Lees weergave

Distribution Release: Rocky Linux 9.8

The DistroWatch news feed is brought to you by TUXEDO COMPUTERS. The Rocky Linux project has announced the release of Rocky Linux 9.8 which retains 1:1 compatibility with Red Hat Enterprise Linux. The release notes share highlights of the new version: "Major changes: This document highlights major changes between Rocky Linux (RL) 9.7 and RL 9.8. If this is....
  •  

v1.7.2 - Scheduled Send, .eml Drag-Out & Zip Import, and Per-Domain Branding

1.7.2 (2026-05-28)

Features

  • Mail: Scheduled send and send delay (#322)
  • Mail: Drag emails out to the file explorer as .eml
  • Mail: Import emails from .zip archives
  • Mail: "Move to Trash and mark as read" delete action (#323)
  • Mail: Include group inboxes in the unified mailbox view (#328)
  • Mail: Locale-aware date format in the email list with a preset picker (#331)
  • Mail: Allow drag-and-drop into shared mailboxes
  • Composer: Ctrl/Cmd+Enter sends the open draft
  • Settings: New Downloads tab with template editor for .eml and attachment filenames
  • Settings: Filename transform settings and an ASCII-only "date (from-to) subject" template
  • Settings: Post-export action (keep / archive / trash)
  • Settings: Template for multi-email .zip filenames
  • Admin: Per-domain branding editor with overrides on /api/config, manifest, and PWA icon (#332)
  • Admin: Policy-controlled push relay URL with optional user lock
  • i18n: NEXT_PUBLIC_DEFAULT_LOCALE for fallback UI locale (#243)

Fixes

  • Mail: Editable HTML signature in new mail; clean state on every compose entry (#329)
  • Mail: Report real upload progress with XHR progress events (#333)
  • Mail: Restore blob: in object-src and frame-src CSP for PDF/HTML previews
  • Mail: Match user-avatar treatment on quick reply
  • Email viewer: Stop shattering table cells with word-break: break-word
  • Composer: Scope Ctrl/Cmd+Enter send to the focused composer
  • Composer: Stop closing the form when editing any field
  • Pro: Keep the empty viewer pane visible in the split layout
  • Pro: Prevent an empty main pane when reordering tabs across panes
  • Mobile: Collapse focus mail layout to multi-line
  • Mobile: Keep a gutter on bare-HTML and plain-text emails
  • Calendar: Align continued multi-week events with the week's left edge
  • Calendar: Show the end date in the event popover for multi-day events (#318)
  • Calendar: Convert recurrenceRules to singular in batch create
  • Calendar: Handle malformed event dates (#316)
  • Files: Stop URL-encoding drag-out filenames and preserve Unicode letters
  • Routing: Prefix remaining <img>, favicon, and WebDAV URLs with basePath (#319)
  • Routing: Prefix hand-written URLs with basePath for subpath deployments
  • Auth: OAUTH_ALLOW_PRIVATE_ENDPOINTS for split-DNS setups

i18n

  • Add missing translation keys across 16 locales

  •  

v0.16.7

[0.16.7] - 2026-05-28

If you are upgrading from v0.16.x, replace the binary (or run docker pull). If you are upgrading from v0.15.x and below, please read the upgrading documentation for more information on how to upgrade from previous versions.

Added

Changed

Fixed

  • Log rejected messages to tracing store.
  • MTA:
    • Always update next DSN notify times.
    • Expand lists and resolve catch-all addresses when building autogenerated messages.
  • Sharing: Includes resource that themselves carry a direct ACL grant and are leaves.
  • Tasks cannot be deleted in OSS builds.
  • Directory: Per-domain external directory resolution fails.
  • DNS updater: Keep external TXT records when updating RRSet.
  • HTTP: Reject requests from blocked IPs when Keep-Alive is enabled.

Check binary attestation here

  •  

Minecraft 26.2-pre-2 (snapshot) Released

26.2 Pre-Release 2 (known as 26.2-pre-2 in the launcher) is the second pre-release for Java Edition 26.2, released on May 28, 2026. Full changelog: https://minecraft.wiki/Java_Edition_26.2-pre-2
  •  

1.60 Update: Improved Material System

In today's blog, we bring you another piece of the puzzle from the upcoming 1.60 update for both Euro Truck Simulator 2 and American Truck Simulator, which we hope will get our #BestCommunityEver very excited. In this update, we will be introducing the Improved Material System for the interior of selected trucks! Let's take a look.


The Improved Material System, which will be introduced in the 1.60 update for both games, significantly improves the lighting and visual quality of vehicle interiors in selected trucks. Its main focus is to enhance how interior materials react to light, which will result in a more readable, detailed, and visually pleasing cabin environment.

During the development of Project Road Trip, we implemented a wide range of visual and technical improvements. One of the most significant changes was a redesign of the materials used in vehicle interiors. 


This has been requested from our community for some time, as the previous system often made interiors appear too dark and flat, especially in scenes without direct lighting. As a result, it makes differences between materials such as leather, fabric, plastic, and metal far more apparent, even in low-light conditions.

"The main goal of the new technology was to bring more light into shadowed areas of vehicle interiors. The previous system struggled to handle indirect lighting in these situations, causing many details to be lost in darkness. The new solution uses multiple variants of dynamic cubemaps, allowing all materials to reflect their surroundings more naturally and respond to ambient light in a more realistic way. Environmental reflections are no longer limited to highly polished metallic surfaces. This change gives interiors significantly greater depth and readability," says our Vehicle Technical Leader, Daniel.

We have also carried out minor adjustments to the global lighting, primarily focused on exposure and contrast balancing, along with subtle visual refinements for bad weather conditions to achieve a more consistent and refined look. 


The development of this system took place in parallel with Project Road Trip, where its importance became even more apparent. Smaller, darker passenger vehicle interiors suffered from a lack of indirect light more than trucks with bright cabs and large windows, which often allow direct light to enter. Road Trip thus served as the ideal environment for developing and fine-tuning these technologies.

The entire system was designed from the start with the interiors of trucks in both games in mind, so the base games and their existing fleets will gradually benefit from these improvements as well. Throughout the entire process, we kept players with lower-end hardware in mind. We aimed to make the visual improvements as impactful as possible while minimizing the performance cost.

The first trucks to benefit from the Improved Material System will be the DAF NGD and MAN TG3 TGX models in ETS2. In ATS, players will see redesigned interiors for the Mack Anthem and the Western Star 49X. With future updates, we will gradually add this technology for other trucks across both games.

We hope this new feature has you looking forward to the 1.60 update even more, as it brings a major enhancement to these truck interiors and makes the view from the driver's seat better than ever! Please note that the Road Trip vehicles are not releasing with the 1.60 update.

Until next time, be sure to follow us on X/Twitter, Facebook, Instagram, Bluesky, and YouTube for all the latest updates. Don't forget to sign up for our newsletter as well! See you out on the road, and keep on truckin'!

  •  

Sensereo joins Works with Home Assistant

Sensereo joins Works with Home Assistant

We’re sensing a change in the air this month as we welcome Sensereo to the Works with Home Assistant program 🎉. Specialists in environmental sensing, Sensereo brings Matter smoke and carbon monoxide (CO) alarms into the Home Assistant ecosystem – meaning more ways to keep your home open, safe, and sound.

Built from a burning question…

What happens if your smoke alarm goes off, but you’re not there to hear it? It’s an unsettling question, and one that led Roy Chen to found Sensereo in 2024. Driven to create safety devices that were equal parts reliable and resilient, Sensereo built the Matter-based MS-1 Smoke Alarm and MSC-1 Smoke and Carbon Monoxide Alarm, because as they put it: “every home deserves a system that will not fall silent when it matters most.”

It’s just good sense

For anyone unfamiliar, Matter is an open standard that lets smart home devices from different brands work together, regardless of who made them – no lock-in, no closed ecosystems. It’s exactly the kind of open, interoperable technology the Open Home Foundation exists to champion. Thread operates on the same principle: it’s an energy-efficient, wireless mesh network that connects devices directly to one another and can automatically reroute around disruptions. And for battery-powered alarms like Sensereo’s, Thread’s low-power design means fewer battery changes for devices that are always on duty.

While we’re talking about safety, it’s important to note that if your Thread network did for any reason drop out, Sensereo’s smoke and CO alarms will keep working as a “regular” alarm would – no smart home required.

That peace of mind is central to how Sensereo thinks about their products, and having caught up with the team at CES 2026 earlier this year, we can tell you it’s just the beginning. Air quality sensors and more are on the horizon, all building toward the same vision: to build an environmental intelligence system for the home that helps users understand and respond to their surroundings.

"Joining the Home Assistant ecosystem is a natural step for us, as it enables an open and user-driven platform where these capabilities can truly come together. We're excited to contribute not only our current fire safety products, but also future sensing devices that expand how people interact with and manage their living spaces."

