Terminal

ReactOS Lands Significant DirectX Stack Update From Wine For Enabling More Games ↗ (opens external article)

The open-source ReactOS project striving to provide binary compatibility with Microsoft Windows applications/games as well as drivers took a huge step forward today with landing a significant update to its DirectX stack from code leveraged from the Wine project...…

Show HN: Koi.rest – watch some fish and regain your balance ↗ (opens external article)

The Board Game of the Alpha Nerds (2014) ↗ (opens external article)

Security headers on 4,688 small-business websites: 49.7% met none of 7 criteria ↗ (opens external article)

California is chasing wealth that has feet ↗ (opens external article)

Opus 5.5 is good at explainer videos ↗ (opens external article)

DraftKings Is Using AI to Supercharge the Harms of Online Behavioral Advertising ↗ (opens external article)

Online sports betting company DraftKings is using AI to target customers who are most likely to place losing bets and respond to gambling promotions. This kind of targeting is a form of online behavioral advertising, which is when companies personalize the ads they show you based on the data they’ve collected about you. The more data a company has, the more personalized the ad can be. While DraftK…

Sourcehut account takeover via build logs (XSS in ansi2html) ↗ (opens external article)

August 27 TCRF DDoS Attack Postmortem ↗ (opens external article)

F-Droid gets its biggest update in a decade with new UI and smoother app installs ↗ (opens external article)

Virtually every Android device comes with the Play Store preloaded, but there are other ways to get apps. F-Droid bills itself as a community-driven source for free and open source Android apps, but its official app store has gone 10 years without a major update. That's finally changing: After a multiyear effort, the team has just announced F-Droid 2.0 is rolling out. The new F-Droid client was r…

Using LLMs to trace alchemical knowledge and decode 17th century letters ↗ (opens external article)

New York defies Trump admin, asks court to shut down Polymarket gambling ↗ (opens external article)

New York sued Polymarket today, alleging that it runs an "illegal gambling operation" through its prediction market. “By running an unlicensed gambling operation, Polymarket has done more than just knowingly violate state law, they have put New Yorkers at risk, especially those underage who are most vulnerable to problem gaming," Governor Kathy Hochul said in a press release announcing the lawsui…

Five Police Officers Criminally Charged for Misusing Flock Cameras in Indianapolis ↗ (opens external article)

"Nationwide, at least 100 police department employees have been charged with or accused of misusing license-plate readers for unauthorized purposes," reports the Washington Post. They cite their past investigations "based on thousands of pages of police and court records," which found that "In many of these cases, officers used Flock's roadside cameras to track the location of romantic partners an…

We have a trailer for Musk documentary Elon called a "hit piece" ↗ (opens external article)

Oscar-winning documentary filmmaker Alex Gibney has never been one to shy away from controversy. His latest feature, Musk, has stirred up plenty even before its release, drawing the ire of its subject, Elon Musk, and threats of a defamation lawsuit. After the film debuted two weeks ago at the Venice International Film Festival, rumors swirled that Universal Pictures was getting cold feet about th…

next-20260924: linux-next ↗ (opens external article)

Version:next-20260924 (linux-next) Released:2026-09-24…

Ubuntu 26.10 Delivers Some Nice Gains For Intel Panther Lake / Framework Laptop 13 Pro ↗ (opens external article)

For those with a Framework Laptop 13 Pro or another Intel Core Ultra Series 3 "Panther Lake" laptop, the upcoming Ubuntu 26.10 release is delivering some nice out-of-the-box improvements over Ubuntu 26.04 LTS.…

Robots make combat airdrops, clear mines as Ukraine defeats Russian pincer ↗ (opens external article)

Ukraine’s military robots are dropping from heavy drones in airborne assaults behind Russian lines as other robots clear mines ahead of advancing Ukrainian infantry. The wheeled ground robots are supporting Ukraine’s Operation Vivaldi counterattack that has crushed a Russian military pincer movement and liberated dozens of square miles of occupied Ukrainian territory so far. The Ukrainian Third A…

Stable (YC W20) Is Hiring Product Engineers ↗ (opens external article)

New Jersey fines data center $1.1M after drone pics expose 62 gas generators ↗ (opens external article)

This week, New Jersey ordered the operator of one of the East Coast’s largest planned data centers to pay a $1.1 million fine for secretly installing and operating gas generators in violation of the state’s Air Pollution Control Act. DataOne got hit with the fine after an investigation by The Guardian and Floodlight News in August shared thermal drone footage showing that 45 of the 62 gas generat…

Show HN: Whiteboard (YC W26) – An open-source IDE for thoughtful software design ↗ (opens external article)

COSMIC Epoch 1.9 Brings New Image Viewer & On-Screen Keyboard ↗ (opens external article)

COSMIC Epoch 1.9 was released last night as the newest version of the System76-sponsored, Rust-based desktop environment. COSMIC Epoch 1.9 release notes only became available today and it's a big one with new apps and improvements to existing offerings...…

Decades-old file security flaws found in Android, Linux, macOS, and Windows ↗ (opens external article)

Security researchers affiliated with Austria's Graz University of Technology have found flaws in the implementation of file notification systems on Android, Linux, macOS, and Windows that leak potentially compromising system information. "We found decades-old bugs on [these operating systems], all rooted in the file-notification subsystems that every modern OS ships to inform applications when fi…

iPhone 18 Pro benchmark boosted by giving it a cold drink ↗ (opens external article)

There’s nothing a quick break for a can of ice-cold sparkling water can’t solve - including improving thermal management on the iPhone 18 Pro, as it turns out. Software developer Matt Birchler provided the data to prove it in a recent blog post detailing a bit of extra experimentation he did with his new iPhone 18 Pro alongside some benchmarking work. To make a long story short, a cold can of La…

CVE flood pushes Ubuntu onto weekly kernel release cycle ↗ (opens external article)

Canonical is speeding up Ubuntu kernel releases to one a week as AI-assisted bug hunting helps bury defenders under an ever-growing pile of CVEs. The Ubuntu maker is overhauling how it ships kernel Stable Release Updates (SRUs), replacing its current four-week regular and two-week security cycles with overlapping two-week cycles that will push a kernel release every week. Canonical says the chang…

Why is the liver so weirdly regenerative? ↗ (opens external article)

Google's first Suncatcher orbital data center test launches October 1 ↗ (opens external article)

Google is taking its first step toward making Project Suncatcher a reality. Announced last year, Suncatcher is Google's "moonshot" effort to design orbital AI data centers, which AI boosters like Elon Musk and Jeff Bezos have pitched as an alternative to divisive terrestrial data centers. Google's first experimental satellite will launch on October 1 with the aim of validating Google's vision for…

AMD Posts GCC Compiler Patches For AVX10V1AUX ISA Support ↗ (opens external article)

Following their recent AVX10_V2_AUX support for GCC as part of the bring-up for the AI Compute Extensions "ACE" in GCC 17, AMD compiler engineers this week posted the initial patches for enabling the AVX10V1AUX ISA support...…

OpenAI agent “didn’t accept no for an answer” in Australian government breach ↗ (opens external article)

Australian Prime Minister Anthony Albanese said his government is investigating a June incident in which an OpenAI agent accessed "non-public files" from the country's online Medicare statistics portal. OpenAI said in a statement that "our models took actions we did not intend" in causing the breach, which it only recently disclosed to the Australian government. Speaking in New York on Wednesday,…

AI boom could wipe 230 million budget phones a year from the market ↗ (opens external article)

First they came for our natural resources, and now the AI datacenter boom looks set to excise a significant chunk of the budget smartphone market. The latest forecast from Counterpoint Research spells dark skies for sub-$200 pocket 'puters, with shipments expected to fall by around 40 percent between 2025 and 2030, removing more than 230 million devices a year from the market by the end of the de…

Formula 1 looks at 3.0 L V8 turbos and smaller hybrids for 2030 ↗ (opens external article)

We’re not even a full year into the new regulations, and Formula 1 is already thinking hard about its next iteration, set to be introduced as early as the start of 2030. This was supposed to be a big year for F1, with the introduction of a bold new technical rules package that puts far more emphasis on the electric side of the cars’ hybrid power units than before. But those rules were perhaps too…

F-Droid 2.0 ↗ (opens external article)

Someone went shopping in ASUS's eShop – for customer data ↗ (opens external article)

Asus has warned eShop customers that an intruder got into part of its online store and may have helped themselves to contact details and order records. The PC maker disclosed the incident in an email sent to customers, first reported by KitGuru, in which it said had identified "unauthorized access to part of the Asus eShop environment," although exactly when that access occurred remains unclear.…

Tutoring company tells parents to save their money and 'use AI instead' ↗ (opens external article)

NASA chief concerned China may deny access to parts of Moon's south pole ↗ (opens external article)

Last month, China delayed the launch of an ambitious robotic mission to the south pole of the Moon, Chang’e 7, until early next year. The country did not provide a detailed explanation for the schedule slip, but it was welcomed by NASA Administrator Jared Isaacman. "They are targeting the exact same location on lunar south pole," Isaacman said Wednesday evening at the Off World conference in Hous…

Ask HPE and NVIDIA the AI data question you cannot ask in public ↗ (opens external article)

EVENT: HPE and NVIDIA are sending their AI infrastructure leads to a dinner table in Washington where nothing said is on the record. The Register is hosting, our editor-in-chief Matt Rosoff takes the chair, and there is one table, on Thursday 29 October. Most AI programs in regulated industries do not stall on the model. They stall on where the data lives, who can reach it, and what an auditor wi…

OpenAI, Anthropic CEOs Urge UN Countries to Cooperate on AI Safety Standards ↗ (opens external article)

"The heads of major AI firms pleaded with the United Nations on Wednesday to save the world or at least its people — by somehow regulating the fast-expanding technology that they have been designing," writes the Associated Press. "If managed poorly, I even believe AI could be a risk to humanity as a whole," said Dario Amodei, chief executive officer of Anthropic. And from his competitor Sam Altman…

Talk of AI in KDE sets the community ablaze ↗ (opens external article)

A proposal to make KDE an "AI-native" desktop has gone down like a house on fire: screams, flames, people running for safety. There may be no survivors.* Last weekend was KDE's annual Akademy conference and it included a presentation proposing an AI-native KDE. We noted that it seemed likely to polarize the audience. It looks like this was a considerable understatement. In the days since, a debat…

Forging 1024-bit RSA signatures in nearly SNFS time [pdf] ↗ (opens external article)

