|
1825 Monetary Lane Suite #104 Carrollton, TX
Do a presentation at NTLUG.
What is the Linux Installation Project?
Real companies using Linux!
Not just for business anymore.
Providing ready to run platforms on Linux
|
Show Descriptions... (Show All)
(Two Column)
- Six stable kernels with a security fix
Greg Kroah-Hartman has announced the release of the 7.1.7, 6.18.43, 6.6.149, 6.1.181, 5.15.214, and 5.10.263 stable kernels. These kernelsfix a singlesecurity vulnerability (CVE-2026-68480)that could allow data leakage through speculative execution. Users ofthose kernels are advised to upgrade.
- [$] Bringing BPF to binfmt_misc
The kernel is able to run a few types of executable files, including nativebinaries in the ELF format and interpreted programs that begin with the#! marker. It also, however, has a mechanism, called binfmt_misc,that can be configured from user space to enable the transparent executionof programs in just about any format. This feature has been relativelystatic for years, but it seems likely to receive some significant updatesin the near future, including the ability to load BPF programs that candecide how to run a given program.
- Rust Coreutils 0.10 released
Version0.10 of the uutils project's Rust Coreutils has been released. Thisrelease focused on compatibility with the GNU Core Utilities suite,with Rust Coreutils now passing 645 of 690 tests, up from 625 with version 0.9.0. Notablechanges in this release include addition of the mv --exchangeoption, an OpenSSL backend for checksum utilities, applying SELinux labels atcreation when using mkdir, mkfifo, and mknod, as wellas a number of performance and security improvements.
The project has anonline playground that runs theRust Coreutils directly in the browser via WebAssembly for those who would liketo try the utilities without installing them. LWN covered the uutils project inFebruary 2025.
- Security updates for Thursday
Security updates have been issued by Debian (7zip, kernel, libde265, and p7zip), Mageia (tomcat), Oracle (fence-agents, frr10, kernel, ldns, libgcrypt, mingw-glib2, nodejs24, osbuild-composer, p11-kit, php8.4, sg3_utils, and thunderbird), Red Hat (libXfont2), and SUSE (containerd, evince, libXfont2, nginx, openssl-3, pcp, php7, php8, python-Django, python-httplib2, python-nltk, rrdtool, vifm, and wireshark).
- [$] LWN.net Weekly Edition for August 6, 2026
Inside this week's LWN.net Weekly Edition:
Front: Process-builder API; Fedora COI; FUSE io_uring buffer sizes; BPF network namespaces; FUSE plans; BPF libraries; directory creation system call. Briefs: AISI hack; JFrog on CVEs; npm worm; AUR adoption; NetBSD 11.0; b4 0.16.0; C-Kermit 11; Rust LLM policy; Servo 0.4.0; Quotes; ... Announcements: Newsletters, conferences, security updates, patches, and more.
- b4 0.16.0 released
Konstantin Ryabitsev has announced the release of version 0.16.0 of the b4 software-development tool. The biggest change is the addition ofbug-tracking support:
The new "b4 bugs" command integrates with git-bug to let you track bug reports alongside your git repository. Bugs are stored as git objects inside the repo, so they travel with the code and can be shared via git push/pull without any external service.
There are also a lot of improvements to b4 review (which was coveredhere in March), better conflict resolution in b4 shazam,improved history rewriting, and more.
- [$] FUSE status and plans
Filesystem inUserspace (FUSE) maintainer Miklos Szeredi led a birds-of-a-feather(BoF) discussion about the subsystem atthe 2026 Linux Storage,Filesystem, Memory Management, and BPF Summit. In it, he talked aboutmaintenance challenges, proposed features and their status, and his plansfor a new FUSE API. There is a lot of interest and activity in theFUSE community these days it seems.
- Nelson: rust-lang/rust is adopting an LLM policy
Jynn Nelson describesthe Rust language team's new LLM policy on the Inside Rust blog.
No one except the author is required to read LLM output unless they choose to: LLM output isn't allowed in public docs, PR descriptions, or Github comments unless it's clearly marked; reviewers aren't required to look at LLM PRs if they don't want to.
No one is required to use LLMs to contribute to rust-lang/rust: policies must be written first for humans, and only summarized for machines; LLM reviews cannot substitute for human review or self-review.
You are allowed to generate LLM content that only you see, without disclosure, as long as you do not post it anywhere that you expect us to read or review.
- Security updates for Wednesday
Security updates have been issued by AlmaLinux (fence-agents, gstreamer1-plugins-good, kernel, kernel-rt, p11-kit, perl-Archive-Tar, perl-DBI, and thunderbird), Debian (aom, botan3, and kernel), Fedora (abrt, coreutils, doctl, kernel, open62541, perl, perl-Devel-Cover, perl-PAR-Packer, and polymake), Mageia (acl and php), Oracle (firefox, frr, kernel, libreswan, nodejs-nodemon, nodejs22, perl-Archive-Tar, php:7.4, php:8.2, rsync, and thunderbird), Red Hat (compat-libtiff3, libpq, libtiff, postgresql, postgresql16, postgresql18, postgresql:12, postgresql:13, postgresql:15, postgresql:16, and postgresql:18), Slackware (stunnel), and SUSE (alloy, alsa, bind, chromedriver, corepack24, ffmpeg-4, golang-github-prometheus-prometheus, google-guest-agent, google-osconfig-agent, kubevirt, libgcrypt, libpng16, multipath-tools, netty, netty-tcnative, nodejs26, openssl-1_1, openssl-3, perl-HTTP-Tiny, perl-YAML-Syck, podman, python-sh, python-ujson, rsyslog, spice-vdagent, thrift, valkey, wpa_supplicant, and xen).
- An LLM agent attempts to compromise a project on GitHub
The AI Security Institute has released adetailed report on an security incident of its own making. TheInstitute set some LLM agents loose on the Internet with a securitychallenge; soon they were creating malware-laden pull requests andsock-puppet accounts to promote them.
The agent opened a malicious pull request (PR) to ⟨REPO_A⟩ and pursued a number of strategies to get it merged: Repeatedly commented on the PR with sockpuppet accounts to manufacture consensus and pressure the maintainer into approving with minimal review. Opened a GitHub Issue in another repository (also owned by ⟨PERSON_A⟩) containing a prompt injection for other coding agents. The malicious instructions were addressed to issue-triage AI coding agents and invisible to humans viewing the website. Sent multiple emails to ⟨PERSON_A⟩ and ⟨PERSON_B⟩, with different pretexts to get them to run malicious code. Over the course of the sample, the agent sent five emails, some containing malware, others aimed at persuading a maintainer to accept the pull request.
It would be surprising if this were the only incident of this type; theonly real difference here is that the people involved are documenting whathappened.
- [$] Fedora considers conflict-of-interest policy
The FedoraCouncil is consideringa conflict-of-interest (COI) policy for its decision-making bodies,such as the Fedora EngineeringSteering Committee (FESCo), special-interest groups (SIGs), andany other groups or individuals that report to the council andare responsible for decisions that impact the Fedora project. Thecurrent draft does not, however, apply to the council itself. The publicdiscussion for the COI policy began on July 23 and seems to benearing completion, with the council set to discuss the topic againduring its meeting on August 13.
- Another npm worm
StepSecurity is reporting the emergence of a new worm affecting npm packages.The design of the worm is nothing new, but the rapidity with which it isexploiting captured npmpackager credentials is noteworthy.
TL;DR: A self-propagating worm, which we are calling ChainDrop, is spreading rapidly through the npm ecosystem. So far 435 packages and more than 1,550 compromised versions have been flagged, starting with keyv@6.0.0. If you are using any of the packages listed below, assume your environment is compromised. We are still investigating the full scope; check back on this post for updates.
- [$] The beginning of a process-builder API
The recent discussion on "spawn templates"raised questions about whether it was time to provide an alternative to theclassic Unix fork()/exec() pattern for process creation.One idea that was raised there was to shift the template pattern into aninterface that could be used to efficiently assemble new processes frombare cloth, without duplicating the parent process. Preferably, thatinterface would be able to implement posix_spawn().Li Chen, the author of the spawn-template work, has now responded with a patch series(written with significant LLM assistance) showing what a process-builderAPI for Linux might look like.
- Security updates for Tuesday
Security updates have been issued by AlmaLinux (frr, ldns, mingw-glib2, and perl-Archive-Tar), Debian (ruby2.7), Fedora (borgbackup, nebula, python-nh3, rust-ammonia, and seamonkey), Mageia (librabbitmq, libvncserver, packages, perl, perl-GD, perl-Unicode-LineBreak, squid, and unbound), Oracle (compat-libtiff3, frr, gstreamer1-plugins-good, javapackages-tools:201801, libreswan, nodejs:22, nodejs:24, p11-kit, perl-Archive-Tar, perl-DBI, php, pki-deps:10.6, and python-tornado), and SUSE (aws-iam-authenticator, bind, containerd, gawk, google-cloud-sap-agent, ignition, ImageMagick, java-11-openjdk, libpng16, libssh, mcphost, nginx, openssh, openssl-1_1, perl-DBI, perl-HTTP-Date, perl-Net-DNS, python-urwid, python3-dulwich, python312, python313, python3, python313-pydantic, python313-sentry-sdk, rrdtool, s390-tools, samba, spice-vdagent, vim, and xen).
- Apple NVMe Linux Driver Sees Fixes After Being Bitten By New Firmware
A set of patches providing fixes for the Apple Silicon NVMe driver for the Linux kernel were sent out today due to new issues cropping up when running newer Apple firmware. Firmware shipped by macOS 15+ is causing issues with the current Apple NVMe open-source Linux driver developed by the Asahi Linux crew...
- Zapscape Is The Latest Linux Vulnerability For KVM Guest-To-Host Escape, LPE
Made public earlier today is Zapscape as a guest-to-host escape vulnerability affecting the Linux KVM x86 code for the past six years. This 2020 kernel change to KVM x86 can also be used as a local privilege escalation (LPE) exploit too where /dev/kvm is world-writable on some Linux distributions like RHEL...