- Roy Chen, Sensereo Founder

Devices

Most of us want our smoke alarms to be “reasonably annoying,” and Sensereo clearly agrees, because they printed this very description on the MS-1’s packaging. Which, as we love to see, has been designed sustainably – signaling the company’s commitment to one of the Open Home Foundation’s three core principles before you’ve even opened the box.

Sensereo MSC-1 smoke and carbon monoxide detector with a digital display, mounted on a wall in a modern living room. Sensereo MSC-1 smoke and carbon monoxide detector

The MSC-1 goes a step further with a nifty, built-in digital display showing real-time carbon monoxide levels. Since CO is odorless and invisible, being able to accurately check levels at a glance lets you know if there is a rise and act before it becomes an emergency – not just after an alarm sounds.

And with local integration, that kind of proactive awareness extends further still – allowing you to build around the people in your home, not just the devices. A smoke detection event could flash smart bulbs for a family member who’s hard of hearing, or send a separate alert to a caregiver. Your alarm does its job – and so does everything else around it. It’s this kind of thoughtful design that shows us Sensereo are here for all the right reasons.

Like all partners of the Works with Home Assistant program, Sensereo commits to providing long-term support and firmware updates, as well as staying connected to the community they’re helping protect 💪. As always, the MS-1 and MSC-1 have been rigorously tested and certified by our in-house team to meet our core requirements of local control, privacy, and long-term sustainability. The program’s operated by the Open Home Foundation, which is funded with the support of Home Assistant Cloud subscribers. With each new partner like Sensereo that expands the program, we’re able to give more choice, support, and peace of mind to Home Assistant users.

Breathe easy

No smoke and mirrors – just reliable home safety devices and a team that clearly gets what this community is about. Sensereo’s commitment to building open, locally controlled tech is fundamental to the Works with Home Assistant program, and why we’re so thrilled to have them on board. Check out our certified device list to see what else is there!

FAQs

Q: If I have a device that is not listed under “Works with Home Assistant” does this mean it’s not supported?

A: No! It just means that it hasn’t gone through a testing schedule with our team or doesn’t fit the requirements of the program. It might function perfectly well but be added to the testing schedule later down the road, or it might work under a different connectivity type that we don’t currently test under the program.

Q: OK, so what’s the point of the Works with program?

A: It highlights the devices we know work well with Home Assistant and the brands that make a long-term commitment to keeping support for these devices going. The certification agreement specifies that the devices must have the functionality you would expect within Home Assistant, operate locally without the need for cloud and that they will continue to do so long-term.

Q: How were these devices tested?

A: All devices in this list were tested using a standard Home Assistant Green Hub with the Home Assistant Connect ZBT-2 as the Thread Border Router and with our certified Matter integration. If you have another hub / border router set-up / integration that’s not a problem but we test against these as they are the most effective way for our team to certify within our ecosystem.

Q: Will you be adding more Sensereo devices to the program?

A: Why not! We’re thrilled to foster a close relationship with the team at Sensereo to work together on any upcoming releases or add in further products that are not yet listed here.

  •  

BookStack v26.05

Links

Upgrade Notices

  • Folder Permissions - Due to some changes in how fonts are used for exports, after updating you may need to ensure that the storage/fonts folder (and all folders within that) are accessible & writable by the web-server. If you start seeing errors on PDF export after updating, it's likely this issue. See this page for guidance on setting permissions.
  • Revision Access - Revision access & visibility is now controlled separately to pages. In some cases, after upgrading, users may no longer be able to access revisions by default (for example, where users had access to view page content but had no role-level view permissions).

Full List of Changes

  • Added page contents view to page editor. (#6131, #4218)
  • Added API endpoints for browsing tags. (#6095, #5835)
  • Added custom font load handling for default PDF renderer. (#6109, #148, #719, #5770)
  • Added in-UI option to reset user multi-factor authentication methods. Thanks to @clauvaldez. (#6056)
  • Added hints to sort rule selection alongside empty lists. (#5967)
  • Added specific permission for revision viewing. (#6108, #4526)
  • Added new image and CSS CSP controls. Thanks to @Zhey-on. (#6071, #6033)
  • Added Thai language support. (#6105)
  • Updated codebase to meet PHPStan Level 4. (#6085)
  • Updated comment/description WYSIWYG editor to support inline code. (#6100, #6003)
  • Updated HTML to plain text conversion handling. (#6083)
  • Updated image upload handling to validate referenced page. (#6126)
  • Updated JavaScript packages. (#6090)
  • Updated module install command with usability improvements. (#6094, #6066)
  • Updated new WYSIWYG editor with a range of fixes. (#6119, #5631)
  • Updated translations with latest Crowdin changes. (#6084)
  • Fixed misaligned link attachment validation rules. (#6093)
  • Fixed non-ascii character issues in headers on PDF exports. Thanks to @alexwoo-awso. (#6069, #6107)

  •  

v5.47.0

5.47.0 (2026-05-28)

🚀 New feature

  • BETA: MCP server (#26371)
  • publicationFilter param in REST and document service (#25793)
  • admin-tokens: remove adminTokens future flag (#26391)
  • admin: add documentation helper link in HeaderLayout (#26422)

🔥 Bug fix

  • Relation Search in Nested Components (#26023)
  • unable to access content manager page with required and private … (#24101)
  • admin: gate expiresIn deprecation on user auth options (#26298)
  • admin: redirect active tab to login on session expiry (#26165)
  • admin: avoid serving extensionless admin paths as static files (#26368)
  • content-manager: content history crash on deleted relations (#26245)
  • core: preserve createdBy/updatedBy on drafts created by discard-drafts migration (#26461)
  • core/core: codeBlockValidator uses language instead of syntax (#26392)
  • graphql: inherit publicationFilter into populated relations (#26400)

⚙️ Chore

  • dedupe yarn.lock file (#26376)
  • fix dependabot cooldown config for github-actions (#26438)
  • ci: improve dependabot security grouping and version update policy (#26408)
  • commitlint: disable body-max-line-length rule (#26406)
  • deps: bump simple-git from 3.32.3 to 3.36.0 (#26220)
  • deps: bump sanitize-html from 2.13.0 to 2.17.4 (#26342)
  • deps: bump ws from 8.17.1 to 8.20.1 in @strapi/data-transfer (#26379)
  • examples: remove sdk-plugin from todo-example plugin (#26341)
  • strapi: upgrade webpack ecosystem dependencies (#26385)

💅 Enhancement

  • db: migration performance improvements (#25988)
  • provider-amazon-ses: replace node-ses with AWS SDK SESClient (#26054)
  • i18n: update and create Slovak translations (#25831)

❤️ Thank You

  •  

Proxmox Datacenter Manager 1.1 available

VIENNA, Austria – May 28, 2026 – Enterprise software developer Proxmox Server Solutions GmbH today announced the availability of a new point release for Proxmox Datacenter Manager. The centralized management platform designed to oversee distributed Proxmox infrastructures introduces new enhancements including an automated installation workflow, comprehensive subscription handling, unified Ceph cluster monitoring, and expanded central guest and snapshot management.

Highlights in Proxmox Datacenter Manager 1.1

Integrated automated installation workflows

Proxmox Datacenter Manager 1.1 now acts as a central configuration server for provisioning. The integration of automated installation functionality standardizes the deployment of hosts across distributed infrastructures. Administrators can centrally manage answer file configurations containing predefined installation parameters and provide them for unattended installations of new hosts. A new ‘Automated Installations’ tab in the ‘Remotes’ section provides access to these workflows, while installation progress can be tracked directly from within the Proxmox Datacenter Manager web interface. A token-based security mechanism protects the installation process and helps ensure that prepared configurations are accessed only by authorized installations.

Centralized management of subscription keys

For large-scale deployments, managing subscriptions across multiple sites can be complex. A new subscription registry in Proxmox Datacenter Manager enables administrators to manage a central pool of subscription keys, assign them to specific remotes, and remove assignments when no longer needed. A prepared answer file can also include a specific subscription key, allowing a newly provisioned host to register its subscription automatically during installation.

Unified Ceph cluster monitoring

For organizations utilizing hyper-converged infrastructure (HCI) powered by Proxmox VE, tracking storage health across distributed sites is vital. Proxmox Datacenter Manager 1.1 delivers deep, unified visibility across these distributed storage environments by introducing native monitoring for all connected Ceph clusters. A single, consolidated panel allows administrators to verify the health, capacity, and real-time performance of multiple Ceph clusters at a glance. The dashboard provides comprehensive, granular insights into the status of Object Storage Daemons (OSDs), monitors, managers, Metadata Servers (MDS), storage pools, CephFS, and specific cluster flags.

