Bazzite Linux 44 has been out for desktops for a while, but the "Deck" image for handhelds and console-like TV PCs is finally here with a huge overhaul.
https://www.gamingonlinux.com/2026/08/bazzite-linux-44-for-handhelds-finally-launches-with-some-massive-upgrades/

#OpenSource #NewRelease #DistroNews #Fedora #Misc #Bazzite #HandheldGaming #LegionGo

Update:

Our velociraptor plugin `Windows.Memory.Mem2Disk` can detect RAM injections and fileless malware.

We tested it against (among others) the C2 frameworks Sliver, Havoc and Mythic. All three were detected.

It was recently featured in a blog post by Mike Cohen:

https://docs.velociraptor.app/blog/2025/2025-11-15-memory-analysis-pt1

Stay tuned for memory analysis with velo part 2!

#C2 #detection #memoryforensics #velociraptor #DFIR #cybersecurity #infosec #pwr2 #opensource

RE: https://chaos.social/@cccpresser/117132501236214891

Everyone get involved in this if you are at #OSHOP it will be great fun. #FreeCAD #KiCad ... love that the base of my #opensource #pcb clamp (as seen on @oshwassociation show and tell) is the example FreeCAD challenge item!

Pixel 11 Pro: Developer enhances HiLight function

The rear LED light of the Pixel 11 Pro and Pro XL has almost no functions out of the box. The HiLight Studio app by developer Dhananjay Bhosale changes that.

https://www.heise.de/en/news/Pixel-11-Pro-Developer-enhances-HiLight-function-11421515.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon

#Android #Apps #Google #GooglePixel #LED #Mobiles #OpenSource #Smartphone #news

The Steam Deck's touchscreen LCD works with a Raspberry Pi thanks to a HAT from Scandent. They have open sourced their design and code.😎 🚀

https://www.youtube.com/watch?v=1pdZ7oePo-M

#raspberryPi #openSource #SteamDeck #Linux

I received my #PineNote from @pine64 yesterday evening.

I've not had much time to play with it yet. But I'm looking forward to do that.

First general impression:

• Nice specs, nice display
• Feels like a real computer and not a straitjacket. Great for hacking, but is it great for the average non-tech consumer? However, this is currently more a hacking device, so it makes sense
• It's an e-ink display, so it can feel a bit more laggy than it most likely is - due to the screen update latencies
• It runs a Debian Trixie build with GNOME. GNOME does not feel like that right choice for such a device. Floating windows and soft-keyboard getting in the way all the time
• The software keyboard is designed to look nice - functionally, it's quite annoying.
• The pen which follows feels extremely plastic and really poor quality. But it does the job.
• I would love the pen to be magnetic so it could be soft-attached to the edges of the tablet.
• It ships with Syncthing pre-installed!

But it seems to require some work to get apt update and apt upgrade working smooth. The images installed seemed to be quite out-to-date and several PGP keys used to verify packages was out of date. And there were some issues with the /usr symlink move. So the base install is very premature. Some hacking time will be needed to get it into a more proper shape.

The documentation both on paper and the pre-installed help docs is very scarce on details. And quite some details were even not correct.

Overall impression currently is that the PineNote is not a device I would recommend to non-technical people at all. But it feels like a very capable device for those who likes hacking and don't mind some "rough edges".

I do see this as a device which I should be able to tweak into a pretty functional device with some time. And I'm looking forward to that.

#foss #opensource #pine64 #hardware #tablet #eink #hacking

Pixel 11 Pro: Entwickler bohrt HiLight-Funktion auf

Das rückseitige LED-Licht des Pixel 11 Pro und Pro XL hat ab Werk nahezu keine Funktionen. Das ändert die App HiLight Studio des Entwicklers Dhananjay Bhosale.

https://www.heise.de/news/Pixel-11-Pro-Entwickler-bohrt-HiLight-Funktion-auf-11421418.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon

#Android #Apps #Google #GooglePixel #LED #Mobiles #OpenSource #Smartphone #news

Here's how to automatically post to Mastodon: https://cromwell-intl.com/open-source/python-social-media-automation/?s=mb #OpenSource #Python #TwitterMigration

