All the News that Matters

• [$] Removing binder.c
  The final talk at Kangrejos 2026 was about the removal of the C implementationof Android'sBinder driver, the primary interprocess communication mechanismused on Android devices. Carlos Llamas announced that he had deleted the Ccode to general applause, and then shared some insights about what went intoreplacing the C implementation. Alice Ryhl, who has worked on the Rustimplementation for some years, added her own thoughts about what the mostdifficult and interesting parts of the transition were.
  

• Haas: Postgres 19 is late, and it's AI's fault
  PostgreSQL developer Robert Haas writesabout the struggles the project has encountered in putting together itsnext release.
  In the end, I don't think that the delay in shipping PostgreSQL 19 is particularly concerning. It is not a long delay in the grand scheme of things, and it emerges directly from the project's concern for quality.
  The long-term picture is less clear and in some ways more troubling: given that we have forty years of bugs that humans were unable to find but LLMs are quite capable of discovering, how are we ever going to catch up, and how will PostgreSQL continue to innovate? Right now, I'm not sure. What I do know is that I, and many others, are working really hard to figure it out.
  LWN looked at the PostgreSQL 19 releaseand its challenges in September.

• Remote code execution on Linux systems with multipath TCP
  On October 27, LLM provider Anthropicreportedon aremotely exploitable use-after-free bug affecting systems withmultipath TCP listeners open. The bug works by triggering a response to aretransmitted SYN packet at the same moment that the TCP connection isestablished in another thread, causing the first thread to access theconnection's options structure after the second thread has freed it. The firstthread can then disclose kernel memory or cause a buffer overflow, writing anattacker-controlled payload. The fix wasto only free the structure after an RCU grace period.On October 29, the Go security teamadvisedthat all programs written in Go use multipath TCP by default, so manysystems may be unknowingly vulnerable. And, of course, there is always thepossibility of related bugs in other sections of the TCP stack. Users may bewise to update to a patched kernel as soon as one becomes available for theirdistribution.
  

• [$] System-call wrappers for glibc
  In a followup to his session at the2025 Linux Plumbers Conference (LPC), Carlos O'Donell returned to the topicof system-callwrappers for the GNU C library (glibc) at this year's event. This timearound, he was joined by Florian Weimer, who is another glibc maintainer.The idea was to give an update on what has happened over the last year withregard to Linux system calls that lack a glibc wrapper, thus are onlyaccessible viasyscall(). In addition, they wanted to hear from attendees about theirneeds in this area.

• Eight more stable kernel updates
  Greg Kroah-Hartman has announced the release of the 7.3.1,7.2.14,6.18.60,6.12.115,6.6.161,6.1.191,5.15.224, and5.10.273 stable kernels. As usual, he advisesall users to update—advice that seems especially wise given theincreased number of security-relevant bug fixes that the kernel is seeing these days.[Edit: the 7.2.15 stable release is already in review as well.]
  

• Security updates for Friday
  Security updates have been issued by AlmaLinux (aspell, cjose, curl, gcc-toolset-15-gcc, httpd:2.4, ignition, java-21-openjdk, libX11, libXi, libXrender, libXtst, mariadb:10.11, nodejs:24, python-pillow, python3.12-urllib3, and webkit2gtk3), Debian (imagemagick, libdatetime-timezone-perl, python-git, tor, tzdata, vlc, and wordpress), Fedora (accessibility-inspector, akonadi-calendar, akonadi-calendar-tools, akonadi-contacts, akonadi-import-wizard, akonadi-mime, akonadi-search, akonadi-server, akonadiconsole, akregator, alligator, analitza, angelfish, applet-window-buttons, arianna, ark, artikulate, audex, audiocd-kio, audiotube, aurorae, baloo-widgets, blinken, bluedevil, bomber, bovo, breeze-gtk, brotli, bup, calendarsupport, calindori, calligra, cantor, colord-kde, cxx-rust-cssparser, dolphin, dolphin-plugins, dragon, elisa-player, eventviews, falkon, fcitx-configtool, ffmpegthumbs, filelight, firefox, flatpak-kcm, francis, ghostwriter, granatier, grantlee-editor, grantleetheme, grub2-breeze-theme, gwenview, incidenceeditor, isoimagewriter, itinerary, juk, k3b, kaccounts-integration, kaccounts-providers, kactivitymanagerd, kaddressbook, kajongg, kalarm, kalgebra, kalk, kalm, kalzium, kamera, kamoso, kanagram, kapman, kapptemplate, kasts, kate, katomic, kbackup, kblackbox, kblocks, kbounce, kbruch, kcachegrind, kcalc, kcalutils, kcharselect, kclock, kcolorchooser, kcron, kde-cli-tools, kde-connect, kde-dev-scripts, kde-dev-utils, kde-gtk-config, kde-inotify-survey, kde-partitionmanager, kdebugsettings, kdecoration, kdeedu-data, kdegraphics-mobipocket, kdegraphics-thumbnailers, kdenetwork-filesharing, kdenlive, kdepim-addons, kdepim-runtime, kdeplasma-addons, kdesdk-kioslaves, kdesdk-thumbnailers, kdevelop, kdevelop-php, kdevelop-python, kdf, kdialog, kdiamond, kdnssd, kdominate, keditbookmarks, keepsecret, keysmith, kf6-baloo, kfind, kfourinline, kgeography, kget, kglobalacceld, kgoldrunner, kgpg, kgraphviewer, khangman, khealthcertificate, khelpcenter, kidentitymanagement, kig, kigo, killbots, kimagemapeditor, kimap, kinfocenter, kio-admin, kio-extras, kio-gdrive, kirigami-gallery, kiriki, kiten, kitinerary, kjournald, kjumpingcube, kldap, kleopatra, klettres, klickety, klines, kmag, kmahjongg, kmail, kmail-account-wizard, kmailtransport, kmbox, kmenuedit, kmines, kmix, kmousetool, kmouth, kmplot, knavalbattle, knetwalk, knights, knighttime, knot, koko, kolf, kollision, kolourpaint, kompare, kongress, konqueror, konquest, konsole, kontact, kontactinterface, kontrast, konversation, kopeninghours, korganizer, kosmindoormap, kpat, kpimtextedit, kpipewire, kpkpass, kpmcore, kpublictransport, kqtquickcharts, krdc, krdp, krecorder, kreversi, krfb, kruler, ksanecore, kscreen, kscreenlocker, kshisen, ksirk, ksmtp, ksnakeduel, kspaceduel, ksquares, ksshaskpass, ksudoku, ksystemlog, ksystemstats, kteatime, ktimer, ktnef, ktorrent, ktouch, ktrip, ktuberling, kturtle, kubrick, kunifiedpush, kup-backup, kwalletmanager5, kwave, kwayland, kwayland-integration, kweather, kweathercore, kwin, kwin-zones, kwordquiz, kwrited, layer-shell-qt, libgravatar, libkcddb, libkdcraw, libkdegames, libkdepim, libkeduvocdocument, libkexiv2, libkgapi, libkleo, libkmahjongg, libkomparediff2, libksane, libkscreen, libksieve, libksysguard, libktorrent, libplasma, libquotient, lokalize, lskat, mailcommon, mailimporter, marble, markdownpart, massif-visualizer, mbox-importer, merkuro, messagelib, mimetreeparser, mingw-python-certifi, minuet, neochat, ocean-sound-theme, okular, oxygen-sounds, palapeli, pam-kwallet, parley, perl-Alien-Brotli, picmi, pim-data-exporter, pim-sieve-editor, pimcommon, plasma-activities, plasma-activities-stats, plasma-bigscreen, plasma-breeze, plasma-browser-integration, plasma-camera, plasma-desktop, plasma-dialer, plasma-discover, plasma-disks, plasma-drkonqi, plasma-firewall, plasma-integration, plasma-keyboard, plasma-login-manager, plasma-milou, plasma-mobile, plasma-nano, plasma-nm, plasma-oxygen, plasma-pa, plasma-phonebook, plasma-print-manager, plasma-sdk, plasma-settings, plasma-setup, plasma-systemmonitor, plasma-systemsettings, plasma-thunderbolt, plasma-union, plasma-vault, plasma-wayland-protocols, plasma-welcome, plasma-workspace, plasma-workspace-wallpapers, plasma5support, plasmatube, plymouth-kcm, plymouth-theme-breeze, polkit-kde, powerdevil, poxml, qmlkonsole, qqc2-breeze-style, qrca, rocs, sddm-kcm, signon-kwallet-extension, skanlite, skanpage, skladnik, spacebar, spectacle, step, svgpart, sweeper, tokodon, trafficserver, umbrello, xdg-desktop-portal-kde, yakuake, and zanshin), Mageia (cfitsio, libsolv, tomcat, and xrdp), Oracle (bind, cjose, curl, dogtag-pki, expat, gcc-toolset-15-gcc, ignition, kernel, libX11, libXrender, libXtst, php, python3.12-urllib3, and webkit2gtk3), SUSE (389-ds, aws-nitro-enclaves-binaryblobs-upstream, brotli, chromium, firefox, flatpak, gnutls, google-osconfig-agent, haproxy, hawk2, kernel, libapr1, libtcnative-1-0, tomcat, liboath-devel, libpcre2-16-0, librecad, libXi-devel, libXtst-devel, python311, python313, python313-markdown2, python313-xhtml2pdf, rabbitmq-server, roundcubemail, rust-keylime, and xen), and Ubuntu (dotnet8, dotnet10, dotnet11).

• [$] Containers as a recognized kernel object
  The foundation of the design for containers in the kernel is that thereisn't one; there is no container abstraction that the kernel recognizes.Instead, the kernel provides a long list of components — namespaces,control groups, sandboxing mechanisms, and more — along with a note thatsays, in effect, "some assembly required". There have been attempts (repeatedly) over the years to turn containersinto first-class objects with kernel support, but they have never gottenfar. Now Josef Bacik is making atry with a concept that he calls "cells".