Enhanced infrastructure visualization

New dashboard widgets provide administrators with an overview of their distributed Proxmox infrastructures:

  • Geographic widgets: A new world map widget visualizes the physical locations of connected remotes. Locations can be defined via the node or datacenter options on Proxmox VE remotes, or under the configuration settings for Proxmox Backup Server remotes.
  • New gauge-based widgets display visual context for CPU, memory, and storage utilization at a glance.
  • Local host metrics are now also collected for the Proxmox Datacenter Manager host itself, visualizing resource consumption through integrated Round-Robin Database (RRD) graphs on the node status panel.

Central guest and snapshot management

Proxmox Datacenter Manager 1.1 marks the initial milestone toward comprehensive, central guest management. A new cross-remote view expands guest management by displaying all QEMU virtual machines and LXC containers across connected remotes. Administrators can display these guests in a sortable table or in a tree grouped by remote, use text filtering to quickly locate individual guests, and access frequently used actions from a unified overview.

The same interface now also provides snapshot management for these guest environments. Administrators can view snapshots in a parent-child tree and create, roll back, delete, or edit snapshot descriptions. In addition, a new “Resume” action for paused or suspended QEMU virtual machines complements the existing start, stop, and shutdown operations. As this represents the initial phase of centralized guest orchestration, users can expect additional day-to-day management tasks to be integrated in upcoming point releases.

Updated technology stack

Proxmox Datacenter Manager 1.1 is based on Debian 13.5 “Trixie” and features Linux kernel 7.0 as the new stable default. Along with ZFS 2.4, this release provides an up-to-date open-source software stack for modern centralized infrastructure management and day-to-day lifecycle operations.

Availability

Proxmox Datacenter Manager 1.1 is open-source software and immediately available for download at the official website. Users can obtain a complete installation image via ISO download, which contains the full feature set of the solution and can be installed quickly on bare-metal systems using an intuitive installation wizard.

Seamless distribution upgrades from older versions of Proxmox Datacenter Manager are possible using the standard APT package management system. Furthermore, it is also possible to install the platform on top of an existing Debian installation. As Free/Libre and Open Source Software (FLOSS), the entire solution is published under the GNU AGPLv3.

For enterprise environments, customers with active Enterprise support plans for their managed Proxmox Virtual Environment and Proxmox Backup Server remotes also gain access to Proxmox Datacenter Manager updates and support. No separate subscription key is required.

Resources:

###

About Proxmox Datacenter Manager
Proxmox Datacenter Manager is a centralized open-source management layer for distributed, large-scale Proxmox infrastructures. As a core building block of the expanding Proxmox ecosystem, it unifies independent Proxmox Virtual Environment clusters and Proxmox Backup Server instances across multiple sites and data centers into a single control plane. The web interface provides consolidated dashboards for real-time health, performance, and capacity tracking of nodes, virtual machines, containers, and storage. IT teams can centrally manage guest lifecycles, perform migrations, and execute global updates across connected remotes. Developed by Proxmox Server Solutions GmbH, the software is written in Rust, based on Debian, and released under the GNU AGPLv3.

About Proxmox Server Solutions
Proxmox Server Solutions provides powerful, intuitive open-source server software that guarantees vendor independence and minimizes total cost of ownership. Enterprises of all sizes rely on the company’s reliable vendor support, certified training services, and a global network of 3,000 integration partners to ensure business continuity. Established in 2005 and headquartered in Vienna, Austria, tens of thousands of corporate customers worldwide trust Proxmox solutions to secure mission-critical IT environments. To learn more visit https://www.proxmox.com or follow us on LinkedIn and YouTube.

Media contact
Daniela Häsler, Proxmox Server Solutions GmbH, marketing@proxmox.com 

  •  

Jonathan Dowland: nvim-µwiki

In January 2025, as a pre-requisite for something else, I published a minimal neovim plugin called nvim-µwiki. It's essentially just the features from vimwiki that I regularly use, which is a small fraction them. I forgot to blog about it. I recently dusted it off and cleaned it up. You can find it here, along with a longer list of its features and how to configure it: https://github.com/jmtd/nvim-microwiki

I had a couple of design goals. I didn't want to define a new filetype, so this is designed to work with the existing markdown one. I'm using neovim, so I wanted to leverage some of its features: this plugin is written in Lua, rather than vimscript. I use the parse trees provided by TreeSitter to navigate the structure of a document. I also decided to "plug into" the existing tag stack navigation, rather than define another dimension of navigation (along with buffers, etc.) to track: Following a wiki-link pushes onto the tag stack, just as if you followed a tag.

This was my first serious bit of Lua programming, as well as my first dive into neovim (or even vim) internals. Lua is quite reasonable. Most of the vim and neovim architecture is reasonable. The emerging conventions about structuring neovim plugins are mostly reasonable. TreeSitter is, well, interesting, but the devil is very much in the details. Somehow all together the experience for me was largely just frustrating, and I didn't really enjoy writing it.

  •  

Distribution Release: OviOS Linux 6

The DistroWatch news feed is brought to you by TUXEDO COMPUTERS. OviOS Linux is an independent, storage operating system. The project's latest release, version 6, makes some significant changes behind the scenes. One of the key changes is swapping out SysV init in favour of systemd: "The most fundamental change in OviOS v6 is the transition of the init....
  •  

Stable Channel Update for Desktop

The Stable channel has been updated to 148.0.7778.216/217 for Windows and 148.0.7778.215/216 Mac  and 148.0.7778.215 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log



Security Fixes and Rewards

Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but haven’t yet fixed.


We would also like to thank all security researchers that worked with us during the development cycle to prevent security bugs from ever reaching the stable channel.

This update includes 151 security fixes. Below, we highlight fixes that were contributed by external researchers. Please see the Chrome Security Page for more information.

[$43000][505077859] Critical CVE-2026-9872: Out of bounds write in GPU. Reported by cinzinga on 2026-04-21

[$43000][507365348] Critical CVE-2026-9873: Use after free in Network. Reported by cinzinga on 2026-04-28

[$11000][500609038] Critical CVE-2026-9874: Use after free in Dawn. Reported by Anonymous on 2026-04-08

[$5000][507508103] Critical CVE-2026-9875: Out of bounds read in WebGL. Reported by Anonymous on 2026-04-29

[TBD][493747593] Critical CVE-2026-9876: Use after free in WebGL. Reported by happy2me on 2026-03-18

[N/A][496445460] Critical CVE-2026-9877: Use after free in ANGLE. Reported by Google on 2026-03-26

[N/A][499054245] Critical CVE-2026-9878: Use after free in ANGLE. Reported by Google on 2026-04-02

[N/A][499129768] Critical CVE-2026-9879: Out of bounds write in ANGLE. Reported by Google on 2026-04-03

[N/A][503615025] Critical CVE-2026-9880: Insufficient validation of untrusted input in WebGL. Reported by Google on 2026-04-17

[N/A][505140741] Critical CVE-2026-9881: Use after free in Bluetooth. Reported by Google on 2026-04-22

[N/A][506375217] Critical CVE-2026-9882: Integer overflow in ANGLE. Reported by Google on 2026-04-25

[N/A][506477192] Critical CVE-2026-9883: Use after free in Base. Reported by Google on 2026-04-25

[N/A][508289938] Critical CVE-2026-9884: Use after free in Browser. Reported by Google on 2026-04-30

[N/A][508452241] Critical CVE-2026-9885: Insufficient validation of untrusted input in UI. Reported by Google on 2026-05-01

[N/A][508456788] Critical CVE-2026-9886: Use after free in Base. Reported by Google on 2026-05-01

[N/A][511249104] Critical CVE-2026-9887: Use after free in Proxy. Reported by Google on 2026-05-08

[N/A][511715166] Critical CVE-2026-9888: Use after free in WebView. Reported by Google on 2026-05-10

[N/A][511727159] Critical CVE-2026-9889: Out of bounds read and write in Dawn. Reported by Google on 2026-05-10

[N/A][513135985] Critical CVE-2026-9890: Use after free in XR. Reported by Google on 2026-05-14

[N/A][513508128] Critical CVE-2026-9891: Use after free in Extensions. Reported by Google on 2026-05-15

[N/A][513948178] Critical CVE-2026-9892: Inappropriate implementation in Skia. Reported by Google on 2026-05-16

[N/A][513972075] Critical CVE-2026-9893: Use after free in Skia. Reported by Google on 2026-05-17

[$25000][507707838] High CVE-2026-9894: Use after free in GPU. Reported by tohafrit on 2026-04-29

[$3000][491685406] High CVE-2026-9895: Out of bounds read in GPU. Reported by 86ac1f1587b71893ed2ad792cd7dde32 on 2026-03-11

[$500][508811474] High CVE-2026-9896: Out of bounds write in V8. Reported by 303f06e3 on 2026-05-02

