Linux fréttir

The Department of Defense is revamping its "outdated" software procurement systems through a new Software Fast Track initiative. The SWFT program aims to reform how software is acquired, tested, and authorized with security as the primary focus. "Widespread use of open source software, with contributions from developers worldwide, presents a significant and ongoing challenge," DoD CIO Katie Arrington wrote in the initiative memo. The DoD currently "lacks visibility into the origins and security of software code," hampering security assurance efforts. The initiative will establish verification procedures for software products and expedite authorization processes. Multiple requests for information are running until late May seeking industry input, including how to leverage AI for software authorization and define effective supply chain risk management requirements. The push comes amid recent DoD security incidents, from malware campaigns targeting procurement systems to sensitive information leaks.

Read more of this story at Slashdot.

Windows 11's hardware requirements: Sales ploy or security play?

Comment Retired Microsoft engineer Dave Plummer has weighed in on the increasingly heated discussion regarding the impending end of Windows 10. Are Windows 11's hardware requirements all about security or just a sales ploy in disguise?…

Get in the bin: For the first time since 2012, some older CPU generations are being chopped

Kernel 6.15 is taking shape and it looks like it will eliminate support for Intel's 486 chip and its contemporaries.…

Leave it to the Borg? Scribe David D. Levine slams 'use of planet-destroying plagiarism machines'

Fans and writers of science fiction are not necessarily enthusiastic about artificial intelligence - especially when it's used to vet panelists for a major sci-fi conference.…

Stratolaunch successfully flew its uncrewed Talon-A2 prototype to hypersonic speeds twice -- once in December and again in March. "We've now demonstrated hypersonic speed, added the complexity of a full runway landing with prompt payload recovery and proven reusability," Stratolaunch President and CEO Zachary Krevor said in a statement on Monday. "Both flights were great achievements for our country, our company and our partners." Space.com reports: Microsoft co-founder Paul Allen established Stratolaunch in 2011, with the goal of air-launching satellites from a giant carrier plane called Roc, which has a wingspan of 385 feet (117 meters). That vision changed after Allen's 2018 death, however; the company is now using Roc as a platform to test hypersonic technology. Hypersonic vehicles are highly maneuverable craft capable of flying at least five times the speed of sound. Their combination of speed and agility make them much more difficult to track and intercept than traditional ballistic missiles. The United States, China and other countries view hypersonic tech as vital for national security, and are therefore developing and testing such gear at an ever-increasing pace. Stratolaunch, Roc and the winged, rocket-powered Talon-2A are part of this evolving picture, as the two newly announced test flights show. They were both conducted for the U.S. military's Test Resource Management Center Multi-Service Advanced Capability Hypersonic Test Bed (MACH-TB) program, under a partnership with the Virginia-based company Leidos. On both occasions, Roc lifted off from California and dropped Talon-2A over the Pacific Ocean. The hypersonic vehicle then powered its way to a landing at Vandenberg Space Force Base, on California's Central Coast. "These flights were a huge success for our program and for the nation," Scott Wilson, MACH-TB program manager, said in the same statement. "The data collected from the experiments flown on the initial Talon-A flight has now been analyzed and the results are extremely positive," he added. "The opportunity for technology testing at a high rate is highly valuable as we push the pace of hypersonic testing. The MACH-TB program is pleased with the multiple flight successes while looking forward to future flight tests with Stratolaunch."

Read more of this story at Slashdot.

Seeing as the company’s CEO is big at DOGE, this is delicious

World War Fee Citrix has found a new use for virtualization: Avoiding tariffs.…

Prime Minister bemoans bullying, addiction, and inappropriate content – but isn’t planning a rapid vote

New Zealand’s government has signaled its support for a bill to ban social media for children under 16, but without explicitly making it a government initiative.…

