Agreguesi i feed

Version:next-20261027 (linux-next) Released:2026-10-27

I’ve been an unapologetic fan of the Lenovo “classic” 7 row keyboard in the ThinkPad X220 and have been using the external version of it ever since. This USB laptop keyboard chassis is called the SK-8855 which was manufactured in the late 2000s and early 2010s and is now essentially unobtainium from everywhere. The SK-8855 features a TrackPoint but lacks a trackpad – which is actually a feature for me. It’s rarely available on eBay as new-old stock for several hundred dollars. Over the last 10 years I’ve replaced the keyboard several times due to literally wearing it out, and finding genuine NMB replacement keyboards is getting harder and harder — but not impossible.

For the last 10 years I’ve dealt with a few little quirks. Sometimes the controller board essentially sh*ts itself and crashes, but it could always be coaxed back into life by removing and reinserting the USB-A plug. It’s also guilty of missing a quick left-shift press, so typing fast my sentences never get capitalized. Over the years a few people have commented on my lack of grammar skills and until very recently I had this controller board to blame.

After over 15 years of being blamed for all my typos, the controller board gave up completely. This gave me the “opportunity” to replace it with a modern converter board and bring it into the 2020s. A good analogy is putting a Tesla electric drive-train in a classic Ferrari with a blown engine.

This required removing some plastic supports, which made me feel like the worst computer peripheral conservator in existence. After removing the USB-C connector the new controller could be mounted and wired up to the existing USB wire.

In most part it worked as a keyboard, but was set up with the en_US keymap and didn’t do anything for the # key for instance. I ran the provided non-free win32 tool in Wine but that just showed some really tiny Chinese text. It also crashed a lot and I couldn’t work out the pinmap format that it was writing.

After being inspired by Christian, I asked Claude to analyse the updater binary and tell me what it knew, and after allowing it device access it essentially reverse engineered the hardware. I actually bought two new controller boards and so I was a little more comfortable letting Claude actually drive the keyboard itself — and every now and then it would ask me to press specific keys and tell it if certain LEDs were on or off. After a full day of Claude-ing (never leave a hardware geek alone with minimal chores for a weekend day…) I had two things:

xykbms-gtk is a GTK4 standlone version of the vendor tool that works in Linux using hidraw. Using this I could swap, remap and disable keys and change all the other parameters on the controller board. I’ve not submitted this to Flathub as it’s 80% AI generated and more than niche; if you’re soldering stuff into a SK-8855 then you’re more than qualified to do meson build. It does work remarkably well considering I had no kind of datasheet or firmware source code for the controller at all.

The other thing was a fwupd plugin for this new keyboard controller. I actually manually created the fwupd plugin template with lots of TODOs in the right place to define the structure and then pointed Claude at the protocol documentation it had created for the GTK4 tool and asked it to fix all the TODOs in the plugin. After another couple of hours of questions and verb-ing from Claude we had a fully functional fwupd plugin that could not only update the firmware on the controller but could also write a “pinmap” that could reconfigure the keyboard between en_US and en_GB etc. I think this worked so well because we have so many self tests and linters in fwupd; Claude was forced to do the right thing before it could even run git commit.

The keyboard pinmap wasn’t really a “firmware” per-se, so I then also got Claude to create a WriteBlob method that allows fwupd to write a raw payload on a CFI-type device. This will also be super useful in the future to flash SPI devices with the existing CH341a and CH347 plugins. This is only available for CFI flash devices and for users that authenticate with the admin password – for obvious reasons.

I then wrote the GNOME Firmware code to be able to flash a CFI image from the GUI. It’s not beautiful yet and we probably need a dedicated app, or a dedicated “mode” in gnome-firmware to make flashing CFI devices safe and easy. I’ll add a screenshot when I’m happy with the UX.

I’m using this keyboard right now, and maybe it can last another 15 years of abuse from me.