[N/A][496271580] High CVE-2026-9897: Use after free in DOM. Reported by Google on 2026-03-25

[N/A][496282591] High CVE-2026-9898: Insufficient validation of untrusted input in GPU. Reported by Google on 2026-03-25

[N/A][497533569] High CVE-2026-9899: Use after free in ANGLE. Reported by Google on 2026-03-29

[N/A][497637277] High CVE-2026-9900: Out of bounds write in ANGLE. Reported by Google on 2026-03-30

[N/A][497737770] High CVE-2026-9901: Use after free in ANGLE. Reported by Google on 2026-03-30

[N/A][498205735] High CVE-2026-9902: Use after free in Accessibility. Reported by Google on 2026-03-31

[N/A][498783665] High CVE-2026-9903: Insufficient validation of untrusted input in Site Isolation. Reported by Google on 2026-04-02

[N/A][498804020] High CVE-2026-9904: Use after free in ANGLE. Reported by Google on 2026-04-02

[N/A][498883610] High CVE-2026-9905: Use after free in Accessibility. Reported by Google on 2026-04-02

[N/A][499005260] High CVE-2026-9906: Out of bounds write in GPU. Reported by Google on 2026-04-02

[N/A][499091269] High CVE-2026-9907: Out of bounds read in Dawn. Reported by Google on 2026-04-03

[N/A][499091328] High CVE-2026-9908: Out of bounds read in ANGLE. Reported by Google on 2026-04-03

[N/A][499152771] High CVE-2026-9909: Integer overflow in Skia. Reported by Google on 2026-04-03

[N/A][499176133] High CVE-2026-9910: Out of bounds memory access in ANGLE. Reported by Google on 2026-04-03

[N/A][499205491] High CVE-2026-9911: Integer overflow in ANGLE. Reported by Google on 2026-04-03

[N/A][499873765] High CVE-2026-9912: Inappropriate implementation in GPU. Reported by Google on 2026-04-06

[N/A][500046096] High CVE-2026-9913: Inappropriate implementation in ANGLE. Reported by Google on 2026-04-06

[N/A][500047428] High CVE-2026-9914: Insufficient validation of untrusted input in ANGLE. Reported by Google on 2026-04-06

[N/A][500063836] High CVE-2026-9915: Heap buffer overflow in ANGLE. Reported by Google on 2026-04-06

[N/A][500080303] High CVE-2026-9916: Out of bounds write in ANGLE. Reported by Google on 2026-04-06

[N/A][500095304] High CVE-2026-9917: Uninitialized Use in WebGL. Reported by Google on 2026-04-06

[N/A][500099471] High CVE-2026-9918: Inappropriate implementation in Tint. Reported by Google on 2026-04-06

[N/A][500114058] High CVE-2026-9919: Out of bounds read in WebGL. Reported by Google on 2026-04-06

[N/A][500138014] High CVE-2026-9920: Uninitialized Use in GPU. Reported by Google on 2026-04-07

[N/A][500150338] High CVE-2026-9921: Uninitialized Use in WebGL. Reported by Google on 2026-04-07

[N/A][500187083] High CVE-2026-9922: Use after free in GPU. Reported by Google on 2026-04-07

[N/A][500393328] High CVE-2026-9923: Use after free in Skia. Reported by Google on 2026-04-07

[N/A][500398345] High CVE-2026-9924: Heap buffer overflow in ANGLE. Reported by Google on 2026-04-07

[N/A][500536458] High CVE-2026-9925: Use after free in ANGLE. Reported by Google on 2026-04-08

[N/A][500540748] High CVE-2026-9926: Heap buffer overflow in ANGLE. Reported by Google on 2026-04-08

[N/A][500540958] High CVE-2026-9927: Use after free in ANGLE. Reported by Google on 2026-04-08

[TBD][501125002] High CVE-2026-9928: Out of bounds read in ANGLE. Reported by Jeff Muizelaar - Mozilla on 2026-04-09

[N/A][501367791] High CVE-2026-9929: Inappropriate implementation in WebGL. Reported by Google on 2026-04-10

[N/A][501499832] High CVE-2026-9930: Out of bounds write in Dawn. Reported by Google on 2026-04-10

[N/A][501524262] High CVE-2026-9931: Use after free in GPU. Reported by Google on 2026-04-10

[N/A][501563323] High CVE-2026-9932: Use after free in ANGLE. Reported by Google on 2026-04-11

[N/A][501575979] High CVE-2026-9933: Use after free in Input. Reported by Google on 2026-04-11

[N/A][501576946] High CVE-2026-9934: Use after free in Aura. Reported by Google on 2026-04-11

[N/A][501584689] High CVE-2026-9935: Uninitialized Use in ANGLE. Reported by Google on 2026-04-11

[N/A][502104354] High CVE-2026-9936: Use after free in GFX. Reported by Google on 2026-04-13

[N/A][502112506] High CVE-2026-9937: Use after free in UI. Reported by Google on 2026-04-13

[N/A][502300817] High CVE-2026-9938: Inappropriate implementation in V8. Reported by Google on 2026-04-13

[N/A][502735235] High CVE-2026-9939: Heap buffer overflow in WebCodecs. Reported by Google on 2026-04-15

[N/A][502738003] High CVE-2026-9940: Heap buffer overflow in ANGLE. Reported by Google on 2026-04-15

[N/A][502812366] High CVE-2026-9941: Use after free in ANGLE. Reported by Google on 2026-04-15

[N/A][503438092] High CVE-2026-9942: Uninitialized Use in ANGLE. Reported by Google on 2026-04-16

[N/A][503464551] High CVE-2026-9943: Out of bounds read in WebGL. Reported by Google on 2026-04-16

[N/A][503471286] High CVE-2026-9944: Uninitialized Use in ANGLE. Reported by Google on 2026-04-16

[N/A][503565293] High CVE-2026-9945: Use after free in Media. Reported by Google on 2026-04-17

[N/A][503596863] High CVE-2026-9946: Use after free in ANGLE. Reported by Google on 2026-04-17

[N/A][503627446] High CVE-2026-9947: Use after free in XML. Reported by Google on 2026-04-17

[N/A][503790201] High CVE-2026-9948: Use after free in Views. Reported by Google on 2026-04-17

[N/A][503793153] High CVE-2026-9949: Use after free in Core. Reported by Google on 2026-04-17

[N/A][503862359] High CVE-2026-9950: Insufficient validation of untrusted input in iOS. Reported by Google on 2026-04-17

[N/A][503873388] High CVE-2026-9951: Use after free in UI. Reported by Google on 2026-04-17

[N/A][503929476] High CVE-2026-9952: Use after free in WebAudio. Reported by Google on 2026-04-18

[N/A][503985322] High CVE-2026-9953: Out of bounds read in ANGLE. Reported by Google on 2026-04-18

[TBD][504175497] High CVE-2026-9954: Use after free in TabStrip. Reported by yueliu of Microsoft on 2026-04-19

[N/A][504184408] High CVE-2026-9955: Inappropriate implementation in iOS. Reported by Google on 2026-04-19

[N/A][504195132] High CVE-2026-9956: Use after free in iOS. Reported by Google on 2026-04-19

[N/A][504516117] High CVE-2026-9957: Use after free in PDF. Reported by Google on 2026-04-20

[N/A][504555886] High CVE-2026-9958: Use after free in PDFium. Reported by Google on 2026-04-20

[N/A][504557432] High CVE-2026-9959: Race in WebRTC. Reported by Google on 2026-04-20

[N/A][504573260] High CVE-2026-9960: Integer overflow in PDFium. Reported by Google on 2026-04-20

[N/A][504710769] High CVE-2026-9961: Use after free in SurfaceCapture. Reported by Google on 2026-04-20

[N/A][504716948] High CVE-2026-9962: Use after free in WebRTC. Reported by Google on 2026-04-20

[N/A][505143241] High CVE-2026-9963: Uninitialized Use in iOS. Reported by Google on 2026-04-22

[N/A][505190999] High CVE-2026-9964: Use after free in Bluetooth. Reported by Google on 2026-04-22

[N/A][506377574] High CVE-2026-9965: Out of bounds write in ANGLE. Reported by Google on 2026-04-25

[N/A][506388321] High CVE-2026-9966: Integer overflow in XML. Reported by Google on 2026-04-25

[N/A][506414791] High CVE-2026-9967: Out of bounds write in GPU. Reported by Google on 2026-04-25

[N/A][506499280] High CVE-2026-9968: Integer overflow in V8. Reported by Google on 2026-04-25

[N/A][506550494] High CVE-2026-9969: Insufficient validation of untrusted input in ANGLE. Reported by Google on 2026-04-26

[TBD][506653647] High CVE-2026-9970: Use after free in WebGL. Reported by TFGC on 2026-04-26

