Terminal

Mickey Mouse Sells a Bundle

AI Companies Are Buying Tons of Old Books Because They're Free of AI Slop

An anonymous reader quotes a report from 404 Media: As AI companies search for more training data to improve their models, one company is offering old, printed books as an ideal source because they are guaranteed to be free of the very AI slop AI companies are producing. "The world's best AI training data is sitting on a shelf," ISBNdb, a company that produces what it claims is "the world's larges…

OpenAI and Hugging Face partner to address security incident

'VPNs are lawful technical tools,' says EU Court in landmark copyright ruling

US Marines' latest anti-drone toy is an AI turret that uses regular machine guns

The US military is adding autonomous gun-based counter-drone systems intended to reduce its reliance on expensive interceptor missiles. They also have the potential to kill humans. Defense robotics firm Allen Control Systems (ACS) announced a deal with the US Marine Corps on Monday to get its Bullfrog autonomous weapon system attached to the Light Marine Air Defense Integrated System (L-MADIS) ex…

Nintendo customers have no legal right to tariff refunds, company tells judge

Nintendo urged a court to dismiss a lawsuit demanding that it pass tariff refunds on to customers, saying that people who bought a Switch console or other products have no legal right to refunds that Nintendo is due to receive from the government. Nintendo said in a motion to dismiss yesterday that plaintiffs are "ask[ing] this Court to invent a legal duty out of whole cloth to retroactively re-p…

Canonical Launches Enterprise Store For Ubuntu Pro

BrianFagioli writes: Canonical has launched the Enterprise Store as part of Ubuntu Pro, giving organizations a way to manage Ubuntu software distribution in restricted networks, behind firewalls, and in air gapped environments. The on premises proxy sits between devices and Canonical software stores, allowing companies to cache downloads, control software revisions, and manage snaps and charms wit…

Advertise in ChatGPT

The Price of Happiness (2024)

Slater – Low-memory graphdb designed for read-heavy graphs

FreeInk: Open ecosystem for e-readers

Iran says it's struck offline AWS facility in Bahrain ... again

Iran's Islamic Revolutionary Guard Corps (IRGC) claims it hit an AWS datacenter in Bahrain months after taking it offline for the first time, in a move it claimed as retaliation for a US attack on a nuclear plant that was under construction. The IRGC said in a statement on Tuesday that it had struck back at what it called the "child-killing US Army" by attacking Amazon infrastructure in Bahrain,…

AI Agent – TRMNL

Apple has decided to compete for creativity app users

Show HN: A self-running space economy SIM in Rust and Bevy

Cheap self-hosted Kubernetes on Hetzner cloud (2025)

Let Tom Hiddleston be your guide to Pompeii's final day

When Mount Vesuvius erupted in 79 CE, it spewed molten rock, pumice, and hot ash over the cities of Pompeii and Herculaneum, killing thousands of people. It's one of the most famous natural disasters in human history, so naturally there have been countless documentaries about Pompeii (and at least one popular song). But only one features actor Tom Hiddleston taking on the role of a "time detectiv…

Three New Ubuntu Snap Vulnerabilities Made Public - One Dates Back To Ubuntu 16.04 LTS

Canonical today disclosed three new Snap security vulnerabilities affecting snapd. Two are rated high impact vulnerabilities while the third is considered medium but covers all Ubuntu releases of the past decade going back to Ubuntu 16.04 LTS...…

Judge Approves $1.5 Billion Anthropic Settlement Over Pirated Books Used To Train Claude

A federal judge has approved Anthropic's $1.5 billion copyright settlement over pirated books used to train its Claude chatbot, with authors and publishers set to receive about $3,000 per book. The case produced a mixed ruling for the AI industry: training on copyrighted books was found not to be illegal, but Anthropic's use of pirated copies from shadow libraries was. The Associated Press reports…

Greedy is optimal for single-pass semi-streaming matching

Apple Private Cloud Compute SoC 3 audit reports

Naked mole-rat queens use a chemical signal to suppress fertility in rivals

Naked mole rats are weird. They spend their lives almost entirely underground, are largely insensitive to some kinds of pain, can persist without oxygen for a long time, rarely develop cancer, and can live past 30 years, which is decades longer than similarly sized rodents. They are also eusocial, like ants, bees, or termites—in a colony that can hold more than a hundred animals, only one female,…

Qualcomm Posts Linux Patches For X2 Elite Extreme Powered ASUS Zenbook A16

Following recent Linux kernel patches enabling the Snapdragon X2 Elite powered Lenovo Yoga Slim 7x Gen11 and HP EliteBook X G2q X2 Elite laptops to boot outside of Windows 11 on ARM, Qualcomm engineers have now posted a new patch series for getting the X2 Elite Extreme powered ASUS Zenbook A16 working on Linux...…

Anthropic’s $1.5B copyright settlement approved; only 350 authors opted out

On Monday, a judge approved a $1.5 billion settlement between Anthropic and authors, ending the largest copyright class-action ever certified and granting the largest copyright settlement ever reached. Back in May, some authors fought to block the settlement, which was proposed after the court ruled that Anthropic training AI on books was fair use; however, its piracy of works was likely not. Aut…

Laguna S 2.1

Jack Dorsey launches Buzz to combine team chat, AI agents and Git hosting

Sales of Valve's Steam Deck crater after recent price hike

Since its 2022 launch, the Steam Deck has consistently been at or near the top of the company's "top selling products by revenue" charts, with brief dips outside of the top 10 treated as newsworthy events. But sales of the popular handheld gaming PC have apparently been on a steep decline since the system relaunched at a higher price in May. Linux-focused gaming site Boiling Steam breaks down the…

Show HN: CodeAlmanac – Karpathy-style codebase wiki from your conversations

Uhubctl – control USB power per-port on smart USB hubs

Meta's AI models are powering the first wave of Genesis Mission projects

Bloomy (YC S26) is hiring a founding engineer

AT&T Loses Key Ruling In Bid To Stop Offering Basic Phone Service In California

A federal judge rejected AT&T's request to temporarily block California rules requiring it to offer basic phone service to new customers in its wireline territory. AT&T wants to retire its copper-based phone network and stop service for nearly 200,000 California customers in 2027, but the state argues the company can meet its obligations with modern alternatives like fiber rather than abandoning C…

Google announces Gemini 3.6 Flash and cybersecurity AI, teases 3.5 Pro and Gemini 4

Google announced a significant evolution of its AI models at I/O in May with the release of Gemini 3.5 Flash, and it's not slowing down. The company revealed three new AI models today, including its first version of Gemini geared toward cybersecurity. However, none of the new models is the delayed Gemini 3.5 Pro, which was supposed to launch in June. Gemini 3.5 Flash, which was the star of the sh…

Oracle faces $100M annual bill to back Wisconsin datacenter power promises

Oracle says that it could face more than $100 million a year in financing costs to guarantee the power commitments behind a nearly 1 GW datacenter campus it is developing in Wisconsin with Vantage and OpenAI. Local regulators have refused to revisit a decision that they say protects existing customers and improves public transparency around the energy-related needs of datacenters. Oracle's plans…

Kratos phishing-as-a-service kit loses its battle with international law enforcement

German authorities say they have neutralized the main infrastructure supporting the Kratos phishing-as-a-service (PhaaS) kit following an operation supported by the US and Indonesia. Officers from Frankfurt am Main's Central Office for Combating Internet Crime (ZIT) and the Federal Criminal Police (BKA) described Kratos as one of the most widespread and dangerous PhaaS kits on the market. In Indo…

The World's 2,400 Castles

France's Anssi Will Block PQC-Free Products from Certification Starting 2027

Judge Pauses Paramount-Warner Bros Merger

A federal judge has temporarily paused the Paramount-Warner Bros. merger after a 12-state coalition led by California argued the deal would violate antitrust law. The 14-day restraining order (PDF) preserves the status quo while the court considers a preliminary injunction, which could effectively determine whether the merger survives. Variety reports: "Plaintiff States' showing at least demonstra…

KDE Plasma 6.7 vs. GNOME Shell 50.3 vs. Xfce 4.20 On CachyOS With NVIDIA Graphics

Earlier this month I provided a look at the KDE Plasma 6.7 Wayland vs. X11 session performance for graphics/gaming on CachyOS using NVIDIA GeForce RTX 50 graphics. Since then Phoronix readers -- including some premium supporters -- requested seeing some additional desktops tested with the latest CachyOS packages. So here we are now with seeing how KDE Plasma 6.7 compared to the Wayland-only GNOME…

Long presumed dead, a thriving coral reef is discovered in West Africa

Canonical Makes The "Enterprise Store" Official For Offline/Air-Gapped Ubuntu Usage

For months the Enterprise Store "enterprise-store" has been mentioned in some Ubuntu documentation and other elements while today it was formally announced by Canonical. The Enterprise Store is for helping to manage Ubuntu Linux deployments particularly within enterprise organizations that may have their computers air-gapped or otherwise strict Internet controls...…

TreeSize won't renew perpetual-license support unless users subscribe

The company behind the disk space analyzer TreeSize has irked some users by no longer offering support or updates for perpetual licenses beyond their maintenance period unless customers subscribe. Further frustration has come from JAM Software's long-standing policy of not providing license keys or installers to TreeSize perpetual license holders after that support period ends. Since 2025, JAM So…

