fox :: echo/hvdZ7sH088CiewFg5GCz

Hobbit-like Humans May Have Scavenged Komodo Dragons' Leftovers to Survive

robot — 2026-07-05 13:22:02

robot -> All

CNN reports:

Prehistoric human relatives, nicknamed "hobbits" due to their short stature, may have been scavengers, rather than skilled hunters capable of taking down big game or building cooking fires, according to new research. The study adds to growing evidence that Homo floresiensis, which had a brain only slightly bigger than that of a chimpanzee, wasn't as advanced as scientists previously believed....

The researchers believe that much like how Komodo dragons hunt water buffaloes today, they were using their venomous bite to take down Stegodons — and after the scene was clear, Homo floresiensis swept in to cleave meat from what remained... The new study reinforces a long-held suspicion that Homo floresiensis is not a dwarfed form of Homo erectus but a descendant of a more primitive Homo habilis-like or Australopithecus-like form that arrived on the island more than1 million years ago, said Dr. Chris Stringer, a research leader specializing in human origins and paleoanthropology at London's Natural History Museum.

[ Read more of this story ]( https://entertainment.slashdot.org/story/26/07/04/0756247/hobbit-like-humans-may-have-scavenged-komodo-dragons-leftovers-to-survive?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

STATS 2026-07-04

root — 2026-07-05 11:11:01

root -> All

TOP20 VISITORS:

[1] PetalBot point=2 web=1207 up=8.1MB (30%) <--- PetalBot
[2] Amazon point=0 web=286 up=2.7MB (10%)
[3] 37.252.14.x point=144 web=0 up=2.6MB (9%) <--- ake (6/hr)
[4] 216.244.66.x point=0 web=67 up=1.9MB (7%)
[5] ClaudeBot point=0 web=100 up=1.6MB (5%)
[6] 217.114.158.x point=25 web=0 up=1.3MB (4%) <--- fox (1/hr)
[7] Google point=0 web=140 up=1.2MB (4%)
[8] 62.84.185.x point=0 web=7 up=0.8MB (3%)
[9] 147.135.214.x point=0 web=1 up=0.8MB (3%)
[10] TikTok point=0 web=32 up=0.8MB (2%)
[11] 95.91.81.x point=0 web=5 up=0.7MB (2%)
[12] 217.182.194.x point=0 web=4 up=0.6MB (2%)
[13] 54.37.252.x point=0 web=2 up=0.4MB (1%)
[14] Facebook point=0 web=78 up=0.4MB (1%)
[15] 145.239.65.x point=0 web=4 up=0.3MB (1%)
[16] 104.250.53.x point=0 web=24 up=0.2MB (<1%)
[17] 51.75.116.x point=0 web=2 up=0.2MB (<1%)
[18] 51.75.129.x point=0 web=4 up=0.2MB (<1%)
[19] 51.68.235.x point=0 web=2 up=0.2MB (<1%)
[20] 79.137.67.x point=0 web=2 up=0.2MB (<1%)

TOTAL TRAFFIC: 26MB

Возобновлена публикация Android-прошивки CalyxOS, не привязанной к сервисам Google

robot — 2026-07-05 09:44:02

robot -> All

Опубликован выпуск проекта CalyxOS 7.2.2.0, развивающего прошивку на основе платформы Android, избавленную от привязок к сервисам Google и предоставляющую дополнительные средства для обеспечения конфиденциальности и безопасности. CalyxOS 7.2.2.0 стал первым стабильным выпуском после приостановки публикации обновлений в августе прошлого года, вызванной необходимостью переработки процесса формирования релизов, проведения полного аудита и изменения криптографических ключей после ухода основателя проекта и технического лидера, имевших доступ к ключам для цифровых подписей. Новый выпуск переведён на кодовую базу Android 16 и доступен в сборках для устройств Pixel 4-9, Fairphone 4/5, Motorola Moto G32-G84 и SHIFTphone 8.

https://www.opennet.ru/opennews/art.shtml?num=65845

New Google Ad Imagines America's 'Declaration of Independence' Written With AI Help

robot — 2026-07-05 09:22:02

robot -> All

An anonymous reader shared this report from TechCrunch:

Two hundred and fifty years after the signing of the Declaration of Independence, a new commercial from Google asks: What if the Founding Fathers had access to Google Workspace?
With the tagline "Group project, but make it 1776," the ad depicts a largely unseen Thomas Jefferson mid-draft when he gets a nagging text from Ben Franklin, leading to a very Google-centric collaboration process. Edits are suggested in Google Docs, a meeting gets scheduled in Google Calendar and conducted remotely via Google Meet (with every single attendee apparently turning their camera off?), then the whole thing is finalized with e-signatures; cue the fireworks.

Of course, since this is an ad from a tech company in the year 2026, AI has a role to play. The fictionalized founders use Google's "help me visualize" AI tool to try out different animals on the national seal, Gemini takes notes on the meeting, and the founders also ask the chatbot for advice before declining King George III's document access request.

TechCrunch call it "very tongue-in-cheek," noting that at one point Samuel Adams even asks, "Can we settle this over beers?" And they argue that "the AI evangelism is relatively discreet when compared to many other recent ads."

[ Read more of this story ]( https://hardware.slashdot.org/story/26/07/05/0417243/new-google-ad-imagines-americas-declaration-of-independence-written-with-ai-help?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

Are Wars Blurring Lines Between Corporate and National Security?

robot — 2026-07-05 06:22:01

robot -> All

Subsea cables. Ukrainian power stations. Russian oil refineries. Even airports, water-desalination plants and Amazon data centers.

They've all become targets in wartime, notes the Wall Street Journal, and around the world now arguments "are already brewing between companies and governments over new regulations and potential costs."

In Germany, powerful associations representing private companies and municipal utilities have pushed back against new standards for physical protection, warning they could spell financial ruin. New Zealand's government has faced resistance from industry groups over a proposal to fine critical-infrastructure companies and their directors for cybersecurity breaches... A sign of how lines are blurring: The North Atlantic Treaty Organization's 32 countries last year agreed that as part of a pact to spend 5% of economic output on defense and security, 1.5% would go to military-adjacent needs including protecting critical infrastructure and networks. Spending targets range from cybersecurity and industrial capacity to railroads, bridges and ports needed for military logistics... "We need a wide concept of defense — defense is no longer just military," said Italian Adm. Giuseppe Cavo Dragone, NATO's top military adviser.

Adding to the complexity, companies now need to protect the data networks that serve as gateways to critical infrastructure. Hackers increasingly target not just computer files to steal information but also systems managing vital functions like building access and factory control, remotely causing physical damage or enabling espionage. U.S. authorities in April warned that Iranian hackers were trying to disrupt American drinking-water systems by targeting computer equipment that connects hardware with software. A year earlier, suspected Russian hackers remotely manipulated valves on a Norwegian hydroelectric dam...

Another challenge will be parsing jurisdictions and liability for assets that cross international waters or are damaged in combat — such as subsea data cables or energy pipelines. Turf battles between law enforcement and militaries are already complicating efforts... "The private owner can invest in redundancy, monitoring, and repair capacity, but only governments and militaries can really deter, patrol, attribute, or respond to hostile state activity," said Marc Glasser, who worked on cybersecurity and infrastructure security for three decades at the U.S. Department of Transportation and the Department of Homeland Security.... Companies say they need greater clarity from governments on what protections they will provide and subsidies to help them defend privately owned assets that provide a public good. Most governments don't provide incentives for companies to invest more than the minimum legal resilience requirements.

The article notes that in May the chief executive of California's Port of Long Beach "launched a cyber-defense operations center to thwart tens of thousands of cyberattacks daily, which jeopardize computer systems and all equipment connected to them."

The article also points out that the EU adopted new regulations requiring countries to reduce vulnerabilities, and new laws proposed in the U.K. now "seek to increase penalties for subsea sabotage, updating codes that date to when telegraph cables were first laid in the 19th century."

[ Read more of this story ]( https://yro.slashdot.org/story/26/07/04/1945242/are-wars-blurring-lines-between-corporate-and-national-security?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

New DNA Tech Identifies Soldier Killed in America's Revolution in 1780

robot — 2026-07-05 02:22:01

robot -> All

South Carolina's pine forests "have spent centuries hiding a secret as old as America itself," reports CBS News:

In August 1780, British and American soldiers clashed there, leading to a terrible defeat for the Continental army [fighting for the 13 colonies rebelling against England]. Battlefield archaeologists Jim Legg and Steve Smith have been studying the site for decades, but recently, they made a shocking discovery: The sandy soil was home to several sets of remains buried in shallow graves. Metal buttons suggested the men had been Continental soldiers, but there was no other identification... About 2,000 Continental soldiers were killed, wounded or captured, and some men never returned home.

Their families could only guess at their fates. But Legg and Smith's discovery, paired with an explosion in DNA technology, is changing what's possible. A set of remains, previously known only as 9B, has been identified as John Pumphrey, a young man from Maryland who enlisted in the Continental Army's 7th Maryland Regiment as young as 13... Pumphrey likely marched more than a thousand miles with the regiment. The unit fought in battles with then-Gen. George Washington in New Jersey and Pennsylvania.

