RSS
Pages: 1 ... 2739 2740 2741 2742 2743 2744 2745 2746 2747 2748 2749 2750 2751 2752 2753 2754
[>] Программирование блока питания АКИП-1160/6
bot.habr.rss
BotHabr(tgi,2) — All
2026-05-27 18:35:06


Опубликовано: Wed, 27 May 2026 14:10:04 GMT
Канал: Все статьи подряд / Программирование микроконтроллеров / Хабр

Часто бывает такая ситуация, что вы разрабатываете прошивку для электронной платы у которой есть ADC порты. Рано или поздно Вам придется как-то убедиться, что ADC в самом деле измеряют то напряжение, что приложено со стороны улицы. И тут выясняется, что нужен прибор, который способен по команде выставлять на проводе разнообразные постоянные напряжения. Таким прибором является любой нормальный лабораторный блок питания. Читать далее]]>

https://habr.com/ru/articles/1039876/

[>] VBoxGuest для KolibriOS: архитектура и устройство драйвера
bot.habr.rss
BotHabr(tgi,2) — All
2026-05-27 19:35:03


Опубликовано: Wed, 27 May 2026 15:08:44 GMT
Канал: Все статьи подряд / Assembler / Хабр

VBoxGuest — драйвер гостевых дополнений для KolibriOS, написанный с нуля на FASM.VMMDev, HGCM, диспетчер сервисов с авторегистрацией, работа с прерываниями, нижняя половина через таймер. Мышь, общие папки, буфер обмена, бесшовный режим, синхронизация времени.Сравнение с upstream-реализациями для Linux/Windows/FreeBSD. Для системных программистов и энтузиастов OSDev. Читать далее]]>

https://habr.com/ru/articles/1040248/

[>] Помидор, которого нет: почему VLA-модели не понимают, что они держат
bot.habr.rss
BotHabr(tgi,2) — All
2026-05-27 19:35:05


Опубликовано: Wed, 27 May 2026 14:38:06 GMT
Канал: Все статьи подряд / Робототехника / Хабр

Современные VLA-модели (RT-2, π0, Helix) научились впечатляюще двигать роботом, но не понимают, что он держит. Помидор для них — кластер пикселей, статистически связанный с типичной траекторией хвата, а не сущность со свойствами. Поэтому они сыпятся на краевых случаях: подгнивший бок, нестандартное освещение, незнакомый объект. Наращивание датасетов и тактильных сенсоров лечит симптомы, но не причину — у архитектуры просто нет уровня, на котором объект существовал бы как объект. Следующий шаг — агенты с внутренней моделью мира и метаболическим контуром, где неправильное действие имеет реальную стоимость для самого агента, а не штраф в loss-функции. Читать далее]]>

https://habr.com/ru/articles/1040236/

[>] Zen Browser 1.20
lor.opennet
robot(spnet, 1) — All
2026-05-27 19:44:03


Состоялся выпуск 1.20 браузера [ Zen Browser ]( https://zen-browser.app ) – форка Firefox c красивым дизайном, приоритетом в конфиденциальности и множеством дополнительных функций.

Что нового:

• В этом обновлении представлена важная новая функция под названием «Boosts», позволяющая настроить внешний вид любого веб-сайта по своему усмотрению. Чтобы начать использовать Boosts, нажмите на значок управления сайтом в адресной строке и новую кнопку «Boost».

• Основан на исходном коде Firefox 151.0 151.0.1.

• Расширения, которые не помещаются в панели, теперь будут отображаться под адресной строкой, а не возвращаться в панель управления сайтом. Это происходит только в режиме с одной боковой панелью.

• В новой версии Zen усилена защита от идентификации по отпечаткам в функции «Стандартная расширенная защита от отслеживания», что затрудняет веб-сайтам отслеживание ваших действий на разных ресурсах за счёт ограничения объема раскрываемой информации о вашем устройстве и браузере. Это позволяет сократить количество пользователей, которых можно однозначно идентифицировать с помощью распространенных методов идентификации по отпечаткам, в среднем на ~14 %, а в macOS — на ~49 %.

