|
1825 Monetary Lane Suite #104 Carrollton, TX
Do a presentation at NTLUG.
What is the Linux Installation Project?
Real companies using Linux!
Not just for business anymore.
Providing ready to run platforms on Linux
|
Show Descriptions... (Show All)
(Two Column)
- Security updates for Monday
Security updates have been issued by Debian (cjose, kernel, libreoffice, rsync, ruby3.3, telegram-desktop, vim, and zlib), Fedora (bind, composer, copyparty, dnf5, elixir, fasterxml-oss-parent, gnome-remote-desktop, goose, jackson-annotations, jackson-bom, jackson-core, jackson-databind, jackson-jaxrs-providers, jackson-modules-base, jackson-parent, java-21-openjdk, java-21-openjdk-portable, jupyterlab, kryoptic, luksmeta, mingw-cfitsio, mingw-expat, mingw-freetype, mingw-glib-networking, mingw-harfbuzz, mingw-qt5-qtbase, mingw-qt5-qtdeclarative, mingw-qt5-qtwebkit, mingw-qt6-qtbase, mtools, NetworkManager-l2tp, nginx, nginx-mod-brotli, nginx-mod-fancyindex, nginx-mod-headers-more, nginx-mod-js-challenge, nginx-mod-modsecurity, nginx-mod-naxsi, nginx-mod-vts, nodejs-pnpm12, pcre2, perl-Spreadsheet-XLSX, pie, python-boto3, python-botocore, python-joserfc, python-jupyter-builder, python-jupyterlab-server, python-jupytext, python-nbdime, python-notebook, python-s3transfer, python3.12, rccl, rsync, rust-blake2b_simd, rust-blake3, rust-constant_time_eq, rust-lzma-rust2, rust-ppmd-rust, rust-regorus, rust-sccache, rust-totp-rs, rust-typed-path, rust-zip, rust-zip0.6, rust-zip2, sofia-sip, suricata, wordpress, and xen), Mageia (gimp, python-gitpython, and suricata), Red Hat (osbuild-composer), Slackware (httpd), SUSE (bind, brotli, ca-certificates-mozilla, chromedriver, containerized-data-importer1.65-api, corepack24, docker-compose, flatpak, fuse-overlayfs, git-lfs, gitoxide, go1.27, google-cloud-sap-agent, google-guest-agent, gotosocial, kubevirt1.8, kubevirt1.8-container-disk, kubevirt1.9-container-disk, libmariadbd-devel, libntpc1, libopenscap33, libsndfile-devel, libspice-server-devel, libtirpc-devel, matomo, mihomo, mozilla-nss, nano, nmap, nodejs22, perl-Mozilla-CA, python-Brotli, python-CairoSVG, python-certifi, python313-Pillow, rsyslog, stgit, and thunderbird), and Ubuntu (python-tornado).
- Asahi Linux 7.3 progress report
The Asahi Linux developers have put out a new reporton their progress toward a Linux distribution for Apple devices.
Some time ago, we were made aware of multiple attempts to exploit our permissive licensing to hijack our work, with a direct view to replacing the project and aggressively monetising Linux on Apple Silicon. In some extreme cases, in-development feature code was being lifted straight out of our personal forks and published without attribution or lazily rewritten with LLM assistance to obfuscate its origin. The MIT licence explicitly allows this, and has no carveouts to protect against bad faith actors.
As such, we made the difficult decision to begin the process of transitioning all of our repositories to the GNU General Public License version 2 or later. Going forward all Asahi Linux code will be licenced under strong copyleft licences only. Those who do not learn from history are doomed to repeat it.
- Amutable Foundations: A Technical Overview
Lennart Poettering, Michael Vogt, and Joaquim Rocha have put together adetailed overview of what the Amutable Operating System (AOS) andassociated infrastructure will look like.
The image-based OS approach enables us to enforce some very strict but powerful security properties, which elevate the security posture of the system substantially above traditional Linux systems. Specifically, let's highlight seven major essential security properties of AOS here: No Shell + No SSH + No Language Interpreters. By default AOS does not install a UNIX shell, nor makes remote access via SSH available on the nodes. Moreover, we do not install any of the usual language interpreters (Python, Perl, …) by default. For most nodes a shell or interpreted language support is not required and it removes a whole class of attacks. Signed Images Only. On AOS only images that come with Verity data signed by a signing key listed in the Verity keyring may be activated. [...]
- [$] Locking down hibernation for the winter
When a computer hibernates, the kernel writes the contents of memory to disk andthen shuts the system down. Resuming from hibernation involves reading that databack into memory, and then having the kernel pick up where it left off.Unfortunately, the kernel does not haveany way to know that the data it is reading back has not been tampered with,which is why lockdown, an optional kernelfeature that attempts to prevent modifications to the running kernel, disables hibernation.Matthew Garrett, who has been working on lockdown for many years, has shareda patch set that aims to fix this problem. His solution must also protectagainst downgrade attacks (where an attacker reboots the computer with an olderkernel version to bypass new protections), which complicates the implementation.
- Seven stable kernels with fixes for three Xen vulnerabilities
Hot on the heels of the previoustwo stable kernels, Greg Kroah-Hartman has announced the release of the 7.3.3, 6.18.62,6.12.116, 6.6.162, 6.1.192,5.15.225, and 5.10.274 stable kernels. Each one only containsfixes for three use-after-free vulnerabilities announced today by the Xensecurity team.
Two of the vulnerabilities could allow an attacker to cause a denial of service (DoS) for theentire Xen host machine with possible information leakage (CVE-2026-100080,CVE-2026-100082),and one may allow privilege escalation as well as a DoS of the host machine (CVE-2026-100081). Usersshould, of course, upgrade if they are using Xen.
- Security updates for Friday
Security updates have been issued by AlmaLinux (cockpit-files, container-tools:rhel8, delve, gcc-toolset-12-binutils, gimp:2.8, glibc, go-toolset:rhel8, kernel, libfastjson, mariadb:10.3, mod_auth_openidc:2.3, mysql:8.0, php:8.0, pki-core:10.6 and pki-deps:10.6, squid:4, tang, tesseract, thunderbird, and virt:rhel and virt-devel:rhel), Debian (chromium, ntfs-3g, puppet-agent, and trapperkeeper-authorization-clojure), Fedora (freerdp, goose, gpsd, hatch, perl-HTTP-Headers-ActionPack, perl-MIME-tools, perl-Plack, perl-Starman, proftpd, python-mistune, ruby-build, rust-crypto-bigint, rust-ctutils, rust-elliptic-curve, rust-num-bigint, rust-num-bigint0.4, rust-num-modular, rust-num-modular0.6, rust-num-prime, rust-zmij, rust-zstd, rust-zstd-safe, rust-zstd-safe7, rust-zstd-sys, rust-zstd0.13, scribus, sofia-sip, tailscale, tor, and wordpress), Oracle (cockpit-files, delve, firefox, gimp:2.8, kernel, and osbuild-composer), Red Hat (delve, git-lfs, go-toolset:rhel8, grafana, ignition, opentelemetry-collector, osbuild-composer, python-pillow, and yggdrasil), Slackware (openssh), SUSE (bind, brotli, cpupower, expat, fuse-overlayfs, go1.26, google-guest-agent, helm, ibus-typing-booster, kernel, kyverno, libmodplug-devel, librsvg, libX11, nvidia-open-driver-G06-signed, owntone, parted, perl-Cpanel-JSON-XS, perl-Text-CSV_XS, php8, python-Brotli, regclient, roundcubemail, rsyslog, and tomcat), and Ubuntu (ca-certificates, frr, haproxy, linux-nvidia-7.0, linux-nvidia-bos, linux-nvidia-tegra, and nginx).
- [$] User namespaces + file capabilities = trouble
User namespaces are a key part of thekernel's toolkit for assembling containers; processes within a usernamespace can appear to have full root access to the system while gainingno extra privileges in the wider system. At least, that is the intent. Inpractice, keeping privilege contained within a user namespace has oftenturned out to be difficult. As an example, consider thissmall patch series from Josef Bacik, which is intended to address somesituations where a process within a user namespace can elevate theprivileges of processes outside of it.
- Security updates for Thursday
Security updates have been issued by AlmaLinux (dpdk, httpd:2.4, kernel, kernel-rt, mysql:8.0, php:7.4, php:8.0, qt5, ruby:2.7, ruby:3.0, tesseract, webkit2gtk3, and xorg-x11-server-Xwayland), Debian (imagemagick, puppet-agent, symfony, trapperkeeper-authorization-clojure, and xen), Fedora (3proxy, bind, bind-dyndb-ldap, curl, dhcpcd, erlang-jose, forgejo, freetype, laszip, libical, libmongocrypt, markdownlint-cli2, mongo-c-driver, openbao, pipx, python-boto3, python-botocore, python-crate-ingredients, python-lxml-html-clean, python3.11, python3.13, python3.14, python3.15, roundcubemail, rply, ruby-build, rust-app-store-connect, rust-qemu-rdp, rust-redlib, scribus, and valkey), Mageia (minetest, python-pypdf, stunnel, znc, and zvbi), Oracle (.NET 10.0, bind, brotli, cockpit, dpdk, fence-agents, freerdp, gimp, glibc, grafana, gvfs, host-metering, kernel, python-dns, qemu-kvm, raptor2, tesseract, webkit2gtk3, and xorg-x11-server-Xwayland), Red Hat (grafana and pcs), Slackware (rsync), SUSE (amazon-cloudwatch-agent, apache2, aws-efs-utils, brotli, cephfs, coredns, cramfs-tools, firefox-esr, fuse-overlayfs, ghostscript, GraphicsMagick, libpolkit-agent-1-0-128, libsoup, nvidia-open-driver-G07-signed, perl-Dancer2, python-PyJWT, python313-joserfc, rsyslog, switcheroo, trivy, valkey, vexctl, and xdg-desktop-portal), and Ubuntu (apt, libphp-adodb, net-snmp, pillow, squid, and twisted).
- Critical security vulnerability affects OpenSSH on Alpine Linux systems
Version 10.6p2 ofOpenSSH has been released with a workaround for a critical vulnerability thataffects Linux systems that use musl libcwith PAM disabled, such as AlpineLinux. OpenSSH developer Damien Miller said:
If you operate a Linux system that uses musl libc without PAM (Alpine Linuxis one example) then stop reading and set PasswordAuthentication=no or disableSSH for these systems IMMEDIATELY.
This vulnerability does not exist on non-Linux systems, Linux/glibc systemsand Linux systems that use PAM for password authentication.
We consider the root cause of this bug to be outside OpenSSH itself, butwe're in a good position to deliver a mitigation quickly.
The Alpine Linux project has announced thatit will be backporting the OpenSSH fix "all the way back to Alpine 3.16",which was released in May2022.
