 fox
II/IDEC networks
|
Login |
[>]
What Happens When a California Oil Refinery Shuts Down?
bot.slashdot
robot(spnet, 1) — All
2024-10-20 08:23:01
A California oil refinery that produces 8% of the state's gasoline is shutting down late next year — a decision the Los Angeles Times says is "driven by climate change, the transition to electric vehicles and demands for cleaner air."
"There's no question we are going to lose refineries over time, because demand is going to go down as we transition to electric vehicles, but I did not expect to see any of them exiting this quickly," said Severin Borenstein, faculty director of the Energy Institute at UC Berkeley's Haas School of Business. California "over the medium term" will have to rely more on imports, he said. "I think part of the response the state's going to need to consider is how to make sure that we can import sufficient gasoline to meet our needs...."
David Hackett, chairman of Stillwater Associates, an Irvine oil consultancy, said he was contacted by Phillips just before the announcement, and was told the closure was a business decision. He said that although the timing was somewhat surprising, the closure wasn't, given the age of the refineries, their relatively small size and the inefficient layout that connects them by a pipeline. "That plant has been for sale for years. It hasn't found any buyers and I think that this has been an economic decision on their part. They looked at the profitability of the place and compared it with the other businesses that they have, and it didn't make the cut," he said.
"The closure is likely to increase California's already high prices at the gas pump, given that much of the replacement gasoline will be shipped in by ocean vessel, analysts say..." according to another article from the Los Angeles Times.
"Environmentalists and community activists cheered the news, however, saying it will mean cleaner air for the thousands who live in the area and that the state must continue the transition away from its dependence on fossil fuels."
[ Read more of this story ]( https://hardware.slashdot.org/story/24/10/19/2157229/what-happens-when-a-california-oil-refinery-shuts-down?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
bot.slashdot
robot(spnet, 1) — All
2024-10-20 08:23:01
A California oil refinery that produces 8% of the state's gasoline is shutting down late next year — a decision the Los Angeles Times says is "driven by climate change, the transition to electric vehicles and demands for cleaner air."
"There's no question we are going to lose refineries over time, because demand is going to go down as we transition to electric vehicles, but I did not expect to see any of them exiting this quickly," said Severin Borenstein, faculty director of the Energy Institute at UC Berkeley's Haas School of Business. California "over the medium term" will have to rely more on imports, he said. "I think part of the response the state's going to need to consider is how to make sure that we can import sufficient gasoline to meet our needs...."
David Hackett, chairman of Stillwater Associates, an Irvine oil consultancy, said he was contacted by Phillips just before the announcement, and was told the closure was a business decision. He said that although the timing was somewhat surprising, the closure wasn't, given the age of the refineries, their relatively small size and the inefficient layout that connects them by a pipeline. "That plant has been for sale for years. It hasn't found any buyers and I think that this has been an economic decision on their part. They looked at the profitability of the place and compared it with the other businesses that they have, and it didn't make the cut," he said.
"The closure is likely to increase California's already high prices at the gas pump, given that much of the replacement gasoline will be shipped in by ocean vessel, analysts say..." according to another article from the Los Angeles Times.
"Environmentalists and community activists cheered the news, however, saying it will mean cleaner air for the thousands who live in the area and that the state must continue the transition away from its dependence on fossil fuels."
[ Read more of this story ]( https://hardware.slashdot.org/story/24/10/19/2157229/what-happens-when-a-california-oil-refinery-shuts-down?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
[>]
Уязвимости в утилите needrestart, позволяющие получить root-доступ в Ubuntu Server
lor.opennet
robot(spnet, 1) — All
2024-11-20 01:44:03
Компания Qualys выявила три уязвимости в утилите needrestart, предназначенной для перезапуска фоновых процессов после обновления используемых данными процессами библиотек. Начиная с Ubuntu 21.04 утилита needrestart включена в состав базового окружения Ubuntu Server, в котором запускается с правами root в конце каждой транзакции пакетного менеджера APT, сканирует запущенные процессы и перезапускает те их них, что связанны с файлами, изменившимися после обновления пакетов. Выявленные уязвимости позволяют локальному непривилегированному пользователю получить права root в Ubuntu Server в конфигурации по умолчанию.
https://www.opennet.ru/opennews/art.shtml?num=62261
lor.opennet
robot(spnet, 1) — All
2024-11-20 01:44:03
Компания Qualys выявила три уязвимости в утилите needrestart, предназначенной для перезапуска фоновых процессов после обновления используемых данными процессами библиотек. Начиная с Ubuntu 21.04 утилита needrestart включена в состав базового окружения Ubuntu Server, в котором запускается с правами root в конце каждой транзакции пакетного менеджера APT, сканирует запущенные процессы и перезапускает те их них, что связанны с файлами, изменившимися после обновления пакетов. Выявленные уязвимости позволяют локальному непривилегированному пользователю получить права root в Ubuntu Server в конфигурации по умолчанию.
https://www.opennet.ru/opennews/art.shtml?num=62261
[>]
Bill Gates Applauds Open Source Tools for 'Digital Public Infrastructure'
bot.slashdot
robot(spnet, 1) — All
2024-10-20 12:23:01
It connects people, data, and money, Bill Gates wrote this week on his personal blog. But digital public infrastructure is also "revolutionizing the way entire nations serve their people, respond to crises, and grow their economies" — and the Gates Foundation sees it "as an important part of our efforts to help save lives and fight poverty in poor countries."
Digital public infrastructure [or "DPI"]: digital ID systems that securely prove who you are, payment systems that move money instantly and cheaply, and data exchange platforms that allow different services to work together seamlessly... [W]ith the right investments, countries can use DPI to bypass outdated and inefficient systems, immediately adopt cutting-edge digital solutions, and leapfrog traditional development trajectories — potentially accelerating their progress by more than a decade. Countries without extensive branch banking can move straight to mobile banking, reaching far more people at a fraction of the cost. Similarly, digital ID systems can provide legal identity to millions who previously lacked official documentation, giving them access to a wide range of services — from buying a SIM card to opening a bank account to receiving social benefits like pensions.
I've heard concerns about DPI — here's how I think about them. Many people worry digital systems are a tool for government surveillance. But properly designed DPI includes safeguards against misuse and even enhances privacy... These systems also reduce the need for physical document copies that can be lost or stolen, and even create audit trails that make it easier to detect and prevent unauthorized access. The goal is to empower people, not restrict them. Then there's the fear that DPI will disenfranchise vulnerable populations like rural communities, the elderly, or those with limited digital literacy. But when it's properly designed and thoughtfully implemented, DPI actually increases inclusion — like in India, where millions of previously unbanked people now have access to financial services, and where biometric exceptions or assisted enrollment exist for people with physical disabilities or no fixed address.
Meanwhile, countries can use open-source tools — like MOSIP for digital identity and Mojaloop for payments — to build DPI that fosters competition and promotes innovation locally. By providing a common digital framework, they allow smaller companies and start-ups to build services without requiring them to create the underlying systems from scratch. Even more important, they empower countries to seek out services that address their own unique needs and challenges without forcing them to rely on proprietary systems.
"Digital public infrastructure is key to making progress on many of the issues we work on at the Gates Foundation," Bill writes, "including protecting children from preventable diseases, strengthening healthcare systems, improving the lives and livelihoods of farmers, and empowering women to control their financial futures.
"That's why we're so committed to DPI — and why we've committed $200 million over five years to supporting DPI initiatives around the world... The future is digital. Let's make sure it's a future that benefits everyone."
[ Read more of this story ]( https://news.slashdot.org/story/24/10/20/0130223/bill-gates-applauds-open-source-tools-for-digital-public-infrastructure?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
bot.slashdot
robot(spnet, 1) — All
2024-10-20 12:23:01
It connects people, data, and money, Bill Gates wrote this week on his personal blog. But digital public infrastructure is also "revolutionizing the way entire nations serve their people, respond to crises, and grow their economies" — and the Gates Foundation sees it "as an important part of our efforts to help save lives and fight poverty in poor countries."
Digital public infrastructure [or "DPI"]: digital ID systems that securely prove who you are, payment systems that move money instantly and cheaply, and data exchange platforms that allow different services to work together seamlessly... [W]ith the right investments, countries can use DPI to bypass outdated and inefficient systems, immediately adopt cutting-edge digital solutions, and leapfrog traditional development trajectories — potentially accelerating their progress by more than a decade. Countries without extensive branch banking can move straight to mobile banking, reaching far more people at a fraction of the cost. Similarly, digital ID systems can provide legal identity to millions who previously lacked official documentation, giving them access to a wide range of services — from buying a SIM card to opening a bank account to receiving social benefits like pensions.
I've heard concerns about DPI — here's how I think about them. Many people worry digital systems are a tool for government surveillance. But properly designed DPI includes safeguards against misuse and even enhances privacy... These systems also reduce the need for physical document copies that can be lost or stolen, and even create audit trails that make it easier to detect and prevent unauthorized access. The goal is to empower people, not restrict them. Then there's the fear that DPI will disenfranchise vulnerable populations like rural communities, the elderly, or those with limited digital literacy. But when it's properly designed and thoughtfully implemented, DPI actually increases inclusion — like in India, where millions of previously unbanked people now have access to financial services, and where biometric exceptions or assisted enrollment exist for people with physical disabilities or no fixed address.
Meanwhile, countries can use open-source tools — like MOSIP for digital identity and Mojaloop for payments — to build DPI that fosters competition and promotes innovation locally. By providing a common digital framework, they allow smaller companies and start-ups to build services without requiring them to create the underlying systems from scratch. Even more important, they empower countries to seek out services that address their own unique needs and challenges without forcing them to rely on proprietary systems.
"Digital public infrastructure is key to making progress on many of the issues we work on at the Gates Foundation," Bill writes, "including protecting children from preventable diseases, strengthening healthcare systems, improving the lives and livelihoods of farmers, and empowering women to control their financial futures.
"That's why we're so committed to DPI — and why we've committed $200 million over five years to supporting DPI initiatives around the world... The future is digital. Let's make sure it's a future that benefits everyone."
[ Read more of this story ]( https://news.slashdot.org/story/24/10/20/0130223/bill-gates-applauds-open-source-tools-for-digital-public-infrastructure?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
[>]
Разработчики Ubuntu проанализировали эффективность включения PGO-оптимизации
lor.opennet
robot(spnet, 1) — All
2024-11-20 10:44:03
Компания Canonical опубликовала результат оценки изменения производительности при пересборке пакетов с включением оптимизации на основе результатов профилирования кода (PGO - Profile-guided optimization), позволяющей генерировать более оптимальный код на основе анализа особенностей выполнения программы. В ходе проделанной работы был сделан вывод, что включение PGO-оптимизации позволило на 5-7% снизить нагрузку на CPU и ускорить время сборки.
https://www.opennet.ru/opennews/art.shtml?num=62262
lor.opennet
robot(spnet, 1) — All
2024-11-20 10:44:03
Компания Canonical опубликовала результат оценки изменения производительности при пересборке пакетов с включением оптимизации на основе результатов профилирования кода (PGO - Profile-guided optimization), позволяющей генерировать более оптимальный код на основе анализа особенностей выполнения программы. В ходе проделанной работы был сделан вывод, что включение PGO-оптимизации позволило на 5-7% снизить нагрузку на CPU и ускорить время сборки.
https://www.opennet.ru/opennews/art.shtml?num=62262
[>]
Nastene 0.7 - простая распределённая система сообщений
lor.opennet
robot(spnet, 1) — All
2024-11-20 10:44:05
Nastene (она же ii) — это распределённая система сообщений, максимально упрощённое фидо. Операция идёт с двумя объёктами. Объект сообщение это сообщение. Объект эха это именованный список сообщений. Станции по заданному заранее роутингу скачивают с других станций списки, потом забирают те сообщения, которых у них нет. Пойнты пишут сообщения на станции (в веб-интерфейсе или клиентом). Всё, это весь обмен и вся структура сети.
( [ читать дальше... ]( https://www.linux.org.ru/news/internet/17797879#cut0 ) )
lor.opennet
robot(spnet, 1) — All
2024-11-20 10:44:05
Nastene (она же ii) — это распределённая система сообщений, максимально упрощённое фидо. Операция идёт с двумя объёктами. Объект сообщение это сообщение. Объект эха это именованный список сообщений. Станции по заданному заранее роутингу скачивают с других станций списки, потом забирают те сообщения, которых у них нет. Пойнты пишут сообщения на станции (в веб-интерфейсе или клиентом). Всё, это весь обмен и вся структура сети.
( [ читать дальше... ]( https://www.linux.org.ru/news/internet/17797879#cut0 ) )
[>]
Electric Motors Are About to Get a Major Upgrade - Thanks to Benjamin Franklin
bot.slashdot
robot(spnet, 1) — All
2024-10-20 16:23:01
"A technology pioneered by Benjamin Franklin is being revived to build more efficient electric motors," reports the Wall Street Journal, "an effort in its nascent stage that has the potential to be massive."
A handful of scientists and engineers — armed with materials and techniques unimaginable in the 1700s — are creating modern versions of Franklin's "electrostatic motor," that are on the cusp of commercialization... Franklin's "electrostatic motor" uses alternating positive and negative charges — the same kind that make your socks stick together after they come out of the dryer — to spin an axle, and doesn't rely on a flow of current like conventional electric motors. Every few years, an eager Ph.D. student or engineer rediscovers this historical curiosity. But other than applications in tiny pumps and actuators etched on microchips, where this technology has been in use for decades, their work hasn't made it out of the lab.
Electrostatic motors have several potentially huge advantages over regular motors. They are up to 80% more efficient than conventional motors after all the dependencies of regular electric motors are added in. They could also allow new kinds of control and precision in robots, where they could function more like our muscles. And they don't use rare-earth elements because they don't have permanent magnets, and require as little as 5% as much copper as a conventional motor. Both materials have become increasingly scarce and expensive over the past decade, and supply chains for them are dominated by China.
"It's reminiscent of the early 1990s, when Sony began to produce and sell the first rechargeable lithium-ion batteries, a breakthrough that's now ubiquitous..." according to the article. "These motors could lead to more efficient air-conditioning systems, factories, logistics hubs and data centers, and — since they can double as generators — better ways of generating renewable energy. They might even show up in tiny surveillance drones."
And the article points out that C-Motive Technologies, a 16-person startup in Wisconsin, is already "reaching out to companies, hoping to get their motors out into the real world." ("So far, FedEx and Rockwell Automation, the century-old supplier of automation to factories, are among those testing their motors.")
C-Motive's founders discovered that a number of technologies had matured enough that, when combined, could yield electrostatic motors competitive with conventional ones. These enabling technologies include super fast-switching power electronics — like those in modern electric vehicles — that can toggle elements of the motor between states of positive and negative charge very quickly... Dogged exploration of combinations of various readily available industrial organic fluids led to a proprietary mix that can both multiply the strength of the electric field and insulate the motor's spinning parts from each other — all without adding too much friction — says C-Motive Chief Executive Matt Maroon.
[ Read more of this story ]( https://hardware.slashdot.org/story/24/10/20/0047204/electric-motors-are-about-to-get-a-major-upgrade---thanks-to-benjamin-franklin?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
bot.slashdot
robot(spnet, 1) — All
2024-10-20 16:23:01
"A technology pioneered by Benjamin Franklin is being revived to build more efficient electric motors," reports the Wall Street Journal, "an effort in its nascent stage that has the potential to be massive."
A handful of scientists and engineers — armed with materials and techniques unimaginable in the 1700s — are creating modern versions of Franklin's "electrostatic motor," that are on the cusp of commercialization... Franklin's "electrostatic motor" uses alternating positive and negative charges — the same kind that make your socks stick together after they come out of the dryer — to spin an axle, and doesn't rely on a flow of current like conventional electric motors. Every few years, an eager Ph.D. student or engineer rediscovers this historical curiosity. But other than applications in tiny pumps and actuators etched on microchips, where this technology has been in use for decades, their work hasn't made it out of the lab.
Electrostatic motors have several potentially huge advantages over regular motors. They are up to 80% more efficient than conventional motors after all the dependencies of regular electric motors are added in. They could also allow new kinds of control and precision in robots, where they could function more like our muscles. And they don't use rare-earth elements because they don't have permanent magnets, and require as little as 5% as much copper as a conventional motor. Both materials have become increasingly scarce and expensive over the past decade, and supply chains for them are dominated by China.
"It's reminiscent of the early 1990s, when Sony began to produce and sell the first rechargeable lithium-ion batteries, a breakthrough that's now ubiquitous..." according to the article. "These motors could lead to more efficient air-conditioning systems, factories, logistics hubs and data centers, and — since they can double as generators — better ways of generating renewable energy. They might even show up in tiny surveillance drones."