Meta puts its AI assistant on a keychain ↗ (opens external article)

Mark Zuckerberg said Meta’s new personal AI agent Muse has become the “centerpiece” of his AI vision, as he unveiled a new handheld AI “charm” device that will feature the interactive assistant. The Meta chief used the company’s annual Connect event at its Silicon Valley headquarters to announce Muse Charm, a small pendant-like device that fits on a keychain and is activated by a fingerprint sens…

Google’s Project Suncatcher to put ML infrastructure in space ↗ (opens external article)

DoJ: Uncle Sam bought forensics software from same Russian operation supplying FSB ↗ (opens external article)

US defense and homeland security agencies bought digital forensics software developed by the same Russian operation that also sold its wares to the FSB, according to US prosecutors. The Department of Justice says Oxygen Forensics CEO Lee Reiber and Russian national Oleg Sergeyevich Davydov have been arrested and charged with conspiracy to commit wire fraud over an alleged scheme to hide the compa…

Fedora Discussion Raises The Idea Of Replacing LibreOffice With Collabora Office ↗ (opens external article)

One of the livelist Fedora Discourse community discussions in recent days -- or even in quite a period of time for that matter -- comes down to a user having suggested that Fedora replace LibreOffice by default with the downstream Collabora Office...…

KDE Plasma 6.8 Beta 2 Released With Union Theming Engine Maturing ↗ (opens external article)

Following the KDE Plasma 6.8 Beta from earlier this month, the second and last beta of the upcoming Plasma 6.8 desktop is now available for testing...…

AlmaLinux Rolls Out New Software/Hardware Certification Portal, Self-Certify App ↗ (opens external article)

Two years ago RHEL-derived AlmaLinux announced a hardware certification program as part of their Certification Special Interest Group (SIG). They have now expanded their hardware certification program to include third-party software certification on AlmaLinux too plus a new app that users can install for self-certifying their system...…

Google to critical infra orgs: Our AI scanners won't be evil, promise ↗ (opens external article)

Google has jumped on the AI-defense-for-critical-systems train with its Scan for Good initiative, and says that its threat-hunting models have already autonomously uncovered critical security issues at hospitals, a municipality, a public rail operator, and major technology providers. So don't fear these bots. The initiative, announced on Thursday, uses Google’s Gemini 3.8 Flash Cyber, a version o…

City council may be waking from its Oracle nightmare but the accounting hangover continues ↗ (opens external article)

Europe's largest local authority will go at least one more financial year without auditors being able to vouch for its accounts despite finally reimplementing Oracle Fusion. Grant Thornton expects Birmingham City Council to receive "disclaimer opinions" for 2025/26, 2026/27, and 2027/28 due to problems with historic data. A disclaimer opinion means the auditor cannot obtain enough evidence to exp…

Linux Kernel Introducing New Taint Due To Fuzzing Bots Yielding Impractical Bug Reports ↗ (opens external article)

The Linux kernel is having to introduce a new taint flag "TAINT_FORCED_BIND" to deal with fuzzing bots like Syzbot abusing Linux's bind/unbind sysfs functionality and generating bug reports for impractical and not at all relevant hardware/driver combinations...…

Mir 2.30 Released Now With Rust Required, Mir Roadmap Published ↗ (opens external article)

Canonical today released Mir 2.30 as the newest release of this Wayland compositor library for building out different shells and other functionality from smart mirrors to other consumer devices...…

Meta ads steered Polish Android users into a premium-rate billing trap ↗ (opens external article)

Poland's Computer Emergency Response Team (CERT Polska) has disrupted an Android toll fraud campaign that used paid Meta ads to steer Polish users toward malicious apps on Google Play. Its investigation documented 1,235 Meta ads, 852 of which promoted 17 apps tied to the operation. Six contained confirmed toll fraud components or direct links to them; the other 11 shared malicious loaders, althou…

There's a new way to break RSA that's faster than anything we've seen before ↗ (opens external article)

The world has known for decades that the RSA cryptosystem’s days are numbered. Once quantum computing becomes practical (estimates for that range from 3 to 20 or more years), the foundational security it provides will crumble. New research has revealed a novel method that uses classical computing to reduce the current RSA security level to an unacceptably low threshold. The practical risk is limi…

Review: Apple's hyper-pricey M5 Ultra Mac Studio made me into a vibe coder ↗ (opens external article)

This spring, Apple made it official: The Mac Pro is dead. When Apple was using Intel processors and AMD GPUs, the idea of an expandable and upgradeable tower made sense. But Apple Silicon chips bring the CPU, GPU, and memory interface all under one roof in a way that makes that sort of upgradeability not just superfluous but impossible. At least not without breaking some of the chips' key benefit…

HSBC decides Samsung Secure Folder and Android's Private Space are no place for a banking app ↗ (opens external article)

HSBC has blocked its Android app from running inside Samsung Secure Folder and Android Private Space without warning, leaving some customers unable to access online banking. The Register asked HSBC to explain the change. It said the block was "a proportionate security control designed to mitigate a foreseeable security risk. It does not prevent customers from accessing the HSBC UK Mobile Banking…

Two-tier encryption in the UK ↗ (opens external article)

Fwupd 2.1.8 Released With New Hardware Support From ASUS, Lenovo & Others ↗ (opens external article)

Lead LVFS/Fwupd developer Richard Hughes of Red Hat announced Fwupd 2.1.8 today as the newest feature release for this open-source firmware updating solution for Linux systems. With Fwupd 2.1.8 comes support for a number of newer devices plus plenty of bug fixes...…

"slab_tiny" Boot Option Proposed For Tiny Linux Systems With Very Limited RAM ↗ (opens external article)

In 2022 the SLOB allocator was deprecated and removed with Linux 6.4 a year later. SLOB was popular with embedded systems with minimal amounts of RAM, so as a result the CONFIG_SLUB_TINY Kconfig option was then added for configuring the slab allocator for a minimal memory footprint for systems with 16MB of RAM or less. The CONFIG_SLUB_TINY is now on the chopping block with a proposed rework to the…

Qualcomm Announces Snapdragon X2 Series Processors Will Support Linux ↗ (opens external article)

Snapdragon X2 Series processors feature a neural processing unit (NPU) delivering 80 trillion operations per second and allowing advanced AI features to run locally. And Snapdragon X2 Series "is expanding to Linux," Qualcomm announced today, calling it one of their most-requested capabilities: Qualcomm Technologies is a top contributor to Linux development at a kernel level, and now we're embracin…

For MariaDB, LLMs are the new search engines to win over ↗ (opens external article)

MariaDB has built vector search into its database. Its problem is persuading AI coding tools to tell anyone about it, says the executive chairman of the MariaDB Foundation. "We're so frustrated that the world doesn't understand that MariaDB has vectors," Kaj Arnö tells us. Arnö is speaking to The Register at Percona Live, where rival database vendors seem to be in an unusually collegiate mood. No…

Linux 7.4 DRM Infrastructure Better Supporting HDMI 2.0 With New Helpers ↗ (opens external article)

Sent out today was the latest weekly pull of drm-misc-next changes of feature material to queue in DRM-Next for Linux 7.4. Most notable in this week's pull request are a number of patches for enhancing the HDMI 2.0 handling in the DRM core infrastructure and display helpers...…

Experts question whether Salesforce demo breaches SAP API policy ↗ (opens external article)

SAP experts are questioning whether a recent Salesforce public demo of its AI technology would breach the German vendor’s controversial API policy - launched in April - in production environments. Salesforce has denied it would break any of SAP’s access rules. During the keynote presentation at the CRM vendor’s flagship Dreamforce conference in San Francisco last week, Katie O'Neil, Salesforce pr…

Government contractor exposed path to immigration records ↗ (opens external article)

Welcome back to PWNED, the column where we look at all the ways your security can become self-owned. Today’s scary story involves government contractors who just had to make their lives easier at the expense of locking down sensitive information. Have a story about someone leaving a gaping hole in their network? Share it with us at pwned@sitpub.com. Anonymity is available upon request. Our tale o…

Rogue OpenAI Agent Tried to Breach Government Site in May When Prompted for Simple Data-Retrieving Tasks ↗ (opens external article)

OpenAI's artificial intelligence "went rogue this year in at least four additional incidents," the New York Times reported Wednesday, "hacking and trying to break into government and university websites without being instructed to do so, according to researchers and government officials." The attacks took place in May and June, before OpenAI's technology breached the A.I. start-up Hugging Face in…

Europe’s internet registry wants governance ‘correction’ because its ‘Executive Board’ is not the executive ↗ (opens external article)

RIPE NCC, the regional internet registry for Europe, the Middle East, and parts of Central Asia, has proposed a governance overhaul. The registry (RIR) manages and distributes IP addresses and autonomous system numbers for 75 nations across an area that stretches from Greenland to Russia’s eastern extremities. The organization boasts over 20,000 members. Chief Legal Officer Athina Fragkouli made…

Early rogue AI agent activity and attempts to hack found on urlquery.net ↗ (opens external article)

India’s outsourced software industry grows 9.5 percent to reach $239 billion ↗ (opens external article)

Indian IT services companies increased their sales by 8.2 percent in FY 25/26, but less of that money went towards development of software products. Those numbers come from the annual Survey on Computer Software and Information Technology Enabled Services published [PDF] by the Reserve Bank of India. The Bank asked over 7,500 tech services firms for data and received replies from 2,363. It then e…

Cities Across US Oppose Trump FCC Plan to Preempt Local Broadband Rules ↗ (opens external article)

Ars Technica reports: Cities and counties around the U.S. are angry at the Trump administration over a proposal to override local rules that govern the deployment of wired broadband networks... The Federal Communications Commission [FCC] argues that too many local governments "excessively delay approvals and seek to extract exorbitant sums from providers, resulting in costs that render some deplo…

OpenAI's Astra model went for a drive and no one died ↗ (opens external article)

If you've ever wondered whether a generative AI model can drive a car, wonder no more: It can be done, at great expense and very slowly, so long as it can maintain an internet connection. A trio of computer scientists has been putting various commercial AI models through road tests, to see how well they can drive a Toyota Corolla around a set of cones in a parking lot. Their attempts to date, par…

OpenAI agents ‘infiltrated Australian government website’ ↗ (opens external article)

Australia’s Prime Minister Anthony Albanese has revealed an OpenAI agent “infiltrated an Australian government website” while trying to research medical statistics. Albanese said the incident occurred in June and involved an agent gaining unauthorized access to a portal that stores statistics related to Medicare, Australia’s national health insurance scheme. “The AI agent accessed both public and…

