|
1825 Monetary Lane Suite #104 Carrollton, TX
Do a presentation at NTLUG.
What is the Linux Installation Project?
Real companies using Linux!
Not just for business anymore.
Providing ready to run platforms on Linux
|
Show Descriptions... (Show All)
(Two Column)
- Firefox 154.0 released
Version154.0 of the Firefox browser has been released. Changes includeextending local network access protections to WebSocket connections, moreflexible, per-site configuration of cookie and data clearing, and more.
- [$] Fedora prepares for the end of AF_ALG
The Linux kernel's user-space interface(AF_ALG) to the CryptoAPI has been linked to a number of recent high-profile security problems,including Copy Fail and successorvulnerabilities. It was deprecatedearlier this year. Eric Biggers, and other kernel developers,have been working to remove itfrom the kernel. With that in mind, the Fedora Project is planning torestrict use of AF_ALG in the next Fedora release in the hopes of nudgingremaining users of the API to prepare for its eventual removal.
- Security updates for Tuesday
Security updates have been issued by AlmaLinux (.NET 8.0, 389-ds:1.4, bind, haproxy, kernel, kernel-rt, libXfont2, nghttp2, and unbound), Debian (calibre, expat, ironic, and linux-6.12), Fedora (coturn, linux-firmware, php-phpseclib, and sqlite), Red Hat (fence-agents, osbuild-composer, pam, resource-agents, and sg3_utils), SUSE (ffmpeg, jetty-minimal, open-iscsi, python, python313-h2, python313-pysaml2, redis, redis7, rsync, sccache, texlive, and wasm-bindgen), and Ubuntu (engrampa, linux-aws-7.0, and linux-azure-fde-5.15).
- [$] Development statistics for the 7.2 kernel
Linus Torvalds releasedthe 7.2 kernel on August 17, after noting that the number of fixescoming in was still "bigger than I would have wished for". In fact,7.2 was one of the busiest development cycles in the kernel's history,adding nearly 600,000 lines of code. It's time to look at some statisticsto get a handle on how the kernel's development community is changing.
- [$] Bootstrappable builds: how and why
This year's edition of the Free and OpenSource Software Yearly conference, better known as "FOSSY", moved north to thebeautiful (and enormous) campus of the University of British Columbia (UBC)in Vancouver, Canada from its home for the three previous editions:Portland, Oregon, in the US. There were many different types of talks atFOSSY, from deeply technical kernel-track topics, through talks on legaland community issues, to the "FOSS in Daily Life" talks. In the "Toolchainsand Other Development Tools" track, Timothy Sample gave a presentationabout bootstrappable builds,which is somewhat less well-known than its cousin, reproducible builds, though LWNdid look at the topic just over two yearsago. In short, a bootstrappable build is one that starts with a tinyprogram that can build another slightly larger program, which can build yetanother, and so on, until the entirety of a modern Linux user space isbuilt from a small seed. Ultimately, it results in code with acompletely understood origin—unlike a typical Linux user space today.
- GNU poke 5.0 released
Version 5.0 of GNU Poke,a binary-data editor, has been released. This release includes anumber of improvements to the Poke compiler, additions to the Pokelanguage, as well as runtime and standard library updates. See belowfor the full list of changes.
- Mark J. Wielaard receives Distinguished Service Award in Software Freedom
The Software FreedomConservancy has announcedthat Mark J. Wielaard has been honored with the second annualDistinguished Service Award in Software Freedom for his many years ofservice to software freedom.
Mark is one of many key FOSS developers who has designed his career sothat his employers have funded much of his FOSS work. Nevertheless,Mark continues his volunteer work after hours as a key contributor whomaintains Sourceware — theoldest FOSS collaboration and developer infrastructure hosting site inhistory.
In addition to his work on Sourceware, Wielaard is a member of the DWARF Debugging Standard Committee,the maintainer for Valgrind and elfutils, as well as a contributor tovarious other GNU projects.
- Security updates for Monday
Security updates have been issued by AlmaLinux (.NET 8.0, .NET 9.0, bind, dracut, freerdp, gnome-remote-desktop, kernel, and nghttp2), Debian (apr-util, docker.io, ironic, neutron, postgresql-15, unzip, and util-linux), Fedora (chromium, jfrog-cli, jrnl, libgsasl, libsoup3, pdns, pdns-recursor, perl-Archive-Tar, php-pear-PHP-CodeSniffer, rust-bat, rust-git-delta, rust-git-interactive-rebase-tool, rust-lsd, rust-pretty-git-prompt, rust-tokei, and stunnel), Gentoo (haveged, HTTP-Daemon, nginx, NTFS-3G, Portage, PostgreSQL, and X.Org X server, XWayland), Oracle (.NET 10.0, .NET 8.0, .NET 9.0, bind, dhcpcd, dracut, grafana, iscsi-initiator-utils, kernel, nodejs:24, openssh, osbuild-composer, python-idna, ruby, and ruby4.0), Slackware (proftpd), and SUSE (7zip, afterburn, ansible-lint, bouncycastle, cargo-audit, cargo-c, chromedriver, chromium, containerized-data-importer, dnsdist, dracut-112, ffmpeg-9-libavcodec-devel, firefox, freetype2, git-cliff, glib2, go1.25, go1.26, google-guest-agent, google-osconfig-agent, gzip, himmelblau, java-1_8_0-openjdk, kernel, kernel-devel, kubeshark-cli, kubevirt1.9-continer-disk, libkrun, libXfont2, molecule, net-tools, nginx, nodejs22, nodejs24, open-iscsi, perl, pgadmin4, php-composer2, php8, python-httplib2, python-sh, python-ujson, python3-ansible-compat, python313-nltk, rrdtool, rsyslog, samba, spice-vdagent, sssd, webkit2gtk3, wireshark, and wpa_supplicant).
- The 7.2 kernel has been released
The 7.2 kernel has been released.Linus said:
Well, this last week of the release was - once again - bigger than I would have wished for, but hey, with the whole "new normal" thing, if I delayed releases for that reason we'd probably never have a release at all.
Significant features in this release includecommonattributes support in the bpf() system call,cache-aware load balancing for the CPUscheduler,large-folio support in the Btrfs filesystem,further swap subsystem improvements,improvements to the Landlock security module,support for block devices with inline encryption hardware via the dm-inlinecryptdevice-mapper target, and much more.See the LWN merge window summaries(part 1, part 2) and the KernelNewbies 7.2 pagefor more information.
- [$] BPF, continuous testing, and stable kernels
Ihor Solodrai and Shung-Hsi Yu wrapped up the BPF track at the 2026LinuxStorage, Filesystem, Memory-Management, and BPF Summit with a pair ofsessions related to testing.Solodrai spoke about what has changed for BPF's continuous-integration (CI)testing. Yu spoke about what may beneeded to test BPF updates in stable kernels more thoroughly. TheBPF subsystem's CI tests are in a good place, they said; even so, Solodrai and Yu have ahandful of possible avenues toward enabling better test coverage in the future.
- Python packaging council candidates announced
The Python Software Foundation (PSF) has announcedthe candidatesrunning for the Python packaging council that was approved by the Python steering councilin April.
This inaugural election fills all five seats on the PPC. The two candidatesreceiving the highest number of votes shall be designated Cohort A with a twoyear term, and the three candidates receiving the next highest number of votesshall be designated Cohort B with a one year term.
In future elections, each cohort will be elected for a full two-year term inalternating years, so that roughly half of the PPC turns over each cycle.
There are 17 candidates running for the five open seats. PSF voting-eligiblemembers must affirmtheir intention to vote in this election by August 25. Voting begins onSeptember 1, and ends on September 15.
- Security updates for Friday
Security updates have been issued by AlmaLinux (.NET 10.0, .NET 8.0, .NET 9.0, bind, bind9.16, and dracut), Debian (apr-util, chromium, postgresql-17, python-httplib2, unzip, and zip), Fedora (erlang-cowboy, erlang-cowlib, flatpak, and libnfs), Gentoo (Apache HTTPD, Bubblewrap, Dnsmasq, Exim, Flatpak, libinput, and rsync), Mageia (dhcpcd, qemu, and roundcubemail), Oracle (.NET 8.0, .NET 9.0, bind, bind9.16, freerdp, glib2, gnome-remote-desktop, grafana, gstreamer1-plugins-good, isns-utils, java-17-openjdk, kernel, libpng, libXfont2, nghttp2, perl-DBI:1.641, python-idna, python3.9, and xorg-x11-server), Slackware (rsync), SUSE (bouncycastle, chromium, dnsdist, dracut, java-1_8_0-ibm, kernel, libXfont2, nodejs22, nodejs24, php8, python-httplib2, rrdtool, rsyslog, samba, and wireshark), and Ubuntu (linux, linux-aws, linux-kvm, linux-aws-hwe, linux-aws-hwe, linux-azure, linux-gcp, linux-hwe, linux-azure, linux-gcp, linux-hwe, linux-oracle, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-nvidia-tegra, linux-oracle, linux-nvidia-tegra-igx, linux-oem-7.0, linux-oracle, and node-axios).
- Domas: Bypassing memory protection with AMD's memory controllers
Christopher Domas haspublished a proof of concept with a description showing how to use AMD memory controllers' bank swizzle mode to bypass memory protection and read or write arbitrary data, including CPU microcode definitions and memory belonging to the platform security processor. Among other things, this allows code running at the kernel level to directly manipulate the meaning of processor instructions, potentially bypassing other security measures such as memory encryption and virtual machine isolation.
This is not, strictly, unexpected behavior: it is documented in AMD's manual (on page 113 of that PDF). But the fact that it can be used to access arbitrary memory and thereby rewrite supposedly immutable parts of the computer's firmware without crashing the host machine seems like an unintentional side-effect of the design. Fortunately, since enabling bank swizzle mode requires kernel-level privileges, the vulnerability is not an immediate problem for most software. Still, it seems likely that this technique will end up being used for nefarious purposes eventually.
