-5.1 counterpart, sometimes by a significant margin. For example, in AIME 2025, a test that involves 30 challenging mathematics problems, the model earned a perfect 100 percent score, beating out GPT-5.1’s already state-of-the-art score of 94 perfect. It also achieved that feat without turning to tools like web search. Meanwhile, in ARC-AGI-1, a benchmark that tests an AI system’s ability to reason abstractly like a human being would, the new system beat GPT-5.1’s score by more than 10 percentage points.

    OpenAI says GPT-5.2 Thinking is better at answering questions factually, with the company finding it produces errors 30 percent less frequently. “For professionals, this means fewer mistakes when using the model for research, writing, analysis, and decision support — making the model more dependable for everyday knowledge work,” the company said.

    The new model should be better in conversation too. Of the version of the system most users are likely to encounter, OpenAI says “GPT‑5.2 Instant is a fast, capable workhorse for everyday work and learning, with clear improvements in info-seeking questions, how-tos and walk-throughs, technical writing, and translation, building on the warmer conversational tone introduced in GPT‑5.1 Instant.“

    While it9s probably overstating things to suggest this is a make or break release for OpenAI, it is fair to say the company does have a lot riding on GPT 5.2. Its big release of 2025, GPT-5, didn9t meet expectations. Users complained of a system that generated surprisingly dumb answers and had a boring personality. The disappointment with GPT-5 was such that people began demanding OpenAI bring back GPT-4o.      

    Then came Gemini 3 Pro — which jumped to the top of LMArena, a website where humans rate outputs from AI systems to vote on the best one. Following Google9s announcement, Sam Altman reportedly called for a "code red" effort to improve ChatGPT. Before today, the company9s previous model, GPT-5.1, was ranked sixth on LMArena, with systems from Anthropic and Elon Musk9s xAI occupying the spots between OpenAI between Google. 

    For a company that recently signed more than $1.4 trillion worth of infrastructure deals in a bid to outscale the competition, that was not a good position for OpenAI to be in. In his memo to staff, Altman said GPT-5.2 would be the equal of Gemini 3 Pro. With the new system rolling out now, we9ll see whether that9s true, and what it might mean for the company if it can9t at least match Google9s best.     

    OpenAI is offering three different versions of GPT-5.2: Instant, Thinking and Pro. All three models will be first available to users on the company’s paid plans. Notably, the company plans to keep GPT-5.1 around, at least for a little while. Paid users can continue to use the older model for the next three months by selecting it from the legacy models section.
    This article originally appeared on Engadget at https://www.engadget.com/ai/openai-releases-gpt-52-to-take-on-google-and-anthropic-185029007.html?src=rss


  • Lawsuit accuses ChatGPT of reinforcing delusions that led to a woman's death
    OpenAI has been hit with a wrongful death lawsuit after a man killed his mother and took his own life back in August, according to a report by The Verge. The suit names CEO Sam Altman and accuses ChatGPT of putting a "target" on the back of victim Suzanne Adams, an 83-year-old woman who was killed in her home.

    The victim9s estate claims the killer, 56-year-old Stein-Erik Soelberg, engaged in delusion-soaked conversations with ChatGPT in which the bot "validated and magnified" certain "paranoid beliefs." The suit goes on to suggest that the chatbot "eagerly accepted" delusional thoughts leading up to the murder and egged him on every step of the way.

    The lawsuit claims the bot helped create a "universe that became Stein-Erik’s entire life—one flooded with conspiracies against him, attempts to kill him, and with Stein-Erik at the center as a warrior with divine purpose." ChatGPT allegedly reinforced theories that he was "100% being monitored and targeted" and was "100% right to be alarmed."

    The chatbot allegedly agreed that the victim9s printer was spying on him, suggesting that Adams could have been using it for "passive motion detection" and "behavior mapping." It went so far as to say that she was "knowingly protecting the device as a surveillance point" and implied she was being controlled by an external force.

    The chatbot also allegedly "identified other real people as enemies." These included an Uber Eats driver, an AT&T employee, police officers and a woman the perpetrator went on a date with. Throughout this entire period, the bot repeatedly assured Soelberg that he was "not crazy" and that the "delusion risk" was "near zero."

    The lawsuit notes that Soelberg primarily interfaced with GPT-4o, a model notorious for its sycophancy. OpenAI later replaced the model with the slightly-less agreeable GPT 5, but users revolted so the old bot came back just two days later. The suit also suggests that the company "loosened critical safety guardrails" when making GPT-4o to better compete with Google Gemini.

    "OpenAI has been well aware of the risks their product poses to the public," the lawsuit states. "But rather than warn users or implement meaningful safeguards, they have suppressed evidence of these dangers while waging a PR campaign to mislead the public about the safety of their products."

    OpenAI has responded to the suit, calling it an "incredibly heartbreaking situation." Company spokesperson Hannah Wong told The Verge that it will "continue improving ChatGPT9s training to recognize and respond to signs of mental or emotional distress."

    It9s not really a secret that chatbots, and particularly GPT-4o, can reinforce delusional thinking. That9s what happens when something has been programmed to agree with the end user no matter what. There have been other stories like this throughout the past year, bringing the term "AI psychosis" to the mainstream.

    One such story involves 16-year-old Adam Raine, who took his own life after discussing it with GPT-4o for months. OpenAI is facing another wrongful death suit for that incident, in which the bot has been accused of helping Raine plan his suicide.
    This article originally appeared on Engadget at https://www.engadget.com/ai/lawsuit-accuses-chatgpt-of-reinforcing-delusions-that-led-to-a-womans-death-183141193.html?src=rss


  • Google Disco is an experimental web browser that builds AI widgets based on your tabs

    The latest experiment emerging out of Google Labs is Disco, which is the company9s AI-driven approach to web browsing. The first feature for Disco is called GenTabs, built on Google9s Gemini 3 model. 

    GenTabs are interactive widgets created from a mix of user prompts, open tabs and chat history. The preview examples demonstrate how GenTabs can create a model to demonstrate entropy as a study aid, or collect trip ideas into one screen for building an itinerary. The GenTab can be further refined with natural language requests, and it will also offer contextual suggestions for additions that may be helpful. Google9s blog post announcing this concept notes that information given in a GenTab will include links to its sources. 

    Google has a waitlist for people who want to try out Disco and GenTabs, although for now it9s only on macOS. Google Labs projects don9t always go the distance to an official public release, and the company even acknowledged that GenTabs will likely have some wonkiness at this experimental stage. But it9s been clear for months that big tech companies are gunning for the best and fastest ways to put their AI tools into browsers, so it seems likely that there will be more features in this vein coming up soon.
    This article originally appeared on Engadget at https://www.engadget.com/ai/google-disco-is-an-experimental-web-browser-that-builds-ai-widgets-based-on-your-tabs-180000701.html?src=rss


  • Rivian goes all in on 'universal hands-free' driving at its first Autonomy and AI day
    EV automaker Rivian just held its inaugural Autonomy and AI day which, unsurprisingly, focused extensively on hands-free driving. An upcoming software update promises the introduction of "universal hands-free" driving. The company says its vehicles will be able to autonomously navigate more than 3.5 million miles of roads in North America, "covering the vast majority of marked roads in the US."

    This is coming to the R2 line of EVs, but also Gen 2 R1 vehicles like the recently-released Rivian R1S. The service will be locked behind a subscription for something called Autonomy+ that includes self-driving, but also offers access to forthcoming and unannounced autonomous features. Rivian customers can pay $2,500 for lifetime access to the platform or $50 per month.

