The BIGGEST HACK in Desktop Linux History Just Happened! – Here’s What Happened (FULL BREAKDOWN)

The BIGGEST HACK in Desktop Linux History Just Happened! - Here's What Happened (FULL BREAKDOWN)

Video by Linux Tex via YouTube
The BIGGEST HACK in Desktop Linux History Just Happened! - Here's What Happened (FULL BREAKDOWN)

⚡ Personal ChatGPT coaching: LIVE 1 on 1 With Me
In just 3 hours, go from beginner to PRO. Book Now!
https://linuxtex.gumroad.com/l/chatgpt-mastery

Timestamps:
0:00 Intro
0:40 The AUR Explained
2:34 Packages Turned Evil
5:37 The Door Was Already Open
8:31 What Was The Real Target?
10:22 Who Let This Happen?
13:02 What To Do Right Now?
15:10 My Personal Thoughts

The biggest supply-chain attack in desktop Linux history just hit the Arch User Repository — and the scariest part? Nobody actually broke in. In this video we break down the June 2026 "Atomic Arch" attack: how hackers quietly hijacked trusted, orphaned AUR packages, slipped malicious code into their .install scripts, and turned everyday helpers like yay and paru into weapons built to steal developer credentials, SSH keys, GitHub and npm tokens, and cloud secrets.

This wasn’t a hack on Arch Linux itself — the official repositories were never touched. It was a hack on trust. We cover what the Arch User Repository (AUR) really is, exactly how the attack worked step by step, why developers and power users were the real target, who’s actually responsible, and the simple habits that keep you safe on Arch and Arch-based distros like EndeavourOS, CachyOS, Garuda, and Manjaro.

In this video:
– What the AUR is and how it actually works
– The full timeline of the "Atomic Arch" supply-chain attack
– How orphan package adoption was abused to inherit trust
– Why your SSH keys, GitHub tokens, and cloud secrets were the real prize
– Who’s to blame — Arch, AUR helpers, distros, maintainers, and users
– What to do right now to protect your system

Arch Linux got hacked, Arch User Repository security, AUR malware, Linux supply chain attack, Atomic Arch, Linux security 2026, yay, paru, PKGBUILD, EndeavourOS, CachyOS, Garuda, Manjaro, developer security, SSH key theft, npm token, cybersecurity — if you daily drive Arch, this one matters.

👉 Want to learn to use AI like a pro? I offer a personal, one-on-one ChatGPT Coaching program — go from complete beginner to power user in just 3 hours.
https://linuxtex.gumroad.com/l/chatgpt-mastery

If this video helped you out, drop a like and subscribe for more Linux deep dives. This is LinuxTex, signing out.

#ArchLinux #Linux #AUR #LinuxSecurity #CyberSecurity #SupplyChainAttack #EndeavourOS #CachyOS #OpenSource

Source

Open Source News Roundup: Tools, Security, and Community

Open Source News Roundup: Tools, Security, and Community

Collaborative Coding and Learning Social Coworking sessions focus on SORTEE, Vale text linting, and R debugging, offering structured peer support for open-source projects. Wikipedia celebrates 25 years with initiatives to train new editors, ensuring sustained community growth. New Software and Updates COSMIC Desktop introduces a new system monitor, enhancing user experience for Linux enthusiasts. Inkue, … Read more

Codex for Solutions Engineers: Making AI Tangible for Customers

Codex for Solutions Engineers: Making AI Tangible for Customers

Video by OpenAI via YouTube
Codex for Solutions Engineers: Making AI Tangible for Customers

"As a solutions engineer, my job is to make customers believe our technology can take them where they want to go. Codex helps me turn raw, messy context – customer emails, industry signals, product information, and even Trustpilot reviews – into something they can react to. I can analyze what their customers are asking for, mock up their website, apply those changes, and package the demo with a voiceover walkthrough. It makes the value tangible in their world, not ours.”

