Senin, 25 Mei 2026

AMD Pulls a Bait-and-Switch on Linux Users with Vivado Licensing Changes

Big tech companies have a habit of offering something for free, watching the user base grow, and then quietly walking it back once people are too invested to leave easily. A bait-and-switch, so to speak.

Redis did exactly this back in March 2024, dropping its long-standing BSD license for the more restrictive dual licensing model, and the blowback was severe enough that the community forked it into Valkey almost immediately.

Linux tends to get hit hardest by these moves. Its comparatively smaller user base means less commercial pressure, making it an easy target to throw under the bus whenever companies feel like cutting costs or boosting profits.

One such case has now surfaced that will make you wonder if this particular company's decision was really shortsighted or is just a cash grab.

It doesn't make sense!

an edited picture that highlights the new licensing terms for vivado as of may 25, 2026. the linux line is highlighted here as the basic/free tier doesn't offer support for the platform

Vivado is AMD's design suite for its FPGAs and adaptive SoCs. It is what engineers, students, and hardware hobbyists use to write, synthesize, and test their FPGA designs. Until now, it has been available for free on both Windows and Linux under what AMD called the Standard Edition.

Starting with the 2026.1 release, AMD is switching to a tiered licensing model. The free Basic tier covers entry-level devices but is restricted to Windows only. Linux support does not show up until the "Core" tier, which costs somewhere between $1,200-$1,800 per year.

AMD framed all of this on its download page as a move toward more flexible licensing. On its dedicated licensing options page, the company told free-tier users the only thing changing was a simple annual license renewal.

That's not all. 🤷

When users went to AMD's support forum asking for an explanation, forum moderator Anatoli Curran showed up in the thread. His first order of business was to warn people about "bad language or abusive behaviour towards AMD," before getting around to addressing anything of substance.

When pushed for a real answer, Anatoli pointed unhappy users toward Vivado 2025.2, suggesting they simply stick with it if they did not want to pay. He did mention that 2025.2 loses official support once Vivado 2026.3 ships, but that detail was buried in a thread reply, leaving users with little more than a dead-end recommendation.

Anatoli also started putting out numbers, claiming that 70% of their customers still use Windows. As expected, someone cross-questioned him, asking if much of their users were on Windows, then why was Linux support being locked away behind a paywall.

this is a long screenshot of a forum reply by anatoli curran, a forum moderator for xilinix and amd, the highlighted part shows a 70% customers of vivado are on windows claim

To which he replied in a very PR-coded manner, completely disregarding what was brought up:

From Core and higher tiers, both Windows and Linux are supported platforms.

As stated already, AMD expectation is that the BASIC tier is used for simple, entry‑level needs. While more advanced, production workflows are aligned with paid tiers. These tiers are specifically designed to deliver the full flexibility and capabilities needed for serious development.
Hence, all paid tier levels have options of both Windows and Linux platform usage. Only BASIC tier limited to Windows ONLY platform support.

That really doesn't instill one bit of clarity and shows how apathetic tech giants like AMD can sometimes get. The conversation in the thread then continued along the lines of how Xilinx, and later, AMD, had gained the trust of Linux users by keeping an open outlook towards the community.

But pulling off such a thing without considering how people benefited from having Vivado on Linux tells you a lot about what this company actually thinks of its non-enterprise user base.

Students, hardware tinkerers, and academic researchers who have relied on a native Linux workflow are now left hanging. Keep in mind that many of those people eventually end up in engineering and procurement roles where they have real influence over hardware-related decisions.

What now?

As of writing this, AMD hadn't put out a statement regarding this, and the stonewalling has continued. Of course, more and more people are getting to know about this. It is just a matter of time before someone at PR has to do something about this.

Plus, with the kind of flak they have been getting over some of their most bizarre choices lately, I would handle this now instead of later.

Until then, you can participate in the conversation either on the main thread where this shady behavior was first reported, or you could head over to Hacker News and join the others in calling out AMD.


Suggested Read 📖: Bambu Lab Has Been Violating AGPLv3



from It's FOSS https://ift.tt/NVyTdxP
via IFTTT

Minggu, 24 Mei 2026

Bambu Lab Has Been Violating AGPLv3 for Years, SFC Says

The GNU Affero General Public License version 3, or AGPLv3, is one of the strongest copyleft licenses in the open source world.

Published by the Free Software Foundation in 2007, it requires that any software built on an AGPLv3-licensed project must make its complete source code available under the same terms.