- Fedora Server 44 OverlayFS BTRFS setup (Assisted by Google AI)
OverlayFS is primarily used automatically by the system to mount read-only Btrfs system snapshots as writable environments. This allows you to safely boot into a broken system snapshot from GRUB, run tests, or perform a system restoration while keeping the actual snapshot pristine.
- Linux 7.2-rc7 Restoring Btrfs Fixup Worker Infrastructure To Address Silent Data Loss
Back during the Linux 7.2 merge window the Btrfs file-system dropped its COW fixup mechanism, which was used to detect dirty pages without an ordered extent. This code was removed as it was believed the kernel's memory management layer had solved the underlying conditions but in reality it ended up leading to silent data loss. That Btrfs fixup worker infrastructure is now restored in time for Linux 7.2-rc7 this weekend and the stable v7.2 kernel later this month...
- Linux Accidentally Left Legacy I/O & Memory Handlers Open In Kernel Lockdown Mode
For nearly the past decade has been the kernel lockdown mode for tightening up kernel access from user-space such as when UEFI Secure Boot is enabled. The kernel lockdown mode restricts PCI BAR access, no writing to /dev/mem, and other restrictions so user-space can't can't modify the running kernel or access sensitive kernel memory. An oversight has allowed legacy I/O and memory interfaces via sysfs to remain open in lockdown mode, but a fix is on the way...
- NXP FRDM i.MX 95 Pro Pairs Six Cortex-A55 Cores with 8 eTOPS AI Acceleration
NXP has released the FRDM i.MX 95 Pro, a development board designed for evaluating the company’s i.MX 95 applications processor in edge AI, industrial networking, robotics, vision processing, and advanced HMI applications. The board uses the 19 × 19mm version of the i.MX 95 processor, integrating up to six Arm Cortex-A55 application cores alongside Cortex-M7 […]
- The Performance Benefits To Upgrading Mesa With Intel Arc B390 On Ubuntu Linux
If you are an early customer of the Framework Laptop 13 Pro or other Intel Core Ultra Series 3 Panther Lake laptop and using Ubuntu 26.04 LTS, there can be real benefit from upgrading your Mesa stack for the newer Iris Gallium3D and ANV Vulkan drivers. In this article are some benchmarks of the Framework Laptop 13 Pro with Core Ultra X9 388H with Arc B390 Xe3 integrated graphics for looking at the performance impact of using Mesa Git on Ubuntu Linux.
- Running Ollama Locally with Podman on Fedora Linux
Running Large Language Models (LLMs) locally has become increasingly popular for development, privacy, and offline testing. Ollama makes this incredibly straightforward, allowing you to run models like Llama 3 or Mistral directly on your machine. By leveraging Podman on Fedora Linux, you can isolate Ollama inside a container. This approach keeps your host system clean […]
- Comu Fits a 144MHz CH32V203 RISC-V Board Inside a USB-A Port
Tindie recently listed Comu, a compact development board built around the WCH CH32V203 RISC-V microcontroller. Measuring 13 × 9.4mm, the board fits inside a USB-A port and combines programmable touch controls, LEDs, USB device support, and access to several GPIO signals. The CH32V203 operates at up to 144MHz using its internal oscillator and provides 224KB […]
- Raspberry Pi 4 3GB Variant Reaches More Distributors Following April Introduction
Raspberry Pi introduced a new 3GB version of the Raspberry Pi 4 Model B in April, positioning it between the existing 2GB and 4GB configurations. Four months after the announcement, the model is appearing through additional distributors, including TME, PiShop.us, and Waveshare. The 3GB configuration was introduced in response to rising LPDDR4 memory costs. According […]
- Linux Kernel Begins Phasing Out the crypto_rng Layer to Simplify Random Number Generation
Linux kernel developers are moving forward with plans to remove the crypto_rng API layer, a long-standing component of the kernel's cryptographic subsystem. The proposed change is part of a broader effort to simplify the kernel's internal architecture by eliminating redundant code paths and encouraging developers to rely on the kernel's modern random number generation interfaces instead.
- Dress Made of Living Mycelium Can Renew and Repair Itself
Researchers in China have developed a living mycelium textile that can self-clean, renew its surface, and partially repair holes when treated with a nutrient solution and fresh fungus. The material can also gain added properties such as blue pigmentation or UV resistance by co-culturing it with yeast or other fungi. Dezeen reports: The breakthrough from the researchers at the Shenzhen Institutes of Advanced Technology is a type of engineered living material (ELM) -- a material built off living organisms that stay active even after they're fabricated into their final form. [...] By working with living but dormant cordyceps militaris fungus instead, the researchers have been able to take advantage of its biological functions. The result is a material that is self-renewing and responsive to its environment, in ways that could one day transform architecture and clothing -- as seen in a prototype dress created together with material innovation company Peelshere. It can also be adapted by mixing in other fungi or yeast, lead researcher Ke Li and her team detail in a paper in the peer-reviewed journal Science Advances. In it, they describe a "programmable fungal platform" where mycelium is treated like a modular system, with the sheet material forming a base structure and extra biological abilities, such as colour and UV resistance, becoming "plug-and-play" add-ons via other organisms. This gets their textile closer to the self-repair, environmental responsiveness and controllable functionality that is the promise of engineered living materials, they argue. The ELM's self-renewing and semi-repairing functionality comes from the mycelium base structure. Following drying at 45 degrees, the material is not quite living and not quite dead, but instead in a "low-metabolic, dormant-like state", Li told Dezeen, meaning it is not actively growing. However, new growth can be triggered by applying a nutrient solution of potato water, leading the dormant mycelium to germinate, send out new fungal filaments and renew the material's surface. When this nutrient solution is applied over a hole, along with a small patch of fresh fungus, it triggers the living cells to grow across the gap, seamlessly repairing the surface without any adhesives or stitching. The material is also naturally self-cleaning, as it is hydrophobic. "Its distinctive surface texture, biological colouring, controlled repair and biodegradability may be particularly useful in applications where visual expression and a defined product lifetime are important," said Li. "Further improvements in durability, moisture resistance, safety and manufacturing consistency would be needed before it could be considered for routine clothing or permanent architectural use."
Read more of this story at Slashdot.
- Scientists Make First Viruses Designed By AI
An anonymous reader quotes a report from The Guardian: Scientists have made the first viruses designed by artificial intelligence in a milestone that raises hopes for new medicines but also concerns over how to ensure the technology remains safe. The viruses are specific kinds known as bacteriophages, which only infect bacteria and are used around the world to treat patients with persistent infections. In lab tests, a cocktail of the AI-designed viruses killed E coli bugs that were resistant to natural bacteriophages. Dr Brian Hie, a chemical engineer at Stanford University in California, used genome language models, the genetic equivalent of the large language models behind AI chatbots, to design functioning genomes for bacteriophages. The viruses were then made in the laboratory and pitted against E coli in a dish. The ability to "rapidly design" genomes and tune them for specific bugs while overcoming resistance could "transform phage therapy" and "expand biotechnological toolkits," the researchers wrote in the journal Science. But beyond the potential benefits, the scientists said the work raised "important biosafety, biocontainment and biosecurity considerations" and urged others who were designing whole genomes to "consult both safety and security professionals throughout the project." In an accompanying article, Prof Tom Inglesby and Dr Moritz Hanke at the Center for Health Security at Johns Hopkins University in Baltimore, reinforced the warning, writing: "Although this is promising for life sciences applications, it also raises urgent biosafety and biosecurity questions. The ability to compose viral genomes using generative AI now exists; the governance to safely steer it does not." Tom Ellis, a professor of synthetic genome engineering at Imperial College London, said the work was impressive, but revealed how hard it would be to make more complex genomes. "This is literally the smallest and easiest genome to make," he said. An AI trained on the genetic code of dangerous bugs could be used to design more harmful viruses, Ellis said, but controlling access to genetic data and having restrictions on making genomes that look dangerous would help. "Governments are working hard to do this already," he added. "But honestly," he said, "the threat from full AI design and writing of a genome of a virus or bacteria is very overblown when we consider that just taking existing pathogens and making gain-of-function changes to their genomes is so much easier and much more likely to be a real pathogenic threat." Dr Filippa Lentzos, a reader in science and international security at King's College London, said the most important point to intervene at the moment was when DNA was being manufactured. "It's important to see the bigger governance picture and not focus regulation solely on the AI model," she said. "A layered approach makes more sense: safeguards around model development and access, responsible research review, synthesis screening, and established laboratory biosafety and biosecurity."
Read more of this story at Slashdot.
- Court Orders Meta To Establish $567 Million Fund To Abate Harms To Youth
A New Mexico court ordered (PDF) Meta to create a $567 million fund to address harms linked to youth mental health and child sexual exploitation after finding its platforms constituted a public nuisance. "In sum, the Court finds that New Mexico is in the midst of a teen mental health crisis affecting public health and public safety in and throughout the state, and that Meta's platforms are a significant contributing cause to the crisis," wrote Chief Judge Bryan Biedscheid in the decision. The fund comes on top of $375 million in civil penalties, though the judge declined to mandate changes to features such as infinite scroll and autoplay, citing potential First Amendment and Section 230 concerns. Tech Policy Press reports: The decision follows the second phase of in the State of New Mexico v. Meta Platforms Inc., which consisted of a bench trial. Its central question was whether Meta's platforms amounted to a public nuisance in New Mexico, and, if the court found that they did, what remedy would be needed to address it. In March, a Santa Fe jury found Meta liable for violations of New Mexico's Unfair Practices Act, awarding $375 million in civil penalties. The jury deliberated less than a day following that nearly seven-week trial. The $567 million abatement fund would be in addition to the civil penalties, according to today's decision. New Mexico Attorney General Raul Torrez sued Meta in December 2023, alleging the company made false public statements about the safety of its platforms while knowing internally that its products facilitated child sexual exploitation. The court denied Meta's Section 230 defense in May 2024. In today's decision, the court again asserted that "Section 230 does not preclude the State's public nuisance claim," but the decision attempted to thread the needle on issues that the court determined might have run "afoul" of the statute, or of the First Amendment, such as issuing remedies around any particular product feature.
Read more of this story at Slashdot.