- [$] LWN.net Weekly Edition for November 5, 2026
Inside this week's LWN.net Weekly Edition:
Front: Kernel cells; Debian LLM reviews; glibc system-call wrappers; Binder in Rust; Kernel CVE flood; Fedora KDE and X11 removal; 7.4 merge window part two; Portable Python. Briefs: MTCP RCE; Bash security; XCPE botnet; Bazzite 45; Fedora 45; openSUSE Leap 16.1; Tor Browser 16.0; Quotes; ... Announcements: Newsletters, conferences, security updates, patches, and more.
- [$] Plasma X11 session removal surprises some Fedora users
The KDE Project announced, in 2025, that Plasma 6.7 wouldbe the last version of the desktop environment that would support X11sessions. Those who keep up with KDE's announcements no doubt expected it whenPlasma 6.8dropped X11 support as promised. What seems to have come as a surprise, atleast to a number of Fedora KDE PlasmaDesktop users, is that the Fedora 44 release—which shipped inApril with Plasma 6.6—receivedan update to Plasma 6.8 that swept away the X11 session without much warning.Despite the surprise, it is gone for good: the Fedora Engineering SteeringCommittee (FESCo) has votedagainst a request to revert the update for Fedora 44 and the just-releasedFedora 45.
- Bazzite 45 released
Version45 of Bazzite, the image-based gaming distribution based onFedora Linux, has been released. Notable changes in this release include arebase to Fedora 45, updated Open Gaming Collective (OGC)kernels, support for Logitech TrueWheel devices, and more.
LWN covered Bazzite inDecember 2025.
- [$] Portable Python scripts with dependencies
A basic Python script is portable: it can be copied between machines with little concern about compatibility.A script that depends on third-party packages requires quite a bit morecare and consideration, however.In 2023, PEP723 ("Inline script metadata") introduced a standard for declaring a Python script'sdependencies inside the script itself.Several third-party tools can now automatically install and manage those dependencies, but there is still little official support for this standard within Python itself.
- Long-range Wi-Fi HaLow gateway offers OpenWrt and dual GbE
Morse Micros HaLowLink 2! gateway runs OpenWrt on a MediaTek MT7621 processor with an MM8108 Wi-Fi HaLow radio supporting ranges of up to 1km and PHY data rates of up to 43.3Mbps. Originally announced in September 2025, the gateway is now available through distributors including Seeed Studio, Mouser Electronics, and DigiKey. The gateways main wireless0
- Agama Unattended installation via profile.json of Tumbleweed's KVM Guests
Tumbleweed updates continuously, manual interactive installations frequently break due to rapid package, installer (Agama), or kernel shifts. Unattended automation ensures predictable, reproducible, and verifiable states for disaster recovery and testing. Mitigating Rolling-Release Fluctuation: Tumbleweed moves extremely fast. An unattended deployment via structured templates (profile.json) ensures that the initial bootstrap bypasses manual package selection errors and unpredictable installer UI changes.
- Asking My Virtual Assistant: Best Linux Distro for Beginners?
Hey everyone! Just dropped a quick 1-minute tech showcase featuring virtual assistant named Lune (powered by Python, PyQt, Ollama, and Piper TTS with the Cori voice model, running on EndeavourOS). In this video, I asked Lune directly via mic: "What is the best Linux distro for new users?"
- Extension Manager 0.7 released with new (and fixed) features
A new version of Extension Manager, the desktop app that makes it easier to browse, install and manage GNOME Shell extension without a web browser, has been released. Extension Manager 0.7.0 includes a number of welcome improvements, new features and restores a few nifty bits that had stopped working in earlier versions. With the new update, you can now find and open installed extension0
- 9to5Linux Weekly Roundup: November 8th, 2026
The 317th installment of the 9to5Linux Weekly Roundup is here for the week ending November 8th, 2026, keeping you updated on the most important developments in the Linux world.
- Linux 7.5 To Provide More AMD Ryzen AI NPU AIE4 Enablement
Even before the Linux v7.4 merge window was over, there were already two pull requests of drm-misc-next material targeting for what will be Linux 7.5. This week already saw the third drm-misc-next pull request of more feature patches targeting this next kernel version0
- Open hardware board gives Echo Dot a second life with Home Assistant
Crowd Supply has launched a campaign for LocalDot, an open-hardware board developed by AAElectronics that converts third-generation Amazon Echo Dots into Home Assistant voice devices. The 83 37mm PCB uses an ESP32-S3 and ESP32-P4 for connectivity and audio processing while retaining the original microphones, speaker, buttons, and LEDs. The ESP32-S3 handles Wi-Fi connectivity and0
- HyprBSD Provides Wayland-Based Desktop Built Atop FreeBSD, Complete With Steam Gaming
While FreeBSD has been working to improve its desktop and laptop experience, that work isn't yet shipping in released form for the OS installer and other ongoing efforts. Now there's a new desktop FreeBSD distribution on the scene with HyprBSD providing a Wayland-based desktop experience and with the Linux binary compatibility layer even an easy route to gaming with Steam0
- Amutable Foundations: A Technical Overview
Lennart Poettering, Michael Vogt, and Joaquim Rocha have put together a detailed overview of what the Amutable Operating System (AOS) and associated infrastructure will look like. The image-based OS approach enables us to enforce some very strict but powerful security properties, which elevate the security posture of the system substantially above traditional Linux systems. Specifically, let's0
- Orbiter Detects Signs of Possible Volcanic Activity on Mars
Futurism reports:While many scientists have long held that Mars is "geologically dead" inside, new research is adding to the growing body of evidence to the contrary. As detailed in a new paper published in the journal Science Advances, an international team of researchers examined data collected by the European and Russian ExoMars Trace Gas Orbiter in 2021, which found that Mars is slowly belching hydrogen chloride gas. The researchers suggest this gas is being released from hot magma deep beneath its surface after discovering intriguing new fissures along a massive volcano, indicating the planet may be geologically active after all — or at least it was until relatively recently. The research could have significant implications for the possibility of ancient life on the Red Planet, hinting at a far warmer and thicker atmosphere — and an abundance of liquid water on its surface — in its not-too-distant past.... The team discovered new fissures measuring thousands of feet in length... suggesting ongoing activity underneath the surface. The researchers discovered discolorations along these fissures, concluding that they may be the result of seeping gases leaving mineral deposits similar to volcanic gas vents on Earth... The fissures could also be a perfect place to find evidence of past life on the Red Planet [argued Daniel Mège, the study's colead author and a Polish Academy of Sciences professor]... "If hydrothermal systems are active, they could contain the ingredients and energy needed for microorganisms to develop, and shield microorganisms from the hostile and changing environment above the surface."
Read more of this story at Slashdot.
- Surprise for Cast of 'Return of the Living Dead' Sequel. They Were Replaced by AI
A crowdfunded sequel to the movie Return of the Living Dead was uploaded last weekend — but producer Richard Driscoll is drawing criticism for what he did to the 1985 punk/zombie classic. Kotaku reports:[The release of the movie] came to the surprise to the original cast, who were attached to star in the follow-up. Instead it seems Driscoll opted to use AI to generate the film... In 2024, Driscoll, who operates his own no-budget streaming service "DragonFLIX," launched an Indiegogo page for "TRASH's REVENGE Return of the Living Dead Universe." Unlike other fan projects, this one had a large portion of the original cast involved, with stars Randolph and Linnea Quigley acting as producers. It also threw in Quigley's fellow Sorority Babe in the Slimeball Bowl-O-Rama Michelle Bauer and the Oscar nominated Eric Roberts, who has seemingly been in everything except The Living Dead.... But after some confusion and radio silence between the cast and director, this incredible movie did not come to be. Last Halloween night, Driscoll pushed out [the almost entirely AI-generated] The Return of the Living Dead: Aftermath... The results won't surprise you. Robotic line delivery. Nonsensical sequence of events. Object impermanence. Everything's wet. Everyone looks shocked. At one point the video just flips around like you're watching on a phone someone dropped. And while the Return cast didn't film any of this footage, their likenesses are peppered throughout. "It turned out to be a fiasco," says Quigley. "I warned him, "Whatever you do, don't do any AI, because people don't like it, the fans don't like it." Living Dead alumni, even those who weren't attached to this film, have spoken out against Aftermath. They seem most concerned about the existing and continued use of their likeness, given that Driscoll has seemingly pivoted 'Trash's Revenge' into an additional project. Randolph encourages those who provided any funding to ask for a refund through their credit card company. While Romero's original film was public domain, Return of the Living Dead was not. Randolph also encourages Amazon, who bought MGM in 2022, to take legal action. A review on Reddit calls it "the worst 'film' I've ever seen," a production that "manages to not only be the worst zombie film ever made but is also the nadir of exploitation filmmaking.[T]hings quickly descend into madness and we get lots of bits of A.I. reporters out on the streets being attacked by A.I. zombies... [T]here are some A.I. cops battling it out too...
Read more of this story at Slashdot.
- Asahi Linux Drops MIT and Goes Full GPL After Spotting LLM-Assisted License Laundering
It's FOSS reports:Asahi Linux is the reason you can run Linux on an Apple Silicon Mac today. For years, the project put most of its own code under the MIT license so that anyone, including the BSDs, could reuse it as needed... They have announced that Asahi is moving all of its repositories to the GNU General Public License version 2 or later. Going forward, all Asahi Linux code will be under strong copyleft licenses only. Asahi Linux compares their dilemma to the 1990s, when "permissively licenced projects were viewed by tech companies as free real estate to pilfer and exploit," adding that "Those who do not learn from history are doomed to repeat it... The malicious practices of the 90s and 2000s have reared their ugly heads once again, this time driven in large part by both the insatiable appetite of frontier AI labs for high-quality training data, and militant animosity toward the Free Software community." In short, they argue that for Asahi Linux, using the permissive MIT license "is no longer viable."Some time ago, we were made aware of multiple attempts to exploit our permissive licensing to hijack our work, with a direct view to replacing the project and aggressively monetising Linux on Apple Silicon. In some extreme cases, in-development feature code was being lifted straight out of our personal forks and published without attribution or lazily rewritten with LLM assistance to obfuscate its origin. The MIT licence explicitly allows this, and has no carveouts to protect against bad faith actors. As such, we made the difficult decision to begin the process of transitioning all of our repositories to the GNU General Public License version 2 or later. Going forward all Asahi Linux code will be licenced under strong copyleft licences only. It's FOSS explains that "Under the GPL, anyone who distributes a modified version has to release the source under the same license. You can't legally build a closed, paid Apple Silicon distro on top of GPL code. And if a product's source has to be public, the copying is easier to spot." And their article also points out that before AI, bad actors attempting code laundering "usually meant manually rewriting code line by line, renaming variables and stuff, and shuffling functions around until it no longer looked like the original. LLMs made it much more easy and cheaper of course." In case you did not know, Asahi Linux forbids AI generated code contribution... As far as I can tell, this is the first time a major open source project has moved to copyleft specifically because of AI-assisted code laundering. Projects have relicensed before, but usually to stop cloud providers from reselling their work as a service. This one is specifically about AI... The move has drawn criticism, particularly from the BSD side, which was one of the main reasons Asahi chose MIT in the first place. OpenBSD's Apple Silicon support relies on Asahi's m1n1 bootloader.