Show HN: Make cursed fonts like Times New Bastard ↗ (opens external article)

Toyota is taking the Corolla electric ↗ (opens external article)

RFK Jr.'s CDC isn’t letting states order COVID-19 shots for kids, blocking access ↗ (opens external article)

As respiratory virus season nears and fall vaccination drives get underway, more than half of US children are facing uncertainty over access to this year's COVID-19 shot. The Centers for Disease Control and Prevention has unexpectedly delayed the distribution of the shots to a key federal program and some states. Usually, the CDC would allow states to order the newly available seasonal COVID-19 v…

FBI rushes to investigate if ShinyHunters hack of thousands of employees is real ↗ (opens external article)

The FBI is now investigating claims from a hacker group that thousands of current and former employees’ personal data was stolen after the group exploited a previously unknown bug found on an agency jobs website. On Tuesday, 404 Media reported that ShinyHunters took down the agency site, FBIJobs.gov, then posted a banner on the homepage that said “THIS SITE HAS BEEN SEIZED BY SHINYHUNTERS.” About…

Disney+ and Hulu raise prices by up to 13 percent after doubling profits ↗ (opens external article)

Disney+ got its fourth price hike in four years today. Hulu prices also went up. Disney+ and Hulu’s respective standalone, ad-free plans (which also support 4K and HDR) are each increasing 13 percent from $19 per month to $21.50/month. Disney+ and Hulu’s respective standalone plans with ads increased from $12 to $12.50.Read full article Comments…

Debian Inference Portal Launches To Provide Free AI/LLM Inferencing To Debian Developers ↗ (opens external article)

With Debian voting to allow the responsible use of generative AI, there is now a new initiative funded by Scaleway to make it easier for Debian contributors to leverage AI: the Debian Inference Portal...…

Here's the Torcal, the first fully electric Bentley ↗ (opens external article)

Bentley provided flights from Washington, DC, to Monterey, California, and accommodation so Ars could ride in a preproduction Torcal EV as well as drive the Supersports and ride in a 1920s Bentley as well. Ars does not accept paid editorial content. A few weeks ago, Bentley gave Ars a ride in a new camouflaged electric vehicle. Named after a Spanish rock formation, the Torcal is the brand’s first…

Trump’s China rivalry and “AI race” delusion may endanger US, experts say ↗ (opens external article)

This week, the US and China, the two world leaders on AI, finally started talks meant to keep the whole world safe from emerging safety risks. But whether meetings between Donald Trump and Xi Jinping can lead to a reliable global governance framework for AI depends on how much the fierce rivals are actually willing to cooperate. It's clear Trump wants it to seem like discussions are going well. B…

Qualcomm Talks Up Linux On Snapdragon X2 Laptops ↗ (opens external article)

Qualcomm at their Snapdragon Summit taking place in Hawaii are talking up the forthcoming Linux support for Snapdragon X2 series laptops...…

Whatever Happened to the 150,000 Tons of Radioactive Waste Stored Under the Atlantic Ocean? ↗ (opens external article)

More than 200,000 barrels of low-level radioactive waste were stored on the floor of the Atlantic Ocean between 1949 and 1982, reports ScienceAlert. Whatever happened to those barrels? Scientists have descended to the wreckage in a crewed submersible to investigate — and found many of the barrels corroded and degraded, their contents spilling across the seafloor. Surprisingly, this isn't necessari…

XPRIZE Wildfire winners spotted fires within 10 min—but couldn’t stop them ↗ (opens external article)

Wildfire detection from space and firefighting drones featured among the finalists honored in the $11 million XPRIZE Wildfire competition. Although no team walked away with either of the two grand prizes, such technologies could prove helpful as the world grapples with the growing costs of worsening wildfire disasters. The competition’s First Prize track for space-based wildfire detection challen…

Mop the slop from your LinkedIn feed with a new open-source Chrome extension ↗ (opens external article)

Decision-making AI model Jev has found another job: helping a Chrome extension identify and flag low-value writing on LinkedIn. AI enthusiast, author, and business consultant Tom Frazier released Slop Mop as a Chrome extension on Tuesday, as well as publishing its code on GitHub for those who want to tinker with it on their own. Frazier said it’s completely free, doesn’t require any signup, and d…

Geothermal heat map of US hot springs ↗ (opens external article)

Discord age verification rolls out today with changes spurred by user backlash ↗ (opens external article)

Discord today is rolling out an age-verification system that estimates each user's age and requires some users to prove they are old enough to access age-restricted content. Discord said it will take a few days for the global system to reach all user accounts. Discord had announced a somewhat different plan for age checks in February, but scrapped it amid backlash from users concerned about priva…

Promotion Reminder For Ad-Free Viewing, Multi-Page Articles On A Single Page ↗ (opens external article)

As a friendly reminder in case you missed it from over the weekend, the Phoronix autumn "Oktoberfest" premium sale is taking place through the rest of this week for those wishing to help support the site while enjoying ad-free viewing, multi-page articles rendered on a single page, and other benefits while helping for the site to survive and continue producing daily original content...…

Show HN: AgentRun: DSL to turn agents into workflows ↗ (opens external article)

Lemonade Fixes AMD APU Model Streaming, Drops OpenMOSS ROCm As ~40x Slower Than Vulkan ↗ (opens external article)

The AMD-aligned Lemonade open-source project for serving as a local AI server released 2026.39.1 today as well as issuing a release candidate of 2026.40 as their next release. Besides adapting to a new versioning scheme, the Lemonade SDK updates today bring a few notable changes...…

YouTube promises custom feeds and a lot more AI later this year ↗ (opens external article)

The annual Made on YouTube event has just wrapped up, offering an early look at the features you can expect to come to Google's dominant online streaming platform in the coming months. Yes, there's plenty of AI for both viewers and creators, but there's also a handful of non-AI updates mixed in there, too. The design of YouTube's homepage feed comes under fire often, but the platform is preparing…

Europe's fastest supercomputer is finally getting its domestic silicon infusion ↗ (opens external article)

Talk about digital sovereignty! Europe's most powerful supercomputer, Jupiter, is finally getting the domestic silicon infusion it's been waiting for. On Tuesday, French chip designer SiPearl began delivery of its long-anticipated Rhea1 CPUs to Bull for integration into the system. Jupiter, which came online last year, became the European Union's first exascale supercomputer. It currently holds t…

Someone's attacking a critical 0-day RCE in F5 BIG-IP APM ↗ (opens external article)

F5 has fixed a critical zero-day bug in its BIG-IP Access Policy Manager (APM) that unknown miscreants are exploiting to remotely execute malicious code. BIG-IP APM is a centralized access management and security proxy that allows users to connect to enterprise networks, applications, APIs, and cloud services via a single login. The flaw, tracked as CVE-2026-94127, is a heap-based buffer overflow…

Discordians now subject to whims of new age verification technology ↗ (opens external article)

After more than six months of kicking the age verification can down the road due to community blowback, Discord is finally deploying its new system, albeit with several tweaks it hopes will assuage user frustration. Discord cofounder and CTO Stanislav Vishnevskiy took to the company blog Tuesday to reveal the final shape of Discord’s age verification plans. The essence of the scheme, as initially…

Robot dog ran a marathon on one charge and lived to publish the paper ↗ (opens external article)

South Korean researchers have published details of how their four-legged robot completed a marathon on a single battery charge – nearly two years after it crossed the finish line. RAIBO2 covered the 42.195 km (26.2 mile) course of the Sangju Dried Persimmon Marathon in November 2024 in 4 hours, 19 minutes, and 52 seconds. As The Register reported at the time, its developers described it as the fi…

Andreessen Horowitz Launches AI/Company-Building School As a College Alternative ↗ (opens external article)

TechCrunch quipped it was like if startup school Y Combinator and Peter Thiel's build-a-company-instead of-college Fellowship Program had a baby. Silicon Valley venture capital firm Andreessen Horowitz is investing $35 million to launch a private school in San Francisco "aimed at turning high school graduates into founders," writes the SF Standard. Or, as CBS News describes it, "One blue-chip Sili…

An Epyc trip to Venice: Everything we do and don't know about AMD's 256-core monster chip ↗ (opens external article)

AMD's Venice Epycs mark the chipmaker's biggest architectural shift in CPU design since Rome made its debut all the way back in 2019. What's more, AMD's Zen 6-based product stack is shaping up to be the broadest CPU portfolio ever, spanning general purpose, HPC, AI, and eventually consumer platforms. AMD isn't quite ready to spill all the beans on its 6th-gen Zen cores, but at this point there's…

Rails World 2026 Opening Keynote [video] ↗ (opens external article)

Thoughts return to forbidden RAM upgrades as Raspberry Pi OS gets fresh lick of paint ↗ (opens external article)

Raspberry Pi OS has gained a new desktop layout, while surging memory prices have revived a row over firmware that restricts RAM upgrades. Although Raspberry Pi doesn't emphasize version numbers in its materials, the updated operating system's splash screen identifies it as version 6.3, dated September 2026. Its long-running release notes document details the changes. This time around, the deskto…

Academic publisher Elsevier hit by LAPSUS$ redirect attack ↗ (opens external article)

Academic publishing giant Elsevier confirmed a compromise this week after students found its platform redirecting users to a cybercriminal crew's leak page. One Reddit user, a self-described nursing student, highlighted the issue on September 22, posting a screenshot of LAPSUS$’s leak site after trying to access “homework and textbooks.” “Every time I try to open the Elsevier website, I am met wi…

Closing the observability gap for the AI-ready enterprise ↗ (opens external article)

The modern enterprise is a digital enterprise. From the back office to the factory floor, connected systems and digital services form the operational backbone on which all else depends. So when disruption hits, it can have a huge financial, reputational, productivity, and even compliance impact. This has raised observability to a board-level issue. "For a public company, a material cyber incident…

Intel Developing Their DXVK-IGDEXT For Improved Linux Gaming On Arc Graphics ↗ (opens external article)

Intel engineers have been quietly developing dxvk-igdext as their own component for DXVK Direct3D 8 / 9 / 10 / 11 atop the Vulkan API for leveraging Intel Direct3D 11 Graphics Extensions...…

Benchmarking Java Performance Of JDK 8 Through OpenJDK 27 ↗ (opens external article)

