jrollans.com is a Fediverse instance that uses the ActivityPub protocol. In other words, users at this host can communicate with people that use software like Mastodon, Pleroma, Friendica, etc. all around the world.
This server runs the snac software and there is no automatic sign-up process.
What's a technology nightmare that FreeBSD helps you avoid? 🎃
This Halloween, we're highlighting how the FreeBSD Foundation supports the community's efforts to keep those technology nightmares at bay by funding security research, Wi-Fi and graphics improvements, and testing infrastructure.
Consider investing in the work that helps keep FreeBSD moving forward.
Donate today: https://freebsdfoundation.org/donate-to-freebsd-foundation/
@mjack Deres historie og forretnings-model er meget anderledes end Proton - bygget nedefra og op - starte småt og udvide efterhånden som det var muligt - i bedste #opensource tradition - bla. baseret på #Linux
@tuta er mindre et produkt end proton
Mange brugere har haft betalt abonnement næsten fra starten - for at støtte deres fortsatte udvikling og måske meget fordi de aktivt arbejder sammen med universiteter i udviklingen
I sjov - kalder jeg dem neo-hippier 😀
Incoming: Why I keep KeePassXC as a backup for 1Password
I love 1Password, and I still keep a copy of my passwords in KeePassXC. Here’s why, plus a step-by-step guide: exporting to .1pux, importing, wiping the unencrypted file, what happens to passkeys, and how to keep a backup that actually works when you need it.
Cisco open-sourced Quarry to detect attack patterns in AI agent execution traces. It focuses on multi-step sequences where individual actions look benign but combine into malicious behavior. Relevant for teams securing agentic workflows and tool use. #AiSecurity #AgenticAI #OpenSource
https://cyberworldops.eu/en/cisco-open-sources-quarry-to-flag-ai-agent-attack-patterns
Überlebt die App den Node-Drain? Kubernetes plant den Härtetest
Vor Cluster-Upgrades müssen Admins Apps oft manuell auf Kompatibilität prüfen. Eine neue Kubernetes-Arbeitsgruppe entwickelt dafür standardisierte Tests.
#Systemverwaltung #Automatisierung #Cluster #DevOps #IT #Kubernetes #OpenSource #Softwareentwicklung #Test #news
Canonical nimmt Entwicklung von Ubuntu Core Desktop wieder auf
Canonical hat die zuletzt stagnierende Entwicklung von Ubuntu Core Desktop wieder aufgenommen.
https://www.linux-magazin.de/news/canonical-nimmt-entwicklung-von-ubuntu-core-desktop-wieder-auf/
@allpoints wow! as someone who was seriously considering the Vox AmPlug and the Fender Mustang Micro Plus as quiet-home-headphone-amps but was put off by the crappy reviews that hated the plastic case/poor build quality, this is a really nice alternative at a very attractive price point. Plus the design will be #opensource?! #Porter #gearsquad #amplifier #electricGuitar #guitar #CrowdSupply
Fedora unterstützt Raspberry Pi 5
Fedora unterstützt den Raspberry Pi 5 seit Version 44 zumindest mit einer grundlegenden Ausstattung. Das berichtet der Fedora-Release-Manager Peter Robinson in seinem Blog.
https://www.linux-magazin.de/news/fedora-unterstuetzt-raspberry-pi-5/
You have to understand that discovering that #Linux and every bit of critical #opensource software (#Firefox, #libreoffice) have been slopped is like after finally ditching cars for public transport you discover that it’s been bought out by by a combination of private equity, EA, Nēstle, Monsanto, CocaCola, _and_ Lockheed Martin, whereupon they fired every qualified driver and replaced them with an Uber-like gig economy where your train driver today is Gareth who once played some weird Japanese train game on a PS2 emulator one time but has an “Outstanding” 97.6% rating.
I just wanted to get somewhere and get stuff done. This isn’t my fight, this isn’t my day job. I already did my part by ditching Windows and now you want me to sort out your problem you so utterly failed to prevent when you breathlessly announced the partnership as “Strengthening the Community”.
Fuck you and the rent economy you rode in on, I’m not your goddamned saviour and I certainly don’t contribute to fashtech, which you now are.
CISA warnt vor aktiv ausgenutzter Sicherheitslücke im Linux-Kernel
Die US-amerikanische Cybersicherheitsbehörde CISA hat zwei weitere Sicherheitslücken in ihren Katalog bekanntermaßen ausgenutzter Schwachstellen (Known Exploited Vulnerabilities, KEV)…
#linux #opensource #LinuxKernel #CVE202641709 #CVE202646300 #CISA
With the new Epic Games Launcher supported on Linux, along with a remade Easy Anti-Cheat coming, the CachyOS team are working on kernel support for EAC v2.
https://www.gamingonlinux.com/2026/10/cachyos-linux-working-on-a-dedicated-kernel-for-supporting-easy-anti-cheat-v2/
Angreifer kapern 42 GitHub-Repositories für npm-Wurm-Kampagne „testmetest“
JFrog hat Schadcode in 42 GitHub-Repositories entdeckt. Dieser startet automatisch durch KI-Assistenten oder bei der Arbeit an Projekten.
Ubuntu Core Desktop is Canonical's immutable version of Ubuntu Linux, and they're back to working on it for desktop users.
https://www.gamingonlinux.com/2026/10/ubuntu-core-desktop-has-been-restarted-with-a-dedicated-team-with-plans-to-improve-linux-gaming/
Mesa 26.2.6 is out now as the latest upgrade for Linux open source graphics drivers, focused on fixing up some bugs reported.
https://www.gamingonlinux.com/2026/10/mesa-26-2-6-brings-fixes-for-the-witcher-3-remastered-and-various-other-linux-driver-issues/
A nice surprise for more retro gaming! Along with the release of D7VK 2.4 for older Direct3D, we also now have GXVK for Vulkan-based 3Dfx Glide.
https://www.gamingonlinux.com/2026/10/d7vk-2-4-released-along-with-gxvk-for-vulkan-based-3dfx-glide/
Seeing the new CNA Akrites and their CVD policy: Review of the Akrites SIRT CVD Policy against GCVE BCP-02
I suppose it will change and update. But seeing CNA acting as AI-broker for CVD processes it might generate some challenges in the future.
https://discourse.ossbase.org/t/review-of-the-akrites-sirt-cvd-policy-against-gcve-bcp-02/1237
#akrites #akritesinitiative #gcve #cve #cvd #vulnerabilitymanagement #vulnerability #opensource
Ubuntu Core Desktop ist zurück – fürs Web, Entwickler und Gamer
Canonical belebt den Ubuntu Core Desktop wieder: Mit neuer Core-26-Basis und modularen Snaps soll das System langfristig den Standard-Desktop ablösen.