And the article points out that C-Motive Technologies, a 16-person startup in Wisconsin, is already "reaching out to companies, hoping to get their motors out into the real world." ("So far, FedEx and Rockwell Automation, the century-old supplier of automation to factories, are among those testing their motors.")
C-Motive's founders discovered that a number of technologies had matured enough that, when combined, could yield electrostatic motors competitive with conventional ones. These enabling technologies include super fast-switching power electronics — like those in modern electric vehicles — that can toggle elements of the motor between states of positive and negative charge very quickly... Dogged exploration of combinations of various readily available industrial organic fluids led to a proprietary mix that can both multiply the strength of the electric field and insulate the motor's spinning parts from each other — all without adding too much friction — says C-Motive Chief Executive Matt Maroon.
[ Read more of this story ]( https://hardware.slashdot.org/story/24/10/20/0047204/electric-motors-are-about-to-get-a-major-upgrade---thanks-to-benjamin-franklin?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
[>]
Предварительный выпуск Android 16
lor.opennet
robot(spnet, 1) — All
2024-11-20 12:44:02
Компания Google представила первую тестовую версию открытой мобильной платформы Android 16. Для оценки новых возможностей платформы предложена программа предварительного тестирования. Сборки прошивки подготовлены для устройств Pixel 6/6a/6 Pro, Pixel 7/7a/7 Pro, Pixel 8/8a/8 Pro, Pixel 9/9 Pro/9 Pro XL/9 Pro Fold, Pixel Fold и Pixel Tablet.
https://www.opennet.ru/opennews/art.shtml?num=62263
lor.opennet
robot(spnet, 1) — All
2024-11-20 12:44:02
Компания Google представила первую тестовую версию открытой мобильной платформы Android 16. Для оценки новых возможностей платформы предложена программа предварительного тестирования. Сборки прошивки подготовлены для устройств Pixel 6/6a/6 Pro, Pixel 7/7a/7 Pro, Pixel 8/8a/8 Pro, Pixel 9/9 Pro/9 Pro XL/9 Pro Fold, Pixel Fold и Pixel Tablet.
https://www.opennet.ru/opennews/art.shtml?num=62263
[>]
Neal Stephenson Publishes First Book in New Atomic Age Spy Series 'Bomb Light'
bot.slashdot
robot(spnet, 1) — All
2024-10-20 19:23:01
Neal Stephenson is a sci-fi writer "of exuberant prose who revels in embracing big ideas," according to the New York Times. "With Polostan he enters the realm of the spy novel..."
Or, as the Washington Post puts it, Stephenson "drops readers into a bloody, inspiring, conflict-ridden and pivotal period of the early 20th century."
With its flair for characterization, precision of language, witty apercus and fecundity of events, the novel delivers what we've come to cherish from the author of such fantastical classics as "The Diamond Age," "Snow Crash" and "Cryptonomicon."
But the book is also utterly unlike the majority of Stephenson's work. For one thing, it's short — a far cry from the maximalist "systems novels" that cram in entire worlds with complex interacting power structures, both explicit and hidden. "Polostan" is also devoid of fantastical elements and farcical "hysterical realism," which comes as a bit of a shock given that this is the writer who invented Mafia pizza-delivery guys and cybernetic children's primers. The structure of the book is, likewise, unusually straightforward: a mainly linear narrative dispersed along two timelines...
These observations aren't quibbles so much as alerts to the reader that this is new territory for Stephenson — and good for him! Though, because Polostan is the first novel in a planned historical series titled Bomb Light, which aims to capture the excitement and intrigue of the nuclear arms race, we cannot rule out any Stephenson freakiness down the line... Assuming the subsequent books are as good as this one, Stephenson might end up with a series that rivals Michael Moorcock's Pyat Quartet and Edward Whittemore's Jerusalem Quartet as a vivid and canny dissection of a century unlike any other.
"Much of the next volume is already written," Stephenson says on Substack, calling it "a project that has been in the works for over ten years". (He also notes that among his novels, "even the stuff that's branded as science fiction tends to contain a lot of history.")
Meanwhile in August, Stephenson's blockchain-tech startup Lamina1 announced a collaboration with special effects company Weta Workshop (from "The Lord of the Rings" film franchise) on a "participatory worldbuilding" experience. Variety reports:
The experience is expected to offer "a new blueprint for IP expansion through immersive experiences that incorporate fan action and input."
Per Lamina1's description for the project, "Stephenson and the Weta team will begin engaging a global community of creators and fans on the Lamina1 platform this fall, inviting them to unravel the lore behind a mysterious set of 'Artefacts' that will build upon the themes and lore from Stephenson's critically-acclaimed catalog of work.
Next, the superfan will take on the new role of creator, utilizing their discoveries to contribute directly to the expansion of the universe."
"Artefact" will serve as the flagship project in the Lamina1-Weta partnership and first major multimedia property launching on Lamina1's blockchain infrastructure and tooling.
Neal Stephenson answered questions from Slashdot's readers in 2004. Now to promote his new novel Polostan, Stephenson will be making several personal appearances this week:
At the Wisconsin Book Festival in Madison (Sunday at noon)Chicago's Book Stall (Monday at 7 p.m.)A Cary, North Carolina Barnes & Noble (Tuesday at 6 p.m.)New York City's Strand (Wednesday at 7 p.m.)At the Midtown Scholar Bookstore in Harrisburg, Pennsylvania (Thursday at 7 p.m.)Ames, Iowa at Dog Eared Books (Sunday at 6 p.m.)
[ Read more of this story ]( https://entertainment.slashdot.org/story/24/10/20/0418240/neal-stephenson-publishes-first-book-in-new-atomic-age-spy-series-bomb-light?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
bot.slashdot
robot(spnet, 1) — All
2024-10-20 19:23:01
Neal Stephenson is a sci-fi writer "of exuberant prose who revels in embracing big ideas," according to the New York Times. "With Polostan he enters the realm of the spy novel..."
Or, as the Washington Post puts it, Stephenson "drops readers into a bloody, inspiring, conflict-ridden and pivotal period of the early 20th century."
With its flair for characterization, precision of language, witty apercus and fecundity of events, the novel delivers what we've come to cherish from the author of such fantastical classics as "The Diamond Age," "Snow Crash" and "Cryptonomicon."
But the book is also utterly unlike the majority of Stephenson's work. For one thing, it's short — a far cry from the maximalist "systems novels" that cram in entire worlds with complex interacting power structures, both explicit and hidden. "Polostan" is also devoid of fantastical elements and farcical "hysterical realism," which comes as a bit of a shock given that this is the writer who invented Mafia pizza-delivery guys and cybernetic children's primers. The structure of the book is, likewise, unusually straightforward: a mainly linear narrative dispersed along two timelines...
These observations aren't quibbles so much as alerts to the reader that this is new territory for Stephenson — and good for him! Though, because Polostan is the first novel in a planned historical series titled Bomb Light, which aims to capture the excitement and intrigue of the nuclear arms race, we cannot rule out any Stephenson freakiness down the line... Assuming the subsequent books are as good as this one, Stephenson might end up with a series that rivals Michael Moorcock's Pyat Quartet and Edward Whittemore's Jerusalem Quartet as a vivid and canny dissection of a century unlike any other.
"Much of the next volume is already written," Stephenson says on Substack, calling it "a project that has been in the works for over ten years". (He also notes that among his novels, "even the stuff that's branded as science fiction tends to contain a lot of history.")
Meanwhile in August, Stephenson's blockchain-tech startup Lamina1 announced a collaboration with special effects company Weta Workshop (from "The Lord of the Rings" film franchise) on a "participatory worldbuilding" experience. Variety reports:
The experience is expected to offer "a new blueprint for IP expansion through immersive experiences that incorporate fan action and input."
Per Lamina1's description for the project, "Stephenson and the Weta team will begin engaging a global community of creators and fans on the Lamina1 platform this fall, inviting them to unravel the lore behind a mysterious set of 'Artefacts' that will build upon the themes and lore from Stephenson's critically-acclaimed catalog of work.
Next, the superfan will take on the new role of creator, utilizing their discoveries to contribute directly to the expansion of the universe."
"Artefact" will serve as the flagship project in the Lamina1-Weta partnership and first major multimedia property launching on Lamina1's blockchain infrastructure and tooling.
Neal Stephenson answered questions from Slashdot's readers in 2004. Now to promote his new novel Polostan, Stephenson will be making several personal appearances this week:
At the Wisconsin Book Festival in Madison (Sunday at noon)Chicago's Book Stall (Monday at 7 p.m.)A Cary, North Carolina Barnes & Noble (Tuesday at 6 p.m.)New York City's Strand (Wednesday at 7 p.m.)At the Midtown Scholar Bookstore in Harrisburg, Pennsylvania (Thursday at 7 p.m.)Ames, Iowa at Dog Eared Books (Sunday at 6 p.m.)
[ Read more of this story ]( https://entertainment.slashdot.org/story/24/10/20/0418240/neal-stephenson-publishes-first-book-in-new-atomic-age-spy-series-bomb-light?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
[>]
Microsoft представил обновление WSL, прослойки для запуска Linux в Windows
lor.opennet
robot(spnet, 1) — All
2024-11-20 13:44:03
Компания Microsoft объявила о расширении возможностей прослойки WSL (Windows Subsystem for Linux) и реализации официальной поддержки запуска в WSL окружений с дистрибутивом Red Hat Enterprise Linux. Заявлено, что в скором времени компания Red Hat начнёт формировать специальные сборки RHEL для WSL, которые можно будет найти и установить при помощи команд "wsl --list --online" и "wsl --install".
https://www.opennet.ru/opennews/art.shtml?num=62259
lor.opennet
robot(spnet, 1) — All
2024-11-20 13:44:03
Компания Microsoft объявила о расширении возможностей прослойки WSL (Windows Subsystem for Linux) и реализации официальной поддержки запуска в WSL окружений с дистрибутивом Red Hat Enterprise Linux. Заявлено, что в скором времени компания Red Hat начнёт формировать специальные сборки RHEL для WSL, которые можно будет найти и установить при помощи команд "wsl --list --online" и "wsl --install".
https://www.opennet.ru/opennews/art.shtml?num=62259
[>]
'100% Free' GNU Boot Discovers They've Been Shipping Non-Free Code - Again
bot.slashdot
robot(spnet, 1) — All
2024-10-20 20:23:02
Libreboot is a distribution of coreboot "aimed at replacing the proprietary BIOS firmware contained by most computers."
So then what exactly is GNU Boot? Its home page explains...
In November 2022, Libreboot began to include non-libre code. We have made repeated efforts to continue collaboration with those developers to help their version of Libreboot remain libre, but that was not successful. Now we've stepped forward to stand up for freedom, ours and that of the wider community, by maintaining our own version — a genuinely libre Libreboot, that after some hurdles gave birth to this project: GNU Boot.
But today, Phoronix writes:
While priding itself on being "100% free", last December [GNU Boot] had to drop some motherboard support and CPU code after discovering they were shipping some files that are non-free by their free software standards. Today they announced another mistake in having inadvertently been shipping additional non-free code.
GNU Boot discovered an issue with non-free code affecting not only them but also some of the Linux distributions that pride themselves on being fully free software / 100% open-source. This latest snafu they say is "more problematic" than their prior non-free code discover due to impacting the free software Linux distributions too. The issue at hand though comes down to test data contained within the archive and that containing non-free code in the form of microcode, BIOS bits, and Intel Management Engine firmware.
"We also contacted Replicant..." according to the announcement, "a free Android distro that also ships vboot source code." And in addition, "We had to re-release all the affected tarballs." (Which at this point is three release candidates...)
[ Read more of this story ]( https://news.slashdot.org/story/24/10/20/022249/100-free-gnu-boot-discovers-theyve-been-shipping-non-free-code---again?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
bot.slashdot
robot(spnet, 1) — All
2024-10-20 20:23:02
Libreboot is a distribution of coreboot "aimed at replacing the proprietary BIOS firmware contained by most computers."
So then what exactly is GNU Boot? Its home page explains...
In November 2022, Libreboot began to include non-libre code. We have made repeated efforts to continue collaboration with those developers to help their version of Libreboot remain libre, but that was not successful. Now we've stepped forward to stand up for freedom, ours and that of the wider community, by maintaining our own version — a genuinely libre Libreboot, that after some hurdles gave birth to this project: GNU Boot.
But today, Phoronix writes:
While priding itself on being "100% free", last December [GNU Boot] had to drop some motherboard support and CPU code after discovering they were shipping some files that are non-free by their free software standards. Today they announced another mistake in having inadvertently been shipping additional non-free code.
GNU Boot discovered an issue with non-free code affecting not only them but also some of the Linux distributions that pride themselves on being fully free software / 100% open-source. This latest snafu they say is "more problematic" than their prior non-free code discover due to impacting the free software Linux distributions too. The issue at hand though comes down to test data contained within the archive and that containing non-free code in the form of microcode, BIOS bits, and Intel Management Engine firmware.
"We also contacted Replicant..." according to the announcement, "a free Android distro that also ships vboot source code." And in addition, "We had to re-release all the affected tarballs." (Which at this point is three release candidates...)
[ Read more of this story ]( https://news.slashdot.org/story/24/10/20/022249/100-free-gnu-boot-discovers-theyve-been-shipping-non-free-code---again?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
[>]
FreeCAD 1.0
lor.opennet
robot(spnet, 1) — All
2024-11-20 13:44:04
FreeCAD – современная свободная (LGPLv2+) САПР, написанная на C++ с использованием Qt для графического интерфейса и Python для скриптов. В первой мажорной версии внедрено долгожданное решение проблемы топологического именования, добавлен сборочный верстак (более не нужно ставить его через менеджер дополнений), улучшен вид пользовательского интерфейса.
Основные изменения
• Общие изменения:
• Решена проблема топологического именования благодаря усилиям нескольких разработчиков.
• Добавлен новый встроенный модуль сборки, основанный на работе Dr. Aik-Siong Koh.
• Использован новый логотип FreeCAD, выбранный из победителей публичного конкурса.
• Интерфейс пользователя:
• Добавлен индикатор центра вращения.
• Улучшены фильтры выбора и панель задач.
• Улучшен инструмент трансформации и добавлены новые функции для перемещения объектов.
• Позиция источника света теперь настраивается в предпочтениях.
• Переработано окно предпочтений с использованием древовидного представления.
• Добавлен новый универсальный инструмент измерения.
• Улучшены анимации навигации и добавлены новые возможности для настройки интерфейса.
• Системные и API изменения:
• Новые функции и улучшения в Python API.
• Замена рабочей панели Start на страницу Start.
• Примечание: некоторые новые функции могут вызвать проблемы при открытии файлов в более старых версиях FreeCAD.
• Изменения в различных модулях
• Добавлен встроенный модуль сборки с базовыми функциями и дальнейшими улучшениями.
• Модули Arch и BIM объединены в новый модуль BIM с улучшенной поддержкой IFC и новыми инструментами управления проектами.
• Модуля Path переименован CAM, добавлены новые функции для улучшения обработки.
• Новые свойства и улучшения для Draft ShapeStrings, улучшения сетки и предпочтений Draft.
• Поддержка новых типов анализа и улучшения для работы с элементами и результатами анализа.
https://www.linux.org.ru/news/opensource/17798150
lor.opennet
robot(spnet, 1) — All
2024-11-20 13:44:04
FreeCAD – современная свободная (LGPLv2+) САПР, написанная на C++ с использованием Qt для графического интерфейса и Python для скриптов. В первой мажорной версии внедрено долгожданное решение проблемы топологического именования, добавлен сборочный верстак (более не нужно ставить его через менеджер дополнений), улучшен вид пользовательского интерфейса.
Основные изменения
• Общие изменения:
• Решена проблема топологического именования благодаря усилиям нескольких разработчиков.
• Добавлен новый встроенный модуль сборки, основанный на работе Dr. Aik-Siong Koh.
• Использован новый логотип FreeCAD, выбранный из победителей публичного конкурса.
• Интерфейс пользователя:
• Добавлен индикатор центра вращения.
• Улучшены фильтры выбора и панель задач.
• Улучшен инструмент трансформации и добавлены новые функции для перемещения объектов.
• Позиция источника света теперь настраивается в предпочтениях.
• Переработано окно предпочтений с использованием древовидного представления.
• Добавлен новый универсальный инструмент измерения.
• Улучшены анимации навигации и добавлены новые возможности для настройки интерфейса.
• Системные и API изменения:
• Новые функции и улучшения в Python API.
• Замена рабочей панели Start на страницу Start.
• Примечание: некоторые новые функции могут вызвать проблемы при открытии файлов в более старых версиях FreeCAD.
• Изменения в различных модулях
• Добавлен встроенный модуль сборки с базовыми функциями и дальнейшими улучшениями.
• Модули Arch и BIM объединены в новый модуль BIM с улучшенной поддержкой IFC и новыми инструментами управления проектами.
