Leaders at a growing number of universities across the country say they are looking for ways to cut costs and buy time, as questions swirl around President Trump's efforts to slash financial support for some schools. Education experts say the pullback of resources will not only hurt current and prospective students, staff and faculty, but could also harm the local economies of university towns and ultimately make the U.S. less competitive globally.

...

Many universities have said that the hiring pauses are temporary, and will be evaluated when they have more information about the status of federal support.

...

The Trump administration has threatened to pull federal funding from schools that don't eliminate diversity initiatives or adequately protect Jewish students from discrimination. It also moved to limit National Institutes of Health (NIH) funding for research universities.

And it's proposed eliminating the Department of Education, whose responsibilities include managing college financial aid and federal student loans. The department announced Tuesday that it is laying off nearly 50% of its workforce, but says it will continue to deliver programs protected by law.

Plans have been drafted to begin using more Rust-rewritten Linux system components within the Ubuntu 25.10 release due out later this year and ahead of next year's all important Ubuntu 26.04 LTS release. Among the Rust components being planned for use in Ubuntu 25.10 is the Rust Coreutils "uutils" software.

...

Cited as the motivation are performance benefits as well as added safety provided by the Rust programming language. Among the Rust components initially being evaluated are the uutils version of cureitls, findutils, and diffutils. The sudo-rs software as the Rust written sudo is also being evaluated.

More details on the Ubuntu Discourse: Carefully But Purposefully Oxidising Ubuntu

The Century Center, a centerpiece of downtown South Bend for nearly 50 years, is now under scrutiny as the city finalizes its draft Downtown 2045 plan.

...

One portion of the building may get demolished to allow for an expanded riverfront park, but this would also force out the South Bend Museum of Art.

Following arguments on the Linux kernel mailing list the past few days over some Linux kernel maintainers being against the notion of Rust code in the mainline Linux kernel and trying to avoid it and very passionate views over the Linux kernel development process, Asahi Linux lead developer Hector Martin has removed himself from being an upstream maintainer of the ARM Apple code.

While the Ubuntu desktop has been offered the newer GNOME Console as an alternative to GNOME Terminal, there's been a recent fondness around Ptyxis and apparently is becoming the recommended replacement to GNOME Terminal for the Ubuntu camp.

Ptyxis is the terminal emulator formerly known as GNOME Prompt and has an emphasis on performance and features while leveraging the VTE library. Ptyxis development is led by GNOME developer Christian Hergert.

Ptyxis began being offered on Ubuntu 24.10 but not by default. On current Ubuntu 25.04 daily builds GNOME Console is still there by default too, but there's an apparent growing fondness for Ptyxis.

This report summarizes insights from the inaugural 2024 Open Source Software Funding Survey, a collaboration between GitHub, the Linux Foundation, and researchers from Harvard University. The objective of the survey was to better understand how organizations fund, contribute to, and otherwise support open s ource software.

Survey Respondents 159 respondents to the survey collectively contribute $1.7 billion (2023 USD) in annual value to open source. 86% comes in the form of contribution labor by employees. Extrapolating survey to all organizations active in open source Using the survey responses on contribution, we estimate that organizations contribute $7.7 billion annually to OSS.

Bcachefs lead developer Kent Overstreet published a Patreon post this evening entitled "Trouble in the kernel" where he explained:

"TLDR: the future of bcachefs in the kernel is uncertain, and lots of things aren't looking good.

Linus has said he isn't accepting my 6.13 pull request, per "an open issue with the CoC board", and at this point I have no idea what's going on with the CoC board. I, for my part, have felt for quite some time that there are issues about our culture and the way we do work that need to be raised, and that hasn't been going anywhere - hence this post."

It appears that the source of this violation can be found in this Linux kernel mailing list thread.

Five local privilege escalation (LPE) vulnerabilities have been discovered in the needrestart utility used by Ubuntu Linux, which was introduced over 10 years ago in version 21.04.

