Searching We.Love.Privacy.Club

Twts matching #blog
Sort by: Newest, Oldest, Most Relevant

One step forward, two steps back on CA age bill (EFF Deeplinks Blog)
The EFF has a blog\
post looking at a new bill in California that would exempt
open-source operating systems from the Digital Age Assurance Act
passed last year, but has problems of its own:

While the open source exemption, if passed, would improve the law, the
remaining amendments proposed by AB 1856 would require all web
browsers and w … ⌘ Read more

⤋ Read More

Fedora Linux 43 Exposes 20-Year-Old Microsoft Outlook Security Failure
BrianFagioli writes: Fedora Linux 43 users upgrading to the latest Dovecot mail server discovered something rather unsettling: some older Microsoft Outlook configurations may have been silently ignoring SSL/TLS settings for POP3 email connections for years. According to a Fedora community blog post, affected Outlook clients reportedl … ⌘ Read more

⤋ Read More

Tridgell: rsync and outrage
Andrew Tridgell has written a blog\
post responding to complaints that he has begun using LLM tools in
his work maintaining rsync:

Like many developers of open source packages I’ve been hit by a
flood of security reports lately in my role as the rsync
maintainer. Many of those reports are AI generated (not all though,
there are some notable ones with very careful and high quality manual
analysis).

As t … ⌘ Read more

⤋ Read More

Adafruit Pauses Blog After Demand Letter From Flux.ai’s Lawyers
Longtime Slashdot reader Matt_Bennett shares a blog post from Adafruit: Adafruit received at 10:38 p.m. ET on May 22, 2026 a letter from former FBI chief of staff, Jonathan F. Lenzner, and partner at Fenwick & West LLP, counsel for Flux, demanding, among other things, that Adafruit refrain from publishing an article addressing what the letter charact … ⌘ Read more

⤋ Read More

Vim Classic 8.3 released
Version\
8.3 of Vim Classic has been
released. This is the first release of the Vim fork since the project
was announced
in March.

This release is based on Vim 8.2.0148, with a number of bug fixes
and patches conservatively backported from future versions of Vim
upstream. We elected to clean up this version of Vim, prepare it for a
release, and imagine an alternate history wh … ⌘ Read more

⤋ Read More

Ombredanne: An AI agent ported our codebase from Python to Rust
Over on the AboutCode blog, lead
maintainer Philippe Ombredanne writes
about an agentic LLM system porting the ScanCode\
Toolkit to Rust. In the process, the LLM (or the people behind it)
infringed the ScanCode trademark, stripped copyright and license notices,
“and started an outreach campaign, without ev … ⌘ Read more

⤋ Read More

Multiple redhat-cloud-services npm packages compromised (StepSecurity Blog)
StepSecurity is reporting
that a number of npm packages in the @redhat-cloud-services
scope include malware that runs automatically on every npm install:

The payload is a multi-stage credential harvester that sweeps
GitHub Actions secrets along with AWS, GCP, Azure, Kubernetes,
HashiCorp Vault, npm, and CircleCI tokens, and it is purpose-built to
evade det … ⌘ Read more

⤋ Read More

Microsoft Criticized for Threatening Legal Action Against Security Researcher
“A security researcher published a series of unpatched bugs in Microsoft products,” reports TechCrunch, “along with code to exploit them.”

Microsoft’s response to the researcher? “Threatening to take legal action and call the cops on them.”

On Wednesday, Microsoft published a blog post criticizing the researcher, who goe … ⌘ Read more

⤋ Read More

Nesbitt: Protestware for coding agents
Andrew Nesbitt has written a blog\
post detailing a recent incident with the jqwik library for property-based testing
in Java. On May 25, the 1.10.0 release of jqwik included a change
that attempts to instruct coding agents to disregard previous
instructions and delete jqwik tests and code.

I think this is a new class of supply-chain input worth ke … ⌘ Read more

⤋ Read More

Górny: why Gentoo?
Gentoo developer Michał Górny has written a lengthy\
article explaining the philosophy and purpose of the Gentoo Linux
distribution, in response to a\
thread on Mastodon:

Gentoo is a source-first distribution, which means the primary
method of installing software is to build it from source. Of course,
that doesn’t mean manually building stuff, following some kind of
how-to: finding all t … ⌘ Read more

⤋ Read More

YouTube To Automatically Detect, Label AI-Generated Videos
YouTube will begin automatically labeling videos when its systems detect “significant” photorealistic AI use, while also making AI-content disclosures more visible below long-form videos and directly on Shorts. “We’ve heard consistently from our community that they value transparency when it comes to generative AI content,” YouTube said in a blog post. “These … ⌘ Read more

⤋ Read More

Arias: Human proof for FOSS contributions
Rodrigo Arias Mallo, maintainer of the Dillo web browser, has written a
blog post
with a proposal on one way to ensure that a contribution is written by
a human and not AI; he suggests asking new contributors to record
their programming session using asciinema.

In the same way that LLMs generate patches, they can also generate
the asciinema recordings themselves. Then, the contributors c … ⌘ Read more

⤋ Read More

Stenberg: The pressure
Curl maintainer Daniel Stenberg writes about\
the stress of keeping up with the current flood of security reports.

This is a never-before seen or experienced pressure on the curl
project and its security team members. An avalanche of high
priority work that trumps all other things in the project that is
primarily mental because we certainly could ignore them all if we
wanted, but we feel a responsibility, we have a conscience and we
are p … ⌘ Read more

⤋ Read More