- rsync 3.5.0 released
Version3.5.0 of rsync has been released with a hugenumber of security fixes:
This release fixes 33 security issues found during a focused audit ofrsync's path handling and daemon protocol, a companion daemon-protocolfuzzing pass, and reports from external researchers -- plus severalrobustness hardenings. CVE IDs were assigned by VulnCheck (CNA); theprecise "introduced in" version ranges accompany each advisory, andmany are much narrower than "everything before 3.5.0". Every fix shipswith a regression test in the test suite that fails on the unfixedtree.
- [$] 128-Bit page tables for Arm
The size of a processor's page-table entries directly limits how muchphysical memory that processor is able to access. Back in the 32-bit days,that limit was 4GB, an amount of memory that once seemed nearly infinite,but which would now struggle to hold a basic AI-enabled "hello world" app.The expansion to 64 bits on most popular architectures would seem tohave removed those limits now; some Arm systems, for example, can use56 of those bits to access up to 72PB of memory. So it might besurprising that the Arm architecture is evolving to support even largerpage-table entries (PTEs). Thispatch set from Anshuman Khandual adds support for 128-bit PTEs, butwho will benefit from this capability is not entirely clear.
- Fedora x86-64-v3 Optimized Packages Pushed Back To At Least Fedora 46
There was a proposal under discussion the past few months on building x86-64-v3 packages for Fedora 45 while retaining x86-64-v1 packages. The hope was building the Fedora packages with x86-64-v3 where AVX/AVX2, FMA, BMI2, and other newer ISA features can be assumed in the name of better performance. Unfortunately, the x86-64-v3 plans are now delayed but may be reconsidered next year with Fedora 46...
- Linux 7.3 Adds New "bpf_sock_read_xattr" Feature For systemd, BPF Programs
Merged earlier this year for Linux 7.1 was extended attributes on sockets support as a feature sought after by the likes of GNOME and systemd for helping with Varlink IPC usage and other purposes. A limitation though of the functionality has been no efficient means for a BPF program to read those user extended attribute labels back. But with Linux 7.3 that's being addressed with the new bpf_sock_read_xattr() kernel function...
- nRF93M1 DK with LTE Cat 1 bis, nRF54L15, and nRF Cloud support
Nordic Semiconductor’s nRF93M1 Development Kit is now available through multiple distributors, providing a platform for evaluating the company’s nRF93M1 LTE Cat 1 bis cellular module. The board combines the modem with an nRF54L15 host MCU and includes USB-C, onboard J-Link debugging, power-measurement support, and a preloaded SIM card. The nRF93M1 DK pairs the nRF93M1-LABA modem […]
- IOmap Improvement For Linux 7.3 Takes EXT4 & XFS Performance Further
As part of the VFS pull requests now merged to the Linux 7.3 development kernel was an improvement to the IOmap framework used by various file-systems for mapping logical file byte offsets in memory to their physical locations on storage. With the now-merged code, this modern block mapping framework is allowing better performance at least for the EXT4 file-system...
- Fedora Rawhide Server OverlayFS BTRFS setup
Configuring Fedora Rawhide Server using a combination of Btrfs and OverlayFS creates a secure testing environment. This configuration isolates critical for tracking rapidly evolving Rawhide packages from developers allowing the server to load read-only Btrfs base snapshots while using the OverlayFS layer as a storage layer for writing and temporary data. If an update disrupts the OS, the base snapshot remains intact, allowing for rollback after a single reboot. Same configuration may also work and vice versa way. Btrfs-assistant running inside Overlay instance booted via corresponding option of Grub Submenu allows to recover from crash main instance via selection required "ro" snapshot using it's own GUI.
- Radxa Zero 3W Powers Compact IP-KVM with BIOS OCR
Crowd Supply recently featured the USBridge-KVM 2.0, a compact IP-KVM designed for remote system administration, debugging, and bare-metal recovery. The device provides HDMI video capture, USB keyboard and mouse emulation, virtual media, hardware power control, BIOS text recognition, and an integrated display while operating independently of the target computer’s operating system. The USBridge-KVM 2.0 is […]
- LTM Monthly Roundup #26.08: HyprLTM-Net v0.4.0, Migrate PC, Conky Themes, LTMNight SDDM Theme, KVM Vulnerability & More
A new month, a new LTM dose for you! It may not be perfectly monthly, but it keeps coming, and as always, it’s a carefully cooked roundup with ingredients ranging from migrating from Windows to Linux, desktop customization, and user-friendly Hyprland tools to critical security fixes and more. So, I’m sure you’ll find at least one section in this newsletter that you’ll enjoy.
- Linux 7.2 Reverts DRM Scheduler Change After Serious GPU Regressions
Linux kernel developers made a significant last-minute graphics change for Linux 7.2, reverting the DRM GPU scheduler back to its previous FIFO policy by default after the newer fair scheduling implementation caused serious performance regressions. The revert was submitted just before the final Linux 7.2 release after users reported severe slowdowns and desktop freezes under sustained GPU workloads.
- Physicists Entangle Quantum Memories Across a Record-Breaking 420 Kilometers
alternative_right shares a report from Phys.org: Optical fibers are already the backbone of global communication systems. Recently, however, physicists have started to explore how their functionality could be boosted further by conveying information via entangled quantum particles -- potentially enabling instantaneous exchanges of information across vast distances. Such a system could eventually be the basis of a future 'quantum internet,' offering a level of security and computing power beyond anything possible today. In new research published in Physical Review Letters, a team led by Xi-Yu Luo at the University of Science and Technology of China in Hefei has pushed that vision further than ever, entangling two quantum memories across 420 kilometers (261 miles) of optical fiber -- more than four times the previous record.
Read more of this story at Slashdot.
- Top Album Releases Linked To Rise In Fatal Crashes
An anonymous reader quotes a report from The Guardian: The release of a new album by Taylor Swift might be a cause for celebration among her fans, but such events have also been linked to a more sombre phenomenon: an increase in fatal car crashes. The team behind a new study say it sheds light on the impact of distracted driving. Writing in the journal Jama Network Open, [Vishal Patel, first author of the study based at Harvard Medical School] and colleagues report how they focused on the release of 10 major albums, launched between 2017 and 2022, selected for having the highest number of Spotify streams over a single day. [...] The team found streaming volume for the top 200 songs in the US was 43% higher on the date of major album releases compared with the days surrounding the releases -- although such data does not reveal whether the music was being streamed in a car. [...] The researchers used data from a population-based registry of fatal US motor vehicle crashes to look at the number of traffic fatalities on the dates these albums were released, as well as for the 10 days either side. After taking into account the day of the week upon which the album was released, as well as federal holidays, and time of year, the researchers found the number of US traffic fatalities showed a relative increase of 15.1% on the date of major album releases, compared with similar days either side. "This is equivalent to approximately 182 fatalities in the US attributable to the release days of the 10 included albums," the team writes. Patel said the release of a new album could distract drivers because accessing music is a search task, not a single button press. "You unlock the phone, open the app, find the release, read down a tracklist, tap the right song. That's several seconds of looking at a screen," he said, adding unfamiliar music also demands more attention, while research has suggested listening to new, high-energy music measurably degrades driving performance. The researchers add the rise in traffic fatalities was greater among certain groups -- such as younger drivers, male drivers, people who were driving alone, and people driving cars with a built-in infotainment platform. The authors say the results suggest that "online music streaming through smartphones may significantly contribute to distracted driving and traffic fatalities."
Read more of this story at Slashdot.
- Cursor Launches 'Origin' Code Hosting Platform As GitHub Alternative
Cursor has launched Origin, a GitHub-style code hosting platform built directly into its AI coding environment. The company is initially positioning Origin as a low-risk layer on top of GitHub, keeping GitHub as the "source of truth," but the launch landed just as a major GitHub outage highlighted growing concerns about reliability in the age of AI-generated code. VentureBeat reports: Cursor began rolling out Origin, its own code hosting platform, to paid users on Monday morning. Roughly three and a half hours later, GitHub's status page lit up with what became a six-hour-and-forty-two-minute global degradation -- error rates near 20% across pull requests, issues and the API, and near 50% on archive and raw file downloads, according to GitHub's incident log. Enterprise single sign-on went down with it: SAML, OIDC, SCIM provisioning and Team Sync all failed. So did Copilot. The developer internet did what the developer internet does. "You can now host your repos in Cursor Origin and deploy to Vercel via Cursor Origin which is itself hosted on Vercel," Vercel chief executive Guillermo Rauch posted on X. "And unlike GitHub, it's online [smile emoji]" Asked why he was smiling, Rauch replied: "trying to make light of the situation. We ourselves are stuck because of github rn!" Matt Palmer, who works at Cursor, quote-tweeted his own company's launch with the day's best line: "We were going to ship this earlier, but GitHub was down." A GitHub outage, in other words, delayed the launch of a GitHub competitor. Product launches get locked weeks in advance, and no evidence suggests Cursor timed this one. But the coincidence did the company an enormous favor, because it dramatized the argument Origin exists to make. For eighteen years, choosing where to host your team's source code has been the least interesting decision an engineering organization makes. Cursor is betting that AI agents have made it interesting again -- and for technical decision makers, that is the real news here. Not a new product, but a new procurement question with a governance problem attached.
Read more of this story at Slashdot.
- Comcast Is Turning Millions of Its Routers Into Motion Detectors
Comcast is activating Wi-Fi motion sensing on millions of compatible Xfinity gateways, allowing the routers to detect movement by measuring disruptions in signals between the gateway and connected devices. The free feature, part of Xfinity Shield, can send activity alerts through the Xfinity app and offers Home, Away, and nighttime monitoring modes without requiring separate motion sensors. The Verge reports: Wi-Fi motion sensing is a technology that has been around for a while, but it's only recently that it's become accurate and reliable enough to catch on. Linksys launched a similar service in 2021, but discontinued it a few years later. Lighting company Wiz launched a line of Wi-Fi-sensing smart bulbs in 2023, and more recently Philips Hue deployed a similar radio-frequency sensing technology in its products (using Zigbee rather than Wi-Fi). Comcast's motion sensing pairs with new modes in the Xfinity app -- Home Watch, Away Watch, and Dark Watch (a night/sleep mode) -- allowing you to turn sensing on or off based on your activities.