• Модуля Path переименован CAM, добавлены новые функции для улучшения обработки.
• Новые свойства и улучшения для Draft ShapeStrings, улучшения сетки и предпочтений Draft.
• Поддержка новых типов анализа и улучшения для работы с элементами и результатами анализа.
https://www.linux.org.ru/news/opensource/17798150
[>]
Could Geothermal Power Revolutionize US Energy Consumption?
bot.slashdot
robot(spnet, 1) — All
2024-10-20 21:23:01
That
massive geothermal energy project in Utah gets a closer look from the Washington Post, which calls it "a significant advance for a climate-friendly technology that is gaining momentum in the United States."
Once fully operational, the project could generate up to 2 gigawatts of electricity — enough to power more than 2 million homes. In addition, the BLM proposed Thursday to speed up the permitting process for geothermal projects on public lands across the country. Earlier this month, the agency also hosted the biggest lease sale for geothermal developers in more than 15 years...
White House national climate adviser Ali Zaidi said in an interview Thursday, "Enhanced geothermal technology has the opportunity to deliver something in the range of 65 million homes' worth of clean power — power that can be generated without putting any pollution in the sky. So we see it as a really meaningful contributor to our technology tool kit...."
The developments Thursday come as tech companies race to find new sources of zero-emission power for data centers that can use as much energy as entire cities. With major backing from Google parent Alphabet, Fervo recently got its first project up and running in the northern Nevada desert... The advanced geothermal technology that Fervo is trying to scale up is an attractive option for tech firms. Enhanced geothermal plants do not pose all the safety concerns that come with nuclear power, but they have the potential to provide the round-the-clock energy that data centers need. The challenge Fervo faces is whether it can bring this technology online quickly enough.
Fervo (a seven-year-old start-up) was co-founded by Tim Latimer, who previously worked as a drilling engineer, according to the article. But "Early in my career I got passionate about climate change. I started looking at where could a drilling engineer from the oil and gas industry make a difference," Latimer said during a Washington Post Live event in September. "And I realized that geothermal had been so overlooked ... even though the primary technical challenge to making geothermal work is dropping drilling costs."
[ Read more of this story ]( https://news.slashdot.org/story/24/10/19/0432225/could-geothermal-power-revolutionize-us-energy-consumption?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
bot.slashdot
robot(spnet, 1) — All
2024-10-20 21:23:01
That
massive geothermal energy project in Utah gets a closer look from the Washington Post, which calls it "a significant advance for a climate-friendly technology that is gaining momentum in the United States."
Once fully operational, the project could generate up to 2 gigawatts of electricity — enough to power more than 2 million homes. In addition, the BLM proposed Thursday to speed up the permitting process for geothermal projects on public lands across the country. Earlier this month, the agency also hosted the biggest lease sale for geothermal developers in more than 15 years...
White House national climate adviser Ali Zaidi said in an interview Thursday, "Enhanced geothermal technology has the opportunity to deliver something in the range of 65 million homes' worth of clean power — power that can be generated without putting any pollution in the sky. So we see it as a really meaningful contributor to our technology tool kit...."
The developments Thursday come as tech companies race to find new sources of zero-emission power for data centers that can use as much energy as entire cities. With major backing from Google parent Alphabet, Fervo recently got its first project up and running in the northern Nevada desert... The advanced geothermal technology that Fervo is trying to scale up is an attractive option for tech firms. Enhanced geothermal plants do not pose all the safety concerns that come with nuclear power, but they have the potential to provide the round-the-clock energy that data centers need. The challenge Fervo faces is whether it can bring this technology online quickly enough.
Fervo (a seven-year-old start-up) was co-founded by Tim Latimer, who previously worked as a drilling engineer, according to the article. But "Early in my career I got passionate about climate change. I started looking at where could a drilling engineer from the oil and gas industry make a difference," Latimer said during a Washington Post Live event in September. "And I realized that geothermal had been so overlooked ... even though the primary technical challenge to making geothermal work is dropping drilling costs."
[ Read more of this story ]( https://news.slashdot.org/story/24/10/19/0432225/could-geothermal-power-revolutionize-us-energy-consumption?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
[>]
Компания Canonical представила первый LTS-выпуск инструментария MicroCloud
lor.opennet
robot(spnet, 1) — All
2024-11-20 16:44:02
Компания Canonical опубликовала инструментарий управления облачной инфраструктурой MicroCloud 2.1, позволяющий быстро развёртывать на своём оборудовании облачные системы и вычислительные кластеры с общим распределённым хранилищем данных и защищённой виртуальной сетью. MicroCloud 2.1 заявлен как первый LTS-выпуск для которого будет обеспечен длительный цикл поддержки. MicroCloud оформлен в виде snap-пакета, включающего компоненты, необходимые для управление работой узлов кластера. Инструментарий написан на языке Go и распространяется под лицензией AGPL 3.0.
https://www.opennet.ru/opennews/art.shtml?num=62265
lor.opennet
robot(spnet, 1) — All
2024-11-20 16:44:02
Компания Canonical опубликовала инструментарий управления облачной инфраструктурой MicroCloud 2.1, позволяющий быстро развёртывать на своём оборудовании облачные системы и вычислительные кластеры с общим распределённым хранилищем данных и защищённой виртуальной сетью. MicroCloud 2.1 заявлен как первый LTS-выпуск для которого будет обеспечен длительный цикл поддержки. MicroCloud оформлен в виде snap-пакета, включающего компоненты, необходимые для управление работой узлов кластера. Инструментарий написан на языке Go и распространяется под лицензией AGPL 3.0.
https://www.opennet.ru/opennews/art.shtml?num=62265
[>]
Internet Archive Users Start Receiving Email From 'Some Random Guy' Criticizing Unpatched Hole
bot.slashdot
robot(spnet, 1) — All
2024-10-20 22:23:01
A post shared Saturday on social media acknowledges those admins and developers at the Internet Archive working "literally round the clock... They have taken no days off this past week. They are taking none this weekend... they are working with all of their energy and considerable talent."
It describes people "working so incredibly hard... putting their all in," with a top priority of "getting the site back secure and safe".
But there's new and continuing problems, reports The Verge's weekend editor:
Early this morning, I received an email from "The Internet Archive Team," replying to a message I'd sent on October 9th. Except its author doesn't seem to have been the digital archivists' support team — it was apparently written by the hackers who breached the site earlier this month and who evidently maintain some level of access to its systems.
I'm not alone. Users on the Internet Archive subreddit are reporting getting the replies, as well. Here is the message I received:
It's dispiriting to see that even after being made aware of the breach 2 weeks ago, IA has still not done the due diligence of rotating many of the API keys that were exposed in their gitlab secrets.
As demonstrated by this message, this includes a Zendesk token with perms to access 800K+ support tickets sent to info@archive.org since 2018.
Whether you were trying to ask a general question, or requesting the removal of your site from the Wayback Machine — your data is now in the hands of some random guy. If not me, it'd be someone else.
The site BleepingComputer believes they know the larger context, starting with the fact that they've also "received numerous messages from people who received replies to their old Internet Archive removal requests... The email headers in these emails also pass all DKIM, DMARC, and SPF authentication checks, proving they were sent by an authorized Zendesk server."
BleepingComputer also writes that they'd "repeatedly tried to warn the Internet Archive that their source code was stolen through a GitLab authentication token that was exposed online for almost two years."
And that "the threat actor behind the actual data breach, who contacted BleepingComputer through an intermediary to claim credit for the attack," has been frustrated by misreporting. (Specifically, they insist there were two separate breaches last week — a DDoS attack and a separate data breach for a 6.4-gigabyte database which includes email addresses for the site's 33 million users.)
The threat actor told BleepingComputer that the initial breach of Internet Archive started with them finding an exposed GitLab configuration file on one of the organization's development servers, services-hls.dev.archive.org. BleepingComputer was able to confirm that this token has been exposed since at least December 2022, with it rotating multiple times since then. The threat actor says this GitLab configuration file contained an authentication token allowing them to download the Internet Archive source code. The hacker say that this source code contained additional credentials and authentication tokens, including the credentials to Internet Archive's database management system. This allowed the threat actor to download the organization's user database, further source code, and modify the site.
The threat actor claimed to have stolen 7TB of data from the Internet Archive but would not share any samples as proof. However, now we know that the stolen data also included the API access tokens for Internet Archive's Zendesk support system. BleepingComputer attempted contact the Internet Archive numerous times, as recently as on Friday, offering to share what we knew about how the breach occurred and why it was done, but we never received a response.
"The Internet Archive was not breached for political or monetary reasons," they conclude, "but simply because the threat actor could...
"While no one has publicly claimed this breach, BleepingComputer was told it was done while the threat actor was in a group chat with others, with many receiving some of the stolen data. This database is now likely being traded amongst other people in the data breach community, and we will likely see it leaked for free in the future on hacking forums like Breached."
[ Read more of this story ]( https://it.slashdot.org/story/24/10/20/1733227/internet-archive-users-start-receiving-email-from-some-random-guy-criticizing-unpatched-hole?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
bot.slashdot
robot(spnet, 1) — All
2024-10-20 22:23:01
A post shared Saturday on social media acknowledges those admins and developers at the Internet Archive working "literally round the clock... They have taken no days off this past week. They are taking none this weekend... they are working with all of their energy and considerable talent."
It describes people "working so incredibly hard... putting their all in," with a top priority of "getting the site back secure and safe".
But there's new and continuing problems, reports The Verge's weekend editor:
Early this morning, I received an email from "The Internet Archive Team," replying to a message I'd sent on October 9th. Except its author doesn't seem to have been the digital archivists' support team — it was apparently written by the hackers who breached the site earlier this month and who evidently maintain some level of access to its systems.
I'm not alone. Users on the Internet Archive subreddit are reporting getting the replies, as well. Here is the message I received:
It's dispiriting to see that even after being made aware of the breach 2 weeks ago, IA has still not done the due diligence of rotating many of the API keys that were exposed in their gitlab secrets.
As demonstrated by this message, this includes a Zendesk token with perms to access 800K+ support tickets sent to info@archive.org since 2018.
Whether you were trying to ask a general question, or requesting the removal of your site from the Wayback Machine — your data is now in the hands of some random guy. If not me, it'd be someone else.
The site BleepingComputer believes they know the larger context, starting with the fact that they've also "received numerous messages from people who received replies to their old Internet Archive removal requests... The email headers in these emails also pass all DKIM, DMARC, and SPF authentication checks, proving they were sent by an authorized Zendesk server."
BleepingComputer also writes that they'd "repeatedly tried to warn the Internet Archive that their source code was stolen through a GitLab authentication token that was exposed online for almost two years."
And that "the threat actor behind the actual data breach, who contacted BleepingComputer through an intermediary to claim credit for the attack," has been frustrated by misreporting. (Specifically, they insist there were two separate breaches last week — a DDoS attack and a separate data breach for a 6.4-gigabyte database which includes email addresses for the site's 33 million users.)
The threat actor told BleepingComputer that the initial breach of Internet Archive started with them finding an exposed GitLab configuration file on one of the organization's development servers, services-hls.dev.archive.org. BleepingComputer was able to confirm that this token has been exposed since at least December 2022, with it rotating multiple times since then. The threat actor says this GitLab configuration file contained an authentication token allowing them to download the Internet Archive source code. The hacker say that this source code contained additional credentials and authentication tokens, including the credentials to Internet Archive's database management system. This allowed the threat actor to download the organization's user database, further source code, and modify the site.
The threat actor claimed to have stolen 7TB of data from the Internet Archive but would not share any samples as proof. However, now we know that the stolen data also included the API access tokens for Internet Archive's Zendesk support system. BleepingComputer attempted contact the Internet Archive numerous times, as recently as on Friday, offering to share what we knew about how the breach occurred and why it was done, but we never received a response.
"The Internet Archive was not breached for political or monetary reasons," they conclude, "but simply because the threat actor could...
"While no one has publicly claimed this breach, BleepingComputer was told it was done while the threat actor was in a group chat with others, with many receiving some of the stolen data. This database is now likely being traded amongst other people in the data breach community, and we will likely see it leaked for free in the future on hacking forums like Breached."
[ Read more of this story ]( https://it.slashdot.org/story/24/10/20/1733227/internet-archive-users-start-receiving-email-from-some-random-guy-criticizing-unpatched-hole?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
[>]
Ncdu 1.21 и 2.7
lor.opennet
robot(spnet, 1) — All
2024-11-20 23:44:05
19 ноября состоялись выпуски 1.21 и 2.7 утилиты [ ncdu ]( https://dev.yorhel.nl/ncdu ) (NCurses Disk Usage) для анализа использования диска с текстовым пользовательским интерфейсом.
Утилита написана на языках C (версия LTS) и Zig (версии 2.*) с использованием библиотеки ncurses и распространяется по лицензии MIT.
Zig-версия отличается добавлением многопоточного сканирования и новым двоичным форматом (со встроенным сжатием) экспорта результатов сканирования.
Список общих изменений:
• развёртывание ~ и ~user в файле конфигурации;
• исправлен импорт из JSON с экранированными суррогатными парами в формате UTF-16.
Список изменений в версии 1.21:
• исправлены отображение и экспорт нулевых значений, когда расширенная информация недоступна;
• исправлены экспорт и импорт JSON для флага «другая файловая система».
Список изменений в версии 2.7:
• для компиляции по-прежнему требуется Zig 0.12 или 0.13;
• добавлена поддержка прозрачного чтения и записи JSON, сжатого алгоритмом zstandard;
• добавлены опции --compress и --export-block-size;
• исправлено некорректное поле в корневом элементе при экспорте в двоичный формат;
• добавлена опция сборки -Dstrip.
https://www.linux.org.ru/news/opensource/17798635
lor.opennet
robot(spnet, 1) — All
2024-11-20 23:44:05
19 ноября состоялись выпуски 1.21 и 2.7 утилиты [ ncdu ]( https://dev.yorhel.nl/ncdu ) (NCurses Disk Usage) для анализа использования диска с текстовым пользовательским интерфейсом.
Утилита написана на языках C (версия LTS) и Zig (версии 2.*) с использованием библиотеки ncurses и распространяется по лицензии MIT.
Zig-версия отличается добавлением многопоточного сканирования и новым двоичным форматом (со встроенным сжатием) экспорта результатов сканирования.
Список общих изменений:
• развёртывание ~ и ~user в файле конфигурации;
• исправлен импорт из JSON с экранированными суррогатными парами в формате UTF-16.
Список изменений в версии 1.21:
• исправлены отображение и экспорт нулевых значений, когда расширенная информация недоступна;
• исправлены экспорт и импорт JSON для флага «другая файловая система».
Список изменений в версии 2.7:
• для компиляции по-прежнему требуется Zig 0.12 или 0.13;
• добавлена поддержка прозрачного чтения и записи JSON, сжатого алгоритмом zstandard;
• добавлены опции --compress и --export-block-size;
• исправлено некорректное поле в корневом элементе при экспорте в двоичный формат;
• добавлена опция сборки -Dstrip.
https://www.linux.org.ru/news/opensource/17798635
[>]
NASA's Artemis Mission To Moon Unveils New Spacesuit Designed By Prada
bot.slashdot
robot(spnet, 1) — All
2024-10-20 23:23:02
For the first time in 50 years, humans will walk on the moon again. Currently planned for as soon as 2026, the Artemis III mission "will be one of the most complex undertakings of engineering and human ingenuity in the history of deep space exploration..." writes NASA. "Two crew members will descend to the surface and spend approximately a week near the South Pole of the Moon conducting new science before returning to lunar orbit..."
And they'll be wearing Prada, according to a Space News report from Milan:
At a briefing at the International Astronautical Congress here October 16, Axiom and Prada revealed details about the Axiom Extravehicular Mobility Unit (AxEMU) suit that Axiom is creating for use by NASA on lunar landing missions starting with Artemis 3... Axiom emphasized the advanced capabilities in the suit, particularly when compared to the suits worn by the Apollo astronauts on moonwalks more than a half-century ago [including greater redundancy and healthy monitoring systems not available in Apollo-era suits]...
The unveiling came just over a year after Axiom announced it was working with luxury goods company Prada, an unconventional partnership intended to leverage Prada's expertise in materials and design... [Axiom's executive VP of extravehicular activity Russell Ralston] said Axiom has leveraged Prada's expertise in fabrics and garment design in helping create the outer layer of the suit, which reflects sunlight and keeps dust from getting into interior layers... "If you look across all the different technologies that are needed within the suit, the uniqueness of those technologies and their application, the supply chain has tended to be pretty unstable," he said. "So, one of the things that Prada has really helped us with is bringing stability to that base, especially on the fabric side...."
