Recent Changes - Search:
NTLUG

Linux is free.
Life is good.

Linux Training
10am on Meeting Days!

1825 Monetary Lane Suite #104 Carrollton, TX

Do a presentation at NTLUG.

What is the Linux Installation Project?

Real companies using Linux!

Not just for business anymore.

Providing ready to run platforms on Linux

Show Descriptions... (Show All/All+Images) (Single Column)

LWN.net

  • [$] 25 years of Buildroot
    Buildroot maintainer Peter Korsgaardgave a presentation about the long history of the build tool for embeddedLinux systems at the 2026 EmbeddedLinux Conference Europe. In it, he covered more than just the past 25years, looking at the current status of the project as well as what toexpect in Buildroot's future. It was an interesting view inside this long-running project thathas been a mainstay of the embedded-Linux world throughout almost all ofthis century.


  • Announcing XRAID: declustered parity RAID for zoned XFS
    Christoph Hellwig has announced theinitial public release of XRAID—declustered parity RAID that is integratedinto XFS.

    The two primary aims of XRAID are to support parity RAID on zoned deviceslike SMR hard drives, and to provide a fast RAID implementation withoutinherent data integrity problems. XRAID, just like zoned XFS also workson conventional hard drives and SSDs. Optimizing for SSD performance hasnot been a focus, but even without that, writes are up to 20 times fasterthan mdraid. [...]

    Work on XRAID has been ongoing for a year and a half, and while we aren'tanywhere near ready for an upstream submission, we are interested infeedback and testing from a wider audience now. The currentimplementation supports zero to 2 parities. We did experiments with theSnapRAID parity library to support 3 and more parities, and while thatis not included in the current version, support for more parities isplanned and the code is prepared for it.

    The xfsprogs branch includes mkfs support and a new "xraid" utility formanaging devices and inspecting an XRAID file-systems. We have alsoextended Zonar (The zoned file-system visualisation tool) to show howeach logical zone maps onto physical zones on devices.

    Hellwig gave a presentation atFOSSY in August on this topic; video of the talk does not seem to be availableyet, but his slides areavailable.


  • Security updates for Friday
    Security updates have been issued by AlmaLinux (.NET 10.0, .NET 8.0, .NET 9.0, firefox, gcc, grafana, grafana-pcp, gstreamer1, gstreamer1-plugins-base, java-1.8.0-openjdk, kernel, kernel-rt, libimobiledevice, mingw-libpng, nginx:1.24, nodejs:22, nodejs:24, perl-CGI, perl-DBI, qt5-qtbase, tigervnc, vim, and xorg-x11-server), Debian (apache2, c-ares, linux-6.12, node-shell-quote, nova, parted, postgresql-17, python-django, sympa, and tomcat10), Fedora (cockpit, erlang-ssl_verify_fun, httpd, ignition, jackson-bom, jackson-core, jackson-databind, jackson-modules-base, libvirt, mod_http2, mongo-c-driver, poppler, prometheus, pylint, python-discovery, python-loguru, python-PyMuPDF, rabbitmq-server, rust-crypto-bigint, rust-ctutils, rust-elliptic-curve, rust-num-bigint, rust-num-bigint0.4, rust-num-modular, rust-num-modular0.6, rust-num-prime, rust-routinator, rust-zmij, strongswan, xen, xorg-x11-server, and zvbi), Mageia (amule, peazip, and python-pytest), Red Hat (buildah, fence-agents, go-fdo-server, grafana, grafana-pcp, oci-seccomp-bpf-hook, osbuild-composer, podman, and rhc), SUSE (ansible-core, apr-util, aspell, brotli, cadvisor, civetweb, distribution-registry, elemental, elemental-register,, elemental-operator, elemental-system-agent, elemental- toolkit, ffmpeg, firefox, gimp, git-annex, go1.26, go1.27, golang-github-prometheus-prometheus, google-cloud-sap-agent, google-guest-agent, google-osconfig-agent, goose, gosec, graphicsmagick, haproxy, hauler, hawk-apiserver, hawk2, hcloud-cli, jhead, jsoup, kernel, librsvg, libXtst, libxtst, nodejs24, nvidia-open-driver-G07-signed, nvidia-open-driver-g07-signed, open-iscsi, perl-XS-Parse-Keyword, perl-xs-parse-keyword, python-asyncssh, python-Brotli, python-django, python-joserfc, python-M2Crypto, python-Pillow, python-pillow, python313-setuptools, rsyslog, speex, tiff, trivy, udisks2, vsftpd, xen, and xorg-x11-server), and Ubuntu (apache2, charybdis, debian-lan-config, glibc, golang-github-seccomp-libseccomp-golang, hiredis, httpie, imapfilter, lhasa, libjgraphx-java, libjwt, libsolv, linux-fips, linux-hwe-6.8, linux-hwe-7.0, linux-nvidia-tegra, minissdpd, ncmpc, nfdump, node-tough-cookie, openconnect, pillow, pngquant, python-gevent, radicale, ruby-openid, sa-exim, signing-party, sudo, tigervnc, and x11vnc).



  • Glasswing overwhelms maintainers with underwhelming findings (VulnCheck)
    Patrick Garrity of VulnCheck has written a blogpost that looks at vulnerabilities found by Anthropic's Project Glasswing since itlaunched on April 7, and finds it wanting:

    Of the 37,966 findings Anthropic reports, only 7,349 (19.4%) have been madepublic. Just 217 of those have been marked fixed. The more glaring number isthat 4.4% (1,654) of the project's findings have already been marked asduplicates, 7.5x more duplicates than fixes. On top of that, 419 findings havebeen withdrawn. It seems odd that the ledger now claims a 94.2% true positiverate, up from 90.8% at launch, when more findings have been withdrawn or markedas duplicates than fixed, likely a feedback loop missing to the triage rateslisted as "True Positives".

    [...] AI is a valuable tool for finding vulnerabilities, and I'm notdiscounting that. But seven months in, the evidence still doesn't match thelaunch narrative. The CVEs are a sliver of this year's total, almost none arebeing exploited, fixes have stalled while duplicates and withdrawals pile up,and the triage burden is shifting onto the open source maintainers Glasswingpromised to help. The receipts keep coming in. They still don't reconcile.


  • Introducing Polo: a Wayland MATE compositor
    Kerem Söke has announcedthe 1.0release of Polo, aWayland compositor for the MATE DesktopEnvironment:

    The idea is to keep MATE behaving as closely as possible to how it does onX11, rather than changing the desktop to fit a different compositor. [...]

    Window management, metacity, workspaces, tiling, XWayland, clipboard andclipman support, multiple monitors, display scaling, hotplugging, screenshots,screen sharing, and session management are all working.

    I've also added desktop effects: fade, zoom, zap, spin, squeemize, magiclamp, desktop cube, expo, and wobbly windows.

    Söke is looking for people to test Polo, particularly on multi-monitorsetups, and report back with problems.



  • [$] C++26 contract confusion
    TheInternational Organization for Standardization (ISO) has blessed seven C++language revisions since 1998.The language is mostly developed by ISO'sWorking Group 21, whichconsiders proposed additions and amendments, integrates them into a document,and then presents that document to the main ISO body to be voted on as astandard. On October 23, for the first time ever, ISO declined to ratify a documentpresented by Working Group 21, leaving the future of the C++26 standard indoubt. The decision was driven by controversy around a proposed new "contracts"feature that would add pre- and post-conditions to function signatures.


  • Stenberg: 30 years of Internet transfers with curl
    Daniel Stenberg reflectson the 30th anniversary of the curl project.
    libcurl runs in an estimated thirty billion installations today. It is a rough estimate since the majority of all libcurl users never tell us they use it, but we need to find it mentioned in their credit screens, open source license windows or their manuals. A super popular app might use libcurl today and not tomorrow, or vice versa, which can make the numbers shift by several billions overnight. In reality of course, once the pulse raise has calmed down and your ego is content, these numbers do not matter. In our corner of the world, things don't change notably when we go from a thousand installs to billions. We still work with similar people, in similar ways, with similar challenges.


