Feed aggregator

15-Year-Old GhostLock Linux Kernel Flaw Lets Attackers Gain Root Access  cyberpress.org

15-year-old GhostLock Kernel Flaw Enables Privilege Escalation in Major Linux Distributions  CyberSecurityNews

Someone made use of Linux's 68000 CPU compatibility by running it off an Atari Jaguar  XDA

Here’s my 2026 2nd Quarter income update as a companion post to my 2026 1st Quarter asset allocation & performance update. Even though I don’t focus on high-dividend stocks or covered-call strategies, I still track the income from my portfolio as an alternative metric to price performance. The total income goes up much more gradually and consistently than the number shown on brokerage statements, which helps encourage consistent investing. Here’s a quote from Jack Bogle (source):

The true investor will do better if he forgets about the stock market and pays attention to his dividend returns and to the operating results of his companies. – Jack Bogle

Stock dividends are a portion of profits that businesses have decided to distribute directly to shareholders, as opposed to reinvesting into their business, paying back debt, or buying back shares. They have explicitly decided that they don’t need this money to improve their business, and that it would be better to distribute it to shareholders. The dividends may suffer some short-term drops, but over the long run they have grown faster than inflation.

Here is the historical growth of the S&P 500 total dividend, which tracks roughly the largest 500 stocks in the US, updated as of 2026 Q1 (via Yardeni Research):

Admittedly, share buybacks have grown as a popular way to deal with extra cash, as shown in these charts (Yardeni). Many companies like that buybacks are not expected to continue forever, unlike dividends. This helps explain why the dividend yield on the S&P 500 is only around 1% now. This is why I also track the totals of both (buybacks + dividends), also shown below.

Tracking the income from my portfolio. Three of the primary “trees” that produce “fruit” in my portfolio are Vanguard Total US Stock ETF (VTI), Vanguard Total International Stock ETF (VXUS), and Vanguard Real Estate Index ETF (VNQ).

In the US, the dividend culture is somewhat conservative in that shareholders expect dividends to be stable and only go up. Thus the starting yield is lower, but grows more steadily with smaller cuts during hard times. Companies do buybacks as well, often because they are easier to discontinue. Here is an updated chart of the trailing 12-month (ttm) dividend per share over the last 15 years paid by the Vanguard Total US Stock ETF (VTI) via WallStNumbers.com.

European corporate culture tends to encourage paying out a higher (sometimes even fixed) percentage of earnings as dividends, but that also means the dividends move up and down with earnings. The starting yield is currently higher but may not grow as reliably. Here is an updated chart of the trailing 12-month (ttm) dividend per share over the last 15 years paid by the Vanguard Total International Stock ETF (VXUS).

In the case of Real Estate Investment Trusts (REITs), they are legally required to distribute at least 90 percent of their taxable income to shareholders as dividends. Historically, about half of the total return from REITs is from this dividend income. Here is an updated chart of the trailing 12-month (ttm) dividend per share over the last 15 years paid by the Vanguard Real Estate Index ETF (VNQ).

The dividend yield (dividends divided by price) also serve as a rough valuation metric. When stock prices drop, this percentage metric usually goes up – which makes me feel better in a bear market. When stock prices go up, this percentage metric usually goes down, which keeps me from getting too euphoric during a bull market.

Finally, the last income component of my portfolio comes from interest from bonds and cash. Vanguard Short-Term Treasury ETF (VGSH) and Schwab US TIPS ETF (SCHP) are example holdings, with the actual amount varying with the prevailing interest rates, the real rates on TIPS, and the current rate of inflation.

Dividend and interest income yield. To estimate the income from my portfolio, I use the weighted “TTM” or “12-Month Yield” from Morningstar (checked 7/7/26), which is the sum of the trailing 12 months of interest and dividend payments divided by the last month’s ending share price (NAV) plus any capital gains distributed (usually zero for index funds) over the same period. My TTM portfolio yield is now roughly 2.44%.

In dividend investing circles, there is a metric called yield on cost, which is calculated by dividing the current dividend by the original purchase price. In other words, while my portfolio yield today is may be lower than say a target withdrawal rate of 3%, that is because the current market price is also a lot higher. Due to increasing dividends on average over time, my yield-on-cost based on my portfolio value from 10 years ago is over 5%.

What about the 4% rule? For big-picture purposes, I support the simple 4% or 3% rule of thumb, which equates to a target of accumulating roughly 25 to 33 times your annual expenses. I would lean towards a 3% withdrawal rate if you want to retire young (closer to age 50) and a 4% withdrawal rate if retiring at a more traditional age (closer to 65). It’s just a quick and dirty target to get you started, not a number sent down from the heavens!

