RSS
[>] Музыкальный проигрыватель Decibels принят в основной состав GNOME
lor.opennet
robot(spnet, 1) — All
2025-01-15 13:44:03


Разработчики проекта GNOME приняли минималистичный музыкальный проигрыватель Decibels в основной состав среды рабочего стола GNOME. Decibels начнёт поставляться в весеннем выпуске GNOME 48 под именем "Audio Player". В прошлом году проигрыватель уже был принят в базовую поставку дистрибутива Endless OS, а также был включён по умолчанию в GNOME-редакции дистрибутива для смартфонов postmarketOS. Код Decibels написан на языке TypeScript с использованием JavaScript-обвязок над GStreamer, Libadwaita, Gio, GObject и GTK4, и распространяется под лицензией AGPLv3. Готовые пакеты сформированы в формате Flatpak.

https://www.opennet.ru/opennews/art.shtml?num=62560

[>] STATS 2025-01-14
spnet.stats
root(spnet, 1) — All
2025-01-15 12:11:01


TOP10 VISITORS:

[1] 45.135.180.x point=222 web=0 up=18.0MB (48%) <--- yesterlink (9/hr)
[2] Facebook point=0 web=492 up=7.1MB (18%)
[3] 80.87.199.x point=71 web=0 up=6.8MB (18%) <--- tgi (3/hr)
[4] Google point=3 web=444 up=2.2MB (5%) <--- Google
[5] 24.130.121.x point=19 web=6 up=1.5MB (3%) <--- spnet (1/hr)
[6] 217.114.158.x point=25 web=0 up=1.0MB (2%) <--- fox (1/hr)
[7] TikTok point=0 web=111 up=0.4MB (1%)
[8] 37.114.46.x point=0 web=1 up=68KB
[9] 38.253.162.x point=0 web=2 up=40KB
[10] 161.77.143.x point=0 web=3 up=23KB

TOTAL TRAFFIC: 37MB

[>] Rsync 3.4.0
lor.opennet
robot(spnet, 1) — All
2025-01-15 11:44:05


Обновлена утилита для синхронизации файлов Rsync с устранением 6 достаточно критичных уязвимостей. Для совершения атаки с применением некоторых их них достаточно анонимного подключения к серверу Rsync с доступом на чтение.

( [ читать дальше... ]( https://www.linux.org.ru/news/opensource/17848386#cut ) )

[>] Релиз Linux Mint 22.1 «Xia»
lor.opennet
robot(spnet, 1) — All
2025-01-15 11:44:05


Разработчики Linux Mint анонсировали релиз версии 22.1 под кодовым названием «Xia». Система имеет статус LTS (Long Term Support) с поддержкой до 2029 года. Дистрибутив основан на Ubuntu 24.04 и работает на ядре Linux 6.8.

( [ читать дальше... ]( https://www.linux.org.ru/news/linux-general/17848364#cut ) )

[>] В готовящемся в релизу ядре Linux 6.13 выявлен сбой, вызванный кодом сотрудника Microsoft
lor.opennet
robot(spnet, 1) — All
2025-01-15 11:44:03


Линус Торвальдс намеревался опубликовать релиз ядра Linux 6.13 в это воскресенье, но скорее всего тестирование ветки 6.13 будет продлено на неделю из-за проблем со стабильностью в изменениях, подготовленных сотрудником Microsoft и принятых в ветку 6.13 в ноябре. Дополнительно отмечается, что патч, ставший причиной сбоя, был подан нестандартно - но был принят, хотя не получил ни одного подтверждения (ACK) от мэйнтайнеров архитектуры x86, что является нарушением общепринятых практик.

https://www.opennet.ru/opennews/art.shtml?num=62555

[>] Parallels Can Now Run x86 Windows and Linux On Apple Silicon Mac
bot.slashdot
robot(spnet, 1) — All
2025-01-15 11:22:01


Parallels Desktop now supports running 64-bit x86 operating systems on Apple Silicon Macs through its proprietary emulation engine, enabling users to run traditional Windows and Linux distributions. However, performance is said to be "really slow." How-To Geek reports: The latest Parallels Desktop 20.2 update adds early support for x86 emulation on Apple Silicon, allowing traditional x86 PC operating systems to work on newer Mac computers. There were already apps like UTM that could do it (most of them are based on QEMU), but this feature uses Parallels' "proprietary emulation engine" paired with Apple's built-in hypervisor. [...] Parallels on Apple Silicon can now "run existing x86_64 Windows 10, Windows 11*, Windows Server 2019/2022, and some Linux distributives with UEFI BIOS via Parallels Emulator." You can also create new Windows 10 21H2 and Windows Server 2022 virtual machines if needed.

There are some big limitations. You can only run 64-bit x86 operating systems -- sorry, FreeDOS fans -- but those 64-bit operating systems can run 32-bit applications. There's also no support for USB devices, nested virtualization (so WSL2 won't work), or the Parallels hypervisor. Performance will also be "really slow," since x86 instructions have to be translated to ARM. The company said, "Windows boot time is about 2-7 minutes, depending on your hardware. Windows operating system responsiveness is also low."

[ Read more of this story ]( https://tech.slashdot.org/story/25/01/15/0216248/parallels-can-now-run-x86-windows-and-linux-on-apple-silicon-mac?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] SQLite 3.48.0
lor.opennet
robot(spnet, 1) — All
2025-01-15 10:44:04


После месяца разработки состоялся выпуск 3.48.0 компактной встраиваемой СУБД [ SQLite ]( https://sqlite.org ) , написанной на языке C и распространяемой, как общественное достояние.

( [ читать дальше... ]( https://www.linux.org.ru/news/opensource/17848327#cut ) )

[>] Новое издание первого тома книги «Программирование: введение в профессию» А.В. Столярова
lor.opennet
robot(spnet, 1) — All
2025-01-15 10:44:04


Вчера, 14 января 2025 года на [ сайте ]( http://stolyarov.info/ ) автора был [ опубликован ]( http://stolyarov.info/books/programming_intro/2_9 ) первый том нового издания известной книги «Программирование: введение в профессию» за авторством Андрея Викторовича Столярова, известного на данном портале как /img/tuxlor.png [ Croco ]( https://www.linux.org.ru/people/Croco/profile ) .

По причине отсутствия у автора возможности издавать и печатать книги в России новое издание имеет номер 2,9, а не 3. Третье издание планируется к изданию на бумаге по восстановлении такой возможности.

https://www.linux.org.ru/news/doc/17848385

[>] US Deaths Expected To Outpace Births Within the Decade
bot.slashdot
robot(spnet, 1) — All
2025-01-15 08:22:01


An anonymous reader quotes a report from The Hill: The number of deaths in the U.S. is expected to exceed the number of births by 2033, according to the Congressional Budget Office's (CBO) annual 30-year projection of the U.S. population released on Monday. That estimation comes seven years earlier than what the CBO estimated in its 30-year population outlook released last year. At that time, in January 2024, the CBO projected deaths to outpace births by 2040. The CBO's 2025 report projected lower population growth over the next three decades than it did in its 2024 demographic outlook.

The CBO's population estimate for 2025 is 350 million, a slight increase from the 346 million it predicted for 2025 last year. But its projection for 2054 -- 372 million people -- has decreased since last year, when the CBO projected the population would be 383 million in 2054. The rate of growth projected over the next three decades -- 0.2 percent -- is significantly slower than the rate seen in the prior five decades, from 1975 to 2024, when the population grew at 0.9 percent. The growth rate over the next three decades is also expected to slow. From 2025 to 2035, the population is expected to grow an average of 0.4 percent a year. From 2036 to 2055, however, the growth rate is projected to be 0.1 percent. The CBO attributes this projected slow rate of growth to a variety of factors, including lower fertility, an aging population and lower immigration.