  • Security updates for Thursday
    Security updates have been issued by Debian (aodh, apache2, dnspython, firefox-esr, mutt, octavia, spip, thunderbird, and watcher), Fedora (epiphany, firefox, freerdp, java-25-openjdk, java-latest-openjdk, libsoup3, perl-HTTP-Parser-XS, perl-libnet, php-getid3, pipx, python-crate-ingredients, python-pillow, python-robotframework, python3.9, rsync, rubygem-nokogiri, tpm2-tss, udns, and xorg-x11-server-Xwayland), Gentoo (curl, ImageMagick, libheif, and PCRE2), Mageia (nginx and python-django), Oracle (go-toolset:rhel8, libimobiledevice, nodejs:22, util-linux, and vim), Red Hat (.NET 10.0, .NET 8.0, .NET 9.0, cockpit, freerdp, gdb, go-fdo-client, grafana-pcp, ignition, kernel, kernel-rt, krb5, openssh, openssl, osbuild-composer, rpm, rsync, and webkit2gtk3), Slackware (git, httpd, and tigervnc), SUSE (aliyun-cli, alloy, apache-parent, aqute-bnd, google-gson, logback, maven, maven-artifact-transfer, maven-parent, maven-resolver, methanol, osgi-service- subsystem, slf4j, xmvn, bcel, benchdnn, containerd, distribution, dpdk, efivar, elemental, elemental-register, elemental-system-agent, elemental-toolkit, firefox, kernel, liblldpctl4, libonnxruntime1, openssl-1_0_0, openssl-1_1, openvpn, pcre2, perl-Net-DNS, perl-Plack, perl-Starman, psqlODBC, python-M2Crypto, python-Pillow, python-Twisted, python-urllib3_1, python313-djangorestframework, python313-fpdf2, python313-langgraph-sdk, python313-nltk, rust-keylime, skopeo, traefik, zchunk, and zvbi), and Ubuntu (asyncpg, awl, btrbk, davical, dotnet8, dotnet10, dotnet11, libfcgi, linux-raspi, logback, mysql-8.0, mysql-8.4, mysql-9.7, network-manager-ssh, node-babel, php-pecl-http, prosody-modules, rkhunter, ruby-actionpack-page-caching, ruby-jwt, ruby-kramdown, shiro, snmptt, and yodl).


  • [$] LWN.net Weekly Edition for November 12, 2026
    Inside this week's LWN.net Weekly Edition:
    Front: Synaptics patent claims; Git LLM policy; Hibernation and lockdown; User namespaces; glibc tunables. Briefs: *sshole; Amutable foundations; Asahi Linux 7.3; OpenIndiana 2026.10; Firefox 160; Quotes; ... Announcements: Newsletters, conferences, security updates, patches, and more.



LXer Linux News

  • Norways Dropbox Rival Jottacloud is making a Linux app
    Norwegian Dropbox rival Jottacloud is finally working on a desktop app for Linux. Jottacloud, run by Jotta Group AS, has been around since 2008, offering file and photo backup, syncing and sharing via official Windows, Apple and Android apps. What it hasnt had, until now, is a proper desktop app on Linux (it does offer a CLI to create automatic backups of folders, but the terminal-based tool0




  • Red Hat Working To Improve Memory Tiering For QEMU VMs To Save RAM
    Red Hat engineers are working through a few possible approaches to enhance memory tiering for QEMU-based virtual machines to help in conserving memory. Ultimately they are after leveraging NVMe SSDs in more scenarios for QEMU VMs to save on RAM usage given today's sky high memory pricing0






  • AMD openSIL Achieves Its Production Goal With 6th Gen EPYC "Venice"
    Since 2023 I and many open-source advocates have been very eager for AMD's openSIL project for delivering open-source CPU silicon initialization as a replacement to the traditional AGESA code. With Zen 5 there was proof-of-concept support that we have enjoyed with Coreboot on an MSI Ryzen motherboard and a Gigabyte EPYC server motherboard thanks to the Coreboot-based Dasharo ports by 3mdeb. The0



Linux Insider"LinuxInsider"












Slashdot

  • Did Alice Huang's Megaspeed Bypass America's Controls on Exporting Nvidia Chip to China?
    In three years "Megaspeed International" went from from inactive Chinese gaming subsidiary "to one of Asia's biggest buyers of cutting-edge semiconductors from the US," reports CNN. "It is incredibly hard to look at this and not see a Chinese state-sponsored network for bypassing US export control networks," trade data investigator William George told CNN. As Nvidia's Jensen Huang had an affair with Megaspeed executive Alice Huang, "Megaspeed quietly instilled billions of dollars of Nvidia chips in data centers across Southeast Asia," CNN writes, noting scrutiny of the company from the Singapore government and US officials "concerned that the company was passing those chips on to unauthorized Chinese buyers..."In 2022, the US began restricting sales of semiconductors to China, including Nvidia's most advanced. While the controls were meant to curb China's tech industry, they also spawned opportunities for intermediaries willing to help circumvent them. US officials believe Megaspeed may be one of those... [T]rade records show Megaspeed has purchased more than $4 billion in chips and equipment from Nvidia... Based on indictments and investigative reports, research institute Epoch AI estimates that anywhere between 290,000 to 1.6 million advanced US semiconductors were sent to China in violation of export controls last year... Singapore also initiated investigations into Megaspeed and its controllers, including Alice Huang, for potential false declarations relating to the company's server purchases and their final destinations. In a statement, Singapore's Ministry of Home Affairs said there was insufficient evidence that Huang had committed any related offenses, but she had been barred from re-entering the country after providing inaccurate information "to downplay her role" at Megaspeed. The other investigations are ongoing. The exact scale of Chinese chip smuggling is impossible to quantify. However, its existence has become something of an open secret in the industry, as well as an indication that US efforts to keep adversaries from securing high-stakes technology still have fundamental flaws. A May report from the short seller Culper Research claimed that despite tightening trade restrictions, Chinese end-users still account for about 20% of Nvidia chip sales via illegal diversion and intermediaries in Southeast Asia. CNN reminds readers that Jensen Huang accompanied US President Trump to events with Chinese leader Xi Jinping twice this year, and also lobbied for the US to relax controls on Chinese chip imports. "The US government ultimately approved several buyers for less-advanced Nvidia chips, known as H200, while collecting a quarter of the revenue." "However, blacklisted companies have continued to obtain sensitive semiconductors as well," they add. And the Taiwanese government is even seeking to criminalize unauthorized exports of advanced AI chips to China, "as prosecutors there charged nine people in a scheme to sneak Nvidia chips into China through Japan, Indonesia and Hong Kong."


    Read more of this story at Slashdot.


  • 50th Anniversary of 'Star Wars' Celebrated with iMax 70mm Re-Release, Special Events, New Movie
    "Lucasfilm and Disney have restored the original Star Wars (1977) and will release the film in multiple formats, including Imax 70mm [starting February 19], as part of the franchise's 50th anniversary celebrations," reports Deadline. The original film will also be displayed in its original 16:9 format on the center of Cosm's 12K+ LED Dome, in a special presentation developed with Disney, Lucasfilm, ILM, and MakeMake. They're calling it a "Shared Reality production" where "the surrounding visual environments dynamically evolve to immerse the audience in iconic Star Wars locations and moments." Deadline reports more 50th anniversary celebrationsIn addition to the Imax 70mm screenings, the film will also be presented in Digital Imax, Digital Cinema, 70mm, 35mm, and 4DX. On May 4th, 2027, Lucasfilm will release a new behind-the-scenes documentary, The Hero Awakens, from filmmaker R.J. Cutler on Disney+. Star Wars events already on the calendar for 2027 include Shawn Levy's [movie] Star Wars: Starfighter, which will be released May 28. There's also a new poster paying homage to the original 1977 film, reports the Disney news site Mickey Visit, plus a newly orchestrated score by John Williams that they assume "will be used on all the projects that debut this year."On April 2-3, [Disney] will debut the new "Star Wars in Concert: The Skywalker Saga" at the Hollywood Bowl. The show will be hosted by Anthony Daniels, known for his role as C-3PO. Special performances of John Williams' iconic film scores will feature scenes and music from all nine Skywalker Saga films. The concert is a sweeping celebration of the stories, themes, and music that have inspired audiences around the world for five decades... They also teased that new and legacy licensees — including Hasbro, the LEGO Group, adidas, Mars, Aston Martin, Steinway, Hajime Sorayama presented by Complex, and more — will introduce 50th-anniversary collections... In the opening of the press release, Disney mentioned that as part of the announcements there will be "reimagined Disney Parks and Cruise Line offerings." The article adds that the April's Star Wars Celebration at the Los Angeles Convention Center has already sold out. There's more Star Wars news, writes long-time Slashdot reader schwit1A light saber used by Darth Vader in the "Star Wars" movies The Empire Strikes Back and Return of the Jedi sold Thursday for nearly $5 million in an auction. The light saber, which was used in the climactic duel in Cloud City in which Vader tells Luke Skywalker "I am your father" sold for $4.875 million at the Ultimate Star Wars Auction held by Heritage Auctions. The sale marks a world auction record for any "Star Wars" collectible, according to the auction house. The previous record was Heritage's $3,750,000 sale of Luke Skywalker's lightsaber and severed hand effects rig on July 15, 2026. And they're still auctioning more Star Wars memorabilia...


    Read more of this story at Slashdot.