• Security updates for Thursday
  Security updates have been issued by AlmaLinux (cjose, emacs, expat, gcc-toolset-15-gcc, java-17-openjdk, java-25-openjdk, kernel, kernel-rt, libX11, libXi, libXrender, libXtst, mod_auth_openidc:2.3, pki-deps:10.6, thunderbird, webkit2gtk3, and yggdrasil), Debian (chromium, firefox-esr, and openjdk-25), Fedora (firefox, librabbitmq, libreswan, python-pillow, and unbound), Mageia (fio and python3, python-pip), Oracle (buildah, cjose, container-tools:ol8, emacs, flute, libbase, libfonts, libformula, liblayout, libloader, libreoffice, librepository, libserializer, pentaho-libxml, pentaho-reporting-flow-engine, and sac, kernel, libX11, libXi, libXrender, libXtst, podman, python-urllib3, thunderbird, and yggdrasil), Red Hat (firefox, goose, kernel, kernel package, kernel-rt, librsvg2, multiple packages, php:7.4, sudo, thunderbird, and xorg-x11-server), and SUSE (alsa, ca-certificates-mozilla, chromedriver, cifs-utils, coredns, coreutils, cpupower, curl, cyrus-sasl, docker, dpdk, haproxy, kernel, libpoppler-cpp3, libsndfile-devel, libzbar-devel, mozilla-nss, MozillaFirefox, nginx, openai-codex, and perl-Cpanel-JSON-XS).

• [$] LWN.net Weekly Edition for October 29, 2026
  Inside this week's LWN.net Weekly Edition:
  Front: Python JIT; Kernel clean up; Rust panics; Future Rust features; Northstar browser; 7.4 merge window; Smaller kernel stacks. Briefs: KeePassXC 2.8.0; Redox ring buffers; Rust in systemd; Quotes; ... Announcements: Newsletters, conferences, security updates, patches, and more.

• A report from the LPC sched_ext microconference
  The Linux Plumbers Conference blog has areport from the sched_ext microconference held in Prague.
  Three main topics dominated the discussions Priority inversion and how to handle it in sched_ext: lock holder and lock waiter preemption, time slice extension, and making proxy execution work together with BPF schedulers. Paravirtualized scheduling: letting the host and guest schedulers cooperate across the VM boundary, with sched_ext as the policy engine on the host. Device and topology-aware scheduling: using hardware feedback (Intel HFI), device/accelerator locality and cache topology to drive task placement.

• [$] The campaign to push Northstar into Linux distributions
  There is not a broad selection of mature, open-source web-browser enginesfor Linux users. Most of the browsers available for Linux are based on one ofjust three projects: Chromium's Blink, Firefox'sGecko, or WebKit. A new entrant wouldgenerally be seen as a welcome alternative, but the recent campaign to push oneof the LLM-written Nordstjernen browsersinto Debian and Arch Linux has raised some questions aboutthe project's development and security processes.
  

• Redox OS ring buffers project summary
  The Redox OS project, which is aUnix-like microkernel-based operating system written in Rust, has published a report on the workthat it has done in the last year to implement io_uring-likeI/O.
  
  Last year, the Redox team received a grant to develop io_uring-like RingBuffer support at the system task level, as a first step towards ring buffercommunications between the application and the majority of system services. Thisphase of the work finished up in September, as the last pieces were put inplace.
  
  [...] In addition to implementing the Ring Buffer machinery for our systemservices and drivers that can support it, an io_uring andliburing-like API for applications was completed anddemonstrated. There was also substantial work done on support crates, includingan async executor for drivers.
  
  And there was some very exciting work on various performance improvements, toallow much faster switching between applications and their system services. ButI will let the team tell you all the technical details.
  
  
  

• Security updates for Wednesday
  Security updates have been issued by AlmaLinux (emacs, thunderbird, and xdg-dbus-proxy), Debian (bind9, openjdk-21, pdns, php-mongodb, and thunderbird), Fedora (brotli, chromium, clevis, eog, flatpak, ghostscript, kernel, libinstpatch, libreswan, mingw-freetype, mingw-gstreamer1, mingw-gstreamer1-plugins-bad-free, mingw-gstreamer1-plugins-base, mingw-gstreamer1-plugins-good, openssh, perl-Alien-Brotli, perl-DBI, python3.12, rust-onefetch, stargz-snapshotter, util-linux, and webkitgtk), Mageia (cifs-utils, libxml2, packages, perl-Cpanel-JSON-XS, perl-Text-CSV_XS, sogo, util-linux, and weechat), Oracle (brotli, firefox, flatpak, gcc-toolset-15-gcc, kernel, libreswan, nodejs:22, nodejs:24, python-urllib3, skopeo, and xdg-dbus-proxy), Slackware (proftpd), SUSE (azure-storage-azcopy, containerd, corepack24, grok-build, ImageMagick, libsoup-2_4-1, matrix-synapse, podman, psqlODBC, python, python-M2Crypto-doc, python-Twisted-doc, and xen), and Ubuntu (authd).

• Robinson: Raspberry Pi 5 on Fedora
  Peter Robinson has written a blog post aboutthe current state of Fedora support for Raspberry Pi 5devices. According to Robinson, the upcoming Fedora 45 release willwork—with caveats—onall variants of the Raspberry Pi Model 5B; theCompute Module 5 and Pi 500+ are still works in progress.For Fedora 44 release you need to have a temporary workaround when booting. Ifyou update to the latest kernel/firmware straight away this isn't then neededbeyond the first boot. The workaround isn't needed for Fedora 45 so if you'regoing to try this out I suggest you go and grab your favourite flavour of Fedorafrom the Fedora 45 release candidates and jump straight in there! You will getan accelerated desktop with storage/network/USB. There's not currently anysupport for sound and a number of other things.
  See Robinson's post for instructions on creating an Fedora image to use witha Raspberry Pi 5.
  
  
  

• [$] Guidelines for panics in kernel code
  Alexandre Courbot spends most of his time working on the kernel doing codereviews. Recently, he's been wondering about what the standards should be forwhen Rust code is allowed to panic, and how it should do error handling moregenerally. Unlike many of the other talks at Kangrejos 2026, his talk was notpresenting some existing work, but rather hoping to solicit opinions on thetopic from the assembled Rust for Linux developers. He brought along a collection of trickycases that he had run into recently to prompt discussion.
  

• This app lets you manage Nothing & CMF earbuds on Linux
  Adjusting active noise cancellation (ANC) on Nothing or CMF earbuds means taking out your phone to use the official mobile app. EarA, a new open-source tool, that. Its a GTK4 app (with a CLI for those who prefer the terminal), and it controls settings on earbuds like the Nothing Ear (a) and CMF Buds 2, from your Linux desktop. Noise control/ANC levels can be switched with a click. There are0

• Tails 7.16 Privacy-Focused Linux Distro Released with Tor Browser 16
  Tails 7.16 updates Tor Browser to version 16, upgrades the Tor client, and fixes OpenPGP support in Thunderbird.

• Mastering Zip and Unzip Commands on Linux
  This kickstart guide will teach you the distinctions between Zip and Tarball and the installation of Zip and Unzip on your chosen Linux system, with command examples.

• Remote code execution on Linux systems with multipath TCP
  On October 27, LLM provider Anthropic reported on a remotely exploitable use-after-free bug affecting systems with multipath TCP listeners open. The bug works by triggering a response to a retransmitted SYN packet at the same moment that the TCP connection is established in another thread, causing the first thread to access the connection's options structure after the second thread has freed it.0

• Labwc 0.20.3 Wayland Compositor Adds Custom Pointer Acceleration
  Labwc 0.20.3 introduces custom pointer acceleration, new input settings, and fixes for screen locking, XWayland, and window management.

• RISC-V Has A Nice Portable Performance Optimization With Linux 7.4
  The RISC-V architecture changes were merged today for the Linux 7.4 kernel with one nice optimization standing out0

• Szyszka: A Bulk File Renamer Written in Rust with GTK 4 for Linux
  Quickly bulk rename files or directories using a simple yet powerful tool named Szyszka on Linux, Windows, and macOS.

• Wine 11.21 Improves WoW64 OpenGL Performance, Fixes 20 Bugs
  Wine 11.21 improves WoW64 OpenGL performance, introduces a Voice Capture DSP library, and fixes 20 bugs affecting games and applications.

• Working Exploit for a Linux Kernel Flaw Made Public
  Even before a bug received its CVE identifier or an upstream fix, the local privilege escalation vulnerability exploit found its way into the wild.

• Shelly 3.1.10 Arch Linux Package Manager Improves AUR Builds
  Shelly 3.1.10 improves AUR dependency handling, system upgrades, error reporting, and desktop usability for Arch Linux users.

• Ubuntu 27.04 Tenacious T-Rex opens for development
  Development on Ubuntu 27.04, codenamed Tenacious T-Rex, has officially begun. The tenacious archive is now open (30 October 2026), with auto-sync from Debian set to pull in a tranche of updated packages since the Ubuntu 26.10 release. Over the course of the next six months, those will be tested, set and form the basis of the final, stable release. Ubuntu 27.04 is scheduled for release on 220

• Shelly 3.1.10 Brings More Reliable AUR Builds and a New Shell! Progress Bar
  Shelly 3.1.10 has been released today as a new maintenance update in the Shelly 3.1 series of this modern, open-source, and free pacman alternative for Arch Linux and derivatives, with AUR build and upgrade improvements.

• r/opensource Bans AI-Assisted and AI-Related Projects
  The de facto subreddit for all things open source has not only banned AI-related projects but also users who "don't speak English."

• Postgres 19 is late, and it's AI's fault
  Over the past decade, the timing of PostgreSQL major releases has become very predictable: no earlier than the middle of September, and no later than the middle of October. This year is going to be different. PostgreSQL 19 most likely wont be released until November, and its not impossible that the project could decide to postpone the release further.

• Pulsar 1.133 Code Editor Brings Better Terminal Integration, Faster Editing
  Pulsar 1.133 improves terminal integration, fixes large-file editing slowdowns, upgrades to Electron 32, and redesigns file watching.

• Planet News Roundup
  This is a roundup of articles from the openSUSE community listed on planet.opensuse.org. This community blog feed aggregator lists the featured highlights below from Oct. 23 - 29. This week highlights five Tumbleweed snapshots for week 43 headlined by KDE Plasma 6.8.0, Qt 6.12.0, Linux Kernel 7.2.11 and PHP 8.5.12,0

• Another Week, Another Vibe Coded OS; Closed-Source In The Name Of Security
  With today's AI/LLM capabilities, there is almost a new operating system heard about each week "coded from scratch" predominantly via AI agents. This week was no exception with another project hitting our email inbox. Though most of them are open-source, this one is closed-source in the name of security0

• Best Linux Distros for Chromebooks in 2026 (10 Picks Compared)
  This guide covers the two ways to run Linux on a Chromebook, ten distros worth your time, and the checks that save you a wasted afternoon.

• Denmarks Digital Sovereignty Effort Stalls Amid Government Shakeup
  An unfinished Collabora trial has been cast as an open source failure. The timeline tells a different story.