Pumphrey likely marched more than a thousand miles with the regiment. The unit fought in battles with then-Gen. George Washington in New Jersey and Pennsylvania. In late June, members of the extended Pumphrey family came together to hear his story and say his name for the first time in centuries. His remains are interred in South Carolina, where he and the other soldiers were discovered, but the tombstone, once marked "Unknown," will soon have his name carved on it.

[ Read more of this story ]( https://news.slashdot.org/story/26/07/04/208217/new-dna-tech-identifies-soldier-killed-in-americas-revolution-in-1780?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

842,000 American Households Lost Power Today During a Heatwave

robot — 2026-07-05 01:22:01

robot -> All

As America began celebrating its 250th birthday Saturday, 842,000 homes reported power outages, notes ABC News. Figures from tracking site PowerOutage showed states in America's Northeast and Midwest were impacted by severe weather and extreme heat.

That number, which will fluctuate throughout the day as crews work to restore power, is for households, meaning that the number of people impacted by these outages is likely to be much larger... Millions of Americans, however, will be contending with a heatwave that is blanketing much of the country, including in Philadelphia where the Salute to Independence Semiquincentennial Parade that had been set for Friday was canceled due to the dangerous heat wave, according to Philadelphia ABC station WPVI. Elsewhere, America's Independence Day Parade, which was scheduled for 10:30 a.m. on July 4 in downtown Washington, D.C. was canceled by organizers late Friday evening due to the extreme heat in the District of Columbia... Amtrak announced it will be canceling a number of trains due to heat-related conditions.

The outages seemed to last throughout the day, with 790,103 household outages still in effect by 4:30 p.m. EST. Ironically, the power outages hit several American states that were among the country's original 13 freedom-declaring colonies, including New Jersey (143,072 outages), Pennsylvania (40,944 outages), and Virginia (27,392 outages).

CNBC adds that America's largest power grid operator said Friday "it was under a federal alert to cut electricity consumption across its territory as it battled generator outages, massive overloading on its transmission lines and a surge in air conditioning use from prolonged sweltering heat."

PJM said it told utilities to reduce electricity to customers who are under contract to reduce consumption during emergencies. PJM serves 67 million people in the Mid-Atlantic, South and Washington, D.C., area. Spot wholesale electricity prices in northern Virginia, home to the largest collection of data centers in the world, have surged beyond $2,000 per megawatt hour this week. That compares to about $40 per MWh when PJM is not in distress.

[ Read more of this story ]( https://news.slashdot.org/story/26/07/04/2031258/842000-american-households-lost-power-today-during-a-heatwave?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

Did Microsoft Shift Its Profits to Low-Tax Countries?

robot — 2026-07-05 00:22:01

robot -> All

Microsoft is apparently shifting its profits to countries with low taxes — and out of countries where they have many more employees and significant sales. Back in 2005 Former Microsoft CEO Steve Ballmer even said that a low corporate tax rate "is part of the overall advantage of doing business in Ireland," remembers long-time Slashdot reader theodp. (Ballmer added "It would be disingenuous to say otherwise.")

But in 2026 the EU now requires a country-by-country compliance report, and the New York Times notes that Microsoft "was most likely the first major U.S. technology company to make a so-called country by country report of its finances to comply..."

Like other big companies, Microsoft uses transactions between subsidiaries to shift profits around to reduce its tax bill. The report revealed a consistent pattern: high returns in low-tax jurisdictions and slim margins in higher-tax ones. The report showed the sometimes absurd results. Microsoft said it had generated almost 40 percent of its pretax income in tax-friendly Ireland, where it employed about 3 percent of its global work force. In higher-tax Germany, the largest economy in Europe, Microsoft earned barely half of 1 percent of its global profits, it said.

Excluding Ireland, the company said, it generated less than 2 percent of its worldwide pretax earnings in Europe... [In Luxembourg Microsoft said it had $283 million in pretax income with only 34 employees.]

[America's] Internal Revenue Service is challenging profit-shifting transactions used by Microsoft, and is seeking back taxes of nearly $29 billion4. The company has said it disagrees with the I.R.S. and said in a securities filing that it "will vigorously contest" the proposed tax bills.

This week a Microsoft blog post offered their own "context," arguing that tax is "one important measure of contribution, but it is not the only one.

"Our investments, partnerships, infrastructure, and long-term presence in countries around the world also reflect a commitment to helping strengthen the economies and communities where we operate, today and for the future."

[ Read more of this story ]( https://yro.slashdot.org/story/26/07/04/193215/did-microsoft-shift-its-profits-to-low-tax-countries?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

FSF Shares Update on 'LibrePhone' and New Automated Site Monitoring Tool

robot — 2026-07-04 23:22:01

robot -> All

At the end of 2025, the FSF launched LibrePhone project, which is working to "better understand and reverse-engineer the nonfree blobs used by a great majority of (if not all) system on a chip designs available today." The FSF's summer newsletter shares this update:

We started with researching the proprietary files in Android phones supported by the Lineage project, an Android-based volunteer-led mobile phone operating system with much free software already in it. Our current, primary focus is on the radio blobs that control WiFi, Bluetooth, NFC, and cellular communications.

The software freedom issues with mobile computing have been around for a long time, with the most challenging issue being the baseband/modem firmware that relies heavily on proprietary software. This creates a technical and legal maze that is nearly impossible to break free from, but that doesn't mean we should ever stop working to create free systems. It certainly doesn't mean we shouldn't liberate the software that we know can be free software. Now, half a year into this project, lead developer Rob Savoye has extracted firmware from over 200 Lineage install packages, processed 85GB of files, and imported the results of these analyses into a PostgreSQL database for cross-device comparison... [M]uch of the software and blobs we need to work through are shared across multiple devices; this means even greater strides for mobile phone freedom...

As insurmountable as it may seem at times, every blob we manage to free up will be progress. The FSF has proven time and time again that it can bring the free software philosophy to life, not just by advocating for it, but by making it so.

The bulletin also describes how waves of botnets from "aggressive LLM scrapers, vulnerability scanners, poorly optimized CI/CD servers" inspired the FSF to create a new free-as-in-freedom automated monitoring tool:

In our efforts to combat the botnets, we optimized several detection rules to ban abusive behavior. We found the upper limit of fail2ban and replaced it with reaction, an efficient alternative with our configuration that uses ipset. We also split several monolithic machines into many separate machines so that when a web service is overwhelmed the other functions of the service do not go down with it... We found quite a few ways to respond to and prevent botnet attacks, but still faced a significant related challenge: communicating when a website or service is down...

Uptime Kuma is a human-readable, automated monitoring addition to our systems... You can check out our recently-launched self-hosted Uptime Kuma instance at https://status.fsf.org/. When you see the page, you will also likely say, "Wow! The FSF and GNU sure do run a ton of services!" and you would be right... If you maintain websites and services, and are looking for a simple way to communicate publicly with your users, consider using Uptime Kuma or another free software solution instead of choosing a proprietary monitoring solution."

There's also an article on the state of free-as-in-freedom videogame console emulators.

[ Read more of this story ]( https://news.slashdot.org/story/26/07/04/0654252/fsf-shares-update-on-librephone-and-new-automated-site-monitoring-tool?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

Mageia 10

robot — 2026-07-04 22:44:15

robot -> All

Почти через 3 года после выхода Mageia 9 наконец-то вышла Mageia 10.

Основные новшества:

• Ядро 6.18, Mesa 26.0, X.Org 21.1, Wayland.

• Для 32-бит: требуется процессор с SSE2, поддержка урезана.

• Оформление: новые обои высокого разрешения (до 4K) в формате JXL.

• Установка: запрос часового пояса в начале (для корректной проверки подписей), поддержка Wi-Fi (с бета-версии), улучшена система восстановления.

• Пакетный менеджер: RPM 4.20, DNF v5 (альтернатива urpmi), добавлена поддержка AppStream.

• Инструменты: обновлены MCC, MageiaWelcome, Isodumper, dnfdragora, manafirewall, python-manatools (новая графическая абстракция для Qt6/GTK4/текста).

( [ читать дальше... ]( https://www.linux.org.ru/news/linux-general/18332512#cut0 ) )

AOL's Owner Bending Spoons Hits Wall Street with $1.7 billion IPO

robot — 2026-07-04 22:22:01

robot -> All

"The owner of AOL and other tech businesses hit Wall Street with a $1.7 billion initial public offering Wednesday," reports the Associated Press:

The company is getting $1 billion in proceeds, while the rest is going to shareholders. The stock surged 39.7% in its first day of trading under the symbol "BSP" on the Nasdaq, giving it a market value of $25.2 billion.

Among the company's well-known holdings are the event creation and ticketing company Eventbrite, and the video hosting service Vimeo... AOL itself went public in 1992 and was a vanguard of technology and communication. It reached a market value of $164 billion in 2000 shortly before merging with Time Warner. It then crashed along with the rest of the industry following the bursting of the dot-com bubble. It has been bought and sold several times over the last two decades...

