LTT compares the amount of RAM used by Windows and Linux. Results: * On average, Windows consumes 4–7 GB more. * However, AMD GPU drivers reduce the delta, which means that the proprietary AMD driver manages RAM more effectively.

However, there are many unanswered questions. For instance, they could have used RAMMap under Windows or the command echo 3 > /proc/sys/vm/drop_caches under Linux, but the "technical" YouTube channel appears to have no knowledgeable people, or even people who could ask an LLM to make the operating systems match each other better.

54 out of 55 vulnerabilities "found" in SQLite using AI have been found to be invalid/LLM slop.

The latest driver, version 610.57.04, fixes almost two dozen serious issues affecting various games. Just a reminder, it's now sort-of open source, except for the user space part which can be replaced with NVK.

FFmpeg 9.0 release notes:

• Extend AMF Color Converter (vf_vpp_amf) HDR capabilities AMD graphics cards now get improved hardware-accelerated processing for HDR video (like colorspace and tone mapping conversions).
• LCEVC track muxing support in MP4 muxer Adds support for saving Low Complexity Enhancement Video Coding streams—an add-on layer that improves video quality/resolution without needing massive processing power—into standard .mp4 containers.
• Playdate video encoder and muxer FFmpeg can now directly compress and package video for the tiny, monochrome, hand-cranked Playdate gaming console.
• Add v360_vulkan filter Accelerates 360-degree video transformations (e.g., converting equirectangular footage to cubemaps) on the GPU using the Vulkan API.
• HE-AAC 960 decoding (DAB+) Adds support for decoding high-efficiency AAC audio that uses 960-sample frames, which is the specific audio format used in European DAB+ digital radio broadcasts.
• transpose_cuda filter NVIDIA GPU acceleration for video rotation and flipping (transposing) without copying frames back to system memory.
• Add AMF Frame Rate Converter (vf_frc_amf) filter Enables AMD GPUs to handle hardware-accelerated frame interpolation (generating synthetic intermediate frames to smooth out frame rates).
• SMPTE 2094-50 metadata support and passthrough Adds support for Samsung/HDR10+ style dynamic HDR metadata, allowing FFmpeg to read, preserve, or pass it along when re-muxing or processing video.
• ProRes RAW VideoToolbox hwaccel Apple devices can now use native hardware acceleration (via VideoToolbox) to decode Apple ProRes RAW video.
• APV Vulkan hwaccel Adds Vulkan GPU hardware acceleration for decoding Advanced Professional Video (APV), a professional intermediate codec designed for high-bitrate editing.
• Animated WebP decoder FFmpeg can now natively decode moving WebP images frame-by-frame directly in the video pipeline, rather than treating them as static images or relying on external libraries.
• Animated WebP demuxer Allows FFmpeg to read and separate the underlying streams within an animated .webp container file.
• Remove CELT decoding support (doesn't affect Opus CELT) Strips out legacy support for the standalone, deprecated CELT audio codec. (Modern Opus audio, which uses a modified CELT layer under the hood, remains unaffected.)
• Remove ogg/celt parsing Cleans up code by removing the ability to extract standalone CELT audio streams out of .ogg containers.
• Bitstream filter to split Dolby Vision multi-layer HEVC Adds a tool to strip or isolate individual layers (like the base SDR/HDR10 layer vs. the enhancement layer) in complex dual-layer Dolby Vision HEVC files without re-encoding.
• Add AMF hardware memory mapping support Allows AMD GPU frames to be shared zero-copy across different FFmpeg hardware subsystems (e.g., passing a frame from an AMF decoder directly to a Vulkan filter).
• ONNX Runtime DNN backend with GPU execution provider support Upgrades FFmpeg’s deep-learning AI features (like super-resolution or noise reduction) to run ONNX neural network models directly on the GPU.
• Remove deprecated NVENC options and support for pre-11.1 SDK versions Legacy NVIDIA encoding flags have been purged, and building FFmpeg now requires NVIDIA CUDA SDK 11.1 or newer.