Stephanie Anani, Solutions Engineer, OpenAI

Source

State of the RISC-V Web Platform: Chromium and Node.js Progress, Joey Zeng #FOSSASIA Summit 2026

State of the RISC-V Web Platform: Chromium and Node.js Progress, Joey Zeng #FOSSASIA Summit 2026

Video by FOSSASIA via YouTube
State of the RISC-V Web Platform: Chromium and Node.js Progress, Joey Zeng #FOSSASIA Summit 2026

How close is RISC-V to becoming a first-class platform for modern web development? This session explores the latest progress in bringing Chromium, Node.js, and the JavaScript ecosystem to the open-source RISC-V architecture.

Learn about recent upstream work across V8, Blink, libwebrtc, and Node.js, including JIT compilation, performance optimization, build system integration, and hardware support. We’ll also review current benchmarks, CI status, remaining challenges, and the roadmap toward full Tier-1 support.

Whether you’re a browser developer, JavaScript engineer, or open hardware enthusiast, this talk provides an inside look at the future of the open web on RISC-V.

FOSSASIA Summit 2026 held in Bangkok, is Asia’s leading Open Source tech conference featuring sessions on #AI, #Cloud, #DevOps, #Open Hardware, #Security, #Web #Mobile Technologies, #Web3, and #Databases. Learn more: http://summit.fossasia.org

Session slide: https://eventyay.com/ev/88882f3e/talk/UNAZCARVPYWA/

#FOSSASIA #FOSSASIASummit #opensource #FOSS

Source

Commit-Then-Disclose: Cryptographic SBOM Auditing Without IP Leakage – Sharvil Bhatt & Swastik Gour

Commit-Then-Disclose: Cryptographic SBOM Auditing Without IP Leakage - Sharvil Bhatt & Swastik Gour

Video by CNCF [Cloud Native Computing Foundation] via YouTube
Commit-Then-Disclose: Cryptographic SBOM Auditing Without IP Leakage - Sharvil Bhatt & Swastik Gour

Don’t miss out! Join us at our next KubeCon + CloudNativeCon events in Yokohama, Japan (29-30 July, 2026), and Shanghai, China (8-9 September, 2026) Salt Lake City, United States (Nov 9–12, 2026). Connect with our current graduated, incubating, and sandbox projects as the community gathers to further the education and advancement of cloud native computing. Learn more at https://kubecon.io

Commit-Then-Disclose: Cryptographic SBOM Auditing Without IP Leakage – Sharvil Bhatt, Reliance Industries limited & Swastik Gour, Improving

Source

NANDA for Agentic Commerce: when agents roam on the Internet by Ramesh Raskar, PhD

NANDA for Agentic Commerce: when agents roam on the Internet by Ramesh Raskar, PhD

Video by Open Data Science and AI Conference via YouTube
NANDA for Agentic Commerce: when agents roam on the Internet by Ramesh Raskar, PhD

What happens when AI agents move beyond isolated apps and begin operating across the open internet?

In this ODSC AI East 2026 Keynote session, Ramesh Raskar, PhD, Associate Professor at MIT and Founding Architect of Project NANDA, explores the future of agentic commerce and the infrastructure needed for agents to discover, negotiate, coordinate, and make decisions online.

Drawing on his work in distributed AI agent architectures, decentralized decision-making, and agentic web infrastructure, Ramesh examines how systems like NANDA could reshape digital commerce, automation, and trust on the internet.

Watch to learn how the next generation of AI agents may move from task assistants to active participants in complex online ecosystems.

————————————————————————————————————-

Visit our website and choose the nearest ODSC event to attend and experience all our training and workshops: https://odsc.ai

To watch more videos like this, visit https://aiplus.training

Sign up for the newsletter to stay up to date with the latest trends in data science: https://opendatascience.com/newsletter/

Follow us online!
• Facebook: https://www.facebook.com/OPENDATASCI
• Instagram: https://www.instagram.com/odsc/
• Blog: https://opendatascience.com/
• LinkedIn: https://www.linkedin.com/company/open-data-science/
• X (twitter): https://x.com/_odsc

Source

How Ericsson approaches data transformation for AI ✨

How Ericsson approaches data transformation for AI ✨

Video by SAP via YouTube
How Ericsson approaches data transformation for AI ✨

What does it take to drive data transformation in a large enterprise?

