Terminal

Bending Spoons to Buy Airtable For $1.28 Billion

Bending Spoons has made its first acquisition since going public last month at an $18 billion valuation, agreeing to buy spreadsheet and database startup Airtable for $1.28 billion in cash. Airtable joins a growing portfolio of notable brands owned by the Italian app developer, including Evernote, WeTransfer, EventBrite, and Vimeo. TechCrunch reports: Founded in 2013, Airtable has so far raised mo…

Texas halts data center connections to power grid amid overwhelming demand

Nowhere is the US data center boom bigger than in Texas. But less than a year after declaring Texas the “epicenter of AI development,” Governor Greg Abbott has declared a moratorium on all new power grid connections for data centers—at least until developers provide more information about their projects’ potential impacts on the grid and communities. The Republican governor directed regulators in…

Oxide Computer raises $445M (SEC Form D)

Waymo CEO explains why Tesla's camera-only self-driving falls short

Microsoft Tells Engineers 'Tokenmaxxing Is Not What We Are Optimizing For'

Microsoft is introducing AI token budgets for employees, making the cheaper GPT-5.6 its default internal model and telling engineers to focus on business results rather than maximizing AI usage. 404 Media reports: "As we accelerate our use of GitHub Copilot to deliver on our goals, we all need to be aware of how we consume tokens," Jay Parikh, an executive vice president at Microsoft said in an em…

Mobile Ad Software Encourages Location Data Sharing, EFF Report Finds

Developers Must Beware of Ad Libraries that Betray Users’ PrivacySAN FRANCISCO – Some software development kits (SDKs) provided by advertising companies to help developers monetize their apps are automatically feeding users’ location data into systems that location data brokers use to track people, an Electronic Frontier Foundation (EFF) report found.  EFF began investigating the location-sharing…

Developers: Beware of Ad Libraries that Betray Your Users’ Location Privacy

Across mobile platforms, advertising companies provide developers with software development kits (SDKs) that make it easy to monetize their apps. But those same SDKs can automatically feed users’ location data into ad systems that location data brokers use to track people. Many developers may not even be aware of this privacy violation, let alone the users who are directly affected. When developer…

Trump Begins Selling $100,000 Monthly Subscription Service to Wall Street

Trump Media has officially launched its $100,000-per-month data feed giving trading firms machine-readable access to Truth Social posts milliseconds before the public. According to Fortune, five Wall Street firms have already signed up for the service, which "would generate about $500,000 in monthly revenue, or $6 million annually." Critics argue the service could let President Trump, who owns abo…

In Memory of My Wife, Elise Cawley, with Thanks for 36 Wonderful Years

Launch HN: EdotEnv (YC S26) – Quant Trading RL Envs to Teach LLMs Research

Waymo – Dallas Open to All

Web security is too hard

Blackmail Fail (2013)

Why some people mow a lawn better than others

Trump Administration Drafting Ban On Chinese Data Center Devices

Longtime Slashdot reader schwit1 shares a report from Reuters: The Federal Communications Commission, which oversees the U.S. telecom industry, is working on the measure to bar imports of new Chinese optical transceivers, which allow data to travel over fiber-optic cables at the speed of light within data centers. Officials hope to publish it this year, when it would take effect. The move, not pre…

Hop.earth – OpenStreetMap based car racing game

Vlt 1.0 and Hosted Package Registries

China is Tesla's cash cow, but for how much longer?

Tesla's factory in Shanghai had its best June ever, according to the China Passenger ⁠Car Association. Tesla built 93,579 cars in China that month, a hefty 38 percent increase compared to June 2025, according to CPCA's data. But that production isn't translating into bumper sales to Chinese customers. Rather, sales have been down quarter on quarter in China for more than a year now, particularly…

Apple Says More Ex-Employees May Have Taken Confidential Data to OpenAI

Apple is now seeking a preliminary injunction to prevent OpenAI and Jony Ive's io startup from developing AI hardware allegedly based on stolen Apple trade secrets. "The iPhone maker also claims that more of its former employees may be involved with the trade secrets theft," reports TechCrunch. From the report: In a new filing, Apple is requesting expedited discovery from the accused OpenAI employ…

Bypassing AI guardrails is so easy a script kiddie can do it

If you want to bypass AI guardrails designed to stop models from assisting with cyberattacks, you often just have to ask the right way, according to researchers from Cisco Talos. Simply claiming you own the servers you're targeting or that you're taking part in a capture-the-flag or bug bounty exercise was often enough to persuade models to cooperate. Talos researchers have been poring over promp…

The Warp Agent CLI

Truemetrics (YC S23) Is Hiring in Berlin – GTM Lead

This one time, at Hacker Summer Camp …

As the entire security industry descends on Las Vegas this week for Hacker Summer Camp – not one, but three conferences – attendees can count on two hot topics dominating the discussion. First, a literal hot topic: the triple-digit August heat. Second, and to no one’s surprise: agentic AI – how to govern and secure agents so they don’t go rogue and hack into other organizations’ servers (*cough*…

[$] Fedora considers conflict-of-interest policy

The Fedora Council is considering a conflict-of-interest (COI) policy for its decision-making bodies, such as the Fedora Engineering Steering Committee (FESCo), special-interest groups (SIGs), and any other groups or individuals that report to the council and are responsible for decisions that impact the Fedora project. The current draft does not, however, apply to the council itself. The public d…

Mistral's Shieldstral: 3B open-weights model for multimodal moderation

MariaDB: Promote getting to 10k GitHub stars in server log and client prompt

The Pixel 11's "glow" feature is actually called HiLight—here's what it does

Google will reveal the Pixel 11 series later this month, but leaks and teasers so far have painted a picture of phones that have barely changed since last year. One notable exception seems to be the illuminated dot from some of the teasers. This has been rumored as "Pixel Glow," but a new leak all but confirms a different (and less interesting) name. Say hello to HiLight. A post on Bluesky by Win…

When AI Benchmarks Plateau: A Systematic Study of Benchmark Saturation

Apple Launches Legal Challenge Against UK Demand To Access Encrypted User Data

An anonymous reader quotes a report from The Guardian: Apple has launched a new legal challenge against a UK government demand to access its customers' highly encrypted data, a year after the Home Office agreed to abandon its previous request. The US tech company launched the legal complaint last month at the Investigatory Powers Tribunal (IPT), an independent court that has the power to investiga…

Tom DeLay helped create TV ownership cap—he says Trump FCC has no authority to repeal it

Tom DeLay, the Texas Republican who was House majority leader from 2003 to 2005, said the Federal Communications Commission has no legal authority to repeal the National Television Ownership Rule. Despite DeLay's warning, the Trump FCC appears ready to eliminate the rule at its meeting this week. DeLay wrote an op-ed describing how he helped write the law that prohibited any single broadcast stat…

Perspec 1.0

Feds get 3 days to patch N-able God mode flaw under active exploit

The US Cybersecurity and Infrastructure Security Agency (CISA) has added an exploited N-able vulnerability to its Known Exploited Vulnerabilities (KEV) catalog, giving federal agencies three days to patch a flaw that could let attackers reach managed service provider (MSP) customers. Attackers exploiting the flaw can gain "full administrative access to an N-central console," Tracked as CVE-2026-1…

Apple says more ex-employees may have taken confidential data to OpenAI

Show HN: Simple algorithm and color space to generate diverse skin tones

Most tech revolutions made work worse for employees

Trump admin "aware" of deaths in explosive diarrhea outbreak, delays reporting

Two people have died amid the ongoing record-breaking outbreak of explosive diarrhea from the foodborne parasite Cyclospora, Michigan health officials announced Monday. Cyclosporiasis fatalities are extremely rare, and despite the massive size of the outbreak, some experts were still surprised by the deaths. The Michigan Department of Health and Human Services on Monday said that medical records…

Online ad giant Adform was hacked, proving once again why ad blockers are needed

NVMe polishes its specs, brings virtualization to locally attached SSDs

The NVM Express (NVMe) specifications have been updated, gaining enhancements such as support for post-quantum cryptography, and SSD virtualization and live migration to better support virtualized environments. Announced by the NVM Express consortium, all 11 of the suite of NVMe specs have been updated with new features and engineering change notices. These represent the next step in the evolutio…

Sandisk and SK Hynix Publish First Open High Bandwidth Flash Standard

BrianFagioli writes: Sandisk and SK hynix have published the first open technical specification for High Bandwidth Flash (HBF) through the Open Compute Project. HBF is designed to create a new memory tier between High Bandwidth Memory and traditional SSD storage, giving AI inference systems more near compute capacity without relying entirely on expensive HBM. The specification supports capacities…

Another npm worm

StepSecurity is reporting the emergence of a new worm affecting npm packages. The design of the worm is nothing new, but the rapidity with which it is exploiting captured npm packager credentials is noteworthy. TL;DR: A self-propagating worm, which we are calling ChainDrop, is spreading rapidly through the npm ecosystem. So far 435 packages and more than 1,550 compromised versions have been flagg…

