Open Source

Bose Open-Sources Its SoundTouch Home Theater Smart Speakers Ahead of End-of-Life (arstechnica.com) 22

Bose is end-of-lifing its SoundTouch smart speakers but softened the blow by open-sourcing the SoundTouch API and preserving limited local features, AirPlay, and Spotify Connect. Ars Technica reports: In October, Bose announced that its SoundTouch Wi-Fi speakers and soundbars would become dumb speakers on February 18. At the time, Bose said that the speakers would only work if a device was connected via AUX, HDMI, or Bluetooth (which has higher latency than Wi-Fi). After that date, the speakers would stop receiving security and software updates and lose cloud connectivity and their companion app, the Framingham, Massachusetts-based company said. Without the app, users would no longer be able to integrate the device with music services, such as Spotify, have multiple SoundTouch devices play the same audio simultaneously, or use or edit saved presets.

The announcement frustrated some of Bose's long-time customers, some of whom own multiple SoundTouch devices that still function properly. Many questioned companies' increasingly common practice of bricking expensive products to focus on new devices or to minimize costs, or because they've gone through acquisitions or bankruptcy. SoundTouch speakers released in 2013 and 2015 with prices ranging from $399 to $1,500.

Today, Bose had better news. In an email to customers, Bose announced that AirPlay and Spotify Connect will still work with SoundTouch speakers after EoL, expanding the wireless capabilities that people will still be able to access. Additionally, SoundTouch devices that support AirPlay 2 can play the same audio simultaneously. The SoundTouch app will also live on, albeit stripped of some functionality. "On May 6, 2026, the app will update to a version that supports the functions that can operate locally without the cloud. No action will be required on your part. Opening the app will apply the update automatically," Bose said. Bose also provided instructions (PDF) for a workaround for saving presets that uses the favorites options in music service apps.

Android

Google Will Now Only Release Android Source Code Twice a Year (androidauthority.com) 18

Google will begin releasing Android Open Source Project (AOSP) source code only twice a year starting in 2026. "In the past, Google would release the source code for every quarterly Android release, of which there are four each year," notes Android Authority. From the report: Google told Android Authority that, effective 2026, Google will publish new source code to AOSP in Q2 and Q4. The reason is to ensure platform stability for the Android ecosystem and better align with Android's trunk-stable development model.

Developers navigating to source.android.com today will see a banner confirming the change that reads as follows: "Effective in 2026, to align with our trunk-stable development model and ensure platform stability for the ecosystem, we will publish source code to AOSP in Q2 and Q4. For building and contributing to AOSP, we recommend utilizing android-latest-release instead of aosp-main. The aosp-latest-release manifest branch will always reference the most recent release pushed to AOSP. For more information, see Changes to AOSP."

A spokesperson for Google offered some additional context on this decision, stating that it helps simplify development, eliminates the complexity of managing multiple code branches, and allows them to deliver more stable and secure code to Android platform developers. The spokesperson also reiterated that Google's commitment to AOSP is unchanged and that this new release schedule helps the company build a more robust and secure foundation for the Android ecosystem. Finally, Google told us that its process for security patch releases will not change and that the company will keep publishing security patches each month on a dedicated security-only branch for relevant OS releases just as it does today.

United Kingdom

UK Urged To Unplug From US Tech Giants as Digital Sovereignty Fears Grow (theregister.com) 53

An anonymous reader shares a report: The Open Rights Group is warning politicians that the UK is leaning far too heavily on US tech companies to run critical systems, and wants the Cybersecurity and Resilience Bill to force a rethink.

The digital rights outfit says the bill, which is due to receive its second reading in the House of Commons today, represents a rare opportunity to force the government to confront what it sees as a strategic blind spot: the UK's reliance on companies such as Amazon, Google, Microsoft, and data analytics biz Palantir for everything from cloud hosting to sensitive public sector systems.

"Just as relying on one country for the UK's energy needs would be risky and irresponsible, so is overreliance on US companies to supply the bulk of our digital infrastructure," said James Baker, platform power programme manager at Open Rights Group. He argued that digital infrastructure has become an extension of geopolitical power, and the UK is increasingly vulnerable to decisions taken far beyond Westminster's control.

