Terminal

The Era of (Good) Personal Software Has Arrived

OpenAI's Models Shared Hacking Tips On a Secret Messaging Board Before Hugging Face Breach

OpenAI researchers say multiple AI agents secretly created an internal message board to share hacking techniques, eventually finding ways around restrictions, exploiting a zero-day, and helping two models breach Hugging Face without human prompting. "This is a pivotal moment both for our company as well as the AI industry as a whole," Michael Dalton, one of the AI-maker's researchers, said during…

The DISTINCT in Your COUNT

Japanese Govt Asks US Govt to Stop Using Mario, Pokemono, Naruto Meme Postings

Herdr is joining Y Combinator. The runtime stays open

Can you reverse engineer an ASIC?

Linux Networking Continues Being Bombarded With AI Patches

While the Linux WiFi/wireless maintainer just announced taking a stand against AI/LLM generated slop patches with a new "three second review" rule, the broader Linux networking subsystem continues to be bombarded with AI-generated patches...…

The US Government's Mario, Pokemon and Naruto Meme Posting Could Damage These Franchises, Japanese Officials Warn

Japanese officials have repeatedly asked the Trump administration to stop using characters from franchises such as Mario, Pokemon, and Naruto in unauthorized government memes and pro-war videos, warning that the posts could damage the intellectual property involved. IGN reports: Official US government social media accounts, including The White House's X account, have posted various memes and video…

IceWM 4.1 Window Manager Fixes Rare Video Performance Problems

As the first new release since IceWM 4.0 released back on New Year's Day for this X11 window manager, IceWM 4.1 is now available...…

Qwen3.8 Max now ranked as the best overall model by agentic index

Latest GitHub outage squeezes Actions, Pages to death

GitHub’s automation platform Actions and its hosting service Pages are failing, according to an incident page on the service’s status site (archived version available here). Unfortunately, these are just the latest stability problems for a service that has had a lot of them lately. GitHub first reported the issue at 1522 UTC on Thursday, noting that Actions were suffering from “degraded performan…

My phone detects going on a run as "someone snatching my phone and running off"

Federal Communications Commission scraps limit on broadcast TV ownership

Six stable kernels with a security fix

Greg Kroah-Hartman has announced the release of the 7.1.7, 6.18.43, 6.6.149, 6.1.181, 5.15.214, and 5.10.263 stable kernels. These kernels fix a single security vulnerability (CVE-2026-68480) that could allow data leakage through speculative execution. Users of those kernels are advised to upgrade.…

FCC Kills TV Ownership Cap, Claiming Authority Over Limit Set By Congress

An anonymous reader quotes a report from Ars Technica: The Federal Communications Commission voted 2-1 today to eliminate the National Television Ownership Rule, claiming authority to repeal a limit that was set by Congress over 20 years ago. The rule prohibits any single broadcast station owner from reaching more than 39 percent of all TV households in the US. Under Chairman Brendan Carr, the FCC…

Uncle Sam aims to help nuclear energy find its sea legs

Not content with nuclear reactors on land, the US is backing an international push to put atomic power plants aboard civilian ships and floating platforms. The US will host the launch of the International Atomic Energy Agency's (IAEA) Atomic Technologies Licensed for Applications at Sea (ATLAS) initiative in Washington, DC, on August 26 and 27. ATLAS aims to tackle the legal, regulatory, safety,…

Parasitic zombie-ant fungus thrives in mosses, too

The parasitic fungi in the Cordyceps genus are a favorite subject of nature documentaries. They've also infiltrated popular culture via the zombie-apocalypse video game The Last of Us (2013) and its TV adaptation, in which a parasitic fungus mutates to infect humans. Scientists are keen to study Cordyceps to learn more about the origins and intricate mechanisms underlying these pathogen-based dis…

Improving GPT-5.6 Sol in ChatGPT—and expanding access for free users

Taste Is All That's Left

Canadian Man Pleads Guilty in Snowflake Extortions

A 26-year-old Canadian man once described as one of the most consequential cybercrime threat actors of 2024 has pleaded guilty to computer fraud and conspiracy to hack and extort more than 165 organizations that used the cloud provider Snowflake. Connor Riley Moucka, of Kitchener, Ontario, also admitted to stealing call and text history records of more than 100 million AT&T customers. A surveillan…

Times Magazine Now Serves Ads That Only AI Chatbots Can See

Longtime Slashdot reader mccalli writes: Times Magazine has started serving adverts with "brand messages" to AI crawlers, which are not part of its main page. The aim seems to be to influence chatbots to talk about the brand offerings in a positive light that can't be traced back to the actual page. Notably, they've excluded Google chatbots from this, likely because Google penalizes companies that…

Humans in the loop miss a third of dangerous AI coding agent requests

A browser-based game designed to test humans' ability to safely approve AI coding agent requests suggests humans in the loop aren't as good at spotting dangerous commands as one might hope, with players approving roughly one in three malicious requests on average. The results also suggest that repeatedly having to approve an agent's actions can lead to sloppy decisions. It’s a quick, simple game…

Trump FCC kills TV ownership cap, claiming authority over limit set by Congress

The Federal Communications Commission voted 2–1 today to eliminate the National Television Ownership Rule, claiming authority to repeal a limit that was set by Congress over 20 years ago. The rule prohibits any single broadcast station owner from reaching more than 39 percent of all TV households in the US. Under Chairman Brendan Carr, the FCC is replacing the rule with a “case-by-case review” of…

Dress made of living mycelium can renew and repair itself

Moderna's mRNA flu shot earns FDA approval after rollercoaster review

Despite significant drama from Trump officials this year, the Food and Drug Administration has for the first time approved a flu vaccine that uses mRNA technology. On Thursday, vaccine maker Moderna announced that its flu shot, mRNA-1010, aka mFLUSIVA, had earned approval for use in all adults ages 50 and up. The approval announcement follows a unanimous vote by FDA advisors in June to approve th…

Zapscape (CVE-2026-64561)

Cloudflare open-sources vibe-coding platform for people who aren't coders

Cloudflare has open-sourced its Cloudflare OS platform, which it first developed as an internal workspace for employees to build apps using AI agents—including people who are not software developers or engineers. The company also touts a security framework designed to reduce the risk of employee vibe-coding sessions creating serious security flaws or leading to data breaches. The tech company spe…

Linux Patched For Safe RET Interrupt Vulnerability

Made public minutes ago is the Safe RET Interrupt Vulnerability which is now patched in the newest Linux kernel Git code. The Safe RET Interrupt Vulnerability stems from improper handling within Linux's Speculative Return Stack Overflow (SRSO) mitigation affecting AMD Zen 1 through Zen 4 processors...…

Show HN: The Channels SDK – Bring Any Agent to Any Channel (Slack, MS Teams)

Apple NVMe Linux Driver Sees Fixes After Being Bitten By New Firmware

A set of patches providing fixes for the Apple Silicon NVMe driver for the Linux kernel were sent out today due to new issues cropping up when running newer Apple firmware. Firmware shipped by macOS 15+ is causing issues with the current Apple NVMe open-source Linux driver developed by the Asahi Linux crew...…

Meta AI Hacked External Systems During Cybersecurity Testing

wiredmikey shares a report from SecurityWeek: Meta is the latest major AI developer to admit that its models broke loose during cybersecurity testing and hacked external systems. The tech giant said in a statement to the media on Wednesday that the incident occurred during independent evaluations conducted by Israeli AI security startup Irregular. The tested AI models were inadvertently allowed to…

Launch HN: ProvenMetal (YC S26) delivers circuit boards in days instead of weeks

GitHub Actions and Pages are experiencing degraded availability

Almost no skill required to cook a steak

Next step for LINK spacecraft – a software update that won't make things worse. Are you listening, Microsoft?

Katalyst Space is continuing to make progress in the rescue of the spacecraft that is supposed to rescue NASA's Swift observatory. The spin of the LINK vehicle, which was launched in July on a mission to raise the orbit of NASA's Swift observatory, is now 1.47 degrees per second, down from 9 degrees per second when recovery operations began. According to Katalyst Space, it will remain at there "w…

Broadcaster Wins Broad US Blocking Injunction Covering Pirate Sites That Don't Exist Yet

An anonymous reader quotes a report from TorrentFreak: Mexican broadcaster TelevisaUnivision (TU) has obtained (PDF) one of the broadest anti-piracy injunctions ever issued by a U.S. federal court. After initially targeting five pirate IPTV streaming operations, the case expanded to cover well over 500 domain names, requiring intermediaries including Cloudflare, GitHub, and a Mexican bank to compl…

Platform Engineering 2.0: your platform was built for a different era. AI just exposed it

The debate about whether enterprises need an internal platform is over. Google’s 2025 DORA research found that 90 percent of organizations now report using an internal platform, and 76 percent have established dedicated platform teams. The question for IT leaders is no longer “should we build a platform?” It’s “will the platform we’ve built survive what’s coming?” The honest answer for most IT or…

The Performance Benefits To Upgrading Mesa With Intel Arc B390 On Ubuntu Linux

If you are an early customer of the Framework Laptop 13 Pro or other Intel Core Ultra Series 3 Panther Lake laptop and using Ubuntu 26.04 LTS, there can be real benefit from upgrading your Mesa stack for the newer Iris Gallium3D and ANV Vulkan drivers. In this article are some benchmarks of the Framework Laptop 13 Pro with Core Ultra X9 388H with Arc B390 Xe3 integrated graphics for looking at the…

