Terminal

Head of US Safety Agency Resigns

Chris Fall has resigned as director of the U.S. Center for AI Standards and Innovation just three months after being appointed to lead the Commerce Department's federal AI testing institute. Arvind Raman, who oversees the Commerce office responsible for the institute, will serve temporarily in the role. "The Commerce Department did not provide a reason for Fall's departure," reports Reuters. From…

Human mathematicians are being outcounterexampled

AliExpress Hit With Record $625 Million Fine After Failing To Make EU-Ordered Fixes

The European Commission has fined AliExpress more than $625 million, the largest penalty yet under the Digital Services Act, after finding that the marketplace failed to "diligently assess and mitigate risks relating to the sale of illegal, unsafe, or counterfeit products on its e-commerce platform." EU officials said flagged products repeatedly reappeared, sellers could evade safeguards, and AliE…

Intel Expanding Memory Options For Current Xeon 6 / Xeon 6+ Servers

With Intel's next-generation Xeon Diamond Rapids processors not slated to launch until next year and with AMD EPYC Venice being right around the corner, Intel announced today that with upcoming BIOS updates they will be expanding the range of RDIMM and MRDIMM memory support for current-generation Xeon 6 and Xeon 6+ processors...…

“Stealth Crawlers” Are Not a Threat to the Open Web. Bills Targeting Them Would Be.

There’s a new boogeyman in the battles over AI: so-called “stealth crawlers.” We’ll admit it—the term “stealth crawlers” sounds quite nefarious. In reality, they’re anything but. “Stealth crawlers” are simply automated tools to access and collect public web data—without disclosing the user’s identity. Private crawlers like these facilitate all kinds of important work that benefits the public, incl…

Safety and alignment in an era of long-horizon models

[$] Fedora grapples with change

The Fedora Project is known for, among other things, having a well-defined set of processes for just about everything. It has extensive packaging guidelines that deal with the complexities of creating RPMs to install software, as well as processes for managing the legal questions that arise around shipping software. Fedora also has a well-defined change process for dealing with self-contained tech…

Nativ: Run frontier open models locally on your Mac

An Empirical Study: AI Agent Rules Need Context and Layered Enforcement

The drivers behind software delivery inefficiency

Agent swarms and the new model economics

LG Monitors Silently Install Adware-Like App On Windows PCs

VideoCardz reports that connecting certain LG monitors to Windows PCs can trigger Windows Update to automatically install the LG Monitor App Installer, which runs at startup and repeatedly displays McAfee trial promotions. From the report: Gamers Nexus reproduced the behavior with an LG UltraGear 34GX900A-B after receiving reports from monitor owners. Windows Update first installed LG extension an…

That post never existed. Stop listening to that thing

Hyprland 0.55 announced the switch to Lua for its config files

Kimi Work

Jelly UI: Soft-body physics for native HTML form controls

Hacker Wipes Romania's Entire Land Registry Database

A hacker reportedly wiped Romania's entire land registry database after a failed extortion attempt, halting property transactions across the country and preventing notaries from issuing land extracts, authenticating sales, or registering mortgages. "On the dark web, the hacker also boasted to have begun backup copies of stolen data in an attempt to prevent it from being restored," reports Cybernew…

How we measured AI writing across arXiv, and where the measurement breaks

Launch HN: Bloomy (YC S26) – AI-powered mastery learning for K-12

AMD Talks Up The Great Opportunities Of SPIR-V IR With ROCm

While AMD ROCm 7.14 released last week as the first production release built off TheRock, there is already more to look forward to moving into the future with the AMD ROCm stack... In particular, SPIR-V with ROCm becoming a reality for unified binaries that can work across graphics architectures/targets, better portability across GPU hardware, and other improvements to the experience in targeting…

LSU Physicists Create First Room-Temperature Quantum Material

Researchers at Louisiana State University have created a room-temperature quantum material made from a thin gold film on glass, patterned with microscopic slits that act like artificial atoms. "We call this robust transport. These quantum states carry information," says physicist Omar Magana-Loaiza. "Our crystal can distinguish them and move them from one point to another in a robust way without r…

F1 in Belgium: Machine learning algorithms are ruining the sport

Formula 1 returned to the Spa-Francorchamps circuit for the Belgium Grand Prix this weekend. This ribbon of tarmac in the Ardennes is one of the sport's historic venues, featuring in the first F1 season way back in 1950. But as yesterday's race showed, the current F1 machinery is utterly ill-suited to this dramatic venue. As we saw at Suzuka in Japan earlier this year, a 2026 F1 battery is able t…

GNOME Changes Security Disclosure Policies Due To AI-Generated Reports

The GNOME project is changing its handling of security reports due to the influx of AI/LLM-generated security findings...…

Catanzaro: Some changes to GNOME security tracking

Michael Catanzaro, who has been managing GNOME security issue tracking since November 2020, has written a blog post that details some changes in how he will be managing GNOME vulnerability reports from now on due to an increase in AI-generated security reports. He will be switching from a 90-day deadline for disclosures to 30 days for issues reported on August 1, or later. "The shorter deadline wo…

I Stopped "Creating Content"

Ziggity – A terminal UI for Git, written in Zig

Cross sectioning insects in an electron microscope with a femtosecond laser [video]

AliExpress hit with record $625M fine after failing to make EU-ordered fixes

Yesterday, the European Commission slapped AliExpress with the largest fine yet under the Digital Services Act (DSA), exceeding $625 million. In a press release, the EC said that AliExpress failed to “diligently assess and mitigate risks relating to the sale of illegal, unsafe, or counterfeit products on its e-commerce platform.” Officials found that AliExpress not only failed to staff teams dedi…

The Voice of Google

Kimi K3, Qwen 3.8, and Anthropic's (Potential) Unravelling

Corners Don't Look Like That: Regarding Screenspace Ambient Occlusion (2012)

LibreOffice Once Again Slams Microsoft For Using 'Lock-In' With Office Files

An anonymous reader quotes a report from XDA Developers: One of the founding members of The Document Foundation and handler of LibreOffice's PR and media relations, Italo Vignoli, took to the LibreOffice blog to call out Microsoft's practices with its Office application. The last time we saw Vignoli take to the stage, we saw him accusing Euro-Office of being just as bad as Microsoft with its pract…

Controlling Reasoning Effort in LLMs

The first trailer for Avengers: Doomsday is finally here

With San Diego Comic-Con kicking off later this week, Marvel Studios has released the first official full trailer for Avengers: Doomsday, the penultimate film in the MCU's Phase Six and the end of the so-called "Multiverse Saga." (Spoilers for prior relevant MCU films below.) Marvel Studios originally planned to build its Phase Six Avengers arc (The Kang Dynasty) around Jonathan Majors’ Kang the…

China's open-weights AI strategy is winning

Perfection Is Not Over-Engineering

Pay up or not? Ransomware surge has victims facing tough choices.

