Klinge FPGA Computer Targets Secure, Headless Linux Deployments

Klinge is a compact FPGA-based headless computer designed by Lone Dynamics Corporation. It targets secure networking and long-term Linux applications, and can be used as a blade server in modular enclosures or standalone setups. Klinge uses the Lattice ECP5 FPGA (LFE5U-25F), offering 24K LUTs when compiled with open-source tools. The board includes 512MB of DDR3L […]

[$] LWN.net Weekly Edition for May 29, 2025

Inside this week’s LWN.net Weekly Edition:

  • Front: Glibc security; How we lost the Internet; Encrypted DNS; 6.15 Development statistics; Filesystem stress-testing; BPF verifier; Network access from BPF; OSPM 2025.
  • Briefs: AlmaLinux 10.0; FESCo decision overturned; NixOS 25.05; Pocket, Launchpad retired; Quotes; …
  • Announcements: Newsletters, conferences, security updates, patches, and more.

Data Broker Giant LexisNexis Says Breach Exposed Personal Information of Over 364,000 People

An anonymous reader quotes a report from TechCrunch: LexisNexis Risk Solutions, a data broker that collects and uses consumers’ personal data to help its paying corporate customers detect possible risk and fraud, has disclosed a data breach affecting more than 364,000 people. The company said in a filing with Maine’s attorney general that the breach, dating back to December 25, 2024, allowed a hacker to obtain consumers’ sensitive personal data from a third-party platform used by the company for software development.

Jennifer Richman, a spokesperson for LexisNexis, told TechCrunch that an unknown hacker accessed the company’s GitHub account. The stolen data varies, but includes names, dates of birth, phone numbers, postal and email addresses, Social Security numbers, and driver license numbers. It’s not immediately clear what circumstances led to the breach. Richman said LexisNexis received a report on April 1, 2025 “from an unknown third party claiming to have accessed certain information.” The company would not say if it had received a ransom demand from the hacker.


Read more of this story at Slashdot.

China extends its reach into the Solar System with launch of asteroid mission

A Chinese spacecraft built to collect specimens from an unexplored asteroid and return them to Earth successfully launched Wednesday from a military-run spaceport in the country’s mountainous interior.

Liftoff aboard a Long March 3B rocket at 1:31 pm EDT (17:31 UTC) from the Xichang launch base kicked off the second mission in a series of Chinese probes to explore the Solar System. This mission, designated Tianwen-2, follows the Tianwen-1 mission, which became the first Chinese spacecraft to land on Mars in 2021.

Chinese officials confirmed the 2.1-metric ton Tianwen-2 spacecraft unfurled its fan-shaped solar arrays shortly after launch, marking an auspicious start to a decade-long tour of the Solar System.

Read full article

Comments

Microsoft Is Opening Windows Update To Third-Party Apps

Microsoft is previewing a new Windows Update orchestration platform that lets third-party apps schedule and manage updates alongside system updates, “aiming to centralize update scheduling across Windows 11 devices,” reports The Register. From the report: On Tuesday, Redmond announced it’s allowing a select group of developers and product teams to hook into the Windows 11 update framework. The system doesn’t push updates itself but allows apps to register their own update logic via WinRT APIs and PowerShell, enabling centralized scheduling, logging, and policy enforcement. “Updates across the Windows ecosystem can feel like a fragmented experience,” wrote Angie Chen, a product manager at the Borg, in a blog post. “To solve this, we’re building a vision for a unified, intelligent update orchestration platform capable of supporting any update (apps, drivers, etc.) to be orchestrated alongside Windows updates.”

As with other Windows updates, the end user or admin will be able to benefit from intelligent scheduling, with updates deferred based on user activity, system performance, AC power status, and other environmental factors. For example, updates may install when the device is idle or plugged in, to minimize disruption. All update actions will be logged and surfaced through a unified diagnostic system, helping streamline troubleshooting. Microsoft says the platform will support MSIX/APPX apps, as well as Win32 apps that include custom installation logic, provided developers integrate with the offered Windows Runtime (WinRT) APIs and PowerShell commands. At the moment, the orchestration platform is available only as a private preview. Developers must contact unifiedorchestrator@service.microsoft.com to request access. Redmond is taking a cautious approach, given the risk of update conflicts, but may broaden availability depending on how the preview performs.

