A 12 years old tablet is slow but works fine;
A 12 years old tablet without software updates is almost useless.
↳
In-reply-to
»
PSA:
⤋ Read More
setpriv on Linux supports Landlock.
@prologic@twtxt.net Yeah, it’s not a strong sandbox in jenny’s case, it could still read my SSH private key (in case of an exploit of some sort). But I still like it.
I think my main takeaway is this: Knowing that technologies like Landlock/pledge/unveil exist and knowing that they are very easy to use, will probably nudge me into writing software differently in the future.
jenny was never meant to be sandboxed, so it can’t make great use of it. Future software might be different.
(And this is finally a strong argument for static linking.)
↳
In-reply-to
»
@movq Yeah, luckily, there is the suckless project. I couldn't live without dmenu!
⤋ Read More
@lyse@lyse.isobeef.org dmenu is a great example.
There have been several attempts at porting dmenu from X11 to Wayland. Well, not exactly “porting” it, more like rewriting it from scratch. Turns out: It’s not that easy.
dmenu is super fast and reliable. None of the Wayland rewrites are (at least none of the popular ones that I know of). They are either bloated and/or slow.
It takes a lot of discipline and restraint to write simple software and not blow up the codebase. This is much harder than people think. It’s a form of art, really.
↳
In-reply-to
»
This aggressive auto-logout on my bank’s website …
⤋ Read More
@lyse@lyse.isobeef.org I do my timetracking in a little Python script, locally. Every now and then, I push the data to our actual service. Problem solved – but it’s a completely unpopular approach, they all want to use the web site. I don’t get it. Then, of course, when it’s down, shit hits the fan. (Luckily, our timetracking software is neither developed nor run by us anymore. It’s a silly cloud service, but the upside is that I’m not responsible anymore. 🤷)
Some of our oldschool devs tried to roll out local timetracking once, about 15 years ago. I don’t remember anymore why they failed …
This is developed inhouse, I’m just so glad that we’re not a software engineering company. Oh wait. How embarrassing.
Oh to be anonymous on the internet. That must be nice. 😅
↳
In-reply-to
»
This aggressive auto-logout on my bank’s website …
⤋ Read More
@movq@www.uninformativ.de Yeah, it’s a shitshow. MS overconfirms all my prejudices constantly.
Ignoring e-mail after lunch works great, though. :-)
Our timetracking is offline for over a week because of reasons. The responsible bunglers are falling by the skin of their teeth:
- The error message neither includes the timeframe nor a link to an announcement article.
- The HTML page needs to download JS in order to display the fucking error message.
- Proper HTTP status codes are clearly only for big losers.
- Despite being down, heaps of resources are still fetched.
I find it really fascinating how one can screw up on so many levels. This is developed inhouse, I’m just so glad that we’re not a software engineering company. Oh wait. How embarrassing.
↳
In-reply-to
»
The lack of suckless-like simple, hackable software these days is appalling.
⤋ Read More
For example, I reckon software should treat stdout and stderr with care and never output logs or other such garbage to stdout that cannot possibly be useful in a UNIX pipeline 😅
↳
In-reply-to
»
The lack of suckless-like simple, hackable software these days is appalling.
⤋ Read More
@movq@www.uninformativ.de Yeah that’s why I’m striking this conversation with you 😅 Not only do I respect your opinion quite highly 🤣 But like you say (and I’ve read their philipshpy) it can be a bit “elitism” for sure. I’m genuinely interested in what we think of as software that “doesn’t suck”. Tb be honest I haven’t really put thought to paper myself, but I reckon if I did, I’d have some opinions/ideas…
↳
In-reply-to
»
The lack of suckless-like simple, hackable software these days is appalling.
⤋ Read More
@prologic@twtxt.net Hm, I wouldn’t say that. Go code could fall into that category as well.
Maybe this topic could use a blog post / article, that explains what it’s about. I’m finding it hard to really define what “suckless-like software” is. 🤔 (Their own philosophy focuses too much on elitism, if you ask me.)
↳
In-reply-to
»
The lack of suckless-like simple, hackable software these days is appalling.
