Unraid 7.3.0 stable has landed with internal boot and TPM licensing, 7.2.7 keeps the older branch protected with backported fixes, and we drop a quiet tease about a possible change to what's running underneath the OS.

From there it's a brutal month of wider security news including the YellowKey BitLocker situation, the Bambu Lab versus OrcaSlicer fight with Rossmann and ‪@GamersNexus‬ weighing in, the collapse of motherboard sales, DeepSeek V4 running locally, and the new wave of VPN-hostile legislation out of Utah and the EU.

Episode Takeaways

-Apprise lands as an official Unraid plugin, built in Go and developed with the upstream project

-Unraid 7.2.7 backports security fixes across 11 core packages on the older branch

-Unraid 7.3.0 stable brings internal boot, TPM-based licensing and Docker networking improvements

-A forward-looking tease on the Linux distribution sitting under Unraid

-Why you don't necessarily need to jump to the latest major release

-Copy Fail, a 732-byte Python script that gets root on most Linux distros since 2017

-The YellowKey BitLocker bypass that looks deliberate enough to be called a backdoor

-A 93-minute Bitwarden CLI compromise that injected malicious GitHub Actions workflows

-DAEMON Tools Lite installers backdoored across more than 100 countries

-Microsoft Edge loading your full password vault into plaintext memory at startup

-Motherboard sales collapse 25% as AI chips squeeze the enthusiast PC market

-Bambu Lab versus OrcaSlicer, with Rossmann, GamersNexus and the SFC weighing in

-Roku and TCL hit with a class action for bricking TVs through software updates

-DeepSeek V4 lands on Hugging Face and the local

-AI homelab crowd are running it

-Utah's SB 73 and the EU briefing that calls VPN use "a loophole that needs closing"

-A husky in Saskatchewan walks herself to doggy daycare

Chapters

00:00 Welcome back, Ed moves house & Stefano's at the Red Hat Summit

00:57 Apprise lands as an official Unraid plugin

05:41 Unraid 7.2.7 security backports

06:19 Unraid 7.3.0 stable, internal boot and TPM licensing

07:10 Merch spring sale

09:11 A tease about Unraid's base distribution switch

14:05 Community talking point: do you have to be on the latest major release?

18:30 Copy Fail kernel CVE

19:15 Dirty Frag

19:29 YellowKey, the BitLocker backdoor

22:55 Bitwarden CLI supply chain compromise

25:04 DAEMON Tools Lite trojanised installers

34:43 Microsoft Edge stored passwords in plaintext memory

37:51 Motherboard sales collapse 25%

41:03 Bambu Lab versus OrcaSlicer, Rossmann and GamersNexus jump in

46:26 Roku and TCL bricked-TV class action

50:26 DeepSeek V4 lands on Hugging Face

52:02 VPNs in the crosshairs, Utah SB 73 and the EU

53:36 A husky walks herself to doggy daycare

55:18 Sign-off

What will you build with Unraid?

Get Started with Unraid in 15 minutes or less: https://unraid.net/getting-started

The hosts of Ed & Stefano Unleashed are passionate about home servers, open-source tech, and sometimes going off on tangents.

The views and opinions expressed on the show are solely those of the hosts and guests and do not reflect the opinions, policies, or positions of Lime Technology, Inc. This show is intended for entertainment and informational purposes only.

Listeners are encouraged to do their own research, experiment responsibly, and not hold the hosts accountable for any questionable home lab decisions.

Most importantly, enjoy the show!