Recent Changes - Search:
NTLUG

Linux is free.
Life is good.

Linux Training
10am on Meeting Days!

1825 Monetary Lane Suite #104 Carrollton, TX

Do a presentation at NTLUG.

What is the Linux Installation Project?

Real companies using Linux!

Not just for business anymore.

Providing ready to run platforms on Linux

Show Descriptions... (Show All/All+Images) (Single Column)

LWN.net

  • Zellij 0.46 released
    Version0.46 of the Zellij terminal workspace hasbeen released.

    This release includes a major addition in Zellij: Zellij is now also adesktop terminal. To run it: zellij terminal. It works on linux, mac andwindows.

    Nothing changes for the normal multiplexer - Zellij can still run insideanother terminal. Both sessions are the same and can be shared.

    Additional features in this release include aGUI settings screen, session previews, and right-click menu. See this walkthroughfor more on the 0.46 release.



  • In Memoriam: Tim Peters 1952–2026
    Guido van Rossum conveysthe sad (and somewhat delayed) news of the passing of Tim Peters.
    It's hard to overestimate Tim's influence on Python. He's probably best known for writing the Zen of Python (PEP 20), but to me he was a mentor and language co-designer long before that.
    Tim found Python not long after its initial release. His first deed was to convince me that Python should support mixed arithmetic between int and float, because most users would expect them to work that way. And he never stopped contributing.



  • Security updates for Wednesday
    Security updates have been issued by AlmaLinux (edk2), Debian (openexr, rsyslog, and srt), Fedora (alertmanager, dotnet11.0, gdal, mstflint, nextcloud, python-crate-ingredients, rust-ingredients, rust-pore, rust-pulldown-cmark, rust-rbw, rust-sequoia-sq, rust-siguldry-fedora-autopen, tigervnc, unbound, and zchunk), Gentoo (Brotli, git, and libde265), Mageia (mopidy, python-dulwich, rust-similar3, rclone, and sofia-sip), Oracle (dpdk, edk2, firefox, glibc, kernel, kernel-uek, nodejs-nodemon, nodejs22, nodejs:24, patch, ruby, ruby4.0, squid:4, and thunderbird), Red Hat (.NET 10.0, .NET 11.0, .NET 8.0, .NET 9.0, bind, bind9.16, bind9.18, buildah, c-ares, containernetworking-plugins, delve, flatpak-builder, gcc, gcc-toolset-15-gcc, gcc-toolset-16-gcc, go-fdo-client, go-fdo-server, golang-github-openprinting-ipp-usb, grafana, grafana-pcp, gstreamer1-plugins-bad-free, gstreamer1-plugins-good, gvfs, gvisor-tap-vsock, nginx, nginx:1.24, nginx:1.26, oci-delta, podman, python-oauthlib, python3, python3.12, python3.9, qt5-qtbase, qt6-qtbase, rhc, runc, skopeo, squid, squid:4, tesseract, util-linux, xdg-dbus-proxy, and yggdrasil), Slackware (xorg-server), SUSE (aliyun-cli, amazon-cloudwatch-agent, ansible-core, aspell, azure-storage-azcopy, bind, cups, dlib-devel, docker, dolphin, dpdk, evolution, firefox, flannel, fuse-overlayfs, gnome-podcasts, google-cloud-sap-agent, GraphicsMagick, graphicsmagick, haproxy, istioctl, kernel, kubevirt, kured, libvips-devel, libXi, mozilla-nss, nvidia-open-driver-G06-signed-check, okteto, openssl-1_1, pcre2, poppler, poppler-qt, poppler-qt5, poppler, poppler-qt5, proftpd, psqlodbc, python-graphql-core, python-M2Crypto, python-pillow, python-soupsieve, python-urllib3_1, python313-wyoming, qt6-coap, rust-keylime, sbc, scribus, SDL2_image, tar, terraform-provider-susepubliccloud, the linux kernel (live patch 18 for suse linux, vsftpd, xen, xorg-x11-server, and zchunk), and Ubuntu (ca-certificates-java, gst-plugins-good1.0, gst-plugins-base1.0, hplip, linux-azure-fde, linux-nvidia, linux-nvidia-7.0, linux-nvidia-bos, linux-nvidia-lowlatency, python-tornado, rust-coreutils, and unbound).


  • Three new stable kernels for Tuesday
    Greg Kroah-Hartman has released the 7.3.4,6.18.63, and 6.12.117 stable kernels. The 7.3.4 kernel has morethan 1,250 patches, 6.18.63 contains more than 860, and 6.12.117 includes morethan 1,530 patches. Users of these kernels are, of course, encouraged to upgrade.



  • [$] Synaptics patent claims stop work on DisplayLink drivers
    Mike Lothian owns a docking station (or dock) that uses a DisplayLink chipsetthat had, at least in his opinion, subpar performance on Linux. Hedecided to try improving the Linux driver, with LLM assistance, but ran into oneproblem that he could not solve—so he asked for help, hoping thatSynaptics's developers would lend a hand. (DisplayLink was acquired bySynaptics in 2022.) Rather than help him in improving thedriver, however, the Synaptics legal team responded with patent infringementclaims, a demandthat he cease unauthorized implementation of DisplayLink technology, and threatsof expensive legal penalties. For now, it appears that Linux users of thecompany's docks will have to continue to live without feature parity with otherplatforms.


  • Firefox 160 released
    Version160 of the Firefox web browser has been released. Notable features in thisrelease include the ability to block sites from asking to handle"mailto:" links, ability to play Matroska files with FLAC, MP3, or PCMaudio, playback speed controls in the picture-in-picturevideo player, and a new MiniWindow feature that is in early development.



