Terminal

US Government Warns That Russia State Hackers Are Coming After Your Router

CISA and allied governments are warning users to secure their routers as Russian state-backed hackers continue compromising the devices and turning them into proxy nodes to disguise attacks against critical infrastructure. The advisory urges users to disable outdated SNMP versions, use strong passwords, update firmware, and turn off unnecessary router services to reduce the risk of being swept int…

German Firm Files For Insolvency After Cybercriminals Shut Down Production For 6 Weeks

German textile firm ZEGO has filed for insolvency and is blaming a March cyberattack that shut down production for nearly six weeks. "ZEGO's filing adds another name to the short but growing list of companies that say a digital break-in was commercially fatal to their business," reports The Register. From the report: In a notice to customers and suppliers, the organization said it had exhausted ev…

SalesPatriot (YC W25) Is Hiring Full Stack Engineers (SF)

Ukrainian drone strikes forced Russia to stop shipping in vital sea corridor

Ukrainian drone strikes have forced Russia to completely halt shipping in the Sea of Azov in less than a week—showing once again how a country without traditional naval power can still effectively blockade maritime corridors. Ukraine’s Unmanned Systems Forces have flown one-way attack drones to target and strike more than 100 Russian tankers and other ships every night between July 6 and July 13,…

Excel competition goes extreme, makes spreadsheet geeks compete from the street

The Excel games have gone extreme, tossing four top competitors into urban wilds around the world in a one-off battle, which reigning champion Diarmuid Early won at the last minute. Irish phenom Early captured the win in the Microsoft Excel World Championship’s (MEWC) inaugural Landmark Battle over the weekend after a last-minute comeback that saw him take down Andrew Ngai by a mere 40 points (10…

Show HN: YouTube Guitar Tab Parser

Linux 0.11 rewritten in idiomatic Rust, boots in QEMU

Show HN: Sigwire – a live TUI switchboard for every signal on your Linux box

Samsung Health app threatens data deletion if users opt out AI training

Show HN: I implemented a neural network in SQL

States Sue to Block Paramount-Warner Bros Merger, Defying DOJ

A coalition of 12 states led by California is suing to block the $111 billion Paramount Skydance-Warner Bros. merger, arguing it would reduce competition in theatrical distribution, blockbuster films, and basic cable licensing. The challenge (PDF) defies the DOJ's approval of the deal. Variety reports: The coalition, led by California Attorney General Rob Bonta, alleges that the $111 billion trans…

Climate.gov was destroyed. Open data saved it

California creates $3,500 rebate for new electric vehicle buyers

At the end of last September, electric vehicle adoption in the US began to crater. That followed the abolition of the IRS clean vehicle tax credit as part of a series of moves by President Trump and congressional Republicans to undermine energy efficiency and pollution control measures. Until then, buyers of some EVs could claim up to $7,500 from the purchase as part of the IRS Section 30D credit…

Telegram's t.me domain has been suspended

The price is wrong: AI cost calculation has to consider task completion rates, not just token costs

When it comes to AI services, you don't necessarily get what you pay for. It turns out that AI models with expensive tokens may cost less than models with cheap tokens for particular tasks. And the tooling attached to those models can have a significant effect on cost and output quality. Databricks, which sells data analytics software and services, recently devised an internal coding benchmark to…

Apple sues OpenAI after ex-engineer allegedly used bug to steal trade secrets

Apple is gunning for OpenAI, demanding steep penalties after stumbling on a “rare” bug that temporarily allowed a poached employee that joined OpenAI to maintain access to confidential information on Apple servers for weeks after his termination. In a lawsuit filed Friday, Apple sought several injunctions blocking OpenAI from using confidential information allegedly stolen by former employees. Ac…

TFTP Honey Pot Results

Solution to Feynman's reverse sprinkler puzzle also applies to "silly sprinklers"

Watering your lawn in the summer can be both pragmatic and fun with so-called "silly sprinklers," designed to create amusing loops and spirals of water jets. And there's some fascinating physics at work to boot. Researchers at New York University's Courant Institute conducted a series of experiments with different silly sprinkler designs to find the answer to a longstanding problem in fluid dynam…

Apple Reportedly Agreed to Intel Chips To Avoid White House Tariffs

According to the Wall Street Journal (paywalled), Apple agreed to use Intel's U.S. chipmaking plants after White House officials pressured Tim Cook during tariff-relief talks last summer. MacRumors reports: In August 2025, Apple CEO Tim Cook was in Washington to lobby the Trump administration to drop its proposed 100 percent tariff on semiconductor imports -- a levy that would have raised costs ac…

The infinite scroll may become endangered if controversial Calif. law passes

States sue to block Paramount/WBD merger that was approved by Trump admin

A group of 12 states led by California sued Paramount Skydance and Warner Bros. Discovery today in an attempt to block a $111 billion merger that was greenlit by the Trump administration last month. "The unlawful merger of these two entertainment behemoths would lead to higher prices, lower quality, and less content for film and television, harming movie theaters, basic cable distributors, and ul…

The real prices of frontier models. Tokens * Price, right?

Show HN: Nobie – an Excel-compatible runtime for agents and humans

Building and Shipping Mac and iOS Apps Without Ever Opening Xcode

Linux on the Sega 32X. Who needs hardware synchronization primitives anyway?

Show HN: BillAI Bass, an AI-Powered Big Mouth Billy Bass Using Strands Agents

Cloudflare Precursor Watches Your Mouse and Keyboard To Decide If You Are Human

BrianFagioli writes: Cloudflare has launched Precursor, a new behavioral bot detection system that monitors mouse movement, typing cadence, scrolling, clipboard activity, page visibility, and other signals across an entire browsing session. The system is designed to catch advanced bots that can run JavaScript, use real browsers, and pass traditional CAPTCHA challenges. Cloudflare says Precursor do…

Tom Cruise is utterly transformed in Digger trailer

When Warner Bros. showed new footage of its forthcoming satirical black comedy, Digger, at Cinemacon in April, industry insiders considered it a highlight of the event. The general public hasn't seen anything other than a title announcement and a teaser in May that largely provided a retrospective of star Tom Cruise's career, with just 30 seconds of footage from Digger tacked on at the end. But n…

Show HN: OpenClawMachines – Extending OpenClaw to the Enterprise

Sony Nerfs Videogame Ownership

Legal intern Suzanne Castillo co-authored this post. Playstation’s decision to kill physical game discs is the latest attack on our diminishing rights to access and engage with culture digitally. Rent-seeking corporations and negligent lawmakers share the blame–and they can do better.  We’ve seen the same playbook used in the move to digital distribution of  film, TV, and music: draw in customers…

Microsoft chief turns hostile on frontier AI labs, warns companies to guard their IP

Seemingly unaware of the concept of irony, Satya Nadella is warning AI-using enterprises to take care not to give away their business secrets alongside the massive piles of cash they’re forking over to frontier labs every month. Writing in a long-form post on X over the weekend, the Microsoft CEO and chairman warned of what he called the “reverse information paradox,” a situation in which purchas…

Apple and Samsung benefit as memory shortage pushes smartphone shipments to historic lows

Smartphone shipments started to plateau a few years back, ending the days of guaranteed double-digit growth for any company that wanted to make phones. Fewer smartphone manufacturers exist today, and they're facing new pressure in the age of AI. A new report claims that smartphone shipments cratered 11 percent in the last quarter. Some are weathering the storm better than others, though. Accordin…

Social Media Limits Are Coming For Teens Across Europe

The European Union is considering major new restrictions on children's access to social media, including age limits, phased access, and an outright ban. "This is not about whether children can access social media," said European Commission President Ursula von der Leyen. "It is about when social media can access our children." The Verge reports: Social media platforms could also be forced to prove…

German firm files for insolvency, blames cybercrims who shut down production for 6 weeks

German textile company ZEGO Textilveredelungszentrum has filed for insolvency and is blaming the financial fallout from a March cyberattack that knocked its production offline for nearly six weeks. ZEGO's filing adds another name to the short but growing list of companies that say a digital break-in was commercially fatal to their business. The Bavaria-based company provides textile finishing, pr…

Graviton5 Outperforming Intel Xeon Granite Rapids But Falls Short Of AMD EPYC Turin

Following the recent GA of the AWS M9g series as the first instances powered by the new Graviton5 CPUs, I recently ran benchmarks looking at Graviton4 vs. Graviton5 CPU performance. There was very nice generational gains for the new AWS Graviton processors with the shift from Arm Neoverse-V2 to Neoverse-V3 cores and from DDR5-5600 to DDR5-8800 memory, among other improvements. For those wondering…

Colorado will decide whether a "right to natural gas" is added to state constitution

A ballot measure written by a conservative nonprofit could amend the Colorado Constitution to enshrine fossil fuel companies’ right to sell methane gas and possibly force communities that have tried to eliminate gas appliances from new construction to back away from those efforts. Advance Colorado, which wrote the measure and led the effort to gather enough signatures to add the measure to the ba…

Hackers quickly prove that Neo Geo Doom ports are not "impossible"

Last month, we passed along Modern Vintage Gamer's (MVG) confident assertion that Doom is functionally impossible to run on the Neo Geo, owing to the console's sprite-based display hardware and lack of a frame buffer. We all should have known better than to tell a dedicated group of hackers that something is "impossible," though, as two recent projects have made great progress toward functional D…

Astronomers find sugar near the creamy center of the Milky Way (no caramel, though)

Scientists have detected a sugar in interstellar space, suggesting the galaxy may be liberally sprinkled with some of life's chemical ingredients. A new study shows that a sugar molecule containing four carbon atoms, called erythrulose, has been found near the center of the Milky Way, the first confirmed detection of a monosaccharide in the interstellar medium. Living organisms use sugars as ener…

Apple's new SpeechAnalyzer API, benchmarked against Whisper and its predecessor

A "disaster waiting to happen"? Industry officials worry about Crew Dragon availability.