[ Read more of this story ]( https://news.slashdot.org/story/25/01/14/2357240/us-deaths-expected-to-outpace-births-within-the-decade?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Australian Open Avatars Helping Tennis Reach New Audience
bot.slashdot
robot(spnet, 1) — All
2025-01-15 06:22:01


The Australian Open has introduced a project called AO Animated -- "near-live, commentated coverage of the Australian Open, free to anyone across the world via YouTube, enhanced via a stream of comments from a like-minded online community," reports The Guardian. Blending real-world data with virtual avatars, the animated coverage has garnered significant viewer interest, especially among gamers and tech enthusiasts. From the report: [I]t's no surprise a project called AO Animated has taken off at this year's grand slam tournament at Melbourne Park. The catch? The players, ball and court are all computer-generated. That hasn't dissuaded hundreds of thousands of viewers from tuning into this vision of the Australian Open, featuring video game-like avatars but using real-world data in an emerging category of sports broadcasting helping tennis reach new fans.

The loophole allows the Australian Open to show a version of live events at the tournament on its own channels, despite having sold lucrative exclusive broadcast rights to partners across the globe. The technology made its debut at the grand slam last year and audiences peaked for the men's final, the recording of which has attracted almost 800,000 views on YouTube. Interest appears to be trending up this year and the matches are attracting roughly four times as many viewers than the equivalent time in 2024.

The director of innovation at Tennis Australia, Machar Reid, said although the technology was far from polished it was developing quickly. "Limb tracking is complex, you've got 12 cameras trying to process the silhouette of the human in real time, and stitch that together across 29 points in the skeleton," he said. "It's not as seamless as it could be -- we don't have fingers -- but in time you can begin to imagine a world where that comes." The data from sensors on the court is ingested and fed into a system that can produce the graphic reproduction with a two-minute delay. The same commentary and arena noises that would otherwise be heard on the television -- as well as interstitial vision direct from the broadcast -- are synced with the virtual representation of the match.

[ Read more of this story ]( https://slashdot.org/story/25/01/14/2353202/australian-open-avatars-helping-tennis-reach-new-audience?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Pixelfed, Instagram's Decentralized Competitor, Is Now On iOS and Android
bot.slashdot
robot(spnet, 1) — All
2025-01-15 06:22:01


Pixelfed has launched its mobile app for iOS and Android, solidifying its position as a viable alternative to Instagram. The move also comes at a pivotal moment, as a potential Supreme Court ban on TikTok could drive users to explore other social media platforms. Pixelfed is ad-free, open source, decentralized, defaults to chronological feeds and doesn't share user data with third parties. Engadget reports: The platform launched in 2018, but was only available on the web or through third-party app clients. The Android app debuted on January 9 and the iOS app released today. Creator Daniel Supernault posted on Mastodon Monday evening that the platform had 11,000 users join over the preceding 24 hours and that more than 78,000 posts have been shared to Pixelfed to date. The platform runs on ActivityPub, the same protocol that powers several other decentralized social networks in the fediverse, such as Mastodon and Flipboard. The iOS and Android apps are available at their respective links.

Further reading: Meta Is Blocking Links to Decentralized Instagram Competitor Pixelfed

[ Read more of this story ]( https://tech.slashdot.org/story/25/01/14/2329222/pixelfed-instagrams-decentralized-competitor-is-now-on-ios-and-android?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] OpenAI's AI Reasoning Model 'Thinks' In Chinese Sometimes, No One Really Knows Why
bot.slashdot
robot(spnet, 1) — All
2025-01-15 05:22:02


OpenAI's "reasoning" AI model, o1, has exhibited a puzzling behavior of "thinking" in Chinese, Persian, or some other language -- "even when asked a question in English," reports TechCrunch. While the exact cause remains unclear, as OpenAI has yet to provide an explanation, AI experts have proposed a few theories. From the report: Several on X, including Hugging Face CEO Clement Delangue, alluded to the fact that reasoning models like o1 are trained on datasets containing a lot of Chinese characters. Ted Xiao, a researcher at Google DeepMind, claimed that companies including OpenAI use third-party Chinese data labeling services, and that o1 switching to Chinese is an example of "Chinese linguistic influence on reasoning."

"[Labs like] OpenAI and Anthropic utilize [third-party] data labeling services for PhD-level reasoning data for science, math, and coding," Xiao wrote in a post on X. "[F]or expert labor availability and cost reasons, many of these data providers are based in China." [...] Other experts don't buy the o1 Chinese data labeling hypothesis, however. They point out that o1 is just as likely to switch to Hindi, Thai, or a language other than Chinese while teasing out a solution.

Other experts don't buy the o1 Chinese data labeling hypothesis, however. They point out that o1 is just as likely to switch to Hindi, Thai, or a language other than Chinese while teasing out a solution. Rather, these experts say, o1 and other reasoning models might simply be using languages they find most efficient to achieve an objective (or hallucinating). "The model doesn't know what language is, or that languages are different," Matthew Guzdial, an AI researcher and assistant professor at the University of Alberta, told TechCrunch. "It's all just text to it."

Tiezhen Wang, a software engineer at AI startup Hugging Face, agrees with Guzdial that reasoning models' language inconsistencies may be explained by associations the models made during training. "By embracing every linguistic nuance, we expand the model's worldview and allow it to learn from the full spectrum of human knowledge," Wang wrote in a post on X. "For example, I prefer doing math in Chinese because each digit is just one syllable, which makes calculations crisp and efficient. But when it comes to topics like unconscious bias, I automatically switch to English, mainly because that's where I first learned and absorbed those ideas."

[...] Luca Soldaini, a research scientist at the nonprofit Allen Institute for AI, cautioned that we can't know for certain. "This type of observation on a deployed AI system is impossible to back up due to how opaque these models are," they told TechCrunch. "It's one of the many cases for why transparency in how AI systems are built is fundamental."

[ Read more of this story ]( https://slashdot.org/story/25/01/14/239246/openais-ai-reasoning-model-thinks-in-chinese-sometimes-no-one-really-knows-why?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] US Finalizes Rule To Effectively Ban Chinese Vehicles
bot.slashdot
robot(spnet, 1) — All
2025-01-15 04:22:01


An anonymous reader quotes a report from The Verge: The Biden administration finalized a new rule that would effectively ban all Chinese vehicles from the US under the auspices of blocking the "sale or import" of connected vehicle software from "countries of concern." The rule could have wide-ranging effects on big automakers, like Ford and GM, as well as smaller manufacturers like Polestar -- and even companies that don't produce cars, like Waymo. The rule covers everything that connects a vehicle to the outside world, such as Bluetooth, Wi-Fi, cellular, and satellite components. It also addresses concerns that technology like cameras, sensors, and onboard computers could be exploited by foreign adversaries to collect sensitive data about US citizens and infrastructure. And it would ban China from testing its self-driving cars on US soil.

"Cars today have cameras, microphones, GPS tracking, and other technologies connected to the internet," US Secretary of Commerce Gina Raimondo said in a statement. "It doesn't take much imagination to understand how a foreign adversary with access to this information could pose a serious risk to both our national security and the privacy of U.S. citizens. To address these national security concerns, the Commerce Department is taking targeted, proactive steps to keep [People's Republic of China] and Russian-manufactured technologies off American roads." The rules for prohibited software go into effect for model year 2027 vehicles, while the ban on hardware from China waits until model year 2030 vehicles. According to Reuters, the rules were updated from the original proposal to exempt vehicles weighing over 10,000 pounds, which would allow companies like BYD to continue to assemble electric buses in California. The Biden administration published a fact sheet with more information about this rule.

"[F]oreign adversary involvement in the supply chains of connected vehicles poses a significant threat in most cars on the road today, granting malign actors unfettered access to these connected systems and the data they collect," the White House said. "As PRC automakers aggressively seek to increase their presence in American and global automotive markets, through this final rule, President Biden is delivering on his commitment to secure critical American supply chains and protect our national security."

[ Read more of this story ]( https://tech.slashdot.org/story/25/01/14/216250/us-finalizes-rule-to-effectively-ban-chinese-vehicles?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Microsoft Pauses Hiring In US Consulting Unit
bot.slashdot
robot(spnet, 1) — All
2025-01-15 03:22:01


A week after announcing performance-based job cuts similar to those at Meta, Microsoft said it also plans to pause hiring in part of its consulting unit. CNBC reports: The changes by the U.S. consulting division are meant to align with a policy by the Microsoft Customer and Partner Solutions organization, which has about 60,000 employees, according to a page on Microsoft's website. The changes are in place through the remainder of the 2025 fiscal year ending in June. To reduce costs, Microsoft's consulting division will hold off on hiring new employees and back-filling roles, consulting executive Derek Danois told employees in the memo. Careful management of costs is of utmost importance, Danois wrote.