  • Security updates for Tuesday
    Security updates have been issued by AlmaLinux (curl, dpdk, glibc, kernel, nodejs-nodemon, nodejs22, nodejs24, nodejs:18, nodejs:22, patch, qt5, qt5-qtdeclarative, ruby, ruby4.0, ruby:3.3, ruby:4.0, squid:4, tomcat, util-linux, and webkit2gtk3), Debian (symfony and tomcat10), Fedora (bind, dnf5, kernel, kernel-headers, libmodulemd, maturin, perl-CGI, perl-Net-IDN-Encode, perl-Starlet, python-jiter, python-pydantic-core, python-pysequoia, python3-docs, python3.14, python3.15, ruff, rust-afterburn, rust-astral_async_zip, rust-clearscreen, rust-jiter, rust-lzma-rust2, rust-mailparse, rust-pyo3-introspection, rust-python-pkginfo, rust-serde_json, rust-testresult, rust-zip, selenium-manager, ty, and uutils-coreutils), Mageia (glibc, packages, php-smarty, python-aiohttp, and thunderbird), Oracle (curl, firefox, gdb, glibc, kernel, oVirt 4.5 ovirt-engine-wildfly, perl-YAML:1.24, and tesseract), Slackware (krb5), SUSE (ansible-core, apr-util, aspell, buildpacks-cli, dpdk22, firefox, git-bug, glib2, google-cloud-sap-agent, haproxy, jsoup, kernel, krb5, libjxl, librsvg, libruby4_0-4_0, libunbound8, libXtst, nodejs24, nvidia-open-driver-G07-signed, PackageKit, perl-XS-Parse-Keyword, poppler, python, python-Brotli, rsyslog, tekton-cli, tomcat, tomcat10, tomcat11, trivy, udisks2, xen, zchunk, and zk), and Ubuntu (apache2, ca-certificates, fetchmail, freerdp3, kernel, libgphoto2, libheif, libnfs, libsoup3, linux, linux-aws, linux-aws-5.15, linux-aws-fips, linux-azure, linux-azure-5.15, linux-azure-fde-5.15, linux-azure-fips, linux-gcp, linux-gcp-5.15, linux-gcp-fips, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iot-realtime, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-oracle, linux-oracle-5.15, linux-realtime, linux, linux-aws, linux-aws-fips, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-azure-fips, linux-fips, linux-gcp, linux-gcp-4.15, linux-gcp-fips, linux-hwe, linux-kvm, linux-oracle, linux, linux-aws, linux-aws-fips, linux-azure, linux-azure-5.4, linux-azure-fips, linux-bluefield, linux-fips, linux-gcp, linux-gcp-5.4, linux-gcp-fips, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-iot, linux-kvm, linux-oracle, linux-oracle-5.4, linux-xilinx-zynqmp, linux, linux-aws, linux-azure, linux-azure-fips, linux-gcp, linux-gke, linux-ibm, linux-lowlatency, linux-oracle, linux-vmware, linux, linux-aws, linux-gcp, linux-ibm, linux-oem-7.0, linux-oracle, linux, linux-aws, linux-kvm, linux-lts-xenial, linux-aws, linux-aws-5.4, linux-raspi, linux-raspi-5.4, linux-aws-6.8, linux-gcp-6.8, linux-ibm-6.8, linux-lowlatency-hwe-6.8, linux-nvidia, linux-realtime-6.8, linux-aws-7.0, linux-azure-fde, linux-azure-fde-7.0, linux-gcp-7.0, linux-gke, linux-oracle-7.0, linux-realtime, linux-aws-fips, linux-gcp-fips, linux-gkeop, linux-realtime, linux-azure, linux-azure-6.8, linux-azure-fde-6.8, linux-azure-fde, linux-oracle-6.8, linux-raspi, linux-raspi-realtime, linux-raspi, openjdk-17, openjdk-21, openjdk-25, openjdk-27, openjdk-8, openjdk-lts, perl, and pyasn1).


  • [$] Git considers voting to determine its LLM policy
    One of the dominant themes of 2026 has been the debate within developmentprojects about the terms under which LLM-written contributions should beaccepted — if, indeed, they should be accepted at all. The Git project has not been immune to thistrend; the topic was discussedat the recent Git Contributor's Summit. In this case, the path to aresolution may be somewhat circuitous; the project, which has never beengoverned as a democracy, is considering adopting a voting process as a wayof bringing the discussion to an acceptable conclusion.


  • Kernel prepatch 7.4-rc2
    Linus Torvalds has released the 7.4-rc2prepatch and it will come as no surprise that it is a large one ("abig -rc2 to go with the largest ever -rc1"). Much of the size was madeup of some automated Coccinelle updates that were spread out all over thetree; once those are factored out, the rest looks fairly normal:When masking that noise out from the diffstat, the shape of it changes- not spread out over thousands of files any more. But it does notlook unusual: a third is drivers (gpu, networking and sound accountfor most of it, but there's a bit of everything), another third isnetworking and bpf, and the final third is "the rest" (mostlyfilesystems, mm, arch updates).
    And yes, much of this was driven by various AI fixes. I think I'llstop repeating that, and we can just take it for granted. But thistime around Alexei [Starovoitov] claims that on the bpf side at least the fixes arenow coming in faster than the new reports, and that sounds lovely iftrue.



LXer Linux News


  • Intel Releases New CPU Microcode To Fix A Variety Of Functional Issues
    Intel on Tuesday released the microcode-20261110 package that ships updated CPU microcode binaries for recent Intel Core (Ultra) and Xeon processors. The updated CPU microcode is for Core Gen 13 "Raptor Lake" and newer while on the Xeon server side is for Sapphire Rapids and newer. This is also the first time Clearwater Forest has seen microcode updates0




  • AMD EPYC 9006 Venice vs. NVIDIA Vera Benchmarks For HPC Performance
    Yesterday in the AMD EPYC 9006 "Venice" SP7 launch testing were reviews of the AMD EPYC 9996 256-core processor as well as the EPYC 9686F 96-core high frequency part. There were hundreds of benchmarks looking at the gen-on-gen performance from EPYC Turin to EPYC Venice as well as against the Intel Xeon 6 Granite Rapids competition. For those wondering about how AMD EPYC Venice is competing with0


  • OSM dev board supports NXP i.MX and Qualcomm IQ615 SoCs
    Tria Technologies has unveiled its OSM-SB-EP5, a 146  102mm development platform supporting Open Standard Module (OSM) Size-S, Size-M, and Size-L modules. The carrier board combines dual Gigabit Ethernet, USB 3.0, MIPI camera and display interfaces ti intended for industrial IoT, edge AI, robotics, and embedded vision development. Introduced at electronica 2026, the OSM-SB-EP5 follows0




  • Flipper One Linux handheld rocks RK3576 with SDR and cellular options via M.2
    Flipper Devices is preparing a Kickstarter campaign for its Flipper One,! a portable Linux computer powered by an octa-core Rockchip RK3576 processor and a Raspberry Pi RP2350 microcontroller. The handheld combines 8GB LPDDR5, Wi-Fi 6E, dual Gigabit Ethernet, and M.2 expansion for cellular modems, SDR modules, and other peripherals. The Rockchip RK3576 combines four Arm0


  • Distro of the Week: Fedora 45 Workstation/KDE Plasma
    Like clockwork, the semi-annual Fedora Project release - this one Fedora 45 - pops up on our radar.This week you get a two-fer, in the form of road-testing both Workstation (a.k.a. Gnome 51) and the KDE Plasma version. As you might expect, both excelled but we picked one over the other..


Linux Insider"LinuxInsider"












Slashdot

  • Jensen Huang Said to Have Had Relationship With Nvidia Executive Who Reports to Him
    Nvidia CEO Jensen Huang is facing scrutiny over an affair with an alleged Chinese spy. Now, The New York Times reports that Mr. Huang also had an extramarital relationship with Kimberly Powell, the company's vice president of health care and a direct report, raising questions about conflicts of interest and compliance with the company's policies governing personal relationships. From the report: The relationship, which has not been previously reported, was with Kimberly Powell, Nvidia's vice president of health care, said the people, who spoke under the condition of anonymity to describe sensitive information. Under Nvidia's code of conduct, employees are told to "avoid situations where our actions create conflict" including "personal relationships," and the company states that it "promptly investigates reports of misconduct." Many corporations have policies against managers having relationships with subordinates. Mr. Huang, 63, and Ms. Powell, 48, were captured on video being affectionate at a San Jose, Calif., hotel during a Nvidia conference in March, according to two of the people who worked at the company. The New York Times has not seen the video. Both Mr. Huang and Ms. Powell are married to other people. [...] One bystander captured the interaction on their phone, three people briefed on the incident said. Mr. Huang's security witnessed the bystander with their phone and sequestered them, the people said. They made the person an offer to sign a nondisclosure agreement. Further reading: Nvidia and Jensen Huang Face Shareholder Lawsuit Alleging Investors Were Misled About Spy Affair


    Read more of this story at Slashdot.