⤋ Read More
@prologic@twtxt.net Ah, I’m referring to software that’s similar to that of suckless.org: Small, minimal codebases, small tools, but still useful. dmenu is probably the best example and also farbfeld.
Here’s the author of Anubis talking about some of their experiences:
https://xeiaso.net/blog/why-i-use-suckless-tools-2020-06-05/
(You can skip the long config and keybinds part.)
↳
In-reply-to
»
The lack of suckless-like simple, hackable software these days is appalling.
⤋ Read More
@movq@www.uninformativ.de Curious what you would define as “suck less” software? (language agnostic of course!)
The lack of suckless-like simple, hackable software these days is appalling.
Mais uma derrota contra o uso comum.
↳
In-reply-to
»
I bought the “remastered” versions of Grim Fandango and Forsaken on GOG, because they’re super cheap at the moment. Both have native Linux versions.
⤋ Read More
In all fairness, GOG says that Forsaken is only supported on Ubuntu 16.04 – not current Arch Linux. If you ask me, this just goes to show that Linux is not a good platform for proprietary binary software.
Is it free software, do you have the source code? Then you’re good to go, things can be patched/updated (that can still be a lot of work). But proprietary binary blobs? Very bad idea.
Ted Unangst’s snarky (and entertaining) remarks this month:
↳
In-reply-to
»
I did a “lecture”/“workshop” about this at work today. 16-bit DOS, real mode. 💾 Pretty cool and the audience (devs and sysadmins) seemed quite interested. 🥳
⤋ Read More
@movq@www.uninformativ.de Interesting internal education sessions are way too infrequent here as well. There are a bunch of “knowledge transfer” meetings actually, but 90% of the topics already sound totally boring to me. The other 9% talks turned out to be underwhelming, sadly. I only attended a single one where it was delivered what has been promised. They’re all talks, not real hands-on trainings like you did.
Once a year the security guys organize a really great hacking event, though. Teams can volunteer to hand in their software dev instances and all workmates are invited to hack them and report security vulnerabilities. That’s a lot of fun, but also gets frustrating towards the end when you don’t make any progress. :-) There’s also some actual hands-on training in advance for preparation of the two days. Unfortunately, I missed the last event due to my own project being very stressful at the time.
When I had a Do What You Want Day I also show my direct teammates what I learned in the hopes of this being interesting to them as well. I’m the only one in my team using this opportunity, sadly.
think i’m gonna use this license on my git repos going forward. it kicks ass https://anticapitalist.software/
Saw this on Mastodon:
https://racingbunny.com/@mookie/114718466149264471
18 rules of Software Engineering
- You will regret complexity when on-call
- Stop falling in love with your own code
- Everything is a trade-off. There’s no “best” 3. Every line of code you write is a liability 4. Document your decisions and designs
- Everyone hates code they didn’t write
- Don’t use unnecessary dependencies
- Coding standards prevent arguments
- Write meaningful commit messages
- Don’t ever stop learning new things
- Code reviews spread knowledge
- Always build for maintainability
- Ask for help when you’re stuck
- Fix root causes, not symptoms
- Software is never completed
- Estimates are not promises
- Ship early, iterate often
- Keep. It. Simple.
Solid list, even though 14 is up for debate in my opinion: Software can be completed. You have a use case / problem, you solve that problem, done. Your software is completed now. There might still be bugs and they should be fixed – but this doesn’t “add” to the program. Don’t use “software is never done” as an excuse to keep adding and adding stuff to your code.
↳
In-reply-to
»
OpenBSD has the wonderful
⤋ Read More
pledge() and unveil() syscalls:
@movq@www.uninformativ.de That sounds great! (Well, they actually must have recorded the audio with a potato or so.) You talked about pledge(…) and unveil(…) before, right? I somewhere ran across them once before. Never tried them out, but these syscalls seem to be really useful. They also have the potential to make one really rethink about software architecture. I should probably give this a try and see how I can improve my own programs.
20 Years of the Open Invention Network
The Open Invention Network (OIN) is celebrating
its 20th anniversary.