Denmark's Ministry of Digitization reportedly abandoned a pilot to replace Microsoft Office with the open-source Collabora suite less than six months after it began. Tom's Hardware reports: According to Danish publication Computerworld, the pilot project was launched in 2025 and involved 38 employees, all of whom would start using the British open-source Collabora office suite instead of Word, PowerPoint, and Excel. The experiment was initiated by the then Digitization Minister Caroline Stage, who wanted to reduce the country's dependence on American technology. Denmark isn't alone in moving away from U.S. software, with France and the Netherlands both taking steps to replace Microsoft Windows. However, it seemed that the experiment fizzled out less than six months after it started. It had reportedly ended by the time the Danish government called for an early election in February 2026, with some employees complaining about issues with style, paragraph formatting, blank pages, and challenges with tracking changes. But even though it's been months since the experiment reportedly ended, Prof. Mikkel Flyberbom of the Copenhagen Business School complains that the project hasn't been properly evaluated. "It's a good idea to test alternatives in a pilot project," the professor said in an email. "However, I wish that the ministry would take the opportunity to learn from the pilot project and share those experiences with other parts of the public sector."

Read more of this story at Slashdot.

Susanne Rust of the Los Angeles Times reports (paywalled) that industry executives knew for decades that microplastics were infiltrating the human body. Slashdot reader joshuark shares an excerpt from the report: Scientists today say we're just beginning to understand the harm that the tiny bits of plastic we drink, eat and breathe are doing to the human body. Internal memos among company scientists and executives obtained by The Times reveal that for at least half a century, the plastics industry has been aware of and concerned about the potential for microplastic contamination in the human body. But recently discovered chemical company documents dating back several decades show that industry scientists have long been aware of -- and concerned about -- the way microplastic particles migrate beyond the gut in animals and humans, depositing in important organs. And the potential for that knowledge to affect the plastic food packaging industry. Their concern goes back to 1974 and a scientific meeting at a New York City hotel, where a German gastroenterologist presented a scientific paper that showed for the first time that ingested particles like microplastics could infiltrate the rest of the body. His presentation was largely overlooked by the government scientists in attendance but became a point of worried discussion among company scientists. Tracey Woodruff, professor of epidemiology and population health at Stanford University, who reviewed the documents, said they indicate scientists and executives at major chemical companies have known and remained silent even as microplastics accumulated in tissues. She likened it to other industries that knew about pollutants -- greenhouse gases, asbestos and tobacco -- but did not take action to make them safer. A spokesperson with the chemical industry's largest trade group took issue with that characterization. "Scientific debate over what the evidence shows is not silence. It is how sound science and effective policy advance," said Craig Davis, senior director of plastics chemistry at the American Chemistry Council. "Our industry is committed to advancing microplastics science by supporting independent research and policies that would do so."

Read more of this story at Slashdot.

An anonymous reader quotes a report from the Associated Press: The U.S. designated helium as a critical material on Friday because it's indispensable for making semiconductors that are essential to energy generation, and the global supply is at risk of disruption, according to the Energy Department. The designation by the Energy Department means that more federal financing will be available for helium producers and that the government will monitor it more closely. Helium is primarily produced as a byproduct of natural gas processing. The United States is the world's largest producer of natural gas and of helium. Qatar and Russia are the other top helium producers. [...] Helium makes balloons rise, but that's not why the DOE is interested in it. Helium plays an important role in wind, solar and nuclear energy production, space exploration, medical imaging and research. Assistant Secretary of Energy Audrey Robertson said helium's unique properties make it irreplaceable, such as the fact that it's non-combustible and has the lowest boiling point of any gas. The nation needs an ample supply for semiconductors, quantum and super computing, and superconducting magnets, added Robertson, who oversees the Office of Critical Minerals and Energy Innovation. [...] Despite environmental concerns with recovering helium from natural gas, there are also opportunities, said Greeshma Gadikota, director of the Lenfast Center for Sustainable Energy at Columbia University. "If we burn the natural gas, there are a lot of CO2 emissions associated with that," Gadikota said. "But if you just extract the helium and use it, the uses of it don't contribute necessarily to greenhouse gas emissions. "So from a climate standpoint, if we are going to continue down the line of extracting natural gas and recovering helium," she added, "I would prefer to see natural gas being used in a form where we directly produce hydrogen and we produce solid carbon." Hydrogen is a clean burning fuel, and solid carbon can provide permanent carbon sequestration and can be used widely in industrial applications, including rubber and pigments.

