The Linux kernel has recently been facing a series of discovered privilege escalation vulnerabilities, starting with the Copy Fail vulnerability and followed by subsequent vulnerabilities in the same spirit (Dirty Frag, Fragnesia). This development is part of a general trend where vulnerabilities are being found - and disclosed - faster than before. We expect it to continue, at least for the short-term.

The Gentoo Linux Kernel and Distribution Kernel teams are doing their best to keep Gentoo kernels secure. This includes both packaging the latest upstream releases as soon as possible, and backporting additional vulnerability fixes or mitigations whenever they become available. As example, while upstream kernel releases are still vulnerable to Fragnesia, the respective Gentoo kernels feature fixes from day one. At the time of writing, all supported Gentoo kernels feature the latest Fragnesia v5 patch. Please expect more updates. We recommend exploring ways to automate upgrading your kernel.

Please note that only sys-kernel/gentoo-kernel, sys-kernel/gentoo-kernel-bin and sys-kernel/gentoo-sources packages are security-supported. The vanilla kernel packages are vulnerable at the moment. Other kernel packages may carry fixes, but they usually are slower to be updated. Additionally, we recommend running the latest kernel version (~arch or latest stable LTS), as upstream does not reliably backport security fixes to older versions.

CPUID has since confirmed the breach, pinning it on a compromised backend component rather than tampering with its software builds.

"Investigations are still ongoing, but it appears that a secondary feature (basically a side API) was compromised for approximately six hours between April 9 and April 10, causing the main website to randomly display malicious links (our signed original files were not compromised)," one of the site's owners said in a post on X. "The breach was found and has since been fixed."

Original IFF Deluxe Paint images from back in the day, courtesy of the Amiga Graphics Archive.

This is the one that always makes me think of DPaint:

source

My favourite bit is this from the comments:

I wrote "please do not deliver this letter" on a correctly addressed and stamped letter once, it never arrived. A thrilling day indeed.

I love Doom Bar and I'm not alone since it's among the bestselling cask ales in the UK, but it seems that the US owners are going for a quick payout by closing and asset stripping what's left.

I wonder how long until they start building houses or an industrial park on the old site?

This video covers Great Ormond Street Hospital, Quality Street and copyright special cases.

A severed mosquito proboscis can be turned into an extremely fine nozzle for 3D printing, and this could help create replacement tissues and organs for transplants.

I've linked to a decent write-up on Tom's Hardware, but New Scientist covered it last week too.

Source paper: 3D necroprinting: Leveraging biotic material as the nozzle for 3D printing (science.org)

An Australian YouTuber got invited to a NATO wargame and made this very interesting video about it.

The section that starts at 3m30s (10 minutes long) discusses the military history of wargaming which I found fascinating.

The rest of it is also well worth a watch.

It's not new (it sat in my watch later list for a month since it's 65 minutes long) so apologies if you've already seen it.

REUNION November 22, 2025

I solved it in 1️⃣6️⃣ moves!
⭐ ⭐ ⭐ 🦊 🦔 🎉

REUNION November 13, 2025

I solved it in 1️⃣6️⃣ moves!
⭐ ⭐ ⭐ 🦊 🦔 🎉

REUNION November 9, 2025

I solved it in 1️⃣8️⃣ moves!
⭐ ⭐ ⭐ 🦊 🦔 🎉

My personal domain has hundreds of aliases - one for each site I deal with. This is great for identifying the source of spam, and I retire any aliases that get spam.

haveibeenpwned.com lets me add a domain, but wants 3912 USD a year to actually tell me which addresses leaked. This is obviously an insane price for a nice-to-have.

Is there an alternative for free or very cheap? A self-hosted tool that would pull down lists would be great, but I suppose those lists aren't public.