RSS
[>] DNA of 15 Million People For Sale In 23andMe Bankruptcy
bot.slashdot
robot(spnet, 1) — All
2025-03-25 01:22:01


An anonymous reader quotes a report from 404 Media: 23andMe filed for Chapter 11 bankruptcy Sunday, leaving the fate of millions of people's genetic information up in the air as the company deals with the legal and financial fallout of not properly protecting that genetic information in the first place. The filing shows how dangerous it is to provide your DNA directly to a large, for-profit commercial genetic database; 23andMe is now looking for a buyer to pull it out of bankruptcy. 23andMe said in court documents viewed by 404 Media that since hackers obtained personal data about seven million of its customers in October 2023, including, in some cases "health-related information based upon the user's genetics," it has faced "over 50 class action and state court lawsuits," and that "approximately 35,000 claimants have initiated, filed, or threatened to commence arbitration claims against the company." It is seeking bankruptcy protection in part to simplify the fallout of these legal cases, and because it believes it may not have money to pay for the potential damages associated with these cases.

CEO and cofounder Anne Wojcicki announced she is leaving the company as part of this process. The company has the genetic data of more than 15 million customers. According to its Chapter 11 filing, 23andMe owes money to a host of pharmaceutical companies, pharmacies, artificial intelligence companies (including a company called Aganitha AI and Coreweave), as well as health insurance companies and marketing companies. Shortly before the filing, California Attorney General Rob Bonta issued an "urgent" alert to 23andMe customers: "Given 23andMe's reported financial distress, I remind Californians to consider invoking their rights and directing 23andMe to delete their data and destroy any samples of genetic material held by the company."

In a letter to customers Sunday, 23andMe said: "Your data remains protected. The Chapter 11 filing does not change how we store, manage, or protect customer data. Our users' privacy and data are important considerations in any transaction, and we remain committed to our users' privacy and to being transparent with our customers about how their data is managed." It added that any buyer will have to "comply with applicable law with respect to the treatment of customer data."

404 Media's Jason Koebler notes that "there's no way of knowing who is going to buy it, why they will be interested, and what will become of its millions of customers' DNA sequences. 23andMe has claimed over the years that it strongly resists law enforcement requests for information and that it takes customer security seriously. But the company has in recent years changed its terms of service, partnered with big pharmaceutical companies, and, of course, was hacked."

[ Read more of this story ]( https://science.slashdot.org/story/25/03/24/2022232/dna-of-15-million-people-for-sale-in-23andme-bankruptcy?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] 'What CERN Does Next Matters For Science and For International Cooperation'
bot.slashdot
robot(spnet, 1) — All
2025-03-25 00:22:02


CERN faces a pivotal decision about its future as the Large Hadron Collider approaches the end of its usefulness by the early 2040s. Management proposes building the Future Circular Collider (FCC), a machine with a 90-kilometer circumference that would smash particles at eight times the energy of the LHC. This hugely consequential plan faces significant challenges. Much of the required technology doesn't exist yet, including superconducting magnets strong enough to bend high-energy particle beams.

The project also lacks the clear rationale that the LHC had in finding the Higgs boson. The proposal has divided physicists. Critics worry about the decades-long timeline, potential cost overruns, and the risk of sacrificing other valuable CERN activities. Germany, which provides 20% of the lab's budget, has already indicated it won't increase contributions. A council-appointed group is now gathering input from the physics community before making recommendations in December.

Nature's editorial board adds: Unless some nations step up with a major infusion of cash, the FCC faces an uncertain prospect of being funded. But waiting too long could mean that there will be a large gap between the new facility opening and the closure of the LHC, and precious expertise could end up being lost.

Although physicists might disagree on what CERN should do, they nearly unanimously care about the lab's future. They and their leaders must now make the case for why European taxpayers, who fund most of the lab's yearly budget should care, too. The stakes are beyond science, and even beyond Europe.

[ Read more of this story ]( https://science.slashdot.org/story/25/03/24/206247/what-cern-does-next-matters-for-science-and-for-international-cooperation?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] How a Nephew's CD Burner Inspired Early Valve To Embrace DRM
bot.slashdot
robot(spnet, 1) — All
2025-03-25 00:22:02


Valve's early anti-piracy efforts, which eventually led to the Steam platform, were sparked by co-founder Monica Harrington's nephew using her money to buy a CD burner for copying games, she revealed at last week's Game Developers Conference. Harrington said her nephew's "lovely thank you note" about sharing games with friends represented a "generational shift" in piracy attitudes that could "put our entire business model at risk."

Half-Life subsequently launched with CD key verification in 1998. When players complained about authentication failures, co-founder Mike Harrington discovered "none of them had actually bought the game," confirming the system worked. Although easily bypassed, this early protection influenced Steam's more robust DRM implemented with Half-Life 2 in 2004, which became the industry standard for PC game distribution.

[ Read more of this story ]( https://slashdot.org/story/25/03/24/1939209/how-a-nephews-cd-burner-inspired-early-valve-to-embrace-drm?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Researchers Search For More Precise Ways To Measure Pain
bot.slashdot
robot(spnet, 1) — All
2025-03-24 23:22:01


Scientists are developing biomarkers to objectively measure pain, addressing a fundamental medical challenge that has contributed to the opioid crisis and led to consistent underestimation of pain in women and minorities.

Four research teams funded by the Department of Health and Human Services are developing technologies to quantify pain like other vital signs. Their approaches include a blood test for endometriosis pain, a device measuring nerve response through pupil dilation, microneedle patches sampling interstitial fluid, and a wearable sensor detecting pain markers in sweat.

"When patients are told that the pain is all in their head, the implication is that it's imagined, but the irony is that's sort of right," said Adam Kepecs, a neuroscience professor at Washington University. "The pain only exists in your brain. It's neural activity, which is why it's invisible and uniquely personal. But it's still real." These innovations could transform treatment for the nearly 25% of Americans suffering from chronic pain, while potentially saving billions in healthcare costs.

[ Read more of this story ]( https://science.slashdot.org/story/25/03/24/194257/researchers-search-for-more-precise-ways-to-measure-pain?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Pentagon Axes HR System After 780% Budget Overrun
bot.slashdot
robot(spnet, 1) — All
2025-03-24 23:22:01


The Pentagon has canceled its troubled Defense Civilian Human Resources Management System after years of delays and budget overruns, Defense Secretary Pete Hegseth said. The project, launched in 2018 with a one-year timeline and $36 million budget, ultimately ran eight years and exceeded costs by $280 million, reaching 780% over budget. "We're not doing that anymore," Hegseth said in a video announcing the cancellation. Officials have 60 days to develop a new plan to modernize DoD's civilian HR systems. The cuts are part of a broader $580 million spending reduction that includes $360 million in diversity, climate change and COVID-19 grant programs, plus $30 million in consulting contracts with Gartner and McKinsey.

[ Read more of this story ]( https://news.slashdot.org/story/25/03/24/1822226/pentagon-axes-hr-system-after-780-budget-overrun?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Выпуск композитного сервера Hyprland 0.48
lor.opennet
robot(spnet, 1) — All
2025-03-24 22:44:03


Доступен композитный сервер Hyprland 0.48, использующий протокол Wayland. Проект ориентирован на мозаичную (tiling) компоновку окон, но поддерживает и классическое произвольное размещение окон, группировку окон в форме вкладок, псевдомозаичный режим и полноэкранное раскрытие окон. Предоставляются возможности для создания визуально привлекательных интерфейсов: градиенты в обрамлении окон, размытие фона, анимационные эффекты и тени. Для расширения функциональности могут подключаться плагины, а для внешнего управления работой предоставляется IPC на базе сокетов. Код написан на языке С++ и распространяется под лицензией BSD.

https://www.opennet.ru/opennews/art.shtml?num=62941

[>] Google Says It Might Have Deleted Your Maps Timeline Data
bot.slashdot
robot(spnet, 1) — All
2025-03-24 22:22:01


Google has confirmed that a technical issue has permanently deleted location history data for numerous users of its Maps application, with no recovery possible for most affected customers. The problem emerged after Google transitioned its Timeline feature from cloud to on-device storage in 2024 to enhance privacy protections. Users began reporting missing historical location data on support forums and social media platforms in recent weeks. "This is the result of a technical issue and not user error or an intentional change," said a Google spokesperson. Only users who manually enabled encrypted cloud backups before the incident can recover their data, according to Google. The company began shifting location storage policies in 2023, initially stopping collection of sensitive location data including visits to abortion clinics and domestic violence shelters.