NASA breathed a deep sigh of relief six years ago when SpaceX launched two astronauts, Doug Hurley and Bob Behnken, on a successful mission to the International Space Station. With the safe landing of Crew Dragon, the US space agency broke a nearly decade-long gap in its ability to put humans into orbit. Through its Commercial Crew program and multibillion-dollar contracts awarded in 2014, NASA h…

Why 55% of Americans Stopped Posting On Social Media

A new Incogni survey suggests Americans are pulling back from social media, with more than half saying "maintaining an online presence feels like work" and 55% reporting they post less than they did five years ago. "The full study concludes that there's been a significant shift in public attitudes toward social media," reports PCMag. "Where it was once fun and relaxing, it's now growing dark and a…

Show HN: Jacquard, a programming language for AI-written, human-reviewed code

Philips to replace bricked Hue Bridge Pro devices

Philips is replacing Hue Bridge Pro devices after a software update left several units bricked with no way for users to restore them. Rumblings began in forums in June after a seemingly innocuous update left users, quite literally, in the dark. After a few weeks attempting to resolve the issues, Philips has thrown in the towel and said it will replace affected devices. A spokesperson told The Reg…

EU and UK officially blame Russian spies for cyberattack on Poland's power grid

The UK and EU are demanding urgent action from critical infrastructure organizations after formally attributing the December 2025 cyberattack on Poland's power grid to Russia's Federal Security Service. The Foreign, Commonwealth & Development Office (FCDO) described the attack, carried out by the FSB's Centre 16 division, as "another example of the Russian state's irresponsible attempts to sow ch…

LAPD lets contract with surveillance giant Flock expire

Now, defenders are embracing the prompt injection, too

Prompt injections, the malicious commands attackers embed into content to entice large language models to follow them, have been attackers’ go-to tool for turning AI platforms against their users. A well-phrased command sneaked into an email or calendar invitation is often all it takes to cause the LLM to exfiltrate sensitive data or follow other harmful actions. Now, defenders are embracing the…

Lessons Learned from CISA’s Recent GitHub Leak

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a postmortem on a recent data leak in which a contractor published dozens of internal CISA credentials — including AWS Govcloud keys — in a public GitHub repository for almost six months before being notified by KrebsOnSecurity. Experts say the gaps identified in the agency’s initial response provide important lessons that all…

China, Russia and Others Seek To Inflame Debate Over AI Data Centers

An anonymous reader quotes a report from The New York Times: A state-owned newspaper in China recently published a satellite image of a data center in Gainesville, Va., writing in English that the development of artificial intelligence posed a threat to Americans' physical and financial well-being. A comic strip made to look as if it had been published by a Maryland news outlet -- created with Ope…

SREs to AI agents: Prove yourself before you touch production

Trusting an AI agent to summarize user complaints about downtime is one thing; trusting it to fix the problem unattended is something else entirely. A survey of 696 experts The Register ran with NeuBird AI in April 2026 found that 73 percent are not using AIOps at all, another 19 percent are in pilot, and only eight percent have it in production. Asked what's stopping them, 60 percent of responde…

The art and engineering of Sega CD Silpheed

Sticker shock has execs rethinking this whole AI thing

KETTLE Like a drug dealer who's hooked you and raised their prices, business leaders are simply shocked to learn the AI their organizations are becoming dependent on is suddenly a lot more expensive. You can listen to the latest episode of The Kettle right here on this page, as well as on Spotify, Apple Music, or YouTube where you can subscribe to get notified of the latest episode. Kettle host B…

[$] Shielding running kernels against exploits with BPF

Cisco has some unusual challenges when it comes to deploying security patches across the company's many devices running custom kernels. John Fastabend spoke about his work preventing exploits with BPF at the 2026 Linux Storage, Filesystem, Memory-Management, and BPF Summit. The technique could substantially reduce the time necessary to respond to kernel vulnerabilities, but it will not be fully e…

Benchmarking 15 "E-Waste" GPUs with Modern Workloads

Lucky 13: SpaceX aims for July 16 Starship flight test

UPDATED: SpaceX is scheduling another test flight of its monster Starship rocket later this week. Flight test 13 will carry 20 Starlink satellites and, hopefully, will not repeat the anomalies seen during the previous test. The mission is set to launch on Thursday, July 16, with a 90-minute launch window opening at 2245 UTC. It will carry next-generation Starlink V3 satellites for the first time,…

Final normal Debian bookworm release

Debian has announced the final normal update for Debian 12 ("bookworm"). Long-term-support updates will continue until 2028. As may be expected from a stable version, the update is mostly limited to security fixes. Still, it may be time for Debian users to look into upgrading to a more recent version. Conveniently, Debian 13 ("trixie") also received an update this weekend, with many of the same s…

FreeBSD Desktop Installer Option Working Through NVIDIA Driver Handling, Licensing

Alfonso Siciliano, who has been one of the FreeBSD developers leading the effort on adding a KDE-based desktop option to the FreeBSD installer, provided an update on recent work around adding integrating this desktop option...…

Microsoft emails Windows 10 holdouts: Fine, keep your old PC another year

Microsoft has begun sending its email of shame to Windows 10 consumers, reminding them that Extended Security Updates will run for an extra year. Strangely, some email clients are treating this latest emission as mere spam. Microsoft last month extended consumer ESU coverage through October 12, 2027. The company is now notifying those customers who might not have noticed the update on the support…

Security updates for Monday

Security updates have been issued by Debian (chromium, libxfont, mesa, opam, and wireless-regdb), Fedora (acl, attr, chromium, cjson, composer, docker-compose, jfrog-cli, librabbitmq, libssh2, libXfont2, log4cxx, OpenImageIO, openssh, p11-kit, perl-Crypt-DSA, perl-HTML-Gumbo, prometheus, python-dulwich, python-idna, python-pillow, python-tornado, sssd, tmux, upower, webkitgtk, xorg-x11-server, and…

World Cup grudge attackers may have scored Argentine FA access via year-old infostealer infection

Cybersecurity shop Hudson Rock says the suspected compromise of the Argentine Football Association (AFA) may be linked to an infostealer infection nearly a year earlier. The incident appears to be the work of an aggrieved football fan, or group of them, after Argentina eliminated Egypt from the World Cup round of 16. Egypt's coach and football association complained about several refereeing and V…

Show HN: DOM-docx – HTML to native, editable Word docs (MIT)

Linus Torvalds on Rust, C, Bugs, and AI Patch-Checking Tools

"Git and email are the two really only tools I use," Linus Torvalds said at Open Source Summit India 2026. But ZDNet reports that he also shared his thoughts on Rust, C, and patch-checking tools: "I use Google as a way to look things up." He added, "I'm unusual; most of the other maintainers end up using many more tools, and I think a lot of them are starting to use AI tools for patch checking," w…

A voxel Tokyo in real Japan time – ride the Yamanote line and study Japanese

HTTP gets a QUERY method so complex searches can stop pretending to be POST

"Idempotent" may be jargon, but the term performs an important job in HTTP as a hall pass that gives reverse proxies and gateways the go-ahead to cache complex query responses and automatically retry failed requests. HTTP has long allowed automatic retries for idempotent methods, but complex queries are often sent using POST, which intermediaries cannot safely assume is retryable. Developers have…

Simulating everything, sort of: The promise and limits of world models

Over the past few years, many of us have gotten a crash course in what we now call artificial intelligence—but really, it has mostly been a crash course in large language models. Increasingly, however, LLMs are no longer the only category of AI drawing high expectations, massive funding rounds, and significant research and product development. Over the past year, we've seen a plethora of new anno…

GNOME OS Creating "Test Center" As Its Take On Apple TestFlight For Experiment Software

GNOME developers working on GNOME OS have received funding from Germany's Prototype Fund to work on creating the GNOME OS "Developer Tool Suite" or also tentatively called their "Test Center" to help in testing experimental applications/libraries in a modern Linux computing world with systemd-sysext, Buildstream, and other newer tech...…

Progress orders emergency ShareFile server shutdown over mystery security threat

Progress Software has ordered some ShareFile customers to pull the plug on their own servers after detecting what it describes as a "credible external security threat" targeting the on-premises component of its enterprise file-sharing platform. The emergency warning, sent by email and seen by The Register, instructed organizations running ShareFile Storage Zone Controllers to take the unusual ste…

Reworked System Call Entry Handling Slated For Linux 7.3

Stemming from looking at a proposed Linux kernel patch to alter the Linux kernel's system call number handling, veteran Linux kernel developer Thomas Gleixner went down a rabbit hole of the kernel's system call entry handling to make a number of clean-ups and improvements to the code. That rework to the system call entry handling is now expected to land for the Linux 7.3 kernel cycle...…