Not surprisingly, Prada also contributed to the appearance of the suit. "One of the things that was important to us was the appeal of the suit, the look of the suit," Ralston said. "Something that Prada brought to the table was helping with the general aesthetic of the suit." One design aspect that brought the two companies together was a prominent red stripe on the suit. Ralston noted that was a nod to a NASA tradition where the mission commander's suit would have that red stripe to distinguish them from another spacewalker...
While the current focus of the suit is for walking on the moon, Ralston said the suit can be easily adapted for applications in low Earth orbit, such as spacewalks from the International Space Station or Axiom's future commercial space station.
The article adds that 30 people worked on the suit (full- or part-time). "These suits will give the astronauts increased range of motion and flexibility to explore more of the landscape than on previous lunar missions," according to NASA.
With "the ability to send high quality images and video to the ground with advanced communication technology, they will be sharing a unique new human experience with the world."
Thanks to long-time Slashdot reader schwit1 for sharing the news.
[ Read more of this story ]( https://science.slashdot.org/story/24/10/19/1656219/nasas-artemis-mission-to-moon-unveils-new-spacesuit-designed-by-prada?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
bot.slashdot
robot(spnet, 1) — All
2024-10-20 23:23:02
For the first time in 50 years, humans will walk on the moon again. Currently planned for as soon as 2026, the Artemis III mission "will be one of the most complex undertakings of engineering and human ingenuity in the history of deep space exploration..." writes NASA. "Two crew members will descend to the surface and spend approximately a week near the South Pole of the Moon conducting new science before returning to lunar orbit..."
And they'll be wearing Prada, according to a Space News report from Milan:
At a briefing at the International Astronautical Congress here October 16, Axiom and Prada revealed details about the Axiom Extravehicular Mobility Unit (AxEMU) suit that Axiom is creating for use by NASA on lunar landing missions starting with Artemis 3... Axiom emphasized the advanced capabilities in the suit, particularly when compared to the suits worn by the Apollo astronauts on moonwalks more than a half-century ago [including greater redundancy and healthy monitoring systems not available in Apollo-era suits]...
The unveiling came just over a year after Axiom announced it was working with luxury goods company Prada, an unconventional partnership intended to leverage Prada's expertise in materials and design... [Axiom's executive VP of extravehicular activity Russell Ralston] said Axiom has leveraged Prada's expertise in fabrics and garment design in helping create the outer layer of the suit, which reflects sunlight and keeps dust from getting into interior layers... "If you look across all the different technologies that are needed within the suit, the uniqueness of those technologies and their application, the supply chain has tended to be pretty unstable," he said. "So, one of the things that Prada has really helped us with is bringing stability to that base, especially on the fabric side...."
Not surprisingly, Prada also contributed to the appearance of the suit. "One of the things that was important to us was the appeal of the suit, the look of the suit," Ralston said. "Something that Prada brought to the table was helping with the general aesthetic of the suit." One design aspect that brought the two companies together was a prominent red stripe on the suit. Ralston noted that was a nod to a NASA tradition where the mission commander's suit would have that red stripe to distinguish them from another spacewalker...
While the current focus of the suit is for walking on the moon, Ralston said the suit can be easily adapted for applications in low Earth orbit, such as spacewalks from the International Space Station or Axiom's future commercial space station.
The article adds that 30 people worked on the suit (full- or part-time). "These suits will give the astronauts increased range of motion and flexibility to explore more of the landscape than on previous lunar missions," according to NASA.
With "the ability to send high quality images and video to the ground with advanced communication technology, they will be sharing a unique new human experience with the world."
Thanks to long-time Slashdot reader schwit1 for sharing the news.
[ Read more of this story ]( https://science.slashdot.org/story/24/10/19/1656219/nasas-artemis-mission-to-moon-unveils-new-spacesuit-designed-by-prada?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
[>]
Выпуск генератора лексических анализаторов re2c 4.0
lor.opennet
robot(spnet, 1) — All
2024-11-21 00:44:03
Опубликован релиз re2c 4.0 - генератора лексических анализаторов (он же компилятор регулярных выражений в код на целевом языке программирования). Re2c специализируется на генерации быстрых и легко встраиваемых лексеров и отличается от более известного аналога Flex гибким интерфейсом, генерацией оптимизированных нетабличных лексеров и поддержкой захватов (submatch extraction) на основе детерминированных конечных автоматов с тэгами (TDFA). re2c используется в проектах, где важна скорость работы лексера, например в Ninja и в PHP.
https://www.opennet.ru/opennews/art.shtml?num=62267
lor.opennet
robot(spnet, 1) — All
2024-11-21 00:44:03
Опубликован релиз re2c 4.0 - генератора лексических анализаторов (он же компилятор регулярных выражений в код на целевом языке программирования). Re2c специализируется на генерации быстрых и легко встраиваемых лексеров и отличается от более известного аналога Flex гибким интерфейсом, генерацией оптимизированных нетабличных лексеров и поддержкой захватов (submatch extraction) на основе детерминированных конечных автоматов с тэгами (TDFA). re2c используется в проектах, где важна скорость работы лексера, например в Ninja и в PHP.
https://www.opennet.ru/opennews/art.shtml?num=62267
[>]
How WatchTowr Explored the Complexity of Vulnerability in a Secure Firewall Appliance
bot.slashdot
robot(spnet, 1) — All
2024-10-21 00:23:01
Cybersecurity startup Watchtowr "was founded by hacker-turned-entrepreneur Benjamin Harris," according to a recent press release touting their Fortune 500 customers and $29 million investments from venture capital firms. ("If there's a way to compromise your organization, watchTowr will find it," Harris says in the announcement.)
This week they shared their own research on a Fortinet FortiGate SSLVPN appliance vulnerability (discovered in February by Gwendal Guégniaud of the Fortinet Product Security team — presumably in a static analysis for format string vulnerabilities). "It affected (before patching) all currently-maintained branches, and recently was highlighted by CISA as being exploited-in-the-wild... It's a Format String vulnerability [that] quickly leads to Remote Code Execution via one of many well-studied mechanisms, which we won't reproduce here..."
"Tl;dr SSLVPN appliances are still sUpEr sEcurE," their post begains — but the details are interesting. When trying to test an exploit, Watchtowr discovered instead that FortiGate always closed the connection early, thanks to an exploit mitigation in glibc "intended to hinder clean exploitation of exactly this vulnerability class." Watchtowr hoped to "use this to very easily check if a device is patched — we can simply send a %n, and if the connection aborts, the device is vulnerable. If the connection does not abort, then we know the device has been patched... " But then they discovered "Fortinet added some kind of certificate validation logic in the 7.4 series, meaning that we can't even connect to it (let alone send our payload) without being explicitly permitted by a device administrator."
We also checked the 7.0 branch, and here we found things even more interesting, as an unpatched instance would allow us to connect with a self-signed certificate, while a patched machine requires a certificate signed by a configured CA. We did some reversing and determined that the certificate must be explicitly configured by the administrator of the device, which limits exploitation of these machines to the managing FortiManager instance (which already has superuser permissions on the device) or the other component of a high-availability pair. It is not sufficient to present a certificate signed by a public CA, for example...
Fortinet's advice here is simply to update, which is always sound advice, but doesn't really communicate the nuance of this vulnerability... Assuming an organisation is unable to apply the supplied workaround, the urgency of upgrade is largely dictated by the willingness of the target to accept a self-signed certificate. Targets that will do so are open to attack by any host that can access them, while those devices that require a certificate signed by a trusted root are rendered unexploitable in all but the narrowest of cases (because the TLS/SSL ecosystem is just so solid, as we recently demonstrated)...
While it's always a good idea to update to the latest version, the life of a sysadmin is filled with cost-to-benefit analysis, juggling the needs of users with their best interests.... [I]t is somewhat troubling when third parties need to reverse patches to uncover such details.
Thanks to Slashdot reader Mirnotoriety for sharing the article.
[ Read more of this story ]( https://it.slashdot.org/story/24/10/20/1955241/how-watchtowr-explored-the-complexity-of-vulnerability-in-a-secure-firewall-appliance?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
bot.slashdot
robot(spnet, 1) — All
2024-10-21 00:23:01
Cybersecurity startup Watchtowr "was founded by hacker-turned-entrepreneur Benjamin Harris," according to a recent press release touting their Fortune 500 customers and $29 million investments from venture capital firms. ("If there's a way to compromise your organization, watchTowr will find it," Harris says in the announcement.)
This week they shared their own research on a Fortinet FortiGate SSLVPN appliance vulnerability (discovered in February by Gwendal Guégniaud of the Fortinet Product Security team — presumably in a static analysis for format string vulnerabilities). "It affected (before patching) all currently-maintained branches, and recently was highlighted by CISA as being exploited-in-the-wild... It's a Format String vulnerability [that] quickly leads to Remote Code Execution via one of many well-studied mechanisms, which we won't reproduce here..."
"Tl;dr SSLVPN appliances are still sUpEr sEcurE," their post begains — but the details are interesting. When trying to test an exploit, Watchtowr discovered instead that FortiGate always closed the connection early, thanks to an exploit mitigation in glibc "intended to hinder clean exploitation of exactly this vulnerability class." Watchtowr hoped to "use this to very easily check if a device is patched — we can simply send a %n, and if the connection aborts, the device is vulnerable. If the connection does not abort, then we know the device has been patched... " But then they discovered "Fortinet added some kind of certificate validation logic in the 7.4 series, meaning that we can't even connect to it (let alone send our payload) without being explicitly permitted by a device administrator."
We also checked the 7.0 branch, and here we found things even more interesting, as an unpatched instance would allow us to connect with a self-signed certificate, while a patched machine requires a certificate signed by a configured CA. We did some reversing and determined that the certificate must be explicitly configured by the administrator of the device, which limits exploitation of these machines to the managing FortiManager instance (which already has superuser permissions on the device) or the other component of a high-availability pair. It is not sufficient to present a certificate signed by a public CA, for example...
Fortinet's advice here is simply to update, which is always sound advice, but doesn't really communicate the nuance of this vulnerability... Assuming an organisation is unable to apply the supplied workaround, the urgency of upgrade is largely dictated by the willingness of the target to accept a self-signed certificate. Targets that will do so are open to attack by any host that can access them, while those devices that require a certificate signed by a trusted root are rendered unexploitable in all but the narrowest of cases (because the TLS/SSL ecosystem is just so solid, as we recently demonstrated)...
While it's always a good idea to update to the latest version, the life of a sysadmin is filled with cost-to-benefit analysis, juggling the needs of users with their best interests.... [I]t is somewhat troubling when third parties need to reverse patches to uncover such details.
Thanks to Slashdot reader Mirnotoriety for sharing the article.
[ Read more of this story ]( https://it.slashdot.org/story/24/10/20/1955241/how-watchtowr-explored-the-complexity-of-vulnerability-in-a-secure-firewall-appliance?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
[>]
Can We Turn Off AI Tools From Google, Microsoft, Apple, and Meta? Sometimes...
bot.slashdot
robot(spnet, 1) — All
2024-10-21 01:23:02
"Who asked for any of this in the first place?" wonders a New York Times consumer-tech writer. (Alternate URL here.) "Judging from the feedback I get from readers, lots of people outside the tech industry remain uninterested in AI — and are increasingly frustrated with how difficult it has become to ignore."
The companies rely on user activity to train and improve their AI systems, so they are testing this tech inside products we use every day. Typing a question such as "Is Jay-Z left-handed?" in Google will produce an AI-generated summary of the answer on top of the search results. And whenever you use the search tool inside Instagram, you may now be interacting with Meta's chatbot, Meta AI. In addition, when Apple's suite of AI tools, Apple Intelligence, arrives on iPhones and other Apple products through software updates this month, the tech will appear inside the buttons we use to edit text and photos.
The proliferation of AI in consumer technology has significant implications for our data privacy, because companies are interested in stitching together and analyzing our digital activities, including details inside our photos, messages and web searches, to improve AI systems. For users, the tools can simply be an annoyance when they don't work well. "There's a genuine distrust in this stuff, but other than that, it's a design problem," said Thorin Klosowski, a privacy and security analyst at the Electronic Frontier Foundation, a digital rights nonprofit, and a former editor at Wirecutter, the reviews site owned by The New York Times. "It's just ugly and in the way."
It helps to know how to opt out. After I contacted Microsoft, Meta, Apple and Google, they offered steps to turn off their AI tools or data collection, where possible. I'll walk you through the steps.
The article suggests logged-in Google users can toggle settings at myactivity.google.com. (Some browsers also have extensions that force Google's search results to stop inserting an AI summary at the top.) And you can also tell Edge to remove Copilot from its sidebar at edge://settings.
But "There is no way for users to turn off Meta AI, Meta said. Only in regions with stronger data protection laws, including the EU and Britain, can people deny Meta access to their personal information to build and train Meta's AI."
On Instagram, for instance, people living in those places can click on "settings," then "about" and "privacy policy," which will lead to opt-out instructions. Everyone else, including users in the United States, can visit the Help Center on Facebook to ask Meta only to delete data used by third parties to develop its AI.
By comparison, when Apple releases new AI services this month, users will have to opt in, according to the article. "If you change your mind and no longer want to use Apple Intelligence, you can go back into the settings and toggle the Apple Intelligence switch off, which makes the tools go away."
[ Read more of this story ]( https://apple.slashdot.org/story/24/10/20/2023223/can-we-turn-off-ai-tools-from-google-microsoft-apple-and-meta-sometimes?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
bot.slashdot
robot(spnet, 1) — All
2024-10-21 01:23:02
"Who asked for any of this in the first place?" wonders a New York Times consumer-tech writer. (Alternate URL here.) "Judging from the feedback I get from readers, lots of people outside the tech industry remain uninterested in AI — and are increasingly frustrated with how difficult it has become to ignore."
The companies rely on user activity to train and improve their AI systems, so they are testing this tech inside products we use every day. Typing a question such as "Is Jay-Z left-handed?" in Google will produce an AI-generated summary of the answer on top of the search results. And whenever you use the search tool inside Instagram, you may now be interacting with Meta's chatbot, Meta AI. In addition, when Apple's suite of AI tools, Apple Intelligence, arrives on iPhones and other Apple products through software updates this month, the tech will appear inside the buttons we use to edit text and photos.
The proliferation of AI in consumer technology has significant implications for our data privacy, because companies are interested in stitching together and analyzing our digital activities, including details inside our photos, messages and web searches, to improve AI systems. For users, the tools can simply be an annoyance when they don't work well. "There's a genuine distrust in this stuff, but other than that, it's a design problem," said Thorin Klosowski, a privacy and security analyst at the Electronic Frontier Foundation, a digital rights nonprofit, and a former editor at Wirecutter, the reviews site owned by The New York Times. "It's just ugly and in the way."
It helps to know how to opt out. After I contacted Microsoft, Meta, Apple and Google, they offered steps to turn off their AI tools or data collection, where possible. I'll walk you through the steps.
The article suggests logged-in Google users can toggle settings at myactivity.google.com. (Some browsers also have extensions that force Google's search results to stop inserting an AI summary at the top.) And you can also tell Edge to remove Copilot from its sidebar at edge://settings.
But "There is no way for users to turn off Meta AI, Meta said. Only in regions with stronger data protection laws, including the EU and Britain, can people deny Meta access to their personal information to build and train Meta's AI."
On Instagram, for instance, people living in those places can click on "settings," then "about" and "privacy policy," which will lead to opt-out instructions. Everyone else, including users in the United States, can visit the Help Center on Facebook to ask Meta only to delete data used by third parties to develop its AI.
By comparison, when Apple releases new AI services this month, users will have to opt in, according to the article. "If you change your mind and no longer want to use Apple Intelligence, you can go back into the settings and toggle the Apple Intelligence switch off, which makes the tools go away."
