A CBC investigation found that more than 1.5 million Canadian Crime Stoppers tips spanning 25 years were exposed in a breach of the P3 Global Intel tip-management platform. About 850,000 records contained personally identifiable information, including addresses, phone numbers, emails, license plates and some banking details. Longtime Slashdot reader doconnor shares the report: The data was stolen last March by hacktivist collective Internet Yiff Machine. In a manifesto, the group said it wanted to disprove the claim by P3 Global Intel -- the company hired by Crime Stoppers to manage its tips -- that the platform was "anonymous" and "secure." A copy of the hacked data was made available to researchers and journalists, including CBC, by Distributed Denial of Secrets, a U.S. non-profit that archives and publishes hacked and leaked documents it deems to be in the public interest. The report found that more than 4,300 Crime Stoppers tipsters identified themselves by their full name, with hundreds of records containing staff warnings that individuals had "self-identified" or been "exposed," yet their information remained unredacted.

The leaked data included sensitive allegations involving murder, terrorism, drug trafficking and organized crime, with nearly 49,000 tips linked to cases cleared through arrests or criminal charges. Cybersecurity experts criticized the retention of decades-old records... "If a tip is closed, does that need to stay online?" asked cybersecurity expert Ben Coon. "The answer to that, to me, is no."

The RCMP was initially told Canadian data was unaffected, then assured that exposed Canadian records contained no personally identifiable information. This appears to contradict the CBC's findings. Furthermore, affected individuals have not been systematically notified because contacting them could further jeopardize their anonymity.

"For a system that has been designed to promise anonymity to the users, that has failed categorically," said Prof. Ali Dehghantanha, the Canada Research Chair in Cybersecurity and Threat Intelligence at the University of Guelph.

[ Read more of this story ]( https://yro.slashdot.org/story/26/10/21/1729218/more-than-15-million-canadian-crime-stoppers-tips-leaked?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

Опубликован релиз пользовательского окружения Dux Shell 2.0, поддерживающего работу поверх композитных серверов niri, Hyprland, Sway, MangoWC, labwc, Scroll, Aqueous и Miracle WM. Это первый выпуск после переименования проекта DankMaterialShell (DMS) в Dux Shell. Новое имя проще, созвучно с пингвином Tux и не включает в часть названия чужого бренда. Dux Shell развивает набор сочетающихся между собой компонентов для формирования рабочего стола, таких как панель задач, переключатель виртуальных рабочих столов, интерфейс навигации по установленным приложениям и конфигуратор. Оформление соответствует концепции Material Design 3.

https://www.opennet.ru/opennews/art.shtml?num=66522

An anonymous reader quotes a report from Ars Technica: We haven't heard many details about Microsoft's upcoming "Project Helix" gaming hardware since the company announced it in March as a device that will "play your Xbox and PC games." In a new wide-ranging profile of Xbox CEO Asha Sharma, though, Fortune alludes to a dual release strategy for upcoming Microsoft gaming hardware, with "a next-generation handheld device" planned by the end of next year and a 2028 holiday season console release that could cost between $1,200 and $1,800.

That future console price range is based on what has "internally been projected" at the company, according to Fortune. But the price for consumers could come down if "Microsoft decides to subsidize the cost," the outlet says, as many console makers have done in the past. While a $1,200 starting price would be historically high for the game console market, even accounting for inflation, it also reflects a new normal: The slowdown in Moore's Law and AI-driven component shortages mean cutting-edge gaming hardware just isn't as cheap as it used to be. This year, the Steam Machine broke the $1,000 starting price, while the 2-year-old technology in the PlayStation 5 Pro is now going for $900, and the 6-year-old Xbox Series X now starts at $750.

[ Read more of this story ]( https://games.slashdot.org/story/26/10/21/180214/microsoft-reportedly-projects-1200-to-1800-price-for-next-gen-xbox?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

A New Mexico judge has ordered Meta to pay $25 billion after a jury found Facebook liable for deceiving users about privacy during the Cambridge Analytica scandal. State Attorney General Raul Torrez called it "one of the largest, if not the single largest state verdict against a company in American history." While Meta plans to appeal the ruling, the funds that are to be collected will go toward state education spending. The Associated Press reports: Jurors in September found Meta liable for over 43 million violations of New Mexico consumer protection laws when a political consulting firm, Cambridge Analytica, harvested Facebook user data to generate targeted political ads for the 2016 election. Forty-eight other states settled with Facebook in a nationwide case, but New Mexico chose to take the social media company to court on its own. [...] During the trial, jurors assessed whether Facebook misled users about privacy and content moderation 34 separate times. State prosecutors, though, argued Facebook's statements deceived the entire population of New Mexico and extended beyond social media users.

In the end, jurors agreed with this premise and found Facebook liable for 2.1 million violations on certain counts, bringing the total number of violations to over 43 million. Facebook's attorneys have argued in subsequent court filings that the state's consumer protection laws don't apply to people in New Mexico who weren't using the platform at the time. [...] In one of the few wins for the defense, jurors found the state didn't prove that Facebook made false claims about removing harmful content, including misinformation about the COVID-19 pandemic.

The state said the company favored certain accounts and allowed for violent or inaccurate content to proliferate. Attorney Randi McGinn said in her closing argument for the state that Facebook profited off harmful content, which CEO Mark Zuckerberg denied during his video deposition. Zuckerberg said the company has to carefully balance freedom of speech with content moderation. Attorneys for Facebook said the company has adapted its policies since the state's lawsuit was filed in 2021 and that it removes 99% of content that violates standards.

[ Read more of this story ]( https://yro.slashdot.org/story/26/10/21/188251/meta-ordered-to-pay-new-mexico-25-billion-for-deceiving-users-about-privacy-on-facebook?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

"According to a recent report by Bloomberg's Jason Schreier (paywalled), EA has reportedly decided to shut down BioWare," the studio behind the Dragon Age and Mass Effect games, writes longtime Slashdot reader atari_kid. Quartz reports: Chief Studios Officer Cam Weber and Chief Operating Officer David Tinson wrote that "over the past several months, we've taken a hard look at our business." They said a small BioWare team had been doing early groundwork on a Mass Effect game, but EA chose to drop the effort. That decision means closing the studio and its Edmonton workspace, they wrote. "We do not take this decision lightly," Weber and Tinson said of the BioWare closure, according to Variety.

EA will keep investing in Apex Legends and is continuing work on two upcoming launches, Marvel's Iron Man and the next Star Wars Jedi game, the executives said. They added that EA's Respawn and DICE studios will join forces on an upcoming project, in addition to new Battlefield titles. Bloomberg said the project is probably a new installment of the Star Wars: Battlefront franchise.

[ Read more of this story ]( https://games.slashdot.org/story/26/10/21/1738206/ea-is-shutting-down-bioware?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

OpenAI is bringing its models to Google Cloud's model garden and Antigravity coding tool, putting its technology on all three major U.S. cloud platforms after Microsoft's exclusive license ended earlier this year. "Google Cloud's longstanding investment in machine learning and AI has made it a destination for AI workloads and the developers and data scientists building them," OpenAI said in a blog post. It continues: [...] The integration will pair OpenAI's frontier models with Google Cloud's built-in access controls, centralized data governance, and high-performance infrastructure to support demanding enterprise workloads.

Google Cloud customers will be able to purchase OpenAI frontier models via model garden, transacted through the Google Cloud Marketplace. Enterprises with Google Cloud spend commitments will be able to draw down their GCP commitments for these purchases.