The central feature of the OIN community is a patent cross-license
that covers core Open Source functionality and expands in parallel
with the growth of Open Source technology. As growth in Open Source
has accelerated, OIN has proactively expanded the scope of the OIN
license’s benefit by including more than 4,500 software components … ⌘ Read more
Echte Intelligenz: Menschliche Neuronen als biologischer Computer verfügbar
Lebende Nervenzellen auf einem Chip imitieren die Funktion des Gehirns. Ein Einsatz für KI-Beschleunigung und Bitcoin-Mining ist denkbar. ( KI, Software)
Gaokao: KI-Tools während Chinas wichtigster Prüfung abgeschaltet
Chinas Technologiekonzerne haben ihre KI-Dienste während der diesjährigen Hochschulzulassungsprüfungsprüfungen eingeschränkt. ( KI, Software)
iFLYTEK Wins CNCF End User Case Study Contest for Scalable AI Infrastructure Breakthroughs with Volcano
Company to present large-scale Kubernetes model training success at KubeCon + CloudNativeCon China 2025 Hong Kong, China — 10 June 2025 — The Cloud Native Computing Foundation® (CNCF®), which builds sustainable ecosystems for cloud native software,… ⌘ Read more
CNCF Kubestronaut Program Momentum Highlights Asia’s Role in Growing Cloud Native Talent
Upcoming Kubestronaut celebrations in China and Japan to honor global program growth Hong Kong, China– 10 June, 2025 – The Cloud Native Computing Foundation® (CNCF®), which builds sustainable ecosystems for cloud native software, today announced continued… ⌘ Read more
The XMPP Standards Foundation: The XMPP Newsletter May 2025
XMPP Newsletter Banner
Welcome to the XMPP Newsletter, great to have you here again!
This issue covers the month of May 2025.
Like this newsletter, many projects and their efforts in the XMPP community are a result of people’s voluntary work. If you are happy with the services and software you may be using, please consider saying thanks or help these projects! Int … ⌘ Read more
GitOps in 2025: From Old-School Updates to the Modern Way
1. Introduction: Why Everyone’s Talking About GitOps in 2025 It’s 2025, and building software is more cloud-driven than ever. Cloud computing offers incredible speed and flexibility, but it also brings complexity. Companies are expected to ship… ⌘ Read more
Apple unveils software visual redesign, but no revamped Siri
This yea’rs software updates will bring a new visual design that Apple is calling Liquid Glass. ⌘ Read more
iOS 26 Announced with New Liquid Glass Interface
Apple has announced iOS 26, the next version of system software for iPhone. And yes you read that correctly, it’s iOS 26 – twenty six – jumping way ahead from iOS 18, to follow year numbers. It’s not just iOS that is facing the numerical versioning change, it turns out that Apple is labeling all … Read More ⌘ Read more
iOS 26, iPadOS 26, and macOS Tahoe Public Betas Launching in July
While the new software updates that Apple showed off today are only available to developers at the current time, Apple does plan to release public betas.
In the fine print for most of its software announcements, Apple says that public betas for iOS 26, iPadOS 26, macOS Tahoe, watchOS 26, and tvOS 26 will be … ⌘ Read more
Radeon Software For Linux Dropping AMD’s Proprietary OpenGL/Vulkan Drivers
Direct link to upstream release notes.
Could Apple Ditch Siri Name in Major AI Rebrand at WWDC?
Apple will highlight its AI strategy at Monday’s WWDC 2025 keynote, with its much-talked-about “Liquid Glass” software redesign playing a secondary role in announcements, claims industry analyst Ming-Chi Kuo.
Reports leading up to WWDC have indicated that iOS 26 will feature a [major design overhaul](https://www.macrumors.com/2025/06/06/ios- … ⌘ Read more
macOS Tahoe Might Support One Fewer Mac Than Previously Rumored
macOS 26 will drop support for several older Intel-based Mac models currently compatible with macOS Sequoia, according to a private account on X with a proven track record of leaking information about Apple’s software platforms.