An anonymous reader quotes a report from TechCrunch: Spyware maker NSO Group will have to pay more than $167 million in damages to WhatsApp for a 2019 hacking campaign against more than 1,400 users. On Tuesday, after a five-year legal battle, a jury ruled that NSO Group must pay $167,256,000 in punitive damages and around $444,719 in compensatory damages. This is a huge legal win for WhatsApp, which had asked for more than $400,000 in compensatory damages, based on the time its employees had to dedicate to remediate the attacks, investigate them, and push fixes to patch the vulnerability abused by NSO Group, as well as unspecified punitive damages. The trial, as well as the whole lawsuit, prompted a series of revelations, such as the location of the victims of the 2019 spyware campaign, as well as the names of some of NSO Group's customers. The ruling marks the end -- pending a potential appeal -- of a legal battle that started in more than five years ago, when WhatsApp filed a lawsuit against the spyware maker. The Meta-owned company accused NSO Group of accessing WhatsApp servers and exploiting an audio-calling vulnerability in the chat app to target around 1,400 people, including dissidents, human rights activists, and journalists. NSO Group's spokesperson Gil Lainer left the door open for an appeal. "We will carefully examine the verdict's details and pursue appropriate legal remedies, including further proceedings and an appeal," Lainer said in a statement.

Read more of this story at Slashdot.

But a multi-billion dollar contract with Oracle for a pile of Instincts and Epycs should take the edge off

AMD expects the Trump administration's newly implemented export controls on GPUs and AI accelerator sales to China to take a $1.5 billion byte out its 2025 revenues, executives revealed on a Tuesday earnings call with Wall Street.…

Rep. Kat Cammack (R-FL) introduced the App Store Freedom Act [PDF] on Tuesday, legislation that would compel "large app store operators" with over 100 million US users to permit third-party app stores and allow them to be set as defaults. The bill directly challenges Apple's walled garden approach and Google's Play Store dominance by requiring both companies to allow developers to use alternative payment systems, bypassing the platforms' commission structures. It would also mandate equal access to development tools and interfaces without discrimination, while giving users the ability to remove pre-installed apps. Violations would trigger FTC enforcement with penalties up to $1 million per infraction. The legislation mirrors recent European Union regulations that have already forced Apple to permit third-party app stores and allow users to change default apps.

Read more of this story at Slashdot.

Amazon's Zoox said it has issued a software recall for 270 of its robotaxis after a crash in Las Vegas last month. CNBC reports: The recall surrounds a defect with the vehicle's automated driving system that could cause it to inaccurately predict the movement of another car, increasing "the risk of a crash," according to a report submitted to the National Highway Traffic Safety Administration on May 1. Zoox submitted the recall after an April 8 incident in Las Vegas in which an unoccupied Zoox robotaxi collided with a passenger vehicle, the NHTSA report states. There were no injuries in the crash and only minor damage occurred to both vehicles. "After analysis and rigorous testing, Zoox identified the root cause," the company said in a blog post. "We issued a software update that was implemented across all Zoox vehicles. All Zoox vehicles on the road today, including our purpose-built robotaxi and test fleet, have the updated software." Zoox paused all driverless vehicle operations while it reviewed the incident. It has since resumed operations after rolling out the software update.

Read more of this story at Slashdot.

We'd be shocked, just shocked, if Big Tech's renewable energy ambitions aren't known in the White House

The Attorneys General of 17 states and Washington, DC have sued the Trump administration over an executive order halting all federal approvals for wind energy projects.…

According to the Washington Post (paywalled), the Trump administration plans to eliminate the Energy Star program -- a long-standing EPA initiative that has saved Americans over $500 billion in energy costs since 1992. "The organization states that the average American saves about $450 per year on energy bills by choosing appliances that have been Energy Star-certified," adds Engadget. From the report: The EPA hasn't said when this would go into effect and when consumers would stop seeing Energy Star certifications on home appliances. It's technically illegal for a presidential administration to end this program without Congress, but the same goes for many of Trump's pronouncements and executive orders. "Eliminating the Energy Star program would directly contradict this administration's promise to reduce household energy costs," Paula Glover, president of the nonprofit coalition Alliance to Save Energy, told CNN. "For just $32 million a year, Energy Star helps American families save over $40 billion in annual energy costs. That's a return of $350 for every federal dollar invested."

Read more of this story at Slashdot.