That applies even when the software runs as a network service rather than being distributed as a standalone binary. I say that because what follows are two violations that the Software Freedom Conservancy has dug out after investigating Bambu Lab.

What the investigation found

this shows a cropped screenshot of the software freedom conservancy with a blog titled "comprehensive respons to bambu's agplv3 violations."

For context, Bambu Studio is the slicing software that ships with Bambu Lab's 3D printers. It is what translates a 3D model file into printable layers before passing the instructions along to the printer.

It was built on top of PrusaSlicer, which itself came from Slic3r. Both predecessors carry the AGPLv3, and so does every derivative built from them. SFC looked at both the userspace software and the firmware running on Bambu's devices and pointed out the violations.

The first is about libbambu_networking, a networking library that ships with Bambu Studio across Linux, Windows, and macOS. It handles all communication between the slicer and Bambu's cloud.

Bambu has never made the source code for it available, despite AGPLv3 requiring that any code distributed alongside an AGPLv3 project be released under the same terms. SFC says Bambu's own README has effectively sat with this admission for years now.

The second violation comes from how Bambu handled Paweł Jarczak, a developer who built a fork of OrcaSlicer that could communicate with Bambu's servers by studying the incomplete Bambu Studio source code.

He did not touch the proprietary library at all. Bambu still contacted him, demanded removal, and stated a cease-and-desist letter had been prepared, arguing its terms of service take precedence over the license.

You see the problem? The AGPLv3 explicitly says no one can place additional restrictions on the rights it grants. The SFC says going after Pawel the way Bambu did is itself a violation.

What's their new initiative about?

SFC's response is a new project called baltobu, short for "Bringing Affero Licensed Things (On)to Bambu Users." It lives on SFC's Forgejo instance and has three repositories, each going after a different piece of the puzzle.

reverse-networking is working to reverse-engineer the libbambu_networking library and produce a replacement. Since the binary is itself covered by AGPLv3, SFC's position is that anyone holding a copy has the right to examine and reverse-engineer it.

The second is orca-slicer-for-bambu, a soft fork of OrcaSlicer built to be compatible with Bambu printers, eventually replacing Bambu Studio for those who want out of the Bambu Lab walled garden.

Then there is viscose, a fork of Bambu Studio itself. Part of it is keeping a copy of everything Bambu publishes in case anything disappears, and the longer-term aim is a version that respects users' software freedom better than the upstream does.

The next steps

SFC is also committing to act as a watchdog on Bambu Lab going forward. The organization says it does not usually go looking for violations proactively, but it is making an exception here and will keep checking.

A standing committee on software freedom in the 3D printer space is planned as well, with details expected in June 2026.

The plan is to conduct monthly meetings, pulling in manufacturers, users, licensing experts, and software freedom advocates to track new issues and figure out what to do about them.

And there's also a fundraiser running until July 17, 2026, with a target of $250,007. If SFC hits it, the money goes toward hiring dedicated staff for this work long-term. If not, whatever is raised goes to existing staff time and related right-to-repair efforts.


Suggested Read 📖: Open Source Licenses Explained



from It's FOSS https://ift.tt/3cbCT5i
via IFTTT

Jumat, 22 Mei 2026

Firefox Just Saved Us All from Spammy Online PDF Tools

Firefox's built-in PDF viewer has been adding useful features for a while now. You can annotate, fill out forms, draw, insert images, and sign documents without leaving the browser.

The recent Firefox 151 release adds merging documents to that list.

If you've ever searched "merge PDF online" and ended up wading through ads and signup walls just to get your own file back, then you should know that there's a privacy angle worth thinking about too.

Every time you upload a document to one of those sites, you're handing your files over to a server you know nothing about.

Firefox handles everything locally, so your documents stay on your machine.

Merge PDFs using Firefox

a firefox screenshot that shows a pdf file open in the browser's pdf viewer, on the upper-left section, the mouse cursor is on a "add file" option

First, you need to open a PDF file that you want merged with another. Then, unhide the sidebar menu by clicking on its toggle (looks like a square with a line in it), and click on the "+" button next to the Pages label.

Doing so will open the file picker. In my case, it was the Files (Nautilus) app on GNOME, but yours might be a different file manager on a different desktop environment with similar functionality.

this is a screenshot of the files app on gnome with two pdf files visible

Pick the PDF you want to merge in, then click Select. Firefox will append its pages to the end of the document you have open, and the page count in the toolbar will update to reflect the new total.

You can also reorder pages by dragging them in the sidebar, or delete any you don't need by selecting them and using the Manage menu. 👇

0:00
/0:27

Once the pages are in order, select all of them using the checkboxes, and then open the Manage dropdown and click "Export selected..." A save dialog will open up on your file manager.