ICS[AP] updated CISA ICS Advisories Master File for 8/20/2026 & the following year's CSVs:

CISA_ICS_ADV_2026_8_20_26.csv

Available @ ICS[AP] GitHub:
https://github.com/icsadvprj/ICS-Advisory-Project/tree/main

#opensource
#vulnerabilitymanagement
#icssecurity

Digital Identity: How to Prove Who You Are Without Revealing Everything

Imagine you want to buy a bottle of wine from an online store and you have to prove that you're at least 18 years old.

https://vsx.global/digital-identity-how-to-prove-who-you-are-without-revealing-everything/

#infosec #privacy #opensource #digitalsovereignty

Soomi — The sovereign #Canadian office suite.
https://soomi.ca/en/

#DataSovereignty #canada #opensource #privacy #boycottusa #boycottmicrosoft #boycotttechbros

@aurynn I too **really** dislike Electron apps 🙄 , but when we look at all the native #OpenSource widget sets - it's so brutally difficult to like any of them as the one awesome native widget set to adopt and love. Like no clear winner ever, ever emerges, as the decades roll by.

QT? GTK? wx? "Dear ImGui"? Tk? Flutter? They all have their reasons to dislike.

My favorite - and you'll probably think I'm nuts - is #Python's "textual" TUI widget set. Yes, TUI, not GUI.
https://textual.textualize.io/

Introducing secdb-cli: ZEN SecDB from your terminal

Query CVEs and audit your dependencies (in PURL format) without leaving the terminal (CI-friendly gating included).

v0.1.0 is out now with prebuilt binaries for Linux, macOS, and Windows (AMD64 + ARM64).

https://secdb.nttzen.cloud/blog/2026/08/17/secdb-cli
https://github.com/giterlizzi/secdb-cli

#opensource #cli #audit #cve #purl #ci #vulnerability #dependency
#nttdata #zen #secdb

"NASA's ground control software has a worrying security flaw which could let hackers contact spacecraft"

"Security researchers uncover flaw in the open source software used by NASA ground control to communicate with instruments and spacecraft."

https://www.techradar.com/pro/security/nasas-ground-control-software-has-a-worrying-security-flaw-which-could-let-hackers-contact-spacecraft

#OpenSource

@stefano I'm so grateful to you for embodying the open-source philosophy and communicating openly. That's so incredibly important for all *BSD users and open-source enthusiasts. No one can keep track of the source code for every program or library all the time. I admire you so much for the value you bring to the community. That's the spirit!

#opensource #grateful #respect #bsd #freeSoftware

RE: https://openbiblio.social/@datenteiler/116476021319060949

Die öffentlichen Arbeitsplätze in der @tibhannover sind jetzt alle auf #Linux (ok außer die beiden Readerprinter). Noch nicht alles bugfrei, aber dafür ist es schnell und stabil. Das Nutzer:innen Feedback vor Ort, mit denen ich gesprochen habe, war super positiv, weil es so schön aufgeräumt aussieht.

Am Mittwoch stelle ich den "Ubuntu Nutzer:innen Arbeitsplatz (UNA)" kurz auf der GBV-Verbundkonferenz vor. Bin gespannt. 😊

#Hannover #TIB #Bibliothek #opensource #endof10

Das Vortragsprogramm zum #Linuxday #Dornbirn am 26. September 2026 steht fest:

https://www.linuxday.at/vortraege/2026

#Linux #Austria #OpenSource

KI-Aufsicht: Niedersachsen warnt vor Entmachtung der Datenschutzbehörden

Der niedersächsische Datenschutzbeauftragte beklagt die beschlossene Zentralisierung der KI-Kontrolle bei der Bundesnetzagentur und warnt vor US-Abhängigkeiten.

https://www.heise.de/news/KI-Aufsicht-Niedersachsen-warnt-vor-Entmachtung-der-Datenschutzbehoerden-11421190.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon

#AIAct #Bundesnetzagentur #Datenschutz #DigitaleSouveränität #IT #KünstlicheIntelligenz #Netzpolitik #OpenSource #news

An Apache InLong SQL injection flaw, CVE-2026-63038, lets attackers inject SQL via multiple parameters. Two more bugs join it. Upgrade to 2.4.0.

