Posts
548
Following
36
Followers
2342

You will be sorely missed Dan Williams, you were a good engineer and a great person, I will miss seeing you at our conferences every year. You were the best of us and you leave quite the hole.

0
6
2

Jonathan Corbet

GrapheneOS has a "duress code" feature that will wipe the device if it is used in an attempt to unlock it. A potentially useful feature, but the US is now trying to prosecute somebody for having given the duress code to an officer demanding the unlocking of his phone.

https://www.theguardian.com/us-news/2026/jul/23/cop-city-protester-phone
26
284
232

Jonathan Corbet

Years ago, I complained loudly when the Fedora project proclaimed that its mailing lists were dead and all discussions would move to its forum silo. So, needless to say, I applaud the decision (or at least the proposed decision) to begin moving back toward the mailing lists:

https://lwn.net/ml/all/CAJqbrbdZ9R47=otYx2h5YmCFcsKzA7xHVWqWAZ2qT4503gLZCg@mail.gmail.com
2
6
19

Jonathan Corbet

"The home appliance giant LG Electronics USA said this week it plans to suspend any apps built for its smart TVs that turn one’s television into an always-on residential proxy node. The move comes less than a month after researchers found that more than 42 percent of games and other apps available for download on LG’s webOS store allow unknown third-parties to route their Internet traffic through a user’s TV."

— Krebs https://krebsonsecurity.com/2026/07/lg-to-ban-residential-proxies-from-smart-tv-apps/

Better late than never, I guess.
1
7
20

Haha. CCS2 electrical vehicle chargers communicate by running powerline commnication (yes, a full IP networking stack) over the wires plugged in your vehicle. And yes, some charging stations have a ssh listening, with default credentials (root/root).

https://www.saiflow.com/blog/the-hidden-ccs2-attack-surface-on-ev-chargers

(thanks @faheus for pointing me to it)

4
23
1

Jonathan Corbet

I've been spending rather too much of my time reading the depressing threads on LLM use in the kernel. But I thought that this contribution from Lyude Paul worth the investment.

"For many people who need their jobs, guidelines around acceptable use of these tools beyond "a person needs to own the the code" may end up being the only thing allowing employees to be responsible with their contributions without repercussion from employers."

https://lwn.net/ml/all/3a5d891b536588e8e4fc84d60a5c8af72091d852.camel@redhat.com
4
55
94

Jonathan Corbet

I'm not normally one for posting videos, but I stumbled across this recording of Neil Young playing Cowgirl in the Sand and no work got done for a solid 20 minutes.

https://www.youtube.com/watch?v=5CBCnaHDpwQ
2
1
12

Jonathan Corbet

The dog days of summer
3
2
28

Jonathan Corbet

"More generally, liability concerns could mean that many current use cases for agents won’t be commercially viable. Companies may not be able to profitably operate AI lawyers, doctors and media influencers if they are held responsible for what they say and do.

We’re OK with this outcome. There’s nothing in the law that requires us to accommodate AI systems if they are fundamentally untrustworthy, just as we don’t need to accommodate untrustworthy human systems."

— Bruce Schneier https://www.schneier.com/blog/archives/2026/06/ai-and-liability.html
0
36
53

Jonathan Corbet

The @lwn web site is currently under the most intense scraper attack I have seen yet. 1.3M unique IP addresses within the last couple of hours, and it's not done yet. The work we have done on defenses appears to be paying off, though; the server is holding up reasonably well — so far.

...just in case anybody wonders why I have a rather dim view of the whole AI industry...
16
408
555

Jonathan Corbet

So the Linux Foundation and a wide range of companies have launched "Akrites" to deal with the vulnerability deluge:

https://akrites.org/letter/

I do wonder though ... "confidentiality" is at the core of this whole thing - keeping vulnerabilities secret until fixes are deployed. When you have LLMs discovering the vulnerabilities, though, they are not secret. Trying to treat them as if they were might well just slow down the process of getting fixes out and make things worse. Embargoes and confidentiality seem like an attempt to perpetuate the last decade's approaches beyond their time.
4
7
13

Jonathan Corbet

Edited 1 month ago
An offer of "free" LLM use made to developers in the GCC and glibc communities, which are full of developers who feel strongly about free software, was never going to be received with universal acclaim...

https://lwn.net/ml/all/aac20a98-a70e-4268-a758-316ac0407a16@redhat.com

It will be an interesting day when, after the inevitable rugpull happens, these tools cease being available for use without charge. Hopefully we will still remember how to write and review code.
6
20
42

And so it begin's....

"You are not a person or entity that is: (a) located in, organized under the laws of, or ordinarily resident in any country or territory that is the target of comprehensive U.S. sanctions; (b) a prohibited or restricted party under U.S. or other applicable sanctions and export control laws and regulations; or (c)...."

https://letsencrypt.org/documents/LE-SA-v1.7-June-04-2026-diff.pdf

1
2
0

Jonathan Corbet

I've been slowly working my way through _Behave_ by Robert M. Sapolsky, a fascinating book on how our brains work. Just hit this quote:

"This recalls a remarkable finding — stick subjects in a room with a smelly garbage can, and they become more socially conservative. If your insula is gagging from the smell of dead fish, you're more likely to decide that a social practice of an Other that is merely different is, instead, just plain wrong."

Life in this part of the world in the last decade has been like having several reeking dumpsters in the room. Perhaps this is not accidental.
3
12
22
Edited 1 month ago

Leave Tridge alone. Seriously. Just mind your own business. Various people stirring up drama, with a cohort of seemingly terrible followers. Fork it and do the work yourself, if you can think you can do better. If not, STFU, and let the man cook however he wants.

0
11
2

Jonathan Corbet

US District Court issues an injunction preventing the government from tearing apart the National Center for Atmospheric Research — for now, at least.

https://www.courtlistener.com/docket/72496922/47/university-corporation-for-atmospheric-research-v-national-science/

"The Court finds that UCAR is likely to succeed on its claim that NSF’s decision to divest it of stewardship over the NWSC was “arbitrary, capricious, an abuse of discretion, or otherwise not in accordance with law.”
1
8
15

Jonathan Corbet

So, seemingly, somebody's Fedora and proprietary-forge credentials were compromised and used by some sort of LLM-driven bot to take over a lot of Fedora bugs:

https://lwn.net/ml/all/bf38c0fd4537c2908a84b4a4b1fcec8083925918.camel@fedoraproject.org

This person is now claiming to have regained access to the accounts, but it seems that not everybody is buying it.

What a world we have made for ourselves...
4
49
52

What the US Would Lose If It Eliminates the National Center for Atmospheric Research

“I think there's a great loss for the wrong reasons. There's no good reason for dismantling this or tearing it down,” a former NASA chief scientist says

https://insideclimatenews.org/news/16052026/dismantling-the-national-center-for-atmospheric-research/

0
2
0

Jonathan Corbet

Edited 2 months ago
Stuck watching my daughter's cats for a bit... There are worse fates.
4
4
27

Jonathan Corbet

So it seems I got talked into doing a "live maintainer session" with the Linux Foundation on June 2:

https://www.linuxfoundation.org/webinars/my-life-as-a-linux-kernel-developer-and-maintainer-with-jonathan-corbet?hsLang=en

I will doubtless have all kinds of witty things to say ... mark your calendars ...
1
9
20
Show older