  • Bitcoin Plummets 24% in 46 Days as Crypto Falls on Rising Inflation
    October 3: $84,680Today: $64,108 Bitcoin dropped 24.2% in 46 days. And it "fell more than 4% on Friday to $68,500," reports Fortune, "wiping out gains built over the past three months and casting doubt on whether its bear market was ever really over."The asset also faces weaker investor appetite, according to crypto analytics provider CryptoQuant. The firm's demand indicator recorded its weakest reading since December 2023, while Bitcoin exchange-traded funds became net sellers again. The recent downturn has also extended to other parts of the crypto market. That includes Tether's USDT, the largest cryptocurrency pegged to the U.S. dollar, whose total value shrank by $7.7 billion over the past two months, according to CryptoQuant, a sign that less cash is available in crypto markets. This time around, inflation has been the main culprit. Tuesday's Consumer Price Index report showed prices rose 0.4% in October, more than economists expected. Even stripping out food and energy, inflation ran hotter than forecast. Traders now overwhelmingly expect the Federal Reserve to raise interest rates by a quarter percentage point in December, with some betting on an even bigger increase. "Because these are non-yielding assets, and we expect inflation to rise... people are chucking stuff like gold and Bitcoin to find... government bonds that are going up, providing you [with] income," Chris Beauchamp, chief market analyst at financial technology company IG Group, told Fortune... Heavy borrowing and spending on AI have created what 21Shares calls an "AI black hole," drawing money toward the sector and away from assets like Bitcoin and gold. But Bitcoin remains "joined at the hip" with tech stocks, according to Beauchamp. That leaves it in an awkward position: It faces competition for investment dollars when enthusiasm for AI runs high, yet can get dragged down when that enthusiasm fades. Fast Company points out Bitcoin "remains down more than 20% since the beginning of 2026."[Nvidia] has seen its shares lose more than 27% of their value over the past month. The tech sell-off seems to have dragged down the crypto markets, too, as the two sectors are, on some levels, intermingled... On top of that, outflows from Bitcoin funds may also be contributing to the slide. More than $1 billion in leveraged crypto positions were closed in recent days, which may have added to declining demand, affecting BTC prices.


    Read more of this story at Slashdot.


  • America Officially Loses Its Measles-elimination Status After Continued Spread of the Disease
    Reuters reports:The Pan American Health Organization has revoked the United States' measles-elimination status, ending a 26-year run after determining the country failed to halt continuous transmission of the highly contagious virus for more than a year, the Wall Street Journal reported on Friday... The reported decision by the Americas branch of the World Health Organization comes as the US battles the highest number of measles cases it has seen in more than three decades. Some 7,500 people in the US have been infected with measles and 13 have died since 2025. That period coincides with falling immunization rates and rising vaccine hesitancy under US Health Secretary Robert F. Kennedy Jr., who has for years spread doubts, without scientific evidence, about the safety of measles vaccines...Canada, Spain and the UK recently lost measles-elimination status after review by WHO experts.... "It is a fully preventable disease. It is unconscionable that we have this amount of measles," said Noel Brewer, a public health professor at the University of North Carolina... William Moss, an epidemiology professor at the Johns Hopkins Bloomberg School of Public Health, said loss of measles elimination was a hit to the United States' reputation as a public health powerhouse... For the average American, he added, it means that the United States will continue to have large outbreaks, putting people at risk of disease, hospitalization and death.


    Read more of this story at Slashdot.


  • Manjaro Linux Moves Toward Independent Community Governance
    Arch-based Manjaro Linux "has announced that Manjaro Project e.V. is now officially registered as a non-profit in Germany," reports Linuxiac, "and is therefore a legally separate entity from the commercial Manjaro GmbH & Co. KG... after months of internal wrangling over who was in charge of the project, who had access to the infrastructure and who didn't, and the relationship between the dev team and the commercial company..."The restructuring goes back to March, when the Manjaro developers released the Manjaro 2.0 Manifesto, which was a very public critique of the way Manjaro was being run. The document claims that decision-making has effectively become the sole domain of the project founder, Philip Müller, with the other developers having very limited access to the infrastructure. There's also a concern about the drop in participation, the persistent technical issues, and the continued prioritization of commercial interests over the actual development of the distribution... The manifesto proposed the transfer of all project infrastructure, domains, repositories and community funds to the new organization, together with arrangements for the use of the Manjaro trademark. The contributors were warning that they might well consider forking the distro if the talks didn't go their way. Müller then indicated that he'd be happy to talk about the proposed structure once the non-profit was in place. The association is now formally registered, and so one of the key aims of the manifesto has been realized... Perhaps the most important point is the actual evolution of the distribution. The most recent testing and stable updates were kicked off by the Manjaro team themselves, without any oversight from Müller. This points to the developers having already started to operate on their own in an area which was previously the preserve of the project's founder. They're also in the process of optimizing their dev infrastructure, in part as a response to the continued automated bot attacks on the existing infrastructure. Thanks to Slashdot reader king*jojo for sharing the news.


    Read more of this story at Slashdot.


  • EFF Criticizes US Government's Use of AI For Evaluating Senior Health Insurance Requests
    "When we need medical care, we expect decisions about our treatment to be made by our doctors, not a tech company's algorithm," writes the EFF newsletter EFFector. But in January America's federal government launched a program called WISeR that uses AI to evaluate authorization requests for certain procedures from America's federal health insurance program for seniors, Medicare. EFF sued for records and discovered "additional issues" with the program that they say "could jeopardize Medicare beneficiaries' access to care." The records we received revealed that WISeR has resulted in widespread delays and denials of care, operational chaos, and reports of patient harm. Further documents obtained by EFF show a rushed and rocky rollout, highlighting the dangers that arise when governments treat AI like a silver bullet for complex problems. EFF has now published hundreds of pages of documents obtained through our lawsuit, available here... The documents also highlight the need for more transparency about safeguards against inappropriate, AI-driven denials. EFF has long argued that AI has no place in consequential government decisions about peoples' rights or access to benefits, such as immigration enforcement and policing decisions. That's because using automated decision-making in these contexts risks decisions that violate people's rights or deprive them of benefits they're entitled to based on biased or inappropriate considerations and without proper due process or accountability if there is an error. By outsourcing decision-making to private AI companies without sufficient transparency, testing, or legal limits, WISeR jeopardizes seniors' access to medical care. Congress should step in to place greater legal limits on the use of automated decision-making in Medicare. The new documents "show why we need stronger legal limits around government use of automated decision-making..." according to the newsletter. And another EFF page argues that the American public "still lacks the information needed to assess whether clinician review is providing meaningful oversight of AI systems and whether appropriate data is being used to evaluate prior authorization requests."WISeR's payment structure gives vendors, as the government put it, "an incentive to deny as many claims as possible...." [One company] denied more requests than it approved in the first few months of the program, and CMS inquired about "denials that appear inaccurate or inconsistent with applicable criteria." Ultimately, the records obtained by EFF raise more questions than they answer about the safeguards used by WISeR vendors... A growing body of scholarship points to the substantial limitations of "human in the loop" policies as guardrails for AI systems. AI-generated recommendations can unduly influence human decisions, leading reviewers to over-rely on automated judgements and rubber stamp them as correct. Even worse, at least one health insurance company actively pressured clinical reviewers to accept its AI systems' recommendations. Another company built a system that allowed clinical reviewers to reject claims without opening patient files; clinical reviewers using this system spent an average of just 1.2 seconds on each case.. As the government expands its use of automated decision-making, the potential for consequential mistakes increases rapidly. The records we've obtained so far raise questions about the rushed rollout and lack of guardrails for automated decision-making by the U.S. government. EFF urges transparency, oversight, and legal limits to protect people from the harms of automated decision-making in high risk systems.


    Read more of this story at Slashdot.


  • Hundreds of Fake Accounts Defended Jensen Huang On Social Media
    The Washington Post reports on something peculiar about support for Nvidia CEO Jensen Huang online after he'd told the world he'd been unfaithful to his wife (before reports of his second extramarital affair):Joining the chorus online were voices of seemingly everyday people: a chef, a stock trader, a Hebrew teacher and several environmental activists. But at least 400 of them were fake, according to research from the nonprofit Midas Project, with links to a public relations firm involved in previous so-called "sockpuppet" campaigns... Many of the fake accounts, according to Midas Project executive director Tyler Johnston, replied to journalists, former U.S. officials and other prominent figures and backed not just Huang but Nvidia's push to sell its cutting-edge chips to Chinese firms. Like other documented influence campaigns, the posts appeared to have limited reach; the most-viewed tweet garnered about 8,000 views and 32 likes. Still, some of the posts targeted lawmakers, including accounts for the [U.S.] House Select Committee on China, Republicans on the House Foreign Affairs Committee and Sen. Elizabeth Warren (D-Massachusetts). "That's a place where you might not need a lot of views, but maybe the staffers who are running the lawmakers' account are paying attention to how their messages are received," said Johnston, whose group advocates for safe AI development... There were other clues that helped identify accounts as being part of an apparently coordinated campaign, according to the Midas Project. Some of them were created minutes or hours apart, and had user names and profile photos refreshed at similar times. They also sometimes engaged on oddly specific issues ranging from Qatar to Nippon Steel's bid for U.S. Steel and a waste management plant in Oregon.... Any one one of the posts — often replies to other posts — might have not looked suspicious in isolation. But the various clues taken together, Johnston said, gave evidence that they were linked. Some of the accounts then rushed to delete posts after he posted his findings online, and at least 260 of them have been deactivated or suspended by X.