[ Read more of this story ]( https://apple.slashdot.org/story/24/10/20/2023223/can-we-turn-off-ai-tools-from-google-microsoft-apple-and-meta-sometimes?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
[>]
Выпуск свободной САПР FreeCAD 1.0
lor.opennet
robot(spnet, 1) — All
2024-11-21 00:44:03
После более года разработки опубликован релиз открытой системы параметрического 3D-моделирования FreeCAD 1.0, которая отличается гибкими возможностями кастомизации и наращивания функциональности через подключение дополнений. Интерфейс построен с использованием библиотеки Qt. Дополнения могут создаваться на языке Python. Поддерживается сохранение и загрузка моделей в различных форматах, в том числе в STEP, IGES и STL. Код FreeCAD распространяется под лицензией LGPLv2, в качестве моделирующего ядра используется Open CASCADE. Готовые сборки подготовлены для Linux (AppImage), macOS и Windows.
https://www.opennet.ru/opennews/art.shtml?num=62268
lor.opennet
robot(spnet, 1) — All
2024-11-21 00:44:03
После более года разработки опубликован релиз открытой системы параметрического 3D-моделирования FreeCAD 1.0, которая отличается гибкими возможностями кастомизации и наращивания функциональности через подключение дополнений. Интерфейс построен с использованием библиотеки Qt. Дополнения могут создаваться на языке Python. Поддерживается сохранение и загрузка моделей в различных форматах, в том числе в STEP, IGES и STL. Код FreeCAD распространяется под лицензией LGPLv2, в качестве моделирующего ядра используется Open CASCADE. Готовые сборки подготовлены для Linux (AppImage), macOS и Windows.
https://www.opennet.ru/opennews/art.shtml?num=62268
[>]
re2c 4.0
lor.opennet
robot(spnet, 1) — All
2024-11-21 00:44:05
Во вторник, 19 ноября, представлен релиз [ re2c ]( http://re2c.org ) – генератора лексических анализаторов (он же компилятор регулярных выражений в код на целевом языке программирования). re2c специализируется на генерации быстрых и легко встраиваемых лексеров. Он отличается от более известного аналога flex гибким интерфейсом, генерацией оптимизированных нетабличных лексеров и поддержкой захватов (submatch extraction) на основе детерминированных конечных автоматов с тэгами ( [ TDFA ]( https://arxiv.org/abs/2206.01398 ) ). re2c используется в проектах, где важна скорость работы лексера, например в Ninja и в PHP.
( [ читать дальше... ]( https://www.linux.org.ru/news/development/17798640#cut ) )
lor.opennet
robot(spnet, 1) — All
2024-11-21 00:44:05
Во вторник, 19 ноября, представлен релиз [ re2c ]( http://re2c.org ) – генератора лексических анализаторов (он же компилятор регулярных выражений в код на целевом языке программирования). re2c специализируется на генерации быстрых и легко встраиваемых лексеров. Он отличается от более известного аналога flex гибким интерфейсом, генерацией оптимизированных нетабличных лексеров и поддержкой захватов (submatch extraction) на основе детерминированных конечных автоматов с тэгами ( [ TDFA ]( https://arxiv.org/abs/2206.01398 ) ). re2c используется в проектах, где важна скорость работы лексера, например в Ninja и в PHP.
( [ читать дальше... ]( https://www.linux.org.ru/news/development/17798640#cut ) )
[>]
Инициатива GitHub по финансированию повышения безопасности открытых проектов
lor.opennet
robot(spnet, 1) — All
2024-11-21 12:44:03
GitHub анонсировал инициативу "GitHub Secure Open Source Fund", нацеленную на финансирование работы по усилению безопасного открытых проектов. На первом этапе планируется выбрать 125 проектов и в сумме инвестировать в них 1.25 млн долларов. Заявки от сопровождающих на получения финансирования будут приниматься до 7 января.
https://www.opennet.ru/opennews/art.shtml?num=62270
lor.opennet
robot(spnet, 1) — All
2024-11-21 12:44:03
GitHub анонсировал инициативу "GitHub Secure Open Source Fund", нацеленную на финансирование работы по усилению безопасного открытых проектов. На первом этапе планируется выбрать 125 проектов и в сумме инвестировать в них 1.25 млн долларов. Заявки от сопровождающих на получения финансирования будут приниматься до 7 января.
https://www.opennet.ru/opennews/art.shtml?num=62270
[>]
Релиз языка программирования PHP 8.4
lor.opennet
robot(spnet, 1) — All
2024-11-21 14:44:03
После года разработки представлен релиз языка программирования PHP 8.4. Новая ветка включает серию новых возможностей, а также несколько изменений, нарушающих совместимость.
https://www.opennet.ru/opennews/art.shtml?num=62269
lor.opennet
robot(spnet, 1) — All
2024-11-21 14:44:03
После года разработки представлен релиз языка программирования PHP 8.4. Новая ветка включает серию новых возможностей, а также несколько изменений, нарушающих совместимость.
https://www.opennet.ru/opennews/art.shtml?num=62269
[>]
Проект Wine опубликовал Vkd3d 1.14 с реализацией Direct3D 12
lor.opennet
robot(spnet, 1) — All
2024-11-21 19:44:02
Проект Wine опубликовал выпуск пакета vkd3d 1.14 с реализацией Direct3D 12, работающей через трансляцию вызовов в графический API Vulkan. В состав пакета входят библиотеки libvkd3d с реализаций Direct3D 12, libvkd3d-shader c транслятором 4 и 5 модели шейдеров и libvkd3d-utils с функциями для упрощения портирования приложений Direct3D 12, а также набор демонстрационных примеров, включая порт glxgears на Direct3D 12. Код проекта распространяется под лицензией LGPLv2.1.
https://www.opennet.ru/opennews/art.shtml?num=62272
lor.opennet
robot(spnet, 1) — All
2024-11-21 19:44:02
Проект Wine опубликовал выпуск пакета vkd3d 1.14 с реализацией Direct3D 12, работающей через трансляцию вызовов в графический API Vulkan. В состав пакета входят библиотеки libvkd3d с реализаций Direct3D 12, libvkd3d-shader c транслятором 4 и 5 модели шейдеров и libvkd3d-utils с функциями для упрощения портирования приложений Direct3D 12, а также набор демонстрационных примеров, включая порт glxgears на Direct3D 12. Код проекта распространяется под лицензией LGPLv2.1.
https://www.opennet.ru/opennews/art.shtml?num=62272
[>]
Microsoft's Honeypots Lure Phishers at Scale - to Spy on Them and Waste Their Time
bot.slashdot
robot(spnet, 1) — All
2024-10-21 03:23:05
A principal security software engineer at Microsoft described how they use their Azure cloud platform "to hunt phishers at scale," in a talk at the information security conference BSides Exeter.
Calling himself Microsoft's "Head of Deception." Ross Bevington described how they'd created a "hybrid high interaction honeypot" on the now retired code.microsoft.com "to collect threat intelligence on actors ranging from both less skilled cybercriminals to nation state groups targeting Microsoft infrastructure," according to a report by BleepingComputer:
With the collected data, Microsoft can map malicious infrastructure, gain a deeper understanding of sophisticated phishing operations, disrupt campaigns at scale, identify cybercriminals, and significantly slow down their activity... Bevington and his team fight phishing by leveraging deception techniques using entire Microsoft tenant environments as honeypots with custom domain names, thousands of user accounts, and activity like internal communications and file-sharing...
In his BSides Exeter presentation, the researcher says that the active approach consists in visiting active phishing sites identified by Defender and typing in the credentials from the honeypot tenants. Since the credentials are not protected by two-factor authentication and the tenants are populated with realistic-looking information, attackers have an easy way in and start wasting time looking for signs of a trap. Microsoft says it monitors roughly 25,000 phishing sites every day, feeding about 20% of them with the honeypot credentials; the rest are blocked by CAPTCHA or other anti-bot mechanisms.
Once the attackers log into the fake tenants, which happens in 5% of the cases, it turns on detailed logging to track every action they take, thus learning the threat actors' tactics, techniques, and procedures. Intelligence collected includes IP addresses, browsers, location, behavioral patterns, whether they use VPNs or VPSs, and what phishing kits they rely on... The deception technology currently wastes an attacker 30 days before they realize they breached a fake environment. All along, Microsoft collects actionable data that can be used by other security teams to create more complex profiles and better defenses.
[ Read more of this story ]( https://it.slashdot.org/story/24/10/20/1840217/microsofts-honeypots-lure-phishers-at-scale---to-spy-on-them-and-waste-their-time?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
bot.slashdot
robot(spnet, 1) — All
2024-10-21 03:23:05
A principal security software engineer at Microsoft described how they use their Azure cloud platform "to hunt phishers at scale," in a talk at the information security conference BSides Exeter.
Calling himself Microsoft's "Head of Deception." Ross Bevington described how they'd created a "hybrid high interaction honeypot" on the now retired code.microsoft.com "to collect threat intelligence on actors ranging from both less skilled cybercriminals to nation state groups targeting Microsoft infrastructure," according to a report by BleepingComputer:
With the collected data, Microsoft can map malicious infrastructure, gain a deeper understanding of sophisticated phishing operations, disrupt campaigns at scale, identify cybercriminals, and significantly slow down their activity... Bevington and his team fight phishing by leveraging deception techniques using entire Microsoft tenant environments as honeypots with custom domain names, thousands of user accounts, and activity like internal communications and file-sharing...
In his BSides Exeter presentation, the researcher says that the active approach consists in visiting active phishing sites identified by Defender and typing in the credentials from the honeypot tenants. Since the credentials are not protected by two-factor authentication and the tenants are populated with realistic-looking information, attackers have an easy way in and start wasting time looking for signs of a trap. Microsoft says it monitors roughly 25,000 phishing sites every day, feeding about 20% of them with the honeypot credentials; the rest are blocked by CAPTCHA or other anti-bot mechanisms.
Once the attackers log into the fake tenants, which happens in 5% of the cases, it turns on detailed logging to track every action they take, thus learning the threat actors' tactics, techniques, and procedures. Intelligence collected includes IP addresses, browsers, location, behavioral patterns, whether they use VPNs or VPSs, and what phishing kits they rely on... The deception technology currently wastes an attacker 30 days before they realize they breached a fake environment. All along, Microsoft collects actionable data that can be used by other security teams to create more complex profiles and better defenses.
[ Read more of this story ]( https://it.slashdot.org/story/24/10/20/1840217/microsofts-honeypots-lure-phishers-at-scale---to-spy-on-them-and-waste-their-time?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
[>]
Релиз Proxmox VE 8.3, дистрибутива для организации работы виртуальных серверов
lor.opennet
robot(spnet, 1) — All
2024-11-21 22:44:03
Опубликован релиз Proxmox Virtual Environment 8.3, специализированного Linux-дистрибутива на базе Debian GNU/Linux, нацеленного на развертывание и обслуживание виртуальных серверов с использованием LXC и KVM, и способного выступить в роли замены таких продуктов, как VMware vSphere, Microsoft Hyper-V и Citrix Hypervisor. Размер установочного iso-образа 1.4 ГБ.
https://www.opennet.ru/opennews/art.shtml?num=62273
lor.opennet
robot(spnet, 1) — All
2024-11-21 22:44:03
Опубликован релиз Proxmox Virtual Environment 8.3, специализированного Linux-дистрибутива на базе Debian GNU/Linux, нацеленного на развертывание и обслуживание виртуальных серверов с использованием LXC и KVM, и способного выступить в роли замены таких продуктов, как VMware vSphere, Microsoft Hyper-V и Citrix Hypervisor. Размер установочного iso-образа 1.4 ГБ.
https://www.opennet.ru/opennews/art.shtml?num=62273
[>]
An Alternative to Rewriting Memory-Unsafe Code in Rust: the 'Safe C++ Extensions' Proposal
bot.slashdot
robot(spnet, 1) — All
2024-10-21 04:23:01
"After two years of being beaten with the memory-safety stick, the C++ community has published a proposal to help developers write less vulnerable code," reports the Register.
"The Safe C++ Extensions proposal aims to address the vulnerable programming language's Achilles' heel, the challenge of ensuring that code is free of memory safety bugs..."
Acknowledging the now deafening chorus of calls to adopt memory safe programming languages, developers Sean Baxter, creator of the Circle compiler, and Christian Mazakas, from the C++ Alliance, argue that while Rust is the only popular systems level programming language without garbage collection that provides rigorous memory safety, migrating C++ code to Rust poses problems. "Rust lacks function overloading, templates, inheritance and exceptions," they explain in the proposal. "C++ lacks traits, relocation and borrow checking. These discrepancies are responsible for an impedance mismatch when interfacing the two languages. Most code generators for inter-language bindings aren't able to represent features of one language in terms of the features of another."
Though DARPA is trying to develop better automated C++ to Rust conversion tools, Baxter and Mazakas argue telling veteran C++ developers to learn Rust isn't an answer... The Safe C++ project adds new technology for ensuring memory safety, Baxter explained, and isn't just a reiteration of best practices. "Safe C++ prevents users from writing unsound code," he said. "This includes compile-time intelligence like borrow checking to prevent use-after-free bugs and initialization analysis for type safety." Baxter said that rewriting a project in a different programming language is costly, so the aim here is to make memory safety more accessible by providing the same soundness guarantees as Rust at a lower cost. "With Safe C++, existing code continues to work as always," he explained. "Stakeholders have more control for incrementally opting in to safety."
The next step, Baxter said, involves greater participation from industry to help realize the Safe C++ project. "The foundations are in: We have fantastic borrow checking and initialization analysis which underpin the soundness guarantees," he said. "The next step is to comprehensively visit all of C++'s features and specify memory-safe versions of them. It's a big effort, but given the importance of reducing C++ security vulnerabilities, it's an effort worth making."
[ Read more of this story ]( https://developers.slashdot.org/story/24/10/20/2359227/an-alternative-to-rewriting-memory-unsafe-code-in-rust-the-safe-c-extensions-proposal?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
bot.slashdot
robot(spnet, 1) — All
2024-10-21 04:23:01
"After two years of being beaten with the memory-safety stick, the C++ community has published a proposal to help developers write less vulnerable code," reports the Register.
"The Safe C++ Extensions proposal aims to address the vulnerable programming language's Achilles' heel, the challenge of ensuring that code is free of memory safety bugs..."
Acknowledging the now deafening chorus of calls to adopt memory safe programming languages, developers Sean Baxter, creator of the Circle compiler, and Christian Mazakas, from the C++ Alliance, argue that while Rust is the only popular systems level programming language without garbage collection that provides rigorous memory safety, migrating C++ code to Rust poses problems. "Rust lacks function overloading, templates, inheritance and exceptions," they explain in the proposal. "C++ lacks traits, relocation and borrow checking. These discrepancies are responsible for an impedance mismatch when interfacing the two languages. Most code generators for inter-language bindings aren't able to represent features of one language in terms of the features of another."
Though DARPA is trying to develop better automated C++ to Rust conversion tools, Baxter and Mazakas argue telling veteran C++ developers to learn Rust isn't an answer... The Safe C++ project adds new technology for ensuring memory safety, Baxter explained, and isn't just a reiteration of best practices. "Safe C++ prevents users from writing unsound code," he said. "This includes compile-time intelligence like borrow checking to prevent use-after-free bugs and initialization analysis for type safety." Baxter said that rewriting a project in a different programming language is costly, so the aim here is to make memory safety more accessible by providing the same soundness guarantees as Rust at a lower cost. "With Safe C++, existing code continues to work as always," he explained. "Stakeholders have more control for incrementally opting in to safety."
The next step, Baxter said, involves greater participation from industry to help realize the Safe C++ project. "The foundations are in: We have fantastic borrow checking and initialization analysis which underpin the soundness guarantees," he said. "The next step is to comprehensively visit all of C++'s features and specify memory-safe versions of them. It's a big effort, but given the importance of reducing C++ security vulnerabilities, it's an effort worth making."
[ Read more of this story ]( https://developers.slashdot.org/story/24/10/20/2359227/an-alternative-to-rewriting-memory-unsafe-code-in-rust-the-safe-c-extensions-proposal?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
[>]
Из ядра Linux удалена файловая система ReiserFS
lor.opennet
robot(spnet, 1) — All
2024-11-21 23:44:03
Линус Торвальдс принял в ядро Linux изменение, удаляющего реализацию файловой системы ReiserFS, которая в прошлом году была объявлена устаревшей и была намечена к удалению в 2025 году. Изменение принято в ветку, на основе которой формируется ядро 6.13 (релиз ожидается в начале февраля). Ключевой причиной удаления ReiserFS стало желание снизить трудозатраты на сопровождение в ядре изменений, охватывающих различные файловые системы, таких как переход на новый API для монтирования, iomap и фолианты (folios). Пользовательская база ReiserFS оценивается как незначительная.
https://www.opennet.ru/opennews/art.shtml?num=62274
lor.opennet
robot(spnet, 1) — All
2024-11-21 23:44:03
Линус Торвальдс принял в ядро Linux изменение, удаляющего реализацию файловой системы ReiserFS, которая в прошлом году была объявлена устаревшей и была намечена к удалению в 2025 году. Изменение принято в ветку, на основе которой формируется ядро 6.13 (релиз ожидается в начале февраля). Ключевой причиной удаления ReiserFS стало желание снизить трудозатраты на сопровождение в ядре изменений, охватывающих различные файловые системы, таких как переход на новый API для монтирования, iomap и фолианты (folios). Пользовательская база ReiserFS оценивается как незначительная.
https://www.opennet.ru/opennews/art.shtml?num=62274
[>]
How WatchTowr Explored the Complexity of a Vulnerability in a Secure Firewall Appliance
bot.slashdot
robot(spnet, 1) — All
2024-10-21 06:23:02
Cybersecurity startup Watchtowr "was founded by hacker-turned-entrepreneur Benjamin Harris," according to a recent press release touting their Fortune 500 customers and $29 million investments from venture capital firms. ("If there's a way to compromise your organization, watchTowr will find it," Harris says in the announcement.)