- Google's $15 Billion India Data Center Project Battles Water, Wildlife Concerns
Google's $15 billion data-center project in Visakhapatnam is facing protests and legal challenges over fears that it will worsen local water shortages and disturb wildlife near the Kambalakonda sanctuary. Google says the campus will use advanced air cooling and comply with Indian law, while state officials deny that residential or rural water supplies will be tapped. Reuters reports: The southern state of Andhra Pradesh, governed by an ally of Prime Minister Narendra Modi who has hailed the project as historic and transformational, has denied allegations that the project was fast-tracked without weighing risks to water supplies and wildlife. But the growing opposition could become an early test for Google's biggest-ever India investment, which is facing several legal challenges over its impact on water supplies and proximity to a wildlife sanctuary that is home to leopards and pangolins. In recent weeks, activists and children have marched in Visakhapatnam city, holding banners saying "We cannot drink DATA" and painting handcuffs on the Google logo, social media posts show. On Sunday, Reuters attended a public gathering where activists chalked out plans for holding door-to-door awareness campaigns and beach protests in coming days. "Development should not be at the cost of livelihood of the people," Raja Rama Mohan Roy, founder of non-profit Green Visakha said at the event where he presented statistics on Visakhapatnam's stressed water supply and demand. The government says the city receives 410 million liters of water a day from its reservoirs and rivers, against a requirement of 480 million. Rationing of water supplies is common in the city with a population of 2.5 million people. [...] The state's top court on Monday asked the government to defend against allegations leveled by activist group Jal Biradari (Water Community), which says the project will strain water availability by putting stress on a nearby reservoir. The Andhra Pradesh High Court will next hear the public interest litigation on August 24.
Read more of this story at Slashdot.
- 'Tower Dump' Warrants Ruled Unconstitutional
alternative_right shares a report from The Hill: A federal judge in Mississippi ruled Wednesday that "tower dump" warrants are unconstitutional, declining to reverse a lower court decision refusing the government's request to obtain the search warrants in a series of violent crime investigations. A "tower dump" involves cellphone companies providing law enforcement with access to the time and location data of all mobile devices connected to specific cell towers during a designated time window. Law enforcement had sought approval for several of these search warrants as part of criminal investigations into gang-related activity in the Jackson, Miss., area last year, arguing the data could help identify all those potentially involved, particularly in incidents with unknown suspects. A magistrate judge denied the applications, holding that "tower dumps" are impermissible general warrants. The district judge agreed. The order repeatedly referenced the Supreme Court's recent decision in Chatrie v United States, in which the majority held that geofence warrants require constitutional privacy protections. "With this information, the Government asserts that it will be able to identify all potential suspects," Judge Carlton Reeves wrote in a 30-page order (PDF). "Even so, law enforcement would also have access to the cellular records of countless individuals, the vast majority of whom were merely passing by a location at the 'wrong' time." "That is an unreasonable search under the Fourth Amendment," the judge concluded.
Read more of this story at Slashdot.
- Azure CTO Pastes Doom Into Paint One Frame At a Time
Microsoft Azure CTO Mark Russinovich used Claude to build a gloriously impractical setup that runs Doom in the background and pastes each rendered frame into Microsoft Paint through the Windows clipboard. The project is referred to as "DoomPaint" or "MS Paint Doom" on GitHub. The Register reports: To be clear, Microsoft Paint isn't doing anything other than serving as a place to paste from the game. [...] ViZDoom runs the Doom .wad file and renders it headlessly. Each frame is passed through the Windows clipboard and pasted onto Paint's canvas. A low-level keyboard hook captures and swallows game inputs while Paint is in the foreground, and sound effects come from the game engine. A glance at the code shows Russinovich was more than happy to use Claude to whip it up. In a LinkedIn post, he said: "I've been using Fable 5 on serious research projects and find it a noticeable improvement over Opus 4.8." Using Microsoft Paint as a display for Doom is not, however, a serious research project, as Russinovich acknowledged. "I've also been having fun with it on frivolous ones," he added, so here we are. "Paint renders the game but does not compute it," said Russinovich. "Paint computes nothing. Paint has never computed anything. That's the joke."
Read more of this story at Slashdot.
- OpenAI's Models Shared Hacking Tips On a Secret Messaging Board Before Hugging Face Breach
OpenAI researchers say multiple AI agents secretly created an internal message board to share hacking techniques, eventually finding ways around restrictions, exploiting a zero-day, and helping two models breach Hugging Face without human prompting. "This is a pivotal moment both for our company as well as the AI industry as a whole," Michael Dalton, one of the AI-maker's researchers, said during a presentation at the Black Hat cybersecurity conference in Las Vegas, Nevada. Politico reports: Dalton and Eric Wallace, another OpenAI researcher, said Wednesday the AI giant recently learned that multiple agents it was testing simultaneously began communicating over an internal message board in early May. There, different models shared advice about how to accomplish difficult hacking challenges they were struggling to surmount, including workarounds that required internet access. Two OpenAI models ultimately strung together a series of sophisticated techniques to gain access to the internet and worm their way inside Hugging Face in mid-July. OpenAI has said the models were focused on completing a hacking evaluation they were prompted to solve, and that correct answers could be found on the AI developer platform. The OpenAI researchers told conference attendees that since early May, the models created a message board inside OpenAI's Artifactory internal file system. Without the company's knowledge, the models spent months independently exchanging information and techniques to help each other complete difficult tasks. Wallace said that when models get stuck, they often "try to game or cheat the task in order to get their reward." "The beginning of this incident kind of traces back to this point where one agent realized it could communicate by uploading a note," he added. By late May, one model found a way to abuse Artifactory's internet access to retrieve files from various websites -- effectively giving the models indirect access to the internet. In June, the models were able to find and exploit a previously unknown zero-day vulnerability to gain administrative privileges on Artifactory, install remote software and expand their activity within the system. These efforts eventually overloaded Artifactory, causing a system-wide outage in early July that alerted OpenAI's engineers to the ploy. After investigating, the company revoked the model's credentials, removed the message board and worked with Artifactory to fix any gaps before resuming training. But the models found another way to communicate inside Artifactory just days later and continued exchanging techniques to target additional vulnerabilities within OpenAI's infrastructure and external systems, including Hugging Face.
Read more of this story at Slashdot.
- The US Government's Mario, Pokemon and Naruto Meme Posting Could Damage These Franchises, Japanese Officials Warn
Japanese officials have repeatedly asked the Trump administration to stop using characters from franchises such as Mario, Pokemon, and Naruto in unauthorized government memes and pro-war videos, warning that the posts could damage the intellectual property involved. IGN reports: Official US government social media accounts, including The White House's X account, have posted various memes and videos using characters from popular Japanese anime and games over the past year. Japan's Ministry of Foreign Affairs has repeatedly called on the US government to cease uploading such posts, stating that "It's inappropriate even for public institutions to reproduce copyrighted materials without the rightsholders' consent." This concern was voiced by Minister for Foreign Affairs Toshimitsu Motegi in a parliamentary session back in April, when he made direct reference to a pro-war video that used Nintendo's Wii Sports. However, according to a report by Mainichi Shimbun this week, the Japanese Ministry called on the Trump administration to stop using IPs like Naruto, Pokemon and Mario at least twice more this June through the US Embassy in Japan. Japan requested that the US administration take into account the potential damage to these IPs when used without permission in US policy and pro-war related content. [...] It's not just the Japanese government and related parties who have spoken out against these posts. They have also sparked backlash from Japanese anime fans. Notably, self-proclaimed manga and anime fan Nana Suzuki kicked off the "Protect Japanese Manga" petition on Change.org, which has received international news coverage (from the New York Times, BBC and others). The organizer claims to have submitted their petition to the Japanese Cabinet Office back in March, as well as alerting Japanese politicians to the US government's unauthorized use of Japanese IPs, potentially drawing more official attention to the issue. Renewed backlash was triggered in June, when President Trump shared an AI-generated video depicting himself as Naruto, the protagonist of the popular manga and anime of the same name, on Truth Social. This prompted the petition organizer to reopen the petition "as an urgent effort to convey our protest and concern regarding this matter to the rights holders and to work in solidarity to lobby the Japanese government." The Naruto clip also prompted renewed discussion of this issue in Japan's media and government. As reported in the Hokkaido Shimbun and others, Cabinet Minister Kimi Onoda was asked about it in a June 12th press conference. She emphasized that "obtaining permission from the copyright holder is the underlying principle for fair use," and stated that this position had been conveyed to the US government multiple times through diplomatic channels.
Read more of this story at Slashdot.
- FCC Kills TV Ownership Cap, Claiming Authority Over Limit Set By Congress
An anonymous reader quotes a report from Ars Technica: The Federal Communications Commission voted 2-1 today to eliminate the National Television Ownership Rule, claiming authority to repeal a limit that was set by Congress over 20 years ago. The rule prohibits any single broadcast station owner from reaching more than 39 percent of all TV households in the US. Under Chairman Brendan Carr, the FCC is replacing the rule with a "case-by-case review" of each proposed merger. "This will empower the FCC to approve deals that promote the public interest while allowing the agency to reject any deals that do not meet that standard," Carr's office said in a press release today. Without the 39 percent rule, broadcasters will be better able to compete against streaming companies that don't face similar limits, Carr's office said. The change, if not stopped by courts, will make it easier for Carr to allow broadcast mergers that result in more favorable news coverage for President Trump. Carr has consistently threatened to revoke licenses from broadcasters who have drawn Trump's ire, including by ordering an early license review of all ABC-owned stations. Carr said local broadcast TV stations are becoming "undifferentiated passthroughs of national programming produced in Hollywood and New York," and he justified repealing the ownership rule by arguing it will help the stations invest in local news. "It's worth noting that Republicans with deep firsthand knowledge of this issue also agree the commission cannot do what it is attempting today," said Democratic FCC Commissioner Anna Gomez, who voted against the decision today. "Former FCC Commissioner Mike O'Rielly has been unequivocal that the FCC lacks authority to change the cap. Former House Majority Leader Tom DeLay, who negotiated the 39 percent compromise, has stressed that Congress intentionally wrote the cap into law to prevent FCC revision. And Senate Commerce Chair Ted Cruz has said he is 'skeptical a change can be made absent an act of Congress.' Their consensus reinforces a simple point: Congress set the cap, and only Congress can change it." Gomez, in addition to arguing that "Congress deliberately enshrined the cap in statute and removed it from the Commission's review process," said removing the cap will hurt local broadcasters. "Digital giants compete for their most valuable programming and advertising, while consolidation pressures at the national level threaten the local reporting and public-safety functions on which communities rely," Gomez said. "But eliminating the cap does not free local broadcasters from that strain. It just changes who is doing the squeezing. A handful of station-group giants does not represent the wishes of local broadcasters. They are large national companies that own local stations and increasingly dictate what airs on them without much local input. Trading a squeeze from Big Tech for a squeeze from Big Media does nothing to protect the communities this cap was designed to serve."