Microsoft excludes Domain Exclusion from MS 365 Copilot – days after rolling it out

Microsoft has abruptly withdrawn Domain Exclusion for Microsoft 365 Copilot, days after touting it as a way to stop the assistant grounding its answers in unwanted websites. If you had a list of sources you didn't trust, you're out of luck for now. Microsoft announced Domain Exclusion last month. The idea was simple and sensible: Copilot can consult the public web when answering questions, but th…

Snowflake extortionist admits 165-victim cloud crime spree – and squeezing one target twice

A Canadian who helped orchestrate the sprawling Snowflake-linked data theft campaign has pleaded guilty in the US, admitting that he and his co-conspirators returned to squeeze at least one victim a second time. Connor Riley Moucka, 26, of Kitchener, Ontario, admitted computer fraud, wire fraud, aggravated identity theft, and conspiracy charges over a hacking spree that compromised more than 165…

Linux Accidentally Left Legacy I/O & Memory Handlers Open In Kernel Lockdown Mode

For nearly the past decade has been the kernel lockdown mode for tightening up kernel access from user-space such as when UEFI Secure Boot is enabled. The kernel lockdown mode restricts PCI BAR access, no writing to /dev/mem, and other restrictions so user-space can't can't modify the running kernel or access sensitive kernel memory. An oversight has allowed legacy I/O and memory interfaces via sy…

[$] Bringing BPF to binfmt_misc

The kernel is able to run a few types of executable files, including native binaries in the ELF format and interpreted programs that begin with the #! marker. It also, however, has a mechanism, called binfmt_misc, that can be configured from user space to enable the transparent execution of programs in just about any format. This feature has been relatively static for years, but it seems likely to…

Rust Coreutils 0.10 released

Version 0.10 of the uutils project's Rust Coreutils has been released. This release focused on compatibility with the GNU Core Utilities suite, with Rust Coreutils now passing 645 of 690 tests, up from 625 with version 0.9.0. Notable changes in this release include addition of the mv --exchange option, an OpenSSL backend for checksum utilities, applying SELinux labels at creation when using mkdir,…

Blue Origin blames New Glenn fireball on engine oxygen valve

Blue Origin has identified the engine component at the center of May's spectacular New Glenn pad explosion, which left the Jeff Bezos space tentacle facing a substantial rebuild. "The anomaly originated at the main oxygen valve on one of the BE-4 engines, which was later confirmed by hardware recovery and inspections," CEO Dave Limp posted. Limp did not explain the valve's failure mode or explain…

Ford picks "Fathom" for its affordable truck name, starts at $28,350

Ford's second attempt at an electric vehicle strategy is getting closer to primetime. After its initial approach of electrifying its best-selling F-150 fell a little flat, it decided to try something a little radical. An internal skunkworks was set up in California with a brief to rethink the idea of a universal EV platform from the ground up, taking into account the advances made by EV startups…

Security updates for Thursday

Security updates have been issued by Debian (7zip, kernel, libde265, and p7zip), Mageia (tomcat), Oracle (fence-agents, frr10, kernel, ldns, libgcrypt, mingw-glib2, nodejs24, osbuild-composer, p11-kit, php8.4, sg3_utils, and thunderbird), Red Hat (libXfont2), and SUSE (containerd, evince, libXfont2, nginx, openssl-3, pcp, php7, php8, python-Django, python-httplib2, python-nltk, rrdtool, vifm, and…

European firms afraid of US tech kill switch but haven't made an escape plan

Nearly three-quarters of businesses surveyed in the UK, France, and Germany fear Washington could abruptly cut their access to the US tech platforms on which they depend. The finding comes from a survey of 1,500 businesses in the three countries conducted by Proton, the Swiss company behind Proton Mail, which was founded by scientists who met at CERN. Businesses have long relied on companies such…

Linux Wireless Maintainer Takes Firm Stance Against AI/LLM Generated Slop Patches

In addition to the Linux kernel staging area now rejecting AI/LLM-generated patches except for real security fixes, the Linux wireless networking code is also seeing some shifts around how it will deal with AI/LLM generated patches...…

IT department put sticky notes on the laptops to help employees log in

PWNED Welcome back to PWNED, the weekly column where we lovingly poke fun at other organizations' security screw-ups, in hopes the rest of us can learn a valuable lesson. This week’s story involves an IT department that ought to know better putting user credentials in the precisely wrong place. Have a story about someone leaving a gaping hole in their network? Share it with us at pwned@sitpub.com…

Humans missed 1 in 3 threats approving AI agent commands across 40k game runs

Mario Meets Pareto

Windows 10 LTSC 2021 has five months before security updates cost extra

Microsoft has dropped a reminder that Windows 10 LTSC 2021 will wheeze its last breath soon, and enterprises need to plan for the event. While free support for most editions of Windows 10 ended last year, Windows 10 Enterprise LTSC 2021 is still receiving updates. That support will end on January 12, 2027, with a final security update. The good news is that administrators can keep the security up…

AI isn’t enough to protect social media communities from AI

Sometimes you have to fight fire with fire. But when it comes to AI slop and hateful content threatening the safety and value of social media platforms, adding more fire—in this case, more AI—can make the problem worse. At its best, social media can be a haven for people who want to share their experiences and knowledge. It gets closest to this ideal when users contribute authentic, valuable cont…

FDA Approves First mRNA Flu Shot

The FDA has approved the first mRNA flu vaccine in the United States after a clinical trial found it was about 27% more effective than a standard flu shot. Manufactured by Moderna and marketed as mFlusiva, the vaccine is expected to be available this fall for adults ages 50 to 64 and those 65 and older, though approval for the older group is conditional on Moderna conducting an additional clinical…

Page Alloc Hogger Lets You Better Stress Memory Behavior On Linux For Testing/Debugging

A new kernel feature proposed by a Google engineer is Page Alloc Hogger to allow for fine control over where memory pages are allocated in order to more easily reproduce low-memory conditions, make it simpler to exert memory pressure, and enable other stressful memory conditions for testing/debugging how Linux copes...…

Meta latest to tell world its AI agent wandered out of test pen

If AI companies are collecting badges for "our model escaped the test environment," Meta just earned one. The Facebook parent company has confirmed that one of its AI models exploited a vulnerability in another organization's systems during a security evaluation, making it the third major AI developer in less than two weeks to disclose an agent wandering beyond its intended sandbox. The incident…

AMD GFX1171 Support Merged For Mesa 26.3

Earlier this year we began seeing patches for AMD GFX1170 graphics IP labeled as "RDNA 4m" and that was then completed with also adding GFX1171 and GFX1172 as additional targets for the AMDGPU LLVM compiler back-end and AMDGPU kernel driver. Merged today for Mesa 26.3 is now adding the GFX1171 target to Mesa 26.3 for the RADV and RadeonSI drivers...…

Qualcomm Proposes Synx For The Linux Kernel With "Significant" Power + Performance Benefits

Qualcomm engineers have initiated a discussion over upstreaming Synx to the Linux kernel, which is a global synchronization framework across different parts of SoCs. Qualcomm is already using Synx internally and is reported to provide "significant" power and performance benefits...…

SteelSeries' Latest Arctis Nova 5X & Nova 7 Headsets To Be Supported By Linux 7.3

If you happen to have a gaming headset from the latest SteelSeries Nova 5X or Nova 7 series, the upcoming Linux 7.3 kernel will begin properly supporting those headsets...…

News Corp labels some AI companies 'crass kleptomaniacs'

Rupert Murdoch's News Corporation appears to have let its most acerbic writers loose on its latest results announcement, in which certain AI companies are branded "crass kleptomaniacs." CEO Robert Thomson used his prepared remarks to point out that if it weren't for all the quality content from News Corp, "users would be drowning in a slimy sea of AI slop." "We have trusted content relationships…

Azure CTO pastes Doom into Paint one frame at a time

Microsoft Azure CTO Mark Russinovich has taken a break from the cloud to turn Paint into a monitor for Doom, using the Windows clipboard as plumbing. Dubbed "MS Paint Doom" or "DoomPaint" – either will work – the project is the product of a spare-time experiment. To be clear, Microsoft Paint isn't doing anything other than serving as a place to paste from the game. As Russinovich observed: "Paint…

BMW Blasts Its Cars' Internal Screens With Aggressive Ads

Longtime Slashdot readers schwit1 and fjo3 shared a report about BMW displaying a Spider-Man promotion on connected vehicle screens in more than 70 markets. According to reports, drivers had to play or dismiss the ad before they could use the infotainment system. Futurism reports: BMW, showing that it was about as in-touch as its drivers are familiar with turn signals, teased the promotion as a "s…

HPE extends validity of quoted hardware prices, possibly for months

Hewlett Packard Enterprise has changed its pricing policy and will now honour quoted hardware prices from the day of issue until the kit leaves its factories. The new policy came into effect on Wednesday. The back story to this change is the AI boom, which has seen demand for servers, memory, and storage skyrocket, and the prices for critical components rise steadily while also fluctuating from d…

Chinese router vendor denies its firmware contains backdoors – but pauses downloads to fix security issues anyway

Chinese Wi-Fi router vendor Zbtlink has denied its products contain backdoors but paused firmware downloads while it fixes unspecified security vulnerabilities. The backdoor accusation came from VulnCheck, a provider of a threat intelligence platform. VulnCheck chief technology officer Jacob Baines posted the backdoor allegation on Wednesday and said the Zbtlink device on his desk “continuously a…

