Agreguesi i feed

An OpenSSH flaw could let attackers sign in to some Linux systems without knowing a password, even when an account was meant to use keys only.

Roku is removing its popular Aquatic Life fish tank screensaver on December 1 and automatically switching affected users to Roku City. According to Cord Cutters News, the creator pulled the license after Roku's sale to FOX was announced. Ars Technica reports: The screensaver has been an option for Roku OS users for 10 years. Roku has been licensing the animation, which is called the Marine Aquarium, from artist Jim Sachs through Prolific Publishing. Sachs is the creator and copyright holder of the Marine Aquarium. He developed the screensaver through his company SereneScreen. He tells Ars Technica that the licensing agreement with Roku is up for renewal every October and can be canceled by either party for any reason. A day after learning that Fox was planning to buy Roku, a deal that closed today, Sachs told Prolific that he wouldn't be renewing Roku's license. "I can't be part of the Fox world," he tells Ars, pointing to Fox News' controversial style of news and entertainment. Roku will automatically switch the Aquatic Life screensaver on affected devices to the Roku City screensaver, another popular animation that includes subtle advertisements, according to the user notice. The Aquatic Life screensaver provided an ad-free, relaxing display for years for some Roku users. Numerous people online have lamented the impending loss of the screensaver for Roku OS. [...] The decision to not renew the licensing contract has "major financial consequences," Sachs said. "Our needs are very small, with a high property tax bill being the only significant expense," he said. "We'll be okay but can't start any of the projects I had planned." According to Sachs, the licensing "agreement was $80,000 per year for exclusive rights to all set-top devices, or $60,000 per year for non-exclusive. They have always opted for exclusive." Ars asked Roku to confirm the details of the licensing agreement but didn't hear back ahead of publication. The licensing deal with Roku was Sachs' primary form of income, he told Ars, noting low sales of the version of the screensaver for computers. Marine Aquarium fans can still buy the screensaver for Windows, macOS, iOS, and Android, but it seems unlikely that it will return to the Roku platform.

Read more of this story at Slashdot.

OpenAI says its new GPT-6 Cyber model helped an automated system identify 1,724 security flaws in the Linux kernel and exploit 948 of them to gain administrator-level access during testing, including at least 10 previously unknown techniques. Axios reports: During testing, the system identified 1,724 security flaws and found ways to use 948 of them to gain administrator-level access to Linux systems for about $1.2 million in API credits. At least 10 of the techniques the model used were previously unknown, according to OpenAI. Human researchers reviewed the Linux findings before reporting vulnerabilities and proposed fixes to maintainers. The model also uncovered 81 previously unknown, high-severity flaws in Mozilla's Firefox browser.

Read more of this story at Slashdot.

An anonymous reader quotes a report from Ars Technica: Top Republican lawmakers have asked Jensen Huang to appear before Congress to answer questions after it was reported that US intelligence officials believe Nvidia's chief executive has been targeted by a Chinese spying operation. The chairs of the House committees on China, foreign affairs, and intelligence wrote to Huang this week asking him to appear before a joint closed-door briefing for their committees on November 18. "Recent reports raise significant national security concerns regarding the People's Republic of China's access to sensitive US technology and information," representatives John Moolenaar, Brian Mast, and Rick Crawford wrote. "The issue of PRC infiltration and access to cutting-edge US technology is core to the investigative work of our three committees this Congress. It is vital that Congress determines the extent to which US national security has been placed at risk," the lawmakers added. The New York Times last week wrote that US intelligence officials believed Huang had been the target of a Chinese spy operation. The concerns center on a Chinese woman named Alice Huang, an executive at Megaspeed, a Singapore-based cloud company that has bought billions of dollars of Nvidia's chips. Nvidia has rejected the claims and on Thursday would not say if Huang would appear before Congress. "Meetings with customers are part of a CEO's job. Jensen talks with thousands of customer executives every year," the company said. "Our regional cloud customers receive ordinary business information -- not sensitive Nvidia trade secrets -- and zero information relevant to national security," it added. The lawmakers said they wanted Huang to discuss the security protocols Nvidia had in place to protect against "foreign adversary espionage." The company said its chief executive had an "outstanding security team" that travels with him. The New York Times said Huang had not received a "defensive briefing," which the intelligence community usually, but not always, provides potential espionage targets to warn them about the activity. Nvidia said it was confident that the US government would have let the company know if it thought a person was a threat to US industry and that it often receives updates from Washington about people of concern.

Read more of this story at Slashdot.