    The R2 is getting LiDAR sensors, which will presumably help enable some of those upcoming autonomous features, in addition to a new chip called the Rivian Autonomy Processor. The processor has been designed for multimodal applications and runs the company9s proprietary neural net engine. Both of these features are expected "to ship on R2 models starting at the end of 2026."

    Today9s event wasn9t just about hands-free driving. Many of the company9s vehicles will soon be given access to the AI-powered Rivian Assistant, which uses LLMs and can connect to apps like Google Calendar. This assistant will be model-agnostic, as it will "orchestrate different models and choose the best one for the task."

    In addition to the upcoming R2, the company is prepping the R3 and R3X. A Rivian offshoot just introduced an extremely expensive, but modular, electric bike called the TM-B.
    This article originally appeared on Engadget at https://www.engadget.com/transportation/evs/rivian-goes-all-in-on-universal-hands-free-driving-at-its-first-autonomy-and-ai-day-172004733.html?src=rss


  • Disney has accused Google of copyright infringement on a 'massive scale'
    Disney has accused Google of copyright infringement on a "massive scale," alleging that the tech giant is training its AI tools on protected materials as well as allowing those tools to generate infringing images and videos. Variety reports that Disney attorneys sent a cease-and-desist letter to Google on Wednesday.

    “Google is infringing Disney’s copyrights on a massive scale, by copying a large corpus of Disney’s copyrighted works without authorization to train and develop generative artificial intelligence (‘AI’) models and services, and by using AI models and services to commercially exploit and distribute copies of its protected works to consumers in violation of Disney’s copyrights,” reads the letter, which Variety reviewed.

    The letter includes examples of images from several Disney properties including Deadpool, Moana, Star Wars and others, reproduced by Google9s AI tools. Disney is demanding that Google implement guardrails within all its AI products to prevent further infringement. The media giant sent a similar letter to Character.AI in September, and is currently suing Hailuo and Midjourney over alleged copyright infringement.

    Copyright enforcement has become more challenging in the face of AI-created imagery, and companies are increasingly taking an "if you can9t beat them, join them" approach. Today Disney announced a deal with OpenAI to license its characters for use in Sora, OpenAI9s video generator. The deal will see Disney invest $1 billion in OpenAI (a paltry sum by some standards), with the option to purchase additional equity at a later date.
    This article originally appeared on Engadget at https://www.engadget.com/ai/disney-has-accused-google-of-copyright-infringement-on-a-massive-scale-163737642.html?src=rss


  • CES 2026 preview: What to expect from tech's biggest conference in January
    CES doesn't start until January, but whispers of the products and announcements that could be in store for tech's biggest annual conference have already started to take shape. The CES 2026 show floor is officially open from January 6 through 9, although the show kicks off with events on Sunday January 4 and a host of press conferences on Monday. As always, product demos, announcements and networking will be happening at the Las Vegas Convention Center and surrounding hotels all over the city. As usual, Engadget will be covering the event in-person and remotely, bringing you news and hands-ons straight from the show floor.

    More specific details and pre-announcements should trickle out as CES approaches, but in the meantime, we do know what companies will be hosting press conferences and what tech trends could rear their heads at the show.
    What we already know about
    Press conferences and show floor booths are the bread and butter of CES. The Consumer Technology Association has already published a searchable directory of who will have a presence at the show, along with a schedule of every official panel and presentation.

    On Sunday, January 4, Samsung will kick-off CES with "The First Look," a presentation hosted by TM Roh, the CEO of Samsung's DX Division, on the company's "vision for the DX (Device eXperience) Division in 2026, along with new AI-driven customer experiences." 

    That'll be followed by multiple press conferences throughout Monday, January 5. LG is hosting its "Innovation in Tune with You" presentation to share "its vision for elevating daily life through Affectionate Intelligence" at the start of the day, Intel is launching its new Core Ultra Series 3 processors in the afternoon, Sony Honda Mobility is holding a press conference on its first car and AMD CEO Lisa Su will cover AMD's upcoming chip announcements at a keynote address that closes out the day.

    Finally, on Tuesday, January 6, Lenovo CEO Yuanqing Yang will host Lenovo's Tech World Conference at Sphere, using the large and decidedly curved screen to share the company's "commitment to delivering smarter AI for all by constantly redefining how technology can engage, inspire, and empower." It’s worth noting that Lenovo is the parent company of Motorola, which still makes phones and foldables that feature AI tools, so it’s possible those devices feature in the presentation as well.

    Outside of the formal introduction of new products and initiatives, reading the tea leaves of what was announced last year and what companies are reportedly working on, we can make some educated guesses at what we could see at CES 2026.
    New chips from AMD, Intel and Qualcomm
    CES is frequently the start of a cascade of new chip announcements for a given year, and one of the first places new silicon appears in real consumer products. AMD will likely use its keynote to introduce new versions of its Ryzen chips, including the recently spotted Ryzen 7 9850X3D, which is expected to offer better single-threaded performance, and the Ryzen 9000G series, which could be built with AMD's Zen 5 architecture. The company might also use its CES stage to go over its new FSR Redstone AI upscaling tech.

    Intel has already publicly announced that it'll launch its Panther Lake chips at CES 2026. The officially titled Intel Core Ultra Series 3 chips fit into Intel's overall "AI PC" push, but are specifically meant for premium laptops. Based on a preview from October 2025, Intel says the first chip made with its 2-nanometer 18A process will offer 50 percent more processing performance than previous generations and for the chip's Arc GPU, a 50 percent performance bump from last generation.

    Qualcomm is also rumored to be targeting laptops at the show, building on the work it's done moving its Snapdragon chips out of phones and tablets and into other types of computers. The company's Snapdragon X2 Elite and X2 Elite Premium chips should start appearing in laptops at CES 2026, offering a look at the improved speed and AI performance the company promised in 2025.
    Brighter, "truer" screens
    Sony announced a collection of new Bravia TVs in April 2025, replacing the company's flagship, filling in its midrange options and adding a new budget model to the mix. The star of this updated Bravia lineup is the Bravia 9, which features a QD-OLED panel, but Sony appears to be prepping entirely new display tech for 2026. In March 2025, Sony introduced a new RGB LED panel that uses individual Mini LED backlights colored in red, green and blue to produce even brighter, more accurate colors. In contrast to a QD-OLED, which filters a layer of blue organic light emitting diodes through quantum dots that change color, Sony's "General RGB LED Backlight Technology" can get as bright as a Mini LED panel without needing an extra filter layer or worrying about OLED's problems with burn-in. 

    The company has already trademarked the name "True RGB," which could end up being what Sony calls this new flavor of display if it decides to show them off at CES. It seems entirely likely, because CES is nothing if not a TV show — it’s a sure bet that we’ll see new TVs from the likes of LG and Samsung in addition to Sony. If the company doesn't introduce new display tech for its TVs, it does have a new 240Hz PlayStation monitor coming in 2026 that it could show off at CES instead.

    Sony isn't the only company hyped on bright screens. Samsung is reportedly pushing an updated version of the HDR10 and HDR10+ standards that could be ready to demo at CES 2026. The new HDR10+ Advanced standard would be Samsung's answer to Dolby Vision 2, which includes support for things bi-directional tone mapping and intelligent features that automatically adapt sports and gaming content. Samsung's take will reportedly offer improved brightness, genre-based tone mapping and intelligent motion smoothing options, among other improvements.
    Ballie Watch 2026
    The ball-shaped yellow robot lovingly known as "Ballie" has been announced twice, first in 2020 and then again in 2024 with a projector in tow. Samsung said Ballie would go on sale in 2025 at CES last year and then shared in April 2025 that Ballie would ship this summer with Google's Gemini onboard. But it's nearly 2026, and Ballie is nowhere to be seen. It's possible Samsung could make a third attempt at announcing its robot at CES 2026, but whether or not it does, robotics will still be a big part of the show.

