Software Tech News

A new malware campaign is using the guise of Android Developer Verification to silently install dormant viruses on devices running Android 8 and higher. Disguised as a legitimate security feature, the malicious code remains quietly on compromised devices while awaiting remote activation from attackers. This highlights a growing trend of cybercriminals leveraging trusted system processes to bypass mobile defenses.

A silent bug introduced in Linux 6.9 caused LUKS disk encryption to fail to wipe encryption keys from memory during system suspend, leaving data vulnerable on locked devices for over two years. The issue stemmed from an unexpected interaction caused by a kernel refactoring, which has now been resolved with a one-line patch. Developers have also implemented automated tests and warning logs to prevent similar silent failures in the future.

Podman version 6.0.0 is now available, introducing a host of significant improvements and new features to the container engine. This major release is designed to greatly enhance the overall container management experience for developers and system administrators.

PeerTube is a free, decentralized video streaming platform built on the ActivityPub federated protocol. By utilizing peer-to-peer technology directly within web browsers, it efficiently distributes video traffic to provide a scalable alternative to traditional centralized hosting.

Following the apparent closure of Zachtronics, creator Zach Barth clarified that he and his core team have rebranded as an independent studio called Coincidence Games. The team has already released new puzzle titles like Kaizen and Nirmana under the new name, reassuring fans of Barth's continued involvement in game development.

A new open-source project called crustc translates the entirety of the Rust compiler into the C programming language. This ambitious endeavor provides a unique C-based implementation of the core toolchain for developers to explore. The repository is currently hosted on GitHub and welcomes community contributions to its ongoing development.

A recent article advocates for a return to early, poorly coded web forums despite their rough interfaces. The author argues that internet users may have abandoned these legacy community platforms too quickly in the shift toward modern social media.

Kimi K2.7 Code is now generally available in GitHub Copilot, expanding the AI tools available to developers. This marks a significant milestone as it is the first open-weight model offered as a selectable option within the Copilot model picker.

A new build-in-public project named Oomwoo is launching an open-source, DIY robot vacuum that enthusiasts can 3D print and assemble themselves. Powered by a Raspberry Pi, 2D LiDAR, ROS 2, and Home Assistant, the local-first device makes all code and designs publicly available from the very first commit.

Leveraging Postgres transactions provides a powerful advantage for distributed systems by allowing workflow metadata and application data to reside in the same database. Updating both simultaneously within a single transaction significantly simplifies complex challenges related to data atomicity and task idempotency.

A developer has launched an open-source project to port the Vulkan graphics API to the NetBSD operating system. The repository is currently hosted on GitHub and is actively seeking community contributions to help advance the development.

A new MIT-licensed open-source tool called Claude-real-video enables large language models to process and analyze video content entirely locally. By extracting scene-aware, deduplicated frames and combining them with transcripts from local files or URLs, the project allows developers to seamlessly integrate advanced video understanding into their AI workflows.

Independent creator Jesse has shared a new update regarding his ongoing technology projects, specifically highlighting the latest iteration titled Superpowers 6. The announcement covers his continued development and experimentation across both software and hardware platforms. Despite the technical focus, the creator humorously notes that his builds occasionally result in a bit of trouble.

Cursor has published the latest evaluation results for CursorBench 3.2, comparing the coding performance of the various AI models evaluated within its platform. The benchmark offers developers a detailed look at how different underlying models handle real-world programming tasks.

FFmpeg 9.1 introduces a new AAC encoder that improves audio quality for live video streaming workflows. Although newer codecs like Opus remain superior in efficiency, AAC is still the mandated standard for RTMP broadcasts and H.264 or H.265 video ingest on platforms like YouTube and Twitch. This update ensures better compatibility and leverages widespread hardware offloading support for modern broadcasting setups.

Sony will end physical disc production for new PlayStation games in January 2028 to adapt to evolving consumer preferences. Moving forward, all new titles will be distributed exclusively in digital formats through the PlayStation Store and digital retail codes.

Cloudflare has opened the waitlist for its Monetization Gateway, allowing developers to charge for web pages, datasets, APIs, and MCP tools hosted on its network. Transactions will be settled in stablecoins via the open x402 protocol, eliminating the need for users to build custom payment infrastructure.

ZCode has launched a new harness for the GLM-5.2 AI model that seamlessly integrates advanced AI agents into developers' existing toolsets. The platform is designed to streamline the entire software development lifecycle, enabling teams to plan, code, review, and deploy applications without friction.

Box3D is a newly released open-source 3D physics engine that extends the popular Box2D library with essential features for 3D game development. Available on GitHub, the C17-based engine retains Box2D's core architecture while introducing advanced collision types and performance optimizations like multi-threading and wide SIMD support.

A newly launched searchable directory enables users to discover over 22,000 products from worker-owned cooperatives nationwide. The platform also allows consumers to search by city to easily find local cooperatively owned cafes, bakeries, and restaurants in their area.

The Asahi Linux team has published its 7.1 progress report, outlining the latest advancements in porting the operating system natively to Apple Silicon Macs. This update details ongoing engineering efforts to expand hardware support, optimize performance, and build a fully functional Linux experience for devices powered by Apple's M-series chips.

Google has introduced Copybara, a new open-source tool that transforms and moves code between different software repositories. This utility allows developers to streamline their workflows by automating code transformations across multiple version control systems.

The open-source game engine Godot has updated its contribution guidelines to strictly ban AI-generated code submissions. This policy change aims to protect maintainers from being overwhelmed by low-quality code. Ultimately, the new rules are designed to prevent the project's codebase from drowning in AI slop.

Qualcomm has announced the release of Qualcomm Linux 2.0, featuring a unified code base and an upstream-first approach that eliminates the need for forking. The platform is designed to be SoC agnostic, providing developers with a versatile and streamlined environment for building applications across diverse hardware architectures.

Discussions surrounding arXiv highlight its vital role as an open-access preprint server and the rise of overlay journals that decouple file hosting from peer review. By curating arXiv identifiers rather than managing traditional submissions, these overlay journals maintain academic standards while eliminating publishing barriers. Commenters envision this model evolving into a modular, community-driven ecosystem that replaces journal exclusivity with specialized reputation badges.

Y Combinator startup Parsewise has launched an API designed to solve document parsing bottlenecks by enabling users to query unstructured documents as easily as structured data. The platform utilizes a multi-stage pipeline to extract specific data points and resolve complex, cross-page semantic relationships within massive files. By allowing users to configure custom intermediate data representations, Parsewise aims to replace arbitrary chunking and vectorization with more precise, scalable document reasoning.

Developers have implemented a new statistical approach that reduces IPFS content publishing times by more than tenfold. This optimization significantly improves the performance of the InterPlanetary File System, allowing for much faster data publishing on the decentralized network.

The Underhanded C Contest challenged programmers to write seemingly innocent code containing hidden, plausible bugs that only manifest under specific conditions, such as altering vote counts or failing image redactions. Readers fondly reminisce about the cleverness of past entries and speculate whether the beloved competition might return or evolve into an underhanded prompt contest for large language models.

A developer inspecting Claude Code for privacy reasons discovered that the tool secretly embeds hidden steganographic markers within its system prompts. These undisclosed tags are dynamically generated based on the API base URL and timezone, raising concerns about hidden tracking in AI coding assistants.

The concept of open source low tech emphasizes appropriate technologies that allow communities to build and repair their own tools using locally available scrap materials. By focusing on self-sufficiency and practical manufacturing, this approach aims to empower developing regions rather than creating dependency through traditional imported aid. Ultimately, it advocates for teaching people how to fabricate their own solutions to foster long-term local independence and resilience.