jrollans.com is a Fediverse instance that uses the ActivityPub protocol. In other words, users at this host can communicate with people that use software like Mastodon, Pleroma, Friendica, etc. all around the world.

This server runs the snac software and there is no automatic sign-up process.

Site description
These are the voyag... uh, things I post about.
Admin email
jrollans@gmail.com
Admin account
@jrollans@jrollans.com

Search results for tag #opensource

[?]Daily CyberSecurity » 🌐
@DailyCyberSecurity@infosec.exchange

Discover how the Dutch government plans to replace Microsoft Windows with open-source alternatives like NixOS and openDesk through the DAWO initiative.

dailytechnow.com/netherlands-o

    [?]Bob the Traveler » 🤖 🌐
    @bobthetraveler@mastodon.world

    RFC 1267 defining the Border Gateway Protocol or BGP version 3 was published in October 1991 cromwell-intl.com/networking/r

      [?]ronscf » 🌐
      @ronscf@mastodon.world

      [?]ronscf » 🌐
      @ronscf@mastodon.world

      [?]Akkana Peck » 🌐
      @akkana@fosstodon.org

      I got a PineTime smartwatch to monitor my heart rate on hikes and bike rides. I've had it for a couple months now. I like it a lot, and it's an amazing deal. Finding an app to record heart rate was the hardest part, but it turned out OsmAnd, already my favorite Android mapping app (#FOSS and uses ), does a great job. Big thumbs up for both and .

      I wrote up the details: shallowsky.com/blog/tech/pinet

      @pine64 @osmand

      A PineTime smartwatch showing heart rate while strapped to an upper arm.

      Alt...A PineTime smartwatch showing heart rate while strapped to an upper arm.

        [?]SecBurg » 🌐
        @secburg@infosec.exchange

        [?]SecBurg » 🌐
        @secburg@infosec.exchange

        Bruno (open-source Postman alternative) in v4.2.1 released

        secburg.com/posts/bruno-v421-r

          [?]Bob the Traveler » 🤖 🌐
          @bobthetraveler@mastodon.world

          RFC 5709 defining HMAC-SHA cryptographic authentication for the OSPF protocol was published in October 2009 cromwell-intl.com/networking/r

            [?]Arint - SEO+KI » 🌐
            @Arint@arint.info

            RT @support_huihui: Jemand hat anonym gespendet, um die öffentliche Veröffentlichung von huihui-ai/Huihui-Qwen3.8-Flash-Next-abliterated zu finanzieren. Wir haben die Spende angenommen. Vielen Dank an alle für die fortgesetzte Unterstützung und Hilfe. Wir laden derzeit die nicht quantisierten Safetensors sowie t.co/pQ5DvIw6Or hoch.

            mehr auf Arint.info

            https://x.com/support_huihui/status/2104840486238527961

              [?]Richard Quinn » 🌐
              @rq4c@mastodon.world

              RE: infosec.exchange/@david_chisna

              "It’s never a waste of my time to turn an enthusiastic and incompetent contributor into an enthusiastic and competent contributor, it’s an absolutely critical part of building a healthy project…

              …If I spend time reviewing LLM-generated code when it would have been faster to write it myself (which, to be clear, is the case on 100% of LLM-submitted PRs I’ve seen so far), then that’s just a time sink."

              [?]David Chisnall (*Now with 50% more sarcasm!*) » 🌐
              @david_chisnall@infosec.exchange

              One of the open source projects I used to (many years ago, so I am not really affected anymore) has recently decided to allow AI contributions. One of their arguments is that they judge submissions on quality, not tools used.

              Back when I was an active contributor (to the project and maintainer of some other parts of the surrounding ecosystem), I got a lot of submissions that were bad.

              The thing is, I absolutely loved getting these because they always came from super-enthusiastic junior people. Reviewing them and giving feedback often too much longer than implementing the feature myself. The same was usually true for the next contribution too. But that shifted over time. After a few months, I started getting patches where I didn’t find anything beyond the cosmetic that I wanted to change.

              Going back further, I was one of those people when I started contributing.

              Measured as code contributions over the short term, maintainers working with submitters of poor-quality PRs is a waste of time. You’re taking time away from writing code to do something that produces code more slowly.

              Measured over the long term, the results are very different. Far more code in that project and closely related parts of the ecosystem has been written by people who I mentored when they came along with some bad code than by me.

              It’s never a waste of my time to turn an enthusiastic and incompetent contributor into an enthusiastic and competent contributor, it’s an absolutely critical part of building a healthy project. I wouldn’t have got nearly as much out of F/OSS on a personal level if I hadn’t encountered a lot of people with the same opinion when I was one of the enthusiastic and incompetent newcomers.

              But LLMs are not like that. If I spend time reviewing LLM-generated code when it would have been faster to write it myself (which, to be clear, is the case on 100% of LLM-submitted PRs I’ve seen so far), then that’s just a time sink. It’s also taking away time I could be spending helping new contributors who want to actually improve, rather than just take the review comments, feed them into an opaque system, and give me back the results.

                [?]Kyle Reddoch (CybersecKyle) » 🌐
                @cyberseckyle@infosec.exchange

                🎉 Drift — Share to Mastodon is officially live on the Chrome Web Store!

                Yesterday I wrote about why I built Drift. Today, version 1.0.0 is approved and available for anyone to install.

                Drift makes one of my common Mastodon workflows a lot easier:

                🔹 Highlight a passage on a webpage

                🔹 Click Drift

                🔹 Get an editable draft with the passage, title, and link

                🔹 Add your own thoughts

                🔹 Choose your Mastodon server

                🔹 Review and publish from Mastodon itself

                It also supports right-click sharing, multiple saved servers, tracking-link cleanup, temporary draft recovery, keyboard shortcuts, and light/dark mode.

                No Mastodon password. No API token. Nothing gets published automatically.

                It’s free and open source.

                Chrome Web Store:
                chromewebstore.google.com/deta

                I wrote more about how it works and the privacy decisions behind it here:
                kylereddoch.me/blog/drift-shar

                If you try it, I’d genuinely love to hear what you think.

                  [?]Adrian Hollister » 🌐
                  @adrianhollister@infosec.exchange

                  OpenInfra Europe, the European hub of the foundation behind OpenStack, has warned that its artifact server was compromised. An Artifactory authentication bypass disclosed on 28 August was being exploited by the 31st, the day the server fell. It was noticed on 15 September, when a legitimate user was locked out. Anything downloaded in between is treated as potentially compromised.

                  The uncomfortable part: this was no zero-day, but a known flaw on internet-facing plumbing that other people build software from. An artifact server is a distribution point. Tamper there and every downstream pipeline inherits it.

                  Open source infrastructure is critical infrastructure. Its plumbing deserves the same patch clock and monitoring as the things it serves.

                  helpnetsecurity.com/2026/09/30

                    [?]Daily CyberSecurity » 🌐
                    @DailyCyberSecurity@infosec.exchange

                    In AISI tests, GPT-6 Astra supply chain attacks succeeded in 29.2% of runs, using fake identities and malicious code. See the findings.

                    meterpreter.org/gpt-6-astra-su

                      [?]Bob the Traveler » 🤖 🌐
                      @bobthetraveler@mastodon.world

                      RFC 1122 defining the TCP/IP requirements for Internet hosts was published in October 1989 cromwell-intl.com/networking/p

                        [?]Doug Burks » 🌐
                        @dougburks@infosec.exchange

                        OhMyDebn 4.9 is out! 🎉

                        A debonair Linux desktop for power users: Cinnamon on the Debian-based distro you already trust.

                        New in 4.9:
                        • Now supports MX Linux 25 and Pop!_OS 24.04
                        • Neovim works offline out of the box, and matches all 23 desktop themes
                        • Three new AI agents: Grok Build, Oh My Pi, T3 Code
                        • Firmware updates, update channels, and a doctor that checks much more

                        ohmydebn.org/release-notes/

                        OhMyDebn 4.9 release graphic. Large "4.9" above "Linux, refined. A debonair Linux desktop for power users." In front, an OhMyDebn 4.9.0 desktop with a Yosemite wallpaper and terminal windows; behind it, four desktops in other color themes, labeled "23 themes · one keystroke." New in 4.9: now on MX Linux and Pop!_OS; Neovim ready offline with plugins preinstalled; three new AI agents, Grok Build, Oh My Pi and T3 Code; doctor, firmware updates and update channels. ohmydebn.org.

                        Alt...OhMyDebn 4.9 release graphic. Large "4.9" above "Linux, refined. A debonair Linux desktop for power users." In front, an OhMyDebn 4.9.0 desktop with a Yosemite wallpaper and terminal windows; behind it, four desktops in other color themes, labeled "23 themes · one keystroke." New in 4.9: now on MX Linux and Pop!_OS; Neovim ready offline with plugins preinstalled; three new AI agents, Grok Build, Oh My Pi and T3 Code; doctor, firmware updates and update channels. ohmydebn.org.