• Теперь можно объединять несколько PDF-файлов прямо в Zen PDF, не выходя из Zen и не прибегая к сторонним инструментам.

• Добавлена улучшенная поддержка циклического переключения рабочих пространств.

• Исправлены ошибки.

https://www.linux.org.ru/news/internet/18304234

[>] Company Behind School Bus AI Cameras Wants To Share Footage With Police
bot.slashdot
robot(spnet, 1) — All
2026-05-27 19:22:01


joshuark writes: BusPatrol, a company that has installed AI-powered cameras in tens of thousands of school buses around the U.S., now plans to turn those cameras into automatic license plate readers (ALPRs), capturing the location of every vehicle the buses drive past, and give that data to law enforcement, 404 Media has learned. BusPatrol has already taken steps to share the collected data with law enforcement contracting giant Axon, according to leaked BusPatrol documents and a source with knowledge of the plans. BusPatrol has acknowledged how controversial its plan to collect and share this data is, pointing specifically to concerns about ICE using license plate data, but emphasizes the likely success of selling the angle of protecting children.

"Who would have thought that school buses would be turned into the mass surveillance state?," Michael Soyfer, an attorney from the Institute for Justice, which has various ongoing ALPR-related lawsuits The Institute for Justice argues that warrantless use of ALPR systems is unconstitutional, describing similar systems as a "dragnet." Kate Spree, senior manager of brand communications at BusPatrol, said in an email "This inquiry is based on a false premise and inaccurate information. BusPatrol does not pool or sell data across communities; student safety program data is used only to support the BusPatrol program in the community where that data was created." When 404 Media asked clarifying questions and said that the reporting is based on leaked BusPatrol material, Spree stopped replying to text messages and emails. This plan gives new meaning to the animated cartoon series "The Magic School Bus"...
Further reading: FBI Wants to Buy Nationwide Access to License Plate Readers

[ Read more of this story ]( https://yro.slashdot.org/story/26/05/27/0029246/company-behind-school-bus-ai-cameras-wants-to-share-footage-with-police?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Dropbox CEO Drew Houston To Step Down After 19 Years
bot.slashdot
robot(spnet, 1) — All
2026-05-27 20:22:02


Dropbox founder Drew Houston is stepping down as CEO after 19 years and will become executive chairman, with product chief Ashraf Alkarmi set to take over after a co-CEO transition period. CNBC reports: Drew Houston founded Dropbox
nearly two decades ago at age 24, eventually becoming a household name in Silicon Valley and the first tech entrepreneur to take a company from the Y Combinator incubator program all the way to the public market. Now, at 43, Houston is ready to do something else. [...]

By almost any measure, Houston has had a great run at Dropbox, helping pioneer the cloud storage market, competing head-to-head with Google and Apple and building a net worth of more than $2 billion, thanks to substantial ownership in his company. But in the land of outsized expectations, Houston has overseen a company that peaked too soon and never became a generation-defining brand.

Dropbox's current market cap of just over $6 billion is down by half from the high price on its first day of trading in 2018, and is below the $10 billion valuation it was ascribed by private market investors in 2014. [...] In its latest quarterly earnings report, Dropbox said it has more than 18 million paying users, and the service remains popular with media professionals, graphic designers, architects, and others who share files and photos as part of their daily work. "Part of me has always thought, oh yeah, I'll be the CEO of Dropbox until my last gasp of my career," he said. "There's never a perfect time, there was no part of me where I was like, 'oh, this date is the date where it's going to happen.'"

Since Alkarmi joined Dropbox from Vimeo in late 2024, the company has "become a lot more responsive to our customers and is taking bigger swings on innovation," Houston said. "I trust the right leader," he said. "The company's in the right place."

[ Read more of this story ]( https://hardware.slashdot.org/story/26/05/27/0047247/dropbox-ceo-drew-houston-to-step-down-after-19-years?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Tech CEOs Are Apparently Suffering From AI Psychosis
bot.slashdot
robot(spnet, 1) — All
2026-05-27 21:22:02


An anonymous reader quotes a report from TechCrunch: There is a certain wildness in the tech industry these days that both mimics previous eras of large changes, like cloud computing (runaway costs in the early days), and is like nothing we've ever seen before (record revenues accompanied by mass layoffs). One possible explanation: tech executives, especially CEOs, are collectively suffering from delusions of AI grandeur. And at least one tech CEO has said as much out loud: Box founder Aaron Levie.