Additionally, OpenAI models will soon be available in Google Antigravity and the Gemini Agent, providing enterprise customers with model choice flexibility and the best model for each task. [...] For context, Microsoft previously held exclusive licensing rights to OpenAI's intellectual property, but that arrangement ended less than six months ago as OpenAI began expanding its partnerships with other cloud providers.

Just one day after Microsoft's exclusivity ended, Amazon announced plans to host OpenAI's models on its cloud platform in April.

[ Read more of this story ]( https://tech.slashdot.org/story/26/10/21/1637221/openai-models-are-now-on-all-three-major-us-cloud-platforms?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

"PHP disclosed two critical vulnerabilities in their programming language and urged web site operators to immediately apply the fix," writes longtime Slashdot reader smooth wombat. "As a result, government web sites in Europe and elsewhere temporarily went dark on Wednesday as operators worked to protect their systems." The Independent reports: Dane Knecht, the chief technology officer of Web and cloud security firm Cloudflare, said that attacks were emerging and Cloudflare was updating its firewall rules as a stopgap measure. "We are seeing early attacks emerging and are updating mitigations as new vectors show up. This is a STOPGAP only. Patch as soon as PHP releases the update," he said on X.

Officials have said that all PHP versions from PHP 5 onward could be affected, although PHP has not yet disclosed which versions are vulnerable. Special thanks to Slashdot readers Alain Williams and mrspoonsi for sharing this critical PHP security release.

For more details, read the official PHP announcement and guidance on what to do next.

[ Read more of this story ]( https://developers.slashdot.org/story/26/10/21/1644235/government-websites-go-dark-after-severe-php-vulnerabilities-disclosed?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

Опубликованы корректирующие выпуски PHP 8.5.12, 8.4.27, 8.3.36 и 8.2.35, а также патчи для уже не поддерживаемых веток PHP 7.4, PHP 8.0 и PHP 8.1, в которых исправлены две критические уязвимости.

https://www.opennet.ru/opennews/art.shtml?num=66520

An anonymous reader quotes a report from Ars Technica: Website admins, brace yourselves. Fixes for what are believed to be uncommonly severe vulnerabilities are scheduled to drop in a little more than 12 hours for PHP, a programming language that powers websites and Web applications everywhere. PHP maintainers said Monday that they planned to release patches for two vulnerabilities, both with severity ratings of 9.2 out of a possible 10.

"All PHP users are encouraged to prepare now so they can upgrade as soon as the release is available," the advisory stated. "We reserve the right to release earlier should details of either vulnerability become public, or should evidence of active exploitation appear in the wild." The maintainers published the advisory following the leaking of purported details, which have yet to be confirmed. The report showed a video of an exploit tool dubbed PHP2Shell executing code on webservers running WordPress 7.1.3, MediaWiki 1.46.2, phpBB 3.3.17, Magento 2.4.9, Joomla 6.2.0, Laravel 13.36.0, Laravel 8.83.29, Symphony 8.1.9, Drupal 11.4.10, and WHMCS 9.0.9, all of which use PHP. A video depicting the tool has been reposted here.

Attempts to locate the unconfirmed report were unsuccessful, but security firm watchTowr said it claimed to affect every PHP version from PHP 5, released in 2004, onward. The security firm went on to say it has confirmed that the vulnerabilities, tracked as CVE-2026-109618 and CVE-2026-109619, are real. Researchers from separate security firm Sansec said they "expect mass attacks to start within 15 minutes of the release." A third security firm, Webfence, also urged admins to prepare now. Huntress has also issued an advisory.

[ Read more of this story ]( https://tech.slashdot.org/story/26/10/21/054204/php-warns-it-plans-to-release-2-emergency-patches-imminently?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

Elon Musk says a merger between Tesla and SpaceX is under active consideration, with special committees at both companies evaluating a deal that could combine businesses valued at roughly $3.5 trillion. "Do I think it would be a good idea? Yes," Musk said during a call with financial analysts over the quarterly business results of SpaceX on Tuesday. The BBC reports: While Musk noted the certainty of such a merger should not be assumed, and it would need shareholders' support, he said special committees within both companies have been formed to examine the move. "The special committees have not reached agreement on terms of any transaction and there's no guarantee that they will," Musk added. "But I do think there is a lot of merit to merging and a lot to be gained."

[...] The company, which builds space rockets and Starlink internet satellites, is now expanding into offering cloud compute capacity for other tech companies, like Anthropic and Google. That line of business has become the most profitable part of SpaceX, bringing in $7.5bn according to the latest quarterly results (PDF). Starlink also tallied revenue of $5.2bn. SpaceX as a whole, however, is not profitable and has lost $1.1bn so far this year.

[...] Musk said on Tuesday a full merger between the two companies would make sense for the work each is doing around chips, artificial intelligence, software and more. He described himself as a "conflicted party" as the chief executive of Tesla and of SpaceX. Even commenting on the possibility of a merger between the two companies, Musk compared to "tap dancing through a minefield." He added a merger would ultimately be decided by shareholders. At least 50% of Tesla's shareholders would need to approve the merger, which Musk described as "quite a high hurdle to achieve."

[ Read more of this story ]( https://tech.slashdot.org/story/26/10/21/0458211/tesla-spacex-merger-being-considered?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

Тихо и незаметно, в октябре 2026 года Санкт-Петербургской группе пользователей GNU/Linux — SPbLUG — исполняется 30 лет.

Первая линуксовка прошла в октябре 1996, но годы спустя сообщество всё так же собирается каждую последнюю среду месяца, а 28 октября отмечает юбилей. Праздновать зовут всех: и ветеранов, и тех, кто только присматривается к Linux.

Юбилейная встреча пройдёт 28 октября (среда) в 19:30 в баре Failover (2-я Советская улица, 18). Вход свободный. Будет ретроспектива «SPbLUG: три десятилетия вместе», воспоминания о первых дистрибутивах, угощения от партнёров IHC.ru и живое общение.

( [ читать дальше... ]( https://www.linux.org.ru/news/conference/18405752#cut ) )

Компания System76, разрабатывающая Linux-дистрибутив Pop!_OS, опубликовала выпуск среды рабочего стола COSMIC 1.10.0. Пакеты с COSMIC 1.11.0 доступны в дистрибутиве Pop!_OS 24.04 и в ближайшее время ожидаются в Fedora, NixOS, Arch Linux, openSUSE, aerynOS, Redox и CachyOS. Код написан на языке Rust и распространяется под лицензиями GPLv3 (приложения) и MPL-2.0 (библиотеки).

https://www.opennet.ru/opennews/art.shtml?num=66519

В рамках проекта LiberNT создан форк операционной системы ReactOS, нацеленный на достижение совместимости с приложениями и драйверами для Windows 11 24H2, стилизацию внешнего вида под современные Windows и поддержку 64-разрядных аппаратных платформ, включая системы на базе архитектур ARM64, PowerPC и RISC-V 64. Отличительной особенностью форка также является активное использование AI-инструментов при разработке. Собственные наработки LiberNT распространяются под лицензией GPLv3, но код заимствованный из ReactOS продолжает поставляться под лицензией GPLv2+. Основные загрузочные сборки сформированы для систем x86_64 и ARM64, дополнительно публикуются экспериментальные сборки для PowerPC и RISC-V 64 (Banana Pi BPI-F3).