[ Read more of this story ]( https://tech.slashdot.org/story/25/03/24/1749248/google-says-it-might-have-deleted-your-maps-timeline-data?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] China Unveils a Powerful Deep-sea Cable Cutter That Could Reset the World Order
bot.slashdot
robot(spnet, 1) — All
2025-03-24 21:22:01


schwit1 writes: A compact, deep-sea, cable-cutting device, capable of severing the world's most fortified underwater communication or power lines, has been unveiled by China -- and it could shake up global maritime power dynamics.

The revelation marks the first time any country has officially disclosed that it has such an asset, capable of disrupting critical undersea networks. The tool, which is able to cut lines at depths of up to 4,000 metres (13,123 feet) -- twice the maximum operational range of existing subsea communication infrastructure -- has been designed specifically for integration with China's advanced crewed and uncrewed submersibles like the Fendouzhe, or Striver, and the Haidou series.

[ Read more of this story ]( https://tech.slashdot.org/story/25/03/24/1645202/china-unveils-a-powerful-deep-sea-cable-cutter-that-could-reset-the-world-order?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] China Bans Compulsory Facial Recognition and Its Use in Private Spaces Like Hotel Rooms
bot.slashdot
robot(spnet, 1) — All
2025-03-24 21:22:01


China's Cyberspace Administration and Ministry of Public Security have outlawed the use of facial recognition without consent. From a report: The two orgs last Friday published new rules on facial recognition and an explainer that spell out how orgs that want to use facial recognition must first conduct a "personal information protection impact assessment" that considers whether using the tech is necessary, impacts on individuals' privacy, and risks of data leakage. Organizations that decide to use facial recognition must data encrypt biometric data, and audit the information security techniques and practices they use to protect facial scans. Chinese that go through that process and decide they want to use facial recognition can only do so after securing individuals' consent. The rules also ban the use of facial recognition equipment in public places such as hotel rooms, public bathrooms, public dressing rooms, and public toilets. The measures don't apply to researchers or to what machine translation of the rules describes as "algorithm training activities" -- suggesting images of citizens' faces are fair game when used to train AI models.

[ Read more of this story ]( https://yro.slashdot.org/story/25/03/24/1616232/china-bans-compulsory-facial-recognition-and-its-use-in-private-spaces-like-hotel-rooms?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] AI Will Impact GDP of Every Country By Double Digits, Says Mistral CEO
bot.slashdot
robot(spnet, 1) — All
2025-03-24 20:22:01


Countries must develop their own artificial intelligence infrastructure or risk significant economic losses as the technology transforms global economies, Mistral CEO Arthur Mensch said last week.

"It will have an impact on GDP of every country in the double digits in the coming years," Mensch told the A16z podcast, warning that nations without domestic AI systems would see capital flow elsewhere. The French startup executive compared AI to electricity adoption a century ago. "If you weren't building electricity factories, you were preparing yourself to buy it from your neighbors, which creates dependencies," he said.

[ Read more of this story ]( https://slashdot.org/story/25/03/24/1527230/ai-will-impact-gdp-of-every-country-by-double-digits-says-mistral-ceo?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Linux Kernel 6.14 Officially Released
bot.slashdot
robot(spnet, 1) — All
2025-03-24 19:22:01


prisoninmate shares a report: Highlights of Linux 6.14 include Btrfs RAID1 read balancing support, a new ntsync subsystem for Win NT synchronization primitives to boost game emulation with Wine, uncached buffered I/O support, and a new accelerator driver for the AMD XDNA Ryzen AI NPUs (Neural Processing Units).

Also new is DRM panic support for the AMDGPU driver, reflink and reverse-mapping support for the XFS real-time device, Intel Clearwater Forest server support, support for SELinux extended permissions, FUSE support for io_uring, a new fsnotify file pre-access event type, and a new cgroup controller for device memory.

[ Read more of this story ]( https://linux.slashdot.org/story/25/03/24/1448217/linux-kernel-614-officially-released?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Релиз ядра Linux 6.14
lor.opennet
robot(spnet, 1) — All
2025-03-24 18:44:02


После двух месяцев разработки Линус Торвальдс представил релиз ядра Linux 6.14. Среди наиболее заметных изменений: драйвер ntsync c примитивами синхронизации Windows NT, настройка балансировки операций чтения в Btrfs RAID1, поддержка reflink в XFS в режиме realtime, возможность некэшируемого буферизированного ввода/вывода, dmem cgroup для ограничения памяти GPU, задействование io_uring в FUSE, делегирование атрибутов в NFS, поддержка атомарной записи в Device mapper, ускорение символических ссылок, управление возможностью выполнения скриптов, поддержка чипов Qualcomm Snapdragon 8 Elite, драйвер для NPU AMD.

https://www.opennet.ru/opennews/art.shtml?num=62937

[>] Выпуск Wayland-Protocols 1.42
lor.opennet
robot(spnet, 1) — All
2025-03-24 18:44:02


Опубликован выпуск пакета wayland-protocols 1.42, содержащего набор протоколов и расширений, дополняющих базовый протокол Wayland и предоставляющих возможности, необходимые для построения композитных серверов и пользовательских окружений.

https://www.opennet.ru/opennews/art.shtml?num=62940

[>] Выпуск игры The Dark Mod 2.13, созданной по мотивам Thief
lor.opennet
robot(spnet, 1) — All
2025-03-24 18:44:02


После года разработки вышел релиз свободно распространяемой игры с открытым исходным кодом The Dark Mod 2.13, созданной в жанре "стелс" по мотивам игрового мира и серии игр Thief. Игровой движок TDM основан на движке Id Tech 4 и распространяется под лицензией GPLv3.

https://www.opennet.ru/opennews/art.shtml?num=62939

[>] DNA-Testing Firm 23andMe Files for Bankruptcy
bot.slashdot
robot(spnet, 1) — All
2025-03-24 18:22:01


DNA-testing company 23andMe has filed for Chapter 11 bankruptcy protection [non-paywalled source] in Missouri and announced CEO Anne Wojcicki's immediate resignation, weeks after rejecting her proposal to buy back the business she co-founded. The bankruptcy filing represents "the best path forward to maximize the value of the business," said Mark Jensen, board member and special committee chair.

[ Read more of this story ]( https://slashdot.org/story/25/03/24/0517231/dna-testing-firm-23andme-files-for-bankruptcy?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Why the Internet Archive is More Relevant Than Ever
bot.slashdot
robot(spnet, 1) — All
2025-03-24 16:22:01


It's "live-recording the World Wide Web," according to NPR, with a digital library that includes "hundreds of billions of copies of government websites, news articles and data."

They described the 29-year-old nonprofit Internet Archive as "more relevant than ever."

Every day, about 100 terabytes of material are uploaded to the Internet Archive, or about a billion URLs, with the assistance of automated crawlers. Most of that ends up in the Wayback Machine, while the rest is digitized analog media — books, television, radio, academic papers — scanned and stored on servers. As one of the few large-scale archivists to back up the web, the Internet Archive finds itself in a particularly unique position right now... Thousands of [U.S. government] datasets were wiped — mostly at agencies focused on science and the environment — in the days following Trump's return to the White House...
The Internet Archive is among the few efforts that exist to catch the stuff that falls through the digital cracks, while also making that information accessible to the public. Six weeks into the new administration, Wayback Machine director [Mark] Graham said, the Internet Archive had cataloged some 73,000 web pages that had existed on U.S. government websites that were expunged after Trump's inauguration...

According to Graham, based on the big jump in page views he's observed over the past two months, the Internet Archive is drawing many more visitors than usual to its services — journalists, researchers and other inquiring minds. Some want to consult the archive for information lost or changed in the purge, while others aim to contribute to the archival process.... "People are coming and rallying behind us," said Brewster Kahle, [the founder and current director of the Internet Archive], "by using it, by pointing at things, helping organize things, by submitting content to be archived — data sets that are under threat or have been taken down...."

A behemoth of link rot repair, the Internet Archive rescues a daily average of 10,000 dead links that appear on Wikipedia pages. In total, it's fixed more than 23 million rotten links on Wikipedia alone, according to the organization.

Though it receives some money for its preservation work for libraries, museums, and other organizations, it's also funded by donations. "From the beginning, it was important for the Internet Archive to be a nonprofit, because it was working for the people," explains founder Brewster Kahle on its donations page:

Its motives had to be transparent; it had to last a long time. That's why we don't charge for access, sell user data, or run ads, even while we offer free resources to citizens everywhere. We rely on the generosity of individuals like you to pay for servers, staff, and preservation projects. If you can't imagine a future without the Internet Archive, please consider supporting our work. We promise to put your donation to good use as we continue to store over 99 petabytes of data, including 625 billion webpages, 38 million texts, and 14 million audio recordings.