Malin Persson from Ericsson shares practical advice on for large enterprises: start with what drives the most business value, then work backwards to build the data foundation required to support and scale it.

A grounded perspective from someone leading transformation in a global organization.

Watch the replay: https://events.sap.com/fabric-of-data-and-ai/en_us/home.html?source=social-glo-orgsocial-bdcsurge

#SAPBusinessDataCloud #BDC #DataFabric #AI

Source

Windows Weekly 990

Windows Weekly 990

Video by TWiT Tech Podcast Network via YouTube
Windows Weekly 990

Windows Weekly is about more than Windows. Veteran Microsoft insiders Paul Thurrott and Richard Campbell join Leo for a deep dive into the most valuable company in the world. From consumer to enterprise, AI to Xbox, Windows Weekly is the only Microsoft podcast you’ll ever need.

You can find more about TWiT.tv and subscribe to our full shows at https://podcasts.twit.tv
Join our community at Club TWiT: https://twit.tv/clubtwit

About us:
TWiT.tv is a technology podcasting network located in the San Francisco Bay Area with the #1 ranked technology podcast This Week in Tech hosted by Leo Laporte. Every week we produce over 30 hours of content on a variety of programs including Tech News Weekly, MacBreak Weekly, Windows Weekly, Security Now, Intelligent Machines, and more.

Source

Build a Complete RAG Application: End-to-End Tracing, Performance & RAGAS Evaluation (Notebook 1.9)

Build a Complete RAG Application: End-to-End Tracing, Performance & RAGAS Evaluation (Notebook 1.9)

Video by MLflow via YouTube
Build a Complete RAG Application: End-to-End Tracing, Performance & RAGAS Evaluation (Notebook 1.9)

In the ninth tutorial of the Mastering MLflow for GenAI series, Jules Damji (Databricks) builds a complete RAG application, instrumented with full MLflow observability—from query and document embedding and semantic search retrieval through LLM generation, performance analysis, and RAGAS quality evaluation.

What You’ll Learn:
🔹 End-to-end RAG pipeline instrumented as typed spans (PARSER, EMBEDDING, RETRIEVER, LLM, CHAIN): validate → embed → retrieve → assemble → generate → validate.
🔹 @mlflow.trace instrumentation plus mlflow.openai.autolog() for automatic LLM tracing.
🔹 Performance analysis across test queries: latency, token usage, cache hits, and estimated cost.
🔹 RAGAS Faithfulness and Context Relevance via mlflow.genai.evaluate() on traces with RETRIEVER spans.
🔹 Production notes: in-memory store and cosine similarity for teaching; swap in vector DBs and hybrid BM25 and semantic searches for real deployments.
🔹 MLflow UI & multi-level tracking and tracing: experiment config, per-query runs, per-step latency/tokens/cost, full pipeline timeline, span attributes, and latency bottlenecks.

Next in the Series: Notebook 1.10 covers the Multi-Agent Supervisor pattern with LangGraph.

Resources:
🔗 Notebook 1.9: https://github.com/dmatrix/mlflow-genai-tutorials/blob/main/09_complete_rag_application.ipynb
🎥 Full Series Playlist: https://youtube.com/playlist?list=PLaoPu6xpLk9EI99TuOjSgy-UuDWowJ_mR

Source

How LLMs Actually Generate Text

How LLMs Actually Generate Text

Video by Hugging Face via YouTube
How LLMs Actually Generate Text

Text generation looks like one function call. Underneath, it’s a loop: infer, pick a token, append it, repeat. Watch how Transformers.js runs an LLM step by step.. and understand what’s actually happening every time you chat with one.

Source