The flaws were discovered by Qualys and are tracked as CVE-2024-48990, CVE-2024-48991, CVE-2024-48992, CVE-2024-10224, and CVE-2024-11003. They were introduced in needrestart version 0.8, released in April 2014, and fixed only yesterday, in version 3.8.

Needrestart is a utility commonly used on Linux, including on Ubuntu Server, to identify services that require a restart after package updates, ensuring that those services run the most up-to-date versions of shared libraries.

...

Apart from upgrading to version 3.8 or later, which includes patches for all the identified vulnerabilities, it is recommended to modify the needrestart.conf file to disable the interpreter scanning feature, which prevents the vulnerabilities from being exploited.

The first teaser for A Minecraft Movie released in September to some decidedly mixed reactions, particularly concerning the CGI and character design and especially Jason Momoa's hair. And yes, there were many ridiculous memes. We were inclined to give it a chance based on the casting of Momoa and Jack Black. Now the full trailer has dropped, and honestly, odd design choices aside—and they are indeed odd—it looks like a perfectly acceptable fun family film and not much more, albeit very light on actual plot.

YouTube Trailer: A Minecraft Movie | Official Trailer

The papers were found Monday morning in multiple South Bend areas including Erskine Park area. The bottom of the flyers claim they are from the Trinity White Knights of the Ku Klux Klan, a Kentucky based chapter of the KKK.

...

ABC57 received an email Monday afternoon that claimed to be the Trinity White Knights of the Ku Klux Klan. They said they were responsible for distributing thousands of the flyers across 11 Indiana cities Sunday night.

Those cities include Valparaiso, Michigan City, South Bend, Elkhart, Goshen, Plymouth, Warsaw, Rochester, Westfield, Carmel, and Fishers.

Where wide bridges carry Eddy and Sample streets over the St. Joseph River and Lincolnway, it looks and feels like an interstate exchange in the heart of the city. There’s a freeway-like cloverleaf with ramps and big green signs with arrows pointing to other places.

...

Worse than useless, Kain says the interchange divided neighborhoods, leading to continued racial segregation and redlining by mortgage lenders. It’s a scenario that played out across the nation when interstate highways were run through inner city neighborhoods.

The city is calling the area the Market District because of the nearby Farmers Market. With the help of research by Notre Dame architecture students, the city last year won a $2.4 million grant, and is adding $600,000 in city money, to hire a consultant. You’ll soon see their surveyors out taking photos, for a study of how streets in the area might be reconfigured if the ramps are removed.

...

The city invites the public to an informational meeting Tuesday at 6 p.m. at the Howard Park Event Center.

Yes, this nifty workflow wonder is finally able to automatically tile newly opened windows based on the currently active tiling layout (and as you may sick of me re-emphasising: you can switch between different layouts ad-hoc, and create and save your own).

Windows auto-tile to the best vacant slot in the layout. But what’s ‘best’? Tiling Shell developer Domenico Ferraro says this will be the ‘vacant tile nearest to the center of the screen’.

With the addition of automatic tiling you no longer need to tile windows manually.

I saw plenty of efforts that aim to create a Linux distribution for non-enthusiasts, for people who just want to use their computers, and not care about the details - A Desktop for All on the GNOME blog, most recently. While I commend the effort, my own experience is that these efforts are futile, and start off from a fundamentally wrong premise: that people are willing (let alone wanting) to manage their own operating systems.

...

My family is using Linux because that’s the system I can maintain for them. Apart from my Dad, they never installed Linux, and never will. They don’t install software, they don’t upgrade, they don’t change settings either. All of that is something I do for them. And to do so effectively, I need a distribution I am familiar with, one that is also flexible enough to fine-tune for every member of the family, because they prefer fundamentally different things!

...

The common pattern between all these three is that neither of them maintains their own systems. I do. As such, how beginner friendly the distribution is, is meaningless. The users of the system don’t care, they’ll never see those parts. They’ll have a preconfigured system maintained by someone else, and that’s exactly what they want. To make this work, I’m using distributions I am familiar with. For my parents, that’s Debian, because I was a Debian person when their systems were installed. For my Wife, it is NixOS, because I’m a NixOS person now. For the Twins, it will likely be NixOS too.