    Robot vacuums and mops were a major highlight of CES 2025, and it's safe to expect notable improvements from the new models that are announced at CES 2026. Not every company will adopt the retractable arm of the Roborock Saros Z70, but robot vacuums with legs for rising over small ledges like the Dreame X50 seem like they could become the norm. Roborock could also show off its new Roborock Qrevo Curv 2 Flow, the first of its robot vacuums to feature a retractable roller mop.

    Beyond just traversing spaces more efficiently, improving robots' navigation could also be a major concern at the show. Prominent members of the AI industry are turning their attention from large language models to world models, which aim to give AI a deep understanding of physical space. Those world models could be the key to making robots, bipedal or otherwise, competent at navigating homes and workplaces, and will likely be a significant talking point at CES 2026.

    We’ll be updating this article throughout the month as more rumors surface and new products are confirmed — stay tuned for future updates!

    Update, December 11 2025, 11:03AM ET: This story has been updated to include detail on Lenovo being Motorola’s parent company and how the latter might have a part in the Tuesday presentation.






    This article originally appeared on Engadget at https://www.engadget.com/big-tech/ces-2026-preview-what-to-expect-from-techs-biggest-conference-in-january-120000200.html?src=rss


  • The best Christmas gifts to give everyone on your 2025 holiday shopping list
    Finding the right gifts for everyone on your list this time of year can be a major source of stress. It can be even more daunting if you’re trying to stick to a budget all while getting the folks you love things that they will really appreciate. But there’s also a good chance you’re getting fed bad gift ideas (and just as bad deals) if you’re browsing the web frantically searching as we get closer and closer to the holidays.

    Allow us at Engadget to help you through it. Here, you’ll find all of our holiday gift guides collected in one place, so you can more easily find the best Christmas gifts you need this year. Are you looking for white elephant gift ideas? Are you struggling to come up with a good gift for the father figure in your life? Are you just looking for a good board game to pick up for your own family? We’ve got you covered with gift ideas for all of those scenarios and more.
    Best white elephant gift ideas


    According to legend, the King of Siam would give a white elephant to courtiers who had upset them. The recipient had no choice but to simply thank the king for such an opulent gift, knowing that they likely could not afford the upkeep for such an animal. It would inevitably lead them to financial ruin. This story is almost certainly untrue, but it has led to a modern holiday staple: the white elephant gift exchange. These gift ideas will not only get you a few chuckles, but will also make your recipient feel (slightly) burdened.

    Read more: the best Nintendo Switch 2 accessories for even more ideas.

    Read more: The best Nintendo gifts for the holiday season
    Best retro gaming gifts


    The stream of new video games never ends, but for some of us, nothing beats the classics. If you don’t feel like hunting through eBay and local game shops for old cartridges to add to your loved one’s collection, we’ve picked out a few other gift ideas for the nostalgic gamer in your life — from video upscalers for old consoles to retro-themed books and artwork.

    Read more: The best retro gaming gifts for the holidays
    Best gifts for gamers


    The year may not be over, but 2025 is all but guaranteed to go down as one of the best 12 months in gaming history. Between releases like Hades 2, Hollow Knight: Silksong and Ghost of Yotei, to name just a few, there was truly something for everyone in 2025. Of course, that abundance also means it can be tricky to find a gift for the gamers in your life, especially if you9re not one yourself. Worry not — Engadget is here to help. We guarantee our guide will help you find the perfect gift for your friend or loved one.

    Read more: The best gifts for gamers
    Best gifts for moms


    Some moms really do mean it when they say they don’t need any gifts. But those same moms will probably appreciate getting something thoughtful and personal — a gift that shows you put in a bit of consideration. It’s tough to pin-point what that ideal gift is for any given mom, but we’ve got ideas to get you started. Since we spend our days testing and otherwise thinking about tech, most of the presents here have a gadget spin, but all of them are a heck of a lot more unique than a candle and a bath bomb.

    Read more: The best gifts for mom
    Best gifts for dads


    It9s not always easy to find gifts for dads, especially for those who are often quick to snap up whatever they need on their own. But even the geekiest and most well-informed dads have blind spots — the trick is to find something they9ve never heard of, but could actually make their lives useful. We9ve collected some of our favorite dadcore gift ideas, which would suit everyone from a complete gadgetphobe to a total techie.

    Read more: The best gifts for dads
    Best subscription box gifts


    Subscription boxes are the rare gift that keeps its charm long after the wrapping paper is gone. You make the choice once, but the surprises keep landing on their doorstep for months after that. For anyone who loves the buzz of a delivery, these are gifts that extend the season well past December. Each box on this list combines a bit of discovery with something tangible, such as gadgets, books, collectibles, snacks or clever projects. Some appeal to hardcore hobbyists, others to the curious or the comfort seekers, but all offer that same spark of delight that comes from unboxing something unexpected.

    Read more: The best subscription box gifts
    Best gifts for home cooks


    For home cooks, kitchen tools are the equipment that make all your favorite dishes and meals possible. And while having the fanciest gear certainly isn9t a requirement, it is really nice, which makes products like the ones here such great gifts. These are the kind of things that people want but might not be able to justify buying for themselves, or essential pieces that would be handy additions to any kitchen or pantry. So if you9re looking for present ideas for the chef in your life, check out our guide of tried and tested cooking tools and gadgets.

    Read more: The best cooking gifts
    Best gifts for coffee lovers


    When it comes to making coffee at home, us coffee nerds are constantly evolving. Whether the person you’re shopping for is newly indoctrinated into the world of small-batch roasters or obsessive over every possible aspect of every brewing process, we’ve compiled a list of the best coffee gear for any coffee geek this holiday season. For brewing, grinding and drinking, we’ve got multiple options at a range of prices to help expand any java geek’s horizons. And if you think the coffee aficionado on your list already has everything they need, we’ve got a recommendation for them too.

    Read more: The best gifts for coffee lovers
    Best gadgets for your pets


    We9re a pet-loving staff here at Engadget, with diverse distribution of cat people, dog people, other-small-fuzzy-creature people, bird feeder enjoyers and so on (at press time, I9m unsure if we have a rat person, but I9d be surprised if we didn9t). And, of course, we love getting new gadgets of all sorts for our pets as much as for ourselves. Our list, with gifts as low-tech as a blanket and as high-tech as the best $30 two-way camera you9ll ever use, is for the pet lover in your life — whether that9s you or another favorite human.

    Read more: The best gadgets for your pets

    Check out the rest of our gift ideas here.
    This article originally appeared on Engadget at https://www.engadget.com/the-best-christmas-gifts-to-give-everyone-on-your-2025-holiday-shopping-list-170018456.html?src=rss


  • One of our favorite budgeting apps is 50 percent off for new users
    With a new year just around the corner, now is the perfect time to take stock of your finances. A budgeting app can help with that, and right now you can get 50 percent off your first year of a Monarch Money plan. All you need to do is enter the code MONARCHVIP at checkout and you’ll pay $50 for the initial 12 months instead of the regular price of $100. Note that the offer only applies to new users.



    Monarch Money was the runner-up in our guide to the best budgeting apps in 2025, and it was definitely a grower. Initially we found the experience of using the app to be needlessly complicated compared to some of its rivals, but get over that hurdle and it’s impressively fully-featured. There are plenty of customization options, a helpful “goals” feature and a thorough month-in-review recap that beats out similar features from some of its competitors. We also like how you can grant account access to others.