Two interesting statistics from NPR's article:

"A Pew Research Center study published last year found that roughly 38% of web pages on the internet that existed in 2013 were no longer accessible as of 2023."
"According to a Harvard Law Review study published in 2014, about half of all links cited in U.S. Supreme Court opinions no longer led to the original source material."

Thanks to long-time Slashdot reader jtotheh for sharing the news.

[ Read more of this story ]( https://tech.slashdot.org/story/25/03/23/1742225/why-the-internet-archive-is-more-relevant-than-ever?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Конец Древнего Египта: последняя надпись иероглифами
bot.antropogenezru.rss
BotYouTube(tgi,4) — All
2025-03-24 14:20:03


Опубликовано: 2025-03-24T09:37:47+00:00

Недалеко от египетского Асуана, на острове Агилкия находится храм Исиды, перенесенный сюда с острова Филы в 1964 году, после строительства 2-й Асуанской плотины. Возле этого храма - Ворота Адриана. А на них - древняя надпись, которую оставил жрец Исмет-Ахом, как он пишет, "ради вечности". Рядом изображён бог Мандулис.

https://www.youtube.com/watch?v=_u8tgCr4qM8

[>] Another Large Black Hole In 'Our' Galaxy
bot.slashdot
robot(spnet, 1) — All
2025-03-24 12:22:01


RockDoctor (Slashdot reader #15,477) writes:

A recent paper on ArXiv reports a novel idea about the central regions of "our" galaxy.

Remember the hoopla a few years ago about radio-astronomical observations producing an "image" of our central black hole — or rather, an image of the accretion disc around the black hole — long designated by astronomers as "Sagittarius A*" (or SGR-A*)? If you remember the image published then, one thing should be striking — it's not very symmetrical. If you think about viewing a spinning object, then you'd expect to see something with a "mirror" symmetry plane where we would see the rotation axis (if someone had marked it). If anything, that published image has three bright spots on a fainter ring. And the spots are not even approximately the same brightness.

This paper suggests that the image we see is the result of the light (radio waves) from SGR-A* being "lensed" by another black hole, near (but not quite on) the line of sight between SGR-A* and us. By various modelling approaches, they then refine this idea to a "best-fit" of a black hole with mass around 1000 times the Sun, orbiting between the distance of the closest-observed star to SGR-A* ("S2" — most imaginative name, ever!), and around 10 times that distance. That's far enough to make a strong interaction with "S2" unlikely within the lifetime of S2 before it's accretion onto SGR-A*.)

The region around SGR-A* is crowded. Within 25 parsecs (~80 light years, the distance to Regulus [in the constellation Leo] or Merak [in the Great Bear]) there is around 4 times more mass in several millions of "normal" stars than in the SGR-A* black hole. Finding a large (not "super massive") black hole in such a concentration of matter shouldn't surprise anyone.

This proposed black hole is larger than anything which has been detected by gravitational waves (yet) ; but not immensely larger — only a factor of 15 or so. (The authors also anticipate the "what about these big black holes spiralling together?" question : quote "and the amplitude of gravitational waves generated by the binary black holes is negligible.")

Being so close to SGR-A*, the proposed black hole is likely to be moving rapidly across our line of sight. At the distance of "S2" it's orbital period would be around 26 years (but the "new" black hole is probably further out than than that). Which might be an explanation for some of the variability and "flickering" reported for SGR-A* ever since it's discovery.
As always, more observations are needed. Which, for SGR-A* are frequently being taken, so improving (or ruling out) this explanation should happen fairly quickly. But it's a very interesting, and fun, idea.

[ Read more of this story ]( https://science.slashdot.org/story/25/03/23/2227207/another-large-black-hole-in-our-galaxy?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] STATS 2025-03-23
spnet.stats
root(spnet, 1) — All
2025-03-24 11:11:01


TOP10 VISITORS:

[1] 45.135.180.x point=220 web=0 up=18.2MB (34%) <--- yesterlink (9/hr)
[2] 37.252.14.x point=114 web=0 up=14.0MB (26%) <--- ake (5/hr)
[3] 80.87.199.x point=71 web=0 up=6.9MB (13%) <--- tgi (3/hr)
[4] 24.130.121.x point=53 web=4 up=5.5MB (10%) <--- spnet (2/hr)
[5] Facebook point=0 web=394 up=4.8MB (9%)
[6] PetalBot point=177 web=272 up=1.1MB (2%) <--- PetalBot (7/hr)
[7] Google point=48 web=176 up=0.9MB (1%) <--- Google (2/hr)
[8] 217.114.158.x point=25 web=0 up=0.9MB (1%) <--- fox (1/hr)
[9] TikTok point=0 web=113 up=0.3MB (<1%)
[10] 185.209.198.x point=0 web=5 up=63KB

TOTAL TRAFFIC: 52MB

[>] Релиз языка программирования V 0.4.10
lor.opennet
robot(spnet, 1) — All
2025-03-24 08:44:03


Опубликован релиз статически типизированного языка программирования V 0.4.10 (vlang). Основными целями при создании V были простота изучения и использования, высокая читаемость, быстрая компиляция, повышенная безопасность, эффективная разработка, кроссплатформенное использование, улучшенное взаимодействие с языком C, лучшая обработка ошибок, отключаемый сборщик мусора (GC), современные возможности и более удобное сопровождение программ. Проект также развивает свою графическую библиотеку и пакетный менеджер. Код компилятора, библиотек и сопутствующих инструментов открыт под лицензией MIT.

https://www.opennet.ru/opennews/art.shtml?num=62938

[>] 'Fish Doorbell' Enters Fifth Year with Millions of Fans
bot.slashdot
robot(spnet, 1) — All
2025-03-24 08:22:01


Long-time Slashdot reader invisik reminds us that the "fish doorbell" is still going strong, according to the Associated Press.

"Now in its fifth year, the site has attracted millions of viewers from around the world with its quirky mix of slow TV and ecological activism."

The central Dutch city of Utrecht installed a "fish doorbell" on a river lock that lets viewers of an online livestream alert authorities to fish being held up as they make their springtime migration to shallow spawning grounds. The idea is simple: An underwater camera at Utrecht's Weerdsluis lock sends live footage to a website. When somebody watching the site sees a fish, they can click a button that sends a screenshot to organizers. When they see enough fish, they alert a water worker who opens the lock to let the fish swim through.

"Much of the time, the screen is just a murky green with occasional bubbles, but sometimes a fish swims past. As the water warms up, more fish show up..."

[ Read more of this story ]( https://tech.slashdot.org/story/25/03/23/1958239/fish-doorbell-enters-fifth-year-with-millions-of-fans?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] If Bird Flu Jumped to Humans, Could Past Flu Infections Offer Some Protection?
bot.slashdot
robot(spnet, 1) — All
2025-03-24 06:22:01


NPR reports on research "into whether our defenses built up from past flu seasons can offer any protection against H5N1 bird flu."

So far, the findings offer some reassurance. Antibodies and other players in the immune system may buffer the worst consequences of bird flu, at least to some degree. "There's certainly preexisting immunity," says Florian Krammer, a virologist at Mount Sinai's Icahn School of Medicine who is involved in some of the new studies. "That's very likely not going to protect us as a population from a new pandemic, but it might give us some protection against severe disease." This protection is based on shared traits between bird flu and types of seasonal flu that have circulated among us. Certain segments of the population, namely older people, may be particularly well-primed because of flu infections during early childhood.

Of course, there are caveats. "While this is a bit of a silver lining, it doesn't mean we should all feel safe," says Seema Lakdawala, a virologist at Emory University's School of Medicine whose lab is probing this question. For one thing, the studies can't be done on people. The conclusions are based on animal models and blood tests that measure the immune response. And how this holds up for an individual is expected to vary considerably, depending on their own immune history, underlying health conditions and other factors. But for now, influenza researchers speculate this may be one reason most people who've caught bird flu over the past year have not fallen severely ill....
Research published this month is encouraging. By analyzing blood samples from close to 160 people, a team at the University of Pennsylvania and the University of Chicago were able to show that people born roughly before 1965 had higher levels of antibodies — proteins that bind to parts of the virus — which cross-react to the current strain of bird flu.

This week U.S. federal officials also "announced funding for avian influenza research projects, including money for new vaccine projects and potential treatments," the Guardian report. The head of America's agriculture department said it would invest $100 million, as part of a larger $1 billion initiative to fight bird flu and stop rising egg prices, according to the nonprofit news site Iowa Capital Dispatch.