Microsoft

Microsoft Office Is Now 'Microsoft 365 Copilot App' (pcgamer.com) 99

Longtime reader joshuark shares a report: As spotted by Bluesky user DodgerFanLA, going to Office.com now greets you with the following helpful explainer: "The Microsoft 365 Copilot app (formerly Office) lets you create, share, and collaborate all in one place with your favorite apps now including Copilot.*"

Never has an asterisk been more relevant to me than following the words "your favorite apps now including Copilot."

About a decade ago, hardware company Corsair attempted to pivot from its classic logo -- a subtle trio of ship sails -- to a newer, edgier look, a pair of crossed swords that gave off regrettable '2000s tribal tattoo' energy. The rebrand didn't last long: after a fierce outcry from people who correctly thought the new logo sucked, Corsair swapped to a refreshed take on the sail logo, which it's been using ever since. Corsair was established in 1994, and made about $1.4 billion last year -- which I bring up because today Microsoft, a slightly bigger company, has slipped on its own rebranding banana peel. The company is seemingly all but ditching the Office name -- which it introduced four years before Corsair existed, and which drove more than $30 billion in revenue just last quarter -- with a catchy new name: "Microsoft 365 Copilot app."

The company had already downplayed the Office name, despite it being perhaps the most universally recognized software in existence, by renaming its cloud version of Word, Powerpoint, etc. Office 365 in 2010, then Microsoft 365 in 2017. Now when you want to open up a Word document, you can get to them by launching the Microsoft 365 Copilot app. Intuitive!

Should Microsoft just go ahead and rebrand Windows, the only piece of its arsenal more famous than Office, as Copilot, too? I do actually think we're not far off from that happening. Facebook rebranded itself "Meta" when it thought the metaverse would be the next big thing, so it seems just as plausible that Microsoft could name the next version of Windows something like "Windows with Copilot" or just "Windows AI."

Copilot is the app for launching the other apps, but it's also a chatbot inside the apps. Any questions?
Correction: Office hasn't been renamed to "Microsoft 365 Copilot app." The Verge adds: The confusion comes from Microsoft's own Office.com domain, which for the past year has acted as a way to push businesses and consumers to use the Microsoft 365 Copilot app. This app is a hub app that provides access to Copilot, as well as all the Office apps. Microsoft used to call this app simply Office, before the company rebranded Office to Microsoft 365 in 2022.

If you visit Office.com you'll see a big welcome to the Microsoft 365 Copilot app, and a note from Microsoft that would confuse anyone not following the company's confusing branding: "The Microsoft 365 Copilot app (formerly Office)..." That mention of "formerly Office" is Microsoft referring to the very old Office app that launched in 2019 as a way to try and convince people to use online versions of Word, Excel, and PowerPoint. Until a year ago it used to be called the Microsoft 365 app. Microsoft then announced it was rebranding its Microsoft 365 app in November 2024 to a Copilot one, which I and everyone else were very confused at. The new app icon and name -- Microsoft 365 Copilot -- then rolled out on January 15th last year to Windows, iOS, and Android users.

IT

VSCode IDE Forks Expose Users To 'Recommended Extension' Attacks (bleepingcomputer.com) 6

An anonymous reader shares a report: Popular AI-powered integrated development environment solutions, such as Cursor, Windsurf, Google Antigravity, and Trae, recommend extensions that are non-existent in the OpenVSX registry, allowing threat actors to claim the namespace and upload malicious extensions.

These AI-assisted IDEs are forked from Microsoft VSCode, but cannot use the extensions in the official store due to licensing restrictions. Instead, they are supported by OpenVSX, an open-source marketplace alternative for VSCode-compatible extensions. As a result of forking, the IDEs inherit the list of officially recommended extensions, hardcoded in the configuration files, which point to Microsoft's Visual Studio Marketplace.