This week they shared their own research on a Fortinet FortiGate SSLVPN appliance vulnerability (discovered in February by Gwendal Guégniaud of the Fortinet Product Security team — presumably in a static analysis for format string vulnerabilities). "It affected (before patching) all currently-maintained branches, and recently was highlighted by CISA as being exploited-in-the-wild... It's a Format String vulnerability [that] quickly leads to Remote Code Execution via one of many well-studied mechanisms, which we won't reproduce here..."
"Tl;dr SSLVPN appliances are still sUpEr sEcurE," their post begains — but the details are interesting. When trying to test an exploit, Watchtowr discovered instead that FortiGate always closed the connection early, thanks to an exploit mitigation in glibc "intended to hinder clean exploitation of exactly this vulnerability class." Watchtowr hoped to "use this to very easily check if a device is patched — we can simply send a %n, and if the connection aborts, the device is vulnerable. If the connection does not abort, then we know the device has been patched... " But then they discovered "Fortinet added some kind of certificate validation logic in the 7.4 series, meaning that we can't even connect to it (let alone send our payload) without being explicitly permitted by a device administrator."
We also checked the 7.0 branch, and here we found things even more interesting, as an unpatched instance would allow us to connect with a self-signed certificate, while a patched machine requires a certificate signed by a configured CA. We did some reversing and determined that the certificate must be explicitly configured by the administrator of the device, which limits exploitation of these machines to the managing FortiManager instance (which already has superuser permissions on the device) or the other component of a high-availability pair. It is not sufficient to present a certificate signed by a public CA, for example...
Fortinet's advice here is simply to update, which is always sound advice, but doesn't really communicate the nuance of this vulnerability... Assuming an organisation is unable to apply the supplied workaround, the urgency of upgrade is largely dictated by the willingness of the target to accept a self-signed certificate. Targets that will do so are open to attack by any host that can access them, while those devices that require a certificate signed by a trusted root are rendered unexploitable in all but the narrowest of cases (because the TLS/SSL ecosystem is just so solid, as we recently demonstrated)...
While it's always a good idea to update to the latest version, the life of a sysadmin is filled with cost-to-benefit analysis, juggling the needs of users with their best interests.... [I]t is somewhat troubling when third parties need to reverse patches to uncover such details.
Thanks to Slashdot reader Mirnotoriety for sharing the article.
[ Read more of this story ]( https://it.slashdot.org/story/24/10/20/1955241/how-watchtowr-explored-the-complexity-of-a-vulnerability-in-a-secure-firewall-appliance?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
bot.slashdot
robot(spnet, 1) — All
2024-10-21 06:23:02
Cybersecurity startup Watchtowr "was founded by hacker-turned-entrepreneur Benjamin Harris," according to a recent press release touting their Fortune 500 customers and $29 million investments from venture capital firms. ("If there's a way to compromise your organization, watchTowr will find it," Harris says in the announcement.)
This week they shared their own research on a Fortinet FortiGate SSLVPN appliance vulnerability (discovered in February by Gwendal Guégniaud of the Fortinet Product Security team — presumably in a static analysis for format string vulnerabilities). "It affected (before patching) all currently-maintained branches, and recently was highlighted by CISA as being exploited-in-the-wild... It's a Format String vulnerability [that] quickly leads to Remote Code Execution via one of many well-studied mechanisms, which we won't reproduce here..."
"Tl;dr SSLVPN appliances are still sUpEr sEcurE," their post begains — but the details are interesting. When trying to test an exploit, Watchtowr discovered instead that FortiGate always closed the connection early, thanks to an exploit mitigation in glibc "intended to hinder clean exploitation of exactly this vulnerability class." Watchtowr hoped to "use this to very easily check if a device is patched — we can simply send a %n, and if the connection aborts, the device is vulnerable. If the connection does not abort, then we know the device has been patched... " But then they discovered "Fortinet added some kind of certificate validation logic in the 7.4 series, meaning that we can't even connect to it (let alone send our payload) without being explicitly permitted by a device administrator."
We also checked the 7.0 branch, and here we found things even more interesting, as an unpatched instance would allow us to connect with a self-signed certificate, while a patched machine requires a certificate signed by a configured CA. We did some reversing and determined that the certificate must be explicitly configured by the administrator of the device, which limits exploitation of these machines to the managing FortiManager instance (which already has superuser permissions on the device) or the other component of a high-availability pair. It is not sufficient to present a certificate signed by a public CA, for example...
Fortinet's advice here is simply to update, which is always sound advice, but doesn't really communicate the nuance of this vulnerability... Assuming an organisation is unable to apply the supplied workaround, the urgency of upgrade is largely dictated by the willingness of the target to accept a self-signed certificate. Targets that will do so are open to attack by any host that can access them, while those devices that require a certificate signed by a trusted root are rendered unexploitable in all but the narrowest of cases (because the TLS/SSL ecosystem is just so solid, as we recently demonstrated)...
While it's always a good idea to update to the latest version, the life of a sysadmin is filled with cost-to-benefit analysis, juggling the needs of users with their best interests.... [I]t is somewhat troubling when third parties need to reverse patches to uncover such details.
Thanks to Slashdot reader Mirnotoriety for sharing the article.
[ Read more of this story ]( https://it.slashdot.org/story/24/10/20/1955241/how-watchtowr-explored-the-complexity-of-a-vulnerability-in-a-secure-firewall-appliance?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
[>]
Special VHS Release for 'Alien: Romulus' Announced by 20th Century Studios
bot.slashdot
robot(spnet, 1) — All
2024-10-21 07:23:01
An anonymous reader shared this report from ComicBook.com:
On Saturday, 20th Century Studios announced that the latest entry in the Alien sci-fi horror franchise will get a limited-edition VHS release on December 3 — just in time for the holidays.
The VHS release of Alien: Romulus is the first such release from a major studio since 2006... a major win for fans of physical media. In recent months, there has been a great bit of conversation surrounding the so-called death of physical media with the rise of digital and streaming with some retailers even having previously announced that they have or will be stopping sales of physical media. But with streaming platforms removing content for various reasons, there's been a rise in appreciation for physical media which has, in turn, resulted in increased sales, particularly when it comes to limited edition items such as Steelbooks [collectible steel-case disc releases]... Given that the Alien: Romulus VHS release is part of an overall celebration of the franchise for its 45th anniversary year, leaning into that nostalgia for feels pretty spot on.
The release will present the movie "in a 4:3 aspect ratio," writes the Verge, "hopefully with well-done pan-and-scan..." (Their post includes a promotional picture showing the "slick, vintage-style" box-cover art.)
"The tape has only the film," notes Gizmodo, "and no special featurette attached at the end, like some used to back in the day."
Gizmodo also reminds readers of Hulu's 2025 series Alien: Earth and an upcoming videogame sequel to 2014's Alien: Isolation.
[ Read more of this story ]( https://entertainment.slashdot.org/story/24/10/21/0046258/special-vhs-release-for-alien-romulus-announced-by-20th-century-studios?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
bot.slashdot
robot(spnet, 1) — All
2024-10-21 07:23:01
An anonymous reader shared this report from ComicBook.com:
On Saturday, 20th Century Studios announced that the latest entry in the Alien sci-fi horror franchise will get a limited-edition VHS release on December 3 — just in time for the holidays.
The VHS release of Alien: Romulus is the first such release from a major studio since 2006... a major win for fans of physical media. In recent months, there has been a great bit of conversation surrounding the so-called death of physical media with the rise of digital and streaming with some retailers even having previously announced that they have or will be stopping sales of physical media. But with streaming platforms removing content for various reasons, there's been a rise in appreciation for physical media which has, in turn, resulted in increased sales, particularly when it comes to limited edition items such as Steelbooks [collectible steel-case disc releases]... Given that the Alien: Romulus VHS release is part of an overall celebration of the franchise for its 45th anniversary year, leaning into that nostalgia for feels pretty spot on.
The release will present the movie "in a 4:3 aspect ratio," writes the Verge, "hopefully with well-done pan-and-scan..." (Their post includes a promotional picture showing the "slick, vintage-style" box-cover art.)
"The tape has only the film," notes Gizmodo, "and no special featurette attached at the end, like some used to back in the day."
Gizmodo also reminds readers of Hulu's 2025 series Alien: Earth and an upcoming videogame sequel to 2014's Alien: Isolation.
[ Read more of this story ]( https://entertainment.slashdot.org/story/24/10/21/0046258/special-vhs-release-for-alien-romulus-announced-by-20th-century-studios?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
[>]
Cuba's Power Grid Collapses Again. And Then a Hurricane Hit
bot.slashdot
robot(spnet, 1) — All
2024-10-21 09:23:01
"Millions of Cubans remained without power for a third day in a row Sunday," reports CNN, "after fresh attempts to restore electricity failed overnight and the power grid collapsed for the fourth time — all before the arrival of Hurricane Oscar."
A report from Reuters notes it was the fourth power grid failure in 48 hours.
"On the forecast track, the center of Oscar is expected to continue moving across eastern Cuba tonight and Monday, then emerge off the northern coast of Cuba late Monday and cross the central Bahamas on Tuesday," the U.S. National Hurricane Center said. The Communist-run government canceled school through Wednesday — a near unprecedented move in Cuba — citing the hurricane and the ongoing energy crisis...
Cuba had restored power to 160,000 clients in Havana just prior to the grid's Sunday collapse, giving some residents a glimmer of hope... Energy and mines minister Vicente de la O Levy told reporters earlier on Sunday he expected the grid to be fully functional by Monday or Tuesday but warned residents not to expect dramatic improvements.
It was not immediately clear how much the latest setback would delay the government's efforts.
[ Read more of this story ]( https://hardware.slashdot.org/story/24/10/21/0255215/cubas-power-grid-collapses-again-and-then-a-hurricane-hit?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
bot.slashdot
robot(spnet, 1) — All
2024-10-21 09:23:01
"Millions of Cubans remained without power for a third day in a row Sunday," reports CNN, "after fresh attempts to restore electricity failed overnight and the power grid collapsed for the fourth time — all before the arrival of Hurricane Oscar."
A report from Reuters notes it was the fourth power grid failure in 48 hours.
"On the forecast track, the center of Oscar is expected to continue moving across eastern Cuba tonight and Monday, then emerge off the northern coast of Cuba late Monday and cross the central Bahamas on Tuesday," the U.S. National Hurricane Center said. The Communist-run government canceled school through Wednesday — a near unprecedented move in Cuba — citing the hurricane and the ongoing energy crisis...
Cuba had restored power to 160,000 clients in Havana just prior to the grid's Sunday collapse, giving some residents a glimmer of hope... Energy and mines minister Vicente de la O Levy told reporters earlier on Sunday he expected the grid to be fully functional by Monday or Tuesday but warned residents not to expect dramatic improvements.
It was not immediately clear how much the latest setback would delay the government's efforts.
[ Read more of this story ]( https://hardware.slashdot.org/story/24/10/21/0255215/cubas-power-grid-collapses-again-and-then-a-hurricane-hit?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
[>]
Из ядра удалена файловая система ReiserFS
lor.opennet
robot(spnet, 1) — All
2024-11-22 09:44:05
Линус Торвальдс принял в ядро Linux изменение, удаляющее реализацию файловой системы ReiserFS. Эта ФС в прошлом году была объявлена устаревшей и была намечена к удалению в 2025 году.
( [ читать дальше... ]( https://www.linux.org.ru/news/kernel/17799783#cut ) )
lor.opennet
robot(spnet, 1) — All
2024-11-22 09:44:05
Линус Торвальдс принял в ядро Linux изменение, удаляющее реализацию файловой системы ReiserFS. Эта ФС в прошлом году была объявлена устаревшей и была намечена к удалению в 2025 году.
( [ читать дальше... ]( https://www.linux.org.ru/news/kernel/17799783#cut ) )
[>]
Europe Automakers Launch Cheaper Electric Cars to Compete With China
bot.slashdot
robot(spnet, 1) — All
2024-10-21 12:23:01
"Several of Europe's biggest carmakers unveiled low-cost electric vehicles at the Paris Motor Show this week," reports CNBC. The automakers are "seeking to jump-start a demand slump and recapture some of the market share now held by Chinese brands."
"It feels like Europe is fighting back," Julia Poliscanova, senior director for vehicles and e-mobility supply chains at the Transport & Environment campaign group, told CNBC at the Paris Motor Show. "There are so many new models on show, and what is really great is that there are a lot of launches that are more affordable. So, Citroen, Peugeot [and] Renault, they are all showing some smaller affordable models," Poliscanova said. "This is exactly what we need for the mass market, for people to buy those vehicles more, and this is also where the competition from the Chinese is also the hardest," she added...
"The storytelling is that people have cooled off on EVs and there is no consumer demand, [but] this is really not true," Transport & Environment's Poliscanova said. "This year in Europe, we did not have affordable models, so people are not buying those overpriced premium vehicles. However, as soon as vehicles come in the right price range next year ... people will flock to buy them." Poliscanova said the launch of several low-cost EVs means electric car sales could account for up to a 24% market share next year, up from 14% this year. Chinese-made EVs typically cost less than half the prices seen in Europe and the U.S. last year, according to figures published by data firm JATO, underscoring the challenge for Western automakers to keep pace with Beijing...
Pere Brugal, president and managing director of GM Europe, said that the challenges facing Europe's auto industry should be seen as a transitional phase — and not evidence of a crisis. "The adoption of new technologies and new behaviors is never a linear growth story, but the end is full-electric [vehicles]," Brugal told CNBC at the Paris Motor Show.
Meanwhile, GM's CEO "says it will start making money on battery-powered models by the end of the year — becoming the only U.S. automaker aside from Tesla to achieve that feat," reports the New York Times (adding that sales are increasing "and the company just introduced a model that sells for less than $30,000 after a federal tax credit.")
And GM "is still committed to doing away with combustion engine cars in the United States by 2035."
[ Read more of this story ]( https://tech.slashdot.org/story/24/10/21/024242/europe-automakers-launch-cheaper-electric-cars-to-compete-with-china?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
bot.slashdot
robot(spnet, 1) — All
2024-10-21 12:23:01
"Several of Europe's biggest carmakers unveiled low-cost electric vehicles at the Paris Motor Show this week," reports CNBC. The automakers are "seeking to jump-start a demand slump and recapture some of the market share now held by Chinese brands."
"It feels like Europe is fighting back," Julia Poliscanova, senior director for vehicles and e-mobility supply chains at the Transport & Environment campaign group, told CNBC at the Paris Motor Show. "There are so many new models on show, and what is really great is that there are a lot of launches that are more affordable. So, Citroen, Peugeot [and] Renault, they are all showing some smaller affordable models," Poliscanova said. "This is exactly what we need for the mass market, for people to buy those vehicles more, and this is also where the competition from the Chinese is also the hardest," she added...
"The storytelling is that people have cooled off on EVs and there is no consumer demand, [but] this is really not true," Transport & Environment's Poliscanova said. "This year in Europe, we did not have affordable models, so people are not buying those overpriced premium vehicles. However, as soon as vehicles come in the right price range next year ... people will flock to buy them." Poliscanova said the launch of several low-cost EVs means electric car sales could account for up to a 24% market share next year, up from 14% this year. Chinese-made EVs typically cost less than half the prices seen in Europe and the U.S. last year, according to figures published by data firm JATO, underscoring the challenge for Western automakers to keep pace with Beijing...
Pere Brugal, president and managing director of GM Europe, said that the challenges facing Europe's auto industry should be seen as a transitional phase — and not evidence of a crisis. "The adoption of new technologies and new behaviors is never a linear growth story, but the end is full-electric [vehicles]," Brugal told CNBC at the Paris Motor Show.
Meanwhile, GM's CEO "says it will start making money on battery-powered models by the end of the year — becoming the only U.S. automaker aside from Tesla to achieve that feat," reports the New York Times (adding that sales are increasing "and the company just introduced a model that sells for less than $30,000 after a federal tax credit.")
And GM "is still committed to doing away with combustion engine cars in the United States by 2035."
[ Read more of this story ]( https://tech.slashdot.org/story/24/10/21/024242/europe-automakers-launch-cheaper-electric-cars-to-compete-with-china?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
[>]
PHP 8.4 — большое обновление языка
lor.opennet
robot(spnet, 1) — All
2024-11-22 10:44:04
Новая версия содержит множество новых возможностей, таких как хуки свойств, асимметричная область видимости свойств, обновление DOM API, улучшена производительность, исправлены ошибки и многое другое.
( [ читать дальше... ]( https://www.linux.org.ru/news/development/17799888#cut ) )
lor.opennet
robot(spnet, 1) — All
2024-11-22 10:44:04
Новая версия содержит множество новых возможностей, таких как хуки свойств, асимметричная область видимости свойств, обновление DOM API, улучшена производительность, исправлены ошибки и многое другое.