macOS 26 will be compatible with the following Mac models, the account said:
MacBook Air (M1 and later)
MacBook Pro (2019 and … ⌘ Read more
Morse Micro and Gateworks Launch Wi-Fi HaLow Solution for Industrial Connectivity
Morse Micro and Gateworks Corporation have partnered to bring Wi-Fi HaLow (IEEE 802.11ah) to industrial environments. In collaboration with Silex Technology, they offer a hardware and software ecosystem for long-range, low-power, and secure wireless networking across manufacturing, energy, and transportation sectors. Wi-Fi HaLow operates in the sub-GHz frequency band, offering a co … ⌘ Read more
[$] Open source and the Cyber Resilience Act
The European Union’s
Cyber Resilience Act (CRA) has caused a stir in the
software-development world. Thanks to advocacy by the Eclipse Foundation, Open
Source Initiative, Linux Foundation, Mozilla, and others, open-source software
projects generally have minimal requirements under the CRA
— but nothing to do with law is ever quite
so simple. Marta Rybczyńska spoke at Linaro Connect 2025 about the impact of the
CRA on the open-source eco … ⌘ Read more
Elektroauto: Tesla will bestimmte Unfalldaten unter Verschluss halten
Die Washington Post möchte Details zu Tesla-Unfällen erfahren, unter anderem zu Software- und Hardwareversionen. Tesla will das verhindern. ( Tesla, Elektroauto)
[$] LWN.net Weekly Edition for June 5, 2025
Inside this week’s LWN.net Weekly Edition:
Front: OpenH264 in Fedora; Wallabag; Safety certification; 6.16 Merge window; Bounce buffering; Hardening repository problems; Device-initiated I/O; Faster networking; OSPM 2025; Free software in science.
Briefs: Kea vulnerabilities; Alpine Linux 3.22.0; Fedora strategy; Quotes; …
Announcements: Newsletters, conferences, securi … ⌘ Read more
[$] The importance of free software to science
Free software plays a critical role in science, both in research and in
disseminating it. Aspects of software freedom are directly relevant to
simulation, analysis, document preparation and preservation, security,
reproducibility, and usability. Free software brings practical and specific
advantages, beyond just its ideological roots, to science, while
proprietary software comes with equally specific risks. As a practicing
scientist, I would like to help others—scientists or not—see the … ⌘ Read more
iOS 26 Could Bring Sleep Detection, Camera Controls, and New Gestures to AirPods
The iOS 26 and macOS 26 updates could bring several new features to the AirPods, including sleep detection features and camera control options, reports 9to5Mac. The AirPods features would be introduced through firmware updates that would accompany Apple’s new software.
Anzeige: Adobe Creative Cloud im Jahresabo bei Amazon günstig wie nie
Mit der Adobe Creative Cloud lassen sich Fotos, Grafiken und Videos kreativ gestalten. Im Jahresabo gibt es die Software zum Tiefstpreis. ( Creative Cloud, Adobe)
Elden Ring Nightreign: From Software kündigt nebenbei einen Zweiermodus an
Das ist fast schon witzig: From Software kündigt in einem Nebensatz ein wirklich wichtiges Update für Elden Ring Nightreign an. ( Elden Ring, Rollenspiel)
Motorola Razr 60 Ultra im Test: So macht ein Flip-Smartphone Spaß
Dank guter Software lassen sich Motorolas Falt-Smartphones auch zusammengeklappt sehr gut nutzen - und überzeugen sogar einen Flip-Muffel. Ein Test von Tobias Költzsch ( Motorola, Smartphone)
↳
In-reply-to
»
When I chose the MIT license for all of my software, I thought:
⤋ Read More
@movq@www.uninformativ.de I hear you! I’d also love to forbid any use in military software (development). Even though I cannot imagine anything of my stuff ending up there.
When I chose the MIT license for all of my software, I thought:
“Should I use GPL, which I don’t really understand? Is that worth it? Yeah, there is a theoretical possibility that some company might use my code in their proprietary product … and then what? Should I sue them to enforce the GPL? I’m not going to do that anyway, so I’ll just use the MIT license.”
And now we have those LLM scrapers and now it’s suddenly a reality that these companies (ab)use my code. I can see it in my logs. I didn’t expect that back then.
GPL wouldn’t help, either, of course. (Regardless, I now think that GPL would have been the better choice anyway.)