Version:7.3.3 (stable) Released:2026-11-06 Source:linux-7.3.3.tar.xz PGP Signature:linux-7.3.3.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-7.3.3

Version:6.18.62 (longterm) Released:2026-11-06 Source:linux-6.18.62.tar.xz PGP Signature:linux-6.18.62.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-6.18.62

Version:6.12.116 (longterm) Released:2026-11-06 Source:linux-6.12.116.tar.xz PGP Signature:linux-6.12.116.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-6.12.116

Version:6.6.162 (longterm) Released:2026-11-06 Source:linux-6.6.162.tar.xz PGP Signature:linux-6.6.162.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-6.6.162

Version:6.1.192 (longterm) Released:2026-11-06 Source:linux-6.1.192.tar.xz PGP Signature:linux-6.1.192.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-6.1.192

Version:5.15.225 (longterm) Released:2026-11-06 Source:linux-5.15.225.tar.xz PGP Signature:linux-5.15.225.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-5.15.225

Version:5.10.274 (longterm) Released:2026-11-06 Source:linux-5.10.274.tar.xz PGP Signature:linux-5.10.274.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-5.10.274

Elon Musk says Tesla will be "winding down" Cybertruck production at its Texas Gigafactory around mid-2027 to free up capacity for increased production of its Cybercab robotaxi. CNBC reports: The Cybertruck is exclusively produced at the company's plant in Texas alongside the Tesla Model Y and two-seat Cybercab, which Musk has touted as a crucial product for the automaker moving forward. Musk did not say whether the company would produce the Cybertruck at a different facility, but he later responded to a user on X who called the update an "end of an era" and said the Cybertruck was the "best vehicle Tesla has ever made." "True, but the Cybertruck fleet will be around for a long time," Musk said. The Cybertruck and its polarizing design gained a niche following, but it did not achieve mass-market sales, despite Musk's pre-launch prediction that annual sales would eventually total 250,000. "Trucks have been the same for a very long time," Musk said when the truck was unveiled in 2019. "Like 100 years. Trucks have been basically the same. We want to try something different." While Tesla does not break out its sales by model or region, Cox Automotive estimated sales of the Cybertruck last year at 20,237 units in the U.S., down 48% from 38,965 in 2024. Thank you Slashdot reader Dan Posluns for sharing the news.

Read more of this story at Slashdot.

Britain plans to require employers to disclose salaries in job advertisements. "Whether you're a young person starting out or a parent trying to support your family, you should know what a job pays before spending your time and effort applying for it," Prime Minister Andy Burnham said in a statement. Reuters reports: The government said requiring companies to disclose pay in job ads would help young people applying for their first jobs, while boosting pay transparency and helping tackle disparities that can disadvantage women. Just over two in five employers always publish salary ranges, while fewer than one in five always disclose specific salaries, Burnham's office said, citing estimates from the Chartered Institute of Personnel and Development. The government will soon introduce legislation to parliament making salary disclosures mandatory, Burnham's office said, although it did not provide a timeline. Nearly one million, or 13%, of 16 to 24 year-olds in Britain are not in employment, education or training, one of the highest shares in Europe. A government review into youth inactivity is due to be published later in November.

Read more of this story at Slashdot.

It’s been a few weeks since my last blog post about my work on GNOME Design and Community Management as part of my Sovereign Tech Fellowship. As usual, I want to share some of the most interesting developments.

Passkey Portal

Passkeys are an easy and safe way to sign in, and can replace passwords. They’re tied to the website that issued them, so they can’t be phished. Hackers can’t steal them from a website because its servers don’t store your private key. You can learn more about passkeys and how they work at whatarepasskeys.info.

People have been working to bring passkey support to Linux for several years, and we’re getting closer to making it available to users. Just today, the experimental credentials portal was merged into xdg-desktop-portal. To support its implementation in GNOME, I’ve spent a lot of time researching and refining the design of the credentials portal. Below is an excerpt from the credentials portal mockup. Take a look at the full mockup in the OS mockups repository for all the user interaction flows.

Some details of the credentials portal mockup showing the passkey creation Libadwaita

In my last blog post, I wrote about standardizing scale rows in libadwaita and mentioned that ActionRow would likely get a generic bottom child widget to support the change. This has now landed as the ActionRow:body property, and the calendar app Era already uses it to implement its participants row.

Screenshot of the calendar app Era with a participants row based using the new ActionRow:body property

The new scale style has also already landed in the upcoming libadwaita version.

Screenshot of the new scale style with pill shaped knob Other

If you’ve read this blog before, you may have noticed that the font has changed. Inter has been installed on GNOME’s WordPress instance, so community members can now use it on their personal GNOME blogs to keep their typography consistent with GNOME’s web standards.

As usual, I’ve reviewed design changes across various projects and answered questions on Matrix and in issue threads. GNOME Circle reviews are also progressing well, and I’ll write more about them as the changes land.