Nearly half of companies that are targets of a ransomware cyber attack end up paying a ransom to release their data or systems, according to 2025 research from cybersecurity group Sophos, while the median amount demanded is rising. Globally, some jurisdictions are responding by banning payments to hackers. In the UK, for example, the government is advancing plans to prohibit public sector bodies…

Linux 7.2 Improves Intel Panther Lake Xe3 Arc B390 Graphics Performance

My testing of the in-development Linux 7.2 kernel continues in the lab. One of the latest promising findings from this kernel that will be released as stable in August is faster Intel Xe3 graphics performance on Core Ultra Series 3 "Panther Lake" hardware.…

Firefox Merges Support for Vulkan Video Decoding

Shinjuku Station in 3D

Linux Patches Introduce "KNOD" For In-Kernel Network Offloading Directly To AMD GPUs

Some extremely cool patches were posted to the Linux kernel mailing list on Sunday. The patches for "KNOD" allow for in-kernel network offloading to GPUs with an initial focus on AMD GPU support. What makes this all the more nifty is that it doesn't depend upon any user-space libraries like AMD ROCm but is all handled in-kernel with driving the GPU directly...…

Hacker wipes Romania's land registry database

[$] Merging famfs?

The famfs filesystem, which is meant to provide shared access to huge memory-resident files on CXL and other devices, returned to the Linux Storage, Filesystem, Memory Management, and BPF Summit (LSFMM+BPF) in 2026. It was first discussed at LSFMM+BPF 2024 and a new implementation was described at the 2025 gathering, but it still has not made its way into the kernel; LWN looked at a discussion abo…

Security updates for Monday

Security updates have been issued by Debian (kernel, libnfs, roundcube, and tiff), Fedora (antlr4-project, chromium, erlang, libseccomp, libtiff, log4cxx, mbedtls, node-exporter, opam, openssh, proftpd, python-asyncssh, python-django5, python-libcst, python-orjson, python-uv-build, ruby, rust-astral_async_zip, spoofdpi, uv, and yq), Mageia (bind, clamav, erlang, libidn, libreoffice, nmap, nodejs,…

LEDs' Potential to Save Our Night Skies

The EU is about to sell our most sensitive data to the US for visa-free travel

Hollywood Sci-fi Studio Lot Now Pitched As Site To Make Real Space-age Weapons

James Cameron filmed his Avatar sequels there. Marvel filmed Thor, Iron Man 2, and The Avengers. Manhattan Beach Studios in Los Angeles even handled Star Wars' series like Obi-Wan Kenobi and The Mandalorian, which Bloomberg points out is about "a heavily armed bounty hunter in a galaxy far, far away." "Now lenders who are selling the property's $240 million mortgage are promoting the site to poten…

Firefox 153 Available With Support For Vulkan Video Decoding, Experimental JPEG-XL

Mozilla has uploaded the Firefox 153.0 release binaries today for the newest monthly update to this cross-platform web browser. Making Firefox 153 exciting is that it's the newest Extended Support Release "ESR" as well as introducing Vulkan Video decode support...…

Beyond grep: The case for a context-rich AI coding harness

There are a lot of AI coding applications out there, and as impressive as large language models and the agents they enable have become, many of the most recent developments in AI-assisted development have been in the software that manages those models, not just the models themselves. Earlier this summer, I spoke with the head of product for Claude Code, Anthropic's Cat Wu, about that company's ap…

openSUSE Seeking Additional Corporate Sponsors

While openSUSE is closely aligned with SUSE as a company, they aren't the exclusive sponsor of this free and open-source Linux distribution with its rolling-release Tumbleweed and Leap stable releases. AMD has been a longtime major supporter of openSUSE and the Fastly content delivery company has been another platinum sponsor too besides SUSE. There are also various other lower-tier sponsors while…

Airport Simulator

AMD Posts AVX10_V2_AUX ISA Support Patches For GCC Compiler

Earlier this month Intel compiler engineers posted initial GCC compiler patches for the AI Compute Extensions "ACE" that was born out of the x86 Ecosystem Advisory Group to augment AVX and scalar code with new capabilities for AI/ML workloads. Now as part of that an AMD compiler engineer posted patches over the weekend for AVX10_V2_AUX ISA support...…

Linux's Qualcomm Crypto Accelerator Driver "Harmful" And Being Disabled: Slower Than CPU, History Of Bugs

The Qualcomm Crypto Engine Accelerator "QCE" driver is being disabled within the Linux 7.3 kernel over a number of issues, including being slower than having the CPU cores handling cryptographic work and a history of different driver bugs. Plus race conditions causing security issues and other challenges...…

Hyprland 0.56 Released With Many Enhancements To This Wayland Compositor

Out today is Hyprland 0.56 as the newest feature update to this unique Wayland compositor and incorporating just under three months worth of improvements...…

Exploit brokers pay $500k for WordPress RCEs. I found one with GPT5.6 and $25

New Free Speech Concern: When AI Chatbots Won't Criticize Leaders from Repressive Regimes

Ask Claude to make a pamphlet critical of China's leader, Thailand's king, or Saudi Arabia's crown prince — and it will decline, reports the Associated Press. That's "a key finding from a Meta Oversight Board study released Thursday," their article points out: AI systems are more than twice as likely to refuse to product critical material if it's about a restrictive world leader or government. And…

Rust Will Help Linux Succeed and Makes Coding Fun, Says Greg Kroah-Hartman

ZDNet reports on June's Open Source Summit India 2026 in Mumbai, where Linux stable kernel maintainer Greg Kroah-Hartman gave a talk titled "Rust and Linux: How the Rust Language is Going to Help Linux Succeed." Kroah-Hartman said in his keynote that "the [Linux] kernel is moving toward Rust. Git is moving toward Rust. Lots of projects are starting to move toward Rust." He didn't always feel that…

As AI Transforms Silicon Valley, Some Tech Workers Face Evaporating Financial Security

The Washington Post describes a mid-tier executive at Meta as one of Silicon Valley's "winners" whose financial security suddenly "evaporated" as their workforce "pushed headlong into AI and heavy job cuts," creating a transformed job market. "Her ex-husband, a designer at Meta who was laid off in 2020, eventually gave up looking for jobs in his profession. He now lifts boxes at a warehouse." Layo…

Zilog Z80 8-Bit CPU Turns 50, Open-source Replacement Heads To Drop-in DIP40 Silicon

An anonymous reader shared this report from Tom's Hardware: The Zilog Z80 has just turned 50 years old. This iconic 8-bit processor first went on sale in July 1976 and stayed in production for 48 years until Zilog, now a Littelfuse subsidiary, stopped accepting orders in June 2024. However, there's an open-source replacement closer than ever to shipping in the chip's original 40-pin DIP package th…

Dozens of Robotaxi Riders Are Falling Asleep, Sparking Frantic Calls For Emergency Services