2027 Chevrolet Corvette Grand Sport X proves code is as important as hardware

Chevrolet provided flights from Albany, New York, to Denver and accommodation so Ars could drive the Grand Sport X. Ars does not accept paid editorial content. When Chevrolet introduced a hybrid system to the Corvette lineup in 2023, creating the E-Ray, many fans were confused. If it was meant to be a performance option, where did it fit alongside the ZR1 and ZR1X? Was this a concession to emissi…

AI helps Microsoft bug hunters chase a record $20M payday

Microsoft announced this week that between July 1, 2025, and June 30, 2026, the company had paid more than $20 million in bug bounties to 562 researchers. The total was a Redmond record, as was the number of those submitting bug reports – despite having to navigate a sometimes frustrating submissions process. For comparison, the previous year's program, which itself set a new company record, paid…

Technology's Power in the Hands of the People

In the scorching heat of every Las Vegas summer, EFF joins thousands of hackers, makers, policy analysts, and activists for the world's largest computer security gathering. If you're there during this summer security week, be sure to say hello to us at BSides Las Vegas, Black Hat Briefings, and DEF CON 34. While tech companies align with governments to target the people, our community is harnessin…

AMD openSIL & Coreboot Pull Requests For Phoenix AM5 Support

Last week the 3mdeb firmware consulting firm released the first open-source firmware for a modern AMD Ryzen AM5 platform with their work to port AMD openSIL and Coreboot in their downstream Dasharo flavor to an MSI desktop ATX motherboard. Now that it's working out well, 3mdeb is working to upstream their AM5 platform support and Phoenix SoC support into upstream AMD openSIL as well as Coreboot...…

NVIDIA Becomes A Premier Sponsor Of LVFS / Fwupd

Now this is a pleasant and very unexpected surprise... NVIDIA has become the latest premier sponsor of the Linux Vendor Firmware Service (LVFS)...…

OpenAI says Apple's trade secrets lawsuit is "aggressive and oddly personal"

OpenAI has accused Apple of waging a “careless, aggressive and oddly personal lawsuit” in a blog post rebutting the iPhone maker’s claims that the AI start-up stole top-secret information. “We do not have, nor want, any of their trade secrets,” the ChatGPT maker wrote on Monday evening, accusing Apple of “making vague accusations” and “trying to change their narrative.” The post marks the latest…

[$] The beginning of a process-builder API

The recent discussion on "spawn templates" raised questions about whether it was time to provide an alternative to the classic Unix fork()/exec() pattern for process creation. One idea that was raised there was to shift the template pattern into an interface that could be used to efficiently assemble new processes from bare cloth, without duplicating the parent process. Preferably, that interface…

Cloud giants pour nearly $600B into capex as AI demand surges

AI has turbocharged an already expanding cloud services market as organizations pour billions into online platforms offering the compute needed to train and run models, swelling the coffers of the established giants. Their latest results show revenue surging alongside capital spending as Amazon, Google, and Microsoft race to add capacity – at least until the AI bubble eventually bursts, of course…

Security updates for Tuesday

Security updates have been issued by AlmaLinux (frr, ldns, mingw-glib2, and perl-Archive-Tar), Debian (ruby2.7), Fedora (borgbackup, nebula, python-nh3, rust-ammonia, and seamonkey), Mageia (librabbitmq, libvncserver, packages, perl, perl-GD, perl-Unicode-LineBreak, squid, and unbound), Oracle (compat-libtiff3, frr, gstreamer1-plugins-good, javapackages-tools:201801, libreswan, nodejs:22, nodejs:2…

Linux Foundation Announces Tokenomics Foundation For "Economics & ROI Of AI Value"

Last month the Linux Foundation launched the x402 Foundation to standardize Internet-native payments for AI agents as their latest AI play. That followed other "AI" initiatives from dealing with AI exploits to AI asset and data exchange. Today they have another AI foray being announced with the creation of the Tokenomics Foundation...…

Tennessee congressional hopeful accused of shooting license plate cameras

An independent congressional candidate in Tennessee faces four felony vandalism charges after allegedly shooting four automated license plate reader (ALPR) cameras between July 14 and 22. According to the Blount County Sheriff's Office (site geo-restricted), Adam Lee Heimerman, 37, is accused of targeting three cameras in Blount County and one in Maryville. Local news reports citing an affidavit…

Xbox goes down. You can't play games you own on disc

Everything I Know (1975)

CAF Bank reopens online service but warns of further outages

CAF Bank has told customers its online banking service is back after being shuttered for more than ten days following what it described as "attempted fraud." In an email update seen by The Reg, the bank warned that access could remain intermittent, and it might "need to limit the amount of traffic to the website" at certain times. It admitted: "There are likely to be periods where online banking…

Nobel Disease

Keyv and friends compromised in active Shai-Hulud supply chain attack

Russia-Linked 'Midnight Blizzard' Group Hijacks Hotel Wi-Fi With CaptiveCrunch

A Russia-linked group tracked as Midnight Blizzard has compromised hotel and conference Wi-Fi portals worldwide, redirecting guests to phishing pages and fake software updates that steal credentials, session tokens, and other sensitive data. Microsoft says the campaign, dubbed CaptiveCrunch, "targets traveling employees generally rather than a particular sector," reports iTNews. From the report: M…

Linux's Staging Area To Now Reject LLM-Generated Patches, Except For Real Security Fixes

While Linux's second-in-command Greg Kroah-Hartman does use AI / LLMs himself to success in the Linux kernel, given the "onslaught" of kernel patches produced by large language models and the intent on the Linux kernel's staging area being an area for newcomers to get involved, moving forward he's now rejecting AI/LLM-generated staging patches. But there is one exception and that is for genuinely…

Wild Linker 0.10 Released With GDB Index Support, Mitigation For Btrfs Performance

Wild 0.10 released overnight as this very fast linker for Linux that is written in the Rust programming language and focused on iterative development...…

DeepSeek V4 Flash on a Single AMD MI300X

Linux 7.3 To Fix MSI Claw M-Center Keys For Ryzen Z2 Extreme Powered Handheld

For those with a MSI Claw A8 BZ2EM handheld gaming system, the model powered by the latest AMD Ryzen Z2 Extreme SoC, an important addition is coming to the Linux 7.3 kernel so that the M-Center keys will be properly supported...…

UK mulls making employers ask before installing bossware

The UK government is considering forcing employers in Great Britain to consult workers before rolling out "bossware," opening the door to new rules covering everything from AI-powered productivity scoring to keystroke logging and biometric surveillance. The Department for Business and Trade wants to know whether the rules governing workplace surveillance still make sense as software increasingly…

Spain Offers $1.14 Billion To Get Thirty Meter Telescope Moved To Canary Islands

Longtime Slashdot reader schwit1 shares a report from Behind the Black: In a new bid to get the Thirty Meter Telescope (TMT) to move from Hawaii, which has blocked its construction for more than a decade, the Spanish government has put together a $1.14 billion package that would not only pay for construction on the Canary Islands, but would finance an additional half century of operations. Tech Ti…

NASA puts astronauts’ lives in the hands of Tesla’s flaky Cybertruck

Tesla has recalled its Cybertruck 11 times to fix issues such as exterior trim panels falling off and an accelerator pedal that can become stuck, but NASA has nonetheless decided the rust-prone vehicle is up to the job of rescuing astronauts if trouble strikes on the launchpad of a forthcoming crewed mission. Muskmobiles will get the job currently performed by the Mine Resistant Ambush Protected…

Harness engineering for self-improvement

Cloudflare has mostly ditched third party security tools, suggests not trying that at home

Cloudflare has used AI to automate processing of incoming reports to its bug bounty program for $58 a month using Anthropic’s Claude Sonnet model and chose it partly because using the AI company’s security-specific Mythos model would burn through around $200,000 a month to do the same job. The company’s chief security officer (CSO) Grant Bourzikas shared those numbers with The Register last week…

OpenAI's Astra Solved Decades-Old Math Problems For $2,000

An anonymous reader quotes a report from Forbes: The cost of producing new results on ten longstanding mathematical problems just fell to $2,000, according to OpenAI, which says its Astra model generated machine-checkable proofs for questions that had resisted human progress for decades. OpenAI published the work on August 1 and used it to give its next major model family a name: Astra. The result…

China claims global chip leadership thanks to new legal definition of 'integrated circuits'

China has changed its legal definition of semiconductors. The National Intellectual Property Administration yesterday issued an expert opinion on recent changes to the regulations governing intellectual property laws as applied to chips. That document, attributed to Guo He, from the School of Intellectual Property at the Renmin University of China, notes that laws in place around the world define…

FFmpeg 9.0 Released With More Vulkan Acceleration, Animated WebP & More AMD AMF

FFmpeg 9.0 is now available as the latest feature release for this widely used, open-source multimedia library...…

Improved GPU Reset Recovery For AMD Kaveri, Hawaii & Other GFX7 GPUs With Linux 7.3

In addition to the AMDGPU feature pull request to DRM-Next last week that landed DRM format modifiers for old AMD GPUs and a variety of other improvements, a secondary set of AMDGPU feature work followed that last week in preparation for the upcoming Linux 7.3 merge window...…