  • Nvidia and Jensen Huang Face Shareholder Lawsuit Alleging Investors Were Misled About Spy Affair
    Charlotte Web shares a report from the Associated Press: A shareholder has sued Nvidia and its CEO, Jensen Huang, accusing them of deceiving investors in their responses to media reports about Huang's affair with a purported Chinese spy that threatens national security. [...] The news reports said that the Commerce Department was investigating Alice Huang's company, Singapore-based Megaspeed, on suspicions that it was helping to sidestep U.S. export restrictions blocking Nvidia chips from being sold to China. But Nvidia said then that its compliance team checked and determined that Megaspeed wasn't doing anything illegal. But, according to the complaint, the statements were misleading because they were made when Jensen Huang was having an affair with Alice Huang, who is "suspected of seeking to help smuggle Nvidia products into China." It accuses Nvidia and Huang of failing to disclose the affair and issuing false statements about Nvidia's relationship with Megaspeed, which posed a "material risk" to Nvidia's reputation and business prospects. [...] "As a result of Defendants' wrongful acts and omissions, and the precipitous decline in the market value of the Company's securities, Plaintiff and other Class members have suffered significant losses and damages," the complaint said. Had investors known the truth, they wouldn't have purchased Nvidia's shares "at the artificially inflated prices that they did, or at all," the complaint said. "Fun fact: Nvidia donated $25 million to Trump's White House ballroom fund," notes Slashdot reader Charlotte Web. UPDATE: The New York Times reports that Huang also also had an extramarital relationship with Kimberly Powell, the company's vice president of health care and a direct report.


    Read more of this story at Slashdot.


  • New York Forces T-Mobile to End Data Caps On Low-Income Plans
    New York has forced T-Mobile to remove a 50GB monthly data cap from its $15 low-income broadband plan after regulators found customers who exceeded the limit had their speeds cut by more than 97%, to just 650 Kbps. "Additionally, the [Office of the Attorney General (OAG)] found T-Mobile restricted [New York's Affordable Broadband Act (ABA)] plans to areas with 5G coverage, despite offering standard-rate 25 Mbps plans in 4G areas, and intentionally coded its website to hide affordable plans from search engines," reports RochestFirst. From the report: Under the terms of the settlement, T-Mobile must: - Eliminate data caps on its ABA plans and deliver guaranteed 25 Mbps download speeds.- Expand ABA plan availability to all geographic areas where it offers fixed-wireless home internet service.- Make its ABA webpage indexed and easily discoverable via standard web searches.


    Read more of this story at Slashdot.


  • Ukraine Strikes Cause Permanent Data Loss at Russia's Yandex Cloud
    Russia's Yandex says 2.84% of customer data has been permanently lost following Ukrainian strikes on data centers in the country. "According to the company, recovery is impossible because of critical damage to equipment and the lack of backup copies on the platform," reports UNITED24 Media. From the report: Yandex clarified that customers who had previously enabled the platform's backup tools did not experience any data loss, as their information remained fully preserved. The incident has prompted the company to revise its approach to data protection and disaster recovery, particularly the default settings for cloud infrastructure. Under the updated policy, automatic backups will be enabled by default whenever customers create new virtual machines on Yandex Cloud. Users will retain the option to disable the feature manually through the management console. In addition to changing its backup policy, Yandex Cloud announced the launch of a new availability zone, designated ru-central1-f. The new availability zone operates from a separate location, improving the resilience and reliability of the services. The report says Ukrainian drones targeted three Yandex data centers in Russia over four days, beginning October 8 with a strike on a facility in the Ryazan region that houses two of the company's three supercomputers. A second attack hit Yandex's largest data center in the Kaluga region on October 9, followed by a third strike on October 11 targeting a facility in the Vladimir region that houses the company's remaining supercomputer.


    Read more of this story at Slashdot.


  • Court Says Trump Can't Use Leaks To Justify Spying On Journalists' LinkedIn DMs
    An anonymous reader quotes a report from Ars Technica: The Trump administration's fight to stop suspected leaks of top-secret military information on LinkedIn can't sweep in "a vast number of confidential sources" of random journalists "who have no conceivable relationship" to the Department of Justice's investigation, an appeals court ruled (PDF) Tuesday. The order came after the DOJ asked LinkedIn to turn over 18 months of communications from targeted journalists who collectively published more than 1,000 articles on many different topics over that time period. The request was not limited to journalists involved in a controversial report from a news outlet that Trump said exposed confidential military information in a foreign country. (The outlet is not being named to protect national security secrets.) Instead, the DOJ cast a wide net, requesting extensive LinkedIn data on journalists who had any possible link to the journalists around the time the report was drafted. The majority of journalists have LinkedIn accounts and publish their contact information to encourage sources to connect on the platform, LinkedIn argued. So allowing that government overreach went beyond harming targeted journalists and threatened to undermine a critical platform where journalists frequently connect with confidential sources, judges ruled. Even more concerning, the Trump administration secured a secrecy order barring LinkedIn from telling anyone about the sweeping request for a year. That left journalists unaware for far too long that their First Amendment rights had been compromised, judges ruled. "A request by the government to scoop up reporters' records wholesale and ascertain the identity of their sources would tip the balance against informed discourse in a manner inimical to democratic health," Wilkinson wrote. He criticized the lower court for approving the request simply because the records were technically feasible to collect, emphasizing that "serious security and speech claims are in tension in this case. There is space under law for both." While declining to quash the order entirely, Wilkinson also directed the lower court to reconsider a limited exception to the government's secrecy order that would allow LinkedIn to notify an attorney representing the news outlet under investigation. Bruce D. Brown, President of The Reporters Committee for Freedom of the Press (RCFP), celebrated the ruling, saying: "This ruling is a big deal and will quickly become one of the leading opinions in the area -- one we will be quoting from it for a long time. The court recognized that confidential sources are the 'lifeblood' of investigative reporting and that dragnet demands from technology companies to reveal those sources violate the law."


    Read more of this story at Slashdot.


  • Logitech Giving All 7,000 Employees the Day Off to Play GTA 6
    Under a new "Logi Game Day" initiative, Logitech is giving all 7,000 of its employees an extra paid day off to play GTA 6 when it launches on November 19. Employees and interns can use the day off anytime over the next year. Tom's Hardware reports: As for Logitech, the company believes that it's time for people to move away from the belief that playing games is a waste of time, hence its new initiative. It makes sense for a company that makes gaming accessories to say that, of course, but CEO Hanneke Faber argues that the company sees "how engagement in one sphere supports performance in the other." The hope will be that, by allowing employees to play games, a productivity boost will follow.


    Read more of this story at Slashdot.


  • Apple Is Killing Its Support Community Forum Next Week
    Apple is shutting down its Apple Support Community forum on November 20, ending a user-to-user support platform whose history stretches back to the 1998 launch as the Apple Tech Exchange. The forum is already read-only, and Apple has not said whether the nearly three decades of community posts will be preserved or disappear when the site closes. Here's the full banner notice that's currently displayed on the website: "The Apple Support Community will permanently close on November 20, 2026. Starting today, the site will no longer accept new posts and is available in a read-only state. You can continue to find trusted guidance and support on the official Apple Support site. We want to thank the community members who have contributed their time and expertise to help others with their Apple products." Apple told MacRumors that it decided to sunset the forum after a careful evaluation of strategy and customer needs.