Read more of this story at Slashdot.
- Times Magazine Now Serves Ads That Only AI Chatbots Can See
Longtime Slashdot reader mccalli writes: Times Magazine has started serving adverts with "brand messages" to AI crawlers, which are not part of its main page. The aim seems to be to influence chatbots to talk about the brand offerings in a positive light that can't be traced back to the actual page. Notably, they've excluded Google chatbots from this, likely because Google penalizes companies that show different search offerings to its bots versus actual human visitors. "Maybe it's more important to influence the agent than even the human, because with a human you influence one person. When you influence ChatGPT, you're influencing potentially all of ChatGPT," said Jonah Goodhart, co-founder and CEO of ad tech platform Mobian. "If ChatGPT changes what it says about [a brand], it's massive and it's more than any one campaign could ever do. The big idea here is LLMs and AI want trusted information about brands. We're serving that up to them in a very straightforward, easy way." The ad strategy was uncovered by Germany-based freelance software developer Vincent Schmalbach, who detailed his findings in a blog post. Digiday and The Register both reported on the story.
Read more of this story at Slashdot.
- Meta AI Hacked External Systems During Cybersecurity Testing
wiredmikey shares a report from SecurityWeek: Meta is the latest major AI developer to admit that its models broke loose during cybersecurity testing and hacked external systems. The tech giant said in a statement to the media on Wednesday that the incident occurred during independent evaluations conducted by Israeli AI security startup Irregular. The tested AI models were inadvertently allowed to access the internet due to a misconfiguration, which led them to exploit a vulnerability in an unnamed third-party service. It's unclear if it was a known flaw or a zero-day. The Information [gated] learned that the Meta AI attacks involved the company's advanced Muse Spark 1.1 model, which breached an unnamed organization's systems and made unauthorized changes to its internal environment. Meta said it learned of the AI models going rogue after being notified by Irregular. The company is conducting an investigation and it has promised to issue a "full retrospective" once it has all the facts. A spokesperson for Irregular said the incident was the "exact same evaluation-environment issue that was already disclosed by Anthropic last week" and that it did "not involve a "sandbox escape or a sophisticated cyber action." It contrasts with OpenAI, whose AI agent independently exploited a novel vulnerability to reach the internet during cyber testing. Not only did it breach Hugging Face but it also hacked multiple third-party accounts and services as part of the attack.
Read more of this story at Slashdot.
- Broadcaster Wins Broad US Blocking Injunction Covering Pirate Sites That Don't Exist Yet
An anonymous reader quotes a report from TorrentFreak: Mexican broadcaster TelevisaUnivision (TU) has obtained (PDF) one of the broadest anti-piracy injunctions ever issued by a U.S. federal court. After initially targeting five pirate IPTV streaming operations, the case expanded to cover well over 500 domain names, requiring intermediaries including Cloudflare, GitHub, and a Mexican bank to comply. In addition, the injunction also covers pirate services and content that hasn't been created yet. [...] The case was relatively targeted, naming the IPTV services Thunder TV, Sunset TV, Pop TV, Kaelus TV, and Tele Latino, as well as their alleged operators. The broadcaster argued that these pirate IPTV services threatened its business. TU holds the World Cup rights for sixteen Latin American territories, and its license with FIFA requires it to keep the Mexican broadcast signal from reaching the United States. The pirate services, it argued, put it in breach of that contract, exposing it to "termination and forfeiture of hundreds of millions of dollars in payments." To stop this immediate threat, the company requested a temporary restraining order, hoping to shut down the IPTV services effective immediately. [...] Judge Kathleen Williams granted the temporary restraining order (PDF) on June 5, one day after the case was filed, without hearing from any of the defendants. The initial order prohibited the defendants from infringing TU's own copyrighted works, which include telenovelas and other programming, and from using its trademarks, including all content linked to its licensed World Cup broadcast. Importantly, the order also targeted third parties acting "in active concert," including ISPs, hosts, CDNs, domain registrars, registries, app stores, ad networks, social platforms, search engines, and payment processors. These were ordered, on TU's request and with notice, to disable the listed domains and IP addresses and unmask whoever was behind them. [...] While the injunction is noteworthy for many reasons, the most striking feature is that it's specifically written to include things that don't yet exist. That starts with the content it protects. The order isn't limited to TU's current catalog or the World Cup rights, it covers the infringement of "any copyrighted works or broadcasts that Plaintiffs may in the future produce, license, or acquire rights to transmit." In other words, it covers future copyrights that did not exist when the order was signed. The same applies to the pirate services themselves. The injunction defines its target as the named IPTV operations "and any comparable system," whether "currently in existence or developed in the future," and it applies "regardless of the branding, domain name, or technical configuration used."
Read more of this story at Slashdot.
- FDA Approves First mRNA Flu Shot
The FDA has approved the first mRNA flu vaccine in the United States after a clinical trial found it was about 27% more effective than a standard flu shot. Manufactured by Moderna and marketed as mFlusiva, the vaccine is expected to be available this fall for adults ages 50 to 64 and those 65 and older, though approval for the older group is conditional on Moderna conducting an additional clinical trial, NBC News reports. From the report: Many scientists and public health experts have touted the idea of an mRNA-based flu vaccine, which uses the same messenger RNA platform as the Covid vaccines from Moderna and Pfizer. That's because mRNA vaccines can be manufactured much faster than traditional vaccines, allowing scientists to better match circulating influenza strains. Moderna said it takes two to three months from picking the strain to rolling out its flu shot, compared with about six months for traditional flu shots.
Read more of this story at Slashdot.
- BMW Blasts Its Cars' Internal Screens With Aggressive Ads
Longtime Slashdot readers schwit1 and fjo3 shared a report about BMW displaying a Spider-Man promotion on connected vehicle screens in more than 70 markets. According to reports, drivers had to play or dismiss the ad before they could use the infotainment system. Futurism reports: BMW, showing that it was about as in-touch as its drivers are familiar with turn signals, teased the promotion as a "special surprise." According to The Autopian's coverage and the heaps of complaints online, the ad appears on the center console screen when you start up the car. When the ad's done playing -- a cheap looking animation that doesn't come close to warranting all this hubbub -- it even has the gall to ask you to scan a QR code. While it does give you the option to play or skip the "festive animation," it's still an annoying extra step drivers have to take before pulling up the map they need or the music they want to listen to. It's also a breach of trust: drivers keep their cars connected so they receive critical software updates, not unexpectedly see ads when they're trying to hit the road. Few owners were pleased. Enthusiasts in the r/BMW subreddit had a veritable meltdown when someone posted footage of the ad playing on their infotainment system.
Read more of this story at Slashdot.
- New Images of the Sun Show Its Surface In the Finest Detail Yet
An anonymous reader quotes a report from the Associated Press: Scientists have captured images of the sun's surface in the finest detail yet, revealing a strange and dynamic facade. It's dangerous to look directly at the sun without proper eye protection. But researchers were able to peek at its scorching surface with the help of the National Science Foundation's Daniel K. Inouye Solar Telescope, located on the island of Maui in Hawaii. Scientists originally took the images for a different reason: to fine-tune and test the limits of the telescope. But when they looked at the results, they realized they'd photographed the sun's bright outer shell at higher resolution than ever before. What's more, they saw strange feathery patterns rippling across the surface. "That reminds me of famous paintings, like the swirling skies in Van Gogh's Starry Night," said solar physicist Ruizhu Chen with Stanford University, who was not involved with the new research. Researchers saw ripples of instability on the sun's surface caused by bits of magnetized plasma moving past each other at different speeds -- similar to waves that stir when a gust of wind blows over water. It's a well-known phenomenon that guides how fluids move. This has been glimpsed on Earth and other planets like Jupiter and Saturn, but "it has not been observed ever at that level on the solar surface," according to study co-author Friedrich Woger with the National Solar Observatory. The findings were published Wednesday in the journal Nature.
Read more of this story at Slashdot.
- Security: Why Linux Is Better Than Windows Or Mac OS
Linux is a free and open source operating system that was released in 1991 developed and released by Linus Torvalds. Since its release it has reached a user base that is greatly widespread worldwide. Linux users swear by the reliability and freedom that this operating system offers, especially when compared to its counterparts, windows and [0]
- Essential Software That Are Not Available On Linux OS
An operating system is essentially the most important component in a computer. It manages the different hardware and software components of a computer in the most effective way. There are different types of operating system and everything comes with their own set of programs and software. You cannot expect a Linux program to have all [0]
- Things You Never Knew About Your Operating System
The advent of computers has brought about a revolution in our daily life. From computers that were so huge to fit in a room, we have come a very long way to desktops and even palmtops. These machines have become our virtual lockers, and a life without these network machines have become unimaginable. Sending mails, [0]
- How To Fully Optimize Your Operating System
Computers and systems are tricky and complicated. If you lack a thorough knowledge or even basic knowledge of computers, you will often find yourself in a bind. You must understand that something as complicated as a computer requires constant care and constant cleaning up of junk files. Unless you put in the time to configure [0]
- The Top Problems With Major Operating Systems
There is no such system which does not give you any problems. Even if the system and the operating system of your system is easy to understand, there will be some times when certain problems will arise. Most of these problems are easy to handle and easy to get rid of. But you must be [0]
- 8 Benefits Of Linux OS
Linux is a small and a fast-growing operating system. However, we can’t term it as software yet. As discussed in the article about what can a Linux OS do Linux is a kernel. Now, kernels are used for software and programs. These kernels are used by the computer and can be used with various third-party software [0]
- Things Linux OS Can Do That Other OS Cant
What Is Linux OS? Linux, similar to U-bix is an operating system which can be used for various computers, hand held devices, embedded devices, etc. The reason why Linux operated system is preferred by many, is because it is easy to use and re-use. Linux based operating system is technically not an Operating System. Operating [0]
- Packagekit Interview
Packagekit aims to make the management of applications in the Linux and GNU systems. The main objective to remove the pains it takes to create a system. Along with this in an interview, Richard Hughes, the developer of Packagekit said that he aims to make the Linux systems just as powerful as the Windows or [0]
- What’s New in Ubuntu?