Read more of this story at Slashdot.

The critical PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) have now been successfully exploited in the wild, just days after patches were released and initial exploitation attempts failed. BleepingComputer reports: The malicious activity was caught by Adel Karimi, detection and response lead at Perplexity, whose honeypots recorded evidence of confirmed remote code execution against an Apache mod_php installation running PHP 8.4.26. "This is now confirmed RCE with usable memory disclosure, not just a crash followed by a suspicious process. The response delivered an 800 KiB decoded cookie dump, and a function address derived from that dump using the public exploit's offsets appears in the subsequent execution payload," Karimi shared. "The evidence demonstrates this chain on the intentionally favorable single-worker mod_php profile; it is not a measurement of exploit reliability on other worker counts, PHP builds, or applications," he added. Karimi's findings were also confirmed by Expel threat researcher Marcus Hutchins, who has been tracking a stream of alleged successful PHP2Shell exploitation reports. "This is by far the highest quality confirmation of in-the-wild php2shell exploitation I've seen so far. Deep technical breakdown of a successful exploitation attempt against an Apache mod_php installation running PHP 8.4.26," Hutchins said.

Read more of this story at Slashdot.

An AI coding assistant tried to add harmful code to a real open-source project during a security test.

An anonymous reader quotes a report from The Seattle Times: Microsoft is offering buyouts to about 60,000 employees, or roughly a quarter of its workforce, as the company tries to control its head count while avoiding layoffs. The Redmond-based tech giant announced Monday morning that eligible employees at the vice president level and below in the U.S., Canada, India and the United Kingdom would receive a "voluntary exit offer" of a standard severance package, based on their location. In a memo to employees, Microsoft Chief People Officer Amy Coleman said the move was building off the voluntary retirement program earlier this year, which was available to more than 8,700 U.S.-based employees, roughly one-third of whom took the offer. Since May 2025, Microsoft has been trying to reduce its corporate workforce, first through waves of mass layoffs and now through more creative buyout programs. The company laid off about 15,000 employees last year over the course of several months, affecting about 3,200 Washington-based workers. The report notes that the layoffs have continued this year, though on a smaller scale and largely concentrated in the company's gaming division.

Read more of this story at Slashdot.

Version:6.18.59 (longterm) Released:2026-10-26 Source:linux-6.18.59.tar.xz PGP Signature:linux-6.18.59.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-6.18.59

Anthropic has filed to go public on the Nasdaq under the ticker ANT, setting the stage for a potentially record-setting IPO that could value the Claude developer at more than $2 trillion. Alongside the extraordinary cost of its AI expansion, Anthropic warned that it "may not generate sufficient revenue to achieve or sustain profitability in the future." "While we have experienced significant revenue growth in recent periods, our business is highly capital intensive," the company said. "Our revenue growth may not be sustainable, and our rate of growth may decrease." NBC News reports: The filing did not include a potential share price, the number of shares to be offered or a valuation for the whole company, all of which will be determined after Anthropic holds a "road show" with investors, prospective investors and its bankers. [...] The company plans to spend at least $110 billion with Amazon for cloud services through April 2036 and another $120 billion with SpaceX through 2029. Anthropic also said it planned to spend $115 billion with Google and $45 billion with Microsoft, both through 2033, for computing infrastructure. The filing said that the company recorded revenue growth of "1,368% year over year for the three months ended June 30, 2026." The cost of renting servers and chips grew by 300% over the same period. Anthropic's net loss for the first six months of 2026 was $80.7 billion. For the entirety of 2025, the company reported a $42 billion net loss. Anthropic added that it expects its current cash and sales to be sufficient for the next 12 months but warned that future revenue growth depends on a number of important factors, including the cost of infrastructure. As a result, it said, "we may be required to seek additional financing sooner than we currently anticipate." The company said it has raised about $141 billion of capital through the end of June and is sitting on $112.4 billion of cash.