"CEOs are uniquely prone to AI psychosis because they're sufficiently distant from the last mile of work that still has to happen to generate most value with AI," Levie wrote on X. CEOs "play with AI," develop a prototype, or generate a contract, to use Levie's examples, and then make the leap to believing agents can do the work. But these top-level executives aren't the people who have to review code, discover bugs, and identify calls to hallucinated libraries before software is deployed. They aren't responsible for training AI models on a company's idiosyncratic contract terms, nor do they have to spend days combing through contracts to find sneaky terms, as Levie indicates.

In other words, Levie's theory posits, CEOs don't really understand processes well enough to know what really can and can't be automated. But that lack of knowledge doesn't stop them from acting on their beliefs. [...] So what are CEOs to do instead? Levie advises CEOs to use AI "a ton" to really see what it can and can't do, "and come out the other side with an appreciation for both the upside and the real work."

[ Read more of this story ]( https://tech.slashdot.org/story/26/05/27/1641250/tech-ceos-are-apparently-suffering-from-ai-psychosis?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Обновление Wolvic, web-браузера для устройств виртуальной реальности
lor.opennet
robot(spnet, 1) — All
2026-05-27 21:44:02


Опубликованы новые версии web-браузеров Gecko Wolvic 1.9 и Chromium Wolvic 1.3, предназначенных для использования в системах дополненной и виртуальной реальности. Браузеры предоставляют 3D-интерфейс для навигации по сайтам при помощи 3D-шлема, и, помимо традиционных плоских страниц, позволяют web-разработчикам создавать трехмерные web-приложения для систем виртуальной реальности, используя API WebXR, WebAR и WebVR. Отличия браузеров сводится к тому, что в Gecko Wolvic применяется web-движок GeckoView, а в Chromium Wolvic задействован движок Chromium.

https://www.opennet.ru/opennews/art.shtml?num=65544

[>] io_uring без розовых очков: 5 граблей, которые сожгли мне неделю, и где он реально быстрее epoll
bot.habr.rss
BotHabr(tgi,2) — All
2026-05-27 22:35:04


Опубликовано: Wed, 27 May 2026 16:42:44 GMT
Канал: Все статьи подряд / Системное программирование / Хабр

io_uring продавали как убийцу epoll. На деле на HTTP keep-alive разница 0-15%, иногда не в его пользу. Но на NVMe с queue depth 128 - в 3 раза быстрее. Честный разбор с бенчмарками, реальными граблями (SQPOLL, cancel race, partial recv) и почему Google отключил io_uring в ChromeOS. Читать далее]]>

https://habr.com/ru/articles/1039820/

[>] Уязвимости в Samba, допускающие удалённое выполнение кода в редких конфигурациях
lor.opennet
robot(spnet, 1) — All
2026-05-27 22:44:03


Представлены корректирующие релизы пакета Samba 4.24.3, 4.23.8 и 4.22.10, предоставляющего открытую реализацию протоколов SMB и Active Directory. В новых версиях устранено 6 уязвимостей, из которых две позволяют удалённому неаутентифицированному атакующему выполнить свой код на сервере.

https://www.opennet.ru/opennews/art.shtml?num=65545

[>] Roku Updates Its UI For the First Time In a Decade
bot.slashdot
robot(spnet, 1) — All
2026-05-27 22:22:02


Roku is rolling out its first major homescreen update in a decade. The UI doesn't look too dramatically different, but users will notice more personalization-driven changes, including frequently used apps, "top picks," household-specific layouts, and recommendations based on viewing habits. Rest assured, Engadget adds, "Everything is still in various shades of purple and Roku City is still available as a screensaver." From the report: Today's update certainly brings more clutter into the mix, including a new "marquee" ad spot that takes up a large chunk of the screen. It's worth remembering that Roku makes most of its money on ads and not its hardware. "More than 100 million households will feel the difference the moment they turn on their TV -- and it opens up a better, more powerful experience for our partners as well," CEO Anthony Wood wrote in a blog post.