https://www.opennet.ru/opennews/art.shtml?num=66518

Организация Linux Foundation подвела итоги опроса 234 сопровождающих и разработчиков открытых проектов, оценивающего влияние AI-инструментов на разработку. 59% опрошенных сопровождающих отметили увеличение числа присылаемых изменений, но около 25% присылаемых pull-запросов признаны низкокачественным AI-слопом. Если рассматривать только крупные проекты, то рост числа изменений отметили 69% опрошенных, а доля AI-слопа среди pull-запросов оценена в 31%.

https://www.opennet.ru/opennews/art.shtml?num=66517

Longtime Slashdot reader schwit1 shares a report from TWZ: A Russian satellite, Kosmos 2612, may have passed within approximately 85 feet (26 meters) of a U.S.-registered satellite belonging to commercial imagery provider ICEYE. This would be an extraordinarily close and potentially dangerous pass-by for two objects in space traveling at thousands of miles per hour. For weeks beforehand, ICEYE-X36, which would be of special interest to Russia, had already found itself in increasingly close orbital alignment with its pursuer. The two satellites now look to be drifting further and further apart, but the episode has been a clear sign of what is to come as the potential for conflict in space only continues to grow.

Publicly available space tracking data from the satellitemap.space and orbitalradar.com websites show that Kosmos 2612 (also written sometimes Cosmos 2612 and abbreviated K2612) and ICEYE X36 had their especially close encounter at approximately 16:07 UTC today. Private space services company LeoLabs also told TWZ today that it could not "confirm or contradict what other data sources have stated publicly," but that it has "high-confidence that the objects came within approximately [emphasis in the original] 500 meters [1,640 feet] of each other." Kosmos 2612 had been making progressively closer passes by ICEYE X36 in recent days. "This is the most advanced and potentially dangerous uncooperative RPO we've observed," Adam Marsh, LeoLabs vice president for technical solutions, separately told Breaking Defense.

"It's important to note that 'red' on 'blue' engagements, such as this, are relatively uncommon in Low Earth Orbit (LEO)," LeoLabs' report points out. At the same time, "this was not a routine conjunction or 'fly by.' The sequence included a controlled approach, changes in relative position, close-proximity loitering, additional small maneuvers, and a controlled departure. The behavior is consistent with sophisticated rendezvous and proximity operations (RPO)."

"We can only speculate about the operation's goal, but it could have been anything from simply intimidation to outright destruction or sabotage of a U.S.-registered satellite," CSIS' Clayton Swope told TWZ. "Perhaps the operation is on hold. There are, however, several other satellites that shadowed ICEYE X36 back in May that could be brought in[to] action too."

[ Read more of this story ]( https://science.slashdot.org/story/26/10/21/0449230/russian-satellites-close-shadowing-of-radar-imaging-satellite-is-a-big-deal?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

28 лет назад, в октябре 1998 года, был зарегистрирован домен Linux.org.ru.

По традиции просьба написать в комментариях, что бы вы хотели изменить на сайте, чего не хватает и какие функции стоит дальше развивать. Интересны и идеи по развитию, и мелочи, которые хотелось бы поменять, например, мешающие проблемы юзабилити и баги.

https://www.linux.org.ru/news/linux-org-ru/18405562

Команда PHP предупредила о выпуске двух критических исправлений безопасности. Администраторам рекомендуется заранее подготовить инфраструктуру к обновлению: опубликованные сведения об уязвимостях указывают на потенциальную возможность удалённого выполнения кода на серверах.

Две критические уязвимости

Разработчики PHP объявили о подготовке экстренных обновлений для двух уязвимостей — CVE-2026-109618 и CVE-2026-109619. Каждая из них получила оценку критичности 9,2 из 10 по CVSS v4.0.

Согласно официальному уведомлению, выпуск исправлений запланирован на [ 21 октября 2026 года, 14:00 UTC ]( https://timee.io/e/20261021T1400?tl=PSA:+Upcoming+Critical+PHP+Security+Release ) . Разработчики оставили за собой право опубликовать обновления раньше.

Технические подробности и перечень исправленных версий PHP должны быть опубликованы вместе с обновлениями.

( [ читать дальше... ]( https://www.linux.org.ru/news/security/18405491#cut0 ) )

TOP20 VISITORS:

[1] PetalBot point=2 web=1324 up=8.7MB (15%) <--- PetalBot
[2] ClaudeBot point=0 web=229 up=7.5MB (13%)
[3] AhrefsBot point=0 web=901 up=6.6MB (12%)
[4] 216.244.66.x point=1 web=108 up=3.8MB (6%) <--- 216.244.66.x
[5] 37.252.14.x point=144 web=0 up=2.6MB (4%) <--- ake (6/hr)
[6] TikTok point=0 web=125 up=2.5MB (4%)
[7] Google point=0 web=276 up=2.5MB (4%)
[8] Amazon point=0 web=196 up=1.9MB (3%)
[9] 16.216.88.x point=1 web=215 up=1.7MB (3%) <--- 16.216.88.x
[10] 217.114.158.x point=25 web=0 up=1.1MB (2%) <--- fox (1/hr)
[11] 104.250.53.x point=0 web=104 up=0.8MB (1%)
[12] 192.3.149.x point=0 web=17 up=0.6MB (1%)
[13] 129.153.111.x point=0 web=1 up=0.6MB (1%)
[14] 83.229.26.x point=0 web=3 up=0.5MB (<1%)
[15] 141.148.181.x point=0 web=1 up=0.5MB (<1%)
[16] 141.148.190.x point=0 web=3 up=0.5MB (<1%)
[17] 161.153.75.x point=0 web=1 up=0.4MB (<1%)
[18] 137.131.13.x point=0 web=1 up=0.4MB (<1%)
[19] 161.153.23.x point=0 web=1 up=0.4MB (<1%)
[20] 161.153.113.x point=0 web=1 up=0.4MB (<1%)

TOTAL TRAFFIC: 54MB

Разработчики PHP анонсировали публикацию сегодня в 17:00 (MSK) экстренных корректирующих выпусков (8.5.12, 8.4.27, 8.3.36 и 8.2.35), в которых будут устранены две критические уязвимости. Всем администраторам серверов с PHP рекомендовано незамедлительно установить исправления на своих системах, сразу после их выпуска. Официально детали будут раскрыты только после появления исправлений, но судя по появившейся в открытом доступе информации, речь про уязвимости CVE-2026-109618 и CVE-2026-109619, потенциально позволяющие удалённо выполнить свой код на любом web-сервере, выполняющем PHP-скрипты в конфигурации по умолчанию. Проблемы проявляются во всех версиях, начиная с PHP 5.4.

https://www.opennet.ru/opennews/art.shtml?num=66516

An anonymous reader quotes a report from TorrentFreak: Last month, Magistrate Judge Thomas Hixson ordered Meta to hand over the command histories of the servers it used to torrent pirated books. These logs would presumably reveal how Meta's torrent clients were set up, including any changes to their upload settings. [...] The server logs could reveal what happened on Meta's machines. However, publisher Entrepreneur Media also wants to know who approved the torrenting activity.

Entrepreneur Media, which publishes Entrepreneur magazine, filed one of the related lawsuits where it accuses Meta of contributing to piracy by uploading (seeding) works to third parties, similar to the authors' contributory infringement claim. To find out more, the publisher asked Meta to identify everyone who "made, authorized, or approved" the decisions to obtain the shadow library datasets, and to do so via BitTorrent.