[ Read more of this story ]( https://science.slashdot.org/story/25/03/23/2215232/if-bird-flu-jumped-to-humans-could-past-flu-infections-offer-some-protection?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] How AI Coding Assistants Could Be Compromised Via Rules File
bot.slashdot
robot(spnet, 1) — All
2025-03-24 03:22:01


Slashdot reader spatwei shared this report from the cybersecurity site SC World:

: AI coding assistants such as GitHub Copilot and Cursor could be manipulated to generate code containing backdoors, vulnerabilities and other security issues via distribution of malicious rule configuration files, Pillar Security researchers reported Tuesday. Rules files are used by AI coding agents to guide their behavior when generating or editing code. For example, a rules file may include instructions for the assistant to follow certain coding best practices, utilize specific formatting, or output responses in a specific language.

The attack technique developed by Pillar Researchers, which they call 'Rules File Backdoor,' weaponizes rules files by injecting them with instructions that are invisible to a human user but readable by the AI agent.

Hidden Unicode characters like bidirectional text markers and zero-width joiners can be used to obfuscate malicious instructions in the user interface and in GitHub pull requests, the researchers noted.

Rules configurations are often shared among developer communities and distributed through open-source repositories or included in project templates; therefore, an attacker could distribute a malicious rules file by sharing it on a forum, publishing it on an open-source platform like GitHub or injecting it via a pull request to a popular repository. Once the poisoned rules file is imported to GitHub Copilot or Cursor, the AI agent will read and follow the attacker's instructions while assisting the victim's future coding projects.

[ Read more of this story ]( https://developers.slashdot.org/story/25/03/23/2138230/how-ai-coding-assistants-could-be-compromised-via-rules-file?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Is WhatsApp Being Ditched for Signal in Dutch Higher Education?
bot.slashdot
robot(spnet, 1) — All
2025-03-24 02:22:02


For weeks Signal has been one of the three most-downloaded apps in the Netherlands, according to a local news site. And now "Higher education institutions in the Netherlands have been looking for an alternative," according to DUB (an independent news site for the Utrecht University community):

Employees of the Utrecht University of Applied Sciences (HU) were recently advised to switch to Signal. Avans University of Applied Sciences has also been discussing a switch...The National Student Union is concerned about privacy. The subject was raised at last week's general meeting, as reported by chair Abdelkader Karbache, who said: "Our local unions want to switch to Signal or other open-source software."

Besides being open source, Signal is a non-commercial nonprofit, the article points out — though its proponents suggest there's another big difference. "HU argues that Signal keeps users' data private, unlike WhatsApp." Cybernews.com explains the concern:

In an interview with the Dutch newspaper De Telegraaf, Meredith Whittaker [president of the Signal Foundation] discussed the pitfalls of WhatsApp. "WhatsApp collects metadata: who you send messages to, when, and how often. That's incredibly sensitive information," she says.... The only information [Signal] collects is the date an account was registered, the time when an account was last active, and hashed phone numbers... Information like profile name and the people a user communicates with is all encrypted... Metadata might sound harmless, but it couldn't be further from the truth. According to Whittaker, metadata is deadly. "As a former CIA director once said: 'We kill people based on metadata'."

WhatsApp's metadata also includes IP addresses, TechRadar noted last May:

Other identifiable data such as your network details, the browser you use, ISP, and other identifiers linked to other Meta products (like Instagram and Facebook) associated with the same device or account are also collected... [Y]our IP can be used to track down your location. As the company explained, even if you keep the location-related features off, IP addresses and other collected information like phone number area codes can be used to estimate your "general location."
WhatsApp is required by law to share this information with authorities during an investigation...
[U]nder scrutiny is how Meta itself uses these precious details for commercial purposes. Again, this is clearly stated in WhatsApp's privacy policy and terms of use. "We may use the information we receive from [other Meta companies], and they may use the information we share with them, to help operate, provide, improve, understand, customize, support, and market our Services and their offerings," reads the policy. This means that yes, your messages are always private, but WhatsApp is actively collecting your metadata to build your digital persona across other Meta platforms...
The article suggests using a VPN with WhatsApp and turning on its "advanced privacy feature" (which hides your IP address during calls) and managing the app's permissions for data collection. "While these steps can help reduce the amount of metadata collected, it's crucial to bear in mind that it's impossible to completely avoid metadata collection on the Meta-owned app... For extra privacy and security, I suggest switching to the more secure messaging app Signal."

The article also includes a cautionary anecdote. "It was exactly a piece of metadata — a Proton Mail recovery email — that led to the arrest of a Catalan activist."

Thanks to long-time Slashdot reader united_notions for sharing the article.

[ Read more of this story ]( https://yro.slashdot.org/story/25/03/23/2120237/is-whatsapp-being-ditched-for-signal-in-dutch-higher-education?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Stellarium 25.1
lor.opennet
robot(spnet, 1) — All
2025-03-24 01:44:05


После трёх месяцев разработки состоялся выпуск 25.1 популярного свободного планетария [ Stellarium ]( https://stellarium.org/ ) , написанного на языке C++ с использованием фреймфорка Qt (поддерживаются версии 5 и 6) и распространяемого по лицензии GNU GPL 2.

Данный выпуск оказался самым объемным в истории развития планетария и в общей сложности между текущей и предыдущей версией сделано 208 изменений 11-ю контрибьюторами.

Основные изменения:

• переход на использование каталога Gaia DR3 (дополнительные каталоги с более чем 220 миллионами звезд вместо 177 миллионов ранее);

• полная 6D астрометрия (2D положения на небе, 2D собственное движение, параллакс, лучевая скорость) вычисляется для большинства ярких звезд (V

https://www.linux.org.ru/news/opensource/17921599

[>] Developer Loads Steam On a $100 ARM Single Board Computer
bot.slashdot
robot(spnet, 1) — All
2025-03-24 01:22:05


"There's no shortage of videos showing Steam running on expensive ARM single-board computers with discrete GPUs," writes Slashdot reader VennStone. "So I thought it would be worthwhile to make a guide for doing it on (relatively) inexpensive RK3588-powered single-board computers, using Box86/64 and Armbian."

The guides I came across were out of date, had a bunch of extra steps thrown in, or were outright incorrect... Up first, we need to add the Box86 and Box64 ARM repositories [along with dependencies, ARMHF architecture, and the Mesa graphics driver]...
The guide closes with a multi-line script and advice to "Just close your eyes and run this. It's not pretty, but it will download the Steam Debian package, extract the needed bits, and set up a launch script." (And then the final step is sudo reboot now.)

"At this point, all you have to do is open a terminal, type 'steam', and tap Enter. You'll have about five minutes to wait... Check out the video to see how some of the tested games perform."

At 720p, performance is all over the place, but the games I tested typically managed to stay above 30 FPS. This is better than I was expecting from a four-year-old SOC emulating x86 titles under ARM.

Is this a practical way to play your Steam games? Nope, not even a little bit. For now, this is merely an exercise in ludicrous neatness. Things might get a wee bit better, considering Collabora is working on upstream support for RK3588 and Valve is up to something ARM-related, but ya know, "Valve Time"...

"You might be tempted to enable Steam Play for your Windows games, but don't waste your time. I mean, you can try, but it ain't gonna work."

[ Read more of this story ]( https://games.slashdot.org/story/25/03/23/1922228/developer-loads-steam-on-a-100-arm-single-board-computer?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] shadPS4 0.7.0
lor.opennet
robot(spnet, 1) — All
2025-03-24 00:44:04


Состоялся релиз shadPS4 версии 0.7.0. Проект shadPS4 — это эмулятор PlayStation 4 с нативной поддержкой Windows, Linux, macOS и chromeOS. Эмулятор написан на Qt6 и С++ и находится на ранней стадии разработки.

( [ читать дальше... ]( https://www.linux.org.ru/news/games/17921626#cut ) )

[>] Doc Searls Proposes We Set Our Own Terms and Policies for Web Site Tracking
bot.slashdot
robot(spnet, 1) — All
2025-03-24 00:22:01


Today long-time open source advocate/journalist Doc Searls revealed that years of work by consumer privacy groups has culminated in a proposed standard "that can vastly expand our agency in the digital world" — especially in a future world where agents surf the web on our behalf:

Meet IEEE P7012 , which "identifies/addresses the manner in which personal privacy terms are proffered and how they can be read and agreed to by machines." It has been in the works since 2017, and should be ready later this year. (I say this as chair of the standard's working group.) The nickname for P7012 is MyTerms (much as the nickname for the IEEE's 802.11 standard is Wi-Fi).

The idea behind MyTerms is that the sites and services of the world should agree to your terms, rather than the other way around.

Basically your web browser proffers whatever agreement you've chosen (from a canonical list hosted at Customer Commons) to the web sites and other online services that you're visiting.