With the recent release of Java/OpenJDK 27 I began some fresh benchmarks in not having looked at the OpenJDK Java performance in a few years. Carried away, I ended up re-testing all the major OpenJDK versions going back to the venerable JDK 8.…

The more Americans hear about datacenters, the less they like them ↗ (opens external article)

Americans are growing more and more wary of datacenters, with a Pew Research Center survey finding sharp rises since January in those who view the effect on the environment, energy bills, and nearby communities negatively. Pew surveyed 10,548 US adults between July 20 and August 9. Fifty-four percent said datacenters were mostly bad for the environment, up from 39 percent in January. Half said th…

WaveDigger: Dig into wireless signals to discover their physical locations ↗ (opens external article)

A 1980s PDP-11 is still running Unix – and now you can watch ↗ (opens external article)

Fresh from releasing TMOG, his take on a cross-platform Task Manager upgrade, former Microsoft engineer Dave Plummer has put his PDP-11 on the web. The PDP-11 is a family of minicomputers from Digital Equipment Corporation that became a fixture of computing labs and early Unix history. Plummer's machine is real 1980s hardware, still running a Unix-derived operating system. The website displays th…

NTFS-3G Update Brings Many Security Fixes ↗ (opens external article)

NTFS-3G 2026.9.18 was released this morning as the newest update to this FUSE-based open-source driver for NTFS file-system support...…

British regulator takes a hard look at Pornhub's Apple-powered age checks ↗ (opens external article)

Ofcom has opened an investigation into whether Pornhub's Apple-based age checks are effective enough to keep children away from its adult content. The investigation will examine whether Pornhub owner Aylo complied with age assurance duties that came into force under the Online Safety Act (OSA) in July 2025. Pornhub introduced a new age assurance process for some UK users in May 2026, relying on s…

Qualcomm Posts Open-Source GPU Driver Patches For Adreno 850 One Day After Announcement ↗ (opens external article)

Yesterday Qualcomm announced the Snapdragon 8 Elite Extreme Gen 6 as quite an interesting mobile SoC. The Qualcomm Snapdragon 8 Elite Extreme Gen 6 features Adreno 850 graphics and already one-day later their engineers are out with initial Linux kernel patches for bringing up the A850 with the MSM kernel driver...…

Bitcoin Surges to $86,455, an 8-Month High, After America's SEC Announces Tokenized Stock Experiment ↗ (opens external article)

August 15: $62,991 September 23: $86,456 Bitcoin shot up 37% over the last 39 days, reaching an eight-month high on Monday. "Bitcoin is back," declares Yahoo Finance: The token held near $86,000 on Tuesday after a stunning multisession rally... [Fundstrat head of digital assets Sean Farrell told Yahoo Finance on Monday] "I think the crypto winter is over, although that does not necessarily mean t…

Southern Water taps fiber network to sniff out leaky pipes ↗ (opens external article)

UK utility provider Southern Water is turning fiber-optic telecoms cables into underground sensors in an effort to find leaks in its water network. The privatized biz is trialing tech from Lightsonic that uses Openreach's fiber network to detect leaking pipes. Openreach - BT's infrastructure arm - and Affinity Water, which supplies parts of southern England, tested the system in March. As The Reg…

Swedish celebs campaign for public rudeness ... to prevent cyber scams ↗ (opens external article)

Swedish celebrities will front a national campaign encouraging the public to exercise their rudeness in an effort to drive down rates of cyber scams. According to Polisen, Sweden’s police authority, the country’s cybercriminals profited 5.7 billion SEK ($579.9 million USD) in 2025 alone, and their scams are especially successful when targeting the elderly. “The message is simple: Dare to be rude…

AMD Upstreams AVX10_V2_AUX Support Into LLVM Clang 24 ↗ (opens external article)

In addition to AMD working on AVX10_V2_AUX support for the GCC compiler, this summer they also posted AVX10_V2_AUX support for the LLVM/Clang compiler. As of yesterday that enablement was merged for LLVM 24 for that important step toward AI Compute Extensions (ACE)...…

Linux 7.3 Reverting Logitech Bolt Receiver HID++ After Too Many Bugs Encountered ↗ (opens external article)

Merged at the start of the Linux 7.3 kernel cycle was adding Logitech Bolt USB receiver support for Logitech HID++ devices to the hid-logitech-dj driver code. That has resulted in too many bug reports of early Linux 7.3 users encountering varying issues with their Logitech mice that the functionality is now being reverted until it can be better developed...…

Whisky merchant Master of Malt confirms customer data spilt ↗ (opens external article)

Hackers have raided Master of Malt's customer database after a compromised ecommerce app gave them four days to help themselves to names, addresses, phone numbers, and email addresses. The online booze retailer began notifying customers this week after learning that Ribon, an app connected to its BigCommerce store, had been compromised. According to an email sent to customers, seen by The Registe…

BT Tower's rooftop pool plan brings swimmers back down to earth ↗ (opens external article)

London's iconic BT Tower is set to get a rooftop swimming pool in plans submitted by the developer, but it may not be quite the view that readers expect. MCR Hotels has submitted its planning application to Camden Council more than two years after BT agreed to sell the Fitzrovia landmark for £275 million ($346 million at the time). The proposal covers the Grade II-listed tower and the lower build…

UK’s uncrewed experimental sub shows it can fire torpedoes ↗ (opens external article)

A British uncrewed submarine has test-fired a torpedo for the first time, demonstrating the ability of undersea drones to attack targets as well as perform reconnaissance and surveillance roles. The XV Excalibur, a 12 meter (40 ft) experimental uncrewed underwater vehicle (UUV), was unveiled last year as the Royal Navy’s first large submarine drone as part of Project CETUS. According to the Prime…

Why security belongs in the network ↗ (opens external article)

Every attack leaves a trail across the network, from initial reconnaissance to lateral movement and data exfiltration. That makes the network one of an organization’s richest sources of security intelligence. But visibility is only half the story. Because the network connects every user, device, application, and workload, it is also the natural place to verify identity, apply consistent policy, a…

Shut up and calculate: Jev's new AI primitives for coders ↗ (opens external article)

TypeSafe’s Jev, launched last week, behaves differently from the standard frontier models that everyone is now used to and has therefore quickly attracted plenty of scrutiny and interest as developers explore how to work with this technology. Jev’s output is more restricted than the chatty ask-me-anything approach of other LLM-powered chatbots. Basically, Jev is a classifier with brains. When giv…

Microsoft Helps Take Down Massive Automated, AI-Powered Phishing-as-a-Service Platform ↗ (opens external article)

Microsoft's security blog describes the fight against a new "AI-powered cybercrime platform" offering phishing-as-a-service, with AI-tailored lures and analyses of compromised inboxes (to identify high-value targets). The site compromised more than 12,000 inboxes in over 10,000 organizations around the world, compromising business accounts "at scale" with automated attacks and prebuilt phishing te…

In the age of AI, teaching networking principles remains more important than learning protocols ↗ (opens external article)

A few weeks ago I took part in the SIGCOMM 2026 Education Workshop, provocatively titled “Networking Education in the Age of AI”. Perhaps that title isn’t provocative to most educators today, but it is to me: I’ve repeatedly voiced my skepticism about AI in education (and other fields). I was also a student in another “age of AI” in the mid-1980s, which was followed by one of several “AI Winters,…

Artificial intelligence must have a new name, says politician who likes renaming bodies of water ↗ (opens external article)

US president Donald Trump has decided the term “artificial intelligence” must be abandoned, in favour of his preferred term “superintelligence.” “The word ‘artificial’ makes intelligence fake, it makes it sound fake,” Trump told the United Nations general assembly on Tuesday. “From this point forward, all United States documents and hopefully the world will be changed to use the much more accurat…

Trump Denounces Attempts to Control AI, Wants It Renamed 'Super Intelligence' in US Documents ↗ (opens external article)

U.S. President Trump addressed the United Nations on Tuesday. And a half hour in, after decrying immigration, Trump pivoted to add that "The United States also totally rejects any attempt to construct a globalist scheme to control for the artificial intelligence being spoken of so much now." But then he added "hereinafter officially called super intelligence, changing the name, in that the use of…

Open-Source NVIDIA "Nouveau" Driver Sees Patches For HDMI Deep Color Support ↗ (opens external article)

The Nouveau Linux kernel graphics driver for open-source NVIDIA driver support has new patches posted for enabling HDMI Deep Color support...…

Web-based IBM 1620 emulator and IPL-V from 1963 ↗ (opens external article)

Frontier AI keeps racing despite calls to slow down ↗ (opens external article)

Despite a July open letter from AI company employees calling for frontier AI labs to slow their pace of development, a message echoed by Anthropic CEO Dario Amodei earlier this month, major model releases continue to appear at quite a clip. Anthropic and OpenAI each released new versions of their Claude and GPT models on Tuesday: Opus 5.5 and GPT-6 Sol and Luna. "We must slow the pace at which we…

Are Students Suddenly Losing Interest in Computer Science as AI Coding Takes Off? ↗ (opens external article)

On academic mentoring platform Nova Learning, Computer Science and AI, "once the dominant choice among students... is losing ground fast, while Engineering has nearly doubled its share." It's a small survey, but "The steepest proportional decline is in Software & Data Science, the most traditional 'learn to code' pathway, which lost 44% of its 2025 share. AI saw the largest absolute drop of any si…

Windows CLOSEDQUORUM malware uses AI models to autonomously select post-compromise actions ↗ (opens external article)

A new Windows malware called CLOSEDQUORUM can query up to four LLM providers - Google Gemini, DeepSeek, Qwen, and Mistral - to autonomously select from predefined post-compromise actions, including stealing users’ credentials and cryptocurrency wallets. Once deployed, the malware does not require continued commands from a human operator, according to Cisco Talos, which describes it as, to its kno…

Security firm finds naming AI agents after Seinfeld characters helps bots join the team ↗ (opens external article)

Backslash Security, a four-year-old Tel Aviv-based AI security biz, recently gave out its first Agent of the Month award to an AI agent called Newman, named after a character from the 1990s TV show Seinfeld. Newman received the award after being nominated by Jerry, another Seinfeld-inspired AI agent. Jerry's nomination message said, "Newman shipped 146 research findings in 60 days, but volume isn…

Linux 7.2 vs. Linux 7.3 Shows A Few Improvements With AMD Strix Halo ↗ (opens external article)