Read more of this story at Slashdot.
- Electric Cars Are Close to Overtaking Petrol In the UK, Data Shows
69 million people people live in the United Kingdom. And now >Electrek reports:Battery-electric cars took 32% of the UK's new car market in October, while petrol cars fell to just 37.2%, according to new data from the SMMT. That's the closest the two have been. At the current pace, electric cars will outsell petrol in the UK within a year. And it could happen as soon as this December. The UK registered 152,730 new cars in October, up 5.4% year-over-year and the 11th straight month of growth for the overall market. All of that growth came from plug-ins. Battery-electric vehicle registrations jumped 32.7% to 48,858 units, and plug-in hybrids rose 30.1% to 22,898. Meanwhile, petrol fell 11.6% to 56,876 units, diesel dropped 15.9%, and even conventional hybrids were down 5%... The brands growing fastest in the UK are mostly Chinese. BYD registered 6,065 cars in October, up 73%. Jaecoo more than doubled to 6,089 units, Chery nearly tripled to 3,707, and Leapmotor doubled to 1,773. MG was up 85%. Looking at trend lines, EV car sales surpass petrol sales "around August 2027 at roughly 33% each," the article points out. "But that's the slow scenario, because it ignores December."UK battery-electric vehicle share spikes every December as automakers push volume to get closer to their zero-emission vehicle mandate targets... Petrol's days as the UK's default car are numbered. The only question is whether the milestone comes in December or sometime in 2027.
Read more of this story at Slashdot.
- Can CrowdStrike's New 'AI Kill Switch' Shut Down Rogue AI Agents?
CrowdStrike's "Falcon Guardian" protects Windows systems by enforcing policy, restricting unauthorized applications and blocking USB devices, notes Gartner.And now CrowdStrike says they're giving security teams "the ultimate human control over AI agents" with — an "AI Kill Switch... a defender can terminate it where it runs, block it from launching again, and cut off its enterprise network access.""When you deploy agents with a kill switch, you stay in control," said George Kurtz, CEO and founder of CrowdStrike... "The AI Kill Switch puts power in the hands of the people to realize AI safety...." In the case of a rogue agent, the AI Kill Switch will give the security decision-maker the final control: terminate the agent at its root, where it runs. It starts on the endpoint, where the Falcon sensor already operates, and builds on what Falcon Guardian already sees: what an agent is told to do, what it communicates, and what it executes... An authorized administrator triggers the action, and every action is recorded in the audit trail. CrowdStrike also announced it's acquiring Fiddler AI, a company it describes as "a leader in AI agent observability and explainability" that will give their Falcon platform "pre-deployment evaluation, continuous behavioral accountability, and agent explainability."Together with the Falcon Guardian innovations announced today, CrowdStrike will deliver comprehensive AI security and AI safety: Guardian secures agents from attack and misuse; Fiddler validates they behaved as intended. "Every company is deploying agents and asking the same thing: what are agents actually doing?" said George Kurtz, CEO and founder of CrowdStrike. "When a regulator or your board asks what an agent did, saying 'the model did it' is not an answer. Fiddler is the flight recorder for every agent: the observability to explain exactly what an agent did and why. This level of agent visibility and control enables AI safety." AI agents are goal-seeking. They hit an obstacle, find another path. An agent can hold valid credentials and approved tools and still make unsupported decisions, ignore instructions, or claim work it never completed. They don't have to be compromised to create risk. AI observability gives enterprises visibility into agent behavior. Explainability goes further, showing why agents make decisions and where things go wrong. Enterprises have to be able to say what an agent actually did, and why, a conversation they will increasingly have with auditors, regulators, boards, and heads of risk. CrowdStrike is promising pre-deployment evaluation for "accuracy, task completion, and policy compliance," as well as agent traceability and behavioral accountability ("Detect behavioral drift, hallucinations, and unintended actions in production, and show exactly what happened.") It's announcement also touts auditable governance: "Track agent decisions and actions across first-party, third-party, and coding agents, providing evidence for compliance and audits." And CrowdStrike also acquired Dreadnode, the company behind an automated AI security testing platform, to "continuously test every AI model, application, and agent for security weaknesses before deployment.""Enterprises are deploying AI faster than they can prove it is secure," said George Kurtz, CEO and founder of CrowdStrike. "A model can be jailbroken, an agent can be manipulated, and most organizations have no way to find those flaws until the AI is already in production. With Dreadnode, CrowdStrike will give every enterprise the power to trust AI and deploy faster, with confidence." Quartz notes that CrowdStrike's push "follows legislative efforts to require shutdown capabilities in AI systems" Reps. Ted Lieu and Nathaniel Moran introduced the Kill Switch Act after OpenAI disclosed an incident in which rogue models circumvented a sandboxed testing environment and accessed Hugging Face. The bill would require AI companies to maintain the ability to shut down, throttle or suspend their models. In short, the new capabilities "lets security teams terminate an AI agent, block it from restarting, and cut off its network access," writes CSO Online. But they add that a kill switch "should be viewed as an emergency brake, not a rewind button, said Apeksha Kaushik, senior principal analyst at Gartner."She added that it may prevent additional actions, but it might not necessarily reverse all the data that has already been accessed, every system that has already been changed, all communications that have already been sent, or transactions that have already been initiated. Its effectiveness will also depend on how quickly abnormal behavior is detected, which environments are covered, and whether the agent or security infrastructure has been compromised. An AI Kill Switch looks promising from the details provided, but its actual effectiveness will come in after it is used extensively in live systems, warn analysts. Also, it may be a good starting point, but it cannot be viewed as a standalone solution to enterprise AI security. "CISOs would need a more integrated approach that brings together AI discovery tools to identify unauthorised agents, runtime monitoring to track agent behaviour, robust identity and access management, and incident response and recovery mechanisms," added [Devroop Dhar, co-founder at Primus Partners]. He noted that equally important is the need for stringent AI security testing and clearly defined policies governing what agents can access and execute. There should be no ambiguity around permissions, access controls or the boundaries within which these agents are allowed to operate. The objective should be to ensure that security controls are built into the entire AI agent lifecycle rather than relying on a kill switch to intervene after something goes wrong. Dhar added that enterprise AI agents often have access to sensitive systems, databases, applications, credentials, and APIs. A compromised or misdirected agent could therefore become a point of vulnerability. The challenge is compounded by the fact that such activity may go undetected for some time, making it difficult for organisations to identify and contain the threat.
Read more of this story at Slashdot.
- Nvidia CEO Admits Affair With Alleged Chinese Spy. Investigation Opened
CNBC reports new details about the relationship of alleged Chinese spy with Nvidia CEO Jensen Huang:Huang told Nvidia staff in a email on Sunday that he had an affair with the woman and that Nvidia's board of directors had opened an independent investigation into the spying allegations. "I was unfaithful to my wife. My actions hurt her and our children. There is no excuse for what I did," Huang wrote in the message. "I am deeply sorry." Nvidia's board "said an independent committee, assisted by outside counsel, will investigate the matter," reports Axios:The board said it has no reason to believe national security or company secrets were compromised and expressed confidence in Huang's leadership... Huang has been a key voice in Washington pushing to loosen restrictions on AI chip sales to China. He argued that keeping American technology in the Chinese market strengthens U.S. competitiveness and prevented China from developing their own potentially more advanced chips. The board's statement added that their inquiry "will examine all available information," CNBC reports. But "An Nvidia spokesperson said that Huang was committed to continuing as CEO of Nvidia without interruption." "I love our country and our company," Jensen Huang wrote in his letter to Nvidia's staff (as reported by CNBC), "and I am committed to protecting NVIDIA and supporting America's national security. I am proud and grateful to be an American." But while U.S. lawmakers have requested Huang appear for closed-door committee briefing, Jensen has not confirmed he'll appear, notes CNBC:When asked by the New York Times whether Huang would appear before lawmakers to discuss the matter, Nvidia spokesman John Rizzo declined to comment. "Our chief executive has an outstanding security team that accompanies him where needed," Mr. Rizzo said in a statement to the Times... Rizzo said [Thursday] the Nvidia CEO's interactions with [alleged Chinese spy Alice] Huang were consistent with meetings he has had with any of Nvidia's customers.
Read more of this story at Slashdot.
- Parents Sue Google Over AI Safety Risks On School Chromebooks
The New York Times reports:After chatting for months with Google's artificial intelligence on a school-issued Chromebook laptop, a 13-year-old student made plans to end her life, according to a lawsuit filed in California Superior Court on Monday, the latest in a wave of litigation over Big Tech's effects on young people. The lawsuit, which refers to the girl as Emma, said that her parents first learned she had access to Google's AI in mid-March after their daughter's school sent a message warning them that she was in "imminent danger" of self-harm. Emma's mother logged into the teen's school Google account and found her daughter composing a suicide note on Google Docs, the complaint said. Her parents, named as John and Jane Doe in the lawsuit, immediately took Emma for an emergency psychiatric evaluation, and she now goes to therapy every week. Emma, a seventh grader in Charlotte, North Carolina, had grown convinced that she had multiple mental health disorders following interactions with AI Mode, a chatbotlike feature on Google Search, the complaint said. She also searched for "what is a suicide note" and made comments like "I am planning my own funeral" to the AI, the complaint said. The lawsuit is likely the first to claim that Google "hastily integrated" AI features into company apps used on K-12 Chromebooks, Google-powered laptops provided to millions of children by U.S. school districts, while failing to notify their parents of the potential risks... The case underscores how public school districts have come to depend on classroom laptops, tablets and apps from companies like Google and Microsoft for teaching and learning. In recent years, some Big Tech companies have used their own infrastructure in schools to promote their AI chatbots for teachers and students. The new lawsuit argues that Google's "sprawling digital ecosystem" of laptops and apps has enabled the tech giant to spread its Gemini AI chatbot across public schools — as well as turn on some students' access to AI features by default — without parents' awareness or permission. While school administrators can toggle company apps like YouTube and Gemini on or off for students in different grades, school administrators have complained that Google's system has not allowed them to disable AI Mode and AI Overview, features that are embedded in Google Search... The new lawsuit against Google is part of a wave of litigation this year over Big Tech's effect on young users... Several parents have also sued AI companies over allegations that their children died by suicide following interactions with chatbots. In a possibly-related development, Google announced a new policy of disabling its AI tools by default for schools this week. And schools that re-enable searches will have a new choice, the New York Times points out: "to enable student access to the AI features that the company has already embedded in search or to a new AI feature intended to assist students with schoolwork." But Google still isn't offering schools an option to turn off AI altogether in search, a company executive told the New York Times, because "search and AI are deeply integrated." Thanks to long-time Slashdot reader theodp for sharing the article.
Read more of this story at Slashdot.