#ApacheInLong #SQLInjection #CVE #SSRF #InfoSec #OpenSource

https://securityonline.info/apache-inlong-sql-injection-cve-2026-63038/?utm_source=mastodon&utm_medium=jetpack_social

A good error dialog should tell you what failed, why it failed and what to do next.

Ubuntu's App Center offers none of those things with a shoulder shrug of an error message to say it's 'not sure what the error is'.

With critical features like driver management coming in 26.10, isn't it time for its error reporting to be a little more… clued-in?

https://www.omgubuntu.co.uk/2026/08/ubuntu-app-center-something-went-wrong?v1

#Linux #Ubuntu #OpenSource

Built a self-hosted honeytoken/canary system over the last few weeks — fake AWS keys, webhooks, DB connection strings, Telegram alert when one gets touched. Runs on free tiers (Cloudflare Worker + optional AWS CloudTrail integration, no Lambda).
CloudTrail→EventBridge ate a whole evening I didn't plan for — event history isn't the same as trail delivery, and EventBridge filters read-only calls by default. Details here: https://medium.com/@dblanko.security
Code: https://github.com/dblanko/honeytoken-ecosystem
#infosec #honeypot #opensource #DevSecOps

Tuba 0.11.0 released for GNOME, now also updated this on my Haiku install (still not available in the depot).

Read all about it at:

https://codeberg.org/GeopJr/Tuba/releases/tag/v0.11.0

#HaikuOS #haikuports #gnome #gtk #vala #tuba #opensource #Mastodon #Fediverse

Alt...

Latest release for Tuba 0.11.0 (GNOME/GTK4) running on Haiku 64bit nightly.

China wirft Windows aus den Behörden, Monate früher als geplant (Bloomberg/Handelsblatt). Microsoft sagt: alles sicher, die Updates laufen weiter. Peking sagt: trotzdem, danke, tschüss. Hierzulande würde man zunächst eine Arbeitsgruppe gründen. Zur Prüfung der Machbarkeit einer Prüfung. Ergebnis: nächste Legislaturperiode. Siehe Bund, Länder oder Städte wie Darmstadt
#DigitaleSouveränität #Microsoft #OpenSource https://www.handelsblatt.com/technik/it-internet/microsoft-china-streicht-windows-bei-behoerden-schneller-als-geplant/100247904.html?utm_medium=sm

Blick ins Heft c’t 18/2026: KI bringt IT-Security ins Schleudern

KI stellt die IT-Security vor enorme Herausforderungen. Dazu: Balkonkraftwerke mit Speicher im Test und die Highlights der IFA 2026.

https://www.heise.de/meinung/Blick-ins-Heft-c-t-18-2026-KI-bringt-IT-Security-ins-Schleudern-11420507.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon

#Anthropic #Balkonkraftwerk #Cybersecurity #DSGVO #IFA #IT #KünstlicheIntelligenz #Sprachverarbeitung #OpenSource #OpenAI #Security #Wirtschaft #Wissenschaft #news

A veritable smörgåsbord of new features lands in your favourite apps with KDE Gear ⚙️ 26.08!

Dolphin improves its integration with KDE Connect, Konsole revamps its drag'n'drop features, Kdenlive's titler gets more functionalities, and Okular's annotations more power.

And much more where that came from:

https://kde.org/announcements/gear/26.08.0/

#apps #desktop #FreeSoftware #OpenSource #Linux #Haiku #BSD

Proton's AI Paper Trail and the Question of Who to Trust with Your Data

Is it even possible to use artificial intelligence while also protecting privacy? At first glance, this seems like a contradiction. AI assistants are…

https://vsx.global/proton-ai-paper-trail-en/

#infosec #privacy #opensource #digitalsovereignty

Keep the Why 0.8.0 is out.

context/ entries can now say Type: undefined — <reason> when none of decision/workaround/incident/constraint fits. Blank used to mean either "not reviewed yet" or "reviewed, nothing fits" — now those are distinguishable and grep-able, giving real signal for whether the vocabulary needs a fifth value later.

https://github.com/oliver-zehentleitner/keep-the-why/releases/tag/v0.8.0

#AgentSkills #AIAgents #OpenSource #DevTools

Wir waren letztes Wochenende auf der FrOSCon. Alles in allem doch ein gutes Wochenende.