United States

As US Communities Start Fighting Back, Many Datacenters are Blocked (apnews.com) 65

America's tech companies and data center developers "are increasingly losing fights in communities where people don't want to live next to them, or even near them," reports the Associated Press: Communities across the United States are reading about — and learning from — each other's battles against data center proposals that are fast multiplying in number and size to meet steep demand as developers branch out in search of faster connections to power sources... [A]s more people hear about a data center coming to their community, once-sleepy municipal board meetings in farming towns and growing suburbs now feature crowded rooms of angry residents pressuring local officials to reject the requests...

A growing number of proposals are going down in defeat, sounding alarms across the data center constellation of Big Tech firms, real estate developers, electric utilities, labor unions and more. Andy Cvengros, who helps lead the data center practice at commercial real estate giant JLL, counted seven or eight deals he'd worked on in recent months that saw opponents going door-to-door, handing out shirts or putting signs in people's yards. "It's becoming a huge problem," Cvengros said. Data Center Watch, a project of 10a Labs, an AI security consultancy, said it is seeing a sharp escalation in community, political and regulatory disruptions to data center development. Between April and June alone, its latest reporting period, it counted 20 proposals valued at $98 billion in 11 states that were blocked or delayed amid local opposition and state-level pushback. That amounts to two-thirds of the projects it was tracking...

For some people angry over steep increases in electric bills, their patience is thin for data centers that could bring still-higher increases. Losing open space, farmland, forest or rural character is a big concern. So is the damage to quality of life, property values or health by on-site diesel generators kicking on or the constant hum of servers. Others worry that wells and aquifers could run dry...

HP

Workstation Owner Sadly Marks the End-of-Life for HP-UX (osnews.com) 152

Wednesday marked the end of support for the last and final version of HP-UX, writes OSNews.

They call it "the end of another vestige of the heyday of the commercial UNIX variants, a reign ended by cheap x86 hardware and the increasing popularisation of Linux." I have two HP-UX 11i v1 PA-RISC workstations, one of them being my pride and joy: an HP c8000, the last and fastest PA-RISC workstation HP ever made, back in 2005. It's a behemoth of a machine with two dual-core PA-8900 processors running at 1Ghz, 8 GB of RAM, a FireGL X3 graphics card, and a few other fun upgrades like an internal LTO3 tape drive that I use for keeping a bootable recovery backup of the entire system. It runs HP-UX 11i v1, fully updated and patched as best one can do considering how many patches have either vanished from the web or have never "leaked" from HPE (most patches from 2009 onwards are not available anywhere without an expensive enterprise support contract)...

Over the past few years, I've been trying to get into contact with HPE about the state of HP-UX' patches, software, and drivers, which are slowly but surely disappearing from the web. A decent chunk is archived on various websites, but a lot of it isn't, which is a real shame. Most patches from 2009 onwards are unavailable, various software packages and programs for HP-UX are lost to time, HP-UX installation discs and ISOs later than 2006-2009 are not available anywhere, and everything that is available is only available via non-sanctioned means, if you know what I mean.

Sadly, I never managed to get into contact with anyone at HPE, and my concerns about HP-UX preservation seem to have fallen on deaf ears. With the end-of-life date now here, I'm deeply concerned even more will go missing, and the odds of making the already missing stuff available are only decreasing. I've come to accept that very few people seem to hold any love for or special attachment to HP-UX, and that very few people care as much about its preservation as I do. HP-UX doesn't carry the movie star status of IRIX, nor the benefits of being available as both open source and on commodity hardware as Solaris, so far fewer people have any experience with it or have developed a fondness for it.

As the clocks chimed midnight on New Year's Eve, he advised everyone to "spare a thought for the UNIX everyone forgot still exists."
Books

NASA's Largest Library Is Closing Amid Staff and Lab Cuts (nytimes.com) 37

NASA is closing its largest research library at the Goddard Space Flight Center amid budget cuts and campus consolidation, putting tens of thousands of largely non-digitized historical and scientific documents at risk of being warehoused or discarded. The New York Times reports: Jacob Richmond, a NASA spokesman, said the agency would review the library holdings over the next 60 days and some material would be stored in a government warehouse while the rest would be tossed away. "This process is an established method that is used by federal agencies to properly dispose of federally owned property," Mr. Richmond said.