• OuijaCNC
  Spooky season is officially upon us. Check out this self-playing Ouija board built by one of our colleagues.

Error: It's not possible to reach RSS file http://services.digg.com/2.0/story.getTopNews?type=rss&topic=technology ...

• Supersonic Airliner In Doubt As Company Shifts to Powering AI Data Centers
  Boom Supersonic's plans to launch its Overture passenger jet by 2029 are facing growing doubts as the company pivots toward manufacturing natural gas turbines for AI data centers. Ars Technica reports: One of the company's first customers, United Airlines CEO Scott Kirby, has expressed doubts about Boom's original plan to deliver the first Overture supersonic airliner in 2029. Kirby's latest frank assessment came during an interview with the Office Hours: Business Edition podcast that appeared on October 28, 2026. "'29 is their official timeline," Kirby told podcast host Monica Langley. "It's not going to happen in '29 -- it's going to take longer." [...] Much of Boom's recent focus has been on developing natural gas turbines to power AI data centers as an additional revenue stream. On October 22, the company unveiled another factory in Centennial, Colorado, dedicated to producing a 42-megawatt natural gas turbine called Superpower for data centers. [...] Boom described its new Superpower factory as making turbine parts while still undergoing construction. It aims to deliver the first gas turbines to AI data center customers in mid-2027 while ramping up annual production to 25 turbines in 2028 and 50 turbines by 2029. [...] Still, Boom has characterized the development of a gas turbine for data centers as being synergistic with its design of the Symphony engine for the Overture airliner. During the October announcement, it also described having completed a prototype turbine core, called Sprint Core, that is intended to eventually power both the Superpower gas turbine and Symphony engine for the airliner. That turbine core is set to undergo testing at the Colorado Air & Space Port, with Boom planning to fire the turbine for the first time before Thanksgiving. That would be a concrete development milestone, but the company still has much to do in proving it can get both its AI data center and supersonic airliner ventures off the ground.
  
  
  Read more of this story at Slashdot.
  

• Google's First Data Center Satellite Is Online and Writing Poetry
  Google's first experimental space-based data center is operational after launching earlier this month, successfully running its Gemma 4 AI model aboard a satellite and generating a haiku about being in orbit. TechCrunch reports: The satellite, which carries four Google Tensor Processing Units (TPUs) and generates up to 1 kW of electricity, is intended to pave the way for future networks of close-flying satellites performing large inference workloads in orbit. However, the power demands of the TPU mean it can only turn one on for about 20 minutes at a time, complicating the already tricky business of space-to-ground communications. After a commissioning process that tested out the satellite's subsystems over about three weeks, the spacecraft was ready to work. When engineers on the ground sent their first prompt this week, they asked the model pre-loaded onto the satellite, Google DeepMind's Gemma 4, to write a haiku about being in space. And thus: Blue marble belowData streams in silent graceStarlight feeds my core. The ongoing test campaign will examine how the chips perform under thermal stress and in the space radiation environment. [...] If the TPUs onboard this spacecraft prove capable, the next step will be launching two more satellites equipped with the advanced chips in 2027. Those spacecraft will support higher power generation and demonstrate inter-satellite optical links.
  
  
  Read more of this story at Slashdot.
  

• Cisco Gives Engineer Unlimited AI Tokens To Rewrite Legacy Code
  An anonymous reader quotes a report from Fortune: Gen Z can't catch a break. Entry-level jobs are vanishing; some 40% of bosses say they plan to hire fewer grads because AI can do the job cheaper, and young workers are routinely slammed for showing up late and refusing to put in overtime for free. Cisco's president and chief product officer Jeetu Patel isn't buying it -- he's just handed one of the company's biggest jobs to a 27-year-old he found hidden in the org chart "five levels" below him. "I've given him unlimited tokens because he's going to refactor code," Patel told Fortune at a small roundtable dinner. "So I'm like, you can go, you can go nuts." The "him" is Padmanabhan Krishnamurthy, or "Paddy," as Patel affectionately calls him. He joined Cisco in 2025 after the $429 billion tech giant acquired EzDubs, the real-time translation startup Krishnamurthy cofounded in 2023. And despite coming in as a former founder with CEO experience, he was, in Patel's words, "buried away in the organization doing something unstrategic." That changed when Patel dropped into Cisco's San Francisco office, and the pair got talking. Krishnamurthy reckoned he could rewrite Cisco's legacy code with a two-person team. Patel says even the most AI-forward people on his own team weren't thinking that way. So he has given himself four weeks to prove it, with the final goal of rewriting 98% of Cisco's legacy code within 24 months. Now, he's on the hunt for more Paddys: young hires who will "challenge the system and the status quo," or, as he puts it, be "an energizer bunny that just goes out and kind of revs everyone up." "The only way for us to keep accelerating is to make sure we're surrounded by people with a broad range of experience," said Patel. "Roughly one-third of my team is experienced, scaled operators who understand how the Cisco engine works. The second third are systems thinkers from the market who bring the outside-in perspective. And the final third is made of entrepreneurial founders, CEOs, and engineers who are AI-native who operate in founder mode." "Either of these groups by themselves aren't nearly as potent as when all three work together. It's what creates magic."
  
  
  Read more of this story at Slashdot.
  

• Apple Is Entering Its Slop Era
  In an opinion piece for 404 Media, Matthew Gault argues that Apple has entered its "slop era," abandoning its reputation for innovative hardware in favor of recycled ideas and questionable design choices. Here's an excerpt: My ears perked up when I heard Apple's new foldable phones were cracking. I licked my lips when the company announced it's releasing a touch-screen laptop. This was a company that once charged $19 for a polishing cloth, asked $200 for a VESA mount, and sold $700 wheels for the Mac Pro. Now it's borrowing tired ideas from its competitors and launching hardware its previous leaders rejected. The once dominant company is struggling to find its feet in an AI-driven post-Tim Cook world. John Ternus is the new CEO -- a 25 year veteran of the company with a track record of pushing harebrained hardware schemes like the much reviled Touch Bar and lawsuit inducing butterfly keyboard. With Ternus at the helm, I feel there's a good chance Apple's best days are behind it, that it will have to make do with less, that it's declasse. Apple, blindsided by AI and relying on crowdpleasing hardware gimmicks, is downwardly mobile. It's in its slop era. The company that once asked consumers to "Think Different" is now releasing hardware that's just like everything else on the market.
  
  
  Read more of this story at Slashdot.
  

• Meta Settles Another Social Media Addiction Case Just Before Trial
  Meta has reached an undisclosed settlement in another social media addiction lawsuit, avoiding a trial scheduled for next month and leaving Snap as the sole remaining defendant. Engadget reports: The lawsuit was brought by an 18-year-old woman from Mississippi known as K.D.B who, according to Reuters, has "described staying awake for hours scrolling social media, losing focus in class and engaging in self-harm using methods shown in social media videos." Jury selection kicked off earlier this week in Los Angeles. On Friday, K.D.B's lawyer announced that she had reached a settlement with Meta after previously settling with TikTok and YouTube. "We remain committed to improving safety for kids on social media apps and holding tech companies accountable, and we are pleased to have brought this matter to a just resolution on behalf of our client," attorney Emily Jeffcott said in a statement. Now, Snap is the only remaining defendant in the case. CEO Evan Spiegel is expected to testify in the trial that could last several weeks. If he does take the stand, it will be the first time the Snap founder has appeared in a social media addiction trial. Snap previously settled in another high-profile case involving similar claims. A jury later ruled against Meta and YouTube in the trial and the two were ordered to pay $6 million in damages.
  
  
  Read more of this story at Slashdot.
  

• Sam Altman Thinks Your PC Is Wasting Precious RAM
  "Looks like OpenAI CEO Sam Altman wants to own all the computing resources and rent out terminals to the world as a way of propping up his business plan, now that debt-ridden AI companies are teetering on the edge," writes ancient Slashdot reader Gilmoure. Tom's Hardware reports: In an interview over beers with the YouTube channel Cheeky Pint, Altman said that local inference, and, by extension, people having DRAM in computers at home, is "quite terrible." When discussing local inference on home computers with open-source models, Altman discussed the assumption that people will be able to run local AI on their own computers, the ones they may already own or want to build. Then he explained why that's a bad idea (at the 29-minute mark): "From a global allocation perspective, actually, it's quite terrible to have everybody have a bunch of the world's limited supply of DRAM sitting in their own computer and being used 5% of the time," Altman said. "You want maximum utilization in the cloud if you're trying to deal with this very supply-constrained environment. And somehow many people's intuition is the opposite of that." While OpenAI does have some open-source models, its primary business is in closed-source models that run in data centers, so he's really defending the company's business model. OpenAI isn't exactly threatened by some laptops and gaming rigs just yet, but local AI could mean people one day paying less for subscriptions to models like GPT-6 Luna if they have the power to run them at home. Altman's talk suggests that the company would prefer that more RAM go to OpenAI's data centers rather than home computers, which also sparks enthusiast fears of not being able to own your own hardware or software, but rather rent an agent and a computer in the cloud.
  
  
  Read more of this story at Slashdot.
  

• Thousands of 'Ghost Students' Use AI to Steal Millions In Student Loans, DOJ Says
  The Justice Department has charged five people in a crackdown on "ghost student" fraud, in which scammers allegedly use stolen identities and AI to enroll fake students in colleges, complete coursework, and collect federal student loan funds. Ars Technica reports: In a press release Thursday, the Department of Justice said it had uncovered a large-scale scheme relying partly on AI. The DOJ seized more than $750,000 in cryptocurrency from "a network associated with Kenyan nationals" after data analysis helped flag likely fraudsters. Assistant Attorney General Colin M. McDonald of the DOJ's National Fraud Enforcement Division credited new fraud-detection measures implemented by the Trump administration for the arrests. He said that "this is the first international seizure of its kind in Kenya," while warning fraudsters that the crackdown has only just begun. [...] At a press conference, McDonald was joined by FBI and Department of Education officials to explain how the scheme works. It starts with bad actors purchasing personally identifiable information (PII) of Americans -- most frequently targeting high school graduates who never attended college and went straight into the workforce. Once they have that sensitive data, they fill out the Free Application for Federal Student Aid (FAFSA) while seeking to enroll in universities and community colleges. If accepted, student aid is distributed first to schools to cover tuition and fees, but any leftover money is deposited into bank accounts controlled by the fraudsters. Dozens of Americans have opened bank accounts to act as money mules for fraudsters, the DOJ said. To keep money flowing, bad actors use AI to fill out applications, complete coursework, and even make it appear that a student is attending virtual sessions. "It looks like the ghost student is actually completing the class," McDonald said at the press conference. "Some even create the appearance of a fake student in an online classroom to trick schools into believing a real person is present. The goal is to keep the ghost student in school for as long as possible, semester after semester after semester." So far, the DOE has "identified over 830,000 potentially fraudulent federal student aid accounts created by using this PII of US citizens," officials said at the press conference. If all those accounts are ghost students, total losses come close to $130 million, the DOJ said.
  