Read more of this story at Slashdot.
- Disney, ABC Sue FCC Over Threats to Broadcast Licenses
Disney and ABC are suing the FCC to block an early review of eight station licenses, arguing the Trump administration is using the agency's regulatory power to punish the network over programming and editorial decisions it dislikes. Reuters reports: In a lawsuit (PDF) filed in U.S. District Court in Washington, Disney said the FCC was seeking to coerce and retaliate against "a network that refuses to bow to the administration's demands," calling the agency's actions an "extraordinary assault on free speech." Trump has waged an aggressive series of attacks on the news media and the latest move follows a two-year-long battle between Trump and Disney. Last month, Trump again called for ABC stations to lose their licenses because the network refused to air a prime-time speech on elections. The court case will pose a key test of the free speech rights of media outlets. Disney and ABC asked the court (PDF) to quickly issue a temporary restraining order halting the license renewal proceedings and preventing the FCC from scheduling a hearing. The company said the public comment period ended earlier this month and the FCC could act at any time. The lawsuit alleges that the administration is violating the company's First Amendment free speech rights, saying that the FCC "is using its regulatory power to retaliate against (Disney and ABC) for programming and editorial decisions the administration dislikes." The FCC said the move stemmed from a year-long investigation into whether Disney's diversity policies amounted to unlawful discrimination, an allegation the company denies. U.S. District Judge Loren AliKhan issued an order on Tuesday directing the company and the FCC to propose a schedule for considering the request for a temporary restraining order and told the agency to notify her if it moves to start the process of revoking the ABC licenses.
Read more of this story at Slashdot.
- Memory Prices Climb 500% In 12 Months
RAM prices have exploded over the past year, with some DDR5 kits approaching 500% year-over-year increases and a 128GB kit now selling for $3,399, which is more than 10 times its previous low. Tom's Hardware reports: Things improve as you step down the memory capacities and speed tiers, but not as much as we'd like. You're still looking at $392 for a memory kit that was just $72 last year. To reinforce the point, I pulled the latest average price data from PCPartPicker, comparing where we are today (August 2026) to exactly one year ago. This data is somewhat approximate, but it should be broadly accurate. [...] A standard 64GB (2x32GB) DDR5-5600 kit that would have cost you under $200 last summer is now demanding over $1,100. It is a 5x multiplier on a component that used to be a fairly boring and predictable line item in a PC build budget. If you plan to just wait it out on an older AM4 or LGA1700 motherboard with DDR4, you'd better hope your memory holds out too, because DDR4 isn't safe from the fallout. With DDR5 entirely out of reach for most builders, the resulting scramble for older platforms running DDR4 memory has created a massive knock-on effect, and as a result, DDR4 kits are up anywhere from 120% to nearly 180% across the board. Nowhere near as bad as DDR5 pricing, but it still stings when a kit that was $105 last year is $281 this year. This phenomenon is by no means exclusive to the US, either. German tech site ComputerBase have also been tracking this global trend, reporting just this week that average RAM prices in Europe have skyrocketed by 345% compared to September 2025. Their data shows the squeeze is bleeding into other components too, with hard drive and SSD prices both climbing over 125% in that same timeframe. In fact, the situation is so severe that hyperscale buyers have reportedly already locked in almost all of the global DRAM production capacity for 2027, handing over advance deposits to guarantee their supply of precious DRAM, which is now among the highest-value commodities in the world by weight; mainstream DRAM chips are worth over half as much per kilogram as solid gold.
Read more of this story at Slashdot.
- You Can Finally Buy a Fairphone In the US
An anonymous reader quotes a report from Wired: Your iPhone, SamsungGalaxy, andGoogle Pixel have a 1-year warranty. Unless you cough up extra dough for an extended service plan, you'll pay a hefty fee if you damage the screen and need a replacement (around $329 for an iPhone 17 done directly from Apple). But it doesn't have to be this way. What if you could order the part from the manufacturer and do the repair yourself? That dream is finally being realized for American consumers, thanks to Fairphone. The Dutch company is bringing its repairable and sustainably built Android smartphone -- the Fairphone (Gen 6+) -- to the US. Each one comes with a screwdriver. A replacement screen from Fairphone costs just $90. A new USB-C port is $20. A fresh battery is $40. In all, there are 12 modular elements you can swap yourself. It remains the only smartphone series with a 10/10 repairability scorefrom iFixit, not to mention an unmatched 5-year warranty and software updates through 2033. The new Fairphone (Gen 6+) is a small upgrade over the Gen 6 that the company launched last year. It has a newer Qualcomm Snapdragon 7s Gen 4 processor and double the RAM at 12 GB, but is otherwise largely the same device (hence the "plus" in the name). It now comes in Cobalt Blue, a nod to the miners who extract the cobalt used to make phone batteries, and the company's efforts to improve working conditions in mines in the Democratic Republic of Congo. The new Fairphone is available on Amazon and at Fairphone.com for $650, and it's officially certified to work on T-Mobile and AT&T's networks. While this will mark the U.S. debut of its flagship smartphone, the company first entered the stateside market last year with its repairable earbuds and headphones. It also plans to launch its next-generation Fairbuds 2 wireless earbuds later this year.
Read more of this story at Slashdot.
- Google Buys All of Spirit Airlines' Data to Feed Its AI Models
Google has agreed to pay $10 million for a massive trove of anonymized Spirit Airlines data following the carrier's shutdown, including internal communications, spreadsheets, booking and frequent-flyer records, transactions, and employee information. CNN reports: Did you ever fly on Spirit Airlines? Or work there? Or send an email to someone who worked there? Then your information will soon be feeding Google's artificial intelligence model. The discount airline halted all operations in May, and it's been selling off its remaining assets through the bankruptcy process ever since. While most of that is planes, equipment, and real estate, there's other things that are valuable, too. It was disclosed late Monday that the company agreed to sell its data to Google for $10 million. That includes emails and internal communications, spreadsheets, transactions with the public including bookings and frequent flyer information as well as human resources information on its employees. The data has been stripped of anything that would allow individuals to be identified, according to the court filing. But it is still a massive amount of useful intelligence.
Read more of this story at Slashdot.
- Apple Lowers App Store Fees In Europe to Settle Dispute With EU
Apple is overhauling its EU App Store fees to settle its Digital Markets Act dispute, simplifying the fee structure and "[resolving] Apple's disagreements with the Commission over business terms and alternative distribution." Developers can sign the new terms starting today, and the changes go into effect on October 1. MacRumors reports: The initial acquisition fee and store services fee are being removed for apps distributed outside of the App Store, and Apple will now charge a 5% Core Technology Commission on digital purchases that replaces the prior per-install Core Technology Fee. Commission rates are changing for App Store apps, alternative payments, and apps distributed through alternative app marketplaces or the web. Developers can offer in-app purchase options alongside alternative payment options in the EU, which is something Apple did not allow before. Apple says there will be presentation requirements so users have a consistent, transparent experience. Developers distributing apps in the EU must select their payment options and maintain those options for 12 months before making changes to "provide consistency and clarity for users." Apple will still use a Notarization process for apps downloadable through the web and through alternative app marketplaces. Apps in the Kids category or being used by children under 13 will not include links to websites to complete transactions. All apps that use alternative payment processing or link to a website for transactions have to include a parental gate if the user is under 18. Apple is relaxing the rules for operating an alternative app marketplace.
Read more of this story at Slashdot.
- Microsoft MVP Creates Site to Remind You of All the Brands Redmond Replaced
Microsoft MVP Loryan Strant has created the Microsoft Rebrand Registry, cataloging 72 Microsoft products and the 158 names they've had over the years. His analysis finds that Microsoft product names survive an average of two years and eleven months. The site even predicts which products are most likely to get renamed next, "by considering the amount of time the current name has applied, prior names, and the frequency with which Microsoft changes names of products in the same family," reports The Register. "That methodology led him to suggest an 'elevated' likelihood of name changes for the Azure App Service, Azure SQL Database, Azure DevOps, and Microsoft Dynamics 365 Field Service." From the report: Readers may remember that Strant has also created the site Let Me Correct That For You, which lists the exact names of Microsoft products -- an effort he told The Register he thinks is useful because Microsoft in its wisdom uses Camel Case for names like PowerPoint but went with conventional capitalization for Copilot. Another of his sites immortalizes Microsoft cloud product logos. He's also created HumbledandHonored.com, a site that generates social media posts MVPs can use to announce they have earned or retained Microsoft's awards. Strant told The Register that the Rebrand Registry came about after some banter between himself and other MVPs, during which the topic of Microsoft's many product name changes came up. He decided to do something about it.
Read more of this story at Slashdot.
- India Paves the Way For Charging Merchants a Fee On UPI Transactions
An anonymous reader quotes a report from the BBC: For most Indians, paying by Unified Payments Interface (UPI) has become almost absurdly routine. Scan a QR code, tap a few buttons and the money moves instantly. There is no card machine, no cash, and -- most importantly -- for the user, no visible fee. That may be about to change. India has paved the way for banks and payment companies to charge merchants a fee on UPI transactions, potentially ending a decade-long experiment in free digital payments. The government has yet to decide the rate or exactly where it will apply, but proposals under discussion include a merchant discount rate (MDR) of 0.3-0.5% -- a small fee paid by a business to the banks and payment companies that process its UPI payments -- on larger transactions at big businesses. The government says consumers and person-to-person UPI payments will remain free. If merchant fees are introduced, they will apply only to some transactions above a set threshold, at a nominal rate, meaning most UPI payments will remain free. The question is whether putting a price on UPI could weaken the network that made it such a success. The stakes are enormous. Launched in 2016, UPI has grown into one of the world's biggest real-time payment networks. According to official data, in July alone, there were 23.6 billion UPI transactions worth 29.87 trillion rupees ($313.5 billion). Fintech apps such as PhonePe and Google Pay account for most UPI payments. In the financial year just ended, the figure was about 241.6 billion transactions -- almost 12,000 times the volume in UPI's first full year. More than 550 million people now use it, and the system is now available in some form for payments in 11 countries outside India. India's UPI became ubiquitous partly because it made digital payments almost frictionless for merchants, including small vendors who can accept payments with little more than a QR code. New research suggests that merchant acceptance was "not just a result of UPI growth, but one of its key drivers." As RBI governor Sanjay Malhotra put it, "Someone will have to pay the cost." The challenge will be making UPI sustainable without weakening the merchant network that helped it take off.
