❌

Reading view

Ubuntu's 'Rust-ification' Hits New Milestone: Coreutils Migration is Complete

"Ubuntu has managed to do away with GNU Core Utilities in its default stack," reports the blog It's FOSS. The last three utilities — cp, mv and rm — have been moved to versions from the uutils project (which reimplements utilities in Rust). Everything else, from ls and cat to chmod and du, made that jump in earlier releases... Canonical started "oxidizing" Ubuntu last year, and Ubuntu 25.10 became the first release to ship [ the uutils project's] coreutils as the default. That release also made sudo-rs the default privilege tool, replacing a command that had been in place for decades. 26.04 was the release where the plan did slow down quite a bit, as Canonical kept cp, mv, and rm on their GNU versions due to a bunch of TOCTOU issues that were blocking the full implementation. These were caught during an audit, when Canonical commissioned Zellic for two rounds between December 2025 and March 2026, focusing on the most security-sensitive utilities first. Across both rounds, Zellic raised 113 issues, and 44 of them were assigned CVEs. Canonical says the vast majority have been resolved. Getting here has had its ups and downs, and the last stretch was not clean. In July, uutils cp went back into the archive and came straight out again after it broke live image builds. The fix was quick; as the developers marked it "Critical," the fix went upstream, and the migration landed in time for 26.10. When typing commands, nothing changes for you on the surface. uutils coreutils is designed to be a drop-in replacement for essential GNU tools, and the project treats any divergence from GNU as a bug, further pointing out that some options may still be missing or behave differently. So if you prefer staying on the GNU version, you have the option to install the coreutils-from-gnu package that houses all the required components.

Read more of this story at Slashdot.

  •  

While Hollywood Fears an AI Future, China's Film Industry is Embracing It

The Los Angeles Times reports: Chen Yilong has racked up plenty of film and TV credits in his two decades as an actor, but with work getting scarcer he signed a contract in August to license the image of his face to a Chinese production studio. Chen's role will be to sit in front of a video camera and make facial expressions at the prompt of a director. A neutral stare. An angry glare. A look of surprise. Using artificial intelligence, the studio will use images of Chen's face to generate an avatar, also known as a "digital human," to star in an AI-generated movie. "If you can't beat it, join it," said Chen, 38, who works in Beijing. The Chinese film and video industry is being transformed by AI-driven storytelling, fueled by rapid advances in video generation software, and at ground zero are the so-called micro dramas that play out on millions of smartphones. Typically just a minute or two in length, the videos are devoured by Chinese audiences... And the cost of producing them has been cut drastically through the use of AI software developed by Chinese technology juggernauts including Kuaishou Technology and TikTok's global owner, ByteDance. The number of Chinese-made micro dramas surged in the first three months of this year to 128,000, according to the China Netcasting Services Assn. More than 95% of them were made with AI, the association said.... Sun Wei founded Feixiang Universe, the Shenzhen-based studio that cast Chen. The fear of accidentally "stealing someone's face" was a big reason she said she decided to license real people's likenesses for an AI production set during China's Tang Dynasty more than 1,000 years ago. Thanks to AI's training data bias, AI-generated performers tend to have similar features and share a homogenous look, Sun said. Many have flawless skin and extremely symmetrical faces, requiring her and other Chinese AI filmmakers to cast a wide net to "buy" new faces and digitize actor's expressions. Lu Beike, who directed the big-budget Chinese series "Three-Body," felt theAI-generated scenes he'd tried came out sub-standard. "Lu added that if 90% of a film was generated by AI, a real human performance could appear jarring. A real actor's expressions carried more nuance and emotion. The skin textures did not match. Sometimes the only solution was to process the live-action material until the person looked a little less real — until they fit back into the 'AI world,' Lu said." But at Sun Wei's studio, they're thrilled they can produce a 90-minute AI film for $500,000 where professional productions used to cost millions of dollars. According to the article, Sun's team works with ChatGPT, Kimi or DeepSeek to flesh out entire screenplays from a short paragraph. The screenwriter takes over, but "to produce the finished product, Sun's team uses Chinese video-generation models to input the type of scenes, backgrounds and performers they want, with the AI generating 15 seconds of footage each time." Still, the article points out that "Similar tools are being tested in the U.S., and the AI trends upending China's entertainment industry may be a harbinger for what's to come in Hollywood, said Michael Berry, a professor specializing in contemporary Chinese culture at UCLA. Already, Chinese companies that sell AI-powered video-generation software are seeking inroads in Hollywood..."

Read more of this story at Slashdot.

  •  

Looking for a Housecall Pro alternative

I’ve been researching field service software for a while now and Housecall Pro kept coming up over and over again in pretty much every comparison or discussion I found, so I decided to finally give it a try.