  
  Read more of this story at Slashdot.
  

• US Tech Stocks See Sharp Falls As AI Spending Nears $1 Trillion
  U.S. technology stocks plunged for a second consecutive day on Friday as investors grew increasingly concerned about the enormous cost of artificial intelligence development and whether those investments will pay off. The Nasdaq fell more than 3.5%, while Intel shares dropped as much as 30%, Reddit fell 26%, and Alphabet extended its losses after shedding more than $500 billion in market value Thursday. The BBC notes that Meta, Alphabet, Oracle, Amazon, and Microsoft have collectively committed to spending $800.6 billion on AI in 2026. From the report: Chris Low, from investment management firm FHN Financial, said the bulk of what was happening in the stock market was in reaction to some of the biggest tech players such as Amazon and Google. He told Reuters the companies were "showing some pretty significant growing pains as they aggressively pursue the AI build-out." "The thinking is that these signs suggest that the entire sector is going to slow down." Kathleen Brookes, research director at trading firm XTB, said there have been many ups and downs in AI trade in recent months. "Investors have turned ruthless, punishing any signs of disappointment in [third quarter] earnings," she said. "The AI trade has had a good run in recent years, but now investors want payback, and companies like Alphabet and Intel are in the crosshairs." [...] Brookes noted that November is typically a strong month for stocks. "If we see AI stocks continue to struggle in the coming days, it could suggest the AI trade is past its peak, and investors will be looking for a new theme to drive markets," she said.
  
  
  Read more of this story at Slashdot.
  

• GM Reaches $220 Million Settlement Over Selling Drivers' Private Data
  An anonymous reader quotes a report from TechCrunch: General Motors will pay $220 million to 36 states to settle allegations that it illegally sold private driving behavior and location information to data brokers. As part of the settlement, GM must get drivers' express consent before it collects or shares their driving and location data -- terms that are in line with separate agreements it previously reached with California and the Federal Trade Commission (FTC). This settlement does contain a new requirement that GM must have a third party assess the automaker's compliance with the privacy program it has put in place. The agreement announced Thursday settles a lawsuit brought by a coalition of attorneys general from 36 states that alleged GM had sold the information to data brokers, which in turn then sold it to insurance providers. "This agreement addresses Smart Driver, a product we ended in 2024, and reinforces steps we've taken to strengthen our privacy practices," GM said in an emailed statement. "Safer, more helpful and personalized experiences are enabled by connected vehicle data, and GM is committed to being clear about what information is used, how it's protected, and the choices customers have about what they share." The settlement comes more than two years after a New York Times report showed how GM and OnStar collected, used, and sold drivers' precise geolocation data and driving behavior to third parties, including data brokers LexisNexis and Verisk. The data was collected through GM's Smart Driver program, a free feature contained within its connected car apps that tracked and rated driving behaviors and seat belt use. Data brokers sold this information to insurance providers, which could affect customers' rates, the NYT reported at the time.
  
  
  Read more of this story at Slashdot.
  

• UK Social Media Ban May Lock Out More Than 100,000 Teens Without ID
  Under the UK's planned social media ban, more than 100,000 British teenagers aged 16 and 17 could initially be locked out of social media because they lack a passport or driving license that may be needed as a fallback for age verification. The Guardian reports: Ofcom, the UK's online watchdog, said about 150,000 16- to 17-year-olds do not own a passport or driving licence, which are likely to be needed to access age-restricted platforms. The Australia-style ban on under-16s accessing social media services, including Instagram, TikTok and YouTube, is due to come into force next spring. The head of Ofcom, Melanie Dawes, said "motivated children" would seek to bypass the restrictions, as has happened in Australia. On Thursday, Ofcom published an assessment of age verification measures that could underpin the ban, outlining four "highly effective" methods: checking a person's official ID against a live selfie, a bank verifying an account holder's age, an official digital ID service like the Young Scot card, or estimating someone's age via a selfie. However, the watchdog said a form of official ID would probably be needed as a "backstop" for other methods, such as facial age estimation, which could be inaccurate by several years. Ofcom said a cohort of 16- to 17-year-olds could miss out as a result. "This means that people without a form of photo ID will likely need to take steps to obtain one to access age-restricted services," the regulator said. The report notes that more than nine out of 10 Britons over 16 have passports or driving licenses. "We should expect that motivated children will seek to bypass the restrictions -- just like alcohol laws can't completely eradicate underage drinking -- but there'll be ways for platforms to mitigate this risk," said Dawes. "This will be a huge cultural shift for our society, so it'll take time to adjust, and everyone will have a part to play."
  
  
  Read more of this story at Slashdot.
  

• Reddit Will Force Everyone to Log In
  Reddit plans to require users to log in to browse the platform, ending its longstanding practice of allowing anonymous visitors to access posts and discussions. According to CEO Steve Huffman, a key reason behind the decision is to curb unauthorized scraping and automated traffic. "This is a big change for Reddit, where we've allowed logged-out access to basically all of Reddit for the last two decades," Huffman says. "And I don't know about you, but as someone whose life has been defined by the open internet, it's a big change for me. But I've come to the conclusion that this is the right decision for our platform and the right decision for our business." The Verge reports: There's no definitive timeline on when this change will roll out to all users, or how the site will work if you're logged out. (If I send my friend a link to a thread and they aren't logged in, what will they see?) To start, Reddit will test the logged-in requirement in "select markets outside the US" in the "coming months," according to CEO Steve Huffman. "We'll look at the impact on the user experience, on our business, and on the whole Reddit ecosystem, figure out where the right boundaries are, and go from there." Reddit has also rebuilt and is rereleasing the Reddit app's incognito mode. Huffman claims the login requirement is better for Reddit's user experience and its ads business and is "more protective of Reddit data." The "vast majority" of unauthorized Reddit access happens "through our logged-out experiences," though the company will still strike licensing deals of its data with companies, like the deals it made with OpenAI and Google in 2024. Huffman notes that Reddit does not need to know a logged-in user's identity -- "Honestly, we don't want to know" -- just that the user is logged in at all. And he says that more logged-in users lets the company deliver "more relevant ads."
  
  
  Read more of this story at Slashdot.
  

• Binance Suffers Biggest Crypto Hack In History With $6.3 Billion Affected [UPDATE]
  UPDATE 10/30/26: Binance has temporarily suspended customer withdrawals after suffering what investigators say is the biggest crypto hack in history. According to Binance CEO Yi He, the company estimates roughly $6.3 billion in funds were impacted, with roughly $3 billion in assets frozen on-chain so far. Rest assured, "your money is safe, and we're covering every loss," said co-CEO Richard Teng in a LinkedIn post. "This was a complex attack," said Teng. "The attacker also used a self-destruct mechanism that destroyed tooling and tracers, making it more difficult for us to trace." From a report: Teng said the incident was not carried out by one person. While the initial investigation indicated the involvement of a compromised laptop, further digging revealed additional points of breach. [...] Blockchain analysis firms TRM Labs and Elliptic have linked the theft to North Korean hackers, with TRM attributing it "with high confidence" to a group known as TraderTraitor, the same group responsible for last year's Bybit hack. Elliptic estimated Friday that about 44% of the stolen assets have been frozen, with stablecoins accounting for nearly all of those funds. The firm estimated that attackers still controlled over $3 billion in crypto that token issuers cannot directly freeze. The hackers appear to have compromised Binance's wallet-signing infrastructure, allowing them to authorize transactions that drained billions of dollars in cryptocurrency across multiple blockchains, according to the firms. Binance, in its preliminary stage, has conducted an investigation into the hack, which suggests the incident may have begun with a compromised engineer's laptop. The exchange added that it has found no evidence that wallet passwords were leaked. Below is the original story from yesterday, Oct. 29th. Binance is investigating a potential hack after more than $2 billion in crypto was drained from one of its wallets into a new external account, with Blockaid estimating nearly $3.3 billion was moved. "Our teams are aware of reports of a potential security issue and are actively investigating," said Binance on X. "User funds are safe," said Binance founder CZ. "It does look like a hack on Binance. Appreciate the quick freeze from Tether (~$971m) and Circle (~$823m). I don't manage Binance anymore, but as a shareholder, I expect all user funds will be fully covered." At around the same time, crypto-based prediction market Polymarket reported its own security incident that wiped out around $2.7 million in user funds.
  
  
  Read more of this story at Slashdot.
  

• The Tragedy of Losing Your Wikipedia Page
  An anonymous reader quotes an excerpt from a Wired article that explores the often-contentious process of nominating pages for deletion when their subjects fail to meet the encyclopedia's notability standards: What do you need to know -- need to know -- about Xavier Trudeau? The eldest son of former Canadian prime minister Justin, the teenage Trudeau has recently begun performing R&B under the mononym Xav. But, with all due respect to Xav, do those facts make him a person of note? Should you expect to be able to read about him on Wikipedia? What about Evanescence guitarist Tim McCord, or 2012 Yachtmaster of the Year Rainer Holtorff? All three have had a biography on Wikipedia; all three of those biographies were considered for deletion this year on the grounds that the subjects were not notable enough to warrant a biography at all. Every day, dozens, sometimes hundreds, of Wikipedia biographies -- of child actors turned LA realtors, retired ambassadors, soccer players who have played less than 10 minutes of professional soccer -- are purged from the world's free encyclopedia. It's not as though Wikipedia, which hosts over 7 million articles in the English language, doesn't have the space. But Wikipedia has only so many volunteers to monitor its contents. To this day, Wikipedia editors are discovering hoaxes that have gone undetected for decades. The time it takes to verify the release dates of Xav's three singles is better spent -- the logic goes -- by asking whether the American Civil War officer Nathaniel Lyon really drank mustard during battle, as was claimed in his Wikipedia biography for 17 years. Wikipedia removed the mustard claim, not because it was proven wrong, but because there was no reliable evidence for it. "We're not really looking for what's true," Britta Gustafson, who has been editing Wikipedia since 2001, told me. "We're looking for what's verifiable." Wikipedia editors do not themselves decide that a person is not notable, only that there is a lack of reliable evidence to support the claim...
  