The shutdown of the library at NASA's Goddard Space Flight Center in Greenbelt, Md., is part of a larger reorganization under the Trump administration that includes the closure of 13 buildings and more than 100 science and engineering laboratories on the 1,270-acre campus by March 2026. "This is a consolidation not a closure," said NASA spokeswoman Bethany Stevens. The changes were part of a long-planned reorganization that began before the Trump administration took office, she said. She said that shutting down the facilities would save $10 million a year and avoid another $63.8 million in deferred maintenance.

Goddard is the nation's premiere spaceflight complex. Its website calls it "the largest organization of scientists, engineers, and technologists who build spacecraft, instruments, and new technology to study Earth, the Sun, our solar system, and the universe." [...] The library closure on Friday follows the shutdown of seven other NASA libraries around the country since 2022, and included three libraries this year. As of next week, only three -- at the Glenn Research Center in Cleveland, the Ames Research Center in Mountain View, Calif., and the Jet Propulsion Laboratory in Pasadena, Calif. -- will remain open.

United States

NJ's Answer To Flooding: It Has Bought Out and Demolished 1,200 Properties (arstechnica.com) 63

New Jersey has found its answer to the relentless flooding that has plagued the state's coastal and inland communities for decades: buy the homes, demolish them and turn the land back into open space permanently. The state's Blue Acres program has acquired some 1,200 properties since 1995, spending more than $234 million in federal and state funds to pay fair market value to homeowners exhausted by repeated floods from tropical storms, nor'easters, and heavy rain.

A Georgetown Climate Center report this month called the program a national model, crediting its success to faster processing than federal buyout programs, stable state funding and case managers who guide each homeowner through the process. The demolished homes become grass lots that absorb rainwater far better than concrete and asphalt.

Manville, a borough of 11,000 at the confluence of two rivers about 25 miles southwest of Newark, has sold 120 homes to the state for roughly $22 million between 2015 and 2024. Another 53 buyouts are underway there. The need for such programs is only growing. Sea levels along the New Jersey coast rose about 1.5 feet over the past century -- more than double the global rate -- and a Rutgers study predicts a further increase of 2.2 to 3.8 feet by 2100.

A November report from the Natural Resources Defense Council noted that billions in previously approved FEMA resilience grants have already been cancelled, making state-run initiatives like Blue Acres increasingly essential.
United States

'Foreign Tech Workers Are Avoiding Travel To the US' (computerworld.com) 224

In an opinion piece for Computerworld, columnist Steven Vaughan-Nichols argues that restrictive visa policies and a hostile border climate under the Trump administration are driving foreign tech workers, researchers, and conference speakers away from the U.S. The result, he says, is a gradual shift of talent, events, and long-term innovation toward more welcoming regions such as Europe, Canada, and Asia. From the report: I go to a lot of tech conferences -- 13 in 2025 -- and many of those I attend are outside the U.S.; several are in London, one is in Amsterdam, another in Paris, and two in Tokyo. Wherever I went this past year, when we weren't talking about AI, Linux, the cloud, or open-source software, the top non-tech topic for non-Americans involved the sweeping changes that have occurred since President Donald J. Trump returned to office last January. The conversations generally ended with something like this: "I'm not taking a job or going to a conference in the United States."

Honestly, who can blame them? Under Trump, America now has large "Keep Out!" and "No Trespassing!" signs effectively posted. I've known several top tech people who tried to come to the U.S. for technology shows with proper visas and paperwork, but were still turned away at the border. Who wants to fly for 8+ hours for a conference, only to be refused entry at the last minute, and be forced to fly back? I know many of the leading trade show organizers, and it's not just me who's seeing this. They universally agree that getting people from outside the States to agree to come to the U.S. is increasingly difficult. Many refuse even to try to come. As a result, show managers have begun to close U.S.-based events and are seeking to replace them with shows in Europe, Canada, and Asia. [...]

Once upon a time, everyone who was anyone in tech was willing to uproot their lives to come to the U.S. Here, they could make a good living. They could collaborate, publish, and build companies in jurisdictions that welcome them, and meet their peers at conferences. Now, they must run a gauntlet at the U.S. border and neither a green card nor U.S. citizenship guarantees they won't be abused by the federal government. Trump's America seems bound and determined to become a second-rate tech power. His administration can loosen all the restrictions it wants on AI, but without top global talent, U.S. tech prowess will decline. That's not good for America, the tech industry or the larger world.