I signed up for the free trial and did a demo and honestly I thought I had finally found the software I was going to go with. It seemed like it checked a lot of the boxes I was looking for.

But the more I’ve used it and the more I’ve looked into it, I’m starting to have second thoughts. The platform feels a little more complicated than I was expecting and the price is also a bit higher than I really want to spend. We're a team of 6 so we'd be looking at around $650 a month.

I’ve also been going through a lot of the reviews and experiences people have posted about Housecall Pro and some of them honestly have me a little nervous about committing to it.

The follow up calls after the demo have also been a little excessive too, I get calls every day.

Now I’m basically back to looking at alternatives. I’ve been doing more research and I keep coming back to Jobber and Clientility, I hear good things about them on reddit.

I’m mainly looking for something pretty straightforward with scheduling, estimates, invoicing, customer management, team assigning, payroll, etc.

I’d really like to see alternatives so I can make another decision because I thought I was done researching after finding Housecall Pro.

submitted by /u/New_Smile7
[link] [comments]
  •  

Which free CRM for networking?

Hey,
I am looking for a CRM for personal networking. My requirements are:

  • Completely free, not just a free trial or limited-time offer
  • Basic CRM functionality: contact management, custom properties/tags, segments, etc.
  • Automated follow-ups when someone hasn't responded after X days
  • Some basic email integration/tracking
  • Quick and easy to set up. I don't need a full-featured sales CRM with a steep learning curve

I have looked into some options but none really check all the boxes. However, I am completely new to CRM so I might not have th best judgment here. Any and all recommendations are highly appreciated, thanks in advance.

submitted by /u/Affectionate_Bus4514
[link] [comments]
  •  

So you dream of creating your CRM and make a fortune? - Learn from my mistakes

Don't do it if any of these are not in place:

- Customers who are really ready to give you the money and have signed a contract;

- Have less than 5 years of experience working with different CRMs

- If you wanna create a domain-specific CRM, talk to that business, because you can 'solve' the problem that doesn't exist

- You have no idea about SDLC and security

- You don't have an enormous marketing budget.

Just don't. You will not make money from Reddit posts about your CRM.

The time of 'Build and users will follow' is past. You can't compete with HS, SF, PD, Zoho, Monday, and other big players. Most of them have literally free or 9$ seats.

A serious company will not consider giving data to a no-name CRM, so you will have to target SMB, which is expensive and hard. Your customers DON'T sit here in this subreddit

To make an MVP you will need at least 160h to make it run. And hundreds of hours of bug fixing and polishing. And you didn't even touch marketing. SEO?- impossible in this niche. Paid ads? - one of the most expensive. GEO? - same as SEO.

In a delusional fever, I made mine, learned my lessons, and made it free for everybody. Even with the rich free package, only 50 people registered, and like 20 are using it regularly.

All the AI, security standards matching ISO2700, UI copied from Pipedrive, customization possibilities. Still, every CRM is a glorified Excel sheet under the hood.

You can check out mine w/o registration just to touch it. There is a demo page.

https://ln2crm.com/crm.html

submitted by /u/Admirable_Comedian_2
[link] [comments]
  •  

Scientists Discover Mysterious New X-Ray Objects 'Unlike Any They Have Seen Before'

An anonymous reader quotes a report from Space.com: NASA's Chandra X-ray Observatory has found a brand new type of an otherwise familiar object -- compact binary systems that steal gas from other stars, but which do so while emitting very low-energy X-rays but copious amounts of ultraviolet. Chandra spotted 84 suspicious object emitting very low-energy X-rays in six galaxies -- four evolved ellipticals and two spirals, namely our near-neighbor the Andromeda Galaxy (M31) and the Pinwheel Galaxy (M101). "We've never encountered a group of objects that act like this," said Mustafa Muhibullah of the University of Alabama in a statement. Compact objects, in the form of black holes, neutron stars and white dwarfs, are the remains of stars that have died. Their small size and powerful gravity means that they're adept at getting close to orbiting companion stars and ripping the stars' outer layers of gas away. The gas swirls around the compact object, falling onto its surface, and this accretionary process usually produces torrents of high-energy X-rays because the stolen gas becomes superheated by the compact object's gravitational vice-like grip. Because of their weak X-rays, Muhibullah's team refer to them as 'hypersoft X-ray sources'. Since low-energy X-rays and ultraviolet light are next to each other on the electromagnetic spectrum, Muhibullah and his team suspect that the low-energy X-rays are spillover from objects emitting prodigious amounts of ultraviolet. Moreover, they think that these objects are lower-level compact binaries. They're hard to find though, because the interstellar medium of hydrogen and helium gas between the stars absorbs ultraviolet light. This could be why we have yet to find any hypersoft X-ray sources in our own galaxy, because we have to look through the interstellar medium through the plane of the Milky Way. Consequently, there could be a large population of hypersoft X-ray sources that remain undiscovered and they could have an important effect on the universe around them. The findings have been published in the journal Nature Astronomy.