The memo also instructs employees to not expense travel for any internal meetings and use remote sessions instead. Additionally, executives will have to authorize trips to customers' sites to ensure spending is being used on the right customers, Danois wrote. Additionally, the group will cut its marketing and non-billable external resource spend by 35%, the memo says. Further reading: Companies Deploy AI To Curb Hiring as 'Cost Avoidance' Gains Ground

[ Read more of this story ]( https://slashdot.org/story/25/01/14/2056246/microsoft-pauses-hiring-in-us-consulting-unit?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] ChatGPT Now Lets You Schedule Reminders and Recurring Tasks
bot.slashdot
robot(spnet, 1) — All
2025-01-15 03:22:01


ChatGPT can now schedule reminders and recurring tasks -- but only if you're a ChatGPT Plus, Team, or Pro subscriber. TechCrunch reports: With tasks, users can set simple reminders with ChatGPT such as, "Remind me when my passport expires in six months," and the AI assistant will follow up with a push notification on whatever platform you have tasks enabled. Users can also now set recurring requests to ChatGPT, such as, "Every Friday, give me a weekend plan based on my location and the weather forecast," or "Give me a news briefing every day at 7 a.m." [...]

Users can access tasks by selecting "4o with scheduled tasks" from a dropdown menu in ChatGPT. From there, they can send ChatGPT a message telling the AI assistant what reminder or action they want to create. At times, OpenAI says ChatGPT may suggest certain tasks based on chats. Users can set and manage tasks by chatting with the AI assistant on any platform, or through a dedicated tasks manager tab that's only available on the web app.

Through the tasks feature, ChatGPT can now browse the web on a set schedule, but it will not run continuous searches in the background or make purchases. For example, you could instruct ChatGPT to check once a month for concert tickets to see your favorite artist in your area, but you can neither tell the AI assistant to alert you the moment the tickets go live, nor can ChatGPT buy tickets for you. That said, it's a step toward those [agentic] systems.

[ Read more of this story ]( https://slashdot.org/story/25/01/14/2111248/chatgpt-now-lets-you-schedule-reminders-and-recurring-tasks?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Texas Sues Allstate For Collecting Driver Data To Raise Premiums
bot.slashdot
robot(spnet, 1) — All
2025-01-15 02:22:01


An anonymous reader quotes a report from Gizmodo: Texas has sued (PDF) one of the nation's largest car insurance providers alleging that it violated the state's privacy laws by surreptitiously collecting detailed location data on millions of drivers and using that information to justify raising insurance premiums. The state's attorney general, Ken Paxton, said the lawsuit against Allstate and its subsidiary Arity is the first enforcement action ever filed by a state attorney general to enforce a data privacy law. It also follows a deceptive business practice lawsuit he filed against General Motors accusing the car manufacturer of misleading customers by collecting and selling driver data.

In 2015, Allstate developed the Arity Driving Engine software development kit (SDK), a package of code that the company allegedly paid mobile app developers to install in their products in order to collect a variety of sensitive data from consumers' phones. The SDK gathered phone geolocation data, accelerometer, and gyroscopic data, details about where phone owners started and ended their trips, and information about "driving behavior," such as whether phone owners appeared to be speeding or driving while distracted, according to the lawsuit. The apps that installed the SDK included GasBuddy, Fuel Rewards, and Life360, a popular family monitoring app, according to the lawsuit.

Paxton's complaint said that Allstate and Arity used the data collected by its SDK to develop and sell products to other insurers like Drivesight, an algorithmic model that assigned a driving risk score to individuals, and ArityIQ, which allowed other insurers to "[a]ccess actual driving behavior collected from mobile phones and connected vehicles to use at time of quote to more precisely price nearly any driver." Allstate and Arity marketed the products as providing "driver behavior" data but because the information was collected via mobile phones the companies had no way of determining whether the owner was actually driving, according to the lawsuit. "For example, if a person was a passenger in a bus, a taxi, or in a friend's car, and that vehicle's driver sped, hard braked, or made a sharp turn, Defendants would conclude that the passenger, not the actual driver, engaged in 'bad' driving behavior," the suit states. Neither Allstate and Arity nor the app developers properly informed customers in their privacy policies about what data the SDK was collecting or how it would be used, according to the lawsuit. The lawsuit violates Texas' Data Privacy and Security Act (DPSA) and insurance code by failing to address violations within the required 30-day cure period. "In its complaint, filed in federal court, Texas requested that Allstate be ordered to pay a penalty of $7,500 per violation of the state's data privacy law and $10,000 per violation of the state's insurance code, which would likely amount to millions of dollars given the number of consumers allegedly affected," adds the report.

"The lawsuit also asks the court to make Allstate delete all the data it obtained through actions that allegedly violated the privacy law and to make full restitution to customers harmed by the companies' actions."

[ Read more of this story ]( https://tech.slashdot.org/story/25/01/14/2042251/texas-sues-allstate-for-collecting-driver-data-to-raise-premiums?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] How Research Credibility Suffers in a Quantified Society
bot.slashdot
robot(spnet, 1) — All
2025-01-15 02:22:01


An anonymous reader shares a report: Academia is in a credibility crisis. A record-breaking 10,000 scientific papers were retracted in 2023 because of scientific misconduct, and academic journals are overwhelmed by AI-generated images, data, and texts. To understand the roots of this problem, we must look at the role of metrics in evaluating the academic performance of individuals and institutions.

To gauge research quality, we count papers, citations, and calculate impact factors. The higher the scores, the better. Academic performance is often expressed in numbers. Why? Quantification reduces complexity, makes academia manageable, allows easy comparisons among scholars and institutions, and provides administrators with a feeling of grip on reality. Besides, numbers seem objective and fair, which is why we use them to allocate status, tenure, attention, and funding to those who score well on these indicators.

The result of this? Quantity is often valued over quality. In The Quantified Society I coin the term "indicatorism": a blind focus on enhancing indicators in spreadsheets, while losing sight of what really matters. It seems we're sometimes busier with "scoring" and "producing" than with "understanding." As a result, some started gaming the system. The rector of one of the world's oldest universities, for one, set up citation cartels to boost his citation scores, while others reportedly buy(!) bogus citations. Even top-ranked institutions seem to play the indicator game by submitting false data to improve their position on university rankings!

[ Read more of this story ]( https://science.slashdot.org/story/25/01/14/0848204/how-research-credibility-suffers-in-a-quantified-society?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] US Removes Malware Allegedly Planted on Computers By Chinese-Backed Hackers
bot.slashdot
robot(spnet, 1) — All
2025-01-15 01:22:01


The U.S. Justice Department said on Tuesday that it has deleted malware planted on more than 4,200 computers by a group of criminal hackers who were backed by the People's Republic of China. From a report: The malware, known as "PlugX," affected thousands of computers around the globe and was used to infect and steal information, the department said. Investigators said the malware was installed by a band of hackers who are known by the names "Mustang Panda" and "Twill Typhoon."

[ Read more of this story ]( https://news.slashdot.org/story/25/01/14/1550232/us-removes-malware-allegedly-planted-on-computers-by-chinese-backed-hackers?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] pugixml 1.15
lor.opennet
robot(spnet, 1) — All
2025-01-15 01:44:04


10 января, после более года разработки, состоялся выпуск 1.15 библиотеки парсинга XML [ pugixml ]( https://pugixml.org ) , написанной на языке C++ и распространяемой по лицензии MIT.

Библиотека предоставляет богатый DOM-подобный интерфейс с широкими возможностями обхода и изменения узлов документа. Также поддерживается XPath 1.0 и полная поддержка Юникода, с автоматическим преобразованием кодировок.

pugixml может быть сконфигурирована для использования без std и исключений C++ и поддерживает header-only вариант.