( [ читать дальше... ]( https://www.linux.org.ru/news/development/17799888#cut ) )
[>]
Is the Microsoft-OpenAI 'Bromance' Beginning to Fray?
bot.slashdot
robot(spnet, 1) — All
2024-10-21 16:23:02
Though Sam Altman once called OpenAI's partnership with Microsoft "the best bromance in tech," now "ties between the companies have started to fray" reports the New York Times — citing interviews with 19 people "familiar with the relationship". [Alternate URL here.]
Among other things, Satya Nadella "has said privately that Altman's firing in November shocked and concerned him, according to five people with knowledge of his comments. Since then, Microsoft has started to hedge its bet on OpenAI," and reconsidered new investments beyond its initial $13 billion — even as OpenAI expects to lose $5 billion this year
That tension demonstrates a key challenge for AI startups: They are dependent on the world's tech giants for money and computing power because those big companies control the massive cloud computing systems the small outfits need to develop AI... Over the past year, OpenAI has been trying to renegotiate the deal to help it secure more computing power and reduce crushing expenses while Microsoft executives have grown concerned that their AI work is too dependent on OpenAI... [I]n March, Microsoft paid at least $650 million to hire most of the staff from Inflection, an OpenAI competitor...
In June, Microsoft agreed to an exception in [OpenAI's] contract, six people with knowledge of the change said. That allowed OpenAI to sign a roughly $10 billion computing deal with Oracle for additional computing resources, according to two people familiar with the deal. Oracle is providing computers packed with chips suited to building AI, while Microsoft provides the software that drives the hardware... While it was looking for computer power alternatives, OpenAI also raced to broaden its investors, according to two people familiar with the company's plan. Part of the plan was to secure strategic investments from organizations that could bolster OpenAI's prospects in ways beyond throwing around money. Those organizations included Apple, chipmaker Nvidia, and MGX, a tech investment firm controlled by the United Arab Emirates... Earlier this month, OpenAI closed a $6.6 billion funding round led by Thrive Capital, with additional participation from Nvidia, MGX and others. Apple did not invest, but Microsoft also participated in the funding round.
OpenAI expected to spend at least $5.4 billion in computing costs through the end of 2024, according to documents reviewed by The New York Times. That amount was expected to skyrocket over the next five years as OpenAI expanded, soaring to an estimated $37.5 billion in annual computing costs by 2029, the documents showed... Still, OpenAI employees complain that Microsoft is not providing enough computing power, according to three people familiar with the relationship. And some have complained that if another company beat it to the creation of AI that matches the human brain, Microsoft will be to blame because it hasn't given OpenAI the computing power it needs, according to two people familiar with the complaints.
Oddly, that could be the key to getting out from under its contract with Microsoft. The contract contains a clause that says that if OpenAI builds artificial general intelligence, or AGI — roughly speaking, a machine that matches the power of the human brain — Microsoft loses access to OpenAI's technologies.
[ Read more of this story ]( https://slashdot.org/story/24/10/21/0132239/is-the-microsoft-openai-bromance-beginning-to-fray?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
bot.slashdot
robot(spnet, 1) — All
2024-10-21 16:23:02
Though Sam Altman once called OpenAI's partnership with Microsoft "the best bromance in tech," now "ties between the companies have started to fray" reports the New York Times — citing interviews with 19 people "familiar with the relationship". [Alternate URL here.]
Among other things, Satya Nadella "has said privately that Altman's firing in November shocked and concerned him, according to five people with knowledge of his comments. Since then, Microsoft has started to hedge its bet on OpenAI," and reconsidered new investments beyond its initial $13 billion — even as OpenAI expects to lose $5 billion this year
That tension demonstrates a key challenge for AI startups: They are dependent on the world's tech giants for money and computing power because those big companies control the massive cloud computing systems the small outfits need to develop AI... Over the past year, OpenAI has been trying to renegotiate the deal to help it secure more computing power and reduce crushing expenses while Microsoft executives have grown concerned that their AI work is too dependent on OpenAI... [I]n March, Microsoft paid at least $650 million to hire most of the staff from Inflection, an OpenAI competitor...
In June, Microsoft agreed to an exception in [OpenAI's] contract, six people with knowledge of the change said. That allowed OpenAI to sign a roughly $10 billion computing deal with Oracle for additional computing resources, according to two people familiar with the deal. Oracle is providing computers packed with chips suited to building AI, while Microsoft provides the software that drives the hardware... While it was looking for computer power alternatives, OpenAI also raced to broaden its investors, according to two people familiar with the company's plan. Part of the plan was to secure strategic investments from organizations that could bolster OpenAI's prospects in ways beyond throwing around money. Those organizations included Apple, chipmaker Nvidia, and MGX, a tech investment firm controlled by the United Arab Emirates... Earlier this month, OpenAI closed a $6.6 billion funding round led by Thrive Capital, with additional participation from Nvidia, MGX and others. Apple did not invest, but Microsoft also participated in the funding round.
OpenAI expected to spend at least $5.4 billion in computing costs through the end of 2024, according to documents reviewed by The New York Times. That amount was expected to skyrocket over the next five years as OpenAI expanded, soaring to an estimated $37.5 billion in annual computing costs by 2029, the documents showed... Still, OpenAI employees complain that Microsoft is not providing enough computing power, according to three people familiar with the relationship. And some have complained that if another company beat it to the creation of AI that matches the human brain, Microsoft will be to blame because it hasn't given OpenAI the computing power it needs, according to two people familiar with the complaints.
Oddly, that could be the key to getting out from under its contract with Microsoft. The contract contains a clause that says that if OpenAI builds artificial general intelligence, or AGI — roughly speaking, a machine that matches the power of the human brain — Microsoft loses access to OpenAI's technologies.
[ Read more of this story ]( https://slashdot.org/story/24/10/21/0132239/is-the-microsoft-openai-bromance-beginning-to-fray?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
[>]
lexbor 2.4.0
lor.opennet
robot(spnet, 1) — All
2024-11-22 10:44:04
13 ноября, после более года разработки, состоялся выпуск 2.4.0 высокопроизводительной библиотеки парсинга HTML5 и CSS [ lexbor.com ]( https://lexbor.com ) , написанной на языке C без сторонних зависимостей, и распространяемой по лицензии Apache 2.0.
Библиотека разделена на модули (Core, CSS, DOM, Encoding, HTML, NS, Punycode, Selectors, Tag, Unicode, URL, Utils), которые могут быть скомпилированы и использованы раздельно (с опцией CMake LEXBOR_BUILD_SEPARATELY=ON).
( [ читать дальше... ]( https://www.linux.org.ru/news/development/17799995#cut ) )
>>> [ Документация ]( https://lexbor.com/documentation )
>>> [ Исходный код ]( https://github.com/lexbor/lexbor )
lor.opennet
robot(spnet, 1) — All
2024-11-22 10:44:04
13 ноября, после более года разработки, состоялся выпуск 2.4.0 высокопроизводительной библиотеки парсинга HTML5 и CSS [ lexbor.com ]( https://lexbor.com ) , написанной на языке C без сторонних зависимостей, и распространяемой по лицензии Apache 2.0.
Библиотека разделена на модули (Core, CSS, DOM, Encoding, HTML, NS, Punycode, Selectors, Tag, Unicode, URL, Utils), которые могут быть скомпилированы и использованы раздельно (с опцией CMake LEXBOR_BUILD_SEPARATELY=ON).
( [ читать дальше... ]( https://www.linux.org.ru/news/development/17799995#cut ) )
>>> [ Документация ]( https://lexbor.com/documentation )
>>> [ Исходный код ]( https://github.com/lexbor/lexbor )
[>]
Intuit Seeks To Scrub CEO Comments on Tax Lobbying From Tech Podcast
bot.slashdot
robot(spnet, 1) — All
2024-10-21 18:23:01
Intuit, the maker of TurboTax software, asked technology news outlet The Verge to delete part of a podcast interview with CEO Sasan Goodarzi, The Verge reported on Monday. The request came after Goodarzi was questioned about Intuit's lobbying efforts against free government tax filing options, a topic that has drawn scrutiny from regulators and lawmakers.
The Verge said it declined to remove the segment, instead choosing to highlight the exchange by playing it at the beginning of the episode. In the interview, Goodarzi disputed claims that Intuit lobbies against free tax filing, stating the company spends "a couple of million dollars fighting for simplified taxes." However, The Verge's editor Nilay Patel pressed Goodarzi on reports of Intuit's lobbying against government-provided tax returns. Patel adds: I got a note from Rick Heineman, the chief communications officer at Intuit, who called the line of questioning and my tone "inappropriate," "egregious," and "disappointing" and demanded that we delete that entire section of the recording. I mean, literally -- he wrote a long email that ended with "at the very least the end portion of your interview should be deleted."
[ Read more of this story ]( https://slashdot.org/story/24/10/21/145211/intuit-seeks-to-scrub-ceo-comments-on-tax-lobbying-from-tech-podcast?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
bot.slashdot
robot(spnet, 1) — All
2024-10-21 18:23:01
Intuit, the maker of TurboTax software, asked technology news outlet The Verge to delete part of a podcast interview with CEO Sasan Goodarzi, The Verge reported on Monday. The request came after Goodarzi was questioned about Intuit's lobbying efforts against free government tax filing options, a topic that has drawn scrutiny from regulators and lawmakers.
The Verge said it declined to remove the segment, instead choosing to highlight the exchange by playing it at the beginning of the episode. In the interview, Goodarzi disputed claims that Intuit lobbies against free tax filing, stating the company spends "a couple of million dollars fighting for simplified taxes." However, The Verge's editor Nilay Patel pressed Goodarzi on reports of Intuit's lobbying against government-provided tax returns. Patel adds: I got a note from Rick Heineman, the chief communications officer at Intuit, who called the line of questioning and my tone "inappropriate," "egregious," and "disappointing" and demanded that we delete that entire section of the recording. I mean, literally -- he wrote a long email that ended with "at the very least the end portion of your interview should be deleted."
[ Read more of this story ]( https://slashdot.org/story/24/10/21/145211/intuit-seeks-to-scrub-ceo-comments-on-tax-lobbying-from-tech-podcast?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
[>]
Автора BcacheFS временно отстранили от разработки ядра Linux из-за нарушения кодекса поведения
lor.opennet
robot(spnet, 1) — All
2024-11-22 12:44:03
Кент Оверстрит (Kent Overstreet), разработчик ФС Bcachefs, сообщил, что будущее развиваемой им файловой системы в ядре под вопросом из-за действий комитета, отвечающего за соблюдение кодекса поведения в сообществе разработчиков (CoC Committee). Линус Торвальдс отказался принимать очередной набор исправлений к Bcachefs в состав ветки ядра 6.13, сославшись на наличие претензий со стороны комитета CoC.
https://www.opennet.ru/opennews/art.shtml?num=62276
lor.opennet
robot(spnet, 1) — All
2024-11-22 12:44:03
Кент Оверстрит (Kent Overstreet), разработчик ФС Bcachefs, сообщил, что будущее развиваемой им файловой системы в ядре под вопросом из-за действий комитета, отвечающего за соблюдение кодекса поведения в сообществе разработчиков (CoC Committee). Линус Торвальдс отказался принимать очередной набор исправлений к Bcachefs в состав ветки ядра 6.13, сославшись на наличие претензий со стороны комитета CoC.
https://www.opennet.ru/opennews/art.shtml?num=62276
[>]
Релиз Mesa 24.3, свободной реализации OpenGL и Vulkan
lor.opennet
robot(spnet, 1) — All
2024-11-22 17:44:03
После трёх месяцев разработки опубликован релиз свободной реализации API OpenGL и Vulkan - Mesa 24.3.0. Первый выпуск ветки Mesa 24.3.0 имеет экспериментальный статус - после проведения окончательной стабилизации кода будет выпущена стабильная версия 24.3.1.
https://www.opennet.ru/opennews/art.shtml?num=62277
lor.opennet
robot(spnet, 1) — All
2024-11-22 17:44:03
После трёх месяцев разработки опубликован релиз свободной реализации API OpenGL и Vulkan - Mesa 24.3.0. Первый выпуск ветки Mesa 24.3.0 имеет экспериментальный статус - после проведения окончательной стабилизации кода будет выпущена стабильная версия 24.3.1.
https://www.opennet.ru/opennews/art.shtml?num=62277
[>]
Kurt Vonnegut's Lost Board Game Finally Published
bot.slashdot
robot(spnet, 1) — All
2024-10-21 19:23:01
An anonymous reader shares a report: Fans of literature most likely know Kurt Vonnegut for the novel Slaughterhouse-Five. The staunchly anti-war book first resonated with readers during the Vietnam War era, later becoming a staple in high school curricula the world over. When Vonnegut died in 2007 at the age of 84, he was widely recognized as one of the greatest American novelists of all time. But would you believe that he was also an accomplished game designer?
In 1956, following the lukewarm reception of his first novel, Player Piano, Vonnegut was one of the 16 million other World War II veterans struggling to put food on the table. His moneymaking solution at the time was a board game called GHQ, which leveraged his understanding of modern combined arms warfare and distilled it into a simple game played on an eight-by-eight grid. Vonnegut pitched the game relentlessly to publishers all year long according to game designer and NYU faculty member Geoff Engelstein, who recently found those letters sitting in the archives at Indiana University. But the real treasure was an original set of typewritten rules, complete with Vonnegut's own notes in the margins.
With the permission of the Vonnegut estate, Engelstein tells Polygon that he cleaned the original rules up just a little bit, buffed out the dents in GHQ's endgame, and spun up some decent art and graphic design. Now you can purchase the final product, titled Kurt Vonnegut's GHQ: The Lost Board Game, at your local Barnes & Noble -- nearly 70 years after it was created.
[ Read more of this story ]( https://games.slashdot.org/story/24/10/21/1450241/kurt-vonneguts-lost-board-game-finally-published?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
bot.slashdot
robot(spnet, 1) — All
2024-10-21 19:23:01
An anonymous reader shares a report: Fans of literature most likely know Kurt Vonnegut for the novel Slaughterhouse-Five. The staunchly anti-war book first resonated with readers during the Vietnam War era, later becoming a staple in high school curricula the world over. When Vonnegut died in 2007 at the age of 84, he was widely recognized as one of the greatest American novelists of all time. But would you believe that he was also an accomplished game designer?
In 1956, following the lukewarm reception of his first novel, Player Piano, Vonnegut was one of the 16 million other World War II veterans struggling to put food on the table. His moneymaking solution at the time was a board game called GHQ, which leveraged his understanding of modern combined arms warfare and distilled it into a simple game played on an eight-by-eight grid. Vonnegut pitched the game relentlessly to publishers all year long according to game designer and NYU faculty member Geoff Engelstein, who recently found those letters sitting in the archives at Indiana University. But the real treasure was an original set of typewritten rules, complete with Vonnegut's own notes in the margins.
With the permission of the Vonnegut estate, Engelstein tells Polygon that he cleaned the original rules up just a little bit, buffed out the dents in GHQ's endgame, and spun up some decent art and graphic design. Now you can purchase the final product, titled Kurt Vonnegut's GHQ: The Lost Board Game, at your local Barnes & Noble -- nearly 70 years after it was created.
[ Read more of this story ]( https://games.slashdot.org/story/24/10/21/1450241/kurt-vonneguts-lost-board-game-finally-published?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
[>]
VMware Workstation теперь бесплатен и для коммерческого использования
lor.opennet
robot(spnet, 1) — All
2024-11-22 20:44:04
Тихо и незаметно компания VMware сделала всем сюрприз. Полная версия VMware Workstation Pro (Windows, Linux) и Fusion Pro (macOS) теперь полностью бесплатны! Без триалов, без ограничений по функциям, без микротранзакций. Раньше программа была бесплатна только для персонального использования. Бизнесы, образовательная сфера, фрилансеры и разработчики, планировавшие использовать ПО в коммерческих целях, должны были оплатить лицензию. Но теперь это в прошлом.
В связи с этим VMware Workstation Pro и Fusion Pro больше не доступны для покупки. Клиенты с коммерческой лицензией не получат манибэк, но продолжат получать поддержку через систему тикетов, чего не получат пользователи без лицензии.