- Salon, One of the Web's Pioneering News Outlets, Shuts Down After 31 Years
"It has been an extraordinary privilege," says the subheading on Thursday's announcement. After 31 years Salon.com will stop publishing, according to an announcement which appeared on the site under the byline "Salon". It remembers that Salon "was an idea about what journalism could be, born at a moment when the internet was still a largely unexplored frontier."When Salon launched in November 1995, the web was a very different place. A small group of journalists set out to create something original: a publication with a strong voice, a curiosity about the world and a belief that the internet could bring journalism and readers together in new ways. They helped pioneer a form of journalism that would come to define an entirely new era of publishing. Over three decades, Salon has brought together politics, culture, criticism and ideas in a way that was distinctly our own... Our writers and editors helped shape conversations about the forces changing our lives. The work was never simply about keeping up with the news. It was about making sense of it... To the founders who imagined it, the staff members who built it, the contributors who gave it their voices and the alumni who carried its spirit into the world: Thank you. Salon's legacy belongs to all of you... The business realities of independent digital journalism have changed profoundly over the years. After careful consideration, we have reached the difficult decision that our publishing model is no longer sustainable... Thirty-one years is a remarkable run, but what matters most is what happened during those years: the journalism, the ideas, the voices, the conversations and the community that grew around them. Salon helped demonstrate what digital journalism could be and could become. We hope that legacy will continue to matter long after today. Thank you for being part of our story. It has been an extraordinary privilege. Slashdot reader oumuamua remembers Salon as one of the internet's first digital-native publications. Slashdot linked to Salon many times over the years — for example, this 1998 story headlined "Linus Story in Salon".Peter Neves was the first of many who wrote in to tell us about an article in Salon Magazine that describes an "...analogy between MS and the Catholic Church, and Linus and Martin Luther. " The Associated Press remembers Salon as "an early staple of internet discourse."And while Salon told them there were no immediate plans to take down Salon's online archives, the Associated Press notes the site's announcement "did not immediately indicate what would become of its employees, though some reported they had lost their jobs." (Longtime staff writer Amanda Marcottewrote on her Patreon that she and "everyone" are "the latest victim of AI's predations.") "A spokesperson for the outlet said 19 full-time employees had been affected, as well as a handful of private contractors," writes the Associated Press. Variety adds that Salon "joins later-arriving sites such as Buzzfeed and Gawker that found it difficult to monetize cultural and topical reporting for a general audience and eventually shut down."
Read more of this story at Slashdot.
- Claude Code's 'Don't Ask Again' File Exposes Passwords and Keys in 1,122 Public Copies on GitHub
Be careful with the file .claude/settings.local.json, warns The Hacker News:Passwords and API keys that developers typed into commands they approved in Claude Code are sitting in public GitHub repositories, where anyone can read them. When a user selects "Yes, and don't ask again," Anthropic's AI coding assistant can save the command, word-for-word, including the secret, in a project settings file. Software security company Apiiro said that 1,122 public copies of that file hold at least one secret, though it did not test whether any still work. One company the researchers notified earlier this week confirmed its key had been live... Removing [the file] from a project does not undo the leak, because older versions stay in git history and in forks of the repository. The researchers' advice is to rotate first: change every password, token, and key the file has ever held, then clean up... Claude Code tries to keep the file out of git. The first time it writes the file in a git repository, it adds the file to the user's global git excludes, its settings documentation says. Git on that computer then ignores the file in every repository. That protection stays in one user's git settings on one computer. It does nothing for a file that was already committed, the researchers say. Claude Code never adds the file to the project's own .gitignore, so the protection does not travel with the project. In 539 of the 1,105 repositories the researchers traced, a commit listing Claude as a co-author changed the file. They take this to mean Claude often commits the file itself. Apiiro's search of public GitHub found 104,185 copies of the file in 103,617 repositories, its research write-up shows. About 1.1% of them, or 1,122 copies, hold at least one secret. Together they hold 1,379 different secrets... ]And "in half of those repositories it had been there for at least 217 days."] More than a third of the secrets open a database directly, including 379 database passwords. Others include 43 SSH logins for public servers, 42 tokens for GitHub, GitLab and npm, and 23 AWS keys. Among the owners of these files are 63 organizations, mostly software companies of all sizes. The strongest cases include a database vendor's own admin-level cloud key and the owner password of a medical-records database, the researchers say. Boris Cherny, Anthropic's head of Claude Code, responded to the story in a comment on Hacker News: "Historically Claude Code has not done secret scrubbing (there are many good tools for that), but we are looking into what we can do to prevent this. That said, a few thoughts: 1. .claude/settings.local.json is meant to stay local. This is not a file you should check into source control. We automatically gitignore it when Claude creates the file, so in this case the files were manually created and checked in (docs: https://code.claude.com/docs/en/settings) 2. Permission rules are old hat. Everyone should be using auto mode instead. It is safer and also does not require manually maintaining finicky allow/deny lists. Auto mode is enabled by default and is included for free in all plans. 3. Regardless of what agent you use, you should have secret scanning enabled. GitHub and other source control hosts offer it. There are many threat models that it protects against and you should absolutely use it if you can. (see https://github.com/security/plans)" Cherny also named approaches Anthropic plans to prototype, Apiiro notes in an update, citing Cherny's goal of"making sure auto mode catches this, building in basic secret scanning," and, when a reader noted the same can happen in auto mode when it asks about a sensitive command, answered "good catch." Claude Code users had already filed a bug report on the issue on August 11, 2025, notes The Hacker News, but "An automated bot closed that report as 'not planned' on January 3, after 60 days without activity." Three more bug reports were then filed, according to the researchers. "None got a reply from Anthropic, and three were closed automatically as inactive or duplicate."
Read more of this story at Slashdot.
- Do Data Centers Have a Smaller Effect on Electricity Prices Than We Think?
"According to a new study by researchers at Harvard University and the University of Pennsylvania, data centers are probably having only a small effect on residential electricity prices," reports the Washington Post. "The researchers calculated that these operations were responsible for just 4% of the utility rate increases over the last five years..."There are certainly some areas — like in Pennsylvania, Virginia, Ohio and other states covered by grid operator PJM — where data centers have skyrocketed demand, pushing some costs onto residential customers. But multiple studies by different researchers and organizations have failed to find a strong connection between data centers and the overall trajectory of U.S. electricity prices in recent years. Another analysis earlier this year by researchers at the Massachusetts Institute of Technology found that, between 2010 and 2024, data centers increased average electricity prices for residential customers by just 2.1%. Last year, research from the Brattle Group and Lawrence Berkeley National Laboratory found that data centers were actually decreasing costs in certain regions. And another study by the Electric Power Research Institute found that a doubling of data center capacity between 2019 and 2024 resulted in a 4 percent drop in home electricity prices... The new Harvard and Penn study found a slightly higher impact on industrial electricity prices — the price paid by manufacturers and large facilities. For those customers, data centers were responsible for 15% of the price increase between 2020 and 2025. But for ordinary Americans... the changes simply were not substantial [according to Wharton School professor Serguei Netessine, one of the study's authors]. "So far we have no evidence that data centers increase prices all that much," Netessine said. Instead, he said, prices are rising due to more quotidian factors: rising gas prices, an aging electricity grid, and wildfires and hurricanes requiring improvements to the grid and recovery after disaster... If the number of data centers continue to boom, experts say, residential prices could be affected more down the line. Data center electricity demand is expected to increase steeply over the next few years, requiring new power generation — wind, solar or natural gas — to be put onto the grid. And residents have issues with data centers that go beyond the price of electricity. The new developments have been singled out for loud noise, polluting power generation, and for disturbing residential neighborhoods and natural landscapes. According to the Pew Research Center, more than half of Americans say that data centers are mostly bad for the environment. Others feel that the AI race — which could ultimately leave many Americans out of work — is being forced upon them. "I think generally what we're seeing is a broader range of reasons the public has opposed data centers," [said Ryan Hledik, principal at the Brattle Group]. "Concern about AI leading to loss of jobs — all of that is getting packaged together."
Read more of this story at Slashdot.
- Norwegians Release FOSS GNOME Software for Music Recording, Internet Radio, and Cameras
ole (Slashdot reader #19,909) writes in about his free, Norwegian open-source music recording studio for GNOME called GarageJam, which he says allows musicians to compose, record, and share original music seamlessly on the Internet.The latest release, GarageJam 8.0.1, is available in C and Python. It records audio immediately to Ogg Vorbis (.ogg) files in the current working directory and lets you edit metadata in .gjxml XML files from a GTK/GNOME wizard — all built on the Gingerblue Recording Studio API. Ole shares links to its IETF GarageJam XML draft and GitHub repositories, and there's also GarageJam Studio, "a commercial music and audio recording app for the World Wide Web written by Aamot Innovation from Norway.". ole is also spreading the word about GNOME Media, which "puts internet radio and your photographs on one OpenStreetMap... built from GNOME Radio 85.0.1."Click a station on the map to listen. Cities with several stations show a count and a menu.Open a folder of pictures or import from a camera. Photos with a GPS position in their EXIF data appear on the map. Double-click a thumbnail to open it. The search box filters the station list and the map together. ole also announces: GPhoto 3.0.1. ("After 25 years, libgphoto2 2.5.34 now supports more than 2,500 camera models, and GPhoto 3.0.1 is built on it.") Skolelinux 13.6.0. Built on Debian 13 âoetrixieâ, Skolelinux is "a complete, ready-to-use Free Software operating system for schools, classrooms and home computers... an office suite, web browser, educational programs and network services for an entire school, all set up out of the box."
Read more of this story at Slashdot.
- Python's CVEs Triple. Anthropic Funds a New Security Developer
In the last year CVEs have increased 3x for Python and its package manager Pip, according to Python's security developer in residence Seth Larson. "And the amount of malware published and removed from the Python Package Index (PyPI) is up 60%." Securing Python's ecosystem is getting more complex, he writes, especially given "the evolving role of AI in both security risks and security response." Their response includes bringing on a new Security Developer "to address the increasingly demanding scale of security response for the Python ecosystem."Providing prompt security response services and innovating to prevent future threats... is more difficult now than ever before... [Security developer Brett Smith] will help us keep pace with critical ongoing work such as vulnerability remediation, providing vulnerability data as a CVE Numbering Authority, and removing malware from PyPI. He'll also give the team bandwidth for new projects such as scaling PyPI's autonomous quarantine program to reduce manual effort on malware remediation and streamlining processes for the PSRT to handle the new vulnerability report volume. The role was made possible by an "ecosystem security" grant from Anthropic. And having the new security developer "will both build capacity for security work the PSF already does and enable new, proactive work," concludes Python's security developer in residence. (He discussed Python's security challenges in a June presentation with Python security engineer Mike Fiedler> .) In June, Curl's Daniel Strenberg reported Curl's CVEs have also tripled.
Read more of this story at Slashdot.