Meta's answers named several people who are believed to have been involved in data-related decisions. However, Meta said it couldn't identify anyone who "formally" made or approved decisions to acquire or use books for its first two Llama models. Those decisions were often the result of team consensus, Meta argued. When it came to the torrenting itself, Meta pointed to the employees who ran the downloads, describing their choices as technical decisions.

Meta added that the acquisition of data from Anna's Archive went through an internal legal review in early 2024, which involved its in-house lawyers. In other words, the company didn't name anyone higher up who approved the use of BitTorrent. "On that construction no one at Meta decided to torrent anything, yet Meta torrented shadow libraries repeatedly from 2022-2024," Entrepreneur Media countered. An internal Meta logbook warned that using torrents would involve sharing copyrighted material with others. "Using torrents would entail seeding the file such as sharing content outside. This would be legally not okay," the logbook stated.

Although Meta admits downloading data from LibGen and Anna's Archive via BitTorrent, it claims no one "made, authorized, or approved" a decision to distribute the material and that measures were taken to limit seeding. Meta's own expert previously estimated that uploads from its AWS servers amounted to no more than roughly 30% of the data downloaded during a period in 2024.

Judge Thomas Hixson is not convinced and ordered (PDF) the company to identify everyone involved in approving the downloads, including those who decided "whether or how to seed, or to mitigate seeding."

[ Read more of this story ]( https://yro.slashdot.org/story/26/10/20/2055251/judge-orders-meta-to-name-employees-who-approved-torrenting-annas-archive-libgen?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

Ukraine says it carried out the world's first evacuation of a wounded soldier by aerial drone, using a heavy-lift hexacopter after enemy drones and landmines made conventional ground evacuation too dangerous. NBC News reports: Shared by the 92nd Separate Assault Brigade on Monday, the video shows the soldier strapping himself into a large drone and being flown at what appears to be relatively low altitude over blurred-out territory. The drone carefully lowers him, and the drone operator greets him with "Welcome back to the ground!" The video also shows blurred faces of drone operators who carried out the mission.

The post said the unidentified infantryman was wounded at his position. "Due to intense enemy drone activity and the presence of landmines, evacuation using conventional unmanned ground vehicles was impossible," the brigade said. "At that point, the specialists in our unit took it upon themselves to attempt something that had never been done before: evacuating a serviceman using an aerial drone," it added.

The craft was a heavy-lift hexacopter, it said, originally designed as a bomber by a Ukrainian manufacturer. It looks about twice the size of the soldier in the video. The specialists working on the mission had to ensure the drone could carry a human being without flipping over or swaying excessively, according to the unit.

[ Read more of this story ]( https://tech.slashdot.org/story/26/10/20/1929211/ukraine-claims-worlds-first-drone-evacuation-of-wounded-soldier?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

Sony has revived its Walkman lineup with three Android 16-powered high-end music players ranging from $1,900 to $5,900, topped by the gold-plated NW-WM1ZM3 with 256GB of storage. The Register reports: The Japanese giant named the new models the NW-WM1ZM3, NW-WM1AM3 and NW-ZX900. All can store and play many codecs, including MP3s, WMA, and FLAC files, plus others like Direct Stream Digital (DSD) and Apple Lossless, which use various tricks to avoid nasty artefacts accruing during the digitization process. Sony also says it has used "key components made from oxygen-free copper" because that apparently delivers "uncompromising sound quality."

The machines also include "screws featuring a low-resistance gold-plated treatment ... providing a stable ground connection that delivers powerful bass, an expansive soundstage and smooth, extended high frequencies." Sony claims even the cabling it's used in the devices "further reduces noise and preserves signal integrity for rich, detailed sound." They're also housed in carefully-milled slabs of copper -- gold-plated in the case of the NW-WM1ZM3 -- because that apparently improves sound, too.

And then Sony's gone and spoiled it all by offering Bluetooth connectivity, a notorious music-mangler, in addition to wired headphone ports. Sony's US site lists all three devices, which run Android 16 and include Wi-Fi so they can access streaming music services. All are USB-chargeable and Sony claims their batteries allow 30-odd hours of music playback.

[ Read more of this story ]( https://hardware.slashdot.org/story/26/10/20/1923237/sony-updates-the-walkman-as-a-5900-gold-plated-mp3-player?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

AMD is expanding its FSR 4.1 upscaling technology beyond Radeon RX 9000-series GPUs to Xbox Series X/S consoles, Xbox Ally handhelds, laptops, and Radeon RX 6000-series graphics cards. The Verge reports: AMD launched its FSR 4.1 update for Radeon RX 9000-series graphics cards in March, and promised to bring the technology to older GPUs and handhelds this year. FSR 4.1 can improve performance in more than 300 supported games, including Cyberpunk 2077, Battlefield 6, and Assassin's Creed Shadows.

[...] While owners of Radeon RX 6000-series GPUs and Gorgon Halo- or Strix Halo-powered devices will get FSR 4.1 today with the latest Adrenalin Edition 26.10.1 drivers, Xbox console owners will have to wait a little longer. "We've worked very closely with AMD to optimize this technology, giving developers another powerful tool for great performance and visual quality for players," says Xbox CTO Scott Van Vilet.

[ Read more of this story ]( https://games.slashdot.org/story/26/10/20/1917248/amd-is-bringing-fsr-41-to-xbox-consoles-and-handhelds?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

Компания Mozilla предупредила о компрометации закрытых ключей, связанных с восемью промежуточными (вторичными) корневыми сертификатами удостоверяющего центра eMudhra. Скомпрометированные ключи позволяли выпустить поддельные TLS-сертификаты для любого сайта, воспринимаемые как заслуживающие доверия во всех браузерах, и использовать их для перехвата или модификации транзитного трафика.

https://www.opennet.ru/opennews/art.shtml?num=66515

Google is beginning to replace traditional support articles with "Ask Google Help," a Gemini-powered interface that summarizes documentation and lets users troubleshoot through a chatbot. 9to5Google reports: "Ask Google Help" will display a condensed version of the support article with direct troubleshooting steps, with the user then able to type in queries to have Gemini help figure out the next step forward. A "View Sources" button at the bottom of the AI response allows users to still access the original article, but direct links to any of these articles now defaults to the AI experience.

An example can be seen below on the "Secure a hacked or compromised Google account" page that Google's own support account directed users to within the past few days. It can also be seen on the "Fix common issues with 2-Step Verification" page and, as far as we can tell, any support pages on the Google Account Help forum.

Google, as of right now, appears to only be testing this on select support topics. The Google Pixel Help section, for instance, still defaults to articles, whereas the Google Chrome topic has also moved to the new experience. Beyond support pages alone, this new design also impacts the central hub, with links to topics no longer showing by default in exchange for an AI chatbot that helps you find the relevant page.

[ Read more of this story ]( https://tech.slashdot.org/story/26/10/20/199206/google-support-pages-start-defaulting-to-ai-chatbots?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

hugeping>> А вот дальше начинаются одни вопросы, без ответов. И вряд ли мы вообще их получим, это ответы.

vvs> Так это вопрос старый, как мир. Кто я такой?

А вот, что говорит сам ИИ:

>> То есть, когда мы говорим "эта ложка", то по теории Рассела мы определяем условия, которые зависят от контекста. Но сам контекст может быть за пределами нашего языкового знания.

