Open source news — new project releases, community governance, licensing updates, and open-source AI models including Llama, Mistral, and others.
The article explains that a recent port of Notepad++ to macOS was not created by the original maintainer, leading to confusion and trademark concerns. The author draws on past experiences with OpenNMS to argue that prote…
The Open ASR Leaderboard has added private, high-quality English ASR datasets from Appen Inc. and DataoceanAI to prevent "benchmaxxing" and test-set contamination. While the average Word Error Rate (WER) still defaults t…
Key April activities from the Free Software Foundation Europe (FSFE), including a major policy victory where the European Commission abandoned a rule that threatened users' right to install any software on radio devices …
DARPA's post-AIxCC bounty program led Xint.io to discover CVE-2026-31789, a critical heap buffer overflow vulnerability in OpenSSL that could enable code execution. Xint's AI-powered scan analyzed over 600,000 lines of c…
This article presents benchmark results comparing the performance of a Qwen3.6 model running in standard mode versus with Multi-Token Prediction (MTP) enabled. The MTP configuration with a draft of 3 tokens achieved a si…
The article describes a single-character logic bug discovered in OpenSSL version 4.0.0's implementation of the SLH-DSA post-quantum signature algorithm. The bug occurs in the `slh_dsa_sign()` function, where a conditiona…
The Free Software Foundation Europe (FSFE) has criticized NHS England's reported plan to make most of its public source code repositories private by default, citing security concerns over AI vulnerability scanning. The F…
This article provides a technical guide for setting up a two-server Xray proxy configuration using VLESS, XHTTP, and TLS Reality protocols. Server A acts as an inbound relay that accepts client connections via XHTTP with…
QuickQWERTY 1.2.3, a web-based touch typing tutor for QWERTY keyboards, has been released with two bug fixes. The update corrects a broken licence link that occurred after the project’s source code management moved from …
Ubuntu and Canonical's web infrastructure has been offline for over 24 hours following a sustained, cross-border DDoS attack, preventing users from accessing most official websites and downloading OS updates. A pro-Irani…
The author reflects on frustrations with GitHub, such as Microsoft's use of open-source code for Copilot, but notes these issues do not personally bother them. They plan to migrate public repositories to Codeberg and hos…
The article discusses the DeskPi Super4C, a 4-node Raspberry Pi CM5 cluster board that addresses issues with its predecessor, the Super6C. It also mentions the SBCC 2026, a student competition where university teams buil…
This article describes a collection of scripts that provide a one-step installer for Nintendo Switch emulators on Linux and Windows. The scripts automatically download and install emulators like Citron, Eden, and Ryujinx…
The PyTorch Lightning deep-learning framework was compromised on PyPI, with versions 2.6.2 and 2.6.3 containing a credential-stealing worm called Shai-Hulud. The malware activates when Python code runs `import lightning`…
Setting a minimum release age (cooldown) on dependencies is a low-effort, high-impact defense against supply-chain attacks, as most malicious packages are detected and removed within hours. All three major Node.js packag…
After more than a decade of advocacy, the European Commission decided in January 2026 to abandon a provision in the EU Radio Equipment Directive that would have required manufacturers to block users from installing custo…
The article is a sarcastic, first-person account of the author's experience at GrafanaCon 2026 in Barcelona. Despite claiming to "hate" the conference, the author details that it was incredibly well-organized, featured e…
This article provides a concise reference guide for essential Git commands, covering repository initialization, file tracking, committing, and remote setup. It also explains branching operations, including creation, swit…
Raspberry Pi Connect, the free remote access service for Raspberry Pi devices, may soon add support for controlling Windows PCs. Originally launched in 2024 as a response to RealVNC's slow Wayland adoption, the service i…
"Copy Fail" (CVE-2026-31431), a logic bug in the Linux kernel's authencesn cryptographic template that allows an unprivileged local user to execute a deterministic 4-byte write into the page cache of any readable file us…