OSnews

Earlier this year, Microsoft openly acknowledged the sorry state of Windows 11, and made vague promises about possible improvements somewhere in the near future, but stayed away from making any concrete promises. Today, the company published a blog post with some more details, including some actual concrete, tangible changes it's going to implement over the coming two months. In coming builds, you'll be able to move the taskbar to any side of the screen, instead of it being locked to the bottom, thereby reintroducing a feature present since Windows 95. They're also scaling back their obsession with ramming AI" in every corner of Windows, and will be removing Copilot integrations from Snipping Tool, Photos, Widgets, and Notepad. Furthermore, and this is a big one among Windows users I'm sure, Windows Update will be placed under user control once again, allowing them to ignore updates, postpone them indefinitely, reboot without applying updates, and so on. These are the tangible improvements we'll be able to point to and say the company kept their word, and they all feel like welcome changes. There's also a few promises that feel far more vague and less tangible, like the ever-present, long-running promise to improve File Explorer". I feel like Microsoft's been promising to fix their horrible file manager for years now, without much to show for it, so I hope this time will be different. The company also wants to improve Widgets, the Windows Insider Program, and the Feedback Hub application. These all feel less tangible, and will be harder to quantify and benchmark. Beyond these first round of improvements that we're supposed to be seeing over the coming two months, Microsoft also promises to implement wider improvements across the board, with the usual suspects like better performance, quicker application launches, improved reliability, lower memory usage, and so on. They also promise to move more core Windows user interface components to WinUI 3, including the Start menu, which is currently written in React. Windows Search is another common pain point among Windows users, and here, Microsoft promises to improve its performance and clearly separate local from online results (but no word on making search exclusively local). There's some more details in the blog post, but overall, it sounds great. However, words without actions are about as meaningful as a White House statement on the war with Iran, so seeing is believing.

When Google said they were going to require verification from every single Android developer that would end the ability to install applications from outside of the Play Store (commonly wrongfully referred to as sideloading"), it caused quite a backlash. The company then backtracked a little bit, and said they would come up with an advanced flow" to make sure installing applications from outside of the Play Store remained possible. Well, Google has detailed this advanced flow", and as everyone expected, it's such a massive list of onerous hoops to jump through they might as well just lock Android down to the Play Store and get it over with. First, if a developer is verified, you can download their applications to your device and install them the same way you can do now. Second, developers with limited distribution accounts", such as students or hobby projects, can share their applications with up to 20 devices without verification. Third, and this is where the fun starts, we have unverified developers - basically what all Android developers sharing applications outside of the Play Store are now. Here's the full advanced flow" as described by Google to allow you to install an application from an unverified developer: Setting aside the fact that developer verification is, in and of itself, a massive problem, I'm kind of okay with a few scary warnings, a disclaimer, and perhaps a single reboot to enable installing applications outside of the Play Store - a few things to make normal people shrug their shoulders and not bother. However, adding enabling developer mode and a goddamn 24-hour waiting period is batshit insanity, and clearly has the intention of discouraging everyone, effectively locking Android to the Play Store. Android is already basically an entirely locked-down, closed-source platform, and once this advanced flow" comes into force, there's virtually no difference between iOS and Android, especially for us Europeans who get similarly onerous anti-user nonsense when trying to install alternative application stores on iOS. I see no reason to buy Android over iOS at this point - might as well get the faster phone with better update support.

What happens if you make a Linux syscall in a Windows application? So yeah, you can make Linux syscalls from Windows programs, as long as they're running under Wine. Totally useless, but the fact that such a Frankenstein monster of a program could exist is funny to me. nicebyte at gpfault.net The fact that this works is both surprising and unsurprising at the same time.

The GNOME team has released GNOME 50, the latest version of what is probably the most popular open source desktop environment. It brings fine-grained parental controls, and the groundwork for web filtering so that in future releases, parents and guardians can set content filters for children. Our own kids are still way too young to have access to computers and the internet, but I'm not sure I'll ever resort to these kinds of tools when the time comes. I didn't have any such controls imposed upon me as a child on the early internet, but then, you can't really compare the '90s internet to that of today. The Orca screen reader received a lot of attention in GNOME 50, with a new preference window, both global and per-application settings, and much more. There's also a brand new reduced motion setting, which will tame the animations in the user interface. Document annotation has been overhauled and modernised, and the file manager has been optimised across the board for better performance and lower memory usage. Remote Desktop also saw a lot of work in GNOME 50. It's now hardware-accelerated using VA-API and Vulkan, and thanks to HiDPI support, the session will properly adapt to the screen being used. Kerberos Authentication support has been added, and you can now use the remote webcam locally. There's way more here, like improved support for variable-refresh rates and fractional scaling, HDR screen sharing, fixes for weird NVIDIA driver nonsense, and much, much more. As always, GNOME 50 will find its way to your distribution soon enough.

PosrtmarketOS, the Linux distribution' for mobile devices, now also has an immutable variant, called Duranium. Duranium is an immutable variant of postmarketOS, built around the idea that your device should just work, and keep working. You shouldn't need to know what a terminal is to keep your device running. Immutable" means the core operating system is read-only and can't be modified while it's running. System updates are applied as complete, verified images rather than individual packages. Either the new image works, or the system falls back to the previous one automatically. No partially-applied state. No debugging audio when you need to make a phone call and no fussing with a broken web browser when you just want to doomscroll cat photos. It also means developers can reproduce the exact state of a user's device, making it much easier to track down and fix issues. Clayton Craft on the postmarketOS blog Duranium is built around the various functionalities and tooling provided by systemd, meaning the project didn't have to reinvent the wheel. It works similarly to other immutable distributions, in that images for the base are downloaded and installed as a whole, with the preferred application installation method being Flatpak. Security-wise, Duranium uses dm-verity to protect /usr, cryptographically verifying data as it's read. The image simply won't boot if anything's been tampered with. LUKS2 is used to encrypt mutable user and operating system data and configuration on the root file system. Duranium is still under heavy development, but it makes sense to implement something like this now, since in the world of mobile devices, this has become the norm. I'm glad postmarketOS is taking these steps, and I sincerely hope I'll eventually be able to use a postmarketOS device with KDE's Plasma mobile shell at some point in the near future in my day-to-day life. This requires both postmarketOS to improve as well as for the regulatory landscape to break the duopoly on banking and government applications held by Android and iOS, and with the state of the US government as it is, this might actually be something Europe's interested in achieving.

DOS didn't have sudo yet. This gross oversight has been addressed. SUDO examines the environment for the COMSPEC variable to find the default command interpreter, falling back to C:\COMMAND.COM if not set. The interpreter is then executed in unprotected real mode for full privileges. SUDO for DOS' Codeberg page A vital tool, for sure.