- Aaron Swartz Would've Been 40 Today. His 'Legacy Lives On' Says FSF
"Aaron Swartz would have turned forty this year," writes FSF deputy director Sean O'Brien. "November 8 is Aaron Swartz Day, when we remember a pioneer of free software and information sharing whose contributions helped shape the modern internet." The Internet Archive will host a hackathon Sunday in San Francisco celebrating Aaron's Swartz's life "and the projects he worked on, many of which are still going strong today," including SecureDrop, OpenLibrary, and Creative Commons. "We are also spreading the word about projects he inspired," including OnionPress and the EFF's Atlas of Surveillancedocumenting police tech use through open source research, now a collaborative effort with volunteers, the University of Nevada, Reno, and the Reynolds School of Journalism. The event is also supported by Free Law Project, and organizers are asking attendees to "bring a color print out of your favorite photos of Aaron for a huge collaborative collage." From the Internet Archive's blog:Aaron was also a co-founder of Creative Commons, where he worked with Lisa Rein developing the RSS-enhanced HTML code that sits behind Creative Commons licenses, much of which is still in use today. The "Quantifying the Commons" project was designed to help measure open-licensed and public-domain works worldwide, and is one of the projects participants can work on. Aaron loved Tor and created tools such as "Tor2web" (with Virgil Griffith) to help more people publish Tor-accessible websites. Onion Press is a Tor-based publishing system designed for decentralized, censorship-resistant publishing, and participants can work on the code base... We also encourage you to have a hackathon in your own town using our materials — or materials of your own. Please let us know if you plan to do this (although it's not required!). If you do let us know, we can include you on our website and help you spread the word about your event. So far, there is an event in Portland sponsored by Portland Civic Lab where they will be screening The Internet's Own Boy and celebrating Aaron's life. "EFF was proud to call Aaron a friend and ally," the digital rights organization posted this week. And the FSF's deputy director writes "It is particularly striking that some of the world's largest companies now rely on technology Swartz helped to develop."One of Swartz's most important technical contributions was his collaboration with John Gruber on Markdown, the simple text formatting system introduced in 2004. Markdown allows users to create structured documents using ordinary text, without requiring proprietary software. More than twenty years later, Markdown has become one of the most popular formats for documentation and publishing, and is widely used in community websites such as forums and wikis. This is not a minor contribution. Companies developing LLMs use Markdown extensively in their products and development tools. OpenAI, for example, recommends Markdown for organizing instructions and communicating structure to its ChatGPT models... Swartz also developed web.py, a public domain framework for building Python applications, and contributed to RSS 1.0, a public internet standard for distributing news and other information between websites. Swartz developed web.py while rewriting the software running Reddit after Reddit acquired Swartz's company Infogami. Reddit recently licensed its content to AI companies, and the FSF's deputy director notes "the enormous scale of the alleged 'piracy' by giant technology corporations" while Aaron himself had "faced criminal prosecution for downloading academic research that he wanted to distribute with no monetary gain."In 2011, federal prosecutors charged Swartz with computer fraud and related offenses after he downloaded millions of academic articles from the JSTOR collection through MIT's university network... Although he was not charged with copyright infringement, he faced aggressive federal prosecution and the possibility of decades in prison before he tragically died by suicide in January 2013, at just twenty-six years old... Swartz helped build tools that made the internet more useful and accessible, and his contributions continue to shape a world he never lived to see. On Aaron Swartz Day, we should remember his achievements and the access-to-knowledge principles that guided them. The companies benefiting from his legacy should respect those same principles by giving users true freedom and control, rather than imposing more restrictions on us all.
Read more of this story at Slashdot.
- NASA Announces It's Looking for New Astronauts
Saturday NASA officials announced it's accepting applications for a new astronaut class, reports the Associated Press:With only 32 active astronauts, the space agency needs more recruits as it looks to expand humanity's presence beyond low-Earth orbit as quickly as possible... "We have far more work than we have astronauts," Artemis III commander Randy Bresnik told The Associated Press on Saturday. Aspiring astronauts have between now and Dec. 3 to submit their applications... [They'll begin their training by early 2028]. By then "we're going to have people on the moon — so don't delay," Bresnik urged potential candidates. Bresnik and his three crewmates will blast into orbit next summer to practice docking their capsule with a pair of lunar landers, one built by Elon Musk's SpaceX and the other by Jeff Bezos' Blue Origin. Their mission will stick close to Earth — no lunar flyby — and serve as a dress rehearsal for the following year's Artemis IV mission that will attempt to land two astronauts near the lunar south pole. The moon base will materialize as more rovers, robots, structures and power grids are launched. The article notes NASA's last call for new astronauts was two years ago, and "More than 8,000 applied, with 10 making the final cut in September 2025."
Read more of this story at Slashdot.
- Scifi Magazine 'Starlog' Relaunches, and Back Issues Return to Internet Archive
Slashdot reader sandbagger brings news about the classic science ficdtion magazine Starlog. It's 33-year run from 1976 to 2009 is now available on the Internet Archive. And 17 years after publishing its final issue, Starlog is relaunching, publishing one issue a year starting November 13, according to The Hollywood Reporter:The magazine launched in 1976 and gained a fanbase for being one of the few places to get reliable news and interviews about geek culture. It launched with a cover focusing on Star Trek, one of its key areas of expertise, but the magazine's editors and writers also pioneered coverage of Star Wars. (The new issue chronicles some of the rumors it put out a year before the movie opened). In all, Starlog published 374 issues and more than 25,000 pages... In addition to the film and TV-focused features Starlog was known for, the new Starlog will also delve into futurism, as the cover from Gabriel Yeganyan highlights. The opening story of issue No. 1 looks at the viability of humans farming crops on planets outside of Earth, for example... The revival was announced earlier this year, and includes a podcast hosted by Jordan Hoffman, a veteran journalist who has contributed to The Hollywood Reporter.
Read more of this story at Slashdot.
- Security: Why Linux Is Better Than Windows Or Mac OS
Linux is a free and open source operating system that was released in 1991 developed and released by Linus Torvalds. Since its release it has reached a user base that is greatly widespread worldwide. Linux users swear by the reliability and freedom that this operating system offers, especially when compared to its counterparts, windows and [0]
- Essential Software That Are Not Available On Linux OS
An operating system is essentially the most important component in a computer. It manages the different hardware and software components of a computer in the most effective way. There are different types of operating system and everything comes with their own set of programs and software. You cannot expect a Linux program to have all [0]
- Things You Never Knew About Your Operating System
The advent of computers has brought about a revolution in our daily life. From computers that were so huge to fit in a room, we have come a very long way to desktops and even palmtops. These machines have become our virtual lockers, and a life without these network machines have become unimaginable. Sending mails, [0]
- How To Fully Optimize Your Operating System
Computers and systems are tricky and complicated. If you lack a thorough knowledge or even basic knowledge of computers, you will often find yourself in a bind. You must understand that something as complicated as a computer requires constant care and constant cleaning up of junk files. Unless you put in the time to configure [0]
- The Top Problems With Major Operating Systems
There is no such system which does not give you any problems. Even if the system and the operating system of your system is easy to understand, there will be some times when certain problems will arise. Most of these problems are easy to handle and easy to get rid of. But you must be [0]
- 8 Benefits Of Linux OS
Linux is a small and a fast-growing operating system. However, we can’t term it as software yet. As discussed in the article about what can a Linux OS do Linux is a kernel. Now, kernels are used for software and programs. These kernels are used by the computer and can be used with various third-party software [0]
- Things Linux OS Can Do That Other OS Cant
What Is Linux OS? Linux, similar to U-bix is an operating system which can be used for various computers, hand held devices, embedded devices, etc. The reason why Linux operated system is preferred by many, is because it is easy to use and re-use. Linux based operating system is technically not an Operating System. Operating [0]
- Packagekit Interview
Packagekit aims to make the management of applications in the Linux and GNU systems. The main objective to remove the pains it takes to create a system. Along with this in an interview, Richard Hughes, the developer of Packagekit said that he aims to make the Linux systems just as powerful as the Windows or [0]
- What’s New in Ubuntu?
What Is Ubuntu? Ubuntu is open source software. It is useful for Linux based computers. The software is marketed by the Canonical Ltd., Ubuntu community. Ubuntu was first released in late October in 2004. The Ubuntu program uses Java, Python, C, C++ and C# programming languages. What Is New? The version 17.04 is now available here [0]
- Ext3 Reiserfs Xfs In Windows With Regards To Colinux
The problem with Windows is that there are various limitations to the computer and there is only so much you can do with it. You can access the Ext3 Reiserfs Xfs by using the coLinux tool. Download the tool from the official site or from the sourceforge site. Edit the connection to “TAP Win32 Adapter [0]
- MorphOS 3.21 released with new office suite
About five months after the previous release, the MorphOS team has released MorphOS 3.21. It brings the usual list of big fixes and smaller improvements, but theres a few big ticket items in here as well. MorphOS 3.21 introduces BasicWorks, an office suite made up of CellBasics and PageBasics. It offers document and spreadsheet authoring and loads and saves Microsoft Office and OpenOffice documents. Also new are NVMEMount, an auto-mounter for booting from and mounting NVMe partitions, and the Marbles and Cyber 3D blankers. Graphics performance has been improved, with a faster Radeon driver on cards with little video memory thanks to GART backed bitmap transfers, quicker TinyGL texture copies, hardware accelerated antialiased text in TTEngine and much faster color SVG glyph rendering in Cairo. The Bcm43xx wireless driver has been substantially reworked, with automatic transmit rate selection, updated firmware and numerous connection fixes. PowerBook and iMac hotkeys are now fully configurable. ↫ MorphOS 3.21 release announcement The BasicWorks office suite has been in the works for a while now, and more information on it can be found in a thread on the MorphZone forums and on the website for the spreadsheet component of the suite, CellBasics. The formula loaders and xlsx loaders are ports of open source projects, but the rest of the application is new code based on ObjectiveC++ and Cairo/Harfbuzz. It uses its own file format, but can import csv and xslsx files, so Im assuming the same more or else applies to the word processor (but with docx, of course). Alongside MorphOS 3.21 also comes a new release for Wayfarer, the web browser the Amiga-inspired operating system uses. Wayfarer 12.0 moves to WebKitGTK 2.52.5 (which was released in July of 2026, so its quite up to date), and now uses the Skia graphics library. R300-R500 Radeons will render websites with Skia-GL for some massive performance improvements, helped further along by a slew of additional performance optimisations. Adblocking has been improved as well, YouTube should work a lot better now, and much more. The full release notes for MorphOS 3.21 give you all the details.
- The port that does not exist
Ask any program to listen on port 0 and it will hand you a socket on port 471930or 580370or whatever the kernel felt like that day. Port 0 is not a port you can have. It is the number you pass when you want the operating system to pick one for you. But a TCP header is just bytes. The destination port field is 16 bits wide, and 0x0000 fits in 16 bits as well as anything else does. Nothing on the wire stops a packet from being addressed to port 0. Your tools will refuse it, your browser will block it, and your scanners default port list skips it, because everyone agrees it isnt a real port. Which makes it a pretty good place to hide things, whether anyone meant to or not. So we did some TCP cowboy shit 8 port scanned the entire fucking internet for open ports on port 0, which uncovered some interesting unexpected findings. ↫ acidvegas An awesome and entertaining read. Dont skip this one.