Meanwhile, Windows Backup for Organizations, first unveiled at Microsoft Ignite in November 2024, has entered limited public preview. Redmond touts the service as a way to back up Windows 10 and 11 devices and restore them with the same settings in place. It’s saying it’ll be a big help in migrating systems to the more recent operating systems after Windows 10 goes end of life in October. “With Windows Backup for Organizations, get your users up and running as quickly as possible with their familiar Windows settings already in place,” Redmond wrote in a blog post on Tuesday. “It doesn’t matter if they’re experiencing a device reimage or reset.”


Read more of this story at Slashdot.

EA Cancels Black Panther Game, Closes Cliffhanger Games

Electronic Arts has canceled its in-development Black Panther game and shut down Cliffhanger Games, marking its third round of layoffs this year. IGN reports: In an email sent to staff from EA Entertainment president Laura Miele, Miele said that these changes, alongside other recent cancellations and layoffs, are being done to “sharpen our focus and put our creative energy behind the most significant growth opportunities.” In addition to closing Cliffhanger and canceling Black Panther, EA is also laying off some individuals on both its mobile and central teams. […] As with past rounds of layoffs, EA is endeavoring to place affected individuals in other roles across the company. […]

To that end, Miele’s email continues, the company is focusing on a small handful of franchises going forward: Battlefield, The Sims, Skate, and Apex Legends. Miele also reassures EA will continue to invest in its Iron Man game at Motive and the third Star Wars: Jedi game, as well as it maintain its mobile business despite today’s cuts, while Bioware works on the next Mass Effect. Additionally, last year, CEO Andrew Wilson announced the company would be “moving away from development of future licensed IP that we do not believe will be successful in our changing industry.” The email doesn’t mention EA Sports, but this is due to Miele running EA Entertainment, while EA Sports is a separate division. IGN understands that the sports division is unaffected by these changes for now.

Notably, Marvel and EA’s agreement for Black Panther was part of a three-game deal that included Iron Man and a third, unannounced title. IGN understands this partnership will continue, with Motive Studios leading future Marvel titles. EA provided the following statement regarding the deal with Marvel to IGN, attributed to Miele: “Our partnership with Marvel remains strong and our multi-title, long-term collaboration continues.”


Read more of this story at Slashdot.

Discord’s New Currency Pays Users To Interact With Ads

Discord is testing “Discord Orbs,” a new in-app currency that rewards users for engaging with interactive ads and promotional Quests. The Verge reports: In addition to spending Orbs on regular items on the Discord Shop, users can exchange the digital tokens for Orb exclusives like special badges or 3-day passes to try out Discord’s subscription service, Discord Nitro. Discord says Orbs are rolling out globally to a “small number” of its users to start before a wider rollout. If you’re part of the beta test for Orbs, you will get a notification like the one below.

Before this, publishers or brands that offered Quests had to provide their own rewards — things like avatar decorations or in-game bonuses. They can still do that if they want, Discord spokesperson Bradley Sheets tells The Verge in an email; awarding Orbs is simply an alternative option.


Read more of this story at Slashdot.

QuickDraw Add-On Weights Can Make Your Dumbbells Heavier, But They Scare Me

We may earn a commission from links on this page.

Purchasing a full set of individual dumbbell pairs between five and 60 pounds can cost well over $1,500, not to mention how much space you’d have to dedicate to storing them. That’s why I’m a huge fan of adjustable dumbbells like the REP QuickDraws or Nüobells, which I reviewed here and here, respectively.

If you know you want to be able to up to 60 pounds at five-pound increments, effectively combining 30 weights into one compact set, then adjustables like the REP QuickDraws are how you can save significant money and space in your home gym equipment setup.

But let’s say your strength progresses beyond your adjustable dumbbells’ capacity. First of all: Nice work. Secondly: What do you do now?