Raspberry Pi 5 IOMMU Driver Being Worked On For The Mainline Linux Kernel

While the Raspberry Pi 5 is already over two and a half years old, one of the missing elements of its support from the mainline Linux kernel has been the IOMMU driver. We are now seeing Raspberry Pi's downstream IOMMU driver being adapted for mainline with hopes of getting it into the upstream kernel...…

Backup and running? Not this digital sign

Microsoft and backup are two words often uttered together, usually in the form of "Microsoft Windows has crashed again, where's my backup?" The question is: what would a backup look like for a digital sign in Derby? Spotted by eagle-eyed Register reader "nategee" on a stroll in Derby, this sign appears to have spent much of the day pleading to be backed up. This poses an interesting question. Wha…

Cloud Hypervisor 53 Released With Offloaded Snapshot/Restore Daemon

Cloud Hypervisor 53.0 is now available for this open-source, Rust-based VMM focused on cloud workloads and modern security needs. Originally started at Intel, Cloud Hypervisor continues seeing new development these days by Microsoft, Meta, Arm, and other organizations...…

Photovoltaics are still running after a year under Swiss trains

It is just over a year since a pilot project to install photovoltaics on a railway line kicked off. According to the CEO of Sun-Ways, the company behind the scheme, the challenge was not so much technical as regulatory. The project, a 100-meter photovoltaic installation on a railway line open to traffic, was inaugurated on April 24, 2025 in Buttes, Switzerland. It's fair to say it went well; the…

Japan's Space Agency Conducts First Test Flight For Experimental Reusable Rocket

"Japan's experimental reusable rocket took off and safely landed in a first test flight Saturday," reports the Associated Press, as Japan "seeks to achieve the technology key to cut launch costs and compete in the global space market dominated by SpaceX." The RV-X rocket lifted off, hovered and moved horizontally before landing [watch the video here] during its less than one-minute flight at the J…

Microsoft is losing the battle to protect license lucre. It better get used to the feeling

OPINION In Disney movies, if you wish really, really hard for what you want, it happens. In British courts, not so much. Prince Redmondia really, really wanted to stop the evil barons from reselling on-prem Office and Windows licenses, and made a fairy tale argument in court to make it so. Our hero did not get its wish, not then, and not now with the UK Court of Appeals. The traditional reason co…

AI needs a home, not a hotel

AI discussions have moved past which model to run or which use case to tackle first. Enterprises developing their own private AI now face a more consequential question: where that AI should live. Drifting into public cloud because it feels familiar or delivers quick wins, without asking whether the environment meets AI's specific demands, tends to store up problems that compound with time. AI is…

Apple accuses OpenAI of stealing its core tech secrets

Apple has filed a lawsuit against former employees who now work at OpenAI, and the AI upstart itself, alleging theft of intellectual property. Cupertino’s complaint [PDF] opens with an accusation that a former employee joined OpenAI after eight years at Apple, and on his way out dodged an exit interview and didn’t return his work laptop. The filing alleges that once he “exploited a rare, previous…

User crippled a network while trying to learn Nmap

WHO, ME? Welcome to the working week, dear reader, which as always we open with a fresh instalment of “Who, Me?” – the reader-contributed column that offers an education in how not to do things at work. This week, meet a reader we’ll Regomize as “Roger” who told us that a decade or so back he managed teams that designed electronic shop tools and associated test kit. Roger admits he had begun to f…

America May Soon Be Facing Largest Labor Shortage in Its History

America "is facing what's projected to become the largest labor shortage in its history," according to experts interviewed by the Washington Post: Economists warn that the worsening labor problem, due in part to a skills shortage and population shifts, will be vast and reach beyond tech. It "could hobble the American economy for years to come," predicts the Georgetown University Center on Educatio…

Meta admits its first ‘superintelligence’ was too stupid to survive for three days

Meta has withdrawn the first image generation product created by its Superintelligence Labs fewer than 72 hours after launch. The product was called “Muse Image” and Meta launched it on July 8, billing it as “the first AI image generation model from Meta Superintelligence Labs.” That lab is Zuck’s latest big bet and aims to create a “personal superintelligence that knows us deeply, understands ou…

Semi-Trailer Trucks Test Converting Into Plug-In Hybrids

Long-time Slashdot reader necro81 writes: There are several companies, such as Tesla, trying to make semi trucks fully electric. The capital cost for such a truck, and the MW-scale infrastructure to recharge it, may be a hard sell for some operators. [IEEE Spectrum notes that's a charging infrastructure "that most freight corridors do not yet reliably provide."] But some companies are instead addi…

Lenovo denies using banned Chinese SSDs where they're not allowed

ASIA IN BRIEF Lenovo has denied it sells laptops that include banned Chinese storage devices where they're not allowed. An outlet called Notebookcheck recently reported that it a ThinkBook 14 G9 IPL and found a solid-state disk made by Chinese company YMTC inside. Some observers joined the dots and decided the laptop could be a problem for Lenovo because a Biden administration decision saw the US…

'Billionaire Exodus? California Drew 10x More Venture Capital Than Any Other State This Year'

California drew more than $335 billion in venture capital funding this year, reports the Los Angeles Times, citing data released Thursday by PitchBook on private market funding: Its next biggest competitor, New York, raised less than a tenth of California's total. Texas raised 1/40th of the amount... Although a campaign for a new tax on billionaires has convinced some ultra-rich residents to shift…

Kernel prepatch 7.2-rc3

The 7.2-rc3 kernel prepatch is out for testing. Linus said: "Things continue to look normal (the 'new normal' with slightly higher rates of commits, although I do get the feeling that we're seeing that slightly balanced out by people starting to go on summer vacation)".…

'Forget Coders. The Real AI Threat Is In the Back Office'

Which jobs are most threatened by AI? "Programmers, software engineers and other tech industry employees," goes one common answer. "But many economists are more concerned about a different, larger group of white-collar workers," reports the New York Times: customer service reps, bookkeepers, payroll clerks and HR specialists, "who fly under the radar but collectively account for tens of millions o…

Linux 7.2-rc3 Released: Close To The "New Normal"

Linux 7.2-rc3 is now available for testing in working toward the stable Linux 7.2 kernel version coming up in August...…

Ask HN: What Are You Working On? (July 2026)

Linus Torvalds on AI, Junk Patches, Humans, and Godzilla

Linus Torvalds once said LLMs might bring a 10X increase to programmer productivity. But speaking at Open Source Summit India 2026, he now says that number was "not scientific," reports ZDNet. "That was pulled out of my ass number, obviously." Today, he continued, "we're at the point where hopefully it creates more productivity than it takes away," but "we certainly saw more junk being generated b…

Linux 7.2 Enabling UltraRISC RISC-V Support In The Default Kernel Build

Similar to Linux 7.2 enabling Eswin SoC support by default in the RISC-V "defconfig" kernel build, UltraRISC RISC-V coverage is also now being enabled by default for RISC-V kernel builds in Linux 7.2...…

The real mystery behind Moana: After 1,700 years, why did Polynesians suddenly sail east?

The same question drives both the plot of Moana and decades of archaeological research: Why, after centuries of relative stability, did Polynesian voyagers suddenly begin settling islands thousands of kilometers away across the Pacific? The latest Moana movie is a live-action adaptation of a Disney animated movie of the same name. While the films are fictional, they draw inspiration from the rich…

Memory makers are slaves to the boom-bust rollercoaster, and the AI boom is the wildest ride of all

It’s a good time to be in the memory business. As the AI datacenter business booms, SK Hynix and Micron’s revenues have tripled in the last year, and Samsung’s has roughly doubled. But while the trio have the AI revolution to thank for their good fortune, the deck is stacked for a reversal. Such is the memory business historically. Today, sky high demand for high-bandwidth memory (HBM), DDR5, and…

HFI BIOS Aims To Provide A POST-Like Power On Screen & BIOS Setup Utility For RISC-V

The Harmonic Firmware Initiative "HFI" is trying to provide a generic, standardized power-on firmware experience for RISC-V boards. Akin to the x86 world with having immediate graphics card initialization to provide a display while the system is booting and also having a BIOS setup utility for system configuration, HFI is trying to do the same for the RISC-V world...…

Linux 7.2-rc3 Bringing Fixes For The SEGA Dreamcast Drivers In 2026

It wasn't on my bingo card for the week but merged to Git ahead of today's Linux 7.2-rc3 kernel release are a number of fixes for the SEGA Dreamcast drivers...…

Realtek RTL8723BS WiFi Linux Driver Hardened Against Malicious WiFi Access Points

The staging driver fixes that were sent out this week ahead of the Linux 7.2-rc3 release is predominantly made up of hardening the Realtek RTL8723BS WiFi driver. In particular, a number of fixes for addressing out-of-bounds behavior when connecting to "bad" WiFi hosts...…

It's an AI web, and we're just rats in the walls

OPINION Things you might not know about me. I was the first person to write a popular article about the web. Little did I, or anyone else, know how it would change everything. Our lives were transformed when all of human knowledge became just a click away. That was then. This is now. Today, more web traffic now comes from bots than humans. We're just picking up AI's crumbs. That was not how it wa…

Debian 13.6 Released To Ship All The Latest Security Fixes, Reverts GeoIP Database