I’m honestly considering taking my code and website offline. Maybe make it accessible through some obscure protocol like Gopher or Gemini, but no more HTTP.
(Yes, Anubis might help. Temporarily.)
I’m just tired.
[$] Safety certification for open-source systems
This year’s
Linaro Connect in Lisbon, Portugal featured a number of talks about the use of
open-source components in safety-critical systems. Kate Stewart gave a keynote on the topic
on the first day of the conference. In it, she highlighted several projects that
have been working to pursue safety certification and spoke about the importance of
being able to trace software’s origins to safety. In a talk on the second day, Roberto
Bagnara shared his ex … ⌘ Read more
(g+) Pro Click V2 Vertical im Vergleichstest: Razer macht mit der ersten vertikalen Maus …
Gut, aber nicht perfekt ist Razers erste vertikale Maus. Das liegt nicht nur an der unübersichtlichen Software. Ein Test von Ingo Pakalski ( Razer, Test)
[$] OpenH264 induces headaches for Fedora
Software patents and workarounds for them are, once again,
causing headaches for open-source projects and users. This time
around, Fedora users have been vulnerable to a serious flaw in the OpenH264 library for
months—not for want of a fix, but because of the Rube\
Goldberg machine methodology of distributing the library to Fedora
users. The software is open source under a two-clause BSD license; the RPMs are … ⌘ Read more
Apple Readies WWDC Stream on YouTube Ahead of Keynote Next Week
WWDC 2025 will kick off with Apple’s keynote on Monday, June 9 at 10 a.m. Pacific Time, and the page where the presentation will be live streamed is now available on YouTube. On the page, you can set a reminder to be notified before the keynote begins.
Apple will announce its latest software updates, including [iOS 26, iPadOS 26, macOS 26, tvOS … ⌘ Read more
Olimex Showcases Open Source €20 Smart Home Server Project
Olimex has recently highlighted a new open-source hardware and software project aimed at creating a €20 smart home server. The initiative was introduced during a lightning talk at TuxCon 2025, a community-driven open-source conference held earlier this month in Bulgaria. The project aims to deliver a compact, easy-to-use smart home server that prioritizes local control, […] ⌘ Read more
Paste Without Formatting Should be the Default
Software needs to stop trying to be so dang fancy. ⌘ Read more
Trump orders U.S. firms to halt chip software sales to China ⌘ Read more
[$] Allowing BPF programs more access to the network
Mahé Tardy led two sessions about some of the challenges that he, Kornilios Kourtis,
and John Fastabend have run into in their work on
Tetragon (Apache-licensed BPF-based security monitoring software)
at the Linux Storage, Filesystem, Memory Management, and BPF Summit. The session
prompted discussion about the feasibility of letting BPF programs
send data over the network, as well as potential new kfuncs to let BPF firewalls
send TCP reset packets. Tardy pre … ⌘ Read more
Launchpad mailing lists going away
Canonical’s Launchpad
software-collaboration platform that is used for Ubuntu development
will be shutting down its hosted mailing lists at
the end of October. The announcement
recommends Discourse or Launchpad Answers as
alternatives. Ubuntu’s mailing\
lists are u … ⌘ Read more
A Personal Software Runtime inspired by Emacs, Plan 9, Erlang, Hypermedia, and Unix
Comments ⌘ Read more
[$] Verifying the BPF verifier’s path-exploration logic
Srinivas Narayana led a remote session about extending
Agni to prove the correctness of
the BPF verifier’s handling of different execution paths as part of the Linux Storage,
Filesystem, Memory Management, and BPF Summit. The problem of ensuring the
correctness of path exploration
is much more difficult than the problem of
ensuring the co … ⌘ Read more
DietPi May 2025 Update Introduces Security Changes, Kernel Fixes, and Software Cleanups
The latest DietPi release (v9.13) focuses on improving security defaults, enhancing support for specific SBCs, and removing outdated software options. The update also brings kernel upgrades, interface refinements, and dozens of bug fixes for improved stability across platforms. DietPi: DietPi is a lightweight, Debian-based operating system optimized for single-board compu … ⌘ Read more
Open Source SQL Workbench Says “No Republicans Allowed!”