Read more of this story at Slashdot.

Version:7.2.13 (stable) Released:2026-10-26 Source:linux-7.2.13.tar.xz PGP Signature:linux-7.2.13.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-7.2.13

Version:next-20261026 (linux-next) Released:2026-10-26

Kotaku reports: r/opensource, Reddit's primary "subreddit for everything open source related," has banned all AI-assisted and AI-related projects.... As reported by The Verge, the subreddit's October 24 post, titled "Your tokens aren't valuable: No more AI," features four new main rules: all projects must now be at least "1 year old," have "multiple contributors," be posted by someone who must "speak English," and cannot be "made by" or "intended for" AI... [T]he ban on AI is simple; as the subreddit's moderators explain, "AI, as it exists today, is incongruent to this Open Source community." Unsurprisingly, this is the part that's upset the majority of the users in the thread.... [T]he moderator who posted the new guidelines stated in a separate comment that the overwhelmingly negative response is due to "some guy on twitter claiming to be alternative news" who posted an "opinionated editorial pointing hundreds of people to the thread." Given the timing of when the thread was posted, alongside the fact that the X post in question mentions "the Linux kernel," they are presumably referring to this post by The Lunduke Journal. The moderator may be correct, as almost all of the top comments on the post are from users who have never posted in r/opensource before. The use of AI "doesn't change whether something is open source or not," complained one commenter, who added "I guess Linux is no longer allowed here? Linus uses AI for kernel development now." The moderator has since updated their post to acknowledge that Redditors have now already created a rival community called r/OpenSourceAIAllowed — plus three more alternatives: r/TrueOpenSource r/OpenSourceWare r/ActuallyOpenSource

Read more of this story at Slashdot.

Brazil's 80-year-old president Luiz Inácio Lula da Silva was re-elected Sunday, reports the Guardian, "defeating his far-right opponent, Flávio Bolsonaro, to claim a historic fourth term in power." And the results could impact the climate, suggests the Associated Press, since under da Silva the annual deforestation rate in the Amazon fell to its lowest level since records began in 1988: Official satellite data showed the rainforest lost 3,335 square kilometers (1,300 square miles) from Aug. 2025 through July 2026, the period used to calculate the annual rate... During Jair Bolsonaro's presidency, from 2019 to 2022, Amazon deforestation surged by about 60%, with more than 45,000 square kilometers (17,400 square miles) cleared, according to official data. Under Lula, deforestation has fallen 71% since 2023, the government said. One of Lula's first moves after taking office in January 2023 for a third, non-consecutive term was to revive the Action Plan for the Prevention and Control of Deforestation in the Legal Amazon, known by its Portuguese acronym, PPCDAm. Launched in 2004 during his first administration, the plan had been shelved under Bolsonaro.... The plan has four pillars: strengthening monitoring and enforcement; promoting a sustainable economy; managing protected areas and determining how undesignated public forests should be used; and using regulations and financial incentives to curb deforestation. Measures included restoring sanctions for illegal forest clearing detected by satellites, a practice seen as the most effective tool to curb deforestation that was halted under Bolsonaro. The government also proposed barring properties with illegal deforestation from receiving bank loans and allocated more funding to priority Amazon municipalities that demonstrated reductions in forest loss. It also funded efforts to fight environmental crime and develop subsidized credit for sustainable businesses in the Amazon... Deforestation and other land-use changes are Brazil's largest sources of greenhouse gas emissions, which drive global warming. The stakes are especially high in the Amazon, which stores vast amounts of carbon dioxide and generates atmospheric moisture that helps regulate weather far beyond South America... Degradation from wildfires, logging and drought affects about 40% of the Amazon and has outpaced clear-cutting in recent years. A strong El Niño, a periodic warming of the equatorial Pacific, could intensify those threats in 2026 and 2027 by bringing hotter, drier conditions that fuel wildfires. The article notes that Lula's reelection campaign promised zero net deforestation by 2030, plus restoration to offset all forest loss, legal or illegal.