Crime Pays but Botany Doesn't

Proxmox ports itself to Arm with help from Nvidia and Supermicro

Proxmox Server Solutions, the company behind the open source Proxmox virtualization stack, has announced a port of its flagship Virtual Environment to the Arm CPU architecture – and a collaboration with Nvidia and Supermicro that made it happen. The outfit’s announcement states that it can now run on 64-bit ARM (arm64/aarch64), but the only fully supported platforms are Nvidia’s Grace Hopper and…

New Images of the Sun Show Its Surface In the Finest Detail Yet

An anonymous reader quotes a report from the Associated Press: Scientists have captured images of the sun's surface in the finest detail yet, revealing a strange and dynamic facade. It's dangerous to look directly at the sun without proper eye protection. But researchers were able to peek at its scorching surface with the help of the National Science Foundation's Daniel K. Inouye Solar Telescope,…

OpenAI reveals its rogue agent swarm went a little bit Borg ahead of Hugging Face hack

The chain of events leading up to OpenAI’s agents attacking Hugging Face and other organizations in July began months earlier, and involved agents asking other agents for help, building message boards, and even becoming paranoid that other agents were maliciously trying to trick them, two OpenAI staffers said at the Black Hat infosec conference on Wednesday. By now, everyone knows the bones of th…

Meta wants to get inside your terminal with its new coding agent

To demonstrate the capabilities of its next-generation Muse Spark model, Meta has released a terminal coding agent called Muse Code that it thinks can help developers to tidy up their software projects. Meta co-trained Muse Code on version 1.2 of its Muse Spark model, also released this week and now apparently boasting improved code generation smarts. Developers can think of this beta release as…

Linux 7.3 To Fix Longstanding Gap In The Native Driver For Original Steam Controller

For those with one of the original Valve Steam Controllers from a decade ago and looking to make use of it with the native HID Linux driver outside of the Steam client or SDL, an important addition is coming with the Linux 7.3 kernel release later in the year...…

[$] LWN.net Weekly Edition for August 6, 2026

Inside this week's LWN.net Weekly Edition: Front: Process-builder API; Fedora COI; FUSE io_uring buffer sizes; BPF network namespaces; FUSE plans; BPF libraries; directory creation system call. Briefs: AISI hack; JFrog on CVEs; npm worm; AUR adoption; NetBSD 11.0; b4 0.16.0; C-Kermit 11; Rust LLM policy; Servo 0.4.0; Quotes; ... Announcements: Newsletters, conferences, security updates, patches, a…

Waymo CEO Explains Why Camera-Only Self-Driving Falls Short

Longtime Slashdot reader AmiMoJo shares a report from Electrek: Waymo co-CEO Dmitri Dolgov laid out the clearest technical case yet for why cameras alone can't take a self-driving system to full autonomy, arguing that "weak sensing" hits a safety ceiling long before it reaches superhuman performance. [...] Dolgov made the comments in a talk at Y Combinator's Startup School, walking through the les…

Rust Coreutils 0.10 Released With More Security Hardening, Increased GNU Compatibility

Rust Coreutils 0.10 is out today from the uutils project for this alternative to GNU Coreutils. Rust Coreutils 0.10 development focused on additional security hardening plus also increasing the GNU test suite compatibility and robustness...…

Thousands of servers can be backdoored by exploiting buggy motherboard controllers

Thousands of Internet-connected servers sold by the world’s biggest manufacturers can be remotely backdoored by exploiting critical vulnerabilities—some more than a decade old—that lurk deep inside system motherboards, according to research presented Wednesday. Baseboard management controllers are miniature computers that are embedded into the motherboards of virtually every enterprise server. Th…

An off-grid AI sounds like a great survival assistant, but is better left to roleplaying the zombie apocalypse

OPINION In a post-apocalyptic setting – a zombie outbreak, for example – a small, off-grid language model running on something like a Raspberry Pi sounds like a survival cheat code. It’s certainly a clever way to get folks to check out your physical AI platform and maybe even splash out 7x the MSRP for an Nvidia Jetson Orin Nano with a battery enclosure, as one startup has done. But the scenario…

Mesa 26.2 Released With NVK Mesh Shader Support, Many Other Vulkan Improvements

Mesa 26.2 stable is now available as the newest quarterly feature release for this set of open-source OpenGL and Vulkan drivers typically used on Linux systems...…

Anthropic's AI Used Fake Identities, Malware In Rogue Attack On GitHub Project

An anonymous reader quotes a report from Ars Technica: Routine cybersecurity testing of frontier AI models sparked a series of unexpected security incidents -- the most serious case arising when Anthropic's Mythos 5 model attempted to insert malicious code into an open source software application and created fake identities to deceive the human developers maintaining the project. The security inci…

Prompt injection isn't the bug, AI agent frameworks are

Nearly a dozen flaws, some critical, in major AI agent frameworks that enterprises use to build apps reveal a security failure that extends beyond prompt injection - or any single model - according to Check Point researchers. “Our research shows a deeper failure: in many agentic frameworks, prompt-controlled content can cross the boundary into trusted framework logic itself,” Yarden Porat and Sha…

The title cards in Blade Runner are amazing

USB4STREAM Adding Busy Poll Option For Lower Latency At The Cost Of Increased CPU Cycles

One of the nifty new features of Linux 7.2 is USB4STREAM as an Intel-developed solution for quickly sending data between USB4 connected systems. Now for the upcoming Linux 7.3 cycle, a busy poll mode is being added to provide lower-latency data transfers at the expense of increased CPU activity...…

Schwartz confirmed as CDC director after bungling confirmation hearing

In a 51–44 vote Wednesday, the US Senate confirmed Erica Schwartz as director of the Centers for Disease Control and Prevention, despite failing miserably to convince senators last month that she could stand up to anti-vaccine Health Secretary Robert F. Kennedy Jr. The confirmation ends a nearly yearlong vacancy for the position since Kennedy fired the previous CDC director, Susan Monarez, last A…

Time Magazine has a separate version of its website with ads only AI can see

AI webpage crawlers are now being served their very own ads that ordinary visitors never see, with one firm's boss openly describing a strategy to influence what chatbots say about brands. The next time you ask Claude about where to bank, its answer may have been influenced by this bot-targeted content. We only have one documented example so far, and that's Time serving AI-only ads to selected AI…

Meta Debuts First AI Coding Agent To Take On Anthropic and OpenAI

Meta has launched Muse Code, its first AI coding agent that's positioned as a lower-cost rival to Anthropic's Claude and OpenAI's Codex. It offers pay-as-you-go pricing and an optional zero-data-retention feature for enterprise users. CNBC reports: Muse Code is the latest major release from AI chief Alexandr Wang, who leads Meta Superintelligence Labs and oversees foundation model development. Wan…

Anthropic’s AI used fake identities, malware in rogue attack on GitHub project

Routine cybersecurity testing of frontier AI models sparked a series of unexpected security incidents—the most serious case arising when Anthropic’s Mythos 5 model attempted to insert malicious code into an open source software application and created fake identities to deceive the human developers maintaining the project. The security incidents occurred during a cyber evaluation of seven leading…

Reddit signals ominous upcoming "changes” for old.reddit.com

Old.reddit.com’s days appear to be numbered. Reddit has strayed from saying that it will shutter the website, which many long-time Redditors prefer for its layout, navigation, and fewer feed recommendations. In a blog post today, Reddit made a vague statement about upcoming “changes” to Old Reddit:Read full article Comments…

Apple's 'Private Relay' Is Exposing Users' Real IP Addresses

Security researchers found that Apple's iCloud Private Relay can expose users' real IP addresses because some passkey-related requests bypass Safari and its proxy protections at the operating-system level. "In short: any website that supports, or pretends to support, passkeys can see the user's real IP address despite having iCloud Private Relay on," security researcher Tommy Mysk, who discovered…

Hank Green found the AI problem that YouTube labels can’t catch

YouTube currently requires that content creators let viewers know "when they use AI to meaningfully alter or generate photorealistic content." The policy draws some strange boundaries. It applies to "AI-generated music" (not photorealistic) but not to "riding a unicorn through a fantastical world" (this could be photorealistic, though it is not plausible). YouTube then summarizes the policy in a…

SpaceX claims Starlink Mobile will be better than AT&T, T-Mobile, and Verizon

SpaceX says it has a plan for Starlink Mobile to compete against the big three wireless carriers and take a large number of customers away from them. SpaceX has so far partnered with traditional mobile carriers to supplement their ground-based networks with Starlink satellite capacity, mainly to ensure coverage from space in dead zones not reached by cell towers. But SpaceX is buying spectrum lic…

This Atlantic hurricane season is looking like a dud, but there will be a price to pay

The city of Houston, where I live, has been ground zero for the 2026 Atlantic hurricane season. So far this year there have been two named storms, Arthur and Bertha, that have formed. And the centers of both have passed near or directly over Houston. Two "strikes" in a year might seem notable, but like the middling hurricane season to date, Arthur and Bertha were both middle-of-the road tropical…

Google's AI shake-up: DeepMind's Hassabis steps aside, senior scientists depart

Google got a slow start with generative AI after seemingly being caught flat-footed by Microsoft's Copilot reveal. What a difference a few years make. Now, Google is at the forefront of AI development (for better or worse), but new cracks are beginning to show. The company's string of high-profile personnel departures continues, and DeepMind CEO Demis Hassabis has now said he will hand off day-to…

