Linux Secure Boot Shim Signing Keys Expired in June — How to Audit Yours

·1 views

Microsoft's shim loader signing keys used to validate Linux boot components expired in June 2026, affecting systems with Secure Boot enabled. The expiry does not immediately break anything, as firmware validates signatures without checking expiration dates. However, administrators should audit their Secure Boot state using the 'mokutil --sb-state' command and review enrolled keys with 'mokutil --db'. Fedora and RHEL-based users can pull updated keys via 'fwupdmgr update', while Ubuntu users should verify their shim-signed package is up to date. The issue is considered routine maintenance rather than an emergency, but is especially worth addressing for those managing fleets of Linux workstations or servers.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

AWS Launches Kiro IDE With Spec-Driven AI Coding Workflow Built on VS Code

Amazon Web Services has released Kiro, an AI-powered integrated development environment built on the open-source version of VS Code. Unlike conventional AI coding assistants such as GitHub Copilot or ChatGPT, Kiro follows a spec-driven approach that moves developers through requirements, technical design, and task generation before any code is written. The tool includes built-in AI agents — including Spec, Plan, and Bug Fix — each tailored to a specific phase of the development process. Kiro organises project specifications by feature inside a hidden .kiro directory, keeping planning artifacts separate from core project instructions stored in an AGENTS.md file. Early users report that the structured workflow addresses a key limitation of prompt-based coding tools by automating the initial planning phase.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer Publishes Beginner-Friendly Computer Networks Guide for Interview Prep

A developer on DEV Community has published a structured notes guide covering core computer networking concepts aimed at beginners and interview candidates. The guide explains key communication models including Client-Server and Peer-to-Peer architectures, detailing how each handles data exchange between devices. It also covers widely used protocols such as HTTP, FTP, SMTP, IMAP, WebSocket, and WebRTC, along with their specific use cases. The document breaks down the differences between TCP and UDP at the transport layer, highlighting reliability versus speed trade-offs. Network layers including Application, Transport, and Network are outlined to give readers a foundational understanding of how data moves across systems.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Harness Engineering Proposes a Structured Framework for Human-AI Development Collaboration

A concept called Harness Engineering has been outlined by developers on DEV Community as a structured system designed to coordinate reasoning, knowledge, workflows, and validation in AI-assisted software development. The framework centers on two core components: a Specification Harness that clarifies what is being built and why, and a Coding Harness that governs how it is built correctly and maintainably. It models engineering as a continuous loop where every activity — from intent to deployment — feeds back into organizational learning rather than being discarded. A key analytical tool within the framework is the KK/KU/UK/UU model, which categorizes knowledge gaps to help teams identify what they know, what they recognize they do not know, and crucially, what they do not yet realize they are missing. The framework aims to address the growing challenge of preserving engineering intent and accumulating institutional knowledge as AI systems take on larger roles in the development process.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Google's TypeScript ADK Enables Developers to Build AI Agents with Gemini

Google's Agent Development Kit (ADK) for TypeScript allows developers to build and deploy AI agents using Node.js 20 or newer. A tutorial on DEV Community walks through creating a minimal 'Hello World' weather and time agent, with the full sample project available on GitHub. The ADK supports both the Gemini Developer API and Vertex AI for authentication, offering flexibility in how agents connect to Google's AI infrastructure. TypeScript's static type system ensures that tool parameters, results, and agent configurations are validated at compile time, reducing errors before deployment. The ADK is designed to be model-agnostic and framework-compatible, though it is optimized for Gemini and the broader Google ecosystem.

0 comments Read more at DEV Community