Debian 13.6 is out today as the newest point release of Debian Trixie to ship the latest security fixes and other maintenance updates...…

AI customers are coming around to the idea that small is beautiful

To cater to the broadest possible market, OpenAI and Anthropic build ever-larger models capable of making a brute-force attempt to tackle almost any task. These models are the Swiss Army Knives of the AI world. When used with sufficient force, they can do almost any job … but nobody needs a frontier class model to summarize emails, draft replies, or summarize meeting notes. It's cheaper and easie…

Linux 7.2-rc3 Bringing Display Detection Improvement To Help Some Multi-GPU Systems

Sent out today was this week's round of x86 (x86_64) fixes ahead of the Linux 7.2-rc3 kernel test candidate due out on Sunday...…

A Jupiter-size planet that escaped its star's death

WD 1856 b is the only confirmed case of a planet that survived the death of a Sun-like star. It’s a Jupiter-size world orbiting a white dwarf—the burned-out remnant of a Sun-like star. Now, a team of astronomers has used the James Webb Space Telescope to take a closer look at this planet for the first time, and what they found makes an already strange system even stranger. A feeding frenzy WD 185…

Overhaul of public lands grazing regulations seeks to cut public involvement

The federal government is rewriting its rules governing ranching on public lands to increase the number of cattle, sheep, and other livestock grazing on 155 million acres in the West, an area twice the size of New Mexico. Public lands grazing is overseen by a nearly century-old system that heavily subsidizes some of the wealthiest Americans while doing little to address its harms to the environme…

LLVM Merges x86 LFI "Lightweight Fault Isolation" Target For In-Process Sandboxing

Stanford researchers have been developing Lightweight Fault Isolation "LFI" compiler passes and targets for LLVM as a means of efficient, native code sandboxing. The AArch64 LFI target was previously upstreamed while this week the x86/x86_64 LFI target was also upstreamed for this means of in-process sandboxing...…

Irish datacenters now guzzle 23% of the country's electricity

Electricity used by datacenters in Ireland increased by 10 percent during 2025, despite an effective moratorium on most new datacenter grid connections in the Dublin area. The latest figures from Ireland's Central Statistics Office (CSO) show that giant server farms now account for nearly a quarter of the country's metered electricity consumption. Their share rose to 23 percent in 2025 after pass…

KDE Developers Continue Landing More Features For Plasma 6.8

KDE developers continue to be very busy this summer landing more features for the upcoming Plasma 6.8 desktop...…

Mesa's Rusticl Now Enables Arm Mali Panfrost Driver Support By Default

A change upstreamed to Mesa by an Arm engineer now enables the Panfrost Gallium3D driver for Arm Mali graphics to work with the Rusticl driver by default...…

The Origins of Heikki's Garden of Flowers

Pop!_OS Rolls Out Its "Frosted Glass" Desktop Style For COSMIC

System76 developers have for the past number of weeks been working on developing a "frosted glass" appearance for the COSMIC desktop environment featured on their Pop!_OS Linux distribution. For Pop!_OS users this frosted glass feature is now available and will become more widespread for other Linux distributions once the next COSMIC release is formally tagged...…

Wine 11.13 Better Supports Input Pointers, Improved Keyboard Scancode Mapping For X11

Wine 11.13 is out today as the newest bi-weekly development release for this open-source software enabling support for running Windows games and applications on Linux...…

The 4-Bitter Lesson: Balancing Stability and Performance in NVFP4 RL

Quantum error correction can constantly recalibrate a processor

There are some obvious big picture issues that stand between us and useful quantum computing. Issues like whether we can make enough high-quality hardware qubits to connect into the error-corrected logical qubits we need, and how we generate the states needed to perform universal computation on those logical qubits. But there are also many less prominent challenges that will need to be solved bef…

Increased drone surveillance of illegal July 4th fireworks led to $100K fine

More cities and towns deployed drones to spot illegal fireworks during the Fourth of July celebrations commemorating America’s 250th anniversary—leading to a $100,000 fine in one instance and coming as part of a broader national trend of first responders turning to drone surveillance. Police and fire departments have described using both increased drone surveillance and steep fines to deter peopl…

China recovered its first reusable rocket and showed a new way to do it

China's sprawling state-owned rocket developer, maker of the country's Long March rocket family, announced it recovered a reusable orbital-class booster for the first time Friday in the South China Sea. The milestone mission began with the liftoff of a Long March 10B rocket from the Wenchang Commercial Space Launch Site on Hainan Island, China's southernmost province. Powered by seven kerosene-fu…

Slothful summer app lets you scroll simply by tilting your head

HANDS HEAD ON Have you ever felt so lazy that reaching up to scroll on your MacBook’s trackpad was too much work? Yeah, me too – especially with the summer heat blanketing much of the Northern Hemisphere, even reaching my remote corner of the US. Thankfully, there’s an app for that. ScrollPods is a simple macOS app that’s been out since last November but which just came to my attention thanks to…

Check out the first images of Quest shipwreck

Back in 2024, we reported on the discovery of the Quest shipwreck, the polar exploration vessel that served Arctic explorer Sir Ernest Shackleton on his last voyage. Shackleton died before reaching their destination, and the ship sank in 1962. The Royal Canadian Geographic Society (RCGS) has now released the first images of the wreck more than 60 years after it sank, published in Canadian Geograp…

Ransomware negotiator hired to represent victims was working for the attackers

A former ransomware negotiator was sentenced to 70 months in prison yesterday after colluding with BlackCat scammers to extort the victims he was hired to protect. As a ransomware negotiator for the company DigitalMint, Florida resident Angelo Martino's job was "to negotiate with cybercriminals to mitigate the ransoms paid by [DigitalMint's] clients," the US government said in a sentencing memora…

Destructive Windows backdoor stuffs multiple wipers and ransomware code into a single package

A newly identified destructive Windows backdoor combines ransomware-like encryption with multiple data-wiping features, according to Microsoft. Last October, the Redmond threat-hunting team first spotted attacks using the Golang-based implant they've named GigaWiper. Its developers stuffed multiple malware families into the software as on-demand commands, giving criminals a Swiss Army knife of co…

LisaFPGA brings Apple's magnificent misfire back in programmable logic

Apple Lisas are rare now. Here's a rather cheaper way to build your own – and in theory, it can even use original floppy drives. LisaFPGA does what it says on the GitHub repo: "The Apple Lisa computer implemented inside an FPGA!" It's an open source project that recreates a complete Apple Lisa on an FPGA board. It's not entirely complete yet, but hardware went on sale in May and you might still b…

Orbital datacenter gold rush needs an environmental review, FCC told

Environmental groups want the FCC to slam the brakes on orbital datacenters, arguing the agency shouldn't approve constellations they say would total more than a million satellites before taking a hard look at their environmental impact. Earthjustice, acting on behalf of DarkSky International, Environment America, and Public Employees for Environmental Responsibility (PEER), filed a petition this…

KDE Plasma 6.7 X11 vs. Wayland Session Gaming Performance For NVIDIA On CachyOS

With KDE Plasma 6.7 now having seen a few point releases to further polish this last version with X11 support ahead of Plasma 6.8 going Wayland-only, here are some NVIDIA Linux gaming benchmarks between the X11 and Wayland sessions on Plasma 6.7.2 using the popular Arch Linux based CachyOS.…

[$] An update on the scraper situation

Our article "Fighting the AI scraper bot scourge", published in early 2025, discussed the problem of widespread scraping of web sites in search of training data for large language models and related projects. This activity overwhelms sites with traffic. Over a year after that article is published, the problem is still growing. The hammering of sites by shadowy actors has reached new heights, and t…

Building Our Future Together

In my first weeks as Executive Director of EFF, I’ve been reminded every day how consequential this moment is in determining what kind of future we will have. We are on the edge. What each one of us steps up to do – with our expertise, energy, and resources – will determine whether our future is one of openness, security, and fundamental rights, or one controlled through fear, surveillance, and ce…

OpenAI's Atlas browser doesn't make it to its first birthday

OpenAI has decided its AI browser experiment has run its course, pulling the plug on ChatGPT Atlas less than a year after launch and moving its browser-based agent features into ChatGPT and Codex. The company said Atlas will stop working on August 9 as it rolls out the newly unveiled ChatGPT Work platform. Atlas arrived last October with no shortage of ambition. Rather than trying to out-Chrome C…

AI-driven datacenter builds drive Microsoft's emissions up a quarter in one year

Microsoft says it matched its entire electricity consumption with renewable energy last year. The bad news is it also increased greenhouse gas (GHG) emissions by 25 percent due to datacenter construction. The cloud and software biz has released a 2026 Environmental Sustainability Report [PDF], claiming its environmental sustainability work is entering a new phase due to rapid technological change…

[$] QBE 1.3: metaprogramming, performance, and cross-platform support

QBE, a compact compiler backend developed by Quentin Carbonneaux, is a lightweight alternative to larger compiler backends such as LLVM and GCC. Designed to be small enough for a single developer to understand, QBE uses a static single-assignment (SSA) intermediate representation (IR), supports the C ABI, and serves as the backend for projects such as Hare and the cproc C11 compiler. Frontends em…

