Feed aggregator

New Exploitation Method Discovered for Linux Kernel Use-After-Free Vulnerability  gbhackers.com

New Exploitation Method Discovered for Linux Kernel Use-After-Free Vulnerability  gbhackers.com

New Exploitation Method Discovered for Linux Kernel Use-After-Free Vulnerability  gbhackers.com

New Exploitation Method Discovered for Linux Kernel Use-After-Free Vulnerability  gbhackers.com

New Exploitation Method Discovered for Linux Kernel Use-After-Free Vulnerability  gbhackers.com

New Exploitation Method Discovered for Linux Kernel Use-After-Free Vulnerability  gbhackers.com

This Fedora spin is perfect for one particular kind of new Linux user  ZDNET

Google rolled out three big Gemini updates: the app now supports audio uploads (with tiered limits for free vs. paid users), Search gains AI Mode in five new languages, and NotebookLM expands to generate reports, study guides, quizzes, and other formats in over 80 languages. The Verge reports: According to a Monday post on X by Josh Woodward, vice president of Google Labs and Gemini, audio file compatibility was the "#1 request" to the Gemini app. Free Gemini users max out at 10 minutes of audio, and five free prompts each day. AI Pro or AI Ultra users, meanwhile, can upload audio up to three hours in length. All Gemini prompts accommodate up to 10 files across various file formats, including within ZIP files. Additionally, Google Search's AI Mode has rolled out five new language options: Hindi, Indonesian, Japanese, Korean, and Brazilian Portuguese, thanks to the integration of Gemini 2.5 with Search, according to a company blog: "With this expansion, more people can now use AI Mode to ask complex questions in their preferred language, while exploring the web more deeply." The Gemini-powered NotebookLM software is also getting an update in the form of new report styles in over 80 languages based on a user's uploaded documents, files, and other media.

Read more of this story at Slashdot.

Microsoft Donates DocumentDB To Linux Foundation As An Open Source Alternative To MongoDB  Forbes

Microsoft Donates DocumentDB To Linux Foundation As An Open Source Alternative To MongoDB  Forbes

Microsoft Donates DocumentDB To Linux Foundation As An Open Source Alternative To MongoDB  Forbes

Microsoft Donates DocumentDB To Linux Foundation As An Open Source Alternative To MongoDB  Forbes

An anonymous reader quotes a report from the Associated Press: For decades, scientists believed Prochlorococcus, the smallest and most abundant phytoplankton on Earth, would thrive in a warmer world. But new research suggests the microscopic bacterium, which forms the foundation of the marine food web and helps regulate the planet's climate, will decline sharply as seas heat up. A study published Monday in the journal Nature Microbiology found Prochlorococcus populations could shrink by as much as half in tropical oceans over the next 75 years if surface waters exceed about 82 degrees Fahrenheit (27.8 Celsius). Many tropical and subtropical sea surface temperatures are already trending above average and are projected to regularly surpass 86 degrees Fahrenheit (30 Celsius) over that same period. "These are keystone species -- very important ones," said Francois Ribalet, a research associate professor at the University of Washington's School of Oceanography and the study's lead author. "And when a keystone species decreases in abundance, it always has consequences on ecology and biodiversity. The food web is going to change." Prochlorococcus inhabit up to 75% of Earth's sunlit surface waters and produce about one-fifth of the planet's oxygen through photosynthesis. More crucially, Ribalet said, they convert sunlight and carbon dioxide into food at the base of the marine ecosystem. "In the tropical ocean, nearly half of the food is produced by Prochlorococcus," he said. "Hundreds of species rely on these guys." Though other forms of phytoplankton may move in and help compensate for the loss of oxygen and food, Ribalet cautioned they are not perfect substitutes. "Evolution has made this very specific interaction," he said. "Obviously, this is going to have an impact on this very unique system that has been established." The findings challenge decades of assumptions that Prochlorococcus would thrive as waters warmed. Those predictions, however, were based on limited data from lab cultures. For this study, Ribalet and his team tested water samples while traversing the Pacific over the course of a decade.

Read more of this story at Slashdot.

alternative_right shares a report from The Guardian: It has been estimated that during the height of the coronavirus pandemic 129bn disposable face masks, mostly made from polypropylene and other plastics, were being used every month around the world. With no recycling stream, most ended up either in landfill or littered in streets, parks, beaches, waterways and rural areas, where they have now begun to degrade. Recent research has reported a significant presence of disposable face masks in both terrestrial and aquatic environments. They left newly bought masks of several different kinds for 24 hours in flasks containing 150ml of purified water, then filtered the liquid through a membrane to see what came out. Every mask examined ... leached microplastics, but it was the FFP2 and FFP3 masks -- marketed as the gold-standard protection against the transmission of the virus -- that leached the most, releasing four to six times as many. And they made an even more worrying discovery. Subsequent chemical analysis of the leachate found medical masks also released bisphenol B, an endocrine-disrupting chemical that acts like oestrogen when absorbed into the bodies of humans and animals. Taking into account the total amount of single-use face masks produced during the height of the pandemic, the researchers estimated they led to the release of 128-214kg of bisphenol B into the environment. The findings have been published in the journal Environmental Pollution.