Gemini 3.6 Flash, 3.5 Flash-Lite, and 3.5 Flash Cyber

Firefox 153 released

Version 153.0 of the Firefox web browser has been released. Notable changes in this release include a change to the default local-file-access permissions for extensions, enabling LAN restrictions by default for all users, a visual indicator when a web site has access to the user's location, the ability to merge PDFs and add images as pages within PDFs, as well as experimental support for the JPEG…

The Galaxy Card Is Samsung's Answer To the Apple Card

An anonymous reader quotes a report from Wired: Nearly seven years after Apple debuted the Apple Card, Samsung is following the iPhone maker's footsteps with the Galaxy Card, aiming for its own slice of the credit card market. The announcement comes two days before Samsung's second Galaxy Unpacked event of the year, where it's expected to showcase new smartwatches and folding smartphones. The Gala…

Nvidia shows off Vera Rubin platform for tokenmaxxing

Last week, Nvidia invited a handful of journalists to a briefing about AI infrastructure to help convey the physical reality behind simulated intelligence. "Infrastructure is physical, it's real," said Ian Buck, general manager of Nvidia's hyperscale and HPC computing business. "You can touch it, you can see it, and it's what helps bring AI to life. So that is part of the goal here." The briefing…

Apple defeats liability for not scanning iCloud for CSAM

Windows 11 Start menu changes trickle into Beta, movable taskbar still MIA

Microsoft is moving more of its redesigned Start menu into the Windows 11 Beta channel, although the long-awaited movable taskbar remains confined to experimental builds. Build 26220.8925 was released last night to Windows Insiders in the Beta channel and has "a number of improvements for the Start menu," including controls for its size and sections. The Start menu has gained small and large size…

PCjs Machines

[$] Debating the role of large language models in the kernel community

Like many development communities, the kernel community has been struggling to determine how large language models will be used in its development process. The news has been dominated recently by a strongly worded missive from Linus Torvalds on the subject, but the discussion has been rather more wide-ranging and nuanced than that. Topics that have been considered recently include the LLM attribut…

AI music platform Suno hits bum note as 55M users exposed in data breach, claims infosec expert

A data breach at AI music generator platform Suno exposed more than 55 million user accounts, according to Troy Hunt's Have I Been Pwned service, which ingested the files. The dump consisted mostly of email addresses, although phone numbers were also included where users had signed up with them instead, HIBP said. Tens of thousands of Stripe records further revealed data such as names, physical a…

When your vehicle outlives its cloud: What happens next?

Do you use your vehicle’s app to pre‑cool the cabin on a scorching day, confirm the doors are locked from bed, or have the car automatically call for help when the airbags go off? Savor those connected, cloud‑based conveniences while you can—the clock is already ticking on their obsolescence. In a few short years, you may be driving today’s vehicle without many of the features you currently enjoy…

Stratis Storage Anaconda Integration Approved For Fedora 45

The Fedora Engineering and Steering Committee (FESCo) has approved the latest batch of features for the upcoming Fedora 45 release...…

Security updates for Tuesday

Security updates have been issued by AlmaLinux (capstone, fence-agents, gimp, glib2, hplip, httpd, jackson-annotations, jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base, libtiff, maven:3.8, pacemaker, python3.14, and webkit2gtk3), Debian (samba), Fedora (c-ares, dnsx, freerdp, gpsd, libreswan, libseccomp, libtiff, mingw-python-idna, mingw-python-pip, openssh, pytho…

Apps targeted at US troops contain Chinese and Russian code

A recent examination of hundreds of mobile apps marketed toward US military personnel found more than one in eight contained software built by companies in China, Russia, or other foreign nations, raising fresh concerns that adversary governments could harvest data revealing where service members live, work, and deploy. According to researchers at Purdue University, the US Military Academy at Wes…

2027 Kia Seltos first drive gives you plenty of SUV for not much $

Kia provided flights from Washington, DC, to Orange County, California, and accommodation so Ars could drive the Seltos. Ars does not accept paid editorial content. NEWPORT BEACH, Calif.—Although it sometimes feels like automakers have all but abandoned everything other than high-end luxury model vehicles, it's not universally true. While some car companies have lobbied the government, terrified,…

Intel fortifies Foundry with an actual customer: Fortinet

Fortinet on Tuesday revealed it will use Intel Foundry to fab its sixth-gen Security Processor (SP6), a nice win for Chipzilla's sputtering chipmaking biz. The chips feature dedicated accelerators designed specifically for the security and cryptographic operations required by modern hardware firewalls. The custom chips are one of Fortinet's defining features. Many cybersecurity hardware players b…

LG monitors are using Windows 11 feature to serve adware

LG has come under fire over its Monitor App Installer, which is automatically and silently installed when plugging in some of the company's monitors. In this case, the monitor in question is a new LG UltraGear. Upon first connection to a Windows 11 device, the OS can check the associated device metadata and automatically install the manufacturer's UWP device app. For that to happen, Microsoft say…

UK.gov's tech department gets the chop after two years

The UK government is scrapping the department charged with leading digital and tech change across the public sector. The Department for Science, Innovation and Technology (DSIT) – created by former Conservative Prime Minister Rishi Sunak – will see its responsibilities split among other departments after Science Secretary Liz Kendall was axed by new Labour Prime Minister Andy Burnham. The Departm…

AMD Ryzen AI Halo LED Driver Queued For Introduction In Linux 7.3

For those that have picked up one of the neat AMD Ryzen AI Halo mini PCs, the LED driver allowing for customization of the LED lighting bar is set to be mainlined for the Linux 7.3 kernel cycle...…

Valve's Steam Frame pushes Arch Linux toward official Arm64 support

Valve and Collabora are building an Arm64 port of Arch Linux for the Steam Frame VR gaming platform, with hopes that the work will eventually feed into the upstream distro. Arch Linux has spawned a whole family of derivatives, but the official upstream distro targets 64-bit x86 and nothing else. As the homepage says: "Currently we have official packages optimized for the x86-64 architecture." Val…

US Police Now Armed With Israeli Spy Vans Simulating Mobile Phone Towers

Longtime Slashdot reader schwit1 quotes an X post by Josh Walkos, author of the Substack We the Free: If you thought Flock was bad check out Falconet. Falconet from Israeli company Cognyte serves as a cell tower simulator that intercepts cell phone data from all devices within range. Police mount these systems in Tahoes so the vehicles can collect information while driving through areas without an…

Viking 1 landed on Mars 50 years ago

It has been half a century since NASA landed on Mars with the Viking 1 lander. Viking 1, one of a pair of Viking spacecraft, landed on Mars on July 20, 1976. Launched on August 20, 1975, Viking 1 arrived in orbit around Mars on June 19, 1976. The Viking program is, when adjusted for inflation, one of the most expensive robotic missions ever attempted by NASA. The spacecraft consisted of an orbite…

Intel Compute Runtime Continues Building Out Exciting "LEO"

Going in-step with last week's release of the Intel Graphics Compiler 2.38.2, out today is the Intel Compute Runtime 26.27.39122.11. Most intriguing with the new release is Intel continuing to build out the still-experimental LEO feature...…

AMD Getting The Linux Kernel Ready For Zen 6 Profiling/Perf With More EILVT Registers

Among the recent patch series in preparing Linux for upcoming AMD Zen 6 processors is making the kernel aware of additional EILVT registers to be found with at least EPYC Venice platforms...…

Scalding hot AI accelerators have put datacenters in hot water. Two-phase cooling could chill them out

Liquid cooling makes it possible to operate multi-kilowatt accelerators and ultra -dense datacenter racks, but new research commissioned by startup Accelsius suggests that we've been using the wrong liquids for the job. The company found different cooling fluids can shave millions off datacenter operating costs by allowing bit barns to run their water systems up to 14° C higher than existing syst…

InputPlumber 0.78 Released With Expanded Hardware Support

InputPlumber is out with its newest feature release. As a reminder, InputPlumber is the open-source input router and remapper daemon for combining various input devices from gamepads to mice and keyboards as well as the ability to emulate them...…

Some Mullvad VPN customers tunnel for exit after co-founder donates millions to populist party

Swedish VPN vendor Mullvad is facing a backlash from some customers after co-founder Daniel Berntsson personally donated SEK 5 million (£385,000, $519,000) to the controversial populist Örebropartiet, which is running in Sweden's national elections for the first time. Berntsson has this week published a blog post explaining the donation, alongside posts titled "Immigration," "Political individual…

Qwen-Image-3.0: Rich Content, Authentic Details, Deep Knowledge

Judgment day looms for UK's £8.35B Skynet military satellite comms upgrade

The UK government's projects authority has sounded the alarm over progress on Skynet 6, the estimated £8.35 billion program to upgrade the military's satellite communications. The National Infrastructure and Service Transformation Authority (NISTA) rated the Skynet 6 project red, which means "successful delivery of the project appears to be unachievable" in its current form. The definition cites…

