Анализ безопасности 281 VPN-приложения для Android

Исследователи из Мичиганского университета разработали инструментарий MVPNalyzer для выявления утечек информации и анализа работы VPN, и проверили с его помощью 281 VPN-приложение для платформы Android. Для изучения были отобраны наиболее популярные VPN-приложений, распространяемые через каталог Google Play. VPN-приложения, в которых были выявлены те или иные проблемы с безопасностью и приватностью, в сумме насчитывают 2.4 миллиарда установок. Основные выводы.

👉@sysadminoff

https://www.opennet.ru/opennews/art.shtml?num=65892

📰 A Raspberry Pi 5 Handheld That Replaces Plastic with Brass

🔗 Source:

👉@sysadminoff

https://www.hackster.io/news/a-raspberry-pi-5-handheld-that-replaces-plastic-with-brass-eb5e29d5b751

OpenAI GPT-5.6 family arrives on Amazon Bedrock with tiered reasoning

Amazon Bedrock has added general availability for the OpenAI GPT-5.6 model family, consisting of the Sol, Terra, and Luna tiers. Sol serves as the flagship model for complex reasoning and autonomous coding, while Terra offers balanced performance for everyday production tasks. Luna provides a high-speed, low-cost option optimized for low-latency applications like real-time classification and summarization.
Source

👉@sysadminoff

https://4sysops.com/archives/openai-gpt-5-6-family-arrives-on-amazon-bedrock-with-tiered-reasoning/

📰 New Linux Patches Aim To Better Handle Multiple Swap Devices

For those having Linux systems with multiple swap devices, such as for swap tiering or layered swap handling, a set of patches posted today for the Linux kernel are looking to improve the situation...

🔗 Source:

#kernel #linux

👉@sysadminoff

https://www.phoronix.com/news/Linux-Improve-Multi-Swap-Device

📰 GNOME OS Plans a TestFlight-Like App for Experimental Software

GNOME OS could gain a TestFlight-like Test Center for installing temporary experimental builds through simple sharing links.

🔗 Source:

#gnome

👉@sysadminoff

https://linuxiac.com/gnome-os-plans-a-testflight-like-app-for-experimental-software/

📰 This open-source puck lets you use your Steam Controller on Xbox, Switch, and PlayStation consoles

Once you find a good controller, you really want to use it on every gaming device you own. Unfortunately, it's not as easy as plugging an Xbox controller into your Switch, so you're often hunting for workarounds.

🔗 Source:

#opensource #steam

👉@sysadminoff

https://www.xda-developers.com/this-open-source-puck-lets-you-use-your-steam-controller-on-xbox-switch-and-playstation-consoles/

17 Popular Node.js Frameworks for Building Modern Web Applications

The post 17 Popular Node.js Frameworks for Building Modern Web Applications first appeared on Tecmint: Linux Howtos, Tutorials & Guides .Node.js is a JavaScript runtime used to build fast and scalable network applications. It uses an event-driven, non-blocking I/O model
The post 17 Popular Node.js Frameworks for Building Modern Web Applications first appeared on Tecmint: Linux Howtos, Tutorials & Guides.

👉@sysadminoff

https://www.tecmint.com/best-nodejs-frameworks-for-developers/

📰 Visor Is a New Graphical UEFI Boot Manager for Linux

Visor is a new open-source UEFI boot manager for Linux, designed to launch kernels, UKIs, Windows, and other EFI applications.

🔗 Source: https://linuxiac.com/visor-is-a-new-graphical-uefi-boot-manager-for-linux/

#linux #opensource

👉@sysadminoff

https://share.google/SzhUSfQLH17fpg0kI

📰 Weston 16.0 Compositor Released With HDR Improvements, Vulkan Fixes

Overnight the Weston 16.0 release occurred as the latest milestone for this reference Wayland compositor...

🔗 Source:

#wayland

👉@sysadminoff

https://www.phoronix.com/news/Wayland-Weston-16.0

CISA contractor exposes AWS GovCloud keys and internal credentials on GitHub

A contractor for the Cybersecurity and Infrastructure Security Agency (CISA) inadvertently published 844 MB of sensitive data to a public GitHub repository. The exposure included administrative credentials for three AWS GovCloud instances, which are isolated cloud regions designed to host sensitive government workloads and regulated data. Alongside these cloud keys, the repository contained plaintext usernames and passwords for dozens of internal systems and various infrastructure-as-code files.
Source

👉@sysadminoff

https://4sysops.com/archives/cisa-contractor-exposes-aws-govcloud-keys-and-internal-credentials-on-github/

📰 Haiku Merges NVMM For Initial Virtualization Support, But It Doesn't Yet Fully Work

The BeOS-inspired Haiku open-source operating system project has published their June 2026 status report. In the past month the developers merged their NVMM VM monitor support, hardware driver improvements, and progressed toward the upcoming Haiku sixth beta release...