Read more of this story at Slashdot.
- Sainsbury's Store Pauses Facial Recognition After False Shoplifting Claim
Bruce66423 shares a report from The Guardian: Sainsbury's has paused the use of AI face scanning in one of its stores after a customer was wrongly identified as a shoplifter and ejected from the shop. "I was embarrassed, mortified even, and felt quite humiliated and powerless," Matt Arnold, 46, said of his ordeal. The comedy promoter was buying supplies in the store in East Dulwich, in south-east London, for a standup event at Dulwich Hamlet football club when, after scanning his items and a Nectar card, he was approached by two managers who told him he could not be served owing to an earlier incident. He was then asked to leave and they tried to escort him from the store. As he left, he saw an overhead CCTV monitor alert with a red circle surrounding his face. He asked the shop staff to keep his shopping in the trolley so his friend could come and pick up the supplies for the comedy night happening soon next door. "I think they were quite confused by this, understandably, but agreed and my colleague Dave went in to pay for and pick up the shop about five minutes later. There was no pause for thought from the staff, no suggestion that they understood this is not how a shoplifter would behave. Just blindly following the machine's orders." Sainsbury's head office apologised to Arnold the next day and has paused use of its AI-assisted Facewatch technology in the store while an investigation takes place. Arnold says the facial recognition tech should be paused in all stores. "Anyone could be falsely accused and at some point that will be someone vulnerable, someone with mental health issues like anxiety. It's inevitable," said Arnold. "Also, I would worry about the confidence-destroying effect of it happening to a younger person or someone less willing or able to stand up for themselves as I have done." A Sainsbury's spokesperson said: "We have contacted Mr Arnold to apologise for his experience at our Dulwich superstore. The incident was caused by human error, not the facial recognition technology. Customers can be reassured that the Facewatch system has a 99.98% accuracy rate, and every match is reviewed by a trained manager." A Facewatch spokesperson said their technology was not at fault in this case. "A correct alert was sent to the retailer, but was subsequently subject to human error in the way it was handled in store," they said.
Read more of this story at Slashdot.
- Solar Power and Batteries Have Been Keeping Europe's Grid Stable
AleRunner writes: "Solar has been doing the 'heavy lifting' to help Europe meet its energy needs amid a string of blistering heatwaves," Euronews tells us. Meanwhile, as Europe's energy demands rise with the heat, jellyfish have been causing shutdowns and reduced power output at multiple reactors at French nuclear plants, as we already discussed. Euronews reports: A new analysis from energy think-tank Ember found that solar output in European countries rose by up to 17 percent on heatwave days in June and July. Researchers say that this helped power the grid as electricity demand increased by as much as a quarter on hot days. Heatwaves often trigger a spike in electricity consumption due to the sudden need for cooling, mainly from energy-intensive air conditioning (A/C) units. The International Energy Agency (IEA) estimates that space cooling, which is mostly A/C units and fans, consumed around seven percent of the world's electricity in 2022. Even in countries where A/C ownership is low, countries experience energy demand spikes when scorching temperatures hit. During the early summer heatwaves of 2025, France, for example, recorded an evening electricity peak that was 25 percent above the off-season average due to air conditioning. Ember's analysis found that during the late-June heatwave this summer, daily electricity demand rose byup to 28 percent in Italy, 23 percent in Hungary, 14 percent in France and 13 percent in Spain compared with pre-heatwave days. It says as heatwave-driven demand increased, solar was the only major power source to perform "better than usual." Compared with other days in June and July, average daily solar generation during the heatwaves was 17 percent higher in France and Hungary, five percent higher in Spain and the same in Italy.
Read more of this story at Slashdot.
- 'Buy Now, Pay Later' Lenders Pitch Loans For Needs Like Electricity and Rent
An anonymous reader quotes a report from The New York Times: Buy now, pay later" loans took off during the pandemic as a way for online shoppers to go on retail splurges without using a credit card. Now, lenders are offering the loans as a means for people to finance basic households needs. The lending apps Flex and Zip allow customers to take out loans to pay for their broadband, electricity, health insurance, mobile phone service, mortgage and water bills. Affirm, one of the most popular pay-later apps, has started providing some tenants loans to extend their monthly rent payment for a few weeks. Many dentists, veterinarians and medical clinics now often offer instant pay-later financing, and Intuit this year started promoting "File Now, Pay Later" loans to TurboTax users who owe money in their tax return. Pay-later loans are becoming the "working capital for the modern middle class," said Karen Webster, the chief executive of Pymnts, a news and market research company for the payments industry. "Consumers are using it more for essential, everyday things." Americans spent $160 billion last year through pay-later loans, according to research released recently by Federal Reserve economists -- nearly twice what consumers spent two years earlier, in 2023. That's still a fraction of the more than $3 trillion U.S. shoppers spend annually on consumer credit cards. But the industry continues to expand by double-digit rates each year. How much of that growth reflects consumer preferences, versus desperation, is a question economists and industry analysts are trying to unravel. The rise in pay-later financing comes as many households are leaning more on debt to keep up with their daily expenses. Paying interest -- to afford basic needs -- adds to the overall cost of living, which has already been rising amid higher medical, housing and fuel costs. For many borrowers, the loans have become their only option: Half of those using them said they could not make ends meet otherwise, according to the latest edition of a survey that LendingTree, a loan marketplace, has compiled for years.
Read more of this story at Slashdot.
- Supreme Court Rejects Verizon Bid For $47 Million Refund of FCC Fine
An anonymous reader quotes a report from Ars Technica: The Supreme Court today rejected Verizon's attempt to get a $47 million refund from the Federal Communications Commission. In a list of orders (PDF) issued by the court, Verizon's petition was denied without explanation. The denial apparently ends any possibility of Verizon asking a lower court to review the fine and order the FCC to issue a refund. However, AT&T and T-Mobile are continuing to challenge similar fines on grounds that selling device-location data did not violate US telecom law. AT&T, T-Mobile, and Verizon were fined a total of $196 million in 2024 for selling mobile users' real-time location data without their customers' consent. The carriers sold device-location information to data aggregators, who resold it to other firms. The carriers paid the fines and sought to have them overturned in courts, claiming their Seventh Amendment right to a jury trial was violated. Challenges by AT&T and Verizon were combined into a single case, and the Supreme Court ruled against the carriers in June of this year. The court ruled that the FCC penalty process does not violate the Seventh Amendment because the carriers could have obtained jury trials if they refused to pay the fines and waited for the government to try to collect. The ruling (PDF) against the carriers was 8-1, with Justice Clarence Thomas dissenting.
Read more of this story at Slashdot.
- Security: Why Linux Is Better Than Windows Or Mac OS
Linux is a free and open source operating system that was released in 1991 developed and released by Linus Torvalds. Since its release it has reached a user base that is greatly widespread worldwide. Linux users swear by the reliability and freedom that this operating system offers, especially when compared to its counterparts, windows and [0]
- Essential Software That Are Not Available On Linux OS
An operating system is essentially the most important component in a computer. It manages the different hardware and software components of a computer in the most effective way. There are different types of operating system and everything comes with their own set of programs and software. You cannot expect a Linux program to have all [0]
- Things You Never Knew About Your Operating System
The advent of computers has brought about a revolution in our daily life. From computers that were so huge to fit in a room, we have come a very long way to desktops and even palmtops. These machines have become our virtual lockers, and a life without these network machines have become unimaginable. Sending mails, [0]
- How To Fully Optimize Your Operating System
Computers and systems are tricky and complicated. If you lack a thorough knowledge or even basic knowledge of computers, you will often find yourself in a bind. You must understand that something as complicated as a computer requires constant care and constant cleaning up of junk files. Unless you put in the time to configure [0]
- The Top Problems With Major Operating Systems
There is no such system which does not give you any problems. Even if the system and the operating system of your system is easy to understand, there will be some times when certain problems will arise. Most of these problems are easy to handle and easy to get rid of. But you must be [0]
- 8 Benefits Of Linux OS
Linux is a small and a fast-growing operating system. However, we can’t term it as software yet. As discussed in the article about what can a Linux OS do Linux is a kernel. Now, kernels are used for software and programs. These kernels are used by the computer and can be used with various third-party software [0]
- Things Linux OS Can Do That Other OS Cant
What Is Linux OS? Linux, similar to U-bix is an operating system which can be used for various computers, hand held devices, embedded devices, etc. The reason why Linux operated system is preferred by many, is because it is easy to use and re-use. Linux based operating system is technically not an Operating System. Operating [0]
- Packagekit Interview
Packagekit aims to make the management of applications in the Linux and GNU systems. The main objective to remove the pains it takes to create a system. Along with this in an interview, Richard Hughes, the developer of Packagekit said that he aims to make the Linux systems just as powerful as the Windows or [0]
- What’s New in Ubuntu?