I’ve seen users on Reddit directly asking “what’s stopping me from adding more plates to keep going heavier?” Adding extra weight plates seems like a logical solution, as opposed to spending all that money on an entirely new set for just a few pounds beyond the recommended capacity.

So, let’s take a look at what is stopping you—and what’s not. Here’s what you should know about using add-on weights to your adjustable dumbbells, from what is officially considered unsafe to why it gets impractical even aside from that.

How to add weight to your adjustable dumbbells

First off, not all adjustable dumbbells allow for this type of modification. Selector pin systems (like PowerBlocks) generally don’t allow for unofficial weight additions due to their enclosed design. Dial systems (like my favorite, the Nüobells) have security features specifically preventing modifications outside the cradle. Then you have spin-lock dumbbells, like the QuickDraws, which allow for customization and additional weight outside the cradle. For this reason, I’ll be speaking to the REP QuickDraws specifically, as opposed to Nüobells or Powerblocks.

Still, adding weight beyond the manufacturer’s specifications will almost certainly void your warranty. REP Fitness designed these dumbbells for specific weight ranges and cannot guarantee safety beyond those limits. I spoke with a REP representative (REP-resentative?) who informed me, “internal testing was not conducted beyond the 60 pound maximum, so REP cannot guarantee the safety of additional weight beyond that.”

Outside of your warranty, there are safety concerns. The handles, locking mechanisms, and materials are engineered for specific maximum loads. Exceeding these limits risks equipment failure and potential injury. Even if the dumbbells can technically handle the additional plates, the result might be bulky and awkward, affecting your form and increasing injury risk.

All that being said, it still is entirely feasible to bend the rules and take your 60-pound dumbbells up to 70 pounds. Assuming you play it safe and only add a few plates to each side, here’s what you should know:

  1. Only add compatible plates: The QuickDraw system uses standard plate dimensions that can be supplemented with additional compatible plates.

  2. Manual addition required: You’ll need to add these plates manually outside the cradle system, as the selection mechanism only works within the advertised weight range. This pretty much negates the whole “quick draw” appeal.

  3. Secure them properly: Ensure the additional plates are secured with the locking mechanism to prevent dangerous slippage during exercises.

  4. Manual tracking required: The dial indicator becomes inaccurate once you exceed the designed range. You’ll need to manually calculate and track the added weight.

Can you (and should you) add more weight to REP QuickDraw Dumbbells?

The short answer: Yes, technically you can add additional weight plates to REP QuickDraw dumbbells beyond their advertised maximum.

The long answer: Just because something is possible doesn’t mean you should make a habit of it. Sure, it’s fully above-board to order add-on weights in five-pound increments (which, side-note, I love so much more than a 10-pound jump). However, going beyond 60 pounds isn’t sanctioned by REP.

For this reason, I naturally had my boyfriend test my DIY super-QuickDraws creation. In the image below, you can see how I manually added weights outside of the cradle. With the spin-locks, you can keep adding weights outside the cradle without any resistance. Just slide the weights on and flip the lock switch.

I snapped a picture of it in its lopsided form, so you can see just how far outside the cradle the five-pound add-ons will go—and how precarious it starts to look right off the bat.

REP QuickDraw Dumbbells
Behold, my DIY super-QuickDraws creation.
Credit: Meredith Dietz

As we steadily increased the weight from 65, to 70, to 85 pounds, he noted growing concerns with how much the dumbbells could handle while still feeling safe. The all-steel design gives these guys a premium feel during standard use. But when you go beyond the sanctioned weight capacity, there’s a sense that the dumbbells wouldn’t bend or snag, but simply snap.

And again, you’ll need to manually keep track of how much weight you’re adding, since the individual plates are not labeled, and you’re exceeding the labels of the cradle. That mental math might not be a deterrent for you, but it’s something to note.

The bottom line

In most cases, the hassle and safety concerns outweigh the benefits. The primary advantage of the QuickDraws—quick, convenient weight changes—is totally undermined when manually adding plates.