    Read more of this story at Slashdot.


  • Amazon's Ring Unveils Flying Drone and Robot To Patrol Homes and Businesses
    An anonymous reader quotes a report from CNBC: Amazon's Ring is going deeper into surveillance with an indoor drone for home monitoring and an autonomous robot designed to patrol businesses. The company on Tuesday unveiled the $250 Ring Drone Cam, a security camera that can fly from room to room, including upstairs, as well as capture footage during the day or at night. When an alarm or sensor on windows, doors and home security devices is triggered, the textbook-sized drone travels a preset path to investigate suspicious activity. Users can also deploy the drone at any time, the company said. [...] The company on Tuesday also debuted the $1,000 Ring Rover Cam. The device repurposes Amazon's Astro home robot, which had a short life as a business device and has seen few upgrades since its 2021 debut, for companies to use to patrol offices, warehouses and other workspaces. Ring said it "leveraged the best of Astro" to build the Ring Rover Cam, which it describes as a "purpose-built security robot." Similar to the Astro, the device is a display mounted on a two-wheeled base with an extendable periscope camera. It also features a "built-in siren," two-way audio and a "light tower" that shines onto the ceiling to help users keep track of its whereabouts. The Ring Drone Cam ships in the U.S. on Jan. 27, while the Ring Rover Cam will begin shipping to users on Dec. 16.


    Read more of this story at Slashdot.


  • GTA VI Is Now Available For Preloading
    Ancient Slashdot reader Lank writes: GTA VI is now available for preloading. The download weighs in at a whopping 210+ gigabytes on the PS5! Start downloading now and remember to take Nov. 19th off from work. "On Xbox, preloads for digital versions went live at 12 a.m. GMT on November 10 for Series X and Series S, which translates to 7 p.m. EST / 6 p.m. CST / 5 p.m. MST / 4 p.m. PT on Monday, November 9," notes PCMag. "For PlayStation 5 and PS5 Pro owners, preloading started on Tuesday, November 10 at midnight local time." "If you ordered a physical copy of GTA 6, games will begin arriving at retailers and shipping to buyers on November 12. You can use the code in your box to preload your copy of the game."


    Read more of this story at Slashdot.


  • US and Rest of World Must Follow China's Lead On Green Energy, Says John Kerry
    Longtime Slashdot reader AmiMoJo shares a report from The Guardian: China is leading the world in moving away from fossil fuels, and the rest of the globe -- including the US -- must now follow, the former US secretary of state John Kerry has told the Guardian, as Cop watchers wonder exactly how China is going to approach this year's climate summit. As Cop31 opens -- this year the climate conference is in Turkey -- there is plenty of speculation about whether China will finally step into the leadership role that it has long avoided. In its latest "five-year plan" adopted in March 2026, China for the first time pledged to "actively participate in and lead global climate governance". Cop31 could provide the first indications Beijing is ready to put that rhetoric into action, something it has historically been reluctant to do. In 2025, clean-tech exports surpassed $220 billion, and they should grow again this year; the world's largest emitter is now the world's leading supplier of clean energy technology. China accounts for about 85% of solar and 80% of lithium-ion battery supply chain production capacity, and in 2025, nearly 75% of electric cars were manufactured there. Smart moves now by China would position it as a linchpin in a future electrostate world order, persuade rivals to cooperate, and solidify its influence in the global south. "The only country that has hugely accelerated is China," said Kerry. "The rest of the world is stumbling along while Mother Nature is sending us more powerful signals every week, every day." "[China] realized suddenly they had way too much dependency on oil and gas from other places, and they decided they needed to be independent. Other countries, since the war in Iran, and since the strait of Hormuz has been interrupted, have made a similar decision, and they're moving independently. There's been a massive uptick in deployment of renewables. Thank you, Donald Trump." For autocratic states without free and fair elections, seeing the economic benefits reaped by China would be the spur to adopt low-carbon growth, he added. "They'll see where the market is going, and they will recognize where the cheaper alternatives are. Even they can read a spreadsheet, and understand where costs are exorbitant [in fossil fuels], and where you have a better deal," Kerry said. "Right now, renewables together with storage, together with some transitional gas, is cheaper and more effective, than just going with fossil fuels." He added: "The marketplace has made its decision and globally is moving to electrons, and electrostate status. People are going to electricity and they're going to try to do that as clean as humanly possible. That's the choice that I see being implemented in many different places. It is unstoppable."


    Read more of this story at Slashdot.



Linux.com






  • From DHCP to SZTP – The Trust Revolution
    By Juha Holkkola, FusionLayer Group The Dawn of Effortless Connectivity In the transformative years of the late 1990s, a quiet revolution took place, fundamentally altering how we connect to networks. The introduction of DHCP answered a crucial question, Where are you on the network?!, by automating IP address assignment. This innovation eradicated the manual configuration [0]

    The post From DHCP to SZTP – The Trust Revolution appeared first on Linux.com.






Phoronix


  • AMD EPYC 9006 Venice vs. NVIDIA Vera Benchmarks For HPC Performance
    Yesterday in the AMD EPYC 9006 "Venice" SP7 launch testing were reviews of the AMD EPYC 9996 256-core processor as well as the EPYC 9686F 96-core high frequency part. There were hundreds of benchmarks looking at the gen-on-gen performance from EPYC Turin to EPYC Venice as well as against the Intel Xeon 6 Granite Rapids competition. For those wondering about how AMD EPYC Venice is competing with NVIDIA9s Vera CPU, this article provides a look at those results for a range of HPC workloads.




  • ATI/AMD R300 To R500 GPUs See New 2026 OpenGL Linux Driver Optimizations
    Over 24 years old, the ATI (AMD) Radeon R300 graphics processors are still seeing improvements in the open-source Linux driver space. Merged to Mesa 27.0-devel this week were a number of shader compiler optimizations for the R300g driver that benefits not only the original R300 series graphics cards but also the R400 and R500 (Radeon X1000 series) too...



  • Intel Releases New CPU Microcode To Fix A Variety Of Functional Issues
    Intel on Tuesday released the microcode-20261110 package that ships updated CPU microcode binaries for recent Intel Core (Ultra) and Xeon processors. The updated CPU microcode is for Core Gen 13 "Raptor Lake" and newer while on the Xeon server side is for Sapphire Rapids and newer. This is also the first time Clearwater Forest has seen microcode updates...




  • AMD EPYC 9996 Benchmarks Show Unparalleled Performance With 256 Zen 6C Cores
    Back in July AMD announced the EPYC 9006 "Venice" series at their Advancing AI event. Today they are announcing EPYC 9006 series Socket SP7 processor availability and with systems beginning to ship today from their OEM/ODM partners. With that we are also now allowed to begin sharing AMD EPYC 9006 performance benchmark figures. Back in July I expected EPYC 9006 to be a "grand slam" for performance... After hands-on with the 6th Gen EPYC processors, it9s a grand slam alright -- out of this world.



Engadget"Engadget - Technology News & Expert Reviews"











OSnews

  • Haiku gets multifinger touchpad taps
    Were almost halfway through November, but we hadnt seen Haikus monthly activity report for October yet. Its here now, and theres quite a few good things in here, like support for two and three-finger tap gestures on touchpads for right and middle-click, a new driver that adds Universal Flash Storage support, and even some build fixes for Haikus SPARC port as well as some fixes on the RISC-V side. Of course, thats just a selection, as theres the usual long list of smaller changes, bugfixes, and improvements as well.