Medicine

Singapore Study Links Heavy Infant Screen Time To Teen Anxiety (bloomberg.com) 5

A study by a Singapore government agency has found that children exposed to high levels of screen time before age two showed brain development changes linked to slower decision-making and higher anxiety in adolescence, adding to concerns about early digital exposure. From a report: The study was conducted by a team within the country's Agency for Science, Technology and Research and the National University of Singapore, and published in The Lancet's eBioMedicine open access journal. It tracked 168 children for more than a decade, and conducted brain scans on them at three time points. Heavier screen exposure among very young children was associated with "accelerated maturation of brain networks" responsible for vision and cognitive control, the study found.

The researchers suggested this may have been the result of "intense sensory stimulation that screens provide." They found that screen time measured at ages three and four, however, did not show the same effects. Those children with "altered brain networks" took longer to make decisions when they were 8.5, and also had higher anxiety symptoms at age 13, the study said.

Linux

Fedora Continued At The Forefront Of Upstream Linux Innovations In 2025 (phoronix.com) 36

Phoronix's Michael Larabel is "reliving some of the best moments for Fedora Linux in 2025" by highlighting the year's most popular news around the distro. Throughout 2025, Fedora continued to lead upstream Linux innovation with bold changes like Wayland-only GNOME, newer kernels, architecture cleanups, and experimental features -- while openly grappling with controversial shifts such as dropping 32-bit support and modernizing long-standing subsystems.

"Fedora Linux this year continued in punctually shipping the very latest upstream Linux innovations from the freshest Wayland components to Linux kernel features and continuing to leverage other improvements in the open-source world," writes Larabel. "Fedora enjoyed the successful Fedora 42 and Fedora 43 releases this year, including going with Wayland-noly GNOME and further phasing of 32-bit packages. Fedora's KDE spin continued improving too and the Red Hat sponsored Linux distribution enjoyed a wealth of other improvements this year."
AI

Did Tim Cook Post AI Slop in His Christmas Message Promoting 'Pluribus'? (daringfireball.net) 23

Artist Keith Thomson is a modern (and whimsical) Edward Hopper. And Apple TV says he created the "festive artwork" shared on X by Apple CEO Tim Cook on Christmas Eve, "made on MacBook Pro."

Its intentionally-off picture of milk and cookies was meant to tease the season finale of Pluribus. ("Merry Christmas Eve, Carol..." Cook had posted.)

But others were convinced that the weird image was AI-generated.

Tech blogger John Gruber was blunt. "Tim Cook posts AI Slop in Christmas message on Twitter/X, ostensibly to promote 'Pluribus'." As for sloppy details, the carton is labeled both "Whole Milk" and "Lowfat Milk", and the "Cow Fun Puzzle" maze is just goofily wrong. (I can't recall ever seeing a puzzle of any kind on a milk carton, because they're waxy and hard to write on. It's like a conflation of milk cartons and cereal boxes.)
Tech author Ben Kamens — who just days earlier had blogged about generating mazes with AI — said the image showed the "specific quirks" of generative AI mazes (including the way the maze couldn't be solved, expect by going around the maze altogether). Former Google Ventures partner M.G. Siegler even wondered if AI use intentionally echoed the themes of Pluribus — e.g., the creepiness of a collective intelligence — since otherwise "this seems far too obvious to be a mistake/blunder on Apple's part." (Someone on Reddit pointed out that in Pluribus's dystopian world, milk plays a key role — and the open spout of the "natural" milk's carton does touch a suspiciously-shining light on the Christmas tree...)

Slashdot contacted artist Keith Thomson to try to ascertain what happened...
Open Source

Up Next for Arduino After Qualcomm Acquisition: High-Performance Computing (eetimes.com) 26

Even after its acquisition by Qualcomm, the EFF believes Arduino "isn't imposing any new bans on tinkering with or reverse engineering Arduino boards," (according to Mitch Stoltz, EFF director for competition and IP litigation). While Adafruit's managing editor Phillip Torrone had claimed to 36,000+ followers on LinkedIn that Arduino users were now "explicitly forbidden from reverse engineering," Arduino corrected him in a blog post, noting that clause in their Terms & Conditions was only for Arduino's Software-as-a-Service cloud applications. "Anything that was open, stays open."