Once again, social media giants Facebook and TikTok have been caught red-handed. More than a dozen whistleblowers and insiders have laid bare how the companies took risks with safety on issues including violence, sexual blackmail and terrorism as they battled for users' attention. An engineer at Meta, which owns Facebook and Instagram, described how he had been told by senior management to allow more borderline" harmful content - which includes misogyny and conspiracy theories - in user's feeds to compete with TikTok. They sort of told us that it's because the stock price is down," the engineer said. Marianna Spring and Mike Radford at the BBC Meta, TikTok, and Twitter are criminal enterprises, and their executives should be trembling in court instead of scheming on yachts. Their role in legitimising far-right extremism will eventually catch up to them, and once that happens, no yacht is going to keep them safe.

Modern kernel anti-cheat systems are, without exaggeration, among the most sophisticated pieces of software running on consumer Windows machines. They operate at the highest privilege level available to software, they intercept kernel callbacks that were designed for legitimate security products, they scan memory structures that most programmers never touch in their entire careers, and they do all of this transparently while a game is running. If you have ever wondered how BattlEye actually catches a cheat, or why Vanguard insists on loading before Windows boots, or what it means for a PCIe DMA device to bypass every single one of these protections, this post is for you. Adrian Diaza I hate that we need proprietary rootkits just to play competitive multiplayer games - we can chalk this up to a few sad people ruining the experience for everyone else, as so often happens. I have a dedicated parts bin Windows box just to play League of Legends (my one vice alright, nobody's perfect) so I don't really care if it has a proprietary rootkit running in the background as there's not a single bit of valuable data on that machine, but for most people, that's not realistic. Virtually every League of Legends player hands over control of their entire computer to a proprietary rootkit developed and deployed by a company from China, whereas players of other popular online multiplayer games must install rootkits from companies from the United States. If anyone inside the governments of these countries ever wants to implement a backdoor in dozens (hundreds?) of millions of Windows machines, this is the way to go. It's an absolutely bizarre situation.

Tribblix, the Illumos distribution focused on giving you a classic UNIX-style experience, has released a new version. There are several noticeable version updates in this release. The graphical libraries libtiff and OpenEXR have been updated, retaining the old shared library versions for now. OpenSSL is now from the 3.5 series with the 3.0 api by default. Bind is now from the 9.20 series. OpenSSH is now 10.2, and you may get a Post-Quantum Cryptography warning if connecting to older SSH servers. Tribblix m39 release notes If you're already running Tribblix, updating is easy, and if you want to try it out, head on over to the downloads page. Rests me to say that Tribblix is a treasure, and it must be protected at all costs. It's rare to see a passion project like this maintain such a steady pace.

Java 26 delivers thousands of improvements that boost developer productivity, simplify the language, and help developers integrate AI and cryptography functionality into their applications. To help developers further streamline and enhance their development initiatives, Oracle is also announcing the new Java Verified Portfolio, which provides developers with a curated set of Oracle-supported tools, frameworks, libraries, and services, including commercial support for JavaFX, a Java-based UI framework, and Helidon, a Java framework for microservices. In addition, Oracle intends to align Helidon's release cadence with Java releases and propose Helidon as an OpenJDK project. Oracle's Java 26 press release Oracle's press releases lists the most important JDK Enhancement Proposals in this release, as do the release notes and the project page at OpenJDK. In addition, Java developer Hanno Embregts published a detailed blog post that dives deeper into this new release.

Since many of the platforms and conventions that came to dominate computing came from the western world, we never give it a second thought that virtually everything related to programming is written in English using the English alphabet. However, there's no real reason behind arriving at this point other than convention and the course of history - with the right tooling, you could program a computer in whatever language or alphabet (or other writing system!) you desire. For example, what about programming in Korean, using Hangul? Han is a statically-typed, compiled programming language where every keyword is written in Korean. It compiles to native binaries through LLVM IR and also ships with a tree-walking interpreter for instant execution. The compiler toolchain is written entirely in Rust. Han's GitHub page Han is written entirely in Korean, and uses the genius and easy-to-learn Hangul script. Hangul was developed by King Sejong the Great in the middle of the 15th century, to replace the Chinese-based characters used to write Korean up until that point. Since it was specifically designed to be easy to learn by scholars and the general public of the time alike to promote literacy, the Hangul alphabet is stupidly easy to learn; I managed to teach myself the Hangul alphabet in an single afternoon a decade or so ago. Obviously, do note that learning Hangul (an alphabet) isn't the same thing as learning Korean (a language). One of my favourite aspects of Hangul is that it combines the letters making up a syllable into single structured syllable blocks, which gives it its unique look and makes it quite easy to grasp - you'll quickly start recognising common syllables. On top of that, it's said that the individual Hangul consonants mimic the shape of speech organs (tongue, throat, etc.), which, once you see it, you can't unsee, further aiding in remembering what letters sound like. If you have an afternoon to kill, it's certainly a fun thing to learn. Regardless, it's very welcome to see efforts like this, if only to remember that programming being an Anglophone affair is but an accident, not a law of nature.

It's only a small annoyance in the grand scheme of the utter idiocy that is modern Windows, but apparently it's one enough people complained about Microsoft is finally addressing it. In all of its wisdom, Microsoft doesn't allow you to set the name of your user's home folder during the installation procedure of Windows 11. The folder's name is automatically generated based on your Microsoft account's username or email address, something I've personally really disliked since I have been using thomholwerda for as long as I can remember. Last year, they introduced an incredibly obtuse method of setting your own home folder name, but now the company is finally adding it as an optional step during the regular installation process. Expanding on our work which started rolling to Insiders last fall, you can now choose a custom name for your user folder on the Device Name page when going through Windows setup. This most recent update now makes it easier to choose a custom name. The naming option is available during setup only. If you skip this step, Windows will use the default folder name and continue setup as usual. Windows Insider Program Team This means you now have the option of defining your own home folder name, excluding CON, PRN, AUX, NUL, COM1, COM2, COM3, COM4, COM5, COM6, COM7, COM8, COM9, COM^1, COM^2, COM^3, LPT1, LPT2, LPT3, LPT4, LPT5, LPT6, LPT7, LPT8, LPT9, LPT^1, LPT^2, and LPT^3. It's a very small change, and certainly not something that will turn Windows' ship around, but at least it's something that's being done for users who actually care. It's also such a small change, such a small addition, that one wonders why it's taken them this long. I'm assuming there's already some incredibly complex and hacky way to change your automatically assigned home folder name by diving deep into the registry, converting your root drive back to FAT16, changing some values in a DLL file through a hex editor, and then converting back to NTFS, but this is clearly a much better way of handling it.