  
  Read more of this story at Slashdot.
  

• First Wired XR Glasses Powered By Android XR
  XREAL has launched the AURA, its first wired augmented reality glasses powered by Google's Android XR platform. They feature transparent Micro-OLED displays, a 70-degree field of view, Gemini AI integration, and a Snapdragon Reality Elite processor. TechPowerUp reports: The device is built around a simple idea: your apps, screens, entertainment, and AI assistant should be able to come with you wherever you go. On day-one, users have access to millions of familiar mobile apps and games from Google Play, alongside many experiences specifically for XR. Android XR brings familiar hand and voice inputs to AURA, while Gemini makes the experiences more natural and intuitive by working across what users see and do. With Wired Mirroring, users can plug a computer or handheld gaming console directly into XREAL AURA via USB-C and instantly turn it into a massive private spatial window. That means a laptop, handheld gaming device, or other compatible USB-C device can sit alongside native Android XR apps in a user's spatial workspace. Whether turning a plane seat into a private multi-monitor setup, watching a movie on a large virtual screen, or playing Android and console games in an immersive spatial environment, XREAL AURA is designed to make spatial computing practical, portable, and useful. [...] For work, AURA creates a portable multi-window workspace without requiring a physical monitor. Users can open Android XR apps, mirror a laptop, place windows in virtual space, and use Gemini to help understand or act on what is on screen. For entertainment, AURA becomes a private theater on demand. Users can access familiar streaming apps, expand content into a large virtual display, and use electrochromic dimming to create a more immersive viewing experience while remaining aware of their surroundings when needed. For play, AURA supports Android games and compatible mirrored gaming devices, enabling users to play on a large and immersive private display. The glasses are available to order today, with limited-time pricing starting at $1,099 for the 12GB RAM and 256GB storage model. Devices are expected to begin shipping in mid-November.
  
  
  Read more of this story at Slashdot.
  

• Proton CEO Is In 'Full AI Psychosis'
  According to 404 Media, Proton CEO Andy Yen is aggressively pushing AI adoption while fostering what workers describe as a culture of fear that discourages raising security concerns or challenging leadership. The investigation is based on interviews with eight current and one former Proton employees, as well as internal Slack chats, meeting recordings, and an AI manifesto written by the company's CTO. Longtime Slashdot reader devnulljapan summarizes the findings: Engineers at Proton, which makes the encrypted email service Proton Mail and a suite of privacy- and security-focused products, including an encrypted drive service, an authenticator app, and a password manager, are being pushed to "stop lovingly handcrafting all our code and use AI more." Workers describe an environment where employees have genuine concerns about security or being asked to develop security products with AI but feel unable to voice them, lest Yen berates them in front of everyone or threatens their employment at the company. "The CEO is in full AI psychosis and has been for a while now," one of the sources told 404 Media. Yen reportedly dismissed an employee's request for additional security testing before releasing new code, calling it "bullshit and loser thinking" and insisting that "only losers think like that." In a separate exchange over Proton's post-quantum encryption rollout, Yen criticized how the company communicated the feature's limitations and told employees that "perception is more important than truth, the truth doesn't matter if you don't win on perception." "The train is coming, get onboard or get crushed. Don't be the professional fax machine operator in the internet age," Yen wrote to the security Slack channel. "I think by the end of this year most developers stop programming and start writing specs for tests that AI will code and run, to validate AI written code that humans will no longer be able to review. This will be the last year that we hire engineers, and starting next year we hire what we used to call product managers, to build things with AI."
  
  
  Read more of this story at Slashdot.
  

• Security: Why Linux Is Better Than Windows Or Mac OS
  Linux is a free and open source operating system that was released in 1991 developed and released by Linus Torvalds. Since its release it has reached a user base that is greatly widespread worldwide. Linux users swear by the reliability and freedom that this operating system offers, especially when compared to its counterparts, windows and [0]

• Essential Software That Are Not Available On Linux OS
  An operating system is essentially the most important component in a computer. It manages the different hardware and software components of a computer in the most effective way. There are different types of operating system and everything comes with their own set of programs and software. You cannot expect a Linux program to have all [0]

• Things You Never Knew About Your Operating System
  The advent of computers has brought about a revolution in our daily life. From computers that were so huge to fit in a room, we have come a very long way to desktops and even palmtops. These machines have become our virtual lockers, and a life without these network machines have become unimaginable. Sending mails, [0]

• How To Fully Optimize Your Operating System
  Computers and systems are tricky and complicated. If you lack a thorough knowledge or even basic knowledge of computers, you will often find yourself in a bind. You must understand that something as complicated as a computer requires constant care and constant cleaning up of junk files. Unless you put in the time to configure [0]

• The Top Problems With Major Operating Systems
  There is no such system which does not give you any problems. Even if the system and the operating system of your system is easy to understand, there will be some times when certain problems will arise. Most of these problems are easy to handle and easy to get rid of. But you must be [0]

• 8 Benefits Of Linux OS
  Linux is a small and a fast-growing operating system. However, we can’t term it as software yet. As discussed in the article about what can a Linux OS do Linux is a kernel. Now, kernels are used for software and programs. These kernels are used by the computer and can be used with various third-party software [0]

• Things Linux OS Can Do That Other OS Cant
  What Is Linux OS?  Linux, similar to U-bix is an operating system which can be used for various computers, hand held devices, embedded devices, etc. The reason why Linux operated system is preferred by many, is because it is easy to use and re-use. Linux based operating system is technically not an Operating System. Operating [0]

• Packagekit Interview
  Packagekit aims to make the management of applications in the Linux and GNU systems. The main objective to remove the pains it takes to create a system. Along with this in an interview, Richard Hughes, the developer of Packagekit said that he aims to make the Linux systems just as powerful as the Windows or [0]

• What’s New in Ubuntu?
  What Is Ubuntu? Ubuntu is open source software. It is useful for Linux based computers. The software is marketed by the Canonical Ltd., Ubuntu community. Ubuntu was first released in late October in 2004. The Ubuntu program uses Java, Python, C, C++ and C# programming languages. What Is New? The version 17.04 is now available here [0]

• Ext3 Reiserfs Xfs In Windows With Regards To Colinux
  The problem with Windows is that there are various limitations to the computer and there is only so much you can do with it. You can access the Ext3 Reiserfs Xfs by using the coLinux tool. Download the tool from the  official site or from the  sourceforge site. Edit the connection to “TAP Win32 Adapter [0]

• Sculpt OS 26.10 releases
  Sculpt OS 26.10 brings quite a few new features, like scalable cursors, support for UK keyboards, better webcam support, and more, but the real meat of this release is much tastier. First, Sculpt 26.10 is the first version based on Genodes custom microkernel instead of relying on a 3rd-party kernel. This kernel  designed from the ground up for the needs of Genode and Sculpt OS in particular  is not only more micro! than any other of the microkernels supported by Genode, it also solves long-standing deficiencies concerning CPU scheduling and kernel-memory management. Sculpt OS finally stands on Genodes own footing! Finally, Sculpt OS 26.10 pays tribute to this years overall theme of building bridges! by featuring our software development kit (Goa SDK) running directly on Sculpt OS without virtualization. This entails a wealth of tooling including GCC, Binutils, Git, Sequoia, Expect, Curl, man, Make, and CMake having landed on Genode. Although still young and not time-tested yet, it shows whats possible today and allows us developers to gradually shift more and more development routine into this self-hosted environment, stressing the general-purpose qualities of Genode and motivating further optimizations. ↫ Sculpt OS release 26.10 announcement This new release also completes the transition from XML to Genodes own HID language for configuration, moves from VirtualBox 6 to 7, and upgrades a whole slew of its Linux-based drivers

• How long do you need to hold down the power button to turn off a PC?
  Raymond Chen published another story from the Windows development trenches, this time about what happens when you hold down the power button. If you hold a PC’s power button for 12 seconds, it will turn off at the hardware level without notifying the operating system. This is a safety feature so that you can turn of the computer even if the operating system’s “Shut down” command isn’t working. After eight seconds of the power button being held down, the Windows kernel realizes that the user is trying to do a force-power-off of the system, and it quickly takes a kernel dump that can be uploaded to the Windows Error Reporting service the next time you turn the system on. ↫ Raymond Chen Im a bit confused by these numbers, because I have never seen a PC take this long to power off when holding down the power button; usually it takes only a few seconds to do so, meaning Windows would never generate said kernel dump. I tried reading through the various ATX specification documents to find more information on this, but then I remembered Im not an electrical engineer so I have no idea what Im looking at. The baseline is that ATX always provides standby power to the motherboard, and pressing the power button shorts the power button pin to ground, telling the PSU to power on fully. Pressing the power button if the computer is running tells the operating system to initiate a shutdown (although you can change this behaviour), but if you hold the button down for a certain number of seconds, it forces a power-off. So far, so good; basic information. It seems that the length of time you need to hold down the power button to force a power-off is dependent on the motherboard in question, handled by a microcontroller or some other IC. Virtually every source I can find says this timing is set to about 4-5 seconds, which is quite a bit shorter than the number of seconds given by Chen. Perhaps motherboard manufacturers consider the 12 seconds to be too long, and just do their own thing, regardless what the ATX specification suggests? What further complicates matters is that Chen details how the kernel dumps created after pressing the power button for 8 seconds do, in fact, get sent to Microsoft once the computer turns on again. In fact, he is one of the people who gets to see these dumps and respond to them, so obviously they are indeed rolling in. Does this mean theres a huge number of computers out there that require you to hold down the power button for 12 seconds to force a shutdown that nobodys ever seen? These emergency kernel dumps are internally classified as “long power button hold” (LPBH) failures. One of the pieces of information recorded in these emergency kernel dumps is whether the screen consists entirely of black pixels. Those failures are sub-classified as “black screen LPBH”, and they go to a special virtual team for analysis. (I happen to be a member of this black screen LPBH team.) ↫ Raymond Chen Whats going on here? Obviously, Im not going to doubt Chen, so there must be something here I dont quite understand or that Im missing. The ATX specification might suggest 12 seconds, but could Windows perhaps adapt its kernel dump behaviour  dumping much sooner than 8 seconds  based on the motherboard its running on, maybe through information provided by the chipset drivers? I would love it if someone more knowledgeable than me can help us unravel this small mystery.