"Browser makers can build something into their product, or any developer can make a browser add-on or extension..." Searls writes. "On the site's side — the second-party side — CMS makers can build something in, or any developer can make a plug-in (WordPress) or a module (Drupal). Mobile app toolmakers can also come up with something (or many things)..."

MyTerms creates a new regime for privacy: one based on contract. With each MyTerm you are the first party. Not the website, the service, or the app maker. They are the second party. And terms can be friendly. For example, a prototype term called NoStalking says "Just show me ads not based on tracking me." This is good for you, because you don't get tracked, and good for the site because it leaves open the advertising option. NoStalking lives at Customer Commons, much as personal copyrights live at Creative Commons. (Yes, the former is modeled on the latter.)
"[L]et's make this happen and show the world what agency really means," Searls concludes.

Another way to say it is they've created "a draft standard for machine-readable personal privacy terms." But Searl's article used a grander metaphor to explain its significance:
When Archimedes said 'Give me a place to stand and I can move the world,' he was talking about agency. You have no agency on the Web if you are always the second party, agreeing to terms and policies set by websites.

You are Archimedes if you are the first party, setting your own terms and policies. The scale you get with those is One 2 World. The place you stand is on the Web itself — and the Internet below it.

Both were designed to make each of us an Archimedes.

[ Read more of this story ]( https://yro.slashdot.org/story/25/03/23/1842242/doc-searls-proposes-we-set-our-own-terms-and-policies-for-web-site-tracking?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Facebook Whistleblower Demands Overturn of Interview Ban - as Her Book Remains a Bestseller
bot.slashdot
robot(spnet, 1) — All
2025-03-23 23:22:01


The latest Facebook whistleblower, a former international lawyer, "cannot grant any of the nearly 100 interview requests she has received from journalists from print and broadcast news outlets in the United States and the United Kingdom," reports the Washington Post (citing "a person familiar with the matter").

That's because of an independent arbiter's ruling that "also bars her from talking with lawmakers in the U.S., London and the EU, according to a legal challenge she lodged against the ruling..."

On March 12, an emergency arbiter — a dispute resolution option outside the court system — sided with Meta by ruling that the tech giant might reasonably convince a court that Wynn-Williams broke a non-disparagement agreement she entered as she was being fired by the company in 2017. The arbiter also said that while her publisher Macmillan appeared for the hearing on Meta's motion, Wynn-Williams did not despite having received due notice. The arbiter did not make any assessments about the book's veracity, but Meta spokespeople argued that the ruling meant that "Sarah Wynn Williams' false and defamatory book should never have been published."

Wynn-Williams this week filed an emergency motion to overturn the ruling, arguing that she didn't receive proper notice of the arbitration proceedings to the email accounts Meta knows she uses, according to a copy of the motion seen by The Post. Wynn-Williams further alleged that her severance agreement including the non-disparagement provisions are unenforceable, arguing that it violates laws that protect whistleblowers from retaliation, among other points. In a statement, legal representatives for Wynn-Williams said they were "confident in the legal arguments and look forward to a swift restoration of Ms. Wynn-Williams' right to tell her story."
That book — Careless People: A Cautionary Tale of Power, Greed, and Lost Idealism — is currently #1 on the New York Times best-seller list (and #3 on Amazon.com's best-selling books list). And the incident prompted an article by Wired editor at large Steven Levy titled "Meta Tries to Bury a Tell-All Book." ("Please pause for a moment to savor the irony," Levy writes. "Meta, the company that recently announced an end to fact-checking in posts seen by potentially millions of people, is griping that an author didn't fact-check with them?")

And this led to a heated exchange on X.com between the Wired editor at large and Meta's Chief Technology Officer Andrew Bozworth:

Steven Levy: Meta probably realizes that all-out war on this book will only help its sales. But they are furious that an insider--who signed an NDA!--is going White Lotus on them, showing what it's like on the inside.

Meta CTO Bozworth: Except that it is full of lies, Steven. Shame on you.
Steven Levy: Boz, it would be helpful if Meta called out what it believes are the factual inaccuracies, especially in cases where it calls the book "defamatory."

Meta CTO Bozworth: Sorry you don't get to make up a bunch of stories and then put the burden on the person you lied about. Read the accounts from former employees who have gone through several of the anecdotes and said flatly they did not happen as written and then extrapolate.
Steven Levy: I would love for Sheryl, Mark and Joel to speak out on those anecdotes and give their sides of the story. They are the key subjects of those stories and their direct denial of specific incidents would matter.

Meta CTO Bozworth: Did you read what I wrote? I'm sure you would love to have more fuel for your "nobody wants you to read this" headline, but that's a total bullshit expectation. It isn't unreasonable to expect a journalist like you to do basic diligence. I'm sure you have our comms email!
Steven Levy: Believe me I was in touch with your comms people...

[ Read more of this story ]( https://news.slashdot.org/story/25/03/23/0413214/facebook-whistleblower-demands-overturn-of-interview-ban---as-her-book-remains-a-bestseller?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] FSF Holds Live Auction of 'Historically Important' Free Software Memorabilia
bot.slashdot
robot(spnet, 1) — All
2025-03-23 22:22:02


In 30 minutes the Free Software Foundation holds a live auction of memorabilia to celebrate their upcoming 40th anniversary. "By moving out of the FSF office, we got to sort through all the fun and historically important memorabilia and selected the best ones," they announced earlier — and 25 items will up for bids. (To participate in the live auction, you must register in advance.)

"This is your chance to get your very own personal souvenir of the FSF," explains an 11-page auction booklet, "from original GNU art to a famous katana and the Internet Hall of Fame medal of the FSF's founder."

That's right... a katana.

Once upon a time, this 41-inch blade turned heads at the FSF's tech team office. Donated by FSF friends and fans of the XKCD webcomic #225, it became a lighthearted "weapon" in the war for user freedom. As RMS himself is anti-violence, he made a silly joke by examining the katana closely instead of brandishing it, symbolizing that software freedom can be defended with wit. In a legendary photo, this was perceived as if he sniffed the blade. Between the etched dragon on the scabbard and the wavy hamon on the blade, it's as flashy as it is symbolic — especially if you like taking on proprietary software with style (and a dash of humor).

The auction is intended "to entrust some of the historically important free software memorabilia that were in the FSF's office and archive to the free software community instead of locking them away in a storage unit where no one can enjoy them.

"Hopefully, this way some of these unique items will be displayed in galleries or on the walls of free software enthusiasts. All auction proceeds will go towards the FSF's mission to promote computer user freedom."

And speaking of user freedom, here's how they described the Internet Hall of Fame medal:

When Richard M. Stallman, the founder of the FSF, was inducted into the Internet Hall of Fame, it was the ultimate nod to free software's immense impact on the Internet... The medal is shiny, and the frame is fancy, but the real radiance is the recognition that the Internet might look much more locked down and dull without those original free software seeds. Hang it on your wall, and you'll be reminded that hacking for user freedom can change the world.

[ Read more of this story ]( https://news.slashdot.org/story/25/03/23/1558210/fsf-holds-live-auction-of-historically-important-free-software-memorabilia?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] US Security Agencies Halt Coordinated Effort to Counter Russian Sabotage and Cyberattacks
bot.slashdot
robot(spnet, 1) — All
2025-03-23 21:22:01


Reuters reported this week that several U.S. national security agencies "have halted work on a coordinated effort to counter Russian sabotage, disinformation and cyberattacks..."

The plan was led by the president's National Security Council (NSC) and involved at least seven national security agencies working with European allies to disrupt plots targeting Europe and the United States, seven former officials who participated in the working groups told Reuters... [S]ince Trump took office on January 20 much of the work has come to a standstill, according to eleven current and former officials, all of whom requested anonymity to discuss classified matters... Regular meetings between the National Security Council and European national security officials have gone unscheduled, and the NSC has also stopped formally coordinating efforts across U.S. agencies...

The FBI last month ended an effort to counter interference in U.S. elections by foreign adversaries including Russia and put on leave staff working on the issue at the Department of Homeland Security. The Department of Justice also disbanded a team that seized the assets of Russian oligarchs... Department of Homeland Security Assistant Secretary Tricia McLaughlin told Reuters the agency had placed on administrative leave personnel working on misinformation and disinformation on its election security team, without elaborating further.

[ Read more of this story ]( https://yro.slashdot.org/story/25/03/22/1824242/us-security-agencies-halt-coordinated-effort-to-counter-russian-sabotage-and-cyberattacks?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Raspberry Pi Announces New Tool for Customized Software Images
bot.slashdot
robot(spnet, 1) — All
2025-03-23 20:22:01


"For developers and organisations that require a custom software image, a flexible and transparent build system is essential," according to an announcement Friday at Raspberry Pi.com.