Give the file a name, hit Save, and the merged PDF lands wherever you pointed it. Though if you mistakenly try to quit the application before the merged PDFs are saved, Firefox will promptly notify you. 👇

a save-before-quit prompt is visible in a firefox app window with a pdf file open

The prompt reads "Save PDF before leaving?" and clicking "Save" opens the same file picker. Hitting "Don't Save" will close Firefox without saving, and "Cancel" keeps you in the same window.



from It's FOSS https://ift.tt/dHomzAv
via IFTTT

In a Weird Case, German Deutsche Bahn's Website Was Locking Out Linux Users

Since a few days now, people trying to plan a trip on Deutsche Bahn's (DB) main booking website have been getting stopped by error 751. The site accused their web browser of acting like a bot, and even logging into accounts made no difference.

So, what was actually triggering it? Just the word "Linux" in the User-Agent string it looks like. heise online tested this by setting a Linux User-Agent on Firefox under Windows and on Safari under macOS, and both got blocked.

People noticed

an error page is shown here for the deutsche bahn website, all of it is in deutsche, and the error code is 751
Source: MaksDampf

Heise had picked up on a thread from Reddit's r/deutschebahn as evidence that real users were being affected. Someone had posted about getting locked out just from clicking "earlier connections" a few times while planning a trip.

They, as you know, tested it on their end and found out that Linux systems were being blocked.

Later in the thread, a commenter tied it to the wave of vibe-coded projects, specifically ones built to scrape Deutsche Bahn's fare data. Another commenter identified themselves as a DB employee, pointing out that internal staff have to deal with DB Systel's problems regularly.

Before you ask, DB Systel is the train operator's IT and digital solutions provider.

DB's official response

Deutsche Bahn has responded to heise online. A spokesperson said Linux users are supposed to be able to use bahn.de and DB Navigator without issues, and that the company's security systems look at traffic behavior, request origins, and browser traits to identify potential threats.

Normal traffic can get caught in this sometimes, they said, while emphasizing that they are working to bring those cases down. Heise ran a test again the same day and found out that a Linux User-Agent on a Windows machine still triggered the block.

I ran two tests of my own. The first was on a Fedora Workstation system with a VPN active, where I accessed bahn.de on Firefox in private mode and spammed various header menu options, reloading repeatedly.

a cropped screenshot of the bahn.de website

The portal never locked me out. I did the same on an Ubuntu virtual machine and got the same result. So it is safe to assume the fixes have been made, though false positives may still happen occasionally.


Suggested Read 📖: Rust Could Eliminate 80% of Linux Kernel CVEs



from It's FOSS https://ift.tt/k7c53S2
via IFTTT

Kamis, 21 Mei 2026

Good News! After Lenovo and Dell, Now HP Pledges to Support Linux Vendor Firmware Service

As long as I've been a Linux user, I can remember one of the biggest issues being firmware support on the kernel.

The issue has been notorious, with a lot of new users being discouraged immediately after joining, and the benevolent dictator Linus Torvalds himself giving the bird to Nvidia, a sentiment shared by almost every user who had tried to make Nvidia work on Linux a few years ago.

Things have been getting better recently, though, especially with LVFS (Linux Vendor Firmware Service) on the scene now, providing hardware vendors a portal to upload firmware updates, which can then be downloaded and installed by users through clients such as GNOME Software or fwupdmgr.

Why does LVFS matter?

The relief and effort of LVFS cannot be understated, as before a central secure portal for firmware, the users only had the option to trust some random third party upload on the internet, often breaking or worse, infecting their systems. LVFS fills a space where the vendors can provide secure firmware, with Linux-specific .cab files.

The roadbloack...

The issue, however, obviously, had been funding with the largest contributors being the usual suspects, Framework and Open Source Framework Foundation, at $10K a year. Recently, however, Lenovo and Dell joined suite as Premier sponsors, which is the highest tier at $100K a year each, making the project more sustainable and manageable. These companies contributing makes a lot of sense, considering they are two of the bigger computer companies which offer Linux by default in some cases, especially with Lenovo's ThinkPads being the Linux users' favorite for decades.

Welcome the newcomer!