Investing in a higher-capacity adjustable dumbbell set (like 80- to 90-pound models) or supplementing with specific heavier fixed dumbbells for certain exercises might be safer and more practical. For serious lifters approaching the upper limits of their adjustable dumbbells, I’d recommend supplementing with individual heavier dumbbells.

How to use Authselect to configure PAM in Fedora Linux

Authselect is a utility tool that manages PAM configurations using profiles. Starting with Fedora 36, Authselect became a hard requirement for configuring PAM. In this article, you will learn how to configure PAM using Authselect. Introduction. Unauthorized access is a critical risk factor in computer security. Cybercriminals engage in data theft, cyber-jacking, crypto-jacking, phishing, and […]

Mysterious Database of 184 Million Records Exposes Vast Array of Login Credentials

A security researcher has discovered an exposed database containing 184 million login credentials for major services including Apple, Facebook, and Google accounts, along with credentials linked to government agencies across 29 countries. Jeremiah Fowler found the 47-gigabyte trove in early May, but the database contained no identifying information about its owner or origins.

The records included plaintext passwords and usernames for accounts spanning Netflix, PayPal, Discord, and other major platforms. A sample analysis revealed 220 email addresses with government domains from countries including the United States, China, and Israel. Fowler told Wired he suspects the data was compiled by cybercriminals using infostealer malware. World Host Group, which hosted the database, shut down access after Fowler’s report and described it as content uploaded by a “fraudulent user.” The company said it would cooperate with law enforcement authorities.


Read more of this story at Slashdot.

David Lynch auction offers a glimpse of his personal and creative life

The innovative director David Lynch, who left indelible marks on film and television, passed away in January of this year. Now, Julien’s Auctions is hosting the sale of The David Lynch Collection. More than 450 of the late director’s possessions will be auctioned off online and at the company’s auction house in Gardena, CA. For devotees of Lynch’s work and worldview, just the experience of browsing the collection is pretty fascinating.

The auction showcases plenty of items closely related to his career in film, such as a personalized director’s chair, multiple cameras, lighting kits and memorabilia from his many iconic works. Other pieces more broadly reflect his passion for creativity, like audio equipment, musical instruments, painting supplies and a whole lot of literature and vinyl records. The collection also has furniture, like the couch from his 1997 classic Lost Highway, kitchen wares and many personal items from his life. You can even bid on his LaserDisc player and disc collection.

This article originally appeared on Engadget at https://www.engadget.com/entertainment/david-lynch-auction-offers-a-glimpse-of-his-personal-and-creative-life-223501136.html?src=rss

CD Projekt Red is Moving Forward With Cyberpunk 2

CD Projekt Red’s (CDPR) sequel to Cyberpunk 2077, which the studio is now calling Cyberpunk 2, has moved from a “conceptual phase” into preproduction, according to an earnings report released on Wednesday. The Verge: Cyberpunk 2 isn’t the official title, CDPR senior PR manager Ola Sondej tells The Verge. “‘Cyberpunk 2’ just means it’s another game in the Cyberpunk universe.” The game has had the codename of “Project Orion” since it was announced in 2022.

CDPR hasn’t shared many details about the game, but did describe it on Wednesday as “the next big game set in the Cyberpunk universe.” There are 96 developers working on the title as of April 30th, according to a slide deck. There’s no official release date, either, though on an investor call, joint chief executive officer Michal Nowakowski said that the company would deliver the game “in due time.”


Read more of this story at Slashdot.

Thousands of Asus routers are being hit with stealthy, persistent backdoors

Thousands of home and small office routers manufactured by Asus are being infected with a stealthy backdoor that can survive reboots and firmware updates in an attack by a nation-state or another well-resourced threat actor, researchers said.

The unknown attackers gain access to the devices by exploiting now-patched vulnerabilities, some of which have never been tracked through the internationally recognized CVE system. After gaining unauthorized administrative control of the devices, the threat actor installs a public encryption key for access to the device through SSH. From then on, anyone with the private key can automatically log in to the device with administrative system rights.

