Hardware-secured Windows KMS activation with TPM attestation

Microsoft is introducing a new security feature called KMS Hardware-Secured to protect Key Management Service (KMS) activation. This feature uses Trusted Platform Module (TPM) attestation to verify the hardware integrity of your activation servers. Starting with Windows Server 2025, you can assess your infrastructure's readiness for this change. In a future Long-Term Servicing Channel (LTSC) release, this hardware-based verification will become mandatory. This article explains the technical requirements and how you can prepare your environment.
Source

👉@sysadminoff

https://4sysops.com/archives/hardware-secured-windows-kms-activation-with-tpm-attestation/

Дерево портов FreeBSD временно заморожено из-за добавления в порты слишком большого файла

Разработчики FreeBSD объявили о решении временно заморозить репозиторий с деревом портов в связи с инцидентом, вызванным помещением в порты бинарного файла, размером 150 МБ. Данная операция привела к нарушению зеркалирования портов на GitHub из-за превышения ограничения на максимальный размер файла, которое на GitHub составляет 100 МБ. Для проведения чистки и удаления из истории репозитория бинарных данных с сомнительной лицензией введена заморозка от внесения изменений, которая продолжается уже около двух суток. Информация о том, как подобный файл был помещён в дерево портов пока не приводится, но утверждается, что нет оснований считать репозиторий скомпрометированным.

👉@sysadminoff

https://www.opennet.ru/opennews/art.shtml?num=65966

AMD unveils Zen 6 EPYC Venice processors with up to 256 cores

AMD has officially detailed its upcoming EPYC "Venice" server processor lineup, which is built on the Zen 6 architecture and manufactured using a 2nm process. The flagship EPYC 9996 model features 256 cores and 512 threads, utilizing a dense Zen 6c design to maximize throughput for high-concurrency workloads. The platform introduces significant architectural upgrades, including support for 16-channel memory and PCIe Gen 6 connectivity.
Source

👉@sysadminoff

https://4sysops.com/archives/amd-unveils-zen-6-epyc-venice-processors-with-up-to-256-cores/

Выпуск дистрибутива Альт Рабочая станция 11.2

Опубликовано обновление дистрибутива Linux "Альт Рабочая станция 11.2", предлагающего среду рабочего стола GNOME и ориентированного для работы в офисе и дома. Сборки подготовлены для архитектур x86_64 и aarch64, и построены на 11 платформе ALT. Для загрузки сформирован установочный iso-образ (8.2 ГБ).

👉@sysadminoff

https://www.opennet.ru/opennews/art.shtml?num=65967

Cloudflare introduces cache response rules for granular edge control

Cloudflare has launched Cache Response Rules, a new feature that allows administrators to modify HTTP response headers after they leave the origin server but before they are processed by the edge cache. This capability addresses common caching inefficiencies, such as accidental "Set-Cookie" headers or overly restrictive "Cache-Control" directives that prevent static assets from being cached. By applying these rules at the response phase, teams can resolve configuration conflicts without needing to modify origin server code or infrastructure.
Source

👉@sysadminoff

https://4sysops.com/archives/cloudflare-introduces-cache-response-rules-for-granular-edge-control/

📰 Codeberg takes its side in the open-source scene's AI debate by banning vibe-coded projects

As AI coding tools evolve over time, the open-source scene has been drawing its lines in the sand as to how much AI is too much. On one side of the debate, Linus Torvalds has stated that he thinks AI tools are useful (which has attracted backlash). On the other side, we saw Fedora's community tear down the plans for an AI Developer Desktop spin.

🔗 Source:

#fedora #opensource

👉@sysadminoff

https://www.xda-developers.com/codeberg-takes-its-side-in-the-open-source-scenes-ai-debate-by-banning-vibe-coded-projects/

📰 Someone built a Raspberry Pi bot to catch their ISP lying about their speeds, and you can download it too

It can be annoying when you're convinced that your ISP is throttling your speeds, but it won't own up to its actions. Fortunately, there are ways to double-check if it is, in fact, your ISP that's causing the issues. One person decided to take matters into their own hands with a Raspberry Pi speed tester, and it did, in fact, prove that the ISP was at fault.

🔗 Source:

#raspberry

👉@sysadminoff

https://www.xda-developers.com/someone-built-a-raspberry-pi-bot-to-catch-their-isp-lying-about-their-speeds-and-you-can-download-it-too/

Microsoft tracks every Windows PC through a secret key

Microsoft embeds a persistent Global Device Identifier (GDID) into every Windows installation to uniquely track specific OS instances. This 64-bit identifier is generated by Microsoft servers and stored locally within the registry under the LID entry in the IdentityCRL key. While the company maintains that the GDID is for internal use, it is deeply integrated into various system features, including Windows activation, app licensing, and diagnostic data collection.
Source

👉@sysadminoff

https://4sysops.com/archives/microsoft-tracks-every-windows-pc-through-a-secret-key/

📰 Tails 7.10 Anonymous OS Released with Improved Data-Loss Protection

Tails 7.10 adopts GNOME’s standard shutdown process, replaces GNOME Videos with Celluloid, and updates Tor Browser.

🔗 Source:

#gnome

👉@sysadminoff

https://linuxiac.com/tails-7-10-anonymous-os-released-with-improved-data-loss-protection/

📰 Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs

RefluXFS, a new Linux kernel flaw disclosed on July 22 and tracked as CVE-2026-64600, lets an unprivileged local user overwrite root-owned files on an XFS filesystem and gain persistent root access.Qualys said default installations of Red Hat Enterprise Linux and its derivatives, Fedora Server, and Amazon Linux can meet the conditions for exploitation.The company demonstrated the race.

