fidzu : computers

Aikido Security says more than 30 official @redhat-cloud-services npm packages were compromised with a credential-stealing worm called "Miasma," a variant resembling the open-sourced Mini Shai-Hulud supply-chain malware. "The packages were published via GitHub Actions OIDC, indicating the CI/CD pipeline was compromised rather than an npm token," the report says. "If you have installed any affected package versions since June 1, 2026, treat all CI secrets, cloud credentials, SSH keys, and npm tokens as compromised and rotate them immediately." From the report: Each compromised package declares a preinstall script in its package.json that executes node index.js automatically on every npm install, before any application code runs and before the developer has any indication something is wrong. The index.js file is 4.2 MB payload hidden behind multiple layers of obfuscation. As with previous Mini Shai-Hulud attacks, the payload performs a broad credential sweep across cloud providers, CI/CD environments, and developer tooling. On the CI side it targets GitHub Actions secrets including GITHUB_TOKEN and ACTIONS_RUNTIME_TOKEN. For cloud credentials it collects AWS access keys and session tokens, GCP application default credentials and service account key files, and Azure service principal credentials and managed identity tokens. It also sweeps for HashiCorp Vault tokens, Kubernetes service account tokens and kubeconfig files, npm and PyPI publish tokens, SSH private keys, Docker registry credentials, GPG keys, and any .env files it can find across the filesystem.

Read more of this story at Slashdot.

01 Jun 2026 5:00pm GMT

Dell has introduced a redesigned $699 XPS 13 aimed squarely at Apple's budget MacBook Neo, offering a premium aluminum design, touch display, backlit keyboard, Wi-Fi 7, 512GB of base storage, and various other configuration options. Dell's machine costs more than Apple's entry model but tries to justify the difference with lighter weight, better display specs, and upgrade paths Apple doesn't offer. "The XPS 13 begins at $699 -- students can purchase it for $599 -- while the MacBook Neo costs $599 and drops to $499 for education buyers," notes Bloomberg. From the report: Dell's product allows for more configuration, with up to 32GB of memory compared with the Neo's nonupgradeable 8GB of unified memory. Its display can also produce a wider spectrum of colors and supports refresh rates up to 120 hertz, while Apple reserves its best screens for the pricier MacBook Pro line. The inclusion of a backlit keyboard should allow for easier typing in dark conditions. Dell has also tossed in other nice-to-have upgrades over the Neo like more robust Wi-Fi 7 wireless networking. As for battery life, Dell is touting "up to 17 hours of streaming" versus a comparable 16 hours on the Neo. Still, the XPS comes with compromises of its own: Unlike the Neo, there's no built-in headphone jack, which means owners will need to rely on its quad-speaker audio system, use Bluetooth earbuds or plug a headphone adapter into one of the two USB-C ports. You can learn more via Dell.com.

Read more of this story at Slashdot.

01 Jun 2026 4:00pm GMT

An anonymous reader quotes a report from Ars Technica: Authorities in the Netherlands said they dismantled a botnet that comprised more than 17 million devices and were managed by 200 servers in a joint operation by the police and the National Cyber Security Center. The action, announced Thursday, came about after a security researcher reported the sprawling network to authorities. The host infrastructure was located in the Netherlands. "The police then seized several botnet servers from a hosting provider for investigation," the NCSC said. "The botnet was taken offline by the provider because it was used for criminal purposes." According to a report Thursday by the NL Times, the botnet was linked to ASOCKS, a Russia-based company that provides residential proxy services. These services cater to people and organizations who want to obscure their locations or identities by proxying their Internet traffic through third-party devices. Proxy services are often used for illicit or unethical purposes such as performing DDoS attacks, running botnet command-and-control servers, operating phishing operations, and scraping website content. [...] It's unclear how the 17 million devices controlled by the botnet taken down by the Dutch police came to be that way.

Read more of this story at Slashdot.