FrOSCon 2026 - Rückblick

https://andreas.scherbaum.la/post/2026-08-19_froscon-2026-rueckblick/

#FrOSCon #StAugustin #OpenSource #Conference #Konferenz #Linux #FrOSCon21

Mojo wird Open Source – Python-ähnliche Sprache für CPUs und GPUs

Kurz nach Freigabe der Version 1.0 von Mojo stellt Modular (Qualcomm) den Compiler unter Apache-2-Lizenz.

https://www.heise.de/news/Mojo-wird-Open-Source-Python-aehnliche-Sprache-fuer-CPUs-und-GPUs-11419653.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon

#Compiler #GitHub #IT #OpenSource #Programmierung #Python #Qualcomm #news

Mojo becomes open source – Python-like language for CPUs and GPUs

Shortly after releasing version 1.0 of Mojo, Modular (Qualcomm) releases the compiler under the Apache-2 license.

https://www.heise.de/en/news/Mojo-becomes-open-source-Python-like-language-for-CPUs-and-GPUs-11419784.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon

#Compiler #GitHub #IT #OpenSource #Programmierung #Python #Qualcomm #news

Does anyone know of an open source website or database where the constituents of ETFs are recorded? My idea was to avoid certain stocks which I find morally corrupt in my investments.
#financetips #investments #boycott #opensource

The paradox of AI agents: to be truly helpful, an agent needs deep system context, file access, and device permissions. But granting that level of visibility to a proprietary cloud API is a privacy nightmare.

The only trustworthy path for personal agentic AI is FOSS and local-first. Auditable code, open weights, and on-device execution where your data never leaves your hardware.

If an agent touches your daily life, you should own the stack.

#FOSS #OpenSource #Privacy #LocalAI #AIAgents #SelfHosted #EdgeAI #Linux #AI

Question for #OpenSource project maintainers who manage a domain for the project. How do you manage the domain such that:

1) a single maintainer disappearing doesn't cause the domain to be lost

2) a single maintainer can't [easily] abscond with the domain

3) the group can collectively (somehow) ensure the domain registration fees get paid without sharing sensitive billing details with the group and without needing to sign up for some sort of group credit card

This is for a mature project with ~10 maintainers. Not all of them need access to this system, but more than one person does.

General strategies as well as recommendations for specific registrars welcome.

Charles Wang, born OTD in 1944, co-founded Computer Associates International, later renamed CA Technologies https://cromwell-intl.com/open-source/?s=mb #OpenSource

Sovereignty: Many companies see risky US dependence but do nothing

An ifo survey shows that quite a few German companies consider their dependence on US services risky but are not planning countermeasures.

https://www.heise.de/en/news/Sovereignty-Many-companies-see-risky-US-dependence-but-do-nothing-11419748.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon

#CloudDienste #Datenschutz #DigitaleSouveränität #IT #ITInfrastruktur #OpenSource #Unternehmen #Wirtschaft #news

"A major industry coalition set up to defend critical open-source software against AI-enabled cyber threats is expected to operationalize its vulnerability disclosure and remediation platform in September,"

Infosecurity-Magazine: Linux Foundation's Akrites to Go Live in September https://www.infosecurity-magazine.com/news/linux-foundations-akrites-go-live/ #opensource #Linux #infosec

Quick update.

Account migration on pixelfed.social is disabled. I hit bugs in the flow and chose to pull it rather than let people run into them.

It’s temporary, and account portability is not something I take lightly.

Meanwhile I’m setting loops aside to give pixelfed the year it deserves: new mobile app, new web ui, improved federation, and a much faster backend.

Thanks for the patience. It’s one person over here, and I’d rather be slow than sloppy.

#pixelfed #openSource