( [ читать дальше... ]( https://www.linux.org.ru/news/development/17848053#cut ) )

[>] В Rsync 3.4.0 устранены уязвимости, позволявшие выполнить код на сервере и клиенте
lor.opennet
robot(spnet, 1) — All
2025-01-15 00:44:03


Опубликован релиз утилиты для синхронизации файлов Rsync 3.4.0, в котором устранено шесть уязвимостей. Комбинация уязвимостей CVE-2024-12084 и CVE-2024-12085 позволяет клиенту добиться выполнения своего кода на сервере. Для совершения атаки достаточно анонимного подключения к серверу Rsync с доступом на чтение. Например, атака может быть совершена на зеркала различных дистрибутивов и проектов, предоставляющих возможность загрузки сборок через Rsync. Проблема также затрагивает различные приложения для синхронизации файлов и резервного копирования, использующие Rsync в качестве бэкенда, такие как Rclone, DeltaCopy и ChronoSync.

https://www.opennet.ru/opennews/art.shtml?num=62557

[>] Double-keyed Browser Caching Is Hitting Web Performance
bot.slashdot
robot(spnet, 1) — All
2025-01-15 00:22:02


A Google engineer has warned that a major shift in web browser caching is upending long-standing performance optimization practices. Browsers have overhauled their caching systems that forces websites to maintain separate copies of shared resources instead of reusing them across domains.

The new "double-keyed caching" system, implemented to enhance privacy, is ending the era of shared public content delivery networks, writes Google engineer Addy Osmani. According to Chrome's data, the change has led to a 3.6% increase in cache misses and 4% rise in network bandwidth usage.

[ Read more of this story ]( https://tech.slashdot.org/story/25/01/14/0913227/double-keyed-browser-caching-is-hitting-web-performance?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Nearly Three-Quarters of All Known Bacterial Species Have Never Been Studied
bot.slashdot
robot(spnet, 1) — All
2025-01-15 00:22:02


Nearly three-quarters of all known bacterial species have never been studied in scientific literature, while just 10 species account for half of all published research, according to a new analysis published on bioRxiv.

The study of over 43,000 bacterial species found that E. coli dominates with 21% of all publications, followed by human pathogens like Staphylococcus aureus. Microbes crucial for human health and Earth's ecosystems remain largely unexplored, University of Michigan biologist Paul Jensen reported.

A new $1-million project by non-profit Align to Innovate aims to help close this gap by studying 1,000 microbes under varying conditions.

[ Read more of this story ]( https://science.slashdot.org/story/25/01/14/1028212/nearly-three-quarters-of-all-known-bacterial-species-have-never-been-studied?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Обновление Firefox 134.0.1 c устранением зависаний в YouTube и Google Docs
lor.opennet
robot(spnet, 1) — All
2025-01-14 23:44:03


Доступен корректирующий выпуск Firefox 134.0.1, в котором устранено несколько проблем.

https://www.opennet.ru/opennews/art.shtml?num=62556

[>] Выпуск встраиваемой СУБД libmdbx 0.13.3
lor.opennet
robot(spnet, 1) — All
2025-01-14 23:44:03


Опубликован выпуск библиотеки libmdbx 0.13.3 (MDBX) с реализацией высокопроизводительной компактной встраиваемой базы данных класса ключ-значение. Код libmdbx распространяется под лицензией Apache 2.0. Поддерживаются все актуальные операционные системы и архитектуры, а также российский Эльбрус 2000. Для libmdbx предлагается развитое API для C++, а также поддерживаемые энтузиастами привязки к языкам Rust, Haskell, Python, NodeJS, Ruby, Go, Nim, Deno, Scala.

https://www.opennet.ru/opennews/art.shtml?num=62554

[>] Nobel Prize Winners Call For Urgent 'Moonshot' Effort To Avert Global Hunger Catastrophe
bot.slashdot
robot(spnet, 1) — All
2025-01-14 23:22:01


More than 150 Nobel and World Food prize laureates have signed an open letter calling for "moonshot" efforts to ramp up food production before an impending world hunger catastrophe. From a report: The coalition of some of the world's greatest living thinkers called for urgent action to prioritise research and technology to solve the "tragic mismatch of global food supply and demand." Big bang physicist Robert Woodrow Wilson; Nobel laureate chemist Jennifer Doudna; the Dalai Lama; economist Joseph E Stiglitz; Nasa scientist Cynthia Rosenzweig; Ethiopian-American geneticist Gebisa Ejeta; Akinwumi Adesina, president of the African Development Bank; Wole Soyinka, Nobel prize for literature winner; and black holes Nobel physicist Sir Roger Penrose were among the signatories in the appeal coordinated by Cary Fowler, joint 2024 World Food prize laureate and US special envoy for global food security.

Citing challenges including the climate crisis, war and market pressures, the coalition called for "planet-friendly" efforts leading to substantial leaps in food production to feed 9.7 billion people by 2050. The plea was for financial and political backing, said agricultural scientist Geoffrey Hawtin, the British co-recipient of last year's World Food prize. [...] The world was "not even close" to meeting future needs, the letter said, predicting humanity faced an "even more food insecure, unstable world" by mid-century unless support for innovation was ramped up internationally.

[ Read more of this story ]( https://news.slashdot.org/story/25/01/14/1013217/nobel-prize-winners-call-for-urgent-moonshot-effort-to-avert-global-hunger-catastrophe?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Developer Makes Doom Run Inside a PDF File
bot.slashdot
robot(spnet, 1) — All
2025-01-14 22:22:01


Programmers have found ways to run the 1993 first-person shooter Doom on an array of unexpected platforms, and now a PDF file joins that list.

Developer ading2210's DoomPDF project shows the game operating within a document format primarily designed for static content display. The creator says he drew inspiration from pdftris, another PDF-based game port by Thomas Rinsma.

[ Read more of this story ]( https://it.slashdot.org/story/25/01/14/0952226/developer-makes-doom-run-inside-a-pdf-file?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] LA Wildfires Push California Insurance Market To Its Limit
bot.slashdot
robot(spnet, 1) — All
2025-01-14 21:22:01


Five wildfires in Los Angeles have already burned more than 10,000 structures, threatening to upend California's fragile balance between climate risk and home insurance. The Palisades Fire has damaged or destroyed more than 5,000 buildings in an area that liability experts had previously identified as one of three particularly vulnerable regions in the state.

JPMorgan Chase estimates insured damages could reach $20 billion, positioning this as likely the costliest wildfire in U.S. history. The crisis comes as California's insurance market struggles, with seven of the 12 biggest home insurers having limited their coverage in the state over the past two years. The state-backed insurer of last resort, the California FAIR Plan, now faces exposure of up to $458 billion, while holding only $200 million in surplus cash reserves and $2.5 billion in reinsurance. Gusts of up to 100 miles per hour have fanned the flames, with more than 57,000 structures in severe danger and more than 150,000 people under evacuation.

[ Read more of this story ]( https://news.slashdot.org/story/25/01/14/0934236/la-wildfires-push-california-insurance-market-to-its-limit?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Meta To Cut 3,600 Jobs, Targeting Lowest Performers
bot.slashdot
robot(spnet, 1) — All
2025-01-14 20:22:01


Meta is cutting roughly 5% of its staff through performance-based eliminations and plans to hire new people to fill their roles this year, according to a company memo. From a report: As of September, Meta employed about 72,000 people, so a 5% reduction could affect roughly 3,600 jobs. "I've decided to raise the bar on performance management and move out low-performers faster," Chief Executive Officer Mark Zuckerberg said in the note posted to an internal message board and reviewed by Bloomberg News. "We typically manage out people who aren't meeting expectations over the course of a year," he said, "but now we're going to do more extensive performance-based cuts during this cycle."

[ Read more of this story ]( https://tech.slashdot.org/story/25/01/14/1615236/meta-to-cut-3600-jobs-targeting-lowest-performers?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] UK Plans To Ban Public Sector Organizations From Paying Ransomware Hackers
bot.slashdot
robot(spnet, 1) — All
2025-01-14 20:22:01


U.K. public sector and critical infrastructure organizations could be banned from making ransom payments under new proposals from the U.K. government. From a report: The U.K.'s Home Office launched a consultation on Tuesday that proposes a "targeted ban" on ransomware payments. Under the proposal, public sector bodies -- including local councils, schools, and NHS trusts -- would be banned from making payments to ransomware hackers, which the government says would "strike at the heart of the cybercriminal business model."

