So I made a community called c/learninglinux I wanted to name it learningLinuxtogether but the server didn't accept so anyways this community will be where experts send guides or help beginners and where Beginners ask for help so lemme know your opinion in the comments

I went to see this game on Steam's newest release tab, but the surprise (besides a nice affirmation that it sits at Very Positive reviews at this time) was realizing that it didn't come from Electronic Arts or Ubisoft.

The article is technically pretty old now, but adds more details that have been made a lot more relevant on the game's release.

cross-posted from: https://piefed.world/c/tech/p/1452445/anthropic-bans-abusive-or-cruel-behavior-toward-claude

Plenty of open source projects keep going on goodwill alone, with contributors putting in the hours and expecting nothing back. While others lean on outside support like cash, donated hardware, or someone else covering the hosting bill.

This kind of support rarely gets much attention, but these needs are some of the most foundational aspects of any project that's serious about growing.

Gentoo falls in the second group. The source-based Linux distribution, built around the Portage package manager, runs largely on sponsored infrastructure, as it can only manage to maintain a few vital machines.

Sadly, many sponsors that had backed Gentoo all these years have decided to stop making contributions. The project is now looking for replacements and has put out a call for infrastructure sponsors.

Currently, its sponsors page lists names such as Oregon State University's Open Source Lab, CDN77, HP, and Hetzner, but it may not yet reflect the dropouts.

There are five ways to help, as laid out on the sponsorship page of Gentoo's wiki, with preference being given to supporters who share the project's vision of software that respects choice and stays open to user-driven changes.

The first way is to accept donated machines for the project's hosting locations in the US. They are not asking for much; anything good enough to handle server-focused tasks in today's time is a good offering for them to use.

Next is Colocation, a type of physical hosting. The sponsor would provide rack space, power, and connectivity, while Gentoo finds the hardware to put in it. Capacity outside the US is their most urgent need at the moment, though offers from the US are welcome too.

Third are virtual machines, with a minimum of 2 vCPUs, 4GB of RAM, and 25GB of storage. The project says that it is leaning more on the cloud wherever it can, but many of its services are monolithic, and that Kubernetes would suit them poorly.

The fourth way is full-package hosted physical servers. The wiki gives two examples: a root server like the ones Hetzner offers, or a sponsor's older or unused servers with Gentoo getting full remote access.

In that second case, the sponsor would still own and manage the hardware, whereas Gentoo would take care of the operating system and remote management, only asking for advance notice before any migration events.

The last is plain old money. Any donated funds would go toward paying for colocation and hosting.

A call to act

Gentoo is far from the only project that needs this kind of backing.

Take LVFS, the firmware update service for Linux. It leaned heavily on the Linux Foundation and Red Hat, with Framework and the Open Source Firmware Foundation pitching in $10,000 a year.

Then Lenovo and Dell joined at the Premier tier, at $100,000 a year each, along with HP and NVIDIA, who followed soon after. I would call that a win for LVFS and a sign that sponsors are out there for projects that go looking.

Maybe your organization has spare rack space, or you have money lying around and want it to do some good. Either way, someone has to host the servers behind projects like this, and Gentoo's infrastructure team is available at infra@gentoo.org for any infrastructure sponsorship-related queries.

Just wondering as i feel each platform has its pros and cons but toxic-ness seems to be everywhere? is there a way to avoid most of toxic online? or is that not possible?

Threat actors are exploiting CVE-2026-21589, a critical Atlassian flaw that can expose sensitive files across multiple Data Center products. Threat actors have started exploiting CVE-2026-21589 (CVSS score of 9.3), a critical arbitrary file access flaw in Atlassian Data Center products. The vulnerability could allow attackers to access sensitive files under certain conditions. Affected products include […]

cross-posted from: https://piefed.world/c/inforeport/p/1452147/sea-surface-temperatures-reflect-strengthening-el-nino

there is a relatively new, especially in terms of the scale and speed of growth, marketplace for private businesses to sell exotic, expensive and sophisticated technologies to public and military law enforcement outfits across the country.

much of the technology being sold right now is for surveillance. but that will soon change/mutate into other types of tools. as politics allows for the further escalation, it will be so.

in this new industry or economy, orgs like palantir are just one example. there are countless players of all kinds, sizes and degrees of separation in the usa. i am confident about this much.

there is a new breed of selling (upselling) taking place right now. a new kind of salesmanship is being born.

ultimately it boils down to the private and public (law enforcement and military) sectors starting to merge. this is a new wild west and the feds are talking about these changes as having a 200 year long impact on american society.

Here's the concept: instead of things you want to do before you die (AKA the Bucket List), I'm thinking about creating a Fuck It List, of things I want to never have to do again.

If you were doing so, what would you put on your list.

I was hanging out with a retired former coworker last weekend, and she got in my head. I have at least 11 years to go, assuming I'm able to retire, so it's not realistic now. But what is life without hopes and dreams?

So far, all I have on the list is:

Having time for a quick chat with my manager.

I will rejoice when I don't have to do that again.

Because they ARE plant-based

Arjen Lubach is a Dutch comedian who has hosted programs that are similar to Last Week Tonight: news plus deep dives plus comedy, now also interspersed with typical late night show chatter. I guess a recent segment about Roblox became popular here. He's a centrist liberal, so I stopped watching him years ago.

