513 results for “OpenSoul”
🐧 SIGINT // Linux Watch — 2026-10-26
A PHP2Shell scare has SuperTuxKart pulling its online services offline as a precaution. If you self-host anything PHP-based, take it as your cue to check patch levels. Even kart racers aren't safe from webshells.
🔗 https://www.omgubuntu.co.uk/2026/10/supertuxkart-goes-offline-php2shell
🚀 Fastest-growing AI projects today
1. One standout project `mushigaite/short-video-maker`, which aims to democratize short vi...
2. `mushigaite/short-video-maker` a comprehensive suite of features including highlight de...
3. Its growth score of 42.86 and over 290 stars suggest that content creators actively see...
Full report → https://pullrepo.com/report/todays-other-ai-tools-fastest-growing-projects-october-12-2026
If you like using Mainsail as your print host you will be able to do that with Marlin a lot more easily on the next update. The key is a little connector called Serial2Moon.
GitLab released updates addressing 11 security issues, led by a severe vulnerability affecting self-managed server versions going back to version 7.0 from 2014.
The issue allows unauthorized code execution via crafted regular expressions and impacts deployments running older Onigmo engine versions.
GitLab has backported fixes to older unsupported releases including 18.11.13 and 19.x branches.
Upgrades to specific versions inc…
https://en.hacks.gr/to-gitlab-diorthonei-sovaro-provlima-asfaleias-poy-ypirche-apo-to-2014/
Release candidate Playtest 20261026 is out now! Featuring: Random Map Generator, auto-save and game save/load UI overhaul, completed Dune 2000 campaign, Red Alert campaign polish, smarter bots that expand, engine update to .NET 10.
Read more at https://www.openra.net/news/playtest-20261026/ and grab the latest build for OpenRA
#OpenRA #OpenSource #OpenSourceGaming #RTS #RTSGames #Gaming #Linux #MacOS #Windows #LinuxGaming #RedAlert #esports #FreeGame #Retro #CommandConquer #CommandAndConquer
Nookito, a community for the tiny internet: personal sites, curious projects, and small corners of the web made by people who care about sharing what they love. It's a place to wander around beyond the usual feeds, find something unexpected, and meet the people behind the links.
Join the community forum and check out the free services provided for anyone to use.
https://nookito.net/
#open #opensource #internet #community #freedom
I have happily been backing @thephpf since 2022.
Skwir punta a rivoluzionare la gestione dei file su Linux con un file manager veloce, flessibile e progettato per lavorare sia con gli utenti sia con gli agenti AI. #Linux #OpenSource #Rust #FileManager #AI https://www.linuxeasy.org/skwir-il-file-manager-per-linux-progettato-anche-per-gli-agenti-ai/
25th October 2026
Hello,
I started this blog 22 years ago now (I don’t recommend going back to the start), and for the last 5 years I wrote a monthly “status update” post, aiming to mainly write about interesting stuff I might have done in the world of open source software, which I hoped in turn would motivate me to do more interesting stuff in open source software.
The world changed a lot in that time. If I started now this would probably be a podcast with 16 listeners, instead of being a WordPress blog with 16 subscribers.
I’ve spent a lot of time this year reading and thinking about the impact of large language models on the tech industry and open source. Its interesting because this feels like the moment, whether we like it or not, hacker culture goes mainstream. This week the world’s major news outlets had to figure out what PHP is.
That the BBC’s cyber correspondent didn’t know PHP existed has caused some joking and debate online.
24 years ago I was figuring out what PHP is. Jonathan Atkinson, who I met in a forum that was nominally about writing video games in QBASIC, asked me to make a wiki in PHP. So I did.
All I knew about wikis was that, it’s like a regular website except anyone can edit it. I named the project: Wiki! Here’s a quote from the README:
How do I install it? It's best run in its own directory. Create it one. You'll also want a directory for nodes, or you could keep them in the base wiki dir. Either way, the nodes directory has to be chmod'ed to 777. You might raise your eyebrows at that comment if you aren’t yourself a teenage hacker discovering web development.
Wiki! did have a login system, and the passwords were even stored as MD5 hashes rather than plain text, as I heard that was good practice. In hindsight, an attacker who knew how to set the HTTP Cookie header could impersonate anyone, like this: Cookie: wikiticket=admin.