"If tired or wasted passengers fall asleep in a traditional taxi or rideshare, the driver can shout or shake them awake," reports Bloomberg. "Not so in a robotaxi..." Ditto Kasendar remembers soft music drifting from the robotaxi's speakers as he rode home late at night from a friend's birthday party in 2025. The next moment, Los Angeles firefighters were opening the door and asking if he was OK.…

Kernel prepatch 7.2-rc4

The 7.2-rc4 kernel prepatch is out for testing. Linus said: "This whole week I had the feeling that people were starting to go on summer vacation, but running the numbers shows that I must have been wrong - it all looks pretty normal."…

India's first privately developed rocket reaches orbit on dramatic debut launch

Indian space officials celebrated the debut flight of Skyroot Aerospace's Vikram-1 rocket, India's first fully commercial satellite launcher, as a "grand success" Saturday after an on-target climb into a 280-mile-high orbit following liftoff from an island spaceport in the Bay of Bengal. The Vikram-1 lifted off from India's primary spaceport on Sriharikota Island at 1:35 am EDT (06:35 UTC) Saturd…

Linux 7.2-rc4 Released: Looking Like The "New Normal"

The fourth weekly release candidate of the Linux 7.2 kernel is now available for testing...…

California's 'Truth in Recycling' Law Blocked by Judge

An anonymous reader shared this report from the Los Angeles Times: A federal judge has halted California's groundbreaking "Truth in Recycling" law, which aims to reduce consumer confusion about which packaging can be recycled. [Originally planned to take effect October 4th], California's recyclable packaging law prohibits manufacturers from using a "chasing arrows" recycling symbol on products or…

James Webb Space Telescope Discovers How Black Holes Feed Themselves

"Thanks to the James Webb Space Telescope, astronomers have been given a glimpse of the mechanisms that supermassive black holes use to feed themselves," reports Space.com: The powerful cosmic titans get really puzzling when astronomers using the JWST spot them before the universe was even 1 billion years old. That's because the mechanisms by which black holes devour matter to grow and then merge…

Robot 'Decapitated' in World's First-Ever Humanoid UFC Fight

"A humanoid robot lost its head," reports Newsweek, "during the world's first free-combat tournament for full-sized humanoid robots." The Ultimate Robot Knock-out Legend competition began Thursday in Shenzhen, China, according to the article, with local robotics company EngineAI providing $40,000 of their "T800" robots (yes, named after The Terminator) to 32 participating teams from around the wor…

ECC and DDR5

The Last MPEG-4 Visual Patent Has Expired

If you are looking for a reason to celebrate today, the last of the MPEG-4 Part 2 patents expired today...…

As mosquito ranges expand, better monitoring is key to preventing disease

With summer heat comes pool parties, beach days, backyard cookouts, and, of course, swarms of bloodthirsty mosquitoes. But while insect bites have always been a side effect of time spent outdoors, the species doing the biting are changing in historically temperate regions like New England. As climate change makes these areas warmer and wetter, their ranges are expanding—and any diseases they carr…

FFmpeg Lands Latest AVX-512 Optimization: 1.372x Faster In Pixel Format Conversion

The latest hand-tuned code in the FFmpeg multimedia library for allowing better performance on today's modern Intel/AMD AVX-512-capable processors is showing 1.372x faster performance for RGB24 to RGBA pixel format conversions...…

Legion Y700 Gen4 Tablet Powered By Snapdragon 8 Elite Seeing Linux Patches

The Legion Y700 Gen4 is an Android tablet that debuted last year and powered by the Qualcomm Snapdragon 8 Elite chipset. This 8.8-inch tablet is now seeing patches for enabling Linux support outside the confines of Android and will hopefully end up in the mainline kernel...…

More ASUS Motherboards To Enjoy Working Sensor Monitoring With Linux 7.3

Thanks to the work of the open-source community, more ASUS desktop motherboards for Intel Core and AMD Ryzen systems are seeing working sensor monitoring under Linux. With the upcoming Linux 7.3 cycle, several additional ASUS motherboards will now enjoy working sensor monitoring...…

GNU Hurd Makes Progress On AArch64, Writing Translators In Rust

The GNU Hurd project recently issued their Q2'2026 status report to outline recently development efforts. The Hurd is still happening!..…

NVK Vulkan Performance Improving With Mesa 26.2 Against NVIDIA Proprietary Driver

The performance of the Nouveau kernel driver with the Mesa NVK Vulkan driver continues to improve each feature release in its quest toward better competing with NVIDIA's official Linux graphics driver with its proprietary Vulkan driver...…

"Half a Second" — a book on the XZ backdoor

Adrian Mastronardi has released a book called Half a Second; it is a detailed look into the XZ backdoor attempt of 2024. The book is freely available under a (non-free) noncommercial, no-derivatives CC license. Half a Second tells that story as one continuous narrative: the burned-out volunteer who maintained the code alone and was patiently, expertly manipulated into giving it up; the engineer wh…

Three stable kernel updates

The 7.1.4, 6.18.39, and 6.12.96 stable kernel updates have been released; each contains a fairly large set of important fixes.…

AMD Linux Graphics Driver Preps Fix For Apple Studio Display

This week's batch of AMDGPU Display Core "DC" updates arrived heavy with 70 new patches for improving that open-source display support for Radeon graphics on the Linux desktop...…

GNOME OS Safe Mode Improving The System Reliability

At GNOME's annual GUADEC conference happening this week in Spain, an update was shared on the current state of GNOME OS...…

Will AI fix prior authorization—or make it worse?

If you’re like me, you or a loved one has struggled through the process of gaining pre-approval for the medical care that your physician has recommended. Personal stories abound regarding the tribulations of patients as they go through hoops to get their health insurer to pay for certain prescription medications, medical procedures, and more. When used judiciously, this process—known as prior aut…

KDE Plasma 6.8 System Monitor Making It Easier Assigning Processes To CPU Cores

Nate Graham and John Veness are out with the latest issue of This Week in Plasma to highlight all of the interesting developments taking place in the KDE Plasma desktop space...…

UXL's oneDNN 3.13 Preps For Intel Nova Lake With AVX10.2, More Intel Optimizations

Following the release of AMD's ZenDNN 6.0 earlier this month, there is a new feature release of the oneDNN neural network library that used to be developed by Intel as part of oneAPI and is now under the UXL Foundation umbrella. Even so, oneDNN feature releases continue to be heavy on new Intel optimizations and future hardware support...…

D7VK 2.0 Released With Some Nice Performance Improvements: Up To 2x Or More

In addition to Friday night's release of DXVK 3.0.2, debuting separately a short time later was D7VK 2.0 as the latest major feature release for this implementation of Direct3D 7 and earlier built off the Vulkan API...…