[N/A][508448586] High CVE-2026-9971: Inappropriate implementation in iOS. Reported by Google on 2026-05-01

[N/A][508463705] High CVE-2026-9972: Uninitialized Use in Gamepad. Reported by Google on 2026-05-01

[TBD][509268941] High CVE-2026-9973: Out of bounds write in V8. Reported by amyb of OpenAI on 2026-05-04

[N/A][511710468] High CVE-2026-9974: Out of bounds write in GPU. Reported by Google on 2026-05-10

[N/A][511719039] High CVE-2026-9975: Out of bounds read and write in ANGLE. Reported by Google on 2026-05-10

[N/A][511732828] High CVE-2026-9976: Inappropriate implementation in USB. Reported by Google on 2026-05-10

[N/A][511741173] High CVE-2026-9977: Insufficient validation of untrusted input in WebShare. Reported by Google on 2026-05-10

[N/A][511741396] High CVE-2026-9978: Use after free in Glic. Reported by Google on 2026-05-10

[N/A][511742228] High CVE-2026-9979: Insufficient validation of untrusted input in Input. Reported by Google on 2026-05-10

[N/A][511776372] High CVE-2026-9980: Insufficient validation of untrusted input in Printing. Reported by Google on 2026-05-10

[N/A][512995705] High CVE-2026-9981: Inappropriate implementation in Skia. Reported by Google on 2026-05-13

[N/A][513001247] High CVE-2026-9982: Insufficient validation of untrusted input in ANGLE. Reported by Google on 2026-05-13

[N/A][513001309] High CVE-2026-9983: Type Confusion in Skia. Reported by Google on 2026-05-14

[N/A][513002543] High CVE-2026-9984: Use after free in UI. Reported by Google on 2026-05-14

[N/A][513019760] High CVE-2026-9985: Insufficient validation of untrusted input in Media. Reported by Google on 2026-05-14

[N/A][513028160] High CVE-2026-9986: Insufficient validation of untrusted input in OptimizationGuide. Reported by Google on 2026-05-14

[N/A][513046475] High CVE-2026-9987: Insufficient validation of untrusted input in WebAppInstalls. Reported by Google on 2026-05-14

[N/A][513049286] High CVE-2026-9988: Use after free in WebRTC. Reported by Google on 2026-05-14

[N/A][513054053] High CVE-2026-9989: Inappropriate implementation in Media. Reported by Google on 2026-05-14

[N/A][513128608] High CVE-2026-9990: Use after free in WebAppInstalls. Reported by Google on 2026-05-14

[N/A][513173565] High CVE-2026-9991: Inappropriate implementation in Media. Reported by Google on 2026-05-14

[N/A][513177826] High CVE-2026-9992: Use after free in Network. Reported by Google on 2026-05-14

[N/A][513208588] High CVE-2026-9993: Use after free in Views. Reported by Google on 2026-05-14

[N/A][513235131] High CVE-2026-9994: Use after free in Core. Reported by Google on 2026-05-14

[N/A][513256572] High CVE-2026-9995: Use after free in WebXR. Reported by Google on 2026-05-14

[N/A][513268100] High CVE-2026-9996: Out of bounds read in WebRTC. Reported by Google on 2026-05-14

[N/A][513324041] High CVE-2026-9997: Use after free in Input. Reported by Google on 2026-05-14

[N/A][513337118] High CVE-2026-9998: Integer overflow in Skia. Reported by Google on 2026-05-14

[N/A][513364480] High CVE-2026-9999: Inappropriate implementation in ANGLE. Reported by Google on 2026-05-15

[N/A][513505608] High CVE-2026-10000: Use after free in Passwords. Reported by Google on 2026-05-15

[N/A][513505927] High CVE-2026-10001: Use after free in PerformanceManager. Reported by Google on 2026-05-15

[N/A][513536416] High CVE-2026-10002: Use after free in PDFium. Reported by Google on 2026-05-15

[N/A][513609324] High CVE-2026-10003: Use after free in Views. Reported by Google on 2026-05-15

[N/A][513730012] High CVE-2026-10004: Insufficient validation of untrusted input in Passwords. Reported by Google on 2026-05-16

[N/A][513750089] High CVE-2026-10005: Use after free in WebAppInstalls. Reported by Google on 2026-05-16

[N/A][513750691] High CVE-2026-10006: Race in WebAudio. Reported by Google on 2026-05-16

[N/A][513754619] High CVE-2026-10007: Use after free in SVG. Reported by Google on 2026-05-16

[N/A][513768979] High CVE-2026-10008: Uninitialized Use in GPU. Reported by Google on 2026-05-16

[N/A][513973560] High CVE-2026-10009: Integer overflow in Skia. Reported by Google on 2026-05-17

[N/A][513995565] High CVE-2026-10010: Inappropriate implementation in Input. Reported by Google on 2026-05-17

[N/A][514017326] High CVE-2026-10011: Inappropriate implementation in Skia. Reported by Google on 2026-05-17

[N/A][514063977] High CVE-2026-10012: Use after free in Skia. Reported by Google on 2026-05-17

[N/A][514715455] High CVE-2026-10013: Use after free in WebCodecs. Reported by Google on 2026-05-19

[N/A][514742327] High CVE-2026-10014: Use after free in WebMIDI. Reported by Google on 2026-05-19

[N/A][514746176] High CVE-2026-10015: Integer overflow in WTF. Reported by Google on 2026-05-19

[TBD][515155946] High CVE-2026-10016: Use after free in DOM. Reported by pwn2addr on 2026-05-20

[$3000][504156069] Medium CVE-2026-10017: Out of bounds read in Headless. Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-04-19

[$2000][504175501] Medium CVE-2026-10018: Integer overflow in ANGLE. Reported by Rahul Raj on 2026-04-19

[$2000][505056913] Medium CVE-2026-10019: Integer overflow in ANGLE. Reported by Mufeed VH from Winfunc Research (winfunc.com) on 2026-04-21

[N/A][496565479] Medium CVE-2026-10020: Insufficient validation of untrusted input in Skia. Reported by Google on 2026-03-26

[N/A][497327715] Medium CVE-2026-10021: Insufficient validation of untrusted input in USB. Reported by Google on 2026-03-29

[TBD][513289241] Medium CVE-2026-10022: Type Confusion in V8. Reported by ggwhyp on 2026-05-14

Many of our security bugs are detected using AddressSanitizer, MemorySanitizer, UndefinedBehaviorSanitizer, Control Flow Integrity, libFuzzer, or AFL.

Interested in switching release channels? Find out how here. If you find a new issue, please let us know by filing a bug. The community help forum is also a great place to reach out for help or learn about common issues.


Srinivas Sista

Google Chrome

  •  

1.60 Update: Game Radio

Today, we are excited to share with our community a brand-new feature coming to both Euro Truck Simulator 2 and American Truck Simulator with the upcoming 1.60 update - Game Radio!

For many drivers, music and the open road naturally belong together. Whether you are cruising through the countryside at sunset, hauling cargo across busy interstates, or relaxing during a long night drive, the right soundtrack can completely change the atmosphere of your journey. With Game Radio, we wanted to take that experience much further than a simple music player.

Game Radio is a brand-new in-game radio system designed to deepen immersion, support roleplay, and make every drive feel more authentic. Rather than approaching radio as just another technical feature, we created a collection of stations with their own distinct identities, philosophies, moods, and sounds. This is Game Radio's first chapter - built on music, with more layers planned for the road ahead.

At launch, Game Radio will feature five unique radio stations:

Rust FM

Rust FM is a guitar-driven station bridging five decades of rock, from the psychedelic garage sounds of the late 60s all the way to modern indie. Built for drivers who enjoy raw riffs, extended solos, distortion, and live energy.

This station features, amongst others, Sorry and SASAMI, both on Domino Records. Sorry is a North London indie band whose debut was co-produced by James Dring of Gorillaz fame, while SASAMI is a classically trained French horn player from the Eastman School of Music who scored films and commercials before going solo. Also on the roster: Holiday Ghosts, a DIY duo from Cornwall who record on their own equipment and have built a devoted cult following in the UK underground. 

Escape

Escape is for drivers whose nervous systems are stretched thin, a place to slow down, settle in, and find some quiet. Lo-fi textures, jazzy chords, minimal beats. Escape is ideal for peaceful night drives and calm moments behind the wheel.

Escape is also currently the only stream-safe station available at launch, featuring StreamBeats by Harris Heller, a music library built by a streamer, for streamers. Its music is specifically licensed with streamers in mind, designed to help avoid copyright claims and support content monetization. Players will be able to enable Streamer Mode directly from the game menu.

PUMP IT!

PUMP IT! turns your truck cabin into a dance floor, built on hypnotic beats and precisely engineered production. This station is all about movement and intensity. Don't think it. Just feel it. Featuring Tony Romera, a French producer with official remixes for Calvin Harris and Diplo, and a #1 track on the Beatport Overall Charts, and KIDSØ, a Munich duo known for fully improvised live shows with live visual installations across the European festival circuit.