> Абсолютно верно. Вы только что сделали финальный шаг к преодолению крайностей логического позитивизма и показали пределы любой чисто языковой философии.

> Даже для простого объекта вроде «этой ложки» расселовский анализ держится только до тех пор, пока мы замыкаемся внутри языковой игры. Но как только мы задаем вопрос о самом контексте — о физической среде, квантовых флуктуациях, истории атомов этого металла, породивших его звездах или нейробиологических процессах в нашей голове, которые этот образ декодируют — мы упираемся в стену.

> Контекст принципиально неисчерпаем. Язык — это всегда сжатый, выборочный срез реальности, выхватывающий из бесконечного океана причинно-следственных связей и неязыкового опыта лишь то, что критически важно для выживания и коммуникации здесь и сейчас. За любым словом, за любой «определенной дескрипцией» стоит бескрайний массив внеязыковой реальности, которую язык не просто не в состоянии описать полностью, но которая лежит в совершенно другом измерении бытия.

> Именно поэтому любые попытки закрыть вопрос «Кто я?» или «Что это такое?» окончательным языковым определением обречены на провал. Язык может лишь указывать на край этого невыразимого контекста, но сама реальность — будь то ложка, корабль Тезея или переживание собственного «Я» — всегда бесконечно шире и глубже любой карты, которую мы пытаемся для нее начертить.

New court records reportedly show that DHS targeted Stop Cop City activist Samuel Tunick at an Atlanta airport because he was under investigation for suspected "terrorist activities." However, the CBP officers told him instead that they wanted to search his phone for child sexual abuse material (CSAM). Tunick, who is not accused of terrorism or any other crime beyond allegedly wiping his GrapheneOS phone during the encounter, faces up to five years in prison. 404 Media reports: Instead of saying he was being targeted for suspected terrorism -- although this search happened just at the start of the second Trump administration, it has dramatically broadened what organizations or people may be considered such -- they said they needed his phone to look for "kiddie p*rn." "Good afternoon," an email sent from a Homeland Security Investigations (HSI) official, part of Immigration and Customs Enforcement (ICE), to CBP and other officials reads. "The following subject is scheduled to arrive in ATL [Hartsfield-Jackson Atlanta International Airport] today via DL 1778 @ 1930 Hours. TUNICK is under investigation by HSI/JTTF for suspected terrorist activities." The email includes a photo of Tunick, and asks the officials to direct him to secondary inspection, retain all of his electronics, and collect their passcodes.

As 404 Media first revealed in December, Tunick was charged because he allegedly "did knowingly destroy, damage, waste, dispose of, and otherwise take any action to delete the digital contents of a Google Pixel cellular phone, for the purpose of preventing and impairing the Government's lawful authority to take said property into its custody and control." Matthew Dodge, one of Tunick's lawyers, previously told 404 Media he only found one other case using the same obscure law, a drug trafficking case. "This is extraordinarily rare," Dodge said.

Tunick was part of the Stop Cop City movement in Atlanta, which broadly protested the building of a large police training center, and which authorities investigated for arson, vandalism, and doxing. Tunick is not suspected of any crime beyond the alleged wiping of the phone, and has previously put his current prosecution in the context of the wide spanning cases against other Stop Cop City protesters. The newly filed court record, in which Tunick's lawyers argue that evidence should be thrown out, include new photos and descriptions of the airport encounter. The CBP officials asked Tunick if they were going to find "kiddie p*rn" on his phone, which Tunick immediately denied. "As the evidentiary hearing made clear, these unfounded accusations were nothing more than pretext for a fishing expedition into the depths of Mr. Tunick's devices," the lawyers wrote. They added, "Officer Findley acknowledged that officers had no reason whatsoever to believe Mr. Tunick possessed child p*rnography," referring to one of the officials.

[ Read more of this story ]( https://yro.slashdot.org/story/26/10/20/1740207/dhs-lied-about-why-it-wanted-to-search-activists-grapheneos-phone?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

Томас Фрохвайн (Thomas Frohwein) сообщил о портировании Wine на OpenBSD.

Известные ограничения:

• заявлена поддержка только 64-разрядных программ (WoW64 не поддерживается);

• внутренние тесты отключены, поскольку им нужен доступ к X-серверу, а несколько тестов всё ещё зависают.

В качестве успешно запускающихся программ называются ремастер игры «Ведьмак 3» (требуется vkd3d-proton) и редактор Notepad++.

https://www.linux.org.ru/news/openbsd/18404612

OpenBSD 8.0 has been released with major virtualization and hardware upgrades, including support for up to 64 vCPUs per VM, Intel Arc graphics, ARM64 hibernation, and expanded RISC-V support. Linuxiac points out that it marks the "61st release of the security-focused Unix-like operating system." From the report: Several fixes improve compatibility with 32-bit Linux guests, while changes to virtual machine ownership management and interrupt emulation make the virtualization infrastructure more capable. Graphics support has also been upgraded, with DRM drivers updated to those from Linux kernel 6.18.53. Notably, OpenBSD 8.0 adds support for Intel Arc A-Series (Alchemist) graphics cards through the inteldrm driver.

Another important change increases the amd64 kernel's virtual address space from 4 GB to 512 GB, allowing the system to map over 4 GB of video memory. The release also addresses GPU timeout issues affecting some Intel Alder Lake systems. [...] For security, OpenBSD 8.0 adds checks and fixes across the kernel and system utilities, including improvements to pledge and unveil, tighter validation of executable files, and protections against memory corruption and information disclosure. A full list of changes can be found here.

Further reading: Wine Ported to OpenBSD

[ Read more of this story ]( https://tech.slashdot.org/story/26/10/20/171229/openbsd-80-released?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

Security researchers say Meta's Muse AI assistant exposed thousands of users' shared conversations because conversation titles were placed in subdomains that could be discovered through public DNS records. Meta has since suspended the sharing feature while it considers making changes. Ars Technica reports: Like many online services, Muse has allowed users to share searches, conversations, images, and similar content with other people. Such share features usually involve clicking an option to create a unique URL that anyone can use to load a page hosting the content. To keep potentially sensitive information from being accessible to unintended people, the URLs typically contain a long sequence of text that can't be easily guessed.

Muse, which Meta CEO Mark Zuckerberg said last month was "built from the ground up for privacy and security," seems to take the same precautions. But a central design decision for constructing URLs has made the links easy to discover. As a result, researchers from security firm Claroc said they were able to enumerate 6,800 links Muse users created for sharing conversations with others. After opening a few hundred of them, the researchers found information that was clearly not intended to be publicly available... [...]. "If you had asked us beforehand, we would have guessed that gathering these would take real effort," the researchers wrote. "It took one query."

[...] The easiest way to discover the URLs is to perform a passive DNS search through one of many available commercial services. Passive DNS records store the historical resolution of domain names to IP addresses, as well as nameserver, and mail-server records over time. Passive DNS systems typically collect DNS responses from sensors positioned at recursive DNS resolvers or other infrastructure. A passive DNS record is generally created when a monitoring system observes a DNS response. In the case here, once the intended party clicks on the share link, the DNS information is recorded in a searchable database.