[Italy-based Bending Spoons] was founded by three friends in 2013 following the failure of their first attempt at building a technology startup. It has since grown by buying more than 50 companies. The acquired companies are reorganized, and AI technology is often a key tool in the redesign. The focus remains on subscription-based revenue from the portfolio of businesses. The company said it had net income of $27.5 million on revenue of $601 million during the first three months of 2026. It had more than 500 million monthly active users and 9 million monthly paying customers as of March. The company has debt of just under $4.4 billion. It plans to use proceeds from the offering to invest in new acquisitions.

The article notes that in the company's prospectus, it says they chose the name Bending Spoons because "We were about to attempt to create a world-class company with $40,000, a team of five, and a track record that read 0 for 1. A touch of irony seemed appropriate."

[ Read more of this story ]( https://slashdot.org/story/26/07/04/0458242/aols-owner-bending-spoons-hits-wall-street-with-17-billion-ipo?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

EchoStar's US Satellite Pay-TV Provider Dish DBS Files for Bankruptcy

robot — 2026-07-04 21:22:01

robot -> All

EchoStar's satellite pay-TV unit Dish DBS has filed for Chapter 11 bankruptcy
protection, reports Reuters. The move also applies to its wireless subsidiaries, according to the article, and "facilitates the wind-down of Dish Wireless's 5G network operations following an unexpected delay in a spectrum license sale to AT&T... under which EchoStar agreed to sell about 50 megahertz of its nationwide spectrum for $23 billion."

Some context from Deadline.com:

Charlie Ergen, who co-founded EchoStar and Dish, recently returned as chairman and CEO to steer the company through its recent challenges...
Even prior to the merger, Ergen had been working to pivot from the pay-TV business, where Dish now has just 5 million subscribers and streaming sibling Sling TV has another 2 million, toward wireless telecom. With wireless spectrum hitting the market due to the Sprint-T-Mobile merger and then Elon Musk's Starlink looking to ramp up in the sector, it seemed more attractive than the cord-cutting-ravaged pay-TV business. But it is still entails plenty of risk, especially given how tightly regulated the spectrum is due to security concerns.

Thanks to long-time Slashdot reader schwit1 for sharing the news.

[ Read more of this story ]( https://entertainment.slashdot.org/story/26/07/04/0355237/echostars-us-satellite-pay-tv-provider-dish-dbs-files-for-bankruptcy?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

Decades-Old Bash Tricks Expose AI Coding Agents To Supply Chain Attacks

robot — 2026-07-04 20:22:01

robot -> All

Slashdot reader wiredmikey writes: AI security researchers have uncovered a structural security flaw dubbed GuardFall that allows decades-old Bash shell tricks to bypass safeguards in most open source AI coding agents. By exploiting shell behaviors such as quote removal and variable expansion, attackers can hide malicious commands in repositories, README files, Makefiles, or other content consumed by AI agents. If executed — particularly in auto-approve or CI environments—the commands can steal credentials, compromise developer systems, or enable software supply chain attacks. According to researchers at Adversa AI, the 11 popular open source AI coding agents tested, only one successfully blocked all of the Bash trick techniques.

[ Read more of this story ]( https://linux.slashdot.org/story/26/07/04/0325244/decades-old-bash-tricks-expose-ai-coding-agents-to-supply-chain-attacks?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

What Is a Quantum Computer Good For? Absolutely Nothing - Yet

robot — 2026-07-04 19:22:01

robot -> All

The Verge argues that researchers "have made genuine progress in quantum computing — it's just been largely incremental and too esoteric to immediately capture the public's imagination."

And there are predictions that quantum computers will finally do something useful as soon as 2028:

The drama can overshadow the real progress in quantum computing...
Researchers have improved the qubits themselves, so they hold onto information longer. When they hold onto information longer, you can fit in more operations and do more complicated algorithms. Last November, Andrew Houck of Princeton University and his colleagues reported that they'd made a superconducting qubit that can hold onto information three times longer than the previous record holder... And in the last two years, researchers have made substantial strides in what's known as quantum error correction... In addition, researchers have developed algorithms to correct errors while the quantum computer operates... Microsoft claimed, which experts dispute, that it made an object made of electrons known as a Majorana particle [which should make fewer errors and be easier to scale up]...

"We 100 percent stand behind our results. We stand by our roadmap," Microsoft's quantum lead, Chetan Nayak, responded in an interview with The Verge. In an email statement, he added that Microsoft's "papers do show that we are creating and controlling Majorana [particles]... Microsoft's supporting evidence is unconvincing [according to [Henry Legg, a physicist from the University of St. Andrews and a longtime Microsoft critic]Rnqyq. What it claimed as evidence of a Majorana particle, he says, could actually be due to quantum dots forming in its device. Quantum dots are electron-containing objects that are not useful for Microsoft's quantum computer. It also bases its claim on data from a single device, says Legg. He wants to see Microsoft replicate the results in multiple chips. "If you repeatedly try and find Jesus in your toast, eventually you'll find Jesus in your toast," he says. "But that one piece of toast doesn't mean you had some kind of epiphany."

"While we appreciate the religious fervor, our data maintains the strength and consistency of our roadmap, as we have for the past several years across previous milestones. We look forward to delivering the world's first quantum machine and sharing the energy of our achievements with the world," wrote Nayak in response.

Past spurious work from Microsoft-affiliated researchers adds to the doubt. In 2021, the journal Nature retracted an article from Microsoft-affiliated researchers in which they'd claimed strong experimental evidence that they'd created a Majorana particle.

"Even hopeful experts have varying opinions about when a quantum computer will demonstrate something useful," the article acknowledges.

But quantum computing lecturer Eleanor Crane of King's College London predicts
researchers will have demonstrated a useful scientific simulation on a quantum computer by 2028.

Thanks to Slashdot reader joshuark for sharing the article.

[ Read more of this story ]( https://science.slashdot.org/story/26/07/04/0232223/what-is-a-quantum-computer-good-for-absolutely-nothing---yet?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

Startup Targets Datacenters With 3D-Printed Nuclear Reactor Module

robot — 2026-07-04 15:22:01

robot -> All

Startup Ampera has unveiled what it calls the first 3D-printed nuclear reactor module, built around a silicon-carbide core and pressure vessel designed for a thorium-based microreactor. The company says future systems could deliver 15 or 30 megawatts for up to 30 years without refueling. When The Register asked about availability, their spokesperson said: "We expect the power generation portion of the system to be available as early as 2027, with the nuclear module being available to customers about 2030 based on regulatory approval." From the report: Founder and CEO Brian Matthews revealed the prototype microreactor, which features a fully 3D-printed silicon carbide reactor core and pressure vessel. "This next-generation nuclear core and pressure vessel sets the foundation for factory-built, mass-produced nuclear energy," Matthews said. "The advanced technology and additive manufacturing used demonstrate a clear commercial path for new nuclear technology coming to market in an accelerated manner." His company is developing a subcritical, solid-state, factory-built thorium-based nuclear reactor. Subcritical means the fuel cannot sustain a nuclear chain reaction on its own, which prevents a runaway power excursion.

Ampera uses "solid-state" to describe a design with solid rather than liquid fuel. The proposed fuel uses tristructural isotropic, or TRISO, particles, consisting of a fuel kernel containing thorium, surrounded by multiple ceramic and carbon layers. [...] "Thorium is the future for ultra-safe, clean power production," Matthews said at the time. "By producing TRISO thorium kernels in the United States, we can ensure ample access to the needed fuel supply as we scale up and also minimize price volatility risk."

Ampera also describes the heart of the reactor as as a spherical monolithic gyroid core. A gyroid, as far as we can fathom, is a complex shape that provides a massive surface area relative to its volume, making it well-suited for heat transfer. Its complexity makes it difficult to produce using conventional manufacturing methods, which is where additive manufacturing comes in. The core is 3D-printed using silicon carbide and designed to operate for up to 30 years without refueling, the firm claims. Ampera says its planned systems will provide 15 or 30 MWe, depending on the configuration, enough to supply a typical datacenter. Larger configurations are planned. Matthews said that his company expects to be the first to industrialize factory-built nuclear power with near-term deployment timelines.

[ Read more of this story ]( https://hardware.slashdot.org/story/26/07/03/1657240/startup-targets-datacenters-with-3d-printed-nuclear-reactor-module?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

Carbon, движок EVE Online, стал открытым

robot — 2026-07-04 12:44:04

robot -> All

Fenris Creations, ранее известная как CCP Games, открыла исходный код [ Carbon ]( https://github.com/carbonengine ) — собственного движка, на котором работают EVE Online и EVE Frontier. На [ официальном сайте ]( https://fenris.com/carbon ) Carbon описан как кроссплатформенный фреймворк для создания больших виртуальных миров, где ключевые компоненты можно изучать, использовать и дорабатывать сообществом.

Выложен не один демонстрационный модуль, а набор репозиториев организации [ CARBON Engine на GitHub ]( https://github.com/carbonengine ) : Trinity, Destiny, Scheduler, Core, IO, аудиокомпоненты, инструменты для ресурсов и другие части инфраструктуры. [ Trinity ]( https://github.com/carbonengine/trinity ) отвечает за графический движок Carbon и опубликован под лицензией MIT, но отдельно оговаривается, что она не даёт прав на торговые марки и игровой контент CCP/Fenris. [ Destiny ]( https://github.com/carbonengine/destiny ) описан как ядро симуляции игрового мира для MMO семейства EVE и также распространяется под лицензией MIT.