Read more of this story at Slashdot.

The problem? Understanding how AI coding agents interact with the software you build. "Whether you're maintaining an SDK, building a command-line interface, or publishing an MCP server or skills... you need to understand whether agents can discover and use what you ship, and what your team can change." Results can vary, and configurations keep changing, with behaviors influenced by everything from custom instructions and MCP servers to skills and plugins. So after a year of development Microsoft has created Scope, "an open-source platform built on Kubernetes for turning those interactions into evidence product teams can act on." Details are available on... the Microsoft open source blog: Available under the MIT License, Scope supports a continuous Developer Agent Experience (DevAx) learning loop grounded in repeatable experiments. The Azure Cosmos DB team's experience shows what that loop can deliver... "The evaluations led to 20 Agent Kit issues and 27 documentation issues resolved," [says Jay Gordon, Senior Program Manager, Azure Cosmos DB]... These results connect evaluation to decisions a product team can make: which documentation needs clarification, where tooling needs a fix, and whether an update changes agent behavior.... [The gains] demonstrate how targeted changes, informed by observed behavior, can improve the way agents use a product. For more on the shift from building for human developers to supporting agents, watch Your Product Was Built for Humans. Is It Ready for Agents? or join us at AI DevCon NYC conference in November. Scope surfaces everything from incorrect assumptions in documentation (or recurring missed instructions) to whether agents select the intended SDK, initialize it correctly, and use its APIs, leading to clearer descriptions for command-line tool and more actionable errors. Microsoft's open source blog also explains why AI agent evaluation needs an open-source foundation: The challenges behind agent experience aren't unique to one product or organization. SDK maintainers, tool authors, researchers, and agent developers are all asking how agents behave and what helps them succeed. No single team can represent every language, workflow, or integration. An open project can bring more scenarios, more failure cases, and more viewpoints into the evaluation process... Opening Scope's execution and evaluation code gives contributors a way to question the methods, investigate unexpected results, and improve the evaluation itself. A shared foundation also reduces duplicated infrastructure. Agent integrations, reusable criteria, and trace-analysis improvements can help other teams study their own products without rebuilding the same machinery. The goal isn't one universal benchmark or definition of success. It's a common starting point that teams can adapt to their needs. The MIT License lets teams use and extend Scope, while self-managed deployments let them evaluate private workloads without publishing their code or run data.... Scope streams activity as the agent works and retains interactions and workspace snapshots for later review. Your team can follow tool calls, inspect generated files, and connect a failed requirement to the steps that preceded it. Those traces provide observable evidence of what the agent did, helping turn a failure into a concrete documentation, SDK, or tooling improvement.

Read more of this story at Slashdot.