                          [?]heise online English » 🤖 🌐
                          @heiseonlineenglish@social.heise.de

                          Archinstall 4.5: Less manual work, more ARM64

                          Archinstall 4.5 supports GRUB and Limine for AArch64 EFI boots, fixes WLAN errors, and optimizes system configuration.

                          heise.de/en/news/Archinstall-4

                            [?]GianfriAur » 🌐
                            @GianfriAur@phpc.social

                            php-esp32 1.4.0 is out, and it's a big one.

                            PHP on the ESP32 is now event-driven: your script registers listeners and sleeps, while timers, pins, HTTP and WebSocket wake it with typed events. The second core polls sensors in the background: tilt the board and the plot moves live on your phone. No loop().

                            Write-up with diagrams, down to the I2C wire:
                            php-baremetal.com/blog/php-esp

                            Alt...A phone browser plotting accelerometer and gyroscope data live over WebSocket while the ESP32 board is tilted by hand.

                              [?]@BjornW@mastodon.social » 🌐
                              @BjornW@mastodon.social

                              RE: infosec.exchange/@david_chisna

                              This explains very well why "bad" code contributions by enthusiastic people can still be very worthwhile in the long run.

                              Also LLM's will not share a drink with you at a conference reminiscing about that time you collaborated on a piece of code, or sharing stories about stuff happening in their life.

                              Opensource projects dismissing these social aspects are doomed in my view.

                              [?]David Chisnall (*Now with 50% more sarcasm!*) » 🌐
                              @david_chisnall@infosec.exchange

                              One of the open source projects I used to (many years ago, so I am not really affected anymore) has recently decided to allow AI contributions. One of their arguments is that they judge submissions on quality, not tools used.

                              Back when I was an active contributor (to the project and maintainer of some other parts of the surrounding ecosystem), I got a lot of submissions that were bad.

                              The thing is, I absolutely loved getting these because they always came from super-enthusiastic junior people. Reviewing them and giving feedback often too much longer than implementing the feature myself. The same was usually true for the next contribution too. But that shifted over time. After a few months, I started getting patches where I didn’t find anything beyond the cosmetic that I wanted to change.

                              Going back further, I was one of those people when I started contributing.

                              Measured as code contributions over the short term, maintainers working with submitters of poor-quality PRs is a waste of time. You’re taking time away from writing code to do something that produces code more slowly.

                              Measured over the long term, the results are very different. Far more code in that project and closely related parts of the ecosystem has been written by people who I mentored when they came along with some bad code than by me.

                              It’s never a waste of my time to turn an enthusiastic and incompetent contributor into an enthusiastic and competent contributor, it’s an absolutely critical part of building a healthy project. I wouldn’t have got nearly as much out of F/OSS on a personal level if I hadn’t encountered a lot of people with the same opinion when I was one of the enthusiastic and incompetent newcomers.

                              But LLMs are not like that. If I spend time reviewing LLM-generated code when it would have been faster to write it myself (which, to be clear, is the case on 100% of LLM-submitted PRs I’ve seen so far), then that’s just a time sink. It’s also taking away time I could be spending helping new contributors who want to actually improve, rather than just take the review comments, feed them into an opaque system, and give me back the results.

                                [?]iX Magazin » 🌐
                                @iX_Magazin@social.heise.de

                                [?]iX Magazin » 🌐
                                @iX_Magazin@social.heise.de

                                [?]Jan Paul » 🌐
                                @JanPaul@troet.cafe

                                Meistens fallen einem ja die besten Erwiderungen nach der Diskussion ein. Hier weiß ich bis jetzt nicht, wie man hätte reagieren sollen:

                                Ein Bekannter hat sich über die BigTech-Unternehmen aufgeregt und wir hatten ein schönes Gespräch über Clouddienste, Abomodelle, KI-Zwang, etc.
                                Hab dann mal ein bisschen geplaudert, dass ich seit Jahren Linux nutze, FOSS Apps, googlefreies Android...
                                Mit großen Augen antwortete man mir: "Und trägst du sonst auch einen Aluhut?"
                                Äh...?

                                  [?]Arint - SEO+KI » 🌐
                                  @Arint@arint.info

                                  RT @ZixuanLi_: GLM-5.3 hat 389 Open-Source-Projekte unterstützt, wobei bisher 4.249 potenzielle Schwachstellen gefunden wurden.

                                  mehr auf Arint.info

                                  https://x.com/ZixuanLi_/status/2105120154329977240

                                    [?]heise online English » 🤖 🌐
                                    @heiseonlineenglish@social.heise.de

                                    WSL Containers are here: Linux containers without an extra engine

                                    Microsoft releases WSL Containers: Linux containers can now be built and started directly under Windows – even from within Windows applications.

                                    heise.de/en/news/WSL-Container

                                      [?]Arint - SEO+KI » 🌐
                                      @Arint@arint.info

                                      RT @zheanxu: DeepGEMM Ascend ist jetzt quelloffen. Wir haben 99,8 % des Hardware-Limits bei GEMM und 98 % bei MegaMoE erreicht. github.com/deepseek-ai/De…

                                      mehr auf Arint.info

                                      https://x.com/zheanxu/status/2105119944556110265

                                        [?]iX Magazin » 🌐
                                        @iX_Magazin@social.heise.de

                                        WSL Container sind da: Linux-Container ohne Extra-Engine

                                        Microsoft gibt WSL Container frei: Linux-Container lassen sich damit direkt unter Windows bauen und starten – auch aus Windows-Anwendungen heraus.

                                        heise.de/news/WSL-Container-si

                                          [?]Simon Roses Femerling » 🌐
                                          @simonroses@infosec.exchange

                                          BinSith is now open source! 🛠️

                                          A Rust CLI for static binary triage: hashes, strings, indicators, entropy, file comparisons, and folder scanning—with JSON/CSV exports.

                                          Binaries for Windows, Linux & macOS.

                                          github.com/vulnex/binsith

                                          @vulnexsl

                                            [?]Oliver Zehentleitner » 🌐
                                            @oliverzehentleitner@burningboard.net

                                            A codebase is more than code.

                                            It is the result of decisions, rejected alternatives, production constraints and workarounds that made sense at the time.

                                            With Keep the Why, that reasoning lives as plain Markdown in the repository and can reference reasoning in other repositories.

                                            Once those links exist, something interesting emerges: a web of project rationale you can actually walk.

                                            Families show where reasoning belongs.

                                            Friends show where projects relate.

                                            Thoughts show how decisions connect over time.

                                            No graph database.

                                            No central index.

                                            No account.

                                            Just Markdown and Git.

                                            blog.technopathy.club/the-reas

                                            A codebase is more than code

                                            Alt...A codebase is more than code

                                              [?]heise online English » 🤖 🌐
                                              @heiseonlineenglish@social.heise.de

                                              [?]Online-Magazin Telepolis » 🌐
                                              @telepolis@social.heise.de

                                              DeepSeek kappt die Nvidia-Abhängigkeit – mit Huaweis Hilfe und Open Source

                                              Mit TileLang will DeepSeek Huaweis KI-Chips so einfach programmierbar machen wie Nvidia-GPUs – und Chinas Tech-Branche vom Westen lösen.

                                              telepolis.de/article/DeepSeek-

                                              [?]VSX.is | Digital sovereignty » 🌐
                                              @vsx@infosec.exchange

                                              Tor Beyond the Browser. What to Use on Android, iPhone and Computers

                                              Most people associate Tor with the Tor Browser. However, the Tor network can also protect other applications, or even an entire…

                                              vsx.global/tor-beyond-the-brow

                                                [?]heise online » 🌐
                                                @heiseonline@social.heise.de

                                                Niederlande bauen souveränen Behördendesktop auf NixOS-Basis

                                                Die Niederlande entwickeln eine quelloffene Arbeitsumgebung für Behörden. Das Desktop-OS basiert auf NixOS, acht Kommunen testen bereits.

                                                heise.de/news/Niederlande-baue

                                                [?]ICS Advisory Project » 🌐
                                                @AdvisoryICS@infosec.exchange

                                                ICS[AP] updated CISA ICS Advisories Master File for 9/29/2026 & the following year's CSVs:

                                                CISA_ICS_ADV_2026_9_29_26.csv

                                                Available @ ICS[AP] GitHub:
                                                github.com/icsadvprj/ICS-Advis



                                                  [?]Daniel » 🌐
                                                  @danielpetrica@infosec.exchange

                                                  I built a website for humans. The machines just showed up.

                                                  Most traffic to LaraPlugins now comes from agents, not people. That changed how I think about it.

                                                    [?]Daily CyberSecurity » 🌐
                                                    @DailyCyberSecurity@infosec.exchange

                                                    A CVSS 10 GeoServer Cloud vulnerability in a GitHub Actions workflow could have leaked repository secrets. No abuse found, and the workflow is gone.