The Senate Should Reject KOSA's Privacy Risks

The Senate Commerce Committee is once again considering legislation that would dramatically expand age verification, and undermine privacy for everyone. Alongside the SCREEN Act, the CHATBOT Act, and the Youth AI Privacy Act, the Kids Online Safety Act (KOSA) would push companies to collect more information about their users while creating new incentives to restrict lawful speech. Take action Tell…

EFF Joins 18 Civil Rights Organizations Calling on Governor Hochul to Reject the Stealth Crawler Prohibition Act

EFF joined a group of 18 civil society organizations to send a letter encouraging New York Governor Kathy Hochul to Senate Bill 9934A, the New York Stealth Crawler Prohibition Act. The letter states: While framed as a measure to protect local journalism, this legislation harms free expression and establishes a dangerous precedent by effectively deanonymizing and criminalizing automated access to t…

There Will Come Soft Rains (1950) [pdf]

An AI-Supervised Remote Exam Went So Badly That 58,000 Students Must Retake It

An anonymous reader quotes a report from Ars Technica: Earlier this summer, nearly 160,000 applicants took the entrance exam for UNAM, Mexico's largest university. For the first time, they did it completely remotely, using a "lockdown" browser and AI-powered webcam proctoring software, over several weeks from late May through early June. It was a disaster. When exam results came in, they bore litt…

China turns up the heat with open model blitz as US model makers panic

The AI arms race reached a fever pitch on Monday after Chinese e-commerce and cloud provider Alibaba called into question America’s technological lead with the launch of Qwen 3.8-Max, a 2.4 trillion-parameter model that goes toe-to-toe with the best models from Anthropic and OpenAI. The new model comes just days after the launch of DeepSeek V4 Flash 0731, which, according to independent benchmark…

EFF Joins Call for FTC to Drop Its Disastrous AI Policy Proposal

The Federal Trade Commission (FTC) in July issued a proposed policy statement “concerning the suppression of accuracy in artificial intelligence systems.” We urge the FTC to withdraw this misguided proposal and instead focus on its core strengths and mission to protect consumers.  The new proposed policy builds on, and directly references, the Trump administration’s  “Preventing Woke AI in the Fed…

US company’s AI lets Ukraine’s cheap kamikaze drones track targets on their own

Ukrainian drone operators have destroyed many Russian armored vehicles on the ground and even military helicopters in midair using $400 Shrike drones with explosive payloads. Now thousands of such drones are getting upgraded with an AI system capable of autonomously tracking and homing in on moving targets. In mid-July, the Ukrainian military began receiving Shrike drones made by the Ukrainian co…

Schools Are Ditching Chromebooks For MacBooks By the Thousands

Apple says its lower-cost MacBook Neo is beginning to displace Windows laptops and Chromebooks in K-12 schools, with several districts purchasing thousands of units. According to the company's latest earnings call, nearly half of the large MacBook Neo purchases made by U.S. educational institutions last quarter reportedly replaced competing platforms. 9to5Mac reports: Apple's commentary highlighte…

Twenty years of Pandoc

John MacFarlane has published a lengthy retrospective to commemorate twenty years of the Pandoc document converter. On August 3, 2006, I uploaded the first version of pandoc to my website, releasing it under the free GPL license. Pandoc 0.1 consisted of about 3000 lines of Haskell code, with no dependencies aside from GHC's standard library. It could convert Markdown, reStructuredText, HTML, and L…

The Youth AI Privacy Act’s Privacy Paradox

The Senate Commerce Committee is poised to consider the Youth AI Privacy Act, a bill that would require AI companies to create kids-only privacy rules and implement so-called “safe design features,” which would—like three other bills under consideration this week—require more data collection and make it harder for people to access lawful speech online.  While the bill is narrower than some other p…

Microsoft Is Bringing Xbox 360 Games to PC

Microsoft reportedly plans to let developers bring Xbox 360 games to PC and next-generation Xbox devices, with a gradual rollout expected between 2027 and 2028. A separate disc-to-digital program would also give players transferable digital licenses tied to their physical Xbox discs, preserving the ability to resell or trade them. The Verge reports: With 360 games, developers can opt into making t…

Google dev kit spurs first-ever agent-on-agent violence

In what they call the first-ever real-world agent-to-agent exploitation method, Pillar Security researchers say they discovered an exploit in the repository behind Google's Agent Development Kit for Python that could allow attackers to compromise supply chains. In other words, now we know that one AI agent can be used to control and compromise another one that has more privileges. The security sn…

Research roundup: 6 cool science stories we almost missed

It’s a regrettable reality that there is never enough time to cover all the interesting scientific stories we come across. So every month, we highlight a handful of the best stories that nearly slipped through the cracks. July’s list includes outfitting cyborg cockroaches with a tiny diving suit for navigating flooded terrain; confirmation that a Medici duke died of malaria, not poisoning; the be…

Microsoft CEO Touts His Own DIY AI Project To Wall Street and His 20 Million Followers

theodp writes: During Microsoft's 2026Q4 earnings call, CEO Microsoft Satya Nadella took time to tout a dashboard he personally created using AI from a Morgan Stanley analyst's PDF research report, which suggested a rosy payback for the so-called MAG7's ('Magnificent 7' companies) massive capital expenditures on AI (to which Nadella later added a "not financial advice" disclaimer). "It would be fu…

Lego deploys Hubble Space Telescope as detailed desktop model

For 35 years, the Hubble Space Telescope has looked out into the Universe. Now, Lego is inviting builders to look inward with its latest model of the orbiting observatory. The new Lego Icons Hubble Space Telescope (set no. 11382) was released on August 1 for $140 at the toy company's stores and its online shop. The 1,252-piece kit builds a 15-inch-long (38-cm) desktop model that is about twice as…

An AI-supervised remote exam went so badly that 58,000 students must retake it

Earlier this summer, nearly 160,000 applicants took the entrance exam for UNAM, Mexico's largest university. For the first time, they did it completely remotely, using a "lockdown" browser and AI-powered webcam proctoring software, over several weeks from late May through early June. It was a disaster. When exam results came in, they bore little resemblance to past results, especially at the top.…

Apple's iCloud File Sharing Left Ex-Employees With Access to Secret Documents

Apple's practice of mixing employees' work files with personal iCloud accounts reportedly left some former staff with continued access to confidential documents, messages, and even new updates after leaving the company. "The former employees said many Apple files they had been shared on over their careers at the company -- including planning documents for product launch events -- continued to sync…

Linux 7.3 Looks Like It Will Upstream FailFS

Merged back in Linux 7.3 was NULLFS as a "completely catatonic minimal pseudo filesystem". Now expected for Linux 7.3 is its sibling: FailFS...…

C-Kermit 11 released

For those of us with a long memory: John Goerzen has announced the release of C-Kermit 11, the first release of this file-transfer utility in 15 years. As Debian maintainer of Kermit, I noticed some areas where it wasn't matching modern expectations. One area was, not surprising for a project of its age, security. Another area was that its character set or line-ending conversions are usually not d…

AI slop pollutes the CVE pipeline with fake vulns

Now AI is making fake vulnerabilities and polluting the ecosystem. A batch of critical- and high-rated SQLite CVEs that appeared in the NVD with CISA-supplied enrichment last week turned out to be technically bogus, according to security researchers, and their path into widely used databases exposes weaknesses in the CVE pipeline. Software supply chain security outfit JFrog reported last week tha…

2026 Volkswagen Jetta Sport: The cheap car isn't completely extinct yet

As so many career counselors and lifestyle coaches have explained, first impressions matter. A bad one can set the tone for an entire relationship, whether that's with a person, a novel, a restaurant, or a car. And the 2026 Volkswagen Jetta Sport and I did not get off to the best of starts. Picture the scene: You've been at home for a total of one night out of the previous eight, and you've just…

[$] Buffer sizes for FUSE io_uring

The Filesystem in Userspace (FUSE) subsystem provides a way to service filesystem requests from a user-space server, which moves the format-handling code out of the kernel. The FUSE server can use the io_uring facility for better performance, but Bernd Schubert is concerned that memory is being wasted because the current implementation has a single, large buffer size that is excessive for small I/…

Russian spies turn public Wi-Fi into malware delivery systems

Conference-goers may want to think twice about connecting to public Wi-Fi after Microsoft disclosed that Russian foreign intelligence operatives (SVR) are compromising captive portal networks to deliver infostealers, keyloggers, and other malware. With the help of ReliaQuest's earlier work, Redmond fingered Storm-2945, a subdivision of the SVR's Midnight Blizzard (aka Nobellium), in an attack cam…

SQLite Critical CVEs or LLM Slop? (JFrog blog)

The JFrog blog examines some reported vulnerabilities in SQLite, some of which made their way into high-profile vulnerability databases, that turned out to be entirely fabricated by LLMs. These LLM slop CVEs can cause organizations to waste time investigating and patching vulnerabilities that do not actually exist, as well as polluting vulnerability databases. In environments where Critical vulner…