#Betriebssystem #Canonical #Spiele #IT #OpenSource #Softwareentwicklung #Ubuntu #news
Das solltet ihr euch anschauen. Alle Programme von Adobe wurden per #ki nachgebaut. #artcraft
Alles #opensource und für #mac, #windows und #linux. Die Apps sehen aus wie die Originale, sogar die Tastenkürzel sind fast identisch.
Ist das jetzt das Ende vom Abo-Modell?
#SaaSpocalypse
@penguinrebellion Signal is not good.
They seem to absolutely love/adore Google, Apple, and Amazon. So much that they even hide the APK page on their website and only promote Google Play Store or App Store. Try find it on their website without using a search engine. Spoiler: you will fail.
And when you finally find the download APK page, Signal states it is "safer and easier" to get Signal on Google Play Store or the App Store. Easier? Yes. But safer? Only in your dreams.
They love/adore Google and Apple so much that creating an account without a phone number requires you to give your full legal name, home address, phone number, and credit card information to either Google or Apple (depending on what device you use).
And Signal love privacy and values yours, too. Oh, the irony.
So no, I would not recommend Signal other than Signal Protocol. Good news: OMEMO (the encryption method in XMPP) uses Signal Protocol. So with that said, I recommend XMPP instead of the Big Tech loving Signal.
#signal #privacy #bigtech #opensource #xmpp #omemo #signalprotocol
I had some thoughts on how to promote the #Fediverse, specifically with #stickers.
Here's my new blog post evaluating all the stickers for the #Fediverse and #Mastodon I could find: https://bammerlaan.nl/posts/Fediverse_promotional_stickers
There is absolutely no ill intent here—just some honest notes so our community-led promo stuff can hopefully compete better with Big Tech marketing budgets.
Tagging some of the creators I mention: @raphael @tommi @FediverseSymbol @Mastodon @municipaladhesives @andypiper @PaulaToThePeople @annie
Replies to this post will also appear as comments under the blog post.
#FediPromo #Marketing #GuerillaMarketing #Design #GraphicDesign #StickerDesign #OpenSource #FOSS #SocialMedia
Discover the new Armbian Imager 2.5 update. This release brings a guided setup, enhanced drive flashing safety, and vital network security improvements.
OpenMBEE: Der lange Weg von der NASA’s JPL zu Kotar
Kotar ist ein kostenloser SysML-v2-Editor, der im Browser läuft. Mein erster Eindruck: Extrem beeindruckend. Insbesondere steckt wesentlich mehr als nur ein Editor allerdings: ein SysML-v2-Service, ein Model Management System namens Flexo und eine RDF-Date
https://www.se-trends.de/openmbee-der-lange-weg-von-der-nasa-zu-kotar/
#LuftRaumfahrt #Menschen #ModellierungMBSE #OpenSource #Organisationen #Werkzeuge #JPL #Kotar #NASA #OpenMBEE
🚀 Armbian Imager v2.5 is out!
Headless setup made easier! Configure networking, users, SSH keys, language and time zone before flashing, with instant validation to catch mistakes early.
Safer flashing, better errors, new Settings page, and 🇬🇷 Greek & 🇷🇸 Serbian support (20 languages!).
Free & open source for Linux, macOS and Windows.
Building an OpenChain-aligned program? Step 1 is an inventory. Generate an SPDX SBOM for one image with Syft, then run Grype against it to see what you're carrying. Anchore is now an OpenChain Partner, and the walkthrough is in the post.
https://anchore.com/blog/anchore-is-now-an-openchain-partner/
What would make you more productive as a developer?
(boosting heavily encouraged)
#webdev #ai #engineering #opensource
| Someone writes code for me.: | 0 |
| Fewer meetings.: | 0 |
| Less context shifting.: | 0 |
Closes in 6:00:58:54
Hello Fediverse! 👋
Meet Typecase, a calm Markdown writing app for GNOME. Your texts stay plain .md files in a folder of your choice: no database, no account, no network access.
✍️ Focus mode with typewriter scrolling
🎯 Writing goals with progress rings
📚 Group view: write a whole book as one text
🎨 Themes, spell checking, export to PDF, Word and HTML.
And there are so many ideas more.
Free and open source, version 1.0 is out
https://kleinod.studio/typecase
In just 3 steps, you can set up the CrowdSec WAF, a free and open-source web application firewall:
1. Install the rule collections
2. Turn on the AppSec Component
3. Point your bouncer at it
You need the CrowdSec Security Engine and the bouncer for your web server first.
Full setup guide:
https://docs.crowdsec.net/docs/appsec/intro/?utm_source=mastodon&utm_medium=social&utm_campaign=waf-3-steps
Sagt mal was ist denn mit Ubuntu 26.04 und Libre Office (snap) los?
Der Persönliche Ordner wird einfach auf irgendein Snap Ort gezeigt. Verwirrt schon einige Nutzer...
Mal wieder ein typischer Ubuntu-Moment, von denen es leider zu viele gibt.
Finde ich richtig schade. Vergeudedes Potential....
Four researchers built a tool to test the citations in a large number of scholarly articles. In this study, they used it to show how many fabricated citations they found in a random sample of 500,000 peer-reviewed articles.
https://www.pnas.org/doi/10.1073/pnas.2623869123
I'm interested in the frequency of fake citations. But right now I'm more interested in the fact that the tool is not #OpenSource. One good reason is that it depends in part on #Claude. But the authors did not share their Claude prompts or any of the non-Claude code they wrote to supplement Claude.
They do make three gestures toward openness here though. (1) They wrote analysis code to help crunch their data, and they're willing to share that analysis code on request. (2) They offer to share the tool code with reviewers and editors on request, presumably to aid in the peer-review of their article. But they don't make the same offer to researchers who want to test the tool or use it for new studies. (3) In Appendix 01 they give pseudocode for the citation-testing tool, but not the actual code.