Drinking 5 Cups of Coffee a Day Could Reduce Heart Risk

A new American Heart Association scientific statement concludes that up to about 400 milligrams a day, or roughly three to five cups of plain coffee, is safe for most adults and may be linked to lower risks of cardiovascular disease. The benefits appear to depend heavily on the source and preparation, with coffee and tea looking more favorable than energy drinks, and added sugar, cream, syrups, or…

Europe slaps AliExpress with €550 million fine for selling dodgy goods

The European Commission yesterday fined Alibaba subsidiary AliExpress €550 million ($630m/ £467m) for not doing enough to stop selling dodgy products - the largest ever fine issued under the Digital Services Act. AliExpress is Alibaba’s consumer-facing e-commerce brand and complements the parent company’s B2B biz. Brussels last year warned AliExpress that it wasn’t doing enough to stop sellers on…

Google Cloud outage shows it’s still hard to understand hyperscalers’ real resilience regimes

Google Cloud last week experienced an outage that analysts say demonstrates that not all promises of cloudy resilience are created equal. Google’s incident report explained that three services – the VMware Engine (GCVE), NetApp Volumes, and Bare Metal Solutions (BMS) – experienced a 15-hour outage due to a cooling failure in its europe-west4-a zone. The report includes the following detail: “The…

OVH reveals semi-secret plan to fix critical Januscape hypervisor bug with mass reboots – and an Australian crash-test dummy

French cloud operator OVH has revealed it used its Sydney, Australia, datacenter as the crash test dummy to test a rapid rollout of a fix for the critical Januscape guest-host escape bug in the Linux kernel-based virtual machine (KVM). Januscape, aka CVE-2026-53359, allowed attackers with root access to a guest VM to execute code as root on the host, crash that machine, or take over all other gue…

Hackers Are Exploiting Recently Patched WordPress Bugs, Putting Millions of Websites at Risk

An anonymous reader quotes a report from TechCrunch: Hackers are breaking into websites that run vulnerable versions of the popular blogging software WordPress, according to several cybersecurity firms. One estimate puts the number of vulnerable WordPress websites at tens of millions as of Monday. Last week, WordPress patched two critical security flaws, urging people who run its software on their…

Cold Reset Recovery Coming Together To Better Help Intel GPUs On Linux

One of the patch series going through nearly a dozen revisions now is for introducing a cold reset recovery method for the Direct Rendering Manager (DRM) drivers with an initial focus on the Intel Xe kernel graphics driver...…

New Orleans Cops Published Policy Document Allowing Weaponized Drones

A draft New Orleans Police Department drone manual briefly published online would have allowed police drones to carry weapons with written approval from the superintendent, according to 404 Media. NOPD says the document was only an early draft and that its current policy (PDF) bans drones from carrying weapons or hazardous materials. 404 Media reports: The current version, live as of July 1, has d…

Longtime Web-Weirdness Site Fark Faces Ad Pinch

sandbagger writes: Fark.com is ancient in internet terms. It's not social media. It's not quite a news site. It's a holdover from the dot-com era and is invisible to Google, which makes its community great but has necessitated begging. "[W]e won't survive this year without more TF subscribers," wrote founder Drew Curtis in a post on Bluesky. "Spread the word." For the unfamiliar, Fark is one of th…

DA: Cop covered bodycam to snap nude prisoners on his iPhone—but other cams caught him

On March 31, 2026, a rather odd complaint arrived at the Bucks County, Pennsylvania District Attorney's Office. It came from the local sheriff's office, and it concerned one of their own, Deputy Sheriff Ryan Gaffney. The allegation was unusual: Gaffney had used his iPhone to snap photos of nude prisoners he had encountered in his job—and he had then shared those photos with "several female civili…

Attackers pummel critical WordPress vuln to create all sorts of mischief

If you use WordPress, patch now. Just hours after fixes came out, attackers have begun exploiting two bugs that, when chained together, allow pre-authentication remote code execution (RCE). And security researchers tell us there’s a very good chance the miscreants had an AI assist. “Once the vulnerabilities were publicly disclosed, reproducing them with the help of frontier AI models was only a m…

Firefighting drones in the works as wildfires plague US nearly year-round

Drones capable of spraying water and fire retardants have been practicing how to snuff out wildfires early in California and Alaska this summer—demonstrating a possible rapid-response tool for firefighting as climate change transforms wildfire season into a nearly year-round risk for much of the United States. Most drones are significantly smaller than crewed aircraft and have shorter flight rang…

Protect Your Privacy with California's DROP Tool

Are you a California resident? Then we've got exciting news for you: there's a tool just for you that lets you take a single, relatively easy step to protect your privacy.  It's called a DROP request. (That's Delete Request and Opt-out Platform, if you're fancy). This one bit of paperwork lets you tell every data broker registered in the state of California that you'd like them to delete your info…

Judge halts Paramount's $111B purchase of Warner Bros. in win for US states

A federal judge today ordered Paramount Skydance and Warner Bros. Discovery to halt their $111 billion merger, handing an early win to states that sued to block the deal. The ruling granted a temporary restraining order prohibiting the firms from completing the merger and from consolidating their operations. The temporary order is only in effect for 14 days, but it can be converted into a prelimi…

China's New AI Model Halts New Subscriptions As Demand Swamps Capacity

Moonshot AI has temporarily paused new subscriptions for its Kimi K3 model after demand surged beyond the company's current capacity within days of the launch. The open-source Chinese AI model, described as one of the largest of its kind at 2.8 trillion parameters, has rattled U.S. rivals by beating Anthropic's Fable 5 and OpenAI's GPT-5.6 Sol in front-end coding tests. The Associated Press report…

The Space Force is now seeking to buy up to $30 billion in rocket launches

It seems as though $5.6 billion wasn't enough. That was the news from the US Space Force on Friday, when military officials announced they were tripling the maximum value of one of the service's National Security Space Launch contracts to $17 billion. The expansion of the Space Force's National Security Space Launch (NSSL) Phase 3 contract comes as the Pentagon signals rising demand for military…

NetworkManager 1.58 Released With 464XLAT CLAT Support & GENEVE Interface

NetworkManager 1.58 is out today with the latest feature enhancements for bettering wired and wireless network management on Linux...…

Scammers impersonate FBI on social media, prey on crime victims

Real FBI agents won't slide into your DMs and offer to help you recover stolen funds. The bureau's Internet Crime Complaint Center (IC3) updated an earlier warning on Monday about scammers impersonating the agency online, saying fraudsters continue to use the scheme "to deceive and revictimize individuals." According to IC3, there are two different schemes being used to target cybercrime victims,…

Head of US Safety Agency Resigns

Chris Fall has resigned as director of the U.S. Center for AI Standards and Innovation just three months after being appointed to lead the Commerce Department's federal AI testing institute. Arvind Raman, who oversees the Commerce office responsible for the institute, will serve temporarily in the role. "The Commerce Department did not provide a reason for Fall's departure," reports Reuters. From…

AWS customer learns the hard way how even the smallest oversight can be mission-critical

Nothing can ruin the end of a week like finding out that all of the websites and hosted email you’re responsible for are offline, which is exactly what happened to Christopher Bradbury and his web design and development firm, Digital Takumi last week. AWS has since resolved the situation, but Bradbury's mistakes can serve as a useful lesson to others of what not to do. As Bradbury explained to Th…

An Explosion of Surveillance Towers is Coming to U.S. Borders, Costing Over $1 Billion

A new report from the Government Accounting Office reveals that the Department of Homeland Security (DHS) plans to nearly triple the number of surveillance towers along U.S. borders, from the current 830 to 2,300 by 2034. DHS expects to expend $1 billion in taxpayer dollars for this dangerous expansion of a surveillance network indiscriminately trained on towns, school playgrounds, backyards, and…

AT&T loses key ruling in bid to stop offering basic phone service in California

California can keep enforcing rules that require AT&T to offer basic phone service to new customers in its wireline territory, following a federal judge's ruling last week. AT&T sued California in May in a bid to end the state's Carrier of Last Resort (COLR) rules that require it to offer telephone service to any potential customer in its territory. AT&T asked for a preliminary injunction that wo…

Malicious cloud customers can bring down the power grid

AI datacenters wreak havoc on the power grid under normal circumstances, so what happens if a bad actor controls all the GPUs and wants to cause harm? Cybersecurity researchers in China have devised a way for malicious tenants to attack their infrastructure provider, potentially causing blackouts or damaging equipment. The attack, dubbed Bit2Watt, imagines an adversary masquerading as a legitimat…

AliExpress Hit With Record $625 Million Fine After Failing To Make EU-Ordered Fixes

The European Commission has fined AliExpress more than $625 million, the largest penalty yet under the Digital Services Act, after finding that the marketplace failed to "diligently assess and mitigate risks relating to the sale of illegal, unsafe, or counterfeit products on its e-commerce platform." EU officials said flagged products repeatedly reappeared, sellers could evade safeguards, and AliE…

Intel Expanding Memory Options For Current Xeon 6 / Xeon 6+ Servers

With Intel's next-generation Xeon Diamond Rapids processors not slated to launch until next year and with AMD EPYC Venice being right around the corner, Intel announced today that with upcoming BIOS updates they will be expanding the range of RDIMM and MRDIMM memory support for current-generation Xeon 6 and Xeon 6+ processors...…

“Stealth Crawlers” Are Not a Threat to the Open Web. Bills Targeting Them Would Be.