• How curl was accidentally Turing-complete for nine months
  From curl 8.12 through 8.16, config files could slice variable values and include other config files without an explicit depth cap. Together, these features let curl simulate any two-counter Minsky program. Under the usual idealization of unbounded strings and resources, this construction was Turing-complete. Curl 8.17.0 added a five-level include cap that breaks this reduction. ↫ Nicolas Seriot Neat.

• AlpineBSD combines NetBSD with Alpines apk package manager
  AlpineBSD is an operating system based on the NetBSD kernel with a userspace inspired by Alpine Linux and the objective of making it possible to use as little AI-generated software as possible. There is no LLM output included in the base system or main package repository (AlpineBSD AI policy). ↫ AlpineBSDs website AlpineBSD uses the NetBSD kernel, libc, and essential tools, and combines them with Alpines apk-tools package manager, busybox, and generlaly preferring GNU tools over their BSD equivalents. It uses the s6 init system, but the project intends to add OpenRC as an alternative. The project is in its very early stages, so dont expect things like an installer; youre on your own, basically.

• My favourite PowerMac is a Nintendo Wii!
  The Nintendo Wii (and its related consoles) were already made to run the PowerPC version of Windows NT as well as Mac OS X, but now we can add another milestone to the list: classic Mac OS. So today I reached a nice milestone in one of my projects: my work porting classic Mac OS to PowerPC systems with what I affectionately call ArtX chipsets (Nintendo GameCube, Wii, eventually Wii U; the GameCube’s Flipper integrated chipset was very much designed by ArtX as it was effectively finished when ATI acquired the company, and the Wii’s Vegas (and its later revision Bollywood) and Wii U’s Latte are effectively straight successors) reached the desktop for the first time, most likely the first time since the CHRP clone era that someone outside of Apple brought up classic Mac OS on a new system to the desktop. Despite still being nowhere near ready for a public release, I want to talk about the challenges I faced with this project so far. ↫ Rairii at Virtuallyfun Various versions of Mac OS boot to the desktop, including Mac OS 9.2.2, the last ever version, but theres still a ton or work to be done before this is ready for release. Still, with Rairii amazing track record of porting all kinds of things to various PowerPC machines, including getting the PowerPC version of Windows NT to run on various PowerPC Macs, I have little doubt theyll manager to get this to a releasable state. I absolutely love this kind of work.

• Microsoft hopefully fixes Modern Standby and adds online Windows reinstallation
  I think its safe to say that Windows Modern Standby feature isnt exactly free from issues. The biggest problem seems to be that its not very good at actually determining when to transition between regular sleep and hibernation, often leaving users with an empty battery as they open their laptops lid. Microsoft has now released an update to hopefully address this long-standing problem. This update improves the adaptive hibernate policy to provide more instant-on resumes from Modern Standby while helping preserve battery life when the charge is low. Noticeable changes include less hibernation while the battery is above 80% and hibernating sooner when the battery is below 10%. ↫ KB5127936 Among other new features and changes this update brings are Cloud Rebuild, a way for devices to install Windows without needing a local image. Cloud Rebuild can be started form within an existing installation, remotely by administrators, or through the Windows Recovery Environment. Obviously, a working internet connection, wired or wireless, is required for this feature to work. This is the same update that introduces CLAT, which we talked about yesterday, to smooth the transition from IPv4 to IPv6.

• NetBSD adds nano-like text editor to base system
  Flag LinuxNetBSD made a seemingly small, but very welcome announcement today: theyre adding a more user-friendly, easier to use command-line text editor to the base install. To ease the transition for new users, NetBSD -current now includes an alternative editor to vi(1) and xedit(1) in its base system, atto(1). It is a modeless screen-based editor similar to nano, pico, xedit, or emacs. It is only 48 kilobytes, making it suitable for inclusion in the rescue system. ↫ NetBSD Foundation on Fedi Most guides and how-to article for operating systems like NetBSD assume the use of vi, and while I dont want to ignite a flamewar, vi isnt exactly the most approachable or friendly piece of software out there. My occassional text editing in the command line is all done through nano, but now Im definitely curious to give atto a go. While other tech news websites are plastered with articles about a PC maker adding a touch screen to one of their laptops, were talking about a new CLI text editor in NetBSDs base system. Priorities, folks.

• Windows CLAT is now generally available
  Windows 11 25H2, starting with build 26200.9550, now comes with something called CLAT. As organizations move toward IPv6-only and IPv6-mostly networks, some applications still depend on IPv4-only applications or services. Windows CLAT helps those applications continue to work when a network does not provide native IPv4 connectivity. CLAT is the client-side component of`464XLAT. It statelessly translates IPv4 traffic from the Windows client into IPv6 for transport across the network to a provider-side translator (PLAT), which provides stateful NAT64 translation to IPv4. ↫ Jim Alumbaugh at Microsofts Networking Blog Yet another important component of the long, neverending transition to IPv6. Like endlessly cutting a cucumber in half, youll never quite run out of cucumber to cut.

• Sylphide OS: an operating system for computers based on microcontrollers
  Do you want a hobby operating system with a desktop for a microcontroller-based computer? Sylphide OS is a new project aiming to build just that. For the last few weeks, I’ve worked on a new pet project: an operating system for computers based on microcontrollers. There aren’t many yet, but I expect them to be more and more common. Why MCU computers ? You get a relatively very simple platform, booting straight to your code (or almost), and you can understand the whole architecture. Exactly as it was with home computers long ago. And not at all what you get with modern computers. Even booting involves lot of very different systems, black magic, and even blog/proprietary software. ↫ Thomas Capricelli Its very early in development, but by building it atop FreeRTOS, Capricelli had a head-start. Its got a basic desktop, one that might need some changes to avoid the lawyers. The codes open source, of course.

• Oldest GUI application that still runs on Windows 11
  Whats the oldest Windows GUI application you can still run on Windows 11 today, without any modifications? For now, the best answer Boris Popik can come up with is an innocuous application from build 347 of Windows NT 3.1, an early prerelease: CDPLAYER.EXE. You cant go any older than that, because earlier prerelease builds had not yet finalised its PE format and calling convention. Neat find. Popik also mentions a few other contenders, but I wont spoil those here.

• Another month of Redox improvements
  Another month has crumbled to dust under the oppressive boots of time, so its time for another month of Redox improvements. This past month, Redox build system gained support for Clang, SDL2 saw performance improvements, and WebKitGTK3s HTML layout rendering was fixed. Users of Intel Tiger Lake processors can now enjoy external display hot-plugging, and overall system performance has been improved in a variety of ways. And as always, theres the long lists of kernel, relibc, and driver improvements and fixes as well. Redox keeps making big strides every month, and its definitely one of the few alternative operating systems that actually feels like it might, one day, be an actual contender for general purpose use.

• Microsoft.UI.Reactor: a C#-first way to build WinUI apps
  Thew day ends in a Y, so Microsoft is launching a new way to build Windows applications. Get excited, Windows application developers! If you caught our session at Microsoft Build 2026 or you’ve been watching the repo, you’ve seen this one taking shape in public for a while now, and a lot has changed since Build. Here’s the longer tour: Microsoft.UI.Reactor, an experimental C# framework that brings the MVU (Model-View-Update) pattern to WinUI desktop apps. No XAML files, no code-behind, no ViewModels. Two things before the fun part. Reactor is experimental: no support policy, no API guarantees, published this early on purpose because we’d rather hear we got the design wrong now than once people have shipped on it. And it is not a replacement for XAML or MVVM, which we’ll come back to. ↫ Alexandre Zollinger Chohfi at Microsofts Dev Blogs At multiple points in the linked blog post, Microsoft underlines that no, Reactor is not going to replace XAML. Im sure Windows developers who learned Win32, Silverlight, WinRT XAML, WPF, UWP, WinUI 2 and 3, and all the others, over the past two decades will feel deeply comforted by Microsofts insistence that Reactor will not replace XAML. Microsoft repeats: this wont replace XAML. They swear.

• MacOS Extensions pack for the Apple Network Server v1.0
  Weve been following along with Carmen Kaisers Apple Network Server exploits, and by now things are really starting to come together for owners of this machine. When we last left off, the ROM to allow Mac OS to run on the machine which normally runs IBMs AIX, but there were still a number of bugs, limitations, and issues to be worked out. A lot of progress on that front has been made. The good news is, many of the issues with the preproduction ROM in Mac OS can be fixed or worked around in software. So Ive fixed or worked around many of them in software: the MACE Ethernet is fixed, the on-board video is now supported, and the ANS can restart properly back into Mac OS. Plus, because its the preproduction ROM, you can still boot AIX, thus preserving the entire historical reason for Shiners existence. Heres the first cut of that software and how it was developed. ↫ Cameron Kaiser Theres still two issues Kaiser wishes to address  the internal SCSI bays dont work, and the ROM doesnt properly register parity RAM  but the progress here is amazing.

• CoW, which (sort-of) brings FVWM to Wayland, reaches version 0.4
  Thomas Adam, one of the core developers of FVWM, has been working on CoW for a while now. CoW can best be described as FVWM for Wayland!, which uniquely uses the River compositor. River, in turn, is unique in that it does not combine the compositor and window manager into a single program, allowing for a more traditional X11-like approach. Adam released version 0.4 today, which comes with a load of fixes, changes, and minor improvements, as well as one bigger-ticket item: container windows. This PR introduces the concept of a top-level container window. This means a window can be subdivided into columns and rows (called panes) and can be resized independently of one another. The idea for this has been unashamedly stolen from shod. ↫ Thomas Adam Ive been keeping an eye on CoW ever since I learned about it when it was first released, and at some point soon I want to build a desktop around it for myself.

• The many many missed opportunities of Sonic 06
  Speaking of games, if youve ever heard anything about or even played Sonic 06, you know this wasnt the most polished entry in the hedgehogs franchise. In fact, its probably one of the worst, and considering the average quality of Sonic games, thats quite an achievement. The team thats working on decompiling the game to make it run on the PC obviously had to dive deep into the games inner workings, and the process learned a lot about why, exactly, the game is so notoriously bad. It really makes you wonder what exactly went wrong? If you look at what limited footage we have of beta content, we can see many effects that aren’t present in the final game. Kingdom Valley had full bump maps, Castle Town had more complex geometry and plants, and New City’s collision implies a very different building layout at some point in development. It turns out, much of the cut content is actually still in the game, but is simply not enabled for performance reasons in vanilla. Even with the cut-back visuals, the game struggles to reach target FPS on real hardware. It’s not surprising that given the crunch Sonic Team were under to get the game out the door, these features were among the first to go. ↫ Isaac Marovitz The article details what, exactly, was turned off for the final release, and its quite an interesting read. Of course, the team intends to try and address many of these issues, and they think they can push the game and its engine to much greater heights.