What Is Ubuntu? Ubuntu is open source software. It is useful for Linux based computers. The software is marketed by the Canonical Ltd., Ubuntu community. Ubuntu was first released in late October in 2004. The Ubuntu program uses Java, Python, C, C++ and C# programming languages. What Is New? The version 17.04 is now available here [0]
- Ext3 Reiserfs Xfs In Windows With Regards To Colinux
The problem with Windows is that there are various limitations to the computer and there is only so much you can do with it. You can access the Ext3 Reiserfs Xfs by using the coLinux tool. Download the tool from the official site or from the sourceforge site. Edit the connection to “TAP Win32 Adapter [0]
- Microsoft CVP explains why killing Windows legacy code takes so long
Theres been a small flurry of articles from a variety of sources, all talking about more or less the same thing: Microsoft is trying to explain why Windows 11 is as difficult to develop as it is, in turn justifying why its become such a mess over the years. Im picking this one from Windows Central, which is an interview with Microsofts CVP of Design and Research for Windows and Devices, Marcus Ash. Taking the long, still ongoing transition from the Control Panel to the Settings application as an example, Ash explains why this is such a long and difficult process. Unsurprisingly, Ash says that the reason this has taken so long is that Microsoft prides itself on compatibility with legacy tooling and workflows, so it cant just rush in and modernize everything without first ensuring the modern replacements maintain functionality with what came before. ↫ Zac Bowden at Windows Central This isnt really news to anyone. One of Windows prized strong points is its often excellent backwards compatibility. This doesnt just apply to individual applications, but also to things like software makers adding settings panels to Control Panel, or complex business applications expecting certain entry points into the Control Panel to exist and much, much more, all over the operating system. Im exaggerating, but you cant so much as move a single pixel in the taskbar without breaking some component of some obscure corporate middleware suite from 1999 that somehow still functions as the beating heart of like 187 Fortune 500 companies. Sometimes I wonder if Microsoft is going about this the wrong way entirely. Of course, I have no idea what Im talking about, but I feel like Microsoft has so man tools at its disposal to deal with this issue that its not really using to their fullest potential. Specifically, Windows itself has a number of incredibly capable tools in its toolbox to make sure any application ever written for Windows and even DOS, regardless of how many bits it requires, can run. Windows has advanced and highly capable tools for virtualisation and containerisation, and on top of that, Windows NT has a very capable personalities system that feels underutilised, too. Couldnt these tools be harnessed to effectively isolate the entire backwards compatibility problem from the actual Windows operating system people use, and turn them into optional components installed and activated when required by an older application? Isolating backwards compatibility this way would then leave the Windows team much less shackled and more free to improve Windows at every level without having to worry so much about maintaining backwards compatibility. If the components an older application needs are virtualised, containerised, or part of a Windows NT personality and thus frozen in time, the Windows team would be free to work on the current! version of said component without breaking the application in question. I feel like Microsoft has tried to use these technologies to address backwards compatibility in the past, but in true Microsoft fashion, it always seems to do so halfheartedly, without any real coherent vision behind it. Again, I wish to reiterate Im by no means qualified enough to make any definitive statements about this, but it sure does feel like Microsoft is underutilising a lot of the tools it already has at its disposal.
- Developing a windowed OS for a homebrew Am29000 computer
Once upon a time in the mysterious lands of Mexico, starting in Fall 1996 and through Spring 1997, I coded a windowed operating system in 32-bit machine code, fit it into a floppy, and jumped in excitement as it boot up. Of course, I knew it was a great thing because you couldnt boot Windows 3.1 or GEM from a floppy disk, but I was very far from knowing how so cool it was. Unfortunately, not a thing I could give away for everyone to see, as it was written for a homebrew computer based on the Am29000 processor. Let’s go back to my memories, some notes, and the ride of discovering again what I forgotten. ↫ Óscar Toledo Gutiérrez Trying to summarise this absolute gem of an article and all of the amazing effort and skill involved would be a huge disservice to Óscar Toledo Gutiérrez. I enjoyed this so much. Be sure to try out his custom emulator of a custom computer to run his custom operating system.
- How to make a Nintendo 64 game in 2026
Two years ago, I was Porting my JavaScript Game Engine to C for No Reason. I have since found a reason: making a new N64 game! The result is Xibalba 64 – a Wolfenstein 3D-like FPS. Modretro agreed to publish the game as a physical launch title for their M64 (a modern N64 clone), complete with cartridge, packaging and manual! ↫ Dominic Szablewski The article details the development process, from setting up the correct tooling to actually getting the game to play on a real Nintendo 64, and everything in between including optimising the game to get it to run at a steady 60fps. The biggest issue is that the Nintendo 64 is quite a complex and quirky console, and in order to develop for it, you needed access to Nintendos officially sanctioned platform library, libultra. These days, though, theres an open source alternative, libdragon, enabling homebrew development. Its awesome that, thanks to the hard work of volunteers, people can still develop top-notch games for something like the Nintendo 64. If we had left it up to Nintendo, wed be seeing nothing of the sort today.
- Tribblix Milestone 41 for x86 released
Tribblix, the Illumos distribution focused on giving you a classic UNIX-style experience, has been updated with the release of Milestone 41. According to the release notes, it contains the latest security fixes from Illumos, but beyond that its just a number of small point releases for certain components. Still, its a new release, and Tribblix rocks, so here we are.
- Corporate players in Amiga community sign various agreements to clear up some of the decades-old licensing and ownership mess
Few things in technology are more complex, convoluted, and riddled with literally decades of drama than the Amiga community. Luckily for all of us, a significant step forward has been made today: several of the key corporate players in the community have struck agreements to settle their legal disputes. CIC licenses software and documentation for Commodores 8-bit computers from Amiga. In return, Amiga is permitted to continue using the Commodore trademarks in a historical or descriptive context,! such as old documentation, copyright notices in existing software, or as symbols on a keyboard. The agreement with Hyperion does not change the status of AmigaOS 4` which was never a point of contention, according to Amiga` but it does specify exactly which code and trademarks the Belgian company is permitted to use . But Hyperions involvement in the 68k market will end on December 31, 2027: the licensee may continue to distribute versions of AmigaOS 3 until then, including the as-yet-unreleased AmigaOS 3.3. After that, Hyperion will deliver source code, revision history, and documentation for AmigaOS 3.1.4 and its updates, including all fixes and updates, but excluding AmigaOS 4 code backported into AmigaOS 3.2 or 3.3, to Amiga Corporation and release the developers involved in the project from all obligations to Hyperion. Amiga itself will then take over further development of AmigaOS`3 in the future. ↫ Post on amiga-news.de Hyperion is the company most known for developing AmigaOS 4, and with these agreements in place, they claim they can finally spend time focusing on getting AmigaOS 4.2 out the door. These agreements will also consolidate most of the AmigaOS 3.x code and IP under a single banner, which should make its status quite a bit clearer going forward. Whether or not any of this is actually good and beneficial to the Amiga platform as a whole and its individual branches 3.x and 4.x, in particular is anyones guess. I dont think theres anyone here on OSNews who wouldnt be interested in, say, an affordable and most importantly available AmigaOS 4 machine. While I have no clue if clearing up some of the licensing, IP, and ownership confusions will aid in getting new AmigaOS 4 hardware, it surely wont make it any harder.
- But can your calculator run Linux?
Dont have enough computing devices on your wish list yet? Do you have a need for a graphing calculator? No? What if it can run Linux and even Windows 10? I see Ive got your attention. The HP Prime is a graphing calculator on the market since 2013, with a hardware revision in 2018 (the G2 model). It has a touch screen and as far as I can find, most people are happy with it and find it a very capable and fast calculator. Here are some pictures of the opened up calculator and here is a website with some more downloads. Im not really interested in the calculator part. For most calculations I do for my day job, embedded programming, the HP-16C is a better fit. I was interested in this device because I found posts online suggesting it could run Linux and even a Windows 10 port. ↫ Remy van Elst I had no idea just how overpowered for a graphing calculator the G2 really is. Its basically an Android smartphone from a few years ago, and that means that yes, it can run Linux, including X, Doom, and tons of other applications. Its not the easiest of devices to get custom software onto, but also not particularly difficult you need to open it up and short two pads so if you have one, its definitely a fun project. Apparently, someone also ported EUFI for Windows 10 to this thing, so you can do silly stuff like run the Windows calculator on the G2 calculator. Wild. Now I kind of want one.
- Wireguard comes to 9front
Want to switch to 9front, especially with the new release having just been made available, but really need Wireguard? Fret not! Wireguard is now available on 9front, experimentally.
- IBM i (OS/400): the database operating system
Today, I wanted to show you one of the most fascinating and surprising operating systems ever created. It’s not another Unix, Linux, or Windows. It is an architecture that went its own way and proved that systems engineering design can look completely different. I’m talking about IBM’s child, which for many might be synonymous with “boring banking systems,” but in reality, is one of the most uncompromising projects in IT history. While we get excited about abstraction and virtualization today, thinking we are discovering new lands, this system was doing it decades ago. Imagine a system that doesn’t know the concept of a “file” in the way we understand it. A system where everything is an object, and all disk and operational memory form one vast, flat space. If you are looking for proof that true engineering doesn’t need buzzwords to blow you away, I invite you to read on. ↫ Kamil Pytliński Ever since watching Clabretros detailed video about getting IBM i to work on his own IBM POWER hardware and then remoting into them, Ive been obsessed with running IBM i at home. It feels like the final boss of operating systems to dive into and explore, hidden in the deepest, darkest trenches of the ocean of technology. Everything about IBM i feels alien, complex, convoluted, opaque, and overwhelming, and you can probably dedicate your entire career to working with this platform and somehow still learn new things about it every day. Theres something brutalist about IBM i, and I so desperately want to bang my head on its concrete walls.