    Read more of this story at Slashdot.


  • Amazon Expands Drone Deliveries, and Gets Noise Complaints. 'Like a Swarm of Bees'
    "In August, Amazon announced it was expanding its airborne shipping to suburban areas in nearly 500 U.S. cities," reports the Chicago Sun-Times, "including the Chicago, Atlanta, Cleveland and Boise, Idaho, metro areas." And on Tuesday Amazon cut the ribbon on its new drone delivery center Tuesday 24 miles south of Chicago. But Amazon's drones are already servicing parts of Texas, notes the Houston Chronicle. And north of Houston, Theresa Gibbons complains "It was kind of cool and fascinating at first, but now it is driving me crazy."Her home in the Bridgestone neighborhood is nestled right in the flight path of Amazon's drone service. Gibson said she hears roughly a dozen drones flying over her home each day. Noise pollution has become a frequent complaint in Texas neighborhoods where the service operates. Residents have compared the sound to everything from a massive beehive to a full-on air raid. "It does not sound like a [single] bumble bee. It sounds like a large swarm of bees at a much higher volume than a normal swarm of bees. And it's all day long," said Gibson. Amazon's drone delivery service is currently operating in four Texas cities, including Houston, Waco, San Antonio and Richardson. The company announced major expansion plans in August, but growing complaints in pilot neighborhoods could foreshadow complications later down the line, with regions such as Harris County already taking legal action in response... So far, a group of fifteen states, plus Harris County, [Texas] have formed a coalition that has filed a petition in the US Court of Appeals challenging the Federal Aviation Administration's environmental review, citing that it failed to adequately address the effects of expanding drone deliveries. And meanwhile near Boise, Idaho, local news station KTVB reports....Less than two weeks after Amazon began delivering packages by drone in Nampa, the cities of Nampa and Meridian say they have received complaints over the noise and how often the drones fly... Amazon began Prime Air drone deliveries Oct. 30 from its East Franklin Road fulfillment center, making Nampa the company's first Idaho drone site... How people feel about the drones depends on whom you ask. A Meridian man who has received drone deliveries says the noise doesn't bother him. Neighbors closest to the launch site say the drones fly from sunup to sundown and are disturbing their peace. Randy Nye, who has lived in Cherry Creek Estates for 17 years, compared it to living in a beehive. "It's just a constant presence," he said.... Nye, who works from home, said he and his neighbors who technically are just outside city limits had no idea this was coming. He said the city approved the drones in May, and they were never given written notice this was coming, despite living so close. He said they were shocked when deliveries started by drones just 12 days ago. Nye said he hopes something can change. A few homes down, Kerri Wattier has started counting. On Wednesday with KTVB, she clicked a handheld counter each time a drone passed over her home. She started at 3:30 p.m. By 4:18 p.m., she had counted 39. "It sounds like lawnmowers and leaf blowers flying over our house," Wattier said. "Amazon says it is evaluating changes, including adjusting flight paths," the article adds. Ironically at that ribbon-cutting ceremony near Chicago, the speakers were occasionally drowned out by the roar of the drones, reports the Chicago Tribune, since they're "relatively loud when they are close to the ground." ("At the point of delivery they top out at 68 decibels," said Amazon economic development manager Sam Bailey, adding that "It's very brief exposure and it only occurs during daytime hours.") But that site has been operational since October 12, and has "generally" hit its maximum capacity of 300 drone orders daily, Bailey told the Chicago Tribune, adding that scaling up is "something that we're always considering." And since October 12 they've already seen "thousands" of orders delivered by their 21 drones just across that 7.5-mile radius:Bailey said customers should clear the area when a drone delivery is incoming. The drones drop packages from about 12 feet. If the drone detects movement in the area, he said, the delivery will be canceled. "You want your kids inside the house," Bailey said. "We will not drop a package in an unsafe location. People who want to stand below and try to catch it, don't do that." The Chicago Sun-Times points out that Walmart already offers some drone deliveries from over 75 stores across Arkansas, Florida, North Carolina, Georgia and Texas, and "earlier this year said it planned to expand drone delivery service to 150 more stores in partnership with Wing, a division of Google parent company Alphabet, giving it 270 drone delivery locations by 2027."


    Read more of this story at Slashdot.


  • America Cancels 4,000 More Flights. FAA Denies Impact of New AI System.
    UPDATE: FAA Administrator Bryan Bedford said Saturday that U,S. airlines will likely cancel 4,000 to 5,000 of the roughly 41,000 flights scheduled for Saturday, reports Yahoo News. And as to the cause of the incident... [U.S. Transportation Secretary Sean] Duffy said a router involved in the switch from copper wire to fiber "started flooding other routers in our air traffic control system." The system saw "over 1,000 connection attempts every four to five seconds," he said. That disrupted communications with airplanes and radar. America's nationwide grounding of flights on Friday happened "amid growing scrutiny... of a new AI-powered air traffic management system" deployed by America's Federal Aviation Administration, reports Texas news station KXAN. Ironically, that system is called SMART — but the outage happened "following warnings" from members of the U.S. Congress about this new AI system's safety, reliability and oversight:In an Oct. 13 letter to the Government Accountability Office, more than 20 members of Congress requested an independent review of the FAA's development and implementation of its Strategic Management of Airspace, Routes and Trajectories system, known as SMART. The lawmakers questioned whether the technology was being deployed with adequate input from frontline air traffic controllers, sufficient training and appropriate safety evaluations... In their letter to the GAO, the lawmakers specifically questioned whether the FAA had adequately evaluated risks associated with SMART's artificial intelligence capabilities, including the potential for the technology to interfere with experienced controllers' decision-making or generate inaccurate safety-critical information. "The nation's frontline aviation safety workforce apparently had little to no input into SMART's development and have received limited training and information during the current deployment process," the lawmakers wrote. The letter also questioned the FAA's decision to initially pilot the technology in heavily congested airspace, including the National Capital Region. "Our switches, our routers, actually got overloaded with data," U.S. Transportation Secretary Sean Duffy acknowledged Friday. But FAA Administrator Bryan Bedford said Saturday that officials have found "zero evidence of anything AI related" in Friday's outage, according to Yahoo News. An article from The Hill.com notes that Duffy also said the new AI tool had nothing to do with the ground stop, and that he said the system "isn't plugged in.""This is completely disconnected, and I love that some people have said this would be the root cause. By the way, if it was, I'll tell you that, but this is not even plugged in," he said. "So, there's no possible way SMART would have impacted." Duffy also asked Congress for $50 billion to rebuild what he described as an "incredibly old" air traffic control system. Duffy had posted the day before that the AI system had been at least partially rolled out and that it was already working (adding "Soon this technology is going NATIONWIDE") And Friday CNN's aviation analyst said they believed that AI system could be connected to the nationwide outage, calling it "a tremendous amount of coincidence," according to a report from Mediaite: CNN Aviation Analyst: "Many times in the past, what we have seen, and this has gone back decades, is that because air traffic control is this piecemeal, mishmash of a whole bunch of different systems... some going back to radio, telephones and floppy disks... when they put in new computer systems, they often have difficulty talking with, communicating with, or working with the much older systems. And I have to say, it's a tremendous amount of coincidence... If they're putting in new software now, this new SMART system to start managing that, and now we have a communications outage, I'm — we've seen this so many times in the past. I don't know if they're linked, but it's just too much coincidence that they were trying to start that moving today, and now we have problems with the en route system. So if I was to guess — and we haven't heard any, you know, it's not that it's threats or criminals or terrorists. We haven't heard anything like that. So I am guessing that once again we have a problem with new air traffic control computer systems, AI — you know, modern systems trying to communicate with old systems. And we have just seen this so many times in the past, and it's a big problem... Our whole national airspace system is you know, pieces and parts. It's kind of a Franken-system. And that would be my guess, that they are having computer issues by putting the new software in with the old, just because today they announced that that were going to do this new system. KXAN describes some of the complexity of the newly-launched AI system:According to the FAA, the system consolidates approximately 200 data streams, including airline schedules, flight paths, weather patterns, airport capacity, airspace conditions and air traffic controller staffing metrics. The agency says SMART uses artificial intelligence to analyze that information, predict traffic flows, identify potential conflicts and recommend adjustments to flight routes and departure schedules before disruptions occur. The FAA describes the technology as a shift from a reactive approach to a predictive one, allowing aviation officials to identify congestion, weather-related restrictions and other operational problems hours, days or even weeks in advance... The congressional letter raised questions about whether the FAA's implementation strategy was moving faster than its safety evaluations, workforce training and independent oversight could support. Ironically, the article points out that the FAA promoted anticipated benefits from the technology including fewer delays and flight cancellations. (Other anticipated benefits included improved on-time performance and faster recovery from weather disruptions.) Although the FAA has realized one of the system's anticipated benefits: reduced fuel consumption.