What if you have a very modern machine that is entirely UEFI-only, meaning it has no compatibility support module and thus no way of enabling a legacy BIOS mode? Well, install a CSM as an EFI application, of course! CSMWrap is an EFI application designed to be a drop-in solution to enable legacy BIOS booting on modern UEFI-only (class 3) systems. It achieves this by wrapping a Compatibility Support Module (CSM) build of the SeaBIOS project as an out-of-firmware EFI application, effectively creating a compatibility layer for traditional PC BIOS operation. CSMWrap's GitHub page The need for this may not be immediately obvious, but here's the problem: if you want to run an older operating system that absolutely requires a traditional BIOS on a modern machine that only has UEFI without any CSM options (a class 3-machine), you won't be able to boot said operating system. CSMWrap is a possible solution, as it leverages innate EFI capabilities to run a CSM as an EFI application, thereby adding the CSM functionality back in. All you need to do is drop CSMWrap into /efi/boot on the same drive the operating system that needs BIOS to boot is on, and UEFI will list it as a bootable operating system. It does come with some limitations, however. For instance, one logical core of your processor will be taken up by CSMWrap and will be entirely unavailable to the booted BIOS-based operating system. In other words, this means you're going to need a processor with at least more than one logical processor (e.g., even a single-core machine with hyperthreading will work). It's also suggested to add a legacy-capable video card if you're using an operating system that doesn't support VESA BIOS extensions (e.g. anything older than NT). This is an incredibly neat idea, and even comes with advantages over built-in CSMs, since many of those are untested and riddled with issues. CSMWrap uses SeaBIOS, which is properly tested and generally a much better BIOS than whatever native CSMs contain. All in all, a great project.

SMF is the illumos system for managing traditional Unix services (long-lived background processes, usually). It's quite rich in order to correctly accommodate a lot of different use cases. But it sometimes exposes that complexity to users even when they're trying to do something simple. In this post, I'll walk through an example using a demo service and the svcprop(1) tool to show the details. Dave Pacheco Soalris' system management facility or SMF is effectively Solaris' systemd, and this article provides a deeper insight into one of its features: properties. While using SMF and its suite of tools and commands for basic tasks is rather elementary and easy to get into - even I can do it - once you start to dive deeper into what is can do, things get complex and capable very fast.

Google has announced that it will release Chrome for Linux on ARM64 in the second quarter of this year. Launching Chrome for ARM64 Linux devices allows more users to enjoy the seamless integration of Google's most helpful services into their browser. This move addresses the growing demand for a browsing experience that combines the benefits of the open-source Chromium project with the Google ecosystem of apps and features. This release represents a significant undertaking to ensure that ARM64 Linux users receive the same secure, stable, and rich Chrome experience found on other platforms. The Chromium Blog While the idea of running Linux on Arm, only to defile it with something as unpleasant as Chrome seem entirely foreign to me, most normal people do actually use Google's browser. Having it available on Linux for Arm makes perfect sense, and might convince a few people to buy an Arm machine for Linux, assuming the platform can get its act together.

I will not pass up an opportunity to make you talk about Plan 9, so let's focus on Acme. Acme is remarkable for what it represents: a class of application that leverages a simple, text-based GUI to create a compelling model of interacting with all of the tools available in the Unix (or Plan 9) environment. Cox calls it an integrating development environment," distinguishing it from the more hermetic integrated development environment" developers will be familiar with. The simplicity of its interface is important. It is what has allowed Acme to age gracefully over the past 30 or so years, without the constant churn of adding support for new languages, compilers, terminals, or color schemes. Daniel Moch While the article mentions you can use Acme on UNIX, to really appreciate it you have to use it on Plan 9, which today most likely means 9front. Now, I am not the kind of person who can live and breathe inside 9front - you need to be of a certain mindset to be able to do so - but even then I find that messing around with Plan 9 has given me a different outlook on UNIX. In fact, I think it has helped me understand UNIX and UNIX-like systems better and more thoroughly. If you're not sure if Plan 9 is something that suits you, the only real way to find out is to just use it. Fire up a VM, read the excellent documentation at 9front, and just dive into it. Most of you will just end up confused and disoriented, but a small few of you will magically discover you possess the right mindset. Just do it.

I'm feeling kind of nostalgic today so I thought I'd write Hello, world! in Z80 assembly for the ZX Spectrum! The last time I wrote any Z80 assembly was when I was 14 so around 36 years ago! I may be a little rusty! Old Man By the Sea It's easy to tell the world hello in BASIC, but a bit more involved in Z80 assembly.

Red Hat developer Marcin Juszkiewicz is working on the RISC-V port of Fedora Linux, and after a few months of working on it, published a blog post about just how incredibly slow RISC-V seems to be. This is a real problem, as in Fedora, build results are only released once all architectures have completed their builds. There is no point of going for inclusion with slow builders as this will make package maintainers complain. You see, in Fedora build results are released into repositories only when all architectures finish. And we had maintainers complaining about lack of speed of AArch64 builders in the past. Some developers may start excluding RISC-V architecture from their packages to not have towait. And any future builders need to be rackable and manageable like any other boring server (put in a rack, connect cables, install, do not touch any more). Because no one will go into a data centre to manually reboot an SBC-basedbuilder. Without systems fulfilling both requirements, we can not even plan for the RISC-V 64-bit architecture to became one of official, primary architectures in FedoraLinux. Marcin Juszkiewicz RISC-V really seems to have hit some sort of ceiling over the past few years, with performance improvements stalling and no real performance-oriented chips and boards becoming available. Everybody seems to want RISC-V to succeed and become an architecture that can stand its own against x86 and Arm, but the way things are going, that just doesn't seem likely any time soon. There's always some magical unicorn chip or board just around the corner, but when you actually turn that corner, it's just another slow SBC only marginally faster than the previous one. Fedora is not the first distribution struggling with bringing RISC-V online. Chimera Linux faced a similar issue about a year ago, but managed to eventually get by because someone from the Adelie Linux team granted remote access to an unused Milk-V Pioneer, which proved enough for Chimera for now. My hope is still that eventually we're going to see performant, capable RISC-V machines, because I would absolutely jump for joy if I could have a proper RISC-V workstation.

Now let's go live to Amazon for the latest updates about this developing story. Amazon's ecommerce business has summoned a large group of engineers to a meeting on Tuesday for a deep dive" into a spate of outages, including incidents tied to the use of AI coding tools. The online retail giant said there had been a trend of incidents" in recent months, characterized by a high blast radius" and Gen-AI assisted changes" among other factors, according to a briefing note for the meeting seen by the FT. Under contributing factors" the note included novel GenAI usage for which best practices and safeguards are not yet fully established." Rafe Rosner-Uddin at Ars Technica Oh boy.