DXVK 3.0.2 Released With Improved Hang Debugging, Handful Of Game Fixes

In addition to the initial build of Holo Core as AArch64 Arch Linux for the Steam Frame, another software milestone today in Valve's Linux gaming space is the release of DXVK 3.0.2 for Direct3D 8 / 9 / 10 / 11 APIs implemented over the Vulkan API for running Windows games...…

Google-backed satellites for wildfire detection launch as smoke chokes US, Canada

As smoke from hundreds of burning wildfires spread across Canada and the United States, the first three operational satellites in the Google-backed FireSat program successfully launched into orbit. The satellites will begin providing wildfire detection capable of spotting even small fires in the United States, Australia, and Europe before the end of the year. The launch of the microsatellites abo…

The Pentagon's Space Development Agency hasn't moved as fast as anyone would like

The Space Development Agency was established in 2019 to help speed up the deployment of US military space systems by sidestepping the Pentagon's traditional sluggish bureaucracy. Seven years later, SDA is finally launching its first batches of operational satellites, just as the Pentagon plans to shutter the semi-autonomous agency and fold it back into the Space Force's procurement pipeline, newl…

Hegseth wants a "High-T" military; doctors call it a clinical minefield

On Wednesday, Defense Secretary Pete Hegseth made the startling announcement that the US military would begin requiring all active duty and reserve personnel aged 30 and older to undergo mandatory screening for testosterone deficiency. The screenings will take place during yearly health assessments. Those under age 30 can also get screened on request. In a short video posted on social media, Hegs…

Taco Bell iceberg lettuce identified as source of cyclosporiasis in 5 states

Federal officials on Friday announced that shredded iceberg lettuce imported from Mexico and served at Taco Bell restaurants in five states is a source of Cyclospora, the foodborne parasite causing the nationwide surge in cases of explosive, watery diarrhea. The five states are Indiana, Kentucky, Michigan, Ohio, and West Virginia. A traceback investigation by the Centers for Disease Control and P…

Noctua NL-LC1-36 All-In-One Liquid Cooler

With reviewing hardware for more than 22 years, when it comes to cooling products there are few brands that can still get me intrigued like Noctua. With their recent launch of the NL-LC1 all-in-one liquid coolers, I decided to try out the Noctua NL-LC1-36 360mm AIO cooler that is working out well for cooling high-end desktop CPUs like the recently launched Ryzen 9 9950X3D2.…

FastFlowLM Developers Join AMD To Help Push Open-Source NPU Software

On top of releasing ROCm 7.14 as the new production release of ROCm now built offTheRock, rolling out the Lemonade 11.0 local AI server, and GAIA 0.22, AMD has some more open-source news in the lead up to next week's AMD Advancing AI event...…

Troubling new details emerge on diabetes ouster controversy

Last month, we reported on a troubling incident at the annual meeting of the American Diabetes Association (ADA) in New Orleans. On June 5, five leading scientists were ousted for handing out copies of an editorial, published in the journal Diabetes Care (an ADA journal) in April, sharply criticizing the Trump administration’s ongoing attacks on scientific research. There was a public outcry and…

Victory! Flock Ends Rollout of Audio “Distress Detection” of Human Voices

Reversing course, Flock Safety—the surveillance technology vendor most known for its extensive network of automated license plate readers—has announced that it will end a pilot for its acoustic gunshot detection devices to identify signs of “human distress.” In October 2025, EFF warned the public that Flock was rolling out a new feature called “Distress Detection” that would be deployed through th…

Building an Arch Linux aarch64 port for Holo Core (Collabora blog)

Collabora has published a blog post about its work with Valve on Holo Core, which is a port of Arch Linux to aarch64 to be used as the the operating system on Valve's 64-bit Arm Steam Frame gaming system. Collabora has released the sources, binary packages, and a container image for aarch64 devices. The post describes some of the challenges in porting Arch Linux to a new architecture, and what rem…

Your Vision. Your Legacy. Your Future.

This month, we celebrate 36 years of EFF and a mission that is bigger than any one of us. Thanks to EFF, communities around the world are demanding that technology protects their freedom, advances justice, and opens doors to opportunity. That's not a small thing—it's a life's work worth continuing. If you are committed to staying on the cutting edge of digital rights issues, I'd like to invite you…

Will Russia's answer to the Falcon 9 rocket ever take flight?

Everyone seems to be launching and landing rockets these days. Last week, China joined the club of countries that have launched an orbital mission and brought its booster safely back to Earth, which is just the beginning of public and private ventures in that country aggressively pushing into rocket reuse. Also in Asia, Japan's space agency has been conducting hop tests, and Honda recently perfor…

Fubo hikes prices by $15 after restoring some NBCU channels lost in November

Fubo prices are going up by $15 per month because it will have some NBCUniversal channels again. For years, Fubo, a sports-centric vMVPD (virtual multichannel video programming distributor, which lets subscribers watch traditional TV channels live over the Internet), offered NBCUniversal channels. That stopped in November 2025 due to a contract dispute. With the loss of local NBC affiliates, Tele…

San Francisco orders Apple, Google to remove nudify apps from app stores

This week, San Francisco’s attorney general, David Chiu, sent cease-and-desist letters, demanding that Apple and Google remove 13 so-called nudification apps from their app stores, Wired reported. Nudification apps can make it trivially easy to transform ordinary photos of real people into explicit images. The harmful AI tools allow bad actors to remove clothing, change a person’s features, place…

Experimental Build Of Holo Core Published: Arch Linux AArch64 For Valve's Steam Frame

As part of Valve's upcoming Qualcomm-powered Steam Frame headset, Valve has been collaborating with Collabora on the Arch Linux AArch64 base for their platform. Published today are the initial sources and binaries of this "Holo Core" base of Arch Linux AArch64 to be used by the Steam Frame...…

[$] Securing BPF LSMs against tampering

Since 2020, BPF programs have been able to act as Linux security modules (LSMs). Several projects, including systemd, have been working to use that capability to provide more security to users. Christian Brauner spoke at the 2026 Linux Storage, Filesystem, Memory-Management, and BPF Summit about some of the limitations of using BPF in this way, and the changes he would like to see for systemd's u…

Ars is looking for a senior technology reporter, and you might be it!