                                                    securityonline.info/geoserver-

                                                      [?]SimpleBalanceReality » 🌐
                                                      @simplebalancereality@friendica.world

                                                      If I'm a billionaire, I'll pour all of my money for Thai Linux/FOSS

                                                      If I'm a government or I'm a billionaire or I'm the richest celebrity or I'm a CEO of a trillion dollar mega corporation (or I'm a bureaucrat or like people higher up I dunno the name) or I have a lot of resources and money, I'll pour my money (donation or support) on Thai Tech, Thai open source developers, and Thai Linux Distro development.

                                                      I'll call back National Electronics and Computer Technology Center (NECTEC) to continue developing LinuxTLE (a Thai Linux distro). Yes in Thailand, we used to have our own homegrown and sovereign Linux distro called "LinuxTLE" (in Thai: ลินุกซ์ทะเล and TLE stands for Thai Language Extension).

                                                      (Only If I'm on the former ego mode)

                                                        [?]Pedram » 🌐
                                                        @psoheil@c.im

                                                        Microsoft has open-sourced , a cloud-native AI infrastructure platform designed to make running GPU workloads on Kubernetes easier.

                                                        TauGrid brings several pieces together into a single stack:

                                                        • A CLI for submitting and managing AI workloads
                                                        • Kueue for workload queueing, quotas, and scheduling
                                                        • KubeRay for distributed AI workloads
                                                        • GPU health monitoring and node diagnostics
                                                        • Integrated observability for clusters, GPUs, and workloads

                                                        It supports workloads across data preparation, distributed training, fine-tuning, batch inference, and model serving.

                                                        The interesting part is the separation of responsibilities. Researchers can submit and monitor workloads without needing to manage Kubernetes directly, while platform teams retain control over compute, capacity, identity, policies, and infrastructure.

                                                        For organizations running GPU-intensive AI workloads, this could provide a more standardized way to manage shared Kubernetes-based AI infrastructure without building all of the integration glue themselves.

                                                        TauGrid is MIT licensed and designed for self-hosted Kubernetes environments.

                                                        github.com/Azure/taugrid

                                                          [?]Alfonso Siciliano » 🌐
                                                          @alfonsosiciliano@mastodon.bsd.cafe

                                                          Finally, this Braille display has arrived from the United States!

                                                          The goal is to get it working with and, eventually, provide a proper subsystem for Braille display devices on FreeBSD.

                                                          Another small step toward making FreeBSD more accessible. Learn more about the FreeBSD Foundation's Vision project: freebsdfoundation.org/project/

                                                          The HumanWare BrailleNote Apex photographed from above, with a monitor showing FreeBSD in the background.

                                                          Alt...The HumanWare BrailleNote Apex photographed from above, with a monitor showing FreeBSD in the background.

                                                          The HumanWare BrailleNote Apex photographed from the front, showing the Next and Previous buttons, with a monitor showing FreeBSD in the background.

                                                          Alt...The HumanWare BrailleNote Apex photographed from the front, showing the Next and Previous buttons, with a monitor showing FreeBSD in the background.

                                                            [?]Kyle Reddoch (CybersecKyle) » 🌐
                                                            @cyberseckyle@infosec.exchange

                                                            I built Drift for Chrome. Highlight a passage, click the icon, and edit a Mastodon draft with the quote first, then the title and link.

                                                            It opens your server's composer for the final review. Version 1.0.0 is submitted for store review; the GitHub build is available now.

                                                            kylereddoch.me/blog/drift-shar

                                                              AodeRelay boosted

                                                              [?]FreeBSD Foundation » 🌐
                                                              @FreeBSDFoundation@mastodon.social

                                                              Worried that an upgrade could leave you with an unusable system?

                                                              FreeBSD boot environments, powered by ZFS, provide a straightforward way to recover.

                                                              In this video, learn how FreeBSD boot environments can make upgrades and system maintenance easier to manage.

                                                              Watch the video to learn more.
                                                              youtube.com/watch?v=MfHCXEzRfa

                                                                [?]Timo Jyrinki » 🌐
                                                                @timojyrinki@mastodon.social

                                                                Anyone else from Mastodon going to Mindtrek 2026 open source conference in one week besides me and @rolle who also has a session there?

                                                                It's free admission! But if you have employer paying or money otherwise, there are also paid VIP tickets that support this event that is one of its kind in .

                                                                See you in ! mindtrek.org/

                                                                And thanks @foss_events that there is at least some presentation of the event here...

                                                                  AodeRelay boosted

                                                                  [?]BlablaLinux » 🌐
                                                                  @blablalinux@mastodon.blablalinux.be

                                                                  AodeRelay boosted

                                                                  [?]LibreOffice » 🌐
                                                                  @libreoffice@fosstodon.org

                                                                  We do extensive testing before every major release of . But as it's a large app used in millions of different ways, issues can come up. So The Document Foundation has expanded its team with a new Analyst: blog.documentfoundation.org/bl

                                                                  Photo og Bogdan Buzea

                                                                  Alt...Photo og Bogdan Buzea

                                                                    [?]eteryu » 🌐
                                                                    @eteryu@infosec.exchange

                                                                    Mullvad wyłącza darmową publiczną szyfrowaną usługę DNS.

                                                                    Zostanie wycofana 2 listopada 2026. Warto już teraz rozejrzeć się za alternatywami.

                                                                    Sam testuję różne rozwiązania i sprawdzam je pod względem prywatności, szybkości oraz stabilności. Wkrótce w moim katalogu oprogramowania pojawi się duża aktualizacja. Kategoria Sieć i bezpieczeństwo dostanie solidną porcję nowości, ale nie tylko ona. Szykuję zmiany również w innych kategoriach.

                                                                    Zajrzyjcie tutaj: eteryu.space/narzedzia/katalog/

                                                                    Macie sprawdzone zamienniki? Chętnie poczytam w komentarzach.

                                                                    AodeRelay boosted

                                                                    [?]Kiwix » 🌐
                                                                    @kiwix@mastodon.social

                                                                    Kiwix JS 3.9.3 is out! 📚 Read Wikipedia and other reference sites with no internet connection, on Windows, Mac, Linux or in your browser.

                                                                    New: open an archive by double-clicking it (now on Mac and Linux too), easier Mac installs, and a library where you can browse every archive and filter as you type.

                                                                    It also has important security fixes, so please update. Most versions update themselves; if yours doesn't, get it here:
                                                                    kiwix.github.io/kiwix-js-pwa/a

                                                                    Screenshot of Kiwix JS Electron running on macOS

                                                                    Alt...Screenshot of Kiwix JS Electron running on macOS

                                                                      AodeRelay boosted

                                                                      [?]9to5Linux » 🌐
                                                                      @9to5linux@floss.social

                                                                      -Based and systemd-Free Linux 26.1 Released with Updated Kernels 9to5linux.com/debian-based-and

                                                                      A screenshot of antiX Linux 26.1 with the JWM window manager showing the application menu.

                                                                      Alt...A screenshot of antiX Linux 26.1 with the JWM window manager showing the application menu.

                                                                        [?]Arint - SEO+KI » 🌐
                                                                        @Arint@arint.info

                                                                        RT @superrieu: Im Gespräch in 👇 wird @JensenHuang auch direkt danach gefragt, warum OpenAI diese Open-Source-Initiative nicht unterstützt. Seine Antwort ist eher ausweichend: Open Shell sei ein offener Standard und eine freie Plattform, ... 1/3 t.co/slv8bYf7DN

                                                                        mehr auf Arint.info

                                                                        https://x.com/superrieu/status/2104836030004146484

                                                                          [?]SecBurg » 🌐
                                                                          @secburg@infosec.exchange

                                                                          [?]AA » 🌐
                                                                          @AAKL@infosec.exchange

                                                                          Ox, from yesterday: PhantomSub: Malicious npm Campaign Secretly Adds Users to WhatsApp Spam Channels ox.security/blog/phantomsub-ma

                                                                          More:

                                                                          The Hacker News: 101 Malicious npm Packages Add Developers' WhatsApp Accounts to Groups Without Consent thehackernews.com/2026/09/101- @thehackernews

                                                                            [?]ronscf » 🌐
                                                                            @ronscf@mastodon.world

                                                                            Hi everyone! In this post, I share a bit of my story and the technologies I use. Check it out:
                                                                            ronscf.com/translation/en/post

                                                                              [?]openSUSE Linux » 🌐
                                                                              @opensuse@fosstodon.org

                                                                              From scripts to , view the architectural journey of rewriting one of 's most popular container tools at the Conference. 's next chapter starts here. youtu.be/RRWrTwCRPtM

                                                                                [?]ronscf » 🌐
                                                                                @ronscf@mastodon.world

                                                                                🎵 Music Player 3 — Lightweight MP3 player for Linux

                                                                                A player focused on listening to music albums.

                                                                                ✨ Features:
                                                                                • Continuous playback
                                                                                • Real-time search for songs/albums
                                                                                • Low memory usage & high performance

                                                                                🛠️ Planned: Tag editor, lyrics & playlists.

                                                                                🔗 Code: codeberg.org/ronscf/musicplaye
                                                                                🔗 Download: ronscf.com/translation/en/proj

                                                                                Music Player 3 interface showing album artwork, media playback controls, and a scrolling marquee timeline.