• How to run a city builder on 16 MHz
  When thinking about impressive technical achievements in retro games, most people will first point to graphical milestones set by action games like Doom or Quake. Rightfully so, but at least I am personally far more impressed by the early examples of the city builder genre. Simulating whole economies on a large scale with a fraction of today’s power seems impossible if modern builder games even struggle on modern machines. Of course this didn’t stop developers in the past to develop and run city builder games on significantly weaker hardware. The original SimCity for example lists Intel’s 386SX as the CPU in it’s system requirements. A CPU which at the time of it’s launch ran at magnificent 16 MHz. ↫ Lars Thießen Whats even more impressive are some of the other systems the origin al SimCity was ported to, which had even more limited hardware than a 386SX. The Super Nintendo got a SimCity port, which even included fun extras like a Mario statue and Bowser taking up the mantle of the Godzilla disaster, and additional systems the PC version didnt have. Hell, they even worked on a port to the NES, but it was cancelled and thought lost, until a relatively complete and working copy was discovered in 2017. Even this NES version contained features not available in the PC version. Hardware limitations really did breed a lot of innovation back in those days, and sometimes I wonder if programmers and developers could benefit from tasking themselves with working within such limitations today, if only to become a bit more prudent with resources.

• KDE Plasma 6.8.2 Released With More KWin and Wayland Fixes
  by George Whittaker
  The KDE Project has released KDE Plasma 6.8.2, delivering another round of stability improvements for its Wayland-based Linux desktop environment. Released on October 27, 2026, the update arrives one week after Plasma 6.8.1 and two weeks after the anniversary release of Plasma 6.8, which marked 30 years since the KDE project's founding.
  
  This second maintenance release concentrates on correcting regressions discovered after the initial rollout. The largest collection of changes targets KWin, KDE's window manager and Wayland compositor, with fixes involving multi-GPU synchronization, display handling, pointer constraints, color pipelines, and window stacking. Additional improvements address disappearing desktop icons, application launcher behavior, remote desktop sessions, screen recording, accessibility, and system monitoring.
  
  Although Plasma 6.8.2 does not introduce major new desktop features, its corrections are particularly important because Plasma 6.8 completed KDE's transition away from native X11 desktop sessions. With Wayland now serving as Plasma's display foundation, improvements to KWin and its supporting components directly affect the reliability of the entire desktop environment.
  KDE Continues Stabilizing Its Anniversary Release
  KDE Plasma 6.8 arrived on October 14, 2026, coinciding with the project's 30th anniversary. The release introduced significant desktop changes, including the retirement of native X11 sessions, additional HDR improvements, expanded remote desktop capabilities, NVIDIA graphics optimizations, and further development of KDE's Union theming engine.
  
  The transition represented an important architectural milestone, but major desktop releases frequently expose problems that were not encountered during development or beta testing. Linux desktops must operate across numerous combinations of graphics hardware, display configurations, drivers, input devices, and applications. Even extensive testing cannot always reproduce every environment used by the wider community.
  
  KDE acknowledged this challenge during the development cycle following Plasma 6.8, noting that users had discovered regressions that were not reported during the beta period. Contributors responded with a substantial collection of fixes, many of which have now reached the stable 6.8 branch through its first two maintenance releases.
  
  Plasma 6.8.2 continues that stabilization effort. Rather than changing the desktop's overall direction, it improves the reliability of existing functionality and addresses issues that could affect everyday workflows. The release includes corrections across KWin, Plasma Desktop, Plasma Workspace, Discover, KRDP, KPipeWire, and several other components.
  Go to Full Article

• RefreshOS 3.1 Strengthens Its Debian Foundation With Independent Package Management
  by George Whittaker
  The RefreshOS project has released RefreshOS 3.1, bringing an updated Debian foundation, a dedicated software repository, improved 32-bit application compatibility, and several refinements to its KDE Plasma desktop experience. Released on October 27, 2026, the update advances the distribution's 3.x "Colorful Cosmos" series while introducing infrastructure that could significantly improve how RefreshOS delivers its own packages and configuration changes.
  
  The new release moves from Debian 13.4 to Debian 13.7 "Trixie", incorporates Linux kernel 6.12.113, and continues using KDE Plasma 6.3.6. However, the most important development is the introduction of an official RefreshOS APT repository with separate Stable, Testing, and Experimental channels. This gives the project a more structured way to distribute customized software while continuing to benefit from Debian's established package ecosystem.
  
  RefreshOS 3.1 also enables i386 architecture support, making it easier to install compatible 32-bit software and dependencies required by applications such as Steam. Additional changes address desktop localization, KDE integration, installer configuration, package permissions, and installation image cleanup. Together, these improvements represent an effort to make RefreshOS easier to maintain while preserving its focus on a ready-to-use Linux desktop.
  RefreshOS Builds on Debian's Stable Release Model
  RefreshOS is a Debian-based Linux distribution developed by eXybit Technologies, designed to provide a polished desktop environment without requiring users to configure every component manually. The project combines Debian's stable package foundation with KDE Plasma, preinstalled applications, hardware support, multimedia capabilities, and custom desktop styling.
  
  Unlike distributions that emphasize constant adoption of the newest software versions, RefreshOS prioritizes a relatively predictable desktop experience. Its Debian foundation provides access to established security maintenance, package management, and compatibility practices, while RefreshOS adds its own configuration choices to simplify everyday use.
  
  Version 3.1 continues that philosophy by incorporating Debian 13.7, the seventh point release of Debian 13 "Trixie." Debian published this update on September 12, 2026, primarily to consolidate security corrections and fixes for significant software problems. These point releases do not represent entirely new Debian generations. Instead, they refresh installation media and package selections so newly installed systems begin with a more current collection of fixes.
  Go to Full Article

• Tails 7.15.1 Blocks Compromised HTTPS Certificates in Urgent Privacy Security Fix
  by George Whittaker
  The Tails project has released Tails 7.15.1, an emergency security update addressing a compromised certificate authority that could allow attackers to impersonate legitimate HTTPS websites. Released on October 23, 2026, the update focuses on protecting users against a potentially serious man-in-the-middle attack involving certificates associated with eMudhra, an authority whose intermediate certificates were compromised.
  
  The emergency release updates Tor Browser to version 15.0.26, addressing CVE-2026-113470, and modifies the distribution's trusted certificate authorities to block all eMudhra certificates. These changes are particularly important for Tails because the operating system routes internet traffic through the Tor network, where malicious exit nodes or other network intermediaries could potentially exploit compromised certificates to impersonate secure websites.
  
  Unlike a conventional maintenance update, Tails 7.15.1 does not introduce major desktop features, new applications, or significant interface changes. Its purpose is to close a security gap that could undermine the authenticity of HTTPS connections. The developers recommend upgrading promptly, especially for users who rely on Tails for sensitive communications, anonymous research, journalism, or other privacy-critical activities.
  Why Tails 7.15.1 Was Released as an Emergency Update
  Tails, short for The Amnesic Incognito Live System, is a Debian-based Linux distribution designed to help users preserve their privacy and reduce traces of their computing activity. It typically runs from a USB stick and routes internet connections through Tor, making it useful for people who need stronger privacy protections than those provided by a conventional desktop operating system.
  
  The distribution also emphasizes minimizing persistent data. By default, Tails operates as a live environment and does not retain ordinary session activity after shutdown. Users who need to preserve selected files and settings can configure encrypted Persistent Storage on their USB device, allowing them to maintain important information across sessions without changing the operating system's general amnesic behavior.
  
  Because Tails is built around privacy and secure communication, problems involving HTTPS certificate validation deserve particular attention. Tor helps obscure the relationship between a user's network location and the websites they visit, but it does not automatically guarantee that every website encountered through an exit node is authentic. HTTPS provides an additional layer of protection by authenticating websites and encrypting communications between the browser and the destination server.
  Go to Full Article

• Omarchy 4.0.5 Released With Better NVIDIA Laptop Support
  by George Whittaker
  The Omarchy project has released Omarchy 4.0.5, introducing a substantial collection of hardware compatibility improvements, desktop performance optimizations, security fixes, and package updates for the Arch Linux-based operating system. Released on October 18, 2026, the update focuses on refining the existing desktop experience while preparing the distribution for its next major feature release.
  
  Among the most important changes are improved NVIDIA hybrid graphics support for laptops, an updated Linux 7.2.8 kernel featuring the BORE scheduler, and compatibility improvements for Qt 6.12. The release also resolves boot-related black screens, fixes audio problems affecting certain Dell and USB speaker configurations, corrects Steam graphics driver selection, and improves the reliability of several desktop utilities.
  
  Although version 4.0.5 is primarily a maintenance release, its improvements extend across many of the components that determine how smoothly a Linux desktop operates. From faster application launches and more responsive desktop panels to stronger security defaults and more reliable hardware detection, the update demonstrates Omarchy's continued emphasis on delivering a preconfigured Linux environment that requires relatively little manual setup.
  Omarchy Continues Refining Its Arch Linux Desktop Experience
  Omarchy is an opinionated Arch Linux-based distribution designed to provide a ready-to-use development and desktop environment built around the Hyprland Wayland compositor. Rather than presenting users with a minimal installation that requires extensive customization, Omarchy combines a carefully selected collection of applications, themes, keyboard shortcuts, and system configurations into a cohesive desktop experience.
  
  The distribution has attracted attention among developers and experienced Linux users who appreciate keyboard-driven workflows, tiling window management, and the flexibility of Arch Linux without necessarily wanting to configure every component manually. Its desktop environment emphasizes efficient navigation, integrated development tools, and a consistent visual design, while retaining access to Arch's extensive software repositories.
  
  Version 4.0.5 continues that approach by concentrating on problems that can interrupt everyday workflows. The release improves hardware compatibility, corrects regressions introduced by newer software packages, and reduces unnecessary delays in common desktop operations. Rather than introducing a dramatic redesign, the developers have focused on making the existing environment more predictable and responsive.
  Go to Full Article

• KDE Plasma 6.8 Marks 30 Years With a Major Shift to Wayland and a More Powerful Linux Desktop
  by George Whittaker
  The KDE Project has officially released KDE Plasma 6.8, introducing a substantial collection of desktop improvements while celebrating three decades of open-source software development. Released on October 14, 2026, exactly 30 years after Matthias Ettrich announced the original KDE project, this anniversary edition brings significant changes to display management, accessibility, graphics performance, remote desktop functionality, system monitoring, and application theming.
  