Motivated researchers could use the pseudocode to create their own tool. But it would likely differ in details from the tool used here, blocking attempts at precise replication.
More important, the lack of open code for testing citations prevents the critique and improvement of that code, and slows the evolution of standardized methods for testing citations.
#AI #Citations #Hallucinations #Metaresearch #OpenScience #ScholComm
Schluss mit kaputten SSH-Sessions: Update für das moderne Terminal Ghostty
Das Update für den Terminal-Emulator Ghostty senkt den RAM-Verbrauch, beschleunigt den Parser und bringt einen praktischen Wrapper für SSH-Verbindungen mit.
Ottmar Mergenthaler, who died OTD in 1899, invented the linotype machine https://cromwell-intl.com/open-source/font-config-warnings.html?s=mb #Linux #OpenSource
Thunderbird verbessert Mailanzeige unter Linux
Die MZLA Technologies Corporation hat Version 159.0 des freien E-Mail-Programms Thunderbird Desktop veröffentlicht.
https://www.linux-magazin.de/news/thunderbird-verbessert-mailanzeige-unter-linux/
After 15 years, I'm contributing to KDE again! 😄
Plasma Pass on Plasma 6.8 had a tiny, almost unusable popup. Tracked it down to missing preferred dimensions in QML.
Two lines fixed it! Tested on Fedora 45, CI green, and the MR is now open upstream.
https://invent.kde.org/plasma/plasma-pass/-/merge_requests/24
Upstream first - fewer local patches to maintain! ❤️
After 15 years, I'm contributing to KDE again! 😄
Plasma Pass on Plasma 6.8 had a tiny, almost unusable popup. With a little help from Claude Code, we tracked it down to missing preferred dimensions in QML.
Two lines fixed it! Tested on Fedora 45, CI green, and the MR is now open upstream.
https://invent.kde.org/plasma/plasma-pass/-/merge_requests/24
Upstream first - fewer local patches to maintain! ❤️
After 15 years, I'm contributing to KDE again! 😄
Plasma Pass on Plasma 6.8 had a tiny, almost unusable popup. With a little help from Claude Code, we tracked it down to missing preferred dimensions in QML.
Two lines fixed it! Tested on Fedora 45, CI green, and the MR is now open upstream.
https://invent.kde.org/plasma/plasma-pass/-/merge_requests/24
Upstream first - fewer local patches to maintain! ❤️
People are using AI to make expensive computer programs free. This could change everything
#Tech #AI #ReverseEngineering #OpenSource #FreeSoftware #DigitalRights #Microsoft #Adobe #BigTech #Internet #Software #The14Media
https://the-14.com/people-are-using-ai-to-make-expensive-computer-programs-free-this-could-change-everything
KI-Agenten an der kurzen Leine: PipesHub durchsucht das Firmenwissen
PipesHub bündelt Daten aus Slack, Jira oder GitHub für die interne Suche und KI-Agenten. Version 1.0.0 bringt unter anderem Code-Graphen und strengere Rechte.
#Anthropic #GitHub #IT #KünstlicheIntelligenz #Microsoft #OpenSource #OpenAI #news
VKD3D-Proton is one of the major parts of Valve's Proton, that enables tons of Direct3D 12 games to run well on SteamOS / Linux. Version 3.1 is out now!
https://www.gamingonlinux.com/2026/10/vkd3d-proton-3-1-brings-a-new-stable-release-ahead-of-more-important-changes-to-come/
KDE Plasma 6.8.2 is now available, delivering critical bug fixes, multi-screen improvements, and enhanced stability for Linux desktop users.
#KDEPlasma #Linux #OpenSource #SoftwareUpdate #TechNews
https://dailytechnow.com/kde-plasma-6-8-2-released-bug-fixes/
Tails 7.15.1 sperrt kompromittierte Zertifikate
Das Tails-Projekt hat am 23. Oktober die Notfallversion 7.15.1 seines auf Anonymität ausgelegten Live-Betriebssystems veröffentlicht.
https://www.linux-magazin.de/news/tails-7-15-1-sperrt-kompromittierte-zertifikate/
When the elders of the internet start dying, large parts of the online ecosystem might break. So many important pieces of software are maintained by so few people. This page visualises it all.
heise+ | Fensterverwaltung #niri vorgestellt | iX Magazin https://www.heise.de/ratgeber/Fensterverwaltung-niri-vorgestellt-11484720.html #heiseplus #OpenSource #Linux 
Für alle #Linux -Benutzer, die zu Recht mit ihren #Distros zufrieden sind. ☝️
Macht Nicht-Linux-Benutzern die Entscheidung für einen Wechsel durch solche Aussagen nicht noch schwerer und unsicherer: „Nimm gleich die bessere Lösung“, „Warum nicht XYZ?“, "Warum empfehlen alle immer ausgerechnet ...
" Veränderung entsteht weniger durch technische Überlegenheit als durch Begleitung und Mitnahme der Menschen.👇
https://krisu.eu/posts/ankommen/
#digitaleunabhängigkeit #opensource #bigtech #begleitung #diday
Kali Linux 2026.3 bietet überarbeitete Build-Skripte
Generalüberholte Build-Skripte erstellen die neue Version der an Sicherheitsexperten und Pentester gerichteten Distribution.
https://www.linux-magazin.de/news/kali-linux-2026-3-bietet-ueberarbeitete-build-skripte/
Brave Adds Encrypted Chats With Leo. Containers Still Have Weak Spots
On October 15, 2026, Brave announced a new mode for its Leo assistant.
heise+ | Urheberrecht, Patente, Marken: Was beim KI-Nachbau von Software zu beachten ist
KI macht den Nachbau bekannter Programme verlockend einfach. Doch was technisch gelingt, ist längst nicht immer erlaubt. Eine juristische Einschätzung.
#KünstlicheIntelligenz #Markenrecht #Netzpolitik #OpenSource #Software #Softwareentwicklung #Urheberrecht #news
Here's how to automatically post to Mastodon: https://cromwell-intl.com/open-source/python-social-media-automation/?s=mb #OpenSource #Python #TwitterMigration
heise+ | Linux-Dateimanager Nemo mit eigenen Skripten und Actions erweitern
Der Linux-Dateimanager Nemo lässt sich leicht um zusätzliche Funktionen erweitern. Dabei können Sie fertige Actions installieren oder eigene Skripte hinzufügen.