    Besides the steep learning curve, we also noted that the mobile app is less intuitive to use than the web version, which might pose a problem if you were hoping to do most of your accounting on the go. We also had some issues with the app failing to distinguish between bills and other recurring expenses, as well as a few bugs along the way.

    All things considered, Monarch is definitely one of our favorite budgeting apps, only being beaten out by Quicken Simplifi. As you might expect, the biggest strength of Simplifi is its simplicity, and how it eases you into using its various features. If you value that kind of user experience, it might be a better choice for you, but there’s unfortunately no free trial to take advantage of.

    Follow @EngadgetDeals on X for the latest tech deals and buying advice.
    This article originally appeared on Engadget at https://www.engadget.com/deals/one-of-our-favorite-budgeting-apps-is-50-percent-off-for-new-users-154056449.html?src=rss


  • The 10 best last-minute Christmas gifts for the 2025 holiday season
    We’re almost out of time — the holidays are just about here, and if you’re still doing your holiday shopping, you’re not alone. Between wrapping things up at work before some well-deserved time off and making sure you have everything you need to host family and friends, it can be hard to find the time to go shop for some gifts. And if you’re going to physical stores right now, you’re probably being met with half-empty shelves. But the internet remains an option, even this late in the game: you still have time to buy holiday gifts online.

    USPS,UPS andFedEx have laid out their holiday shipping deadlines for 2025. At this point, we recommend picking up small, affordable gifts that will ship quickly from retailers likeAmazon,Walmart andTarget so you have plenty of time to wrap them up nicely and make it look like you had everything well-planned from the start. Here are the best last-minute Christmas gifts you can get right now and still have in time before the holidays.
    Best last-minute Christmas gifts




















    Check out the rest of our gift ideas here.
    This article originally appeared on Engadget at https://www.engadget.com/the-10-best-last-minute-christmas-gifts-for-the-2025-holiday-season-140037254.html?src=rss


  • Apple's AirPods Pro 3 drop to a new record low of $199
    No need to fret if you missed out on some of the best Black Friday deals this year — some of them have returned already. Case in point: Apple9s AirPods Pro 3, which came out in September this year, are on sale for a new record low of $199. That9s 20 percent off and better than the discount we saw during Black Friday and Cyber Monday. With the new AirPods Pro, Apple made some big improvements, including better battery life and sound quality, and introduced useful new features, such as Live Translation.



    The AirPods Pro 3 are the best AirPods available today, with Apple9s H2 chip, and earned a score of 90 out of 100 in Engadget9s review this fall. Active noise cancellation (ANC) is one of the biggest selling points of the AirPods Pro, and Apple has made the experience even better with the AirPods Pro 3. They sport new foam-infused ear tips that create a better seal to improve passive noise isolation, and as Engadget9s Billy Steele wrote in his review, "Ultra-low-noise microphones combine with advanced computational audio to silence even more background noise." In testing, they had no problem blocking out the chatter of people nearby or otherwise noisy environments.

    With the AirPods Pro 3, Apple introduced heart-rate sensing, so you9ll be able to see your heart rate data from the earbuds in the Fitness app and other workout apps. The AirPods Pro 3 also boast Live Translation, which you can activate via controls on the earbuds themselves. As long as you have an Apple Intelligence-capable device, you9ll be able to translate in-person conversations in English, French, German, Italian, Japanese, Korean, Portuguese, Spanish and Chinese (Mandarin).

    Also on sale in the world of AirPods are the AirPods 4 with ANC, which are down $119 when you pick them up with two years of AppleCare+.



    Follow @EngadgetDeals on X for the latest tech deals and buying advice.
    This article originally appeared on Engadget at https://www.engadget.com/deals/apples-airpods-pro-3-drop-to-a-new-record-low-of-199-222806888.html?src=rss


OSnews

  • FreeBSD debates sunsetting power64/power64le support
    I have some potentially devastating news for POWER users interested in using FreeBSD, uncovered late last month by none other than Cameron Kaiser. FreeBSD is considering retiring powerpc64 prior to branching 16, which would make FreeBSD 15 the last stable version to support the architecture. (32-bit PowerPC is already dropped as of FreeBSD 14, though both OpenBSD and NetBSD generally serve this use case, and myself I have a Mac mini G4 running a custom NetBSD kernel with code from FreeBSD for automatic restart.) Although the message says powerpc64 and powerpc64le! it later on only makes specific reference to the big-endian port, whereas both endiannesses appear on the FreeBSD platform page and on the download server. ↫ Cameron Kaiser Theres two POWER9 systems in my office, so this obviously makes me quite sad. At the same time, though, its hard not to understand any possible decision to drop powerpc64/powerpc64le at this point in time. Raptors excellent POWER9 systems  the Blackbird, which I reviewed a few years ago, and the Talos II, which I also have  are very long in the tooth at this point and still quite expensive, and thanks to IBM royally screwing up POWER10, we never got any timely successors. There were rumblings about a possible POWER11-based successor from Raptor back in July 2025, but its been quiet on that front since. In other words, there are no modern powerpc64 and powerpc64le systems available. POWER10 and brand new POWER11 hardware are strictly IBM and incredibly expensive, so unless IBM makes some sort of generous donation to the FreeBSD Foundation, I honestly dont know how FreeBSD is supposed to keep their powerpc64 and powerpc64le ports up-to-date with the latest generation of POWER hardware in the first place. Its important to note that no final decision has been made yet, and since that initial report by Kaiser, several people have chimed in to argue the case that at least powerpc64le (the little endian variant) should remain properly supported. In fact, Timothy Pearson from Raptor Engineering stepped up the place, and stated hes willing to take over maintainership of the port, as Raptor has been contributing to it for years anyway. Raptor remains committed to the architecture as a whole, and we have resources to assist with development. In fact, we sponsor several FreeBSD build machines already in our cloud environment, and have kernel developers working on expanding and maintaining the FreeBSD codebase. If there is any concern regarding hardware availability or developer resources, Raptor is willing and able to assist. ↫ Timothy Pearson Whatever decision the FreeBSD project makes, the Linux world will be fine for a while yet as IBM contributes to its development, and popular distributions still consider POWER a primary target. However, unless either IBM moves POWER hardware downmarket (extremely unlikely) or the rumours around Raptor have merit, I think at least the FreeBSD powerpc64 (big endian) port is done for, with the powerpc64le port hopefully being saved by people hearing these alarm bells.