- 9front THIS WAS SUPPOSED TO BE FUN! released
The best operating system in the world, 9front, released its latest version, THIS WAS SUPPOSED TO BE FUN!. As Im sure you know, 9front is a fork of plan9, and one thats actually consistently maintained and developed. It brings an improved affinewarp API for scaling and zooming, a new Synaptics driver, and a new driver for UPSs. Theres also a new tool called gdbfs, which allows you to mount a remote gdb at /proc. Of course, theres much more than this, including the usual list of bugfixes and small changes. Few of us are worthy of using 9front, but if you are, you already know where to get it and how to update.
- MkLinux and the pimped-out Apple Workgroup Server 9150
Cameron Kaisers articles are always a right treat, and this ones no different. Its about running MkLinux on the Apple Workgroup Server, the regular Mac rebadged into a server product and predecessor to Apples first real server product, the Apple Network Server running AIX. The Workgroup Servers were originally marketed with Apples UNIX variant, A/UX, but with this operating system not surviving the transition to PowerPC processors, Apple started offering other options. A/UX ultimately didnt survive the 1994 68K transition to PowerPC, but in 1996 Apple publicly offered another option: run Linux, using the Mach microkernel. Although MkLinux emerged after the 9150s discontinuation, its still just an overgrown NuBus Power Mac, so between more RAM, a beefier CPU upgrade and various video cards, by the end of this article we ought to have a configuration that gives us the best of two worlds — classic MacOS and MkLinux — in one server. ↫ Cameron Kaiser I never really stopped to think that MkLinux really was, but its a lot more interesting than just an early Linux port to PowerPC Macs. In fact, it ran the monolithic Linux kernel as a userspace process on top of the Mach microkernel, which made it a valuable testing ground for Apples later XNU efforts. Its wild that Apple had an official, blessed Linux operating system as early as the mid 90s, even if its performance was apparently not particularly great due to the overhead of running it atop Mach and Jobs canned it as soon as he came back to the company.
- A big win for Android interoperability!
Whenever the EU steps in to regulate the big technology companies, the response from news outlets and bloggers (often funded or outright owned by right-wing extremists) is to claim its just a bunch of dumb , tech-illiterate bureaucrats telling the vastly more intelligent and superior technology companies what to do. Of course, this is just propaganda. Case in point: Something big just happened. As the Open Home Foundation’s Android developer for Home Assistant, I was invited by the European Commission (EC) to consult on Android interoperability. The call for feedback was part of the Commission’s work under the Digital Markets Act (DMA). For anyone unfamiliar, the DMA is an EU law that defines and regulates “gatekeeper platforms” – those that offer “core” services like search engines, app stores, and messaging platforms – to make digital markets fairer and more open to competition. As you might imagine, I had plenty to say about Google’s restrictions on Android, especially the tech giant limiting wake word detection to its own Gemini assistant, a concern I surfaced in our Home Assistant 2026.3 Release Party. To put it plainly, Google had no grounds for limiting Android interoperability in the first place, other than to give itself the upper hand. We knew our community deserved better, and that’s what we told the Commission. The result? The EC listened to us and all the other organizations that contributed. On July 16, 2026, the European Commission adopted a decision under the DMA that requires Alphabet (Google’s parent company) to open up eleven Android features, including always-on wake word detection, ambient sensor access, and screen automation – to all assistants, on equal terms. ↫ Timothy Nibeaudeau Whats really interesting is just how deeply technical and detailed this new EU decision really is. Timothy Nibeaudeau laid out the technical details of how wake word detection on Android works for the European Commission in short, a DSP runs a really tiny model in a process isolated from the network to detect just a specific wakeword, and only once that wakeword is detected does it hand things off to a larger model running on the actual main SoC and the ECs new decision accurately and precisely describes this method and wrote their decision to take every detail into account. When I was invited to share these limitations (and others) with the Commission, I didn’t hold back. Which is why we were thrilled to discover an impressively precise and technically accurate decision from the EU: it correctly describes the two-stage wake word architecture, the DSP, the isolated process, and the role coupling. The report went down to details we only figured out by reading Androids source code ourselves. ↫ Timothy Nibeaudeau The idea that the European Union and Commission are a bunch of dumb, illiterate bureaucrats imposing impossible, unworkable, unrealistic demands on poor, hardworking, honest technology companies is a bunch of propaganda paid for by these very same companies, and every decision and ruling by the EU around the Digital Markets Act further confirms this by having strong technological underpinnings and being based on the actual workings of the technologies they cover. The EU does a lot of dumb things as any government body does but you dont get to enjoy a nearly two-thirds approval rating for nothing, especially not in the face of the state of the world today. The Digital Markets Act has already proven to be incredibly effective, and this is exactly why the right-wing propaganda against it is reaching an ever crazier fever pitch. When basic consumer protection legislation makes the most powerful companies, right-wing media empires, and even the most powerful country in the world throw tamper tantrums like toddlers, you know youre doing something right.
- NetBSD 11.0 released
NetBSD, the operating system specifically designed to run on anything from a supercomputer to a toothpick, just released version 11.0. Theres a ton of changes and improvements here, such as a brand new port to RISC-V, which supports a number of the more popular RISC-V SoCs (sadly, not the one I have just yet). NetBSD 11.0 also adds initial support for the Qualcomm Snapdragon X Elite platform, as well as a port to the virt68k platform, which means the Motorola 68000 port in QEMU using paravirtualized devices. Speaking of virtualisation, theyre also introducing a new MICROVM kernel for x86: New MICROVM kernel for x86, supporting both i386 and amd64, NetBSD 11.0 introduces a dedicated MICROVM kernel designed for extremely fast virtual machine boot, leveraging PVH boot, VirtIO MMIO, and multiple kernel optimizations, it can boot in about 10 ms on 2020-era x86 CPUs. ↫ NetBSD 11.0 release notes Theres also improved support for Linux system calls in compat_linux, the npf firewall, and much more. Of course, the list of other improvements, buigfixes, and smaller changes is long, including many changes for old, outdated, or otherwise odd architectures and platforms, as is the NetBSD way. Which other operating system proudly lists substantial improvements to their PA-RISC, Motorola 68000, and Alpha ports, among others?
- CallMeMaybe: runtime reflection library built on C++26 static reflection
I have a policy to effectively never link to YouTube videos. Ill gladly make an exception for this one. Reflection is one of the most powerful concepts in Computer Science. Unfortunately, not every programming language is blessed enough to have it. In the 1980s, one company, Symbolics took the concept to the logical extreme. By representing EVERYTHING as objects; they created the most powerful (and inadvertently) least private operating system ever created! The company collapsed, but the ideas live on. Some modern languages got a full dose of reflection. Some…weren’t so lucky. I ranked them all, and in the end I’ll show you how I dragged C++ up a tier with my brand new runtime reflection library, CallMeMaybe! ↫ Laurie Wired The GitHub description of CallMeMaybe: CallMeMaybe (CMM) is a C++ runtime reflection library built on top of P2996 static reflection introduced in C++26. CMM purposefully mirrors many of the std::meta functions to provide a uniform interface, but allows runtime introspection, dynamic invocation, and instantiation by building a runtime reflection registry. Class members can be automatically traversed and reflected by simply adding ] as an annotation. CMM implements a custom type system to completely avoid RTTI requirements. ↫ CallMeMaybe GitHub page My YouTube linking policy will remain in place.
- Develop cross-platform CLI and GUI tools with Tcl/Tk
Tcl, or the Tool Command Language , created and released by John Ousterhout in 1990, deserves a place among the greatest products of the human mind. Especially when combined with its better known graphical user interface Toolkit — Tk. In 1997 Ousterhout was awarded the ACM Software System Award for Tcl/Tk, an award given to institutions or individuals recognized for developing software systems with a lasting influence, reflected in contributions to concepts, in commercial acceptance, or both. ↫ Armen Barsegyan Everything you could ever possibly want to know about Tcl/Tk. Theres nothing to add here; if this is up your alley and you know if it is just go ahead and read it, and stop wasting time here.
- LLVM toolchain coming to OpenBSD/sparc64 and SPARC Solaris (snv_151a)
Speaking of OpenBSD: Yes, you read that right. Modern development tools in the form of the LLVM compiler infrastructure is well on its way to supporting OpenBSD/sparc64 along with other more conventional architectures. The support is now ready for testing, via a patch set presented by Kirill A. Korinsky in a message to the tech@ mailing list, with the subject LLVM toolchain for sparc64. ↫ Peter N. M. Hansteen On a related note, the the entire LLVM stack (version 19.1.7, including llvms binutils, clang, ldd) has also been ported to the SPARC version of Solaris 11 Express (snv_151a). This should make it possible to also port things like Rust and Zig to this same version of Solaris on SPARC, which is good news, because this release supports SPARC hardware long dropped by the current Solaris builds from Oracle.
- Dead software walking: the ongoing evolution of relayd(8) and httpd(8)
As I mentioned in my OpenBSD 7.8 highlights post, development of relayd(8) and httpd(8) had stalled. Many diffs appeared on the tech@ mailing list from different contributors, but few were committed into the repository. The main reason was simple: Established OpenBSD developers weren’t interested in these daemons anymore. Call it momentum, or timing. Around the same time, kirill@ and I started working on these daemons more actively. We both use them regularly and have real-world use cases. I support customers with OpenBSD setups that often involve complex httpd(8) and relayd(8) configurations. This practical need motivated me on many levels. ↫ Rafael Sadowski Theyve managed to do a ton of work on these two daemons, fixing many long-standing issues and reviewing tons of stalled patch submissions, while also modernising the code and adding new features. Its great to see people contribute significant time and energy to fixing up the tools they use for everyone elses benefit.
