Linux

Вредоносное ПО в прошивках китайских Android-смартфонов на чипах MediaTek Компания Bitdefender выявила деятельность по интеграции вредоносного ПО в прошивки Android-смартфонов на платформах MediaTek, выпускаемых в Китае под разными брендами. Вредоносная активность сосредоточена на подстановке рекламы и накрутке кликов на рекламу, а также на поддержании ботнета из устройств, формирующего распределённую сеть для организации DDoS-атак и проксирования трафика. 👉@sysadminoff https://www.opennet.ru/opennews/art.shtml?num=66426

📰 Microsoft Issues First Release Of Their LiteBox Sandboxing Library OS Back in February we featured LiteBox as a new Microsoft open-source project building out a Rust-based sandboxing Library OS. LiteBox leverages Linux virtualization security features and Rust language inherent benefits to provide the ability for sandboxing Linux apps on Linux, Linux programs on Windows, and other security-oriented deployments. Out today is the first tagged release of LiteBox for this open-source library operating system... 🔗 Source: https://www.phoronix.com/news/Microsoft-LiteBox-0.1 #linux #opensource #rust 👉@sysadminoff https://phoronix.com/news/Microsoft-LiteBox-0.1

📰 GNU Guix Package Manager Improves Extension Loading, Adds New Commands GNU Guix introduces faster extension loading through compiled Guile modules, alongside a collection of ready-to-use commands. 🔗 Source: / #gnu 👉@sysadminoff https://linuxiac.com/nu-guix-package-manager-improves-extension-loading

10 Tips to Harden SSH Access on Production Ubuntu Servers The post 10 Tips to Harden SSH Access on Production Ubuntu Servers first appeared on Tecmint: Linux Howtos, Tutorials & Guides .Any Ubuntu server with port 22 open can start receiving SSH password guesses within minutes of going online. Here’s how The post 10 Tips to Harden SSH Access on Production Ubuntu Servers first appeared on Tecmint: Linux Howtos, Tutorials & Guides. 👉@sysadminoff https://www.tecmint.com/ssh-hardening-tips-on-ubuntu-servers/

GitHub’s Spokes rewrite targets AI traffic with 35x faster writes GitHub is rebuilding its Git storage system as AI-driven activity strains the service, with early tests showing writes up to 35 times faster. The redesign replaces Spokes’ replica-quorum write path with Azure Blob Storage and separates reads and maintenance from writes. GitHub has not announced a migration timeline. Source 👉@sysadminoff https://4sysops.com/archives/githubs-spokes-rewrite-targets-ai-traffic-with-35x-faster-writes/

Уязвимость в Telegram Desktop, позволяющая отправить произвольные файлы при клике на ссылку Раскрыты подробности и метод эксплуатации уязвимости (CVE-2026-107181) в Telegram Desktop, официальном клиенте Telegram для настольных систем. Проблема вызвана отсутствием должной обработки неэкранированных символов-разделителей в командах IPC, что позволяло при клике на отправленную ссылку организовать передачу атакующему любых файлов с системы жертвы, включая файлы с сессионными ключами, которые можно использовать для захвата учётной записи в Telegram. Уязвимость устранена в выпуске Telegram Desktop 7.2.9. 👉@sysadminoff https://www.opennet.ru/opennews/art.shtml?num=66431

Gartner predicts 40% of agentic AI projects will be canceled by 2027 Gartner expects more than 40% of agentic AI projects to be canceled by the end of 2027 as costs mount, business value stays murky, or safeguards prove inadequate. “Agent washing” adds another wrinkle: only about 130 of thousands of vendors claiming to offer AI agents may have genuine agents. Organizations can improve their odds by testing a narrowly defined task, setting measurable success and stop-or-go criteria, and limiting agent permissions until they demonstrate results. Source 👉@sysadminoff https://4sysops.com/archives/gartner-predicts-40-of-agentic-ai-projects-will-be-canceled-by-2027/

OpenAI revenue gap sparks AI stock sell-off Investors got two very different snapshots of OpenAI’s sales pace: nearly $50 billion in annualized net revenue, versus the $68 billion figure widely reported earlier that included partner revenue. The accounting difference isn’t an $18 billion vanishing act, but it was enough to send AI-linked shares lower and renew doubts about whether rapid growth can justify sky-high valuations and immense computing costs. Source 👉@sysadminoff https://4sysops.com/archives/openai-revenue-gap-sparks-ai-stock-sell-off/

Microsoft warns admins to update Windows PCs or risk losing Windows Update access Older Windows PCs could lose access to Windows Update in 2027 if they miss required certificate updates. Most supported systems need a specified security update by May or June 2027; unsupported versions must be upgraded. Devices updated through WSUS are not affected by this certificate rotation. Source 👉@sysadminoff https://4sysops.com/archives/microsoft-warns-admins-to-update-windows-pcs-or-risk-losing-windows-update-access/

