Do Son An EU open-source Android age verification app is sparking controversy due to its reliance on Google Play Integrity API, raising concerns over digital sovereignty and excluding users with custom ROMs.
open-source
vivo launches BlueOS, a new open-source OS kernel written in Rust, emphasizing security, minimalism, and broad support for Arm and RISC-V architectures in various terminal devices.
Mozilla will cease all China-based Firefox operations through Beijing Mozilla Online by Sep 29, 2025, but the browser will remain accessible and updated in mainland China.
Four open-source packages on npm and PyPI (56k+ downloads) are secretly deploying sophisticated spyware, performing webcam surveillance, keylogging, and credential theft.
Proton introduces Lumo AI Assistant, an end-to-end encrypted AI tool that guarantees no user data is used for training, offers a "Ghost Mode," and runs on open-source models in Europe.
NVIDIA announces CUDA support for RISC-V processors, expanding its AI and GPU acceleration technology to a more diverse ecosystem and strengthening its position in emerging markets.
Intel has officially discontinued Clear Linux OS, its high-performance distribution. This move, part of broader cost-cutting, ends a decade of innovation and requires users to migrate immediately.
Debian 13 "Trixie" is entering full freeze on July 27 and launching August 9, marking the first official release with RISC-V architecture support.
Two new medium-severity vulnerabilities (CVE-2025-53816, -53817) in 7-Zip versions prior to 25.0.0 risk memory corruption and denial of service. Update immediately.
DuckDuckGo introduces a new feature allowing users to filter AI-generated images from search results, leveraging open-source blocklists to combat misleading content.
LibreOffice claims Microsoft uses overly complex OOXML file formats to intentionally lock users into its ecosystem, hindering migration and interoperability with open-source alternatives.
PyPI has banned inbox.ru registrations after a large-scale spam campaign created over 1,500 fake projects, exploiting name confusion and impersonation.
Socket researchers uncovered widespread "protestware" in 28+ npm packages, silently disabling mouse interactions and playing the Ukrainian anthem for Russian-language users.
The cURL project's bug bounty program is overwhelmed by AI-generated, fraudulent vulnerability submissions, leading the lead developer to consider its discontinuation.
PHP is proposing a shift to the 3-Clause BSD License for PHP 9.0, aiming to resolve long-standing compatibility issues and streamline its open-source framework.
A flaw (CVE-2025-53101) in ImageMagick allows stack buffer overflows via filename templates, risking memory corruption and remote code execution. Patch now!
A flaw (CVE-2025-43856) in Immich allows account hijacking via a broken OAuth2 implementation (missing state parameter check). Update to v1.132.0 immediately!
The Free Software Foundation reports ongoing DDoS attacks since Aug 2024, with much traffic from AI company crawlers. Its small team is overwhelmed by the relentless web scraping.
Fedora Linux has withdrawn its proposal to drop 32-bit support for version 44, delaying the end of 32-bit editions due to community backlash and concerns for Linux gaming.
Linux Kernel 6.16-rc4 is out, focusing on filesystem fixes (bcachefs, SMB, Btrfs) and driver improvements. Final release expected in ~1 month, with Nvidia Blackwell/Hopper GPU support.
Apple has launched the Swift on Android Workgroup to bring formal Swift support to Android, aiming for seamless cross-platform app development and enhanced tooling.
Google unveils Gemma 3n, a groundbreaking open-source, on-device multimodal AI model. It brings high-end performance to mobile devices via MatFormer architecture and memory optimizations.