Comments

cross-posted from: https://hexbear.net/post/9742945

By https://x.com/AndromedaPip/status/2108102746666934382

Seen in a video, looked it up. Yep, it's real. Unironically.

Friend Global, Inc.

Plenty of open source projects keep going on goodwill alone, with contributors putting in the hours and expecting nothing back. While others lean on outside support like cash, donated hardware, or someone else covering the hosting bill.

This kind of support rarely gets much attention, but these needs are some of the most foundational aspects of any project that's serious about growing.

Gentoo falls in the second group. The source-based Linux distribution, built around the Portage package manager, runs largely on sponsored infrastructure, as it can only manage to maintain a few vital machines.

Sadly, many sponsors that had backed Gentoo all these years have decided to stop making contributions. The project is now looking for replacements and has put out a call for infrastructure sponsors.

Currently, its sponsors page lists names such as Oregon State University's Open Source Lab, CDN77, HP, and Hetzner, but it may not yet reflect the dropouts.

There are five ways to help, as laid out on the sponsorship page of Gentoo's wiki, with preference being given to supporters who share the project's vision of software that respects choice and stays open to user-driven changes.

The first way is to accept donated machines for the project's hosting locations in the US. They are not asking for much; anything good enough to handle server-focused tasks in today's time is a good offering for them to use.

Next is Colocation, a type of physical hosting. The sponsor would provide rack space, power, and connectivity, while Gentoo finds the hardware to put in it. Capacity outside the US is their most urgent need at the moment, though offers from the US are welcome too.

Third are virtual machines, with a minimum of 2 vCPUs, 4GB of RAM, and 25GB of storage. The project says that it is leaning more on the cloud wherever it can, but many of its services are monolithic, and that Kubernetes would suit them poorly.

The fourth way is full-package hosted physical servers. The wiki gives two examples: a root server like the ones Hetzner offers, or a sponsor's older or unused servers with Gentoo getting full remote access.

In that second case, the sponsor would still own and manage the hardware, whereas Gentoo would take care of the operating system and remote management, only asking for advance notice before any migration events.

The last is plain old money. Any donated funds would go toward paying for colocation and hosting.

A call to act

Gentoo is far from the only project that needs this kind of backing.

Take LVFS, the firmware update service for Linux. It leaned heavily on the Linux Foundation and Red Hat, with Framework and the Open Source Firmware Foundation pitching in $10,000 a year.

Then Lenovo and Dell joined at the Premier tier, at $100,000 a year each, along with HP and NVIDIA, who followed soon after. I would call that a win for LVFS and a sign that sponsors are out there for projects that go looking.

Maybe your organization has spare rack space, or you have money lying around and want it to do some good. Either way, someone has to host the servers behind projects like this, and Gentoo's infrastructure team is available at infra@gentoo.org for any infrastructure sponsorship-related queries.

Since 2022, Google's Open Source Software Vulnerability Reward Program (OSS VRP) has been the path for outside researchers to get paid for reporting security flaws in the company's open source code, including projects like Flutter, Angular, Go, and Fuchsia.

With an announcement on X, they have now decided to discontinue the product-facing side of it.

They are calling the change temporary, while supply chain reports remain open and anything submitted before October 1 stays unaffected. What's closed, what's not?

Product vulnerabilities are bugs in the projects themselves, like a failing HTML sanitizer, memory corruption issues in file format parsers, or insecure code examples in documentation.

The updated rules do not limit the change to a specific project tier, as they just won't be accepting any reports related to this.

Supply chain reports, on the other hand, cover vulnerabilities in how the software is built and shipped. Exposed package manager credentials used to publish build artifacts is one case the rules page lists. It remains unaffected by this change.

There's also an exception for some Google Cloud repositories. If a bug there affects a Cloud product, Google may still accept the report, but through its Cloud VRP.

Why did it come to this?

Back in March, a post on the Bug Hunters blog from Google engineers said AI-generated reports were flooding the program. Some were serving up hallucinated information, while others were flagging legit coding errors that had little to no impact on the security posture of the targeted project.

Google's first response was to raise the bar on memory corruption reports for its two top project tiers. Researchers had to either reproduce the bug through an existing OSS-Fuzz fuzz target or point to a patch that maintainers had already merged.

An update to the same post the following month went further. The standard and low-priority tiers, OT2 and OT3, stopped offering rewards or credit for product vulnerabilities and other security issues. The top supply chain reward for OT2 projects also fell to $3,133.70.

Supply chain reports still pay, from $500 on OT2 projects up to $31,337 on flagship ones.

As an alternative, Google points to the Patch Rewards Program, which pays between $100 and $15,000, though only for patches that have stayed in a project for a month without being reverted.

An open question

Google has not said when or in what form product vulnerability reports will return. Their announcement only promises an update in the first quarter of 2027 while they continue reworking that part of the program.

There's also a loose end. At the time of writing, the OSS VRP page still lists reward ranges for product vulnerabilities, up to $7,500. Though, as you saw earlier, the rules page for it has already been updated, so it shouldn't be long before this is addressed.