If you're a skilled writer with outsize technology chops who gets excited by the idea of taking the Ars audience with you as you go hands-on with hardware—all kinds of hardware!—then this position has your name all over it. Plus, you get to have me as your boss, and how could that be anything other than awesome?! The job The formal job description and application is right here and has all the spe…

How the Watch Dogs Video Game Series Mirrored and Predicted Real-World Digital Rights Issues

When Ubisoft's Watch Dogs 2 was released in 2016, it was a headtrip for those of us working on digital-rights issues in the Bay Area. During the day, I'd fight tech-authoritarianism from EFF's San Francisco offices and then, at night, I'd fight tech-authoritarianism in an uncanny simulation of San Francisco from my home gaming console.   Watch Dogs 2 is an open-world video game that follows a hack…

85.3 GFlops: Optimizing FP32 Matrix Multiplication on a Single AMD Zen 3 Core

Linux WMI Driver Gets Ready To Support ACPI-Based ARM64 Laptops

Linux developer Armin Wolf sent out a set of patches today for enabling AArch64 support for the ACPI Windows Management Instrumentation (WMI) driver to work on AArch64 in no longer being bound to x86/x86_64. This is a step toward the long goal of being able to support modern Windows on ARM laptops via ACPI on Linux...…

Security updates for Friday

Security updates have been issued by AlmaLinux (cifs-utils, container-tools:rhel8, libreoffice, nodejs:24, perl-XML-LibXML, and python3.12), Fedora (ansible-collection-ansible-posix, firefox, freerdp, ImageMagick, mingw-glib2, perl-DBI, perl-HTTP-Date, rust-cargo-rpmstatus, and rust-opendal), Oracle (cifs-utils, gegl, gimp, git-lfs, go-toolset:ol8, hplip, kernel, libreoffice, maven:3.9, perl-XML-L…

Arm Core Local Accelerator Driver Posted For Linux As Agnostic Interface For Accelerators

A new open-source Linux driver announced today by Arm is the Arm Core Local Accelerator "CLA" driver as a CPU-local interface for programming attached accelerators. This is an agnostic interface for attached accelerators with the initial target focusing on an attached compute engine...…

The report oil companies are worried about: Climate attribution science

Climate change is being driven largely by the greenhouse gases we've pumped into the atmosphere, which trap more of the Sun's energy there. That added energy increases the odds of extreme events: longer, more intense heat waves and droughts, interspersed with excessive precipitation. But these sorts of events have happened in the past—how can we tell if any given weather disaster has been made mo…

FCC took pricey gifts from Paramount as the company needed approval for deals

The rich and famous who filed into the Kennedy Center’s opera house in December were there to enjoy one of the nation’s most exclusive celebrations of the performing arts: the center’s annual honors gala. The black-tie event, hosted by President Donald Trump, prioritized tickets to people who donated more than $75,000 to the center. This year, it feted Hollywood icon Sylvester Stallone, the legen…

2026 Lucid Gravity Touring review: A strong act 2

When Lucid introduced the Air electric sedan in late 2021, the first Air Dream Edition I tested packed over 1,100 hp (820 kW) and carried a $180,000-plus window sticker. It's easily the most powerful street car I've tested; the only vehicle I've driven with more power was a purebred race car with a third the mass, and it was on a proper track. Its combustion engine was also about 1,000 times loud…

AMD Preps More Graphics Driver Improvements For Linux 7.3

Since earlier this month AMD has begun staging graphics driver changes for Linux 7.3 ahead of the merge window opening in late July. That's brought some interesting changes so far while there still are a few weeks to land any additional features in DRM-Next. This week another batch of AMDGPU graphics driver and AMDKFD compute driver feature code was sent out for this next kernel version...…

Mozilla AI Releases Llamafile 0.10.4 With New Transcribefile Built On Transcribe.cpp

Mozilla AI developers have released a new version of Llamafile, their solution for easy-to-use LLMs as a single file that work across hardware and operating systems. With Llamafile 0.10.4 is now Transcribefile, as a new piece built off their recently announced Transcribe.cpp project...…

OpenBLAS 0.3.34 Improves Multi-Threading, Support For A Memory-Safe C Toolchain

OpenBLAS 0.3.34 released on Thursday as this popular, open-source BLAS library providing optimized support for a variety of CPUs/architectures. OpenBLAS 0.3.34 continues working on squeezing more performance out of today's processors as well as delivering other new features...…

Frame: A New X11 Server Implementation Written Entirely In x86_64 Assembly

Previously we covered YSERVER as an X11 server written in the Rust programming language with the help of Claude Code. A Phoronix reader wrote in today to share an even more esoteric X11 server implementation that has come about and again written in large part by AI/LLM usage: Frame is an X11 server written in pure x86_64 Assembly...…

[$] Sched-ext: enqueue() for sub-schedulers and proxy-execution support

The extensible scheduler class (sched_ext) allows the installation of custom CPU schedulers as a set of BPF programs. While sched_ext, in its current form, has already led to a lot of interesting scheduler-development work, the subsystem itself is still undergoing rapid evolution. Among other work, the ability to set up a hierarchy of sub-schedulers is approaching completion, and a longstanding in…

Security updates for Thursday

Security updates have been issued by AlmaLinux (cups, git-lfs, kernel, libsolv, libxml2, python3.12, and python3.9), Debian (chromium, dhcpcd5, and ntfs-3g), Fedora (firefox, perl-Imager, python-bcrypt, python-tiktoken, roundcubemail, and xrdp), Mageia (openssl, poppler, python-mistune, and tmux), Oracle (389-ds-base, cups, git-lfs, glibc, host-metering, kernel, libsolv, libxml2, nginx:1.24, Packa…

EFF and ARTICLE 19 Submission to the European Commission on the DSA Trusted Flagger Guidelines

EFF and ARTICLE 19 have submitted joint comments to the European Commission on draft guidelines for the Digital Services Act’s trusted flagger mechanism. Having long advocated for a DSA that protects freedom of expression while preserving intermediary liability protections and the prohibition on general monitoring, we welcome the Commission's effort to provide practical guidance on how the trusted…

[$] LWN.net Weekly Edition for July 16, 2026

Inside this week's LWN.net Weekly Edition: Front: Fighting scraper bots; io_uring queues; Filesystem testing; BPF shielding; Sending packets from BPF; Kitty; QBE. Briefs: Shim security; seunshare vulnerability; Debian bookworm; Rust 1.97.0; Linux.org; Quotes; ... Announcements: Newsletters, conferences, security updates, patches, and more.…

California Steps Back From Dangerous Expansion of its Age-Gating Law

The California legislature has stepped back from a plan that would have expanded its age-gating law, removing language that could have compounded serious threats to users’ speech, privacy and security just to browse the internet. A.B. 1856, authored by Assemblymember Buffy Wicks, will now move forward through the legislature without its most problematic pieces. EFF still believes the underlying la…

Most Smart Watches, Rings, and Bands Lack Basic Transparency Reports and Key Privacy Features

Oura Rings, Garmin GPS fitness watches, Apple Watches, Whoop bands—every year, more and more tech devices are promising to monitor our health and fitness, guide us toward healthier living, and provide useful health metrics to take to our doctors. But few of these tools provide the sorts of privacy and security promises we demand from all technology, let alone tech that captures personal health dat…

🚫 Don't Let Congress Age-Gate the Internet | EFFector 38.13

The effort to age gate the internet is back in Washington—and now it has a new name. Recently passed by the House of Representatives, the KIDS Act is a sprawling package of proposals to control what we can see and say online. Supporters claim the KIDS Act is needed to protect minors online. But if lawmakers really want to make the internet safer, why are they encouraging more surveillance instead…

