Every published piece, newest first. Search titles, subjects and summaries.
57 stories — newest first
No stories match these filters.
An MIT-licensed local AWS emulator that answers on port 4566, with real Docker engines behind the services where fidelity matters, and sibling emulators for Azure, GCP and OCI.
A GNOME Shell extension for btrfs machines that turns snapper's snapshots into a top-bar menu: browse, compare, restore single files, roll back, and hand you the root command instead of taking it.
A GPL-3.0 GUI and JavaScript runtime for the ESP32: flash the board once, then install and update apps from an on-device store, on a machine with about 90 KB of RAM to spare.
A self-hosted dashboard that probes your connection every few seconds and runs speed tests on a schedule, keeping outages, latency, DNS and bufferbloat in a SQLite file you own.
Self-managed Kiteworks systems were told to go offline for a window over the weekend after federal threat intelligence warned of an imminent attack. No compromise is known and there is no patch to apply; the customer email and the company's press release disagree on the window.
ThreatDown traced a botnet through its own unauthenticated registry, recovered the implants, and found an agent persona that ranks AI API keys above every other secret on the host.
First release since June: a logs viewer and per-path access lists headline, a security batch underneath, and the bundled certbot bump comes with a warning for DNS plugin users.
Version 3.0 turns batch work into pipelines that watch folders, FTP and S3, keeps the AI features optional, and draws the free line for automated processing at 1,000 PDFs a month.
The largest update in a decade replaces the navigation, redesigns Discover, and uses Android's pre-approval install API. The post is candid about what did not come back.
The first stable of the 4.25 series makes AES the default key set on modern domains, fixing CVE-2026-20833, and offers SMB3 persistent handles with an unusually direct cost list.
Aikido found a Go implant in two registry providers and two Go modules. It does nothing unless the SHA256 of two Terraform variables hits one value, then runs a remote-access tool with Slack and Ethereum command channels. Both providers were still listed on Wednesday night.
The September update modernises the desktop with an icon dock, a full-screen launcher and a rebuilt Control Centre, all optional. The same week, the two-year-old firmware lock on RAM upgrades resurfaced because memory prices keep climbing.
An early alpha for the M4 Mac mini from two developers who forked from Asahi over its LLM policy: KDE on Wayland, working GPU acceleration, and Assisted-By trailers on the kernel commits.
TypeSafe's decision model charges $0.042 per million input tokens with free output; a parody post and two open rewrites show the trick runs on any GGUF model, and a coin-flip test shows where the numbers get shaky.
11.3k stars, one-line install on macOS, Linux or WSL, apps running beside the agent and memory kept as plain files. The modified Apache 2.0 licence is the part to read before you standardise on it.
The HID++ support merged for 7.3 is coming back out: the receiver cannot say which device sent an event, and userspace settings fight the new defaults. The revert is queued for the 7.3 fixes branch.
Anaconda gains a Stratis option: pools and filesystems through Cockpit, plus stratispool and stratisfs for kickstart installs. Caching and passphrase-free encryption still wait for post-install.
Anthropic and OpenAI shipped cheaper flagships on Tuesday, and Anthropic's own announcement says Opus 5.5 is the first release since the pacing essay.
The DNS server's release notes read like an advisory first: nine vulnerability fixes, most credited to outside researchers, with LDAP logins and a zone file editor alongside.
A native Proxmox storage backend turns VM disk requests into zvols on the array, delivers OpenZFS snapshots over iSCSI or NVMe/TCP, and ships now as an Early Adopters release, Community Edition first.
Jellyseerr and Overseerr merged into one project in February; since then Seerr has ended its feature freeze, patched a critical security release, and kept a steady preview train; the newest branch reworks authentication around OpenID Connect.
Raspberry Pi's walkthrough runs Cactus's Needle 2 on a Pi 5's CPU: 'turn the LED on' becomes code in 78 milliseconds, with no AI HAT and no cloud call in the loop.
The new Mini keeps JetKVM's web interface, cloud and open firmware in a 42 mm aluminium case: $39 wired, $42 wireless, $33 a unit in threes, using an ESP32-P4X where the original needed a Linux system.
A DNSKEY whose owner pointer compresses into its own RDATA overflows the digest buffer; the advisory rates it denial of service and possible remote code execution, and 1.26.1 fixes it.
v16.0.5 and v15.0.9, both out 17 September, patch a critical RCE reached by applying a patch, plus a CSRF that could attach an unexpected OpenID identity to a logged-in account.
Nine minutes of downloads in May, four months of quiet, and an incident report that names the kept-alive account and the compromised laptop behind it.
The new stable treats the data folder's permissions as a hard requirement: exact permissions or it will not run, with three documented ways out for the setups that cannot comply.