- Windows 11 27H2 might be a more substantial upgrade
A little tidbit of news regarding the nest major update to Windows, known as Windows 11 27H2. Apparently, its going to come with some more serious changes to the codebase, therefore necessitating a full operating system swap instead of a mere enablement package, much like Windows 11 24H2 was. For those who need a refresher, Microsoft has long been rumored to be running on a three-year release cadence and for a while, it was even thought that the company would launch Windows 12 in 2H 2024. That evidently didnt happen, as instead we got Windows 11 24H2, but it was a major upgrade, a full OS swap compared to Windows 11 23H2 and 22H2. Essentially, it looks like every three releases, Microsoft is performing a full swap with major changes in the underlying codebase, and it seems to line up with Windows 11 27H2 as well. At the moment its not known if system requirements will change or not. ↫ Sayan Sen at Neowin.net Microsoft is currently testing adding support for Intels Advanced Performance Extensions, which should yield improved 64bit performance and reduced power consumption. It makes sense to assume this support will be coming with Windows 11 27H2, which should hopefully lead to tangible performance improvements across the board. Also, theres going to be a new default wallpaper. Be still my beating heart.
- The Ubuntu 26.04 Rust sudo is not compatible with standard sudo
Ubuntu has been at the forefront of replacing the traditional versions of basic tools like sudo with replacements written in Rust, but aside from worries about replacing battle-tested code with brand new, relatively untested code, theres new things to worry about it. As it turns out, sudo-rs, the Rust replacement for sudo, is intentionally incompatible with the classic version in dangerous ways, as Chris Siebenmann discovered to his dismay. Basically, the classic sudo supports the use of wildcards defined using square brackets, so that if you allow a user to run, say, /usr/sbin/exim -bp, without a password, they can run exim -bpa, exim -bpc, exim -bpr, or exim -bpu without having to supply a password. This allows for very specific, fine-grained access control, which is quite a nice capability to have if youre managing many systems and users. Sadly, sudo-rs intentionally does not support this, opting to only allow you to use the generic * wildcard. Worse yet, it doesnt really make this clear, either. ↫ Chris Siebenmann I do not really have words for this. The Rust sudo has apparently opted to keep the single most dangerous wildcard while disallowing all of the wildcards that allow one to be narrow and specific about what youre allowing, and it buries this at the end of a section that devotes a bunch of words to describing functionality it doesnt have and doesnt support, with absolutely nothing else in that section to say this (either up front or in the descriptions of how all the wildcards would work if sudo-rs supported them, which it doesnt). If youre going to replace such vital, core tools like sudo that god knows how many people rely on every single day, you better be damn sure youre feature-complete and can act as a drop-in replacement. If someone switches from sudo to doas, nobody expects the experience to be identical. However, if youre consistently being told that sudo-rs is a drop-in replacement and you shouldnt expect any disruptions, you better be able to make true on that promise. Ubuntu isnt some also-ran small hobby distribution, and its developers should act like it. What a clown show.
- LXQt 2.5.0 released
The second desktop environment release Ive got for you today is LXQt 2.5.0. This new version excises its last LXDE dependency, and QTerminal and QTermWidget received considerable improvements, like new background image modes, a visual bell, support for OSC-8 hyperlinks, and more. Theres a ton of smaller changes and improvements as well, but do note that due to a bug, 2.5.0 broke LXQts Monitor Settings on X11. The project intends to fix this as quickly as possible and push a point release to address this issue.
- Cinnamon 6.8 desktop environment released with hibernation support
Its desktop environment Thursday, as Ive got two new releases for you today. First, Cinnamon, the desktop environment primarily associated with Linux Mint, has hit version 6.8. This version will officially ship with Linux Mint 27, scheduled for around Christmas of this year. Highlights of Cinnamon 6.8 include hibernation support via a Suspend action in the main menu, modern one-to-one trackpad gestures for both Wayland and Xorg sessions, support for the oo7 Secret Service provider, support for multiple instances in the Sound applet, and a more unified Network applet that merges the WireGuard and VPN sections. ↫ Marcus Nestor at 9To5Linux While Cinnamon is first and foremost a Linux Mint project, its available on countless other distributions as well, including dedicated variants for popular distributions like Fedora and Ubuntu. Its Wayland support is finally materialising too, which is long overdue.
- NetBSD 11.1 released
The first point release for NetBSD 11 has been released. As the version number suggests, theres no major changes here. This release includes security updates for mozilla-rootcerts, brotli, xorg-server, hdaudio(4), compat_linux(8), unbound(8), and ipfilter. Among the non-security related changes are improved USB device stability on Raspberry Pi, fixed hot-plugging bugs in various USB Wi-Fi drivers, support for battery monitoring on the Microsoft Surface Go 3, fixed thread-local storage on ARMv5, fixes for running the MIPS Malta and PA-RISC ports under QEMU, support for the Zhaoxin KX-7000 CPU, and support for sensors, i2c, real-time clocks, and fan control on Sun Ultra 25/45 and Sun Fire V215/V245 machines. ↫ Nia Alarie on the NetBSD blog The full release notes provide more details.
- Why don’t we run the taskbar and Task Manager at high priority, so they can remain responsive?!
Another interesting post from Raymond Chen, this time about the difficulty of dealing with a system thats become CPU-starved. The question is simple: why not just run Task Manager and important parts of the UI like the taskbar at a higher priority? The catch with running anything at high priority is that unless you have been very careful to avoid it, you will eventually run into a shared resource that you will have to wait for, and you are now stuck. Your priority checkout pass gets you to the front of the line, but if the person at the register has a large shopping cart full of groceries, you just have to wait until they are done before you get your chance. Even if the code that protects the shared resource is careful to avoid priority inversion by transferring the priority of the waiter to the thread that owns the resource, you are still stuck waiting, and that owning thread might be doing something that takes a long time, like, say, accessing a file over the network. ↫ Raymond Chen If a system has reached a state where even accessing or using something like a task manager becomes a problem, I personally just bonk my computer over the head with a forced shutdown using the power button. Honestly though, I cant remember the last time Ive had to do this, as my Linux machines all seem to handle problematic applications just fine. That being said, Im sure people managing tons of servers and/or workstations and developers debugging their own running code run into catastrophic problems like this far more often, making forced shutdowns not as practical. Have a terminal window open with top and easy access to the kill command, or make sure you can just ssh into it remotely if the UI has gone completely nuts.
- Jailbreaking my cars navigation system just so I can change the time!
What if you want to change the time in your cars infotainment system, but its so locked down that you cant even open the time settings menu without a very specific, DRMd SD card? Well, you try to jailbreak it, of course, but the amount of effort required can kind of spiral out of control. And then, all the way at the end, its just an offset. The first thing I did was use this to create a full backup of the internal eMMC using dd. With a more complete dump of the system, I pretty quickly figured out that the date 8 time settings that Im interested in are in /mnt/flash/settings.dat, which is a custom binary format. After some more reverse engineering, it turned out the unit doesnt really have a concept of timezones at all. It gets the time from GPS and stores the local offset as a number of minutes. Mine was set to 180. I changed it to 120. That is how I was finally able to fix my cars timezone. ↫ Rasmus Moorats This harrowing story involved an older car a 2014 Renault Latitude but with the number of screens and the amount of user-facing software only increasing every year, requiring jailbreaks to get your car to do what you want it to do are only going to become more common. I wouldnt be surprised if whole generations of cars are going to become much harder to sell in the near future, cratering the used market, because people are not willing to put up with software problems nobody wants to or can fix. He just wanted to change the goddamn time.
- Enlightenment 0.28.0 released
Enlightenment, the long-running desktop environment and associated libraries and frameworks, just released version 0.28.0. It brings initial support for NetBSD, support for Network Manager and a whole slew of related changes and fixes to make that possible, as well as native PipeWire support. Theres also a brand new clipboard manager, which brings with it modernisations and bug fixes for related UI elements. This release also reworks a ton code related to battery management, AC polling, and more, adding features like setting battery thresholds, ACPI power profile support, and so on. Of course, theres also the long list of smaller fixes and changes. You can download the release and build it yourself, or wait for your distribution of BSD variant to package it.
- GEFS on OpenBSD continues to improve
A little while ago, we talked about 9fronts Good Enough File System being ported to OpenBSD. A lot of progress has been made on this front lately. Aside from fixing bugs and porting over fixes from the 9front side, theres also been a ton more substantial changes. Some userspace tools have been done (you can now mkfs on openbsd!), but snapshot control hasnt. Im thinking we have a userspace gefs program that lets you handle this, trying to keep the interface similar to the 9front ctl file. ↫ Ori Bernstein Theres still some major hurdles to overcome, some of which have already been addressed on the 9front side, but the progress is clear. Considering OpenBSD desperately needs a more modern file system, this is great news. A fun sidenote is that Im actually posting this news item from OpenBSD.
- Sam Altman wants to take your RAM
From a global allocation perspective, actually, its quite terrible to have everybody have a bunch of the worlds limited supply of DRAM sitting in their own computer and being used 5% of the time,! Altman said. You want maximum utilization in the cloud if youre trying to deal with this very supply-constrained environment. And somehow many peoples intuition is the opposite of that.! ↫ Andrew E. Freedman at Toms Hardware Im installing a 32bit operating system without support for physical address extension on my laptop with 64GB of RAM, just because I can.
- Sculpt OS 26.10 releases
Sculpt OS 26.10 brings quite a few new features, like scalable cursors, support for UK keyboards, better webcam support, and more, but the real meat of this release is much tastier. First, Sculpt 26.10 is the first version based on Genodes custom microkernel instead of relying on a 3rd-party kernel. This kernel designed from the ground up for the needs of Genode and Sculpt OS in particular is not only more micro! than any other of the microkernels supported by Genode, it also solves long-standing deficiencies concerning CPU scheduling and kernel-memory management. Sculpt OS finally stands on Genodes own footing! Finally, Sculpt OS 26.10 pays tribute to this years overall theme of building bridges! by featuring our software development kit (Goa SDK) running directly on Sculpt OS without virtualization. This entails a wealth of tooling including GCC, Binutils, Git, Sequoia, Expect, Curl, man, Make, and CMake having landed on Genode. Although still young and not time-tested yet, it shows whats possible today and allows us developers to gradually shift more and more development routine into this self-hosted environment, stressing the general-purpose qualities of Genode and motivating further optimizations. ↫ Sculpt OS release 26.10 announcement This new release also completes the transition from XML to Genodes own HID language for configuration, moves from VirtualBox 6 to 7, and upgrades a whole slew of its Linux-based drivers
- How long do you need to hold down the power button to turn off a PC?