    Read more of this story at Slashdot.


  • Linus Torvalds Wonders If Linux's AI-Prompted Patch Flood Has Peaked
    The Register writes that "The worst of the patchpocalypse may be behind us, according to Linus Torvalds." In his weekly kernel update post, Torvalds said Linux 7.4 rc2 was a big release partly because it contained code he'd left out of rc1 because he'd been busy and it was already the largest such release in kernel history. But Torvalds said the other reason rc2 was big was "various AI fixes."Such fixes are necessary because ever since Anthropic launched its Mythos bug-finding model in April, developers have been able to find more software flaws than was previously possible. Microsoft, for example, addressed a record 974 flaws in September — its third record fixing spree this year after it whacked 622 flaws in July and 206 in June. Oracle addressed 1,449 flaws in a single month. That's many more patches than IT teams are set up to handle, yet they must find ways to deal with bugs more quickly because attackers are increasingly targeting flaws found by AI. Torvalds' post suggests that, perhaps, the worst of this is behind us. "This time around Alexei claims that on the bpf side at least the fixes are now coming in faster than the new reports, and that sounds lovely if true," he wrote. That's a reference to Alexei Starovoitov, co-creator and lead dev on the Extended Berkeley Packet Filter (eBPF), the project that makes it possible to run sandboxed programs within the Linux kernel. "I think most other areas haven't reached that point yet, but it's at least a sign that we _may_ be starting to see the tide starting to turn," he added. The patchpocalypse has already affected Linux kernel developer Lorenzo Stoakes, a principal software engineer at Arm, The Register reported Friday:Earlier this week he posted an email to the Linux kernel mailing list to say that he was planning to drop some of his workload. He explained: "Given the current throughput in the kernel resulting from AI-generated series, I unfortunately lack the bandwidth to generally be able to offer review except in those areas I maintain. [...] Apologies for doing this, but given the current trends I'd like to do something to make my inbox a little more manageable." Stoakes told The Register, "I just want my inbox to be less horrendous. And yeah, AI is part of the reason; in general, it's gone from 'once a week' to 'daily' to 'half of what I see in review'."


    Read more of this story at Slashdot.



Linux.com






  • From DHCP to SZTP – The Trust Revolution
    By Juha Holkkola, FusionLayer Group The Dawn of Effortless Connectivity In the transformative years of the late 1990s, a quiet revolution took place, fundamentally altering how we connect to networks. The introduction of DHCP answered a crucial question, Where are you on the network?!, by automating IP address assignment. This innovation eradicated the manual configuration [0]

    The post From DHCP to SZTP – The Trust Revolution appeared first on Linux.com.






Phoronix



  • Red Hat Working To Improve Memory Tiering For QEMU VMs To Save RAM
    Red Hat engineers are working through a few possible approaches to enhance memory tiering for QEMU-based virtual machines to help in conserving memory. Ultimately they are after leveraging NVMe SSDs in more scenarios for QEMU VMs to save on RAM usage given today's sky high memory pricing...





  • FreeBSD 15.2 Beta 2 Delivers Updated OpenSSL, Bug Fixes
    FreeBSD 15.2 Beta 1 debuted last week for this updated operating system bringing improved laptop/desktop hardware support, experimental cross-building of base packages on Linux and macOS, updated LLVM/Clang compiler, updated OpenZFS file-system support, and other improvements. Released overnight was FreeBSD 15.2 Beta 2...




  • AMD openSIL Achieves Its Production Goal With 6th Gen EPYC "Venice"
    Since 2023 I and many open-source advocates have been very eager for AMD's openSIL project for delivering open-source CPU silicon initialization as a replacement to the traditional AGESA code. With Zen 5 there was proof-of-concept support that we have enjoyed with Coreboot on an MSI Ryzen motherboard and a Gigabyte EPYC server motherboard thanks to the Coreboot-based Dasharo ports by 3mdeb. The goal for production readiness was for Zen 6, but with this week's EPYC 9006 SP7 announcement the openSIL topic wasn't touched on. So I asked around...



Engadget"Engadget - Technology News & Expert Reviews"











OSnews

  • MenuetOS keeps steadily improving
    MenuetOS, the operating system written in x86-64 assembly, has seen a few new releases since we last looked at it, delivering some welcome improvements. Secure network connections are now faster, theres a TrueType font demo, and, of course, the usual bugfixes and smaller improvements. The game Wizord EXL100 has been ported, and a few drivers have been improved as well. You can get the latest releases from the downloads page.


  • ReactOS makes strides in SMP, 64bit, and more
    The ReactOS project organised two hackfests this year, and the work done during those in-person sessions, combined with the ongoing regular progress, has led to some pretty significant breakthroughs and progress. More NT6+ syscalls have been added, ReactOS supports floppy disks now, NTFS support has been vastly improved, and much more. Theres also a new USB3/4 stack, which is now merged and offers basic support for these versions of USB. One of the biggest additions is a new kernel shim engine which gives ReactOS the ability to work around buggy drivers and implement quirks, moreso than even Windows itself can. For instance, thanks to this new shim, XP-era NVIDIA drivers can run on NT6 ReactOS. The ongoing efforts to implement SMP are yielding results too: ReactOS can now run with SMP for days on end while doing tasks in the background, which is quite promising. The team is showing off Steam and the game Among Us running on ReactOS, which is definitely impressive.


  • Polo: a new Wayland compositor for MATE
    MATE is probably the last X11-only holdout among the major desktop environments, but thats about to change if Kerem Söke has anything to say about it. Polo is a port of Marcos behavior and window management policies to Wayland, built on libweston and written in Vala and C. Its a window manager, compositor, and session authority for the MATE Wayland desktop. It takes over, step by step, what Marco, mate-session-manager and the compositor-facing parts of mate-settings-daemon do on X11. ↫ Polos GitHub page Söke is looking for testers with this very first Polo 1.0.0 release  cute name, too  which is available on its GitHub page.


  • IBM to offer access to a dual-processor quantum system in 2027
    Ars Technica published a short write-up about changes to IBMs quantum computing plans. The changes greatly expand the scope of its next-generation Nighthawk general-use processors by adding a version with over 500 programmable qubits. At the same time, it’s stepping back a bit on its plan to link multiple Nighthawk processors together, dropping the intended number of linked systems from nine to two. The total number of qubits planned for next year will remain the same; how the company is getting there, however, will be different. Meanwhile, the company is touting the performance boost achieved via a major change that was made in the generation of Nighthawk processors released in September: hardware-based qubit resets. ↫ John Timmer at Ars Technica Im convinced quantum computing will eventually have a big impact in the areas its characteristics are presumed to be well-suited for. Also, it just looks and sounds incredibly cool, even if as the technology currently stands its not particularly useful yet.