PVE 9.2 for arm64 shares the codebase and release cycle with x86-64; the hands-on reports agree the platform works and the tools around it still lag.
Four default settings in tigergraph/community:latest compose into command execution as the database's own service account, using no secret that is not already public.
AGPL-3.0, five containers, your own model keys, and an approval card in front of every update or delete an agent wants to make.
Upcoming ISOs shift from Xorg to the maintained X11 fork, with no near-term Wayland plans. The last distro to try this lost a maintainer over it.
MIT-licensed, alpha, five Sega systems, a Libretro core and a browser build you can run from ghcr.io with one docker run.
The bug needs a theme with a top-level `page-` directory and a readable local `.php` file, and the official PHP Docker image supplies the second half.
New repositories will default to SHA-256, reftable and the branch name `main`, Rust becomes a required part of the build, and the last 2.x ships as a long-term support release.
An MIT-licensed iOS chat app with real end-to-end encryption and no service behind it. The data plane is Firebase, and the account, the rules and the console are Google's.
The upgrade notes for 262 are mostly a breaking-change list: services that neither catch nor block `ReloadSignal=` now fail to start, and TPM-sealed credentials are pinned to the SRK.
Subnet routers, app connectors and exit nodes run every stream through a single ordered pipeline today; multi-queue lands after v1.104, and netmap caching comes first.
A rootless sandbox shaped like a virtualenv: its own home, its own namespaces, no capabilities, built for coding agents run with `--dangerously-skip-permissions`.
Exception-only error monitoring over Postgres 16: change the DSN, get grouped issues, and watch transactions, replay and profiles get dropped at the door.
mathmain ships an encrypted implant that stays dormant until a caller passes one specific matrix to its solver, and the code is missing from the GitHub repository the package links to.
A 46-patch RFC keeps KVM guests executing on shielded physical CPUs through a host kexec, under a small privileged layer that services their exits while no host kernel and no VMM exist.
A machine behind carrier-grade NAT reached through a cheap VPS and a WireGuard tunnel, with the home side initiating, the routing split so replies go down the tunnel, and the measured cost in latency.
fusion-runtime runs speech recognition, an LLM and speech synthesis in one process, and its benchmark section publishes the number that makes it look worse and explains why the stages do not add up.
EEPROM 2026-05-11 stops a Raspberry Pi 5 booting when the memory it finds does not match the memory it expects, and the halt happens before the OS loads, so the fix is a recovery image and a downgrade.
Homebrew 7.0.0 ships brew vulns for checking installed packages against an in-house advisory database, fixes eight advisories, sandboxes installs, and moves Intel Macs to Tier 3 with no new bottles.
Cambium Networks Limited entered administration on 14 September, cnMaestro Cloud is only promised to run through 1 October, and the recommended migration to on-premises still needs an account on the same cloud.
Ubuntu 26.10 gives critical desktop services a lower OOM score and disables systemd-oomd's session kill, so memory pressure takes out applications instead of the desktop session.
Vincent Bernat replaced log analysis with self-hosted GoatCounter and a client that only counts after a real interaction, which cut a reported 2,000 daily visitors down to fewer than 200 people.
Portainer 3.0 rebuilds the product around Kubernetes. Community Edition stays on 2.x, Docker environments keep working but stop growing, and the recommended path out is a Docker-to-Kubernetes translator.
Nextcloud Hub 26 Summer is out as Server 35.0.0, with a Euro-Office desktop client, team workspaces, a redesigned Photos app and one-time passwords for shares, while Hub 25 Autumn goes end of life.
Frigate 0.18.0 is the first stable of the 0.18 line, bringing full UI configuration, profiles, a GenAI chat agent and rebuilt exports, with a config migration, a WebP-only snapshot change and an FFmpeg 8 trap in go2rtc.
Immich 3.2.0 lands a new search API and cross-user face grouping that requires a facial recognition reset, and drew two hotfixes in the five days after release.
Grafana's 15 September releases — 12.4.11, 13.0.9, 13.1.6 and 13.2.2, one per branch — fix a plugin-extraction path traversal that can run code as the Grafana server, plus a Geomap stored XSS.
Jellyfin 12.1 is 47 fixes six days after 12.0, and several of them touch the migration and the pre-migration backup.
Tailscale open-sourced tailcat, a netcat-like CLI and Go library that connects two machines over the same WireGuard and NAT-traversal stack as Tailscale, without an account, a control plane or any IP addresses.
Umbrel's biggest update to its home-server OS adds multiple users, a Photos app, iOS and Mac apps, GPU support, an MCP server for AI agents, and a Storage Manager with RAID.
Jellyfin 12.0 makes its Modern layout the default and rebuilds how playlists and collections are stored — and it rewrites your database on first boot, so the backup is the only way back.