During the accumulation stage, your time is better spent focusing on earning potential via better career moves, improving your skillset, networking, and/or looking for asymmetrical (unlimited upside, limited downside) entrepreneurial opportunities where you have an ownership interest.

Our dividends and interest income are not automatically reinvested. They are simply another “paycheck”. As with our other variable paychecks, we can choose to either spend it or invest it again to compound things more quickly. You could use this money to cut back working hours, pursue a different career path, start a new business, take a sabbatical, perform charity or volunteer work, and so on. You don’t have to wait until you hit a magic number. Our life path has been very different because of this philosophy. FIRE is Life!

The DistroWatch news feed is brought to you by TUXEDO COMPUTERS. The Univention team have published a new version of the project's Debian-based Univention Corporate Server. The latest release updates handling of group mailboxes and makes it easier to identify objects in the management interface. "The latest patch-level release of Univention Corporate Server bundles all new features and improvements....

The DistroWatch news feed is brought to you by TUXEDO COMPUTERS. Colin Percival has announced the release of FreeBSD 15.1, the second release in FreeBSD's latest stable branch: "The FreeBSD Release Engineering team is pleased to announce the availability of FreeBSD 15.1-RELEASE. This is the second release of the stable/15 branch. Some of the highlights: the iwlwifi(4) and other....

The DistroWatch news feed is brought to you by TUXEDO COMPUTERS. Barry Kauler has announced the release of EasyOS 7.4. The new version focuses on polishing classic software options, providing X11 support, fixes for the ROX-filer file manager, and improving video playback by swapping out Celluloid for SMPlayer. "Version 7.4 is a 'milestone' release, consolidating EasyOS as supporting 'legacy'....

The DistroWatch news feed is brought to you by TUXEDO COMPUTERS. This week in DistroWatch Weekly:
Review: RakuOS 44 and TROMjaro 2026.05.08
News: Ubuntu MATE updates status of distribution, Asahi Linux fixes dual-boot issue with MacOS 27, Antergos gets new life, Arch Linux suffers repeat incidents in AUR repository
Questions and answers: Setting variables across multiple shells
Released last....

The DistroWatch news feed is brought to you by TUXEDO COMPUTERS. The AnduinOS team has announced the availability of a development snapshot of AnduinOS 2.0.0, the upcoming major update of the project's Ubuntu-based Linux distribution featuring a highly customised GNOME desktop. This version is derived from the long-term supported Ubuntu 26.04: "Today, AIURSOFT Limited is thrilled to announce the....

The DistroWatch news feed is brought to you by TUXEDO COMPUTERS. Gaming Linux FR has announced the release of GLF OS Quasar, a major update of the project's NixOS-based distribution focused on gaming. This version updates the GNOME desktop to version 50 and introduces numerous enhancements: "Based on NixOS 26.05, Quasar delivers a major update to the GLF OS....

The DistroWatch news feed is brought to you by TUXEDO COMPUTERS. The Alpine Linux development team has announced the release of Alpine Linux 3.24.0, a significant update of the project's independently-developed, general purpose Linux distribution designed primarily for power users: "We are pleased to announce the release of Alpine Linux 3.24.0, the first release in the 3.24 stable series.....

The DistroWatch news feed is brought to you by TUXEDO COMPUTERS. Franco Conidi has announced the release of SysLinuxOS 13.2, an updated build of the project's Debian-based distribution made primarily for system integrators and network administrators. The new version uses the Btrfs filesystem on new installation and integrates the Snapper utility for managing snapshots of Btrfs subvolumes. "SysLinuxOS 13.2....

The DistroWatch news feed is brought to you by TUXEDO COMPUTERS. eXybit Technologies has announced the release of RefreshOS 3-0, a major update of the project's beginner-friendly, desktop Linux distribution based on Debian 13 and featuring the KDE Plasma desktop: "RefreshOS 3 'Colorful Cosmos' is officially here, bringing the biggest visual and usability upgrade the project has seen so....

The DistroWatch news feed is brought to you by TUXEDO COMPUTERS. RELIANOID, a Debian-based Linux distribution featuring an open-source load-balancer, has reached version 7.10.0: "We are glad to present both RELIANOID 7.10.0 Community edition and RELIANOID 8.6 Enterprise edition, delivering significant improvements in security, system stability, observability, and load balancing capabilities. Both versions share a modernized Debian 12.14 base....