  • Im not descending into madness because mount and unmount icons make no sense
    There are many problems in this world  some big, some small, some so minute nobody ought to put them to paper at all. The problem Im going to highlight here is even smaller than that. This literally  the actual literally  does not matter and absolutely nobody should care about it, let alone put any work into changing it or addressing it some other way. I want to talk about the iconography GNOMEs Disks utility uses to symbolise mount! and unmount!. No, Im not descending into madness. GNOMEs Disks utility uses the play! symbol on the mount button, and the stop! symbol on the unmount button. Inexplicably, considering the state of the world in general and the rapidly deteriorating quality of software specifically, this bothers me. Out in the real world, built on decades of consistent use, these symbols have gained clearly defined meanings, and mounting and unmounting disks definitely isnt one of them. In fact, the meaning of these symbols isnt mere convention; theyre defined in a variety of international standards for symbols for use in software and on equipment, such as ISO/IEC 18035 (which you need to buy to read; my copy fell of a truck): ISO/IEC 18035:2002 defines a consistent set of icons and related functions that are represented by multimedia applications on a computer screen and that users interact with to control such applications. It describes controls applying to such functions as: Play, Pause, Stop, Rewind, Scan forward, Scan backward, Replay backward, Loop, Go to beginning, Go to previous, Go to next, Go to end, Set volume and Mute. ↫ ISO/IEC 18035:2003 Theyre also part of ISO 7000/IEC 60417, a much larger, more encompassing standard that also contains things like the various symbols used on laundry machines, tumble dryers, in cars, and so on. The symbols themselves are much older than the standards, of course, with many of them dating back to the 1960s and possibly even 1950s. The point remains, though: the play and stop symbols have clearly defined meanings, and I dont think they are at all a good fit for mount and unmount. The function of the play! symbol according to ISO/IEC 18035: To enable the user to start the presentation of dynamic media, except where the task requires automatic playing of that media. ↫ ISO/IEC 18035:2003 And of the stop! symbol: To enable the user to stop the presentation of dynamic media. ↫ ISO/IEC 18035:2003 Neither of these descriptions match what mounting and unmounting mean or do. Mounting a drive or partition doesnt present any media at all; it merely makes the drive or partition in question accessible. Unmounting also doesnt eject anything; it merely makes the drive or partition inaccessible. I would argue that play and pause act upon contents of a drive or volume, and not upon the drive or volume itself. As it stands right now, you play! a drive! to play! a video stored on said drive. Madness. I already know what youre thinking, and yes, I agree that the Disks utility is a tool aimed at more advanced use cases and users, and most normal, average users will never even know it exists, let alone open it at all. Very few people get to see these symbols, and those that do already know full well what mounting and unmounting mean, reducing the importance of said symbols considerably. But now its time for the big surprise, the twist in the story that turns this entire thing on its head. Files, GNOMEs file manager, uses an entirely different symbol for unmounting! Instead of the stop! symbol, Files uses the eject! symbol. You may think this is a more accurate visual representation of what unmounting means, but I strongly disagree. Lets turn to ISO/IEC 18035:2003 once again: To enable the user to eject the current physical media from the appropriate drive. ↫ ISO/IEC 18035:2003 Unmounting doesnt eject anything! If you unmount a USB stick, the stick doesnt get fired out of the USB port. If you unmount a volume, it doesnt get removed from the SSD. Hell, if you unmount a CD-ROM, it doesnt even eject it! Ejecting a CD-ROM  opening the drives tray or spitting the CD-ROM out of a slot-loader  is an entirely different act! Are we really ejecting! a CD-ROM twice? Are we mounting! a CD-ROM when we merely close the tray? No! Madness! The real underlying problem here is, of course, that mounting and unmounting are deeply weird and confusing concepts, bordering on the esoteric, that simply do not have physical equivalents to fall back on. Using symbols and iconography designed in the 1960s explicitly for playing music or stopping a video or ejecting a cassette tape are not a good fit for something as difficult to explain to most people as mounting and unmounting. Its like putting an eject symbol on a cars door handle or a play symbol on a soap dispenser. Should GNOME developers waste any time or resources to address this? No, of course not, that would be stupid. Nobody should care about this but me. I should suffer in silence, every time I need to mount or unmount something, forced to look for an eject or stop symbol in whatever user interface I happen to be using. Every time, I should die a little inside. Please, dont be like me and waste precious resources thinking about this. Im not descending into madness. I just want mount and unmount symbols that make sense. Im not descending into madness.


  • Haiku gets multifinger touchpad taps
    Were almost halfway through November, but we hadnt seen Haikus monthly activity report for October yet. Its here now, and theres quite a few good things in here, like support for two and three-finger tap gestures on touchpads for right and middle-click, a new driver that adds Universal Flash Storage support, and even some build fixes for Haikus SPARC port as well as some fixes on the RISC-V side. Of course, thats just a selection, as theres the usual long list of smaller changes, bugfixes, and improvements as well.


  • Microsoft releases .NET 11
    Today, we’re excited to announce the release of .NET 11! This year’s release makes building modern applications faster, more productive, and has improvements across C# 15, ASP.NET Core, .NET MAUI, and Windows development. With hundreds of runtime optimizations, more responsive SDK tooling, and less overhead in everyday commands, you can spend less time waiting and more time creating. Build richer web and cross-platform applications, take advantage of new C# language features, and explore AI-powered development with improved tools and agentic capabilities. ↫ .NET Team Im not going to pretend to care about .NET, but I know many of you have to care on a professional level, because .NET is remarkably popular in places where the spotlights dont often shine.


  • What if any process could handle SIGKILL?
    An interesting question, and a detailed technical rundown of how to make this happen, which involved building a custom Linux kernel, of course. I really, really enjoy the conclusion. And you know? It turned out fine. Nothing exploded on my system. As I could predict, because this was otherwise impossible, nobody did it. The signal system was setup in such a way that you would most likely realize something you were doing was wrong, and not try it. To pull back further, it is interesting to notice how the rules we all take for granted are just set somewhere in code. They were written by someone, at some point. If there is code restricting you from doing something, someone wrote it. Either they did not think anyone would want to do that thing, or they specifically prevented you from doing it. Those rules are written somewhere, and you can take it in your paws to go sniff around the code, pull out the relevant parts, and hack around the things that bother you. For fun, learning, or convenience. Snoop around. Sniff code. Put your paws in it. Hack shit. ↫ lux at VulpineCitrus Even if theres no real reason to do, even if its just to satiate an odd and possibly slightly morbid sense of curiosity, fuck with code.


  • OpenIndiana Hipster 2026.10 released
    OpenIndiana is a rolling-release illumos distribution, but they do release snapshots twice a year to serve as a base for installations, which they call Hipster. The projects just released OpenIndiana Hipster 2026.10, and it brings a number of welcome changes. First, theres UEFI framebuffer support on the live image, which is automatically configured when loading up the image. Second, Firefox and Thunderbird versions have been bumped to 159.0, and a whole slew of development tools have been updated to newer versions as well. This snapshot also brings QEMU 11.1.2 and VirtualBox 7.2.22, and a number of new applications have been added as well. In addition, SPARC build support has been improved to enable new and updated packages for Suns dead ISA as well. You can download a fresh image, or update an existing installation through IPS.


  • Making musl and proprietary NVIDIA drivers work together
    Creator and lead developer of Chimera Linux, Nina q66!, write about their efforts to get NVIDIA drivers to work properly on musl-based distributions. As you may be aware, one of the limitations of musl-based distributions is that they will not function to their proper extent when used in computers with various NVIDIA graphics cards. This is due to the proprietary nature of the driver, being built for glibc. I have been experimenting with trying to make this work, and this post is the summary of that effort. ↫ Nina q66! on the Chimera blog What follows is a deeply technical exploration of the problem, and the steps Nina q66 and the Chimera team are taking to try and fix it. With how popular and widespread NVIDIA hardware still is, this is a hugely important issue to try and address, and Im grateful theyre trying to address it.



Linux Journal News

  • EU OS: A Bold Step Toward Digital Sovereignty for Europe
    Image
    A new initiative, called "EU OS," has been launched to develop a Linux-based operating system tailored specifically for the public sector organizations of the European Union (EU). This community-driven project aims to address the EU's unique needs and challenges, focusing on fostering digital sovereignty, reducing dependency on external vendors, and building a secure, self-sufficient digital ecosystem.
    What Is EU OS?
    EU OS is not an entirely novel operating system. Instead, it builds upon a Linux foundation derived from Fedora, with the KDE Plasma desktop environment. It draws inspiration from previous efforts such as France's GendBuntu and Munich's LiMux, which aimed to provide Linux-based systems for public sector use. The goal remains the same: to create a standardized Linux distribution that can be adapted to different regional, national, and sector-specific needs within the EU.

    Rather than reinventing the wheel, EU OS focuses on standardization, offering a solid Linux foundation that can be customized according to the unique requirements of various organizations. This approach makes EU OS a practical choice for the public sector, ensuring broad compatibility and ease of implementation across diverse environments.
    The Vision Behind EU OS
    The guiding principle of EU OS is the concept of "public money – public code," ensuring that taxpayer money is used transparently and effectively. By adopting an open-source model, EU OS eliminates licensing fees, which not only lowers costs but also reduces the dependency on a select group of software vendors. This provides the EU’s public sector organizations with greater flexibility and control over their IT infrastructure, free from the constraints of vendor lock-in.

    Additionally, EU OS offers flexibility in terms of software migration and hardware upgrades. Organizations can adapt to new technologies and manage their IT evolution at a manageable cost, both in terms of finances and time.

    However, there are some concerns about the choice of Fedora as the base for EU OS. While Fedora is a solid and reliable distribution, it is backed by the United States-based Red Hat. Some argue that using European-backed projects such as openSUSE or KDE's upcoming distribution might have aligned better with the EU's goal of strengthening digital sovereignty.
    Conclusion
    EU OS marks a significant step towards Europe's digital independence by providing a robust, standardized Linux distribution for the public sector. By reducing reliance on proprietary software and vendors, it paves the way for a more flexible, cost-effective, and secure digital ecosystem. While the choice of Fedora as the base for the project has raised some questions, the overall vision of EU OS offers a promising future for Europe's public sector in the digital age.