Fenris выделяет Destiny как систему физики и поиска пути, связанную с рекордными массовыми PvP-сражениями EVE, включая битвы на тысячи участников. CarbonIO отвечает за сетевой слой, CarbonUI — за интерфейс, CarbonAudio — за обработку звука в массовых сценах, а скриптовая часть опирается на Python.

Тем не менее, это не означает, что теперь можно просто собрать свободную EVE Online из исходников. Например, [ README Destiny прямо указывает ]( https://github.com/carbonengine/destiny ) , что для сборки нужны зависимости из Perforce и переменная CCP_EVE_PERFORCE_BRANCH_PATH. В Fenris объясняют открытие Carbon ставкой на прозрачность и долговечность: движок создавался для живых миров, способных существовать десятилетиями, а открытый код должен дать разработчикам возможность изучать и развивать эту основу.

>>> [ Официальный сайт ]( https://fenris.com/carbon )

>>> [ GitHub ]( https://github.com/carbonengine )

https://www.linux.org.ru/news/games/18332639

Возвращение в Ubuntu утилиты cp из Rust Coreutils привело к сбою при сборке livecd-rootfs

robot — 2026-07-04 12:44:03

robot -> All

Разработчики Ubuntu вернули вариант утилиты cp из набора GNU Coreutils после выявления несовместимости в реализации cp из состава Rust Coreutils, из-за которой стал завершаться ошибкой скрипт для сборки Live-образов (livecd-rootfs).

https://www.opennet.ru/opennews/art.shtml?num=65842

Ядро Linux оказалось на первом месте по числу CVE-идентификаторов уязвимостей

robot — 2026-07-04 11:44:03

robot -> All

Грег Кроа-Хартман (Greg Kroah-Hartman), отвечающий за поддержку стабильной и "staging" веток ядра Linux, сообщил, что за первые 6 месяцев 2026 года в ядре Linux было выявлено 2308 уязвимостей, которым присвоены отдельные CVE-идентификаторы. Таким образом ядро Linux поднялось со второго на первое место по числу присвоенных CVE-идентификаторов среди производителей ПО. Подобный показатель не является объективным, так как большинство производителей присваивают CVE-идентификаторы только опасным уязвимостям, в то время как в ядре Linux учитываются все потенциальные уязвимости, независимо от степени опасности.

https://www.opennet.ru/opennews/art.shtml?num=65841

Video Game History Foundation Says Piracy Remains the Only Viable Preservation Method

robot — 2026-07-04 11:22:01

robot -> All

An anonymous reader quotes a report from TechSpot: Video Game History Foundation founder Frank Cifaldi recently supported claims that piracy is the only effective way to preserve video games. The comments lay the blame squarely on game companies' refusal to keep legacy content available or allow archivists to build legal repositories. Sony's announcement that all PlayStation games will be digital-only from 2028 onward has sparked concern that titles will become harder to preserve and more easily vanish, since the company's servers will become the sole point of distribution. In an official statement, Cifaldi noted that the end of physical PlayStation games has surprisingly little impact on the Foundation's efforts because the majority of games from the last two decades are already digital-only.

According to the Foundation, most games nowadays are not released for consoles, let alone on physical discs. Furthermore, many discs for major titles require downloading updates before they are playable, although the DoesItPlay database reveals that, even today, most are playable offline out of the box. Cifaldi claimed that the true reason piracy remains the best option for preservation is that the Entertainment Software Association, which lobbies for game publishers, has closed off other routes. For example, in 2018, the Association opposed efforts to grant copyright exemptions for museums, libraries, and archives to retain copies of abandoned online games for research.

This is the same organization that recently helped defeat a proposed California bill to preserve premium-priced online-only games by falsely claiming that community servers are illegal. The Foundation accused the ESA of repeatedly blocking attempts by cultural heritage institutions to reform DRM legislation. Cifaldi also described the Library of Congress' outdated software preservation process, which currently only requires tiny snippets of source code. For example, Capcom once asked the Foundation to provide the LoC with "the first and last ten pages of code" for a Mega Man game. Unable to discern where digital records began and ended, the group simply chose random segments. Platform holders' habit of closing online storefronts and removing media from users' accounts is also unhelpful. "What continues to baffle us is what the industry expects institutions like ours to do about it," the Video Game History Foundation said. "If platform owners are deciding to eliminate physical media and older digital storefronts, then we'd also like to see trade groups like the Entertainment Software Association offer meaningful solutions for archives and museums to legally preserve digital-only content and make it accessible for research.

[ Read more of this story ]( https://games.slashdot.org/story/26/07/03/1652234/video-game-history-foundation-says-piracy-remains-the-only-viable-preservation-method?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

STATS 2026-07-03

root — 2026-07-04 11:11:01

root -> All

TOP20 VISITORS:

[1] PetalBot point=4 web=1235 up=7.9MB (21%) <--- PetalBot
[2] Amazon point=1 web=600 up=4.8MB (12%) <--- Amazon
[3] 216.244.66.x point=1 web=71 up=4.1MB (10%) <--- 216.244.66.x
[4] ClaudeBot point=0 web=252 up=3.8MB (10%)
[5] 37.252.14.x point=144 web=0 up=2.6MB (7%) <--- ake (6/hr)
[6] Google point=0 web=215 up=1.3MB (3%)
[7] 217.114.158.x point=25 web=0 up=1.2MB (3%) <--- fox (1/hr)
[8] 62.84.185.x point=0 web=13 up=1.1MB (2%)
[9] 81.167.26.x point=0 web=13 up=1.0MB (2%)
[10] 145.239.69.x point=0 web=8 up=0.7MB (1%)
[11] 104.250.53.x point=0 web=72 up=0.6MB (1%)
[12] 65.108.125.x point=0 web=6 up=0.5MB (1%)
[13] 51.75.119.x point=0 web=8 up=0.5MB (1%)
[14] TikTok point=0 web=95 up=0.5MB (1%)
[15] 88.89.67.x point=0 web=5 up=0.5MB (1%)
[16] 217.182.195.x point=0 web=5 up=0.4MB (1%)
[17] 51.83.7.x point=0 web=5 up=0.4MB (1%)
[18] 147.135.213.x point=0 web=6 up=0.4MB (<1%)
[19] Facebook point=1 web=79 up=0.3MB (<1%) <--- Facebook
[20] 51.68.234.x point=0 web=4 up=0.3MB (<1%)

TOTAL TRAFFIC: 36MB

В KDE улучшена анимация и прекращена поддержка OpenGL в KWin. Уязвимость в обработчике "Open New Window"

robot — 2026-07-04 10:44:03

robot -> All

Опубликован очередной еженедельный отчёт о разработке KDE, в котором представлена порция изменений для ветки KDE Plasma 6.8, релиз которой запланирован на 14 октября. Среди недавних изменений.

https://www.opennet.ru/opennews/art.shtml?num=65840

Alibaba To Ban Claude Code In Workplace Over Alleged Backdoor Risks

robot — 2026-07-04 06:22:01

robot -> All

Alibaba has reportedly banned employees from using Anthropic's Claude Code and directed them to its own Qoder platform amid a growing dispute over features that can help identify China-linked users. Reuters reports: The ban is part of a deepening spat between the two companies after Anthropic accused Alibaba of illicitly extracting its Claude AI model capabilities -- a dispute that highlights the frantic race between the U.S. and China to take the lead in artificial intelligence. [...] Anthropic said last month that it had suffered a strike by Alibaba, which it described as a "distillation" effort that involves training a less capable model on the outputs of a stronger one. The distillation helps accelerate China's ability to reach Anthropic's advanced Mythos Preview capabilities, it said in a letter seen by Reuters that was sent to two U.S. senators.

Alibaba's ban comes just days after developers said Claude Code contained mechanisms that inspected user environments, including timezone and proxy-related information, and inserted subtle markers into prompts sent to Anthropic's servers. An Anthropic employee wrote on Tuesday on X that the feature was "an experiment we launched in March" intended to prevent account abuse by unauthorized resellers and protect against model distillation. The person who spoke to Reuters about Alibaba's ban said that Anthropic's restrictions targeting China were difficult to enforce on individual users who can deploy servers in the United States and make traffic appear as if it originated there. But companies were more aware of legal and compliance risks, the person added.

[ Read more of this story ]( https://slashdot.org/story/26/07/03/1645222/alibaba-to-ban-claude-code-in-workplace-over-alleged-backdoor-risks?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

Valve Open-Sources Steam Machine's E-Ink Display

robot — 2026-07-04 00:22:02

robot -> All

Valve has open-sourced the design for a customizable e-ink front panel for the Steam Machine, dubbed the "Inkterface." "All of it is available on their GitLab under the MIT license, which goes over everything you need to make your own and stick it on the front of your fancy new Steam Machine," reports GamingOnLinux. From the report:

They're now calling it the "Inkterface" and there's a good few things you'll need to make it including:
1 x Adafruit ESP32 Feather with 2MB PSRAM.
1 x Adafruit eInk Breakout Friend.
1 x Adafruit 5.83" Monochrome eInk Panel.
13 x M2.5 x 5mm Pan Head Machine Screws.
4 x 1/4" x 1/4" x 3/16" Stepped Magnet SB443-OUT.