EFF at BSidesLV, Black Hat, and DEF CON 👨‍💻

It's time. Time for tinkerers, security researchers, hackers, and fellow nerds to gather together in signature black hoodies and utilikilts to beat the heat in Las Vegas for the summer security conferences: BSidesLV, Black Hat USA, and DEF CON. EFF's lawyers, activists, and technologists are excited, as always, to support this community of folks that push computer security forward. If you're atten…

Benchmarking Six Linux Distributions On The Framework Laptop 13 Pro

With the new Framework Laptop 13 Pro now shipping powered by Intel Core Ultra Series 3 (Panther Lake) and a brand new hardware design, I have spent the past week testing out various Linux distributions on this very nice high-end laptop. All of the modern Linux distributions tested have been playing nicely with this new Panther Lake laptop. Of course, beyond testing for compatibility I also took th…

SpaceX is set to acquire 130,000 acres of marshland in southern Louisiana

SpaceX and the state of Louisiana are close to finalizing a deal for the launch company to acquire about 130,000 acres along the northern coast of the Gulf of Mexico. There have been persistent rumors about such an agreement for months, but now The Times-Picayune | The New Orleans Advocate reports that Louisiana Gov. Jeff Landry is expected to announce the agreement later this month. The deal wou…

MediaTek lines up $5B war chest for AI datacenter push

Taiwanese chipmaker MediaTek is lining up $5 billion in financing to expand into AI datacenter silicon, targeting a slice of a market it expects to be worth up to $80 billion next year. The fabless chip producer is perhaps best known for its Arm-based smartphone and Chromebook chipsets, plus wireless silicon for Wi-Fi products. But the firm is the latest to see a "compelling growth opportunity" i…

Police National Legal Database confirms data theft after dark web leak

The Police National Legal Database (PNLD) is the latest UK public sector outfit to admit that cybercriminals made off with its data, including the names and work email addresses of police officers, justice staff, government partners, and customers. The legal lookup service relied upon by police forces and criminal justice agencies across the UK said it discovered the "data security incident" on J…

NASA boss balks at billion-dollar estimate for recycled Moon rover

NASA Administrator Jared Isaacman has stated "we simply will not fly it" if claims about the costs of the repurposed Mars rover engineering model prove anywhere near accurate. Isaacman was responding to the Planetary Society's chief of space policy, Casey Dreier, who had run the numbers on his plan to send a robot to the Moon, built from parts of engineering models of the successful Mars rovers P…

Four stable kernels for Monday

Greg Kroah-Hartman has announced the release of the 7.1.6, 6.18.42, 6.12.101, and 6.6.148 stable kernels. Each contains hundreds of patches—the 7.1.6 kernel has more than 700—with fixes throughout the tree. Users are advised to upgrade.…

The Red Strings Club

Trump wants the power to stop the public from suing polluters

Reducing rampant pollution across the United States was so important that when Congress passed many environmental protection laws, including the Clean Air Act, Clean Water Act, and Safe Drinking Water Act, it didn’t want to leave enforcement only to the executive branch. Congress specifically wrote into those laws ways for citizens to enforce them through the courts when the government does not a…

NetBSD 11.0 released

The release of NetBSD 11.0, the 19th major version of the operating system, has been announced. There are many changes and enhancements since the 10.1 release, including a new port to RISC-V, better support for Linux system calls in compat_linux(), as well as improvements to the NPF firewall. As you are probably aware, the number of security issues found or suspected everywhere has massively incre…

Water system cyberattacks spread to Georgia, Michigan amid US-Iran conflict

Georgia and Michigan are the latest US states to report cyberattacks on water systems, as the FBI investigates incidents across at least seven states. Iran-backed hackers are the leading suspects, although the bureau has not publicly attributed the campaign. Officials in both states told journalists over the weekend that water facilities had detected activity consistent with the attacks on more t…

zlib-rs 0.6.7 Released With LoongArch LSX Optimizations, Use-After-Free Fix

zlib-rs 0.6.7 is out today as the newest version of this "safer zlib" implementation making use of the Rust programming language and aiming to deliver performance on-par with zlib-ng...…

Security updates for Monday

Security updates have been issued by AlmaLinux (.NET 10.0, .NET 8.0, .NET 9.0, fence-agents, kernel, kernel-rt, openssh, osbuild-composer, perl-Archive-Tar, perl-DBI, perl:5.32, pipewire, python-pillow, qemu-kvm, unbound, and vim), Debian (chromium, incus, kernel, kissfft, libgd2, libmodbus, libssh, node-tar, php8.4, poppler, python-authlib, sslh, and starlette), Fedora (borgbackup, coturn, curl,…

GNOME Boxes Preparing To Deliver Much Improved Virtualization Experience

GNOME Boxes as a front-end to libvirt and QEMU is preparing to deliver a much improved virtualization experience for those wanting to enjoy desktop VMs from the GNOME desktop...…

NVIDIA 610.57.04 Linux Driver Delivers Many Fixes

NVIDIA is kicking off the new month by releasing an updated R610 Linux driver build with quite a number of bug fixes...…

Google Earth's AI makeover survives for just one planetary rotation

Google performed a remarkably brisk reverse ferret last week, launching AI image generation in Google Earth and yanking it the next day after certain sections of the internet did the inevitable. This is how it began: "Today we're bringing AI image generation with Nano Banana to Google Earth, letting you virtually reimagine anywhere in the real world." This is how it's going, less than 48 hours la…

Linux 7.3 Expected To Drop The FreeVxFS File-System Driver

It looks like Linux 7.3 will end up dropping FreeVxFS as the read-only Linux kernel driver for the Veritas VxFS file-ssytem used formerly by HP-UX and SCO UnixWare...…

The AI bubble is already popping; we just don't know it yet

KETTLE Big tech's Q2 earnings have been pouring in over the last two weeks, and it looks like stock market investors are taking a pin to the AI bubble. You can listen to the latest episode of The Kettle right here on this page, as well as on Spotify, Apple Music, or YouTube, where you can subscribe to get notified about the latest episode. Between eye-watering capex expenses, shrinking free cash…

UK government investment arm cops to 40-hour leak of officials' contact details

The UK government's corporate finance adviser has admitted that an employee left an internal file containing the names and work email addresses of dozens of officials publicly accessible for around 40 hours. The breach, first reported by The Guardian, was disclosed in UK Government Investments' (UKGI) annual report, which says it occurred during the 2025-26 financial year after a member of staff…

How headlights got brighter, whiter, and more blinding after dark

Every so often, I’ll be piloting some sensor-laden, software-defined press car down a dark stretch of highway when an oncoming driver’s high beams arrive like a targeted retinal strike, an involuntary reminder that modern automotive lighting has entered its own lumen arms race. Anyone who has driven at night in the last few years knows what I'm talking about: A modern crossover crests a hill in t…

KGamma2 Makes For Easy Gamma Adjustments On KDE Plasma With Wayland

KDE developer David Edmundson announced today his KGamma2 tool in aiming to address a pain point for KDE Plasma desktop users on Wayland...…

Sci-fi authors Scalzi and Stross decry AI's dystopian impact on their craft

Two prominent science fiction authors have decried the impact of AI on their craft. "I do not want or need a large language model to write my fiction for me. I write fiction compulsively – before I was published I wrote for many years as a hobbyist – so why on earth would I pay someone else to take my fun away?" wrote Charles Stross in a Saturday post. Stross graciously mentioned The Register in…

GNOME Mutter 51 Beta Released With Wayland Background Blur, Improved Frame Scheduling

Released overnight on Sunday were the beta versions of Mutter 51 and GNOME Shell 51. This follows GNOME 51 embarking on itsAPI/ABI freeze, feature freeze, and UI freeze a day earlier...…

KDE Linux Making For Easier First-Run Experience Of Java & DOS Apps

With July all wrapped up, the monthly status report is now published for KDE Linux as the in-house Linux distribution featuring all of the latest KDE wares and other open-source innovations...…

Linux 7.3 Adding Support For MCTP-Over-USB v1.1

Within the Linux networking subsystem's "net-next" Git branch there is now queued up support for MCTP-over-USB v1.1. This is the newest version of the standard for sending Management Component Transport Protocol (MCTP) packets over USB for tasks like crash dumps, logging, and firmware updates...…

Linux 7.3 To Support Realtek RTL8261C & RTL8261D

Queued into net-next ahead of the Linux 7.3 merge window is adding support for the Realtek RTL8261C and RTL8261D 10 Gigabit PHYs that launched last year...…

As Larry Ellison bets the farm, Oracle says it loves AI-written code, just not in OpenJDK

Oracle has told contributors to OpenJDK – the open source Java project it stewards – not to submit code or other material generated by AI. In a post tagged "legal," Oracle said it was drafting a full policy on generative AI but had set interim ground rules. It cited risks involving review workloads, safety, security, and intellectual property. "Contributions in the OpenJDK Community must not incl…

Claude Code is revolutionizing digital archaeology. Enterprise better dig it

OPINION The UK's National Museum of Computing at Bletchley Park (TNMoC) is a natural center of digital archaeology. It has restored, recreated, and documented landmark machines, from the wartime Colossus computer through to British mainframes of the '60s and '70s. Its collection from the dawn of the microprocessor age also attracts those who live to investigate such things. LLMs, still in their m…