There’s a new boogeyman in the battles over AI: so-called “stealth crawlers.” We’ll admit it—the term “stealth crawlers” sounds quite nefarious. In reality, they’re anything but. “Stealth crawlers” are simply automated tools to access and collect public web data—without disclosing the user’s identity. Private crawlers like these facilitate all kinds of important work that benefits the public, incl…

Frontier LLMs couldn't help Hugging Face fight off evil agents

Apparently, being a leading destination for AI development doesn't mean AI will bail you out. AI agents broke into Hugging Face's production infrastructure, but commercial LLM guardrails blocked the forensic investigation, forcing it to turn to a Chinese open-weight model instead. The intrusion, “driven, end to end, by an autonomous AI agent system,” compromised a “limited set” of Hugging Face’s…

[$] Fedora grapples with change

The Fedora Project is known for, among other things, having a well-defined set of processes for just about everything. It has extensive packaging guidelines that deal with the complexities of creating RPMs to install software, as well as processes for managing the legal questions that arise around shipping software. Fedora also has a well-defined change process for dealing with self-contained tech…

RIP bargain bin: The price impact of Sony's disc-free PlayStation plan

Since Sony announced that it was planning to stop producing physical PlayStation discs in 2028, many people have been justifiably worried about how they will maintain ownership and long-term game access in a disc-free world. But halting production of PlayStation discs also means eliminating the market for cheap used PlayStation discs, which are often available for well below the price of a digita…

LG Monitors Silently Install Adware-Like App On Windows PCs

VideoCardz reports that connecting certain LG monitors to Windows PCs can trigger Windows Update to automatically install the LG Monitor App Installer, which runs at startup and repeatedly displays McAfee trial promotions. From the report: Gamers Nexus reproduced the behavior with an LG UltraGear 34GX900A-B after receiving reports from monitor owners. Windows Update first installed LG extension an…

AMD Talks Up The Great Opportunities Of SPIR-V IR With ROCm

While AMD ROCm 7.14 released last week as the first production release built off TheRock, there is already more to look forward to moving into the future with the AMD ROCm stack... In particular, SPIR-V with ROCm becoming a reality for unified binaries that can work across graphics architectures/targets, better portability across GPU hardware, and other improvements to the experience in targeting…

The Document Foundation says Microsoft's file formats keep users on a short leash

The Document Foundation (TDF) has criticized proprietary file formats and the lock-in they create, with Microsoft's ubiquitous Office formats drawing particular scrutiny. TDF would doubtless welcome a world where everyone used LibreOffice or another open equivalent, yet the reality is that Microsoft's productivity tools still dominate the office software market. However, that shouldn't be a probl…

F1 in Belgium: Machine learning algorithms are ruining the sport

Formula 1 returned to the Spa-Francorchamps circuit for the Belgium Grand Prix this weekend. This ribbon of tarmac in the Ardennes is one of the sport's historic venues, featuring in the first F1 season way back in 1950. But as yesterday's race showed, the current F1 machinery is utterly ill-suited to this dramatic venue. As we saw at Suzuka in Japan earlier this year, a 2026 F1 battery is able t…

GNOME Changes Security Disclosure Policies Due To AI-Generated Reports

The GNOME project is changing its handling of security reports due to the influx of AI/LLM-generated security findings...…

Catanzaro: Some changes to GNOME security tracking

Michael Catanzaro, who has been managing GNOME security issue tracking since November 2020, has written a blog post that details some changes in how he will be managing GNOME vulnerability reports from now on due to an increase in AI-generated security reports. He will be switching from a 90-day deadline for disclosures to 30 days for issues reported on August 1, or later. "The shorter deadline wo…

AliExpress hit with record $625M fine after failing to make EU-ordered fixes

Yesterday, the European Commission slapped AliExpress with the largest fine yet under the Digital Services Act (DSA), exceeding $625 million. In a press release, the EC said that AliExpress failed to “diligently assess and mitigate risks relating to the sale of illegal, unsafe, or counterfeit products on its e-commerce platform.” Officials found that AliExpress not only failed to staff teams dedi…

Microsoft 365 calendars become spy drop boxes in HOLLOWGRAPH campaign

Microsoft 365 calendars have become the latest hiding place for espionage malware, with attackers stashing commands and stolen files inside appointments dated 24 years into the future. Researchers at Group-IB say they've uncovered a malware component they call HOLLOWGRAPH that swaps the usual command-and-control server for something rather less conspicuous – a compromised Microsoft 365 calendar.…

The first trailer for Avengers: Doomsday is finally here

With San Diego Comic-Con kicking off later this week, Marvel Studios has released the first official full trailer for Avengers: Doomsday, the penultimate film in the MCU's Phase Six and the end of the so-called "Multiverse Saga." (Spoilers for prior relevant MCU films below.) Marvel Studios originally planned to build its Phase Six Avengers arc (The Kang Dynasty) around Jonathan Majors’ Kang the…

Windows Server Update Services buckle under Microsoft's metadata mountain

UPDATED Microsoft's aging Windows Server Update Services (WSUS) has hit "severe degradation," leaving some organizations facing painfully slow synchronizations or timeouts when fetching updates. According to Microsoft, "a buildup of publishing metadata" has meant that "organizations might experience increased synchronization times or sync operation timeouts on WSUS servers." We're told the proble…

Pay up or not? Ransomware surge has victims facing tough choices.

Nearly half of companies that are targets of a ransomware cyber attack end up paying a ransom to release their data or systems, according to 2025 research from cybersecurity group Sophos, while the median amount demanded is rising. Globally, some jurisdictions are responding by banning payments to hackers. In the UK, for example, the government is advancing plans to prohibit public sector bodies…

Linux 7.2 Improves Intel Panther Lake Xe3 Arc B390 Graphics Performance

My testing of the in-development Linux 7.2 kernel continues in the lab. One of the latest promising findings from this kernel that will be released as stable in August is faster Intel Xe3 graphics performance on Core Ultra Series 3 "Panther Lake" hardware.…

Linux Patches Introduce "KNOD" For In-Kernel Network Offloading Directly To AMD GPUs

Some extremely cool patches were posted to the Linux kernel mailing list on Sunday. The patches for "KNOD" allow for in-kernel network offloading to GPUs with an initial focus on AMD GPU support. What makes this all the more nifty is that it doesn't depend upon any user-space libraries like AMD ROCm but is all handled in-kernel with driving the GPU directly...…

EU's AI labeling rules take effect next month

From August 2, providers of AI systems in the EU will have to tell people when they are interacting with a machine and add machine-readable marks to AI-generated or manipulated content under new transparency rules. Launching guidance ahead of the deadline, Henna Virkkunen, European Commission executive vice-president for tech sovereignty, security and democracy, said: "The Commission supports the…

[$] Merging famfs?

The famfs filesystem, which is meant to provide shared access to huge memory-resident files on CXL and other devices, returned to the Linux Storage, Filesystem, Memory Management, and BPF Summit (LSFMM+BPF) in 2026. It was first discussed at LSFMM+BPF 2024 and a new implementation was described at the 2025 gathering, but it still has not made its way into the kernel; LWN looked at a discussion abo…

Security updates for Monday

Security updates have been issued by Debian (kernel, libnfs, roundcube, and tiff), Fedora (antlr4-project, chromium, erlang, libseccomp, libtiff, log4cxx, mbedtls, node-exporter, opam, openssh, proftpd, python-asyncssh, python-django5, python-libcst, python-orjson, python-uv-build, ruby, rust-astral_async_zip, spoofdpi, uv, and yq), Mageia (bind, clamav, erlang, libidn, libreoffice, nmap, nodejs,…

Watching the world burn as all the money flows into a multitrillion-dollar Magic 8 Ball

KETTLE Your host Brandon Vigliarolo has been breathing in wildfire smoke from Canada for the past few days, which really has him thinking about whether all those AI datacenters building gas turbines and contributing to climate change is really worth it. You can listen to the latest episode of The Kettle right here on this page, as well as on Spotify, Apple Music, or YouTube where you can subscrib…

Show HN: Read the Tape – Wordle for daytrading, five blind S&P 500 charts a day

Infosec expert: Paidwork users' data pwned after 23M-record database dumped online

More than 23 million people who signed up to earn money from online gigs have allegedly had their personal and financial information spilled onto the internet following a breach of microtask platform Paidwork. The incident was added to Troy Hunt's Have I Been Pwned site after a database allegedly stolen from Paidwork was publicly released earlier this month. According to the breach notification s…

Firefox 153 Available With Support For Vulkan Video Decoding, Experimental JPEG-XL

Mozilla has uploaded the Firefox 153.0 release binaries today for the newest monthly update to this cross-platform web browser. Making Firefox 153 exciting is that it's the newest Extended Support Release "ESR" as well as introducing Vulkan Video decode support...…

openSUSE Seeking Additional Corporate Sponsors

While openSUSE is closely aligned with SUSE as a company, they aren't the exclusive sponsor of this free and open-source Linux distribution with its rolling-release Tumbleweed and Leap stable releases. AMD has been a longtime major supporter of openSUSE and the Fastly content delivery company has been another platinum sponsor too besides SUSE. There are also various other lower-tier sponsors while…