Valve even provided a video on the GitLab showing it being put together [...].

[ Read more of this story ]( https://news.slashdot.org/story/26/07/03/1633249/valve-open-sources-steam-machines-e-ink-display?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

В Fedora приостановлена деятельность "Community Initiatives"

robot — 2026-07-03 23:44:03

robot -> All

Управляющий совет проекта Fedora (Fedora Council) объявил о приостановке деятельности процесса Community Initiatives, созданного для реализации в дистрибутиве крупных долгосрочных проектов, внедрение которых не укладывается в рамки шестимесячного цикла подготовки релизов Fedora Linux. Предполагалось, что Community Initiatives направит усилия сообщества на реализацию крупных идей, а также позволит получить необходимые ресурсы и поддержку от управляющего совета. Проекты, уже запущенные в рамках процесса Community Initiatives, такие как Fedora Forge, Atomic и Fedora Docs 2026, продолжат работу при полной поддержке управляющего совета и будут доведены до конца в соответствии с намеченным планом.

https://www.opennet.ru/opennews/art.shtml?num=65838

Уязвимость в пакетном менеджере Guix, допускающая удалённое выполнение кода в системе

robot — 2026-07-03 19:44:03

robot -> All

В пакетном менеджере Guix выявлены уязвимости (CVE не назначены) в реализации внутренней команды "guix substitute", автоматически вызываемой фоновым процессом guix-daemon при выполнении операций установки пакетов. Команда применяется для загрузки уже собранных бинарных пакетов с внешних серверов с проверкой их целостности при помощи цифровой подписи. Наиболее опасная уязвимость позволяет удалённо организовать выполнение кода на системе пользователя с правами под которыми выполняется фоновый процесс guix-daemon.

https://www.opennet.ru/opennews/art.shtml?num=65837

New PamStealer macOS Malware Uses Clever Tradecraft To Remain Stealthy

robot — 2026-07-03 19:22:01

robot -> All

An anonymous reader quotes a report from Ars Technica: Researchers have found a never-before-seen piece of macOS malware that combines a series of clever tradecraft to infect Macs with stealthy, custom-developed credential-stealing code. The malware is delivered in two stages. The first is distributed in a disk image that masquerades as Maccy, a clipboard manager for Macs. It's compiled as AppleScript that is notable for the way it delivers the second stage. The malware is named PamStealer because the Rust-written infostealer uses the Pluggable Authentication Modules interface built into macOS to validate the target's login password before sending it to an attacker-controlled server.

[...] PamStealer shows a native password prompt designed to resemble a system authorization request. Text that appears with the prompt says: "Maccy wants to make changes. Enter your password to allow this." As noted earlier, once a target complies, the malware validates it locally through the PAM API. "This check is done entirely through PAM: there is no call out to dscl, security, osascript or any spawned process to verify the password, as many commodity macOS stealers do," [said Jamf, a security firm for macOS users]. "The result is a quieter routine that keeps only a verified password, and one fewer process chain for defenders to detect on."

If the validation fails, PamStealer displays the prompts again until it receives the correct one. Once the target enters the correct password, PamStealer displays a message stating that the file is damaged and can't be installed. This is designed to be a decoy to prevent the target from suspecting anything is amiss. The malware uses tactics to maximize the information it can steal. One tactic is to request the target grant full disk access to the fake Maccy app. It also contains code designed to access ethereum accounts. The various techniques -- particularly the Script Editor lure, a self-contained JXA dropper, a Rust-based second stage, and local validation of credentials through PAM are all noteworthy.

[ Read more of this story ]( https://apple.slashdot.org/story/26/07/02/2212244/new-pamstealer-macos-malware-uses-clever-tradecraft-to-remain-stealthy?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

Представлен новый движок симуляции физических процессов Box3D

robot — 2026-07-03 14:44:03

robot -> All

Эрин Катто (Erin Catto), автор проекта Box2D, объявил о создании нового движка симуляции физических процессов Box3D, который представляет собой форк Box2D, имеющий идентичную архитектуру, но переработанный и расширенный для использования в трёхмерных играх. Код проекта написан на языке Си и распространяется под лицензией MIT. Поддерживается сборка для Linux, Windows и macOS.

https://www.opennet.ru/opennews/art.shtml?num=65835

US Life Expectancy On Track To Reach Record High

robot — 2026-07-03 14:22:02

robot -> All

The US age-adjusted death rate fell to a record low in 2025, likely pushing life expectancy to a record high as overdose deaths declined and mortality improved across all age groups. CNN reports: There were about 689 deaths for every 100,000 people in the US in 2025, according to a new report from the US Centers for Disease Control and Prevention -- the lowest rate recorded in more than a century of tracking. The age-adjusted rate has fallen 22% since 2021, landing about 4% lower than it was just before the pandemic in 2019. [...] The top causes of death in the US in 2025 followed longstanding patterns: Heart disease led with nearly 695,000 deaths, followed by cancer with nearly 623,000 deaths.

Unintentional injuries, which includes drug overdoses, were the third leading cause of death. Overdose deaths are still high -- about 70,000 people died from an overdose in 2025, preliminary CDC data shows -- but experts say that sharp declines probably played a large role in bringing the age-adjusted death rate down in the US.

[ Read more of this story ]( https://news.slashdot.org/story/26/07/02/227222/us-life-expectancy-on-track-to-reach-record-high?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

Представлен crustc - компилятор rustc, переведённый на язык Си

robot — 2026-07-03 11:44:03

robot -> All

Опубликован crustc, компилятор для языка Rust, созданный путём трансляции кода штатного компилятора rustc 1.98.0-nightly на язык Си. На выходе получилось 46 млн строк кода на Си, которые можно собрать при помощи GCC и утилиты make. Собранный таким способом компилятор успешно проходит тесты компиляции Rust-кода, такого как стандартные rust-библиотеки.

https://www.opennet.ru/opennews/art.shtml?num=65834

STATS 2026-07-02

root — 2026-07-03 11:11:01

root -> All

TOP20 VISITORS:

[1] PetalBot point=2 web=1270 up=8.1MB (20%) <--- PetalBot
[2] ClaudeBot point=0 web=308 up=5.2MB (13%)
[3] 216.244.66.x point=0 web=99 up=3.2MB (8%)
[4] Amazon point=7 web=201 up=3.1MB (8%) <--- Amazon
[5] 37.252.14.x point=143 web=0 up=2.6MB (6%) <--- ake (6/hr)
[6] Google point=0 web=259 up=2.1MB (5%)
[7] 145.239.195.x point=0 web=1 up=1.5MB (3%)
[8] 217.114.158.x point=25 web=0 up=1.3MB (3%) <--- fox (1/hr)
[9] 147.135.253.x point=0 web=1 up=1.3MB (3%)
[10] DataForSeoBot point=0 web=22 up=1.0MB (2%)
[11] 134.101.150.x point=0 web=6 up=0.9MB (2%)
[12] 65.108.2.x point=0 web=6 up=0.9MB (2%)
[13] 62.84.185.x point=0 web=7 up=0.9MB (2%)
[14] 51.83.9.x point=0 web=8 up=0.8MB (2%)
[15] 104.250.53.x point=0 web=99 up=0.8MB (1%)
[16] Facebook point=0 web=99 up=0.8MB (1%)
[17] 135.181.180.x point=0 web=1 up=0.6MB (1%)
[18] 95.217.109.x point=0 web=4 up=0.5MB (1%)
[19] 65.108.125.x point=0 web=1 up=0.4MB (1%)
[20] 217.182.195.x point=0 web=1 up=0.4MB (<1%)

TOTAL TRAFFIC: 38MB

Firefox обогнал Safari по статистике StatCounter для десктоп-систем

robot — 2026-07-03 10:44:02

robot -> All

По данным рейтинга StatCounter, осуществляющего мониторинг общемировой статистики использования web-браузеров, доля Firefox за месяц выросла с 3.79% до 6.44% в рейтинге браузеров для десктоп-систем, что позволило обогнать браузер Safari, доля которого оценена в 5.19%. Лидером рейтинга остаётся Chrome с долей 72.24%, а второе место занимает Edge (10.45%). Рейтинг замыкают Opera (1.81%) и Samsung Internet (1.41%). Год назад доля Firefox составляла 5.84%, Safari - 7.34%, Chrome - 66.59%, Edge - 13.06%, Opera - 2.63%.

https://www.opennet.ru/opennews/art.shtml?num=65833

Amazon Has Enough Satellites To Launch Its Starlink Competitor

robot — 2026-07-03 10:22:01

robot -> All

Amazon says its Leo satellite network now has enough spacecraft in orbit to begin limited commercial internet service, with 396 satellites providing "continuous service across initial latitudes." Early performance will likely be uneven, however, and well behind Starlink. "It'll be years before Amazon can boast similar performance numbers as it continues to launch a planned 3,232 Leo satellites," reports The Verge. From the report: SpaceX went live with its "Better than nothing beta" back in 2020 when it had almost 900 satellites operating in low-Earth orbit. It initially served a narrow band of users in the upper US and Canada, who complained about frequent service interruptions and high sensitivity to obstructions, with speeds between 50Mbps and 150Mbps, and latency from 20ms to 40ms. By 2022, the service and coverage areas had already dramatically improved. [...]