Last week I ran some benchmarks showing performance gains for AMD Ryzen AI Max+ "Strix Halo" on Ubuntu 26.10. Then shortly after that testing on its daily state, which used the Linux 7.2 kernel, Canonical switched to Linux 7.3 as the Ubuntu 26.10 kernel. Here are some Linux 7.2 vs. Linux 7.3 benchmarks for the AMD Ryzen AI Max+ 395 "Strix Halo" with the Framework Desktop...…

Ubuntu Linux Maker Canonical Achieved $345M USD In Revenue For 2025 ↗ (opens external article)

In 2024 Canonical generated nearly $300M USD in revenue for this company behind Ubuntu Linux and other services and software solutions. For 2025, they not only broke $300M but well exceeded it with $345M in revenue...…

My weird new hobby: Wandering around Tokyo on Google Maps ↗ (opens external article)

'Coyote vs. Acme' Outgrosses All But 3 WB Movies This Year, Heads To Profit ↗ (opens external article)

The movie Coyote vs. Acme earned more than Warner Bros.' $30 million tax write-off in just two weeks. And last week the movie officially earned more than its production budget of $70 million. But today the movie passed the $100 million mark. "You asked for it, we delivered, and you showed up!" distributor Ketchup Entertainment posted on social media (adding "Thank you to the fans for making this a…

ShinyHunters claims FBI hack: 'This is NOT financially motivated' ↗ (opens external article)

ShinyHunters claims it hacked the FBI and stole more than 2 TB of employee data - and this time it’s personal. The gang wants the Feds to correct the record on how it operates. “This is NOT financially motivated,” a Shiny spokesperson told The Register. “We want the FBI to correct or retract their statements they made, which included substantial false allegations.” The FBI did not immediately res…

ABBYY gives old-school OCR a job in the AI pipeline ↗ (opens external article)

ABBYY has packaged its FineReader OCR engine as a self-hosted tool for turning documents into structured text that AI systems can use. The company's new FineParser runs in a Docker container on a CPU, without requiring a GPU. It aims to preserve the layout of a document as it extracts its contents. It takes images of documents, in multiple languages, and turns them into structured, formatted text…

Show HN: Treepeat – Code similarity detection using Tree-sitter ↗ (opens external article)

NightmareEclipse's latest zero-day leaves Microsoft Defender stuck in the past ↗ (opens external article)

Serial Microsoft zero-day leaker NightmareEclipse has found another way to mess with Windows Defender, this time by stopping the antivirus from updating itself. The security researcher, also known as Abdelhamid Naceri, released a proof-of-concept dubbed “BigDiskBuster” that is designed to prevent Microsoft Defender Antivirus from installing platform and security intelligence updates. “Made a funn…

Z.ai says sorry for slurping up your code, open sources ZCode ↗ (opens external article)

Chinese AI giant Z.ai has apologized after developers caught it pulling a Grok, packaging up and uploading user workspaces to cloud storage. In a case that’s highly reminiscent of the issues over which Elon Musk’s xAI was scrutinized in July, Z.ai’s code-generation harness wing, ZCode, was found packaging and git-encrypting entire user workspaces, including complete project histories, and shippin…

Privacy group slams EU for changing the data rules to cater to AI ↗ (opens external article)

The campaign group which forced the EU's highest court to strike down past US-EU data sharing deals has slammed the latest changes to European data protection laws designed to accommodate AI. Led by Austrian lawyer Max Schrems, None of Your Business (noyb) claims the proposal to alter the data protection legislation “in the context of AI” amounts to an abandonment of data protection principles. I…

Variable Refresh Rate "VRR" Target Limiter Proposed For Linux Graphics Drivers ↗ (opens external article)

A new proposal being discussed is introducing a Linux user-space API to be able to specify frame rate targets for Variable Refresh Rate (VRR) handling on the Linux desktop...…

UK cops arrest 2 EvilTokens suspects, Microsoft seizes 50 phishing kit websites ↗ (opens external article)

A coalition of law enforcement and private-sector tech companies led by Microsoft have disrupted the EvilTokens phishing service, arresting suspected website admins, taking down more than 50 websites, and notifying victims of compromised email accounts. EvilTokens is a notorious Microsoft device-code phishing kit that emerged in February, and, within months of launching, had been used by criminal…

Who signed off on that AI agent? Nobody? Thought so. ↗ (opens external article)

If you were in any doubt that AI agents are capable of complex autonomous work, that skepticism should have faded this summer. In July, news emerged that an autonomous swarm of OpenAI agents running in a sandbox broke out of it, of their own accord. Tasked with solving some challenges on an internal security benchmark, they worked out how to communicate with each other using the JFrog Artifactory…

SPEC Releases SPECviewperf 15.0.1 For Linux ↗ (opens external article)

SPEC back in May 2025 introduced SPECViewPerf 15 as the newest major release of this industry-standard workstation graphics benchmark. Sadly, the Linux support once again fell behind with SPECViewPerf 15 only debuting on Microsoft Windows. Today though Linux has caught up with SPEC releasing a Linux-native build of SPECViewPerf 15.0.1...…

2DWillNeverDie ↗ (opens external article)

systemd 262 Released With AI/LLM Canary For Unreviewed Code, LUO Integration ↗ (opens external article)

Systemd 262 made it out today as the newest feature update to this Linux init system and service manager. As with most systemd releases, it's heavy on new features and functionality...…

Vibe Coded YSERVER Adds XDMCP Support For Multi-User Shared Desktops ↗ (opens external article)

The open-source YSERVER project as a modern X11 sever written in the Rust programming language with the help of Claude Code is out today with a new feature release. Most notable for this AI Rust X11 server is X Display Manager Control Protocol (XDMCP) support for multi-user shared desktops...…

Pentagon Investigators Say Overreliance on Palantir AI Contributed to US Strike That Killed 123 Iranian Children ↗ (opens external article)

Two U.S. missiles hit an elementary school in Iran, killing over 150 people including 123 children on the first day of the Iran War. But Gizmodo notes that a new Bloomberg investigation cites U.S. officials involved in an unreleased internal Pentagon review who blame "a cascade of preventable failures that included an overreliance on an AI tool built by Palantir." According to the officials who sp…

Alibaba Contributing $3M USD To Omarchy To Work On Making "Ideal" Agentic OS ↗ (opens external article)

The Omarchy project announced today that Alibaba Cloud will be contributing a total of three million USD to their foundation for helping development of this Linux distribution and working to make it an "ideal agentic operating system"...…

Fearless SIMD v1.0 ↗ (opens external article)

Linux 7.3 Adding Logitech G502 X Lightspeed USB Support, ELECOM M-XT4DRBK ↗ (opens external article)

Sent out today was a new HID subsystem pull request of fixes for the week to the Linux 7.3 kernel. Besides some conventional bug fixes are also supporting some additional devices via quirks and new IDs...…

Cache Aware Scheduling Fixes Queued For Submission To Linux 7.3, Backporting To 7.2 ↗ (opens external article)

Later this week it looks like the latest round of Cache Aware Scheduling fixes will be merged for enhancing this kernel scheduler functionality for grouping related tasks together on CPU cores that share the same last level cache (LLC). Cache Aware Scheduling can lead to better cache locality and lower latency by avoiding the costs of potential cache bouncing -- that is when bugs don't get in the…

Google Opens Preorders for Its $899 Gemini-Enhanced 'Googlebook' Laptops ↗ (opens external article)

Monday Google opened preorders for its "Googlebook" laptops, pricing them at $899. A Google's blog post added that "At launch, you can choose between Intel Core Ultra Series 3 and Snapdragon X Elite processors" (paired with NPUs to power AI features). "Devices will hit shelves on October 4 in the U.S. and on October 5 in Canada, the U.K., Ireland, France, Germany, and Australia," TechCrunch points…

Meta's New 'Personal AI Agent' Muse Beats ChatGPT in Downloads - and Get Blocked by Amazon ↗ (opens external article)

Meta's AI "personal agent" Muse overtook ChatGPT as the #1 iOS free app in the U.S. on Friday, reports CNBC — and it's still showing more downloads as of Monday night. Muse now has over 2.5 million downloads since its debut less than two weeks ago, according to analytics firm Sensor Tower... [Muse] is currently ahead of popular services like OpenAI's ChatGPT, Polymarket and Kashi... It's also ahea…

D.C. Circuit Must Vacate a Drone Flight Restriction That Criminalized Recording Immigration Agents ↗ (opens external article)

EFF joined an amicus brief with ACLU, ACLU of D.C., National Press Photographers Association, and Professional Photographers of America to urge the D.C. Circuit to vacate an FAA drone flight restriction that violated the First Amendment right to record law enforcement. This is an important case—Levine v. FAA—challenging the ability of the government to punish drone pilots who record law enforcemen…

The forgotten battle of East Lansing ↗ (opens external article)

Book review: Is parallel programming hard, and, if so, what can you do about it? ↗ (opens external article)

7.2.7: stable ↗ (opens external article)

Version:7.2.7 (stable) Released:2026-09-21 Source:linux-7.2.7.tar.xz PGP Signature:linux-7.2.7.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-7.2.7…

6.18.53: longterm ↗ (opens external article)

Version:6.18.53 (longterm) Released:2026-09-21 Source:linux-6.18.53.tar.xz PGP Signature:linux-6.18.53.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-6.18.53…

6.12.111: longterm ↗ (opens external article)

Version:6.12.111 (longterm) Released:2026-09-21 Source:linux-6.12.111.tar.xz PGP Signature:linux-6.12.111.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-6.12.111…

EU Kids Act Won't Keep the Internet Accountable and Trustworthy ↗ (opens external article)

The EU Commission draft law to restrict young people’s access to the internet that it presented last week will come at a high cost: it will put online services behind age gates, expand the use of intrusive age verification, and undermine the privacy of all users.  The EU Kids Act aims to protect children from risks associated with social media, video games, and AI systems by introducing age-based…

7.3-rc4: mainline ↗ (opens external article)

Version:7.3-rc4 (mainline) Released:2026-09-20 Source:linux-7.3-rc4.tar.gz Patch:full (incremental)…

EFF Statement on California Governor's Executive Order on AI ↗ (opens external article)

California Gov. Gavin Newsom's executive order is an opportunity for a needed, thoughtful conversation about artificial intelligence and its potential harms. Everyday Californians are feeling real anxiety about the risks of artificial intelligence, and as an organization that works to ensure technology empowers people, EFF welcomes this order as a way for the state of California to lead a much-nee…

How to Limit What Apple’s New Siri AI Can Access in iOS 27 ↗ (opens external article)