The Apache licensed SQL query tool says Republicans (and many others) are not welcome to use their software due to “despicable politics” and “contempt for human rights.” ⌘ Read more
Top Stories: iPhone 17 Air Details, Apple’s Smart Glasses, and More
WWDC is coming up quickly with a number of software announcements in store, but we’re also looking further ahead to hardware launches like the iPhone 17 lineup and even Apple’s smart glasses project.
This week also saw big news with former Apple design guru Jony Ive joining forces with OpenAI to build future AI-driven devices, while Fortnite return … ⌘ Read more
New (February 2025) paper, https://cms.mgt.tum.de/fileadmin/mgt.tum.de/faculty_and_research/mppe/39_Nora_von_Ingersleben-Seip_How_the_European_Union_Fell_Out_Of_Love_With_Open-Source_Software.pdf , describes “How the European Union Fell Out of Love with Open-Source Software”:
“A coalition of determined open-source software (OSS) advocates and a handful of technology experts working in the European Commission set out in 2004 to end Microsoft’s monopoly. They almost succeeded. This article reveals how they managed to change the EU’s software policies, made Microsoft lobbyists work overtime - and in the end, and despite their best efforts, could not withstand the power of proprietary companies’ lobbying campaigns.
Drawing on the Multiple Streams Framework, the article explains the European Commission’s decision to promote OSS and open standards in 2004, and its puzzling decision to reverse course just a few years later, in 2010, despite its unchanged rhetoric about the benefits of openness. The analysis reveals three key factors that drove the changes in the EU’s policies.
In 2004, OSS advocates managed to frame the EU’s dependency on proprietary software as a problem – and the promotion of OSS and open standards as the solution.
In 2010, #Microsoft and other proprietary companies used their existing connections in Brussels to sow doubt about the maturity and cost of #OSS among #EU policymakers.”
25 years later we’re where we started.
Apple Calendar App Revamp Confirmed by Job Posting
A new Apple job listing has provided more evidence that the company is working on a major overhaul of its Calendar app.
A senior software engineer position for “Calendar Experience,” [spotted](https://www.macworld.com/article/2791509/apple-job-posting-confirms-calendar-rev … ⌘ Read more
[$] Debian AI General Resolution withdrawn
Despite careful planning and months of warning, Debian developer Mo
Zhou has acknowledged that the project needs more time to grapple with
the questions around AI models and the Debian Free Software Guidelines
(DFSG). For now, he has withdrawn his proposed General Resolution (GR)
that would have required the original training data for AI models to
be released in order to be considered DFSG-compliant—though the
debates on the topic continue. ⌘ Read more
iOS 19 Will Let Developers Use Apple’s AI Models in Their Apps
Apple will make its artificial intelligence models available to developers to use in their apps, reports Bloomberg. The company plans to introduce a new software development kit (SDK) in iOS 19 that will make it easier for app creators to add AI features.
 seem social, with e.g. most newer startups relying on internal connections to gain real world adoption, otherwise blocked due to institutional apathy and bad regulations (sms 2fa, hospital faxes…)
A recent (unlocated) poll asked a similar question: “what percent of workers in the software industry are employed writing programs that should not exist?” While we do have NP-hard problems, politically hard problems like avoi … ⌘ Read more
Docker at Microsoft Build 2025: Where Secure Software Meets Intelligent Innovation
This year at Microsoft Build, Docker will blend developer experience, security, and AI innovation with our latest product announcements. Whether you attend in person at the Seattle Convention Center or tune in online, you’ll see how Docker is redefining the way teams build, secure, and scale modern applications. Docker’s Vision for Developers At Microsoft Build… ⌘ Read more
Apple Stops Signing iPadOS 17.7.7 After Reports of App Login Issues
Apple has stopped signing the iPadOS 17.7.7 update that was released earlier this week for devices unable to run versions of iPadOS 18, meaning that users will not be able to install the update even if they see it available in Software Update. Affected devices include the sixth-generation iPad, the 10.5-inch [iPad Pro](https://www.macrumors … ⌘ Read more
Our pledge to help improve the accessibility of open source software at scale
GitHub takes the Global Accessibility Awareness Day (GAAD) pledge.