    Source: It's FOSS
    European Union


  • Linus Torvalds Acknowledges Missed Release of Linux 6.14 Due to Oversight

    Linus Torvalds Acknowledges Missed Release of Linux 6.14 Due to Oversight

    Linux kernel lead developer Linus Torvalds has admitted to forgetting to release version 6.14, attributing the oversight to his own lapse in memory. Torvalds is known for releasing new Linux kernel candidates and final versions on Sunday afternoons, typically accompanied by a post detailing the release. If he is unavailable due to travel or other commitments, he usually informs the community ahead of time, so users don’t worry if there’s a delay.

    In his post on March 16, Torvalds gave no indication that the release might be delayed, instead stating, “I expect to release the final 6.14 next weekend unless something very surprising happens.” However, Sunday, March 23rd passed without any announcement.

    On March 24th, Torvalds wrote in a follow-up message, “I’d love to have some good excuse for why I didn’t do the 6.14 release yesterday on my regular Sunday afternoon schedule,” adding, “But no. It’s just pure incompetence.” He further explained that while he had been clearing up unrelated tasks, he simply forgot to finalize the release. “D'oh,” he joked.

    Despite this minor delay, Torvalds’ track record of successfully managing the Linux kernel’s development process over the years remains strong. A single day’s delay is not critical, especially since most Linux users don't urgently need the very latest version.

    The new 6.14 release introduces several important features, including enhanced support for writing drivers in Rust—an ongoing topic of discussion among developers—support for Qualcomm’s Snapdragon 8 Elite mobile chip, a fix for the GhostWrite vulnerability in certain RISC-V processors from Alibaba’s T-Head Semiconductor, and a completed NTSYNC driver update that improves the WINE emulator’s ability to run Windows applications, particularly games, on Linux.

    Although the 6.14 release went smoothly aside from the delay, Torvalds expressed that version 6.15 may present more challenges due to the volume of pending pull requests. “Judging by my pending pile of pull requests, 6.15 will be much busier,” he noted.

    You can download the latest kernel here.
    Linus Torvalds kernel


  • AerynOS 2025.03 Alpha Released with GNOME 48, Mesa 25, and Linux Kernel 6.13.8
    Image
    AerynOS 2025.03 has officially been released, introducing a variety of exciting features for Linux users. The release includes the highly anticipated GNOME 48 desktop environment, which comes with significant improvements like HDR support, dynamic triple buffering, and a Wayland color management protocol. Other updates include a battery charge limiting feature and a Wellbeing option aimed at improving user experience.

    This release, while still in alpha, incorporates Linux kernel 6.13.8 and the updated Mesa 25.0.2 graphics stack, alongside tools like LLVM 19.1.7 and Vulkan SDK 1.4.309.0. Additionally, the Moss package manager now integrates os-info to generate more detailed OS metadata via a JSON file.

    Future plans for AerynOS include automated package updates, easier rollback management, improved disk handling with Rust, and fractional scaling enabled by default. The installer has also been revamped to support full disk wipes and dynamic partitioning.

    Although still considered an alpha release, AerynOS 2025.03 can be downloaded and tested right now from its official website.

    Source: 9to5Linux
    AerynOS


  • Xojo 2025r1: Big Updates for Developers with Linux ARM Support, Web Drag and Drop, and Direct App Store Publishing
    Image
    Xojo has just rolled out its latest release, Xojo 2025 Release 1, and it’s packed with features that developers have been eagerly waiting for. This major update introduces support for running Xojo on Linux ARM, including Raspberry Pi, brings drag-and-drop functionality to the Web framework, and simplifies app deployment with the ability to directly submit apps to the macOS and iOS App Stores.

    Here’s a quick overview of what’s new in Xojo 2025r1:
    1. Linux ARM IDE Support
    Xojo 2025r1 now allows developers to run the Xojo IDE on Linux ARM devices, including popular platforms like Raspberry Pi. This opens up a whole new world of possibilities for developers who want to create apps for ARM-based devices without the usual complexity. Whether you’re building for a Raspberry Pi or other ARM devices, this update makes it easier than ever to get started.
    2. Web Drag and Drop
    One of the standout features in this release is the addition of drag-and-drop support for web applications. Now, developers can easily drag and drop visual controls in their web projects, making it simpler to create interactive, user-friendly web applications. Plus, the WebListBox has been enhanced with support for editable cells, checkboxes, and row reordering via dragging. No JavaScript required!
    3. Direct App Store Publishing
    Xojo has also streamlined the process of publishing apps. With this update, developers can now directly submit macOS and iOS apps to App Store Connect right from the Xojo IDE. This eliminates the need for multiple steps and makes it much easier to get apps into the App Store, saving valuable time during the development process.
    4. New Desktop and Mobile Features
    This release isn’t just about web and Linux updates. Xojo 2025r1 brings some great improvements for desktop and mobile apps as well. On the desktop side, all projects now include a default window menu for macOS apps. On the mobile side, Xojo has introduced new features for Android and iOS, including support for ColorGroup and Dark Mode on Android, and a new MobileColorPicker for iOS to simplify color selection.
    5. Performance and IDE Enhancements
    Xojo’s IDE has also been improved in several key areas. There’s now an option to hide toolbar captions, and the toolbar has been made smaller on Windows. The IDE on Windows and Linux now features modern Bootstrap icons, and the Documentation window toolbar is more compact. In the code editor, developers can now quickly navigate to variable declarations with a simple Cmd/Ctrl + Double-click. Plus, performance for complex container layouts in the Layout Editor has been enhanced.
    What Does This Mean for Developers?
    Xojo 2025r1 brings significant improvements across all the platforms that Xojo supports, from desktop and mobile to web and Linux. The added Linux ARM support opens up new opportunities for Raspberry Pi and ARM-based device development, while the drag-and-drop functionality for web projects will make it easier to create modern, interactive web apps. The ability to publish directly to the App Store is a game-changer for macOS and iOS developers, reducing the friction of app distribution.
    How to Get Started
    Xojo is free for learning and development, as well as for building apps for Linux and Raspberry Pi. If you’re ready to dive into cross-platform development, paid licenses start at $99 for a single-platform desktop license, and $399 for cross-platform desktop, mobile, or web development. For professional developers who need additional resources and support, Xojo Pro and Pro Plus licenses start at $799. You can also find special pricing for educators and students.

    Download Xojo 2025r1 today at xojo.com.
    Final Thoughts
    With each new release, Xojo continues to make cross-platform development more accessible and efficient. The 2025r1 release is no exception, delivering key updates that simplify the development process and open up new possibilities for developers working on a variety of platforms. Whether you’re a Raspberry Pi enthusiast or a mobile app developer, Xojo 2025r1 has something for you.
    Xojo ARM


  • New 'Mirrored' Network Mode Introduced in Windows Subsystem for Linux

    Microsoft's Windows Subsystem for Linux (WSL) continues to evolve with the release of WSL 2 version 0.0.2. This update introduces a set of opt-in preview features designed to enhance performance and compatibility.

    Key additions include "Automatic memory reclaim" which dynamically optimizes WSL's memory footprint, and "Sparse VHD" to shrink the size of the virtual hard disk file. These improvements aim to streamline resource usage.

    Additionally, a new "mirrored networking mode" brings expanded networking capabilities like IPv6 and multicast support. Microsoft claims this will improve VPN and LAN connectivity from both the Windows host and Linux guest. 

    Complementing this is a new "DNS Tunneling" feature that changes how DNS queries are resolved to avoid compatibility issues with certain network setups. According to Microsoft, this should reduce problems connecting to the internet or local network resources within WSL.

    Advanced firewall configuration options are also now available through Hyper-V integration. The new "autoProxy" feature ensures WSL seamlessly utilizes the Windows system proxy configuration.

    Microsoft states these features are currently rolling out to Windows Insiders running Windows 11 22H2 Build 22621.2359 or later. They remain opt-in previews to allow testing before final integration into WSL.

    By expanding WSL 2 with compelling new capabilities in areas like resource efficiency, networking, and security, Microsoft aims to make Linux on Windows more performant and compatible. This evolutionary approach based on user feedback highlights Microsoft's commitment to WSL as a key part of the Windows ecosystem.
    Windows


  • Linux Threat Report: Earth Lusca Deploys Novel SprySOCKS Backdoor in Attacks on Government Entities

    The threat actor Earth Lusca, linked to Chinese state-sponsored hacking groups, has been observed utilizing a new Linux backdoor dubbed SprySOCKS to target government organizations globally. 

    As initially reported in January 2022 by Trend Micro, Earth Lusca has been active since at least 2021 conducting cyber espionage campaigns against public and private sector targets in Asia, Australia, Europe, and North America. Their tactics include spear-phishing and watering hole attacks to gain initial access. Some of Earth Lusca's activities overlap with another Chinese threat cluster known as RedHotel.