  Perhaps the most consequential development is KDE's decision to retire native X11 desktop sessions in Plasma 6.8, completing its transition toward Wayland as the primary display architecture. The release also introduces NVIDIA triple buffering by default, improved HDR support, a more capable remote desktop server, CPU affinity controls in System Monitor, and expanded capabilities for the experimental Union theming engine. These improvements reflect KDE's effort to modernize the Linux desktop while maintaining the customization and flexibility that have defined Plasma for years.
  
  Plasma 6.8 is therefore more than a commemorative release. It represents an important architectural transition for one of Linux's most widely used desktop environments, with changes that affect both everyday users and developers building applications for the next generation of Linux desktops.
  KDE Celebrates Three Decades of Open-Source Desktop Development
  KDE's history began on October 14, 1996, when Matthias Ettrich proposed creating a consistent graphical desktop environment for Unix-like operating systems. At the time, Linux was becoming increasingly capable as a free operating system, but its graphical experience remained fragmented. Users could choose from several window managers and applications, yet there was no universally integrated desktop environment comparable to the commercial graphical systems available elsewhere.
  
  The original KDE initiative sought to address that limitation by building a cohesive desktop around the Qt application framework. Over the following decades, the project evolved through several major generations, introducing increasingly sophisticated desktop technologies while expanding into applications, development frameworks, mobile interfaces, and other open-source projects.
  
  Plasma 6.8 arrives as KDE marks its 30th anniversary, but its development priorities are focused primarily on the future. Rather than introducing a purely cosmetic anniversary edition, KDE has concentrated on modernizing underlying desktop infrastructure while improving accessibility, usability, and performance. The result is a release that combines immediately visible enhancements with architectural changes intended to support future development.
  Go to Full Article

• Building a Reliable Event-Driven Payment Service With XRP Ledger
  by Emma Clapp
  Receiving a transaction notification is only the first step. Production software still has to decide whether that event is safe to turn into application state.
  
  A WebSocket callback can arrive in milliseconds. What happens afterward is harder. The Go to Full Article

• Linux Moves Closer to Retiring the x32 ABI After Years of Limited Adoption
  by George Whittaker
  Linux kernel developers are renewing efforts to retire the x32 application binary interface (ABI), a little-used compatibility feature that attempted to combine the advantages of 64-bit processors with the smaller memory footprint of 32-bit applications. A revised patch series submitted on October 8, 2026, proposes the first steps toward disabling the interface, potentially ending support for an architecture experiment introduced more than 14 years ago.
  
  The latest proposal comes from Sebastian Andrzej Siewior, a Linux kernel developer at Linutronix who has been working on the removal effort throughout 2026. Rather than immediately deleting every component associated with x32, the proposed approach would first prevent the feature from being enabled through normal kernel configuration. This would give remaining users and distribution maintainers an opportunity to respond before the underlying implementation is removed.
  
  The effort reflects a broader challenge in Linux development: maintaining compatibility with older or rarely used technologies while keeping the kernel manageable, secure, and efficient. Although x32 offered theoretical performance and memory advantages, it never achieved widespread adoption. With conventional x86_64 software dominating modern Linux systems, developers are increasingly questioning whether the additional maintenance burden remains justified.
  Understanding the Linux x32 ABI
  The x32 ABI was introduced with Linux kernel 3.4 in 2012 as an alternative to conventional 32-bit and 64-bit application environments. Its goal was to provide applications with access to the architectural improvements of x86_64 processors while retaining smaller data types and pointers associated with 32-bit software.
  
  Traditional 32-bit x86 applications use the i386 ABI, which operates with a more limited register set and 32-bit execution conventions. Standard x86_64 applications, meanwhile, benefit from additional general-purpose registers, wider registers, and modern calling conventions, but they normally use 64-bit pointers. Those larger pointers can increase memory consumption in applications that maintain large numbers of pointer-heavy data structures.
  
  The x32 ABI attempted to offer a compromise. Applications would execute using the x86_64 instruction set and its larger register file while retaining 32-bit integers, long values, and pointers. This programming model is commonly described as ILP32, meaning that integers, long integers, and pointers are all 32 bits wide.
  
  The distinction can be illustrated by comparing the expected sizes of common C data types:
  Go to Full Article

• Google's Kage Project Rethinks Linux Kernel Security With Isolated Device Drivers
  by George Whittaker
  Google is exploring a new approach to Linux kernel security that could significantly change how device drivers interact with the operating system. The experimental project, known as Kage, uses compiler-based sandboxing to isolate drivers inside the kernel, potentially limiting the damage caused by memory corruption, programming errors, and exploitable vulnerabilities without requiring drivers to run as separate user-space processes.
  
  The research was presented at the Linux Plumbers Conference 2026, held October 5–7, with Stanford University and Google researcher Zachary Yedidia discussing how LLVM's Lightweight Fault Isolation (LFI) technology can create restricted execution environments for native kernel code. Unlike conventional isolation techniques, which often depend on separate processes or virtual machines, Kage attempts to preserve the performance advantages of kernel-space execution while reducing the amount of memory individual drivers can access.
  
  Early prototypes have already demonstrated the concept using NVMe storage, networking, and Wi-Fi drivers. However, Kage remains an experimental research project rather than a feature available in mainstream Linux distributions. Its developers are still investigating performance, hardware access, and compatibility with more complicated drivers, including graphics hardware.
  Why Device Drivers Remain a Major Linux Security Challenge
  Linux device drivers are responsible for connecting the operating system to hardware components, including graphics cards, network adapters, storage controllers, USB devices, and wireless chipsets. Most traditional Linux drivers execute in kernel space, giving them privileged access to system resources and the ability to interact directly with hardware. This architecture is one reason Linux can deliver high performance across such a broad range of devices, but it also creates a significant security challenge.
  
  When an ordinary application encounters a memory error, the operating system can often terminate that process without affecting the rest of the system. Kernel drivers operate under different conditions. Because they typically share the kernel's address space and privileges, an invalid memory access or exploitable vulnerability can affect unrelated kernel components, potentially resulting in a system crash, privilege escalation, or complete compromise of the operating system.
  
  The challenge becomes more complicated when considering the enormous number of drivers supported by Linux. Some are maintained by large organizations with extensive testing infrastructure, while others receive contributions from smaller development teams or individual maintainers. Even carefully reviewed drivers can contain bugs, particularly when they interact with complicated hardware, asynchronous operations, and memory-management mechanisms.
  Go to Full Article

• Speech Synthesis on Linux: Adding a Voice to Scripts and Systems
  by George Whittaker
  Linux users have long had a pragmatic relationship with text-to-speech. The classic open-source engines have been available for years, wired into accessibility tools and the occasional script, dependable but unmistakably robotic. They do the job where the job is simply to convert text to some kind of speech, but the mechanical output has kept them out of anything where the voice actually matters. The arrival of high-quality speech synthesis delivered over an API changes what is possible, letting Linux users add genuinely natural voices to scripts, services, and applications without hosting a heavyweight model themselves.
  The Familiar Trade-Off
  Anyone who has used the traditional Linux speech engines knows the trade-off. They are free, local, and scriptable, which fits the Linux ethos perfectly, but the voices are clearly synthetic. For accessibility and for utilitarian tasks where intelligibility is all that counts, that has been acceptable. For anything user-facing where the quality of the voice shapes the experience, it has not.
  
  The alternative of running a modern, high-quality speech model locally is possible but comes with real costs: significant computational requirements, model management, and the ongoing maintenance of a demanding piece of infrastructure. For many use cases, particularly on servers, embedded systems, or ordinary workstations, that overhead is disproportionate to the need. This is the gap that an API-based approach fills, offering the quality of a large modern model without the burden of hosting one.
  The API Approach on Linux
  Delivering speech synthesis over an API fits naturally into how Linux users already build things. Rather than installing and maintaining a model, you make a request to a service and receive audio back, which you can then play, save, or pipe into whatever comes next. A Go to Full Article

• Archinstall 4.5 Released with AArch64 Support, Real-Time Kernels, and Major Installer Fixes
  by George Whittaker
  The Arch Linux project has released Archinstall 4.5, the latest version of its guided text-based installer, bringing expanded AArch64 support, new real-time Linux kernel options, additional translations, security improvements, and numerous fixes for installation workflows.
  
  Archinstall 4.5 was released on September 29, 2026, roughly three months after Archinstall 4.4. The new version arrives just ahead of Arch Linux's October installation media refresh and has already been packaged as archinstall 4.5-1 for Arch Linux repositories.
  
  While Archinstall remains optional, it provides users with a guided way to configure an Arch Linux installation without manually performing every step described in the Arch installation guide. Version 4.5 concentrates primarily on hardware support, installer reliability, security, and expanding the range of systems that can use the guided installation process.
  AArch64 Support Gets a Major Upgrade
  One of the biggest changes in Archinstall 4.5 is improved support for AArch64, the 64-bit ARM architecture.
  
  The installer can now handle GRUB and Limine EFI installations on AArch64 systems. It also gains support for the proper AArch64 root partition type GUID.
  
  Previously, parts of Archinstall's bootloader configuration were more heavily oriented toward x86_64 installations. The latest changes make its guided installation workflow more useful on ARM64 hardware.
  
  AArch64 has become increasingly important throughout the Linux ecosystem. The architecture can now be found in cloud servers, development boards, laptops, workstations, and specialized computing platforms.
  
  Supporting both GRUB and Limine EFI installations gives Archinstall more flexibility when preparing these systems.
  GRUB Can Now Be Installed on AArch64
  GRUB remains one of the most widely used Linux bootloaders, and Archinstall 4.5 extends its installation logic to AArch64 EFI systems.
  
  This allows ARM64 installations to use a bootloader workflow much closer to what Archinstall already provides on conventional x86_64 UEFI computers.
  
  The change doesn't mean every ARM device will automatically become compatible with Arch Linux. ARM hardware can still have highly platform-specific firmware and boot requirements.
  
  It does, however, remove an important Archinstall limitation for AArch64 machines that provide conventional UEFI environments.
  Limine EFI Support Expands to ARM64
  The same architectural expansion applies to Limine.
  
  Limine is a modern multiprotocol bootloader supported as one of Archinstall's bootloader choices. Archinstall 4.5 extends its EFI installation support to AArch64 as well.
  Go to Full Article