Check out Columnly – a multi-column client for all your ActivityPub-based accounts! 📊
Manage all your feeds in one place with a clean, customizable layout. The only feature really missing right now is automatic system light/dark mode support.
ICS[AP] updated CISA ICS Advisories Master File for 10/27/2026 & the following year's CSVs:
CISA_ICS_ADV_2026_10_27_26.csv
Available @ ICS[AP] GitHub:
https://github.com/icsadvprj/ICS-Advisory-Project/tree/main
#Google #googlecloud #googlemaps #googlemail #googletv #googleplay #GoogleGemini #googlepixel #googlechrome #googlebooks #googledeepmind #googleearth #googledocs #googledrive #GoogleMeet #boycottgoogle #boycottgmail #BOYCOTTgreedyFuckers #SundarPichai
#qwant #searchengine - https://www.qwant.com/
#mojeek #searchengine - https://www.mojeek.com/
Extensive list of #googlealternatives to #replacegoogle - https://switching.software/
Hello, world! Welcome to the official Mastodon account of the Digital Commons EDIC.
We’re here to share our work and connect with the communities building and sustaining digital commons.
More to share soon.
#DC_EDIC #DigitalCommons #OpenSource
*sigh*
Do really all those who generate security reports really expect the recipients to really read that wall of text they ship? Text they most likely didn't even care to read themselves?
What kind of stupidity are we racing towards? It's just so tempting to just flat-out reject LLM generated wall-of-text-reports these days.
Below is some really*valuable inforrmation* received in one such report ...
This report didn't kill just a kitten. It killed a village of kittens.
Security reports these days is a farse and pure tragedy. It just drains the last pieces of energy to care about processing security reports.
</rant>
RE: https://mastodon.social/@arstechnica/117514544749892345
This wont work well for @fdroidorg, as it requires App Archiving support which #FDroid doesn't have. Additionally it would require newer target SDK versions, which is Google's way of locking people with older #Android out of newer apps. Additonally, it lets Google arbitrarily charge fees.
#Degoogle #privacy #opensource #floss #Google #fosss #freesoftware
- : Say hello to BashBBS! : -
Is this just stupid? I've made a really small BBS using just Bash and whatever a bare-bones Debian install provides. Running on a rpi zero w (not 2 🤣 )
If you want to try it out, here is a form to fill out 😆 ☕ (I will approve requests as fast as I can.)
It's in early beta, but I would love it if someone wants to try it out!
Please send ASCII art proposals!
#bbs #retrocomputing #linux #bash #homelab #ascii #debian #opensource
https://my-notes.dragas.net/2026/10/27/even-with-all-that-mess/
Upgrade to #Mautic 7.2.2 to fix critical Mautic vulnerabilities, including 9.9 #CVSS #RCE flaw CVE-2026-115188, CVE-2026-115189, and SQL injection bugs.
#PHP #SQLInjection #OpenSource #Cybersecurity #Vulnerability #InfoSec #CVE #OSS
Für alle, die gerne weg von #windows wollen, sich aber nicht gut mit #Linux auskennen.
Ihr könnt Ubuntu auch erstmal im Browser eures PCs testen.
https://distrosea.com/start/ubuntu-26.04-default/
Was going to try Organic Maps from Fdroid to see if I like them...but they have an Agents.md that is the bad kind, one with documentation for agents instead of a kindly fuck off (or telling the agent to act like a cat woman or man).
Will be bombing that thing off of my phone ASAP. At first, I was loving the interface, but they are down with the sloppiness and that is a shame. Glad that I didn't donate to the project, otherwise I would've lived with that regret for a while.
👀 Heute hab ich das kleine Plakat an der Tür zur Bar Napoli in der Spandauer Altstadt entdeckt ...
🤗 Am Mi., 28. Oktober, 17:30–20:00 Uhr: Linux-Abend in der Klima-Werkstatt Spandau.
💻️ Laptop mitbringen, Linux testen und installieren – mit fachlicher Begleitung. Statt Elektroschrott: einfach wechseln.
ℹ️ https://www.berlin.de/klimawerkstatt-spandau
#Linux #Spandau #Nachhaltigkeit #opensource #Berlin #DIY #dutgemacht #didit #did #klima
Power für Gaming, Content Creation und lokale KI: Das TUXEDO Stellaris 16 – Gen8 vereint High-End-Hardware mit Linux.
⚡ Intel Core Ultra 9 290HX Plus
🎮 Bis zu NVIDIA GeForce RTX 5090
🧠 Bis zu 128 GB RAM
Für alle, die mehr aus ihrem Notebook herausholen wollen.
👉 https://www.tuxedocomputers.com/de/TUXEDO-Stellaris-16-Gen8.tuxedo
You know what would be a super awesome and useful thing to do with the AI that’s great at finding holes but sucks at fixing them?
What if instead of scanning code for vulnerabilities, we used #ai to scan for misuse of open source code and forced companies to pull products, release them for free, or got #eff or similar group to sue companies and use the proceeds to fund open source developers?
Opengrep (open-source Semgrep alternative) in v1.33.0 released
Digitale Souveränität durch Open Source
Wie gestalten Unternehmen ihre IT unabhängig von einzelnen Herstellern? TUXEDO und Fsas Technologies zeigen es bei unserem gemeinsamen Event in Augsburg.
📅 18. November 2026, 17:30–19:15 Uhr
📍 TUXEDO Computers, Alter Postweg 101, 86159 Augsburg, 12. Stock
Die Teilnahme ist kostenlos, eine Anmeldung ist erforderlich.
Jetzt anmelden:
https://my.tuxedocomputers.com/de/event/digitale-souveranitat-durch-open-source-20/register
Even With All That Mess
Bologna, 2003. A messy room, a graduation approaching, a FreeBSD Handbook gone missing. Twenty-three years later, I look back.
https://my-notes.dragas.net/2026/10/27/even-with-all-that-mess/
You will soon be able to self host Columnly, and expand it freely (under the AGPL-3.0 license)!
I'm looking forward to getting translation contributions, help with RTL support, and further improving accessibility (we do support WCAG and accessibility friendly layouts, themes and support).
It's a Nuxt app with typescript, tailwind and tanstack!