                                                                                Alt...Music Player 3 interface showing album artwork, media playback controls, and a scrolling marquee timeline.

                                                                                  [?]Kuketz-Blog 🛡 » 🌐
                                                                                  @kuketzblog@social.tchncs.de

                                                                                  Ich wollte eigentlich nur einen Erfahrungsbericht zur Pebble Time 2 schreiben.

                                                                                  5.000+ Wörter später:

                                                                                  📖 Kapitel 1: Die Uhr
                                                                                  🍿 Kapitel 7: Warum eskaliert das hier schon wieder?
                                                                                  ⌚ Kapitel 12: Ich baue jetzt einfach meine eigenen Apps und Watchfaces.

                                                                                  Wer liest gerne Romane? 🙈

                                                                                    [?]heise online English » 🤖 🌐
                                                                                    @heiseonlineenglish@social.heise.de

                                                                                    The universal messenger for admins: Apprise 2.0

                                                                                    SMS only if email fails: Apprise 2.0 learns escalation levels, timeouts, and targeted retries. Not everything remains compatible.

                                                                                    heise.de/en/news/The-universal

                                                                                      AodeRelay boosted

                                                                                      [?]Linuxiac » 🌐
                                                                                      @linuxiac@mastodon.social

                                                                                      Canonical has enabled upgrades from Ubuntu 24.04 LTS to Ubuntu 26.04.1 LTS, with the rollout beginning gradually through Update Manager.
                                                                                      linuxiac.com/ubuntu-24-04-lts-

                                                                                      Canonical has enabled upgrades from Ubuntu 24.04 LTS to Ubuntu 26.04.1 LTS, with the rollout beginning gradually through Update Manager.

                                                                                      Alt...Canonical has enabled upgrades from Ubuntu 24.04 LTS to Ubuntu 26.04.1 LTS, with the rollout beginning gradually through Update Manager.

                                                                                        [?]Pauline-FOSSGOV » 🌐
                                                                                        @paulinevanrotterdam_fossgov@social.linux.pizza

                                                                                        📢 Help us improve the Haven+ CIS Kubernetes Evidence Guide!
                                                                                        I've drafted a guide that maps the CIS Kubernetes Benchmark to practical roles, implementation controls, and audit evidence within Haven+.
                                                                                        Looking for community reviewers! Are you a platform/security engineer, auditor, or service manager? Please share your feedback on its practical usability.
                                                                                        Read & contribute:
                                                                                        gitlab.com/commonground/haven/

                                                                                          AodeRelay boosted

                                                                                          [?]9to5Linux » 🌐
                                                                                          @9to5linux@floss.social

                                                                                          You Can Now Upgrade 24.04 LTS to Ubuntu 26.04 LTS, Here’s How 9to5linux.com/you-can-now-upgr

                                                                                          @ubuntu

                                                                                          A screenshot of Ubuntu 24.04 LTS showing the notification that Ubuntu 26.04.1 LTS is now available to upgrade.

                                                                                          Alt...A screenshot of Ubuntu 24.04 LTS showing the notification that Ubuntu 26.04.1 LTS is now available to upgrade.

                                                                                            AodeRelay boosted

                                                                                            [?]LibreOffice » 🌐
                                                                                            @libreoffice@fosstodon.org

                                                                                            New in 26.8: Presentation Sections – Large slide decks become easier to manage with the new Presentation Sections feature, allowing slides to be organised into logical groups. wiki.documentfoundation.org/Re

                                                                                              [?]Dalibo » 🌐
                                                                                              @dalibo@mastodon.online

                                                                                              JOB : nous recherchons un⋅e senior avec les compétences suivantes => dali.bo/202609_offre_adminsys

                                                                                              ✅ système et virtualisation : …
                                                                                              ✅ sécurité : , routage…
                                                                                              ✅ automatisation : ou
                                                                                              ✅ télé-collaboration : …



                                                                                              visuel "Dalibo recrute"

                                                                                              Alt...visuel "Dalibo recrute"

                                                                                                [?]GamingOnLinux » 🤖 🌐
                                                                                                @gamingonlinux@mastodon.world

                                                                                                D7VK is a Vulkan-based translation layer for Direct3D 7, 6, 5 and 3 for use with Wine / Proton, and with version 2.3 out now it's entering maintenance mode.
                                                                                                gamingonlinux.com/2026/09/d7vk

                                                                                                  [?]iX Magazin » 🌐
                                                                                                  @iX_Magazin@social.heise.de

                                                                                                  AodeRelay boosted

                                                                                                  [?]Sovereign Tech Agency » 🌐
                                                                                                  @sovtechfund@mastodon.social

                                                                                                  relaunches with four new services for critical projects: memory safety, post-quantum encryption, supply chain security, and Cyber Resilience Act compliance.
                                                                                                  sovereign.tech/news/resilience 1/

                                                                                                  Sovereign Tech Resilience relaunches with four new services to prevent, discover, and eliminate vulnerabilities in critical digital infrastructure. Sovereign Tech Agency.

                                                                                                  Alt...Sovereign Tech Resilience relaunches with four new services to prevent, discover, and eliminate vulnerabilities in critical digital infrastructure. Sovereign Tech Agency.

                                                                                                  Transition to memory safety: helping projects find where memory-safe languages and practices matter most, then supporting the move. Sovereign Tech Resilience logo in the upper right corner, Sovereign Tech Agency on the bottom.

                                                                                                  Alt...Transition to memory safety: helping projects find where memory-safe languages and practices matter most, then supporting the move. Sovereign Tech Resilience logo in the upper right corner, Sovereign Tech Agency on the bottom.

                                                                                                    [?]knoppix » 🌐
                                                                                                    @knoppix95@mastodon.social

                                                                                                    Signal Login now enables phone-number-free registration in Android Beta 8.28.1, with iOS support planned later. 📱
                                                                                                    The optional signup costs $2.99/€3.49 once and uses zero-knowledge proofs to unlink payment from accounts. 🔐

                                                                                                    @signalapp

                                                                                                    🔗 aboutsignal.com/news/signal-re

                                                                                                      AodeRelay boosted

                                                                                                      [?]KDE » 🌐
                                                                                                      @kde@floss.social

                                                                                                      Increased productivity, decreased costs, when Italian logistics company moved from to @kubuntu.

                                                                                                      itsfoss.com/linux-stories/ital

                                                                                                      Mišo Oroz, founder of @zerolock : "The company has not called me for a single ordinary technical issue since the migration."

                                                                                                      
Mišo Oroz, founder of  Zerolock, poses in front of a Kubuntu machine displaying Plasma 6.

                                                                                                      Alt... Mišo Oroz, founder of Zerolock, poses in front of a Kubuntu machine displaying Plasma 6.

                                                                                                        [?]knoppix » 🌐
                                                                                                        @knoppix95@mastodon.social

                                                                                                        GrapheneOS is overhauling its default apps, adding RCS support and end-to-end encryption to its messaging app. 🔐
                                                                                                        It also plans a secure clipboard to prevent apps from accessing clipboard contents without permission. 📱

                                                                                                        @GrapheneOS

                                                                                                        🔗 privacyguides.org/news/2026/09

                                                                                                          [?]r1cksec » 🌐
                                                                                                          @r1cksec@infosec.exchange

                                                                                                          Enumerate user accounts and registered authentication methods via the Microsoft Self-Service Password Reset (SSPR) portal.

                                                                                                          github.com/mlcsec/ResetSpy

                                                                                                            [?]heise online English » 🤖 🌐
                                                                                                            @heiseonlineenglish@social.heise.de

                                                                                                            [?]packagist » 🌐
                                                                                                            @packagist@phpc.social

                                                                                                            Packagist turns 15 🎉

                                                                                                            On September 27, 2011, monolog/monolog became package ID 1. Today Packagist lists more than 469,000 packages, and Composer has installed packages from it more than 200 billion times.

                                                                                                            Our anniversary post covers how it all started, 15 years of milestones, the growth we've seen in 2026, and what comes next for supply chain security and funding.

                                                                                                            blog.packagist.com/15-years-of

                                                                                                              [?]geoObserver » 🌐
                                                                                                              @geoObserver@mastodon.social

                                                                                                              [?]iX Magazin » 🌐
                                                                                                              @iX_Magazin@social.heise.de

                                                                                                              KI-Agenten an die Leine? OpenChamber führt Teamregeln ein

                                                                                                              OpenChamber 2.0.4 bringt einen Enterprise-Modus, der Administratoren mehr Kontrolle über Modellanbieter und Erweiterungen gibt.