Security updates for Friday

Security updates have been issued by AlmaLinux (aardvark-dns, cups, edk2, gstreamer1-plugins-bad-free, gstreamer1-plugins-good, gstreamer1-plugins-ugly-free, kernel, libsolv, libtasn1, libxml2, nginx:1.24, nginx:1.26, oci-seccomp-bpf-hook, python-urllib3, and tomcat), Debian (rlottie), Fedora (c-ares, k9s, kind, libXfont2, nmap, pam, perl-DBI, php, python-pendulum, tmux, and xorg-x11-server-Xwayla…

Linux 7.3 Enabling Second Graphics Pipe For Modern AMD APUs

AMD on Thursday sent out another round of AMDGPU kernel graphics driver and AMDKFD kernel compute driver updates to DRM-Next of new feature material ahead of the Linux 7.3 merge window...…

Automated Moderation Is Here to Stay—Accountability Must Keep Pace

This post is part 2 in a series about automated content moderation. Read the first post here. When whistleblower Frances Haugen leaked a set of documents from Meta in 2020, among the revelations was a jarring statistic: The company’s algorithms designed to detect terrorist content incorrectly deleted nonviolent Arabic-language content 77 percent of the time, while failing to detect hate speech und…

EU puts 'addictive' design of Facebook, Instagram under the DSA microscope

Meta may have breached the European Union's Digital Services Act by designing Facebook and Instagram to keep users glued to their screens, with Brussels saying that features such as infinite scroll and autoplay should be switched off by default. The European Commission on Friday published preliminary findings accusing the social media giant of failing to properly assess or mitigate the risks pose…

Capita hears demand for pension scheme cleanup 'loud and clear' – but won't say yes

Capita has yet to agree to reimburse the UK government for the full cost of recovering the failing Civil Service Pension Scheme (CSPS) it administers. In a testy Parliamentary hearing in which Capita was called to account for its performance since taking over the CSPS, Adolfo Hernandez, group chief executive, refused to be drawn on whether the company would pay the full amount that the government…

Fashion mart Miinto unzips breach details, warns shoppers to watch for phisherfolk

Danish ecommerce company Miinto admitted an intruder has been looking at its order data, according to emails it sent to customers this week. The emails, seen by The Register, do not comment on the scale of the data accessed by the perp or how exactly the breach occurred, although UK-based customers of the Copenhagen-HQ'd biz have received them. “We are writing to let you know about a security inc…

Linux DT Patches Provide Very Basic Support For Apple M3 Pro / Max / Ultra

Upstreamed for the Linux 7.2 kernel was initial support for booting Linux on the Apple M3 SoC devices. But just the barebones suppport for booting with not yet any accelerated graphics or other typical function needed for daily use of M3 Apple devices on Linux, just booting to a console. Now this work is complemented by additional Device Tree patches for also booting M3 Pro / Max / Ultra devices o…

HiZ Plane Optimization Merged For Intel Vulkan Linux Driver For Some Performance Benefit

After two years being on the TODO list for a possible performance optimization, the Intel open-source "ANV" Vulkan driver has now merged an HiZ plane optimization that can yield up to a few percent frame-rate improvement for Linux gaming/graphics on newer Intel integrated and discrete graphics hardware...…

Cinnamon 6.8 will support Wayland – if you want it

The latest Linux Mint blog says that its Wayland support is about ready for primetime – but X11 isn’t going away. Linux Mint lead developer Clement Lefebvre has published the Linux Mint blog for June 2026, announcing that as of the next version of the Cinnamon desktop, it will officially drop “experimental” status for Wayland: this will be a fully supported way to use the Cinnamon desktop environ…

LLVM Clang Merges Initial Support For NVIDIA Rigel Core With Next-Gen Rosa CPU

Earlier this week NVIDIA confirmed some basic details around their next-gen Rosa CPU that succeeds Vera. Among the public confirmation was that it will feature a "Rigel" Armv9.2-A core iterating on their Olympus core design. With the basic details published, NVIDIA immediately introduced Rigel core support into the GCC compiler. Now they have also upstreamed their initial Rigel core enablement int…

Intel-Scaler-vLLM 0.21.0-b1 Delivers Latest Features For vLLM On Intel GPUs

Released this morning was Intel's newest version of Intel-Scaler-vLLM as their Docker-based solution providing an optimized vLLM stack for execution on Intel Arc (Pro) graphics hardware...…

Scot NHS Trust probes email stuffup involving maternity patients' data

A staff member sent the personal details of around 150 women who were in contact with a Scottish NHS Trust’s maternity services to their own personal email account, the Trust has revealed. NHS Forth Valley, the health board that oversees NHS services in the region between Edinburgh and Glasgow, said it is investigating the matter and has contacted the women affected. “An internal investigation is…

BOFH: Cross-department AI pitches are easier to swallow with a pint in hand

EPISODE 13 "It's just a quick pitch session. You won't have to stay long," the Boss wheedles. "Thanks, but..." I reply. "Come on, you'll meet some new people." "Boring people," the PFY interjects. "... and hear some stories..." "Boring stories..." "You might even learn something!" the Boss pleads. "Something boring," the PFY says. And he's not wrong. Cross-department pitch sessions are drier than…

Datacenter MacGyver saved the biggest football match of the year

ON CALL The 2026 FIFA World Cup continues and at the time of writing, The Register's home nation – England – remains in with a chance to bring home the trophy! We therefore devote this week's edition of On Call, our weekly reader-contributed tale of tech support, to the beautiful game. We're able to do so thanks to a reader we'll Regomize as "George" who once pulled off a great save when, decades…

Red Hat offers RHEL support ‘forever’ for those who need to lock in to legacy tech

Red Hat has created a new support offering for its flagship Enterprise Linux that it characterizes as “RHEL forever” and has “no pre-determined end date.” The IBM business unit says the offering, formally known as “The Long-Life Add-On,” will “keep older minor or major versions of RHEL secure and stable” by providing critical patches, urgent bug fixes, and 24x7 tech support for as long as custome…

Phoronix Premium 2026 Summer Support Special Ends Tonight

For those that enjoy the daily flow of original open-source/Linux news on Phoronix along with all of the original Linux hardware reviews and performance benchmarking, but haven't yet subscribed to Phoronix Premium to help keep the site going after 22 years, the summer sale ends tonight...…

Microsoft warns customers AI will mean busier Patch Tuesdays

Microsoft has warned customers to expect more security patches for the foreseeable future, thanks to AI. “As AI helps defenders discover more issues, customers will see a higher volume of security updates included in each security release,” the company’s executive veep for Windows + Devices, Pavan Davuluri, wrote in a Thursday post that describes how Microsoft is changing its internal processes t…

AMD Enabling CACP Feature On Linux For Greater OLED Power Savings

Today's batch of AMDGPU Display Code "DC" updates bring a few noteworthy items for benefiting modern hardware under Linux...…

An unnamed US county – perhaps in Ohio – paid $1M extortion demand to cybercriminals

A US county reportedly paid $1 million to Kairos, an extortion gang that claimed to have stolen more than 2 TB of data, but the county never received independently verifiable proof that the stolen files had been deleted - just the criminals' promise. This means the county’s stolen files may turn up for sale on a dark web forum, and the same (or another) crime crew could again demand an extortion…

"We Want Texans to Know Their Rights": Q&A with Mayday Health on the Impact of Surveillance on Abortion Care

Last May, EFF reported that a sheriff’s office in Texas searched data from more than 83,000 automated license plate reader (ALPR) cameras to track down a woman suspected of self-managing an abortion. ALPRs are promoted as tools for keeping communities safe by finding missing persons and locating stolen vehicles, but this case showed how ALPRS can be weaponized to investigate people’s private healt…

AI slop writing has taken over the internet, particularly LinkedIn and X

No surprise here. A study from AI detection platform Pangram suggests that social media posts are teeming with AI-generated slop, particularly if the posts are long and especially if they live on LinkedIn or X. If you’re sick of reading non-human prose, we’d recommend getting off the platforms altogether. Along with offering your typical AI-content detection services, Pangram released a Chrome ex…

The House Passed The KIDS Act—The Senate Should Reject It 

Last week, the House voted on the KIDS Act, a disjointed package of legislation that seeks to control Americans’ web browsing and private messaging. The package combines a revised version of the Kids Online Safety Act (KOSA), with several other internet bills, study bills, reporting requirements, and new regulations. Different parts of the bill pressure online services to impose different age-gati…

Ancient Roman Board Game

European Commission Chooses to Keep EU Users Locked Up Behind Big Tech’s Gates

Users are always seeking more control over their social networking experience to make it better, whether to improve privacy or enhance flexibility. Interoperability between social networking platforms like Facebook and TikTok has so many benefits that solve those issues.   Say you’re on multiple platforms because you have friends you follow on different networks, but you’ve decided to choose one p…

Graviton5 CPU Benchmarks: 30% Geo Mean Improvement Over Graviton4

After originally announcing Graviton5 last December, recently AWS finally made the M9g and M9gd instances generally available as the first featuring these new in-house ARM server processors for the EC2 cloud. Graviton5 makes use of Arm Neoverse-V3 cores compared to Neoverse-V2 with Graviton4, support up to 192 cores, and feature a higher 3.3GHz clock speed compared to 2.8GHz on the prior-generatio…