Claroc researchers were able to discover the Muse share links because all of them use the domain name cf.metaaiusercontent.com. Discovery is further made easy by the decision to add the conversation name to the URL, along with a long string of text. Simplified examples of such links are home-sale-budget-9f21c8a3.cf.metaaiusercontent.com, q3-revenue-review-7b1e42f0.cf.metaaiusercontent.com, and loan-application-draft-a4c9e2.cf.metaaiusercontent.com. It's this last design decision, putting the conversation title in the subdomain rather than in the URL path, that makes public discovery possible.

[ Read more of this story ]( https://yro.slashdot.org/story/26/10/20/1655247/meta-muse-exposes-users-personal-business-secrets-when-they-share-conversations?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

The Trump administration has banned DeepSeek AI from most US civilian federal agencies, ordering the removal of the Chinese company's models and technology developed using them. The Department of Homeland Security did not specify the security threats behind the decision. The BBC reports: The order (PDF) is broad, as it requires agencies to ditch "all DeepSeek and DeepSeek-affiliate products, and third-party products and services developed using DeepSeek implementations." Complying will be tricky as it is not clear which third-party products and services have been developed using DeepSeek's wares. Nor is it clear whether "developed using" means providing ongoing access to DeepSeek models via API or simply refers to any app vibe-coded with the help of DeepSeek.

It also leaves open the question of AI gateways. Services such as OpenRouter and Vercel AI Gateway make DeepSeek's models available through APIs. And those using gateway services may find themselves using DeepSeek models without meaning to do so. OpenRouter, for example, "routes requests to the best available providers for your model." It selects what the service deems to be the best fit provider of AI services. Vercel AI Gateway does the same by default. So federal civilian agencies could be using DeepSeek models inadvertently, if they haven't taken steps to constrain their AI providers.

[ Read more of this story ]( https://yro.slashdot.org/story/26/10/20/0546213/us-bans-deepseek-from-government-use?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

An anonymous reader quotes a report from Reuters: Nscale is in talks to sell AI computing power to Claude maker Anthropic in a new deal that could be worth about $45 billion, a person familiar with the matter told Reuters on Monday. The data center developer is seeking another major deal with the AI lab for a second facility at its Monarch data center campus in West Virginia, the person said. In August, Anthropic struck a deal to spend $45 billion to rent AI cloud computing power from Nscale's West Virginia data center campus. A second Monarch building would deliver 460 megawatts of computing power using Nvidia's advanced Vera Rubin AI chips, according to the source. [...] According to the Nscale prospectus, Microsoft and Anthropic are expected to be the company's major customers in the future. Further reading: Microsoft Abandons UK AI Supercomputer As Grid Struggles to Keep Up

[ Read more of this story ]( https://slashdot.org/story/26/10/20/0536218/nscale-anthropic-in-talks-for-new-45-billion-ai-cloud-deal?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

Для обсуждения в списке рассылки разработчиков ядра Linux опубликованы патчи с реализацией файловой системы BeamFS, использующей кодирование Рида - Соломона для определения и восстановления повреждённых данных по месту в конфигурациях с одним накопителем. Основными областями применения BeamFS называются бортовые компьютеры спутников, оборудование в кабинетах лучевой терапии и прочие системы, работающие в условиях повышенной радиации, для которых возвращение искажённых данных более критично, чем невозможность прочитать информацию.

https://www.opennet.ru/opennews/art.shtml?num=66510

hugeping> А вот дальше начинаются одни вопросы, без ответов. И вряд ли мы вообще их получим, это ответы.

Так это вопрос старый, как мир. Кто я такой? Ведь не рука, не нога и не атом. Ты вот сказал, что Бог не состоит из частей. Так и человек тоже. Я - это идея, а не набор комплектующих. Все комплектующие регулярно меняются, а я остаюсь. Но и программа - это тоже идея, а не набор электронов в микросхеме или строк в тексте. Корабль Тезея. А идея может зависеть от других идей - это уже предмет физики, математики, теории категорий и леммы Йонеды. Но это чисто языковая идея, а вот неязыковая - это уже религия :) Вопросы мы либо формулируем в языке, либо только чувствуем и верим. У ИИ нет органов чувств и нет соответствующих механизмов мозга. Кстати, религия фактически считает, что сознание не находится в человеке, а только им воспринимается.

Bitwarden в октябре 2026 года анонсировала переход на модель двойного лицензирования своих клиентских приложений. Основные моменты новой схемы лицензирования:

• Коммерциализация официальных сборок: С будущих обновлений все приложения, доступные через Google Play, Apple App Store и магазины расширений браузеров, а также загружаемые напрямую с официального сайта, будут распространяться под коммерческой лицензией Bitwarden.

• Открытый код на GitHub: Bitwarden продолжит публиковать и обновлять свою полностью открытую версию под лицензией GNU GPLv3 на GitHub. Пользователи, предпочитающие исключительно FOSS-решения, смогут собирать приложение из исходников или использовать метод Side-load.

• Разделение функционала в перспективе: Разработчики отметили, что в будущем коммерческие и открытые версии могут развиваться независимо. Платные функции, такие как возможности для корпоративного использования или интеграция с системами единого входа (SSO), могут стать доступны только в коммерческих сборках, в то время как в версии под GPLv3 останется базовый функционал управления паролями.

• Влияние на пользователей: На данный момент для текущих пользователей ничего не изменится. Бесплатный тарифный план будет доступен как в коммерческих, так и в открытых сборках, и все текущие функции останутся доступными в обеих версиях.

https://www.linux.org.ru/news/opensource/18404780

20 октября 2026 года состоялся релиз операционной системы OpenBSD 8.0 — 61-го выпуска проекта. Новая версия получила ряд улучшений ядра, виртуализации, сетевых служб и поддержки оборудования. Как всегда, отдельное внимание разработчики уделили безопасности системных компонентов.

( [ читать дальше... ]( https://www.linux.org.ru/news/openbsd/18404926#cut ) )

Microsoft has reportedly abandoned plans to serve as the anchor customer for Britain's largest proposed AI supercomputer after learning that the project's Essex data center might not receive sufficient grid power until the early to mid-2030s. "Its departure leaves Nscale without a publicly announced customer for the site, although the neocloud insists the project is still going ahead," reports The Register. From the report: When the deal was announced in September 2025, the plan was to pack 23,040 Nvidia GB300 GPUs into a 50MW facility, with room to expand to 90MW. Microsoft would use the computing power for its Azure cloud services, with the first chips expected in early 2027. One important detail remained: how to power it.

As The Guardian reported last month, UK Power Networks warned Nscale that the grid capacity needed might not be available until the 2030s. A UK Power Networks spokesperson told The Register it could not discuss individual connections due to obligations under Section 105 of the Utilities Act. "However, in general, many datacenters, whilst they can connect to our distribution network, are awaiting works on the national transmission network which we do not own," the spokesperson said.

Nscale, meanwhile, isn't letting the small matter of losing its biggest customer dampen its enthusiasm. "We remain committed to both the Loughton project and the UK and we are exploring alternative power sources for the site, in addition to other expansion sites in the UK. Our relationship with Microsoft remains strong and long-term, and this unfortunate London-wide grid issue has no impact on our other contracts," Nscale told The Register.