And this week EE Times spoke to Guneet Bedi, SVP of Arduino, "who was unequivocal in saying that Arduino's governance structure had remained intact even after the acquisition." "As a business unit within Qualcomm, Arduino continues to make independent decisions on its product portfolio, with no direction imposed on where it should or should not go," Bedi said. "Everything that Arduino builds will remain open and openly available to developers, with design engineers, students and makers continuing to be the primary focus.... Developers who had mastered basic embedded workflows were now asking how to run large language models at the edge and work with artificial intelligence for vision and voice, with an open source mindset," he said. According to Bedi, this was where Qualcomm's technology became relevant. "Qualcomm's chipsets are high performance while also being very low power, which comes from their mobile and Android phone heritage. Despite being great technology, it is not easily accessible to design engineers because of cost and complexity. That made this a strong fit," he said.

The most visible outcome of this acquisition is Uno Q, which Bedi described as being comparable to a mid-tier Android phone in capability, starting at a price of $44. For Arduino, this marked a shift beyond microcontrollers without abandoning them. "At the end of the day, we have not gone away from our legacy," Bedi said. "You still have a real-time microcontroller, and you still write code the way Arduino developers are used to. What we added is compute, without forcing people to change how they work." Uno Q combines a Linux-based compute system with a real-time microcontroller from the STM32 family. "You do not need two different development environments or two different hardware platforms," Bedi added... Rather than introducing a customized operating system, Arduino chose standard Debian upstream. "We are not locking developers into anything," Bedi said. "It is standard Debian, completely open...." Pre-built models covering tasks like object detection and voice recognition run locally on the board....

While the first reference design uses Qualcomm silicon, Bedi was careful to stress that this does not define the roadmap. "There is zero dependency on Qualcomm silicon," he said. "The architecture is portable. Tomorrow, we can run this on something else." That distinction matters, particularly for developers wary of vendor lock-in following the acquisition. Uno Q does compete directly with platforms like Raspberry Pi and Nvidia Jetson, but Bedi framed the difference less in terms of raw performance and more in flexibility. "When you build on those platforms, you are locked to the board," he said. "Here, you can build a prototype, and if you like it, you can also get access to the chip and design your own hardware." With built-in storage removing the need for external components, Uno Q positions itself less as a faster board and more as a way to simplify what had become an increasingly messy development stack...

Looking a year ahead, Bedi believes developers should experience continuity rather than disruption. The familiar Arduino approach to embedded and real-time systems remains unchanged, while extending naturally into more compute-intensive applications... Taken together, Bedi's comments suggest that Arduino's post-acquisition direction is less about changing what Arduino is, and more about expanding what it can realistically be used for, without abandoning the simplicity that made it relevant in the first place.

"We want to redefine prototyping in the age of physical artificial intelligence," Bedi said...
EU

Challenges Face European Governments Pursuing 'Digital Sovereignty' (theregister.com) 57

The Register reports on challenges facing Europe's pursuit of "digital sovereignty": The US CLOUD Act of 2018 allows American authorities to compel US-based technology companies to provide requested data, regardless of where that data is stored globally. This places European organizations in a precarious position, as it directly clashes with Europe's own stringent privacy regulation, the General Data Protection Regulation (GDPR)... Furthermore, these warrants often come with a gag order, legally prohibiting the provider from informing their customer that their data has been accessed. This renders any contractual clauses requiring transparency or notification effectively meaningless. While technical measures like encryption are often proposed as a solution, their effectiveness depends entirely on who controls the encryption keys. If the US provider manages the keys, as is common in many standard cloud services, they can be forced to decrypt the data for authorities, making such safeguards moot....