Read more of this story at Slashdot.

  •  

KREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session Tokens

Cybersecurity researchers have shed light on a previously undocumented Brazilian banking malware operation that delivers a toolkit called KREMLIN. Elastic Security Labs is tracking the activity under the moniker REF9334. Active since at least May 2025, the threat actor has used lures that impersonate a dozen Brazilian banks and install a malicious browser extension on Google Chrome and

  •  

Iranian Hackers Use Telegram-Controlled Malware to Spy on Dissidents and Journalists

Cybersecurity agencies in the United States, the United Kingdom, and the Netherlands have detailed a Windows malware that they say Iran's intelligence service uses to spy on dissidents, journalists, and activists around the world. The malware is controlled via the Telegram messaging app and can copy a target's emails and chat messages, take screenshots, and activate the microphone to record

  •  

BambooToken Malware Uses MQTT to Control Windows and Linux Systems

Cybersecurity researchers have disclosed details of a multi-platform campaign that uses the Message Queueing Telemetry Transport (MQTT) protocol as a communication channel to control Windows and Linux systems. The emerging malware family, codenamed BambooToken, is assessed to be active since at least February 2023 and put to use in attacks targeting organizations across Asia and South America.

  •  

Accounts with consultants, that serve multiple accounts

We have consultants in our industry that service multiple Accounts. I have been adding essentially duplicate contacts to each account, only a few so far but…

Wondering the best way to handle this.

Would we be better off creating these consultants as accounts and creating a field in accounts to select that Account as the Accounts consultant (or Accounts contact), or just stick to using duplicate contact entries?

submitted by /u/motor_nymph56
[link] [comments]
  •  

Cops Searched Thousands of Flock Cameras for Reasons of 'LMAO,' 'IDK,' 'Hehe,' And 'Asdfg'

404 Media reports: Last summer, a cop with the Lake County, Indiana Sheriff's Department used Flock's surveillance search engine to look for a license plate across more than 19,000 cameras in 1,558 cities and towns. The cop's stated reason for the search, according to a record of Flock's system, was "LMAO." The cop is one of dozens who put gibberish, jokes, or other nonsense into Flock's "reason" box, highlighting the casualness and lack of care some cops have when searching an incredibly powerful surveillance system. This is on top of the thousands upon thousands of cops who simply wrote something like "investigation," "test," or left the box blank as their search "reason," according to a new analysis by the Electronic Frontier Foundation and shared with 404 Media. EFF's investigation found cops across dozens of jurisdictions writing "LMAO," "LOL," "Hehe," "Haha," "idk," "blah," "TBD," and "robbery I don't remember the case number leave me alone" in Flock's "reason" box for searches. They found cops writing "idiot," "fuck this new search engine," "dickhead," "shithead," and "WEIRD KID" in the reason box. And they found an entire class of police button mashers, who ran searches for reasons of "asdfg," "gyghkkghghjkghjk," "jhjhjkhj," "jkhhkjhjk," "nmbvcbnm," and so on and so forth. The searches came from police departments across the country from 2023 through late 2025, when Flock changed how the "reason" box in its search system functions... Each time a search is performed, a record of it is saved in the Flock system, which can be obtained by the public using government records requests. These audit logs show hundreds of thousands of searches of the system; after 404 Media and other news outlets used these types of logs to show police using the Flock system to look for undocumented immigrants on behalf of ICE, a woman in Texas who had an abortion, and protesters, cops were warned by government surveillance centers to be "as vague as permissible" about the reasons for their searches... A police department said it investigated a cop who wrote "driving around being weird" in the reason field but found it was for "legitimate public safety purposes." If a police chief "stood in front of a city council and asked for permission to install hundreds of cameras just so his officers could investigate the high crime of 'haha,' they would be laughed out of the room," argues the EFF blog post, calling this proof that agencies can't be trusted to oversee themselves. But judges aren't being asked to authorize searches or review evidence, which the EFF post argues shows laws and courts haven't caught up yet with a new technology. Whatever auditing happens is clearly "deficient," the EFF warns, and while many jurisdictions require by law an actual reason for searches, "this keeps happening because police use automated license plate readers as a convenient shortcut around constitutional privacy safeguards." The EFF sees police officers "making a mockery of our civil liberties" by logging reasons like "LOL", "LMAO", "sexy", and "idk" while accessing sensitive location data. In fact, they argue the warrant-less databases fostered a culture of abuse that "allowed police to treat a mass surveillance network like their own personal search engine, permitting the tracking of the movements of everyday citizens for low-level complaints, personal whims, and sometimes, seemingly, for the lols." Flock Safety claims it has improved its system by requiring officers to select from a dropdown list of crimes before running a search-but that only makes it easier for officers to hide improper searches behind the veneer of uniformity. The system does not require proof that the dropdown reason actually matches the true purpose of the search... Since this update, officers are no longer required to type out why they are digging through a driver's movement history, and instead can select a pre-packaged option like "Traffic infraction" or "Other" in half a second... Mass surveillance is incompatible with a free society, and especially so when the people with access to this data are treating it like a joke. This ALPR mass surveillance — the indiscriminate, continuous collection and retention of location data on every driver, regardless of suspicion — should not exist. But because it does, EFF continues to urge courts and state legislatures to immediately step in and impose strict, enforceable restrictions to rein in this abuse. At an absolute minimum, this means mandating rigid data deletion deadlines and an ironclad warrant requirement. If police want the power to track a person's movements, they must be required to convince a judge with evidence and probable cause. They should not be able to bypass the Constitution with a search for "haha."