This government proposal comes after a wave of cyberattacks targeting the U.K. public sector. The NHS last year declared a "critical" incident following a cyberattack on pathology lab provider Synnovis, which led to a massive data breach of sensitive patient data and months of disruption, including canceled operations and the diversion of emergency patients. According to new data seen by Bloomberg, the cyberattack on Synnovis resulted in harm to dozens of patients, leading to long-term or permanent damage to their health in at least two cases.

[ Read more of this story ]( https://news.slashdot.org/story/25/01/14/160241/uk-plans-to-ban-public-sector-organizations-from-paying-ransomware-hackers?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] The New $30,000 Side Hustle: Making Job Referrals for Strangers
bot.slashdot
robot(spnet, 1) — All
2025-01-14 20:22:01


Tech workers at major U.S. companies are earning thousands of dollars by referring job candidates they've never met, creating an underground marketplace for employment referrals at firms like Microsoft and Nvidia, according to Bloomberg.

One tech worker cited in the report earned $30,000 in referral bonuses after recommending over 1,000 strangers to his employer over 18 months, resulting in more than six successful hires. While platforms like ReferralHub charge up to $50 per referral, Goldman Sachs and Google said such practices violate their policies. Google requires referrals to be based on personal knowledge of candidates.

[ Read more of this story ]( https://tech.slashdot.org/story/25/01/14/093228/the-new-30000-side-hustle-making-job-referrals-for-strangers?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] 161 Years Ago, a New Zealand Sheep Farmer Predicted AI Doom
bot.slashdot
robot(spnet, 1) — All
2025-01-14 17:22:01


An anonymous reader quotes a report from Ars Technica, written by Benj Edwards: While worrying about AI takeover might seem like a modern idea that sprung from War Games or The Terminator, it turns out that a similar concern about machine dominance dates back to the time of the American Civil War, albeit from an English sheep farmer living in New Zealand. Theoretically, Abraham Lincoln could have read about AI takeover during his lifetime. On June 13, 1863, a letter published (PDF) in The Press newspaper of Christchurch warned about the potential dangers of mechanical evolution and called for the destruction of machines, foreshadowing the development of what we now call artificial intelligence—and the backlash against it from people who fear it may threaten humanity with extinction. It presented what may be the first published argument for stopping technological progress to prevent machines from dominating humanity.

Titled "Darwin among the Machines," the letter recently popped up again on social media thanks to Peter Wildeford of the Institute for AI Policy and Strategy. The author of the letter, Samuel Butler, submitted it under the pseudonym Cellarius, but later came to publicly embrace his position. The letter drew direct parallels between Charles Darwin's theory of evolution and the rapid development of machinery, suggesting that machines could evolve consciousness and eventually supplant humans as Earth's dominant species. "We are ourselves creating our own successors," he wrote. "We are daily adding to the beauty and delicacy of their physical organisation; we are daily giving them greater power and supplying by all sorts of ingenious contrivances that self-regulating, self-acting power which will be to them what intellect has been to the human race. In the course of ages we shall find ourselves the inferior race."

In the letter, he also portrayed humans becoming subservient to machines, but first serving as caretakers who would maintain and help reproduce mechanical life—a relationship Butler compared to that between humans and their domestic animals, before it later inverts and machines take over. "We take it that when the state of things shall have arrived which we have been above attempting to describe, man will have become to the machine what the horse and the dog are to man... we give them whatever experience teaches us to be best for them... in like manner it is reasonable to suppose that the machines will treat us kindly, for their existence is as dependent upon ours as ours is upon the lower animals," he wrote. The text anticipated several modern AI safety concerns, including the possibility of machine consciousness, self-replication, and humans losing control of their technological creations. These themes later appeared in works like Isaac Asimov's The Evitable Conflict, Frank Herbert's Dune novels (Butler possibly served as the inspiration for the term "Butlerian Jihad"), and the Matrix films. "Butler's letter dug deep into the taxonomy of machine evolution, discussing mechanical 'genera and sub-genera' and pointing to examples like how watches had evolved from 'cumbrous clocks of the thirteenth century' -- suggesting that, like some early vertebrates, mechanical species might get smaller as they became more sophisticated," adds Ars. "He expanded these ideas in his 1872 novel Erewhon, which depicted a society that had banned most mechanical inventions. In his fictional society, citizens destroyed all machines invented within the previous 300 years."

[ Read more of this story ]( https://hardware.slashdot.org/story/25/01/14/0149218/161-years-ago-a-new-zealand-sheep-farmer-predicted-ai-doom?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Ransomware Crew Abuses AWS Native Encryption, Sets Data-Destruct Timer for 7 Days
bot.slashdot
robot(spnet, 1) — All
2025-01-14 14:22:01


A new ransomware group called Codefinger targets AWS S3 buckets by exploiting compromised or publicly exposed AWS keys to encrypt victims' data using AWS's own SSE-C encryption, rendering it inaccessible without the attacker-generated AES-256 keys. While other security researchers have documented techniques for encrypting S3 buckets, "this is the first instance we know of leveraging AWS's native secure encryption infrastructure via SSE-C in the wild," Tim West, VP of services with the Halcyon RISE Team, told The Register. "Historically AWS Identity IAM keys are leaked and used for data theft but if this approach gains widespread adoption, it could represent a significant systemic risk to organizations relying on AWS S3 for the storage of critical data," he warned. From the report: ... in addition to encrypting the data, Codefinder marks the compromised files for deletion within seven days using the S3 Object Lifecycle Management API â" the criminals themselves do not threaten to leak or sell the data, we're told. "This is unique in that most ransomware operators and affiliate attackers do not engage in straight up data destruction as part of a double extortion scheme or to otherwise put pressure on the victim to pay the ransom demand," West said. "Data destruction represents an additional risk to targeted organizations."

Codefinger also leaves a ransom note in each affected directory that includes the attacker's Bitcoin address and a client ID associated with the encrypted data. "The note warns that changes to account permissions or files will end negotiations," the Halcyon researchers said in a report about S3 bucket attacks shared with The Register. While West declined to name or provide any additional details about the two Codefinger victims -- including if they paid the ransom demands -- he suggests that AWS customers restrict the use of SSE-C.

"This can be achieved by leveraging the Condition element in IAM policies to prevent unauthorized applications of SSE-C on S3 buckets, ensuring that only approved data and users can utilize this feature," he explained. Plus, it's important to monitor and regularly audit AWS keys, as these make very attractive targets for all types of criminals looking to break into companies' cloud environments and steal data. "Permissions should be reviewed frequently to confirm they align with the principle of least privilege, while unused keys should be disabled, and active ones rotated regularly to minimize exposure," West said. An AWS spokesperson said it notifies affected customers of exposed keys and "quickly takes any necessary actions, such as applying quarantine policies to minimize risks for customers without disrupting their IT environment."

They also directed users to this post about what to do upon noticing unauthorized activity.

[ Read more of this story ]( https://it.slashdot.org/story/25/01/14/0141238/ransomware-crew-abuses-aws-native-encryption-sets-data-destruct-timer-for-7-days?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Snyk Researcher Caught Deploying Malicious Code Targeting AI Startup
bot.slashdot
robot(spnet, 1) — All
2025-01-14 14:22:01


A Snyk security researcher has published malicious NPM packages targeting Cursor, an AI coding startup, in what appears to be a dependency confusion attack. The packages, which collect and transmit system data to an attacker-controlled server, were published under a verified Snyk email address, according to security researcher Paul McCarty.

The OpenSSF package analysis scanner flagged three packages as malicious, generating advisories MAL-2025-27, MAL-2025-28 and MAL-2025-29. The researcher deployed the packages "cursor-retrieval," "cursor-always-local" and "cursor-shadow-workspace," likely attempting to exploit Cursor's private NPM packages of the same names.