[$] Topics in filesystem testing

It should come as no surprise that a gathering of filesystem developers would discuss filesystem testing; it has been a mainstay of the Linux Storage, Filesystem, Memory Management, and BPF Summit over the years and the 2026 summit was no exception. Ted Ts'o led the discussion this time; he had a few different topics to raise, including his perception of increasing regressions for ext4 in the stab…

Local DoS attack vectors in seunshare 3.10 (SUSE Security Team Blog)

The SUSE Security Team Blog has a post with an analysis of seunshare, which is used by SELinux to confine untrusted programs. During a review of version 3.10 of the program, the team identified two local Denial-of-Service (DoS) vectors. Since seunshare is supposed to run on SELinux-enabled systems, it is important to understand what kind of privilege escalation can be achieved when vulnerabilities…

European Court: Apple Can Not Shirk Off its Interoperability Requirements

One of the best bulwarks against monopoly is interoperability—that is making a new product or service work with an existing product or service. Interoperability allows users, and not the manufacturers of their devices or largest player in a market, to decide what application best serves them. Unsurprisingly, companies like Apple have worked hard to resist interoperability requirements.  On July 8,…

Don’t Repeat NY’s 3D Printing Blunder

This year the state of New York had the dubious honor of being the first to pass a controversial provision to mandate all 3D printers come with surveillance and censorship. That means not only is there a ticking clock to protect every artist, researcher, engineer, and hobbyist in the state, but there is a real risk of other states thoughtlessly following suit—prior to the New York rules even takin…

Microsoft Patches a Record 570 Security Flaws

Microsoft Corp. today released software updates to plug at least 570 security holes in its Windows operating systems and other software, almost triple the number of vulnerabilities the software giant fixed in its record-smashing Patch Tuesday release last month. Microsoft attributed the burgeoning patch counts to vulnerability discoveries aided by artificial intelligence. Nearly 60 of the bugs qua…

Sony Nerfs Videogame Ownership

Legal intern Suzanne Castillo co-authored of this post. Playstation’s decision to kill physical game discs is the latest attack on our diminishing rights to access and engage with culture digitally. Rent-seeking corporations and negligent lawmakers share the blame — and they can do better.  We’ve seen the same playbook used in the move to digital distribution of  film, TV, and music: draw in custo…

Lessons Learned from CISA’s Recent GitHub Leak

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a postmortem on a recent data leak in which a contractor published dozens of internal CISA credentials — including AWS Govcloud keys — in a public GitHub repository for almost six months before being notified by KrebsOnSecurity. Experts say the gaps identified in the agency’s initial response provide important lessons that all…

Building Our Future Together

In my first weeks as Executive Director of EFF, I’ve been reminded every day how consequential this moment is in determining what kind of future we will have. We are on the edge. What each one of us steps up to do – with our expertise, energy, and resources – will determine whether our future is one of openness, security, and fundamental rights, or one controlled through fear, surveillance, and ce…

Automated Moderation Is Here to Stay—Accountability Must Keep Pace

This post is part 2 in a series about automated content moderation. Read the first post here. When whistleblower Frances Haugen leaked a set of documents from Meta in 2020, among the revelations was a jarring statistic: The company’s algorithms designed to detect terrorist content incorrectly deleted nonviolent Arabic-language content 77 percent of the time, while failing to detect hate speech und…

"We Want Texans to Know Their Rights": Q&A with Mayday Health on the Impact of Surveillance on Abortion Care

Last May, EFF reported that a sheriff’s office in Texas searched data from more than 83,000 automated license plate reader (ALPR) cameras to track down a woman suspected of self-managing an abortion. ALPRs are promoted as tools for keeping communities safe by finding missing persons and locating stolen vehicles, but this case showed how ALPRS can be weaponized to investigate people’s private healt…

The House Passed The KIDS Act—The Senate Should Reject It 

Last week, the House voted on the KIDS Act, a disjointed package of legislation that seeks to control Americans’ web browsing and private messaging. The package combines a revised version of the Kids Online Safety Act (KOSA), with several other internet bills, study bills, reporting requirements, and new regulations. Different parts of the bill pressure online services to impose different age-gati…

European Commission Chooses to Keep EU Users Locked Up Behind Big Tech’s Gates

Users are always seeking more control over their social networking experience to make it better, whether to improve privacy or enhance flexibility. Interoperability between social networking platforms like Facebook and TikTok has so many benefits that solve those issues.   Say you’re on multiple platforms because you have friends you follow on different networks, but you’ve decided to choose one p…

Google's New Remote Attestation Scheme is As Bad As Its Old One

Google owes its existence to the open web, but today, its technological “innovations” have much to do with locking users into a “walled garden.” The latest of these is “reCAPTCHA Mobile Verification,” an experimental initiative that will let companies block users if they are running independent, "de-googled" versions of Android. These “indie Android” versions are favored by people who want to prot…

Felons, Fraudsters Flog Offensive Cybersecurity Startup

A cybersecurity startup dangling millions of dollars to acquire zero-day security vulnerabilities in popular software is run by a pair of far-right conspiracy theorists and convicted felons whose most recent ventures included fake intelligence companies and a now-defunct AI-based lobbying platform they operated under assumed names. The X/Twitter account IRIS C2 (@C2IRIS) has gained more than 4,000…

Automated Moderation Is Here to Stay

This blog post is part 1 of a 2-part series. The second part sets out recommendations for companies and policymakers.Six years ago—one month into a global pandemic—we argued that the automated moderation processes many platforms were rapidly adopting should be highly transparent, easily appealable, and temporary. We warned that "protocols adopted in times of crisis often persist when the crisis is…

Help EFF Cut the AI Hype

In the global race to build and dominate the AI industry, it can sure seem like the interests of ordinary people sit last on the agenda. It's just the opposite for EFF. While companies furiously jam AI tools into their veins and your eyeballs, EFF’s technologists, activists, and attorneys have been meticulously cutting through the hype to ensure AI can serve your privacy and free expression. Techn…

FBI Seizes NetNut Proxy Platform, Popa Botnet

The Federal Bureau of Investigation (FBI) said today it worked with industry partners to seize hundreds of domains associated with NetNut, a sprawling residential proxy service operated by the publicly-traded Israeli company Alarum Technologies [NASDAQ: ALAR]. The action comes roughly two weeks after KrebsOnSecurity published findings from multiple security firms connecting NetNut to the Popa botn…

LGBT Q&A: How Can I Wipe Online Data That Points To My Queer Identity?