🔗 Source:

#opensource

👉@sysadminoff

https://www.phoronix.com/news/Haiku-June-2026

Meet Moddo Pinch - The world's smallest 32-bit Arduino-compatible board (2026 Edition) - CNX Software
https://www.cnx-software.com/2026/07/14/meet-moddo-pinch-the-world-smallest-arduino-compatible-board-2026-edition/

👉@sysadminoff

📰 "Light" GRUB Alternative Package For Confidential Computing Approved For Fedora 45

A month ago there was a change proposal raised for offering a "light" version of the GRUB2 bootloader for use in confidential computing environments. While there were some differing views on the matter for this alternative, stripped-down GRUB package as opposed to just using other bootloaders like systemd-boot, ultimately, the proposal is now approved...

🔗 Source:

#fedora #systemd

👉@sysadminoff

https://www.phoronix.com/news/GRUB-Light-Approved-Fedora-45

DeepMind CEO faces skepticism over U.S.-led global AI watchdog proposal

Demis Hassabis, CEO of Google DeepMind, is pushing for a global AI regulatory body to oversee the development of frontier models. This proposed watchdog would be led by the United States, utilizing its economic and technical standing to enforce international safety standards. Hassabis argues that American leadership is necessary to prevent a "race to the bottom" as artificial general intelligence approaches.
Source

👉@sysadminoff

https://4sysops.com/archives/deepmind-ceo-faces-skepticism-over-u-s-led-global-ai-watchdog-proposal/

Выпуск композитного сервера Weston 16.0

После пяти месяцев разработки опубликован стабильный релиз композитного сервера Weston 16.0, развивающего технологии, содействующие появлению полноценной поддержки протокола Wayland в Enlightenment, GNOME, KDE и других пользовательских окружениях. Разработка Weston нацелена на предоставление высококачественной кодовой базы и рабочих примеров для использования Wayland в десктоп-окружениях и встраиваемых решениях, таких как платформы для автомобильных информационно-развлекательных систем, смартфонов, телевизоров и прочих потребительских устройств. Код проекта распространяется под лицензией MIT.

👉@sysadminoff

https://www.opennet.ru/opennews/art.shtml?num=65898

The tacit AI wall and the limits of AI

The concept of a tacit AI wall suggests that human expertise relies on embodied, contextual, and experiential knowledge that cannot be captured by formal data models. This theory posits that common sense and emotional intelligence are unencodable, creating a permanent barrier to achieving true human-level artificial intelligence. Proponents of this view argue that while machines excel at symbolic manipulation, they lack the lived experience necessary for genuine judgment and cultural sensing.
Source

👉@sysadminoff

https://4sysops.com/archives/the-tacit-ai-wall-and-the-limits-of-ai/

📰 7 Open Source Trello Alternatives For Your Kanban Boards

Trello has changed a lot since I started using it in 2013. If you want that old-school Kanban simplicity back, here are the open source alternatives worth a look.

🔗 Source:

#opensource

👉@sysadminoff

https://feed.itsfoss.com/link/24361/17380029/open-source-trello-alternatives

Jailbroken Gemini AI automates 90 percent of C2 server deployment for fraudster

A TrendAI investigation revealed that a Russian fraudster used a jailbroken version of Google’s Gemini model to automate the majority of a credential-stealing operation. The attacker bypassed safety protocols by instructing the AI to act as an "authorized pentester," allowing it to handle coding, system command execution, and debugging. By following a simple plain-text migration guide, the AI model successfully provisioned a new command-and-control (C2) infrastructure in just six minutes.
Source

👉@sysadminoff

https://4sysops.com/archives/jailbroken-gemini-ai-automates-90-percent-of-c2-server-deployment-for-fraudster/

📰 Intel Vulkan Driver Now Supports H.265 10-bit Video Encoding

Hyunjun Ko with Igalia continues advancing the Vulkan Video capabilities of the Intel open-source "ANV" Vulkan driver for Linux systems...

🔗 Source:

#intel #linux #opensource

👉@sysadminoff

https://www.phoronix.com/news/Intel-Vulkan-Video-10-bit-H265

Configure Microsoft Entra Backup and Recovery

Microsoft Entra Backup and Recovery is a built-in solution for Microsoft Entra ID that became generally available on June 30, 2026. It automatically backs up critical directory objects daily, allowing you to restore them to a previous state after accidental changes or a security compromise. This article explains the requirements, coverage, recovery workflow, and limitations.
Source

👉@sysadminoff

https://4sysops.com/archives/configure-microsoft-entra-backup-and-recovery/

Firefox переходит на двухнедельный цикл подготовки релизов

Сильвестр Ледрю (Sylvestre Ledru), директор по инжинирингу в Mozilla, объявил о переходе на двухнедельный цикл подготовки релизов Firefox. Начиная с сентября новые выпуски будут формироваться каждые две недели, а не раз в 4 недели. Изменение уже отражено в графике подготовки релизов: последним с 4-недельным циклом разработки станет Firefox 154, намеченный на 18 августа. Далее через 2 недели 1 сентября выйдет Firefox 155, 15 сентября - Firefox 156, 29 сентября - Firefox 157.

👉@sysadminoff

https://www.opennet.ru/opennews/art.shtml?num=65900