What Is Ubuntu? Ubuntu is open source software. It is useful for Linux based computers. The software is marketed by the Canonical Ltd., Ubuntu community. Ubuntu was first released in late October in 2004. The Ubuntu program uses Java, Python, C, C++ and C# programming languages. What Is New? The version 17.04 is now available here [0]
- Ext3 Reiserfs Xfs In Windows With Regards To Colinux
The problem with Windows is that there are various limitations to the computer and there is only so much you can do with it. You can access the Ext3 Reiserfs Xfs by using the coLinux tool. Download the tool from the official site or from the sourceforge site. Edit the connection to “TAP Win32 Adapter [0]
- The road to MS-DOS 2
A great and concise history of the run-up to MS-DOS 2.0. Yet, there was a nagging feeling that a single-tasking CP/M clone was inadequate for the new generation of personal computers. Digital Research released multi-user, multitasking MP/M-86 in September 1981 and announced the single‑user multitasking Concurrent CP/M in early 1982. In response, Microsoft came up with a plan for tiered approach to its operating systems: single-user/single-tasking MS-DOS at the bottom; multi-user/multitasking XENIX at the top; and in the middle, something called XEDOS: a single-user version of XENIX. This “pyramid of upward-compatible operating systems” was announced in a Byte Magazine editorial in January 1982. ↫ Nemanja Trifunovic Ive always found this tiered approach fascinating, and the world surely wouldve looked quite different had Microsoft been able to make it work. I doubt Windows NT would ever have existed, and most of the world would probably be running a XENIX-based Windows today (all else being equal, which is of course unlikely and silly). Regardless, MS-DOS 2.0 contained a few UNIX-like utilities to deal with its brand new support for directory trees and other new features, and even had a /dev directory.
- PervertPods: Apple is adding cameras to AirPods
If you thought pervert glasses werent bad enough, Apple is taking it up a notch by adding cameras to its AirPods. Apple is working on camera-equipped AirPods that appear to be nearly ready to launch, based on a video MacRumors found in the macOS Tahoe 26.7 release candidate. In a short demo, a man holds a book up so the camera in the AirPods can see the title. With Visual Intelligence, your world becomes savable. See something you like? Just ask me to save it for later,! says the voiceover text. ↫ Juli Clover at MacRumors AirPods are tiny. Ive seen people use them at the gym. Ive seen them on playgrounds. Ive seen them around swimming pools. People use them at the beach. Theyre used at schools. In locker rooms. Tiny cameras in tiny AirPods that can photograph anything in front of the user are a perverts wet dream. Abusers are going to love this. Why wear bulky glasses anyone can see and try to demand you take off, when you can wear tiny AirPods that have already been fully normalised in society? Was there not a single woman or parent on the team that made this? All over the United States, people are destroying Flock surveillance cameras. More and more communities are rising up and demanding these things removed from their streets and neighbourhoods. The awareness of just how pervasive mass government surveillance has become is growing, and Silicon Valleys complicity is not exactly a secret. And in this climate of rapidly growing concern and anger, Apple is going to add tiny cameras to its tiny AirPods. Was there not a single person of colour or protester on the team that made this? How detached from reality do you have to be to greenlight something like this? Does anyone regardless of skin colour, gender, or political leaning want even more cameras around them?
- Quake shareware, a CD-ROM just a little too full
I was around when Quake was launched, but I was entirely unaware of this story. By June 1996, after three years of hard work, id Software had completed their next title, Quake. As for their previous title, they were going to release both a shareware version and a full version of their game. Since it used a mere 22 MiB of storage, people at id Software had the idea of leveraging the remaining capacity of a CD-ROM. Why not include encrypted versions of the full id catalogue of games? Not only this would cut out the middlemen, it would give instant access to gamers with a simple phone call and a credit card. The concept was implemented. The CD was announced on July 3, 1996 and released on August 30th. The hacker group GNOMON released Quakecrk.zip only 39 days later. The archive contained QCRACK.EXE, a tool allowing to decrypt every single game on the CD-ROM. ↫ Fabien Sanglard The system id employed turned out to be incredibly primitive and simple, and hackers found out quite easily that the system required no secret sauce from id at all the code youd get over the phone contained no secret, and all the validation program on the disk did was check to ensure the code received over the phone matched the code generated by the disk. No wonder it took them only 39 days to crack this.
- Beyond the limits of physical VRAM
Earlier this year, Natalie Vock made a splash with a set of patches to the Linux kernel that greatly increased performance on AMD GPUs with lower amounts of VRAM. With that work now accepted by upstream, Vock decided to turn their attention to another interesting problem: what if you run out of VRAM, and how can we improve performance when we do? Regardless, what I hope this blogpost can demonstrate is that even if you end up with some memory evicted to system RAM, the slowdown can be manageable. There’s measures that drivers (particularly, the kernel driver) can take to make overcommit work as fast as possible, and even applications can do their part in coordinating with the driver stack to mitigate the effects of their memory being evicted. With everything in place, VRAM overcommit isn’t really as big of a deal as one may think it is at first sight. ↫ Natalie Vock The work Vock has done has already been in SteamOS for a while, and theyre currently in the process of upstreaming it to the vanilla kernel as well. Since this is a complex set of patches and changes, this may take a while, and as such, theyve prepared custom kernel and Mesa branches for adventurous users. Do note that these branches wont be maintained much, and are entirely experimental, not as well-tested as the SteamOS kernel, and probably wont yield the same performance improvements. Still, this is the kind of work that has a material impact for users. Not everyone has a 16GB monster GPU, especially not today with supply chains ravaged and ruined by slopmakers, so its great to see the Linux world working to improve performance for everyone, not just the wealthy few.
- Were Touch Bar’s problems software rather than hardware?
The Touch Bar arrived in 2016 seemingly already pre-doomed, on a generation of machines that had a “we’ve run out of ideas” smell all around them. The arrow keys were reshaped, the keyboard got a slimming down, and even the beloved MagSafe wasn’t, in fact, safe. All of these changes would prove unpopular and get reverted in time, and the axe would eventually come for the Touch Bar, too. With an enormous benefit of hindsight, a decade after its arrival, and on the (rumored) eve of fully multitouch MacBooks, I wanted to look critically at the Touch Bar in more detail. I put a spicy title above this post, and while I’m not sure I can answer it in the affirmative, I feel I got surprisingly close to that. ↫ Marcin Wichary I have never spent this much reading about and pondering a technology seemingly nobody liked and that I never really used. I still think theres merit to the idea of screen on a keyboard, but only if the screens are integrated into the individual keys (as some products have tried over the years). Of course, this would also be astronomically expensive, delicate, and virtually impossible to repair, so Im not sure something like that can be reasonably made at an affordable price.
- Linux 7.2 released
Version 7.2 of the Linux kernel has been released. Significant features in this release include common attributes support in the bpf()vsystem call, cache-aware load balancing for the CPU scheduler, large-folio support in the Btrfs filesystem, further swap subsystem improvements, improvements to the Landlock security module, support for block devices with inline encryption hardware via the dm-inlinecrypt device-mapper target, and much more. ↫ corbet at LWN.net If you run Linux, youll get it sooner or later.
- Pascal for small machines
We talked about the latest release of Delphi a few days ago, and that brought me to Hans Ottens website. This site is about my experience with the Wirth school of languages, based on the ideas and implementations of Prof Niklaus Wirth, Kenneth Bowles, Per Brinch Hansen,`colleagues,`and their students. And my experience with the various variants, from the P2 and P4 compilers originating in Zürich ETH, via UCSD Pascal P-System to the Borland compilers and Modula and Oberon systems. All applicable to small computers and device control. On this website you will find information on Pascal for small machines, like Wirth compilers, the UCSD Pascal system, many scanned books and other files on UCSD Pascal,`Pascal on MSX and CP/M, Delphi programming on PC, Freepascal and Lazarus on Windows and Raspberry Pi, Oberon systems. Many sources of early Pascal compilers! And last but not least my Pascal-M system! ↫ Hans Otten If youre into Pascal and its related languages and technologies, this is a treasure trove of information.
- Super Mario derivations
One of the most surprising aspects of the Nix language is that it is lazy, especially if you have never used a lazy language before. This laziness is what makes much of Nixpkgs possible, and its complexity. I decided to take that idea and make the attribute path a sequence of button presses in Super Mario Bros. 3. Each node in the tree is a frame of the game, and each child is a button press that produces a new frame. Game states are recursive by nature. ↫ Farid Zakaria This has zero practical applications, and yet, its absolutely genius. I love this.