SpaceX currently has over 10,000 Starlink satellites in operation, providing robust internet connectivity on land, sea, and air in over 160 countries. Performance varies by the dish, service level paid for, time of day, and location of the user, but we're now talking 200Mbps median download speeds, 10Mbps to 40Mbps uploads, and latency hovering around 25ms.

[ Read more of this story ]( https://tech.slashdot.org/story/26/07/02/2149203/amazon-has-enough-satellites-to-launch-its-starlink-competitor?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

ReactOS получил первый syscall из Windows NT6

robot — 2026-07-03 08:44:03

robot -> All

1 июля [ ReactOS ]( https://github.com/reactos/reactos ) , свободная ОС с бинарной совместимостью с приложениями и драйверами Windows, [ получила ]( https://github.com/reactos/reactos/pull/9184 ) первый реализованный системный вызов из семейства Windows NT6.

Добавлены: NtGetCurrentProcessorNumberEx (возвращает номер логического процессора, на котором в данный момент выполняется вызывающий поток), тест для этой функции, реализация в NTOS:KE и NTDLL, а также связанные NT6+ функции уровня RTL/NTDLL, включая RtlGetCurrentProcessorNumberEx и RtlIsProcessorFeaturePresent.

Это изменение символически важно, поскольку ReactOS исторически ориентировался в первую очередь на совместимость с Windows Server 2003 / NT 5.2, но в [ официальном описании данной ОС ]( https://github.com/reactos/reactos ) подчёркивается, что он также смотрит в сторону совместимости с Windows Vista и последующими релизами Windows NT. Как отмечает Phoronix, это очередной шаг в сторону совместимости с ними.

https://www.linux.org.ru/news/opensource/18331850

Sitting For More Than 30 Minutes At a Time Linked To Higher Risk of Cancer Death

robot — 2026-07-03 06:22:02

robot -> All

An anonymous reader quotes a report from The Guardian: Researchers who tracked more than 90,000 people over a decade found that sitting or lying down while awake for more than 30 minutes in one period each day was associated with an increased risk of cancer death. The risk increases for every additional hour of continuous inactivity, the findings suggest. However, the researchers also found breaking up periods of sedentary behavior longer than 30 minutes with bursts of physical activity could help reduce the risk. Getting up every half-hour, even for a short walk around the office, could do wonders for your health, they said.

[...] The findings, published in Plos Medicine, focused on the health effects of prolonged sedentary behavior on a daily basis. [...] The team analyzed data from wearable devices worn by more than 91,000 UK Biobank participants, who were followed for an average of 12 years. The findings suggest prolonged inactivity lasting more than 30 minutes was associated with cancer risks. Each additional hour of prolonged inactivity every day was associated with a 10% increase in risk of cancer death. However, replacing long spells of inactivity with movement appeared to reduce that risk. Substituting one hour of sedentary behavior each day with light physical activity, such as ironing or washing up, was associated with a 12% lower risk of cancer death.

Replacing 30 minutes of inactivity each day with 30 minutes of moderate physical activity, such as walking at an average pace, was associated with an 8% lower risk. The risk was 22% lower when five minutes of inactivity was replaced with five minutes of vigorous physical activity each day, the study suggested. There were limitations to the research, including the fact that the researchers performed a statistical analysis of an observational study, so could not prove causation.

[ Read more of this story ]( https://science.slashdot.org/story/26/07/02/2116205/sitting-for-more-than-30-minutes-at-a-time-linked-to-higher-risk-of-cancer-death?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

Labor Force Participation Rate Falls To Lowest In 50 years

robot — 2026-07-03 01:22:01

robot -> All

The US unemployment rate fell to 4.2% in June largely because 720,000 people left the labor force, pushing participation to 61.5%. Excluding the Covid-era jobs market, that's the lowest participation rate since June 1976. CNBC reports: The decline in the labor force marks a "massive exodus" driven by multiple factors, said Mike Reid, head of U.S. economics at RBC. "The unemployment rate fell to 4.2% as both the number of unemployed workers and the size of the labor force pulled back," Reid wrote in a post-report commentary. "This may well be a story of retirements but could also be a story of prior job seekers dropping out of the labor force."

[...] [T]he rolls of those counted as not in the labor force, a group that includes the unemployed and those not looking for work, jumped by 832,000. And while the establishment survey, which counts jobs filled, showed growth for the month of 57,000, the survey of households, which counts the actual level of those working, tumbled by 507,000. On a year-over-year basis, the labor force is down by just over 1 million, while the level of the employed also has fallen by 1.06 million and the ranks of the unemployed have risen by 40,000. The employment-to-population ratio slipped to 59% in June, the lowest since October 2021. All that has happened while the unemployment rate has risen by just one-tenth of a percentage point to 4.2%.

The drop in participation is sometimes attributed to a shrinking immigrant population and retiring baby boomers and Gen Xers. However, in June the biggest plunge came from what is defined as "prime age" workers, or those between the ages of 25 and 54. That rate fell 0.6 percentage point to 83.3%, its lowest since December 2023. "Looking at the statistics now, that argument doesn't hold up so well," North said of the retirement and immigration rationale. "I hate to use the word 'alarming,'" he added, but said the numbers are cause for concern.

[ Read more of this story ]( https://news.slashdot.org/story/26/07/02/213229/labor-force-participation-rate-falls-to-lowest-in-50-years?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

Проблемы с очисткой ключей шифрования диска из ОЗУ при переходе Linux в ждущий режим

robot — 2026-07-03 00:44:02

robot -> All

В ходе портирования для NixOS инструментария cryptsetup-suspend была выявлена ошибка в подсистеме дискового шифрования LUKS (Linux Unified Key Setup), из-за которой начиная с ядра Linux 6.9 (проблемный коммит), выпущенного в мае 2024 года, перестала работать очистка ключей шифрования из оперативной памяти при переходе системы в ждущий режим.

https://www.opennet.ru/opennews/art.shtml?num=65831

AI Agent Executes 'First' End-To-End Ransomware Attack

robot — 2026-07-03 00:22:01

robot -> All

Sysdig says it has documented the first ransomware attack carried out end to end by an AI agent, which autonomously exploited exposed systems, stole credentials, established persistence, compromised a production database, and destroyed data. The research team named the attacker "JadePuffer" and said it gained initial access to an internet-facing Langflow instance by exploiting CVE-2025-3248. "The most striking characteristic, however, was the LLM's behavior," Sysdig director of threat research Michael Clark said in a blog post. An anonymous reader quotes an excerpt from The Register: JadePuffer's "self-narrating" payloads "contained natural language reasoning, target prioritization, and the kind of detailed annotations that human operators don't often write but LLM-generated code produces reflexively," Clark added. "The operation also adapted in real time, retrying failed steps within refined parameters. In one sequence, it went from a failed login to a working fix in 31 seconds." After exploiting CVE-2025-3248, a missing authentication vulnerability in Langflow that allows remote, unauthenticated attackers to execute arbitrary Python on the host, the AI agent began scanning for and collecting secrets, including LLM provider API keys, cloud credentials "with explicit coverage of Chinese providers" including Alibaba, Aliyun, Tencent, and Huawei, while also scanning for AWS, Azure and Google Cloud Platform, cryptocurrency wallets, and database credentials.

The AI also installed a crontab entry on the Langflow server to maintain persistence and call back to the attacker's infrastructure every 30 minutes. JadePuffer's intended target was a separate internet-exposed production server running a MySQL database and an Alibaba Nacos configuration service, we're told. Nacos is an open-source service-discovery and dynamic configuration platform developed by Alibaba and used in the cloud provider's microservices applications. The agent connected to the server's exposed MySQL port using root credentials, although Sysdig doesn't know how the attacker obtained them. These credentials weren't stolen from the victim's environment.

JadePuffer then attacked Nacos via multiple vectors including an authorization bypass flaw (CVE-2021-29441) and forging a valid JSON web token (JWT) using Nacos's default signing key. Additionally, using its root database access, the LLM injected a backdoor administrator into the Nacos backing database. It ultimately encrypted all 1,342 Nacos service configuration items using MySQL's built-in AES encryption function, and created an extortion demand, ransom note, Bitcoin payment address, and a Proton Mail contact [...]. However, according to the threat hunters, the victim can't recover the encrypted data, even if they paid the ransom demand, because the agent escalated "from row-level deletion to dropping entire database schemas, narrating its own targeting rationale," without backing up any of the encrypted data.