Back in 2023, John Earnest created a fun drawing application called WigglyPaint. The thing that makes WigglyPaint unique is that it automatically applies what artists call the line boil effect to anything you draw, making it seem as if everything is wiggling (hence the name). Even if you're not aware of the line boil effect, you've surely encountered it several times in your life. The tool may seem simple at first glance, but as Earnest details, he's put quite a lot of thought into the little tool. WigglyPaint was well-received, but mostly remained a curiosity - that is, until artists in Asia picked up on it, and the popularity of WigglyPaint positively exploded from a few hundred into the millions. The problem, though, is that basically nobody is actually using WigglyPaint: they're all using slopcoded copycats. The sites are slop; slapdash imitations pieced together with the help of so-called Large Language Models" (LLMs). The closer you look at them, the stranger they appear, full of vague, repetitive claims, outright false information, and plenty of unattributed (stolen) art. This is what LLMs are best at: quickly fabricating plausible simulacra of real objects to mislead the unwary. It is no surprise that the same people who have total contempt for authorship find LLMs useful; every LLM and generative model today is constructed by consuming almost unimaginably massive quantities of human creative work- writing, drawings, code, music- and then regurgitating them piecemeal without attribution, just different enough to hide where it came from (usually). LLMs are sharp tools in the hands of plagiarists, con-men, spammers, and everyone who believes that creative expression is worthless. People who extract from the world instead of contributing to it. It is humiliating and infuriating to see my work stolen by slop enthusiasts, and worse, used to mislead artists into paying scammers for something that ought to be free. John Earnest There's a huge amount of slopcoded WrigglyPaint ripoffs out there, and it goes far beyond websites, too. People are putting slopcoded ripoffs in basic webviews, and uploading them en masse to the Play Store and App Store. None of these slopcoded ripoffs actually build upon WrigglyPaint with new ideas or approaches, there's no creativity or innovation; it's just trash barfed up by glorified autocomplete built upon mass plagiarism and theft, made" by bottom feeders who despise creativity, art, and originality. You know how when you go to IKEA or whatever other similar store to buy picture frames, they have these stock photos of random people in them? I wonder if AI" enthusiasts understand you're supposed to replace those with pictures that actually have meaning to you.

Redox, the rapidly improving general purpose operating system written in Rust, has amended its contribution policy to explicitly ban code regurgitated by AI". Redox OS does not accept contributions generated by LLMs (Large Language Models), sometimes also referred to as AI". This policy is not open to discussion, any content submitted that is clearly labelled as LLM-generated (including issues, merge requests, and merge request descriptions) will be immediately closed, and any attempt to bypass this policy will result in a ban from the project. Redox' contribution policy Excellent news.

While FreeBSD 15.x may be getting all the attention, the FreeBSD 14.x branch continues to be updated for the more conservative users among us. FreeBSD 14.4 has been released today, and brings with it updated versions of OpenSSH, OpenZFS, and Bhyve virtual machines can now share files with their host over 9pfs - among other things, of course.

While IBM's OS/2 technically did die, its development was picked up again much later, first through eComStation, and later, after money issues at its parent company Mensys, through ArcaOS. eComStation development stalled because of the money issues and has been dead for years; ArcaOS picked up where it left off and has been making steady progress since its first release in 2017. Regardless, the developers behind both projects develop OS/2 under license from IBM, but it's unclear just how much they can change or alter, and what the terms of the agreement are. Anyway, ArcaOS 5.1.2 has just been released, and it seems to be a rather minor release. It further refines ArcaOS' support for UEFI and GPT-based disks, the tentpole feature of ArcaOS 5.1 which allows the operating system to be installed on a much more modern systems without having to fiddle with BIOS compatibility modes. Looking at the list of changes, there's the usual list of updated components from both Arca Noae and the wider OS/2 community. You'll find the latest versions of of the Panorama graphics drivers, ACPI, USB, and NVMe drivers, improved localisation, newer versions of the VNC server and viewer, and much more. If you have an active Support & Maintenance subscription for ArcaOS 5.1, this update is free, and it's also available at discounted prices as upgrades for earlier versions. A brand new copy of ArcaOS 5.1.x will set you back $139, which isn't cheap, but considering this price is probably a consequence of what must be some onerous licensing terms and other agreements with IBM, I doubt there's much Arca Noae can do about it.

Oh boy. Wikipedia editors have implemented new policies and restricted a number of contributors who were paid to use AI to translate existing Wikipedia articles into other languages after they discovered these AI translations added AI hallucinations," or errors, to the resulting article. Emanuel Maiberg at 404 Media There seems to be this pervasive conviction among Silicon Valley techbro types, and many programmers and developers in general, that translation and localisation are nothing more than basic find/replace tasks that you can automate away. At first, we just needed to make corpora of two different languages kiss and smooch, and surely that would automate translation and localisation away if the corpora were large enough. When this didn't turn out to work very well, they figured that if we made the words in the corpora tumble down a few pachinko machines and then made them kiss and smooch, yes, then we'd surely have automated translation and localisation. Nothing could be further from the truth. As someone who has not only worked as a professional translator for over 15 years, but who also holds two university degrees in the subject, I keep reiterating that translation isn't just a dumb substitution task; it's a real craft, a real art, one you can have talent for, one you need to train for, and study for. You'd think anyone with sufficient knowledge in two languages can translate effectively between the two, but without a much deeper understanding of language in general and the languages involved in particular, as well as a deep understanding of the cultures in which the translation is going to be used, and a level of reading and text comprehension that go well beyond that of most, you're going to deliver shit translations. Trust me, I've seen them. I've been paid good money to correct, fix, and mangle something usable out of other people's translations. You wouldn't believe the shit I've seen. Translation involves the kinds of intricacies, nuances, and context AI" isn't just bad at, but simply cannot work with in any way, shape, or form. I've said it before, but it won't be long before people start getting seriously injured - or worse - because of the cost-cutting in the translation industry, and the effects that's going to have on, I don't know, the instruction manuals for complex tools, or the leaflet in your grandmother's medications. Because some dumbass bean counter kills the budget for proper, qualified, trained, and experienced translators, people are going to die.

Every modifier key starts simple and humble, with a specific task and a nice matching name. This never lasts. The tasks become larger and more convoluted, and the labels grow obsolete. Shift no longer shifts a carriage, Control doesn't send control codes, Alt isn't for alternate nerdy terminal functions. Fn is the newest popular modifier key, and it feels we're speedrunning it through all the challenges without having learned any of the lessons. Marcin Wichary Grab a blanket, curl up on the couch with some coffee or tea, and enjoy.

MenuetOS, the operating system written in x86-64 assembly, has released two new versions since we last talked about it roughly two months ago. In fact, I'm not actually sure it's just two, or more, or fewer, since it seems sometimes releases disappear entirely from the changelog, making things a bit unclear. Anyway, since the last time we talked about MenuetOS, it got improvements to videocalling, networking, and HDA audio drivers, and a few other small tidbits.