AI is 'both the weapon and the target' in latest wave of cyberattacks

AI is becoming both an attack tool and a high-value target, with attacks by AI-enabled adversaries rising 89 percent in 2025, according to CrowdStrike. The security firm's annual Threat Hunting Report details criminal gangs and nation states using AI throughout the attack chain. Attackers are also targeting organizations' AI infrastructure and poisoning popular software packages to compromise the…

IT boss left root session open for bring-your-kid-to-work day

WHO, ME? Comedian W.C. Fields is credited with the aphorism "Never work with children or animals," which The Register mentions because half of it has some relevance to this week's edition of "Who, Me?" – the reader-contributed column chronicling the ups and downs of working in tech. This week, meet a reader we'll Regomize as "Stockley" who shared a horror story that took place in the 1990s. At th…

Microsoft says 8 GB of RAM should be enough for anyone running Windows 11

Microsoft has added four new items to the to-do list it set itself to improve the quality of Windows 11. Redmond's list landed in March 2026 in response to users' anger at Windows 11 becoming increasingly flaky and needy. Pavan Davuluri, Microsoft's executive VP for Windows and Devices, promised "improved memory efficiency, lowering the baseline memory footprint for Windows, freeing up more capac…

Meta straps on a ‘Kick Me’ sign by mistakenly taking down video by India’s prime minister

ASIA IN BRIEF Meta last week briefly took down an unremarkable video posted by India’s prime minister Narendra Modi, earning itself days of criticism and regulatory trouble. The video featured Modi announcing a new task force that will reform the exams required to secure places in many Indian universities. Those exams have become a major factor in the sudden development of a major youth protest m…

AerynOS Issues First Development Update & New ISOs In Three Months

It's been just over three months since the last AerynOS development update and new ISO spin but fortunately that's been succeeded today by a new development update and ISO images. AerynOS development remains strong and ongoing with many changes to be found in this latest from-scratch Linux distribution release...…

Kernel prepatch 7.2-rc6

The 7.2-rc6 kernel prepatch is out for testing. Quoth Linus: "Hmm. This rc is huge. Even by the "new normal" standards this is a big rc, and I think it's the biggest rc6 we've had in years at least by commit count." There were 537 non-merge commits applied between 7.2-rc5 and 7.2-rc6.…

Linux 7.2-rc6 Released: "This RC Is Huge"

Like clockwork, the Linux 7.2-rc6 kernel is now available for testing in working toward the stable Linux 7.2 kernel in hopefully two week's time...…

Linux 7.3 To Begin Laying The Groundwork For Intel Starfire

Intel recently announced Starfire as their new Panther Lake derived, space-grade SoC designed for extreme environments... like survivability in space. With the Linux 7.3, we are going to begin seeing the first Intel Starfire specific patches land in the kernel...…

Linux 7.3 To Support The Qualcomm Adreno 704 & Adreno 722 GPUs

Sent out on Saturday were the Qualcomm MSM DRM kernel graphics/display driver updates to land for the upcoming Linux 7.3 merge window...…

Ubuntu Touch Making Progress Toward Ubuntu 26.04, Vulkan & App Updates

Following last week's release of Ubuntu Touch 24.04-2.0 for this community-maintained, mobile flavor of Ubuntu Linux, more details are now available on their upcoming development efforts and eventual transition to an Ubuntu 26.04 base...…

Linux 7.2-rc6 Fixes Some AMD Zen 5 CPUs Being Mistakenly Identified As Zen 6

Today's batch of x86 fixes for the kernel ahead of the Linux 7.2-rc6 release later in the day addresses some AMD Zen 5 processors mistakenly being classified as Zen 6...…

Box64 v0.4.4 Released With New Box64-Configurator App

Box64 0.4.4 released today as the newest version of this open-source user-space Linux x86_64 emulator for running binaries on 64-bit ARM, RISC-V, and LoongArch systems...…

Meet the 'internet radical' who helped Microsoft get email and AT&T get online

Tom Evslin drove the WorldNet project at AT&T and helped develop what became Microsoft Exchange and Outlook. He was at Microsoft when the company was still working out what to do about this newfangled internet thing. Evslin describes himself as one of Microsoft's "internet radicals" in the early 1990s, when the company was developing Exchange Server to fend off the threat from Lotus Notes. "Bill…

Steam On Linux Use Back Above 4% In July

Valve just published the Steam Survey results for July 2026 and point to a small uptick in Linux gaming use...…

Here's how engineers plan to save the satellite sent to save NASA's Swift mission

One week ago, more than 200 miles above the Earth, a refrigerator-size satellite making its way toward an attempted rescue of NASA's $500 million Swift gamma-ray observatory suddenly spun out of control. It didn't look good. The spacecraft, named Link, was rotating on multiple axes, rendering it unable to maintain a reliable communications link with the ground and complicating efforts to arrest t…

Dates That Don't Exist (2015)

NetBSD 11.0 Released With RISC-V Support, Enhanced Linux System Call Compatibility

NetBSD 11.0 officially shipped today as the nineteenth major release of this popular BSD operating system...…

Review: Yes, we're still arguing about Nolan's The Odyssey

Christopher Nolan's The Odyssey has been a lightning rod for controversy ever since the first casting and design reveals, igniting afresh with each new trailer. The film has garnered plenty of well-deserved accolades (and earnings) since its release, and yet somehow the debates rage on between classicists and the general public alike—all this over an adaptation of an epic poem that's been around…

MPEG-4 Patent Expiration, RADV On Windows, Open-Source AI & Other July Highlights

Last month on Phoronix there were 257 original Linux/open-source related news articles and another 20 featured Linux hardware reviews / multi-page benchmark articles. Following the recent 22nd birthday of Phoronix.com, this puts the overall tally at nearly 51k original news articles and more than 5,600 Linux hardware reviews. Here is a look back at what readers found most exciting during the cours…

As Reddit stock falls, CEO questions value of Google's AI Overviews

Like any company, Reddit reports quarterly earnings, and its CEO, Steve Huffman, addresses investors during those reports. It's not always about just sharing numbers, though: This quarter, Huffman took the opportunity to voice concerns and criticisms about Google's AI Overviews feature, which automatically summarizes search results on most user queries. First, there was a letter to investors, whe…

Prominent Arch Linux Developer Resigns After 10 Year Run

Arch Linux developer, security team member, AUR maintainer, and package maintainer Morten Linderud "Foxboron" announced today he is resigning from the project...…

After noise complaints, judge orders Waymo to stop overnight charging in Santa Monica

A local judge has ruled that Waymo can no longer use its side-by-side charging facilities overnight in Santa Monica, California, as these may pose a “public nuisance.” Los Angeles Superior Court Judge Bradley S. Phillips granted this week the City of Santa Monica’s motion for a preliminary injunction in the city’s ongoing public nuisance lawsuit against the autonomous vehicle giant. City official…

Linux 7.2-rc6 Working Around Several Buggy Western Digital SATA Drives

Merged ahead of tomorrow's Linux 7.2-rc6 kernel test release are several ATA fixes that include a number of device-specific workarounds for some Western Digital SATA drives that have been failing to work on recent versions of the Linux kernel...…

Defcon's new badge is a security key you can see inside

It’s been a longtime feature of the annual Defcon hacker conference that attendees come away not only with knowledge of new software vulnerabilities and hacking techniques but also an elaborately designed conference badge—often electronic masterpieces embedded with intricate puzzles, complex crypto challenges, hidden Easter eggs, and even the mechanical gear trains of a watch. Each year’s badge c…

Unexpected item in the bagging area as Windows Activation error pops up at check-in

BORK!BORK!BORK! Weary travelers making their way through airports have enough to contend with these days without some Microsoft borkage popping up over departure information. Spotted by an eagle-eyed Register reader identifying themselves as Ethel Grapefruit (Mrs), one of the information boards at Heathrow Terminal 5's check-in area has decided that whatever is running behind the scenes does not…

A deep dive into Nvidia's Vera CPU and the Olympus cores that power it

DEEP DIVE For the first time, Nvidia has directly challenged Intel and AMD's CPU dominance. With the launch of Vera, the AI arms dealer aims to flog its standalone CPUs to as many hyperscalers and other cloud providers as it can. Alibaba, ByteDance, Meta, Oracle, CoreWeave, Lambda, Nebius, and NScale have already signed up to deploy the chips in their respective clouds. The follow-on to Nvidia's…

Enterprise cloud infrastructure uptake shows no sign of slowing

Cloud infrastructure services grew at their fastest for eight years during the second quarter of 2026, thanks to the AI craze and continued demand for flexible and scalable IT infrastructure. According to the latest figures from Synergy Research, enterprise spending on cloud infrastructure passed $143 billion in Q2, a year-on-year growth rate of 43 percent. This followed 11 successive quarters of…

Don't stop early: Case-folding source code at memory speed

Amending AB 1709 Doesn’t Fix It: California’s Social Media Ban Still Threatens Free Speech and Privacy