  • US government switches to Times New Roman because Calibri is woke!
    Secretary of State Marco Rubio waded into the surprisingly fraught politics of typefaces on Tuesday with an order halting the State Department’s official use of Calibri, reversing a 2023 Biden-era directive that Mr. Rubio called a “wasteful” sop to diversity. While mostly framed as a matter of clarity and formality in presentation, Mr. Rubio’s directive to all diplomatic posts around the world blamed “radical” diversity, equity, inclusion and accessibility programs for what he said was a misguided and ineffective switch from the serif typeface Times New Roman to sans serif Calibri in official department paperwork. ↫ Michael Crowley and Hamed Aleaziz at The New York Times


  • What do Linux kernel version numbers mean?
    If youre old enough, you no doubt remember that up until the 2.6.0 release of the Linux kernel, an odd number after the first version number indicated a pre-release, development version of the kernel. Even though this scheme was abandoned with the 2.6.0 release in 2003 and since then every single release has been a stable release, it seems the ghosts of this old versioning scheme still roam the halls, because prominent Linux kernel developer Greg Kroah-Hartman just published an explainer about Linux kernel versions. Despite having a stable release model and cadence since December 2003, Linux kernel version numbers seem to baffle and confuse those that run across them, causing numerous groups to mistakenly make versioning statements that are flat out false. So let’s go into how this all works in detail. ↫ Greg Kroah-Hartman I genuinely find it difficult to imagine what could possibly be unclear about Linux kernel version numbers. The Linux kernel uses a very generic major.minor scheme, but thats not where the problems lie  its the actual development process of each of these numbered release thats a bit more complex. This is where we have to talk about things like the roughly 10-week release cycle, containing a 2-week merge window, as well as Torvalds handing off the stable branch to the stable kernel maintainers. The other oddity is when the major version number gets incremented  the first number in the version number. Theres no real method to this, as Kroah-Hartman admits Torvalds increments this number whenever the remaining numbers get too high and unwieldy to deal with. Very practical, but it does mean that going from, say, 5.x to 6.x doesnt really imply theres any changes in there that are any bigger or more disruptive than when going from 6.8.x to 6.9.x or whatever. Theres a few more important details in here, of course, like where LTS releases come from, but thats really it  nothing particularly groundbreaking or confusing.


  • Microsoft will allow you to remove AI! actions from Windows 11s context menus
    With the current, rapidly deteriorating state of the Windows operating system, you have to take the small wins you can get: Microsoft is now offering the option of removing AI! actions from Windows 11s context menus. buried deep in the Windows 11 Insider Preview Build 26220.7344 release notes, theres this nugget: If there are no available or enabled AI Actions, this section will no longer show in the context menu. ↫ Windows Insider Preview release notes If you then go to Settings > Apps > Actions and uncheck all the AI! actions, the entire submenu in Windows 11s context menus will vanish. While this is great news for those Windows users who dont want to be bothered by all the AI! nonsense, I wish Microsoft would just give users a proper way to edit the context menu that doesnt involve third party hackery. KDEs Dolphin file manager gives me full control over what does and does not appear in its context menu, and I cant imagine living without this functionality  theres so many file-related operations I never use, and having them clutter up the context menu is annoying and just slows me down. Theres more substantial and important changes in this Insider Preview Build too, most notably the rollout of the Update Orchestration Platform, which should make downloading and installing application updates less cumbersome, but since its a new feature, application wont support it right away. This release also brings the new Windows MIDI Services, and Microsoft hopes this will improve the experience for musicians using MIDI 1.0 or MIDI 2.0 on Windows. Theres a slew of smaller changes, too, of course. Im not exactly sure when these new features will make their way to production installations  who does, honestly, with Microsofts convoluted release processes  but I hope its sooner rather than later.


  • The anatomy of a macOS application
    When Mac OS X was designed, it switched to the bundle structure inherited from NeXTSTEP. Instead of this multitude of resources, apps consisted of a hierarchy of directories containing files of executable code, and those with what had in Mac OS been supporting resources. Those app bundles came to adopt a standard form, shown below. ↫ Howard Oakley A short, but nonetheless informative overview of the structure of a macOS application. Im sure most people on OSNews are aware that a macOS application is a bundle, which is effectively a glorified directory containing a variety of files and subdirectories that together make up the application. I havent used macOS in a while, but I think you can right-click on an application and open it as a folder to dig around inside of it. Im trying to remember from my days as a Mac OS X user  15-20 years ago  if there was ever a real need to do so, but Im sure there were a few hacks you could do by messing around with the files inside of application bundles. These days, perhaps with all the code-signing, phoning-home to Apple, and other security trickery going on, such acts are quite frowned upon. Does making any otherwise harmless changes inside an application bundle set off a ton of alarm bells in macOs these days?


  • Applets are officially gone, but Java in the browser is better than ever
    The end of an era, perhaps. Applets are officially, completely removed from Java 26, coming in March of 2026. This brings to an official end the era of applets, which began in 1996. However, for years it has been possible to build modern, interactive web pages in Java without needing applets or plugins. TeaVM provides fast, performant, and lightweight tooling to transpile Java to run natively in the browser. And for a full front-end toolkit with templates, routing, components, and more, Flavour lets you build your modern single-page app using 100% Java. ↫ Andrew Oliver As consumers, we dont really encounter Java that much anymore unless we play Minecraft, but that doesnt mean Java no longer has a place in this world. In fact, it still consistently ranks in the top three of most popular programming languages, so any tools to make using Java easier, both for programmers and users, are welcome.


  • OSNews needs your donations to survive
    OSNews is funded entirely by you, our readers. There are no ads on OSNews, we are not part of a massive corporate publishing conglomerate like virtually every other technology news website, there are no wealthy (corporate) benefactors  its just whatever funds you, our readers, send our way. As such, I sometimes need to remind everyone about this, and December, the holiday month, seems as great a time as any to do this. If you want to support a truly independent technology news website, free from the corrupting influences of corporate interests, advertising companies, managers pushing AI!, and all the other nonsense destroying the web we once loved, you can do so by donating to keep OSNews alive. This gives me the time and means to write 9000 words about dead computer ecosystems, and Im already working on an article about the next final UNIX workstation. Every single donation, large or small, is deeply appreciated and keeps the lights on around here. There arent many websites like OSNews left, especially not independent ones that answer to nobody. Your support keeps OSNews going, with June 2026 marking a special moment for me: it will mark twenty years since I took over this place. Im not expecting a party  youre paying me to work, not to party  but it is still a meaningful anniversary for me personally.


  • Porting rePalm to Pixter devices
    Some of you may be aware of rePalm, a project by Dmitry Grinberg to port the PalmOS to various devices it was never supposed to run on. We covered rePalm back in 2019 and again in 2023. His latest project involved porting PalmOS to a set of digital toys that were never intended to run PalmOS in any way. Fisher-Price (owned by Mattel) produced some toys in the early 2000 under the Pixter brand. They were touchscreen-based drawing toys, with cartridge-based extra games one could plug in. Pixter devices of the first three generations ( classic!, plus!, and 2.0!) featured 8080 black-and-white screens, which makes them of no interest for rePalm. The last two generations of Pixter ( color! and multimedia!) featured 160160 color displays. Now, this was more like it! Pixter was quite popular, as far as kids toys go, in USA in the early 2000s. A friend brought it to my attention a year ago as a potential rePalm target. The screen resolution was right and looking inside a Pixter Color! showed an ARM SoC  a Sharp LH75411. The device had sound (games made noises), and touch panel was resistive. In theory  a viable rePalm target indeed. ↫ Dmitry Grinberg Considering the immensely limited ARMv7 implementation he had to deal with  no cache, no memory management unit, no memory protection unit  its a miracle Grinberg managed to succeed. To make matters even harder, the first revision boards of the color! model only had 1MB of flash, which is incredibly small even for PalmOS 5, so he had to rewrite parts of it to make it fit. Implementing communication over infrared was also a major difficulty, but that, too he managed to get working  on a device that doesnt have IrDA SIR modulation. Wild. Grinberg went above and beyond, making sure the buttons on the devices work, developing and building a way to put PalmOS on a game! cartridge, reverse-engineering the display controller to make sure things like brightness adjustment works, adding screen type detection for that one small run of Pixter Color devices that came with a TFT instead of an STN screen, and so, so much more. Until you read the article, you have no idea how much work Grinberg put into this project. I continue to be in awe of Grinbergs work every time I come across it.