And when a Redox monthly progress report is here, Haiku's monthly report is never far behind (or vice versa, depending on the month). Haiku's February was definitely a busy month, but there's no major tentpole changes or new features, highlighting just how close Haiku is to a new regular beta release. The OpenBSD drivers have been synchronised wit upstream to draw in some bugfixes, there's a ton of smaller fixes to various applications like StyledEdit, Mail, and many more, as well a surprisingly long list of various file system fixes, improving the drivers for file systems like NTFS, Btrfs, XFS, and others. There's more, of course, so just like with Redox, head on over to pore over the list of smaller changes, fixes, and improvements. Just like last month, I'd like to mention once again that you really don't need to wait for the beta release to try out Haiku. The operating system has been in a fairly stable and solid condition for a long time now, and whatever's the latest nightly will generally work just fine, and can be updated without reinstallation.

February has been a busy month for Redox, the general purpose operating system written in Rust. For instance, the COSMIC compositor can now run on Redox as a winit window, the first step towards fully porting the compositor from COSMIC to Redox. Similarly, COSMIC Settings now also runs on Redox, albeit with only a very small number of available settings as Redox-specific settings panels haven't been made yet. It's clear the effort to get the new COSMIC desktop environment from System76 running on Redox is in full swing. Furthermore, Vulkan software can now run on Redox, thanks to enabling Lavapipe in Mesa3D. There's also a ton of fixes related to the boot process, the reliability of multithreading has been improved, and there's the usual long list of kernel, driver, and Relibc improvements as well. A major port comes in the form of NodeJS, which now runs on Redox, and helped in uncovering a number of bugs that needed to be fixed. Of course, there's way more in this month's progress report, so be sure to head on over and read the whole thing.

One day, I suddenly wondered how to detect when a USB device is plugged or unplugged from a computer running Linux. For most users, this would be solved by relying on libusb. However, the use case I was investigating might not actually want to do so, and so this led me down a poorly-documented rabbit hole. ArcaneNibble (or R) And ArcaneNibble (or R) is taking you down with them.

Oracle's Solaris 11 basically comes in two different flavours: the SRU (Support Repository Update) releases for commercial Oracle customers, and the CBE (Common Build Environment) releases, available to everyone. We've covered the last few SRU releases, and now it's time for a new CBE release. We first introduced the Oracle Solaris CBE in March 2022 and we released an updated version in May 2025. Now, as Oracle Solaris keeps on evolving, we've released the latest version of our CBE. With the previous release Alan and Jan had compiled a list to cover all the changes in the three years since the first CBE release. This time, because it's relatively soon after the last release we are opting to just point you to the what's new blogs on the feature release SRUs Oracle Solaris 11.4 SRU 84, Oracle Solaris 11.4 SRU 87, and Oracle Solaris 11.4 SRU 90. And of course you can always go to the blogs by Joerg Moellenkamp and Marcel Hofstetter who have excellent series of articles that show how you can use the Oracle Solaris features. Joost Pronk van Hoogeveen at the Oracle Solaris Blog You can update your existing installation with a pkg update, or do a fresh insrtall with the new CBE images.

In the world of open source, relicensing is notoriously difficult. It usually requires the unanimous consent of every person who has ever contributed a line of code, a feat nearly impossible for legacy projects. chardet, a Python character encoding detector used by requests and many others, has sat in that tension for years: as a port of Mozilla's C++ code it was bound to the LGPL, making it a gray area for corporate users and a headache for its most famous consumer. Recently the maintainers used Claude Code to rewrite the whole codebase and release v7.0.0, relicensing from LGPL to MIT in the process. The original author, a2mark, saw this as a potential GPL violation. Tuan-Anh Tran Everything about this feels like a license violation, and in general a really shit thing to do. At the same time, though, the actual legal situation, what lawyers and judges care about, is entirely unsettled and incredibly unclear. I've been reading a ton of takes on what happened here, and it seems nobody has any conclusive answers, with seemingly valid arguments on both sides. Intuitively, this feels deeply and wholly wrong. This is the license-washing AI" seems to be designed for, so that proprietary vendors can take code under copyleft licenses, feed it into their AI" model, and tell it to regurgitate something that looks just different enough so a new, different license can be applied. Tim takes Jim's homework. How many individual words does Tim need to change - without adding anything to Jim's work - before it's no longer plagiarism? I would argue that no matter how many synonyms and slight sentence structure changes Tim employs, it's still a plagiarised work. However, what it feels like to me is entirely irrelevant when laws are involved, and even those laws are effectively irrelevant when so much money is riding on the answers to questions like these. The companies who desperately want this to be possible and legal are so wealthy, so powerful, and sucked up to the US government so hard, that whatever they say might very well just become law. AI" is the single-greatest coordinated attack on open source in history, and the open source world would do well to realise that.

The memory management in DOS is simple, but that simplicity may be deceptive. There are several rather interesting pitfalls that programming documentation often does not mention. Michal Necasek at the OS/2 Museum A must-read for people writing software for earlier DOS versions.

What's the scroll lock key actually for? Scroll Lock was reportedly specifically added for spreadsheets, and it solved a very specific problem: before mice and trackpads, and before fast graphic cards, moving through a spreadsheet was a nightmare. Just like Caps Lock flipped the meaning of letter keys, and Num Lock that of the numeric keypad keys, Scroll Lock attempted to fix scrolling by changing the nature of the arrow keys. Marcin Wichary I never really put much thought into the scroll lock key, and I always just assumed that it would, you know, lock scrolling. I figured that in the DOS era, wherein the key originated, it stopped DOS from scrolling, keeping the current output of your DOS commands on the screen until you unlocked scrolling again. In graphical operating systems, I assumed it would stop any window with scrollable content from scrolling, or something - I just never thought about it, and never bothered to try. Well, its original function was a bit different: with scroll lock disabled, hitting the arrow keys would move the selection cursor. With scroll lock enabled, hitting the arrow keys would move the content instead. After reading this, it makes perfect sense, and my original assumption seems rather silly. It also seems some modern programs, like Excel, Calc, some text editors, and others, still exhibit this same behaviour when the scroll lock key is used today. The more you know.

Apple today announced the MacBook Neo," an all-new kind of low-cost Mac featuring the A18 Pro chip for $599. The MacBook Neo is the first Mac to be powered by an iPhone chip; the A18 Pro debuted in 2024's iPhone 16 Pro models. Apple says it is up to 50% faster for everyday tasks than the bestselling PC with the latest shipping Intel Core Ultra 5, up to 3x faster for on-device AI workloads, and up to 2x faster for tasks like photo editing. The MacBook Neo features a 13-inch Liquid Retina display with a 2408-by-1506 resolution, 500 nits of brightness, and an anti-reflective coating. The display does not have a notch, instead featuring uniform, iPad-style bezels. Hartley Charlton at MacRumors There's no denying this is a great offering from Apple, and it's going to sell really well, especially in the US. I can't think of any other laptop on the market that offers this kind of complete package at such an attractive price point - on the Windows side, you're going to get plastic laptops with worse displays, worse battery life, and, well, Windows. For education buyers, the price drops from $599 to $499, making it a no-brainer choice for families sending their kids off to high school or university. In the US, at least. Here in Europe, or at least in Sweden where I checked the price of the base model, it's going for almost 800 ($930), at which point the cost-cutting measures Apple has taken are a bit harder to swallow. At that kind of price point, I'm not going to accept a mere 8GB of RAM, 256GB of storage, and a paltry 60Hz display. When I saw the announcement of this new MacBook earlier today, I wondered if this could be my way of finally getting a macOS review on OSNews after well over a decade, but at 800 for something I won't be using after I'm done with the review? I can't justify that. Regardless, you're going to see tons of these in schools and in wrapping paper for the holiday season and birthdays, and at least at American pricing, it's definitely a great deal.