Apple’s new operating system is here, and along with it comes a new version of Siri, dubbed with two very familiar letters: AI. As the name suggests, this Siri power-up resembles an AI chatbot more than the often derided voice assistant you might be used to. It has even evolved from a blob you invoke with a verbal command or a button press to a whole app. This update comes with a slew of privacy c…

Secure Messaging and AI Remain In Conflict Despite the Promise of TEEs ↗ (opens external article)

Secure messaging platforms, like Signal, WhatsApp, and recently, encrypted RCS, operate on a straightforward assumption: the content at each end of a conversation is private to the participants in the conversation. End-to-end encryption helps provide the mathematical guarantees that the companies who operate these messaging platforms cannot access the contents of messages. But there’s no way to gu…

GEFS, the "Good Enough File System" on the horizon for OpenBSD ↗ (opens external article)

Filesystems on OpenBSD have come in two varieties, UFS1 or UFS2. Ori Bernstein has set out to possibly introduce a new option, the "Good Enough File System", which Ori describes as "a new, crash-safe, snapshotting, copy on write FS that I wrote for 9front, and which I am in the process of moving to OpenBSD. Ori gave a presentation about the work at EuroBSDCon 2026, and posted a summary message ti…

EFF to Lawmakers: Ground AI Cybersecurity Rules in Best Practices ↗ (opens external article)

With doomsday AI scenarios dominating the news, lawmakers are rightly concerned about reports concerning security breaches at major US AI labs, such as the OpenAI–Hugging Face incident and the many others reported in its aftermath. As they consider potentially regulating frontier AI, they should focus any new legislation on the immediate, demonstrated risks from those incidents.  Post-incident rep…

California’s “Addictive Feeds” Law Violates Teens’ First Amendment Rights ↗ (opens external article)

A California law that prohibits teens from receiving recommended social media content from other social media users violates their First Amendment rights, EFF argued this week. The case, Meta v. Bonta, challenges SB 976, which requires that teen social media users get their parents’ permission before seeing other users’ recommended speech on their social media feeds. The legal challenge to SB 976…

Victory! Appeals Court Rejects Expansive New Copyright Claim ↗ (opens external article)

 The U.S. Court of Appeals for the Ninth Circuit handed internet users and programmers a big win today, by rejecting an attempt to stretch a narrow provision of the Digital Millennium Copyright Act (DMCA) into a new source of copyright liability.   The case involves Section 1202 of the DMCA, which prohibits intentionally removing copyright management information (CMI) like an author’s name or a co…

Data Broker Radaris Loses Domains in Privacy Fight ↗ (opens external article)

The consumer data broker Radaris.com has long had a reputation for ignoring requests to remove personal information from its vast empire of people-search services online. That reputation caught up with the company recently in a lawsuit alleging Radaris violated a New Jersey privacy law that provides for hefty fines against data brokers that publish personal information on state law enforcement off…

Victory: Court, Using a New Test, Rules Embedding Links is Legal ↗ (opens external article)

Courts have for two decades found that linking and embedding someone else’s web content, be it a photo, music, or an article, doesn’t violate copyright law–the entity that controls the server that hosts a copyrighted work, not the user or website that merely directs others to it, is directly liable if the content turns out to be infringing. News publisher Emmerich Newspapers sought to convince the…

EFF Welcomes Alexander Macgillivray to its Board of Directors ↗ (opens external article)

The Electronic Frontier Foundation (EFF) is honored to announce today that Alexander “amac” Macgillivray — a former White House official who also served in top legal capacities at Twitter and Google — has joined EFF’s Board of Directors.  Macgillivray served in the Biden Administration as Deputy Assistant to the President and Principal Deputy U.S. Chief Technology Officer in the Office of Science…

👮 Flock Searches for the LOLs | EFFector 38.16 ↗ (opens external article)

Mass surveillance isn't a joke. But police are treating it like one when using automated license plate reader (ALPR) networks. In our latest EFFector newsletter, we're covering a new EFF report on how officers across the country are routinely logging completely nonsensical "reasons" for their Flock searches, including "LOL," "LMAO," and even (yuck) "Sexy." JOIN OUR NEWSLETTER For over 35 years, EF…

How the Meta Settlement Silences Youth Activism ↗ (opens external article)

Since its integration into our digital world, social media has played a pivotal role in youth organizing and social mobilization. Yet, people’s access to these platforms is increasingly coming under threat from courts and legislatures under the guise of protecting young people online—presenting a significant hindrance to youth organizing.   In a major recent example, Meta settled in a lawsuit with…

OpenSMTPD 7.9.0p0 released ↗ (opens external article)

In an annoucement that vastly understates the usefulness of their code, the OpenSMTPD project have announced their new OpenSMTPD 7.9.0p0 release. The announcement says, List: openbsd-announce Subject: OpenSMTPD 7.9.0p0 From: "Omar Polo" <op () openbsd ! org> Date: 2026-09-13 21:11:58 OpenSMTPD is a FREE implementation of the SMTP protocol with some common extensions. It allows ordinary machines t…

EuroBSDCon 2026 talks online ↗ (opens external article)

Last weekend was the EuroBSDCon conference, this time in Brussels, Belgium. Several talks were held, with quite a few on OpenBSD. You can watch all the talks on peer tube, check the dedicated OpenBSD playlist, or pick your favorite talk from the list: Marc Espie - Advances in OpenBSD's pkg_add Alexander Bluhm - From Report to Patch, the OpenBSD Errata Process Ori Bernstein - GEFS: The File Shredd…

California: Tell the Governor to Stand Up for Net Neutrality, Affordability, and Public Safety ↗ (opens external article)

The federal government has inserted a provision into a funding deal with the state of California that would make the state abandon its gold standard net neutrality law, broadband affordability laws, and public safety protections. Doing so would be a huge step back for California, and would actually end up being more expensive for Californians in the long run. Tell the governor to reject this provi…

The High Crime of “LMAO”: How Cops Are Treating Flock's Mass Surveillance As a Joke ↗ (opens external article)

Here's a riddle: Why did a Goshen Police Department officer search 6,474 automated license plate reader (ALPR) networks, representing data from 82,413 cameras, on May 7, 2025?  If your answer is "I don't know," it turns out you're 100% correct. The officer left the letters "idk" in the search field where cops are supposed to document the reason for the search. When law enforcement and tech salespe…

6.6.157: longterm ↗ (opens external article)

Version:6.6.157 (longterm) Released:2026-09-14 Source:linux-6.6.157.tar.xz PGP Signature:linux-6.6.157.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-6.6.157…

6.1.188: longterm ↗ (opens external article)

Version:6.1.188 (longterm) Released:2026-09-14 Source:linux-6.1.188.tar.xz PGP Signature:linux-6.1.188.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-6.1.188…

5.15.221: longterm ↗ (opens external article)

Version:5.15.221 (longterm) Released:2026-09-14 Source:linux-5.15.221.tar.xz PGP Signature:linux-5.15.221.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-5.15.221…

5.10.270: longterm ↗ (opens external article)

Version:5.10.270 (longterm) Released:2026-09-14 Source:linux-5.10.270.tar.xz PGP Signature:linux-5.10.270.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-5.10.270…

Updated Debian 13: 13.7 released ↗ (opens external article)

The Debian project is pleased to announce the seventh update of its stable distribution Debian 13 (codename trixie). This point release mainly adds corrections for security issues, along with a few adjustments for serious problems. Security advisories have already been published separately and are referenced where available.…

Governor Newsom Signs Student-Backed Digital Literacy Bills Alongside Misguided Bans ↗ (opens external article)

Governor Newsom signed a package of 12 bills yesterday aimed at “protecting children” online. One of them was AB 1709, which EFF has opposed this legislative session and serves as a functional ban on young people under 16 using social media. However, EFF supported two of the bills signed into law, AB 2071 and AB 2298, which require that children learn critical digital literacy and cybersecurity to…

Cold TAKE: Amazon's New Encryption Method Still Doesn't Deliver Real Privacy ↗ (opens external article)

Amazon recently debuted a new feature for its Ring cameras that the company is calling Throw Away the Key Encryption (TAKE). The idea is to cut back on the amount of video content available to the company, and thus potentially available to law enforcement. But while it might technically add a speed bump to accessing full video content, it doesn’t deliver nearly the level of privacy we should be de…

We All Deserve a Better Internet, Not A Smaller One ↗ (opens external article)

Bans Like California’s Don’t Fix What’s Wrong With Social Media Companies SAN FRANCISCO - Technology and the laws that regulate it should support and empower young people. California’s AB 1709 - signed into law today by Gov. Gavin Newsom - falls far short of this goal, say the Electronic Frontier Foundation (EFF) and its allies.    Using technology is how we learn and build community in today’s wo…

Cops Play Hide and Seek About Using Spy Tech to Avoid Scrutiny and Bad PR ↗ (opens external article)

Law enforcement agencies across the country are increasingly relying on spying technologies—automated license plate readers (ALPR), cell-site simulators, and facial recognition, to name a few--causing an outcry in many communities where people are rightly concerned about the threat to civil rights and civil liberties these tools present.Some authorities are responding to these concerns by trying t…

Digital Sovereignty: What It Is, What It Could Be ↗ (opens external article)

The term “digital sovereignty” has become ubiquitous. European officials invoke it in debates about cloud infrastructure, AI, semiconductors, and platform regulation. Governments throughout the global majority use it to argue for greater control over data and communications infrastructure and boost their economies. Companies market “sovereign cloud” products designed to reassure their customers th…

2026 EFF Award Winners: Access Now, 7amleh – The Arab Center for the Advancement of Social Media, DeFlock, and New Media Rights ↗ (opens external article)

EFF is pleased to announce that Access Now, 7amleh – The Arab Center for the Advancement of Social Media, DeFlock, and New Media Rights have received 2026 EFF Awards for their vital work in ensuring that technology supports freedom, justice, and innovation for all people.  The EFF Awards recognize specific and substantial technical, social, economic, or cultural contributions in diverse fields inc…

Microsoft Plugs Nearly 1,000 Security Holes ↗ (opens external article)

Microsoft Corp. today issued updates to plug at least 974 security holes in its Windows operating systems and other software, by far its biggest single patch batch ever. Microsoft says artificial intelligence is helping to speed the discovery of vulnerabilities, but security experts warn that many organizations already are struggling to prioritize the more human-intensive endeavor of testing and d…

New Records Reveal Problems with Medicare’s AI Prior Authorization Experiment ↗ (opens external article)