    In new research, Trend Micro reveals Earth Lusca remains highly active, even expanding operations in the first half of 2023. Primary victims are government departments focused on foreign affairs, technology, and telecommunications. Attacks concentrate in Southeast Asia, Central Asia, and the Balkans regions. 

    After breaching internet-facing systems by exploiting flaws in Fortinet, GitLab, Microsoft Exchange, Telerik UI, and Zimbra software, Earth Lusca uses web shells and Cobalt Strike to move laterally. Their goal is exfiltrating documents and credentials, while also installing additional backdoors like ShadowPad and Winnti for long-term spying.

    The Command and Control server delivering Cobalt Strike was also found hosting SprySOCKS - an advanced backdoor not previously publicly reported. With roots in the Windows malware Trochilus, SprySOCKS contains reconnaissance, remote shell, proxy, and file operation capabilities. It communicates over TCP mimicking patterns used by a Windows trojan called RedLeaves, itself built on Trochilus.

    At least two SprySOCKS versions have been identified, indicating ongoing development. This novel Linux backdoor deployed by Earth Lusca highlights the increasing sophistication of Chinese state-sponsored threats. Robust patching, access controls, monitoring for unusual activities, and other proactive defenses remain essential to counter this advanced malware.

    The Trend Micro researchers emphasize that organizations must minimize attack surfaces, regularly update systems, and ensure robust security hygiene to interrupt the tactics, techniques, and procedures of relentless threat groups like Earth Lusca.
    Security


  • Linux Kernel Faces Reduction in Long-Term Support Due to Maintenance Challenges

    The Linux kernel is undergoing major changes that will shape its future development and adoption, according to Jonathan Corbet, Linux kernel developer and executive editor of Linux Weekly News. Speaking at the Open Source Summit Europe, Corbet provided an update on the latest Linux kernel developments and a glimpse of what's to come.

    A major change on the horizon is a reduction in long-term support (LTS) for kernel versions from six years to just two years. Corbet explained that maintaining old kernel branches indefinitely is unsustainable and most users have migrated to newer versions, so there's little point in continuing six years of support. While some may grumble about shortened support lifecycles, the reality is that constantly backporting fixes to ancient kernels strains maintainers.

    This maintainer burnout poses a serious threat, as Corbet highlighted. Maintaining Linux is largely a volunteer effort, with only about 200 of the 2,000+ developers paid for their contributions. The endless demands on maintainers' time from fuzz testing, fixing minor bugs, and reviewing contributions takes a toll. Prominent maintainers have warned they need help to avoid collapse. Companies relying on Linux must realize giving back financially is in their interest to sustain this vital ecosystem. 

    The Linux kernel is also wading into waters new with the introduction of Rust code. While Rust solves many problems, it also introduces new complexities around language integration, evolving standards, and maintainer expertise. Corbet believes Rust will pass the point of no return when core features depend on it, which may occur soon with additions like Apple M1 GPU drivers. Despite skepticism in some corners, Rust's benefits likely outweigh any transition costs.

    On the distro front, Red Hat's decision to restrict RHEL cloning sparked community backlash. While business considerations were at play, Corbet noted technical factors too. Using older kernels with backported fixes, as RHEL does, risks creating divergent, vendor-specific branches. The Android model of tracking mainline kernel dev more closely has shown security benefits. Ultimately, Linux works best when aligned with the broader community.

    In closing, Corbet recalled the saying "Linux is free like a puppy is free." Using open source seems easy at first, but sustaining it long-term requires significant care and feeding. As Linux is incorporated into more critical systems, that maintenance becomes ever more crucial. The kernel changes ahead are aimed at keeping Linux healthy and vibrant for the next generation of users, businesses, and developers.
    kernel


  • Linux Celebrates 32 Years with the Release of 6.6-rc2 Version

    Today marks the 32nd anniversary of Linus Torvalds introducing the inaugural Linux 0.01 kernel version, and celebrating this milestone, Torvalds has launched the Linux 6.6-rc2. Among the noteworthy updates are the inclusion of a feature catering to the ASUS ROG Flow X16 tablet's mode handling and the renaming of the new GenPD subsystem to pmdomain.

    The Linux 6.6 edition is progressing well, brimming with exciting new features that promise to enhance user experience. Early benchmarks are indicating promising results, especially on high-core-count servers, pointing to a potentially robust and efficient update in the Linux series.

    Here is what Linus Torvalds had to say in today's announcement:
    Another week, another -rc.I think the most notable thing about 6.6-rc2 is simply that it'sexactly 32 years to the day since the 0.01 release. And that's a roundnumber if you are a computer person.Because other than the random date, I don't see anything that reallystands out here. We've got random fixes all over, and none of it looksparticularly strange. The genpd -> pmdomain rename shows up in thediffstat, but there's no actual code changes involved (make sure touse "git diff -M" to see them as zero-line renames).And other than that, things look very normal. Sure, the architecturefixes happen to be mostly parisc this week, which isn't exactly theusual pattern, but it's also not exactly a huge amount of changes.Most of the (small) changes here are in drivers, with some tracingfixes and just random things. The shortlog below is short enough toscroll through and get a taste of what's been going on. Linus Torvalds


  • Introducing Bavarder: A User-Friendly Linux Desktop App for Quick ChatGPT Interaction

    Want to interact with ChatGPT from your Linux desktop without using a web browser?

    Bavarder, a new app, allows you to do just that.

    Developed with Python and GTK4/libadwaita, Bavarder offers a simple concept: pose a question to ChatGPT, receive a response, and promptly copy the answer (or your inquiry) to the clipboard for pasting elsewhere.

    With an incredibly user-friendly interface, you won't require AI expertise (or a novice blogger) to comprehend it. Type your question in the top box, click the blue send button, and wait for a generated response to appear at the bottom. You can edit or modify your message and repeat the process as needed.

    During our evaluation, Bavarder employed BAI Chat, a GPT-3.5/ChatGPT API-based chatbot that's free and doesn't require signups or API keys. Future app versions will incorporate support for alternative backends, such as ChatGPT 4 and Hugging Chat, and allow users to input an API key to utilize ChatGPT3.

    At present, there's no option to regenerate a response (though you can resend the same question for a potentially different answer). Due to the lack of a "conversation" view, tracking a dialogue or following up on answers can be challenging — but Bavarder excels for rapid-fire questions.

    As with any AI, standard disclaimers apply. Responses might seem plausible but could contain inaccurate or false information. Additionally, it's relatively easy to lead these models into irrational loops, like convincing them that 2 + 2 equals 106 — so stay alert!

    Overall, Bavarder is an attractive app with a well-defined purpose. If you enjoy ChatGPT and similar technologies, it's worth exploring.
    ChatGPT AI


  • LibreOffice 7.5.3 Released: Third Maintenance Update Brings 119 Bug Fixes to Popular Open-Source Office Suite

    Today, The Document Foundation unveiled the release and widespread availability of LibreOffice 7.5.3, which serves as the third maintenance update to the current LibreOffice 7.5 open-source and complimentary office suite series.

    Approximately five weeks after the launch of LibreOffice 7.5.2, LibreOffice 7.5.3 arrives with a new set of bug fixes for those who have successfully updated their GNU/Linux system to the LibreOffice 7.5 series.

    LibreOffice 7.5.3 addresses a total of 119 bugs identified by users or uncovered by LibreOffice developers. For a more comprehensive understanding of these bug fixes, consult the RC1 and RC2 changelogs.

    You can download LibreOffice 7.5.3 directly from the LibreOffice website or from SourceForge as binary installers for DEB or RPM-based GNU/Linux distributions. A source tarball is also accessible for individuals who prefer to compile the software from sources or for system integrators.

    All users operating the LibreOffice 7.5 office suite series should promptly update their installations to the new point release, which will soon appear in the stable software repositories of your GNU/Linux distributions.

    In early February 2023, LibreOffice 7.5 debuted as a substantial upgrade to the widely-used open-source office suite, introducing numerous features and improvements. These enhancements encompass major upgrades to dark mode support, new application and MIME-type icons, a refined Single Toolbar UI, enhanced PDF Export, and more.

    Seven maintenance updates will support LibreOffice 7.5 until November 30th, 2023. The next point release, LibreOffice 7.5.4, is scheduled for early June and will include additional bug fixes.

    The Document Foundation once again emphasizes that the LibreOffice office suite's "Community" edition is maintained by volunteers and members of the Open Source community. For enterprise implementations, they suggest using the LibreOffice Enterprise family of applications from ecosystem partners.
    LibreOffice


Linux Magazine News (path: lmi_news)










  • Is Linus Torvalds Vibe Coding?
    The creator of Linux has added AI into his process for Linux kernel development, and it's more than just for debugging.


Page last modified on November 17, 2022, at 06:39 PM