Chips and Cheese has an excellent deep dive into Arm's latest core design, and I have thoughts. Arm now has a core with enough performance to take on not only laptop, but also desktop use cases. They've also shown it's possible to deliver that performance at a modest 4 GHz clock speed. Arm achieved that by executing well on the fundamentals throughout the core pipeline. X925's branch predictor is fast and state-of-the-art. Its out-of-order execution engine is truly gargantuan. Penalties are few, and tradeoffs appear well considered. There aren't a lot of companies out there capable of building a core with this level of performance, so Arm has plenty to be proud of. That said, getting a high performance core is only one piece of the puzzle. Gaming workloads are very important in the consumer space, and benefit more from a strong memory subsystem than high core throughput. A DSU variant with L3 capacity options greater than 32 MB could help in that area. X86-64's strong software ecosystem is another challenge to tackle. And finally, Arm still relies on its partners to carry out its vision. I look forward to seeing Arm take on all of these challenges, while also iterating on their core line to keep pace as AMD and Intel improve their cores. Hopefully, extra competition will make better, more affordable CPUs for all of us. Chester Lam at Chips and Cheese The problem with Arm processors in the desktop (and laptop) space certainly isn't one of performance - as this latest design by Arm once again shows. No, the real problem is a complete and utter lack of standardisation, with every chip and every device in the Arm space needing dedicated, specific operating system images people need to create, maintain, and update. This isn't just a Linux or BSD problem, as even Microsoft has had numerous problems with this, despite Windows on Arm only supporting a very small number of Qualcomm processors. A law or rule that has held fast since the original 8086: never bet against x86. The number of competing architectures that were all surely going to kill x86 is staggeringly big - PowerPC, Alpha, PA-RISC, Sparc, Itanium, and many more - and even when those chips were either cheaper, faster, or both, they just couldn't compete with x86's unique strength: its ecosystem. When I buy an x86 computer, either in parts or from an OEM, either Intel or AMD, I don't have to worry for one second if Windows, Linux, one of the BSDs, or goddamn FreeDOS, and all of their applications, are going to run on it. They just will. Everything is standardised, for better or worse, from peripheral interconnects to the extremely crucial boot process. On the Arm side, though? It's a crapshoot. That's why whenever anyone recommends a certain cool Arm motherboard or mini PC, the first thing you have to figure out is what its software support situation is like. Does the OEM provide blessed Linux images? If so, do they offer more than an outdated Ubuntu build? Have they made any update promises? Will Windows boot on this thing? Does it work with any GPUs I might already own? There's so many unknowns and uncertainties you just don't have to deal with when opting for x86. For its big splashy foray into general purpose laptops with its Snapdragon Elite chips, Qualcomm promised Linux support on par with Windows from day one. We're several years down the line, and it's still a complete mess. And that's just one chip line, of one generation! As long as every individual Arm SoC and Arm board are little isolated islands with unknown software and hardware support status, x86 will continue to survive, even if x86 laptops use more power, even if x86 chips end up being slower. Without the incredible ecosystem x86 has, Arm will never achieve its full potential, and eventually, as has happened to every single other x86 competitor, x86 will eventually catch up to and surpass Arm's strong points, at lower prices. Never bet against x86.

Fifteen months have passed since our last Guix/Hurd on a Thinkpad X60 post and a lot has happened with respect to the Hurd. And most of you will have guessed, unless you skipped the title of this post, the rumored x86_64 support has landed in Guix! Janneke Nieuwenhuizen and Yelninei at the Guix blog A huge amount of work has gone into this effort over the past 18 months, but you can now download Guix and alongside the Linux kernel, you can now opt for the Hurd as well, in eother 32bit or 64 bit flavour. Do note that while Debian GNU/Hurd offers about 75% of Debian packages, Guix/Hurd only offers about 1.7% (32-bit) and 0.9% (64-bit) of packages for now. These percentages are always growing, of course, and now that Guix/Hurd can be installed in virtual machines and even on bare metal relatively easily like this, things might speed up a bit.

Have you bought and set up a new phone for someone else lately, especially someone less technologically savvy? It's a bit of a nightmare, with an endless list of confusing steps and dark patterns trying to trick you into signing up for all kinds of services. Joel Chrono (he took his username from the best game ever made) just went through this experience, with new Samsung phones for his parents, and it wasn't great. Without me, my parents would have ended up creating at least one extra Samsung account. Cloud services like OneDrive or Google Photos would be sucking up files and copying them to their servers, getting filled up with the data and then asking them to subscribe to unlock more storage a couple of months down the line. Left on their own, my parents may be seeing ads popping up constantly in OneUI, as well as browsing the web without an adblocker, they would be using default applications that don't work as reliably, that track whatever they do to a certain degree. And of course, all of those AI assistants would be listening in in the background. It really is a nightmare out there, and it's not only affecting my parents, it affects all of those unaware of the dangers that these practices bring. It's a mess all around. Joel Chrono In this particular case it involves Samsung phones, but the same applies to phones from other brands and even with other operating systems. Do you want to login with these accounts? Please add your credit card and all your personal information! Set up tap-to-pay so we can see where you buy what! Do you want to subscribe to our music service? Do you want access to our streaming service? What about the premium versions? Need more online storage? You're only getting 5GB for free, so if you don't want to lose those priceless pictures of your grand kids you should really upgrade to 1TB! Have you checked out our application store yet? And don't worry, if you say no to any of these questions we'll keep pestering you about them with notifications, fullscreen interstitials and banners in the settings application until your brain dissolves to mush! I have a collection of about a million PDAs, from the early days up until the very fanciest models from right around when the iPhone and Android started taking off. Of course, they're in storage so virtually always out of battery, but when I do turn any of them on, their onboarding process couldn't be simpler. Tap a few locations on the screen to calibrate the touch layer, set the date and time, and that's it - you're at the home screen ready to go. I wish modern smartphones were similar. I wish the greedy bean counters were told to pound sand and the user interface specialists took over again. My wife and I have two young boys, 3 and almost 5. One day, I'll be the out-of-touch dad or grandpa and I'll need their help to set up my brain implant chip or whatever. I hope it won't involve upsells for streaming services.