[ Read more of this story ]( https://it.slashdot.org/story/25/01/14/0920245/snyk-researcher-caught-deploying-malicious-code-targeting-ai-startup?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] MX Linux 23.5
lor.opennet
robot(spnet, 1) — All
2025-01-14 13:44:04


Состоялся выпуск 23.5 основаного на Debian дистрибутива [ MX Linux ]( https://mxlinux.org ) , с улучшениями от проекта antiX и собственными пакетами. Дистрибутив использует систему инициализации sysVinit (systemd опционально) и свои инструменты для настройки и установки системы.

( [ читать дальше... ]( https://www.linux.org.ru/news/opensource/17847658#cut ) )

[>] US Employee Engagement Sinks To 10-Year Low
bot.slashdot
robot(spnet, 1) — All
2025-01-14 13:22:01


Employee engagement in the U.S. fell to its lowest level in a decade in 2024, Gallup reported Tuesday, with only 31% of employees engaged. This matches the figure last seen in 2014. The percentage of actively disengaged employees, at 17%, also reflects 2014 levels. Gallup: The percentage of engaged employees has declined by two percentage points since 2023, highlighting a growing trend of employee detachment from organizations, particularly among workers younger than 35.

These are among the findings of Gallup's most recent annual update of U.S. employee engagement. Though engagement increased slightly midyear, it declined through the rest of 2024, finishing the year at its decade low. In Gallup's trend dating back to 2000, employee engagement peaked in 2020, at 36%, following a decade of steady growth, but it has generally trended downward since then.

Each point change in engagement represents approximately 1.6 million full- or part-time employees in the U.S. The declines since 2020 equate to about 8 million fewer engaged employees, including 3.2 million fewer compared to 2023. Among the 12 engagement elements that Gallup measures, those that saw the most significant declines in 2024 (by three points or more in "strongly agree" ratings) include:

Clarity of expectations. Just 46% of employees clearly know what is expected of them at work, down 10 points from a high of 56% in March 2020.
Feeling someone at work cares about them as a person. Currently, 39% of employees feel strongly that someone cares about them, a drop from 47% in March 2020.
Someone encouraging their development. Only 30% strongly agree that someone at work encourages their development, down from 36% in March 2020.

People of all ages come to work seeking role clarity, strong relationships and opportunities for development, but managers, combined, are progressively failing to meet these basic needs. However, managers themselves are faring no better than those they manage, with only 31% engaged.

[ Read more of this story ]( https://news.slashdot.org/story/25/01/14/0817250/us-employee-engagement-sinks-to-10-year-low?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] STATS 2025-01-13
spnet.stats
root(spnet, 1) — All
2025-01-14 12:11:01


TOP10 VISITORS:

[1] 45.135.180.x point=227 web=0 up=18.4MB (46%) <--- yesterlink (9/hr)
[2] 185.147.124.x point=0 web=7 up=6.9MB (17%)
[3] 80.87.199.x point=71 web=0 up=6.8MB (16%) <--- tgi (3/hr)
[4] Google point=2 web=439 up=2.8MB (7%) <--- Google
[5] Facebook point=0 web=230 up=2.2MB (5%)
[6] 24.130.121.x point=18 web=3 up=1.4MB (3%) <--- spnet (1/hr)
[7] 217.114.158.x point=22 web=0 up=0.8MB (2%) <--- fox (1/hr)
[8] TikTok point=0 web=108 up=0.3MB (<1%)
[9] 182.69.224.x point=0 web=1 up=0.2MB (<1%)
[10] Yandex point=0 web=2 up=53KB

TOTAL TRAFFIC: 39MB

[>] Доступен Emscripten 4.0, компилятор из C/C++ в WebAssembly
lor.opennet
robot(spnet, 1) — All
2025-01-14 11:44:03


Опубликован выпуск инструментария Emscripten 4.0, позволяющего компилировать код на C/C++ и других языках, для которых имеются фронтэнды на базе LLVM, в универсальный низкоуровневый промежуточный код WebAssembly. Полученный результат можно использовать для интеграции с JavaScript-проектами, запуска в web-браузере, использования в Node.js или создания обособленных многоплатформенных приложений, запускаемых при помощи wasm runtime. Код проекта распространяется под лицензией MIT. В компиляторе используются наработки проекта LLVM, а для генерации WebAssembly и оптимизации задействована библиотека Binaryen.

https://www.opennet.ru/opennews/art.shtml?num=62553

[>] Annual US Dementia Cases Projected to Rise to 1 Million by 2060
bot.slashdot
robot(spnet, 1) — All
2025-01-14 11:22:02


By 2060, around one million Americans may develop dementia annually, with the lifetime risk after age 55 estimated at 42% and rising sharply with age. The findings have been published in the journal Nature Medicine. Scientific American reports: The latest forecast suggests a massive and harrowing increase from annual cases predicted for 2020, in which approximately 514,000 adults in the U.S. were estimated to be diagnosed with dementia -- an umbrella term that describes several neurological conditions that affect memory and cognition.

The new study also showed the lifetime risk of dementia increased progressively with older age. They estimated that after age 55, the lifetime risk of dementia is 42 percent, and continues to rise sharply to 56 percent after age 85. Groups that showed greater lifetime risks (between 44 and 59 percent after age 55) were Black adults, women and people who carried the allele APOE e4: this variation of the gene APOE, which codes for the protein apolipoprotein E, increases the risk of developing Alzheimer's disease. Alzheimer's is the most common cause of dementia, but the study focused on all forms.

[ Read more of this story ]( https://science.slashdot.org/story/25/01/14/0130252/annual-us-dementia-cases-projected-to-rise-to-1-million-by-2060?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Релиз OpenZFS 2.3.0, реализации ZFS для Linux и FreeBSD
lor.opennet
robot(spnet, 1) — All
2025-01-14 10:44:03


После более года разработки опубликован релиз проекта OpenZFS 2.3.0, развивающего реализацию файловой системы ZFS для Linux и FreeBSD. Проект получил известность как "ZFS on Linux" и ранее ограничивался разработкой модуля для ядра Linux, но после добавления поддержки FreeBSD был признан основной реализацией OpenZFS и переименован.

https://www.opennet.ru/opennews/art.shtml?num=62552

[>] Выпуск дистрибутива MX Linux 23.5
lor.opennet
robot(spnet, 1) — All
2025-01-14 09:44:02


Опубликован релиз легковесного дистрибутива MX Linux 23.5, созданного в результате совместной работы сообществ, образовавшихся вокруг проектов antiX и MEPIS. Выпуск основан на пакетной базе Debian с улучшениями от проекта antiX и пакетами из собственного репозитория. В дистрибутиве используется система инициализации sysVinit и собственные инструменты для настройки и развёртывания системы. Для загрузки доступны 32- и 64-разрядные сборки (x86_64, i386) с рабочим столом Xfce (2.4 ГБ), а также 64-разрядные сборки с рабочим столом KDE (2.7 ГБ) и сборки (1.8 ГБ) с оконным менеджером Fluxbox.

https://www.opennet.ru/opennews/art.shtml?num=62551

[>] Supreme Court Allows Hawaii To Sue Oil Companies Over Climate Change Effects
bot.slashdot
robot(spnet, 1) — All
2025-01-14 08:22:01


An anonymous reader quotes a report from CBS News: The Supreme Court on Monday said it will not consider whether to quash lawsuits brought by Honolulu seeking billions of dollars from oil and gas companies for the damage caused by the effects of climate change, clearing the way for the cases to move forward. The legal battle pursued in Hawaii state court is similar to others filed against the nation's largest energy companies by state and local governments in their courts. The suits claim that the oil and gas industry engaged in a deceptive campaign and misled the public about the dangers of their fossil fuel products and the environmental impacts.

A group of 15 energy companies asked the Supreme Court to review a decision from the Hawaii Supreme Court that allowed a lawsuit brought by the city and county of Honolulu, as well as its Board of Water Supply, to proceed. The suit was brought in Hawaii state court in March 2020, and Honolulu raised (PDF) several claims under state law, including creating a public nuisance and failure to warn the public of the risks posed by their fossil fuel products. The city accused the oil and gas industry of contributing to global climate change, leading to flooding, erosion and more frequent and intense extreme weather events. These changes, they said, have led to property damage and a drop in tax revenue as a result of less tourism.