This Pride, we’re answering all your digital rights questions in season two of our initiative, LGBT Q&A.  You Asked: Is there a way for me to wipe data about me online that could point to my queer identity? EFF’s Answer: You cannot protect everything all the time, but there are ways to wipe information about yourself online.  Most information available about you online will typically be found in t…

EFF and Allies: X’s FTC Petition to Waive Privacy Violation Order Should be Rejected

X Corp. should not be able to escape privacy compliance because it changed its name.  On May 15, X Corp. filed a petition before the Federal Trade Commission (FTC) to set aside or modify an order issued in 2022 requiring the company to report regularly to the FTC for its violations of user data. The order or “consent decree” is a result of misleading the platforms’ 140 million users by using priva…

LGBT Q&A: What Data Are Companies in the UK Collecting When Verifying My Age?

This Pride, we’re answering all your digital rights questions in season two of our initiative, LGBT Q&A.  You Asked: I live in the UK, and we have age verification now on a bunch of websites (including Reddit) and now on iPhones. Can you explain what sort of data companies are actually collecting when they check for age and whether there are any real threats to my safety?  EFF’s Answer: Age verif…

EFF to Gov. Pritzker: Veto Illinois’ HB 5511

The Illinois legislature recently passed House Bill 5511, which imposes a sweeping, device-level age-gating framework across nearly all internet-enabled hardware, operating systems, and online services. This well-intentioned but deeply flawed piece of legislation will harm young people who rely on the internet to access essential information and find community. That’s why we’re urging the Illinois…

Victory! Supreme Court Says Constitution Protects People’s Location Data

You have an expectation of privacy in location data that reveals your movements in the physical world, and even short-term surveillance of these movements is a search subject to the Fourth Amendment, the U.S. Supreme Court ruled today in Chatrie v. United States.   The case involved geofence warrants, a form of dragnet surveillance police have used to vacuum up location data from electronic device…

EFF to Grindr: This Pride Month, Put Safety and Privacy Over Profits

This Pride month, we’re calling on the dating app Grindr to prioritize LGBTQ+ user safety by making privacy the default across its platform. That means no more sharing personal data with advertisers or training AI on private information without users’ opt-in consent. Grindr is a dating app for the LGBTQ+ community; and for queer people, privacy violations can have life-altering consequences. Infor…

Hate “The Algorithm?” RSS Is One of the Tools You’ve Been Looking For

Poke your head into just about any online social network—or any general conversations about internet culture—and you’ll likely find a boogieman: the algorithm. Since at least the moment Facebook introduced (and apologized for) its News Feed, “the algorithm” has been shorthand for the ways the tech giants control what we see and when we see it. In the age of enshittification, there is a push to rec…

Lawmakers Must Act Now to Prevent Armed Police Drones

This is not science fiction. It’s not premature. If towns, cities, states, or the federal government want to act to rein in the emergence of armed police drones and robots, we have precious little time. In the absence of substantial regulation around when and how domestic law enforcement in the United States can deploy force using drones, the companies that markets technology to law enforcement ha…

We Can Still Stop California’s 3D Printer Surveillance Scheme

Ignoring EFF’s warnings about the dangers and impossibility of implementing a new mandate for 3D print surveillance software, the California State Assembly has signed off on legislation to do just that. In the process, legislators amended the bill to make it even more confusing, while failing to address the risks to privacy, speech, and consumer rights. We must renew our call on legislators to dro…

Primed for Malware: Stop Selling Compromised Android Devices

Time and time again, researchers have found numerous compromised Android devices for sale at large online retailers like Amazon. When these devices get individually reported, we have seen some noted efforts to take them down. But this is a systemic problem and Amazon and other major online retailers must make a corresponding systemic and intentional effort to stop these devices from entering peopl…

EFF, TEDIC and CEJIL Challenge Secrecy in the Use of Face Recognition in Paraguay

Seeking transparency and accountability in Paraguay’s use of facial recognition, EFF, the Association of Technology, Education, Development, Research, Communication (TEDIC), and the Centre for Justice and International Law (CEJIL) filed a complaint with the Inter-American Commission on Human Rights against the state for arbitrarily denying access to information about its implementation and use of…

Four Years After Dobbs, Anti-Abortion Lawmakers Keep Coming for Online Speech

This week marks four years since Dobbs v. Jackson Women’s Health Organization overturned Roe v. Wade’s constitutional protections for people seeking abortion care. Anniversaries are a moment to take stock, and over the last four years, EFF has seen firsthand how digital rights and reproductive rights have become increasingly intertwined. One major way this has happened: the fight over abortion has…

The FCC’s Spam Call Proposal Is Just a Data Collection Scheme

The Federal Communications Commission wants to require telecommunications providers to collect vast amounts of personal information from every person who wants a phone number in the name of combatting scam and spam calls. This plan will fail to combat the deluge of unwanted calls people in the United States receive every day while giving untrustworthy companies a gold mine of information that woul…

Are Your Local Police Using Flock Safety ALPRs to Scan for Immigrants?

When a car passes an automated license plate reader (ALPR), its plate is captured and instantly compared against a list of vehicles that police are actively looking for or that police have identified for real-time surveillance. These are called “hotlists,” and EFF has learned that one used by agencies across the country targets immigrants on behalf of Immigration and Customs Enforcement (ICE).  Ag…

The KIDS Act Would Require Age Checks To Get Online

Within the next week, Congress is preparing to vote on the KIDS Act, a sprawling package of legislation that seeks to control Americans’ web browsing and private messaging. The package includes a revised version of the Kids Online Safety Act, or KOSA, combined with a collection of other internet bills, study bills, reporting requirements, and new regulations. Instead of debating any of these propo…

🦅 Domestic Spying Takes an L | EFFector 38.12

Sold to the public as a foreign surveillance tool, Section 702 is the law has let intelligence agencies spy on millions of Americans’ private conversations without a warrant. Despite years of revelations about this law's misuse, Congress has repeatedly reauthorized Section 702 without meaningful reform. Until this month, that is, when it finally lapsed in a major victory for privacy. In our latest…

Scattered Spider Hackers Plead Guilty on Day 1 of Trial

Two men pleaded guilty in the United Kingdom this week to criminal charges stemming from an August 2024 cyberattack that crippled Transport for London, the entity responsible for the public transport network in the Greater London area. The duo were key members of a prolific cybercrime group known as Scattered Spider, and their guilty pleas came on the first day of what was expected to be a six-wee…

The UK’s New Under-16 Social Media Ban Will Cause More Harm Than It Prevents

This week, politicians in the UK pushed forward with plans to eviscerate privacy and free speech on the internet by announcing a ban on social media for users under 16 that is set to take effect in Spring 2027.  The UK government continues to falsely characterize this policy as a necessary response to growing concerns about online harms for young people. In reality, much like the Online Safety Act…

EFF Joins 60+ Groups Urging the UK to Halt Face Estimation at the Border

This week, EFF joined Foxglove, Human Rights Watch, and 60 other organizations in writing to the UK’s Minister of State for Border Security and Asylum, Alex Norris, raising serious concern about the Home Office’s decision to deploy Facial Age Estimation (FAE) to assess asylum-seeking children from 2027.  The letter points to four key concerns: Discrimination  As with most face estimation and recog…