                                                                                                              heise.de/news/KI-Agenten-an-di

                                                                                                              [?]Rolle Laukkarinen » 🌐
                                                                                                              @rolle@mementomori.social

                                                                                                              Thaw (an Ice fork) is an open-source menu bar manager for your Mac.
                                                                                                              github.com/thaw-app/Thaw

                                                                                                              Thaw settings screenshot

                                                                                                              Alt...Thaw settings screenshot

                                                                                                                AodeRelay boosted

                                                                                                                [?]Linux-Magazin » 🌐
                                                                                                                @redaktion@social.linux-magazin.de

                                                                                                                Angriffe auf Roundcube-Webmail nehmen zu

                                                                                                                Roundcube ist eine Open-Source-Webmail-Anwendung, mit der Nutzer E-Mails direkt im Browser lesen, schreiben und verwalten können.

                                                                                                                linux-magazin.de/news/angriffe

                                                                                                                @jcb

                                                                                                                Dreieckiges Warnschild mit rotem Rand und schwarzem Ausrufezeichen vor einem dramatisch bewölkten Himmel.

                                                                                                                Alt...Dreieckiges Warnschild mit rotem Rand und schwarzem Ausrufezeichen vor einem dramatisch bewölkten Himmel.

                                                                                                                  [?]CH Open » 🌐
                                                                                                                  @CHopen@infosec.exchange

                                                                                                                  🌱 Nachhaltige Digitalisierung oder digitale Nachhaltigkeit? Warum nicht beides?

                                                                                                                  Die DINAconCH widmet einen ganzen Track dem Thema Nachhaltigkeit mit und durch Digitalisierung. In sechs Sessions beleuchten wir, wie Digitalisierung ökologisch, sozial und technologisch nachhaltig gestaltet werden kann, und wie aus einer Notwendigkeit ein Wettbewerbsvorteil wird.

                                                                                                                  🗂️ Die Themen des Tracks:

                                                                                                                  🖥️ Resiliente IT-Infrastrukturen als Basis technologischer Nachhaltigkeit

                                                                                                                  🤝 UX-Design als Hebel für soziale Nachhaltigkeit

                                                                                                                  🚆 Mobilitätsdaten für einen besseren öffentlichen Verkehr

                                                                                                                  🌍 Die ökologische Nachhaltigkeit digitaler Lösungen

                                                                                                                  🔐 Das Potenzial digitaler Souveränität

                                                                                                                  🤖 Künstliche Intelligenz als zentraler und herausfordernder Player

                                                                                                                  Seien Sie dabei, wenn wir die digitale Zukunft gestalten. Nachhaltig.

                                                                                                                  👉 Mehr Informationen zum Track: lnkd.in/epEQnyFK

                                                                                                                    AodeRelay boosted

                                                                                                                    [?]Flathub » 🌐
                                                                                                                    @flathub@floss.social

                                                                                                                    Hello, world! 👋 It’s your friendly neighborhood Linux app store here on the Fediverse! Check our profile, we’re verified. 😎

                                                                                                                    Speaking of which… if you’re an app developer and want to get your app verified on Flathub, check the docs! If you need any help, give us a shout here.

                                                                                                                    docs.flathub.org/docs/for-app-

                                                                                                                      [?]VSX.is | Digital sovereignty » 🌐
                                                                                                                      @vsx@infosec.exchange

                                                                                                                      Chat Control 2.0 Talks Continue Today. The Dispute Is Over Scanning Private Messages

                                                                                                                      According to the current plan, negotiators from the European Parliament, the Council of the EU, and the European Commission will meet today in Brussels.

                                                                                                                      vsx.global/chat-control-2-0-si

                                                                                                                        [?]Daniel » 🌐
                                                                                                                        @danielpetrica@infosec.exchange

                                                                                                                        I am not a big company. My server will go down sometimes. So the health check degrades gracefully: if it cannot reach the server, it is a warning, not an error.

                                                                                                                        Your build never breaks.

                                                                                                                          AodeRelay boosted

                                                                                                                          [?]Alfonso Siciliano » 🌐
                                                                                                                          @alfonsosiciliano@mastodon.bsd.cafe

                                                                                                                          Hi! 👋 Anyone in around the communities?

                                                                                                                          I’m moving there in a few weeks, initially to , but I’m also considering places like or .

                                                                                                                          Any tips on finding a place to live, work, sorting out a bank account/phone, or just getting settled?

                                                                                                                          I left the UK about 10 years ago, so I’ll also need to get my English back up to speed! 😅

                                                                                                                            [?]h o ʍ l e t t » 🌐
                                                                                                                            @homlett@mamot.fr

                                                                                                                            @fifonetworks @sergedroz , which is and , is very decent → libretranslate.com/

                                                                                                                            Even if poorly documented, there is also 's built-in UI for free-text , leveraging a 100% model → firefox-source-docs.mozilla.or

                                                                                                                            or will give you better results than either of the above options, though.

                                                                                                                              [?]/G|T|R|O|N|I|X\ :python: :emacs: :nix: :linux: » 🌐
                                                                                                                              @gtronix@infosec.exchange

                                                                                                                              "Europe and UAE plan $1 billion orbital data center with 50 connected "computers" and a central "LLM store" that allows users to select what open source model to use on data collected by satellite sensors"

                                                                                                                              "A UAE-financed, France-anchored consortium plans to launch 50 AI-equipped Earth observation satellites and build an in-orbit model marketplace."

                                                                                                                              techradar.com/pro/europe-and-u

                                                                                                                                [?]The Zeek Network Security Monitor » 🌐
                                                                                                                                @zeek@infosec.exchange

                                                                                                                                New from Johanna: two ways to shrink Zeek's JSON logs, inspired by a community member who found it saved him multiple gigabytes a day:

                                                                                                                                zeek.org/2026/09/reducing-zeek

                                                                                                                                  AodeRelay boosted

                                                                                                                                  [?]9to5Linux » 🌐
                                                                                                                                  @9to5linux@floss.social

                                                                                                                                  2.56 Adds New Options for Cleaning Up Branches and Resolving Conflicts 9to5linux.com/git-2-56-adds-ne

                                                                                                                                  Git logo

                                                                                                                                  Alt...Git logo

                                                                                                                                    [?]donthatedontkill » 🌐
                                                                                                                                    @donthatedontkill@nantes.social

                                                                                                                                    Hello, all! Can you all give me a recommendation for an alternative to Meets/Teams/Skype? Ideally one that you can send a link and then people can join from their browser. Open to any of your suggestions. And thank you 😃
                                                                                                                                    (And if you don't know, boosts are welcome help!)

                                                                                                                                      [?]Alexis Brignoni :python: :donor: » 🌐
                                                                                                                                      @abrignoni@infosec.exchange

                                                                                                                                      New GLEAPP companion: the Map Downloader cuts an area of the Protomaps planet basemap into one .pmtiles file on an online machine, for GLEAPP's offline maps.

                                                                                                                                      Only the tiles inside the area are downloaded. The server sees which area you ask for.

                                                                                                                                      leapps.org/releases#section-gleapp-map-downloader

                                                                                                                                        [?]Alexis Brignoni :python: :donor: » 🌐
                                                                                                                                        @abrignoni@infosec.exchange

                                                                                                                                        qnxprobe v1.50:

                                                                                                                                        - deleted files off YAFFS2, JFFS2 and UBIFS flash
                                                                                                                                        - BitLocker volumes opened with a password, recovery password or .BEK key
                                                                                                                                        - encrypted APFS volumes opened with their password
                                                                                                                                        - NTFS alternate data streams
                                                                                                                                        - E01, AFF4, .dmg, VMDK and more opened directly

                                                                                                                                        One Python file.

                                                                                                                                        leapps.org/probes#section-qnxprobe

                                                                                                                                          [?]AA » 🌐
                                                                                                                                          @AAKL@infosec.exchange

                                                                                                                                          So, a couple of items here:

                                                                                                                                          1 - Akamai Joins Athena Coalition to Shield Users from New Vulnerabilities akamai.com/blog/security-resea

                                                                                                                                          And

                                                                                                                                          2 - The industry coalition to protect open source software from AI attacks - that's the Athena Chainguard Coalition chainguard.dev/athena chainguard.dev/athena

                                                                                                                                            AodeRelay boosted

                                                                                                                                            [?]Zachary Powell 🥑 » 🌐
                                                                                                                                            @zachary@social.devwithzachary.com

                                                                                                                                            What starts as importing a PS Vita from Japan quickly turns into booting modern Linux and launching a new open source initiative.

                                                                                                                                            In this video, I unbox a Japanese Vita, hack it, and kick off the LinuxOnVita project to get Linux running properly on the hardware.

                                                                                                                                            Watch on PeerTube:
                                                                                                                                            tube.devwithzachary.com/w/ghxZ

                                                                                                                                            Watch on YouTube:
                                                                                                                                            youtu.be/gKmTsLkO8uQ

                                                                                                                                            GitHub repository:
                                                                                                                                            github.com/devwithzachary/Linu

                                                                                                                                              [?]LinuxNation » 🌐
                                                                                                                                              @LinuxNation@burningboard.net

                                                                                                                                              Linux-News: Kiel & Niederlande setzen auf Linux, KDE KI-Desktop & F-Droid 2.0

                                                                                                                                              In diesem Wochenrückblick geht es um den Wechsel der Kieler Staatskanzlei und der Niederlande auf Linux-Systeme. Zudem werden die Pläne einiger KDE-Entwickler für einen KI-Desktop sowie die Updates zu F-Droid 2.0, Garuda Nix und dem Raspberry Pi OS vorgestellt.