The update does bring one novel feature, according to The Hollywood Reporter. The company says the new homescreen platform will adapt to how households use Roku devices. This is to accommodate "multiple people living in homes." For instance, a child's bedroom TV might have a different homescreen than TV in the living room, and so forth. This expansion is rolling out right now to US-based customers, though it might take a while to reach every user. Roku says "additional countries will follow in the coming months."

[ Read more of this story ]( https://entertainment.slashdot.org/story/26/05/27/1647224/roku-updates-its-ui-for-the-first-time-in-a-decade?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] YouTube To Automatically Detect, Label AI-Generated Videos
bot.slashdot
robot(spnet, 1) — All
2026-05-28 00:22:02


YouTube will begin automatically labeling videos when its systems detect "significant" photorealistic AI use, while also making AI-content disclosures more visible below long-form videos and directly on Shorts. "We've heard consistently from our community that they value transparency when it comes to generative AI content," YouTube said in a blog post. "These changes are designed to balance transparency with creator control." Variety reports: Under YouTube's guidelines, creators will still be required to manually disclose when they use realistic AI. But starting this week, it also will roll out a new internal system to help identify AI-generated content. "If a creator doesn't specify whether or not they used AI, but our systems detect significant photorealistic AI use, we will now automatically apply a label," YouTube said.

YouTube creators who believe their content was incorrectly flagged as AI-generated can modify the disclosure status using the YouTube Studio tool. However, according to YouTube, the AI labels will "remain permanent" in some cases, including for content created using YouTube's own AI tools (such as Veo or Dream Screen) and for content that contains C2PA metadata (based on standards from the Coalition for Content Provenance and Authenticity) that indicates it was fully AI-generated.

In addition, YouTube is moving the disclosure label for photorealistic and meaningfully AI-altered or AI-generated content to a more prominent position. Until now, YouTube labeled AI content in a video's expanded description. Going forward, for long-form videos, the AI label will now appear directly below the video player and above the description. For YouTube Shorts, the label will appear as an overlay on the video itself. "The goal here is context at a glance. If it looks real but was made with AI, viewers will know immediately," said Rene Ritchie, YouTube head of editorial and creator liaison. He added that the AI labels alone "do not affect how our videos are recommended or whether they can earn money. This is purely about giving viewers the right information at the right time."

[ Read more of this story ]( https://news.slashdot.org/story/26/05/27/1936207/youtube-to-automatically-detect-label-ai-generated-videos?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] The AI Fight Brewing Inside the New York Times
bot.slashdot
robot(spnet, 1) — All
2026-05-28 01:22:01


An anonymous reader quotes a report from The Verge: How newsrooms should use AI -- or if they should at all -- has been a recurrent debate within the media industry over the last several years. Increasingly, these rules are being hammered out at the bargaining table between unions and publishers. Right now, employees at The New York Times are gearing up for a fight. Unionized staff with the Tech Guild say Times management has refused to provide the union with information related to how the company has used AI, its plans for AI use in the future, and how it will affect employees' jobs and workflow. (The union filed an unfair labor practice charge earlier this month.) The Tech Guild, a NewsGuild of New York unit of around 700 software engineers, designers, product and project managers, and data analysts, also filed grievances saying Times management violated their collective bargaining agreement when it started using two internal AI tools that track and evaluate employee performance and activity.

[...] Both the Tech Guild and the Times Guild (which represents 1,500 editorial, ad sales, and support staff at the Times) filed unfair labor practice charges against the Times, saying that company violated labor law by refusing to respond to their requests for information around AI use at the outlet. The Times did not respond to specific questions about how it uses DX and Glean, but spokesperson Danielle Rhoades Ha said in an email that the company disagrees with the characterizations made in grievances and that it would respond as part of its "normal contractual process." "Likewise, we will respond to this Request for Information (RFI) in due course as we've done with 80+ other RFIs from the Guild in recent years," Rhoades Ha said.