Read more of this story at Slashdot.

AlmaLinux 10.1 To Offer Expanded Software Selection With New Repository Default  Phoronix

In a new interview with The Telegraph (paywalled), William Shatner revealed he has never earned residuals from reruns of the original Star Trek series, since syndication royalties weren't in place until after the show ended in 1969. "Nobody knew about reruns," said Shatner. "The concept of syndication only came in after 'Star Trek' was canceled when someone from the unions said: 'Wait a minute, you're replaying all those films, those shows.' There was a big strike. But in the end, the unions secured residual fees shortly after 'Star Trek' finished, so I didn't benefit." The now 94-year-old actor said he's actually only seen a "few" episodes of his work and has "never seen" any of the spinoffs. "I'm gonna tell you something that nobody knows. I've never seen another 'Star Trek' and I've seen as few 'Star Treks' of the show I was on, I've seen as few as possible," he told Entertainment Tonight. "I don't like to look at myself, and I've never seen any other. I love it, I think it's great. I just don't, you know, I don't watch television, per se."

Read more of this story at Slashdot.

BrianFagioli shares a report from NERDS.xyz: Plex has alerted its customers about a security incident that may have affected user accounts. In an email sent to subscribers, the popular media server company confirmed that an unauthorized third party gained access to one of its databases. The breach exposed emails, usernames, and hashed passwords. Plex emphasized that passwords were encrypted following best practices, so attackers cannot simply read them. The company also reassured users that no credit card data was compromised, since Plex does not store that information on its servers. Still, out of caution, it is requiring all account holders to reset their credentials. Users are being directed to reset their passwords at plex.tv/reset. During the process, Plex recommends enabling the option to sign out all connected devices. This measure logs out every device associated with the account, including Plex Media Servers, forcing a fresh login with the updated password. The company says it has already fixed the method used by the intruder to gain entry and is conducting additional security reviews. Plex is also urging subscribers to enable two-factor authentication if they have not already done so.

Read more of this story at Slashdot.

An anonymous reader quotes a report from Ars Technica: Last year, we reported on the efforts of classic iPod fans to preserve playable copies of the downloadable clickwheel games that Apple sold for a brief period in the late '00s. The community was working to get around Apple's onerous FairPlay DRM by having people who still owned original copies of those (now unavailable) games sync their accounts to a single iTunes installation via a coordinated Virtual Machine. That "master library" would then be able to provide playable copies of those games to any number of iPods in perpetuity. At the time, the community was still searching for iPod owners with syncable copies of the last few titles needed for their library. With today's addition of Real Soccer 2009 to the project, though, all 54 official iPod clickwheel games are now available together in an easily accessible format for what is likely the first time. [...] Now that the consolidated clickwheel game collection is complete, though, owners of any iPod 5G+ or iPod Nano 3G+ should be able to sync the complete library to their personal device completely offline, without worrying about any server checks from Apple. They can do that by setting up a Virtual Machine using these GitHub instructions or by downloading this torrented Internet Archive collection and creating their own Virtual Machine from the files contained therein. The effort was made possible by GitHub user Olsro, with help from other iPod enthusiasts. To Olsro, completing the project "means this whole part from the early 2000s will remain with us forever." He also expressed hope that "this Virtual Machine can also be useful towards any security [or] archeologist researcher who want to understand how the DRM worked."

Read more of this story at Slashdot.

Linus Torvalds has had enough of pointless Link: tags  theregister.com

Kevin Barry, founder and sole developer of Nova Launcher, has left parent company Branch Metrics after being told to stop work on both the launcher and an open-source release. While the app remains on Google Play, the launcher's website currently shows a 404 error. The Verge reports: Mobile analytics company Branch Metrics acquired Nova in 2022. The company's CEO at the time, co-founder Alex Austin, said on Reddit that if Barry were to leave Branch, "it's contracted that the code will be open-sourced and put in the hands of the community." Austin left Branch in 2023, and now with Barry officially gone from the company, too, it's unclear if the launcher will now actually be open-sourced. "I think the newer leadership since Alex Austin left has put a different focus on the company and Nova simply isn't part of that focus in any way at all," Cliff Wade, Nova's former customer relations lead who left as part of the 2024 layoffs, tells The Verge. "It's just some app that they own but no longer feel they need or want." Wade also said that "I don't believe Branch will do the right thing any time soon with regards to open-sourcing Nova. I think they simply just don't care and don't want to invest time, unless of course, they get enough pressure from the community and individuals who care." Users have started a change.org petition to ask for the project to be open-sourced, and Wade says it's a "great start" to apply that pressure. Wade said he hasn't personally seen Barry's contract, so couldn't corroborate the claim of a contractual obligation to open-source Nova. Still, he said that the community "deserves" for the launcher to be open-sourced. "Branch just simply needs to do the right thing here and honor what they as a company have stated as well as what then CEO Alex Austin has stated numerous times prior to him leaving Branch."

Read more of this story at Slashdot.