Thanks for reading! Feel free to leave a comment on this blog or reach out to me on Mastodon or Matrix.

An anonymous reader quotes a report from Ars Technica: Sony has brought back the MDR-3-series headphones that debuted in 1979 alongside the Walkman TPS-L2 cassette player. [...] The new MDR-3R (originally called the "MDR-3L2") headphones look just like the originals and come with orange and blue ear cushions. New headphones are often wireless these days, but the MDR-3R continues the wired tradition of the MDR-3, with an essential twist: a USB-C connector. For better or worse, the new headphones also use "the same 23 mm driver units as the MDR-3 to reproduce sound quality close to the original," per Sony. Audiophiles will prefer something more advanced, perhaps with additional acoustic features. In addition to the USB-C connector, the MDR-3R also adds an in-line remote control and an integrated microphone. They are available for $60.

Read more of this story at Slashdot.

Blue Origin has unveiled a third stage called GS3 for its New Glenn rocket, designed to deliver satellite constellations directly to geostationary orbit and support heavy-lift missions to the Moon and deep space. The company also announced Northstar, a new methalox booster engine that it says produces 715,000 pounds of thrust while cutting mass by 30% and parts by 50% compared with the BE-4. Space.com reports: The new stage will be powered by one BE-7 engine, which the company developed for use on its Blue Moon spacecraft, one of the two private vehicles that NASA selected to be crewed lunar landers for its Artemis program. (The other is SpaceX's Starship.) Blue Moon landing missions won't need to launch on GS3-equipped New Glenn rockets, according to Blue Origin. But the third stage "can support sustained operations around the moon," the company wrote in today's blog post. "By delivering significant payload mass directly to trans-lunar injection (TLI), GS3 enables faster transit times while preserving propellant for on-orbit operations." And there's already demand for such services: Blue Origin also announced today that a government customer (which it did not name) has booked a GS3 mission to cislunar (Earth-moon) space, with launch targeted for 2028. And the company dropped yet more news today -- that it's working on a new first-stage engine, called Northstar. Like Blue Origin's other booster engine, the BE-4, Northstar burns liquid oxygen and liquid methane propellant, a combination known as methalox. But the new engine is more powerful and less complex. "Compared to the BE-4 engine, Northstar reduces mass by 30% and parts count by 50%, while increasing thrust from 640,000 to 715,000 pounds-force," Blue Origin said in a second blog post today. "Manufacturing advancements have also significantly shortened production timelines, enabling assembly in less than a day." Northstar went from program approval to development testing in just 11 months, according to the company. But today's update did not say when the new engine will fly for the first time.

Read more of this story at Slashdot.

The FAA announced today that it is finally phasing out floppy disks from air traffic control systems at more than 400 facilities. Engadget reports: They'll be replaced by a more modern system called Enterprise -- Information Display System (E-IDS), which is comprised of a digital display for relaying status information, updates and other alerts to air traffic teams. The FAA plans to have E-IDS installed in 435 sites by the end of 2028; the first five locations to receive the upgrades are the Atlantic City International Airport, Nashville International Airport and Greater Rochester International Airport, as well as data processing hubs in Atlanta and Salt Lake City.

Read more of this story at Slashdot.

An anonymous reader quotes a report from Scientific American: The Great Pacific Garbage Patch, an area in the Pacific Ocean where debris naturally accumulates, is full of tiny bits of plastic -- so full, in fact, that it seems to be changing the color of the ocean. [...] To better understand how microplastics may have influenced the ocean's color, [Daniel Koestner, a postdoctoral fellow at the University of Bergen in Norway] and his colleagues looked at 20 years of satellite data from the spot in the ocean with perhaps the most of plastic -- the Great Pacific Garbage Patch, a zone between Hawaii and California where trash trapped by ocean currents accumulates. Between 2002 and 2022, the researchers found, waters near the garbage patch have gotten brighter in both blue and green wavelengths compared with surrounding areas. The results, published in the journal Communications Earth & Environment on Thursday, don't yet prove that microplastics have directly brightened the ocean, the researchers emphasize, though their findings are backed up by lab experiments with microplastics. But without taking direct ocean samples, it's hard to know for sure what's causing the ocean's color to change. "We're still one step away from proving definitively that microplastics are causing the shift in color that that we're seeing," adds study co-author Shea Cheatham, a Ph.D. student also at the University of Bergen. "We just have to get in there [to the garbage patch] to verify." The hope is that detecting these color shifts could help identify other areas around the world where microplastics have accumulated.

Read more of this story at Slashdot.

A flaw in APT, the tool that installs software on Debian and Ubuntu, could let an attacker replace a package after it passed a security check.

Rails, a software framework used to build websites, has fixed flaws that could let an uploaded file do more than its owner intended.