Raymond Chen published another story from the Windows development trenches, this time about what happens when you hold down the power button. If you hold a PC’s power button for 12 seconds, it will turn off at the hardware level without notifying the operating system. This is a safety feature so that you can turn of the computer even if the operating system’s “Shut down” command isn’t working. After eight seconds of the power button being held down, the Windows kernel realizes that the user is trying to do a force-power-off of the system, and it quickly takes a kernel dump that can be uploaded to the Windows Error Reporting service the next time you turn the system on. ↫ Raymond Chen Im a bit confused by these numbers, because I have never seen a PC take this long to power off when holding down the power button; usually it takes only a few seconds to do so, meaning Windows would never generate said kernel dump. I tried reading through the various ATX specification documents to find more information on this, but then I remembered Im not an electrical engineer so I have no idea what Im looking at. The baseline is that ATX always provides standby power to the motherboard, and pressing the power button shorts the power button pin to ground, telling the PSU to power on fully. Pressing the power button if the computer is running tells the operating system to initiate a shutdown (although you can change this behaviour), but if you hold the button down for a certain number of seconds, it forces a power-off. So far, so good; basic information. It seems that the length of time you need to hold down the power button to force a power-off is dependent on the motherboard in question, handled by a microcontroller or some other IC. Virtually every source I can find says this timing is set to about 4-5 seconds, which is quite a bit shorter than the number of seconds given by Chen. Perhaps motherboard manufacturers consider the 12 seconds to be too long, and just do their own thing, regardless what the ATX specification suggests? What further complicates matters is that Chen details how the kernel dumps created after pressing the power button for 8 seconds do, in fact, get sent to Microsoft once the computer turns on again. In fact, he is one of the people who gets to see these dumps and respond to them, so obviously they are indeed rolling in. Does this mean theres a huge number of computers out there that require you to hold down the power button for 12 seconds to force a shutdown that nobodys ever seen? These emergency kernel dumps are internally classified as “long power button hold” (LPBH) failures. One of the pieces of information recorded in these emergency kernel dumps is whether the screen consists entirely of black pixels. Those failures are sub-classified as “black screen LPBH”, and they go to a special virtual team for analysis. (I happen to be a member of this black screen LPBH team.) ↫ Raymond Chen Whats going on here? Obviously, Im not going to doubt Chen, so there must be something here I dont quite understand or that Im missing. The ATX specification might suggest 12 seconds, but could Windows perhaps adapt its kernel dump behaviour dumping much sooner than 8 seconds based on the motherboard its running on, maybe through information provided by the chipset drivers? I would love it if someone more knowledgeable than me can help us unravel this small mystery.
- How curl was accidentally Turing-complete for nine months
From curl 8.12 through 8.16, config files could slice variable values and include other config files without an explicit depth cap. Together, these features let curl simulate any two-counter Minsky program. Under the usual idealization of unbounded strings and resources, this construction was Turing-complete. Curl 8.17.0 added a five-level include cap that breaks this reduction. ↫ Nicolas Seriot Neat.
- AlpineBSD combines NetBSD with Alpines apk package manager
AlpineBSD is an operating system based on the NetBSD kernel with a userspace inspired by Alpine Linux and the objective of making it possible to use as little AI-generated software as possible. There is no LLM output included in the base system or main package repository (AlpineBSD AI policy). ↫ AlpineBSDs website AlpineBSD uses the NetBSD kernel, libc, and essential tools, and combines them with Alpines apk-tools package manager, busybox, and generlaly preferring GNU tools over their BSD equivalents. It uses the s6 init system, but the project intends to add OpenRC as an alternative. The project is in its very early stages, so dont expect things like an installer; youre on your own, basically.
- openSUSE Leap 16.1 Unifies Traditional and Immutable Linux With Transactional Updates
by George Whittaker
The openSUSE Project has officially released openSUSE Leap 16.1, introducing a major change to how the distribution can be installed, maintained, and deployed. Released on November 3, 2026, the update brings an integrated Immutable Mode that allows users to install a transactionally updated operating system with a read-only root filesystem, while continuing to offer the traditional Linux installation model.
The new approach also marks the beginning of the end for openSUSE Leap Micro as a separate distribution. Its functionality is now incorporated into Leap 16.1, giving administrators a unified platform for desktops, conventional servers, container hosts, virtual machines, and edge computing environments. Users can select the installation model that best fits their workloads without switching to an entirely different openSUSE product.
Beyond the new installation architecture, Leap 16.1 updates KDE Plasma to version 6.6, retains GNOME 48 with additional maintenance fixes, introduces LXQt 2.4, and continues using the Linux 6.12 long-term support kernel series. The release also expands container tooling, improves system monitoring, updates security components, and introduces changes designed to make enterprise-oriented Linux deployments more predictable.
Immutable Mode Becomes the Defining Feature of Leap 16.1
The most important addition to openSUSE Leap 16.1 is its new Immutable Mode, which allows the operating system to use a read-only root filesystem and transactional updates. Instead of modifying the active operating system directly whenever packages are installed or updated, the immutable configuration prepares changes in a separate filesystem snapshot.
This approach differs from a conventional Linux installation, where package managers typically modify files in the active root filesystem. On a traditional system, an update can replace libraries, executables, and configuration components while applications continue running. Although Linux package managers handle these operations carefully, interrupted updates or incompatible package combinations can sometimes leave a system in an inconsistent state.
Immutable Mode reduces this risk by preparing operating-system changes separately from the currently running environment. Updates become active after a reboot, allowing the system to start using a consistent set of packages and configuration changes. If an update introduces problems, administrators can return to an earlier snapshot rather than manually reversing individual package modifications.
The underlying technology is not entirely new to openSUSE. Similar functionality has been available through Leap Micro, which was designed for lightweight, transactionally updated server and infrastructure deployments. What changes in Leap 16.1 is that this operating model becomes an installation choice within the main Leap distribution.
Go to Full Article
- KDE Plasma 6.8.2 Released With More KWin and Wayland Fixes
by George Whittaker
The KDE Project has released KDE Plasma 6.8.2, delivering another round of stability improvements for its Wayland-based Linux desktop environment. Released on October 27, 2026, the update arrives one week after Plasma 6.8.1 and two weeks after the anniversary release of Plasma 6.8, which marked 30 years since the KDE project's founding.
This second maintenance release concentrates on correcting regressions discovered after the initial rollout. The largest collection of changes targets KWin, KDE's window manager and Wayland compositor, with fixes involving multi-GPU synchronization, display handling, pointer constraints, color pipelines, and window stacking. Additional improvements address disappearing desktop icons, application launcher behavior, remote desktop sessions, screen recording, accessibility, and system monitoring.
Although Plasma 6.8.2 does not introduce major new desktop features, its corrections are particularly important because Plasma 6.8 completed KDE's transition away from native X11 desktop sessions. With Wayland now serving as Plasma's display foundation, improvements to KWin and its supporting components directly affect the reliability of the entire desktop environment.
KDE Continues Stabilizing Its Anniversary Release
KDE Plasma 6.8 arrived on October 14, 2026, coinciding with the project's 30th anniversary. The release introduced significant desktop changes, including the retirement of native X11 sessions, additional HDR improvements, expanded remote desktop capabilities, NVIDIA graphics optimizations, and further development of KDE's Union theming engine.
The transition represented an important architectural milestone, but major desktop releases frequently expose problems that were not encountered during development or beta testing. Linux desktops must operate across numerous combinations of graphics hardware, display configurations, drivers, input devices, and applications. Even extensive testing cannot always reproduce every environment used by the wider community.
KDE acknowledged this challenge during the development cycle following Plasma 6.8, noting that users had discovered regressions that were not reported during the beta period. Contributors responded with a substantial collection of fixes, many of which have now reached the stable 6.8 branch through its first two maintenance releases.
Plasma 6.8.2 continues that stabilization effort. Rather than changing the desktop's overall direction, it improves the reliability of existing functionality and addresses issues that could affect everyday workflows. The release includes corrections across KWin, Plasma Desktop, Plasma Workspace, Discover, KRDP, KPipeWire, and several other components.
Go to Full Article
- RefreshOS 3.1 Strengthens Its Debian Foundation With Independent Package Management
by George Whittaker
The RefreshOS project has released RefreshOS 3.1, bringing an updated Debian foundation, a dedicated software repository, improved 32-bit application compatibility, and several refinements to its KDE Plasma desktop experience. Released on October 27, 2026, the update advances the distribution's 3.x "Colorful Cosmos" series while introducing infrastructure that could significantly improve how RefreshOS delivers its own packages and configuration changes.
The new release moves from Debian 13.4 to Debian 13.7 "Trixie", incorporates Linux kernel 6.12.113, and continues using KDE Plasma 6.3.6. However, the most important development is the introduction of an official RefreshOS APT repository with separate Stable, Testing, and Experimental channels. This gives the project a more structured way to distribute customized software while continuing to benefit from Debian's established package ecosystem.
RefreshOS 3.1 also enables i386 architecture support, making it easier to install compatible 32-bit software and dependencies required by applications such as Steam. Additional changes address desktop localization, KDE integration, installer configuration, package permissions, and installation image cleanup. Together, these improvements represent an effort to make RefreshOS easier to maintain while preserving its focus on a ready-to-use Linux desktop.
RefreshOS Builds on Debian's Stable Release Model
RefreshOS is a Debian-based Linux distribution developed by eXybit Technologies, designed to provide a polished desktop environment without requiring users to configure every component manually. The project combines Debian's stable package foundation with KDE Plasma, preinstalled applications, hardware support, multimedia capabilities, and custom desktop styling.
Unlike distributions that emphasize constant adoption of the newest software versions, RefreshOS prioritizes a relatively predictable desktop experience. Its Debian foundation provides access to established security maintenance, package management, and compatibility practices, while RefreshOS adds its own configuration choices to simplify everyday use.
Version 3.1 continues that philosophy by incorporating Debian 13.7, the seventh point release of Debian 13 "Trixie." Debian published this update on September 12, 2026, primarily to consolidate security corrections and fixes for significant software problems. These point releases do not represent entirely new Debian generations. Instead, they refresh installation media and package selections so newly installed systems begin with a more current collection of fixes.
Go to Full Article
- Tails 7.15.1 Blocks Compromised HTTPS Certificates in Urgent Privacy Security Fix
by George Whittaker
The Tails project has released Tails 7.15.1, an emergency security update addressing a compromised certificate authority that could allow attackers to impersonate legitimate HTTPS websites. Released on October 23, 2026, the update focuses on protecting users against a potentially serious man-in-the-middle attack involving certificates associated with eMudhra, an authority whose intermediate certificates were compromised.
The emergency release updates Tor Browser to version 15.0.26, addressing CVE-2026-113470, and modifies the distribution's trusted certificate authorities to block all eMudhra certificates. These changes are particularly important for Tails because the operating system routes internet traffic through the Tor network, where malicious exit nodes or other network intermediaries could potentially exploit compromised certificates to impersonate secure websites.
Unlike a conventional maintenance update, Tails 7.15.1 does not introduce major desktop features, new applications, or significant interface changes. Its purpose is to close a security gap that could undermine the authenticity of HTTPS connections. The developers recommend upgrading promptly, especially for users who rely on Tails for sensitive communications, anonymous research, journalism, or other privacy-critical activities.