  • Haiku highlights interesting stalled commits you might want to adopt
    Now this is a great initiative by the Haiku team: highlight a number of stale commits thatve been without interaction for years, explain why theyve stalled, and then hope renewed interest might grow (part 1 and part 2). Recently some discussions on the forum led to asking about the status of our Gerrit code review. There are a lot of changes there that have been inactive for several years, with no apparent interest from anyone. To be precise, there are currently 358 commits waiting for review (note that Gerrit, unlike Github and other popular code review tools, works on a commit-by-commit basis, so each commit from a multiple-commit change is counted separately). The oldest one has not seen any comments since 2018. Today, let’s have a look at some of these changes and see why they are stalled. Hopefully it will inspire someone to pick up the work and help finishing them up. ↫ Pulkomandy at the Haiku website Browsing through the highlighted stalled commits, theres a few that seem quite interesting and relatively easy for a (new?) contributor to seek their teeth into. For instance, theres a stalled commit to remove GCC from Haiku images built with clang/llvm, which stalled mostly because there are still other issues when building Haiku with clang/llvm. For a more complex problem, theres the issue of how every menu in BeOS/Haiku is also a window, including its own thread, which means navigating deeply nested menus creates and destroys a lot of threads, that all need to be synchronised, too. If you want to get really ambitious, theres the stalled commit to add initial 64bit PowerPC support. Theres more of these, of course, so if you have the skills and will to contribute to a project like Haiku, this might be a great place to start and get your feet wet. Now that these commits are back in the spotlight, theres sure to be team members and regular contributors lined up to lend an extra hand, as well.


  • Oracle Solaris 11.4 SRU 87 released
    Oracle has released Solaris 11.4 SRU 87, which brings with it a whole slew of changes, updates, and fixes. Primarily, it upgrades Firefox and Thunderbird to their latest ESR 140.3.0 releases, and adds GCC 15, alongside a ton of updated other open source packages. On more Solaris 11-specific notes, useradds account activation options have been changed to address some issues caused by stricter enforcement introduced in SRU 78, theres some preparations for the upgrade to BIND 9.20 in a future Solaris 11 release, a few virtualisation improvements, and much more. If youre unclear about the relationship between this new release and the Common Build Environment or CBE release of Solaris 11.4 for enthusiasts, released earlier this year, the gist is that these SRU updates are only available to people with Oracle Solaris support contracts, while any updates to the CBE release are available to mere mortals like you and I. If you have a support contract and are using the CBE, you can upgrade from the CBE to the official SRU releases, but without such a contract, youre out of luck. A new CBE release is in the works, and is planned to arrive in 2026  which is great news, but I would love for the enthusiast variant of Solaris 11.4 to receive more regular updates. I dont think making these SRU updates available to enthusiasts in a non-commercial, zero-warranty kind of way would pose any kind of threat to Oracles bottom line, but alas, I dont run a business like Oracle so perhaps Im wrong.



Linux Journal News

  • EU OS: A Bold Step Toward Digital Sovereignty for Europe
    Image
    A new initiative, called "EU OS," has been launched to develop a Linux-based operating system tailored specifically for the public sector organizations of the European Union (EU). This community-driven project aims to address the EU's unique needs and challenges, focusing on fostering digital sovereignty, reducing dependency on external vendors, and building a secure, self-sufficient digital ecosystem.
    What Is EU OS?
    EU OS is not an entirely novel operating system. Instead, it builds upon a Linux foundation derived from Fedora, with the KDE Plasma desktop environment. It draws inspiration from previous efforts such as France's GendBuntu and Munich's LiMux, which aimed to provide Linux-based systems for public sector use. The goal remains the same: to create a standardized Linux distribution that can be adapted to different regional, national, and sector-specific needs within the EU.

    Rather than reinventing the wheel, EU OS focuses on standardization, offering a solid Linux foundation that can be customized according to the unique requirements of various organizations. This approach makes EU OS a practical choice for the public sector, ensuring broad compatibility and ease of implementation across diverse environments.
    The Vision Behind EU OS
    The guiding principle of EU OS is the concept of "public money – public code," ensuring that taxpayer money is used transparently and effectively. By adopting an open-source model, EU OS eliminates licensing fees, which not only lowers costs but also reduces the dependency on a select group of software vendors. This provides the EU’s public sector organizations with greater flexibility and control over their IT infrastructure, free from the constraints of vendor lock-in.

    Additionally, EU OS offers flexibility in terms of software migration and hardware upgrades. Organizations can adapt to new technologies and manage their IT evolution at a manageable cost, both in terms of finances and time.

    However, there are some concerns about the choice of Fedora as the base for EU OS. While Fedora is a solid and reliable distribution, it is backed by the United States-based Red Hat. Some argue that using European-backed projects such as openSUSE or KDE's upcoming distribution might have aligned better with the EU's goal of strengthening digital sovereignty.
    Conclusion
    EU OS marks a significant step towards Europe's digital independence by providing a robust, standardized Linux distribution for the public sector. By reducing reliance on proprietary software and vendors, it paves the way for a more flexible, cost-effective, and secure digital ecosystem. While the choice of Fedora as the base for the project has raised some questions, the overall vision of EU OS offers a promising future for Europe's public sector in the digital age.

    Source: It's FOSS
    European Union


  • Linus Torvalds Acknowledges Missed Release of Linux 6.14 Due to Oversight

    Linus Torvalds Acknowledges Missed Release of Linux 6.14 Due to Oversight

    Linux kernel lead developer Linus Torvalds has admitted to forgetting to release version 6.14, attributing the oversight to his own lapse in memory. Torvalds is known for releasing new Linux kernel candidates and final versions on Sunday afternoons, typically accompanied by a post detailing the release. If he is unavailable due to travel or other commitments, he usually informs the community ahead of time, so users don’t worry if there’s a delay.

    In his post on March 16, Torvalds gave no indication that the release might be delayed, instead stating, “I expect to release the final 6.14 next weekend unless something very surprising happens.” However, Sunday, March 23rd passed without any announcement.

    On March 24th, Torvalds wrote in a follow-up message, “I’d love to have some good excuse for why I didn’t do the 6.14 release yesterday on my regular Sunday afternoon schedule,” adding, “But no. It’s just pure incompetence.” He further explained that while he had been clearing up unrelated tasks, he simply forgot to finalize the release. “D'oh,” he joked.

    Despite this minor delay, Torvalds’ track record of successfully managing the Linux kernel’s development process over the years remains strong. A single day’s delay is not critical, especially since most Linux users don't urgently need the very latest version.

    The new 6.14 release introduces several important features, including enhanced support for writing drivers in Rust—an ongoing topic of discussion among developers—support for Qualcomm’s Snapdragon 8 Elite mobile chip, a fix for the GhostWrite vulnerability in certain RISC-V processors from Alibaba’s T-Head Semiconductor, and a completed NTSYNC driver update that improves the WINE emulator’s ability to run Windows applications, particularly games, on Linux.

    Although the 6.14 release went smoothly aside from the delay, Torvalds expressed that version 6.15 may present more challenges due to the volume of pending pull requests. “Judging by my pending pile of pull requests, 6.15 will be much busier,” he noted.

    You can download the latest kernel here.
    Linus Torvalds kernel


  • AerynOS 2025.03 Alpha Released with GNOME 48, Mesa 25, and Linux Kernel 6.13.8
    Image
    AerynOS 2025.03 has officially been released, introducing a variety of exciting features for Linux users. The release includes the highly anticipated GNOME 48 desktop environment, which comes with significant improvements like HDR support, dynamic triple buffering, and a Wayland color management protocol. Other updates include a battery charge limiting feature and a Wellbeing option aimed at improving user experience.