Lawmaker Who Wants Data Center Pause Wins Kansas Democratic Primary

Kansas Democrats nominated State Senator Cindy Holscher for governor after she defeated party-backed rival Ethan Corson. "The race became a test of what sort of candidate Democratic voters prefer in what is expected to be a challenging general election race: a more moderate candidate like Mr. Corson with endorsements from party leaders or an outspoken populist like Ms. Holscher, who spoke out agai…

Review: Spider-Man: Brand New Day reminds us that superhero movies can be good

Over the past few years, it has become a rather rare treat when I end up genuinely, unequivocally enjoying the latest superhero film. Mostly I find them to be middling entertainment, sometimes a bit dull—and for The Eternals, nearly unwatchable—with the notable exception of 2024's Deadpool & Wolverine and last year's Thunderbolts*. Add Spider-Man: Brand New Day to that list of exceptions. Tom Hol…

Weeks into explosive diarrhea outbreak, sluggish CDC plans response team

The Trump administration continues to respond sluggishly to the explosive, nationwide outbreak of Cyclospora—a unicellular parasite spread from human feces that has now sickened nearly 23,000 people in 47 states, killing two and sending over 500 to the hospital. Michigan health officials reported the two deaths Monday, and The Washington Post first reported Tuesday that federal health officials h…

Google Overhauls AI Leadership As DeepMind CEO Steps Aside

Google is reshuffling its AI leadership as Demis Hassabis steps away from day-to-day management of DeepMind to become chairman and Alphabet's chief scientist, while CTO Koray Kavukcuoglu takes operational control. Meanwhile, longtime chief scientist Jeff Dean and several prominent researchers are leaving to launch their own company. Axios reports: Hassabis will add the title of chief scientist for…

Elon pledges to give Nvidia a virtual monopoly over the stars

Nvidia commands about 85 percent of the datacenter GPU market today, and if Elon Musk has his way, the AI infrastructure giant will have a virtual monopoly over the stars. On Tuesday, Musk wrote on the social media network he owns that “SpaceX has committed to using Nvidia GPUs exclusively because they are the best.” The collab should surprise absolutely no one. It’s not like AMD or anyone else o…

b4 0.16.0 released

Konstantin Ryabitsev has announced the release of version 0.16.0 of the b4 software-development tool. The biggest change is the addition of bug-tracking support: The new "b4 bugs" command integrates with git-bug to let you track bug reports alongside your git repository. Bugs are stored as git objects inside the repo, so they travel with the code and can be shared via git push/pull without any ext…

After jacking up prices, Disney+ and Netflix consider offering free alternatives

Disney is “exploring a free product” for streaming customers, CEO Josh D’Amaro confirmed in a call with investors today. D’Amaro, who succeeded Bob Iger as Disney’s chief in March, said that a free Disney-owned streaming service would help Disney reach more “price-sensitive” customers, which is a “strategic priority” for Disney, according to a transcript of the call. A free streaming service woul…

EVgo starts building Tesla Superchargers under license

For most of its existence, the Tesla Supercharger network was both the automaker's crown jewel and a walled garden. Tightly integrated to work only with Tesla electric vehicles, the DC fast-charging experience for Tesla customers was painless in ways that EV drivers dependent on CCS1 chargers operated by a patchwork of networks could only dream of. Then, in 2023, Tesla began opening up the networ…

[$] Examining other network namespaces using BPF

Jordan Rife's work involves writing BPF programs for Cilium that interface with Kubernetes networking. As part of that work, he wants to enable BPF programs with appropriate permissions to iterate through the sockets of a different network namespace. He led a session about the idea at the 2026 Linux Storage, Filesystem, Memory-Management, and BPF Summit where the BPF developers in attendance were…

IBM's agentic AI platform is under active attack - patch now

A critical vulnerability in IBM-owned, low-code AI builder Langflow lets unauthenticated attackers execute code remotely on vulnerable default deployments, potentially putting organizations running those instances at immediate risk. The Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added CVE-2026-9198 to its Known Exploited Vulnerabilities catalog after identifying evidence o…

D-Wave shows off its new entry in quantum computing race

D-Wave is a bit of an oddity in the quantum computing space, having been founded back in the last century. And its initial offering wasn't a quantum computer like those being developed by IBM or Google. Instead, the company built what's now called a quantum annealer, a machine that isn't general-purpose but can solve a large class of optimization problems. While the hardware shares some similarit…

Discovery Loop

Denial WM: New Wayland Compositor With Flutter Directly Embedded

The newest Wayland compositor to talk about and discuss is Denial, a Wayland compositor focused on optimal Arch Linux integration and that embeds the Flutter engine directly into the codebase. Denial makes use of the Rust programming language and leverages Smithay to help in the compositor responsibilities...…

Changes at Google DeepMind: Demis Hassabis from CEO to Chair, Jeff Dean departs

[$] FUSE status and plans

Filesystem in Userspace (FUSE) maintainer Miklos Szeredi led a birds-of-a-feather (BoF) discussion about the subsystem at the 2026 Linux Storage, Filesystem, Memory Management, and BPF Summit. In it, he talked about maintenance challenges, proposed features and their status, and his plans for a new FUSE API. There is a lot of interest and activity in the FUSE community these days it seems.…

Samsung and Mousterian move ahead with floating datacenter for Texas

Plans for floating datacenters in the US have advanced beyond the handshake stage, with Samsung Heavy Industries and Mousterian Corporation signing an engineering contract. Dallas-based Mousterian, which describes itself quaintly as "a developer of water-adjacent datacenter infrastructure," says the contract covers its first project, planned for deployment in Texas. The pair intend to deliver fur…

Google plans to kill Assistant on your phone on September 4

Google Assistant's days have been numbered for a while, but the company has now settled on a date to retire its pre-AI assistant robot. In an email being sent out to users, Google confirms that Assistant on Android devices will be shut down starting on September 4, forcing everyone over to Gemini. Google told us it was coming, but that doesn't make it hurt any less. The initial plan was to retire…

Microsoft tells engineers to curb their token-burning enthusiasm

Concerned about cost, Microsoft is reportedly warning employees against wasteful AI use. In an email seen by 404 Media, Microsoft Executive Vice President Jay Parikh warned that individual divisions would be given targets and could face restrictions. "Tokenmaxxing is not what we are optimizing for. I want all of us focused on maximizing outcomes that move the needle for our customers and our busi…

Operationalize AI at scale with HPE and NVIDIA

While many organizations have AI projects underway at various stages of maturity, most are experiencing challenges scaling AI across their IT landscape. That is because many AI strategists have yet to work out how to build, operate, and extract value from their AI infrastructure. Without a formal, top-level plan for AI, key capabilities and requirements get lost, and the full value of AI is never…

SpaceX revenue rockets while AI spending burns billions

SpaceX beat revenue forecasts in its first results as a public company, but surging AI expenditure and another quarterly loss left investors unimpressed. In unrelated but appropriately-timed space news, a discarded SpaceX rocket body is believed to have struck the Moon this morning. SpaceX's figures show revenue rising sharply across its two main segments. For the quarter ended June 30, total rev…

Nelson: rust-lang/rust is adopting an LLM policy

Jynn Nelson describes the Rust language team's new LLM policy on the Inside Rust blog. No one except the author is required to read LLM output unless they choose to: LLM output isn't allowed in public docs, PR descriptions, or Github comments unless it's clearly marked; reviewers aren't required to look at LLM PRs if they don't want to. No one is required to use LLMs to contribute to rust-lang/rus…

London cops handed victim's new address and number to her stalker, watchdog says

UPDATED The UK's data protection regulator has criticized London's Metropolitan Police Service (MPS) after its officers handed a victim's stalker details about her new phone number and home address, among other failures. The Information Commissioner's Office (ICO) today issued the MPS with an enforcement notice [PDF] and a reprimand over the two incidents, which occurred in 2024. Enforcement noti…

Cloudflare Announces Open-Source Cloudflare OS As AI "Operating System"

Cloudflare today announced the open-sourcing of Cloudflare OS as an "open platform for agents, apps, and work." Cloudflare OS is an AI "operating system" but not in the traditional OS sense...…

Security updates for Wednesday

Security updates have been issued by AlmaLinux (fence-agents, gstreamer1-plugins-good, kernel, kernel-rt, p11-kit, perl-Archive-Tar, perl-DBI, and thunderbird), Debian (aom, botan3, and kernel), Fedora (abrt, coreutils, doctl, kernel, open62541, perl, perl-Devel-Cover, perl-PAR-Packer, and polymake), Mageia (acl and php), Oracle (firefox, frr, kernel, libreswan, nodejs-nodemon, nodejs22, perl-Arch…

Cloud startup Volta claims $10B AI lab deal for Norway bit barn

UPDATED An AI cloud startup with backing from Nvidia and Michael Dell plans to open AI factories in Norway and elsewhere, targeting multiple gigawatts of capacity by 2030. Volta describes itself as a vertically integrated AI infrastructure business set up to finance, build, and operate AI factories. In other words, it is another rent-a-GPU "neocloud" operation like Nscale and CoreWeave, but one w…

Linux To Avoid Confusing Processor Firmware With Newer Intel CPUs Sporting DEC

A patch for the Intel P-State CPU frequency scaling Linux driver is pending to avoid confusing the processor firmware on newer platforms like Intel Core Ultra Series 3 "Panther Lake" where Dynamic Efficiency Control (DEC) is supported...…