- New AMD P-State Patch Delivers Major Linux Gaming Performance Boost
by George Whittaker
A newly proposed patch for the Linux kernel's AMD P-State CPU frequency scaling driver is showing impressive gaming performance improvements, potentially delivering a noticeable boost for Ryzen users without requiring new hardware. Early benchmarks indicate that the optimization can significantly improve frame rates in CPU-bound games by allowing processors to respond more quickly to changing workloads. (phoronix.com)
Although the patch has not yet been merged into the mainline Linux kernel, the initial results have generated considerable excitement among Linux gamers and kernel developers alike.
What Is AMD P-State?
AMD P-State is the modern CPU frequency scaling driver for AMD Ryzen processors on Linux. Rather than relying on the older ACPI CPUFreq driver, AMD P-State communicates directly with the processor to adjust clock speeds based on workload demands.
Its goals include:
Faster frequency scaling Improved power efficiency Better responsiveness Higher performance during demanding workloads Lower power consumption when the system is idle
Most modern Linux distributions already support AMD P-State on compatible Ryzen processors. (kernel.org)
A Focus on Gaming Performance
The new patch specifically targets how quickly AMD P-State responds when a game suddenly demands additional CPU performance.
Many games rapidly alternate between light and heavy CPU workloads. If the processor takes too long to increase its clock speed, short performance dips can occur.
The proposed optimization reduces that delay, allowing the CPU to boost more aggressively when needed and helping maintain smoother gameplay. (phoronix.com)
Promising Benchmark Results
According to early testing, the patch delivers meaningful improvements across several Linux gaming workloads.
Reported benefits include:
Higher average frame rates Better 1% low FPS performance Faster CPU frequency response Improved responsiveness during gameplay More consistent frame delivery
The biggest gains appear in CPU-limited games where processor performance has a greater impact than GPU performance. Systems that are already GPU-bound may see smaller improvements. (phoronix.com)
Designed for Modern Ryzen CPUs
The patch targets systems using the AMD P-State driver, which supports many recent Ryzen processors.
Compatible platforms generally include:
Go to Full Article
- Linux Kernel Begins Phasing Out the crypto_rng Layer to Simplify Random Number Generation
by George Whittaker
Linux kernel developers are moving forward with plans to remove the crypto_rng API layer, a long-standing component of the kernel's cryptographic subsystem. The proposed change is part of a broader effort to simplify the kernel's internal architecture by eliminating redundant code paths and encouraging developers to rely on the kernel's modern random number generation interfaces instead. (phoronix.com)
Although the change happens entirely behind the scenes, it reflects the Linux kernel community's ongoing commitment to reducing technical debt, improving maintainability, and modernizing core infrastructure.
What Is the crypto_rng Layer?
The crypto_rng framework is an API within the Linux kernel's Crypto API that provides random number generation services for kernel components.
Historically, it allowed different kernel subsystems and drivers to request random data through a generic cryptographic interface. Over time, however, the kernel's dedicated random number generator has matured considerably, making much of the crypto_rng abstraction unnecessary. (kernel.org)
Today, developers generally recommend using the kernel's built-in random number generation functions directly instead of routing requests through the older crypto layer.
Why Developers Want to Remove It
According to discussions on the Linux kernel mailing list, the crypto_rng layer has become largely redundant.
Modern kernel code already relies on well-established interfaces such as:
get_random_bytes() get_random_u32() get_random_u64()
These functions are maintained as part of the kernel's primary random number generation subsystem and are widely used throughout Linux. Maintaining an additional abstraction layer increases code complexity without providing significant practical benefits. (phoronix.com)
Removing unnecessary infrastructure also makes the kernel easier to maintain and audit over the long term.
Simplifying the Crypto API
The Linux Crypto API has evolved significantly over the years as new algorithms, hardware accelerators, and security features have been introduced.
Kernel maintainers have increasingly focused on:
Go to Full Article
- GNU Binutils 2.47 Released with New RISC-V Features, Linker Improvements, and Reproducible Builds
by George Whittaker
The GNU Project has officially released GNU Binutils 2.47, the latest version of its essential collection of binary development tools for Linux and other Unix-like systems. The release delivers numerous bug fixes alongside new assembler, linker, and disassembler capabilities, expanded RISC-V support, reproducible source archives, and continued modernization of the GNU toolchain.
Used by developers worldwide, GNU Binutils forms a core part of the software development ecosystem, providing the low-level tools needed to assemble, link, inspect, and manipulate executable programs and object files.
What Is GNU Binutils?
GNU Binutils is a collection of command-line utilities that work closely with compilers such as GCC and Clang. While a compiler translates source code into object files, Binutils provides the tools needed to transform those object files into executable programs and libraries.
The package includes well-known utilities such as:
ld (GNU Linker) as (GNU Assembler) objdump objcopy readelf nm strip ar strings
Together, these tools are used daily by Linux distributions, embedded developers, operating system projects, and software engineers building applications in C, C++, Rust, Go, and many other languages.
Expanded Support for RISC-V
One of the biggest improvements in Binutils 2.47 is expanded support for the rapidly growing RISC-V architecture.
The release adds support for several additional standard RISC-V extensions, allowing developers targeting modern RISC-V processors to work with newer instruction sets and hardware capabilities. These additions continue the GNU toolchain's strong commitment to one of the fastest-growing open processor architectures.
As more Linux distributions, development boards, and enterprise hardware adopt RISC-V, keeping development tools current is becoming increasingly important.
New Assembler Options
GNU Assembler (gas) gains several useful enhancements in version 2.47.
Among the most notable is a new command-line option:
--reloc-section-sym=[all|internal|none]
This option gives developers finer control over how relocations referencing locally bound symbols are converted to section symbols, improving flexibility for certain assembly and linking workflows.
The release also introduces numerous assembler improvements across multiple CPU architectures.
Better Disassembly for AArch64
Developers working with Arm-based systems also benefit from new functionality.
Go to Full Article
- GOG Officially Expands Linux Support with Native Galaxy Client in Development
by George Whittaker
After years of requests from the Linux gaming community, GOG has officially confirmed that it is developing native Linux support for the GOG Galaxy launcher. The announcement marks one of the biggest shifts in the company's history and signals a stronger commitment to Linux as a first-class gaming platform. While GOG has offered DRM-free Linux game downloads since 2014, its Galaxy launcher has remained exclusive to Windows and macOS—until now.
Although the company has not announced a release date, GOG says Linux has become a major area of investment, with development already underway.
A Long-Requested Feature Finally Becomes Reality
Native GOG Galaxy support has consistently ranked among the most requested features from Linux users. Until now, players who wanted to use Galaxy's library management, cloud saves, achievements, and automatic updates had to rely on compatibility layers or community-developed launchers.
In a statement to GamingOnLinux, GOG joint CEO Krzysztof Papliński said the company has hired a dedicated specialist and is actively exploring the best approach for bringing Galaxy to Linux. He described Linux as "one of the topics we hear the most about from our community," emphasizing that the project is now an active development priority.
Why GOG Galaxy Matters
Unlike the web-based game downloads that Linux users already have access to, GOG Galaxy serves as a full-featured game management application.
The launcher currently offers features including:
Automatic game installation and updates Cloud save synchronization Achievement tracking Playtime statistics Game library organization Integrated storefront browsing Friends lists and social features Cross-platform launcher integration
Today, Linux users typically access these capabilities through community projects such as Heroic Games Launcher, Lutris, or Bottles. A native Galaxy client would provide an officially supported alternative with direct integration into GOG's ecosystem.
Linux Is No Longer an Afterthought
GOG's announcement reflects the growing importance of Linux gaming over the past several years.
The rapid adoption of Valve's Steam Deck, continuous improvements to Proton, and increasing hardware compatibility have significantly expanded Linux's role in PC gaming. As Linux's share of Steam users has grown, more developers and publishers have begun treating the platform as a viable target rather than a niche operating system.
For GOG, supporting Linux more fully aligns with its philosophy of giving users greater control over their purchased games.
Go to Full Article
- Linux Kernel 7.1.4 Released with Bug Fixes, Security Updates, and Hardware Improvements
by George Whittaker
Greg Kroah-Hartman has announced the release of Linux Kernel 7.1.4, the latest stable maintenance update for the Linux 7.1 series. As with other stable kernel releases, version 7.1.4 focuses on fixing bugs, improving hardware compatibility, and addressing security and reliability issues without introducing new features. The update became available on July 18, 2026, and users of the Linux 7.1 branch are encouraged to upgrade as soon as possible.
Rather than changing the kernel's feature set, Linux 7.1.4 delivers dozens of targeted fixes collected from developers across multiple kernel subsystems, helping ensure a more stable experience for desktops, servers, embedded devices, and cloud deployments.
Another Important Stable Maintenance Release
The Linux stable branch exists to provide safe updates between major kernel versions. Every stable release undergoes review before being published and contains fixes that have already been tested in the mainline kernel.
Linux 7.1.4 continues this process by incorporating patches that resolve regressions, improve system stability, and fix issues reported by users since the release of Linux 7.1.3.
For most users, these maintenance updates are recommended because they improve reliability without altering existing functionality.
Bug Fixes Across Multiple Kernel Subsystems
Like previous stable releases, Linux 7.1.4 includes fixes spanning many areas of the kernel.
The update addresses issues affecting:
Memory management File systems Networking Device drivers Architecture-specific code Core kernel infrastructure USB and storage subsystems
These targeted patches help eliminate crashes, improve compatibility with newer hardware, and resolve edge cases that may only appear under specific workloads.
Improved Hardware Compatibility
One of the ongoing goals of Linux stable releases is expanding support for existing and newly released hardware.
Linux 7.1.4 includes updated drivers and compatibility fixes for various devices, helping improve support for:
Graphics hardware Storage controllers Networking devices USB peripherals Laptop components ARM development boards
Although no major driver additions are expected in a maintenance release, incremental improvements like these often resolve hardware-specific bugs reported by users after earlier releases.
Security and Reliability Updates
Stable kernel releases also include security-related fixes that have been accepted into the maintenance branch.
Go to Full Article
- Firefox 153 Released with HDR Video, Smarter PDF Tools, Better Privacy, and New Linux Improvements
by George Whittaker
Mozilla has officially released Firefox 153, bringing another round of improvements to its open-source web browser. The latest version introduces new multimedia capabilities, enhanced PDF editing tools, stronger privacy protections, better support for modern web technologies, and several features aimed at improving the browsing experience across Linux, Windows, and macOS. Firefox 153 became available on the stable release channel on July 21, 2026.
