System76 Comments On Recent Age Verification Laws

System76 published a statement today regarding the recent laws coming about in California and likely Colorado and New York too around requiring age verification on operating system accounts and ultimately exposing the information (or at least age brackets) to apps and websites. System76’s position is interesting given that they sell Linux-loaded desktops, workstations and laptops plus being an operating system vendor with their in-house Pop!_OS distribution and COSMIC desktop environment…

A GitHub Issue Title Compromised 4,000 Developer Machines (grith.ai)

The grith.ai blog reports
on an LLM prompt-injection vulnerability that led to 4,000 installations of
a compromised version of the Cline utility.

For the next eight hours, every developer who installed or updated
Cline got OpenClaw – a separate AI agent with full system access –
installed globally on their machine without consent. Approximately
4,000 downloads occurred before the package was pulled.

The interesting part is not the payload. It is how the attacker got
the npm token in the first place: by injecting a prompt into a
GitHub issue title, which an AI triage bot read, interpreted as an
instruction, and executed.

[$] The relicensing of chardet

Chardet
is a Python module that attempts to determine which character set was used
to encode a text string. It was originally written by Mark Pilgrim, who is
also the author of a number of Python books; the 1.0 release happened in
2006. For many years, this module has been under the maintainership of
Dan Blanchard. Chardet has always been licensed under the LGPL, but, with
the 7.0.0
release
, Blanchard changed the terms to the permissive MIT license.
That has led to an extensive (and ongoing) discussion on when code can be
relicensed against the wishes of its original author, and whether using a
large language model to rewrite code is a legitimate way to strip copyleft
requirements from code.

Linux MAINTAINERS Cleaning For Recently Departed Intel Devs, Altera Drivers Oprhaned

The layoffs and restructuring at Intel in 2025 caused unfortunate hits to their Linux/open-source engineering including various driver maintainers leaving and even their CPU temperature driver being orphaned for lack of maintainers. Sent out today were a number of additional updates to the MAINTAINERS file for the Linux kernel to reflect other Intel departures in recent months. Plus some of the Altera drivers have also been orphaned now for having no upstream maintainers…

Buildroot 2026.02 released

Peter Korsgaard has
announced version 2026.02
of Buildroot, a tool for generating
embedded Linux systems through cross-compilation. Notable changes
include added support for HPPA, use of the 6.19.x kernel headers by
default, better SBOM generation, and more.

Again a very active cycle with more than 1500 changes from 97 unique
contributors. I’m once again very happy to see so many “new” people next
to the “oldtimers”.

See the changelog
for full details. Thanks to Julien Olivain for pointing us to the announcement.

Debian Still Debating AI Contributions Plus A Need For More Diverse Contributors

Debian Project Leader “DPL” Andreas Tille provided an update today on various happenings within the project and personal reflections on some recent topics. Among the topics in today’s DPL updates were around AI contributions, Debian’s need to become more diverse with its contributors, and needing more “thank yous” to show appreciation for contributions…