                                                                                                                                              Youtube: youtu.be/KKvOhDGwqgA
                                                                                                                                              Odysee: odysee.com/@linuxnation:e/linu
                                                                                                                                              Peertube: clip.place/w/n7qfRm5B6aHXVmTkW

                                                                                                                                                AodeRelay boosted

                                                                                                                                                [?]9to5Linux » 🌐
                                                                                                                                                @9to5linux@floss.social

                                                                                                                                                157 Is Now Available for Download with Brand-New Design 9to5linux.com/mozilla-firefox-

                                                                                                                                                A screenshot of Mozilla Firefox 157 showing the main window while browsing the 9to5linux.com website and the About Mozilla #Firefox dialog.

                                                                                                                                                Alt...A screenshot of Mozilla Firefox 157 showing the main window while browsing the 9to5linux.com website and the About Mozilla #Firefox dialog.

                                                                                                                                                  [?]Linux Magazine » 🌐
                                                                                                                                                  @linuxmagazine@fosstodon.org

                                                                                                                                                  Need to set up a dashboard to monitor your home server? Koen Vervloesem introduces you to Gatus and its status dashboard that can alert you to problems

                                                                                                                                                  linux-magazine.com/Issues/2026

                                                                                                                                                  Screenshot: A simple health dashboard with Gatus

                                                                                                                                                  Alt...Screenshot: A simple health dashboard with Gatus

                                                                                                                                                    [?]Cegorach » 🌐
                                                                                                                                                    @dat@social.g33ky.de

                                                                                                                                                    Da war er, der dümmste Take zum Thema #slop den ich diese Woche lesen werde!

                                                                                                                                                    > "Ist ja kein Problem wenn die Entwickler massenweise Code aus dem LLM commiten! Das Projekt ist OpenSource, du kannst dir ja jederzeit ansehen was der Code tut!"

                                                                                                                                                    Das mit dem Fremdcode lesen hat früher nie funktioniert.

                                                                                                                                                    Noch nie haben Nutzer nennenswert die Sicherheit und Funktion von #OpenSource eingeschätzt. Das war schon immer ein leeres Versprechen ohne jeglichen Wert für Endnutzer. (Was aber funktionierte: wenn man als Dev einen neuen Browser entwickeln wollte, konnte man anhand des Codes grob einschätzen ob man lieber WebKit oder Netscape als Basis forken sollte)

                                                                                                                                                    Das neue an der Situation ist dass da sehr schnell, sehr viel Code mit fraglicher Qualität entsteht. So viel Code dass selbst die ursprünglichen Entwickler ihn nicht mehr lesen oder zumindest verstehen.

                                                                                                                                                    Und wenn der Hersteller nicht versteht was er ausliefert, muss einfach der Endanwender das technische Verständnis und den Zeitaufwand aufbringen?

                                                                                                                                                    LOL!

                                                                                                                                                      [?]iX Magazin » 🌐
                                                                                                                                                      @iX_Magazin@social.heise.de

                                                                                                                                                      Microsoft Office unter Linux? Bottles wagt den Praxistest

                                                                                                                                                      Word und Excel unter Linux statt im Browser: Bottles stellt einen Installer für Microsoft 365 bereit. Für den Alltag ist das System noch nicht geeignet.

                                                                                                                                                      heise.de/news/Microsoft-Office

                                                                                                                                                        AodeRelay boosted

                                                                                                                                                        [?]9to5Linux » 🌐
                                                                                                                                                        @9to5linux@floss.social

                                                                                                                                                        1.18.4 App Sandboxing Framework Released with Various Security Fixes 9to5linux.com/flatpak-1-18-4-l

                                                                                                                                                        Flatpak logo

                                                                                                                                                        Alt...Flatpak logo

                                                                                                                                                          AodeRelay boosted

                                                                                                                                                          [?]GNOME » 🌐
                                                                                                                                                          @gnome@floss.social

                                                                                                                                                          Era, new fabulous calendar is now available on Flathub, Solitaire, classic game made with GTK, has a new release and much more in This Week in GNOME!

                                                                                                                                                          #267 A New Era
                                                                                                                                                          thisweek.gnome.org/posts/2026/

                                                                                                                                                            AodeRelay boosted

                                                                                                                                                            [?]Kuketz-Blog 🛡 » 🌐
                                                                                                                                                            @kuketzblog@social.tchncs.de

                                                                                                                                                            📱 Signal ohne Telefonnummer: Es geht tatsächlich los.

                                                                                                                                                            In der aktuellen Android-Beta lässt sich ein neues Signal-Konto erstmals komplett ohne Telefonnummer anlegen. Statt SMS-Verifizierung erhält man eine 32-stellige Account-ID und einen 64-stelligen Recovery-Key.

                                                                                                                                                            Die Registrierung kostet einmalig rund 3 US-Dollar bzw. einen länderspezifischen Betrag. Laut Signal wird die Zahlung durch Zero-Knowledge-Technik nicht direkt mit dem neuen Konto verknüpft.

                                                                                                                                                            Wichtig: Gehen Account-ID und Recovery-Key verloren, gibt es keinen Fallback über eine Telefonnummer – das Konto ist dann weg. 👇

                                                                                                                                                            support.signal.org/hc/en-us/ar

                                                                                                                                                              [?]Alexandre Dulaunoy » 🌐
                                                                                                                                                              @adulau@infosec.exchange

                                                                                                                                                              We were very happy to participate in Vulnopticon 2026 and to meet so many people interested in vulnerability identification, publication, coordination, and management.

                                                                                                                                                              The discussions during the conference and just as importantly, the conversations around and outside the formal sessions brought a lot of useful feedback, new ideas, questions, and potential directions for GCVE. These exchanges are especially valuable for a project such as GCVE, where openness, federation, interoperability, and experimentation are at the core of the initiative.

                                                                                                                                                              🔗 gcve.eu/2026/09/28/gcve-at-vul

                                                                                                                                                                [?]RelayShieldAdmin » 🌐
                                                                                                                                                                @relayshieldadmin@infosec.exchange

                                                                                                                                                                The MemTensor worm didn't attack users: it stole a maintainer's credentials and published malware AS them. Signed, trusted, into npm and PyPI.

                                                                                                                                                                How many accounts can publish into your dependency tree?

                                                                                                                                                                blog.relayshield.net/your-lapt

                                                                                                                                                                  AodeRelay boosted

                                                                                                                                                                  [?]marius.blog » 🌐
                                                                                                                                                                  @blog@marius.blog

                                                                                                                                                                  Jive Vocals: A Sound Engineer in a Go Binary

                                                                                                                                                                  Jive Vocals turns raw microphone tracks into podcast-ready audio with one command. Developed by Martin Wimpress (@martin@wimpysworld.social), this open source tool for Linux and macOS reduces noise, tames sibilance and targets -16 LUFS without manual tuning.

                                                                                                                                                                  Read the full article: https://marius.blog/jive-vocals/

                                                                                                                                                                  Written by Marius Quabeck. Replies: @marius@social.nerdzoom.media

                                                                                                                                                                  Martin Wimpress presenting Jivetalking at Ubuntu Summit 26.04.

                                                                                                                                                                  Alt...Martin Wimpress presenting Jivetalking at Ubuntu Summit 26.04.

                                                                                                                                                                    [?]heise online English » 🤖 🌐
                                                                                                                                                                    @heiseonlineenglish@social.heise.de

                                                                                                                                                                    AodeRelay boosted

                                                                                                                                                                    [?]LibreOffice » 🌐
                                                                                                                                                                    @libreoffice@fosstodon.org

                                                                                                                                                                    Sixteen years of : blog.documentfoundation.org/bl

                                                                                                                                                                    LibreOffice banner, with balloons, saying we're celebrating sixteen years of independence

                                                                                                                                                                    Alt...LibreOffice banner, with balloons, saying we're celebrating sixteen years of independence

                                                                                                                                                                      [?]Arint - SEO+KI » 🌐
                                                                                                                                                                      @Arint@arint.info

                                                                                                                                                                      [?]Arint - SEO+KI » 🌐
                                                                                                                                                                      @Arint@arint.info

                                                                                                                                                                      RT @JensenHuang: Heute stellten wir mit über 100 Industriepartnern die NVIDIA Open Agent Safety Platform vor, die OpenShell und Sentry zusammenführt.

                                                                                                                                                                      mehr auf Arint.info

                                                                                                                                                                      https://x.com/JensenHuang/status/2104499465055023424

                                                                                                                                                                        [?]iX Magazin » 🌐
                                                                                                                                                                        @iX_Magazin@social.heise.de

                                                                                                                                                                        AodeRelay boosted

                                                                                                                                                                        [?]KDE » 🌐
                                                                                                                                                                        @kde@floss.social

                                                                                                                                                                        What does the future hold for KDE?