🔗 Source: https://thehackernews.com/2026/07/nine-year-old-refluxfs-linux-flaw-gives.html

#fedora #kernel #linux

👉@sysadminoff

Codeberg bans hosting ‘mostly’ AI-generated code

Codeberg, the nonprofit alternative to GitHub used by FLOSS projects, will no longer host software that’s mostly AI-generated. A vote closed yesterday (22 July, 2026), passing 358 to 144 with 14 abstentions on roughly 50% turnout to stop hosting software that’s largely vibe-coded. A second motion, also passed, commits Codeberg to never training AI models on hosted code or user data. Not that it was ever likely to. A Terms of Use amendment now prohibits projects that “mostly consist of code written by” generative AI tools. In a blog post, Codeberg explains the economic need for a ban, explaining that […]
You're reading Codeberg bans hosting ‘mostly’ AI-generated code, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.

👉@sysadminoff

https://www.omgubuntu.co.uk/2026/07/codeberg-bans-ai-generated-code

Jensen Huang on the future of AI and the American industrial build-out

NVIDIA CEO Jensen Huang argues that the rapid advancement of AI is a positive force for global industry, rejecting the "doomer" narrative that the technology will destroy jobs or humanity. He emphasizes that AI is fundamentally an infrastructure-driven shift, requiring a massive, multi-year build-out of data centers and hardware that will ultimately increase productivity and create new employment opportunities. Huang maintains that the United States remains the premier environment for innovation and that open-source models are essential for cybersecurity, safety, and global technological diffusion.
Source

👉@sysadminoff

https://4sysops.com/archives/jensen-huang-on-the-future-of-ai-and-the-american-industrial-build-out/

12 Best Command-Line FTP Clients for Linux Users

The post 12 Best Command-Line FTP Clients for Linux Users first appeared on Tecmint: Linux Howtos, Tutorials & Guides .Most Linux guides still recommend the same FTP clients they listed years ago, even though some of those projects are
The post 12 Best Command-Line FTP Clients for Linux Users first appeared on Tecmint: Linux Howtos, Tutorials & Guides.

👉@sysadminoff

https://www.tecmint.com/command-line-ftp-clients-for-linux/

Уязвимости в XFS, snapd и Exim, позволяющие поднять свои привилегии

Компания Qualys выявила уязвимость (CVE-2026-64600) в поставляемой в ядре Linux файловой системе XFS, позволяющую локальному пользователю получить привилегии root. Уязвимость получила кодовое имя RefluXFS и была выявлена в ходе эксперимента с использованием AI-модели Claude Mythos Preview. Проблема была найдена в ответ на запрос найти в ядре Linux уязвимость типа Dirty COW, вызванную состоянием гонки в коде файловых систем. AI-модель выявила подобную уязвимость в коде XFS и подготовила прототип эксплоита, который позволил получить root-доступ в Fedora Server 44.

👉@sysadminoff

https://www.opennet.ru/opennews/art.shtml?num=65962

Unofficial tool enables chat exports for ChatGPT Business and Enterprise users

ChatGPT Business and Enterprise subscribers currently lack a native, user-friendly method to export their conversation histories, a feature that remains available to standard personal accounts. While Enterprise administrators can access logs via the OpenAI Compliance Platform, these records are typically purged after 30 days unless manually archived. This limitation has created significant friction for professional users seeking to maintain local, permanent backups of their workspace data.
Source

👉@sysadminoff

https://4sysops.com/archives/unofficial-tool-enables-chat-exports-for-chatgpt-business-and-enterprise-users/

Kimi K3 AI discover critical remote code execution flaws in Redis

The Kimi K3 AI agent, utilizing a multi-agent "Swarm" configuration, has autonomously identified multiple zero-day remote code execution (RCE) vulnerabilities within Redis Server and the bundled RedisBloom module. Researchers reported that the AI successfully generated working proof-of-concept exploits in approximately 27 minutes by analyzing Redis source code and debugging crashes. These findings highlight a significant acceleration in automated vulnerability discovery, with the agents reportedly identifying 19 distinct flaws in the latest 8.8.0 release within 90 minutes.
Source

👉@sysadminoff

https://4sysops.com/archives/kimi-k3-ai-discover-critical-remote-code-execution-flaws-in-redis/

📰 Plex's Open Source Alternative Jellyfin is Having a Leadership Crisis

The departures come just months after the project flagged burnout as a growing risk.

🔗 Source:

#opensource

👉@sysadminoff

https://feed.itsfoss.com/link/24361/17385323/jellyfin-leadership-crisis

The US is losing the AI race with China

The US AI boom is being challenged by three connected problems: China’s cheaper open-source models, a heavy reliance on private credit, and power-grid limits that could delay or derail data center expansion. In the discussion with Professor Steve Keen, Andrew Neil argues that these pressures could burst the current AI valuation bubble and trigger wider financial stress. The core warning is that the technology may survive, while many of the companies behind it do not.
Source

👉@sysadminoff

https://4sysops.com/archives/the-us-is-losing-the-ai-race-with-china/

📰 dav1d 1.5.4 Brings AV1 Decoding To OS/2

While the VideoLAN developers are busy these days working on dav2d for AV2 video decoding, they haven't let up work on dav1d and recently released dav1d 1.5.4 for continuing to enhance this leading open-source, CPU-based AV1 decoder...

🔗 Source:

#opensource

👉@sysadminoff

https://www.phoronix.com/news/dav1d-1.5.4

📰 Steam Machine with SteamOS Linux - initial thoughts

Good news everyone, I now have a Steam Machine in the GamingOnLinux house and I have some initial thoughts.Read the full article on GamingOnLinux.

🔗 Source:

#linux #steam

👉@sysadminoff

https://www.gamingonlinux.com/2026/07/steam-machine-with-steamos-linux-initial-thoughts/