TLDR:

Current status for 26.04 LTS

We shipped rust-coreutils as the default in Ubuntu 25.10 to maximise real-world testing ahead of the LTS. Based on the audit findings and remediation progress, here is where we stand for Ubuntu 26.04 LTS.

We have included the latest upstream release 0.8.0 in Ubuntu 26.04, which incorporates the bulk of the security fixes.

cp, mv, and rm continue to be provided by GNU coreutils in 26.04. These utilities have remaining open TOCTOU (time-of-check to time-of-use) issues (8 as of Apr 22, 2026) that need to be resolved before we are confident shipping them.

Our plan is to address the remaining issues as soon as possible and target Ubuntu 26.10 with 100% rust-coreutils.

Does https://www.olivetin.app/ look like what you have in mind?

Maybe someone can get upset by reading that word?

Must be US people? Because I don’t know anyone else who is offended by “fuck” and ok with “f*ck”.

(OT) what did you use to annotate the picture?

My guess they are not even gonna challenge the “clean room” rewrite legally: the damage is done and it’s not really gonna be mitigated if they manage to take down the rewrite.

Anthropic pulled the npm package within hours and issued a statement: the exposure was “a release packaging issue caused by human error, not a security breach.”

I’m sure they chose the words “human error” to also imply the error is not to blame on their LLM, which remains an open question after reading the article (and likely will forever, although at the very least it would seem like the LLM did not detect this mistake).

Still, some neckbeards only wanna use software from orgs who are in it “for the love of the game”.

Nope, that’s just you fighting strawmen and labelling people who don’t hold your same opinion “neckbeards”.

I would be excited for a new FOSS browser regardless of specific features, and I could be excited for a non-FOSS one if it had particularly promising features that are not provided by any FOSS browser. As far as I can see, Orion does not fall in either category.

BTW marketing a product for its privacy (or security) without it being open source amounts to having “trust me bro” as a slogan… of course one is free to trust whoever they want to.

It’s not FOSS, so I couldn’t possibly care less. That said, best of luck to you!