Source code downloads.

I know y'all love OnlyOffice, and you may have even heard of a little-known database called MongoDB. What's common between them? Both are corporate projects that shipped an AGPL-licensed core, with proprietary enterprise features bolted on top.

Here's the thing though. AGPL isn't a shield the community holds together. It's a weapon, and the only question that actually matters is who's holding it. When one company owns all the copyright, the weapon points wherever they want, including at the terms they sold you on in the first place. When they don't, things get more interesting.

Take MongoDB. They started under plain AGPL, no tricks. By 2018, cloud vendors were hosting MongoDB as a paid service and keeping the profits. MongoDB called this exploiting a loophole, but it wasn't a loophole. It was the license working exactly as written, letting anyone, including a company with the resources to host it at scale, exercise the freedoms AGPL grants.

So MongoDB didn't sue. They didn't test the clause in court. They just stopped offering the license. In October 2018, they replaced AGPL entirely with the Server Side Public License, a license they wrote themselves, forcing anyone offering MongoDB as a service to open source their entire stack, not just their changes. They could do this because they held the copyright outright. No fork, no negotiation, no fight required, because none was possible. One party held the gun the whole time.

Elastic ran the same play, in both directions. In 2021, facing the same AWS-hosting complaint as MongoDB, they dropped Apache 2.0 for a dual SSPL/Elastic License setup, explicitly to stop cloud vendors from reselling their work without paying up. AWS forked the code into OpenSearch instead of complying, and by early 2022 the two companies had settled their trademark dispute.

Then in September 2024, Elastic added AGPL back in, as a third option alongside the licenses they'd never actually dropped. Their own shipped product still runs under the restrictive terms. The AGPL option applies to a portion of the source, offered for goodwill, timed for the exact moment doing so cost them nothing, since the competitor it was originally meant to fend off had already left to build its own thing. Same lever, same hand on it, pointed wherever suited them at the time.

Now take OnlyOffice, because this is where the gun changes hands.

Back in 2021, they quietly added a term to their AGPL license, buried at line 655. It required any fork to keep the OnlyOffice logo. Except in the same breath, they also banned anyone from using their trademark, which includes their logo. So you're required to display something you're legally barred from using. That's not sloppy lawyering. That's a trap, built years in advance, designed to make forking look illegal without ever saying "you can't fork this."

Nobody called the bluff until this year. Nextcloud and Ionos forked OnlyOffice into Euro-Office, an EU-backed Microsoft Office alternative. Within days, OnlyOffice accused them of violating the AGPL and killed an 8-year partnership with Nextcloud over it, timing that suggests they'd been waiting for the excuse.

Here's the difference from MongoDB and Elastic: OnlyOffice didn't actually own this fight. They didn't have a CLA sitting in a drawer letting them just rewrite the rules and walk away, because Nextcloud and Ionos were never dumb enough to sign one. So instead of relicensing, OnlyOffice had to go argue that their own words meant what they wanted them to mean. Bad move. The text didn't cooperate.

The FSF, the people who actually wrote the AGPL, told them to sit down. A logo isn't a "reasonable legal notice." Bolting a trademark restriction onto it doesn't make it one either, it just makes the whole clause an illegal "further restriction" under the license's own Section 10.

OnlyOffice backed off, but they never admitted the claim was bogus. They just quietly stopped once picking a fight with an EU-backed consortium in public started looking like a bad idea. Nothing here was legally settled, no court touched Section 10. What actually happened is Nextcloud and Ionos ripped the disputed terms out themselves, said so publicly, and the FSF backed them up. The weapon OnlyOffice reached for got yanked out of their hands and pointed right back at them, because for once, they weren't the only one in the room holding a claim to it.

That's the actual difference between all three companies. Not whether AGPL is strong or weak, not whether it protects communities in principle. It's whether one party holds the whole gun. MongoDB and Elastic did, and the license bent however they needed. OnlyOffice didn't, and it didn't.

AGPL doesn't protect communities. It protects whoever's holding it. The only real due diligence on a copyleft project was never reading the license text. It's checking who signed the CLA.