01 Jun 2026 3:00pm GMT

It was an open secret that NVIDIA was working on an ARM-based system-on-a-chip for laptops and desktops, and today at Computex 2026 the company unveiled what it's been working on. It's surely a beast, and unsurprisingly, it's lathered in "AI" buzzwords. At full strength, this chip offers up to 20 Arm CPU cores, a Blackwell GPU with 6,144 CUDA cores, 128GB of LPDDR5X RAM, and up to 300 GB/s of memory bandwidth. That powerful CPU and GPU, connected over NVLink C2C, and the large memory pool give AI agents and 120-billion-parameter models plenty of power and space for long-running tasks with context lengths stretching to a million tokens, according to Nvidia. RTX Spark will power high-end laptops from partners including Dell, HP, Lenovo, Asus, and MSI - and notably, a new Surface Ultra laptop from Microsoft. Nvidia says it's worked with those partners to create "the most extraordinary laptops ever built," with tandem OLED G-Sync displays, "all-day" battery life, premium aluminum chassis with large glass touchpads. ↫ Jeffrey Kampman at Tom's Hardware I couldn't care less about the "AI" nonsense, but the chip itself seems like an absolute monster for laptops and mini PCs. With that much power and a solid NVIDIA GPU, these are also great for gaming and creative tasks, making them feel like the first true competition in the PC space to Apple's M series of chips. They're planned for late 2026, and tellingly, there's no pricing information just yet.

01 Jun 2026 1:33pm GMT

My favorite metonymic technology term is "cron job": even though cron may not literally be the daemon that executes actions on a schedule, we apply the term to anything that walks like a cron and quacks like a cron. As Patrick McKenzie likes to point out, cron jobs are one of the most eminently useful computing primitives. They offer utility that's almost immediately obvious for plenty of use cases that almost everybody has: do this every day; do that once a month. And yet. You probably shouldn't use literal cron (or its more modern cousins) for scheduled tasks! In 2026 there are more modern options available, and my favorite is the humble systemd timer. I love systemd timers. If you don't love them yet, maybe I can show you the reasons why you should love them, too. ↫ Tyler Langlois These are just timers. They are not consuming your computer or taking over the open source world. They do not phone home to Red Hat. These are just timers.

01 Jun 2026 1:16pm GMT

Good morning from JetBrains Berlin office!

01 Jun 2026 12:00am GMT

Almost exactly 18 months after 3.19, the MorphOS team has released MorphOS 3.20. This is a major release, as it adds support for the upcoming Mirari PowerPC motherboards, which we talked about when that project was first announced. I'm quite excited about the Mirari, and can't wait to have one, and MorphOS is the one operating system I really want to run it on. I have an almost mint condition PowerBook G4 17″ specifically for MorphOS, but the hardware is simply too outdated to keep up with modern demands, which is sad, because MorphOS can clearly keep up if it had modern hardware. So, MorphOS 3.20 adds support for the Mirari platform and its various components, like its thermal management solution, networking, and so on. MorphOS 3.20 also expands the number of support Radeon graphics cards, improved support for various HDMI and DisplayPort ports, better support for multiple monitors, and overall better graphics performance in general. There's also SFS2 support throughout the operating system so MorphOS now supports file sizes of up to 4GB and partition sizes of up to 2TB. The Ambient UI has also seen extensive work to improve performance and stability, as well as add a bunch of new features. Several new applications and utilities are included in MorphOS 3.20, such as DriveImager, MirrorBackup, SMARTDoctor, OFHTTP, OFHash, OFDNS, Replace, and Automator for scripting and controlling MUI applications. Iris has been updated to version 1.53 and now includes the new Contacts companion application for CalDAV-based address books. FlowStudio received extensive improvements for project management, printing, Markdown support, and development workflows. Networking and connectivity have also been improved with updates to OpenSSH 10.3p1, TLS 1.3 support in RDesktop, expanded SMB2 filesystem improvements, and improved USB, audio and multimedia subsystem stability. Numerous system libraries and frameworks including MUI, ixemul, Cairo, Harfbuzz, Freetype, OpenSSL4, and ObjFWRT have been updated or significantly modernized. ↫ MorphOS 3.20 release announcement Of course, there's also the long list of smaller changes, bugfixes, and performance improvements. MorphOS has wide support for Apple PowerPC hardware, which is probably your best bet for using the operating system for now, at least until the Mirari becomes available for purchase.

31 May 2026 9:21pm GMT

Is it a hidden gem, a cult classic, or hopelessly dumb? We vote "all of the above."

31 May 2026 11:15am GMT

As temperatures rise, some creatures pick fights while others struggle to learn.

31 May 2026 10:00am GMT

A new book looks into the long history of people who have opposed vaccines.

30 May 2026 11:00am GMT

Just trying to answer one simple question: What if the terminal was 3D?

11 May 2026 12:00am GMT

Break the pattern today or the loop will repeat tomorrow.

18 Apr 2026 12:00am GMT