    This release, while still in alpha, incorporates Linux kernel 6.13.8 and the updated Mesa 25.0.2 graphics stack, alongside tools like LLVM 19.1.7 and Vulkan SDK 1.4.309.0. Additionally, the Moss package manager now integrates os-info to generate more detailed OS metadata via a JSON file.

    Future plans for AerynOS include automated package updates, easier rollback management, improved disk handling with Rust, and fractional scaling enabled by default. The installer has also been revamped to support full disk wipes and dynamic partitioning.

    Although still considered an alpha release, AerynOS 2025.03 can be downloaded and tested right now from its official website.

    Source: 9to5Linux
    AerynOS


  • Xojo 2025r1: Big Updates for Developers with Linux ARM Support, Web Drag and Drop, and Direct App Store Publishing
    Image
    Xojo has just rolled out its latest release, Xojo 2025 Release 1, and it’s packed with features that developers have been eagerly waiting for. This major update introduces support for running Xojo on Linux ARM, including Raspberry Pi, brings drag-and-drop functionality to the Web framework, and simplifies app deployment with the ability to directly submit apps to the macOS and iOS App Stores.

    Here’s a quick overview of what’s new in Xojo 2025r1:
    1. Linux ARM IDE Support
    Xojo 2025r1 now allows developers to run the Xojo IDE on Linux ARM devices, including popular platforms like Raspberry Pi. This opens up a whole new world of possibilities for developers who want to create apps for ARM-based devices without the usual complexity. Whether you’re building for a Raspberry Pi or other ARM devices, this update makes it easier than ever to get started.
    2. Web Drag and Drop
    One of the standout features in this release is the addition of drag-and-drop support for web applications. Now, developers can easily drag and drop visual controls in their web projects, making it simpler to create interactive, user-friendly web applications. Plus, the WebListBox has been enhanced with support for editable cells, checkboxes, and row reordering via dragging. No JavaScript required!
    3. Direct App Store Publishing
    Xojo has also streamlined the process of publishing apps. With this update, developers can now directly submit macOS and iOS apps to App Store Connect right from the Xojo IDE. This eliminates the need for multiple steps and makes it much easier to get apps into the App Store, saving valuable time during the development process.
    4. New Desktop and Mobile Features
    This release isn’t just about web and Linux updates. Xojo 2025r1 brings some great improvements for desktop and mobile apps as well. On the desktop side, all projects now include a default window menu for macOS apps. On the mobile side, Xojo has introduced new features for Android and iOS, including support for ColorGroup and Dark Mode on Android, and a new MobileColorPicker for iOS to simplify color selection.
    5. Performance and IDE Enhancements
    Xojo’s IDE has also been improved in several key areas. There’s now an option to hide toolbar captions, and the toolbar has been made smaller on Windows. The IDE on Windows and Linux now features modern Bootstrap icons, and the Documentation window toolbar is more compact. In the code editor, developers can now quickly navigate to variable declarations with a simple Cmd/Ctrl + Double-click. Plus, performance for complex container layouts in the Layout Editor has been enhanced.
    What Does This Mean for Developers?
    Xojo 2025r1 brings significant improvements across all the platforms that Xojo supports, from desktop and mobile to web and Linux. The added Linux ARM support opens up new opportunities for Raspberry Pi and ARM-based device development, while the drag-and-drop functionality for web projects will make it easier to create modern, interactive web apps. The ability to publish directly to the App Store is a game-changer for macOS and iOS developers, reducing the friction of app distribution.
    How to Get Started
    Xojo is free for learning and development, as well as for building apps for Linux and Raspberry Pi. If you’re ready to dive into cross-platform development, paid licenses start at $99 for a single-platform desktop license, and $399 for cross-platform desktop, mobile, or web development. For professional developers who need additional resources and support, Xojo Pro and Pro Plus licenses start at $799. You can also find special pricing for educators and students.

    Download Xojo 2025r1 today at xojo.com.
    Final Thoughts
    With each new release, Xojo continues to make cross-platform development more accessible and efficient. The 2025r1 release is no exception, delivering key updates that simplify the development process and open up new possibilities for developers working on a variety of platforms. Whether you’re a Raspberry Pi enthusiast or a mobile app developer, Xojo 2025r1 has something for you.
    Xojo ARM


  • New 'Mirrored' Network Mode Introduced in Windows Subsystem for Linux

    Microsoft's Windows Subsystem for Linux (WSL) continues to evolve with the release of WSL 2 version 0.0.2. This update introduces a set of opt-in preview features designed to enhance performance and compatibility.

    Key additions include "Automatic memory reclaim" which dynamically optimizes WSL's memory footprint, and "Sparse VHD" to shrink the size of the virtual hard disk file. These improvements aim to streamline resource usage.

    Additionally, a new "mirrored networking mode" brings expanded networking capabilities like IPv6 and multicast support. Microsoft claims this will improve VPN and LAN connectivity from both the Windows host and Linux guest. 

    Complementing this is a new "DNS Tunneling" feature that changes how DNS queries are resolved to avoid compatibility issues with certain network setups. According to Microsoft, this should reduce problems connecting to the internet or local network resources within WSL.

    Advanced firewall configuration options are also now available through Hyper-V integration. The new "autoProxy" feature ensures WSL seamlessly utilizes the Windows system proxy configuration.

    Microsoft states these features are currently rolling out to Windows Insiders running Windows 11 22H2 Build 22621.2359 or later. They remain opt-in previews to allow testing before final integration into WSL.

    By expanding WSL 2 with compelling new capabilities in areas like resource efficiency, networking, and security, Microsoft aims to make Linux on Windows more performant and compatible. This evolutionary approach based on user feedback highlights Microsoft's commitment to WSL as a key part of the Windows ecosystem.
    Windows


  • Linux Threat Report: Earth Lusca Deploys Novel SprySOCKS Backdoor in Attacks on Government Entities

    The threat actor Earth Lusca, linked to Chinese state-sponsored hacking groups, has been observed utilizing a new Linux backdoor dubbed SprySOCKS to target government organizations globally. 

    As initially reported in January 2022 by Trend Micro, Earth Lusca has been active since at least 2021 conducting cyber espionage campaigns against public and private sector targets in Asia, Australia, Europe, and North America. Their tactics include spear-phishing and watering hole attacks to gain initial access. Some of Earth Lusca's activities overlap with another Chinese threat cluster known as RedHotel.

    In new research, Trend Micro reveals Earth Lusca remains highly active, even expanding operations in the first half of 2023. Primary victims are government departments focused on foreign affairs, technology, and telecommunications. Attacks concentrate in Southeast Asia, Central Asia, and the Balkans regions. 

    After breaching internet-facing systems by exploiting flaws in Fortinet, GitLab, Microsoft Exchange, Telerik UI, and Zimbra software, Earth Lusca uses web shells and Cobalt Strike to move laterally. Their goal is exfiltrating documents and credentials, while also installing additional backdoors like ShadowPad and Winnti for long-term spying.

    The Command and Control server delivering Cobalt Strike was also found hosting SprySOCKS - an advanced backdoor not previously publicly reported. With roots in the Windows malware Trochilus, SprySOCKS contains reconnaissance, remote shell, proxy, and file operation capabilities. It communicates over TCP mimicking patterns used by a Windows trojan called RedLeaves, itself built on Trochilus.

    At least two SprySOCKS versions have been identified, indicating ongoing development. This novel Linux backdoor deployed by Earth Lusca highlights the increasing sophistication of Chinese state-sponsored threats. Robust patching, access controls, monitoring for unusual activities, and other proactive defenses remain essential to counter this advanced malware.