Don't f&#k with Zuck

A California jury has awarded Meta more than $167 million in damages from Israeli surveillanceware slinger NSO Group, after the latter exploited a flaw in WhatsApp to allow its government customers to spy on supposedly secure communications.…

An anonymous reader quotes a report from Ars Technica: Google's accelerated Android release cycle will soon deliver a new version of the software, and it might look quite different from what you'd expect. Amid rumors of a major UI overhaul, Google seems to have accidentally published a blog post detailing "Material 3 Expressive," which we expect to see revealed at I/O later this month. Google quickly removed the post from its design site, but not before the Internet Archive saved it. It has been a few years since Google introduced any major changes to its Material theming, but the design team wasn't just sitting idly this whole time. According to the leaked blog post, Google has spent the past three years working on a more emotionally engaging vision for Android design. While the original Material Design did an admirable job of leveraging colors and consistent theming, it could make apps look too similar. The answer to that, apparently, is Material 3 Expressive. Google says this is "the most-researched update to Google's design system, ever." The effort reportedly included 46 separate studies with hundreds of sample designs. The team showed these designs to more than 18,000 study participants to understand how the user experience would work. In these studies, the design team used a variety of metrics, including the following: - Eye tracking: Analyzing where users focus their attention - Surveys and focus groups: Gauging emotional responses to different designs - Experiments: Gathering sentiment and preferences - Usability: Seeing how quickly participants could understand and use an interface "The result of all this is an interface that appears much more varied than the previous Material Design," writes Ars. You can check out 9to5Google's article, which preserved many of the blog post's visuals before they were removed.

Read more of this story at Slashdot.

Longtime Slashdot reader RoccamOccam shares a blog post from the Trifecta Tech Foundation, a nonprofit organization that creates secure, open source building blocks for infrastructure software. The foundation is also the developer behind Sudo-rs. From the report: Ubuntu 25.10 is set to adopt sudo-rs by default. Sudo-rs is a memory-safe reimplementation of the widely-used sudo utility, written in the Rust programming language. This move is part of a broader effort by Canonical to improve the resilience and maintainability of core system components. [...] The decision to adopt sudo-rs is in line with Canonical's commitment to Carefully But Purposefully increase the resilience of critical system software, by adopting Rust. Rust is a programming language with strong memory safety guarantees that eliminates many of the vulnerabilities that have historically plagued traditional C-based software. Sudo-rs is part of the Trifecta Tech Foundation's Privilege Boundary initiative, which aims to handle privilege escalation with memory-safe alternatives.

Read more of this story at Slashdot.

Just days after judge held Cupertino in contempt over Epic antitrust injunction

A developer of mobile sports apps has filed a proposed class-action lawsuit against Apple, seeking to recover commissions iBiz allegedly collected in violation of a federal injunction intended to allow developers to use alternative payment systems.…

President Trump's proposed 2026 budget seeks to cut nearly $500 million from CISA, accusing the agency of prioritizing censorship over cybersecurity and election protection. "The proposed cuts -- which are largely symbolic at this stage as they need to be approved by Congress -- are framed as a purge of the so-called 'censorship industrial complex,' a term the White House uses to describe CISA's work countering misinformation," reports The Register. From the report: In its fiscal 2024 budget request, the agency had asked [PDF] for a total of just over $3 billion to safeguard the nation's online security across both government and private sectors. The enacted budget that year was about $34 million lower than the previous year's. Now, a deep cut has been proposed [PDF], as the Trump administration decries the agency's past work tackling the spread of misinformation on the web by America's enemies, as well as the agency's efforts safeguarding election security. [...] "The budget eliminates programs focused on so-called misinformation and propaganda as well as external engagement offices such as international affairs," it reads [PDF]. "These programs and offices were used as a hub in the censorship industrial complex to violate the First Amendment, target Americans for protected speech, and target the President. CISA was more focused on censorship than on protecting the nation's critical systems, and put them at risk due to poor management and inefficiency, as well as a focus on self-promotion."

Read more of this story at Slashdot.

Zog brain hurt. Zog want Google help make read easier

Exasperated by the prolix verbiage and gratuitously convoluted phraseology that so often permeates technical treatises, philosophical discourses, or the meandering expositions of journalists afflicted by a lack of rhetorical economy? Then Google has a new AI feature for you - provided you use iOS, that is. …

With iOS 18.5, Apple is bringing carrier-based satellite connectivity to the entire iPhone 13 lineup, allowing users with compatible carrier plans (like T-Mobile's Starlink-powered service) to access satellite features in areas without traditional coverage. The update is expected to launch next week. 9to5Mac reports: It's important to note that this update does not bring Apple's Emergency SOS via satellite to the iPhone 13 series. That feature relies on specialized hardware found only in iPhone 14 and later and functions independently of carrier networks. It also doesn't "install Starlink" on every iPhone, just support for carrier-provided satellite features like Starlink. By contrast, carrier-provided satellite services behave more like conventional cellular connections and require a participating plan to work.

Read more of this story at Slashdot.