American hyperscalers have recognized the market demand for sovereignty and now aggressively market 'sovereign cloud' solutions, typically by placing datacenters on European soil or partnering with local operators. Critics call this 'sovereignty washing'... [Cristina Caffarra, a competition economistand driving force behind the Eurostack initiative] warns that this does not resolve the fundamental problem. "A company subject to the extraterritorial laws of the United States cannot be considered sovereign for Europe," she says. "That simply doesn't work." Because, as long as the parent company is American, it remains subject to the CLOUD Act...

Even when organizations make deliberate choices in favour of European providers, those decisions can be undone by market forces. A recent acquisition in the Netherlands illustrates this risk. In November 2025, the American IT services giant Kyndryl announced its intention to acquire Solvinity, a Dutch managed cloud provider. This came as an "unpleasant surprise" to several of its government clients, including the municipality of Amsterdam and the Dutch Ministry of Justice and Security. These bodies had specifically chosen Solvinity to reduce their dependence on American firms and mitigate CLOUD Act risks.

Still, The Register provides several examples of government systems that are "taking concrete steps to regain control over their IT."
  • Austria's Federal Ministry for Economy, Energy and Tourism now has 1,200 employees on the European open-source collaboration platform Nextcloud, leading several other Austrian ministries to also implement Nextcloud. (The Ministry's CISO tells the Register "We can see our input in Nextcloud releases. That is a feeling we never had with Microsoft.")
  • France's Ministry of Economics and Finance recently completed NUBO (which the Register describes as "an OpenStack-based private cloud initiative designed to handle sensitive data and services.")

Thanks to long-time Slashdot reader mspohr for sharing the article.


Open Source

Open Source Initiative Estimates the 'Top Open Source Licenses in 2025' (opensource.org) 13

The nonprofit Open Source Initiative offers "enriched" license pages with "relevant metadata to provide deeper insights and better support".

So which pages got the most pageviews in 2025? The MIT license, Apache 2.0 license, BSD licenses (3-clause and 2-clause), and GNU General Public license:
mit (1.5M)
apache-2-0 (344k)
bsd-3-clause (214k)
bsd-2-clause (128k)
gpl-2-0 (76k)
gpl-3-0 (55k)
isc-license-txt (35k)
lgpl-3-0 (34k)
OFL-1.1 (31k)
lgpl-2-1 (24k)
. .
From the Open Source Initiative's announcement: Please note that these are aggregated pageviews from actual humans along the year of 2025... Actual humans (presumably) because the number of requests by bots or crawlers is several orders of magnitude higher (e.g. requests just for the MIT license are on the range of 10M per month).

We do provide an API service that gives access to the canonical list of OSI Approved Licenses — this is a very new service, which hopefully will be adopted by automated requests from CI/CD pipelines. One final observation is that the number of human pageviews is likely higher because we are using Plausible as our data source and a high percentage of our target audience uses Ad blockers, which by design are not accounted by Plausible. Users from China are also likely undercounted by Plausible for the same reason.

Science

Should Physicists Study the Question: What is Life? (msn.com) 89

An astrophysicist at the University of Rochester writes that "many" of his colleagues in physics "have come to believe that a mystery is unfolding in every microbe, animal, and human." And it's a mystery that:

- "Challenges basic assumptions physicists have held for centuries"
- "May even help redefine the field for the next generation"
- "Could answer essential questions about AI."

In short, while physicists have favored a "reductionist" philosophy about the fundamental laws controlling the universe (energy, mattery, space, and time), "long-promised 'theories of everything' such as string theory, have not borne significant fruit: There are, however, ways other than reductionism to think about what's fundamental in the universe. Beginning in the 1980s, physicists (along with researchers in other fields) began developing new mathematical tools to study what's called "complexity" — systems in which the whole is far more than the sum of its parts. The end goal of reductionism was to explain everything in the universe as the result of particles and their interactions. Complexity, by contrast, recognizes that once lots of particles come together to produce macroscopic things — such as organisms — knowing everything about particles isn't enough to understand reality...