- The worst PDA of all time
Today, you can get low-quality knockoffs of just about any popular smartphone on sites like AliExpress or Temu, whether they be iPhones, Galaxy phones, or whatever else. They have terrible build quality, bottom-of-the-barrel components and specifications, and all run outdated versions of Android badly. At the same time, various consumer electronics brands, once popular in a bygone era, sell the rights to their brand name to unknown companies, who then put these brands on generic hardware to give their products a sheen of legitimacy. Thats why today, you can still buy Nokia smartphones, Polaroid cameras, and low-effort Hi-Fi equipment from various once-respected brands. None of this is new, however. In the late 90s and early 2000s, companies were already doing the same thing. In fact, theres one device from this era which combines both business practices its both a cheap knockoff of a wildly successful device, and it carries a once-revered brand name. Also, just to add some juice, this story involves stolen source code. Lets take a look at the worst PDA of all time, the Olivetti daVinci. In 1997, Palm launched the Palm Pilot, and it and its successors proved to be a massive hit. Where countless before it had failed, Palm found the magic formula to make pocket computing work. I wrote an in-depth article about Palm over 13 years ago which goes into much (much) more detail, but the reason the Palm Pilot succeeded where things like the Newton, PenPoint OS, and Windows for Pen Computing failed, is that Palms founder, Jeff Hawkins, realised that they were competing with paper, not with desktop computers. Instead of trying to shove the capabilities of a full personal computer into a (barely) pockatable device, a pocket computer had to be as fast and convenient as paper, and therefore extremely strict about which features to add, and which to omit. To this day, the entirety of smartphone computing stands on the shoulders of Palm. Palms ideas, implementations, approaches, paradigms, and even people were absorbed by Apple and Google, where they shaped both iOS and Android. The phone youre looking at right now has a ton of Palm DNA in it, still. After all, youre still using the homescreen-with-apps paradigm Palm already perfected in the late 90s and early 2000s. The success of the Palm Pilot and its successors did not go unnoticed. Microsoft, most prominently, felt incredibly threatened by Palms success: The success of Palm’s products got the attention of Microsoft, and the company pretty much announced it was going to crush Palm. According to Hawkins, Microsoft had a sales conference, where, at some point, a big target appeared on the projector screen, with the Palm logo dead in the centre of it: “we are going to crush and kill these guys”, was the central message. Hawkins recalls that he got condolence letters after that, stating things like “Sorry Jeff. Too bad.” ↫ Thom Holwerda While Microsoft proved to be unable to kill and crush! Palm, it did manage to build a relatively successful business selling PDAs running various incarnations of Windows CE. Together, Palm and Microsoft dominated the PDA market pretty much throughout its entire existence, and while the market was a mere fraction of the smartphone market of today, other companies still wanted a piece of this pie too. One of these companies was Olivetti, a storied Italian company with a long history making typewriters, computers, and other electronics. Im not going into detail about Olivettis history, but the company was renowned for its attention to design, creating iconic products like the Lexikon 80, Lettera 22, Elea 9003, Programma 101, and so, so many more. Olivetti also entered the personal computer market, first with a variety of custom machines featuring Z80 and later Motorola 68000 processors running a variety of custom operating systems developed by Olivetti (including its own UNIX variant, X/OS). After a few machines using MIPS and Alpha processors in the early 90s, the company would eventually focus entirely on Intel-based PCs (including this amazing failure) running Windows. Like so many other computer makers from that era, Olivetti eventually left the PC business by selling it off in 1997. To this day, Olivetti PCs tend to cost more on the used market than those from other brands, despite no technical merits dictating so. At around this time, our current story begins. Seeing the success of the Palm Pilot and the emergence of copycat devices running Microsofts Windows CE, Olivetti wanted in on the action. And so, in the late 90s, the company introduced the Olivetti daVinci, a line of PDAs whose software looked suspiciously like Palm OS. Theres not a ton of information out there about the development history, but it seems that while Olivetti designed the hardware, it contracted the development of the operating system out to a company from Hong Kong, Echolink Design. And this is where things went horribly wrong for Olivetti. The software Echolink Design developed for the daVinci didnt just look like Palm OS, it was Palm OS at least, according to Palm. After being on the market for about a year, the Palm Pilot maker, then a subsidiary of 3Com, filed for an injunction, alleging that the daVinci operating system designed by Echolink Design contained actual Palm OS source code. In addition, Palm also filed suit against CompanionLink Software, the company that developed the Outlook synchronisation software for the daVinci. Palm won handily, and within a day of the filing, temporary restraining orders were put in place on both Olivetti and CompanionLink, stopping sales of the daVinci and its software dead in its tracks. It seemed to have been a pretty clear-cut case. From The Wall Street Journal at the time: U.S. District Judge James Ware ruled Olivettis Royal daVinci organizer contains software that appears to have been copied from the operating system for 3Coms Palm organizers. Judge Ware said a review by a software expert found the daVinci software contains private Palm code and even grammatical
- Making a game on a custom bytecode VM in 7 days and 3kB
In the last few days, I built a shoot ’em up game by embedding a tiny custom bytecode VM and rendering the graphics using a fullscreen pixel shader. The result is a 3kB Windows executable. This was done for Langjam Gamejam, a 7-day challenge where you create a programming language and then use it to build a game. The project combines several interests of mine: language tooling, game development, procedural graphics, and demoscene-style size constraints. The game jam format forced me to keep the scope small and explore new ideas. Also, it was fun! ↫ Laurent Le Brun In seven days, Le Brun created a brand new programming language, compiler, bytecode interpreter, a game written in the new language, and rendered it, ending up with a 3kB self-contained executable. Its amazing what humans can do.
- Why tiny JPEGs look different in Chrome
A while back, when chatting with a colleague over their computer, I noticed that a logo did not look exactly the same as it did on mine. It looked thinner on theirs and more faithful to the original image. It was rendered at 15px; here is an upscaled version. If you squint, or take a step back, the one from Chrome looks thicker. A bit weird, but swapping the image for an SVG fixed it. Still, I was curious: why was it rendering like this in the first place? I did some digging and found a nifty optimization that Chrome uses when rendering JPEGs at small scales. ↫ Guillaume Técher I love it when people detail their discoveries like this.
- Redox gets installer improvements, merges new CPU scheduler
Another month started almost two weeks ago, so weve got a new monthly report from Redox, the general purpose operating system written in Rust. The month of July it seems the report was published with a bit of a delay, regardless of what the date on their site says brought improvements to the installer, with new options commonly found in most installers, such as a choice of installation method, network-based installation, and more. The Google Summer of Code work on the new CPU scheduler has also been merged, including a number of related performance enhancements. Theres improvements to the ARM port, Amlogic Meson UART ARM64 support, and uutils grep and sed have been successfully built on Redox, replacing their their GNU counterparts in the os-test test suite. In addition, a whole slew of demos were ported as well, from Ratatui demos to various Iced demos covering things like reading QR codes and processing Markdown. Of course, this is all topped off with the usual long list of lower-level, smaller changes and improvements to the kernel, drivers, Relibc, and more.
- The OSNews Fundraiser continues: you made me use Windows, now make me use macOS
The OSNews Fundraiser, to celebrate the fact I posted 20000 stories in 21 years, is still underway. The first major incentive was reached, and I, a long-time Linux user, published my experiences using Windows 11 for a month. It wasnt a success. Keep donating if you want to find out what a Linux user thinks of the current state of macOS! Why support OSNews? I want to make sure I can run OSNews for another two decades and another 20000 posts, and I need your help to do so. Since my wife, who has a tough, underpaid job in elderly care, is largely unable to work due to health reasons caused by that very same job, my income has become a lot more crucial for our kids, my wife, and myself. With OSNews readers being more skeptical of subscription-like things like our Patreon than most people, it’s exactly these one-time donations that make up the bulk of your support. Thank you.
- The little-known winstart.bat batch file
Raymond Chen explains what, exactly, the file winstart.bat in Windows 95 is used for. In Windows 95, you could create a winstart.bat file in your Windows directory. During startup, the virtual machine manager initializes and creates the so-called “System virtual machine” (the “System VM”), which is the virtual machine that all Windows programs run in. But before running the user-mode kernel in that virtual machine, the virtual machine manager runs the winstart.bat batch file if it exists. ↫ Raymond Chen Chen needs to use several diagrams to really explain what the batch file is used for, but as a very crude summary, it allows you to load TSRs that only apply to Windows programs, while not affecting any additional DOS command prompts you may load later after Windows is already running. While many think its a Windows 95 feature, it was already present in Windows 3.x. A unique feature that I doubt many people made active use of.
- Delphi 13 Community Edition released
Delphi is still very much a thing, and still very much in active development. The current stewards of Delphi, Embarcadero, released the Delphi 13 Community Edition today. Delphi Community Edition is a full-featured, free edition of Delphi for building native applications with the Delphi language. It includes a professional IDE, visual designers, integrated compilers and debuggers, the VCL framework for Windows development, and the FireMonkey framework for creating native applications from a shared codebase across Windows, macOS, iOS, and Android. It is designed for students, hobbyists, freelancers, and small teams that meet the Community Edition license requirements. ↫ Marco Cantu at the Embarcadero blog Delphi has been around since 1995, first released for Windows 3.1. Its both a programming language, a variant of Object Pascal, and the accompanying IDE and related tooling and frameworks, originally developed by legendary company Borland. This latest version of course adds a number of new features to the programming language, and further improves the IDE as well, this time with a brand new 64bit version. The two frameworks for visual application development, VCL and FireMonkey, have also been updated and improved. Sadly, its not open source, and the Community Edition is intended for mostly non-commercial, hobbyist use. If you want to actually earn any money using Delphi, youre going to have to step up to Delphi 13 Florence, which isnt free.
- Google hammers another, extremely petty nail in the Android Open Source Projects coffin
The slow but steady march to the grave for the Android Open Source Project continues. Every few months Google hammers another big nail in the coffin of Android as an open source effort, and Ive documented them all here on OSNews (nail, nail, nail, nail, nail), coming to the conclusion long ago that for all intents and purposes, Android is no longer an open source operating system. The latest move, however, is just petty. According to GrapheneOS on , Google has apparently replaced public, instant code downloads for Pixel phone drivers with a manual request form. Instead of publishing code directly to open developer platforms where anyone can grab it, Google now requires developers to fill out a Google Form and wait for someone to send them a Google Drive link. What used to take a couple of hours is now taking weeks. ↫ Hillary Keverenge at Android Authority Im perhaps misremembering, but I vaguely recall discussions decades ago about what, exactly, it meant to make source code available!, as open source licenses state in a variety of words. Would mailing a paper print-out by classic post satisfy such requirements? Could you write the source code on a brick and throw it through the users window? Could you hire a church choir to sing it? These are all silly examples, but before everyone had internet access, this was a relevant question. The widespread availability of the internet and software like git solved these issues, which makes it all the more petty that Google now requires an actual application process, waiting times, and Google Drive dumps just to get access to the source code for Pixel drivers. Google is clearly trying to kill whatevers left of the Android Open Source Projects rotting corpse, only barely technically complying with any license requirements only because theyre obligated to. The Android team at Google must be a hoot at parties.
- Linux 7.2 Reverts DRM Scheduler Change After Serious GPU Regressions
by George Whittaker
Linux kernel developers made a significant last-minute graphics change for Linux 7.2, reverting the DRM GPU scheduler back to its previous FIFO policy by default after the newer fair scheduling implementation caused serious performance regressions. The revert was submitted just before the final Linux 7.2 release after users reported severe slowdowns and desktop freezes under sustained GPU workloads.
The decision demonstrates the kernel community’s conservative approach to regressions: when a new feature causes problems this late in a development cycle, restoring known-good behavior can be safer than rushing an incomplete fix.
What Changed in Linux 7.2?
Earlier in the Linux 7.2 development cycle, the DRM subsystem switched its default GPU scheduling policy to a new fair scheduler.
The goal was to distribute GPU execution time more fairly between competing workloads. Instead of relying on the established FIFO scheduling behavior, the new implementation uses a fairness-oriented approach designed to prevent one workload from dominating GPU resources.