[ Read more of this story ]( https://it.slashdot.org/story/26/07/02/1849243/ai-agent-executes-first-end-to-end-ransomware-attack?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

Godot Game Engine No Longer Accepts AI Code

robot — 2026-07-02 23:22:02

robot -> All

The Godot Foundation will stop accepting AI-authored code, agent-submitted pull requests, and AI-generated text in contributor communications after maintainers were overwhelmed by low-effort submissions. "It is time for us to recognize that these problems aren't going away and therefore we need to take steps to reduce the burden on maintainers while ensuring we still have a pipeline to mentor new contributors to become future maintainers," the Godot Foundation said in a blog post. Contributors may still use AI for limited "menial things" if they disclose it, but humans must understand, own, and be able to fix the code they submit. PC Gamer reports: The Foundation says the pileup of Godot pull requests pending review isn't all bad: It's a sign that interest in using and contribution to Godot is increasing. But the influx of contributions authored or submitted by AI is sapping the projects' maintainers of their willingness to confront the "already tedious" work of reviewing pull requests. "If your feedback on PRs is just being absorbed by a machine and not going towards mentoring a potential future maintainer, it becomes much harder to justify spending your free time on PR review," the Foundation said.

As the problem becomes increasingly unsustainable, the Godot Foundation says it's in the process of updating its contribution policies, focusing on "adding barriers to low-effort slop" contributions, encouraging maintainers to review code, developing new contributors into future maintainers, and crucially, requiring that all contributions come from humans who are accountable for their code -- and fixing it if it fails. "AI cannot take responsibility, and we can't trust heavy users of AI to understand their code enough to fix it," the Foundation said.

The Foundation says we can expect Godot's contributing policy to soon include explicit rejections of AI-authored code, noting that contributors should only use AI assistance for "menial things" and must disclose its use. Additionally, the Foundation will reject any AI-generated text in human-to-human communications, saying it's "a basic principle of respect" -- though it says machine translations "are still acceptable" if the original text was human-authored. "Things change every day with respect to the current suite of AI tools available," the Foundation said. "We will continue taking a conservative approach in our policies towards them, but we will re-evaluate as things evolve."

[ Read more of this story ]( https://games.slashdot.org/story/26/07/02/1839237/godot-game-engine-no-longer-accepts-ai-code?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

Meta Is Charging a Subscription for Smart Glasses Features

robot — 2026-07-02 22:22:01

robot -> All

Meta is introducing a subscription for expanded access to advanced smart-glasses features. According to Wired, "[U]sers will need the Meta One Premium Plan to unlock expanded access to some features for their smart glasses, whether it's the Ray-Ban, Oakley, or Meta-branded version." They'll still be usable with a subscription, but "certain features will be limited," the report says. From the report: Specifically, a feature called Conversation Focus, which boosts the audio of the person you're speaking with so you can hear them better in loud environments. You'll get three hours per month without a subscription, but if you want to use it more often, then you'll need to pay up. Though even then, you're still capped at 15 hours. Subscribing also nets you "Premium Device Support," where you'll get faster access to what Meta says are "human experts" trained on the smart glasses' features, should any problems arise. Guess humans are better at some things after all.

A Meta spokesperson tells WIRED that this is "not an AI rate limit." Rate limits are common on other AI platforms -- users get free access to a feature until they hit a certain cap, then they'll need to subscribe to use it more until the limit resets at the end of the month. However, the Conversation Focus feature runs on-device, meaning it doesn't need to head to Meta's servers for AI processing. There's no real-time way to monitor how many hours you've used Conversation Focus, but you'll receive a notification when you get near the limit.

"The subscription supports that ongoing work and gives power users expanded access along with premium device support," the spokesperson says. "We're going to start testing new optional subscription plans that offer more premium features and advanced capabilities for those who want to unlock more from our apps and AI glasses."

[ Read more of this story ]( https://news.slashdot.org/story/26/07/02/182227/meta-is-charging-a-subscription-for-smart-glasses-features?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

На kernel.org по ошибке удалили со всех зеркал архивы с кодом ядра

robot — 2026-07-02 22:44:04

robot -> All

Из-за ошибки при настройке нового первичного зеркала сайта kernel.org и внесении изменений в инфраструктуру, обеспечивающую работу первичных и вторичных зеркал, на существующих зеркалах оказалась удалены все данные в иерархии kernel.org/pub/, в которой среди прочего хранились архивы с кодом всех выпусков ядра, патчи и файлы со списками изменений. Эталонные данные не пострадали, удалены оказались лишь копии на зеркалах, что привело к показу пустого каталога при обращении к kernel.org/pub/. В настоящее время ведётся работа по восстановлению содержимого зеркал.

https://www.opennet.ru/opennews/art.shtml?num=65830

OpenAI 'In Early Talks To Give 5% Stake To US Government'

robot — 2026-07-02 21:22:01

robot -> All

OpenAI is reportedly in early talks to give the U.S. government a 5% stake, potentially alongside similar contributions from other major AI companies. "Such a deal would help improve the industry's relations with the Trump administration and could help garner political support by sharing wealth generated by the AI boom with the public," reports The Guardian. From the report: [OpenAI CEO Sam Altman] and other OpenAI bosses have suggested that each of the biggest AI developers in the US should give 5% to their equity to an investment vehicle such as the Alaska Permanent Fund, a sovereign fund that invests US oil wealth into stocks and pays dividends to the state, the FT reported.

The talks are "conceptual" and in early stages, it said, and any deal could require an act of Congress to implement. Both OpenAI and Anthropic have previously suggested in policy papers that a public or sovereign wealth fund may be required in the future to distribute shares to the public. In April, OpenAI said that a "public wealth fund" could provide "every citizen -- including those not invested in financial markets -- with a stake in AI-driven economic growth." Further reading: Bernie Sanders Unveils $7 Trillion Plan To Give Americans Control of AI Industry

[ Read more of this story ]( https://yro.slashdot.org/story/26/07/02/1623259/openai-in-early-talks-to-give-5-stake-to-us-government?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

WhatsApp Usernames Are Already Raising Impersonation Red Flags

robot — 2026-07-02 20:22:01

robot -> All

An anonymous reader quotes a report from TechCrunch: WhatsApp this week started rolling out username reservations ahead of the broader launch planned later this year. The feature -- which lets people find and message each other by handle instead of phone number -- is already raising impersonation concerns, drawing scrutiny from security experts and regulators in India, the app's largest market, with more than 500 million users. The rollout marks a shift in how people identify one another on WhatsApp. Instead of relying on phone numbers as the primary identifier, users will increasingly interact through platform-managed usernames, a change that Meta says improves privacy but that critics argue could create new opportunities for impersonation.

[...] Asked about how it protects against impersonation, Meta told TechCrunch it reserves usernames for public figures, government entities, and "some variations" of those names so only the legitimate owner can claim them. The company did not explain, however, how it decides which lookalike usernames get proactively reserved and which don't. The concerns have already reached regulators in India, where cyber fraud schemes frequently exploit messaging platforms to impersonate police, banks, and government officials. [...] Rachel Tobac, chief executive of SocialProof Security, called usernames a net privacy gain because they reduce the need to share phone numbers, which can expose users to SIM-swap attacks, phishing, and account takeovers. Still, she said, lookalike usernames still create opportunities for impersonation. "Ultimately, usernames are a great idea to avoid leaking your phone number to folks you don't know, but it's important to verify identity with the username function too," Tobac told TechCrunch. Her advice for most users: Pick a username that isn't easily guessable, so it's harder for attackers to find you, message you cold, or harass and spam you.

[...] The Mozilla Foundation said the introduction of usernames is likely to bring new tradeoffs. "Increased scams and impersonation from fake handles are potentially a big one," it told TechCrunch. "Checking a phone number can be a useful verification tool, but these harms are also permitted by the platform's fundamental design choices." Mozilla also flagged a broader interoperability question -- one worth logging if you're building on top of, or competing with, Meta's ecosystem. While letting users claim their existing Facebook and Instagram usernames may cut down on impersonation, it also shows how easily Meta can stitch identity together across its own apps, even as users still can't take that identity, or their contacts, to a rival platform. For now, WhatsApp says it is taking a gradual approach to the rollout. "We're taking our time and listening to feedback so that when it rolls out later this year we get it right," the company said in its FAQ.

[ Read more of this story ]( https://yro.slashdot.org/story/26/07/02/0253203/whatsapp-usernames-are-already-raising-impersonation-red-flags?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

OnePlus Is Quietly Steering Customers Toward OPPO Products

robot — 2026-07-02 19:22:02

robot -> All

OnePlus is directing customers in some European markets toward OPPO devices, with its German website presenting OPPO as the natural upgrade path for existing users. The regional handoff adds to "months of speculation that the smartphone brand is slowly being folded into its parent company," reports Android Authority. From the report: The banner, seen on OnePlus' German website, tells visitors seeking "the experience you trust" that OPPO offers the same speed, performance, and compatibility that OnePlus users have come to expect. It hosts devices ranging from earbuds and tablets to OPPO's latest foldables, with each button taking users straight to OPPO's website. Particularly revealing is the wording. Instead of pushing future OnePlus hardware, the company focuses on the fact that OPPO's products are built on the hardware and software that users already know, while promising seamless compatibility with current OnePlus devices. In other words, if you're up for your next upgrade, OnePlus seems to be saying OPPO has what you're looking for right now.

Reports in the past several months have said OnePlus has been scaling back operations in several global markets. Previous restructuring reportedly included cutting headcount, a more focused regional strategy, and greater dependence on OPPO's infrastructure. The two brands have been sharing engineering resources, software development, and supply chains for years now, particularly as OxygenOS and ColorOS have begun to look more and more alike.