A new patch series posted today to the Linux kernel mailing list would block kernel modules/drivers from TUXEDO Computers from accessing GPL-only symbols in the kernel.

TUXEDO Computers maintains a set of kernel drivers currently out-of-tree for their various laptops for additional functionality around power profiles, keyboard backlight controls, WMI, sensor monitoring, the embedded controller, and other functionality. They have said they want to eventually mainline these drivers but in the name of allowing for rapid hardware support they maintain them out-of-tree and ship them with their Ubuntu-based TUXEDO OS and also have the driver sources available via GitLab.

The issue at hand though is that these kernel drivers marked as GPLv3+ and that conflicts with the upstream Linux kernel code licensed as GPLv2. There was a commit to change the driver license from GPLv3 to GPL(v2) but was reverted by TUXEDO Computers on the basis of "until the legal stuff is sorted out."

Update: TUXEDO Computers Relicenses Some Of Their Drivers To GPLv2

As of yesterday, TUXEDO Computers has now been able to re-license their driver consisting of fully in-house code from GPLv3 to GPLv2+. These are the TUXEDO Computers drivers where it's all written by TUXEDO employees and not having to worry about code from any third-party developers or other vendors.

The gxtp7380, ite_8291, ite_8291_lb, ite_8297, stk8321, tuxedo_compatibility_check, tuxedo_nb02_nvidia_power_ctrl, and tuxedo_tuxi drivers are the initial ones able to be moved to the GPLv2+ licensing for satisfying upstream Linux kernel developers. Moving the other drivers to GPLv2+ will take longer due to needing to check with the associated parties that contributed to those drivers.

With the recent release of Ubuntu 24.04, we at Snyk Security Labs thought it would be interesting to examine the latest version of this Linux distribution to see if we could find any interesting privilege escalation vulnerabilities.

...

During our research, we successfully identified a privilege escalation from the default user on a fresh Ubuntu Desktop installation to root. To achieve this, we chained one small bug in a privileged component together with a number of features, which all work as expected, to achieve arbitrary command execution as root.

This blog post will outline the journey of our research, discuss how we identified these vulnerabilities, and, we hope, show that you can keep it simple when it comes to exploitation and achieve the same results without needing a very complex (although extremely cool) kernel memory corruption vulnerability, for example.

2023 had been a slow year, so we skipped on our traditional annual update, but it is back this year. here’s a summary of everything that’s been happening since Nov 2022. Most of the progress these last two years have been around making chathistory more suitable for the real world, and reducing bandwidth usage for mobile clients.

In collaboration with ColorStack and CS4Good, we are holding a CSE course review for the upcoming Spring 2025 semester.

The Ubuntu Mainline Kernel PPA is great for quickly and easily fetching new upstream Linux kernel builds assembled for Ubuntu/Debian systems. It's a big time saver for grabbing the latest stable or daily development kernel on Ubuntu. It's also great for having them publicly and readily available -- one of the reasons I prefer it as well is for that transparency into the kernel builds and prefer using them so when a vendor or user asks about my kernel configuration or if I can supply the kernel used for testing, it's darn simple to just cite the Ubuntu Mainline Kernel PPA.

But it hasn't been producing any new kernel builds since the middle of September... All of the Linux 6.12 release candidates and daily builds have not been producing. Presumably due to a broken Kconfig change or something else failing from the Linux 6.12 merge window changes.

Similar to last year the Ubuntu Mainline Kernel PPA being broken for over a month. Frustrating that such a useful feature and one maintained by the Ubuntu Kernel Team can remain broken for weeks on end. It's been an annoyance on my end for a number of weeks, but at least last time when calling out the broken state for more than a month, it wound up being fixed shortly thereafter. Hopefully that happens again to restore this great feature of Ubuntu Linux particularly for hardware enthusiasts, kernel testers, etc.

Whether you just downloaded Firefox, or you’ve been with us since the beginning, you are a vital part of helping us make the internet a better place. Here's a sneak peak at what's coming next!