An anonymous reader quotes a report from the BBC: TikTok will not introduce end-to-end encryption (E2EE) -- the controversial privacy feature used by nearly all its rivals -- arguing it makes users less safe. E2EE means only the sender and recipient of a direct message can view its contents, making it the most secure form of communication available to the general public. Platforms such as Facebook, Instagram, Messenger and X have embraced it because they say their priority is maximizing user privacy. But critics have said E2EE makes it harder to stop harmful content spreading online, because it means tech firms and law enforcement have no way of viewing any material sent in direct messages. The situation is made more complex because TikTok has long faced accusations that ties to the Chinese state may put users' data at risk. TikTok has consistently denied this, but earlier this year the social media firm's US operations were separated from its global business on the orders of US lawmakers. TikTok told the BBC it believed end-to-end encryption prevented police and safety teams from being able to read direct messages if they needed to. It confirmed its approach to the BBC in a briefing about security at its London office, saying it wanted to protect users, especially young people from harm. It described this stance as a deliberate decision to set itself apart from rivals. "Grooming and harassment risks are very real in DMs [direct messages] so TikTok now can credibly argue that it's prioritizing 'proactive safety' over 'privacy absolutism' which is a pretty powerful soundbite," said social media industry analyst Matt Navarra. But Navarra said the move also "puts TikTok out of step with global privacy expectations" and might reinforce wariness for some about its ownership.

Read more of this story at Slashdot.

Continuing its product launches this week, Apple today announced the "MacBook Neo," an all-new, low-cost Mac featuring the A18 Pro chip. It starts at $599 and begins shipping on Wednesday, March 11. MacRumors reports: The MacBook Neo is the first Mac to be powered by an iPhone chip; the A18 Pro debuted in 2024's iPhone 16 Pro models. Apple says it is up to 50% faster for everyday tasks than the bestselling PC with the latest shipping Intel Core Ultra 5, up to 3x faster for on-device AI workloads, and up to 2x faster for tasks like photo editing. The MacBook Neo features a 13-inch Liquid Retina display with a 2408-by-1506 resolution, 500 nits of brightness, and an anti-reflective coating. The display does not have a notch, instead featuring uniform, iPad-style bezels. It is available in Silver, Indigo, Blush, and Citrus color options. The colored finishes extend to the Magic Keyboard in lighter shades and come with matching wallpapers. It weighs 2.7 pounds. There are two USB-C ports. One is a USB-C 2 port with support for speeds up to 480 Mb/s and one is a USB-C 3 port with support for speeds up to 10 Gb/s. There is also a headphone jack. The MacBook Neo also offers a 16-hour battery life, 8GB of unified memory, Wi-Fi 6E and Bluetooth 6 connectivity, a 1080p front-facing camera, dual mics with directional beamforming, and dual side-firing speakers with Spatial Audio.

Read more of this story at Slashdot.

Intel has formally unveiled its Xeon 6+ "Clearwater Forest" data-center processor with up to 288 cores, built on the company's new Intel 18A process and using Foveros Direct packaging. The chip targets telecom, cloud, and edge-AI workloads with massive parallelism, large caches, and high-bandwidth DDR5-8000 memory. Tom's Hardware reports: Intel's Xeon 6+ processors with up to 288 cores combine 12 compute chiplets containing 24 energy-efficient Darkmont cores per tile that are produced using 18A manufacturing technology, two I/O tiles made on Intel 7 production node, as well as three active base tiles made on Intel 3 fabrication process. The compute tiles are stacked on top of the base dies using Intel's Foveros Direct 3D technology, whereas lateral connections are enabled by Intel's EMIB bridges. Intel's 'Darkmont' efficiency cores have received rather meaningful microarchitectural upgrades. Each core integrates a 64 KB L1 instruction cache, a broader fetch and decode pipeline, and a deeper out-of-order engine capable of tracking more in-flight operations. The number of execution ports has also been increased in a bid to improve both scalar and vector throughput under heavily threaded server workloads. From a cache hierarchy standpoint, the design groups cores into four-core blocks that share approximately 4 MB of L2 cache per block. As a result, the aggregate last-level cache across the full package surpasses 1 GB, roughly 1,152 MB in total. This unusually large pool is intended to keep data close to hundreds of active cores and reduce dependence on external memory bandwidth, which in turn is meant to both increase performance and lower power consumption. Platform-wise, the processor remains drop-in compatible with the current Xeon server socket, so the CPU has 12 memory channels that support DDR5-8000, 96 PCIe 5.0 lanes with 64 lanes supporting CXL 2.0.

Read more of this story at Slashdot.