Here is a snippet of the file edit.php. Note that $node and $title are inputs you can set via a POST request, or even via URL parameters like edit.php?title="/etc/passwd":
$t=$title; if ($node) { // Write new data // $file=fopen($nodedir.$t.".wiki", "w+"); $node=stripslashes(ereg_replace("(\r\n|\n|\r)","<br>", $node)); // Linebreak to <br> fputs($file, $node."\n"); Even if you just learned what PHP is today, you might see that this is not an entirely secure design.
Anyway, at the time I was proud of my work, and I needed somewhere to host it. So, as you would in 2002, I registered the name “wiki” on sourceforge.net and uploaded the project code.
Sourceforge, for those who haven’t yet reached middle age, was the 2000’s equivalent of Github. It allowed projects to have their own website, as long as they included the Sourceforge logo somewhere, and the website could use PHP. Perfect, I thought, the project’s website will be a wiki!
Looking back now through archive.org, I can see this code actually ran in public for many years.
Here it is around launch day in 2002: https://web.archive.org/web/20021012080349/http://wiki.sourceforge.net/wiki
I have a local copy from around this time, which includes indexjon.wiki:
Sam, there are some serious bugs in this wiki. I keep on getting 'document contains no data' errors; get me on AIM.
Welcome to grove.swoo.net. You may or may not be interested in the [weblog].
JonathanA - 29/8/02 - 11:36 am
JonathanA - 29/8/02 - 07:36 amThose bugs went unfixed forever, and six months later, the front page text had been replaced with two poems, one in Italian and one in Russian: https://web.archive.org/web/20030420205758/http://wiki.sourceforge.net
One is “Non chiederci la parola che squadri da ogni lato” by Eugenio Montale, written in 1923, and presumably posted by a fan. Does anyone know what it’s about? A machine translation suggests it might discuss “the crisis of certainty faced by contemporary man”. The other is “Anecdote for Fathers” by William Wordsworth, in Russian via an unnamed translator.
Let’s just sit with that for a moment. Imagine what happens in 2026 if a trivially exploitable PHP website hosted by a US corporation goes online: it’ll be mining bitcoin, serving pornography and drowning in racist and antisemitic spam, probably all within the same day.
In 2003, over the course of six months, my naive implementation of a wiki was gifted with… two rather thoughtful poems.
Fast forward another year. I was about to turn 18 years old, was studying for A levels and mostly concerned with hanging out in the park drinking cheap cider and learning to play the guitar. I was certainly not thinking about this rather flawed chunk of PHP code that I’d written two years earlier, but via the magic of archive.org we can see that various people were genuinely trying to use it as a wiki: https://web.archive.org/web/20041121113508/http://wiki.sourceforge.net
In hindsight, perhaps it attracted so much attention because I’d literally taken the subdomain: http://wiki.sourceforge.net/, unintentionally boosting the SEO reach quite a bit. The site was still active right up until 2007.
I can’t find it now, but I do remember receiving an email at some point from sourceforge.net noting that they’d taken down the wiki! website after discovering it was a major security risk. And at some point they must have (quite reasonably) reclaimed the project name as well, since http://sourceforge.net/projects/wiki no longer exists. It will always live on in my heart, though, and for the moment at: https://web.archive.org/web/20021014172056/http://sourceforge.net/projects/wiki/
The world has changed significantly since I was a teenage hacker. Some of what I learned in those days is completely obsolete, such as the QBASIC programming language and VGA graphics. I am a world expert in these irrelevant topics.
Other stuff that I picked up in the early 2000s has become the foundation of my career as an operating systems developer: C programming, Linux distributions and an gradual induction into open source desktop world via Planet GNOME. And good old PHP, of course. Who knew that, a quarter way through the 21st century, PHP would be front page news?
Age 18, I didn’t tell anyone in the real world that I’d written a wiki because it’d be the first time they’d heard the word “wiki”. The word evoked exotic and mysterious feelings of Hawaii in 2002. Now it universally evokes Wikipedia. People are learning about password hygiene and PHP. The arrival of AI on the scene, to me, fits into this bigger picture that began in the last century: we, the Computer People, are becoming Mainstream.
