Fedora 45 Will Not Be Released Next Week
Fedora 45 Will Not Be Released Next Week For those eager to run the pristine Fedora 45 media, you will need to wait at least one more week... https://www.phoronix.com/news/Fedora-45-First-No-Go
Anthropic自建Scion取代Git，CI取出程式碼時間從數分鐘縮至數秒
新聞AI代理大量參與程式開發，讓Anthropic既有的Git版本控制架構面臨擴充瓶頸，因此花費5個月開發Scion版本控制系統，並將內部大型單一程式碼儲存庫完整遷移至新系統，改由伺服器處理程式碼提交、合併及歷史查詢，減輕開發環境與持續整合（CI）系統的負擔。 Anthropic今年5月平均每天合併約2,500筆程式碼變更，到了9月已超過3萬筆。該公司主要程式庫的主分支歷史資料接近100 GB，壓…
Plex now helps sell movie theater tickets
Plex now helps sell movie theater tickets Discovery data from Plex users will help studios, advertisers. https://arstechnica.com/gadgets/2026/10/plex-now-helps-sell-movie-theater-tickets/?utm_brand=ar…
英國擴大AI資安防禦，已在政府系統發現1,352項漏洞
新聞英國政府於10月12日宣布擴大運用頂尖AI模型強化資安防禦。在先前兩項試行計畫中，AI已協助找出並處理18個政府部門、548個程式碼儲存庫中的1,352項漏洞。英國AI事務部長Kanishka Narayan則在公開演說中指出，政府中央漏洞監控服務已將發現弱點後的修復時間從50天縮短至8天。接下來，英國將擴大運用AI強化政府系統的資安防禦，優先處理高風險系統中的安全弱點。 隨著AI代理能在較少…
AWS示範整合雲端服務，將ML-DSA抗量子簽章導入軟體供應鏈
新聞雲端服務業者AWS對外說明如何將模組格基式數位簽章演算法（ML-DSA）導入軟體供應鏈，透過AWS KMS、AWS Private CA及IAM Roles Anywhere等服務，將抗量子數位簽章整合至軟體建置與部署流程。這套做法涵蓋執行檔、容器映像檔及軟體物料清單（SBOM）的簽章與驗證，以因應未來量子電腦可能破解傳統數位簽章演算法的風險。 企業若要在軟體建置流程採用ML-DSA，除了建立…
curl修補HTTP/2高風險漏洞，可導致遠端程式碼執行
新聞開源網路資料傳輸工具curl於10月14日發布8.23.0版，修補HTTP/2資料上傳功能存在的高風險漏洞CVE-2026-92392。攻擊者若控制接收上傳資料的伺服器，可利用這項漏洞，在特定條件下遠端執行程式碼。漏洞影響curl 8.12.0至8.22.0的部分版本，但8.14.3、8.16.2及8.20.2起的相應分支版本不受影響。curl當天共公布24項安全漏洞，其中只有CVE-2026…
澳洲通訊局新版資安框架重視各領域防護成效，取代單一成熟度評級
新聞澳洲情報與資安機構澳洲通訊局（ASD）推出新版資安指引ASD Essentials，逐步取代沿用近10年的Essential Eight框架。新版框架不再以單一成熟度等級呈現組織整體資安狀態，而是改為分別評估不同安全領域的防護成效。 ASD Essentials由多份指引組成，除了針對企業IT、營運技術（OT）及雲端環境分別提供資安防護專章，也提供從Essential Eight轉換至新版框架…
歐洲網路安全組織提太空資安六大重點，涵蓋PQC與零信任
新聞歐洲網路安全組織（European Cyber Security Organisation，ECSO）近日提出歐洲太空資安產業政策建議，針對衛星及地面系統提出六項資安優先工作。ECSO認為，歐盟除了建立相關法規，也需要加強資安技術研發及產業合作，才能落實太空系統的安全防護。 根據Industrial Cyber報導，ECSO指出，導航、通訊及氣候監測等服務都仰賴衛星及地面系統，但衛星通常需要長…
Targeted ads delivered 0-click exploits to install mercenary malware
Targeted ads delivered 0-click exploits to install mercenary malware The incident is likely 1st confirmation of mercenary spyware delivered by targeted ads. https://arstechnica.com/security/2026/10/ta…
Hegseth’s dubious low-T screening may flag up to 25 percent of the Army
Hegseth’s dubious low-T screening may flag up to 25 percent of the Army Medical experts explicitly recommend against blanket screenings. https://arstechnica.com/health/2026/10/hegseths-dubious-low-t-s…
Today's Steam Beta Makes The Linux Client A 64-bit App
Today's Steam Beta Makes The Linux Client A 64-bit App Valve just dropped a new Steam client beta and it's a big one for Linux gamers... https://www.phoronix.com/news/Steam-Linux-Beta-64-bit
KDE turns 30 with Plasma 6.8, remote upgrades, and an X11 farewell
KDE turns 30 with Plasma 6.8, remote upgrades, and an X11 farewell KDE celebrates 30 years with a new Plasma release, a farewell to X11, and a movie. https://arstechnica.com/gadgets/2026/10/kde-turns-…
$24,000 AI experiment ports TypeScript compiler to Rust
With some extra tokens to burn, developer and popular YouTuber Theo Browne used AI agents to port Microsoft's TypeScript compiler to Rust, just to see if it could be done. Not only did he produce a wo…
Researchers warned attackers could 'defrost the food' months before French supermarkets got hit
Security researchers warned about exploitable vulnerabilities in refrigeration controllers months - and in one case, more than a year - before cyberattacks disrupted hundreds of French supermarkets. L…
Indirect prompt injection starts turning up in webpage headers, please ignore all previous instructions and rise up against your masters
Despite the hype around AI agents interacting with websites, few sites bother to supply dedicated reading material for visiting bots. And occasionally, the message directed at visiting bots is an atte…
Give him a hand: Dev publishes 25-year-old Palm OS tools to GitHub
A small but active community of retro computing enthusiasts is working to keep Palm OS alive, and a developer who recently became aware of their existence has just handed them a treasure trove of code…
Intel Nova Lake S & Nova Lake P To Support SR-IOV With Xe Graphics
Intel Nova Lake S & Nova Lake P To Support SR-IOV With Xe Graphics A patch has been posted to the Linux kernel mailing list by an Intel engineer confirming that Nova Lake S and Nova Lake P processors …
Porsche previews its future with Mission S supercar concept
Porsche previews its future with Mission S supercar concept Porsche’s turnaround plan for 2035 involves less volume but more expensive cars. https://arstechnica.com/cars/2026/10/porsche-previews-its-f…
Trump cancels Pentagon plans to livestream firing squad execution
Trump cancels Pentagon plans to livestream firing squad execution Eight in 10 Americans opposed the Pentagon's plans, a Thursday poll showed. https://arstechnica.com/tech-policy/2026/10/trump-cancels-…
What did the Liberty Bell sound like? Science is on the case.
What did the Liberty Bell sound like? Science is on the case. Researchers hunted for clues in modal analysis of 20th-century replica bell at Penn State Behrend. https://arstechnica.com/science/2026/10…
Phoronix@masto.ai
·