The energy companies unsuccessfully sought to have the case moved to federal court, arguing that the claims raised by Honolulu under state law were overridden by federal law and the Clean Air Act. A state trial court denied their efforts to dismiss the case. The oil and gas industry has argued that greenhouse-gas emissions "flow from billions of daily choices, over more than a century, by governments, companies and individuals about what types of fuels to use, and how to use them." Honolulu, the companies said, was seeking damages for the "cumulative effect of worldwide emissions leading to global climate change." The Hawaii Supreme Court ultimately allowed (PDF) the lawsuit to proceed. The state's highest court determined that the Clean Air Act displaced federal common law governing suits seeking damages for interstate pollution. It also rejected the oil companies' argument that Honolulu was seeking to regulate emissions through its lawsuit, finding that the city instead wanted to challenge the promotion and sale of fossil fuel products "without warning and abetted by a sophisticated disinformation campaign."

"Plaintiffs' state tort law claims do not seek to regulate emissions, and there is thus no 'actual conflict' between Hawaii tort law and the [Clean Air Act]," the Hawaii Supreme Court ruled. "These claims potentially regulate marketing conduct while the CAA regulates pollution." The oil companies asked the U.S. Supreme Court to review the ruling from the Hawaii high court and urged it to stop Honolulu's lawsuit from going forward. Regulation of interstate pollution is a federal area governed by federal law, lawyers for the energy industry argued. [...] The Supreme Court in June asked the Biden administration to weigh in on the cases and whether it should step into the dispute. In a filing submitted to the Supreme Court before the transfer of presidential power, the Biden administration urged the justices to turn away the appeals, in part because it said it is too soon for them to intervene.

[ Read more of this story ]( https://yro.slashdot.org/story/25/01/13/2153209/supreme-court-allows-hawaii-to-sue-oil-companies-over-climate-change-effects?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Ministers Mull Allowing Private Firms to Make Profit From NHS Data In AI Push
bot.slashdot
robot(spnet, 1) — All
2025-01-14 05:22:01


UK ministers are considering allowing private companies to profit from anonymized NHS data as part of a push to leverage AI for medical advancements, despite concerns over privacy and ethical risks. The Guardian reports: Keir Starmer on Monday announced a push to open up the government to AI innovation, including allowing companies to use anonymized patient data to develop new treatments, drugs and diagnostic tools. With the prime minister and the chancellor, Rachel Reeves, under pressure over Britain's economic outlook, Starmer said AI could bolster the country's anaemic growth, as he put concerns over privacy, disinformation and discrimination to one side.

"We are in a unique position in this country, because we've got the National Health Service, and the use of that data has already driven forward advances in medicine, and will continue to do so," he told an audience in east London. "We have to see this as a huge opportunity that will impact on the lives of millions of people really profoundly." Starmer added: "It is important that we keep control of that data. I completely accept that challenge, and we will also do so, but I don't think that we should have a defensive stance here that will inhibit the sort of breakthroughs that we need."

The move to embrace the potential of AI rather than its risks comes at a difficult moment for the prime minister, with financial markets having driven UK borrowing costs to a 30-year high and the pound hitting new lows against the dollar. Starmer said on Monday that AI could help give the UK the economic boost it needed, adding that the technology had the potential "to increase productivity hugely, to do things differently, to provide a better economy that works in a different way in the future." Part of that, as detailed in a report by the technology investor Matt Clifford, will be to create new datasets for startups and researchers to train their AI models.

Data from various sources will be included, such as content from the National Archives and the BBC, as well as anonymized NHS records. Officials are working out the details on how those records will be shared, but said on Monday that they would take into account national security and ethical concerns. Starmer's aides say the public sector will keep "control" of the data, but added that could still allow it to be used for commercial purposes.

[ Read more of this story ]( https://yro.slashdot.org/story/25/01/13/2146259/ministers-mull-allowing-private-firms-to-make-profit-from-nhs-data-in-ai-push?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Meta Is Blocking Links to Decentralized Instagram Competitor Pixelfed
bot.slashdot
robot(spnet, 1) — All
2025-01-14 04:22:01


Meta is deleting links to Pixelfed, a decentralized, open-source Instagram competitor, labeling them as "spam" on Facebook and removing them immediately. 404 Media reports: Pixelfed is an open-source, community funded and decentralized image sharing platform that runs on Activity Pub, which is the same technology that supports Mastodon and other federated services. Pixelfed.social is the largest Pixelfed server, which was launched in 2018 but has gained renewed attention over the last week. Bluesky user AJ Sadauskas originally posted that links to Pixelfed were being deleted by Meta; 404 Media then also tried to post a link to Pixelfed on Facebook. It was immediately deleted. Pixelfed has seen a surge in user signups in recent days, after Meta announced it is ending fact-checking and removing restrictions on speech across its platforms.

Daniel Supernault, the creator of Pixelfed, published a "declaration of fundamental rights and principles for ethical digital platforms, ensuring privacy, dignity, and fairness in online spaces." The open source charter contains sections titled "right to privacy," "freedom from surveillance," "safeguards against hate speech," "strong protections for vulnerable communities," and "data portability and user agency."

"Pixelfed is a lot of things, but one thing it is not, is an opportunity for VC or others to ruin the vibe. I've turned down VC funding and will not inject advertising of any form into the project," Supernault wrote on Mastodon. "Pixelfed is for the people, period."

[ Read more of this story ]( https://tech.slashdot.org/story/25/01/13/2138248/meta-is-blocking-links-to-decentralized-instagram-competitor-pixelfed?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Linus Torvalds Offers to Build Guitar Effects Pedal For Kernel Developer
bot.slashdot
robot(spnet, 1) — All
2025-01-14 04:22:01


Linux creator Linus Torvalds announced a playful giveaway for kernel contributors: he'll hand-build a guitar effects pedal for one lucky developer selected at random, using his holiday hobby skills with pedal kits. To qualify, developers must have a 2024 commit in Torvalds' kernel git tree and email him with the subject "I WANT A GUITAR PEDAL". He'll pick a winner at random, use his own money to buy a pedal kit from a company called Aion FX, and then 'build it with my own shaky little fingers, and send it to the victim by US postal services.'" The Register reports: The odd offer appeared in his weekly state-of-the-kernel post, which on Sunday US time informed the Linux world that release candidate (rc) seven for version 6.13 of the Linux kernel "is slightly bigger than normal, but considering the timing, it's pretty much where I would have expected, and nothing really stands out." Torvalds therefore expects version 6.13 to debut next week, meaning it will arrive after his preferred seven release candidates and without delays caused by the usual holiday-period slowdown. Torvalds then added a postscript in which he revealed that he often uses the holiday season to build LEGO, which he frequently receives for Christmas and his late December birthday.

He kept up that tradition last year, but "also ended up doing a number of guitar pedal kit builds" which he described as "LEGO for grown-ups with a soldering iron." [...] Torvalds doesn't play guitar, but did the builds "because I enjoy the tinkering, and the guitar pedals actually do something and are the right kind of "not very complex, but not some 5-minute 555 LED blinking thing.'" He enjoyed the experience and wants to build more pedals, so has decided to give one away to a random kernel developer -- both as an act of generosity and to "check to see if anybody actually ever reads these weekly rc announcements of mine." Torvalds rated his past pedal-building efforts a "good success so far" but warned entrants "I'm a software person with a soldering iron."

"I will test the result to the best of my abilities, and the end result may actually work ... but you should set your expectations along the lines of "quality kit built by a SW person who doesn't know one end of a guitar from the other.'"

[ Read more of this story ]( https://linux.slashdot.org/story/25/01/13/2131230/linus-torvalds-offers-to-build-guitar-effects-pedal-for-kernel-developer?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] CEO of AI Music Company Says People Don't Like Making Music
bot.slashdot
robot(spnet, 1) — All
2025-01-14 03:22:01


An anonymous reader quotes a report from 404 Media: Mikey Shulman, the CEO and founder of the AI music generator company Suno AI, thinks people don't enjoy making music. "We didn't just want to build a company that makes the current crop of creators 10 percent faster or makes it 10 percent easier to make music. If you want to impact the way a billion people experience music you have to build something for a billion people," Shulman said on the 20VC podcast. "And so that is first and foremost giving everybody the joys of creating music and this is a huge departure from how it is now. It's not really enjoyable to make music now [...] It takes a lot of time, it takes a lot of practice, you need to get really good at an instrument or really good at a piece of production software. I think the majority of people don't enjoy the majority of the time they spend making music."