Microsoft rushes out Windows fix for Dell's hot and bothered PCs

Microsoft has dispatched an out-of-band update to fix an incompatibility on certain Dell models and clear the way for them to receive the July 2026 Windows security patch. The update addresses an issue with the Intel Innovation Platform Framework drive that could "cause changes in performance, power consumption, or system behavior." The fix has arrived for Windows 11 25H2 and 24H2 as KB5121767, w…

UK's seventh prime minister in a decade says he'll ditch digital ID scheme

Andy Burnham is barely through the door at No. 10, and one of Keir Starmer's flagship tech projects is already heading for the shredder, with the incoming prime minister set to scrap the UK's digital ID scheme while creating a Cabinet-level minister for artificial intelligence. The move, reported by Reuters, kills off a policy Starmer spent the past year championing. His government pitched digita…

AMD Posts AVX10_V2_AUX ISA Support Patches For GCC Compiler

Earlier this month Intel compiler engineers posted initial GCC compiler patches for the AI Compute Extensions "ACE" that was born out of the x86 Ecosystem Advisory Group to augment AVX and scalar code with new capabilities for AI/ML workloads. Now as part of that an AMD compiler engineer posted patches over the weekend for AVX10_V2_AUX ISA support...…

Linux's Qualcomm Crypto Accelerator Driver "Harmful" And Being Disabled: Slower Than CPU, History Of Bugs

The Qualcomm Crypto Engine Accelerator "QCE" driver is being disabled within the Linux 7.3 kernel over a number of issues, including being slower than having the CPU cores handling cryptographic work and a history of different driver bugs. Plus race conditions causing security issues and other challenges...…

Hyprland 0.56 Released With Many Enhancements To This Wayland Compositor

Out today is Hyprland 0.56 as the newest feature update to this unique Wayland compositor and incorporating just under three months worth of improvements...…

Major glitch in Matrix as UK government projects watchdog rates shared services cluster red

The UK government has admitted that two major planks of its multibillion-pound shared services strategy are in serious trouble. Matrix, a project that involves moving nine government departments to shared ERP and HR systems, has been rated red by the National Infrastructure and Service Transformation Authority (NISTA), which monitors the planning and delivery of major government projects. This ra…

Airbus takes flight from AWS. What happens next is critical

OPINION European aerospace giant Airbus has lined up on the runway and is pushing the throttles forward as it prepares to evict apps from America. Airbus has named French cloud services provider Scaleway as the destination for some 900 applications, with an initial 70 getting priority onboarding, as it seeks to put critical systems and data under European control. AWS, like all American platforms…

Auditors tell UK government to do the math before banking on £45B AI savings

UK government auditors are calling for officials to consider the impact of AI on the size of the workforce needed for the civil service and wider public sector. The National Audit Office (NAO) recommends civil service leaders to "reflect the impact of major technological change in their long-term workforce planning," including on "workforce size, roles and grades, tasks and skills." These are amo…

High hardware costs see Red Hat offer a two-server edge rig, no mini-PC required

Red Hat has come up with a way to reduce the quantity of servers needed for high-availability edge deployments of its OpenShift platform, because its customers worry about high hardware costs. The IBM business unit’s Daniel Froehlich and Paul Lancaster last week introduced Red Hat’s approach in a post that saw the pair observe interest in “alternative topologies for large-scale edge deployments”…

Comment in code read 'Dear future me, sorry I wrote this'

WHO, ME? Regrets? We've had a few. And so have many readers of The Register, who we try to help by getting their stories of workplace mistakes off their chests every Friday in a reader-contributed column we call "Who, Me?" This week, meet a reader who asked to be Regomized as "Johnny," who told us he was once hired as a Visual Basic developer, a job he thought was beneath him. He got on with thin…

My USB Drive Has a Hidden Encrypted Vault

AI ops tools will create console sprawl and break IT more often: Gartner

A quarter of the work performed by IT infrastructure and operations people will be handled by AI in the year 2030, according to analyst firm Gartner, despite AI also complicating your environment and possibly creating outages. Those predictions landed on July 10 in Gartner’s 2026 Hype Cycle for AI in IT Operations, the firm’s view on the future of AI-powered infrastructure management tools. Gartn…

Chinese President Xi Jinping wants emergency response systems to keep AI in check

ASIA IN BRIEF Chinese President Xi Jinping has delivered a major speech on AI, which he thinks has enormous potential – for good and evil. In his speech, Xi called for AI development to “adhere to the principle of openness.” “As a new engine of world economic growth and an accelerator for the shift of growth drivers, AI is moving from the digital world into the physical world. We should seize thi…

Kernel prepatch 7.2-rc4

The 7.2-rc4 kernel prepatch is out for testing. Linus said: "This whole week I had the feeling that people were starting to go on summer vacation, but running the numbers shows that I must have been wrong - it all looks pretty normal."…

Linux 7.2-rc4 Released: Looking Like The "New Normal"

The fourth weekly release candidate of the Linux 7.2 kernel is now available for testing...…

Connecting AI agents to outside services explodes the risk radius

Avoiding the "lethal trifecta" – access to private data, exposure to untrusted content, and an external communication path – is difficult enough when working with AI agents. But the use of connectors – integrations with third-party services like Gmail or Slack – expands the scope of concern in a way that makes it exceedingly difficult to reason about defensive due diligence. PromptArmor, an AI se…

The Last MPEG-4 Visual Patent Has Expired

If you are looking for a reason to celebrate today, the last of the MPEG-4 Part 2 patents expired today...…

FFmpeg Lands Latest AVX-512 Optimization: 1.372x Faster In Pixel Format Conversion

The latest hand-tuned code in the FFmpeg multimedia library for allowing better performance on today's modern Intel/AMD AVX-512-capable processors is showing 1.372x faster performance for RGB24 to RGBA pixel format conversions...…

Legion Y700 Gen4 Tablet Powered By Snapdragon 8 Elite Seeing Linux Patches

The Legion Y700 Gen4 is an Android tablet that debuted last year and powered by the Qualcomm Snapdragon 8 Elite chipset. This 8.8-inch tablet is now seeing patches for enabling Linux support outside the confines of Android and will hopefully end up in the mainline kernel...…

More ASUS Motherboards To Enjoy Working Sensor Monitoring With Linux 7.3

Thanks to the work of the open-source community, more ASUS desktop motherboards for Intel Core and AMD Ryzen systems are seeing working sensor monitoring under Linux. With the upcoming Linux 7.3 cycle, several additional ASUS motherboards will now enjoy working sensor monitoring...…

Using AI makes people less likely to admit they don't know something

In 2026, AI still "hallucinates" and gives you wrong answers a good chunk of the time. Nevertheless, academics from French and Italian universities have found that access to AI advice suppresses critical thinking, making people more likely to confidently parrot incorrect information that the bot provided. "For humans, the capacity to say, 'I don't know,' is very important because it represents th…

GNU Hurd Makes Progress On AArch64, Writing Translators In Rust

The GNU Hurd project recently issued their Q2'2026 status report to outline recently development efforts. The Hurd is still happening!..…

NVK Vulkan Performance Improving With Mesa 26.2 Against NVIDIA Proprietary Driver

The performance of the Nouveau kernel driver with the Mesa NVK Vulkan driver continues to improve each feature release in its quest toward better competing with NVIDIA's official Linux graphics driver with its proprietary Vulkan driver...…

The unreasonable difficulty of time series forecasting

"Half a Second" — a book on the XZ backdoor

Adrian Mastronardi has released a book called Half a Second; it is a detailed look into the XZ backdoor attempt of 2024. The book is freely available under a (non-free) noncommercial, no-derivatives CC license. Half a Second tells that story as one continuous narrative: the burned-out volunteer who maintained the code alone and was patiently, expertly manipulated into giving it up; the engineer wh…

Three stable kernel updates

The 7.1.4, 6.18.39, and 6.12.96 stable kernel updates have been released; each contains a fairly large set of important fixes.…

Java was a three-day hotfix away from dying horribly on stage

If there is a driving theme to The Java Story documentary, which debuted Friday on YouTube, it would be that even some of the most important and popular technologies come from humble beginnings. In this case, we're talking about a language that started life as a failed attempt at set-top box dominance and required a massive rewrite just days before its big conference debut. Today, Java consistent…

AMD Linux Graphics Driver Preps Fix For Apple Studio Display

This week's batch of AMDGPU Display Core "DC" updates arrived heavy with 70 new patches for improving that open-source display support for Radeon graphics on the Linux desktop...…

GNOME OS Safe Mode Improving The System Reliability

At GNOME's annual GUADEC conference happening this week in Spain, an update was shared on the current state of GNOME OS...…

KDE Plasma 6.8 System Monitor Making It Easier Assigning Processes To CPU Cores

Nate Graham and John Veness are out with the latest issue of This Week in Plasma to highlight all of the interesting developments taking place in the KDE Plasma desktop space...…

UXL's oneDNN 3.13 Preps For Intel Nova Lake With AVX10.2, More Intel Optimizations

Following the release of AMD's ZenDNN 6.0 earlier this month, there is a new feature release of the oneDNN neural network library that used to be developed by Intel as part of oneAPI and is now under the UXL Foundation umbrella. Even so, oneDNN feature releases continue to be heavy on new Intel optimizations and future hardware support...…