    The Trend Micro researchers emphasize that organizations must minimize attack surfaces, regularly update systems, and ensure robust security hygiene to interrupt the tactics, techniques, and procedures of relentless threat groups like Earth Lusca.
    Security


  • Linux Kernel Faces Reduction in Long-Term Support Due to Maintenance Challenges

    The Linux kernel is undergoing major changes that will shape its future development and adoption, according to Jonathan Corbet, Linux kernel developer and executive editor of Linux Weekly News. Speaking at the Open Source Summit Europe, Corbet provided an update on the latest Linux kernel developments and a glimpse of what's to come.

    A major change on the horizon is a reduction in long-term support (LTS) for kernel versions from six years to just two years. Corbet explained that maintaining old kernel branches indefinitely is unsustainable and most users have migrated to newer versions, so there's little point in continuing six years of support. While some may grumble about shortened support lifecycles, the reality is that constantly backporting fixes to ancient kernels strains maintainers.

    This maintainer burnout poses a serious threat, as Corbet highlighted. Maintaining Linux is largely a volunteer effort, with only about 200 of the 2,000+ developers paid for their contributions. The endless demands on maintainers' time from fuzz testing, fixing minor bugs, and reviewing contributions takes a toll. Prominent maintainers have warned they need help to avoid collapse. Companies relying on Linux must realize giving back financially is in their interest to sustain this vital ecosystem. 

    The Linux kernel is also wading into waters new with the introduction of Rust code. While Rust solves many problems, it also introduces new complexities around language integration, evolving standards, and maintainer expertise. Corbet believes Rust will pass the point of no return when core features depend on it, which may occur soon with additions like Apple M1 GPU drivers. Despite skepticism in some corners, Rust's benefits likely outweigh any transition costs.

    On the distro front, Red Hat's decision to restrict RHEL cloning sparked community backlash. While business considerations were at play, Corbet noted technical factors too. Using older kernels with backported fixes, as RHEL does, risks creating divergent, vendor-specific branches. The Android model of tracking mainline kernel dev more closely has shown security benefits. Ultimately, Linux works best when aligned with the broader community.

    In closing, Corbet recalled the saying "Linux is free like a puppy is free." Using open source seems easy at first, but sustaining it long-term requires significant care and feeding. As Linux is incorporated into more critical systems, that maintenance becomes ever more crucial. The kernel changes ahead are aimed at keeping Linux healthy and vibrant for the next generation of users, businesses, and developers.
    kernel


  • Linux Celebrates 32 Years with the Release of 6.6-rc2 Version

    Today marks the 32nd anniversary of Linus Torvalds introducing the inaugural Linux 0.01 kernel version, and celebrating this milestone, Torvalds has launched the Linux 6.6-rc2. Among the noteworthy updates are the inclusion of a feature catering to the ASUS ROG Flow X16 tablet's mode handling and the renaming of the new GenPD subsystem to pmdomain.

    The Linux 6.6 edition is progressing well, brimming with exciting new features that promise to enhance user experience. Early benchmarks are indicating promising results, especially on high-core-count servers, pointing to a potentially robust and efficient update in the Linux series.

    Here is what Linus Torvalds had to say in today's announcement:
    Another week, another -rc.I think the most notable thing about 6.6-rc2 is simply that it'sexactly 32 years to the day since the 0.01 release. And that's a roundnumber if you are a computer person.Because other than the random date, I don't see anything that reallystands out here. We've got random fixes all over, and none of it looksparticularly strange. The genpd -> pmdomain rename shows up in thediffstat, but there's no actual code changes involved (make sure touse "git diff -M" to see them as zero-line renames).And other than that, things look very normal. Sure, the architecturefixes happen to be mostly parisc this week, which isn't exactly theusual pattern, but it's also not exactly a huge amount of changes.Most of the (small) changes here are in drivers, with some tracingfixes and just random things. The shortlog below is short enough toscroll through and get a taste of what's been going on. Linus Torvalds


  • Introducing Bavarder: A User-Friendly Linux Desktop App for Quick ChatGPT Interaction

    Want to interact with ChatGPT from your Linux desktop without using a web browser?

    Bavarder, a new app, allows you to do just that.

    Developed with Python and GTK4/libadwaita, Bavarder offers a simple concept: pose a question to ChatGPT, receive a response, and promptly copy the answer (or your inquiry) to the clipboard for pasting elsewhere.

    With an incredibly user-friendly interface, you won't require AI expertise (or a novice blogger) to comprehend it. Type your question in the top box, click the blue send button, and wait for a generated response to appear at the bottom. You can edit or modify your message and repeat the process as needed.

    During our evaluation, Bavarder employed BAI Chat, a GPT-3.5/ChatGPT API-based chatbot that's free and doesn't require signups or API keys. Future app versions will incorporate support for alternative backends, such as ChatGPT 4 and Hugging Chat, and allow users to input an API key to utilize ChatGPT3.

    At present, there's no option to regenerate a response (though you can resend the same question for a potentially different answer). Due to the lack of a "conversation" view, tracking a dialogue or following up on answers can be challenging — but Bavarder excels for rapid-fire questions.

    As with any AI, standard disclaimers apply. Responses might seem plausible but could contain inaccurate or false information. Additionally, it's relatively easy to lead these models into irrational loops, like convincing them that 2 + 2 equals 106 — so stay alert!

    Overall, Bavarder is an attractive app with a well-defined purpose. If you enjoy ChatGPT and similar technologies, it's worth exploring.
    ChatGPT AI


  • LibreOffice 7.5.3 Released: Third Maintenance Update Brings 119 Bug Fixes to Popular Open-Source Office Suite

    Today, The Document Foundation unveiled the release and widespread availability of LibreOffice 7.5.3, which serves as the third maintenance update to the current LibreOffice 7.5 open-source and complimentary office suite series.

    Approximately five weeks after the launch of LibreOffice 7.5.2, LibreOffice 7.5.3 arrives with a new set of bug fixes for those who have successfully updated their GNU/Linux system to the LibreOffice 7.5 series.

    LibreOffice 7.5.3 addresses a total of 119 bugs identified by users or uncovered by LibreOffice developers. For a more comprehensive understanding of these bug fixes, consult the RC1 and RC2 changelogs.

    You can download LibreOffice 7.5.3 directly from the LibreOffice websiteor from SourceForge as binary installers for DEB or RPM-based GNU/Linux distributions. A source tarball is also accessible for individuals who prefer to compile the software from sources or for system integrators.

    All users operating the LibreOffice 7.5 office suite series should promptly update their installations to the new point release, which will soon appear in the stable software repositories of your GNU/Linux distributions.

    In early February 2023, LibreOffice 7.5 debuted as a substantial upgrade to the widely-used open-source office suite, introducing numerous features and improvements. These enhancements encompass major upgrades to dark mode support, new application and MIME-type icons, a refined Single Toolbar UI, enhanced PDF Export, and more.

    Seven maintenance updates will support LibreOffice 7.5 until November 30th, 2023. The next point release, LibreOffice 7.5.4, is scheduled for early June and will include additional bug fixes.

    The Document Foundation once again emphasizes that the LibreOffice office suite's "Community" edition is maintained by volunteers and members of the Open Source community. For enterprise implementations, they suggest using the LibreOffice Enterprise family of applications from ecosystem partners.
    LibreOffice


Linux Magazine News (path: lmi_news)











Page last modified on November 17, 2022, at 06:39 PM