VMware планирует и дальше развивать эти продукты. Большая часть доходов VMware поступает от продажи технологий виртуализации, предназначенных для бизнеса, предприятий и облачных сервисов — крупномасштабной ИТ-инфраструктуры — и от текущих контрактов на техническую поддержку, которые с этим связаны.
https://www.linux.org.ru/news/proprietary/17800518
lor.opennet
robot(spnet, 1) — All
2024-11-22 20:44:04
Тихо и незаметно компания VMware сделала всем сюрприз. Полная версия VMware Workstation Pro (Windows, Linux) и Fusion Pro (macOS) теперь полностью бесплатны! Без триалов, без ограничений по функциям, без микротранзакций. Раньше программа была бесплатна только для персонального использования. Бизнесы, образовательная сфера, фрилансеры и разработчики, планировавшие использовать ПО в коммерческих целях, должны были оплатить лицензию. Но теперь это в прошлом.
В связи с этим VMware Workstation Pro и Fusion Pro больше не доступны для покупки. Клиенты с коммерческой лицензией не получат манибэк, но продолжат получать поддержку через систему тикетов, чего не получат пользователи без лицензии.
VMware планирует и дальше развивать эти продукты. Большая часть доходов VMware поступает от продажи технологий виртуализации, предназначенных для бизнеса, предприятий и облачных сервисов — крупномасштабной ИТ-инфраструктуры — и от текущих контрактов на техническую поддержку, которые с этим связаны.
https://www.linux.org.ru/news/proprietary/17800518
[>]
Egypt Declared Malaria-Free After Century of Work To Defeat Disease
bot.slashdot
robot(spnet, 1) — All
2024-10-21 20:23:01
Egypt was declared malaria-free by the World Health Organization, after nearly a century of work to eradicate the disease in the country. From a report: Egypt saw 3 million cases a year in the 1940s, and the Aswan Dam's development in the 1960s created new bodies of standing water for the mosquitoes to breed in, but by 2001 the disease was "firmly under control," according to the WHO. "The disease that plagued pharaohs now belongs to [Egypt's] history," the WHO's chief said. It's the 44th country to be certified, but the wider battle against malaria goes on: The mosquito-borne disease still kills around 600,000 people a year, the large majority of them children in sub-Saharan Africa.
[ Read more of this story ]( https://science.slashdot.org/story/24/10/21/157250/egypt-declared-malaria-free-after-century-of-work-to-defeat-disease?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
bot.slashdot
robot(spnet, 1) — All
2024-10-21 20:23:01
Egypt was declared malaria-free by the World Health Organization, after nearly a century of work to eradicate the disease in the country. From a report: Egypt saw 3 million cases a year in the 1940s, and the Aswan Dam's development in the 1960s created new bodies of standing water for the mosquitoes to breed in, but by 2001 the disease was "firmly under control," according to the WHO. "The disease that plagued pharaohs now belongs to [Egypt's] history," the WHO's chief said. It's the 44th country to be certified, but the wider battle against malaria goes on: The mosquito-borne disease still kills around 600,000 people a year, the large majority of them children in sub-Saharan Africa.
[ Read more of this story ]( https://science.slashdot.org/story/24/10/21/157250/egypt-declared-malaria-free-after-century-of-work-to-defeat-disease?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
[>]
Консорциум Khronos взял в свои руки разработку открытого компилятора шейдеров Slang
lor.opennet
robot(spnet, 1) — All
2024-11-22 23:44:03
Компания NVIDIA передала язык шейдеров Slang и связанный с ним компилятор под покровительство консорциума Khronos, занимающегося разработкой графических стандартов. Предполагается, что разработка проекта Slang на независимой площадке Khronos позволит привлечь в проект новых участников. Язык создан как совместный проект NVIDIA и ведущих университетов США (Университет Карнеги-Меллона, Стэнфордфордский университет, Массачусетский технологический институт, Калифорнийский университет в Сан-Диего и Вашингтонский университет). Код компилятора написан на языке C++ и открыт под лицензией Apache 2.0. Компилятором поддерживаются платформы Linux, Windows, macOS и WebAssembly.
https://www.opennet.ru/opennews/art.shtml?num=62279
lor.opennet
robot(spnet, 1) — All
2024-11-22 23:44:03
Компания NVIDIA передала язык шейдеров Slang и связанный с ним компилятор под покровительство консорциума Khronos, занимающегося разработкой графических стандартов. Предполагается, что разработка проекта Slang на независимой площадке Khronos позволит привлечь в проект новых участников. Язык создан как совместный проект NVIDIA и ведущих университетов США (Университет Карнеги-Меллона, Стэнфордфордский университет, Массачусетский технологический институт, Калифорнийский университет в Сан-Диего и Вашингтонский университет). Код компилятора написан на языке C++ и открыт под лицензией Apache 2.0. Компилятором поддерживаются платформы Linux, Windows, macOS и WebAssembly.
https://www.opennet.ru/opennews/art.shtml?num=62279
[>]
52nd Known Mersenne Prime Found
bot.slashdot
robot(spnet, 1) — All
2024-10-21 20:23:01
chalsall writes: After more than six years of work since the last discovery, the Great Internet Mersenne Prime Search (GIMPS) has found the 52nd known Mersenne Prime number. This is also the largest prime number known to humans.
The number is 2^136,279,841-1, which is 41,024,320 decimal digits long.
Luke Durant, a researcher from San Jose, CA, found it after contributing a fantastic amount of compute to the GIMPS project.
[ Read more of this story ]( https://science.slashdot.org/story/24/10/21/1525215/52nd-known-mersenne-prime-found?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
bot.slashdot
robot(spnet, 1) — All
2024-10-21 20:23:01
chalsall writes: After more than six years of work since the last discovery, the Great Internet Mersenne Prime Search (GIMPS) has found the 52nd known Mersenne Prime number. This is also the largest prime number known to humans.
The number is 2^136,279,841-1, which is 41,024,320 decimal digits long.
Luke Durant, a researcher from San Jose, CA, found it after contributing a fantastic amount of compute to the GIMPS project.
[ Read more of this story ]( https://science.slashdot.org/story/24/10/21/1525215/52nd-known-mersenne-prime-found?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
[>]
Технический комитет Linux Foundation официально объявил о временном отстранении автора BсacheFS
lor.opennet
robot(spnet, 1) — All
2024-11-23 08:44:03
Управляющий технический комитет организации Linux Foundation (Technical Advisory Board) объявил об ограничении участия Кента Оверстрита, автора BсacheFS, в разработке ядра через запрет приёма pull-запросов на протяжении цикла формирования релиза 6.13. Решение принято на основе рекомендации комитета, отвечающего за соблюдение кодекса поведения в сообществе разработчиков ядра Linux (CoC Committee). Подтверждено, что причиной отстранения стало оскорбление Михала Хочко без последующего подтверждения способности дальнейшего участия в технических дискуссиях без личных нападок.
https://www.opennet.ru/opennews/art.shtml?num=62281
lor.opennet
robot(spnet, 1) — All
2024-11-23 08:44:03
Управляющий технический комитет организации Linux Foundation (Technical Advisory Board) объявил об ограничении участия Кента Оверстрита, автора BсacheFS, в разработке ядра через запрет приёма pull-запросов на протяжении цикла формирования релиза 6.13. Решение принято на основе рекомендации комитета, отвечающего за соблюдение кодекса поведения в сообществе разработчиков ядра Linux (CoC Committee). Подтверждено, что причиной отстранения стало оскорбление Михала Хочко без последующего подтверждения способности дальнейшего участия в технических дискуссиях без личных нападок.
https://www.opennet.ru/opennews/art.shtml?num=62281
[>]
Linus Torvalds Growing Frustrated By Buggy Hardware, Theoretical CPU Attacks
bot.slashdot
robot(spnet, 1) — All
2024-10-21 21:23:02
jd writes: Linus Torvalds is not a happy camper and is condemning hardware vendors for poor security and the plethora of actual and theoretical attacks, especially as some of the new features being added impact the workarounds. These workarounds are now getting very expensive, CPU-wise.
TFA quotes Linus Torvalds: "Honestly, I'm pretty damn fed up with buggy hardware and completely theoretical attacks that have never actually shown themselves to be used in practice. "So I think this time we push back on the hardware people and tell them it's *THEIR* damn problem, and if they can't even be bothered to say yay-or-nay, we just sit tight. Because dammit, let's put the onus on where the blame lies, and not just take any random shit from bad hardware and say 'oh, but it *might* be a problem.'"
[ Read more of this story ]( https://linux.slashdot.org/story/24/10/21/1533228/linus-torvalds-growing-frustrated-by-buggy-hardware-theoretical-cpu-attacks?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
bot.slashdot
robot(spnet, 1) — All
2024-10-21 21:23:02
jd writes: Linus Torvalds is not a happy camper and is condemning hardware vendors for poor security and the plethora of actual and theoretical attacks, especially as some of the new features being added impact the workarounds. These workarounds are now getting very expensive, CPU-wise.
TFA quotes Linus Torvalds: "Honestly, I'm pretty damn fed up with buggy hardware and completely theoretical attacks that have never actually shown themselves to be used in practice. "So I think this time we push back on the hardware people and tell them it's *THEIR* damn problem, and if they can't even be bothered to say yay-or-nay, we just sit tight. Because dammit, let's put the onus on where the blame lies, and not just take any random shit from bad hardware and say 'oh, but it *might* be a problem.'"
[ Read more of this story ]( https://linux.slashdot.org/story/24/10/21/1533228/linus-torvalds-growing-frustrated-by-buggy-hardware-theoretical-cpu-attacks?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
[>]
Dow Jones and New York Post Sue AI Startup Perplexity, Alleging 'Massive' Copyright Infringement
bot.slashdot
robot(spnet, 1) — All
2024-10-21 22:23:01
News Corp's Dow Jones & Co., publisher of the Wall Street Journal, and the New York Post have sued Perplexity, a startup that calls itself an "AI-powered Swiss Army Knife for information discovery and curiosity," alleging copyright infringement. From a report: "Perplexity is a generative artificial intelligence company that claims to provide its users accurate and up-to-date news and information in a platform that, in Perplexity's own words, allows users to 'Skip the Links' to original publishers' websites," the companies said in the federal lawsuit, filed Monday. "Perplexity attempts to accomplish this by engaging in a massive amount of illegal copying of publishers' copyrighted works and diverting customers and critical revenues away from those copyright holders. This suit is brought by news publishers who seek redress for Perplexity's brazen scheme to compete for readers while simultaneously freeriding on the valuable content the publishers produce."
[ Read more of this story ]( https://yro.slashdot.org/story/24/10/21/1717237/dow-jones-and-new-york-post-sue-ai-startup-perplexity-alleging-massive-copyright-infringement?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
bot.slashdot
robot(spnet, 1) — All
2024-10-21 22:23:01
News Corp's Dow Jones & Co., publisher of the Wall Street Journal, and the New York Post have sued Perplexity, a startup that calls itself an "AI-powered Swiss Army Knife for information discovery and curiosity," alleging copyright infringement. From a report: "Perplexity is a generative artificial intelligence company that claims to provide its users accurate and up-to-date news and information in a platform that, in Perplexity's own words, allows users to 'Skip the Links' to original publishers' websites," the companies said in the federal lawsuit, filed Monday. "Perplexity attempts to accomplish this by engaging in a massive amount of illegal copying of publishers' copyrighted works and diverting customers and critical revenues away from those copyright holders. This suit is brought by news publishers who seek redress for Perplexity's brazen scheme to compete for readers while simultaneously freeriding on the valuable content the publishers produce."
[ Read more of this story ]( https://yro.slashdot.org/story/24/10/21/1717237/dow-jones-and-new-york-post-sue-ai-startup-perplexity-alleging-massive-copyright-infringement?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
[>]
Выпуск Wine 9.22 с включением по умолчанию драйвера Wayland
lor.opennet
robot(spnet, 1) — All
2024-11-23 09:44:03
Опубликован экспериментальный выпуск открытой реализации Win32 API - Wine 9.22. С момента выпуска 9.21 было закрыто 19 отчётов об ошибках и внесено 313 изменений.
https://www.opennet.ru/opennews/art.shtml?num=62282
lor.opennet
robot(spnet, 1) — All
2024-11-23 09:44:03
Опубликован экспериментальный выпуск открытой реализации Win32 API - Wine 9.22. С момента выпуска 9.21 было закрыто 19 отчётов об ошибках и внесено 313 изменений.
https://www.opennet.ru/opennews/art.shtml?num=62282
[>]
'Crises at Boeing and Intel Are a National Emergency'
bot.slashdot
robot(spnet, 1) — All
2024-10-21 22:23:01
Intel and Boeing, once exemplars of American manufacturing prowess, now face existential crises. Their market values have plummeted, jeopardizing not just shareholder wealth but national security. The U.S. is losing its edge in manufacturing high-tech products, crucial in its geopolitical contest with China, a story on WSJ argues.
Unlike past manufacturing declines, Intel and Boeing's woes stem from internal missteps, prioritizing financial performance over engineering excellence. Their potential demise threatens America's semiconductor and commercial aircraft industries, with far-reaching consequences for the nation's technological ecosystem. While government intervention is controversial, national security concerns may necessitate support. WSJ adds: So, much as national leaders would like to ignore these companies' woes, they can't. National security dictates the U.S. maintain some know-how in making aircraft and semiconductors.
Certainly other countries feel that way: European governments heavily subsidized Airbus. China is pursuing dominance in key technologies regardless of the cost. Its so-called Big Fund has sunk roughly $100 billion into semiconductors while aid to Comac had reached $72 billion in 2020, according to the Center for Strategic and International Studies.
"Until Comac succeeds in gaining significant global market share, it will continue to run big losses and be bailed out by the Chinese government," said Atkinson, whose organization gets support from Boeing.
Both political parties have bought into the idea that manufacturing is special and thus deserving of public support. That raises the question: which manufacturing, and what kind of support?
The goal of manufacturing strategy shouldn't be just producing jobs but great, world-beating products. [...]
[ Read more of this story ]( https://news.slashdot.org/story/24/10/21/161231/crises-at-boeing-and-intel-are-a-national-emergency?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
bot.slashdot
robot(spnet, 1) — All
2024-10-21 22:23:01
Intel and Boeing, once exemplars of American manufacturing prowess, now face existential crises. Their market values have plummeted, jeopardizing not just shareholder wealth but national security. The U.S. is losing its edge in manufacturing high-tech products, crucial in its geopolitical contest with China, a story on WSJ argues.
Unlike past manufacturing declines, Intel and Boeing's woes stem from internal missteps, prioritizing financial performance over engineering excellence. Their potential demise threatens America's semiconductor and commercial aircraft industries, with far-reaching consequences for the nation's technological ecosystem. While government intervention is controversial, national security concerns may necessitate support. WSJ adds: So, much as national leaders would like to ignore these companies' woes, they can't. National security dictates the U.S. maintain some know-how in making aircraft and semiconductors.
Certainly other countries feel that way: European governments heavily subsidized Airbus. China is pursuing dominance in key technologies regardless of the cost. Its so-called Big Fund has sunk roughly $100 billion into semiconductors while aid to Comac had reached $72 billion in 2020, according to the Center for Strategic and International Studies.
"Until Comac succeeds in gaining significant global market share, it will continue to run big losses and be bailed out by the Chinese government," said Atkinson, whose organization gets support from Boeing.
Both political parties have bought into the idea that manufacturing is special and thus deserving of public support. That raises the question: which manufacturing, and what kind of support?
The goal of manufacturing strategy shouldn't be just producing jobs but great, world-beating products. [...]
[ Read more of this story ]( https://news.slashdot.org/story/24/10/21/161231/crises-at-boeing-and-intel-are-a-national-emergency?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
[>]
Выпуск MaXX Interactive Desktop 2.2, адаптации рабочего стола IRIX для Linux
lor.opennet
robot(spnet, 1) — All
2024-11-23 10:44:03
После четырёх лет разработки опубликована среда рабочего стола MaXX Interactive Desktop 2.2.0, которая позиционируется как первый альфа-выпуск проекта, пытающегося воссоздать пользовательскую оболочку IRIX Interactive Desktop (SGI Indigo Magic Desktop) с использованием технологий Linux. Разработка ведётся по соглашению с компанией SGI, разрешающему полное воссоздание всех функций IRIX Interactive Desktop для платформы Linux. Инструкции по установке подготовлены для Ubuntu, RHEL, Debian, Manjaro и Arch Linux.
https://www.opennet.ru/opennews/art.shtml?num=62284
lor.opennet
robot(spnet, 1) — All
2024-11-23 10:44:03
После четырёх лет разработки опубликована среда рабочего стола MaXX Interactive Desktop 2.2.0, которая позиционируется как первый альфа-выпуск проекта, пытающегося воссоздать пользовательскую оболочку IRIX Interactive Desktop (SGI Indigo Magic Desktop) с использованием технологий Linux. Разработка ведётся по соглашению с компанией SGI, разрешающему полное воссоздание всех функций IRIX Interactive Desktop для платформы Linux. Инструкции по установке подготовлены для Ubuntu, RHEL, Debian, Manjaro и Arch Linux.
https://www.opennet.ru/opennews/art.shtml?num=62284