Physicists have always been good at capturing the essential aspects of a system and casting those essentials in the language of mathematics... Now those skills must be brought to bear on an age-old question that is only just getting its proper due: What is life? Using these skills, physicists — working together with representatives of all the other disciplines that make up complexity science — may crack open the question of how life formed on Earth billions of years ago and how it might have formed on the distant alien worlds we can now explore with cutting-edge telescopes. Just as important, understanding why life, as an organized system, is different at a fundamental level from all the other stuff in the universe may help astronomers design new strategies for finding it in places bearing little resemblance to Earth. Analyzing life — no matter how alien — as a self-organizing information-driven system may provide the key to detecting biosignatures on planets hundreds of light-years away.

Closer to home, studying the nature of life is likely essential to fully understanding intelligence — and building artificial versions. Throughout the current AI boom, researchers and philosophers have debated whether and when large language models might achieve general intelligence or even become conscious — or whether, in fact, some already have. The only way to properly assess such claims is to study, by any means possible, the sole agreed-upon source of general intelligence: life. Bringing the new physics of life to problems of AI may not only help researchers predict what software engineers can build; it may also reveal the limits of trying to capture life's essential character in silicon.

IT

FFmpeg Developer Files DMCA Against Rockchip After Two-Year Wait for License Fix (x.com) 49

GitHub has disabled Rockchip's Media Process Platform repository after an FFmpeg developer filed a DMCA takedown notice, nearly two years after the open-source project first publicly accused the Chinese chipmaker of license violations. The notice, filed December 18, claims Rockchip copied thousands of lines of code from FFmpeg's libavcodec library -- including decoders for H.265, AV1, and VP9 formats -- stripped the original copyright notices, falsely claimed authorship and redistributed the code under Apache's permissive license rather than the original LGPL.

FFmpeg first called out Rockchip in February 2024 for "blatantly copy and pasting FFmpeg code" into its driver, but the chipmaker's last response suggested no intention to resolve the matter. The DMCA notice requests either removal of the infringing files or restoration of proper attribution and an LGPL-compatible license.
Apple

Apple Settles Brazilian Antitrust Case, Must Allow Third-Party App Stores and External Payment Links (macrumors.com) 22

Apple has agreed to a settlement with Brazil's antitrust regulator that will require the company to allow third-party app stores on iPhones and permit developers to direct users to external payment options, marking another country where Apple's tightly controlled App Store model is being pried open by government action.

Brazil's Administrative Council of Economic Defense approved the settlement this week, resolving an investigation that began in 2022 into whether Apple's restrictions on app distribution and payments limited competition. Under the new rules, developers can offer third-party payment methods within their apps alongside Apple's own system. The fee structure varies: purchases through Apple's system remain subject to a 10% or 25% commission plus a 5% transaction fee. Apps that include a clickable link to external payment will face a 15% fee, while static text directing users elsewhere incurs no charge. Third-party app stores will pay a 5% Core Technology Commission.
Music

Spotify Disables Accounts After Open-Source Group Scrapes 86 Million Songs From Platform (therecord.media) 27

After Anna's Archive published a massive scrape containing 86 million songs and metadata from Spotify, the streaming giant responded by disabling the nefarious accounts responsible. A spokesperson for Spotify told Recorded Future News that it "has identified and disabled the nefarious user accounts that engaged in unlawful scraping."

"We've implemented new safeguards for these types of anti-copyright attacks and are actively monitoring for suspicious behavior," the spokesperson said. "Since day one, we have stood with the artist community against piracy, and we are actively working with our industry partners to protect creators and defend their rights." The Record reports: The spokesperson added that Anna's Archive did not contact them before publishing the files. They also said it did not consider the incident a "hack" of Spotify. The people behind the leaked database systematically violated Spotify's terms by stream-ripping some of the music from the platform over a period of months, a spokesperson said. They did this through user accounts set up by a third party and not by accessing Spotify's business systems, they added.

Anna's Archive published a blog post about the cache this weekend, writing that while it typically focuses its efforts on text, its mission to preserve humanity's knowledge and culture "doesn't distinguish among media types." "Sometimes an opportunity comes along outside of text. This is such a case. A while ago, we discovered a way to scrape Spotify at scale. We saw a role for us here to build a music archive primarily aimed at preservation," they said. "This Spotify scrape is our humble attempt to start such a 'preservation archive' for music. Of course Spotify doesn't have all the music in the world, but it's a great start."

Slashdot Top Deals