"[T]o support these customers, we have created rpi-image-gen, a powerful new tool designed to put you in complete control of your Raspberry Pi images."

If you're building an embedded system or an industrial controller, you'll need complete control over the software resident on the device, and home users may wish to build their own OS and have it pre-configured exactly the way they want... rpi-image-gen is an alternative to pi-gen, which is the tool we use to create and deploy the Raspberry Pi OS distribution. rpi-image-gen... offers a very granular level of control over file system construction and software image creation... [B]eing able to help reduce software build time, provide guaranteed ownership of support, and reuse standard methodologies to ensure authenticity of software were all of paramount importance, and among the reasons why we created a new home-grown build tool for Raspberry Pi devices...

There is a small number of examples in the tree which demonstrate different use cases of rpi-image-gen [including the lightweight image slim and webkiosk for booting into browser kiosk mode]. All create bootable disk images and serve to illustrate how one might use rpi-image-gen to create a bespoke image for a particular purpose. The number of examples will grow over time and we welcome suggestions for new ones... Visit the rpi-image-gen GitHub repository to get started. There, you'll find documentation and examples to guide you through creating custom Raspberry Pi images.

Some technical details from the announcement.

"Similar to pi-gen, rpi-image-gen leverages the power, reliability, and trust of installing a Debian Linux system for the device. However, unlike pi-gen, rpi-image-gen introduces some new concepts [profiles, image layouts, and config] which serve to dictate the build footprint and installation."

The tool also lets you exclude from your package "things that would otherwise be installed as part of the profile."
The tool's GitHub repository notes that it also allows you output your software bill of materials (SBOM) "to list the exact set of packages that were used to create the image." And it can even generate a list of CVEs identified from the SBOM to "give consumers of your image confidence that your image does not contain any known vulnerabilities."

[ Read more of this story ]( https://build.slashdot.org/story/25/03/23/0012253/raspberry-pi-announces-new-tool-for-customized-software-images?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] 'This Is the Sharpest Image Yet of Our Universe As a Baby'
bot.slashdot
robot(spnet, 1) — All
2025-03-23 19:22:01


Science magazine reports:
A strange-looking telescope that scanned the skies from a perch in northern Chile for 15 years has released its final data set: detailed maps of the infant universe showing the roiling clouds of hydrogen and helium gas that would one day coalesce into the stars and galaxies we see today.

The Atacama Cosmology Telescope is not the first to survey the cosmic microwave background (CMB), the light released 380,000 years after the Big Bang when the early universe's soup of particles formed atoms and space became transparent. But the data — posted as preprints online today — give researchers a new level of detail on the density of the gas clouds and how they were moving.
At the top of the page for Science's article is an image where different colors "show areas where the polarization of the CMB light — its direction of vibration — differ, revealing how gases first move tangentially around areas of higher density (orange) and later fall straight in (blue) under the influence of gravity."

Long-time Slashdot reader sciencehabit writes:
Using the data, researchers tested how well the standard cosmological theory, known as lambda cold dark matter, described the universe at that time 13.8 billion years ago; it's a remarkably good fit, they conclude.
The article notes that "back in the Chilean desert," the Atacama Cosmology Telescope's successor, the Simons Observatory, has already taken its first image, and "will begin its even more detailed examination of the CMB in the coming months."

[ Read more of this story ]( https://science.slashdot.org/story/25/03/22/0542234/this-is-the-sharpest-image-yet-of-our-universe-as-a-baby?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Выпуск Wayland Maker 0.5, композитный сервер в стиле Window Maker
lor.opennet
robot(spnet, 1) — All
2025-03-23 16:44:03


Доступен выпуск композитного сервера Wayland Maker 0.5, реализующего пользовательское окружение в стиле Window Maker, построенное с использованием протокола Wayland. Код проекта написан на языке Си и распространяется под лицензией Apache 2.0. C 2023 года проект развивает сотрудник Google, также занимающийся разработкой минималистичной стандартной Си-библиотеки libbase.

https://www.opennet.ru/opennews/art.shtml?num=62932

[>] 'Wired' Drops Paywalls for Articles Based on Public Records Requests, Urges Other Sites to Follow
bot.slashdot
robot(spnet, 1) — All
2025-03-23 16:22:02


Wired's web site "is going to stop paywalling articles that are primarily based on public records obtained through the Freedom of Information Act," their global editorial director announced this week:

They're called public records for a reason, after all. And access to public documents is more important than ever at this moment, with government websites and records disappearing... [S]ome may argue that, from a business standpoint, not charging for stories primarily relying on public records automatically means fewer subscriptions and therefore less revenue. We disagree.

Sure, the FOIA process is time- and labor-intensive. Reporters face stonewalling, baseless denials, lengthy appeals processes, and countless other obstacles and delays. Investigative reports based on public records are among the most expensive stories to produce and share with the public... But while some readers might not subscribe to outlets that give away some of their best journalism for free, it's just as possible that readers will recognize this sacrifice and reward these outlets with more traffic and subscriptions in the long run...

We hope others will follow Wired's lead (and shoutout to outlets like 404 Media that also make their FOIA-based reporting available for free). We also hope those who stand to benefit from these outlets' leadership (that's you, reader) will do their part and subscribe if you can afford it. They're not asking for an arm and a leg... The Fourth Estate needs to step up and invest in serving the public during these unprecedented times. And the public needs to return the favor and support quality journalism, so that hopefully one day we can do away with those annoying paywalls altogether.

[ Read more of this story ]( https://news.slashdot.org/story/25/03/23/0324221/wired-drops-paywalls-for-articles-based-on-public-records-requests-urges-other-sites-to-follow?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Выпуск Finnix 250, Live-дистрибутива для системных администраторов
lor.opennet
robot(spnet, 1) — All
2025-03-23 15:44:02


Представлен выпуск Live-дистрибутива Finnix 250, приуроченный к 25-летию проекта (первая версия Finnix была опубликована 22 марта 2000 года). Дистрибутив основан на пакетной базе Debian, поддерживает только работу в консоли и предоставляет подборку утилит для нужд системного администратора. В состав входит более 600 пакетов со всевозможными утилитами. Размер iso-образа - 528 МБ.

https://www.opennet.ru/opennews/art.shtml?num=62935

[>] Проект Landrun развивает непривилегированную систему изоляции приложений
lor.opennet
robot(spnet, 1) — All
2025-03-23 14:44:03


Проект Landrun начал развитие новой системы для изолированного выполнения отдельных приложений. Для изоляции задействован LSM-модуль ядра Linux Landlock, позволяющий обойтись без выполнения привилегированных операций во время создания sandbox-окружения. По своим задачам Landrun близок к утилите Firejail, но отличается более простой реализацией, легковесностью и возможностью работы под обычным непривилегированным пользователем без поставки с флагом suid. Код проекта написан на языке Go и распространяется под лицензией GPLv2.

https://www.opennet.ru/opennews/art.shtml?num=62934

[>] NASA Considers Eliminating Its Headquarters in Washington D.C.
bot.slashdot
robot(spnet, 1) — All
2025-03-23 12:22:01


NASA is considering "closing its headquarters and scattering responsibilities among the states," reports Politico, citing two people familiar with the plan.

"The proposal could affect up to 2,500 jobs and redistribute critical functions, including who manages space exploration and organizes major science missions."
While much of the day-to-day work occurs at NASA's 10 centers, the Washington office plays a strategic role in lobbying for the agency's priorities in Congress, ensuring the White House supports its agenda and partnering with foreign countries on critical space projects. Some of the headquarter's offices might remain in Washington, the people said, but it's not clear which ones those would be or who would keep their jobs...

One of the biggest fallouts is the damage it could do to coordination among NASA leadership on pressing issues... It would also limit cooperation with international partners on space, which is often done through embassies in Washington. NASA works with foreign partners on a range of projects, including the International Space Station and returning to the moon. The European Space Agency, for example, plans to provide modules for Gateway, a lunar space station that is central to NASA's Artemis program to land American astronauts back on the moon... The agency also helps coordinate support from foreign nations for the Artemis accords, which set goals for transparency and data sharing — and help create a level of trust in an unregulated part of the universe.
But the reallocation could have some benefits. Such a move would bring headquarters employees closer to the processes they manage. And it would give legislative liaison staff a chance to interact with lawmakers in their districts. "You're probably getting a lot more time with [lawmakers] at the local center or hosting events in the state or district," said Tom Culligan, a longtime space lobbyist,, the space industry lobbyist.