However, real-world testing exposed problems that had not appeared during earlier development.
The final DRM fixes for Linux 7.2 therefore:
Revert the fair scheduler changes Restore FIFO as the default Restore selectable scheduling policies Mark the fair scheduling policy as experimental
DRM maintainer Dave Airlie acknowledged that developers may have moved too aggressively when switching to the new scheduler.
AMD Radeon Gaming Exposed the Regression
The problem became particularly noticeable during gaming on an AMD Radeon RX 9070 XT.
A regression report described severe performance degradation when the GPU remained close to 100% utilization. A game running through Proton could drop to roughly 10 FPS or freeze, while audio continued playing normally.
The problem could become severe enough that the entire KDE Plasma Wayland session stopped responding, sometimes requiring the compositor to be killed or the computer to be rebooted.
Interestingly, reducing GPU load—such as by opening an in-game menu or switching away from the game—could immediately stop the stuttering.
FIFO Worked, FAIR Did Not
Testing provided strong evidence that the new scheduling policy was responsible.
The reporter compared Linux 7.2 release candidates using FAIR against configurations using the previous FIFO policy. Under otherwise similar conditions:
FAIR: reproduced the performance problem.
FIFO: survived extended stress testing without the regression.
Linux 7.1.x also behaved normally.
Go to Full Article
- Intel’s Linux Vulkan Driver Adds AV1 Video Encoding for Arc Alchemist GPUs
by George Whittaker
Intel’s open-source Linux graphics stack has taken another step forward with hardware-accelerated AV1 encoding through Vulkan Video. New code merged for Mesa’s ANV Vulkan driver enables the VK_KHR_video_encode_av1 extension on Intel’s DG2/Alchemist graphics hardware, including Arc A-Series GPUs.
The development expands Intel’s Vulkan Video capabilities on Linux and gives applications another standardized way to access the dedicated video encoding hardware found in modern Intel GPUs.
AV1 Encoding Arrives in Intel ANV
The key change is support for the Vulkan extension VK_KHR_video_encode_av1 in Mesa’s open-source Intel ANV driver.
The extension was finalized by the Khronos Group in 2024 and provides a standardized Vulkan interface for hardware-accelerated AV1 encoding. It complements Vulkan Video’s existing AV1 decoding support and means Vulkan can provide both encoding and decoding interfaces for AV1, H.264, and H.265.
Intel had previously stated that its Arc graphics products would support Vulkan Video AV1 encoding through a future software update.
Initially Targeting Intel Arc Alchemist
The newly enabled Linux support specifically targets DG2, better known commercially as Intel’s Arc Alchemist GPU generation.
These GPUs already contain dedicated hardware capable of AV1 encoding, so the Mesa update does not add AV1 capability through software. Instead, it provides Vulkan applications with another way to access the GPU’s existing hardware video engine.
That distinction is important because hardware encoding can deliver much better performance and efficiency than encoding AV1 entirely on the CPU.
Why AV1 Matters
AV1 has become increasingly important for streaming, screen recording, video conferencing, and online video distribution.
The codec can provide high image quality at relatively low bitrates, making it attractive for applications where bandwidth and storage efficiency matter. It is also royalty-free, which has helped encourage adoption throughout the open-source ecosystem.
Hardware AV1 encoding can be particularly useful for:
Game streaming
Desktop recording
Live broadcasting
Video conferencing
Video transcoding
Content creation
For Linux users with supported Intel Arc hardware, Vulkan Video now has the potential to provide a common API for these workloads.
Building on H.264 and H.265 Support
The AV1 work follows recent improvements to Intel’s Vulkan Video encoding support for other codecs.
Go to Full Article
- New AMD P-State Patch Delivers Major Linux Gaming Performance Boost
by George Whittaker
A newly proposed patch for the Linux kernel's AMD P-State CPU frequency scaling driver is showing impressive gaming performance improvements, potentially delivering a noticeable boost for Ryzen users without requiring new hardware. Early benchmarks indicate that the optimization can significantly improve frame rates in CPU-bound games by allowing processors to respond more quickly to changing workloads. (phoronix.com)
Although the patch has not yet been merged into the mainline Linux kernel, the initial results have generated considerable excitement among Linux gamers and kernel developers alike.
What Is AMD P-State?
AMD P-State is the modern CPU frequency scaling driver for AMD Ryzen processors on Linux. Rather than relying on the older ACPI CPUFreq driver, AMD P-State communicates directly with the processor to adjust clock speeds based on workload demands.
Its goals include:
Faster frequency scaling Improved power efficiency Better responsiveness Higher performance during demanding workloads Lower power consumption when the system is idle
Most modern Linux distributions already support AMD P-State on compatible Ryzen processors. (kernel.org)
A Focus on Gaming Performance
The new patch specifically targets how quickly AMD P-State responds when a game suddenly demands additional CPU performance.
Many games rapidly alternate between light and heavy CPU workloads. If the processor takes too long to increase its clock speed, short performance dips can occur.
The proposed optimization reduces that delay, allowing the CPU to boost more aggressively when needed and helping maintain smoother gameplay. (phoronix.com)
Promising Benchmark Results
According to early testing, the patch delivers meaningful improvements across several Linux gaming workloads.
Reported benefits include:
Higher average frame rates Better 1% low FPS performance Faster CPU frequency response Improved responsiveness during gameplay More consistent frame delivery
The biggest gains appear in CPU-limited games where processor performance has a greater impact than GPU performance. Systems that are already GPU-bound may see smaller improvements. (phoronix.com)
Designed for Modern Ryzen CPUs
The patch targets systems using the AMD P-State driver, which supports many recent Ryzen processors.
Compatible platforms generally include:
Go to Full Article
- Linux Kernel Begins Phasing Out the crypto_rng Layer to Simplify Random Number Generation
by George Whittaker
Linux kernel developers are moving forward with plans to remove the crypto_rng API layer, a long-standing component of the kernel's cryptographic subsystem. The proposed change is part of a broader effort to simplify the kernel's internal architecture by eliminating redundant code paths and encouraging developers to rely on the kernel's modern random number generation interfaces instead. (phoronix.com)
Although the change happens entirely behind the scenes, it reflects the Linux kernel community's ongoing commitment to reducing technical debt, improving maintainability, and modernizing core infrastructure.
What Is the crypto_rng Layer?
The crypto_rng framework is an API within the Linux kernel's Crypto API that provides random number generation services for kernel components.
Historically, it allowed different kernel subsystems and drivers to request random data through a generic cryptographic interface. Over time, however, the kernel's dedicated random number generator has matured considerably, making much of the crypto_rng abstraction unnecessary. (kernel.org)
Today, developers generally recommend using the kernel's built-in random number generation functions directly instead of routing requests through the older crypto layer.
Why Developers Want to Remove It
According to discussions on the Linux kernel mailing list, the crypto_rng layer has become largely redundant.
Modern kernel code already relies on well-established interfaces such as:
get_random_bytes() get_random_u32() get_random_u64()
These functions are maintained as part of the kernel's primary random number generation subsystem and are widely used throughout Linux. Maintaining an additional abstraction layer increases code complexity without providing significant practical benefits. (phoronix.com)
Removing unnecessary infrastructure also makes the kernel easier to maintain and audit over the long term.
Simplifying the Crypto API
The Linux Crypto API has evolved significantly over the years as new algorithms, hardware accelerators, and security features have been introduced.
Kernel maintainers have increasingly focused on:
Go to Full Article
- GNU Binutils 2.47 Released with New RISC-V Features, Linker Improvements, and Reproducible Builds
by George Whittaker
The GNU Project has officially released GNU Binutils 2.47, the latest version of its essential collection of binary development tools for Linux and other Unix-like systems. The release delivers numerous bug fixes alongside new assembler, linker, and disassembler capabilities, expanded RISC-V support, reproducible source archives, and continued modernization of the GNU toolchain.
Used by developers worldwide, GNU Binutils forms a core part of the software development ecosystem, providing the low-level tools needed to assemble, link, inspect, and manipulate executable programs and object files.
What Is GNU Binutils?
GNU Binutils is a collection of command-line utilities that work closely with compilers such as GCC and Clang. While a compiler translates source code into object files, Binutils provides the tools needed to transform those object files into executable programs and libraries.
The package includes well-known utilities such as:
ld (GNU Linker) as (GNU Assembler) objdump objcopy readelf nm strip ar strings
Together, these tools are used daily by Linux distributions, embedded developers, operating system projects, and software engineers building applications in C, C++, Rust, Go, and many other languages.
Expanded Support for RISC-V
One of the biggest improvements in Binutils 2.47 is expanded support for the rapidly growing RISC-V architecture.
The release adds support for several additional standard RISC-V extensions, allowing developers targeting modern RISC-V processors to work with newer instruction sets and hardware capabilities. These additions continue the GNU toolchain's strong commitment to one of the fastest-growing open processor architectures.
As more Linux distributions, development boards, and enterprise hardware adopt RISC-V, keeping development tools current is becoming increasingly important.
New Assembler Options
GNU Assembler (gas) gains several useful enhancements in version 2.47.
Among the most notable is a new command-line option:
--reloc-section-sym=[all|internal|none]
This option gives developers finer control over how relocations referencing locally bound symbols are converted to section symbols, improving flexibility for certain assembly and linking workflows.
The release also introduces numerous assembler improvements across multiple CPU architectures.
Better Disassembly for AArch64
Developers working with Arm-based systems also benefit from new functionality.
Go to Full Article
- GOG Officially Expands Linux Support with Native Galaxy Client in Development
by George Whittaker
After years of requests from the Linux gaming community, GOG has officially confirmed that it is developing native Linux support for the GOG Galaxy launcher. The announcement marks one of the biggest shifts in the company's history and signals a stronger commitment to Linux as a first-class gaming platform. While GOG has offered DRM-free Linux game downloads since 2014, its Galaxy launcher has remained exclusive to Windows and macOS—until now.
Although the company has not announced a release date, GOG says Linux has become a major area of investment, with development already underway.