And now, as you'd have it, HP has followed suit as a Premier sponsor, also providing $100K a year, right alongside Dell and Lenovo. This is already being reflected on the homepage of LVFS, with a quote from HP's Senior Vice President as well:

“LVFS enables quick, easy and timely BIOS updates, so countless customers can enjoy the flexibility of open source Linux-based systems.”
— Xavi Garcia, HP
LVFS sponsors

This calls for a celebration as users, of course, and also a major bout of appreciation for HP will be well deserved. I'm delighted as an HP user on Fedora myself, this is a remarkable day.

The question still remains, however, where are the other vendors? What are they waiting for?

Where are the others?

The image of Linux as a "niche" user community, left to their own devices (literally) to figure out the solutions to the hardware problems the vendors are unwilling to solve, is a view as outdated as it is ridiculous. It is like they expect us to unlock a door of which they have the only key.

This major move by these three companies should not only be seen as a sign of relief and wider acceptance of the usage of Linux, but as a beacon for other vendors to follow, who ought to make their hardware more accessible to the open-source community. This change is only in their best interest, as every year shows the percentage of Linux's desktop market share going upwards.

Wrapping Up

HP, Dell and Lenovo all being the highest possible contributors to Linux firmware inspires a lot of confidence among the users, a sign of better support and easier updates. Their efforts are much appreciated and applauded, and we hope that more companies show up to the party. Hope this brightens up your day a little bit, if you're a Linux user on HP. Cheers!



from It's FOSS https://ift.tt/t4hQeNG
via IFTTT

FOSS Weekly #26.21: Microsoft's Distro, Bitwarden Drama, Adobe on Linux, New Email Client and More

The Fedora AI Developer Desktop initiative that passed unanimously is now blocked. Two council members retracted their votes after community pushback, with contributors arguing the CUDA focus contradicts Fedora's free software foundations and that significant kernel policy changes hadn't been cleared with the right people.

Fedora has also removed Deepin desktop from its offering due to security concern.

Someone got Lightroom CC running on Linux via Wine without writing a single line of code themselves. An AI agent did the whole thing autonomously, fixing DLL gaps and Wine incompatibilities.

LibrePlan is a self-hosted open source project management tool that just got its 1.6.0 release. The additions worth noting include email workflows, per-project document repositories, an issue and risk log, and traffic light status indicators in the project list view.

If you've ever wanted to run BleachBit over SSH without touching the CLI directly, the TUI is shaping up well. You get keyboard navigation throughout, two preview modes for checking what would be cleaned before committing, and full backend parity with the existing GUI.

Bitwarden got a new CEO in February, a new CFO in April, briefly removed "Always Free" from its pricing page, and quietly rewrote its core values. For most software, this would be unremarkable. For the app that holds your passwords, the bar for transparency needs to be much higher.

ONLYOFFICE Docs 9.4 lands with a mix of features and a licensing update that's hard to read as coincidental given the Euro-Office fork dispute. It offers users a dark mode for spreadsheets, 25 new presentation themes, 20 new slide transitions, and form recipient tracking.

Linux's second-in-command, Hartman, thinks that Rust could eliminate 80% of Linux kernel CVEs.

Here are other highlights of this edition of FOSS Weekly:

  • Listening to music on the terminal.
  • Microsoft having a Fedora-based offering.
  • Configuring a smart bulb to run with Home Assistant.
  • And other Linux news, tips, and, of course, memes!

🎫 Event alert: AWS Summit India Online

From agentic AI to Cloud Modernization, AWS is bringing together the latest innovations shaping technology today at AWS Summit India Online.

  • Attend 50+ sessions filled with tech deep dives, hands-on labs, and actionable insights from AWS experts and leaders
  • Discover how organizations are using AI and data to solve complex challenges
  • Connect with the AWS community through live Q&A

The event is virtual and free to attend.

🧠 What We’re Thinking About

Microsoft spent its Open Source Summit announcement talking about Azure Linux 4.0 without mentioning Fedora once. The GitHub README for the 4.0 development branch uses the phrase "upstream base" to describe Fedora's role.

🧮 Linux Tips, Tutorials, and Learnings

Mission Center and Resources are both polished libadwaita system monitors, and both are genuinely good. But what makes them different from each other? A lot. We have a detailed writeup that should clear your doubts.

Splitting a string in Bash isn't as intuitive as it should be. The trick is setting IFS to your delimiter and using read -ra to split the string into an array. Here's a short explainer with a working CSV example and a breakdown of what each part is actually doing.

If cmus or MOC never quite clicked for you, Kew is worth trying. Written in C, it displays album art in the terminal, can search your music library with a single keyword, and handles playlists and shuffles without fuss.

Desktop Linux is mostly neglected by the industry but loved by the community. For the past 13 years, It's FOSS has been helping people use Linux on their personal computers. And we are now facing the existential threat from AI models stealing our content.