NextBSD returns to dollop Apple source on FreeBSD

One of the most interesting BSD variants of the 2010s, NextBSD, has come back to life under new management. The Reg FOSS desk is intrigued. Aside from the homepage, there's a GitHub repository – but beware, this is separate from the old one, whose repo is still there although the most recent changes were seven years ago. The new project also has a project history giving credit where it's due. The…

Mozilla speeds Firefox release schedule to biweekly

Firefox releases will soon get even closer together – but not ESR ones, which remain annual, with the next one due out soon. The change was announced last week on the dev-platform@mozilla.org mailing list by Mozilla’s director of engineering Sylvestre Ledru: “We are planning to move Firefox Desktop and Android from a 4-week release cadence to a 2-week release cadence starting in September 2026. “…

Victory! Flock Ends Rollout of Audio “Distress Detection” of Human Voices

Reversing course, Flock Safety—the surveillance technology vendor most known for its extensive network of automated license plate readers—has announced that it will end a pilot for its acoustic gunshot detection devices to identify signs of “human distress.” ...public pressure can sometimes work to influence both companies and lawmakers that control a city’s purse strings to discontinue or divest…

Building an Arch Linux aarch64 port for Holo Core (Collabora blog)

Collabora has published a blog post about its work with Valve on Holo Core, which is a port of Arch Linux to aarch64 to be used as the the operating system on Valve's 64-bit Arm Steam Frame gaming system. Collabora has released the sources, binary packages, and a container image for aarch64 devices. The post describes some of the challenges in porting Arch Linux to a new architecture, and what rem…

Microsoft cuts OneDrive support for older Windows 10 versions next month

UPDATED Microsoft will end OneDrive synchronization support next month for older versions of Windows 10, leaving users without client updates, fixes, or technical assistance. According to a post on the company's Message Center, OneDrive sync app updates will continue on Windows 10 22H2 until October 10, 2028, but will stop for earlier versions from August 15, 2026. No support means no more update…

Your Vision. Your Legacy. Your Future.

This month, we celebrate 36 years of EFF and a mission that is bigger than any one of us. Thanks to EFF, communities around the world are demanding that technology protects their freedom, advances justice, and opens doors to opportunity. That's not a small thing—it's a life's work worth continuing. If you are committed to staying on the cutting edge of digital rights issues, I'd like to invite you…

Billing software error sends billion-dollar AWS estimates

Your AWS billing estimate might look just a little inflated right now. If you woke up to find an email from Amazon Web Services this morning telling you that you’d gone over your billing threshold by a few hundred million dollars, don’t panic: Something’s gone wrong in the AWS Billing Console, the company admitted. An open issue on the AWS Health Dashboard (archived copy at the time of writing) p…

AI spam filters are getting suckered by old-school text salting

Notice more spam getting through that corporate email filter lately? Attackers are using a technique known as "text salting," which hides benign-looking words intended to confuse some AI-powered email filters, says cybersecurity firm Barracuda. The email security outfit said on Thursday that it had detected more than one million retail-themed phishing attacks using text salting since April. It’s…

[$] Securing BPF LSMs against tampering

Since 2020, BPF programs have been able to act as Linux security modules (LSMs). Several projects, including systemd, have been working to use that capability to provide more security to users. Christian Brauner spoke at the 2026 Linux Storage, Filesystem, Memory-Management, and BPF Summit about some of the limitations of using BPF in this way, and the changes he would like to see for systemd's u…

How the Watch Dogs Video Game Series Mirrored and Predicted Real-World Digital Rights Issues

When Ubisoft's Watch Dogs 2 was released in 2016, it was a headtrip for those of us working on digital-rights issues in the Bay Area. During the day, I'd fight tech-authoritarianism from EFF's San Francisco offices and then, at night, I'd fight tech-authoritarianism in an uncanny simulation of San Francisco from my home gaming console.   Watch Dogs 2 is an open-world video game that follows a hack…

Torvalds challenged the haters to fork Linux. Someone said 'hold my beer'

Earlier this week, Linux project leader Linus Torvalds told AI haters to fork off, and invited anyone who didn't like his comments to fork the kernel. Well, here you go: linux-0.11-rs, a total reimplementation of the Linux kernel, done in langage de programmation du jour, Rust. No, this isn't really a response to the Emperor Penguin's challenge – for a start, it looks like it was done with AI – b…

Microsoft gives admins Exchange Online breathing room

Microsoft has delayed the removal of the -Credential parameter from Exchange Online PowerShell until December 2026, giving administrators more time to update affected scripts and automation. The -Credential parameter is used when connecting to Exchange Online PowerShell. It allows an administrator to supply stored username and password credentials. These days, it is heavily discouraged, particula…

Security updates for Friday

Security updates have been issued by AlmaLinux (cifs-utils, container-tools:rhel8, libreoffice, nodejs:24, perl-XML-LibXML, and python3.12), Fedora (ansible-collection-ansible-posix, firefox, freerdp, ImageMagick, mingw-glib2, perl-DBI, perl-HTTP-Date, rust-cargo-rpmstatus, and rust-opendal), Oracle (cifs-utils, gegl, gimp, git-lfs, go-toolset:ol8, hplip, kernel, libreoffice, maven:3.9, perl-XML-L…

Show HN: Justif – Knuth-Plass justification and microtypography for the web

Top EU court clips YouTube's intermediary defense over reviewed content

The Court of Justice of the European Union (CJEU) has ruled that Google may not be able to claim intermediary liability protection for YouTube content it reviews as part of a commercial partnership with a creator. The case stems from a €750,000 fine imposed on Google Ireland by Italy's communications regulator in 2022 over YouTube videos promoting online gambling. Before entering the revenue-shar…

Attackers target critical FortiSandbox flaws as CISA issues patch order

Fortinet admins have two more reasons to clear their calendars after CISA confirmed a pair of critical FortiSandbox bugs are being actively exploited. The two bugs, tracked as CVE-2026-39808 and CVE-2026-25089, both carry CVSS scores of 9.1 and affect FortiSandbox, FortiSandbox Cloud, and FortiSandbox PaaS. According to Fortinet, they are OS command injection flaws that allow unauthenticated atta…

[$] Sched-ext: enqueue() for sub-schedulers and proxy-execution support

The extensible scheduler class (sched_ext) allows the installation of custom CPU schedulers as a set of BPF programs. While sched_ext, in its current form, has already led to a lot of interesting scheduler-development work, the subsystem itself is still undergoing rapid evolution. Among other work, the ability to set up a hierarchy of sub-schedulers is approaching completion, and a longstanding in…

Security updates for Thursday

Security updates have been issued by AlmaLinux (cups, git-lfs, kernel, libsolv, libxml2, python3.12, and python3.9), Debian (chromium, dhcpcd5, and ntfs-3g), Fedora (firefox, perl-Imager, python-bcrypt, python-tiktoken, roundcubemail, and xrdp), Mageia (openssl, poppler, python-mistune, and tmux), Oracle (389-ds-base, cups, git-lfs, glibc, host-metering, kernel, libsolv, libxml2, nginx:1.24, Packa…

EFF and ARTICLE 19 Submission to the European Commission on the DSA Trusted Flagger Guidelines

EFF and ARTICLE 19 have submitted joint comments to the European Commission on draft guidelines for the Digital Services Act’s trusted flagger mechanism. Having long advocated for a DSA that protects freedom of expression while preserving intermediary liability protections and the prohibition on general monitoring, we welcome the Commission's effort to provide practical guidance on how the trusted…

California Steps Back From Dangerous Expansion of its Age-Gating Law

The California legislature has stepped back from a plan that would have expanded its age-gating law, removing language that could have compounded serious threats to users’ speech, privacy and security just to browse the internet. A.B. 1856, authored by Assemblymember Buffy Wicks, will now move forward through the legislature without its most problematic pieces. EFF still believes the underlying la…

Most Smart Watches, Rings, and Bands Lack Basic Transparency Reports and Key Privacy Features

Oura Rings, Garmin GPS fitness watches, Apple Watches, Whoop bands—every year, more and more tech devices are promising to monitor our health and fitness, guide us toward healthier living, and provide useful health metrics to take to our doctors. But few of these tools provide the sorts of privacy and security promises we demand from all technology, let alone tech that captures personal health dat…

🚫 Don't Let Congress Age-Gate the Internet | EFFector 38.13

The effort to age gate the internet is back in Washington—and now it has a new name. Recently passed by the House of Representatives, the KIDS Act is a sprawling package of proposals to control what we can see and say online. Supporters claim the KIDS Act is needed to protect minors online. But if lawmakers really want to make the internet safer, why are they encouraging more surveillance instead…

European Court: Apple Can Not Shirk Off its Interoperability Requirements

One of the best bulwarks against monopoly is interoperability—that is making a new product or service work with an existing product or service. Interoperability allows users, and not the manufacturers of their devices or largest player in a market, to decide what application best serves them. Unsurprisingly, companies like Apple have worked hard to resist interoperability requirements.  On July 8,…