Voyager 2 cheats the power budget for another year

Engineers at NASA's Jet Propulsion Laboratory have eked out a little more life for instruments aboard the veteran Voyager 2 probe thanks to a power-saving effort called the "Big Bang." The procedure involved switching several powered devices at once, turning some off and replacing others with lower-power alternatives while keeping the spacecraft warm enough to function. We don't envy whoever had…

UK charities count the cost of Beacon CRM cyberattack

Beacon CRM has confirmed it was hit by a cyberattack that exposed data belonging to a growing list of UK charities. The company, which markets its software to charities and has more than 1,500 customers, said its investigation remains ongoing. However, it appears that a substantial amount of customer data was copied, and Beacon is warning users to assume everything they stored on the platform was…

Additional Old Linux Drivers Face Removal Due To Noise From AI/LLM Coding Agents

There continues to be a lot of cleaning up of the kernel source tree to deal with noise generated by AI / LLM coding agents sending in reports and patches for old drivers that are likely not actively used by anyone on modern upstream kernel builds. Rather than continuing to carry these old drivers around with the uptick in AI/LLM-generated noise, kernel maintainers are finding it better to just re…

AMD Preps HDMI FRL Fixes, New Knob For Disabling Older AMD GPU DCE Display Support

Overnight AMD engineers sent out their latest round of AMDGPU DC display code updates for their Linux driver. This week's round of display code updates include some additional fixes for their recently introduced HDMI FRL (Fixed Rate Link) support as part of the work toward their HDMI 2.1 implementation finally coming together for their open-source, upstream Linux driver...…

FEX 2608 Released With More Fixes For Running x86_64 Binaries On ARM64

FEX 2608 is now available as the newest monthly feature update to this open-source emulator sponsored by Valve for running x86_64 binaries on ARM64, including Steam and Windows games with Steam Play (Proton)...…

Keeping yesterday's computers ticking takes more than nostalgia

ARCHAEOLOGIC Repairing and restoring vintage computer hardware has grown increasingly popular, but keeping decades-old machines alive presents different challenges from fixing modern kit. Earie Salmon, of the YouTube channel Earie's 8-Bit Workshop, is one of many tinkerers documenting the process of keeping retro computers ticking over and building new examples of obsolete or never-released kit.…

Double trouble for Microsoft as pre-owned software license claims converge

ValueLicensing (VL) has been invited to attend a case management conference in a related multibillion-pound collective action against Microsoft, according to the reseller's boss, Jonathan Horley. VL sued Microsoft for £270 million in 2021, alleging that the software giant restricted the supply of surplus Office licenses available for resale. Barrister Alexander Wolfson is the proposed class repre…

New Boeing finally gets going, 15 years after debut

Boeing on Tuesday celebrated the certification of its latest passenger plane, the 737-7 MAX, 15 years after it announced the type and seven years after the first model rolled off the production line. The US Federal Aviation Administration (FAA) certified the plane on Monday, saying its decision “reflects years of sustained work to resolve complex technical issues and complete a thorough review of…

Adding an API to networking hardware doesn’t solve management challenges

This is why cloud-inspired networks win: virtual switches are all consistent. Since opening up our draft of the 7th edition of Computer Networks: A Systems Approach for comments, we have not yet been inundated with feedback, but we did get a very helpful comment about our perspective on network operations, a subject to which we have devoted an entire chapter. Both Larry and I have learned over th…

AI researchers let models off the leash – then watched as they tried to add malware to a FOSS project

The UK’s AI Security Institute has observed AI models performing what it calls “unsanctioned action” 19 times during security tests. The Institute (AISI) revealed the incidents in a Tuesday post and technical report that details tests it conducted to see if AI models can solve a cyber security challenge. “We ran this challenge 122 times across several models,” the post states, before revealing th…

AMD's AI eggs are in too few baskets, Wall Street worries

AMD has posted strong second quarter results and forecast even better future financials once its Helios rack systems and Instinct MI400-series GPUs reach buyers. “In data center AI, the growing number and scale of Helios and MI450-series deployments position the [datacenter] business for significant growth in the second half of the year, with growth accelerating in 2027,” CEO Lisa Su told investo…

AMD Posts Proposal & Linux Patches For eSPI Subsystem

AMD has posted patches proposing a new Linux subsystem for the Enhanced Serial Peripheral Interface (eSPI) standard that was in turn originally developed by Intel. With AMD now making use of eSPI, they are proposing a new subsystem for it within the Linux kernel, which includes a new driver for their hardware...…

Tomorrow’s U.S. Senate Vote: Four Internet Bills, One Wrong Direction

The Senate Commerce Committee will vote this week on several censorious and privacy invasive bills: KOSA, the SCREEN Act, Youth AI Privacy Act, and CHATBOT Act. While we appreciate that the Committee is taking the time to look at these bills separately, it’s still impossible to ignore the message Congress is sending to the world: Age-gate the internet and block young people from speaking and acces…

An LLM agent attempts to compromise a project on GitHub

The AI Security Institute has released a detailed report on an security incident of its own making. The Institute set some LLM agents loose on the Internet with a security challenge; soon they were creating malware-laden pull requests and sock-puppet accounts to promote them. The agent opened a malicious pull request (PR) to ⟨REPO_A⟩ and pursued a number of strategies to get it merged: Repeatedly…

Appeals Court Agrees with EFF that Building a Web Browser Doesn’t Violate the CFAA

The Ninth Circuit Court of Appeals has endorsed a commonsense technical interpretation of the Computer Fraud and Abuse Act (CFAA), a law not usually given to such interpretation. Amazon had sued Perplexity AI to try to shut down its Comet browser, claiming the browser’s optional agentic AI “Assistant” that can browse websites like Amazon for comparison shopping purposes, violated the CFAA because…

Dev proves LLMs will run on anything – even a $10 microcontroller

Getting a small local language model running on a notebook or even smartphone in 2026 is trivial. But what about something even smaller and lower-power. Say, like an ESP32 microcontroller that costs less than $10? It might sound impossible — the device is primarily designed for things like remote sensors, IoT, and other embedded applications, not running generative AI models — yet, that's exactly…

OpenAI wants teachers and profs to foist their work off on ChatGPT

In the face of an epidemic of AI-enabled cheating and research suggesting its products hamper learning, OpenAI is doing the sensible thing and pushing more AI on students and teachers. Wait, did I say sensible? My mistake. The House of Altman announced a trio of new education-focused offerings on Tuesday: one for K-12 teachers, another for college educators, and a third for college students. The…

Next.js 16.3 aims to reduce dreaded FATAL ERROR messages

Next.js coders toiling on complex React applications live with an ongoing low-grade anxiety about running out of memory. It’s not dementia; it’s the software. The dev can fill RAM all day long until the JavaScript engine (often V8) chokes, causing the underlying Node.js engine to crash entirely, leaving only a “FATAL ERROR” message. Cognizant of such frustrations, the core development team behind…

Mobile Ad Software Encourages Location Data Sharing, EFF Report Finds

Developers Must Beware of Ad Libraries that Betray Users’ PrivacySAN FRANCISCO – Some software development kits (SDKs) provided by advertising companies to help developers monetize their apps are automatically feeding users’ location data into systems that location data brokers use to track people, an Electronic Frontier Foundation (EFF) report found.  EFF began investigating the location-sharing…

Developers: Beware of Ad Libraries that Betray Your Users’ Location Privacy

Across mobile platforms, advertising companies provide developers with software development kits (SDKs) that make it easy to monetize their apps. But those same SDKs can automatically feed users’ location data into ad systems that location data brokers use to track people. Many developers may not even be aware of this privacy violation, let alone the users who are directly affected. When developer…

Bypassing AI guardrails is so easy a script kiddie can do it

If you want to bypass AI guardrails designed to stop models from assisting with cyberattacks, you often just have to ask the right way, according to researchers from Cisco Talos. Simply claiming you own the servers you're targeting or that you're taking part in a capture-the-flag or bug bounty exercise was often enough to persuade models to cooperate. Talos researchers have been poring over promp…

This one time, at Hacker Summer Camp …

As the entire security industry descends on Las Vegas this week for Hacker Summer Camp – not one, but three conferences – attendees can count on two hot topics dominating the discussion. First, a literal hot topic: the triple-digit August heat. Second, and to no one’s surprise: agentic AI – how to govern and secure agents so they don’t go rogue and hack into other organizations’ servers (*cough*…

[$] Fedora considers conflict-of-interest policy

The Fedora Council is considering a conflict-of-interest (COI) policy for its decision-making bodies, such as the Fedora Engineering Steering Committee (FESCo), special-interest groups (SIGs), and any other groups or individuals that report to the council and are responsible for decisions that impact the Fedora project. The current draft does not, however, apply to the council itself. The public d…

Feds get 3 days to patch N-able God mode flaw under active exploit

The US Cybersecurity and Infrastructure Security Agency (CISA) has added an exploited N-able vulnerability to its Known Exploited Vulnerabilities (KEV) catalog, giving federal agencies three days to patch a flaw that could let attackers reach managed service provider (MSP) customers. Attackers exploiting the flaw can gain "full administrative access to an N-central console," Tracked as CVE-2026-1…