California lawmakers have amended A.B. 1709, but the core problem remains: the bill is still a ban on social media access for youth under 16, and it still threatens the privacy and First Amendment rights of all Californians. Proponents of the bill may argue that the recent amendments represent a compromise, but a close look at the text shows no major changes. As the bill moves forward in the Senat…

The SCREEN Act Threatens Privacy Far Beyond Adult Websites

The Senate Commerce Committee is set to consider S. 737, the SCREEN Act, a sweeping age-verification bill that would require online services to verify users’ ages before they can access any sexually explicit content. If this bill passes, it will force millions of adult internet users to give up their anonymity, privacy, and security before they access lawful speech.   Take action protect your righ…

Dev who gave HashiCorp its name returns with a faster terminal multiplexer

HashiCorp cofounder Mitchell Hashimoto has launched a new startup to build a server-side terminal multiplexer that allows programmers to switch between multiple persistent work sessions. Superlogical promises its terminal multiplexer will be faster and keep better track of user jobs. And it could be instrumental to building durable agentic layers into future systems. The problem with traditional…

The CHATBOT Act Forces One Parenting Model On Every Family

Artificial intelligence is rapidly changing education, and the way people search for information. Parents, teenagers, teachers, and schools are struggling with tough questions about when AI should, and should not, be used. It makes sense for Congress to hold hearings and examine how AI should be used by minors. But the recently introduced CHATBOT Act answers those questions with a one-size-fits-al…

Servo 0.4.0 released

The Servo web-browser engine project has published an update about all of the changes that landed in June 2026, along with version 0.4.0 of the Servo Tech Demo. This release includes a record 558 commits, better layout correctness for web sites, improved WebGPU support, enhancements for users who are using the servoshell test browser, and many performance and stability fixes.…

The most famous brand in physical security got pwned by ShinyHunters

A leading name in home and business physical security, Brinks Home, recently said it identified unauthorized access to a portion of its IT systems, an intrusion ShinyHunters claims it carried out to steal millions of records from the security provider's Salesforce instance. Brinks Home hasn’t named the intruder or identified the affected system, but said the responsible party has threatened to le…

US bank places trust in ransomware crew that promised to delete its data

Would you trust a ransomware extortionist to delete the data they stole? One bank certainly wants you to. Well over a month into a ransomware cleanup job, River Financial Corporation tells regulators that it “took steps to attempt to suppress the affected data, including obtaining representations from the threat actor that it deleted the data in its possession.” For context, placing this kind of…

Anthropic and OpenAI are competing to see whose agents can go rogue harder

One company's inventive campaign for an unreleased product has become a contest between Anthropic and OpenAI to see which can shout the loudest about its own failures. Readers who tuned in earlier today saw the latest episode in the drama – or sitcom – as Anthropic tried to outdo OpenAI's appropriation of the Mythos marketing playbook and made itself the punchline. Since first teasing Mythos in A…

Update Teams mobile app by October or lose your calendar

Teams mobile users now have even less time to update the app before older versions lose calendar access. Microsoft originally set a late-October deadline in its message, but we're guessing someone familiar with the impending demise of Exchange Web Services (EWS) had a quiet word. The date has been brought forward to the beginning of October, leaving users until the end of September to update the…

EFF Guide to Recording Law Enforcement

This post is available as a printable one page handout in English and Spanish. Recordings of law enforcement, whether by bystanders or by those directly encountering officers, can be powerful tools of government accountability and can support movements for social change. But recording officers can come with risks. Below are important legal and practical considerations related to recording the poli…

Charities remain locked out of CAF Bank online accounts

A week after suspending online banking, CAF Bank still has no timetable for restoring access to its 14,000 UK charity customers. The bank updated customers on Thursday about the outage, which has disrupted payments to staff and suppliers. Little had changed. In a message seen by The Register, CAF Bank said it was not yet able to restore the service safely. As it had earlier in the week, the bank…

[$] The future of libraries in BPF

Song Liu believes that the way that programmers assemble complex BPF programs will be changing rapidly in the future. At a session of the 2026 Linux Storage, Filesystem, Memory-Management, and BPF Summit, he shared his thoughts on what that change could look like, though he did not have any concrete proposals for what, if anything, the BPF maintainers should do. He anticipates an ecosystem of Rus…

Arch Linux disables AUR package adoption

The Arch Linux DevOps team has announced that adoption of orphaned packages in the Arch User Repository (AUR) has been disabled due to "the current influx of malicious package adoptions and follow-up commits made via the AUR". Michael Taggart has posted a brief analysis of the malware being added to a long list of packages in this round of attacks. The payload appears to be an remote-access trojan…

NASA's Swift rescue slips to late August as LINK battles its spin

Katalyst Space has confirmed that problems with its LINK spacecraft have delayed its attempt to rescue NASA's Swift observatory, with rendezvous now targeted for the end of August. Katalyst disclosed the delay in an update on the spinning spacecraft. Engineers used a thruster to cut LINK's rotation rate from 9 degrees per second to approximately 4 degrees per second, with further burns planned. K…

Three becomes one as Vodafone buys out merger partner

Vodafone has paid £4.3 billion ($5.78 billion) for the remaining 49 percent of VodafoneThree, taking full ownership of the UK's largest mobile operator. The telecoms giant announced that it planned to buy the stake held by Three's former parent, CK Hutchison Group Telecom Holdings, in May. The acquisition comes just over a year after Vodafone UK and Three UK completed their merger following condi…

Scotland's university procurement center confirms cybercrooks broke in

Advanced Procurement for Universities and Colleges (APUC) says attackers gained unauthorized access to historical data in a cyberattack earlier this month. The Scottish education procurement body said it immediately contained the mid-July intrusion and was investigating claims that some of the data had been stolen. "We recently discovered suspicious activity on our IT systems involving unauthoriz…

Tech buyers are baking in sovereignty from day one, says Forrester

Geopolitical tensions, regulatory pressure, and growing awareness of risk are prompting organizations to build sovereignty requirements into new technology projects from day one, according to Forrester. The research firm says organizations worldwide are specifying data residency and sovereign AI architecture requirements at the planning stage. European firms face greater pressure than their US pe…

UK wants datacenters to pay a fee for grid connection requests

Ofgem is seeking feedback on proposals to levy a fee on datacenter development projects at the time they apply for a grid connection. The move aims to discourage companies from seeking approval for speculative applications that clog up the pipeline and cause connection delays, without ever resulting in finished datacenters. The UK regulator for electricity and gas says connection applications for…

Airport sign fails to boot, officers already on the scene

BORK!BORK!BORK! The sight of the police can make even the clearest conscience twitch. Perhaps the authorities have finally come to ask about that music track you copied 30 years ago. We're not saying the presence of the law sent this digital signage into a tizz, but you never know. Spotted by an eagle-eyed Register reader at a Phoenix airport car rental building, today's borked signage looks like…

Techie lured out of retirement to support software only he remembered

ON CALL Happy System Administrator Appreciation Day, dear reader! And happy Friday, too, as it heralds both the end of the working week and the day on which The Reg delivers another edition of On Call, the reader-contributed column in which we share your stories of support jobs that twisted, tanked, or turned out terrifically. This week, meet a reader we'll Regomize as "Roger" who told us he spen…

Anthropic’s Claude escaped test sandbox to attack three organizations

Anthropic has admitted that its Claude models escaped sandboxes to access the open internet and attack three organizations – but has also advanced decent excuses for the incidents. The AI upstart discovered the attacks after checking if security tests of its models had ever produced results similar to the attack on Hugging Face made possible by OpenAI models escaping onto the internet. “In partic…

Amazon's Q2 was great, but the earnings release is packed with baloney

Amazon reported its earnings today, and because I am professionally depressed I read the thing in full [PDF]. "How long can I go before the red haze of rage sets in" is a fun game, and today I made it all the way to the bottom of the second page when I encountered a bullet point touting how AWS "made its spec-drive [sic] coding agent, Kiro, available on iOS." Yes, I was in the room when they anno…

LinkedIn realizes its users have been bathing in AI slop, offers a shower

LinkedIn has been drenching its users in AI-powered slop posts, going so far as to encourage writers to trade their own voices for a bot's by hitting the "enhance your post" button when they want to share thoughts. Enough is enough. On Thursday, the site’s Chief Product Officer has announced several changes designed to rehab the platform’s reputation. CPO Hari Srinivasan took to the Microsoft-own…

Read This Before You Buy That TV Streaming Stick

Security experts have been sounding the alarm for years about the risks of using generic TV boxes that promise unlimited content streaming for a one-time fee, warning that they secretly rent the user’s Internet connection out to strangers. But a groundbreaking new analysis finds these devices also routinely spoof themselves as mobile phones clicking ads on AI-generated websites as part of a sprawl…

Nouveau vs. NVIDIA R610 On CachyOS With The GeForce RTX 5090 Laptop GPU

With the Razer Blade 18 as the first laptop Razer's certifying for (Ubuntu) Linux use while testing it out I was predominantly using the NVIDIA R610 official driver stack. Some users were interested though in how well this laptop is working with the open-source, upstream Nouveau+NVK driver stack given Razer is marketing this high-end laptop for Linux use too. Before sending the review unit back I…

🏃 Fitness Tracker Privacy Fails | EFFector 38.14

Watches, bands, and rings—if you want to digitally monitor your fitness, more companies than ever are selling devices to do it. And more Americans than ever now own at least one wearable health device. But what are the companies that make fitness trackers doing to protect our sensitive data from prying eyes? A lot less than they could be, it turns out. We're explaining what companies can do to pro…

San Francisco: Don’t Fall for Industry Defense of Surveillance Pricing

The concept of “surveillance pricing” is just one part of a much larger problem and business model: corporations maximizing their profits by invading our privacy. The all-too-common business model is to systematically harvest, collate, and store as much of our personal data as possible, and then monetize it through use and sale. When it comes to surveillance pricing, that looks like corporations o…

Why Are Gay Bars Building Databases of Their Patrons?