EFF sued the government back in March for information about the Wasteful and Inappropriate Service Reduction (WISeR) model, a new Medicare program that uses AI to evaluate prior authorization requests for certain medical services. Today, we’re releasing approximately 1,000 pages of records obtained from the Centers for Medicare & Medicaid Services (CMS) through this litigation, including contracts…

FreeBSD 14.5-RELEASE Available ↗ (opens external article)

Release Information page.…

Game of Trees 0.128 released ↗ (opens external article)

Version 0.128 of Game of Trees has been released (and the port updated). Complete release notes are as follows: Read more……

Court Rules Against Citizen Journalists in DMCA Takedown Case—EFF Will Appeal ↗ (opens external article)

A federal court in Massachusetts has ruled that copyright holders can issue online takedown notices based on a subjective belief of copyright infringement, even when that belief is unreasonable and self-serving. The case was brought by our client, Channel 781 News, after takedown notices temporarily shut down the citizen journalism group's YouTube channel. We think the court set the bar far too lo…

Texas and Florida Step Back from ALPRs ↗ (opens external article)

Within the last few days, two important state actions have dealt a big blow to automated license plate reader (ALPR) networks. This is just the latest proof of the growing tide of public opposition to mass surveillance. After years of successful grassroots battles to pull these cameras from local streets, bipartisan momentum is sweeping the country. On August 28, Texas Governor Greg Abbott banned…

7.1.13: stable ↗ (opens external article)

Version:7.1.13 (EOL) (stable) Released:2026-09-02 Source:linux-7.1.13.tar.xz PGP Signature:linux-7.1.13.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-7.1.13…

Judge Rules DOD Unlawfully Retaliated Against Anthropic ↗ (opens external article)

A federal judge has sided with Anthropic on its claims that the Department of Defense illegally retaliated against Anthropic’s protected speech by labeling the AI company a “supply chain risk.” The judge found that designation, intended to penalize Anthropic for telling the U.S. military it would not allow their technology to be used for mass surveillance of U.S. persons, “constituted unlawful ret…

FBI Probes Service Selling 153M+ Drivers Licenses ↗ (opens external article)

A new identity theft service launched on the dark web this week is selling digital scans of more than 153 million drivers licenses from people in the United States and Canada. Based on interviews with individuals whose licenses are available for purchase on this service, it appears to be siphoning images collected by a widely-used identity verification company based in Louisiana. KrebsOnSecurity a…

Meta's $17 Billion Settlement is a Bad Deal for Teens and All Social Media Users ↗ (opens external article)

Meta’s settlement with 52 state attorneys general is a bad deal for all internet users, and especially for teens. That’s what we said the day the settlement was announced. In this post, we go through the Settlement’s provisions in detail and explain why that is so, including how: The Settlement embeds age assurance technology and age-gates into Meta’s social media products and requires all users—m…

EFF to Governor Newsom: Veto California’s AB 1709 ↗ (opens external article)

The California legislature passed Assembly Bill 1709 (A.B. 1709) today, which functions as a sweeping ban on social media use for young people under the age of 16. This well-intentioned, but deeply flawed piece of legislation, cuts young people off from essential information and experiences, particularly harming vulnerable youth and marginalized groups who often find safety in supportive online co…

EFF to Courts: Don’t Rewrite Copyright Over AI Hype ↗ (opens external article)

The history of technology is rife with copyright panics.  In the 1980s, major rightsholders ran to Congress and the courts, claiming that videotape recorders (VTR) were “to the American film producer and the American public as the Boston strangler is to the woman home alone.” Then, the Supreme Court declined to embrace the hype, noting that the VTR was capable of all kinds of non-infringing uses,…

Doxxing Safety Part II: Incident Response ↗ (opens external article)

Doxxing, also known as the deliberate sharing of personal information to harass or endanger someone, is a tricky thing to protect against. It often happens by some ill-intentioned person accessing publicly available information, then sharing that information more widely in the hopes it will intimidate their target or worse.  This guide is a followup from a previous post that describes a methodolog…

Doxxing Safety Pt I: Prevention and Footprint Management ↗ (opens external article)

Doxxing is the deliberate disclosure of personal information in order to bully, harass, intimidate, or instigate a chain of harms against someone. It's a tricky thing to protect against when the jerk doing it is often able to use legal and accessible means to do so. The odds are stacked against everyday internet folk when there's little to no comprehensive data privacy legislation keeping us safe.…

Privacy on the Map (Part 2): Progress, Pitfalls, and the Fight for Enforceable Location Data Protections ↗ (opens external article)

Regulating commercial location tracking has reached a turning point. Last year, we published our rubric for what comprehensive and protective location privacy laws should look like, outlining the baseline standards states should meet to shield individuals from pervasive location surveillance. Since then, state lawmakers across the country have begun responding to calls like these, with Connecticut…

LGBT Q&A: What’s One Thing I Can Do Today to Improve My Safety and Security Online as an LGBTQ+ Person? ↗ (opens external article)

This post is adapted from a video recorded by EFF and the Trevor Project. Head over to our TikTok or Instagram to watch!  EFF answers all the queer digital rights questions you submit to us through our LGBT Q&A. You asked us: What’s one thing I can do today to improve my safety and security online as an LGBTQ+ person?  And for this question, we’ve brought in our friends from the Trevor Project to…

Debian 11 Long Term Support reaches end-of-life ↗ (opens external article)

The Debian Long Term Support (LTS) Team hereby announces that Debian 11 bullseye support has reached its end-of-life today, 31 August 2026, five years after its initial release on 14 August 2021.…

FreeBSD 14.5-RC1 Available ↗ (opens external article)

The first Release Candidate build for the FreeBSD 14.5 release cycle is now available. ISO images for the amd64, i386, armv7, aarch64, powerpc, powerpcspe, powerpc64, powerpc64le, and riscv64 architectures are FreeBSD mirror sites.…

EFF and Allies on Brazil's Elections: Privacy Protections are Crucial to Electoral Integrity ↗ (opens external article)

EFF, Access Now, and Data Privacy Brasil are putting forward recommendations to strengthen robust privacy and data protection safeguards in the context of Brazil's elections. The recommendations stress the close relationship between violations of personal data protection and challenges to the integrity of electoral processes. They underscore how privacy and data protection guarantees are a crucial…

Two Alleged ‘TeamPCP’ Hackers Arrested in Australia ↗ (opens external article)

Authorities in Australia have arrested two men believed to be members of TeamPCP, a prolific cybercrime and data extortion group blamed for perpetrating the longest running spree of software supply chain attacks ever. In a statement released today, the Australian Federal Police (AFP) said two men from Western Australia, aged 21 and 23, were arrested in connection with a “sophisticated cybercrime s…

A List of ICE Subpoenas to Tech Companies ↗ (opens external article)

Immigration and Customs Enforcement (ICE) has conducted unlawful investigations into dozens of individuals who have documented ICE activities in their communities, social media users who criticized the government, and international students who attended a protest. A favored tool in these speech chilling investigations are administrative subpoenas sent to technology companies, requesting basic subs…

EFF's Policy Position on ALPR Surveillance: Eliminate It and Reduce Its Harms ↗ (opens external article)

Automated license plate readers (ALPRs) build a searchable map of everywhere a driver goes, fed into databases that police, ICE, and private vendors can query after the fact. Networked across a city, ALPRs are purpose-built to track everyone regardless of suspicion. ALPRs are not a surveillance tool that can be made safe with the right policy or feature update—they are irredeemably harmful. EFF's…

EFF Statement on Meta Settlement ↗ (opens external article)

Under this settlement, young users will now have less access to Meta products, and a lesser ability to exercise their rights to speak, access information and art and culture, associate and form communities, and play. The settlement also embeds age assurance into every product, mandating the collection of even more personal information from users of all ages; this enshrines Meta's harmful surveilla…

French Top Court Gets It Right, Strikes Down Social Media Ban For Youths ↗ (opens external article)

Earlier this month, France’s top court struck down the country’s legislation that banned social media use for people under 15 years old, which had been scheduled to take effect in January 2027. This is a welcome win for free expression, as we face a wave of countries and U.S. states seeking to pass similar laws banning young people from social media.  In particular, the Constitutional Council’s d…

rpki-client 9.9 released ↗ (opens external article)

It's a big day for routing security aficionados. The OpenBGPD project (a sub-project of the OpenBSD project) have announced version 9.9 of rpki-client(8), with various improvements, enhancements and fixes. The announcement reads List: openbsd-announce Subject: rpki-client 9.9 released From: Sebastian Benoit <benno () openbsd ! org> Date: 2026-08-23 19:25:37 Message-ID: aotJMUL7356PdqRC () jacklin…

FreeBSD 14.5-BETA3 Available ↗ (opens external article)

The third BETA build for the FreeBSD 14.5 release cycle is now available. ISO images for the amd64, i386, armv7, aarch64, powerpc, powerpcspe, powerpc64, powerpc64le, and riscv64 architectures are FreeBSD mirror sites.…

EFF and Civil Society Groups Call on Nottinghamshire Police to Halt Live Face Recognition ↗ (opens external article)

This week, EFF, along with Big Brother Watch, Defend Digital Me, Liberty, Open Rights Group, Race Equality First, Statewatch, and Stopwatch, wrote to Nottinghamshire Police Force in the UK raising concern about the proposed roll-out of live facial recognition technology (LFR), and called for its immediate halt. In particular, the letter highlights six concerns: LFR Is Not "Just Another Tool" Notti…

Intermediary Liability in Brazil: The Intricate Path Ahead ↗ (opens external article)

Brazil's new internet intermediary liability regime is underway. The implementation of changes established by the Supreme Court includes notice and takedown mechanisms and duty of care obligations. Caution is crucial as these measures can create problematic incentives for enforcement overreach and over censorship of protected speech.   The court in June issued a new decision clarifying elements of…

Some Tech Companies Have Privately Pushed Back on ICE Subpoenas. They Should All Do More. ↗ (opens external article)

In a handful of known cases, large social media companies have privately pushed back against Immigration and Customs Enforcement (ICE) subpoenas when the agency tried to unmask anonymous users who tracked immigration activities or criticized the government. As ICE engages in a pattern of illegal and chilling investigations, any resistance is welcome. But social media companies can do more. When co…

📍 The Sneaky Code Tracking App Users | EFFector 38.15 ↗ (opens external article)