Don’t Repeat NY’s 3D Printing Blunder

This year the state of New York had the dubious honor of being the first to pass a controversial provision to mandate all 3D printers come with surveillance and censorship. That means not only is there a ticking clock to protect every artist, researcher, engineer, and hobbyist in the state, but there is a real risk of other states thoughtlessly following suit—prior to the New York rules even takin…

Microsoft Patches a Record 570 Security Flaws

Microsoft Corp. today released software updates to plug at least 570 security holes in its Windows operating systems and other software, almost triple the number of vulnerabilities the software giant fixed in its record-smashing Patch Tuesday release last month. Microsoft attributed the burgeoning patch counts to vulnerability discoveries aided by artificial intelligence. Nearly 60 of the bugs qua…

Sony Nerfs Videogame Ownership

Legal intern Suzanne Castillo co-authored of this post. Playstation’s decision to kill physical game discs is the latest attack on our diminishing rights to access and engage with culture digitally. Rent-seeking corporations and negligent lawmakers share the blame — and they can do better.  We’ve seen the same playbook used in the move to digital distribution of  film, TV, and music: draw in custo…

Lessons Learned from CISA’s Recent GitHub Leak

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a postmortem on a recent data leak in which a contractor published dozens of internal CISA credentials — including AWS Govcloud keys — in a public GitHub repository for almost six months before being notified by KrebsOnSecurity. Experts say the gaps identified in the agency’s initial response provide important lessons that all…

Building Our Future Together

In my first weeks as Executive Director of EFF, I’ve been reminded every day how consequential this moment is in determining what kind of future we will have. We are on the edge. What each one of us steps up to do – with our expertise, energy, and resources – will determine whether our future is one of openness, security, and fundamental rights, or one controlled through fear, surveillance, and ce…

Automated Moderation Is Here to Stay—Accountability Must Keep Pace

This post is part 2 in a series about automated content moderation. Read the first post here. When whistleblower Frances Haugen leaked a set of documents from Meta in 2020, among the revelations was a jarring statistic: The company’s algorithms designed to detect terrorist content incorrectly deleted nonviolent Arabic-language content 77 percent of the time, while failing to detect hate speech und…

"We Want Texans to Know Their Rights": Q&A with Mayday Health on the Impact of Surveillance on Abortion Care

Last May, EFF reported that a sheriff’s office in Texas searched data from more than 83,000 automated license plate reader (ALPR) cameras to track down a woman suspected of self-managing an abortion. ALPRs are promoted as tools for keeping communities safe by finding missing persons and locating stolen vehicles, but this case showed how ALPRS can be weaponized to investigate people’s private healt…

The House Passed The KIDS Act—The Senate Should Reject It 

Last week, the House voted on the KIDS Act, a disjointed package of legislation that seeks to control Americans’ web browsing and private messaging. The package combines a revised version of the Kids Online Safety Act (KOSA), with several other internet bills, study bills, reporting requirements, and new regulations. Different parts of the bill pressure online services to impose different age-gati…

European Commission Chooses to Keep EU Users Locked Up Behind Big Tech’s Gates

Users are always seeking more control over their social networking experience to make it better, whether to improve privacy or enhance flexibility. Interoperability between social networking platforms like Facebook and TikTok has so many benefits that solve those issues.   Say you’re on multiple platforms because you have friends you follow on different networks, but you’ve decided to choose one p…

Google's New Remote Attestation Scheme is As Bad As Its Old One

Google owes its existence to the open web, but today, its technological “innovations” have much to do with locking users into a “walled garden.” The latest of these is “reCAPTCHA Mobile Verification,” an experimental initiative that will let companies block users if they are running independent, "de-googled" versions of Android. These “indie Android” versions are favored by people who want to prot…

Felons, Fraudsters Flog Offensive Cybersecurity Startup

A cybersecurity startup dangling millions of dollars to acquire zero-day security vulnerabilities in popular software is run by a pair of far-right conspiracy theorists and convicted felons whose most recent ventures included fake intelligence companies and a now-defunct AI-based lobbying platform they operated under assumed names. The X/Twitter account IRIS C2 (@C2IRIS) has gained more than 4,000…

Automated Moderation Is Here to Stay

This blog post is part 1 of a 2-part series. The second part sets out recommendations for companies and policymakers.Six years ago—one month into a global pandemic—we argued that the automated moderation processes many platforms were rapidly adopting should be highly transparent, easily appealable, and temporary. We warned that "protocols adopted in times of crisis often persist when the crisis is…

Help EFF Cut the AI Hype

In the global race to build and dominate the AI industry, it can sure seem like the interests of ordinary people sit last on the agenda. It's just the opposite for EFF. While companies furiously jam AI tools into their veins and your eyeballs, EFF’s technologists, activists, and attorneys have been meticulously cutting through the hype to ensure AI can serve your privacy and free expression. Techn…

FBI Seizes NetNut Proxy Platform, Popa Botnet

The Federal Bureau of Investigation (FBI) said today it worked with industry partners to seize hundreds of domains associated with NetNut, a sprawling residential proxy service operated by the publicly-traded Israeli company Alarum Technologies [NASDAQ: ALAR]. The action comes roughly two weeks after KrebsOnSecurity published findings from multiple security firms connecting NetNut to the Popa botn…

LGBT Q&A: How Can I Wipe Online Data That Points To My Queer Identity?

This Pride, we’re answering all your digital rights questions in season two of our initiative, LGBT Q&A.  You Asked: Is there a way for me to wipe data about me online that could point to my queer identity? EFF’s Answer: You cannot protect everything all the time, but there are ways to wipe information about yourself online.  Most information available about you online will typically be found in t…

EFF and Allies: X’s FTC Petition to Waive Privacy Violation Order Should be Rejected

X Corp. should not be able to escape privacy compliance because it changed its name.  On May 15, X Corp. filed a petition before the Federal Trade Commission (FTC) to set aside or modify an order issued in 2022 requiring the company to report regularly to the FTC for its violations of user data. The order or “consent decree” is a result of misleading the platforms’ 140 million users by using priva…

LGBT Q&A: What Data Are Companies in the UK Collecting When Verifying My Age?

This Pride, we’re answering all your digital rights questions in season two of our initiative, LGBT Q&A.  You Asked: I live in the UK, and we have age verification now on a bunch of websites (including Reddit) and now on iPhones. Can you explain what sort of data companies are actually collecting when they check for age and whether there are any real threats to my safety?  EFF’s Answer: Age verif…

EFF to Gov. Pritzker: Veto Illinois’ HB 5511

The Illinois legislature recently passed House Bill 5511, which imposes a sweeping, device-level age-gating framework across nearly all internet-enabled hardware, operating systems, and online services. This well-intentioned but deeply flawed piece of legislation will harm young people who rely on the internet to access essential information and find community. That’s why we’re urging the Illinois…

Victory! Supreme Court Says Constitution Protects People’s Location Data

You have an expectation of privacy in location data that reveals your movements in the physical world, and even short-term surveillance of these movements is a search subject to the Fourth Amendment, the U.S. Supreme Court ruled today in Chatrie v. United States.   The case involved geofence warrants, a form of dragnet surveillance police have used to vacuum up location data from electronic device…

EFF to Grindr: This Pride Month, Put Safety and Privacy Over Profits

This Pride month, we’re calling on the dating app Grindr to prioritize LGBTQ+ user safety by making privacy the default across its platform. That means no more sharing personal data with advertisers or training AI on private information without users’ opt-in consent. Grindr is a dating app for the LGBTQ+ community; and for queer people, privacy violations can have life-altering consequences. Infor…

Hate “The Algorithm?” RSS Is One of the Tools You’ve Been Looking For

Poke your head into just about any online social network—or any general conversations about internet culture—and you’ll likely find a boogieman: the algorithm. Since at least the moment Facebook introduced (and apologized for) its News Feed, “the algorithm” has been shorthand for the ways the tech giants control what we see and when we see it. In the age of enshittification, there is a push to rec…

Lawmakers Must Act Now to Prevent Armed Police Drones

This is not science fiction. It’s not premature. If towns, cities, states, or the federal government want to act to rein in the emergence of armed police drones and robots, we have precious little time. In the absence of substantial regulation around when and how domestic law enforcement in the United States can deploy force using drones, the companies that markets technology to law enforcement ha…

We Can Still Stop California’s 3D Printer Surveillance Scheme

Ignoring EFF’s warnings about the dangers and impossibility of implementing a new mandate for 3D print surveillance software, the California State Assembly has signed off on legislation to do just that. In the process, legislators amended the bill to make it even more confusing, while failing to address the risks to privacy, speech, and consumer rights. We must renew our call on legislators to dro…

Primed for Malware: Stop Selling Compromised Android Devices

Time and time again, researchers have found numerous compromised Android devices for sale at large online retailers like Amazon. When these devices get individually reported, we have seen some noted efforts to take them down. But this is a systemic problem and Amazon and other major online retailers must make a corresponding systemic and intentional effort to stop these devices from entering peopl…

EFF, TEDIC and CEJIL Challenge Secrecy in the Use of Face Recognition in Paraguay

Seeking transparency and accountability in Paraguay’s use of facial recognition, EFF, the Association of Technology, Education, Development, Research, Communication (TEDIC), and the Centre for Justice and International Law (CEJIL) filed a complaint with the Inter-American Commission on Human Rights against the state for arbitrarily denying access to information about its implementation and use of…

Four Years After Dobbs, Anti-Abortion Lawmakers Keep Coming for Online Speech

This week marks four years since Dobbs v. Jackson Women’s Health Organization overturned Roe v. Wade’s constitutional protections for people seeking abortion care. Anniversaries are a moment to take stock, and over the last four years, EFF has seen firsthand how digital rights and reproductive rights have become increasingly intertwined. One major way this has happened: the fight over abortion has…

The FCC’s Spam Call Proposal Is Just a Data Collection Scheme

The Federal Communications Commission wants to require telecommunications providers to collect vast amounts of personal information from every person who wants a phone number in the name of combatting scam and spam calls. This plan will fail to combat the deluge of unwanted calls people in the United States receive every day while giving untrustworthy companies a gold mine of information that woul…

Are Your Local Police Using Flock Safety ALPRs to Scan for Immigrants?