A shout-out to the developers behind https://columnly.social! especially @dansup ❤️
It’s great to see people building and contributing to the Fediverse. Every independent project adds to the diversity of our social web and reminds us that the internet can be shaped by communities, creativity, and collaboration; not just big corporations.
Thank you to everyone who puts their time and skills into building a more open social web. Your work matters!
#Mastodon #Fediverse #OpenSource #IndieWeb #FOSS
TUXEDO auf der electronica 2026! 💻🐧
Vom 10. bis 13. November sind wir in München dabei!
📍 Halle B4, Stand 339
💻 Linux-Notebooks live erleben
🐧 TUXEDO OS entdecken
🤝 Unser Team persönlich treffen
Ihr möchtet euch mit unseren Experten austauschen? Vereinbart jetzt einen Termin!
👉 https://my.tuxedocomputers.com/event/electronica-4/register
Wir freuen uns auf euch!
Plasma 6.7 is out and landing soon on your distro of choice!
You can look forward to easier menu customization, better control over your mics, and, as for virtual desktops... Well, well, well! You get keyboard navigation and the much anticipated feature of having separate virtual desktops on different monitors.
All the new stuff packed into Plasma 6.7 is here:
https://kde.org/announcements/plasma/6/6.7.0/
#Plasma6 #desktop #FreeSoftware #OpenSource
---
Become a Supporting Member:
In this Q3 2026 FreeBSD Journal article, Sven Rüdiger explores how Sylve, a browser-based management interface for FreeBSD, can simplify home lab management by unifying virtual machines, jails, and ZFS storage.
Read the full article: https://freebsdfoundation.org/our-work/journal/browser-based-edition/production-deployments/consolidating-a-home-lab-with-sylve/
I think an issue with the discourse about #OpenSource software accepting or not accepting #AI code is that it's not hard to get code that's passable as human-written - more so if you consider the quality of human-written code that projects sometimes received before #LLM s got reasonably effective. Whether a project accepts AI code or not, it's near inevitable for AI-written code to be submitted and merged.
What do we do about that? I don't know. It feels like projects would need to start requiring license agreements for patches that effectively absolve them of any infringement claims and put it on the (potentially anonymous, otherwise) submitter or something.
I have no idea what I'm going to do with my own small projects (which have no PRs). It's something I've been thinking about though. I hope other projects are too.
Umfrage: Risiken in der Software-Lieferkette von deutschen Firmen
Red Hat befragte 1400 CIOs in 14 Ländern, darunter auch Deutschland, zur KI-Nutzung und zum KI-Risikomanagement in ihrem Unternehmen.
https://www.linux-magazin.de/news/umfrage-risiken-in-der-software-lieferkette-von-deutschen-firmen/
DuckDB 2.0.0: Neues LTS-Release bringt Performanceschub und KI-Agent-Erkennung
DuckDB 2.0.0 verbessert den Servermodus, unterstützt asynchrones I/O und SQL-Trigger, erkennt KI-Agenten und erhält Support bis Oktober 2027.
New blog post in my series about using the HumanWare BrailleNote Apex with #FreeBSD! This time, I explore USB communication in USB Client mode.
https://alfonsosiciliano.gitlab.io/posts/2026-10-26-freebsd-usb-apex.html
#FreeBSD #Accessibility #A11y #UNIX #OpenSource #Braille #DeviceDrivers #AssistiveTechnology
OpenSSL 4.1.0 unterstützt DTLS 1.3
Das OpenSSL-Projekt hat Version 4.1.0 seiner Verschlüsselungsbibliothek veröffentlicht.
https://www.linux-magazin.de/news/openssl-4-1-0-unterstuetzt-dtls-1-3/
Stalwart: Der schnellste Mailserver der Welt?
Der Mailserver Stalwart erreicht Version 1.0: mit schnelleren Parsern, einer erweiterten Volltextsuche und Änderungen an Datenbank und OAuth.
Portputer 0.1.0 is out. It controls a Mac or Windows computer from an Android phone or another computer, and works with TalkBack, VoiceOver and NVDA.
Every key of a physical keyboard goes to the computer, shortcuts included. Computer audio plays on the phone, the phone's microphone becomes a Mac input, and clipboards and files go both ways. It can even type at the Mac login window.
Open source:
https://github.com/aaron-gh/portputer
#Accessibility #Blind #ScreenReader #Android #macOS #Windows #OpenSource
Hello Fedora Linux 45! 🎉
Just upgraded my ThinkPad X1 Carbon from F44 to F45, and the upgrade went incredibly smoothly!
Yes, it's still pre-release software. Yes, I'm running it at my own risk. And so far? Absolutely rock solid!
Some highlights:
- Tighter security: ptrace restricted by default
- Fresh dev stack: Python 3.15, GCC 16.2 & Go 1.27
- kmscon replaces the legacy kernel console
- RPM package signatures enforced by default
Great work, @fedora team! ❤️
👩💻 Alle nutzen Open Source. Aber wer hat eine Strategie dafür?
«PHP2Shell» hat gezeigt: Wer nicht weiss, wo Open Source im Einsatz ist, kann im Ernstfall nicht reagieren. Der OSPO-Track an der DINAconCH zeigt in vier Sessions, wie Organisationen Open Source bewusst und strategisch nutzen.
In diesem Track finden folgende Sessions statt:
💡 Open Source als Säule der digitalen Souveränität in der Bundesverwaltung mit Bruno Schöb
💡Warum Open Source Teil jeder digitalen Strategie sein muss mit Lukas Grossar
💡Marktanforderungen und Open Source: Es fehlt nicht Code, es fehlt Struktur mit David Sommer
💡Open Source für Resilienz und digitale Unabhängigkeit mit Nina Müller
💡AI und das Open-Source-Ökosystem: Was OSPOs jetzt tun sollten mit Olivier Brian
Mehr Informationen zum Track: https://dinacon.ch/2026/10/27/um-was-geht-es-im-track-ospo/
🎟️ Zu den Tickets: https://eventfrog.ch/de/p/wissenschaft-technik/dinacon-2026-bern-7490308037581749165.html
#DINAcon2026 #CHOpen #OpenSource #OSPO #DigitaleSouveränität
Deutsche Jugendliche gewinnen Programmierwettbewerb der FSFE
Die Free Software Foundation Europe (FSFE) hat die Gewinner der fünften Ausgabe des europäischen Programmierwettbewerbs Youth Hacking 4 Freedom (YH4F) in Brüssel ausgezeichnet.
https://www.linux-magazin.de/news/deutsche-jugendliche-gewinnen-programmierwettbewerb-der-fsfe/
🗳️ OWASP Board Election voting is OPEN!