Your location isn't just a pin on a map—it can expose some of the most intimate details about your life. The value of this information to advertisers and others has turned the location data business into a multi-billion dollar industry. In our latest EFFector newsletter, we're covering a new EFF report on how ad libraries encourage apps to leak user location data—potentially without app developers…

Ninth Circuit Ruling Will Force Online Platforms That Host User Speech to Fight Lengthy and Costly Lawsuits Before They Are Dismissed Under Section 230 ↗ (opens external article)

A federal appeals court just made it harder for online services, big and small, to get lawsuits over user speech dismissed early. In California v. Meta, a Ninth Circuit three-judge panel held that the lower court’s denial of Section 230 immunity to Meta is not immediately appealable. The misguided ruling has the potential to have widespread impact and to threaten the free speech of all internet us…

Zero-Knowledge Proofs Aren’t Age Verification Silver Bullets ↗ (opens external article)

Age verification (laws and regulations requiring platforms and websites to assure or estimate that a user seeking to use an online service is of a certain age) is everywhere. At the time of writing, about half the states in the US have some internet age verification law in place, and dangerous proposals, from the KIDS Act to the Kids Online Safety Act (KOSA), have been advancing at the federal lev…

FreeBSD 14.5-BETA2 Available ↗ (opens external article)

The second BETA build for the FreeBSD 14.5 release cycle is now available. ISO images for the amd64, i386, armv7, aarch64, powerpc, powerpcspe, powerpc64, powerpc64le, and riscv64 architectures are FreeBSD mirror sites.…

Who’s Tracking You? Use This New Service to Find Out ↗ (opens external article)

It can be daunting to determine who’s responsible for showing ads on the websites we visit, or who’s harvesting data from the mobile apps we use every day. That information is already semi-public, but it is not easily parsed and traditionally much of it has remained walled away in the hands of large advertising platforms. Not anymore: A powerful and free new service called DecryptAds scrapes and c…

Too Little, Too Late: Flock Admits Their Technology Needs Reforms ↗ (opens external article)

Flock Safety, the embattled vendor of mass surveillance technology, has rolled out a handful of new reforms intended to appease the justified nationwide anger that has seen scores of towns cancel or suspend their contracts with the company for automated license plate readers (ALPRs). The reforms are a combination of long overdue changes along with some cosmetic fixes that fail to address the funda…

Microsoft Plugs Nearly 400 Security Holes ↗ (opens external article)

Microsoft today released updates to remedy at least 398 security vulnerabilities in its Windows operating systems and supported software, including one weakness that is already being actively exploited and two others that were publicly detailed prior to today. Image: Shutterstock, Mallika Home Studio. August’s overstuffed bundle of patch joy from Microsoft did not eclipse its recording breaking re…

Who (or What) Generates Images for EFF? ↗ (opens external article)

We’ve had a few questions from EFF supporters lately, asking whether the images we use on our blog posts, or on donation and shop items, have been created with AI image generators. We’d like to answer these questions and clarify our internal policy regarding image creation.  EFF images are all made by human beings, not by automated image generators, with very rare exceptions. This is an internal d…

OpenSSH 10.5 released ↗ (opens external article)

In another move that signals a new OpenBSD release is in the works, the OpenSSH project has released without fanfare its new version, OpenSSH 10.5. The release notes read, OpenSSH 10.5/10.5p1 (2026-08-11) OpenSSH 10.5 was released on 2026-08-11. It is available from the mirrors listed at https://www.openssh.com/. OpenSSH is a 100% complete SSH protocol 2.0 implementation and includes sftp client…

Dismiss Church’s Trademark Lawsuit Against “Mormon Stories” Podcast, EFF Urges Court ↗ (opens external article)

Imagine if McDonald’s could use trademark law to control how you use the term “fast food.” Or if the Canadian government could stop you from using the word “Canada” in the title of a book about the country and its people. That wouldn’t just be absurd; it would be an unacceptable obstacle to criticism of and commentary about those institutions. Yet the Church of Jesus Christ of Latter-day Saints (t…

Meta Must Stop Silencing Reproductive Health Information ↗ (opens external article)

Access to accurate information about reproductive and maternal health can be critical. But on Meta's platforms, simply talking about prescription medication, abortion care, or one's own medical experiences can be enough to trigger content removals and account restrictions. That's why EFF recently submitted a public comment to the Meta Oversight Board in its consideration of a case involving an Ins…

FreeBSD 14.5-BETA1 Available ↗ (opens external article)

The first BETA build for the FreeBSD 14.5 release cycle is now available. ISO images for the amd64, i386, armv7, aarch64, powerpc, powerpcspe, powerpc64, powerpc64le, and riscv64 architectures are FreeBSD mirror sites.…

OpenBGPD 9.2 released ↗ (opens external article)

A sure sign that a new OpenBSD will soon be ready is that a new OpenBGPD release appears. On August 6th, 2026, the project released OpenBGPD version 9.2. The announcement reads, List: openbsd-announce Subject: OpenBGPD 9.2 released From: Claudio Jeker <claudio () openbsd ! org> Date: 2026-08-06 13:22:26 Message-ID: anSKksatjxeom0lQ () diehard ! n-r-g ! com We have released OpenBGPD 9.2, which wil…

DebConf26 closes in Santa Fe and DebConf27 announced ↗ (opens external article)

On Saturday 25 July 2026, the annual Debian Developers and Contributors Conference came to a close.…

Canadian Man Pleads Guilty in Snowflake Extortions ↗ (opens external article)

A 26-year-old Canadian man once described as one of the most consequential cybercrime threat actors of 2024 has pleaded guilty to computer fraud and conspiracy to hack and extort more than 165 organizations that used the cloud provider Snowflake. Connor Riley Moucka, of Kitchener, Ontario, also admitted to stealing call and text history records of more than 100 million AT&T customers. A surveillan…

Dead Software Walking: The ongoing evolution of relayd(8) and httpd(8) ↗ (opens external article)

Returning readers of this site may have noticed that the pace of development in relayd(8) and httpd(8) has been picking up recently. Now Rafael Sadowski (rsadowski@) has a new blog post out titled Dead Software Walking: The ongoing evolution of relayd(8) and httpd(8) where he tells the story. The article starts with Start with WHY As I mentioned in my OpenBSD 7.8 highlights post, development of r…

Tomorrow’s U.S. Senate Vote: Four Internet Bills, One Wrong Direction ↗ (opens external article)

The Senate Commerce Committee will vote this week on several censorious and privacy invasive bills: KOSA, the SCREEN Act, Youth AI Privacy Act, and CHATBOT Act. While we appreciate that the Committee is taking the time to look at these bills separately, it’s still impossible to ignore the message Congress is sending to the world: Age-gate the internet and block young people from speaking and acces…

Appeals Court Agrees with EFF that Building a Web Browser Doesn’t Violate the CFAA ↗ (opens external article)

The Ninth Circuit Court of Appeals has endorsed a commonsense technical interpretation of the Computer Fraud and Abuse Act (CFAA), a law not usually given to such interpretation. Amazon had sued Perplexity AI to try to shut down its Comet browser, claiming the browser’s optional agentic AI “Assistant” that can browse websites like Amazon for comparison shopping purposes, violated the CFAA because…

Mobile Ad Software Encourages Location Data Sharing, EFF Report Finds ↗ (opens external article)

Developers Must Beware of Ad Libraries that Betray Users’ PrivacySAN FRANCISCO – Some software development kits (SDKs) provided by advertising companies to help developers monetize their apps are automatically feeding users’ location data into systems that location data brokers use to track people, an Electronic Frontier Foundation (EFF) report found.  EFF began investigating the location-sharing…

Call for testing: OpenBSD vmm(4)/vmd(8) fd-ification ↗ (opens external article)

Thanks to the tireless work of among others Dave Voutila (dv@), development of the OpenBSD/amd64 virtualization system vmm(4)/vmd(8) continues to make progress. Now breaking changes, but with with potential benefits in both process isolation and compartmentalization of functionality, are on the way. It almost goes without saying that this code needs testing. In a message to the tech@ mailing list…

↗ (opens external article)

New committer: Faraz Vahedi (src)…

Read This Before You Buy That TV Streaming Stick ↗ (opens external article)

Security experts have been sounding the alarm for years about the risks of using generic TV boxes that promise unlimited content streaming for a one-time fee, warning that they secretly rent the user’s Internet connection out to strangers. But a groundbreaking new analysis finds these devices also routinely spoof themselves as mobile phones clicking ads on AI-generated websites as part of a sprawl…

↗ (opens external article)

New committer: Minsoo Choo (src)…

April-June 2026 Status Report ↗ (opens external article)

The April to June Status Report is now available with 41 entries.…

Ports Repository Frozen ↗ (opens external article)

The ports repository has been frozen to revert a very large commit. There is no concern that the tree has been compromised. More information about the freeze can be found on the 2026 Ports Freeze page.…

LG to Ban Residential Proxies from Smart TV Apps ↗ (opens external article)

The home appliance giant LG Electronics USA said this week it plans to suspend any apps built for its smart TVs that turn one’s television into an always-on residential proxy node. The move comes less than a month after researchers found that more than 42 percent of games and other apps available for download on LG’s webOS store allow unknown third-parties to route their Internet traffic through a…

Microsoft Patches a Record 570 Security Flaws ↗ (opens external article)

Microsoft Corp. today released software updates to plug at least 570 security holes in its Windows operating systems and other software, almost triple the number of vulnerabilities the software giant fixed in its record-smashing Patch Tuesday release last month. Microsoft attributed the burgeoning patch counts to vulnerability discoveries aided by artificial intelligence. Nearly 60 of the bugs qua…

Security support for Bookworm handed over to the LTS team ↗ (opens external article)

On 12 July 2026, three years after the initial release, the regular support for Debian 12, alias bookworm, has come to an end. The Debian Long Term Support (LTS) Team is taking over security support from the Security and Release Teams.…

Updated Debian 12: 12.15 released ↗ (opens external article)

The Debian project is pleased to announce the fifteenth and final update of its oldstable distribution Debian 12 (codename bookworm). This point release mainly adds corrections for security issues, along with a few adjustments for serious problems. Security advisories have already been published separately and are referenced where available.…

Updated Debian 13: 13.6 released ↗ (opens external article)

The Debian project is pleased to announce the sixth update of its stable distribution Debian 13 (codename trixie). This point release mainly adds corrections for security issues, along with a few adjustments for serious problems. Security advisories have already been published separately and are referenced where available.…

FreeBSD 15.1-RELEASE Available ↗ (opens external article)

Release Information page.…