If you like what we do and would love to support our work, please become It's FOSS Plus member. It costs less than the cost of a McDonald Happy Meal a month, and you get an ad-free reading experience with the satisfaction of helping the desktop Linux community.

Join It's FOSS Plus

👷 AI, Homelab and Hardware Corner

Eight LLMs benchmarked on a CPU-only Intel i5 laptop with 12GB RAM, using Ollama with Q4_K_M quantization throughout.

Also, here's how I fixed a pesky error with a Tapo smart bulb on Home Assistant.

Tired of AI fluff and misinformation in your Google feed? Get real, trusted Linux content. Add It’s FOSS as your preferred source and see our reliable Linux and open-source stories highlighted in your Discover feed and search results.

Add It's FOSS as preferred source on Google (if you use it)

✨ Apps and Projects Highlights

Aerion is a new open source desktop email client built with Wails and Svelte, not Electron, and it shows.

📽️ Videos for You

Using Xfce doesn't need to feel like a trip down memory lane. You can customize it thoroughly to bring it up to current standards.

💡 Quick Handy Tip

In the Bitwarden desktop app and browser extension, you can set a pin instead of using the master password to log in. To do that, go into the Account Security settings and turn on the "Unlock with Pin option."

bitwarden use pin instead of master password quick tip

Remember to turn off "Require master password on browser restart," and set the session timeout to "On browser restart" for securing your vault against unauthorized access.

Though, do not forget the master password, since the PIN is not a replacement, and you will need it when signing into new devices.

🎋 Fun in the FOSSverse

Test your terminal knowledge with our Linux Terminal Emulators crossword.

Do you still shudder at the sight of a CLI? 🤨

PenGUIn vs. PenCLIn meme

🗓️ Tech Trivia: On May 21, 1952, IBM announced its first electronic computer, the Model 701, at a time when the company was better known as the world's largest supplier of punched card equipment, with chairman Thomas Watson Sr. so resistant to the idea that engineers had to rebrand it a "Defense Calculator" just to get it built.

🧑‍🤝‍🧑 From the Community: Old time FOSSer Howard is looking for feedback and suggestions on how to clean the /home folder.



from It's FOSS https://ift.tt/yCKbGo0
via IFTTT

Rust Could Eliminate 80% of Linux Kernel CVEs!

Greg Kroah-Hartman was at RustWeek 2026 in Utrecht this week, and he talked about a Rust-based proposal still in development that could wipe out around 80% of the CVEs the Linux kernel generates.

That is not a small claim. This is coming from someone who has personally reviewed every kernel security bug since the Linux kernel security team was formed in 2005.

C's blind spot

Greg's presentation starts at 14:27.

The core problem, as Greg sees it, is untrusted data. Every time data arrives from user space or from hardware, the kernel should treat it with suspicion. C has never had a reliable way to enforce that.

Once data gets copied from user space into the kernel, it becomes a regular pointer and loses all context about where it came from. It gets passed around freely, and the external checkers that should catch issues do not always get run.

Hardware adds another layer of the same problem. The kernel was designed assuming hardware is trustworthy, and that assumption is getting harder to hold as malicious hardware becomes a real and growing threat.

What Rust already fixes

Before the new proposal even ships, Rust is already making a difference. Failing to check error return values and forgetting to release locks are two notable contributors to kernel CVEs, and Rust handles both at compile time.

Greg estimates those two fixes alone cover around 60% of kernel bugs.

And it doesn't stop there. Writing Rust bindings for existing C code has quietly pushed kernel maintainers to actually document and think through their APIs, working out ownership semantics, lock rules, and const-correctness.

Enter, the "untrusted" type

Greg's proposed solution is a Rust type called Untrusted<T>, developed with kernel contributor Benno Lossin. It attaches to data coming in from user space or hardware as a compile-time marker, with no runtime cost.

And you cannot access the underlying data without going through a validation step that explicitly converts it to trusted. That pushes all validation code into one visible, reviewable spot.

What this means for you as a Linux user? A significant number of the CVEs that currently trickle down to your distro as security updates simply would not exist in the first place.

But, it is not merged yet. Changes are still needed in the Rust compiler, and related work on field projections is running alongside it. Greg concluded his presentation by asking for more Rust kernel developers, and pointed towards the Rust for Linux mailing list as the starting point.


Suggested Read 📖: Fedora Pulls the Plug on Deepin



from It's FOSS https://ift.tt/SuPa6rv
via IFTTT