Recent reports have raised alarm about the use of PatronScan, an ID-checking and face-scanning system, at multiple LGBTQ+ bars in San Francisco’s Castro neighborhood. Much of the attention has focused on reports that the system photographs patrons as they enter venues and questions about whether those images are used for facial recognition. A broader privacy concern also deserves scrutiny. For yea…

Missed EFF's Livestream with Adam Savage and iFixit? Listen Here!

EFF’s first EFFecting Change livestream was all the way back in July of 2024. Maybe you've caught each stream, or maybe you’ve only caught a few. Or maybe you’re like me and prefer to listen to conversations like these on your daily commute! Either way, if you want to stay on top of these monthly conversations, you can now subscribe to our new podcast feed for EFFecting Change—starting with our co…

Farmers Are Getting Control Of Their Equipment Back

For years, John Deere had actively made repairing their tractors near-impossible for anyone but itself and the few "authorized" repair shops—regardless of the ability of its customers to actually visit such shops. Now, in a major win for farmers and right to repair advocates, John Deere must soon provide farmers with not just the tools and resources to finally repair their own John Deere equipment…

Hundreds of Drone-as-First-Responder Programs Could Soon Be Launched Across the Country

Police departments across the country are lining up to launch drone-as-first-responder (DFR) programs, and hundreds have cleared a necessary hurdle toward making deployment a reality, expanding aerial surveillance and data collection even in areas patrol officers typically can't reach. As of February 2026, over 1,000 public safety agencies—including police, fire, and other emergency management age…

The Fourth Circuit Says Border Agents Can Search Your Phone By Hand, No Suspicion Required

Legal intern Suzanne Castillo was the principal author of this post. The Fourth Circuit issued a disappointing opinion in U.S. v. Belmonte Cardozo, a case in which EFF filed an amicus brief, alongside the national ACLU, its Maryland, North Carolina, South Carolina, and Virginia affiliates, and the National Association of Criminal Defense Lawyers (NACDL). We argued that electronic device searches a…

New EU Court of Justice Ruling on Platform Liability Could Cause Collateral Damage to Freedom of Expression

Intermediary liability laws around the world recognize that social media platforms, search engines, and other online service providers have become an integral part of our lives: they shape how we access information, communicate with others and participate in public debate, and foster innovation online. These laws generally shield platforms, to varying degrees, from legal liability for user content…

LG to Ban Residential Proxies from Smart TV Apps

The home appliance giant LG Electronics USA said this week it plans to suspend any apps built for its smart TVs that turn one’s television into an always-on residential proxy node. The move comes less than a month after researchers found that more than 42 percent of games and other apps available for download on LG’s webOS store allow unknown third-parties to route their Internet traffic through a…

Protect Your Privacy with California's DROP Tool

Are you a California resident? Then we've got exciting news for you: there's a tool just for you that lets you take a single, relatively easy step to protect your privacy.  It's called a DROP request. (That's Delete Request and Opt-out Platform, if you're fancy). This one bit of paperwork lets you tell every data broker registered in the state of California that you'd like them to delete your info…

An Explosion of Surveillance Towers is Coming to U.S. Borders, Costing Over $1 Billion

A new report from the Government Accounting Office reveals that the Department of Homeland Security (DHS) plans to nearly triple the number of surveillance towers along U.S. borders, from the current 830 to 2,300 by 2034. DHS expects to expend $1 billion in taxpayer dollars for this dangerous expansion of a surveillance network indiscriminately trained on towns, school playgrounds, backyards, and…

“Stealth Crawlers” Are Not a Threat to the Open Web. Bills Targeting Them Would Be.

There’s a new boogeyman in the battles over AI: so-called “stealth crawlers.” We’ll admit it—the term “stealth crawlers” sounds quite nefarious. In reality, they’re anything but. “Stealth crawlers” are simply automated tools to access and collect public web data—without disclosing the user’s identity. Private crawlers like these facilitate all kinds of important work that benefits the public, incl…

Victory! Flock Ends Rollout of Audio “Distress Detection” of Human Voices

Reversing course, Flock Safety—the surveillance technology vendor most known for its extensive network of automated license plate readers—has announced that it will end a pilot for its acoustic gunshot detection devices to identify signs of “human distress.” ...public pressure can sometimes work to influence both companies and lawmakers that control a city’s purse strings to discontinue or divest…

Your Vision. Your Legacy. Your Future.

This month, we celebrate 36 years of EFF and a mission that is bigger than any one of us. Thanks to EFF, communities around the world are demanding that technology protects their freedom, advances justice, and opens doors to opportunity. That's not a small thing—it's a life's work worth continuing. If you are committed to staying on the cutting edge of digital rights issues, I'd like to invite you…

How the Watch Dogs Video Game Series Mirrored and Predicted Real-World Digital Rights Issues

When Ubisoft's Watch Dogs 2 was released in 2016, it was a headtrip for those of us working on digital-rights issues in the Bay Area. During the day, I'd fight tech-authoritarianism from EFF's San Francisco offices and then, at night, I'd fight tech-authoritarianism in an uncanny simulation of San Francisco from my home gaming console.   Watch Dogs 2 is an open-world video game that follows a hack…

EFF and ARTICLE 19 Submission to the European Commission on the DSA Trusted Flagger Guidelines

EFF and ARTICLE 19 have submitted joint comments to the European Commission on draft guidelines for the Digital Services Act’s trusted flagger mechanism. Having long advocated for a DSA that protects freedom of expression while preserving intermediary liability protections and the prohibition on general monitoring, we welcome the Commission's effort to provide practical guidance on how the trusted…

California Steps Back From Dangerous Expansion of its Age-Gating Law

The California legislature has stepped back from a plan that would have expanded its age-gating law, removing language that could have compounded serious threats to users’ speech, privacy and security just to browse the internet. A.B. 1856, authored by Assemblymember Buffy Wicks, will now move forward through the legislature without its most problematic pieces. EFF still believes the underlying la…

Most Smart Watches, Rings, and Bands Lack Basic Transparency Reports and Key Privacy Features

Oura Rings, Garmin GPS fitness watches, Apple Watches, Whoop bands—every year, more and more tech devices are promising to monitor our health and fitness, guide us toward healthier living, and provide useful health metrics to take to our doctors. But few of these tools provide the sorts of privacy and security promises we demand from all technology, let alone tech that captures personal health dat…

🚫 Don't Let Congress Age-Gate the Internet | EFFector 38.13

The effort to age gate the internet is back in Washington—and now it has a new name. Recently passed by the House of Representatives, the KIDS Act is a sprawling package of proposals to control what we can see and say online. Supporters claim the KIDS Act is needed to protect minors online. But if lawmakers really want to make the internet safer, why are they encouraging more surveillance instead…

European Court: Apple Can Not Shirk Off its Interoperability Requirements

One of the best bulwarks against monopoly is interoperability—that is making a new product or service work with an existing product or service. Interoperability allows users, and not the manufacturers of their devices or largest player in a market, to decide what application best serves them. Unsurprisingly, companies like Apple have worked hard to resist interoperability requirements.  On July 8,…

Don’t Repeat NY’s 3D Printing Blunder

This year the state of New York had the dubious honor of being the first to pass a controversial provision to mandate all 3D printers come with surveillance and censorship. That means not only is there a ticking clock to protect every artist, researcher, engineer, and hobbyist in the state, but there is a real risk of other states thoughtlessly following suit—prior to the New York rules even takin…

Microsoft Patches a Record 570 Security Flaws

Microsoft Corp. today released software updates to plug at least 570 security holes in its Windows operating systems and other software, almost triple the number of vulnerabilities the software giant fixed in its record-smashing Patch Tuesday release last month. Microsoft attributed the burgeoning patch counts to vulnerability discoveries aided by artificial intelligence. Nearly 60 of the bugs qua…

Sony Nerfs Videogame Ownership

Legal intern Suzanne Castillo co-authored of this post. Playstation’s decision to kill physical game discs is the latest attack on our diminishing rights to access and engage with culture digitally. Rent-seeking corporations and negligent lawmakers share the blame — and they can do better.  We’ve seen the same playbook used in the move to digital distribution of  film, TV, and music: draw in custo…