  • Microsoft releases .NET 11
    Today, we’re excited to announce the release of .NET 11! This year’s release makes building modern applications faster, more productive, and has improvements across C# 15, ASP.NET Core, .NET MAUI, and Windows development. With hundreds of runtime optimizations, more responsive SDK tooling, and less overhead in everyday commands, you can spend less time waiting and more time creating. Build richer web and cross-platform applications, take advantage of new C# language features, and explore AI-powered development with improved tools and agentic capabilities. ↫ .NET Team Im not going to pretend to care about .NET, but I know many of you have to care on a professional level, because .NET is remarkably popular in places where the spotlights dont often shine.


  • What if any process could handle SIGKILL?
    An interesting question, and a detailed technical rundown of how to make this happen, which involved building a custom Linux kernel, of course. I really, really enjoy the conclusion. And you know? It turned out fine. Nothing exploded on my system. As I could predict, because this was otherwise impossible, nobody did it. The signal system was setup in such a way that you would most likely realize something you were doing was wrong, and not try it. To pull back further, it is interesting to notice how the rules we all take for granted are just set somewhere in code. They were written by someone, at some point. If there is code restricting you from doing something, someone wrote it. Either they did not think anyone would want to do that thing, or they specifically prevented you from doing it. Those rules are written somewhere, and you can take it in your paws to go sniff around the code, pull out the relevant parts, and hack around the things that bother you. For fun, learning, or convenience. Snoop around. Sniff code. Put your paws in it. Hack shit. ↫ lux at VulpineCitrus Even if theres no real reason to do, even if its just to satiate an odd and possibly slightly morbid sense of curiosity, fuck with code.


  • OpenIndiana Hipster 2026.10 released
    OpenIndiana is a rolling-release illumos distribution, but they do release snapshots twice a year to serve as a base for installations, which they call Hipster. The projects just released OpenIndiana Hipster 2026.10, and it brings a number of welcome changes. First, theres UEFI framebuffer support on the live image, which is automatically configured when loading up the image. Second, Firefox and Thunderbird versions have been bumped to 159.0, and a whole slew of development tools have been updated to newer versions as well. This snapshot also brings QEMU 11.1.2 and VirtualBox 7.2.22, and a number of new applications have been added as well. In addition, SPARC build support has been improved to enable new and updated packages for Suns dead ISA as well. You can download a fresh image, or update an existing installation through IPS.


  • Making musl and proprietary NVIDIA drivers work together
    Creator and lead developer of Chimera Linux, Nina q66!, write about their efforts to get NVIDIA drivers to work properly on musl-based distributions. As you may be aware, one of the limitations of musl-based distributions is that they will not function to their proper extent when used in computers with various NVIDIA graphics cards. This is due to the proprietary nature of the driver, being built for glibc. I have been experimenting with trying to make this work, and this post is the summary of that effort. ↫ Nina q66! on the Chimera blog What follows is a deeply technical exploration of the problem, and the steps Nina q66 and the Chimera team are taking to try and fix it. With how popular and widespread NVIDIA hardware still is, this is a hugely important issue to try and address, and Im grateful theyre trying to address it.


  • MorphOS 3.21 released with new office suite
    About five months after the previous release, the MorphOS team has released MorphOS 3.21. It brings the usual list of big fixes and smaller improvements, but theres a few big ticket items in here as well. MorphOS 3.21 introduces BasicWorks, an office suite made up of CellBasics and PageBasics. It offers document and spreadsheet authoring and loads and saves Microsoft Office and OpenOffice documents. Also new are NVMEMount, an auto-mounter for booting from and mounting NVMe partitions, and the Marbles and Cyber 3D blankers. Graphics performance has been improved, with a faster Radeon driver on cards with little video memory thanks to GART backed bitmap transfers, quicker TinyGL texture copies, hardware accelerated antialiased text in TTEngine and much faster color SVG glyph rendering in Cairo. The Bcm43xx wireless driver has been substantially reworked, with automatic transmit rate selection, updated firmware and numerous connection fixes. PowerBook and iMac hotkeys are now fully configurable. ↫ MorphOS 3.21 release announcement The BasicWorks office suite has been in the works for a while now, and more information on it can be found in a thread on the MorphZone forums and on the website for the spreadsheet component of the suite, CellBasics. The formula loaders and xlsx loaders are ports of open source projects, but the rest of the application is new code based on ObjectiveC++ and Cairo/Harfbuzz. It uses its own file format, but can import csv and xslsx files, so Im assuming the same more or else applies to the word processor (but with docx, of course). Alongside MorphOS 3.21 also comes a new release for Wayfarer, the web browser the Amiga-inspired operating system uses. Wayfarer 12.0 moves to WebKitGTK 2.52.5 (which was released in July of 2026, so its quite up to date), and now uses the Skia graphics library. R300-R500 Radeons will render websites with Skia-GL for some massive performance improvements, helped further along by a slew of additional performance optimisations. Adblocking has been improved as well, YouTube should work a lot better now, and much more. The full release notes for MorphOS 3.21 give you all the details.


  • The port that does not exist
    Ask any program to listen on port 0 and it will hand you a socket on port 471930or 580370or whatever the kernel felt like that day. Port 0 is not a port you can have. It is the number you pass when you want the operating system to pick one for you. But a TCP header is just bytes. The destination port field is 16 bits wide, and 0x0000 fits in 16 bits as well as anything else does. Nothing on the wire stops a packet from being addressed to port 0. Your tools will refuse it, your browser will block it, and your scanners default port list skips it, because everyone agrees it isnt a real port. Which makes it a pretty good place to hide things, whether anyone meant to or not. So we did some TCP cowboy shit 8 port scanned the entire fucking internet for open ports on port 0, which uncovered some interesting unexpected findings. ↫ acidvegas An awesome and entertaining read. Dont skip this one.


  • Windows 11 27H2 might be a more substantial upgrade
    A little tidbit of news regarding the nest major update to Windows, known as Windows 11 27H2. Apparently, its going to come with some more serious changes to the codebase, therefore necessitating a full operating system swap instead of a mere enablement package, much like Windows 11 24H2 was. For those who need a refresher, Microsoft has long been rumored to be running on a three-year release cadence and for a while, it was even thought that the company would launch Windows 12 in 2H 2024. That evidently didnt happen, as instead we got Windows 11 24H2, but it was a major upgrade, a full OS swap compared to Windows 11 23H2 and 22H2. Essentially, it looks like every three releases, Microsoft is performing a full swap with major changes in the underlying codebase, and it seems to line up with Windows 11 27H2 as well. At the moment its not known if system requirements will change or not. ↫ Sayan Sen at Neowin.net Microsoft is currently testing adding support for Intels Advanced Performance Extensions, which should yield improved 64bit performance and reduced power consumption. It makes sense to assume this support will be coming with Windows 11 27H2, which should hopefully lead to tangible performance improvements across the board. Also, theres going to be a new default wallpaper. Be still my beating heart.