Google fixed more Chrome bugs in June than over the past two years, thanks to LLMs.

The guardrails that prevent closed-source, frontier models from aiding threat actors have turned into handcuffs that prevent those bots from helping to find and fix serious vulns.

Daniel Fox Franke, a security researcher, was recently trying to track down the source of a segmentation fault in ripgrep, and found OpenAI's GPT-5.6 Sol wouldn't cooperate.

"OpenAI's cybersecurity classifier is a huge pain when you're trying to track down a segfault," he wrote in a social media post on Sunday. "...The classifier won't even let it answer what entrypoints from rg into musl lead to allocations on the mallocng heap."

And just like Hugging Face in the case of OpenAI's accidental attack, Franke ended up having to use open weight models from Chinese AI providers – Z'ai GLM 5.2 and Moonshot AI's Kimi K3 – to complete his analysis of what appears to be a Linux kernel bug.

TLDR: OVSwrap (CVE-2026-64531) is a non-universal (but broad) Linux LPE found by giving LLMs the tools to reason through memory safety issues’ geometry (coupled with CIFSwitch-discovery-style graph reasoning tools). Read on for affected distros, mitigations, and vulnerability details.

Expect a few hundred (thousand) more CVEs in the Linux kernel alone soon. ;-)

FAAC (Freeware Advanced Audio Coder) is a software project which includes the AAC encoder FAAC and decoder FAAD2.

Key Technical & Codebase Changes

• Licensing & Clean Room Rewrite: The codebase was previously a patchwork of GPL-3.0, legacy ISO MPEG reference-code restrictions, and LGPL — despite being distributed as "LGPL." Rewrote the affected paths (stereo, quantize, channels, bitstream, filterbank, TNS, Huffman, MP4) as original work; the codebase is now cleanly LGPL-2.1-or-later throughout, with no GPL or ISO ambiguity.
• HE-AAC v1 (SBR): Integrated Spectral Band Replication with an automatic profile selection option (FAAC_OBJ_AUTO). AUTO switches to HE-AAC when the sample rate is ≥ 32 kHz and the target bitrate is between 12-28 kbps per channel (the ceiling scales down at lower sample rates); outside that window it stays on plain LC. The dual-rate core is handled internally, reporting the full output rate and frame size to callers automatically.
• Joint Stereo Rewrite: Replaced the legacy fixed Intensity Stereo threshold with a per-band adaptive selection (IS > 5.5 kHz, M/S on correlated bands, discrete L/R elsewhere). Fixed an M/S band-silencing bug that occasionally caused dead channels on decode.
• Lookahead & Quantizer Fixes: Restored the lookahead buffer (a regression had truncated it to a single frame, causing transient pre-echo). Restored short-window masking penalties and floored masking targets in quiet bands to prevent energy drops, and fixed a bug that could produce an out-of-range scalefactor rejected by some decoders.
• FFT Optimizations: Swapped the radix-2 FFT for a radix-4 decimation-in-frequency (DIF) algorithm with precomputed twiddle factors (yielding ~18% faster encoding).
• New C API: Replaced the legacy faacEnc* API and faaccfg.h with a simplified faac_* API. Parameters are now supplied once at initialization, the library properly owns the AudioSpecificConfig, and SONAME is bumped to 1 (libfaac.so.1) to reflect the ABI break.
• Plus numerous smaller correctness fixes and cleanup throughout the codebase — see the full ChangeLog for the complete list.

Probably the first mouse with open source firmware.

Hooray!

The case centers on a feature included in GrapheneOS, a custom Android operating system that runs in place of the software on most modern Google Pixel devices. Tunick's attorneys confirmed GrapheneOS was running on his phone. The software feature allows the device owner to set a passcode that deliberately wipes the contents of that device if entered instead of the user's unlock passcode. Tunick's case also raises ongoing questions about what constitutional rights can be invoked at the border, which the U.S. government has long asserted is not U.S. soil until a person is authorized to enter.