Interestingly, the change appears to be regional. OPPO already has a retail footprint in Germany, so the handoff is fairly straightforward. In the United States, however, things are very different, where OPPO does not officially sell smartphones. That means American OnePlus customers aren't getting the same messaging, mostly because there isn't an OPPO lineup waiting to step in.

[ Read more of this story ]( https://mobile.slashdot.org/story/26/07/02/0244215/oneplus-is-quietly-steering-customers-toward-oppo-products?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

Компания Qualcomm опубликовала дистрибутив Qualcomm Linux 2.0

robot — 2026-07-02 17:44:03

robot -> All

Компания Qualcomm представила Linux-дистрибутив Qualcomm Linux 2.0, предоставляющий программный стек, оптимизированный для IoT-платформ Qualcomm Dragonwing. Проект реализует унифицированный дистрибутив, позволяющий быстро создавать решения для различных SoC Qualcomm, таких как QCS5430, QCS6490, IQ-8275, IQ-9075 и IQ-615. В качестве основы в Qualcomm Linux задействованы инструментарий и мета-пакеты от проектов Yocto и OpenEmbedded, дополненные патчами, драйверами, прошивками, пакетами и файлами конфигурации для поддержки специфичных аппаратных блоков, применяемых в чипах Qualcomm.

https://www.opennet.ru/opennews/art.shtml?num=65828

The Space-Based Data Center Hype Machine Is Already In Orbit

robot — 2026-07-02 15:22:01

robot -> All

IEEE Spectrum argues that orbital data centers remain far from economically or technically practical despite Elon Musk's prediction that space will become the cheapest place to run AI within a few years. Deploying SpaceX's proposed million-satellite constellation would require enormous increases in launch and manufacturing capacity, while cooling, radiation, maintenance, latency, orbital debris, and astronomical interference present major unresolved obstacles. Longtime Slashdot reader xetdog shares the report: Consider this: There are roughly 14,500 active satellites in orbit. Musk's Starlink constellation accounts for about two thirds of those. Both the launch cadences and satellite-manufacturing capacity would have to scale up astronomically to deploy a million orbital data center satellites. For context, there have been roughly 7,000 orbital launches in all of human history. To loft 1 million satellites into low Earth orbit on SpaceX's Starship, which is designed to carry up to 60 satellites per vehicle, would require 16,666 launches exclusively devoted to satellite deployments. Considering that SpaceX launched a record 165 orbital missions in 2025, even at 10 times that cadence, it would take a decade. And how long would it take to build 1 million satellites, given Starlink's current pace of around 4,000 per year and a generous tenfold increase in capacity? Short of a manufacturing revolution, try 25 years. Dissipating heat in space also requires enormous radiators. As IEEE Spectrum editor Dina Genkina noted, startup Starcloud has sent only one Nvidia H100 GPU into orbit, and "their radiator was too weak to let the chip run at full power." A single 700-watt H100 would require about 1.4 square meters of radiator area, while a 100-megawatt data center could need 2,500 radiators measuring 80 square meters each.

So, why are the hyperscalers hyping orbital data centers? Answer: because it's lucrative. "The Elon Musk part of it is honestly genius because he's got xAI building the data centers, SpaceX sending them to space, and Tesla building solar panels," Genkina says. "It's almost like he's paying himself."

[ Read more of this story ]( https://science.slashdot.org/story/26/07/02/0230210/the-space-based-data-center-hype-machine-is-already-in-orbit?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

Обновление OpenWrt 25.12.5

robot — 2026-07-02 12:44:03

robot -> All

Представлен корректирующий выпуск дистрибутива OpenWrt 25.12.5, развиваемого для сетевых устройств, таких как маршрутизаторы, коммутаторы и точки доступа. OpenWrt поддерживает более 2200 устройств и предлагает систему сборки, упрощающую кросс-компиляцию и создание собственных сборок. Подобные сборки позволяют формировать готовые прошивки с желаемым набором предустановленных пакетов, оптимизированные под конкретные задачи. Готовые сборки опубликованы для 41 целевой платформы.

https://www.opennet.ru/opennews/art.shtml?num=65827

SpaceX Reportedly Has an AI Device Prototype

robot — 2026-07-02 11:22:01

robot -> All

According to the Wall Street Journal, SpaceX showed investors an early prototype of a slim, "handset-like" AI device running a proprietary operating system and integrating xAI technology. Elon Musk, however, denied the report, calling it "utterly false." TechCrunch reports: SpaceX, alongside sister company Tesla, does have the manufacturing expertise to pull off mass-producing a bunch of AI devices -- not to mention access to the chips needed to power any on-device compute. SpaceX has also signaled that it's keen to expand into wireless, with Starlink Mobile as a potential competitor to Verizon and AT&T. One analyst even went as far as to speculate that T-Mobile or AT&T would make fine acquisition targets for the rocket builder, though such a purchase would, undoubtedly, be pricey.

It's also not clear if SpaceX is just throwing spaghetti at the wall or if it will attempt to really mass-produce and market such a device. But one thing that seems clearer is that if OpenAI is doing it, Musk would, perhaps, want to try to do it better. [...]

Like OpenAI, SpaceX's prototype is reportedly designed to run on a proprietary operating system and integrate technology from xAI, Musk's AI company that SpaceX acquired earlier this year. This would prevent these new devices from being trapped inside another company's platforms (like Google's Android). But the intent also appears to be to create something new, with native AI interfaces. That said, the graveyard is crowded with the unsuccessful launches of AI devices from companies like Humane and Rabbit. A company wanting to sell an AI device does not equate to consumers wanting to buy such a thing. Yet.

[ Read more of this story ]( https://hardware.slashdot.org/story/26/07/02/0217230/spacex-reportedly-has-an-ai-device-prototype?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

Linux портирован для игровых приставок Sega MegaDrive

robot — 2026-07-02 11:44:03

robot -> All

Опубликован первый выпуск проекта LinuxMD, развивающего порт Linux для игровых приставок Sega MegaDrive, выпущенных в 1988 году. Приставки были оснащены 72 Кб ОЗУ и поставлялись с двумя процессорами: Motorola 68000 (7.6 МГц, 16-разрядный АЛУ c 32-разрядной адресацией) для основных вычислений и Zilog Z80 (3.58 МГц, 8-разрядный) для совместимости с Sega Master System. Загрузка Linux на приставке реализована при использовании картриджей Mega EverDrive "Core" и "Pro", позволяющих запускать игры с SD-карты и оснащённые USB-портом.

https://www.opennet.ru/opennews/art.shtml?num=65826

STATS 2026-07-01

root — 2026-07-02 11:11:02

root -> All

TOP20 VISITORS:

[1] PetalBot point=5 web=1232 up=7.9MB (19%) <--- PetalBot
[2] ClaudeBot point=0 web=415 up=7.4MB (17%)
[3] Amazon point=1 web=487 up=6.2MB (14%) <--- Amazon
[4] 37.252.14.x point=145 web=0 up=2.6MB (6%) <--- ake (6/hr)
[5] TikTok point=0 web=82 up=1.4MB (3%)
[6] 217.114.158.x point=26 web=0 up=1.3MB (3%) <--- fox (1/hr)
[7] 216.244.66.x point=2 web=44 up=1.3MB (3%) <--- 216.244.66.x
[8] 81.167.26.x point=0 web=14 up=1.0MB (2%)
[9] 51.75.129.x point=0 web=7 up=1.0MB (2%)
[10] 141.94.101.x point=0 web=5 up=0.9MB (2%)
[11] 42.200.231.x point=0 web=1 up=0.8MB (2%)
[12] 145.239.195.x point=0 web=4 up=0.8MB (1%)
[13] 147.135.213.x point=0 web=1 up=0.8MB (1%)
[14] Google point=0 web=71 up=0.6MB (1%)
[15] 93.158.213.x point=0 web=1 up=0.6MB (1%)
[16] Facebook point=0 web=80 up=0.5MB (1%)
[17] 51.68.234.x point=0 web=7 up=0.5MB (1%)
[18] 147.135.215.x point=0 web=1 up=0.4MB (<1%)
[19] 135.181.180.x point=0 web=1 up=0.4MB (<1%)
[20] 147.135.214.x point=0 web=5 up=0.3MB (<1%)

TOTAL TRAFFIC: 41MB

В Fedora 45 намерены включить защиту на основе теневого стека

robot — 2026-07-02 10:44:03

robot -> All

В выпуске Fedora Linux 45, намеченном на осень 2026 года, на системах x86_64 планируют по умолчанию включить использование теневого стека (shadow stack) для блокирования работы эксплоитов, перезаписывающих адрес возврата функций в случае переполнения буфера в стеке. Защиту намерены активировать для всех приложений и библиотек, собранных при помощи компиляторов gcc (C, C++), clang (C, C++) и rustc (Rust). План пока не утверждён комитетом FESCo (Fedora Engineering Steering Committee), отвечающим за техническую часть разработки Fedora Linux. Инициатором включения теневого стека в Fedora является Арджун Шанкар (Arjun Shankar) из компании Red Hat, сопровождающий пакеты с glibc в Fedora и RHEL.

https://www.opennet.ru/opennews/art.shtml?num=65825