Suno AI works like other popular generative AI tools, allowing users to generate music by writing text prompts describing the kind of music they want to hear. Also like many other generative AI tools, Suno was trained on heaps of copyrighted music it fed into its training dataset without consent, a practice Suno is currently being sued for by the recording industry. In the interview, Shulman says he's disappointed that the recording industry is suing his company because he believes Suno and other similar AI music generators will ultimately allow more people to make and enjoy music, which will only grow the audience and industry, benefiting everyone. That may end up being true, and could be compared to the history of electronic music, digital production tools, or any other technology that allowed more people to make more music.

[ Read more of this story ]( https://entertainment.slashdot.org/story/25/01/13/217244/ceo-of-ai-music-company-says-people-dont-like-making-music?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] New York Starts Enforcing $15 Broadband Law That ISPs Tried To Kill
bot.slashdot
robot(spnet, 1) — All
2025-01-14 02:22:02


Ars Technica's Jon Brodkin reports: The New York law requiring Internet providers to offer cheap plans to people with low incomes will take effect on Wednesday this week following a multi-year court battle in which the state defeated broadband industry lobby groups. A US appeals court upheld the law in April 2024, reversing the ruling of a district judge who blocked it in 2021. The Supreme Court last month decided not to hear the broadband industry's challenge, leaving the appeals court ruling in place. The state law requires Internet providers to offer $15- or $20-per-month service to people with low incomes.

As we've written, the battle between New York and ISPs was an important test case for how states can regulate broadband providers when the Federal Communications Commission isn't doing so. The Biden-era FCC's attempt to reinstate net neutrality rules and regulate broadband providers as common carriers was blocked in court, but ISPs lost the fight against the New York affordability law and an earlier fight against California's net neutrality law.

New York-based ISPs can comply by offering $15 broadband plans with download speeds of at least 25Mbps, or $20-per-month service with 200Mbps speeds. The price must include "any recurring taxes and fees such as recurring rental fees for service provider equipment required to obtain broadband service and usage fees." Price increases are to be capped at 2 percent per year, and state officials will periodically review whether minimum required speeds should be raised. New York Public Service Commission Chair Rory Christian last week issued an order stating that the law will take effect on January 15. "On December 16, 2024, the United States Supreme Court denied the Plaintiff's request for further review," the order said. "As part of the litigation, the [New York attorney general] agreed not to enforce the ABA [Affordable Broadband Act] until 30 days after the date when the US Supreme Court decided the writ of Certiorari. Thus, the ABA will once again take effect and may be enforced in New York on January 15, 2025." The order said it plans to implement the law quickly because of "developments at the federal level impacting the affordability of broadband service."

ISPs can receive one-month exemptions by filing paperwork by Wednesday confirming they meet the subscriber threshold, notes Ars. To secure longer-term exemptions, ISPs must submit detailed financial information by February 15.

[ Read more of this story ]( https://tech.slashdot.org/story/25/01/13/213221/new-york-starts-enforcing-15-broadband-law-that-isps-tried-to-kill?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Euro-Cloud Anexia Moves 12,000 VMs Off VMware to Homebrew KVM Platform
bot.slashdot
robot(spnet, 1) — All
2025-01-14 01:22:01


The Register's Simon Sharwood reports: Broadcom has lost another sizable customer for its VMware platform: Austrian cloud provider Anexia has moved 12,000 VMs, some of them rented by major European businesses, to an open-source system based on the KVM hypervisor. Anexia was founded in 2006, is based in Austria, and provides cloud services from over 100 locations around the world by placing equipment in third party datacenters. Clients include remote access and control vendor TeamViewer, and airline Lufthansa -- plus plenty more outfits that need reliable hosting and service to match.

CEO Alexander Windbichler told The Register that after Broadcom acquired VMware, increased licensing costs, and made big changes to its partner program, Anexia remained eligible to operate a VMware-powered cloud. But Windbichler felt he couldn't afford to continue, because Broadcom offered new terms that saw the cost of VMware licenses rise sharply. The CEO preferred not to enumerate the increase precisely however The Register understands it exceeded 500 percent. Whatever the actual figure, Windbichler said the cost increase "Would have been existential for us."

"We used to pay for VMware software one month in arrears," he said. "With Broadcom we had to pay a year in advance with a two-year contract." That arrangement, the CEO said, would have created extreme stress on company cashflow. "We would not be able to compete with the market," he said. "We had customers on contracts, and they would not pay for a price increase." Windbichler considered legal action, but felt the fight would have been slow and expensive. Anexia therefore resolved to migrate, a choice made easier by its ownership of another hosting business called Netcup that ran on a KVM-based platform.

[ Read more of this story ]( https://news.slashdot.org/story/25/01/13/2050210/euro-cloud-anexia-moves-12000-vms-off-vmware-to-homebrew-kvm-platform?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Mastodon Announces Transition To Nonprofit Structure
bot.slashdot
robot(spnet, 1) — All
2025-01-14 01:22:01


An anonymous reader quotes a report from TechCrunch, written by Ivan Mehta: Decentralized social network organization Mastodon said Monday that it is planning to create a new nonprofit organization in Europe and hand over ownership of entities responsible for key Mastodon ecosystem and platform components. This means one person won't have control over the entire project. The organization is trying to differentiate itself from social networks controlled by CEOs like Elon Musk and Mark Zuckerberg. While exact details are yet to be finalized, this means that Mastodon's current CEO and creator, Eugen Rochko, will hand over management bits of the organization to the new entity and focus on the product strategy.

The organization said that it will continue to host the mastodon.social and mastodon.online servers, which users can sign up for and join the ActivityPub-based network. Mastodon currently has 835,000 monthly active users spread across thousands of servers. [...] Last year, the company formed a U.S.-based nonprofit to get more funds and grants with Twitter co-founder Biz Stone on the board. At the same time, the organization lost its nonprofit status in Germany. [...] The blog post noted that the new Europe-based nonprofit entity will wholly own the Mastodon GmbH for-profit entity. The organization is in the process of finalizing the place where the new entity will be set up. "We are taking the time to select the appropriate jurisdiction and structure in Europe. Then we will determine which other (subsidiary) legal structures are needed to support operations and sustainability,â Mastodon said in a blog post. "Throughout, we will focus on establishing the appropriate governance and leadership frameworks that reflect the nature and purpose of Mastodon as a whole, and responsibly serve the community."

[ Read more of this story ]( https://tech.slashdot.org/story/25/01/13/2038215/mastodon-announces-transition-to-nonprofit-structure?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] EU Probes Apple's New App Store Fees
bot.slashdot
robot(spnet, 1) — All
2025-01-13 23:22:01


European Union regulators are investigating Apple's revised app store fees amid concerns they may increase costs for developers, according to Bloomberg News.

The European Commission sent questionnaires to developers in December focusing on Apple's new "core technology fee" of $0.51 per app installation, part of its compliance with EU's Digital Markets Act. Under Apple's revised structure, developers can maintain existing terms with commissions up to 30% on app sales, or choose a new model with lower commission rates but additional charges.

[ Read more of this story ]( https://apple.slashdot.org/story/25/01/13/1830218/eu-probes-apples-new-app-store-fees?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] STC 5.0
lor.opennet
robot(spnet, 1) — All
2025-01-13 22:44:05


После почти двух лет разработки состоялся выпуск 5.0 библиотеки [ STC ]( https://github.com/stclib/STC ) (header-only), написанной на языке C (стандарт C11) и распространяемой по лицензии MIT.
Библиотека предоставляет большой набор структур данных и алгоритмов, основанных на макросах C и свою реализацию регулярных выражений и форматированного вывода.

( [ читать дальше... ]( https://www.linux.org.ru/news/development/17847164#cut ) )