NVMe polishes its specs, brings virtualization to locally attached SSDs

The NVM Express (NVMe) specifications have been updated, gaining enhancements such as support for post-quantum cryptography, and SSD virtualization and live migration to better support virtualized environments. Announced by the NVM Express consortium, all 11 of the suite of NVMe specs have been updated with new features and engineering change notices. These represent the next step in the evolutio…

Another npm worm

StepSecurity is reporting the emergence of a new worm affecting npm packages. The design of the worm is nothing new, but the rapidity with which it is exploiting captured npm packager credentials is noteworthy. TL;DR: A self-propagating worm, which we are calling ChainDrop, is spreading rapidly through the npm ecosystem. So far 435 packages and more than 1,550 compromised versions have been flagg…

AI helps Microsoft bug hunters chase a record $20M payday

Microsoft announced this week that between July 1, 2025, and June 30, 2026, the company had paid more than $20 million in bug bounties to 562 researchers. The total was a Redmond record, as was the number of those submitting bug reports – despite having to navigate a sometimes frustrating submissions process. For comparison, the previous year's program, which itself set a new company record, paid…

Technology's Power in the Hands of the People

In the scorching heat of every Las Vegas summer, EFF joins thousands of hackers, makers, policy analysts, and activists for the world's largest computer security gathering. If you're there during this summer security week, be sure to say hello to us at BSides Las Vegas, Black Hat Briefings, and DEF CON 34. While tech companies align with governments to target the people, our community is harnessin…

AMD openSIL & Coreboot Pull Requests For Phoenix AM5 Support

Last week the 3mdeb firmware consulting firm released the first open-source firmware for a modern AMD Ryzen AM5 platform with their work to port AMD openSIL and Coreboot in their downstream Dasharo flavor to an MSI desktop ATX motherboard. Now that it's working out well, 3mdeb is working to upstream their AM5 platform support and Phoenix SoC support into upstream AMD openSIL as well as Coreboot...…

NVIDIA Becomes A Premier Sponsor Of LVFS / Fwupd

Now this is a pleasant and very unexpected surprise... NVIDIA has become the latest premier sponsor of the Linux Vendor Firmware Service (LVFS)...…

[$] The beginning of a process-builder API

The recent discussion on "spawn templates" raised questions about whether it was time to provide an alternative to the classic Unix fork()/exec() pattern for process creation. One idea that was raised there was to shift the template pattern into an interface that could be used to efficiently assemble new processes from bare cloth, without duplicating the parent process. Preferably, that interface…

How to Make a Nintendo 64 Game in 2026

Cloud giants pour nearly $600B into capex as AI demand surges

AI has turbocharged an already expanding cloud services market as organizations pour billions into online platforms offering the compute needed to train and run models, swelling the coffers of the established giants. Their latest results show revenue surging alongside capital spending as Amazon, Google, and Microsoft race to add capacity – at least until the AI bubble eventually bursts, of course…

Security updates for Tuesday

Security updates have been issued by AlmaLinux (frr, ldns, mingw-glib2, and perl-Archive-Tar), Debian (ruby2.7), Fedora (borgbackup, nebula, python-nh3, rust-ammonia, and seamonkey), Mageia (librabbitmq, libvncserver, packages, perl, perl-GD, perl-Unicode-LineBreak, squid, and unbound), Oracle (compat-libtiff3, frr, gstreamer1-plugins-good, javapackages-tools:201801, libreswan, nodejs:22, nodejs:2…

Linux Foundation Announces Tokenomics Foundation For "Economics & ROI Of AI Value"

Last month the Linux Foundation launched the x402 Foundation to standardize Internet-native payments for AI agents as their latest AI play. That followed other "AI" initiatives from dealing with AI exploits to AI asset and data exchange. Today they have another AI foray being announced with the creation of the Tokenomics Foundation...…

Tennessee congressional hopeful accused of shooting license plate cameras

An independent congressional candidate in Tennessee faces four felony vandalism charges after allegedly shooting four automated license plate reader (ALPR) cameras between July 14 and 22. According to the Blount County Sheriff's Office (site geo-restricted), Adam Lee Heimerman, 37, is accused of targeting three cameras in Blount County and one in Maryville. Local news reports citing an affidavit…

CAF Bank reopens online service but warns of further outages

CAF Bank has told customers its online banking service is back after being shuttered for more than ten days following what it described as "attempted fraud." In an email update seen by The Reg, the bank warned that access could remain intermittent, and it might "need to limit the amount of traffic to the website" at certain times. It admitted: "There are likely to be periods where online banking…

Linux's Staging Area To Now Reject LLM-Generated Patches, Except For Real Security Fixes

While Linux's second-in-command Greg Kroah-Hartman does use AI / LLMs himself to success in the Linux kernel, given the "onslaught" of kernel patches produced by large language models and the intent on the Linux kernel's staging area being an area for newcomers to get involved, moving forward he's now rejecting AI/LLM-generated staging patches. But there is one exception and that is for genuinely…

Wild Linker 0.10 Released With GDB Index Support, Mitigation For Btrfs Performance

Wild 0.10 released overnight as this very fast linker for Linux that is written in the Rust programming language and focused on iterative development...…

Linux 7.3 To Fix MSI Claw M-Center Keys For Ryzen Z2 Extreme Powered Handheld

For those with a MSI Claw A8 BZ2EM handheld gaming system, the model powered by the latest AMD Ryzen Z2 Extreme SoC, an important addition is coming to the Linux 7.3 kernel so that the M-Center keys will be properly supported...…

UK mulls making employers ask before installing bossware

The UK government is considering forcing employers in Great Britain to consult workers before rolling out "bossware," opening the door to new rules covering everything from AI-powered productivity scoring to keystroke logging and biometric surveillance. The Department for Business and Trade wants to know whether the rules governing workplace surveillance still make sense as software increasingly…

FFmpeg 9.0 Released With More Vulkan Acceleration, Animated WebP & More AMD AMF

FFmpeg 9.0 is now available as the latest feature release for this widely used, open-source multimedia library...…

Improved GPU Reset Recovery For AMD Kaveri, Hawaii & Other GFX7 GPUs With Linux 7.3

In addition to the AMDGPU feature pull request to DRM-Next last week that landed DRM format modifiers for old AMD GPUs and a variety of other improvements, a secondary set of AMDGPU feature work followed that last week in preparation for the upcoming Linux 7.3 merge window...…

The Senate Should Reject KOSA's Privacy Risks

Update: The Senate Commerce Committee voted to advance this bill on August 5, 2026. EFF continues to oppose the bill, which still needs approval from the full Senate.  The Senate Commerce Committee is once again considering legislation that would dramatically expand age verification, and undermine privacy for everyone. Alongside the SCREEN Act, the CHATBOT Act, and the Youth AI Privacy Act, the Ki…

EFF Joins 18 Civil Rights Organizations Calling on Governor Hochul to Reject the Stealth Crawler Prohibition Act

EFF joined a group of 18 civil society organizations to send a letter encouraging New York Governor Kathy Hochul to Senate Bill 9934A, the New York Stealth Crawler Prohibition Act. The letter states: While framed as a measure to protect local journalism, this legislation harms free expression and establishes a dangerous precedent by effectively deanonymizing and criminalizing automated access to t…

EFF Joins Call for FTC to Drop Its Disastrous AI Policy Proposal

The Federal Trade Commission (FTC) in July issued a proposed policy statement “concerning the suppression of accuracy in artificial intelligence systems.” We urge the FTC to withdraw this misguided proposal and instead focus on its core strengths and mission to protect consumers.  The new proposed policy builds on, and directly references, the Trump administration’s  “Preventing Woke AI in the Fed…

The Youth AI Privacy Act’s Privacy Paradox

Update: The Senate Commerce Committee voted to advance this bill on August 5, 2026. EFF continues to oppose the bill, which still needs approval from the full Senate.  The Senate Commerce Committee is poised to consider the Youth AI Privacy Act, a bill that would require AI companies to create kids-only privacy rules and implement so-called “safe design features,” which would—like three other bill…

Linux 7.3 Looks Like It Will Upstream FailFS

Merged back in Linux 7.3 was NULLFS as a "completely catatonic minimal pseudo filesystem". Now expected for Linux 7.3 is its sibling: FailFS...…

EFF at BSidesLV, Black Hat, and DEF CON 👨‍💻

It's time. Time for tinkerers, security researchers, hackers, and fellow nerds to gather together in signature black hoodies and utilikilts to beat the heat in Las Vegas for the summer security conferences: BSidesLV, Black Hat USA, and DEF CON. EFF's lawyers, activists, and technologists are excited, as always, to support this community of folks that push computer security forward. If you're atten…

Benchmarking Six Linux Distributions On The Framework Laptop 13 Pro

With the new Framework Laptop 13 Pro now shipping powered by Intel Core Ultra Series 3 (Panther Lake) and a brand new hardware design, I have spent the past week testing out various Linux distributions on this very nice high-end laptop. All of the modern Linux distributions tested have been playing nicely with this new Panther Lake laptop. Of course, beyond testing for compatibility I also took th…

Poles of Inaccessibility in the San Gabriel Mountains

The Triangle Game, from Zero

The Simple Elegance of the Integrated Timing Belt Loopback Fastener

Unearthing my 1996 windowed OS in machine code for Am29000 homebrew computer

Amending AB 1709 Doesn’t Fix It: California’s Social Media Ban Still Threatens Free Speech and Privacy