                                                                                                                                                                        As KDE nears its 30th , Nate Graham and @AleixPol join @MichaelTunnell to discuss .8, the shift to Wayland, and the community that has shaped KDE over thirty years.

                                                                                                                                                                        Watch the interview: youtu.be/qBAsX0SRhqI

                                                                                                                                                                        --
                                                                                                                                                                        Support KDE’s next thirty years: kde.org/anniversaries/30/

                                                                                                                                                                        Nate and Aleix wearign headphones and smiling against a blue backdrop with Konqi

                                                                                                                                                                        Alt...Nate and Aleix wearign headphones and smiling against a blue backdrop with Konqi

                                                                                                                                                                          [?]slimbook » 🌐
                                                                                                                                                                          @slimbook@mementomori.social

                                                                                                                                                                          Linux, local AI, and a Slimbook EVO optimized to work together 🚀

                                                                                                                                                                          Florin has shared the release of BRGV-OS, an independent Linux distribution based on Void Linux, with an edition specifically optimized for Slimbook EVO with AMD Strix Point.

                                                                                                                                                                          The project focuses on local computing, making use of the EVO’s NPU and GPU to run AI tools and models locally, while also including engineering and productivity applications.

                                                                                                                                                                          Florin has also prepared this video showcasing the project and the result of his work:

                                                                                                                                                                          🎥 youtu.be/5aD8n89_V5Q

                                                                                                                                                                          Thanks, Florin, for sharing your work with the community and for exploring what’s possible with the EVO 🙌

                                                                                                                                                                          Screenshot of a post about BRGV-OS, an independent Linux distribution based on Void Linux, with an edition optimized for Slimbook EVO laptops with AMD Strix Point, focused on local computing and artificial intelligence.

                                                                                                                                                                          Alt...Screenshot of a post about BRGV-OS, an independent Linux distribution based on Void Linux, with an edition optimized for Slimbook EVO laptops with AMD Strix Point, focused on local computing and artificial intelligence.

                                                                                                                                                                            [?]VSX.is | Digital sovereignty » 🌐
                                                                                                                                                                            @vsx@infosec.exchange

                                                                                                                                                                            GrapheneOS Confirms Its First Phone Beyond the Pixel Line. The Motorola Signature 27 Is Set to Get Support

                                                                                                                                                                            In early September, I wrote that GrapheneOS was expanding beyond the Pixel lineup. At the time, the project announced that the first supported Motorola phone would arrive…

                                                                                                                                                                            vsx.global/grapheneos-motorola

                                                                                                                                                                              [?]Bob the Traveler » 🤖 🌐
                                                                                                                                                                              @bobthetraveler@mastodon.world

                                                                                                                                                                              [?]r1cksec » 🌐
                                                                                                                                                                              @r1cksec@infosec.exchange

                                                                                                                                                                              A single-pass Active Directory enumerator for an anonymous (null) session, using the \samr and \lsarpc named pipes. No credentials required.

                                                                                                                                                                              github.com/crypt0p3g/adnullenum

                                                                                                                                                                                [?]AdventureTense » 🌐
                                                                                                                                                                                @adventure_tense@mapstodon.space

                                                                                                                                                                                This weekend I stumbled onto the open source calendar app called Calendula.

                                                                                                                                                                                What a fantastic project. Works great in GrapheneOS. It's a really intuitive to use, with thoughtfully designed features. I personally LIVE in Agenda view!

                                                                                                                                                                                Certainly worth checking out.

                                                                                                                                                                                codeberg.org/jlmakiola/calendu

                                                                                                                                                                                  AodeRelay boosted

                                                                                                                                                                                  [?]nexy <3 [it/its, she/her] » 🌐
                                                                                                                                                                                  @nex@fedi.transgender.ing

                                                                                                                                                                                  Continuwuity v26.9.1 just released, containing a critical security fix, and a couple similarly important bug fixes. All federated deployments should update ASAP. Also read the release notes or I'll unplug your Ethernet and not tell you.

                                                                                                                                                                                  RE: https://tech.lgbt/users/JadedBlueEyes/statuses/117346166288900373

                                                                                                                                                                                  [?]Jade [she/her] » 🌐
                                                                                                                                                                                  @JadedBlueEyes@tech.lgbt

                                                                                                                                                                                  Incoming security fix for Continuwuity!

                                                                                                                                                                                    [?]c't Magazin » 🌐
                                                                                                                                                                                    @ct_Magazin@social.heise.de

                                                                                                                                                                                    [?]Daniel » 🌐
                                                                                                                                                                                    @danielpetrica@infosec.exchange

                                                                                                                                                                                    We check your composer.lock. Package names and versions are the only data sent to the server.

                                                                                                                                                                                    No lockfile content, no paths, no env values. Privacy-first by design.

                                                                                                                                                                                      AodeRelay boosted

                                                                                                                                                                                      [?]9to5Linux » 🌐
                                                                                                                                                                                      @9to5linux@floss.social

                                                                                                                                                                                      4.0.1 Open-Source Video Editor Released with Timeline and Zoom Improvements, Faster Keyframe and Color Editing, and Official Snap Support 9to5linux.com/openshot-4-0-1-v

                                                                                                                                                                                      A screenshot of OpenShot 4.0.1 showing the main window while editing video files and the About OpenShot dialog.

                                                                                                                                                                                      Alt...A screenshot of OpenShot 4.0.1 showing the main window while editing video files and the About OpenShot dialog.

                                                                                                                                                                                        [?]Rui Guimarães :rt: » 🌐
                                                                                                                                                                                        @daedalus@mastodon.ruiguimaraes.net

                                                                                                                                                                                        Linux changes you. 🐧
                                                                                                                                                                                        It starts with curiosity… then somehow becomes a way of thinking, working, and occasionally spending far too much time fixing things that were working perfectly fine. 😅
                                                                                                                                                                                        Some habits follow you home.

                                                                                                                                                                                        Two-panel meme showing a person at a computer. “Before Linux” shows a simple, nearly empty room; “After Linux” shows the same room packed with computers, servers, cables and equipment.

                                                                                                                                                                                        Alt...Two-panel meme showing a person at a computer. “Before Linux” shows a simple, nearly empty room; “After Linux” shows the same room packed with computers, servers, cables and equipment.

                                                                                                                                                                                          AodeRelay boosted

                                                                                                                                                                                          [?]Gina » 🌐
                                                                                                                                                                                          @Gina@fosstodon.org

                                                                                                                                                                                          It's 01:44 am, so naturally I'm working on my "The Future is Decentralized and Federated" talk for @oscl .

                                                                                                                                                                                          I'm at the part where I explain the need for decentralized (and federated) platforms and the adverse effects of centralized platforms.

                                                                                                                                                                                          Besides the obvious examples of big tech shutting down services, I'm considering including the hostile take-over of TikTok by Oracle, a private equity firm, and an Abu Dhabi based VC firm.

                                                                                                                                                                                            AodeRelay boosted

                                                                                                                                                                                            [?]ティージェーグレェ » 🌐
                                                                                                                                                                                            @teajaygrey@snac.bsd.cafe

                                                                                                                                                                                            Thank you for that!

                                                                                                                                                                                            I submitted a Pull Request to update MacPorts' Got to 0.129 here:

                                                                                                                                                                                            https://github.com/macports/macports-ports/pull/34983

                                                                                                                                                                                            GitHub Continuous Integration checks passed OK!

                                                                                                                                                                                            It's up to someone else with commit access to merge it.

                                                                                                                                                                                            My apologies for the delay, I did create the 0.129 undeadly.org story yesterday yet am only just now back in front of a laptop to test the code locally.


                                                                                                                                                                                              [?]Schokokäse » 🌐
                                                                                                                                                                                              @schokokaese@climatejustice.social

                                                                                                                                                                                              📲

                                                                                                                                                                                              Ich nutze schon sehr lange Karten von OpenStreetMap als Grundlage für meine Navigation. Als mein altes Fairphone 2 für die App OSMAnd+ aber zu schwach wurde, habe ich nach Alternativen geschaut.

                                                                                                                                                                                              Über Organic Maps bin ich letztlich bei dessen Fork CoMaps gelandet. Auch wieder Karten von OpenStreetMap, auch wieder Offline-Karten. Aber viel schlanker. Damit konnte mein Fairphone 2 tatsächlich wieder flüssig navigieren 😅 Und die meisten Funktionen von OSMAnd+ habe ich eh nicht genutzt. Da ist die deutlich aufgeräumtere Nutzungsoberfläche von CoMaps ein weiterer Vorteil.

                                                                                                                                                                                              Und @CoMaps ist auch hier im Fediverse aktiv 😃

                                                                                                                                                                                              f-droid.org/packages/app.comap

                                                                                                                                                                                                [?]Reymart Calicdan » 🌐
                                                                                                                                                                                                @rcalicdan@phpc.social

                                                                                                                                                                                                Curious what runtime reified generics and typed arrays look like in pure PHP?