  • The Ubuntu 26.04 Rust sudo is not compatible with standard sudo
    Ubuntu has been at the forefront of replacing the traditional versions of basic tools like sudo with replacements written in Rust, but aside from worries about replacing battle-tested code with brand new, relatively untested code, theres new things to worry about it. As it turns out, sudo-rs, the Rust replacement for sudo, is intentionally incompatible with the classic version in dangerous ways, as Chris Siebenmann discovered to his dismay. Basically, the classic sudo supports the use of wildcards defined using square brackets, so that if you allow a user to run, say, /usr/sbin/exim -bp, without a password, they can run exim -bpa, exim -bpc, exim -bpr, or exim -bpu without having to supply a password. This allows for very specific, fine-grained access control, which is quite a nice capability to have if youre managing many systems and users. Sadly, sudo-rs intentionally does not support this, opting to only allow you to use the generic * wildcard. Worse yet, it doesnt really make this clear, either. ↫ Chris Siebenmann I do not really have words for this. The Rust sudo has apparently opted to keep the single most dangerous wildcard while disallowing all of the wildcards that allow one to be narrow and specific about what youre allowing, and it buries this at the end of a section that devotes a bunch of words to describing functionality it doesnt have and doesnt support, with absolutely nothing else in that section to say this (either up front or in the descriptions of how all the wildcards would work if sudo-rs supported them, which it doesnt). If youre going to replace such vital, core tools like sudo that god knows how many people rely on every single day, you better be damn sure youre feature-complete and can act as a drop-in replacement. If someone switches from sudo to doas, nobody expects the experience to be identical. However, if youre consistently being told that sudo-rs is a drop-in replacement and you shouldnt expect any disruptions, you better be able to make true on that promise. Ubuntu isnt some also-ran small hobby distribution, and its developers should act like it. What a clown show.


  • LXQt 2.5.0 released
    The second desktop environment release Ive got for you today is LXQt 2.5.0. This new version excises its last LXDE dependency, and QTerminal and QTermWidget received considerable improvements, like new background image modes, a visual bell, support for OSC-8 hyperlinks, and more. Theres a ton of smaller changes and improvements as well, but do note that due to a bug, 2.5.0 broke LXQts Monitor Settings on X11. The project intends to fix this as quickly as possible and push a point release to address this issue.



Linux Journal News

  • EU OS: A Bold Step Toward Digital Sovereignty for Europe
    Image
    A new initiative, called "EU OS," has been launched to develop a Linux-based operating system tailored specifically for the public sector organizations of the European Union (EU). This community-driven project aims to address the EU's unique needs and challenges, focusing on fostering digital sovereignty, reducing dependency on external vendors, and building a secure, self-sufficient digital ecosystem.
    What Is EU OS?
    EU OS is not an entirely novel operating system. Instead, it builds upon a Linux foundation derived from Fedora, with the KDE Plasma desktop environment. It draws inspiration from previous efforts such as France's GendBuntu and Munich's LiMux, which aimed to provide Linux-based systems for public sector use. The goal remains the same: to create a standardized Linux distribution that can be adapted to different regional, national, and sector-specific needs within the EU.

    Rather than reinventing the wheel, EU OS focuses on standardization, offering a solid Linux foundation that can be customized according to the unique requirements of various organizations. This approach makes EU OS a practical choice for the public sector, ensuring broad compatibility and ease of implementation across diverse environments.
    The Vision Behind EU OS
    The guiding principle of EU OS is the concept of "public money – public code," ensuring that taxpayer money is used transparently and effectively. By adopting an open-source model, EU OS eliminates licensing fees, which not only lowers costs but also reduces the dependency on a select group of software vendors. This provides the EU’s public sector organizations with greater flexibility and control over their IT infrastructure, free from the constraints of vendor lock-in.

    Additionally, EU OS offers flexibility in terms of software migration and hardware upgrades. Organizations can adapt to new technologies and manage their IT evolution at a manageable cost, both in terms of finances and time.

    However, there are some concerns about the choice of Fedora as the base for EU OS. While Fedora is a solid and reliable distribution, it is backed by the United States-based Red Hat. Some argue that using European-backed projects such as openSUSE or KDE's upcoming distribution might have aligned better with the EU's goal of strengthening digital sovereignty.
    Conclusion
    EU OS marks a significant step towards Europe's digital independence by providing a robust, standardized Linux distribution for the public sector. By reducing reliance on proprietary software and vendors, it paves the way for a more flexible, cost-effective, and secure digital ecosystem. While the choice of Fedora as the base for the project has raised some questions, the overall vision of EU OS offers a promising future for Europe's public sector in the digital age.

    Source: It's FOSS
    European Union


  • Linus Torvalds Acknowledges Missed Release of Linux 6.14 Due to Oversight

    Linus Torvalds Acknowledges Missed Release of Linux 6.14 Due to Oversight

    Linux kernel lead developer Linus Torvalds has admitted to forgetting to release version 6.14, attributing the oversight to his own lapse in memory. Torvalds is known for releasing new Linux kernel candidates and final versions on Sunday afternoons, typically accompanied by a post detailing the release. If he is unavailable due to travel or other commitments, he usually informs the community ahead of time, so users don’t worry if there’s a delay.

    In his post on March 16, Torvalds gave no indication that the release might be delayed, instead stating, “I expect to release the final 6.14 next weekend unless something very surprising happens.” However, Sunday, March 23rd passed without any announcement.

    On March 24th, Torvalds wrote in a follow-up message, “I’d love to have some good excuse for why I didn’t do the 6.14 release yesterday on my regular Sunday afternoon schedule,” adding, “But no. It’s just pure incompetence.” He further explained that while he had been clearing up unrelated tasks, he simply forgot to finalize the release. “D'oh,” he joked.

    Despite this minor delay, Torvalds’ track record of successfully managing the Linux kernel’s development process over the years remains strong. A single day’s delay is not critical, especially since most Linux users don't urgently need the very latest version.

    The new 6.14 release introduces several important features, including enhanced support for writing drivers in Rust—an ongoing topic of discussion among developers—support for Qualcomm’s Snapdragon 8 Elite mobile chip, a fix for the GhostWrite vulnerability in certain RISC-V processors from Alibaba’s T-Head Semiconductor, and a completed NTSYNC driver update that improves the WINE emulator’s ability to run Windows applications, particularly games, on Linux.

    Although the 6.14 release went smoothly aside from the delay, Torvalds expressed that version 6.15 may present more challenges due to the volume of pending pull requests. “Judging by my pending pile of pull requests, 6.15 will be much busier,” he noted.

    You can download the latest kernel here.
    Linus Torvalds kernel


  • AerynOS 2025.03 Alpha Released with GNOME 48, Mesa 25, and Linux Kernel 6.13.8
    Image
    AerynOS 2025.03 has officially been released, introducing a variety of exciting features for Linux users. The release includes the highly anticipated GNOME 48 desktop environment, which comes with significant improvements like HDR support, dynamic triple buffering, and a Wayland color management protocol. Other updates include a battery charge limiting feature and a Wellbeing option aimed at improving user experience.

    This release, while still in alpha, incorporates Linux kernel 6.13.8 and the updated Mesa 25.0.2 graphics stack, alongside tools like LLVM 19.1.7 and Vulkan SDK 1.4.309.0. Additionally, the Moss package manager now integrates os-info to generate more detailed OS metadata via a JSON file.

    Future plans for AerynOS include automated package updates, easier rollback management, improved disk handling with Rust, and fractional scaling enabled by default. The installer has also been revamped to support full disk wipes and dynamic partitioning.

