"Top open source PyPI package with over 1 million downloads each month hacked to send out malware""This was not a case of stolen credentials, but rather of vulnerability exploitation."https://www.techradar.com/pro/security/top-open-source-pypi-package-with-over-1-million-downloads-each-month-hacked-to-send-out-malware#OpenSource

Presenting Fedora Linux 44!This release brings @gnome 50, @kde Plasma 6.6, tweaks to the Anaconda installer, and more!Thank you to all of the contributors for another successful release. We hope you enjoy it!️ https://fedoramagazine.org/announcing-fedora-linux-44/#Fedora #Linux #OpenSource #GNOME #KDE

@mole99 this is really amazing. How do you know (and specially from where) what exactly to do here in what way for the silicon to work its magic?I'm also rly. interested to get into silicon circuit designs,, but I'm unsure where to even start.

@latenightlinux I end up with Joe (because he is factually correct) on this one but the argument about LLMs here was bizarre. Rare moment where some of the interlocutors were flat out factually wrong. Even if the temperature of a model is set to 0, you can never get a the exact same output because of batching differences, GPU implementation differences, and how computers handle floating point math. It seemed like the cohosts were making the argument that whatever the code does to get to those outputs that's defined in the scaffolding doesn't matter. Coincidentally, I am looking for a buyer for some O(N^2) complexity code I have laying around. Maybe there's some takers on the LNL crew?

@annabonnie gave a good talk about getting children engaged with #OpenSource software with a project to build things for older kids, and an illustrated story for younger ones.The #Gouvernent #Français took the content and made audiobooks, a film and games to play!

"'We will be taking action to protect American innovation': White House accuses China of 'systematically' extracting American AI technologies""The US says China has been stealing American AI models to develop its own open source models."https://www.techradar.com/pro/security/we-will-be-taking-action-to-protect-american-innovation-white-house-accuses-china-of-systematically-extracting-american-ai-technologies#OpenSource

The #Ansible Bullhorn #225 is out!This week's highlights include:- Ansible and the EU Cyber Resilience Act.- New Ansible-Core and Ansible Community Package releases.- 9 collection updates - check the newsletter for the full list.- Discussions around documenting breaking changes in collections.- The Ansible Community AI Policy Proposal.Read more: https://forum.ansible.com/t/the-bullhorn-225/45736#OpenSource #Automation #IaC

Hackathon.lu 2026, held in Luxembourg on 14–15 April 2026, once again showed what makes this event special: it is not just a place to present ideas, but a place where ideas turn into code, releases, integrations, datasets, pull requests, and concrete roadmaps.Looking across the all project updates, the overall picture is clear. This year’s edition produced more than thirty concrete project outcome threads, spanning threat intelligence, malware analysis, detection engineering, vulnerability intelligence, graph exploration, forensics, and infrastructure. Some teams shipped releases on the spot.Others used the two days to validate designs, harden code, identify weaknesses, or connect previously separate tools into more useful workflows.The result is a hackathon that delivered not only new features, but also better interoperability across the open-source cybersecurity ecosystem.#hackathon #luxembourg #opensource #cti #cybersecurity #threatintelligence For all the details https://hackathon.lu/2026/04/24/hackathon.lu-2026-outcome/

/2I'd like to gravitate back to my original point: what is the value of work today if ai has replaced, for example, 20% of all service-sector jobs in America (including white collar)?Seriously. That's a broad assumption that I think many working people support.While we are at or pretty close to the 20% of America's workforce getting replaced by machines that think, what happens to the unemployed? Not everybody can adapt, retool, and do their jobs anew in the guise of working with ai.The problem with really rich folks such as Marc Benioff, Andreessen, Ben Horowitz, and Peter Thiel is that they're assuredly all in the camp that basically believes: "Damn the torpedoes, full speed ahead!"Investments in ai are amounting to little more than pump and dump stock schemes. That's quantifying it in dollar amounts. I want to go further...The context for replacing people with ai and robots is messed up by the polarization taking place in America. Most feel that this stems from the "political divide" — or constant disagreements within US society over policy, international trade, and how to run government so that it does not encroach on our personal lives. That's plain to see if you're mature enough to see it.I feel that the next major step is merging intellectual property with license architecture and marrying that to some kind of profit motive that does not include billionaires calling most of the shots.We are probably around thirty years from any of this taking place or really happening. This realization makes me unhappy because while I wish things were better, I do know "how the runnings go." There isn't going to be a Hail Mary pass or some great app or new operating system which saves the heart of I.T. It will take these three things to make the impossible work: blood, tears, and sweat. Many will not want to participate, or much less contribute anything of value in terms of practical, functioning software. The youngest generation getting into I.T. can best be described as the "new wave." Some of them aren't nice.This will take much longer if people like Marc #Andreessen have their way and keep getting bitter ideologues such as Trump elected who feel that infighting and taking all the credit are the order of the day.