While this isn't a major redesign, Firefox 153 delivers a collection of practical updates that benefit both everyday users and web developers.
HDR Video Playback Comes to Windows
One of the headline features in Firefox 153 is support for High Dynamic Range (HDR) video playback on compatible Windows systems.
Users with HDR-capable displays and Windows HDR enabled can now enjoy richer colors, improved contrast, and brighter highlights when watching supported online video content. Mozilla notes that certain laptop displays offering only "HDR video streaming" are not currently supported, and some HDR videos recorded on mobile phones may still have limitations.
Although this feature is Windows-specific, it represents another step toward bringing Firefox in line with modern multimedia standards.
PDF Editing Becomes Even More Powerful
Mozilla continues expanding Firefox's built-in PDF editor, eliminating the need for third-party applications in many situations.
Firefox 153 introduces the ability to:
Merge multiple PDF documents Insert images as new PDF pages Continue using existing editing tools such as annotations, page organization, and text editing
These additions make Firefox an even more capable document viewer and editor, especially for users who frequently work with PDF files.
Stronger Privacy and Permission Controls
Privacy remains one of Firefox's biggest selling points, and version 153 introduces several enhancements designed to give users more visibility and control over website permissions.
New improvements include:
A visual indicator when a website is actively accessing your location More restrictive default permissions for browser extensions accessing local files Local Area Network (LAN) restrictions enabled by default for all users
These changes reduce unnecessary exposure of local resources while making it easier to understand what websites and extensions can access.
Experimental JPEG XL Support
Firefox 153 also adds experimental support for the JPEG XL image format, which many developers consider a promising successor to older image standards.
JPEG XL offers several advantages, including:
Go to Full Article
- NanoKVM-Go Brings AI-Powered Hardware Control to Linux with a Compact USB-C KVM
by George Whittaker
Sipeed has introduced NanoKVM-Go, a compact USB-C KVM-over-IP device that combines remote hardware management with AI integration. Designed for Linux, Windows, macOS, and other USB-C devices, NanoKVM-Go allows users to remotely view and control a system through a web browser while exposing its keyboard, mouse, and display functions to AI agents via the Model Context Protocol (MCP).
Unlike traditional KVM-over-IP solutions that require multiple cables and dedicated networking hardware, NanoKVM-Go simplifies the setup into a single USB-C connection, making remote administration and AI-assisted automation more accessible for developers, system administrators, and homelab enthusiasts.
A Portable USB-C KVM
NanoKVM-Go is roughly the size of a smartwatch, measuring about 45 × 40 × 15 mm, yet it combines several functions into a single device.
Key hardware features include:
USB-C connection for video, audio, keyboard, mouse, and power Wi-Fi 6 connectivity Browser-based remote management Support for virtual USB storage Built-in Tailscale integration for secure remote access Fanless aluminum enclosure with low power consumption
Because it connects over USB-C using DisplayPort Alt Mode, the device can manage a wide variety of hardware without requiring software installation on the target system.
Designed for Linux and Beyond
NanoKVM-Go supports numerous USB-C devices, including:
Linux desktops and laptops Windows PCs macOS systems Mini PCs Steam Deck Android devices with DisplayPort Alt Mode iPhone 15 and newer models Tablets supporting USB-C video output
For Linux users, this provides an easy way to perform BIOS configuration, operating system installation, kernel debugging, or remote troubleshooting—even when the operating system is unavailable.
AI Integration Through MCP
One of NanoKVM-Go's defining features is its AI-native design.
Rather than simply streaming a desktop remotely, the device exposes its KVM functions as an MCP (Model Context Protocol) server, allowing compatible AI agents to interact with the connected computer using hardware-level keyboard and mouse input.
This enables AI systems to:
View the screen Move the mouse Type on the keyboard Launch applications Navigate user interfaces Complete repetitive desktop workflows
Because control happens at the hardware level, AI agents can interact with systems regardless of the operating system installed.
Go to Full Article
- AI Uncovers a 15-Year-Old Linux Kernel Root Vulnerability Hidden Since 2011
by George Whittaker
Artificial intelligence has helped uncover one of the most significant Linux kernel security flaws in recent years. Security researchers at Nebula Security announced the discovery of GhostLock (CVE-2026-43499), a critical local privilege escalation vulnerability that remained hidden in the Linux kernel for approximately 15 years before being identified by the company's AI-powered vulnerability research platform, VEGA.
The vulnerability affects Linux kernels dating back to version 2.6.39 (2011) and allows an unprivileged local user to obtain full root privileges on vulnerable systems. Its discovery not only highlights the importance of timely kernel updates but also demonstrates how AI is beginning to transform vulnerability research.
What Is GhostLock?
GhostLock is a use-after-free (UAF) vulnerability located in the Linux kernel's futex (fast userspace mutex) implementation.
Futexes are synchronization primitives that allow user-space applications to efficiently coordinate access to shared resources while minimizing expensive kernel interactions. Because they are widely used throughout Linux, any flaw within this subsystem can have broad security implications.
According to Nebula Security, incorrect handling of the remove_waiter() function can leave behind a dangling kernel pointer that an attacker can manipulate to execute arbitrary code with kernel privileges.
A Reliable Path to Root Access
One of the reasons GhostLock has attracted so much attention is the reported reliability of the exploit.
Researchers demonstrated that an attacker with nothing more than a standard local user account can escalate privileges to root in roughly five seconds, with a reported success rate of 97% on vulnerable systems.
Unlike many kernel exploits that are unstable or require highly specific system configurations, GhostLock appears to be both practical and repeatable, making it particularly concerning for administrators.
Container Escapes Are Also Possible
The implications extend beyond traditional Linux desktops and servers.
Researchers report that GhostLock can also be used to escape containers and compromise the underlying host operating system. Because containers share the host kernel, a successful privilege escalation inside a container can potentially grant root access to the host itself.
This makes the vulnerability especially important for environments running:
Go to Full Article
- Azure Linux 4.0 Released: Microsoft Expands Its Enterprise Linux Platform Beyond the Cloud
by George Whittaker
Microsoft has officially unveiled Azure Linux 4.0, the latest version of its open-source Linux distribution designed for cloud infrastructure, enterprise workloads, and modern data centers. Formerly known as CBL-Mariner, Azure Linux has powered Microsoft's internal cloud services for years, but version 4.0 marks its biggest evolution yet by becoming a general-purpose server operating system that organizations can deploy both inside and outside Azure.
The release introduces updated core components, expanded hardware support, a predictable long-term lifecycle, and improved compatibility for enterprise environments, reinforcing Microsoft's growing investment in the Linux ecosystem.
A New Chapter for Azure Linux
Azure Linux began as Microsoft's internal operating system for Azure services, containers, and cloud infrastructure. Over time, it evolved into the foundation for many Azure-hosted workloads.
With Azure Linux 4.0, Microsoft is positioning the distribution as a broader enterprise Linux platform rather than one limited to Azure infrastructure. The operating system is now available through Azure virtual machine images, container images, and downloadable ISO files for testing and deployment in a wider range of environments.
Built for Enterprise and Cloud Workloads
Unlike desktop-focused Linux distributions, Azure Linux is optimized for infrastructure, virtualization, containers, and cloud-native applications.
Typical deployment scenarios include:
Cloud virtual machines Kubernetes clusters Container hosts AI infrastructure Edge computing Enterprise servers
Microsoft has designed the distribution to provide a consistent operating system foundation across Azure services while remaining suitable for on-premises deployments.
Updated Core Components
Azure Linux 4.0 modernizes much of the operating system's software stack.
Highlights include:
Linux Kernel 7.0 glibc 2.42 OpenSSL 3.5 Python 3.13 OpenSSH 10 dnf5 as the default package manager
These updates improve hardware compatibility, application support, security, and overall system performance while providing developers with a more current software platform.
Security Remains a Primary Focus
Security continues to be one of Azure Linux's defining characteristics.
Version 4.0 includes:
Go to Full Article
- KDE Plasma 6.7.1 Released with Stability Fixes, UI Improvements, and Better Wayland Reliability
by George Whittaker
The KDE Project has officially released KDE Plasma 6.7.1, the first maintenance update for the Plasma 6.7 desktop environment. Rather than introducing major new features, this point release focuses on polishing the desktop with a broad collection of bug fixes, translation updates, and performance improvements aimed at making Plasma 6.7 more reliable for everyday use.
As with previous Plasma maintenance releases, KDE developers have concentrated on resolving issues reported by the community soon after the launch of Plasma 6.7, ensuring users receive a smoother and more stable desktop experience.
A Maintenance Release Focused on Stability
KDE Plasma 6.7 introduced numerous new capabilities, including per-display virtual desktops, Wayland session restore, improvements to Plasma Bigscreen, and a refreshed theming system. Plasma 6.7.1 builds on that foundation by addressing early regressions and fine-tuning the overall desktop experience.
The update primarily delivers:
Bug fixes across core Plasma components Updated translations Performance refinements Improved desktop reliability Better overall user experienceImprovements Across the Desktop
Several of Plasma's core applications and components receive fixes in this release.
Notable improvements include:
Better reliability in the Kickoff Application Launcher Fixes for Discover, KDE's software manager Improvements to the KWin window manager Various panel and desktop behavior corrections Better handling of notifications and user interface elements
While most of these changes are relatively small on their own, together they help eliminate many of the rough edges users may have encountered after upgrading to Plasma 6.7.
Wayland Continues to Mature
Wayland remains the primary development focus for KDE Plasma, and version 6.7.1 continues refining the experience.
The update includes fixes affecting:
Window management Session stability Input handling Display behavior General compositor reliability
Over the past several Plasma releases, KDE developers have steadily shifted their attention toward making Wayland the best possible experience while continuing limited maintenance for X11.
Translation Updates for Global Users
Like most KDE maintenance releases, Plasma 6.7.1 incorporates a fresh batch of translation updates contributed by volunteers from around the world.
These updates improve:
Go to Full Article
|