The post Our pledge to help improve the accessibility of open source software at scale appeared first on The GitHub Blog. ⌘ Read more
Multiple security issues in Screen
The SUSE Security Team has published
an article detailing several security\
issues it has uncovered with GNU Screen. This includes
a local root exploit when Screen is shipped setuid-root, as it is in
some Linux and BSD distributions. The security team also reports [problems\
in coordinating disclosure … ⌘ Read more
MacOS Sequoia 15.5 Update Released with Bug Fixes & Security Enhancements
MacOS Sequoia 15.5 is now available as a software update for Mac users running the Sequoia operating system. The system software update includes bug fixes and security enhancements, but does not appear to include any new features or other major changes. Additionally, Apple has also released MacOS Ventura 13.7.6 and macOS Sonoma 14.7.6 for Mac, … [Read More](https://osxdaily.com/2025/05/12/macos-sequoia-15-5-update-downlo … ⌘ Read more
iOS 18.5 Update Released for iPhone & iPad with Bug Fixes & Security Enhancements
iOS 18.5 for iPhone and iPadOS 18.5 for iPad have been released by Apple. According to the release notes accompanying the update download, the software updates primary focus is the introduction of a new Pride Harmony LGBTQ wallpaper. Additionally, parents will now receive a notification when the Screen Time passcode is used on a childs … [Read More](https://osxdaily.com/2025/05/12/ios-18-5-update-iphone-ip … ⌘ Read more
Armbian Updates Add OMV Support, Boot Improvements, and Rockchip Optimizations
The Armbian development team has rolled out a series of notable updates this week, introducing enhancements across software usability, bootloader standardization, and hardware compatibility. One of the most significant additions is the integration of OpenMediaVault into the Armbian software installer. OpenMediaVault is now available via the armbian-config interface, offering users an easy … ⌘ Read more
Demonstrably Secure Software Supply Chains with Nix
An explanation how Nix can revolutionize your software supply chain security, enabling verifiable integrity and offline rebuilds from source.
↳
In-reply-to
»
One thing about my design here is that it would no longer incorporate "regex"-based rules like OWASP, mostly because my experience thus far has taught me that these rules are kind of overly sensitive, produce false positives and I'm not sure they are really very effective. For example, why is the point of performing SQL injection detection at the Edge using a WAF if you already handle SQL properly in the first place? (seriously does anyone still construct SQL queries by hand with effectively
⤋ Read More
printf?!)
@prologic@twtxt.net There have always been and there will always be people who have absolutely no clue what they’re doing. I’ve been 100% one of them when I started. Guaranteed, heaps of new SQL injections are born every single day, numbers rising.
That doesn’t justify all the WAF crap in the first place, though. In my opinion it’s just a filthy plaster applied to an injected wound. The software itself must be secure. Otherwise, don’t put that shit on the internet. Probably not even operate it at all. Nowhere. Fix it or throw it in the bin.
SiFive and Kinara Partner to Launch USB-Based X280 RISC-V Vector Development Board
SiFive and Kinara have announced a new partnership to offer developers direct access to the SiFive Intelligence X280 RISC-V vector processor through a compact USB-based enablement board. The HiFive Xara X280 board, based on Kinara’s Ara-2 processor, is designed to allow early-stage evaluation and development of RISC-V vector software, particularly for AI and machine learning […\ … ⌘ Read more
GNOME Foundation announces new executive director
The GNOME Foundation has announced
the hiring of Steven Deobald as its new executive director.