Pop Gear

Pop Gear runs on hooks, momentum, and dopamine. Designed to capture attention and trigger the irresistible urge for just one more song, the station thrives on the emotional highs of contemporary pop: modern production, catchy melodies, hook after hook. Featuring Palace Winter, a Copenhagen duo the New York Times called "a darkly intoxicating potion," and School of X, a Danish artist whose music moves between orchestral pop and raw electronics.

Roadio

Roadio is dedicated to American roots music that feels grounded, honest, and deeply connected to the spirit of the open road. Inspired by wide landscapes, truck stops, desert highways, and classic Americana, Roadio aims to become the perfect companion for long-distance hauls and quiet moments of reflection. Featuring Bonnie 'Prince' Billy, one of indie folk's most revered voices whose song "I See a Darkness" was covered by Johnny Cash; Grammy nominee and 2021 IBMA Songwriter of the Year Thomm Jutz; and New Zealand singer-songwriter Amber Lynn Nicol.

Game Radio features music from artists across some of the most respected independent labels in the world, including Domino Recording Company, home to Arctic Monkeys, Franz Ferdinand, and Wet Leg, alongside Drag City, Ninja Tune, and independent artists who record and tour entirely on their own terms. Every track was chosen by hand, built to hold up across hundreds of hours of driving.

Game Radio Feature

Game Radio will expand the existing audio experience alongside the current Radio Stream (Online Radio) and Music Player systems, while also bringing a variety of improvements to music selection, user experience, and overall interaction with the in-game audio players.

In-game Widget

While driving, the Audio Player widget will appear above the navigation interface and display detailed playback information, including:

  • Unique station name and icon
  • Current song title
  • Artist name
  • Animated audio wave visualization
  • Favorite station indicator

Players will also be able to customize the behavior of the widget through the Widget Options menu (F6), allowing them to tailor how and when radio information appears during gameplay. 

Support for Community-Created Stations

We are also excited to support creative possibilities for our modding community. Players will be able to create their own custom radio stations featuring their own music and share them with the community for playback, just like any other mods.

Game Radio has been designed to become part of the driving experience itself. Different stations can completely change the atmosphere of your journey, whether you are hauling cargo through dense urban traffic, crossing remote deserts, or enjoying scenic roads across Europe and North America.

This feature also brings improvements to the existing music and radio systems, creating a more seamless listening experience while driving.

We are incredibly excited to finally begin sharing more about Game Radio with our community, and we look forward to hearing which station becomes your favorite once 1.60 arrives. The stations you hear at launch are the foundation. Music comes first, and there is plenty more we want to build on top of it in the future!

Be sure to follow us on X/Twitter, Facebook, Instagram, Bluesky, and YouTube for all the latest updates. Don't forget to sign up for our newsletter as well! See you out on the road, and until next time, keep on truckin’.

  •  

NRC durft eindelijk 'VPN' te zeggen | POM S11E35

Alexander heeft Claude Code ingeruild voor Codex en vibecodet inmiddels vanaf zijn telefoon met een talent voor overgave dat Ernst-Jan de stuipen op het lijf jaagt: wie geeft er nou zijn DNS-paneel en Beeper aan een AI met de woorden 'succes, one shot'?De Substack tax jaagt makers massaal weg vanwege die 10 procent, maar POM stapte zelf over naar Beehiiv en ontdekte dat het gras daar niet per se groener is, alleen anders gemaaid. Verder een ode aan NRC, dat een nerdenkrant is geworden en gewoon 'VPN' in de kop durft te zetten, plus een essay van Andreessen Horowitz over de diepgewortelde haat tussen Silicon Valley en de media. En vandaag een heus cultuurblokje: Ernst-Jans maand zonder social media, een verslavende Substack over stoppen met drinken, en een true crime-boek dat eigenlijk gewoon een podcast op papier is. Veel plezier met luisteren!

Verder lezen over wat Carbon Equity nog meer doet? Lees meer op carbonequity.com

📧 Volg onze eigen nieuwsbrief via pom.show

🧡 Hier word je lid van de Telegram community: pom.community

🚀 Kijk clips via onze Instagram: https://instagram.com/podcastovermedia

💚 Volg de nieuwsbrief van Ernst-Jan.

💫 Volg de nieuwsbrief van Alexander.



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit www.pom.show

💾

  •  

Papa is niet boos, papa is teleurgesteld. ft Alex Mazereeuw | POM S11E34

Om deze aflevering te kijken (YouTube bant ons steeds) → https://www.pom.show/p/papa-is-niet-boos-papa-is-teleurgesteld

Met Alex Mazereeuw bespreken we weer de televisiemaand en het thema is splitbrain. De NOS pakte het Songfestival over van AvroTros en koos niet voor sobere journalistiek maar voor de sportredactie-aanpak: twee showponies in het commentaarhokje en feestneuzen op. Jack van Gelder liet zich live inbellen bij Shownieuws om zijn Telegraaf-uitspraken over Hélène Hendriks terug te draaien, compleet met AirPods die naar boven wijzen en een teddybeer op de achtergrond. Yvonne Coldeweijer won haar rechtszaak tegen Talpa maar mag nu exclusief content maken op Kijk.nl, waar niemand kijkt. Pesterij verpakt als schikking. Ondertussen grijpen de streamingdiensten hard terug naar platheid: Videoland kondigt een Flodder-remake aan en Amazon Prime lanceert Ticket to the Tribes, een programma waarin Nederlanders stammen in Afrika bezoeken dat zo uit 2010 lijkt weggelopen…

Verder lezen over wat Carbon Equity nog meer doet? Lees verder op carbonequity.com

📧 Volg onze eigen nieuwsbrief via pom.show

🧡 Hier word je lid van de Telegram community: pom.community

🚀 Kijk clips via onze Instagram: https://instagram.com/podcastovermedia

💚 Volg de nieuwsbrief van Ernst-Jan.

💫 Volg de nieuwsbrief van Alexander.



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit www.pom.show

💾

  •  

Alexander ging chinamaxxen (en kwam terug met een rijbewijs) | POM S11E33

Gen Z doet aan China Maxxing: warm water drinken, appeltjes koken en warme voeten als levensfilosofie. Alexander ging een stap verder en vloog naar Shenzhen, waar het standaard toeristenprogramma bestaat uit drone-bezorging, zelfrijdende taxi's en een exoskelet aantrekken. Op de elektronicamarkten liggen volledig werkende iPhones zonder serienummer voor de helft van de prijs, samengesteld uit onderdelen die allemaal in de buurt gemaakt worden. Een lokale VC legt uit waarom slimme Chinezen na een Amerikaanse studie gewoon terugkomen: research grants drie keer zo hoog, iteratiecycli van een dag voor hardware-startups, en ieder jaar wordt het leven zichtbaar beter. Op een roboticabeurs verkoopt stand na stand losse oogjes, haartjes en software voor humanoids, inclusief een robot die patrouilleert op een basisschool. Autofabrikant Xpeng laat een vliegende auto zien die er absurd uitziet maar wel echt in productie gaat. En dan is er nog de Chinese bureaucratie: Alexander haalt zijn rijbewijs via een kafkaësk parcours met stempels, Noord-Koreaanse microfoons en een verplicht halfuur SBS6-achtige verkeersongelukken kijken.

Meer weten over Carbon Equity? Lees verder op carbonequity.com

Meer informatie over Undersigned vind je hier.

📧 Volg onze eigen nieuwsbrief via pom.show

🧡 Hier word je lid van de Telegram community: pom.community

🚀 Kijk clips via onze Instagram: https://instagram.com/podcastovermedia

💚 Volg de nieuwsbrief van Ernst-Jan.

💫 Volg de nieuwsbrief van Alexander.



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit www.pom.show

💾

  •  

Ondankbaar: Ernst-Jan haalt te weinig denkdividend uit vibecoden! | POM S11E32

Ernst-Jan luistert niet meer naar podcasts maar leest samenvattingen, inclusief een apart overzichtje van de woordgrapjes uit Hard Fork. Hij heeft met Tasklet een systeem gebouwd dat bij elke nieuwe aflevering automatisch een samenvatting in zijn Readwise stuurt, met per podcast een ander prompt. Het resultaat: hij lacht niet meer hardop op de pont. Alexander heeft ondertussen zijn eigen RSS-reader gebouwd die nieuwsbrieven automatisch ontleedt, koppen herschrijft naar hoge informatiedichtheid en podcasts comprimeert tot tekst. Vibecoden is TikTok voor nerds: Alexander maakt prediction markets voor zijn vriendengroep en eigen e-mailclients, terwijl Ernst-Jan na een week eindeloos knoppen optimaliseren besloot dat hij zijn schaarse aandacht ergens anders aan wil besteden. Met Claude Cowork heeft Ernst-Jan wel een digitale secretaris gebouwd die elke ochtend zijn Obsidian-vault doorzoekt, zijn dag briefed en zelfs een profielpagina van Alexander bijhoudt als "resource". Cory Doctorows boek over enshittification maakt ondertussen pijnlijk duidelijk dat je Samsung-tv elke dag vraagt of 268 advertentiepartners mogen meekijken, net zolang tot iemand in je huishouden op "aanvaarden" klikt.