AI tool scours the web for job openings, preps your resume and cover letter

Combing through job postings and company help wanted pages for a position that matches your resume is the very definition of drudge work. Now, there's an AI designed to suck up information from the web, do the search for you, and even help you apply. Software developer Tarun Gupta created just such a tool in the form of Autopilot-Jobhunt. When configured with a profile of the user and their desir…

OpenMandriva claims disgruntled admin trashed repos after community bust-up

OpenMandriva has accused a former contributor of using his trusted admin access to trash repositories and push a package that could have broken desktop installations after a community dispute spilled over into the project's infrastructure. The Linux distribution disclosed the incident in a forum post this week, describing what it called an attempted act of "distribution sabotage" allegedly involv…

SAP makes it easier for customers to shop for legacy product support, ending EU antitrust probe

The European Commission has ended an investigation into possible anticompetitive practices after SAP agreed to abolish reinstatement fees and reduce back-maintenance fees. The move could reduce barriers for customers considering third-party support for products nearing the end of their vendor support terms, including thousands of large businesses that rely on SAP ERP Central Component (ECC) to ru…

Outlook for Mac bug makes font choice a purely decorative feature

Microsoft's apparent ambition to make Outlook the worst email client for Mac shows no sign of fading after a recent update broke font selection in emails. The problem occurs when composing an email. Outlook uses the default font as the user types, but will ignore any request to select something different. Several threads have appeared on Microsoft's forums about the issue, and a moderator confirm…

EU 'Chat Control' snoopfest returns after vote to kill it falls short

An effort by European parliamentarians to block the reintroduction of an interim rule allowing tech companies to scan chats for evidence of child sexual abuse failed today, despite securing more votes than the MEPs who want to keep it alive. Commonly referred to by critics as Chat Control, or Chat Control 1.0, the interim rule acts as a derogation from the ePrivacy Directive, allowing online comm…

Wayland 1.26 RC1 Released With New Event To Help Ensure Correct Pointer Coordinates

In addition to Weston 16 nearing release and its release candidate out today, the Wayland 1.26 release candidate was just issued with a few notable changes on top of the more typical bug fixing...…

KDE Plasma users face a dire omen of change: 6.6.6 arrives

KDE Plasma 6.6.6 is here, along with a beastly long list of bugfixes, so if you have Plasma 6.6.5 – for instance, if you are using KDE on FreeBSD 15.1 – then it's an update well worth having. KDE Plasma 6.6.6 is a release that really is just about bug-fixes, but while there are no headline-grabbing features coming out for this inauspicious version number, it's worth remembering: in a world of blo…

Canonical Managed Kubeflow lands on Azure

Platform engineering team leads are facing a quiet crisis. Your data science teams want Kubeflow for its pipeline orchestration, metadata tracking, and training operators, so you build it for them on Kubernetes. Then day two arrives. Your engineering backlog is swallowed by breaking changes from upstream, Istio configuration complexity, security patching, and storage provisioning bottlenecks. You…

[$] Kitty chases the mouse

Kitty is a terminal emulator that runs on Linux, macOS, and the BSDs, which is notable for its speed and features such as image support and advanced font handling. It is under active development; a recent major release adds a new level of mouse support. Here, we will look at some of those features and show how the program can also be used as platform for text-based applications. Kitty is free soft…

Proposed Linux Patch For A Brief Delay To Match PCI Spec Will Hopefully Address Some Bugs

Going back to February there was a bug report around the xHCI controller dieing on resume from s2idle when using an AMD Ryzen AI Max+ "Strix Halo" Framework Desktop. In turn all USB devices behind the xHCI controller are lost on resume, but unbinding and binding the driver can restore the functionality without a reboot. After months of back and forth communication, it looks like a solution has bee…

Rust 1.97.0 released

Version 1.97.0 of the Rust programming language has been released. Changes include using a new symbol-mangling scheme by default, support for denying warnings in Cargo, and an end to the practice of hiding the linker's output after a successful build.…

Linux Prepares For New USB-C Security Feature On Lenovo ThinkPads

Newer Lenovo ThinkPad systems feature a security feature called USB-C Security Restricted Mode that is in the process of being wired up for reporting under Linux...…

Security updates for Thursday

Security updates have been issued by AlmaLinux (389-ds-base, aardvark-dns, buildah, compat-openssl10, freeipmi, frr, gnutls, grafana, grafana-pcp, kernel, kernel-rt, libyang, nginx, openexr, pcs, perl-HTTP-Daemon, postgresql:18, python3.14-pip, skopeo, tomcat9, and wireshark), Debian (chromium and pgextwlist), Fedora (openssh, opkssh, perl-CSS-Minifier-XS, python-jiter, python-nh3, python-pendulum…

Initial Patches Posted For Booting The Apple M4 On Linux

With the Linux 7.2 kernel there is initial support for booting the Apple M3 SoC on Linux but it's not yet functional for end users with just booting to a simple console. There are now Device Tree files posted for booting the Apple M4 on Linux but also not yet useful for any typical Apple Mac/MacBook usage on Linux...…

AMD Ryzen AI Halo Box RGB LED Driver Inches Closer To The Mainline Kernel

The AMD Ryzen AI Halo mini PC powered by Ryzen AI Max+ "Strix Halo" began shipping this week. It features very nice Linux support out-of-the-box with the Debian-based Ryzen AI Developer Platform operating system. For those wishing to run their own x86_64 Linux distribution, one of the only caveats in the Linux support is quite small... No mainline kernel support yet for controlled the RGB LED ligh…

Google's New Remote Attestation Scheme is As Bad As Its Old One

Google owes its existence to the open web, but today, its technological “innovations” have much to do with locking users into a “walled garden.” The latest of these is “reCAPTCHA Mobile Verification,” an experimental initiative that will let companies block users if they are running independent, "de-googled" versions of Android. These “indie Android” versions are favored by people who want to prot…

[$] LWN.net Weekly Edition for July 9, 2026

Inside this week's LWN.net Weekly Edition: Front: Cryptography API; Iomap explanation; Negative dentries; Faster RCUs and lockless allocation for BPF; LLMs in memory-management code Briefs: Guix vulnerabilities; OpenSSH 10.4; trusted publishing; kernel archive; CalyxOS; Quotes; ... Announcements: Newsletters, conferences, security updates, patches, and more.…

OpenMandriva: Statement regarding attempted distribution sabotage

Over on the OpenMandriva forum, the Linux distribution has reported sabotage of its repositories by a disgruntled contributor with administrative credentials. According to "AngryPenguin", an abusive incident in a distribution Matrix chat led to a user being kicked out of the chat; that "triggered a cascade of events", which led to people resigning from the distribution. Eventually, one of those pe…

Robust Secret Storage in Networks

GhostLock, a stack-UAF that has existed in all Linux distributions for 15 years

[$] Progress in modernizing kernel cryptography

At the 2026 Linux Security Summit North America, Eric Biggers spoke about some of the problems with the kernel's cryptography framework, as well as the recent progress in adding library APIs to allow developers to use cryptographic functions without using the traditional crypto API. He walked through a couple of examples to demonstrate the frailty of the original API and showed how the new library…

Security updates for Wednesday

Security updates have been issued by AlmaLinux (container-tools:rhel8, kernel-rt, libreoffice, nodejs:22, nodejs:24, opentelemetry-collector, perl-HTTP-Daemon, and python-markdown), Debian (dpkg, imagemagick, and postfix), Fedora (betterleaks, docker-compose, firefox, helm, perl-Compress-Raw-Bzip2, perl-IO-Compress, perl-JavaScript-Minifier-XS, python-cramjam, python-fastar, python-pillow-jxl-plug…

Felons, Fraudsters Flog Offensive Cybersecurity Startup

A cybersecurity startup dangling millions of dollars to acquire zero-day security vulnerabilities in popular software is run by a pair of far-right conspiracy theorists and convicted felons whose most recent ventures included fake intelligence companies and a now-defunct AI-based lobbying platform they operated under assumed names. The X/Twitter account IRIS C2 (@C2IRIS) has gained more than 4,000…

Tune Code Before Your Garbage Collector

Automated Moderation Is Here to Stay

This blog post is part 1 of a 2-part series. The second part sets out recommendations for companies and policymakers.Six years ago—one month into a global pandemic—we argued that the automated moderation processes many platforms were rapidly adopting should be highly transparent, easily appealable, and temporary. We warned that "protocols adopted in times of crisis often persist when the crisis is…

Help EFF Cut the AI Hype

In the global race to build and dominate the AI industry, it can sure seem like the interests of ordinary people sit last on the agenda. It's just the opposite for EFF. While companies furiously jam AI tools into their veins and your eyeballs, EFF’s technologists, activists, and attorneys have been meticulously cutting through the hype to ensure AI can serve your privacy and free expression. Techn…

Woodruff: You shouldn't trust trusted publishing

William Woodruff, better known online as "yossarian", has published a blog post to make the case that users should not place their trust in trusted publishing: Trusted Publishing is a mechanism for establishing trust between an external machine identity (like a CI/CD workflow) and one or more projects on a package index/registry. The "trust" in "Trusted Publishing" refers to that trust relationshi…

FBI Seizes NetNut Proxy Platform, Popa Botnet

The Federal Bureau of Investigation (FBI) said today it worked with industry partners to seize hundreds of domains associated with NetNut, a sprawling residential proxy service operated by the publicly-traded Israeli company Alarum Technologies [NASDAQ: ALAR]. The action comes roughly two weeks after KrebsOnSecurity published findings from multiple security firms connecting NetNut to the Popa botn…

LGBT Q&A: How Can I Wipe Online Data That Points To My Queer Identity?