    Although still considered an alpha release, AerynOS 2025.03 can be downloaded and tested right now from its official website.

    Source: 9to5Linux
    AerynOS


  • Xojo 2025r1: Big Updates for Developers with Linux ARM Support, Web Drag and Drop, and Direct App Store Publishing
    Image
    Xojo has just rolled out its latest release, Xojo 2025 Release 1, and it’s packed with features that developers have been eagerly waiting for. This major update introduces support for running Xojo on Linux ARM, including Raspberry Pi, brings drag-and-drop functionality to the Web framework, and simplifies app deployment with the ability to directly submit apps to the macOS and iOS App Stores.

    Here’s a quick overview of what’s new in Xojo 2025r1:
    1. Linux ARM IDE Support
    Xojo 2025r1 now allows developers to run the Xojo IDE on Linux ARM devices, including popular platforms like Raspberry Pi. This opens up a whole new world of possibilities for developers who want to create apps for ARM-based devices without the usual complexity. Whether you’re building for a Raspberry Pi or other ARM devices, this update makes it easier than ever to get started.
    2. Web Drag and Drop
    One of the standout features in this release is the addition of drag-and-drop support for web applications. Now, developers can easily drag and drop visual controls in their web projects, making it simpler to create interactive, user-friendly web applications. Plus, the WebListBox has been enhanced with support for editable cells, checkboxes, and row reordering via dragging. No JavaScript required!
    3. Direct App Store Publishing
    Xojo has also streamlined the process of publishing apps. With this update, developers can now directly submit macOS and iOS apps to App Store Connect right from the Xojo IDE. This eliminates the need for multiple steps and makes it much easier to get apps into the App Store, saving valuable time during the development process.
    4. New Desktop and Mobile Features
    This release isn’t just about web and Linux updates. Xojo 2025r1 brings some great improvements for desktop and mobile apps as well. On the desktop side, all projects now include a default window menu for macOS apps. On the mobile side, Xojo has introduced new features for Android and iOS, including support for ColorGroup and Dark Mode on Android, and a new MobileColorPicker for iOS to simplify color selection.
    5. Performance and IDE Enhancements
    Xojo’s IDE has also been improved in several key areas. There’s now an option to hide toolbar captions, and the toolbar has been made smaller on Windows. The IDE on Windows and Linux now features modern Bootstrap icons, and the Documentation window toolbar is more compact. In the code editor, developers can now quickly navigate to variable declarations with a simple Cmd/Ctrl + Double-click. Plus, performance for complex container layouts in the Layout Editor has been enhanced.
    What Does This Mean for Developers?
    Xojo 2025r1 brings significant improvements across all the platforms that Xojo supports, from desktop and mobile to web and Linux. The added Linux ARM support opens up new opportunities for Raspberry Pi and ARM-based device development, while the drag-and-drop functionality for web projects will make it easier to create modern, interactive web apps. The ability to publish directly to the App Store is a game-changer for macOS and iOS developers, reducing the friction of app distribution.
    How to Get Started
    Xojo is free for learning and development, as well as for building apps for Linux and Raspberry Pi. If you’re ready to dive into cross-platform development, paid licenses start at $99 for a single-platform desktop license, and $399 for cross-platform desktop, mobile, or web development. For professional developers who need additional resources and support, Xojo Pro and Pro Plus licenses start at $799. You can also find special pricing for educators and students.

    Download Xojo 2025r1 today at xojo.com.
    Final Thoughts
    With each new release, Xojo continues to make cross-platform development more accessible and efficient. The 2025r1 release is no exception, delivering key updates that simplify the development process and open up new possibilities for developers working on a variety of platforms. Whether you’re a Raspberry Pi enthusiast or a mobile app developer, Xojo 2025r1 has something for you.
    Xojo ARM


  • New 'Mirrored' Network Mode Introduced in Windows Subsystem for Linux

    Microsoft's Windows Subsystem for Linux (WSL) continues to evolve with the release of WSL 2 version 0.0.2. This update introduces a set of opt-in preview features designed to enhance performance and compatibility.

    Key additions include "Automatic memory reclaim" which dynamically optimizes WSL's memory footprint, and "Sparse VHD" to shrink the size of the virtual hard disk file. These improvements aim to streamline resource usage.

    Additionally, a new "mirrored networking mode" brings expanded networking capabilities like IPv6 and multicast support. Microsoft claims this will improve VPN and LAN connectivity from both the Windows host and Linux guest. 

    Complementing this is a new "DNS Tunneling" feature that changes how DNS queries are resolved to avoid compatibility issues with certain network setups. According to Microsoft, this should reduce problems connecting to the internet or local network resources within WSL.

    Advanced firewall configuration options are also now available through Hyper-V integration. The new "autoProxy" feature ensures WSL seamlessly utilizes the Windows system proxy configuration.

    Microsoft states these features are currently rolling out to Windows Insiders running Windows 11 22H2 Build 22621.2359 or later. They remain opt-in previews to allow testing before final integration into WSL.

    By expanding WSL 2 with compelling new capabilities in areas like resource efficiency, networking, and security, Microsoft aims to make Linux on Windows more performant and compatible. This evolutionary approach based on user feedback highlights Microsoft's commitment to WSL as a key part of the Windows ecosystem.
    Windows


  • Linux Threat Report: Earth Lusca Deploys Novel SprySOCKS Backdoor in Attacks on Government Entities

    The threat actor Earth Lusca, linked to Chinese state-sponsored hacking groups, has been observed utilizing a new Linux backdoor dubbed SprySOCKS to target government organizations globally. 

    As initially reported in January 2022 by Trend Micro, Earth Lusca has been active since at least 2021 conducting cyber espionage campaigns against public and private sector targets in Asia, Australia, Europe, and North America. Their tactics include spear-phishing and watering hole attacks to gain initial access. Some of Earth Lusca's activities overlap with another Chinese threat cluster known as RedHotel.

    In new research, Trend Micro reveals Earth Lusca remains highly active, even expanding operations in the first half of 2023. Primary victims are government departments focused on foreign affairs, technology, and telecommunications. Attacks concentrate in Southeast Asia, Central Asia, and the Balkans regions. 

    After breaching internet-facing systems by exploiting flaws in Fortinet, GitLab, Microsoft Exchange, Telerik UI, and Zimbra software, Earth Lusca uses web shells and Cobalt Strike to move laterally. Their goal is exfiltrating documents and credentials, while also installing additional backdoors like ShadowPad and Winnti for long-term spying.

    The Command and Control server delivering Cobalt Strike was also found hosting SprySOCKS - an advanced backdoor not previously publicly reported. With roots in the Windows malware Trochilus, SprySOCKS contains reconnaissance, remote shell, proxy, and file operation capabilities. It communicates over TCP mimicking patterns used by a Windows trojan called RedLeaves, itself built on Trochilus.

    At least two SprySOCKS versions have been identified, indicating ongoing development. This novel Linux backdoor deployed by Earth Lusca highlights the increasing sophistication of Chinese state-sponsored threats. Robust patching, access controls, monitoring for unusual activities, and other proactive defenses remain essential to counter this advanced malware.