A Long-Requested Feature Finally Becomes Reality
Native GOG Galaxy support has consistently ranked among the most requested features from Linux users. Until now, players who wanted to use Galaxy's library management, cloud saves, achievements, and automatic updates had to rely on compatibility layers or community-developed launchers.
In a statement to GamingOnLinux, GOG joint CEO Krzysztof Papliński said the company has hired a dedicated specialist and is actively exploring the best approach for bringing Galaxy to Linux. He described Linux as "one of the topics we hear the most about from our community," emphasizing that the project is now an active development priority.
Why GOG Galaxy Matters
Unlike the web-based game downloads that Linux users already have access to, GOG Galaxy serves as a full-featured game management application.
The launcher currently offers features including:
Automatic game installation and updates Cloud save synchronization Achievement tracking Playtime statistics Game library organization Integrated storefront browsing Friends lists and social features Cross-platform launcher integration
Today, Linux users typically access these capabilities through community projects such as Heroic Games Launcher, Lutris, or Bottles. A native Galaxy client would provide an officially supported alternative with direct integration into GOG's ecosystem.
Linux Is No Longer an Afterthought
GOG's announcement reflects the growing importance of Linux gaming over the past several years.
The rapid adoption of Valve's Steam Deck, continuous improvements to Proton, and increasing hardware compatibility have significantly expanded Linux's role in PC gaming. As Linux's share of Steam users has grown, more developers and publishers have begun treating the platform as a viable target rather than a niche operating system.
For GOG, supporting Linux more fully aligns with its philosophy of giving users greater control over their purchased games.
Go to Full Article
- Linux Kernel 7.1.4 Released with Bug Fixes, Security Updates, and Hardware Improvements
by George Whittaker
Greg Kroah-Hartman has announced the release of Linux Kernel 7.1.4, the latest stable maintenance update for the Linux 7.1 series. As with other stable kernel releases, version 7.1.4 focuses on fixing bugs, improving hardware compatibility, and addressing security and reliability issues without introducing new features. The update became available on July 18, 2026, and users of the Linux 7.1 branch are encouraged to upgrade as soon as possible.
Rather than changing the kernel's feature set, Linux 7.1.4 delivers dozens of targeted fixes collected from developers across multiple kernel subsystems, helping ensure a more stable experience for desktops, servers, embedded devices, and cloud deployments.
Another Important Stable Maintenance Release
The Linux stable branch exists to provide safe updates between major kernel versions. Every stable release undergoes review before being published and contains fixes that have already been tested in the mainline kernel.
Linux 7.1.4 continues this process by incorporating patches that resolve regressions, improve system stability, and fix issues reported by users since the release of Linux 7.1.3.
For most users, these maintenance updates are recommended because they improve reliability without altering existing functionality.
Bug Fixes Across Multiple Kernel Subsystems
Like previous stable releases, Linux 7.1.4 includes fixes spanning many areas of the kernel.
The update addresses issues affecting:
Memory management File systems Networking Device drivers Architecture-specific code Core kernel infrastructure USB and storage subsystems
These targeted patches help eliminate crashes, improve compatibility with newer hardware, and resolve edge cases that may only appear under specific workloads.
Improved Hardware Compatibility
One of the ongoing goals of Linux stable releases is expanding support for existing and newly released hardware.
Linux 7.1.4 includes updated drivers and compatibility fixes for various devices, helping improve support for:
Graphics hardware Storage controllers Networking devices USB peripherals Laptop components ARM development boards
Although no major driver additions are expected in a maintenance release, incremental improvements like these often resolve hardware-specific bugs reported by users after earlier releases.
Security and Reliability Updates
Stable kernel releases also include security-related fixes that have been accepted into the maintenance branch.
Go to Full Article
- Firefox 153 Released with HDR Video, Smarter PDF Tools, Better Privacy, and New Linux Improvements
by George Whittaker
Mozilla has officially released Firefox 153, bringing another round of improvements to its open-source web browser. The latest version introduces new multimedia capabilities, enhanced PDF editing tools, stronger privacy protections, better support for modern web technologies, and several features aimed at improving the browsing experience across Linux, Windows, and macOS. Firefox 153 became available on the stable release channel on July 21, 2026.
While this isn't a major redesign, Firefox 153 delivers a collection of practical updates that benefit both everyday users and web developers.
HDR Video Playback Comes to Windows
One of the headline features in Firefox 153 is support for High Dynamic Range (HDR) video playback on compatible Windows systems.
Users with HDR-capable displays and Windows HDR enabled can now enjoy richer colors, improved contrast, and brighter highlights when watching supported online video content. Mozilla notes that certain laptop displays offering only "HDR video streaming" are not currently supported, and some HDR videos recorded on mobile phones may still have limitations.
Although this feature is Windows-specific, it represents another step toward bringing Firefox in line with modern multimedia standards.
PDF Editing Becomes Even More Powerful
Mozilla continues expanding Firefox's built-in PDF editor, eliminating the need for third-party applications in many situations.
Firefox 153 introduces the ability to:
Merge multiple PDF documents Insert images as new PDF pages Continue using existing editing tools such as annotations, page organization, and text editing
These additions make Firefox an even more capable document viewer and editor, especially for users who frequently work with PDF files.
Stronger Privacy and Permission Controls
Privacy remains one of Firefox's biggest selling points, and version 153 introduces several enhancements designed to give users more visibility and control over website permissions.
New improvements include:
A visual indicator when a website is actively accessing your location More restrictive default permissions for browser extensions accessing local files Local Area Network (LAN) restrictions enabled by default for all users
These changes reduce unnecessary exposure of local resources while making it easier to understand what websites and extensions can access.
Experimental JPEG XL Support
Firefox 153 also adds experimental support for the JPEG XL image format, which many developers consider a promising successor to older image standards.
JPEG XL offers several advantages, including:
Go to Full Article
- NanoKVM-Go Brings AI-Powered Hardware Control to Linux with a Compact USB-C KVM
by George Whittaker
Sipeed has introduced NanoKVM-Go, a compact USB-C KVM-over-IP device that combines remote hardware management with AI integration. Designed for Linux, Windows, macOS, and other USB-C devices, NanoKVM-Go allows users to remotely view and control a system through a web browser while exposing its keyboard, mouse, and display functions to AI agents via the Model Context Protocol (MCP).
Unlike traditional KVM-over-IP solutions that require multiple cables and dedicated networking hardware, NanoKVM-Go simplifies the setup into a single USB-C connection, making remote administration and AI-assisted automation more accessible for developers, system administrators, and homelab enthusiasts.
A Portable USB-C KVM
NanoKVM-Go is roughly the size of a smartwatch, measuring about 45 × 40 × 15 mm, yet it combines several functions into a single device.
Key hardware features include:
USB-C connection for video, audio, keyboard, mouse, and power Wi-Fi 6 connectivity Browser-based remote management Support for virtual USB storage Built-in Tailscale integration for secure remote access Fanless aluminum enclosure with low power consumption
Because it connects over USB-C using DisplayPort Alt Mode, the device can manage a wide variety of hardware without requiring software installation on the target system.
Designed for Linux and Beyond
NanoKVM-Go supports numerous USB-C devices, including:
Linux desktops and laptops Windows PCs macOS systems Mini PCs Steam Deck Android devices with DisplayPort Alt Mode iPhone 15 and newer models Tablets supporting USB-C video output
For Linux users, this provides an easy way to perform BIOS configuration, operating system installation, kernel debugging, or remote troubleshooting—even when the operating system is unavailable.
AI Integration Through MCP
One of NanoKVM-Go's defining features is its AI-native design.
Rather than simply streaming a desktop remotely, the device exposes its KVM functions as an MCP (Model Context Protocol) server, allowing compatible AI agents to interact with the connected computer using hardware-level keyboard and mouse input.
This enables AI systems to:
View the screen Move the mouse Type on the keyboard Launch applications Navigate user interfaces Complete repetitive desktop workflows
Because control happens at the hardware level, AI agents can interact with systems regardless of the operating system installed.
Go to Full Article
- AI Uncovers a 15-Year-Old Linux Kernel Root Vulnerability Hidden Since 2011
by George Whittaker
Artificial intelligence has helped uncover one of the most significant Linux kernel security flaws in recent years. Security researchers at Nebula Security announced the discovery of GhostLock (CVE-2026-43499), a critical local privilege escalation vulnerability that remained hidden in the Linux kernel for approximately 15 years before being identified by the company's AI-powered vulnerability research platform, VEGA.
The vulnerability affects Linux kernels dating back to version 2.6.39 (2011) and allows an unprivileged local user to obtain full root privileges on vulnerable systems. Its discovery not only highlights the importance of timely kernel updates but also demonstrates how AI is beginning to transform vulnerability research.
What Is GhostLock?
GhostLock is a use-after-free (UAF) vulnerability located in the Linux kernel's futex (fast userspace mutex) implementation.
Futexes are synchronization primitives that allow user-space applications to efficiently coordinate access to shared resources while minimizing expensive kernel interactions. Because they are widely used throughout Linux, any flaw within this subsystem can have broad security implications.
According to Nebula Security, incorrect handling of the remove_waiter() function can leave behind a dangling kernel pointer that an attacker can manipulate to execute arbitrary code with kernel privileges.
A Reliable Path to Root Access
One of the reasons GhostLock has attracted so much attention is the reported reliability of the exploit.
Researchers demonstrated that an attacker with nothing more than a standard local user account can escalate privileges to root in roughly five seconds, with a reported success rate of 97% on vulnerable systems.
Unlike many kernel exploits that are unstable or require highly specific system configurations, GhostLock appears to be both practical and repeatable, making it particularly concerning for administrators.
Container Escapes Are Also Possible
The implications extend beyond traditional Linux desktops and servers.
Researchers report that GhostLock can also be used to escape containers and compromise the underlying host operating system. Because containers share the host kernel, a successful privilege escalation inside a container can potentially grant root access to the host itself.
This makes the vulnerability especially important for environments running:
Go to Full Article
|