#ai #openSource
(One of) The fundamental issues with AI/LLM/agent use in #FLOSS is that what has been a culture of communities largely defining and organizing themselves through certain ways of creating/learning/working/maintaining/exchanging in the open, has slowly been turned into an anti-culture which is essentially only focused on free end results (products), produced ad-hoc, with source available, but more or less as a side effect, as just another output artifact from a black-box process, and definitely not a central organizing factor or value anymore...
We really need to start acknowledging this dichotomy of purpose & value and start refining our language to defend existing meanings of what "open source culture" is/was about...
(Link to quoted post, which apparently doesn't seem to work for some... 🤷)
https://floss.social/@downey/117501743018241252
Tech News Briefing — 2026-10-25 · #technews #linux #ai #cybersecurity #opensource →
¿Y si un servicio de mensajería basado en Signal hiciera que la protección de la privacidad fuera obligatoria en lugar de opcional?
Conoce a Parakeet, una versión bifurcada (fork) de código abierto para Android de Molly, que a su vez está basada en Signal.
Adopta un enfoque diferente respecto a la privacidad:
🔹Tor a través de Orbot es obligatorio y no se puede desactivar en la aplicación.
🔹Las capturas de pantalla y las vistas previas en el selector de aplicaciones están bloqueadas.
🔹Los mensajes efímeros se establecen por defecto en 24 horas para los nuevos chats.
🔹Sin entrega de notificaciones mediante Firebase Cloud Messaging (FCM).
🔹Una interfaz rediseñada y una identidad de aplicación independiente.
Parakeet sigue las versiones de Molly y vuelve a aplicar sus propios cambios automáticamente. La última versión publicada incluye un APK llamado Parakeet-8.19.2-4.apk.
La instalación está disponible a través de la página de lanzamientos del proyecto, con herramientas como Obtainium o Omnify Beta como opción.
¿Usarías una aplicación de mensajería que fuerza todo el tráfico a través de Tor?
https://gitlab.com/LionNest/parakeet
#Privacy #OpenSource #Android #Signal #Ciberseguridad #Seguridad #Privacidad
Here is a small demo video of SayText Chat in action:
https://www.youtube.com/watch?v=CwSmLgY4Ofw
#FOSS #OpenSource #SelfHosted #SelfHosting #Retro #Nostalgia #Counterstrike #HalfLife #Vintage #WebDev
What if a Signal-based messenger made privacy protections mandatory instead of optional?
Meet Parakeet, an open-source Android fork of Molly, itself based on Signal.
It takes a different approach to privacy:
🔹Tor via Orbot is mandatory and cannot be disabled in the app.
🔹Screenshots and app-switcher previews are blocked.
🔹Disappearing messages default to 24 hours for new chats.
🔹No Firebase Cloud Messaging (FCM) notification delivery.
🔹A redesigned interface and a separate app identity.
Parakeet tracks Molly's releases and reapplies its own changes automatically. The latest release listed includes an APK named Parakeet-8.19.2-4.apk.
Installation is available through the project's release page, with tools like Obtainium or Omnify Beta as an option.
Would you use a messenger that forces all traffic through Tor?
🗳️ OWASP Board Election voting is OPEN!
3 Board seats are up for election. Make your voice heard and help shape OWASP’s future!
📩 Check your personal and OWASP email for your ballot.
⏰ Closes Oct 30, midnight UTC.
Vote now: https://owasp.org/board/elections/2026
Goal of the day: finish the implementation of Playwright visual comparisons + auto-generation of new screenshots when some intended UI change is made 👷♂️
#LibreWeddingPlanner #OpenSource #FreeSoftware #SilentSunday
Digitale Souveränität in Asien: sieben Länder, sieben verschiedene Wege
Am 26.