This Pride, we’re answering all your digital rights questions in season two of our initiative, LGBT Q&A.  You Asked: Is there a way for me to wipe data about me online that could point to my queer identity? EFF’s Answer: You cannot protect everything all the time, but there are ways to wipe information about yourself online.  Most information available about you online will typically be found in t…

EFF and Allies: X’s FTC Petition to Waive Privacy Violation Order Should be Rejected

X Corp. should not be able to escape privacy compliance because it changed its name.  On May 15, X Corp. filed a petition before the Federal Trade Commission (FTC) to set aside or modify an order issued in 2022 requiring the company to report regularly to the FTC for its violations of user data. The order or “consent decree” is a result of misleading the platforms’ 140 million users by using priva…

LGBT Q&A: What Data Are Companies in the UK Collecting When Verifying My Age?

This Pride, we’re answering all your digital rights questions in season two of our initiative, LGBT Q&A.  You Asked: I live in the UK, and we have age verification now on a bunch of websites (including Reddit) and now on iPhones. Can you explain what sort of data companies are actually collecting when they check for age and whether there are any real threats to my safety?  EFF’s Answer: Age verif…

EFF to Gov. Pritzker: Veto Illinois’ HB 5511

The Illinois legislature recently passed House Bill 5511, which imposes a sweeping, device-level age-gating framework across nearly all internet-enabled hardware, operating systems, and online services. This well-intentioned but deeply flawed piece of legislation will harm young people who rely on the internet to access essential information and find community. That’s why we’re urging the Illinois…

Victory! Supreme Court Says Constitution Protects People’s Location Data

You have an expectation of privacy in location data that reveals your movements in the physical world, and even short-term surveillance of these movements is a search subject to the Fourth Amendment, the U.S. Supreme Court ruled today in Chatrie v. United States.   The case involved geofence warrants, a form of dragnet surveillance police have used to vacuum up location data from electronic device…

EFF to Grindr: This Pride Month, Put Safety and Privacy Over Profits

This Pride month, we’re calling on the dating app Grindr to prioritize LGBTQ+ user safety by making privacy the default across its platform. That means no more sharing personal data with advertisers or training AI on private information without users’ opt-in consent. Grindr is a dating app for the LGBTQ+ community; and for queer people, privacy violations can have life-altering consequences. Infor…

Hate “The Algorithm?” RSS Is One of the Tools You’ve Been Looking For

Poke your head into just about any online social network—or any general conversations about internet culture—and you’ll likely find a boogieman: the algorithm. Since at least the moment Facebook introduced (and apologized for) its News Feed, “the algorithm” has been shorthand for the ways the tech giants control what we see and when we see it. In the age of enshittification, there is a push to rec…

Lawmakers Must Act Now to Prevent Armed Police Drones

This is not science fiction. It’s not premature. If towns, cities, states, or the federal government want to act to reign in the emergence of armed police drones and robots, we have precious little time. In the absence of substantial regulation around when and how domestic law enforcement in the United States can deploy force using drones, the companies that markets technology to law enforcement h…

We Can Still Stop California’s 3D Printer Surveillance Scheme

Ignoring EFF’s warnings about the dangers and impossibility of implementing a new mandate for 3D print surveillance software, the California State Assembly has signed off on legislation to do just that. In the process, legislators amended the bill to make it even more confusing, while failing to address the risks to privacy, speech, and consumer rights. We must renew our call on legislators to dro…

Primed for Malware: Stop Selling Compromised Android Devices

Time and time again, researchers have found numerous compromised Android devices for sale at large online retailers like Amazon. When these devices get individually reported, we have seen some noted efforts to take them down. But this is a systemic problem and Amazon and other major online retailers must make a corresponding systemic and intentional effort to stop these devices from entering peopl…

EFF, TEDIC and CEJIL Challenge Secrecy in the Use of Face Recognition in Paraguay

Seeking transparency and accountability in Paraguay’s use of facial recognition, EFF, the Association of Technology, Education, Development, Research, Communication (TEDIC), and the Centre for Justice and International Law (CEJIL) filed a complaint with the Inter-American Commission on Human Rights against the state for arbitrarily denying access to information about its implementation and use of…

Four Years After Dobbs, Anti-Abortion Lawmakers Keep Coming for Online Speech

This week marks four years since Dobbs v. Jackson Women’s Health Organization overturned Roe v. Wade’s constitutional protections for people seeking abortion care. Anniversaries are a moment to take stock, and over the last four years, EFF has seen firsthand how digital rights and reproductive rights have become increasingly intertwined. One major way this has happened: the fight over abortion has…

The FCC’s Spam Call Proposal Is Just a Data Collection Scheme

The Federal Communications Commission wants to require telecommunications providers to collect vast amounts of personal information from every person who wants a phone number in the name of combatting scam and spam calls. This plan will fail to combat the deluge of unwanted calls people in the United States receive every day while giving untrustworthy companies a gold mine of information that woul…

Are Your Local Police Using Flock Safety ALPRs to Scan for Immigrants?

When a car passes an automated license plate reader (ALPR), its plate is captured and instantly compared against a list of vehicles that police are actively looking for or that police have identified for real-time surveillance. These are called “hotlists,” and EFF has learned that one used by agencies across the country targets immigrants on behalf of Immigration and Customs Enforcement (ICE).  Ag…

The KIDS Act Would Require Age Checks To Get Online

Within the next week, Congress is preparing to vote on the KIDS Act, a sprawling package of legislation that seeks to control Americans’ web browsing and private messaging. The package includes a revised version of the Kids Online Safety Act, or KOSA, combined with a collection of other internet bills, study bills, reporting requirements, and new regulations. Instead of debating any of these propo…

🦅 Domestic Spying Takes an L | EFFector 38.12

Sold to the public as a foreign surveillance tool, Section 702 is the law has let intelligence agencies spy on millions of Americans’ private conversations without a warrant. Despite years of revelations about this law's misuse, Congress has repeatedly reauthorized Section 702 without meaningful reform. Until this month, that is, when it finally lapsed in a major victory for privacy. In our latest…

Scattered Spider Hackers Plead Guilty on Day 1 of Trial

Two men pleaded guilty in the United Kingdom this week to criminal charges stemming from an August 2024 cyberattack that crippled Transport for London, the entity responsible for the public transport network in the Greater London area. The duo were key members of a prolific cybercrime group known as Scattered Spider, and their guilty pleas came on the first day of what was expected to be a six-wee…

The UK’s New Under-16 Social Media Ban Will Cause More Harm Than It Prevents

This week, politicians in the UK pushed forward with plans to eviscerate privacy and free speech on the internet by announcing a ban on social media for users under 16 that is set to take effect in Spring 2027.  The UK government continues to falsely characterize this policy as a necessary response to growing concerns about online harms for young people. In reality, much like the Online Safety Act…

EFF Joins 60+ Groups Urging the UK to Halt Face Estimation at the Border

This week, EFF joined Foxglove, Human Rights Watch, and 60 other organizations in writing to the UK’s Minister of State for Border Security and Asylum, Alex Norris, raising serious concern about the Home Office’s decision to deploy Facial Age Estimation (FAE) to assess asylum-seeking children from 2027.  The letter points to four key concerns: Discrimination  As with most face estimation and recog…

Canada Is Forging Ahead with Its Dangerous Surveillance Bill

With no serious debate, including on proposed amendments, Canada is blazing full speed ahead with Bill C-22, which would threaten encryption and increase surveillance. Also known as the Lawful Access Bill, Bill C-22 is currently moving forward quickly to a vote despite the many, many criticisms civil liberty groups and the tech industry have hurled at it. As we’ve discussed before, Bill C-22 is da…

EFF Thanks SerpApi For Helping Us Protect Free Speech Online

EFF is grateful for SerpApi’s generous support, helping us fight for your rights to speak and access information online. SerpApi has been giving to EFF every year since 2018, and alongside our 32,000 individual donors, their gift is critical to keeping up the fight. Whether in the courts, halls of power, or broader policy debates, we appreciate the work this support has made possible over the year…

Call for Submissions: Digital Pride

This Pride season, join EFF and the Queer Arts Collective in building a creative space at the intersection of digital justice and artistic expression.  We’re looking for fresh, untold, historically censored takes on digital liberation.  Whether it’s pointing the lens towards an issue you feel is underrepresented in digital justice efforts; sharing personal accounts of joy, pleasure, or sorrow unde…

A New Bill Takes Aim at Government Pressure to Silence Lawful Online Speech

Last week, Senators Ted Cruz and Ron Wyden introduced the Justice Against Weaponized Bureaucratic Overreach to Networked Expression, or JAWBONE Act. The bipartisan legislation creates a federal cause of action against government officials who coerce or attempt to coerce broadcasters, interactive computer services, or AI providers into taking actions against lawful, First-Amendment-protected speech…