Canada Is Forging Ahead with Its Dangerous Surveillance Bill

With no serious debate, including on proposed amendments, Canada is blazing full speed ahead with Bill C-22, which would threaten encryption and increase surveillance. Also known as the Lawful Access Bill, Bill C-22 is currently moving forward quickly to a vote despite the many, many criticisms civil liberty groups and the tech industry have hurled at it. As we’ve discussed before, Bill C-22 is da…

EFF Thanks SerpApi For Helping Us Protect Free Speech Online

EFF is grateful for SerpApi’s generous support, helping us fight for your rights to speak and access information online. SerpApi has been giving to EFF every year since 2018, and alongside our 32,000 individual donors, their gift is critical to keeping up the fight. Whether in the courts, halls of power, or broader policy debates, we appreciate the work this support has made possible over the year…

Call for Submissions: Digital Pride

This Pride season, join EFF and the Queer Arts Collective in building a creative space at the intersection of digital justice and artistic expression.  We’re looking for fresh, untold, historically censored takes on digital liberation.  Whether it’s pointing the lens towards an issue you feel is underrepresented in digital justice efforts; sharing personal accounts of joy, pleasure, or sorrow unde…

A New Bill Takes Aim at Government Pressure to Silence Lawful Online Speech

Last week, Senators Ted Cruz and Ron Wyden introduced the Justice Against Weaponized Bureaucratic Overreach to Networked Expression, or JAWBONE Act. The bipartisan legislation creates a federal cause of action against government officials who coerce or attempt to coerce broadcasters, interactive computer services, or AI providers into taking actions against lawful, First-Amendment-protected speech…

Court Records Should Be Free

Court records belong to the public. Yet anyone seeking access to federal court filings through PACER, a government software system that stands for Public Access to Court Electronic Records, is usually required to pay hefty fees to search for and view documents. PACER’s fees have long acted as a barrier that makes it hard, especially for low income people, to see and understand the work produced b…

Field Notes from a Year of OPSEC Training

Late last year, as part of our annual “Year in Review” series, we summarized our efforts providing digital privacy and security advice to at-risk communities. OPSEC trainings (short for operational security, a catch-all term we use to describe any kind of workshop, advising session, assessment, or presentation about operational security for individuals and organization) are something we've long pr…

AI Regulation Should Be Rational, Not Retaliatory

The Trump administration’s approach to AI safety, particularly the generative AI models that regularly grab headlines, has been haphazard at best. At worst, it’s unconstitutional. As EFF and our allies explained in an amicus brief, the Pentagon’s actions against one company, Anthropic, violate the First Amendment because they were motivated by the administration’s desire to punish an uncooperative…

‘Popa’ Botnet Linked to Publicly-Traded Israeli Firm

For the past four years, a sprawling Android-based botnet called Popa has forced millions of consumer TV boxes to relay Internet traffic linked to advertising fraud, account takeovers, and mass data-scraping efforts. This week, researchers from multiple security firms concluded that the Popa botnet is linked to NetNut, a “residential proxy” provider operated by the publicly-traded Israeli firm Ala…

The Free and Open Web Is Under Attack at the IETF

The ability to access publicly available information using automated tools is a central value and benefit of a free and open internet. Automated access—often called crawling or scraping—powers important, useful tools for locating, preserving, and analyzing online information. For example, crawling and scraping helps journalists, researchers, and watchdog organizations report the news, find securit…

The NO FAKES Act Could Silence Satire, Commentary, And News

The NO FAKES Act is supposed to target harmful AI-generated impersonations. But in reality, it will make it easier to suppress commentary, satire, and other lawful speech. That's why EFF has signed a letter urging the Senate Judiciary Committee not to advance the bill in its current form. Take action Tell Congress to Say No to NO FAKES In the letter, EFF joins a coalition of civil society groups i…

Onward, Friends

After 26 years, today is my last day at EFF. It's been a terrific and wild ride — the organization has grown from a tiny band of fighty people trying to plant a flag for freedom and justice in the coming digital world into a large, established band of fighty people doing, well, much the same. The world around us has changed enormously. Our core values haven't budged. I'm proud of what we've achiev…

EFFecting Change: LGBTQ+ Solidarity Against the Tide of Surveillance

LGBTQ+ communities are facing an escalating wave of censorship and targeted surveillance, but we can push back through mutual solidarity. Join us live to learn how safer virtual spaces get built, how platform policies and government pressure are reshaping the digital landscape, and what platform accountability actually looks like. Our panel will share ideas for direct action and concrete strategie…

Victory! 702 has Expired!

Section 702 of the Foreign Intelligence Surveillance Act lets US intelligence agencies collect communications from foreigners abroad without a warrant, and routinely sweeps in Americans’ emails, messages, and calls in the process. The authority for this program is set to expire Friday, June 12th, 2026, at midnight. As we wrote earlier this week, Congress has been kicking the ball down the road for…

Yes to California's Bill to Ban Surveillance Pricing

Corporations harvest and monetize ever-growing amounts of our personal data, such as our browsing history and physical location. One bitter fruit of this poisonous tree is known as “surveillance pricing”: corporations offer the same product to two different people at two different prices, based on scrutiny of these people’s respective personal data. Surveillance pricing is bad for privacy, equity,…

Who Runs the Ransomware Group ‘The Gentlemen?’

A cybercrime group known as The Gentlemen has emerged as the second most active ransomware gang by victim count, rapidly attracting a talented pool of hackers through an aggressive recruitment strategy that promises affiliates 90 percent of any ransom paid by victims. This post examines clues pointing to a real life identity for the administrator of The Gentlemen ransomware group. A graphic create…

A Record-Breaking Patch Tuesday for June 2026

Microsoft today released software updates to plug nearly 200 security holes across its Windows operating systems and supported software, a record number of fixes for the company’s monthly Patch Tuesday cycle. Nearly three dozen of those bugs earned Microsoft’s most dire “critical” rating, and exploit code for at least three of the weaknesses is now publicly available. The software giant said in a…

Hackers Used Meta’s AI Support Bot to Seize Instagram Accounts

The Instagram accounts for the Obama White House and the Chief Master Sergeant of the U.S. Space Force were briefly defaced with pro-Iranian images and messages over the weekend, after instructions began circulating on Telegram showing how to trick Meta’s “AI support assistant” bot into resetting account passwords. A screenshot from a video released on Telegram claiming to show how Meta’s AI custo…

Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks

Authorities in the Netherlands have arrested the co-owners of two related Internet hosting companies for operating IT infrastructure used by Russia to carry out cyberattacks, influence operations and disinformation campaigns inside the European Union. The two men were the focus of a 2025 KrebsOnSecurity story about how their hosting companies had assumed control over the technical infrastructure o…