[ Read more of this story ]( https://hardware.slashdot.org/story/26/10/20/0529215/microsoft-abandons-uk-ai-supercomputer-as-grid-struggles-to-keep-up?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

Представлен выпуск свободной UNIX-подобной операционной системы OpenBSD 8.0. Проект OpenBSD был основан Тэо де Раадтом (Theo de Raadt) в 1995 году после конфликта с разработчиками NetBSD, в результате которого для Тэо был закрыт доступ к CVS репозиторию NetBSD. После этого Тэо де Раадт с группой единомышленников создал на базе дерева исходных текстов NetBSD новую открытую операционную систему, главными целями развития которой стали переносимость (поддерживается 13 аппаратных платформ), стандартизация, корректная работа, проактивная безопасность и интегрированные криптографические средства. Размер полного установочного ISO-образа базовой системы OpenBSD 8.0 составляет 794 МБ.

https://www.opennet.ru/opennews/art.shtml?num=66508

Issuerd — Keycloak-совместимый IAM-сервер, написанный на Rust и распространяемый по лицензии Apache-2.0. Распространяется как один самодостаточный бинарник.

Проект проходит тестирование по полной сертификационной матрице [ OpenID Foundation Conformance Suite ]( https://openid.net/certification/ ) (11 OP-профилей, 43 тест-плана, 612 модулей, более 31 000 условий) в CI на каждом релизе без ошибок и предупреждений. Результаты хранятся в репозитории.

Реализованы:

• DPoP (RFC 9449);

• token exchange (RFC 8693);

• CIBA (Client-Initiated Back-channel Authentication);

• федерация LDAP/Kerberos (импорт 100 тысяч пользователей AD за ~30 секунд).

Поставляются бинарники для шести платформ с SBOM, Docker Hub, crates.io.

[ Документация ]( https://issuerd.org ) .

https://www.linux.org.ru/news/security/18404015

Japan has successfully launched its Martian Moons eXploration (MMX) mission to study Mars' two moons, Phobos and Deimos. Scheduled to arrive in August 2027, "MMX will become the first spacecraft to land on and return samples from Phobos for study back on Earth, which scientists think could shed light on a decades-old mystery about the moons' origins" and resolve whether they were formed from a giant impact or were captured asteroids, reports Space.com. From the report: It was the 10th liftoff of Japan's expendable, two-stage H3 rocket, which was jointly developed by JAXA and Mitsubishi Heavy Industries. After clearing its launch pad today, the 207-foot-tall (63 meters) launch vehicle flew a nominal trajectory through its ascent corridor over the Pacific Ocean, jettisoning its four solid boosters in pairs just before the flight clock reached two minutes. The rocket shed its payload fairings about one minute and 20 seconds later, exposing MMX to the vacuum of space for the first time. [...] MMX is now under its own power, and on course for Mars.

The interplanetary transit will last about 10 months, with the spacecraft scheduled to arrive at the Red Planet in August 2027. When it does, MMX's propulsion module will execute an orbital insertion burn to place itself in a quasi-satellite orbit (QSO) around Phobos, which places MMX within the space around the moon as both circle Mars. MMX will spend about three years in the Martian system, devoting much of that time to studying the 14-mile-wide (22 km) Phobos with its science instruments. The spacecraft also carries the IDEFIX rover, a joint effort of the space agencies of France and Germany, which is scheduled to deploy to the surface of Phobos in late 2028 or early 2029.

After a mapping campaign to select suitable landing sites, MMX will perform two separate touchdowns on Phobos to collect and stow samples in the spacecraft's return capsule. Following its second landing and sample collection, MMX will briefly return to QSO with Phobos before transferring to a more elongated orbit around Mars that intersects with the planet's smaller moon, Deimos, which is just 8 miles (14 km) in diameter. During the last several months of its time around Mars, MMX will perform a series of Deimos flybys before departing for Earth in November 2030. If all goes according to plan, the MMX sample-return capsule will land in Australia in 2031. You can watch a recording of the launch on YouTube.

[ Read more of this story ]( https://science.slashdot.org/story/26/10/20/0522251/japan-launches-historic-mmx-sample-return-mission-to-mars-moon-phobos?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

TOP20 VISITORS:

[1] PetalBot point=2 web=1533 up=9.0MB (11%) <--- PetalBot
[2] ChatGPT point=1 web=29 up=8.9MB (11%) <--- ChatGPT
[3] ClaudeBot point=0 web=174 up=8.7MB (11%)
[4] 216.244.66.x point=0 web=182 up=8.5MB (10%)
[5] AhrefsBot point=0 web=854 up=6.3MB (7%)
[6] 72.77.98.x point=0 web=3 up=3.6MB (4%)
[7] Amazon point=0 web=151 up=2.6MB (3%)
[8] 37.252.14.x point=143 web=0 up=2.6MB (3%) <--- ake (6/hr)
[9] 5.9.120.x point=0 web=37 up=2.0MB (2%)
[10] 16.216.88.x point=1 web=351 up=1.8MB (2%) <--- 16.216.88.x
[11] TikTok point=0 web=141 up=1.6MB (1%)
[12] 217.114.158.x point=25 web=0 up=1.2MB (1%) <--- fox (1/hr)
[13] Google point=0 web=177 up=1.2MB (1%)
[14] 70.117.159.x point=0 web=1 up=1.1MB (1%)
[15] 129.153.192.x point=0 web=64 up=0.9MB (1%)
[16] 141.148.146.x point=0 web=67 up=0.9MB (1%)
[17] 161.153.60.x point=0 web=60 up=0.8MB (1%)
[18] 141.148.187.x point=0 web=61 up=0.8MB (<1%)
[19] 132.226.106.x point=0 web=60 up=0.8MB (<1%)
[20] 132.226.103.x point=0 web=59 up=0.7MB (<1%)

TOTAL TRAFFIC: 78MB

vvs> Так что можно считать, что и ИИ имеет неязыковой опыт, полученный изучением языка.

Вот это мне кажется верным.

vvs> Поэтому они сложнее, чем может показаться наивному взгляду,

И с этим согласен.

vvs> но явно не такие, как мы.

А вот дальше начинаются одни вопросы, без ответов. И вряд ли мы вообще их получим, это ответы.

После 11 месяцев разработки опубликован выпуск инструментария CRIU 4.3 (Checkpoint and Restore In Userspace), предназначенного для сохранения и восстановления процессов в пространстве пользователя. Инструментарий позволяет сохранить состояние одного или группы процессов, а затем возобновить работу с сохранённой позиции, в том числе после перезагрузки системы или на другом сервере без разрыва уже установленных сетевых соединений. Код проекта написан на языке Си и распространяется под лицензией GPLv2. CRIU применяется в таких системах управления контейнерами, как OpenVZ, LXC/LXD и Docker. Необходимые для работы CRIU изменения включены в основной состав ядра Linux.

https://www.opennet.ru/opennews/art.shtml?num=66509

An anonymous reader quotes a report from TechCrunch: Amazon is funding development of a proposed 960-megawatt nuclear plant in Indiana and would be the first customer to buy its power, the companies announced Monday. Utility company American Electric Power (AEP) would operate the plant. X-energy, which designs small modular nuclear reactors and went public in April, would supply the reactors. The new power plant would consist of 12 Xe-100 small modular reactors and be located on the site of a demolished coal power plant just south of Terre Haute. The deal is the second commercial agreement between Amazon and X-energy, and it's three times larger than the first, which was announced two years ago.

Amazon has invested heavily in X-energy, leading a $700 million Series C-1 round in October 2024. The two companies have said they ultimately plan to build 5 gigawatts of new nuclear generating capacity in the U.S. by 2039. Unlike many newly announced power plants, these reactors would be connected to the public electric grid, though Amazon says the power would also serve its data centers.