Court Records Should Be Free

Court records belong to the public. Yet anyone seeking access to federal court filings through PACER, a government software system that stands for Public Access to Court Electronic Records, is usually required to pay hefty fees to search for and view documents. PACER’s fees have long acted as a barrier that makes it hard, especially for low income people, to see and understand the work produced b…

Field Notes from a Year of OPSEC Training

Late last year, as part of our annual “Year in Review” series, we summarized our efforts providing digital privacy and security advice to at-risk communities. OPSEC trainings (short for operational security, a catch-all term we use to describe any kind of workshop, advising session, assessment, or presentation about operational security for individuals and organization) are something we've long pr…

AI Regulation Should Be Rational, Not Retaliatory

The Trump administration’s approach to AI safety, particularly the generative AI models that regularly grab headlines, has been haphazard at best. At worst, it’s unconstitutional. As EFF and our allies explained in an amicus brief, the Pentagon’s actions against one company, Anthropic, violate the First Amendment because they were motivated by the administration’s desire to punish an uncooperative…

‘Popa’ Botnet Linked to Publicly-Traded Israeli Firm

For the past four years, a sprawling Android-based botnet called Popa has forced millions of consumer TV boxes to relay Internet traffic linked to advertising fraud, account takeovers, and mass data-scraping efforts. This week, researchers from multiple security firms concluded that the Popa botnet is linked to NetNut, a “residential proxy” provider operated by the publicly-traded Israeli firm Ala…

The Free and Open Web Is Under Attack at the IETF

The ability to access publicly available information using automated tools is a central value and benefit of a free and open internet. Automated access—often called crawling or scraping—powers important, useful tools for locating, preserving, and analyzing online information. For example, crawling and scraping helps journalists, researchers, and watchdog organizations report the news, find securit…

The NO FAKES Act Could Silence Satire, Commentary, And News

The NO FAKES Act is supposed to target harmful AI-generated impersonations. But in reality, it will make it easier to suppress commentary, satire, and other lawful speech. That's why EFF has signed a letter urging the Senate Judiciary Committee not to advance the bill in its current form. Take action Tell Congress to Say No to NO FAKES In the letter, EFF joins a coalition of civil society groups i…

Onward, Friends

After 26 years, today is my last day at EFF. It's been a terrific and wild ride — the organization has grown from a tiny band of fighty people trying to plant a flag for freedom and justice in the coming digital world into a large, established band of fighty people doing, well, much the same. The world around us has changed enormously. Our core values haven't budged. I'm proud of what we've achiev…

EFFecting Change: LGBTQ+ Solidarity Against the Tide of Surveillance

LGBTQ+ communities are facing an escalating wave of censorship and targeted surveillance, but we can push back through mutual solidarity. Join us live to learn how safer virtual spaces get built, how platform policies and government pressure are reshaping the digital landscape, and what platform accountability actually looks like. Our panel will share ideas for direct action and concrete strategie…

Victory! 702 has Expired!

Section 702 of the Foreign Intelligence Surveillance Act lets US intelligence agencies collect communications from foreigners abroad without a warrant, and routinely sweeps in Americans’ emails, messages, and calls in the process. The authority for this program is set to expire Friday, June 12th, 2026, at midnight. As we wrote earlier this week, Congress has been kicking the ball down the road for…

Yes to California's Bill to Ban Surveillance Pricing

Corporations harvest and monetize ever-growing amounts of our personal data, such as our browsing history and physical location. One bitter fruit of this poisonous tree is known as “surveillance pricing”: corporations offer the same product to two different people at two different prices, based on scrutiny of these people’s respective personal data. Surveillance pricing is bad for privacy, equity,…

‘News’ Site Keeps Hallucinating EFF Staffers

What do EFF staffers Sarah Chen, Javier Morales, Caitlin Chin, Emma Rodriguez, and Mikko Kopponen have in common?  For one thing, they don’t exist.  For another, all have been quoted as EFF experts in articles published in the past two months on a site called News-USA Today, which describes itself as “an independent news publisher focused on clear, accurate, and useful journalism.”  Uh…  (Please d…

LGBT Q&A: We’re Back With Season 2! 

Last June during Pride, we launched a new initiative—LGBT Q&A—where we answered your most pressing queer-related digital rights questions on EFF’s Instagram and TikTok accounts. No question was too big or too small! You asked us things like what pictures to use on dating apps; how to remove your name from internet searches; why homophobic content doesn't get removed after you report it; and how to…

Congress Just Rushed Through a Disastrous Copyright Office Overhaul

In a voice vote earlier this week, the House of Representatives passed H.R. 6028, the “Legislative Branch Agencies Clarification Act.” The legislation is presented as a technical reorganization of some government agencies, but it’s much more than that.  H.R. 6028 would fundamentally change the U.S. Copyright Office, and not in a good way. The bill removes the Library of Congress’ current superviso…

The 702 Ultimatum: Warrant Requirement or Bust

For months now, Congress has been kicking the ball down the road—temporarily postponing the expiration of the mass surveillance authority Section 702 of FISA in hopes that some consensus could be reached. Now, with the deadline looming, the stakes have never been higher. Nearly every time the statute has come up for renewal, the people demanding privacy and civil liberties have had to compromise,…

Enshittification Merch That Actually Fights Enshittification 

Enshittification isn't just a sweary word to describe the accelerating decay of the online platforms, apps, and services that we rely on.   It's a framework for understanding the structural incentives that make tech companies enemies of their own users over time—the surveillance business model, the erosion of privacy, the monopoly power that eliminates alternatives, the regulatory capture that pre…

🔊 Mass Surveillance for… Loud Music? | EFFector 38.11

Across the country, surveillance companies have spun a vast web of tens of thousands of license plate cameras. The people selling this tech want you to believe that it's for your safety, but how are authorities really using automated license plate readers (ALPR)? In this week's EFFector newsletter, we're looking at how these powerful surveillance networks have become universal people-trackers used…

Who Runs the Ransomware Group ‘The Gentlemen?’

A cybercrime group known as The Gentlemen has emerged as the second most active ransomware gang by victim count, rapidly attracting a talented pool of hackers through an aggressive recruitment strategy that promises affiliates 90 percent of any ransom paid by victims. This post examines clues pointing to a real life identity for the administrator of The Gentlemen ransomware group. A graphic create…

How and Why to Fight Back Against Social Media Bans

Several U.S. states are pushing to ban young people from social media entirely. This marks the latest wave of censorship bills masquerading as “children’s online safety” measures, with states like Massachusetts, Idaho, Minnesota, North Carolina, South Carolina, Illinois, and EFF’s home state of California leading the charge. Just a few years ago, lawmakers supporting age-gating laws insisted their…

A Record-Breaking Patch Tuesday for June 2026

Microsoft today released software updates to plug nearly 200 security holes across its Windows operating systems and supported software, a record number of fixes for the company’s monthly Patch Tuesday cycle. Nearly three dozen of those bugs earned Microsoft’s most dire “critical” rating, and exploit code for at least three of the weaknesses is now publicly available. The software giant said in a…

Tell Congress: Just Say No to NO FAKES

The Senate Judiciary Committee is set to consider and vote on the Nurture Originals, Foster Art, and Keep Entertainment Safe Act (NO FAKES). Instead of targeting the real privacy harms posed by AI-generated replicas, this law would create another layer of internet censorship on top of the already existing legal and voluntary takedown systems. Congress should reject NO FAKES. Take action Tell Congr…

VICTORY: Meta Strips Facial Recognition Code From Smart Glasses App After Public Outcry

Just days after a damning WIRED report exposed that Meta had quietly embedded facial recognition technology (FRT) code into millions of phones, the tech giant has quietly acquiesced in demands to reverse course. Last week, researchers identified code in Meta AI, a companion app for its line of smart glasses, that could convert images of faces into unique biometric signatures to identify strangers…

Cheers to the Winners of EFF’s 18th Annual Cyberlaw Trivia Night! 

On a warm June evening in San Francisco, attorneys and other legally-minded friends of EFF gathered for our 18th Annual Cyberlaw Trivia Night, an annual test of tech-related legal knowledge, and the ability to remember some deeply obscure facts under pressure.  Returning Quizmaster Kurt Opsahl once again guided competitors through six rounds of trivia covering everything from intellectual property…

Hackers Used Meta’s AI Support Bot to Seize Instagram Accounts

The Instagram accounts for the Obama White House and the Chief Master Sergeant of the U.S. Space Force were briefly defaced with pro-Iranian images and messages over the weekend, after instructions began circulating on Telegram showing how to trick Meta’s “AI support assistant” bot into resetting account passwords. A screenshot from a video released on Telegram claiming to show how Meta’s AI custo…

Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks

Authorities in the Netherlands have arrested the co-owners of two related Internet hosting companies for operating IT infrastructure used by Russia to carry out cyberattacks, influence operations and disinformation campaigns inside the European Union. The two men were the focus of a 2025 KrebsOnSecurity story about how their hosting companies had assumed control over the technical infrastructure o…

Lawmakers Demand Answers as CISA Tries to Contain Data Leak

Lawmakers in both houses of Congress are demanding answers from the U.S. Cybersecurity & Infrastructure Security Agency (CISA) after KrebsOnSecurity reported this week that a CISA contractor intentionally published AWS GovCloud keys and a vast trove of other agency secrets on a public GitHub account. The inquiry comes as CISA is still struggling to contain the breach and invalidate the leaked cred…