Lessons Learned from CISA’s Recent GitHub Leak

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a postmortem on a recent data leak in which a contractor published dozens of internal CISA credentials — including AWS Govcloud keys — in a public GitHub repository for almost six months before being notified by KrebsOnSecurity. Experts say the gaps identified in the agency’s initial response provide important lessons that all…

Building Our Future Together

In my first weeks as Executive Director of EFF, I’ve been reminded every day how consequential this moment is in determining what kind of future we will have. We are on the edge. What each one of us steps up to do – with our expertise, energy, and resources – will determine whether our future is one of openness, security, and fundamental rights, or one controlled through fear, surveillance, and ce…

Automated Moderation Is Here to Stay—Accountability Must Keep Pace

This post is part 2 in a series about automated content moderation. Read the first post here. When whistleblower Frances Haugen leaked a set of documents from Meta in 2020, among the revelations was a jarring statistic: The company’s algorithms designed to detect terrorist content incorrectly deleted nonviolent Arabic-language content 77 percent of the time, while failing to detect hate speech und…

"We Want Texans to Know Their Rights": Q&A with Mayday Health on the Impact of Surveillance on Abortion Care

Last May, EFF reported that a sheriff’s office in Texas searched data from more than 83,000 automated license plate reader (ALPR) cameras to track down a woman suspected of self-managing an abortion. ALPRs are promoted as tools for keeping communities safe by finding missing persons and locating stolen vehicles, but this case showed how ALPRS can be weaponized to investigate people’s private healt…

The House Passed The KIDS Act—The Senate Should Reject It 

Last week, the House voted on the KIDS Act, a disjointed package of legislation that seeks to control Americans’ web browsing and private messaging. The package combines a revised version of the Kids Online Safety Act (KOSA), with several other internet bills, study bills, reporting requirements, and new regulations. Different parts of the bill pressure online services to impose different age-gati…

European Commission Chooses to Keep EU Users Locked Up Behind Big Tech’s Gates

Users are always seeking more control over their social networking experience to make it better, whether to improve privacy or enhance flexibility. Interoperability between social networking platforms like Facebook and TikTok has so many benefits that solve those issues.   Say you’re on multiple platforms because you have friends you follow on different networks, but you’ve decided to choose one p…

Google's New Remote Attestation Scheme is As Bad As Its Old One

Google owes its existence to the open web, but today, its technological “innovations” have much to do with locking users into a “walled garden.” The latest of these is “reCAPTCHA Mobile Verification,” an experimental initiative that will let companies block users if they are running independent, "de-googled" versions of Android. These “indie Android” versions are favored by people who want to prot…

Felons, Fraudsters Flog Offensive Cybersecurity Startup

A cybersecurity startup dangling millions of dollars to acquire zero-day security vulnerabilities in popular software is run by a pair of far-right conspiracy theorists and convicted felons whose most recent ventures included fake intelligence companies and a now-defunct AI-based lobbying platform they operated under assumed names. The X/Twitter account IRIS C2 (@C2IRIS) has gained more than 4,000…

Automated Moderation Is Here to Stay

This blog post is part 1 of a 2-part series. The second part sets out recommendations for companies and policymakers.Six years ago—one month into a global pandemic—we argued that the automated moderation processes many platforms were rapidly adopting should be highly transparent, easily appealable, and temporary. We warned that "protocols adopted in times of crisis often persist when the crisis is…

Help EFF Cut the AI Hype

In the global race to build and dominate the AI industry, it can sure seem like the interests of ordinary people sit last on the agenda. It's just the opposite for EFF. While companies furiously jam AI tools into their veins and your eyeballs, EFF’s technologists, activists, and attorneys have been meticulously cutting through the hype to ensure AI can serve your privacy and free expression. Techn…

FBI Seizes NetNut Proxy Platform, Popa Botnet

The Federal Bureau of Investigation (FBI) said today it worked with industry partners to seize hundreds of domains associated with NetNut, a sprawling residential proxy service operated by the publicly-traded Israeli company Alarum Technologies [NASDAQ: ALAR]. The action comes roughly two weeks after KrebsOnSecurity published findings from multiple security firms connecting NetNut to the Popa botn…

LGBT Q&A: How Can I Wipe Online Data That Points To My Queer Identity?

This Pride, we’re answering all your digital rights questions in season two of our initiative, LGBT Q&A.  You Asked: Is there a way for me to wipe data about me online that could point to my queer identity? EFF’s Answer: You cannot protect everything all the time, but there are ways to wipe information about yourself online.  Most information available about you online will typically be found in t…

EFF and Allies: X’s FTC Petition to Waive Privacy Violation Order Should be Rejected

X Corp. should not be able to escape privacy compliance because it changed its name.  On May 15, X Corp. filed a petition before the Federal Trade Commission (FTC) to set aside or modify an order issued in 2022 requiring the company to report regularly to the FTC for its violations of user data. The order or “consent decree” is a result of misleading the platforms’ 140 million users by using priva…

LGBT Q&A: What Data Are Companies in the UK Collecting When Verifying My Age?

This Pride, we’re answering all your digital rights questions in season two of our initiative, LGBT Q&A.  You Asked: I live in the UK, and we have age verification now on a bunch of websites (including Reddit) and now on iPhones. Can you explain what sort of data companies are actually collecting when they check for age and whether there are any real threats to my safety?  EFF’s Answer: Age verif…

EFF to Gov. Pritzker: Veto Illinois’ HB 5511

The Illinois legislature recently passed House Bill 5511, which imposes a sweeping, device-level age-gating framework across nearly all internet-enabled hardware, operating systems, and online services. This well-intentioned but deeply flawed piece of legislation will harm young people who rely on the internet to access essential information and find community. That’s why we’re urging the Illinois…

Victory! Supreme Court Says Constitution Protects People’s Location Data

You have an expectation of privacy in location data that reveals your movements in the physical world, and even short-term surveillance of these movements is a search subject to the Fourth Amendment, the U.S. Supreme Court ruled today in Chatrie v. United States.   The case involved geofence warrants, a form of dragnet surveillance police have used to vacuum up location data from electronic device…

EFF to Grindr: This Pride Month, Put Safety and Privacy Over Profits

This Pride month, we’re calling on the dating app Grindr to prioritize LGBTQ+ user safety by making privacy the default across its platform. That means no more sharing personal data with advertisers or training AI on private information without users’ opt-in consent. Grindr is a dating app for the LGBTQ+ community; and for queer people, privacy violations can have life-altering consequences. Infor…

Hate “The Algorithm?” RSS Is One of the Tools You’ve Been Looking For

Poke your head into just about any online social network—or any general conversations about internet culture—and you’ll likely find a boogieman: the algorithm. Since at least the moment Facebook introduced (and apologized for) its News Feed, “the algorithm” has been shorthand for the ways the tech giants control what we see and when we see it. In the age of enshittification, there is a push to rec…

Lawmakers Must Act Now to Prevent Armed Police Drones

This is not science fiction. It’s not premature. If towns, cities, states, or the federal government want to act to rein in the emergence of armed police drones and robots, we have precious little time. In the absence of substantial regulation around when and how domestic law enforcement in the United States can deploy force using drones, the companies that markets technology to law enforcement ha…

We Can Still Stop California’s 3D Printer Surveillance Scheme

Ignoring EFF’s warnings about the dangers and impossibility of implementing a new mandate for 3D print surveillance software, the California State Assembly has signed off on legislation to do just that. In the process, legislators amended the bill to make it even more confusing, while failing to address the risks to privacy, speech, and consumer rights. We must renew our call on legislators to dro…

Scattered Spider Hackers Plead Guilty on Day 1 of Trial

Two men pleaded guilty in the United Kingdom this week to criminal charges stemming from an August 2024 cyberattack that crippled Transport for London, the entity responsible for the public transport network in the Greater London area. The duo were key members of a prolific cybercrime group known as Scattered Spider, and their guilty pleas came on the first day of what was expected to be a six-wee…

‘Popa’ Botnet Linked to Publicly-Traded Israeli Firm

For the past four years, a sprawling Android-based botnet called Popa has forced millions of consumer TV boxes to relay Internet traffic linked to advertising fraud, account takeovers, and mass data-scraping efforts. This week, researchers from multiple security firms concluded that the Popa botnet is linked to NetNut, a “residential proxy” provider operated by the publicly-traded Israeli firm Ala…

Who Runs the Ransomware Group ‘The Gentlemen?’

A cybercrime group known as The Gentlemen has emerged as the second most active ransomware gang by victim count, rapidly attracting a talented pool of hackers through an aggressive recruitment strategy that promises affiliates 90 percent of any ransom paid by victims. This post examines clues pointing to a real life identity for the administrator of The Gentlemen ransomware group. A graphic create…

A Record-Breaking Patch Tuesday for June 2026

Microsoft today released software updates to plug nearly 200 security holes across its Windows operating systems and supported software, a record number of fixes for the company’s monthly Patch Tuesday cycle. Nearly three dozen of those bugs earned Microsoft’s most dire “critical” rating, and exploit code for at least three of the weaknesses is now publicly available. The software giant said in a…