When a car passes an automated license plate reader (ALPR), its plate is captured and instantly compared against a list of vehicles that police are actively looking for or that police have identified for real-time surveillance. These are called “hotlists,” and EFF has learned that one used by agencies across the country targets immigrants on behalf of Immigration and Customs Enforcement (ICE).  Ag…

The KIDS Act Would Require Age Checks To Get Online

Within the next week, Congress is preparing to vote on the KIDS Act, a sprawling package of legislation that seeks to control Americans’ web browsing and private messaging. The package includes a revised version of the Kids Online Safety Act, or KOSA, combined with a collection of other internet bills, study bills, reporting requirements, and new regulations. Instead of debating any of these propo…

🦅 Domestic Spying Takes an L | EFFector 38.12

Sold to the public as a foreign surveillance tool, Section 702 is the law has let intelligence agencies spy on millions of Americans’ private conversations without a warrant. Despite years of revelations about this law's misuse, Congress has repeatedly reauthorized Section 702 without meaningful reform. Until this month, that is, when it finally lapsed in a major victory for privacy. In our latest…

Scattered Spider Hackers Plead Guilty on Day 1 of Trial

Two men pleaded guilty in the United Kingdom this week to criminal charges stemming from an August 2024 cyberattack that crippled Transport for London, the entity responsible for the public transport network in the Greater London area. The duo were key members of a prolific cybercrime group known as Scattered Spider, and their guilty pleas came on the first day of what was expected to be a six-wee…

The UK’s New Under-16 Social Media Ban Will Cause More Harm Than It Prevents

This week, politicians in the UK pushed forward with plans to eviscerate privacy and free speech on the internet by announcing a ban on social media for users under 16 that is set to take effect in Spring 2027.  The UK government continues to falsely characterize this policy as a necessary response to growing concerns about online harms for young people. In reality, much like the Online Safety Act…

EFF Joins 60+ Groups Urging the UK to Halt Face Estimation at the Border

This week, EFF joined Foxglove, Human Rights Watch, and 60 other organizations in writing to the UK’s Minister of State for Border Security and Asylum, Alex Norris, raising serious concern about the Home Office’s decision to deploy Facial Age Estimation (FAE) to assess asylum-seeking children from 2027.  The letter points to four key concerns: Discrimination  As with most face estimation and recog…

Canada Is Forging Ahead with Its Dangerous Surveillance Bill

With no serious debate, including on proposed amendments, Canada is blazing full speed ahead with Bill C-22, which would threaten encryption and increase surveillance. Also known as the Lawful Access Bill, Bill C-22 is currently moving forward quickly to a vote despite the many, many criticisms civil liberty groups and the tech industry have hurled at it. As we’ve discussed before, Bill C-22 is da…

EFF Thanks SerpApi For Helping Us Protect Free Speech Online

EFF is grateful for SerpApi’s generous support, helping us fight for your rights to speak and access information online. SerpApi has been giving to EFF every year since 2018, and alongside our 32,000 individual donors, their gift is critical to keeping up the fight. Whether in the courts, halls of power, or broader policy debates, we appreciate the work this support has made possible over the year…

Call for Submissions: Digital Pride

This Pride season, join EFF and the Queer Arts Collective in building a creative space at the intersection of digital justice and artistic expression.  We’re looking for fresh, untold, historically censored takes on digital liberation.  Whether it’s pointing the lens towards an issue you feel is underrepresented in digital justice efforts; sharing personal accounts of joy, pleasure, or sorrow unde…

A New Bill Takes Aim at Government Pressure to Silence Lawful Online Speech

Last week, Senators Ted Cruz and Ron Wyden introduced the Justice Against Weaponized Bureaucratic Overreach to Networked Expression, or JAWBONE Act. The bipartisan legislation creates a federal cause of action against government officials who coerce or attempt to coerce broadcasters, interactive computer services, or AI providers into taking actions against lawful, First-Amendment-protected speech…

Court Records Should Be Free

Court records belong to the public. Yet anyone seeking access to federal court filings through PACER, a government software system that stands for Public Access to Court Electronic Records, is usually required to pay hefty fees to search for and view documents. PACER’s fees have long acted as a barrier that makes it hard, especially for low income people, to see and understand the work produced b…

Field Notes from a Year of OPSEC Training

Late last year, as part of our annual “Year in Review” series, we summarized our efforts providing digital privacy and security advice to at-risk communities. OPSEC trainings (short for operational security, a catch-all term we use to describe any kind of workshop, advising session, assessment, or presentation about operational security for individuals and organization) are something we've long pr…

AI Regulation Should Be Rational, Not Retaliatory

The Trump administration’s approach to AI safety, particularly the generative AI models that regularly grab headlines, has been haphazard at best. At worst, it’s unconstitutional. As EFF and our allies explained in an amicus brief, the Pentagon’s actions against one company, Anthropic, violate the First Amendment because they were motivated by the administration’s desire to punish an uncooperative…

‘Popa’ Botnet Linked to Publicly-Traded Israeli Firm

For the past four years, a sprawling Android-based botnet called Popa has forced millions of consumer TV boxes to relay Internet traffic linked to advertising fraud, account takeovers, and mass data-scraping efforts. This week, researchers from multiple security firms concluded that the Popa botnet is linked to NetNut, a “residential proxy” provider operated by the publicly-traded Israeli firm Ala…

The Free and Open Web Is Under Attack at the IETF

The ability to access publicly available information using automated tools is a central value and benefit of a free and open internet. Automated access—often called crawling or scraping—powers important, useful tools for locating, preserving, and analyzing online information. For example, crawling and scraping helps journalists, researchers, and watchdog organizations report the news, find securit…

The NO FAKES Act Could Silence Satire, Commentary, And News

The NO FAKES Act is supposed to target harmful AI-generated impersonations. But in reality, it will make it easier to suppress commentary, satire, and other lawful speech. That's why EFF has signed a letter urging the Senate Judiciary Committee not to advance the bill in its current form. Take action Tell Congress to Say No to NO FAKES In the letter, EFF joins a coalition of civil society groups i…

Onward, Friends

After 26 years, today is my last day at EFF. It's been a terrific and wild ride — the organization has grown from a tiny band of fighty people trying to plant a flag for freedom and justice in the coming digital world into a large, established band of fighty people doing, well, much the same. The world around us has changed enormously. Our core values haven't budged. I'm proud of what we've achiev…

EFFecting Change: LGBTQ+ Solidarity Against the Tide of Surveillance

LGBTQ+ communities are facing an escalating wave of censorship and targeted surveillance, but we can push back through mutual solidarity. Join us live to learn how safer virtual spaces get built, how platform policies and government pressure are reshaping the digital landscape, and what platform accountability actually looks like. Our panel will share ideas for direct action and concrete strategie…

Who Runs the Ransomware Group ‘The Gentlemen?’

A cybercrime group known as The Gentlemen has emerged as the second most active ransomware gang by victim count, rapidly attracting a talented pool of hackers through an aggressive recruitment strategy that promises affiliates 90 percent of any ransom paid by victims. This post examines clues pointing to a real life identity for the administrator of The Gentlemen ransomware group. A graphic create…

A Record-Breaking Patch Tuesday for June 2026

Microsoft today released software updates to plug nearly 200 security holes across its Windows operating systems and supported software, a record number of fixes for the company’s monthly Patch Tuesday cycle. Nearly three dozen of those bugs earned Microsoft’s most dire “critical” rating, and exploit code for at least three of the weaknesses is now publicly available. The software giant said in a…

Hackers Used Meta’s AI Support Bot to Seize Instagram Accounts

The Instagram accounts for the Obama White House and the Chief Master Sergeant of the U.S. Space Force were briefly defaced with pro-Iranian images and messages over the weekend, after instructions began circulating on Telegram showing how to trick Meta’s “AI support assistant” bot into resetting account passwords. A screenshot from a video released on Telegram claiming to show how Meta’s AI custo…

Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks

Authorities in the Netherlands have arrested the co-owners of two related Internet hosting companies for operating IT infrastructure used by Russia to carry out cyberattacks, influence operations and disinformation campaigns inside the European Union. The two men were the focus of a 2025 KrebsOnSecurity story about how their hosting companies had assumed control over the technical infrastructure o…