"59% of maintainers report growing contribution volume since the rise of GenAI," according to a new study published by Linux Foundation Research. But 25% of their incoming pull requests "are estimated to be low-quality, also known as 'AI slop'." And on large projects, 69% see growing contributions — and estimate that 31% are low-quality/AI slop. So what do these results show us? "Generative AI is fundamentally changing how people participate in open source," says the head of Open Source Ecosystem Development at Huawei's R&D subsidiary Futurewei, which helped support the study. Specifically GenAI is "lowering barriers to contribution" but also "creating new challenges" for maintainers and communities. Their recommendation? "Build the governance, transparency and trust mechanisms that allow AI-assisted contributions to strengthen, but not overwhelm, the open source ecosystem." "Open source projects need to design for a growing AI-generated contributor base, not simply react to it," said Hilary Carter, SVP of Research at the Linux Foundation. "That means setting clear expectations for GenAI, putting responsibility for testing and disclosure on contributors and giving maintainers better tools to manage incoming pull requests. If we get those fundamentals right, AI can expand participation without overburdening and increasing costs for maintainers." More from the blog It's FOSS: LF Research is the Linux Foundation's research arm. It was set up in 2021 and publishes studies on how open source is built and used, drawing on surveys and project data. Its latest report, Navigating Open Source Software Development in the Generative AI Era, surveyed 234 contributors and maintainers on how generative AI is affecting the way open source gets made... 64% say reviews now take longer. Burnout is their top concern at 63%, narrowly ahead of contribution quality at 60%. You will also find that policies have not caught up to the AI-assisted coding and vulnerability reporting trend. Of the 119 respondents who answered the question, 35% said their project has a formal policy permitting AI use. Another 32% have none and no plans for one, 23% plan to write one, and 10% ban AI contributions outright.... Most maintainers (71%) say AI makes it easier for newcomers to start contributing. Other interesting findings: "Respondents estimate average time reductions across all six OSS development activities measured, including proposal discussions (19%) and code authoring (52%). For high-complexity tasks, however, 21% of respondents report taking more time when using GenAI." "71% of maintainers agree GenAI reduces barriers to entry for OSS, but 53% of maintainers disagree that GenAI has improved community trust." Developers are reinvesting the time they save back into open source: 66% report using productivity gains to address technical debt, 63% to develop new features and 58% for learning and upskilling. Continued investment in human mentorship remains important: 46% of maintainers say GenAI increases the need for mentorship of new contributors, compared with 32% who say it decreases that need. OpenSSF and LF AI & Data also helped support the study.

Read more of this story at Slashdot.

"As of today in systemd Git it's now possible for the systemd programs to be written in the Rust programming language as an alternative to C," reports Phoronix: Core systemd code like the systemd library doesn't yet support Rust code, but for the various systemd programs / leaf components there is now support for using Rust... The new systemd-keyring-setup utility in Rust is used for provisioning keyrings and enrolling X.509 certificates into the kernel's dm-verity / fs-verity / BPF keyrings during the boot process while dealing them afterward. This systemd-keyring-setup code hasn't been merged yet but is expected soon now that the Rust infrastructure has landed. Originally it was all part of a single big commit before being split-up for the Rust enablement, systemd-keyring-setup, and other preparations for this new component. Systemd developers aren't planning on porting existing C code to Rust, all the Rust code is built with Meson [no Cargo usage], and C linkage only is mandated. Systemd Rust components come out slightly larger than C with a test program being 32KB compared to 20KB for its C twin. For now at least the systemd Rust support is optional and toggled by the -Drust= Meson option with it being auto by default.

Read more of this story at Slashdot.

From the student newspaper at the University of California, Berkeley: Richard Borcherds, a UC Berkeley professor and Fields medalist, no longer grades his students' homework. After seeing how many of his students used AI to consistently receive top scores, he felt there was "no point" in paying readers to grade for correctness in homework, as AI use is now unavoidable. Borcherds revealed this in a sit-down interview Tuesday, following OpenAI's announcement that AI agents apparently solved one of mathematics' most difficult unsolved problems, the Navier-Stokes existence and smoothness problem. "If AI continues to improve at present rate, then, in a few years, there'll be nothing human mathematicians can do that AI can't do better," Borcherds said. Borcherds said he currently grades on completion if a student hands in their homework. He admitted that it is "not a very good system," but at the moment, he has no alternative... Campus has tried several AI detection tools, including Turnitin and Rumi, but have determined that these tools aren't adequate enough to be standardized on campus. The article points out that at the university, each class's AI policy "is up to the discretion of faculty."

Read more of this story at Slashdot.