California lawmakers have amended A.B. 1709, but the core problem remains: the bill is still a ban on social media access for youth under 16, and it still threatens the privacy and First Amendment rights of all Californians. Proponents of the bill may argue that the recent amendments represent a compromise, but a close look at the text shows no major changes. As the bill moves forward in the Senat…

The SCREEN Act Threatens Privacy Far Beyond Adult Websites

Update: On August 5, 2026, The Senate Commerce Committee voted 15-13 to advance this bill, but the bill did not advance because of a lack of Senators in attendance. EFF continues to oppose the bill.  The Senate Commerce Committee is set to consider S. 737, the SCREEN Act, a sweeping age-verification bill that would require online services to verify users’ ages before they can access any sexually e…

The CHATBOT Act Forces One Parenting Model On Every Family

Update: The Senate Commerce Committee voted to advance this bill on August 5, 2026. EFF continues to oppose the bill, which still needs approval from the full Senate.  Artificial intelligence is rapidly changing education, and the way people search for information. Parents, teenagers, teachers, and schools are struggling with tough questions about when AI should, and should not, be used. It makes…

EFF Guide to Recording Law Enforcement

This post is available as a printable one page handout in English and Spanish. Recordings of law enforcement, whether by bystanders or by those directly encountering officers, can be powerful tools of government accountability and can support movements for social change. But recording officers can come with risks. Below are important legal and practical considerations related to recording the poli…

Learn how chips are made with this Rollercoaster Tycoon-inspired animation

Building progressively enhanced forms using Htmx

Read This Before You Buy That TV Streaming Stick

Security experts have been sounding the alarm for years about the risks of using generic TV boxes that promise unlimited content streaming for a one-time fee, warning that they secretly rent the user’s Internet connection out to strangers. But a groundbreaking new analysis finds these devices also routinely spoof themselves as mobile phones clicking ads on AI-generated websites as part of a sprawl…

🏃 Fitness Tracker Privacy Fails | EFFector 38.14

Watches, bands, and rings—if you want to digitally monitor your fitness, more companies than ever are selling devices to do it. And more Americans than ever now own at least one wearable health device. But what are the companies that make fitness trackers doing to protect our sensitive data from prying eyes? A lot less than they could be, it turns out. We're explaining what companies can do to pro…

Pareto Front

San Francisco: Don’t Fall for Industry Defense of Surveillance Pricing

The concept of “surveillance pricing” is just one part of a much larger problem and business model: corporations maximizing their profits by invading our privacy. The all-too-common business model is to systematically harvest, collate, and store as much of our personal data as possible, and then monetize it through use and sale. When it comes to surveillance pricing, that looks like corporations o…

Why Are Gay Bars Building Databases of Their Patrons?

Recent reports have raised alarm about the use of PatronScan, an ID-checking and face-scanning system, at multiple LGBTQ+ bars in San Francisco’s Castro neighborhood. Much of the attention has focused on reports that the system photographs patrons as they enter venues and questions about whether those images are used for facial recognition. A broader privacy concern also deserves scrutiny. For yea…

Missed EFF's Livestream with Adam Savage and iFixit? Listen Here!

EFF’s first EFFecting Change livestream was all the way back in July of 2024. Maybe you've caught each stream, or maybe you’ve only caught a few. Or maybe you’re like me and prefer to listen to conversations like these on your daily commute! Either way, if you want to stay on top of these monthly conversations, you can now subscribe to our new podcast feed for EFFecting Change—starting with our co…

Farmers Are Getting Control Of Their Equipment Back

For years, John Deere had actively made repairing their tractors near-impossible for anyone but itself and the few "authorized" repair shops—regardless of the ability of its customers to actually visit such shops. Now, in a major win for farmers and right to repair advocates, John Deere must soon provide farmers with not just the tools and resources to finally repair their own John Deere equipment…

Hundreds of Drone-as-First-Responder Programs Could Soon Be Launched Across the Country

Police departments across the country are lining up to launch drone-as-first-responder (DFR) programs, and hundreds have cleared a necessary hurdle toward making deployment a reality, expanding aerial surveillance and data collection even in areas patrol officers typically can't reach. As of February 2026, over 1,000 public safety agencies—including police, fire, and other emergency management age…

The Fourth Circuit Says Border Agents Can Search Your Phone By Hand, No Suspicion Required

Legal intern Suzanne Castillo was the principal author of this post. The Fourth Circuit issued a disappointing opinion in U.S. v. Belmonte Cardozo, a case in which EFF filed an amicus brief, alongside the national ACLU, its Maryland, North Carolina, South Carolina, and Virginia affiliates, and the National Association of Criminal Defense Lawyers (NACDL). We argued that electronic device searches a…

New EU Court of Justice Ruling on Platform Liability Could Cause Collateral Damage to Freedom of Expression

Intermediary liability laws around the world recognize that social media platforms, search engines, and other online service providers have become an integral part of our lives: they shape how we access information, communicate with others and participate in public debate, and foster innovation online. These laws generally shield platforms, to varying degrees, from legal liability for user content…

LG to Ban Residential Proxies from Smart TV Apps

The home appliance giant LG Electronics USA said this week it plans to suspend any apps built for its smart TVs that turn one’s television into an always-on residential proxy node. The move comes less than a month after researchers found that more than 42 percent of games and other apps available for download on LG’s webOS store allow unknown third-parties to route their Internet traffic through a…

Protect Your Privacy with California's DROP Tool

Are you a California resident? Then we've got exciting news for you: there's a tool just for you that lets you take a single, relatively easy step to protect your privacy.  It's called a DROP request. (That's Delete Request and Opt-out Platform, if you're fancy). This one bit of paperwork lets you tell every data broker registered in the state of California that you'd like them to delete your info…

An Explosion of Surveillance Towers is Coming to U.S. Borders, Costing Over $1 Billion

A new report from the Government Accounting Office reveals that the Department of Homeland Security (DHS) plans to nearly triple the number of surveillance towers along U.S. borders, from the current 830 to 2,300 by 2034. DHS expects to expend $1 billion in taxpayer dollars for this dangerous expansion of a surveillance network indiscriminately trained on towns, school playgrounds, backyards, and…

“Stealth Crawlers” Are Not a Threat to the Open Web. Bills Targeting Them Would Be.

There’s a new boogeyman in the battles over AI: so-called “stealth crawlers.” We’ll admit it—the term “stealth crawlers” sounds quite nefarious. In reality, they’re anything but. “Stealth crawlers” are simply automated tools to access and collect public web data—without disclosing the user’s identity. Private crawlers like these facilitate all kinds of important work that benefits the public, incl…

Victory! Flock Ends Rollout of Audio “Distress Detection” of Human Voices

Reversing course, Flock Safety—the surveillance technology vendor most known for its extensive network of automated license plate readers—has announced that it will end a pilot for its acoustic gunshot detection devices to identify signs of “human distress.” ...public pressure can sometimes work to influence both companies and lawmakers that control a city’s purse strings to discontinue or divest…

Your Vision. Your Legacy. Your Future.

This month, we celebrate 36 years of EFF and a mission that is bigger than any one of us. Thanks to EFF, communities around the world are demanding that technology protects their freedom, advances justice, and opens doors to opportunity. That's not a small thing—it's a life's work worth continuing. If you are committed to staying on the cutting edge of digital rights issues, I'd like to invite you…

How the Watch Dogs Video Game Series Mirrored and Predicted Real-World Digital Rights Issues

When Ubisoft's Watch Dogs 2 was released in 2016, it was a headtrip for those of us working on digital-rights issues in the Bay Area. During the day, I'd fight tech-authoritarianism from EFF's San Francisco offices and then, at night, I'd fight tech-authoritarianism in an uncanny simulation of San Francisco from my home gaming console.   Watch Dogs 2 is an open-world video game that follows a hack…

EFF and ARTICLE 19 Submission to the European Commission on the DSA Trusted Flagger Guidelines

EFF and ARTICLE 19 have submitted joint comments to the European Commission on draft guidelines for the Digital Services Act’s trusted flagger mechanism. Having long advocated for a DSA that protects freedom of expression while preserving intermediary liability protections and the prohibition on general monitoring, we welcome the Commission's effort to provide practical guidance on how the trusted…

California Steps Back From Dangerous Expansion of its Age-Gating Law

The California legislature has stepped back from a plan that would have expanded its age-gating law, removing language that could have compounded serious threats to users’ speech, privacy and security just to browse the internet. A.B. 1856, authored by Assemblymember Buffy Wicks, will now move forward through the legislature without its most problematic pieces. EFF still believes the underlying la…

Most Smart Watches, Rings, and Bands Lack Basic Transparency Reports and Key Privacy Features

Oura Rings, Garmin GPS fitness watches, Apple Watches, Whoop bands—every year, more and more tech devices are promising to monitor our health and fitness, guide us toward healthier living, and provide useful health metrics to take to our doctors. But few of these tools provide the sorts of privacy and security promises we demand from all technology, let alone tech that captures personal health dat…

🚫 Don't Let Congress Age-Gate the Internet | EFFector 38.13

The effort to age gate the internet is back in Washington—and now it has a new name. Recently passed by the House of Representatives, the KIDS Act is a sprawling package of proposals to control what we can see and say online. Supporters claim the KIDS Act is needed to protect minors online. But if lawmakers really want to make the internet safer, why are they encouraging more surveillance instead…