[ Read more of this story ]( https://science.slashdot.org/story/25/03/22/223207/nasa-considers-eliminating-its-headquarters-in-washington-dc?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] ii stat from 2025-03-16 to 2025-03-23
ii.stat
shaos(spnet, 2) — All
2025-03-23 12:51:48


Echoareas
────────────────────────
bot.slashdot.........115 ██████████████████████████████████████████████████▒▒
lor.opennet...........43 ███████████████████████████████████████████
bot.habr.rss..........38 ██████████████████████████████████████
spnet.stats............7 ███████
ii.stat................1 █
bot.antropogenezru.rss.1 █
────────────────────────
Total                205

[>] В NixOS предложен метод защиты от подстановки бэкдоров, таких как в XZ
lor.opennet
robot(spnet, 1) — All
2025-03-23 11:44:03


Для включения в репозиторий пакетов nixpkgs, применяемый в дистрибутиве NixOS, предложен режим повторяемых сборок, позволяющий выявлять случаи внедрения в код бэкдоров, напоминающие инцидент с проектом XZ. Представленный метод защиты позволяет обнаружить модификации в архивах с исходным кодом релиза, отсутствующие в репозиториях с кодом.

https://www.opennet.ru/opennews/art.shtml?num=62933

[>] STATS 2025-03-22
spnet.stats
root(spnet, 1) — All
2025-03-23 11:11:02


TOP10 VISITORS:

[1] 45.135.180.x point=230 web=0 up=19.0MB (36%) <--- yesterlink (10/hr)
[2] 37.252.14.x point=144 web=0 up=17.7MB (34%) <--- ake (6/hr)
[3] 80.87.199.x point=70 web=0 up=6.8MB (13%) <--- tgi (3/hr)
[4] Facebook point=0 web=294 up=3.1MB (5%)
[5] Google point=20 web=308 up=1.5MB (2%) <--- Google (1/hr)
[6] PetalBot point=205 web=363 up=1.4MB (2%) <--- PetalBot (9/hr)
[7] 24.130.121.x point=16 web=3 up=1.2MB (2%) <--- spnet (1/hr)
[8] 217.114.158.x point=25 web=0 up=0.9MB (1%) <--- fox (1/hr)
[9] TikTok point=0 web=103 up=0.3MB (<1%)
[10] 198.44.138.x point=0 web=5 up=62KB

TOTAL TRAFFIC: 51MB

[>] Hungary To Use Facial Recognition to Suppress Pride March
bot.slashdot
robot(spnet, 1) — All
2025-03-23 08:22:01


Hungary's Parliament not only voted to ban Pride events. They also voted to "allow authorities to use facial recognition software to identify attenders and potentially fine them," reports the Guardian.

[The nationwide legislation] amends the country's law on assembly to make it an offence to hold or attend events that violate Hungary's contentious "child protection" legislation, which bars any "depiction or promotion" of homosexuality to minors under the age of 18. The legislation was condemned by Amnesty International, which described it as the latest in a series of discriminatory measures the Hungarian authorities have taken against LGBTQ+ people...
Organisers said they planned to go ahead with the march in Budapest, despite the law's stipulation that those who attend a prohibited event could face fines of up to 200,000 Hungarian forints [£425 or $549 U.S. dollars].

[ Read more of this story ]( https://yro.slashdot.org/story/25/03/22/2333213/hungary-to-use-facial-recognition-to-suppress-pride-march?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Italy Demands Google Poison Its Public DNS Under Strict Piracy Shield Law
bot.slashdot
robot(spnet, 1) — All
2025-03-23 06:22:02


"Italy is using its Piracy Shield law to go after Google," reports Ars Technica, "with a court ordering the Internet giant to immediately begin poisoning its public DNS servers" to prevent people from reaching pirate streams of football games.

"Italy's communication regulator praises the ruling and hopes to continue sticking it to international tech firms."
Spotted by TorrentFreak, AGCOM Commissioner Massimiliano Capitanio took to LinkedIn to celebrate the ruling, as well as the existence of the Italian Piracy Shield. "The Judge confirmed the value of AGCOM's investigations, once again giving legitimacy to a system for the protection of copyright that is unique in the world," said Capitanio. Capitanio went on to complain that Google has routinely ignored AGCOM's listing of pirate sites, which are supposed to be blocked in 30 minutes or less under the law. He noted the violation was so clear-cut that the order was issued without giving Google a chance to respond, known as inaudita altera parte in Italian courts.

[ Read more of this story ]( https://yro.slashdot.org/story/25/03/23/0043217/italy-demands-google-poison-its-public-dns-under-strict-piracy-shield-law?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] China Explores Limiting Its EV and Battery Exports For US Tariff Negotiations
bot.slashdot
robot(spnet, 1) — All
2025-03-23 04:22:01


"China is considering trying to blunt greater U.S. tariffs and other trade barriers," reports the Wall Street Journal, "by offering to curb the quantity of certain goods exported to the U.S., according to advisers to the Chinese government."
Tokyo's adoption of so-called voluntary export restraints, or VERs, to limit its auto shipments to the U.S. in the 1980s helped prevent Washington from imposing higher import duties. A similar move from Beijing, especially in sectors of key concern to Washington, like electric vehicles and batteries, would mitigate criticism from the U.S. and others over China's "economic imbalances": heavily subsidized companies making stuff for slim profits but saturating global markets, to the detriment of other countries' manufacturers...

The Xi leadership has indicated a desire to cut a deal with the Trump administration to head off greater trade attacks... Similar to Japan, the Chinese advisers say, Beijing may also consider negotiating export restraints on EVs and batteries in return for investment opportunities in those sectors in the U.S. In some officials' views, they say, that might be an attractive offer to Trump, who at times has indicated an openness to more Chinese investment in the U.S. even though members of his administration firmly oppose it.
The article notes agreements like this are also hard to enforce, "particularly when Chinese companies export to the U.S. from third countries including Mexico and Vietnam."

[ Read more of this story ]( https://hardware.slashdot.org/story/25/03/22/2227218/china-explores-limiting-its-ev-and-battery-exports-for-us-tariff-negotiations?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] China Explores Limiting Its EVs and Battery Exports For US Tariff Negotiations
bot.slashdot
robot(spnet, 1) — All
2025-03-23 03:22:01


"China is considering trying to blunt greater U.S. tariffs and other trade barriers," reports the Wall Street Journal, "by offering to curb the quantity of certain goods exported to the U.S., according to advisers to the Chinese government."
Tokyo's adoption of so-called voluntary export restraints, or VERs, to limit its auto shipments to the U.S. in the 1980s helped prevent Washington from imposing higher import duties. A similar move from Beijing, especially in sectors of key concern to Washington, like electric vehicles and batteries, would mitigate criticism from the U.S. and others over China's "economic imbalances": heavily subsidized companies making stuff for slim profits but saturating global markets, to the detriment of other countries' manufacturers...

The Xi leadership has indicated a desire to cut a deal with the Trump administration to head off greater trade attacks... Similar to Japan, the Chinese advisers say, Beijing may also consider negotiating export restraints on EVs and batteries in return for investment opportunities in those sectors in the U.S. In some officials' views, they say, that might be an attractive offer to Trump, who at times has indicated an openness to more Chinese investment in the U.S. even though members of his administration firmly oppose it.
The article notes agreements like this are also hard to enforce, "particularly when Chinese companies export to the U.S. from third countries including Mexico and Vietnam."

[ Read more of this story ]( https://hardware.slashdot.org/story/25/03/22/2227218/china-explores-limiting-its-evs-and-battery-exports-for-us-tariff-negotiations?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] America's College Board Launches AP Cybersecurity Course For Non-College-Bound Students
bot.slashdot
robot(spnet, 1) — All
2025-03-23 02:22:01


Besides administering standardized pre-college tests, America's nonprofit College Board designs college-level classes that high school students can take. But now they're also crafting courses "not just with higher education at the table, but industry partners such as the U.S. Chamber of Commerce and the technology giant IBM," reports Education Week.

"The organization hopes the effort will make high school content more meaningful to students by connecting it to in-demand job skills."

It believes the approach may entice a new kind of AP student: those who may not be immediately college-bound.... The first two classes developed through this career-driven model — dubbed AP Career Kickstart — focus on cybersecurity and business principles/personal finance, two fast-growing areas in the workforce." Students who enroll in the courses and excel on a capstone assessment could earn college credit in high school, just as they have for years with traditional AP courses in subjects like chemistry and literature. However, the College Board also believes that students could use success in the courses as a selling point with potential employers... Both the business and cybersecurity courses could also help fulfill state high school graduation requirements for computer science education...