A new Android app called Nearby Glasses alerts users when Bluetooth signals from smart glasses are detected nearby. The Android app, called Nearby Glasses, "launches at a time as there is an increasing resistance against always-recording or listening devices, which critics say process information about nearby people who do not give their consent," reports TechCrunch. From the report: Yves Jeanrenaud, who made the app, first spoke to 404 Media about the project and said he was in part inspired to make Nearby Glasses after reading the independent publication's reporting into wearable surveillance devices, including how Meta's Ray-Ban smart glasses have been used in immigration raids and to film and harass sex workers. On the app's project page, Jeanrenaud described smart glasses as an "intolerable intrusion, consent neglecting, horrible piece of tech." Jeanrenaud told TechCrunch in an email that his motivation came from "witnessing the sheer scale and inhumane nature of the abuse these smart glasses are involved in." Jeanrenaud also cited Meta's decision to implement face recognition as a default feature in its smart glasses, "which I consider to be a huge floodgate pushed open for all kinds of privacy-invasive behavior." The app works by listening for nearby Bluetooth signals that contain a publicly assigned identifier unique to the Bluetooth device's manufacturer. If the app detects a Bluetooth signal from a nearby hardware device made by Meta or Snap, the app will send the user an alert. (The app also allows users to add their own specific Bluetooth identifiers, allowing the user to detect a broader range of wearable surveillance gadgetry.) Further reading: Meta's AI Display Glasses Reportedly Share Intimate Videos With Human Moderators

Read more of this story at Slashdot.

At Mobile World Congress, Cristiano Amon of Qualcomm argued that the coming 6G networks will power an AI-driven "agent economy," where devices and AI assistants constantly communicate across the network. "AI will fundamentally change our mobile experiences," Qualcomm chief executive, Cristiano Amon says. "It's going to change how we think about our smartphones. Think about our personal computing. Think about and interact with a car. The car is now a computing surface. If you actually believe in the AI revolution, 6G will be required. Resistance is futile." The company says early consumer testing could begin around the 2028 Los Angeles Olympics, with broader rollouts expected by 2029. Fortune's Kamal Ahmed reports: Akash Palkhiwala is Qualcomm's chief financial officer and chief operating officer. I spent some time with him at the company's stand, as his leading engineers took me through a 6G future where individuals will have real-time information delivered to them via their glasses. Palkhiwala compliments me on my watch, which only does one thing. It tells me the time. "6G is going to be the first time that connectivity and AI come together in the network. What we're building is the first AI-native wireless network that's ever been built," he explains. "The traffic that we expect on 6G is way different than what we had before," says Palkhiwala. "Before, it was all about consumer traffic. We expect 6G to be driven by [AI] agent traffic. Think about all these use cases where there are AI agents sitting on various devices -- your glasses, your watch, your phone, your PC. These agents are going to be talking back and forth across the network to other agents and services. "The traffic completely changes. 6G is being built with this idea that the traffic that goes on the network is not just going to be consumer voice calls or downloading videos, we're going to have agents talking to each other, so the reliability of the network becomes very important." On-device capabilities (the ability of your phone to process far more data); edge computing (locally sourced IT technology rather than distant data centers); more efficient use of available bandwidth (AI-enabled load control); and greater cloud access will all come together to produce a new wireless network. [...] "Today we are in the application economy," he notes. "On the phone, you want to make a travel reservation, you go to one application. You want to order an Uber, you go to a second application. You want to order food, you go to a third application, movie tickets, etc. The user has to go through that effort. In the future, you think of the app economy moving over to an agent economy, where there's one agent I'm interacting with, and I can ask that agent to book me a movie ticket or a plane ticket, to order food for me, get an Uber for me. It knows everything about me."

Read more of this story at Slashdot.

An anonymous reader quotes a report from MacRumors: OpenAI today updated its most popular ChatGPT model, debuting GPT-5.3 Instant. GPT-5.3 Instant is supposed to provide more accurate answers and better contextualized results when searching the web. The update also cuts down on unnecessary dead ends, caveats, and overly declarative phrasing, plus it has fewer hallucinations. According to OpenAI, it tweaked the Instant model to address complaints about tone, relevance, and conversational flow, which are issues that don't show up in benchmarks. GPT-5.2 Instant had a "cringe" tone that could be overbearing or make unsubstantiated assumptions about user intent or emotions. The new model will have a more natural conversational style and will cut back on dramatic phrases like "Stop. Take a breath." Users found that GPT-5.2 Instant would refuse questions it should have been able to answer, or respond in ways that felt overly cautious around sensitive topics. GPT-5.3 Instant cuts down on refusals and tones down overly defensive or moralizing preambles when answering a question. The model will no longer "over-caveat" after assuming bad intent from the user. GPT-5.3 Instant also provides higher-quality answers based on information from the web. OpenAI says that it is able to better balance what it finds online with its own knowledge, so it is less likely to overindex on web results.

Read more of this story at Slashdot.