3 Board seats are up for election. Make your voice heard and help shape OWASP’s future!
📩 Check your personal and OWASP email for your ballot.
⏰ Closes Oct 30, midnight UTC.
Vote now: https://owasp.org/board/elections/2026
Mark, Sean, and Kathrine co-signed and published the first #DelugeCommunity blog post. This is about the internal development dynamics of the #opensource #synthstromDeluge firmware development and #AI #LLM, besides some more observations on contsibutions.
https://delugecommunity.com/blog/2026-10-26-first-post/
Enjoy :)
We are inviting proposals for talks about “FOSS Office Software and Suites“ at FOSDEM 2027, which will take place on 30-31 January in Brussels: https://blog.documentfoundation.org/blog/2026/10/26/foss-office-devroom-cfp/ #foss #openSource #freesoftware
Denmark ends Collabora pilot testing across its public sector after formatting errors disrupted case workflows, securing a quiet victory for Microsoft.
Yeah, I'm not too worried about "agent swarms".
Given where models get their training data, your swarms will be coordinating and cooperating like the open source community does.
so 'agents' seem just as likely to get into each other's way.
It's any piping of LLM output to the terminal of an internet-connected computer that's the issue.
Seit heute ist planetfoss.net offiziell am Start: ein Nachrichtensammler für Linux und Open Source im Magazin-Stil, auf Deutsch und Englisch. Die Seite übernimmt nur Vorschau und Anriss und verlinkt immer auf den Originalartikel. Sprachen und Themen könnt ihr selbst filtern. Das erste Feedback ist schon eingetrudelt und umgesetzt. Danke dafür, und gerne mehr davon.
Große Themen landen auch bei @planetfoss.
Sweden’s Government Offices Block ChatGPT and Claude. AI Itself Is Not Banned
Since October 26, 2026, Sweden’s Government Offices (Regeringskansliet) have blocked the web interface of ChatGPT and Claude on work computers.
https://vsx.global/sweden-government-offices-block-chatgpt-claude/
With a sleek beak and an elegant neck, this majestic animal has long been associated with our host city’s most scenic outlooks.
We are proud to reveal the Everything Open 2027 official tangram; only one bird would do. See you in Meanjin / Brisbane in January 2027!
https://2027.everythingopen.au/attend/tickets/
#EverythingOpen
#OpenSource
#EverythingOpen2027
#OpenTech
#TechCommunity
#Linux
#FOSS
thesupertechie
[EN: she/they; TA: -ள்/-ர்; ES: -a/-e] » 🌐
@thesupertechie@lgbtqia.space
TIL that the Apollo 11 source code is apparently on GitHub: https://github.com/chrislgarry/Apollo-11
Hear it from the programmers!
https://www.youtube.com/watch?v=1Vyzla9mx4g
#KDE #DE #WM #programming #Linux #Android #no #TV #OpenSource
Same hard-coded values (5°, 7°, 25°), same variable and function names, same steps, in the same order.
On one side, FairScan (Kotlin, GPL v3). On the other, Ente Locker (Rust): no copyright notice, no mention of FairScan in the file.
And this is just one function. I found similar matches in multiple files.
I'm not a lawyer and may be missing something. If you read code, I'd like to know what you see.
https://fairscan.org/blog/did-ente-locker-copy-my-code-without-attribution/
I wrote a blog that explains why why the new #curl security policy to not embargo low and medium vulnerabilities is a great idea and other open source projects should adopt this policy
https://opensourcesecurity.io/2026/10-embargo/
#OpenSourceSecurity #vulnerability #embargo #security #opensource
"The long story short, if your project uses AI, is made by AI, or is intended for AI, it's not welcome on r/opensource," moderator Wolvereness wrote. "AI, as it exists today, is incongruent to this Open Source community."
Mozilla has a new revenue stream that might actually work, GNOME OS gets closer to a stable release, Raspberry Pi OS for x86 machines returns, and Amazon has expensive new Android tablets that have the Play Store. Plus hacking old Echo Dots to work with Home Assistant, building ad blocking lists, and unbricking an M1 Mac with Linux in discoveries.
Freshly written: Neat Finds #02: Small Webs, Old Protocols and Other Oddities
Issue two of Neat Finds: twenty open source projects with an old soul. A search engine for the weird web, IRC servers and bouncers, BBS art on the web, feed aggregators, the code that ran Slashdot, a SimCity 2000 remake and a bird that lives in your browser.
https://pablomurad.com/neat-finds-02-small-webs-old-protocols-and-other-oddities/
"Open source is the foundation of modern software, and customers increasingly need to show, not just claim, that they manage it responsibly."
Alex Rybak, Sr. Director, Product Management at Anchore, on why we joined the OpenChain Partner Program (Vendor category).
https://anchore.com/blog/anchore-is-now-an-openchain-partner/
OBS Studio on FreeBSD now supports Browser Source.
I've ported the Chromium Embedded Framework (CEF) to FreeBSD and got the obs-browser plugin working with it. That brings Browser Source and Custom Browser Docks to FreeBSD: web overlays, alerts, chat widgets and the rest of the things modern streaming depends on.
Code: [https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=299341] or [https://github.com/Martinfx/FreeBSD-Ports]
If you run OBS on FreeBSD, feedback and bug reports are very welcome.
New.
"The vulnerability, CVE-2026-42589, allows an attacker to inject ExifTool arguments through unsanitized metadata keys. By inserting newlines into a JSON key, an attacker can inject the -if argument and execute arbitrary Perl code. The vulnerability carries a CVSS score of 9.8 and was fixed in Gotenberg 8.31.0."
VulnCheck: Cache Me If You Can: Unpacking a Go Implant and Its Toolkit https://www.vulncheck.com/blog/cache-me-if-you-can @vulncheck #opensource #infosec #threatresearch
🐧🎬 Linux, Bash & FFmpeg in Aktion!