📧 Volg onze eigen nieuwsbrief via pom.show

🧡 Hier word je lid van de Telegram community: pom.community

🚀 Kijk clips via onze Instagram: https://instagram.com/podcastovermedia

💚 Volg de nieuwsbrief van Ernst-Jan.

💫 Volg de nieuwsbrief van Alexander.



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit www.pom.show

💾

  •  

Format is dood (lang leve The Box) ft. Alex Mazereeuw | POM S11E31

Kijk de video hier: https://www.pom.show/p/format-is-dood-lang-leve-the-box

Wakker in Paraguay blijkt na het zien van de hele serie toch een voltreffer: de makers winnen het vertrouwen van complotwappies zo volledig dat ze alles loslaten voor de camera.

Ondertussen is Jack van Gelder gecanceld door Talpa wegens onwerkbaar gedrag en zelfs op X verworden tot een stille reposter. Er komt troost: The Passion keert terug in Dwingelo, en ter ere daarvan graaft Alex de beelden op van Jack die in 2014 Zwart Wit van Frank Boeijen zong. Met zoveel pathos dat je er dagen van moet bijkomen.

Het nieuwe RTL-format The Box dropt BN'ers in gele dozen zonder spelregels en laat zowel deelnemers als kijkers zelf maar uitzoeken wat de bedoeling is.

Rob Kemps vervangt Frank Lammers als Jumbo-gezicht met een campagne die verdacht veel naar D66-verkiezingsretoriek ruikt. Er volgt een bloemlezing van BN'ers in reclames door de jaren heen, van borderline racistische Belcompany-spotjes tot Adelheid Roosen die je doodleuk vertelt dat we allemaal doodgaan.

De verlossing komt echter van Editie NL, dat bewijst dat een briljante invalshoek niet door een taalmodel is na te doen. Veel plezier!

📧 Volg onze eigen nieuwsbrief via pom.show

🧡 Hier word je lid van de Telegram community: pom.community

🚀 Kijk clips via onze Instagram: https://instagram.com/podcastovermedia

💚 Volg de nieuwsbrief van Ernst-Jan.

💫 Volg de nieuwsbrief van Alexander.



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit www.pom.show

💾

  •  

Een spamfilter bouwen is heel leuk ft. Rick Pastoor | POM S11E30

Rick Pastoor was een jaar geleden te gast en riep op tot meer Europese technologie. Sindsdien heeft hij niet stilgezeten: met Cirrux bouwt hij solo een volwaardige vervanger voor Google Workspace, inclusief e-mail, agenda en contacten. Het geheim zit in agentic coding: na een sessie met een groepje engineers in december ontdekte hij dat je AI-agents veel meer context moet geven dan één zinnetje, en sindsdien shipt hij features alsof hij een team van tien is.

Ernst-Jan heeft ondertussen zijn hele tweede brein in Obsidian gegooid en draait dagelijks AI-commando's op zeven jaar aan notities, met soms genadeloos eerlijke patronen als resultaat. Beiden worstelen met de keerzijde: het werken met agents is verslavend, de feedbackloop zo direct dat je voor het slapengaan nog even drie taken aftrapt, en echte concentratie verdwijnt in een maalstroom van context switching.

Via Mark Andreessen's hete take over introspectie en Tim Ferriss' stuk over de val van zelfhulp belanden ze bij de vraag of eindeloze zelfverbetering niet gewoon een verslaving is met betere PR. Het voorlopige antwoord: laat die steen liggen, man.

Neem een kijkje bij Cirrux: cirrux.co

📧 Volg onze eigen nieuwsbrief via pom.show

🧡 Hier word je lid van de Telegram community: pom.community

🚀 Kijk clips via onze Instagram: https://instagram.com/podcastovermedia

💚 Volg de nieuwsbrief van Ernst-Jan.

💫 Volg de nieuwsbrief van Alexander.



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit www.pom.show

💾

  •  

Hoe drie mannen en een hondenpak een mediamultinational bouwden die groter is dan iedereen denkt | POM S11E29

Studio 100 draait meer dan 300 miljoen omzet, heeft duizenden medewerkers en maakt op dit moment met 500 mensen in Australië een Stranger Things-animatiereeks voor Netflix, en vrijwel niemand weet het. Thomas Smolders schreef het definitieve boek over het bedrijf dat hij de Europese Disney noemt, en legt uit hoe een omroeper met een pratende hond uitgroeide tot een multinational met pretparken, musicals en een IP-catalogus waar Maya de Bij, Pippi Langkous en Wickie de Viking in zitten.

De succesingrediënten: een vliegwielmodel à la Disney, slimme licentiedeals die merchandisers dwongen om langetermijnrelaties aan te gaan, en een portfoliostrategie die per leeftijdsgroep en geslacht nieuwe franchises lanceerde. Danny Verbiest, de man in het Samsonpak, liet zich op Mauritius letterlijk levend begraven in een doodskist onder het zand voor één helikoptershot. Dat niveau toewijding zat in het DNA van het bedrijf.

Kabouter Plop bleek briljant omdat de opverende muts met belletjes trademarkbaar was, iets wat met een generieke hond als Samson nooit lukte. De originele K3 verkoopt nu Ahoy keer op keer uit voor een generatie millennials die de liedjes nog steeds meezingt, en hun kinderen kijken ondertussen weer gewoon naar Bumba. De echte groei zit niet meer in kindercontent, want die markt is te gesatureerd, maar in volwassen entertainment zoals musicals met rijdende tribunes die richting Broadway gaan.

Hier koop je het boek: https://www.paagman.nl/product/83856099/van-hond-naar-100-door-thomas-smolders

📧 Volg onze eigen nieuwsbrief via pom.show

🧡 Hier word je lid van de Telegram community: pom.community

🚀 Kijk clips via onze Instagram: https://instagram.com/podcastovermedia

💚 Volg de nieuwsbrief van Ernst-Jan.

💫 Volg de nieuwsbrief van Alexander.



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit www.pom.show

💾

  •  

Ik zou uw dochter kunnen zijn | POM S11E28

Doortje Smithuijsen heeft zichzelf uitgenodigd bij POM - het enige interview dat ze zelf heeft geïnitieerd in het hele perstraject rond haar Boekenweekessay. Er moest kennelijk iets uit.

In 'Ik zou uw dochter kunnen zijn' houdt ze de Nederlandse culturele elite een spiegel voor. Niet met cijfers of een preek, maar met humor en herkenbare scènes: de arthouse bioscoop op zaterdagmiddag, de dure bakker, de teleurstelling over een koophuis in Weesp. Het essay gaat over entitlement - bij boomers die vinden dat ze hun welvaart hebben verdiend, én bij hun millennial-kinderen die teleurgesteld zijn dat het beloofde leven er niet helemaal blijkt te zijn. Doortje denkt dat juist dat hardnekkige gevoel van 'recht hebben op' de reden is dat er over vermogensongelijkheid wel eindeloos wordt gepraat, maar nooit iets verandert.

We horen hoe het CPNB met een complete delegatie en een speltje langskwam om haar te vragen (maar eigenlijk al wist dat ze ja zou zeggen), waarom ze bewust koos voor een Wolkers-achtig omslag en een foto op haar oude tennisbaan, en wat er gebeurt als je bij de EO ‘nou en’ zegt over erfbelasting.

Het essay ligt vanaf 11 maart in de boekhandel. Lees er hier meer over: https://cpnb.nl/nieuws/hendrik-groen-en-doortje-smithuijsen-boekenweekauteurs-2026/

📧 Volg onze eigen nieuwsbrief via pom.show

🧡 Hier word je lid van de Telegram community: pom.community

🚀 Kijk clips via onze Instagram: https://instagram.com/podcastovermedia

💚 Volg de nieuwsbrief van Ernst-Jan.

💫 Volg de nieuwsbrief van Alexander.