Steven has been a GNOME user since 2002 and has been involved in
numerous free software initiatives throughout his career. His
professional background spans technical leadership, cooperative
business development, and nonprofit work. Having worked with projects
like [XTDB](htt … ⌘ Read more
CNCF Announces Speakers and Sessions for KubeCon + CloudNativeCon India
Second annual India event to spotlight developer innovation and cloud native leadership Hyderabad, India, 7 May, 2025– The Cloud Native Computing Foundation (CNCF), which builds sustainable ecosystems for cloud-native software, today announced the keynote speakers and… ⌘ Read more
Release Candidate of iOS 18.5, MacOS Sequoia 15.5, iPadOS 18.5 Available, Public Release Coming Soon
A release candidate build for iOS 18.5, iPadOS 18.5, and MacOS Sequoia 15.5 is now available for users enrolled in the beta testing programs. For users not in the beta testing programs, what this basically means is that the final versions of these system software releases is coming soon, perhaps even next week. macOS Sequoia … [Read More … ⌘ Read more
Apple Seeds iOS 18.5 and iPadOS 18.5 Release Candidates
Apple today seeded the release candidate versions of upcoming iOS 18.5 and iPadOS 18.5 updates to developers and public beta testers, with the software coming a week after Apple released the fourth betas. The release candidate represents the final version of iOS 18.5 and iPadOS 18.5 that will be released to the public should no bugs be found.
iOS 18.5 … ⌘ Read more
foss-north 2025
I attended foss-north, a free / open source conference covering both
software and hardware from the technical perspective, at Chalmers
Conference Center in Gothenburg on April 14 & 15. A great conference.
Lots of interesting talks:
https://foss-north.se/2025/speakers-and-talks.html
My own presentation was “Forking QEMU to emulate and secure the
Tillitis TKey”. Recording is here:
Interviewing Software Developers: From Junior to Architect in a Single Programming Task
Comments ⌘ Read more
The XMPP Standards Foundation: The XMPP Newsletter April 2025
XMPP Newsletter Banner
Welcome to the XMPP Newsletter, great to have you here again!
This issue covers the month of April 2025.
Like this newsletter, many projects and their efforts in the XMPP community are a result of people’s voluntary work. If you are happy with the services and software you may be using, please consider saying thanks or help these project … ⌘ Read more
CNCF and Synadia Align on Securing the Future of the NATS.io Project
SAN FRANCISCO and San Mateo, CA – May 1, 2025 – The Cloud Native Computing Foundation® (CNCF®), which builds sustainable ecosystems for cloud native software, and leading edge innovator Synadia today announced that the widely-adopted NATS… ⌘ Read more
The AI-Powered DevOps revolution: Redefining developer collaboration
Collaboration is crucial to successful software delivery. Let’s dive into how AI can help your development teams decrease their time to delivery, and foster better communication and collaboration using GitHub Copilot.
The post [The AI-Powered DevOps revolution: Redefining developer collaboration](https://github.blog/ai-and-ml/github-copilot/the-ai-powered-devops-revolution-redefining-de … ⌘ Read more
Enforcing Artifact Security with Trivy and OPA
In cloud-native development, ensuring the integrity and security of software artifacts (such as Docker images, Python wheels, and Helm charts) is a fundamental challenge. With the growing adoption of continuous integration and delivery pipelines, there’s a… ⌘ Read more
Albertson: Future of OSL in Jeopardy
Lance Albertson writes
that the Oregon State University Open Source Lab, the home of many
prominent free-software projects over the years, has run into financial
trouble:
I am writing to inform you about a critical and time-sensitive
situation facing the Open Source Lab. Over the past several years,
we have been operating at a deficit due to a decline in corporate
donations. While OSU’s College of Engineering (CoE) has generously
filled this ga … ⌘ Read more
RVPC Adds BASIC Interpreter to €1 Open Source RISC-V Computer
The RVPC, a fully open source hardware and software retro-style computer project built around the CH32V003 microcontroller, now supports a BASIC interpreter. This update further expands the capabilities of the €1 RISC-V-based system, which already features VGA output and PS/2 keyboard input, despite its extremely limited resources. Originally conceived as a DIY challenge, the RVPC […] ⌘ Read more
[$] The mystery of the Mailman 2 CVEs
Many eyebrows were raised recently when three vulnerabilities were announced
that allegedly impact GNU Mailman 2.1,
since many folks assumed that it was no longer being supported. That’s
not quite the case. Even though version 3 of
the GNU Mailman mailing-list manager has been available
since 2015, and version 2 was declared (mostly) end of life
(EOL) in 2020, there are still plenty of users and projects still
usi … ⌘ Read more