В ФС Ext4 намечен к удалению режим data=journal В состав ядра Linux 7.3, релиз которого ожидается 19 октября, принято изменение, переводящее режим монтирования файловой системы Ext4 "data=journal" в разряд устаревших технологий. Поддержку данной опции монтирования намерены прекратить в 2028 году. 👉@sysadminoff https://www.opennet.ru/opennews/art.shtml?num=66430

📰 Steam Beta Now Defaults Non-Steam Windows Binaries To Using Proton Valve released tonight a new Steam client beta that includes some notable improvements for Linux users... 🔗 Source: https://www.phoronix.com/news/Steam-Beta-Use-Proton-Default #linux #proton #steam 👉@sysadminoff https://phoronix.com/news/Steam-Beta-Use-Proton-Default

Оценка затрат времени на поддержание пакетов с открытым ПО в Google Компания Google опубликовала результаты исследования затрат времени инженеров на обновление пакетов с открытым ПО, используемых во внутренних продуктах компании. Данные получены на основе опроса 346 сотрудников Google, участвующих в обновлении пакетов. Вопросы касались того, как много времени инженер тратит на подготовку обновлённой версии пакета и можно ли предсказать связанные с этим трудозатраты при помощи метрик оценки сложности поддержки исходного кода. 👉@sysadminoff https://www.opennet.ru/opennews/art.shtml?num=66429

📰 AI Makes "Open-Source, Clean Room" Implementations Of Adobe Photoshop & Premier In Rust As an interesting demonstrator for the power of AI and potentially pressing legal challenges, Claude Code and AI agents have created "open-source, clean-room reimplementation" versions of Adobe Photoshop, Adobe Premier, and Adobe Lightroom. These new creations from the ArtCraft project are implemented in the Rust programming language... 🔗 Source: https://www.phoronix.com/news/Photocraft-Filmcraft-AI #opensource #rust 👉@sysadminoff https://phoronix.com/news/Photocraft-Filmcraft-AI

📰 FEX 2610 Released With Handling For AVX-VNNI, Disk Cache Improvements FEX 2610 released today as the newest monthly release of this open-source emulator for running x86_64 games/apps on AArch64 for ARM64 Linux systems, including most notably by Valve's Steam Frame headset... 🔗 Source: https://www.phoronix.com/news/FEX-2610-Released #linux #opensource #steam 👉@sysadminoff https://phoronix.com/news/FEX-2610-Released

📰 Ubuntu Summit for Ubuntu 26.10 Takes Place on November 12-13, 2026 Ubuntu Summit 26.10 will take place on November 12-13, 2026, for the upcoming Ubuntu 26.10 (Stonking Stingray) release, due out on October 15th. 🔗 Source: https://9to5linux.com/ubuntu-summit-for-ubuntu-26-10-takes-place-on-november-12-13-2026 #ubuntu 👉@sysadminoff

📰 Star Labs StarFighter Ultra: A Modern High-End Linux Laptop With Coreboot When it comes to Linux pre-loaded laptops, I have looked at hardware from most of these vendors over the past 22+ years of Phoronix. One vendor I haven't had the chance to personally test until now is the UK-based Star Labs. That changed recently and over the past few weeks I have been testing out their new StarFighter laptop that offers great Linux support and comes pre-loaded with Coreboot and streamlined firmware updates via LVFS. 🔗 Source: https://www.phoronix.com/review/star-labs-starfighter #linux 👉@sysadminoff https://phoronix.com/review/star-labs-starfighter

📰 Vinix is Not a Linux Distro, But it Can Run Games, Docker, and QEMU The project has been around since 2021, runs its own kernel, and is written in V. 🔗 Source: #distro #kernel #linux #qemu 👉@sysadminoff https://feed.itsfoss.com/link/24361/17491352/vinix-overview

📰 NVIDIA 615.78.08 Linux Driver Adds VK_NV_low_latency2 r3 For Improved VKD3D-Proton NVIDIA today released their 615.78.08 Linux driver build with a useful improvement for gamers using Steam Play (Proton) with Direct3D 12 games via VKD3D-Proton along with a variety of other fixes... 🔗 Source: https://www.phoronix.com/news/NVIDIA-615.78.08-Linux #linux #proton #steam 👉@sysadminoff https://mobiletechnews.com/module/newswire/ext_link.php?rid=368005

📰 Multiple Security Issues Patched in XOrg Server 21.1.25 and Xwayland 24.1.14 XOrg Server 21.1.25 and Xwayland 24.1.14 have been released today to address several security vulnerabilities that could lead to heap corruption, denial of service, or potentially information disclosure. 🔗 Source: https://9to5linux.com/multiple-security-issues-patched-in-xorg-server-21-1-25-and-xwayland-24-1-14 #xorg 👉@sysadminoff

📰 Kage: Google Experimenting With Linux Driver Isolation Using In-Kernel LFI Sandboxes Google engineers are experimenting with Linux kernel device driver isolation using in-kernel sandboxes leveraging LLVM's Lightweight Fault Isolation (LFI) functionality... 🔗 Source: https://www.phoronix.com/news/Kage-Linux-Driver-Isolation #kernel #linux 👉@sysadminoff https://phoronix.com/news/Kage-Linux-Driver-Isolation