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit www.pom.show

💾

  •  

Wantrouwen als prime time ft. Alex Mazereeuw | POM S11E27

Alex heeft een thema meegenomen: vertrouwen. Iets waar we allemaal meer van kunnen gebruiken, maar wat de Nederlandse televisie systematisch ondermijnt. Hij bouwt een monument van fragmenten dat steeds grimmiger wordt. Van rugnummers raden in een spiegelloze villa tot reality-schurken die elkaar kogels in de rug beloven voor 25.000 euro. Watch Your Back, Valsspel, House of Villains: het zijn allemaal variaties op dezelfde onderliggende stroming. Wantrouwen als entertainment. Ernst-Jan stelt de kernvraag: spiegelt televisie wat er in de samenleving leeft, of voedt het de cynisme alleen maar?

Ook het vertrouwen in datingprogramma’s brokkelt af. First Dates stopt, Lang Leve de Liefde ook, en een deelneemster blijkt haar “eerste date” een jaar lang geënsceneerd te hebben om te bewijzen dat ze kan acteren. De oprechtheid die ooit de kern was van het genre is vervangen door BN’ers die het podium gebruiken als springplank. Boer Zoekt Vrouw houdt stand juist omdat het nog knullig en echt voelt, maar zodra Winter Vol Liefde oprechte kandidaten cast, vindt de kijker het saai. Bloedirritant, die kijker.

De verlossing komt van onverwachte hoek. Rob Geus keert terug als de hygiënepolitie en bewijst dat televisie ook vertrouwen kan opbouwen: hij daalt neer naar het volk, luistert naar zorgen over acute diarree, en confronteert restauranthouders met vieze pannen. De dominee en de koopman in één persoon. Don’t touch me in the food.

📧 Volg onze eigen nieuwsbrief via pom.show

🧡 Hier word je lid van de Telegram community: pom.community

🚀 Kijk clips via onze Instagram: https://instagram.com/podcastovermedia

💚 Volg de nieuwsbrief van Ernst-Jan.

💫 Volg de nieuwsbrief van Alexander.



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit www.pom.show

💾

  •  

Als je NU nog niet vibecodet ben je gek | POM S11E26

De bruiloftgasten die waren afgehaakt omdat POM te veel over AI ging, kunnen beter wegblijven: deze aflevering gaat vol gas over Claude Code. Ernst-Jan bouwde in twintig minuten een browser-extensie waar De Correspondent in 2014 geen developers voor had, en maakte samen met zijn zoon een compleet spel genaamd Brazolski - inclusief sneeuw en vuurwerkshow. Alexander heeft inmiddels een to-do-app die eruitziet als Things maar draait op Obsidian, gebouwd door zijn computer terwijl hij sliep.

De nieuwe tool Clawdbot gaat nog een stap verder: die krijgt toegang tot je mail, agenda en Notion, en gaat proactief taken uitvoeren zonder dat je erom vraagt. Klinkt geweldig, maar de beveiligingsrisico's zijn reëel - prompt hijacking kan ervoor zorgen dat iemand via een appje al je mail laat wissen. De kloof tussen mensen die dit snappen en de rest van de samenleving wordt steeds groter, terwijl kranten nog steeds schrijven over 'fancy autocomplete'.

Conclusie: iedereen zou nu moeten experimenteren met Claude Code, en er moet eigenlijk een burgerberaad over AI komen.

📧 Volg onze eigen nieuwsbrief via pom.show

🧡 Hier word je lid van de Telegram community: pom.community

🚀 Kijk clips via onze Instagram: https://instagram.com/podcastovermedia

💚 Volg de nieuwsbrief van Ernst-Jan.

💫 Volg de nieuwsbrief van Alexander.



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit www.pom.show

💾

  •  

Alexander te gast bij Café Conflict | POM S11E25

Deze week even geen podcast van de heren samen. In de plaats daarvoor kun je het gesprek wat Alexander voerde in de podcast Café Conflict, van het AD in samenwerking met de Erasmus Universtiteit, hier terug luisteren.

Wil je de rest van die serie ook nog luisteren? Hier vind je alle afleveringen: https://www.ad.nl/podcasts/caf-conflict-108237 referrer=https%3A%2F%2Fwww.google.com%2F

📧 Volg onze eigen nieuwsbrief via pom.show

🧡 Hier word je lid van de Telegram community: pom.community

🚀 Kijk clips via onze Instagram: https://instagram.com/podcastovermedia

💚 Volg de nieuwsbrief van Ernst-Jan.

💫 Volg de nieuwsbrief van Alexander.



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit www.pom.show

💾

  •  

De Hanslers + John de Mol snoert de mond van rechts Nederland + VPRO maakt wappiemonument | POM S11E24

Lees meer van Alex hier: https://www.alexmazereeuw.nl/

📧 Volg onze eigen nieuwsbrief via pom.show

🧡 Hier word je lid van de Telegram community: pom.community

🚀 Kijk clips via onze Instagram: https://instagram.com/podcastovermedia

💚 Volg de nieuwsbrief van Ernst-Jan.

💫 Volg de nieuwsbrief van Alexander.



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit www.pom.show

💾

  •  

Matthijs van Nieuwkerk zit op Substack + TikTok voor intellectuelen + Chinese peptides spuiten | POM S11E23

De NOS maakte een item over toeristen die teleurgesteld waren door AI-gegenereerde winterbeelden van Amsterdam – prachtige mediakunst, maar journalistiek op dun ijs. Ondertussen opent Matthijs van Nieuwkerk een dagelijkse Substack. Wat we hier zien is de ontbundeling van het Parool in real time: de paroolhoofden vertrekken naar eigen kanalen. Het roept de vraag op: waarom bouwen wij geen Europees alternatief voor Substack? Met automatische vertaalfuncties zodat Portugese denkers gewoon in het Nederlands in je inbox belanden. Dit is het eerste idee sinds de Correspondent waar Ernst-Jan echt zijn ziel in zou willen leggen – ware het niet dat zo’n bedrijf je hele leven overneemt.

In New York laat de nieuwe burgemeester Zohran Mamdani zien hoe YouTube-native politiek eruitziet: video’s die mensen willen kijken, zonder de eeuwige context van conflict. Het is het eerste sprankje hoop sinds Obama.

Alexander wordt ondertussen doodgegooid met peptide-video’s op TikTok. Chinese poedertjes die je zelf mengt met Amazon-naalden voor betere huid, meer spieren en cognitieve verbetering. De peptide-FOMO is reëel – maar zeer af te raden.

📧 Volg onze eigen nieuwsbrief via pom.show

🧡 Hier word je lid van de Telegram community: pom.community

🚀 Kijk clips via onze Instagram: https://instagram.com/podcastovermedia

💚 Volg de nieuwsbrief van Ernst-Jan.

💫 Volg de nieuwsbrief van Alexander.



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit www.pom.show

💾

  •  

Alexander openhartig door reflectievragen Ernst-Jan + zo zorgt meer AI voor meer interne rust | POM S11E22

Alexander was bij Eva Jinek om over zijn kersthit te praten, maar raakte gefascineerd door het tv-in-tv-format waarin Radar-achtige items naadloos opgaan in de talkshow. Ondertussen schokt het nieuws dat Stefania het heeft uitgemaakt met Flemming – wat betekent dit voor haar lopende Zalando-sponsordeal? De nieuwe wereld van native advertising wordt ontleed, waarin Thijs Boermans moeiteloos hints over huwelijksplannen verweeft met kledingpromotie, terwijl Ernst-Jans poging om geurkaarsen te koppelen aan Chinese yin-filosofie op weerstand stuitte bij zijn achterban.

Alexander deelt zijn ervaring in een Zwitserse MRI-scanner bij Ahead Health, waar hij voor het eerst meemaakte hoe private gezondheidszorg voelt: een arts die onbeperkt tijd neemt voor preventieve gesprekken over creatine en kippenlevers. Upfront opende ondertussen een supermarkt in Rotterdam die eruitziet als een “communistische koortsdroom” – steriele schappen zonder merken, alleen ingrediënten.

De grote vraag van de aflevering: hoeveel AI sta je toe in het leven van je kinderen? ChatGPT kan nu one-shot toetsinterfaces genereren op basis van een pdf, maar is dat helikopter-parenting of gewoon de nieuwe realiteit? Ernst-Jan pleit voor kinderen op hun bek laten gaan bij topo, terwijl Alexander worstelt met de oneerlijkheid tegenover gezinnen die deze tools niet kennen.

Tot slot: veertig reflectievragen voor het nieuwe jaar, download ze via intentioneelleven.nl

En wil je onze redacteur worden? Stuur je LinkedIn-profiel en 2–3 voorbeelden naar mail@klopping.nl. Ervaring met redactie/journalistiek is een plus. Het is freelance en meteen starten.

📧 Volg onze eigen nieuwsbrief via pom.show

🧡 Hier word je lid van de Telegram community: pom.community

🚀 Kijk clips via onze Instagram: https://instagram.com/podcastovermedia

💚 Volg de nieuwsbrief van Ernst-Jan.

💫 Volg de nieuwsbrief van Alexander.



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit www.pom.show

💾

  •  
❌