Durable control

“‍The attacker’s access survives both reboots and firmware updates, giving them durable control over affected devices,” researchers from security firm GreyNoise reported Wednesday. “The attacker maintains long-term access without dropping malware or leaving obvious traces by chaining authentication bypasses, exploiting a known vulnerability, and abusing legitimate configuration features.”

Read full article

Comments

X is ‘pausing’ encrypted DMs

X users can no longer send encrypted messages on the platform. The company said in an update that it’s “pausing” the feature “while we work on making some improvements.” Users will still be able to view previously-sent encrypted chats, but won’t be able to send any new ones.

Up to now, encrypted DMs have been available only on messages between verified users who are mutual or who have previously accepted DMs from each other. Screenshots of the feature from X’s help center labeled it as “early access.” (Notably, there were a number of other important caveats to X’s encryption, even when it was working, including the fact that encryption was never available for group chats, multimedia messages or metadata .)

It’s unclear when the feature will be available again or if the “pause” has anything to do with “XChat,” the company’s yet-to-be-launched chat platform. X employees have been dropping hints about XChat, which will reportedly feature encrypted direct messages, for some time. Screenshots from leakers suggest XChat could have additional security features like PIN-protected chats.

Officially, though, X hasn’t revealed much about XChat or what’s going on with the current version of encrypted DMs. X’s in-app inbox was one of the features that experienced numerous issues last week after a site-wide outage — possibly due to a fire at an Oregon facility used by the company — caused days of technical problems for the service. Updates on the company’s developer platform page indicate some of those issues have yet to be resolved.

X didn’t respond to a request for comment.

This article originally appeared on Engadget at https://www.engadget.com/social-media/x-is-pausing-encrypted-dms-215750222.html?src=rss

Healthy man goes camping—lands in ICU for 40 days with respiratory failure

An otherwise-healthy 52-year-old office worker showed up to a hospital emergency department in Buenos Aires with an unshakable fever he developed the week before. Besides the high temperature, he seemed fine. So, after testing negative for COVID-19, doctors sent him home with supportive care. But the fever didn’t go away.

In the week that followed, things got worse. He developed nausea, stomach pain, and diarrhea. He also started having trouble breathing. He then went back to the hospital.

This time, doctors found he needed supplemental oxygen. And an X-ray of his chest was worrisome—there were diffuse ground-glass opacities in his lungs. Doctors wondered if he had an unusual case of pneumonia. The man kept getting worse; in fact, he seemed to deteriorate before their eyes. Initially, he received supplemental oxygen through a simple face mask; subsequently, doctors switched to a mask that delivers continuous oxygen. However, his blood oxygen saturation continued to fall.

Read full article

Comments

US Will Ban Foreign Officials To Punish Countries For Social Media Rules

An anonymous reader quotes a report from The Verge: Secretary of State Marco Rubio announced Wednesday that the U.S. would restrict visas for “foreign nationals who are responsible for censorship of protected expression in the United States.” He called it “unacceptable for foreign officials to issue or threaten arrest warrants on U.S. citizens or U.S. residents for social media posts on American platforms while physically present on U.S. soil” and “for foreign officials to demand that American tech platforms adopt global content moderation policies or engage in censorship activity that reaches beyond their authority and into the United States.”

It’s not yet clear how or against whom the policy will be enforced, but seems to implicate Europe’s Digital Services Act, a law that came into effect in 2023 with the goal of making online platforms safer by imposing requirements on the largest platforms around removing illegal content and providing transparency about their content moderation. Though it’s not mentioned directly in the press release about the visa restrictions, the Trump administration has slammed the law on multiple occasions, including in remarks earlier this year by Vice President JD Vance.

The State Department’s homepage currently links to an article on its official Substack, where senior advisor for the Bureau of Democracy, Human Rights, and Labor Samuel Samson critiques the DSA as a tool to “silence dissident voices through Orwellian content moderation.” He adds, “Independent regulators now police social media companies, including prominent American platforms like X, and threaten immense fines for non-compliance with their strict speech regulations.” “We will not tolerate encroachments upon American sovereignty,” Rubio says in the announcement, “especially when such encroachments undermine the exercise of our fundamental right to free speech.”


Read more of this story at Slashdot.