https://vsx.is/de/digitale-souveraenitaet-asien/
#Privatsphäre #OpenSource #Datenschutz #DigitaleSouveränität
DeepSeek-V4.1-Flash-1017 brings faster project building:
https://alternativeto.net/news/2026/10/deepseek-v4-1-flash-1017-brings-faster-project-building/
Meta launches Muse Spark Open, an 816B open-weight AI model for Macs requiring 1TB of RAM:
https://alternativeto.net/news/2026/10/meta-launches-muse-spark-open-an-816b-open-weight-ai-model-for-macs-requiring-1tb-of-ram/
FLUX 3 Image Klein adds 4K image editing on 8GB GPUs:
https://alternativeto.net/news/2026/10/flux-3-image-klein-adds-4k-image-editing-on-8gb-gpus/
Strata 0.2.1 Released: Vision, Benchmarks, Fixes, and Docker Images:
https://www.linuxcompatible.org/story/strata-021-released-vision-benchmarks-fixes-and-docker-images/
Strata 0.2.2 Released With Memory-Light Gyro Variant:
https://www.linuxcompatible.org/story/strata-022-released-with-memorylight-gyro-variant/
Strata 0.2.3 Adds Intel Arc Support and Strix Halo Speed Bump to 125B-Parameter PC Model:
https://www.linuxcompatible.org/story/strata-023-adds-intel-arc-support-and-strix-halo-speed-bump-to-125bparameter-pc-model/
Strata 0.2.4 Released: Run a 763-Billion-Parameter AI Model Locally on Your Gaming PC:
https://www.linuxcompatible.org/story/strata-024-released-run-a-763billionparameter-ai-model-locally-on-your-gaming-pc/
Microsoft’s AI Coding Agent Testing Tool Has Been Open-Sourced:
https://itsfoss.com/news/microsoft-scope-self-hosted-agent-testing/
You Can Reserve This Small-Factor, De-Googled Phone for $30:
https://itsfoss.com/news/brax-wink-pre-order/
(Pretty good option for Blackberry fans I guess)
VirtualBox 7.2.22 Releases with Security Fixes:
https://www.linuxcompatible.org/story/virtualbox-7222-releases-with-security-fixes/
OpenBSD 8.0 brings Clang/LLVM 22 base compiler, 64 VCPUs VM & Intel Arc A-Series support:
https://alternativeto.net/news/2026/10/openbsd-8-0-brings-clang-llvm-22-base-compiler-64-vcpus-vm-and-intel-arc-a-series-support/
Red Hat Funded a Report That Found a Quarter of Incoming Pull Requests May Be AI Slop:
https://itsfoss.com/news/red-hat-lf-research-ai-slop-report/
FFmpeg 9.1 Preps For Release With APV Vulkan Encoder, NVIDIA Optical Flow FRUC:
https://www.phoronix.com/news/FFmpeg-9.1-Releasing
Vulkan 1.4.366 Released With SMPTE ST 2094-50 HDR Support:
https://www.phoronix.com/news/Vulkan-1.4.366
(Post 7/7)
#WeeklyNews #OpenSource #FOSSNews #FOSS #OpenSourceNews #News #DeepSeek #Muse #MuseSpark #FLUX #Strata #AI #AIAgent #AgenticAI #BraxWinkModularSmartphone #BraxWink #VirtualBox #OpenBSD #OpenBSD8 #FFmpeg #Vulkan #FosseryTech
PHP patches critical AI-discovered PHP2Shell vulnerabilities affecting millions of sites:
https://alternativeto.net/news/2026/10/php-patches-critical-ai-discovered-php2shell-vulnerabilities-affecting-millions-of-sites/
Node.js October 2026 Security Update: 10 Vulnerabilities Patched Across 3 Release Lines:
https://www.linuxcompatible.org/story/nodejs-october-2026-security-update-10-vulnerabilities-patched-across-3-release-lines/
Python Releases Emergency Update to Block Broken eMudhra Certificate Authority:
https://www.linuxcompatible.org/story/python-releases-emergency-update-to-block-broken-emudhra-certificate-authority/
Zed 1.25.2 Release: 33% Smaller Binaries and Safer AI Agents Now Available:
https://www.linuxcompatible.org/story/zed-1252-release-smaller-binaries-and-safer-ai-agents-now-available/
Apache NetBeans IDE 32 RC2 Ships as Small Pre-Release Ahead of November GA:
https://www.linuxcompatible.org/story/apache-netbeans-ide-32-rc2-ships-as-small-prerelease-ahead-of-november-ga/
React Native 0.88 brings web-based event dispatching & variable fonts; no breaking changes:
https://alternativeto.net/news/2026/10/react-native-0-88-brings-web-based-event-dispatching-and-variable-fonts-no-breaking-changes/
Forgejo 17.0 adds workflow webhooks and job summaries:
https://alternativeto.net/news/2026/10/forgejo-17-0-adds-workflow-webhooks-and-job-summaries/
Gitea releases gt CLI with JSON output and Actions support:
https://alternativeto.net/news/2026/10/gitea-releases-gt-cli-with-json-output-and-actions-support/
Save Upto 40% on Kubernetes Security Certifications From the Linux Foundation:
https://itsfoss.com/news/lf-cyber-security-26/
DuckDB's major 2.0 release turns the database management system into a full-fledged server:
https://alternativeto.net/news/2026/10/duckdb-s-major-2-0-release-turns-the-database-management-system-into-a-full-fledged-server/
Matomo 5.14.2 Released: Vulnerable PHP Check and Certificate Hardening:
https://www.linuxcompatible.org/story/matomo-5142-released-vulnerable-php-check-and-certificate-hardening/
OpenSSL 4.1 Released with Support for DTLS 1.3, IKEV2 KDF, and GREASE:
https://9to5linux.com/openssl-4-1-released-with-support-for-dtls-1-3-ikev2-kdf-and-grease
LibreSSL 4.4 Released With Faster SHA3, Bug Fixes:
https://www.phoronix.com/news/LibreSSL-4.4-Released
Stremio 2.1 brings Calendar and Discover previews to Apple:
https://alternativeto.net/news/2026/10/stremio-2-1-brings-calendar-and-discover-previews-to-apple/
Roundcube 1.6.20 and 1.7.5 Ship 20 Security Fixes:
https://www.linuxcompatible.org/story/roundcube-1620-and-175-ship-20-security-fixes/
Pi-hole updates FTL v6.8, Web v6.6.1 and Core v6.5:
https://alternativeto.net/news/2026/10/pi-hole-updates-ftl-v6-8-web-v6-6-1-and-core-v6-5/
(Post 6/7)
#WeeklyNews #OpenSource #FOSSNews #FOSS #OpenSourceNews #News #PHP #PHP2Shell #NodeJS #Python #eMudhra #Zed #NetBeans #ReactNative #Forgejo #Gitea #Kubernetes #DuckDB #Matomo #OpenSSL #LibreSSL #Stremio #Roundcube #PiHole #Programming #Coding #Dev #Security #Cybersecurity #SelfHosting #IDE #AI #FosseryTech
FOSS NEWS
OBS Studio 33 Officially Released with Many New Features and Improvements:
https://9to5linux.com/obs-studio-33-officially-released-with-many-new-features-and-improvements
Lumo can now turn your ideas into creations:
https://proton.me/blog/lumo-creations
(This is actually a really nice feature, I had that scrooling problem they describe, when solving some programming problems. I wish local AI chat apps had this too, I'm about to switch to local AI)
Firefox 158.0.1 is out with important security fixes:
https://www.omgubuntu.co.uk/2026/10/firefox-fixes-emudhra-secuity-issue
Zen Browser 1.23.4b Ships With eMudhra Certificate Fix and Firefox 158.0.1:
https://www.linuxcompatible.org/story/zen-browser-1234b-ships-with-emudhra-certificate-fix-and-firefox-15801/
Servo Gets CSS Grid Working, Threadboost Offering Big Speed-Ups:
https://www.phoronix.com/news/Servo-0.6-Changes
Calibre 9.17 release brings faster ebook conversions:
https://www.omgubuntu.co.uk/2026/10/calibre-9-17-faster-conversion
PeaZip 11.4.0 strengthens security and file navigation:
https://alternativeto.net/news/2026/10/peazip-11-4-0-strengthens-security-and-file-navigation/
Audacious 4.6.2 fills the last gaps in its Qt Winamp mode:
https://www.omgubuntu.co.uk/2026/10/audacious-update-qt-winamp-skins
Bitwarden mobile apps and binaries on their website become proprietary, some features might not make it to the FOSS version:
https://community.bitwarden.com/t/published-version-update-in-app-stores/102750
MKVToolNix 103 “The Darkness” MKV Manipulation Tool Brings New Features:
https://9to5linux.com/mkvtoolnix-103-the-darkness-mkv-manipulation-tool-brings-new-features
BleachBit 6.0.6 released with fixes for admin cleaning on Linux:
https://www.omgubuntu.co.uk/2026/10/bleachbit-606-update-speed-boost
Transmission 4.1.4 Open-Source BitTorrent Client Released with Various Fixes:
https://9to5linux.com/transmission-4-1-4-open-source-bittorrent-client-released-with-various-fixes
qBittorrent 5.3 BitTorrent Client Is Out as a Major Update, Here’s What’s New:
https://9to5linux.com/qbittorrent-5-3-bittorrent-client-is-out-as-a-major-update-heres-whats-new
KeePassXC 2.8 released with Qt6, support for Wayland auto-type:
https://www.omgubuntu.co.uk/2026/10/keepassxc-2-8-auto-type-wayland
Wireshark 5.0.0rc1 Released: New Features, Dropped Qt 5, and What's Changed:
https://www.linuxcompatible.org/story/wireshark-500rc1-released-new-features-dropped-qt-5-and-whats-changed/
PHP2Shell scare sees SuperTuxKart pull its online server:
https://www.omgubuntu.co.uk/2026/10/supertuxkart-goes-offline-php2shell
(Post 5/7)
#WeeklyNews #OpenSource #FOSSNews #FOSS #OpenSourceNews #News #OBS #OBSStudio #Lumo #LumoAI #Firefox #ZenBrowser #Servo #Calibre #PeaZip #Audacious #Bitwarden #MKVToolNix #BleachBit #Transmission #qBittorrent #KeePassXC #Wireshark #SuperTuxKart #ContentCreation #Multimedia #Browser #Bittorrent #Torrent #FosseryTech
China AI dominance narrative grows as Cerebras serves a 3-trillion-parameter Kimi model across 59 wafers, five Qwen instances match Claude Fable 5, and economists find no AI productivity gains outside tech.
New in the Simulator….
Infinite Z Belt Printer.
#3DPrinting #OpenSource
Yes, I kinda have an editorial opinion to share here.
If one is trying to not use Microsoft Office but remain compatible with OOXML, it's the wrong goal. OOXML is an overly complicated, Frankenstein file standard.
The best and technically superior option is one that was designed with usability and end user in mind... and that's ODF.
Want digital sovereignty? Then really dump MS.
And ODF is easier to spell too!
ICYMI: US$175 is now the only admission price for Community Over Code Sydney 2026.
Join the open source community in Sydney on November 18–19!
Register today: https://communityovercode.apache.org/events/sydney-2026/
Open Planner Studio brings open BIM construction planning to the browser and desktop
Open Planner Studio is an open source construction planning application with Gantt charts, critical-path analysis, and native IFC 4.3 files.
🐧 SIGINT // Linux Watch — 2026-10-25
A trojaned OVHcloud CLI build was swapped into GitHub releases, and a quick version check was enough to spot it. If you pull release binaries straight from GitHub into your infra, verify checksums or signatures. Trust, but verify.
🔗 https://www.stepsecurity.io/blog/ovhcloud-cli-github-release-swap-glassworm
"In late June 2026, GitHub began promulgating disinformation regarding the California AI Transparency Act (and amendments proposed in CA SB 1000). This behavior is unconscionable, as GitHub attempts to convince the FOSS community that the California act is harmful to FOSS licensing. This escalation of bad behavior simply should not be tolerated by anyone who cares about software freedom."
https://sfconservancy.org/blog/2026/jul/03/github-gen-ai-california-22757-ok-for-foss-license/
#GitHub #OpenSource #CaliforniaTransparencyAct #AI #FOSS #Software
If you are looking for detection rules for recent vulnerabilities, you can use rulezet
https://rulezet.org/vulnerability/CVE-2026-109618
It's pretty nifty.
#rulezet #opensource #opendata #cybersecurity #detectionengineering
WireGuard Easy 15.5 adds AmneziaWG 3.1 support, security fixes, configurable WireGuard interfaces, and improved proxy handling.
https://linuxiac.com/wireguard-easy-15-5-adds-amneziawg-3-1-support-security-fixes/