Microsoft is pushing AI" hard in Windows, Office, and in their other products, and it's earned them a cute new nickname: Microslop. It turns out the company really doesn't like it when you use this nickname, however, and its official Copilot Discord server - yes, there is an official one - has gone into a complete meltdown over people using the nickname. First the company started banning the word Microslop" in its Discord server, but after people started circumventing the ban with alternative spellings. That's when all hell broke loose. What started as a simple keyword filter quickly snowballed into users deliberately testing the restriction and posting variations of the blocked term. Accounts that included Microslop" in their messages first got banned from messaging again. Not long after, access to parts of the server was restricted, with message history hidden and posting permissions disabled for many users. Abhijith M B at Windows Latest People don't like AI". They don't like being forced to use it at work, they don't like it shoved in their face in their operating systems, they don't like every new product being plastered with nonsensical AI" marketing. It's absolutely no surprise that one of the companies pushing AI" in the most visible way, a company few people like anyway, gets a nice new nickname. I love that this happened. I hope their brand suffers as much as possible.

If you're following KDE Plasma development, you've most likely run into something called Union, a project KDE is working on to unify their various ways of theming their applications. The problem KDE is facing right now is that after so many decades of development and changes in how people want to develop applications, they ended up with various different ways of writing applications, each with their own theming method. The end result has been that for a while now, theming on KDE is kind of broken. Broken in what way? Most long-time KDE users will be aware that ever since KDE 4, the KDE shell (Plasma using SVG for theming) and KDE applications (QtWidgets using QStyle for theming) use separate theme engines. While this has always been annoying, it's at least manageable in that most theme designers tended to create both a Plasma SVG theme and a QStyle theme that matched. However, things got more complicated when KDE introduced QtQuick, its modern way of creating applications with QML. QtQuick has its own theme, qqc2-desktop-style, to make QtQuick applications look and feel like Breeze, KDE's current theme. Not only do all of these have to be kept in sync manually, QtQuick applications also do not properly inherit all the elements of the QStyle theme you set, leading to many modern KDE applications looking broken when using a non-default theme (and the same applies when using Kvantum; it also cannot properly theme QtQuick applications). In other words, there is currently no way to theme the entire KDE desktop for a consistent look, and if you try, many applications will simply look broken. Union is KDE's answer to this set of problems. Union is a new style engine that takes CSS and processes it into consistent themes for both QtWidget and QtQuick applications. It's quite flexible, and can potentially even be extended to generate GTK themes from that same CSS. Sadly, since the KDE Pasma shell SVG stuff is entirely different, it won't be styled by Union, but KDE might simply retire the SVG stuff entirely and move the Plasma shell to QtQuick's qqc2-desktop-style to address that issue. Union has been in development for a long time, as it's a difficult effort, but progress is definitely being made. KDE is currently already at the stage where they're adapting the current Breeze QStyle to better match the Union Breeze's style, to make the future transition from the separate QStyle/qqc2-desktop-style to the unified, single Union Breeze as seamless as possible. These changes are currently available for testing in the master branch, and will be part of Plasma 6.7 or 6.8. As a KDE user who likes to have a more classic, late '90s theme, but who also values consistency above all else, Union is something I'm very much looking forward to. While it certainly won't fix every single issue right away, it will definitely address the biggest issues with theming on KDE. I'm incredibly happy that KDE's developers still consider theming and user choice and agency over what pixels appear on their screen important enough to undertake an effort like Union.

I had no idea, but apparently, you can just use newline characters and tabs in URLs without any issues. Notice how it reports an error if there is a tab or newline character, but continues anyway? The specification says that A validation error does not mean that the parser terminates and it encourages systems to report errors somewhere. Effectively, the error is ignored although it might be logged. Thus our HTML is fine in practice. Daniel Lemire This reminds me of the Email is easy" quiz.

Are you not at all interested in upgrading to macOS Tahoe, and getting annoyed at the relentless notification spam from Apple trying to trick you into upgrading? The secret? Using device management profiles, which let you enforce policies on Macs in your organization, even if that organization" is one Mac on your desk. One of the available policies is the ability to block activities related to major macOS updates for up to 90 days at a time (the max the policy allows), which seems like exactly what I needed. Not being anywhere near an expert on device profiles, I went looking to see what I could find, and stumbled on the Stop Tahoe Update project. The eventual goals of this project are quite impressive, but what they've done so far is exactly what I needed: A configuration profile that blocks Tahoe update activities for 90 days. Rob Griffiths All you need to do is clone a random GitHub repository, set all its scripts to executable, generate two random UUIDs, insert those UUIDs into one of the scripts in the GitHub project folder you just cloned, run said script, open System Settings and go to Privacy & Security > Profiles, install the profile the script created, click install in two different dialogs, and now you have blocked Apple's update notification spam! Well, for 90 days that is. I honestly don't understand how normal people are supposed to use macOS. The amount of weird terminal commands you need just to change basic settings is bewildering. macOS definitely isn't ready for the desktop if they expect users to use the terminal for so many basic tasks. I'm glad I'm using Linux, where I don't have to deal with the terminal at all.

If this isn't catnip to the average OSNews reader, I don't know what is. Windows 95 is a comprehensive upgrade to the Windows 3.1 and Windows for Workgroups 3.11 products. Many changes have been made in almost every area of Windows, with the user interface being no exception. This paper discusses the design team, its goals and process then explains how usability engineering principles such as iterative design and problem tracking were applied to the project, using specific design problems and their solutions as examples. Kent Sullivan This case study was written in 1996 by Kent Sullivan, who joined the Windows 95 user interface team in 1992. I consider the second half of the '90s as the heyday of user interface design, with Windows 9x, Apple's Platinum in Mac OS 8 and 9, and BeOS' Tracker/Deskbar as the absolute pinnacles of user interface design. Coincidentally, this also seems to mark the end of a more scientific, study-based approach to designing graphical user interfaces. Reading through this particular case study for Windows 95 feels almost quaint. Where are the dozens of managers pushing for notification spam, upsells, and dark patterns to enable expensive data-hoarding services? Why are none of the people mentioned in the study talking about sneaky ways to secretly and silently convert your local account to an online account? Where are all the AI" buttons? Why is there n chapter on how to trick people into enabling telemetry data? The user interfaces of the late '90s were the last ones designed by people who actually cared, by people who approached the whole process with the end user in mind, rooted in scientific data collected by simply looking at people use their ideas. They were optimised for the user as best they could, instead of being optimised for the company's bottom line. It's been downhill ever since.

Bootc and OSTree represent a new way of thinking about Linux system deployment and management. Building on container and versioning concepts, they offer robust and modern solutions to meet the current needs of administrators and developers. Quentin Joly Slowly, very slowly, I've been starting to warm up to the relatively new crop of immutable Linux distributions. As a heavy Fedora user, opting for Fedora's atomic distributions, which use bootc and OSTree, seems like the logical path to go down if I ever made the switch, and this article provides some approachable insights and examples into how, exactly, it all works, and what benefits it might give you. It definitely goes beyond what I as a mere desktop user might encounter, but if you're managing a bunch of servers or VMs in a more professional setting, you might be interested, too. I'm still not convinced I need to switch to an immutable distribution, but I'd be lying if I said some of the benefits didn't appeal to me.