European Court: Apple Can Not Shirk Off its Interoperability Requirements

One of the best bulwarks against monopoly is interoperability—that is making a new product or service work with an existing product or service. Interoperability allows users, and not the manufacturers of their devices or largest player in a market, to decide what application best serves them. Unsurprisingly, companies like Apple have worked hard to resist interoperability requirements.  On July 8,…

Don’t Repeat NY’s 3D Printing Blunder

This year the state of New York had the dubious honor of being the first to pass a controversial provision to mandate all 3D printers come with surveillance and censorship. That means not only is there a ticking clock to protect every artist, researcher, engineer, and hobbyist in the state, but there is a real risk of other states thoughtlessly following suit—prior to the New York rules even takin…

Microsoft Patches a Record 570 Security Flaws

Microsoft Corp. today released software updates to plug at least 570 security holes in its Windows operating systems and other software, almost triple the number of vulnerabilities the software giant fixed in its record-smashing Patch Tuesday release last month. Microsoft attributed the burgeoning patch counts to vulnerability discoveries aided by artificial intelligence. Nearly 60 of the bugs qua…

Sony Nerfs Videogame Ownership

Legal intern Suzanne Castillo co-authored of this post. Playstation’s decision to kill physical game discs is the latest attack on our diminishing rights to access and engage with culture digitally. Rent-seeking corporations and negligent lawmakers share the blame — and they can do better.  We’ve seen the same playbook used in the move to digital distribution of  film, TV, and music: draw in custo…

Lessons Learned from CISA’s Recent GitHub Leak

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a postmortem on a recent data leak in which a contractor published dozens of internal CISA credentials — including AWS Govcloud keys — in a public GitHub repository for almost six months before being notified by KrebsOnSecurity. Experts say the gaps identified in the agency’s initial response provide important lessons that all…

Building Our Future Together

In my first weeks as Executive Director of EFF, I’ve been reminded every day how consequential this moment is in determining what kind of future we will have. We are on the edge. What each one of us steps up to do – with our expertise, energy, and resources – will determine whether our future is one of openness, security, and fundamental rights, or one controlled through fear, surveillance, and ce…

Automated Moderation Is Here to Stay—Accountability Must Keep Pace

This post is part 2 in a series about automated content moderation. Read the first post here. When whistleblower Frances Haugen leaked a set of documents from Meta in 2020, among the revelations was a jarring statistic: The company’s algorithms designed to detect terrorist content incorrectly deleted nonviolent Arabic-language content 77 percent of the time, while failing to detect hate speech und…

"We Want Texans to Know Their Rights": Q&A with Mayday Health on the Impact of Surveillance on Abortion Care

Last May, EFF reported that a sheriff’s office in Texas searched data from more than 83,000 automated license plate reader (ALPR) cameras to track down a woman suspected of self-managing an abortion. ALPRs are promoted as tools for keeping communities safe by finding missing persons and locating stolen vehicles, but this case showed how ALPRS can be weaponized to investigate people’s private healt…

The House Passed The KIDS Act—The Senate Should Reject It 

Last week, the House voted on the KIDS Act, a disjointed package of legislation that seeks to control Americans’ web browsing and private messaging. The package combines a revised version of the Kids Online Safety Act (KOSA), with several other internet bills, study bills, reporting requirements, and new regulations. Different parts of the bill pressure online services to impose different age-gati…

European Commission Chooses to Keep EU Users Locked Up Behind Big Tech’s Gates

Users are always seeking more control over their social networking experience to make it better, whether to improve privacy or enhance flexibility. Interoperability between social networking platforms like Facebook and TikTok has so many benefits that solve those issues.   Say you’re on multiple platforms because you have friends you follow on different networks, but you’ve decided to choose one p…

Google's New Remote Attestation Scheme is As Bad As Its Old One

Google owes its existence to the open web, but today, its technological “innovations” have much to do with locking users into a “walled garden.” The latest of these is “reCAPTCHA Mobile Verification,” an experimental initiative that will let companies block users if they are running independent, "de-googled" versions of Android. These “indie Android” versions are favored by people who want to prot…

Felons, Fraudsters Flog Offensive Cybersecurity Startup

A cybersecurity startup dangling millions of dollars to acquire zero-day security vulnerabilities in popular software is run by a pair of far-right conspiracy theorists and convicted felons whose most recent ventures included fake intelligence companies and a now-defunct AI-based lobbying platform they operated under assumed names. The X/Twitter account IRIS C2 (@C2IRIS) has gained more than 4,000…

Automated Moderation Is Here to Stay

This blog post is part 1 of a 2-part series. The second part sets out recommendations for companies and policymakers.Six years ago—one month into a global pandemic—we argued that the automated moderation processes many platforms were rapidly adopting should be highly transparent, easily appealable, and temporary. We warned that "protocols adopted in times of crisis often persist when the crisis is…

Help EFF Cut the AI Hype

In the global race to build and dominate the AI industry, it can sure seem like the interests of ordinary people sit last on the agenda. It's just the opposite for EFF. While companies furiously jam AI tools into their veins and your eyeballs, EFF’s technologists, activists, and attorneys have been meticulously cutting through the hype to ensure AI can serve your privacy and free expression. Techn…

FBI Seizes NetNut Proxy Platform, Popa Botnet

The Federal Bureau of Investigation (FBI) said today it worked with industry partners to seize hundreds of domains associated with NetNut, a sprawling residential proxy service operated by the publicly-traded Israeli company Alarum Technologies [NASDAQ: ALAR]. The action comes roughly two weeks after KrebsOnSecurity published findings from multiple security firms connecting NetNut to the Popa botn…

LGBT Q&A: How Can I Wipe Online Data That Points To My Queer Identity?

This Pride, we’re answering all your digital rights questions in season two of our initiative, LGBT Q&A.  You Asked: Is there a way for me to wipe data about me online that could point to my queer identity? EFF’s Answer: You cannot protect everything all the time, but there are ways to wipe information about yourself online.  Most information available about you online will typically be found in t…

EFF and Allies: X’s FTC Petition to Waive Privacy Violation Order Should be Rejected

X Corp. should not be able to escape privacy compliance because it changed its name.  On May 15, X Corp. filed a petition before the Federal Trade Commission (FTC) to set aside or modify an order issued in 2022 requiring the company to report regularly to the FTC for its violations of user data. The order or “consent decree” is a result of misleading the platforms’ 140 million users by using priva…

LGBT Q&A: What Data Are Companies in the UK Collecting When Verifying My Age?

This Pride, we’re answering all your digital rights questions in season two of our initiative, LGBT Q&A.  You Asked: I live in the UK, and we have age verification now on a bunch of websites (including Reddit) and now on iPhones. Can you explain what sort of data companies are actually collecting when they check for age and whether there are any real threats to my safety?  EFF’s Answer: Age verif…

EFF to Gov. Pritzker: Veto Illinois’ HB 5511

The Illinois legislature recently passed House Bill 5511, which imposes a sweeping, device-level age-gating framework across nearly all internet-enabled hardware, operating systems, and online services. This well-intentioned but deeply flawed piece of legislation will harm young people who rely on the internet to access essential information and find community. That’s why we’re urging the Illinois…

Victory! Supreme Court Says Constitution Protects People’s Location Data

You have an expectation of privacy in location data that reveals your movements in the physical world, and even short-term surveillance of these movements is a search subject to the Fourth Amendment, the U.S. Supreme Court ruled today in Chatrie v. United States.   The case involved geofence warrants, a form of dragnet surveillance police have used to vacuum up location data from electronic device…

EFF to Grindr: This Pride Month, Put Safety and Privacy Over Profits

This Pride month, we’re calling on the dating app Grindr to prioritize LGBTQ+ user safety by making privacy the default across its platform. That means no more sharing personal data with advertisers or training AI on private information without users’ opt-in consent. Grindr is a dating app for the LGBTQ+ community; and for queer people, privacy violations can have life-altering consequences. Infor…

Hate “The Algorithm?” RSS Is One of the Tools You’ve Been Looking For

Poke your head into just about any online social network—or any general conversations about internet culture—and you’ll likely find a boogieman: the algorithm. Since at least the moment Facebook introduced (and apologized for) its News Feed, “the algorithm” has been shorthand for the ways the tech giants control what we see and when we see it. In the age of enshittification, there is a push to rec…

Scattered Spider Hackers Plead Guilty on Day 1 of Trial

Two men pleaded guilty in the United Kingdom this week to criminal charges stemming from an August 2024 cyberattack that crippled Transport for London, the entity responsible for the public transport network in the Greater London area. The duo were key members of a prolific cybercrime group known as Scattered Spider, and their guilty pleas came on the first day of what was expected to be a six-wee…

‘Popa’ Botnet Linked to Publicly-Traded Israeli Firm

For the past four years, a sprawling Android-based botnet called Popa has forced millions of consumer TV boxes to relay Internet traffic linked to advertising fraud, account takeovers, and mass data-scraping efforts. This week, researchers from multiple security firms concluded that the Popa botnet is linked to NetNut, a “residential proxy” provider operated by the publicly-traded Israeli firm Ala…

Who Runs the Ransomware Group ‘The Gentlemen?’

A cybercrime group known as The Gentlemen has emerged as the second most active ransomware gang by victim count, rapidly attracting a talented pool of hackers through an aggressive recruitment strategy that promises affiliates 90 percent of any ransom paid by victims. This post examines clues pointing to a real life identity for the administrator of The Gentlemen ransomware group. A graphic create…