Mein universelles Bash-Skript analysiert und konvertiert Videos direkt im Terminal. Im Screenshot: „Exodus – Götter und Könige“ mit HEVC/H.265, AAC, Full HD (1920 × 1080), 25 fps und CRF 18. ⚙️💻
Keine unnötige GUI – stattdessen volle Kontrolle, reproduzierbare Abläufe und Automatisierung per Shell! 🔥
#Linux #FFmpeg #Bash #ShellScripting #HEVC #H265 #OpenSource #VideoEncoding #Automation #LinuxDesktop 🐧
mitmproxy v12.3.1 with security-related fixes released
Dänemark hat den Test mit der #OpenSource-Office-Suite #Collabora beendet und bleibt vorerst bei Microsoft Office. Die Kompatibilität mit Microsoft-Dokumenten erwies sich als Herausforderung. Die Entscheidung betrifft vorerst nur das Pilotprojekt, die langfristige Softwarestrategie der Behörden ist unklar. https://www.golem.de/news/keine-abloesung-von-microsoft-office-daenemark-beendet-collabora-test-2610-214483.html
🚀 Rick and Migraty v1.0.3 now available!
This release focuses on security and stability: ✅Drupal and #PHP 8.4 security updates and a more robust, observable, and maintainable migration workflow.
https://gitlab.com/davidjguru/rick-and-migraty/-/tags/1.0.3
#Drupal #Migration #PHP #OpenSource #WebDevelopment #DDEV
CachyOS, Tag 3: Druckereinrichtung.
Mit CUPS fast ein Kinderspiel. Zugegeben, etwas weniger fancy als ein Windows-11-Installer-Fenster. Aber nach gerade mal vier Klicks war mein Epson eingerichtet und im Netzwerk erreichbar.
Manchmal muss es eben nicht schick aussehen Hauptsache, es funktioniert (-:
#CachyOS #Linux #OpenSource #LinuxDesktop
I do work today.
Just, not at 8am!
My shift isn't until 16:00.
Hahahahahahaha, ah well. I guess I could have stayed up later? Or slept in more? I already spent > 70+ minutes on the commute into the "office" how shall I burn the next 8ish hours until my shift actually begins?
Well, for starters, I submitted a Pull Request to update MacPorts' Got (Game of Trees) to 0.130.1 -portable here:
https://github.com/macports/macports-ports/pull/36049
One of the GitHub Continuous Integration checks passed OK. The other one? Is queued.
Hopefully it will go smoothly?
Regardless, it's up to someone else with commit access to merge it.
#Got #GameOfTrees #MacPorts #OpenSource #VersionControl #Git
Fedora 45 verschiebt sich – erneut
Mehrere „Blocker-Bugs“ verhindern die Veröffentlichung der nächsten Fedora-Version, die eigentlich schon in dieser Woche hätte erscheinen sollen.
https://www.linux-magazin.de/news/fedora-45-verschiebt-sich-erneut/
Hey #Developers I research security and I use agents to do it. I prefer #FOSS and #opensource however the recent #antiai discussions in the community leave me with one question.
If I discover a #vulnerability of your #app with an #agent. Do you want me to disclose it to you before I take it public?
I'm happy to either way, I don't have emotional regulation issues with my or other people's choices in tooling and I'm happy to not if you want it, lmk. <3
October is Hacktober! In Nepal, the #LibreOffice community is present at hackfests, bringing new people into the project: https://community.documentfoundation.org/t/libreoffice-at-local-mlh-hackathons/13909 #foss #opensource #freesoftware
----------------
🎯 AI
===================
A new piece by Utku Sen explains how LLM-based penetration testing harnesses work and why the situation changed recently. The argument is that the shift is plumbing, not a new exploit class: what matters is what lets an LLM act on a live target.
The mechanics
An LLM is a text generator. Give it a task like pentest example.com, credentials in credentials.txt and it can only emit text describing intent, for example Read credentials.txt, open example.com. The harness is the code that parses that output, executes the requested actions, and returns results so the model can iterate. Without a harness, nothing happens.
The author's analogy comes from apartment buildings in Turkey: residents leave notes with errands, the janitor runs them without thinking and returns with results. The LLM is the resident, the harness is the janitor.
Claude Code as reference
The model (Opus/Sonnet) produces text only. Claude Code is the software that contains the harness: logic for reading and writing files, executing commands, spawning subagents, managing context windows, using skills, and interacting with MCP servers. Open-source harnesses like Opencode and Pi follow the same pattern and accept different models.
Why static analysis was always tolerated
LLMs have found vulnerabilities in codebases for a long time because nearly all guardrails allow it: static analysis only, no interaction with a live system, and there were already plenty of open-source harnesses and skills for that purpose. Frontier models also support dynamic testing on a live website, but only after confirming you own the target, and they refuse targets you cannot prove.
What changed
1. Per the author, open-source models, DeepSeek especially in its uncensored variant, are now good at finding vulnerabilities through dynamic testing, and they do not gate on target ownership. Presented as the author's assessment, not a benchmark.
2. Open-source dynamic pentest harnesses now exist, which was not the case before.
3. Combination: a refusal-free open model plus a ready-made harness removes the provider permission flow from the equation.
The named harnesses
The article analyzes three harnesses mentioned in media coverage of recent hacks: Artex and Cairn are Chinese-made, Strix is US-based. The text reviewed here ends before the per-harness deep dive, so concrete capabilities of each remain unconfirmed.
Caveats
The DeepSeek claims lack independent verification in the piece. Uncensored means refusal training removed, a policy change rather than added capability. Frontier ownership gates are likewise policy controls, so the meaningful change is procedural: dynamic agentic testing no longer depends on a provider signing off.
Operational takeaway for defenders: treat external-facing assets as reachable by automated agents running commodity tooling, and weight raw unauthenticated exposure higher.
🔹 AISecurity #LLM #Pentesting #Harness #OpenSource
🔗 Source: https://utkusen.substack.com/p/how-llm-based-penetration-testing
COOLFest: Collabora Online spricht jetzt fast vollständig Deutsch
Das COOLFest 2026 von Collabora Online führte zu mehr Übersetzungen und neuen GitHub-Beiträgen. Die deutsche Oberfläche ist fast fertig.
heise+ | OpenCode 2.1: So funktioniert der Coding-Agent nach Baukastenprinzip
Mit Version 2 hat Anomaly den quelloffenen Coding-Agenten zur Plattform mit neuen Funktionen umgebaut. Dafür funktionieren alte Plug-ins nicht mehr.