obviously some "business people" try to steal open source code and try to take possession of it in a "legal" way: by running it through ai and "recreating" it without all the opensource stuff like GPL and such attached. so they think they can sell it, license it however they want without this GPL commons impediment.as @Cory Doctorow puts it in this article:This is the risk that Nolan and his partner are trying to awaken the free/open source community to: that our commons is about to be raided by selfish monsters who serve as gut-flora for the immortal colony organisms we call "limited liability corporations," who will steal everything we've built and destroy the social contract we live by.gut flora and immortal colony organisms ... i seriously doubt that any german politician would ever understand this meaning ... @Cory Doctorow even shows a way out, one that the colony organisms most probably didn't think of:  no copyright for ai generated stuff, neither books, nor pictures, nor music nor code.the principle that copyright is strictly reserved for human creativity isn't remotely controversial in legal circles. This is just how copyright works.Which means that the "be evil" version of Malus's business model has a fatal flaw. While the code that Malus produces is indeed "legally distinct" with "no attribution" and "no copyleft," it's not true that there are "no problems." That's because Malus's code doesn't have "corporate-friendly licensing." Far from it: Malus's code has no licensing, because it is born in the public domain and cannot be copyrighted.this means:If you give me code that Malus produced, you can't stop me from doing anything I want with it. I can sell it. I can give it away. I can make a competing product that reproduces all of your code and sell it at a 99% discount.let just hope doctorow is right with his assessment.#computer #OpenSource #GPL #raub #diebstahl #software #programme #Lizenz RE: https://mamot.fr/@pluralistic/116454017121705714

We shipped an MCP server for Pentest-Tools.com. Connect Claude, Cursor, VS Code, Gemini CLI, or any MCP-compatible client and drive scans, finding triage, and report generation through natural language.Every tool call needs explicit approval before it runs. JSON-Schema validated.Python package is open source, self-hosting supported: https://github.com/pentesttoolscom/pentesttools-pypiDocs and ready-made configs: https://pentest-tools.com/docs/ai/mcp/overview#infosec #pentesting #MCP #opensource

People from Colorado could be exempted from age verification if they use Linux.https://itsfoss.com/news/colorado-age-attestation-bill-open-source-exemption/#linux #opensource #ageverfication

Ubuntu Looks Toward More Snap-Based Devpacks Moving Forward ｢ Ubuntu Devpacks have come about over the past year as Snaps that bundle framework-specific tools with curated defaults all into a convenient stack built around Ubuntu's Snap format. Ubuntu Devpacks began for Java/Spring, .NET, Golang, and more while moving ahead Canonical is looking at expanding the scope. ｣https://www.phoronix.com/news/Ubuntu-More-Devpacks-Future#snap #snaps #ubuntu #opensource

WSL9xWindows 9x Subsystem for Linux.｢ WSL9x runs a modern Linux kernel (6.19 at time of writing) cooperatively inside the Windows 9x kernel, enabling users to take advantage of the full suite of capabilities of both operating systems at the same time, including paging, memory protection, and pre-emptive scheduling. Run all your favourite applications side by side - no rebooting required! ｣https://codeberg.org/hails/wsl9x#wsl9x #linux #win9x #opensource

@jeff@friendica.opensocial.space falls Du einen GitHub Account hast kannst Du Dich auch mit dem anmelden. Irgendein Dienst war da noch, über den Du einen Jitsiraum eröffnen kannst. Meine Empfehlung daher, wie @crossgolf_rebel@moppels.bar es bereits erwähnt hatte Senfcall zu nehmen.

@Primetime Standard formats and protocols, not platforms.

@restorante updated

ICYMI: Seth's walkthrough on JA4 fingerprinting in Zeek covers JA4, JA4S, JA4H, JA4T, JA4SSH, and JA4D with installation and use cases.https://zeek.org/2026/01/how-to-use-ja4-network-fingerprints-in-zeek/#Zeek #NetworkSecurity #OpenSource

@reeeen sag ich doch

Any product people looking for a new job? #getfediHiredBoosts welcome. 🧡 In case you would like to shape the future of @openproject, apply now.We collaborate in a product trio to build the right product & build the product right.As a PM, your goal is to understand users and their needs. You guide this process from a product perspective, from early discovery, through delivery to continuous discovery.More details: https://openproject-gmbh.jobs.personio.com/job/2604397#productmanagement #agile #foss #opensource