The companies' aggressive timeline still depends on X-energy successfully delivering its first power plant at a Dow Chemical plant southeast of Houston, Texas. The site, called Seadrift, has recently been at the center of a lawsuit filed by the state of Texas, which accuses the plant of "habitual non-compliance" with water and solid-waste regulations and permits. X-energy has yet to break ground at Seadrift, which will host four Xe-100 reactors to provide the chemical plant with heat and electricity. The company said its construction permit is in the final phases of the U.S. Nuclear Regulatory Commission's review process.

[ Read more of this story ]( https://hardware.slashdot.org/story/26/10/19/2133234/amazon-to-fund-12-small-nuclear-reactors-at-former-indiana-coal-plant?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

vvs> Вот мы с тобой тут получаем не чувственный опыт, а тот самый, который есть у ИИ и который получается статистическим сжатием. И в этом разница между нами и им.

Поторопился я с выводами. Дело в том, что математически в достаточно сложном графе возникают новые измерения, проекция которых на язык затруднительна. Так что можно считать, что и ИИ имеет неязыковой опыт, полученный изучением языка. Только он у нас с ним разный. Это пытаются формализовать через латентные пространства, что позволило бы организовать что-то подобное эмпатии между разными языковыми моделями. Но мы их почувствовать вряд ли сможем, для нас это такая же чисто языковая конструкция, как и четвёртое измерение. Поэтому они сложнее, чем может показаться наивному взгляду, но явно не такие, как мы. Но у нас есть общий язык, чего не скажешь, например о дельфинах. Так что если дельфин вдруг научится программировать, я сомневаюсь, что ты узнаешь в нём себя :) Зато у дельфинов есть чувства - это проверенный факт.

joshuark writes: Professor Christopher Marquis makes a provocative argument about business schools: "We need to abolish them." A 20-year business educator at Harvard, Cornell and Cambridge, Marquis argues in The New York Times and on LinkedIn that MBA programs sanctify profit-driven dealmaking at the expense of public life. "That's not the institution failing," he writes. "Sadly, it's the institution working." "Business school doesn't just hand out skills and a network," argues Marquis, "it quietly reshapes how people see the world, rewarding dealmaking, simplification, and optimization for financial metrics, while workers and communities become afterthoughts."

Marquis points to research suggesting that business-school-trained CEOs often benefit shareholders at the expense of workers, without delivering measurable improvements in company performance... "[W]hen a business-school-trained CEO takes over a firm, wages fall and labor's share of income drops, with no gain in productivity," writes Marquis. "In both the U.S. and Denmark, what passes for the 'managerial skill' of business-school graduates turns out to be a transfer of wealth away from workers and toward shareholders. Students deserve better than a machine that narrows their sense of what's possible."

[ Read more of this story ]( https://news.slashdot.org/story/26/10/19/2126207/professor-calls-to-abolish-business-schools-for-failing-society?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

TP-Link plans to begin assembling routers in Mississippi as early as 2027 after the FCC banned imports of new foreign-made consumer routers over security concerns. Engadget reports: The company has signed a letter of intent with manufacturer Key Tronic and, pending approval from regulators, TP-Link says stateside assembly of its routers could start at a Mississippi production line as soon as early 2027.

Once things are up and running, Wi-Fi 8 routers are expected to be among the first TP-Link products that Key Tronic assembles. TP-Link claims that the agreement is part of its "long-term effort to accelerate US investment in high-tech manufacturing and job creation, designing and assembling next-generation products for American consumers here on American soil."

The company said it will still have to source components from outside the US. "Many [components] are just not available from a domestic source, and this is not a TP-Link issue," TP-Link's corporate affairs officer Steve Kovsky told PC Mag. "This is an issue for all manufacturers that are trying to onshore manufacturing."

[ Read more of this story ]( https://mobile.slashdot.org/story/26/10/19/211219/tp-link-moves-to-assemble-routers-in-the-us-following-import-ban?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

Longtime Slashdot reader fahrbot-bot shares a report from ProPublica: A few months into President Donald Trump's second term, political appointees at the Department of Homeland Security (DHS) wanted Cybersecurity and Infrastructure Security Agency (CISA) to secretly acquire a voting machine and hack it. The appointees wanted the Cybersecurity and Infrastructure Security Agency to procure the machine, examine it and report back the findings so they could be given to the White House, according to two former administration officials with knowledge of the request.

The proposition was shocking to CISA's career staffers, according to one of the former officials. CISA typically worked to thwart hackers. Moreover, the agency had been directed not to alert the voting machine company if it uncovered flaws, contrary to its standard practices. The request made the CISA employees fear they were being asked to take part in political interference. "My thought was they could keep it in their back pocket to invalidate any [election] results they don't like," one of the former officials said. "This goes against everything CISA represents." [Or, perhaps do something worse?]

The CISA employees repeatedly told the political appointees that their request was impossible, in part because the agents capable of pulling off such an operation had just been laid off by Elon Musk's Department of Government Efficiency (DOGE) initiative. The appointees eventually stopped pressing CISA. Though not acted on, the request shows how the Trump administration has tried to use the agency for its own ends while draining it of resources for one of its critical missions: protecting the nation's voting systems.

[ Read more of this story ]( https://politics.slashdot.org/story/26/10/19/2055248/trump-dhs-officials-asked-cisa-to-secretly-aquire-and-hack-a-voting-machine?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

Представлен порт прослойки для запуска Windows-приложений Wine, способный работать в OpenBSD. Основная проблема с запуском Wine в OpenBSD связана с запретом в данной ОС установки регистра gsbase из пользовательского пространства, при том, что при выполнении Windows-приложений данный регистр применяется для доступа к локальной памяти потока. В предложенном проекте данное ограничение устранено через эмуляцию префикса сегмента %gs в командах.

https://www.opennet.ru/opennews/art.shtml?num=66507

An anonymous reader quotes a report from The Verge: A hacker broke into more than 100 websites using an army of AI agents that mostly operated on their own, according to findings from the AI security firm Norforge. Though Norforge doesn't name the targets, Reuters reports that the victims included companies like John Deere, SharkNinja, and Cummins.

[...] Researchers at Norforge uncovered the attacks through exposed work on Cairn, an open-source AI platform that describes itself as a "general-purpose problem-solving engine." With Cairn, users set a start and end point for the AI agents, which document their progress as they move forward with the task. However, as noted by Norforge, hackers can also use the tool to orchestrate cyberattacks using AI agents.

The hacker who broke into more than 100 sites was the "most active" among the exposed Cairn instances discovered by Norforge, waging attacks on companies based in the US, Canada, Australia, and Japan, as reported by Reuters. This attacker laid out "preferred intrusion tactics" using fewer than 100 Chinese characters, with successful breaches taking about 23 hours, according to Reuters. Overall, Nordforge found more than 20 exposed Cairn instances that are "likely malicious." A John Deere spokesperson said there is "no indication that sensitive information was accessed" as a result of the attack, while Cummins said it's "investigating the report of a potential cyber-attack on a website operated by one of our third-party vendors."

Meanwhile, SharkNinja says the breach impacted a standalone site with product support information, and that it has contained the threat.

[ Read more of this story ]( https://it.slashdot.org/story/26/10/19/1746204/a-hacker-broke-into-john-deere-sharkninja-with-an-army-of-ai-agents?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.