CURL-SICHERHEITSMELDUNGEN: KLEINERE FÄLLE WECHSELN ZU GITHUB
https://gadgetchecks.de/curl-sicherheitsmeldungen-kleinere-faelle-wechseln-zu-github/
#technikaktuell #curl #opensource #cybersicherheit #software #gadgetchecks
Python schließt per Update kritische TLS-Lücke wegen eMudhra-Schlüsseln
Python 3.15.2, 3.14.10, 3.13.18, 3.12.16 und 3.11.18 beheben eine kritische Schwachstelle durch kompromittierte eMudhra-Zertifikate und weitere Lücken.
The impressive PlayStation 5 Linux project is continuing on, and recent updates to it have again expanded what it can support.
https://www.gamingonlinux.com/2026/10/playstation-5-linux-project-upgraded-to-support-ps5-pro-and-newer-firmware/
Die Landeshauptstadt München ist mit rund 1,5 Millionen Einwohnerinnen und Einwohnern und über 40'000 Beschäftigten die grösste Kommunalverwaltung Deutschlands. Für ihre Informatik ist das IT-Referat mit rund 1'400 Mitarbeitenden zuständig, dem der Eigenbetrieb it@M angehört. it@M betreibt rund 42'000 virtuelle Arbeitsplätze, ein Netzwerk für etwa 1'500 städtische Standorte sowie ein eigenes Rechenzentrum mit zahlreichen Fachanwendungen.
Die strategischen Vorgaben der Stadt sehen vor, Open Source Lösungen bevorzugt einzusetzen, wenn dies wirtschaftlich, technologisch oder strategisch sinnvoll ist. So sollen vor allem Abhängigkeiten von einzelnen Herstellern vermieden werden.
Quelle: https://www.ossdirectory.com/de/clients/details/stadt-muenchen
🐧 10 Best Free and Open Source Linux Partitioning Tools
Disk partitioning is the means of dividing a hard disk drive into multiple logical storage units referred to as partitions.
📰 Source: LinuxLinks
🔗 Link: https://www.linuxlinks.com/partitioningtools/
Canada’s Bill C-22 Is Now Before a Senate Committee. The Dispute Centers on Metadata and Encryption
Canada’s Bill C-22, officially titled the Lawful Access Act, 2026, has been before the Standing Senate Committee on National Security…
🎮 SuperTuxKart (Linux' answer to Mario Kart) in trouble - wide PHP2 issue forced servers offline ❌
Want to help? Fundraiser is LIVE --the developers are rebuilding the server in Python (dropping PHP). AI won't be used to write the code.
Please, boost to increase consciousness and reach for this 🙏 free & open source SuperTuxKart is loved by millions.
👉 https://fund.supertuxkart.net
#SuperTuxKart #PHP2shell #fundraiser #servers #development #help #Linux #opensource #gaming #Python
KI und Open Source: Subreddit r/opensource sperrt KI-gestützte Projekte aus
In einem Subreddit zu Open-Source-Themen ist KI unerwünscht. Weil man KI-Unterstützung aber nicht so einfach erkennen kann, geht die Aussperrung viel weiter.
#IT #KünstlicheIntelligenz #OpenSource #Reddit #Software #Softwareentwicklung #news
expectation: the language behind up to 70% of websites has a big security team
reality: "we have one full-time staff member (that's me)"
the php foundation's director to reuters, days after the PHP2Shell patches. 14 mostly part-time contractors, about $974K a year per its open collective page. if your business runs on PHP, maybe sponsor it
Using #opensource software doesn't automatically make you independent. Sometimes you've just traded one set of dependencies for another.
RT @Polymarket: EILMELDUNG: Reddit's r/opensource beginnt damit, jedes Projekt zu verbannen, das KI nutzt, mit KI erstellt wurde oder für KI-Tools konzipiert ist.
mehr auf Arint.info
#AIBans #Banning #KI #OpenSource #Reddit #TechNews #arint_info
Apache Camel fixes eight Apache Camel vulnerabilities, including XXE flaw CVE-2026-90885 and S3 injection CVE-2026-95664. Upgrade to 4.23.0.
#ApacheCamel #XXE #CVE202690885 #CVE202695664 #CVE202694386 #Java #OpenSource #CyberSecurity
Meteorology
Current weather in Marienburg SR SA with magnifico power of wttr.in & le passion grace beauty & colours of lolcat(6) 🏳️🌈 wttr curl(1) & {ba{c{k{z{fi}}}}}sh
Background photograph is a nice Clouds in FL shades scene passionately composed with CIRC_POL 81A FL and UV filters stacked using a Nikon Analog SLR lens combo in my Negative film photography phase
$ curl -v wttr.in/marienburg_suriname|lolcat
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0* Host wttr.in:80 was resolved.
Connection #0 to host wttr.in left intact
Weather report: marienburg_suriname
\ / Clear
.-. +27(30) °C
― ( ) ― ↙ 12 km/h
`-’ 10 km
/ \ 0.0 mm
Location: Mariënburg, Nieuw Amsterdam, Suriname [5.8780943,-55.0441162]
Remember to repeat the request with an interval of 9 then 27 secs when the server sends and empty response to curl, watch the LOG!
https://en.wikipedia.org/wiki/Bash_(Unix_shell)
https://directory.fsf.org/wiki/Bash
https://github.com/busyloop/lolcat
Z
#Weather #wttr #lolcat #curl #bash #csk #ksh #zsh #sh #fish #meteorology #environment #Physics #Chemistry #Mathematics #Lineair #algebra #technology #OpenSource #programming #POSIX
It's sad that a modern desktop can't run well on 4 GB RAM. Tonight we visited a woman who studies on a university online; I had put together a 4 GB RAM #Linux laptop for her last year (optimized #linuxmint takes 1 GB of RAM on a cold boot). She's constantly swapping with #LibreOffice, browser, and 1-2 more apps. Everything crawls, even if things were actually worse when it was running Win10. I just wish devs optimized more in general. 4 GB should have been enough.
Using #inkscape and #kdenlive to edit outreach videos for https://www.jordboere.dk/ !
#noai #opensource