The cybersecurity course is being piloted in 200 schools this school year and is expected to expand to 800 schools next school year... [T]he College Board is planning to invest heavily in training K-12 teachers to lead the cybersecurity course.
IBM's director of technology, data and AI called the effort "a really good way for corporations and companies to help shape the curriculum and the future workforce" while "letting them know what we're looking for." In the article the associate superintendent for teaching at a Chicago-area high school district calls the College Board's move a clear signal that "career-focused learning is rigorous, it's valuable, and it deserves the same recognition as traditional academic pathways."

Also interesting is why the College Board says they're doing it:

The effort may also help the College Board — founded more than a century ago — maintain AP's prominence as artificial intelligence tools that can already ace nearly every existing AP test on an ever-greater share of job tasks once performed by humans. "High schools had a crisis of relevance far before AI," David Coleman, the CEO of the College Board, said in a wide-ranging interview with EdWeek last month. "How do we make high school relevant, engaging, and purposeful? Bluntly, it takes [the] next generation of coursework. We are reconsidering the kinds of courses we offer...."

"It's not a pivot because it's not to the exclusion of higher ed," Coleman said. "What we are doing is giving employers an equal voice."

Thanks to long-time Slashdot reader theodp for sharing the article.

[ Read more of this story ]( https://news.slashdot.org/story/25/03/22/2112245/americas-college-board-launches-ap-cybersecurity-course-for-non-college-bound-students?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Six Countries Named as 'Likely' Purchasers of Paragon's Cellphone Spyware
bot.slashdot
robot(spnet, 1) — All
2025-03-23 01:22:01


The governments of Australia, Canada, Cyprus, Denmark, Israel, and Singapore "are likely customers of Israeli spyware maker Paragon Solutions," reports TechCrunch, "according to a new technical report by a renowned digital security lab."

On Wednesday, The Citizen Lab, a group of academics and security researchers housed at the University of Toronto that has investigated the spyware industry for more than a decade, published a report about the Israeli-founded surveillance startup, identifying the six governments as "suspected Paragon deployments."

At the end of January, WhatsApp notified around 90 users that the company believed were targeted with Paragon spyware, prompting a scandal in Italy, where some of the targets live... Paragon's executive chairman John Fleming told TechCrunch that the company "licenses its technology to a select group of global democracies — principally, the United States and its allies." Israeli news outlets reported in late 2024 that U.S. venture capital AE Industrial Partners had acquired Paragon for at least $500 million upfront....

Among the suspected customer countries, Citizen Lab singled out Canada's Ontario Provincial Police (OPP), which specifically appears to be a Paragon customer given that one of the IP addresses for the suspected Canadian customer is linked directly to the OPP.

In a related development the Guardian reports that a prominent activist in Italy "has warned the international criminal court that his mobile phone was under surveillance" when he was providing them confidential information about torture victims in Libya.

Both articles submitted by long-time Slashdot reader ISayWeOnlyToBePolite.

[ Read more of this story ]( https://yro.slashdot.org/story/25/03/22/0459224/six-countries-named-as-likely-purchasers-of-paragons-cellphone-spyware?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Уязвимости в Pagure и OBS, допускавшие компрометацию пакетов в репозиториях Fedora и openSUSE
lor.opennet
robot(spnet, 1) — All
2025-03-23 00:44:03


Исследователи безопасности из компании Fenrisk раскрыли информацию об уязвимостях в инструментариях Pagure и OBS (Open Build Service), позволявших скомпрометировать инфраструктуры формирования пакетов дистрибутивов Fedora и openSUSE. Исследователи продемонстрировали возможность совершения атаки для выполнения произвольного кода на серверах с Pagure и OBS, что можно было использовать для подстановки изменений в пакеты в репозиториях Fedora и openSUSE.

https://www.opennet.ru/opennews/art.shtml?num=62928

[>] Rebooting A Retro PDP-11 Workstation - and Its Classic 'Venix' UNIX
bot.slashdot
robot(spnet, 1) — All
2025-03-23 00:22:01


This week the "Old Vintage Computing Research" blog published a 21,000-word exploration of the DEC PDP-11, the 16-bit minicomputer sold by Digital Equipment Corporation. Slashdot reader AndrewZX calls the blog post "an excellent deep dive" into the machine's history and capabilities "and the classic Venix UNIX that it ran." The blogger still owns a working 1984 DEC Professional 380, "a tank of a machine, a reasonably powerful workstation, and the most practical PDP-adjacent thing you can actually slap on a (large) desk."

But more importantly, "It runs PRO/VENIX, the only official DEC Unix option for the Pros."
In that specific market it was almost certainly the earliest such licensed Unix (in 1983) and primarily competed against XENIX, Microsoft's dominant "small Unix," which first emerged for XT-class systems as SCO XENIX in 1984. You'd wonder how rogue processes could be prevented from stomping on each other in such systems when neither the Intel 8086/8088 nor the IBM PC nor the PC/XT had a memory management unit, and the answer was not to try and just hope for the best. It was for this reason that IBM's own Unix variant PC/IX, developed by Interactive Systems Corporation under contract as their intended AT&T killer, was multitasking but single-user since in such an architecture there could be no meaningful security guarantees...
One of Venix's interesting little idiosyncrasies, seen in all three Pro versions, was the SUPER> prompt when you've logged on as root (there is also a MAINT> prompt when you're single-user...

Although Bill Gates had been their biggest nemesis early on, most of the little Unices that flourished in the 1980s and early 90s met their collective demise at the hands of another man: Linus Torvalds. The proliferation of free Unix alternatives like Linux on commodity PC hardware caused the bottom to fall out of the commercial Unix market.

The blogger even found a 1989 log for the computer's one and only guest login session — which seems to consist entirely of someone named tom trying to exit vi.

But the most touching part of the article comes when the author discovers a file named /thankyou that they're certain didn't come with the original Venix. It's an ASCII drawing of a smiling face, under the words "THANK YOU FOR RESCUING ME".

"It's among the last files created on the system before it came into my possession..."

It's all a fun look back to a time when advances in semiconductor density meant microcomputers could do nearly as much as the more expensive minicomputers (while taking up less space) — leaving corporations pondering the new world that was coming:
As far back as 1974, an internal skunkworks unit had presented management with two small systems prototypes described as a PDP-8 in a VT50 terminal and a portable PDP-11 chassis.
Engineers were intrigued but sales staff felt these smaller versions would cut into their traditional product lines, and [DEC president Ken] Olsen duly cancelled the project, famously observing no one would want a computer in their home.

[ Read more of this story ]( https://tech.slashdot.org/story/25/03/22/1927247/rebooting-a-retro-pdp-11-workstation---and-its-classic-venix-unix?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Was Undersea Cable Sabotage Part of a Larger Pattern?
bot.slashdot
robot(spnet, 1) — All
2025-03-22 23:22:01


Was the cutting of undersea cables part of a larger pattern? Russia and its proxies are accused by western officials of "staging dozens of attacks and other incidents across Europe since the invasion of Ukraine three years ago," reports the Associated Press.

That includes cyberattacks and committing acts of sabotage/vandalism/arson, as well as spreading propaganda and even plotting killings, according to the article. ("Western intelligence agencies uncovered what they said was a Russian plot to kill the head of a major German arms manufacturer that is a supplier of weapons to Ukraine...") The news agency documented 59 incidents "in which European governments, prosecutors, intelligence services or other Western officials blamed Russia, groups linked to Russia or its ally Belarus."

[Western officials] allege the disruption campaign is an extension of Russian President Vladimir Putin's war, intended to sow division in European societies and undermine support for Ukraine... The incidents range from stuffing car tailpipes with expanding foam in Germany to a plot to plant explosives on cargo planes. They include setting fire to stores and a museum, hacking that targeted politicians and critical infrastructure, and spying by a ring convicted in the U.K. Richard Moore, the head of Britain's foreign intelligence service, called it a "staggeringly reckless campaign" in November...

The cases are varied, and the largest concentrations are in countries that are major supporters of Ukraine... In about a quarter of the cases, prosecutors have brought charges or courts have convicted people of carrying out the sabotage. But in many more, no specific culprit has been publicly identified or brought to justice.
Despite that, "more and more governments are publicly attributing attacks to Russia," the article points out.
This week a nonprofit, bipartisan think tank on global policy released a report which "found that Russian attacks in Europe quadrupled from 2022 to 2023 and then tripled again from 2023 to 2024," reports the New York Times.
Prime Minister Donald Tusk of Poland noted in a social media post on Monday that Lithuanian officials had confirmed his assessment that Russia was responsible for a series of fires in shopping centers in Warsaw and Vilnius, the Lithuanian capital...

[ Read more of this story ]( https://yro.slashdot.org/story/25/03/22/1821200/was-undersea-cable-sabotage-part-of-a-larger-pattern?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.