You can't just put every anti AI sentiment into the "progress is bad" bin, if you do that is the same type of behaviour as a hive mind. Many people have legitimate concerns about AI but equally many conflate AI with billionaires who exploit resources (to develope and sell AI products) for their own gain. In general, most people conflict with progress because progress is greatly in the monopoly of billionaires who have no qualms for using those progresses for exploitation.

Luckily the list of vulnerabilities mentioned here not being patched ASAP won't make me lose any sleep.

KeepassXC goes from strength to strength...

As of Firefox 157 flatpak <-> flatpak just works without all the messing around (or will when they set widget.use-xdg-desktop-portal.native-messaging-proxy on by default and update flatpak permissions).

Official blog post: https://keepassxc.org/blog/2026-10-21-2.8.0-released/

And slop, don't forget the slop. Use this instead https://codeberg.org/ChiPass/ChiPass

Nice! Just updated, it's pretty neat :D

It looks like the system auth Polkit prompt now pops up to unlock the password database (and presumably you could set that up something like fingerprint!)

Someone can delete all your fortnite progress

Slightly. Beta branches are usually maintained by the developers for development and not always subject to the same scrutiny as the main branch.

Nord... you may as well not use a vpn...

Beat me to it, what exactly is the attack vector on my Steam Deck that mostly sleeps and is on a limited segment behind my firewall and is only used for games 🙄

This article is more than little silly, at least for the target audience. These security vulnerabilities are of great concern to system administrators, but it's overblown to say that Linux gamers everywhere need to worry about these. The two remote code execution vulnerabilities are only a concern if you're running a ksmbd server. Who's running a Windows-protocol file server on their Steam Deck?? C'mon now...

omfg finally we get autotype

Run the stable branch of something that's used in servers. So Ubuntu, Debian, RHEL-equivalents. Ubuntu with the free ESM sounds pretty good right now. Keep unattended security updates on. Reboot often.

The headline seems to be predicated on the assumption that stable branches receive fixes faster.

I'm not convinced that this holds true, does anyone know?

"a little worrisome" is understating it by a lot

Opt-out and not forcing are mutually exclusive. Obviously I can install GNU Coreutils.

Yeah, you're right. I was thinking of a combination of Rust's debug mode, the fact it won't compile if it detects a static under/overflow, and Swift's default producing a runtime error on integer under/overflow. Corrected; I apologize.

Oh my God, AI has made spamming so easy, even someone as stupid as you can give it a go.

Nobody can visit that link because it's on your LAN. I learned how NATs worked when I was like 12 or something...

Omg dude, you can still use coreutils on Ubuntu:

sudo apt-get remove coreutils-from-uutils --allow-remove-essential

You can also opt out before you upgrade:

/etc/apt/preferences.d/uutils:

Package: coreutils-from-uutils
Pin: release a=*
Pin-Priority: -10

NO ONE IS FORCING YOU TO SWITCH!

RCE from integer overflow (not possible by default in Rust

It is possible. Rust will check for overflow and panic in debug builds, but will silently wrap integers in release builds.

OpenBSD makes pointless seemingly every exploit listed in this article (correct me if I am wrong). The lead is anti-rust.

Cryopid seems promising from that, thanks!

oh wow, an actual answer without the classic "this is an X / Y problem" snark!

Re-redirect looks like what I want, thank you kind stranger!

UNLESS I'M AN UBUNTU USER