    The Trend Micro researchers emphasize that organizations must minimize attack surfaces, regularly update systems, and ensure robust security hygiene to interrupt the tactics, techniques, and procedures of relentless threat groups like Earth Lusca.
    Security


  • Linux Kernel Faces Reduction in Long-Term Support Due to Maintenance Challenges

    The Linux kernel is undergoing major changes that will shape its future development and adoption, according to Jonathan Corbet, Linux kernel developer and executive editor of Linux Weekly News. Speaking at the Open Source Summit Europe, Corbet provided an update on the latest Linux kernel developments and a glimpse of what's to come.

    A major change on the horizon is a reduction in long-term support (LTS) for kernel versions from six years to just two years. Corbet explained that maintaining old kernel branches indefinitely is unsustainable and most users have migrated to newer versions, so there's little point in continuing six years of support. While some may grumble about shortened support lifecycles, the reality is that constantly backporting fixes to ancient kernels strains maintainers.

    This maintainer burnout poses a serious threat, as Corbet highlighted. Maintaining Linux is largely a volunteer effort, with only about 200 of the 2,000+ developers paid for their contributions. The endless demands on maintainers' time from fuzz testing, fixing minor bugs, and reviewing contributions takes a toll. Prominent maintainers have warned they need help to avoid collapse. Companies relying on Linux must realize giving back financially is in their interest to sustain this vital ecosystem. 

    The Linux kernel is also wading into waters new with the introduction of Rust code. While Rust solves many problems, it also introduces new complexities around language integration, evolving standards, and maintainer expertise. Corbet believes Rust will pass the point of no return when core features depend on it, which may occur soon with additions like Apple M1 GPU drivers. Despite skepticism in some corners, Rust's benefits likely outweigh any transition costs.

    On the distro front, Red Hat's decision to restrict RHEL cloning sparked community backlash. While business considerations were at play, Corbet noted technical factors too. Using older kernels with backported fixes, as RHEL does, risks creating divergent, vendor-specific branches. The Android model of tracking mainline kernel dev more closely has shown security benefits. Ultimately, Linux works best when aligned with the broader community.

    In closing, Corbet recalled the saying "Linux is free like a puppy is free." Using open source seems easy at first, but sustaining it long-term requires significant care and feeding. As Linux is incorporated into more critical systems, that maintenance becomes ever more crucial. The kernel changes ahead are aimed at keeping Linux healthy and vibrant for the next generation of users, businesses, and developers.
    kernel


  • Linux Celebrates 32 Years with the Release of 6.6-rc2 Version

    Today marks the 32nd anniversary of Linus Torvalds introducing the inaugural Linux 0.01 kernel version, and celebrating this milestone, Torvalds has launched the Linux 6.6-rc2. Among the noteworthy updates are the inclusion of a feature catering to the ASUS ROG Flow X16 tablet's mode handling and the renaming of the new GenPD subsystem to pmdomain.

    The Linux 6.6 edition is progressing well, brimming with exciting new features that promise to enhance user experience. Early benchmarks are indicating promising results, especially on high-core-count servers, pointing to a potentially robust and efficient update in the Linux series.

    Here is what Linus Torvalds had to say in today's announcement:
    Another week, another -rc.I think the most notable thing about 6.6-rc2 is simply that it'sexactly 32 years to the day since the 0.01 release. And that's a roundnumber if you are a computer person.Because other than the random date, I don't see anything that reallystands out here. We've got random fixes all over, and none of it looksparticularly strange. The genpd -> pmdomain rename shows up in thediffstat, but there's no actual code changes involved (make sure touse "git diff -M" to see them as zero-line renames).And other than that, things look very normal. Sure, the architecturefixes happen to be mostly parisc this week, which isn't exactly theusual pattern, but it's also not exactly a huge amount of changes.Most of the (small) changes here are in drivers, with some tracingfixes and just random things. The shortlog below is short enough toscroll through and get a taste of what's been going on. Linus Torvalds


  • Introducing Bavarder: A User-Friendly Linux Desktop App for Quick ChatGPT Interaction

    Want to interact with ChatGPT from your Linux desktop without using a web browser?

    Bavarder, a new app, allows you to do just that.

    Developed with Python and GTK4/libadwaita, Bavarder offers a simple concept: pose a question to ChatGPT, receive a response, and promptly copy the answer (or your inquiry) to the clipboard for pasting elsewhere.

    With an incredibly user-friendly interface, you won't require AI expertise (or a novice blogger) to comprehend it. Type your question in the top box, click the blue send button, and wait for a generated response to appear at the bottom. You can edit or modify your message and repeat the process as needed.

    During our evaluation, Bavarder employed BAI Chat, a GPT-3.5/ChatGPT API-based chatbot that's free and doesn't require signups or API keys. Future app versions will incorporate support for alternative backends, such as ChatGPT 4 and Hugging Chat, and allow users to input an API key to utilize ChatGPT3.

    At present, there's no option to regenerate a response (though you can resend the same question for a potentially different answer). Due to the lack of a "conversation" view, tracking a dialogue or following up on answers can be challenging — but Bavarder excels for rapid-fire questions.

    As with any AI, standard disclaimers apply. Responses might seem plausible but could contain inaccurate or false information. Additionally, it's relatively easy to lead these models into irrational loops, like convincing them that 2 + 2 equals 106 — so stay alert!

    Overall, Bavarder is an attractive app with a well-defined purpose. If you enjoy ChatGPT and similar technologies, it's worth exploring.
    ChatGPT AI


  • LibreOffice 7.5.3 Released: Third Maintenance Update Brings 119 Bug Fixes to Popular Open-Source Office Suite

    Today, The Document Foundation unveiled the release and widespread availability of LibreOffice 7.5.3, which serves as the third maintenance update to the current LibreOffice 7.5 open-source and complimentary office suite series.

    Approximately five weeks after the launch of LibreOffice 7.5.2, LibreOffice 7.5.3 arrives with a new set of bug fixes for those who have successfully updated their GNU/Linux system to the LibreOffice 7.5 series.

    LibreOffice 7.5.3 addresses a total of 119 bugs identified by users or uncovered by LibreOffice developers. For a more comprehensive understanding of these bug fixes, consult the RC1 and RC2 changelogs.

    You can download LibreOffice 7.5.3 directly from the LibreOffice website or from SourceForge as binary installers for DEB or RPM-based GNU/Linux distributions. A source tarball is also accessible for individuals who prefer to compile the software from sources or for system integrators.

    All users operating the LibreOffice 7.5 office suite series should promptly update their installations to the new point release, which will soon appear in the stable software repositories of your GNU/Linux distributions.

    In early February 2023, LibreOffice 7.5 debuted as a substantial upgrade to the widely-used open-source office suite, introducing numerous features and improvements. These enhancements encompass major upgrades to dark mode support, new application and MIME-type icons, a refined Single Toolbar UI, enhanced PDF Export, and more.

    Seven maintenance updates will support LibreOffice 7.5 until November 30th, 2023. The next point release, LibreOffice 7.5.4, is scheduled for early June and will include additional bug fixes.

    The Document Foundation once again emphasizes that the LibreOffice office suite's "Community" edition is maintained by volunteers and members of the Open Source community. For enterprise implementations, they suggest using the LibreOffice Enterprise family of applications from ecosystem partners.
    LibreOffice


Linux Magazine News (path: lmi_news)









  • Is Linus Torvalds Vibe Coding?
    The creator of Linux has added AI into his process for Linux kernel development, and it's more than just for debugging.



Page last modified on November 17, 2022, at 06:39 PM