The file system of the Windows operating system is NTFS, whether you're running it on a desktop/laptop or server. It's the only file system Windows can run on and boot from, at least officially, so you're not even given a choice of file systems for the boot volume like you are on, say, desktop Linux. That's about to change, though: Microsoft has finally announced that Windows Server will be able to boot from ReFS. We're excited to announce that Resilient File System (ReFS) boot support is now available for Windows Server Insiders in Insider Preview builds. For the first time, you can install and boot Windows Server on an ReFS-formatted boot volume directly through the setup UI. With ReFS boot, you can finally bring modern resilience, scalability, and performance to your server's most critical volume - the OS boot volume. chcurlet-msft at Microsoft's Tech Community Without diving too much into the weeds, ReFS can roughly be seen as Microsoft's answer to modern file systems like ZFS and Btrfs, with comparable design goals and feature sets. It's been around since 2012, but only for Windows Server, and with every Windows Server release since, the company has improved performance, added new features, and fixed bugs. Now, in 2026, it seems Microsoft thinks ReFS is ready to be used as a bootable file system for Windows Server. If you want to try this for yourself, you need to be a Windows Insider and make sure you have Windows Server build 29531.1000.260206-1841 or newer. During installation, the Windows installer will ask you to choose between NTFS and ReFS; the rest of the installation process will be pretty much the same as before. Now all we need is to wait for ReFS to become an option on client versions of Windows too, which would mark - arguably - only the second time in history Windows transitioned from one default filesystem to the another.

Encryption backdoors, social media bans for children, creepy age verification for applications - what will they think of next? The latest brilliant idea by US lawmakers sure is a hell of a doozy: legally mandated age verification in every single operating system. Colorado's SB26-051, introduced last month, would require operating systems to register the owner's age, which third-party apps can then leverage to determine if the user is an adult.The bill calls for the device owner to register their birthdate or age, but for the purposes of creating an age bracket," which can then be shared to an app developer through an API to learn their age range, according to BiometricUpdate.com. Ball also said the legislation was based on California's bill AB 1043, which was passed last year. It too requires OS makers to create a way for the device owner to register their age bracket, which can then be shared to app developers over an API. The California law starts to take effect January 1, 2027. Michael Kan at PCMag Age verification to protect children sounds innocent enough, but if you have more than two brain cells to rub together it's crystal clear that what we're really looking at is the true end of privacy and online anonymity. If age verification is only used by certain applications, it's easy enough to avoid them, but if it becomes part of Windows, desktop Linux, Android, it's truly game over. Nobody will be anonymous online ever again, and nobody will have any sense of privacy left when opening up their computer. Worse yet, if you do end up using an operating system that doesn't adhere to this law, or you hack out or circumvent the age verification nonsense, you'll automatically become an easy target for law enforcement. Clearly, if you circumvent age verification, you must be up to no good, right? Of course, as we've seen in countries with heavily deteriorating democracies and freedoms, like the US or Hungary, even merely opposing the government will be classified as up to no good", and let's not even get started about the various minorities these countries are actively trying to eradicate. If something like this is enshrined in law in your country, you're fucked.

FreeBSD has its jails technology, and it seems NetBSD might be getting something similar soon. Jails for NetBSD aims to bring lightweight, kernel-enforced isolation to NetBSD. The system is intended to remain fully NetBSD-native. Isolation and policy enforcement are integrated into the kernel's security framework rather than implemented in a separate runtime layer. It does not aim to become a container platform. It does not aim to provide virtualization. Matthias Petermann It has all the usual features you have come to expect from jails, like resource quota, security profiles, logging, and so on. Processes inside jails have no clue they're in a jail, and using supervisor mode, jails are descendent from a single process and remain visible in the host process table. Of course, there's many more features listed in the linked article. It's in development and not a default part of NetBSD at this time. The project, led by Matthias Petermann, is developed out of tree, with an unofficial NetBSD 10.1 ISO with the jails feature included available as well.

The Genode OS Framework 26.02 has been released, and its tentpole improvement is the completion of moving configuration from XML to the new human-inclined data syntax, as we talked about a few months ago. The project has been working on this for years, and now that the tooling, documentation, and so on have been added this release cycle, they're ready to make the switch. On top of that, they also made the move from GitHub to Codeberg, but that's certainly not all. The technical topics of the release revolve around the progressive update of our Linux device-driver environment (DDE-Linux) to kernel version 6.18, usability improvements of the Goa SDK, input-event processing, and code rigidity. Feature-wise, version 26.02 further cultivates the genode-world repository as designated place for ported 3rd-party software, adding the port of Git as stepping stone on our way towards self-hosted development on Sculpt OS. Genode OS Framework 26.02 release notes Be sure to read the entire release notes for much more detailed information, as well as a ton of things not mentioned yet.

You may not be aware that FreeBSD has a pretty robust set of tools to run Linux binaries, unmodified. The result? A fast, smooth, fully-featured remote development experience on FreeBSD running Linux binaries transparently via the Linuxulator. It genuinely feels like magic. More importantly, it's a testament to how stable the Linux ABI itself is and how well FreeBSD's Linuxulator implements it. This setup completely changed how I work with FreeBSD, and it finally removed one of the biggest friction points in my workflow. Hayzam Sherif FreeBSD's Linux compatibility does kind of feel like magic. There's people running Steam and Steam games on FreeBSD using these very same technologies, and while it's far from perfect, it works for quite a few games without any issues. It'd be great is Steam ever made it to FreeBSD natively, but sine that's probably not going to happen any time soon, it's great to see that those of us using FreeBSD can still play at least some Steam games just fine.

It seems the widespread efforts in Europe to drastically reduce its dependency on US technology companies is starting to worry some people. President Donald Trump's administration has ordered U.S. diplomats to lobby against attempts to regulate U.S. tech companies' handling of foreigners' data, saying in an internal diplomatic cable seen by Reuters that such efforts could interfere with artificial intelligence-related services. Experts say the move signals the Trump administration is reverting to a more confrontational approach as some foreign countries seek limits around how Silicon Valley firms process and store their citizens' personal information - initiatives often described as data sovereignty" or data localization." Raphael Satter and Alexandra Alper at Reuters It's going to take time, but untangling the EU from the US - especially technologically and militarily - is worth the effort. I'll gladly pay more taxes to make this happen.

I've been a .com purist for over two decades of building. Once, I broke that rule and bought a .online TLD for a small project. This is the story of how it went up in flames. Tony S. An absolute horror story about Google's dominance over the web, in places nobody really talks about. Scary.