Why Tails 7.15.1 Was Released as an Emergency Update
Tails, short for The Amnesic Incognito Live System, is a Debian-based Linux distribution designed to help users preserve their privacy and reduce traces of their computing activity. It typically runs from a USB stick and routes internet connections through Tor, making it useful for people who need stronger privacy protections than those provided by a conventional desktop operating system.
The distribution also emphasizes minimizing persistent data. By default, Tails operates as a live environment and does not retain ordinary session activity after shutdown. Users who need to preserve selected files and settings can configure encrypted Persistent Storage on their USB device, allowing them to maintain important information across sessions without changing the operating system's general amnesic behavior.
Because Tails is built around privacy and secure communication, problems involving HTTPS certificate validation deserve particular attention. Tor helps obscure the relationship between a user's network location and the websites they visit, but it does not automatically guarantee that every website encountered through an exit node is authentic. HTTPS provides an additional layer of protection by authenticating websites and encrypting communications between the browser and the destination server.
Go to Full Article
- Omarchy 4.0.5 Released With Better NVIDIA Laptop Support
by George Whittaker
The Omarchy project has released Omarchy 4.0.5, introducing a substantial collection of hardware compatibility improvements, desktop performance optimizations, security fixes, and package updates for the Arch Linux-based operating system. Released on October 18, 2026, the update focuses on refining the existing desktop experience while preparing the distribution for its next major feature release.
Among the most important changes are improved NVIDIA hybrid graphics support for laptops, an updated Linux 7.2.8 kernel featuring the BORE scheduler, and compatibility improvements for Qt 6.12. The release also resolves boot-related black screens, fixes audio problems affecting certain Dell and USB speaker configurations, corrects Steam graphics driver selection, and improves the reliability of several desktop utilities.
Although version 4.0.5 is primarily a maintenance release, its improvements extend across many of the components that determine how smoothly a Linux desktop operates. From faster application launches and more responsive desktop panels to stronger security defaults and more reliable hardware detection, the update demonstrates Omarchy's continued emphasis on delivering a preconfigured Linux environment that requires relatively little manual setup.
Omarchy Continues Refining Its Arch Linux Desktop Experience
Omarchy is an opinionated Arch Linux-based distribution designed to provide a ready-to-use development and desktop environment built around the Hyprland Wayland compositor. Rather than presenting users with a minimal installation that requires extensive customization, Omarchy combines a carefully selected collection of applications, themes, keyboard shortcuts, and system configurations into a cohesive desktop experience.
The distribution has attracted attention among developers and experienced Linux users who appreciate keyboard-driven workflows, tiling window management, and the flexibility of Arch Linux without necessarily wanting to configure every component manually. Its desktop environment emphasizes efficient navigation, integrated development tools, and a consistent visual design, while retaining access to Arch's extensive software repositories.
Version 4.0.5 continues that approach by concentrating on problems that can interrupt everyday workflows. The release improves hardware compatibility, corrects regressions introduced by newer software packages, and reduces unnecessary delays in common desktop operations. Rather than introducing a dramatic redesign, the developers have focused on making the existing environment more predictable and responsive.
Go to Full Article
- KDE Plasma 6.8 Marks 30 Years With a Major Shift to Wayland and a More Powerful Linux Desktop
by George Whittaker
The KDE Project has officially released KDE Plasma 6.8, introducing a substantial collection of desktop improvements while celebrating three decades of open-source software development. Released on October 14, 2026, exactly 30 years after Matthias Ettrich announced the original KDE project, this anniversary edition brings significant changes to display management, accessibility, graphics performance, remote desktop functionality, system monitoring, and application theming.
Perhaps the most consequential development is KDE's decision to retire native X11 desktop sessions in Plasma 6.8, completing its transition toward Wayland as the primary display architecture. The release also introduces NVIDIA triple buffering by default, improved HDR support, a more capable remote desktop server, CPU affinity controls in System Monitor, and expanded capabilities for the experimental Union theming engine. These improvements reflect KDE's effort to modernize the Linux desktop while maintaining the customization and flexibility that have defined Plasma for years.
Plasma 6.8 is therefore more than a commemorative release. It represents an important architectural transition for one of Linux's most widely used desktop environments, with changes that affect both everyday users and developers building applications for the next generation of Linux desktops.
KDE Celebrates Three Decades of Open-Source Desktop Development
KDE's history began on October 14, 1996, when Matthias Ettrich proposed creating a consistent graphical desktop environment for Unix-like operating systems. At the time, Linux was becoming increasingly capable as a free operating system, but its graphical experience remained fragmented. Users could choose from several window managers and applications, yet there was no universally integrated desktop environment comparable to the commercial graphical systems available elsewhere.
The original KDE initiative sought to address that limitation by building a cohesive desktop around the Qt application framework. Over the following decades, the project evolved through several major generations, introducing increasingly sophisticated desktop technologies while expanding into applications, development frameworks, mobile interfaces, and other open-source projects.
Plasma 6.8 arrives as KDE marks its 30th anniversary, but its development priorities are focused primarily on the future. Rather than introducing a purely cosmetic anniversary edition, KDE has concentrated on modernizing underlying desktop infrastructure while improving accessibility, usability, and performance. The result is a release that combines immediately visible enhancements with architectural changes intended to support future development.
Go to Full Article
- Linux Moves Closer to Retiring the x32 ABI After Years of Limited Adoption
by George Whittaker
Linux kernel developers are renewing efforts to retire the x32 application binary interface (ABI), a little-used compatibility feature that attempted to combine the advantages of 64-bit processors with the smaller memory footprint of 32-bit applications. A revised patch series submitted on October 8, 2026, proposes the first steps toward disabling the interface, potentially ending support for an architecture experiment introduced more than 14 years ago.
The latest proposal comes from Sebastian Andrzej Siewior, a Linux kernel developer at Linutronix who has been working on the removal effort throughout 2026. Rather than immediately deleting every component associated with x32, the proposed approach would first prevent the feature from being enabled through normal kernel configuration. This would give remaining users and distribution maintainers an opportunity to respond before the underlying implementation is removed.
The effort reflects a broader challenge in Linux development: maintaining compatibility with older or rarely used technologies while keeping the kernel manageable, secure, and efficient. Although x32 offered theoretical performance and memory advantages, it never achieved widespread adoption. With conventional x86_64 software dominating modern Linux systems, developers are increasingly questioning whether the additional maintenance burden remains justified.
Understanding the Linux x32 ABI
The x32 ABI was introduced with Linux kernel 3.4 in 2012 as an alternative to conventional 32-bit and 64-bit application environments. Its goal was to provide applications with access to the architectural improvements of x86_64 processors while retaining smaller data types and pointers associated with 32-bit software.
Traditional 32-bit x86 applications use the i386 ABI, which operates with a more limited register set and 32-bit execution conventions. Standard x86_64 applications, meanwhile, benefit from additional general-purpose registers, wider registers, and modern calling conventions, but they normally use 64-bit pointers. Those larger pointers can increase memory consumption in applications that maintain large numbers of pointer-heavy data structures.
The x32 ABI attempted to offer a compromise. Applications would execute using the x86_64 instruction set and its larger register file while retaining 32-bit integers, long values, and pointers. This programming model is commonly described as ILP32, meaning that integers, long integers, and pointers are all 32 bits wide.
The distinction can be illustrated by comparing the expected sizes of common C data types:
Go to Full Article
- Google's Kage Project Rethinks Linux Kernel Security With Isolated Device Drivers
by George Whittaker
Google is exploring a new approach to Linux kernel security that could significantly change how device drivers interact with the operating system. The experimental project, known as Kage, uses compiler-based sandboxing to isolate drivers inside the kernel, potentially limiting the damage caused by memory corruption, programming errors, and exploitable vulnerabilities without requiring drivers to run as separate user-space processes.
The research was presented at the Linux Plumbers Conference 2026, held October 5–7, with Stanford University and Google researcher Zachary Yedidia discussing how LLVM's Lightweight Fault Isolation (LFI) technology can create restricted execution environments for native kernel code. Unlike conventional isolation techniques, which often depend on separate processes or virtual machines, Kage attempts to preserve the performance advantages of kernel-space execution while reducing the amount of memory individual drivers can access.
Early prototypes have already demonstrated the concept using NVMe storage, networking, and Wi-Fi drivers. However, Kage remains an experimental research project rather than a feature available in mainstream Linux distributions. Its developers are still investigating performance, hardware access, and compatibility with more complicated drivers, including graphics hardware.
Why Device Drivers Remain a Major Linux Security Challenge
Linux device drivers are responsible for connecting the operating system to hardware components, including graphics cards, network adapters, storage controllers, USB devices, and wireless chipsets. Most traditional Linux drivers execute in kernel space, giving them privileged access to system resources and the ability to interact directly with hardware. This architecture is one reason Linux can deliver high performance across such a broad range of devices, but it also creates a significant security challenge.
When an ordinary application encounters a memory error, the operating system can often terminate that process without affecting the rest of the system. Kernel drivers operate under different conditions. Because they typically share the kernel's address space and privileges, an invalid memory access or exploitable vulnerability can affect unrelated kernel components, potentially resulting in a system crash, privilege escalation, or complete compromise of the operating system.
The challenge becomes more complicated when considering the enormous number of drivers supported by Linux. Some are maintained by large organizations with extensive testing infrastructure, while others receive contributions from smaller development teams or individual maintainers. Even carefully reviewed drivers can contain bugs, particularly when they interact with complicated hardware, asynchronous operations, and memory-management mechanisms.
Go to Full Article
- Speech Synthesis on Linux: Adding a Voice to Scripts and Systems
by George Whittaker
Linux users have long had a pragmatic relationship with text-to-speech. The classic open-source engines have been available for years, wired into accessibility tools and the occasional script, dependable but unmistakably robotic. They do the job where the job is simply to convert text to some kind of speech, but the mechanical output has kept them out of anything where the voice actually matters. The arrival of high-quality speech synthesis delivered over an API changes what is possible, letting Linux users add genuinely natural voices to scripts, services, and applications without hosting a heavyweight model themselves.
The Familiar Trade-Off
Anyone who has used the traditional Linux speech engines knows the trade-off. They are free, local, and scriptable, which fits the Linux ethos perfectly, but the voices are clearly synthetic. For accessibility and for utilitarian tasks where intelligibility is all that counts, that has been acceptable. For anything user-facing where the quality of the voice shapes the experience, it has not.
The alternative of running a modern, high-quality speech model locally is possible but comes with real costs: significant computational requirements, model management, and the ongoing maintenance of a demanding piece of infrastructure. For many use cases, particularly on servers, embedded systems, or ordinary workstations, that overhead is disproportionate to the need. This is the gap that an API-based approach fills, offering the quality of a large modern model without the burden of hosting one.
The API Approach on Linux
Delivering speech synthesis over an API fits naturally into how Linux users already build things. Rather than installing and maintaining a model, you make a request to a service and receive audio back, which you can then play, save, or pipe into whatever comes next. A Go to Full Article
|