Read more of this story at Slashdot.

  •  

Friendly reminder: fill out and share the first-ever Drupal Ecosystem Retrospective survey by September 20!

The Drupal Association is conducting its first-ever Drupal Ecosystem Retrospective. This is a good opportunity to directly give the Drupal Association your candid feedback and thoughts about what you feel is going well and what needs improvement in the Drupalverse.

The due date for filling this out is September 20, 2026 (I have no idea if there’s a specific time; I’m just a random Drupaler who wants as many people in our community to be heard). The due date happens to be the weekend before the Drupal Association’s board retreat and shortly before DrupalCon Rotterdam.

Anyways, please consider filling this out and/or sharing with other fellow Drupalists!

https://docs.google.com/forms/d/e/1FAIpQLSdgHEgx9QbutXygHlgxcJjgLn24gMQok2h2ujB9ePH_JpH9dg/viewform?usp=send_form

submitted by /u/cmkn
[link] [comments]
  •  

Lost a signed customer because I stopped following up after Closed Won

I manage a software service with my team, handling both development and sales to client companies. I’d like to share an experience I had last year.

I successfully closed a deal with a new client. They were very positive about our service, and the contract had already been signed. However, I lost the client due to an absurd mistake, resulting in financial loss.

Once the contract was signed, I mentally filed the matter away as "done." I was busy developing new features at the time and focused more on coding than sales; since the client didn't reach out, I assumed everything was going smoothly.

The problem lay in the ambiguous position of the client's point of contact. API integration required approval from their IT team; a request had been submitted, but the IT team was slow to act. From the contact person's perspective, this was an internal company matter—not something to discuss with a vendor. Yet, had I known the situation, I could have resolved it by sending security documentation or contacting their IT team directly.

Consequently, the implementation was delayed, and the contract faded from both my memory and theirs. I only realized what had happened when I noticed the contract was missing while reconciling quarterly sales figures. Had I simply sent a quick email to the contact person, the contract might still be active today.

After that, I decided I needed a way to handle follow-ups after closing a deal, so I looked for such a feature in HubSpot, the CRM we were using. While the feature existed, it was only available in the Professional plan. We were on the Starter plan, and we couldn't justify paying an extra $80 per user just for that "cadence" feature.

So, I built a custom cadence tool myself. It connects our existing CRM with our email system; once a deal is marked as "won," it automatically generates CRM tasks and sends emails on scheduled dates—both after the deal closes and before the contract expires. Curious if it would be useful to others, I asked five acquaintances who work in sales to give it a try.

For some, it wasn't necessary because the CRM they were already using offered "cadence" features even in their low-cost plans. However, those in a similar situation to mine found it quite useful.

If you’re in a similar position and would like to try it out, please leave a comment.

I’ll send you the link if you do. It hasn't officially launched yet, so I'm currently collecting names for the waitlist.

submitted by /u/Diligent-Meat-1677
[link] [comments]
  •  

Human Attacker Exploits Marimo RCE, Reaches SSH Bastion in Eight Seconds

With artificial intelligence (AI) shrinking the window between vulnerability discovery and exploitation and lowering the barrier to entry for bad actors, new findings from Sysdig show that skilled human operators can move just as swiftly after gaining initial access. In one instance highlighted by the cloud security company, the threat actor pivoted from a vulnerable Marimo notebook to an SSH

  •  

Attack Chains, Not Just Attack Surfaces: Why Testing Individual Techniques Misses the Point

Introduction Security teams have gotten pretty good at testing against what can hurt them. Can this EDR agent catch this payload? Will my organization fail the phishing simulation? Does this SIEM rule fire on this particular technique? And, in more mature organizations, this testing happens continuously rather than as a one-off exercise. But no matter how much you validate against these

  •  
❌