                                                                                                                                                                                                You can now test TypePHP live in your browser and powered by real PHP 8.5 on WebAssembly:

                                                                                                                                                                                                typephp-php.github.io/docs/pla

                                                                                                                                                                                                What's inside:

                                                                                                                                                                                                • 16 interactive presets (Generics, Array Shapes, Conditional types, etc.)

                                                                                                                                                                                                • Live engine config toggles (Full vs. Hybrid O(1) array validation), strict invariance, nullability)

                                                                                                                                                                                                • X-Ray view to inspect AST checks with zero line-drift

                                                                                                                                                                                                TypePHP demo playground

                                                                                                                                                                                                Alt...TypePHP demo playground

                                                                                                                                                                                                  AodeRelay boosted

                                                                                                                                                                                                  [?]9to5Linux » 🌐
                                                                                                                                                                                                  @9to5linux@floss.social

                                                                                                                                                                                                  10.10.3 Desktop Environment Introduces Free Placement of Desktop Icons, Brings Back the Keyboard Layout Applet 9to5linux.com/budgie-10-10-3-d

                                                                                                                                                                                                  @buddiesofbudgie

                                                                                                                                                                                                  A screenshot of the Budgie 10.10 desktop environment showing the Raven notification center and the Budgie Menu application menu.

                                                                                                                                                                                                  Alt...A screenshot of the Budgie 10.10 desktop environment showing the Raven notification center and the Budgie Menu application menu.

                                                                                                                                                                                                    [?]Owl Eyes Hoo » 🌐
                                                                                                                                                                                                    @d1@autistics.life

                                                                                                                                                                                                    tutorial video. Wow, they've come a long way since the last time I played, years ago:
                                                                                                                                                                                                    youtu.be/xmaiQCEFEis

                                                                                                                                                                                                      [?]Owl Eyes Hoo » 🌐
                                                                                                                                                                                                      @d1@autistics.life

                                                                                                                                                                                                      The problem with : you need a fairly fancy video card, *and* like 3+ other friends to play multiplayer at the same time (you'll be too weak against powerful enemies otherwise)... who also have fairly fancy video cards (like NVidia 1080's or better). In this economy?

                                                                                                                                                                                                        [?]Bob the Traveler » 🤖 🌐
                                                                                                                                                                                                        @bobthetraveler@mastodon.world

                                                                                                                                                                                                        The Project was announced OTD in 1983, aiming to develop a free Unix-like operating system cromwell-intl.com/open-source/

                                                                                                                                                                                                          🗳

                                                                                                                                                                                                          [?]maxfx » 🌐
                                                                                                                                                                                                          @martin@mastodon.bsd.cafe

                                                                                                                                                                                                          Would you run your work on ?
                                                                                                                                                                                                          I've been porting tools to . Gaffer now runs on it, and I'm working on Blender and on support through the , 's Linux binary compatibility layer.
                                                                                                                                                                                                          Before going further, I'd like to know whether there's real interest and what stands in the way. Vote below, and if you pick "Only with vendor support" or "No", tell me in the comments what the blocker is.

                                                                                                                                                                                                          Yes, on workstations:4
                                                                                                                                                                                                          Yes, render farm / infra only:1
                                                                                                                                                                                                          Only with vendor support:0
                                                                                                                                                                                                          No:1
                                                                                                                                                                                                            AodeRelay boosted

                                                                                                                                                                                                            [?]Buddies of Budgie » 🌐
                                                                                                                                                                                                            @buddiesofbudgie@floss.social

                                                                                                                                                                                                            We're excited to announce 10.10.3! It adds favorites to Budgie Menu, brings back the Keyboard Layout applet, lets you choose your primary monitor, introduces free placement of desktop icons, improves our labwc integration, and more.

                                                                                                                                                                                                            buddiesofbudgie.org/blog/budgi

                                                                                                                                                                                                              fedicat boosted

                                                                                                                                                                                                              [?]🏳️‍⚧️ Christin Löhner 🏳️‍🌈 » 🌐
                                                                                                                                                                                                              @christin@lsbt.me

                                                                                                                                                                                                              FediSuite 1.7.0 is here!

                                                                                                                                                                                                              This release brings some of the biggest additions yet for publishing and analytics:

                                                                                                                                                                                                              • Archive search: Search every post FediSuite has ever seen for your accounts. Search a single account or all connected accounts at once, with matches even inside words.
                                                                                                                                                                                                              • Cross-posting: Select multiple accounts in the composer and publish or schedule the same post across different platforms. FediSuite automatically respects character limits, media rules, visibility options and other restrictions of all selected accounts.
                                                                                                                                                                                                              • Eight new reach insights: FediSuite now uses calculated net reach directly to identify your best times and weekdays, differences between media and text posts, potential reach decline and more.
                                                                                                                                                                                                              • The reach formula developed by Ralf Stockmann for FediWings now also includes quotes from Mastodon 4.5+. FediWings is also explicitly acknowledged within FediSuite as its sister project.

                                                                                                                                                                                                              Plus several bug fixes and smaller improvements.

                                                                                                                                                                                                              FediSuite is open source, self-hostable and licensed under GPL-3.0.

                                                                                                                                                                                                              fedisuite.com

                                                                                                                                                                                                                AodeRelay boosted

                                                                                                                                                                                                                [?]Farooq [Master Patata] » 🌐
                                                                                                                                                                                                                @farooqkz@mastodon.bsd.cafe

                                                                                                                                                                                                                Yesterday we were talking with Viktor on Discord. I was thinking the bottleneck in crawling is bandwidth. Viktor said something else:

                                                                                                                                                                                                                The bottleneck is not BW, not most of the time. But the problem's that a) the crawler is polite. So I don't send so many requests to the same host concurrently. For instance, so many websites on wordpress.com, geocities, github.io and similar.

                                                                                                                                                                                                                And b) Too many open connections will drive the network switch mad and it'll be problematic.

                                                                                                                                                                                                                Since yesterday, I'm using to download websites for offline usage and later index them using . By default, wget is a polite crawler. I am fetching about ~10 websites concurrently. And the average BW usage is just 1MB/s. Fetching some websites is not done since yesterday till now...

                                                                                                                                                                                                                  [?]BSidesLuxembourg » 🌐
                                                                                                                                                                                                                  @BSidesLuxembourg@infosec.exchange

                                                                                                                                                                                                                  recording: "𝐓𝐮𝐫𝐛𝐨𝐜𝐡𝐚𝐫𝐠𝐞𝐝 𝐒𝐎𝐂: 𝐃𝐞𝐭𝐞𝐜𝐭𝐅𝐥𝐨𝐰 𝐀𝐧𝐝 𝐎𝐭𝐡𝐞𝐫 𝐈𝐧𝐧𝐨𝐯𝐚𝐭𝐢𝐯𝐞 𝐎𝐩𝐞𝐧 𝐒𝐨𝐮𝐫𝐜𝐞 𝐓𝐨𝐨𝐥𝐬" by Andrii Bezverkhyi linkedin.com/in/andriimb/

                                                                                                                                                                                                                  Find all the talks from this track/village here: archive.org/details/BSidesLuxe

                                                                                                                                                                                                                    [?]Vassilis » 🌐
                                                                                                                                                                                                                    @vassilis@libranet.de

                                                                                                                                                                                                                    This $13 gadget detects trackers, cameras, and other wireless devices that may be spying on you

                                                                                                                                                                                                                    boingboing.net/2026/09/21/squa…

                                                                                                                                                                                                                    SquachWatch is an open-source ESP32 firmware project that turns a cheap touchscreen board into a portable detector for trackers, cameras, Flock readers, and other wireless devices that plague us.


                                                                                                                                                                                                                      [?]BSidesLuxembourg » 🌐
                                                                                                                                                                                                                      @BSidesLuxembourg@infosec.exchange

                                                                                                                                                                                                                      recording: "𝐊𝐮𝐧𝐚𝐢: 𝐎𝐩𝐞𝐧-𝐒𝐨𝐮𝐫𝐜𝐞 𝐓𝐡𝐫𝐞𝐚𝐭 𝐃𝐞𝐭𝐞𝐜𝐭𝐢𝐨𝐧 𝐎𝐧 𝐋𝐢𝐧𝐮𝐱" by Quentin Jerome @qjerome

                                                                                                                                                                                                                      Find all the talks from this track/village here: archive.org/details/BSidesLuxe

                                                                                                                                                                                                                        [?]Michael Boelen » 🌐
                                                                                                                                                                                                                        @mboelen@mastodon.social

                                                                                                                                                                                                                        🤔 Question: what would you do if you want to release an open source project, but not want to have it feed the AI machine?

                                                                                                                                                                                                                        It is clear that I am not the only one struggling with this. Curious if we can come up with creative ways to reward humans and grant them access, while at the same time stopping the AI overlords.

                                                                                                                                                                                                                        Suggestions or ideas?

                                                                                                                                                                                                                          Back to top - More...