I hope they expand their device offering beyond niche eReaders; there’s a lot of people with Kindles that Amazon is trying hard to turn into paperweights.

This cat looks like it just got slapped with a square of American cheese.

Copyright The Linux Foundation and its contributors

Didn’t expect to see that, but it’s official.

open source has run for thirty years on a basis the textbook says cannot hold. It looks more like several arrangements overlaid on each other, part gift economy, part shared infrastructure, part public archive, part reputation system, with no single mechanism carrying it.

If this kind of shit had been scribbled in the margins of my economics textbook, I would’ve paid more attention in class.

Bet you haven’t seen any anime cars at the bottom of the sea.

Despite the petition being local to Germany, we believe that strengthening the position of open source contributors there will be beneficial to the open source community as a whole.

Today it’s Germany, tomorrow other countries might follow. We are all part of the open source community - every little step forward helps!

Sounds good.

Turn off the issues tracker and the pull requests or deploy a bare git server for releasing your code. Find a small group of people you really know and trust and work with them on projects, or do it completely alone.

You don’t need to allow strangers to invade your space. You don’t need a performative Code of Conduct or an LLM policy. Open source doesn’t need to be developed openly for it to be “open source”.

Write code. Make things you like. Use any tools you want. Do code drops at 2am on Christmas day. Whatever you do, don’t get tricked into running an operation that’s half tech incubator and half daycare for people whose parents gave them a keyboard and no social skills.

I like this “my workshop has glass walls, but I’m wearing headphones and the doors are locked” model of open source.

I’ve never heard of this.

Did you bother to look?

• cURL shut down their bug bounty program because of an “explosion in AI slop reports.”
• Godot sounded the alarm on the “increasingly many pull requests generated by LLMs and it’s a MASSIVE time waster for reviewers.”
• Tldraw now automatically closes pull requests from external contributors, “due to an influx of low quality AI pull requests.”

It’s gotten bad enough that Github added a feature to allow maintainers to disable pull requests entirely.

Full shutdowns are rarer (only Cal.com and Jazzband spring to mind), because maintainers are trying to stay open and fight the avalanche of slop with AI contribution policies.

Looking at all of the above, why do you think people shouldn’t be skeptical when the number of PRs suddenly spikes?

I’ve heard of many projects disabling contributions, shutting down, or pivoting to closed source and naming slop code as a major reason.

If the contributions are quality, that’s great, but I don’t think skepticism is an inappropriate reaction to a sudden surge in contributions in this year of all years.

Is it good news, or is it vibe coding?

I use FreshRSS as the backbend for my clients, but I hate its interface for actually reading.

If I were reading on the web, I’d switch back to Miniflux

“One-time license… includes all future updates”

Where have I heard that before?

*for most people on the internet.

For the rest of us, it’s important to be able to look inside of a thing we’re using and see that it’s not going to fry our machine, or use it to mine crypto, or spy on us.

A highly sophisticated, unpatched zero-day exploit is actively targeting users of Adobe Reader. Detected by the EXPMON threat-hunting system, this malicious PDF file is designed to steal sensitive local data and perform advanced system fingerprinting.

The exploit functions flawlessly on the latest version of Adobe Reader. It requires no user interaction beyond simply opening the malicious document.

The attack begins when a victim opens a specially crafted PDF, initially submitted to malware analysis platforms under the file name “yummy_adobe_exploit_uwu.pdf”.

In a public update, developer Mounir Idrassi reported the account was shut down without warning, explanation, or an apparent appeal process.

“I have encountered some challenges but the most serious one is that Microsoft terminated the account I have used for years to sign Windows drivers and the bootloader. This termination impacts my work beyond VeraCrypt and has consequences for my daily job. Currently I’m out of options.”

This is significant because VeraCrypt is a cross-platform encryption application for Windows, macOS, and Linux. On Windows, it supports system encryption features that require signed components, including drivers and the bootloader.

According to Idrassi, the account termination prevents the project from continuing its standard Windows signing process. Independent reporting indicated that losing signing access could stop VeraCrypt from releasing updated Windows builds before a certificate-related deadline, potentially causing boot issues for some users with system encryption enabled.

In other words, if you’re a Windows user who uses VeraCrypt, you have reason to be concerned. In the newly surfaced GitHub issue, the reporter says VeraCrypt’s DcsBoot.efi appears to be signed through the Microsoft Corporation UEFI CA 2011 chain and warns that this will stop working on June 27, 2026. The issue also says that on some Windows 11 systems, this could trigger Secure Boot warnings or even cause the boot option to be ignored.

So, if VeraCrypt cannot restore its Windows signing path or ship updated signed components in time, the project could face a real Secure Boot-related deadline on affected systems.

Emphasis mine

Reminded me of this:

https://www.youtube.com/watch?v=y2xkFSvSv7o

sadoeuphemist, ciiriianan, and stu-pot | Tumblr original | Webcomic adaptation

For the same reason I wouldn’t trust a car designed with the help of AI:

I would be concerned that the internals have the equivalent of a sixth finger. In a picture, that’s fairly harmless, but I’m not giving my personal information to a six-fingered hand if I don’t have to.

Maybe if the designer has a solid track record independent of AI, and the AI’s contributions were strictly monitored and checked by humans. But then… why would you use AI?