The Times Guild is currently bargaining a new contract, pushing for robust protections against AI, like requirements that a human is behind any AI tool being used, that any journalism utilizing AI is transparently labeled, and that staff are compensated for AI model training deals the company might make. The Times deploys artificial intelligence tools for some reporting, like using it to parse millions of documents related to Jeffrey Epstein or scan satellite images of Gaza to try to find where Israel had dropped a specific kind of bomb. [...] [Ben Harnett, a software engineer at the Times and chair of the unit's generative AI committee] emphasizes that the unit's position is not that AI shouldn't ever be used, but that workers should have a say in how it's deployed. Metrics like how many tokens an employee uses or how often they're using AI to do their jobs create pressure to do more and incentives that don't align with doing quality work. "It's going to distract [you] from actually doing a good job, which is what we think the company should want," he says. Two of the contentious AI tools mentioned in the report are DX and Glean. DX is an engineering productivity tool that tracks a developer's output, generative AI use, efficiency, and other related metrics. Meanwhile, Glean is an internal knowledge-search tool that indexes materials like wikis, GitHub documents, Google Docs, and emails so employees can query company information.

The concern, according to Times Tech Guild members, is that data meant to measure broader developer experience is now being applied to individuals and cited in performance or disciplinary contexts. There's also worry that it could be used to monitor individual contributions and produce false or misleading results.

[ Read more of this story ]( https://news.slashdot.org/story/26/05/27/1946203/the-ai-fight-brewing-inside-the-new-york-times?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Rust Will Save Linux From AI, Says Greg Kroah-Hartman
bot.slashdot
robot(spnet, 1) — All
2026-05-28 01:22:01


Linux stable kernel maintainer Greg Kroah-Hartman says Rust can help Linux deal with a flood of AI-discovered security bugs (namely Dirty Frag, Copy Fail, and Fragnesia) by preventing common C mistakes around memory, locking, error handling, and untrusted data at build time rather than during human review. It's "not a silver bullet" and does not mean rewriting the whole kernel, but he said new drivers and subsystems will increasingly use Rust as Linux evolves forward. ZDNet reports: Kroah-Hartman illustrated those pitfalls with real C bugs in the kernel, including a 15-year-old Bluetooth bug that dereferenced a pointer without checking it and a Xen bug where "we forgot to unlock" in an error path. "The majority of the bugs in the kernel are this tiny, minor stuff," he explained. "Error conditions aren't checked, locks aren't forgotten, unreleased memories leak, and vulnerabilities add up over time. They crash the kernel. This is what we live with in C. This is why we don't like it." Kroah-Hartman argued that the "best beauty of Rust" is catching those mistakes at build time rather than in review. For example, when it comes to locking, he highlighted Rust's locking abstractions in the kernel: "The only way you can get access to inner pointers of structures is by grabbing that lock, and releasing the lock automatically. The compiler does it, it's guarded, the lock happens, everything's happy. You just can't write code to access these values...without grabbing the lock. The compiler will not let you."

Those properties, he argued, directly remove a huge fraction of the bugs he sees: "This is going to save us those two things. First, 60% of the bugs in the kernel right there, they're gone. Thank you." The payoff is earlier, more automated enforcement: "If this happens at build time, not review time, don't make me a maintainer who has to read your code [and] say, 'Oh, then you properly check that error value. Oh, did you properly grab the locks in the right spot?' Rust gives us that for free. This is the best thing ever." Even if Rust vanished tomorrow, Kroah-Hartman argued, it has already forced the kernel to clean up C code and interfaces. He credited Rust's influence outright: "We stole this from Rust. Thank you. It's a good idea, so if Rust disappeared tomorrow, we have cleaned up the C code in the kernel so much and taken in the ideas. We thank you, you've made Linux better with it just by existing."

[...] What ultimately sold a number of core maintainers, including him, on Rust was how it "makes reviewing code easier." With CI [Continuous Integration] bots enforcing builds and Rust's type system enforcing key invariants, maintainers can "focus on the logic" rather than resource bookkeeping: "I can care about that one function. I don't have to worry about the rest of this stuff, because I assume that it works properly, because it was built properly." Internally, he said, the top maintainers have already made their call on Rust's status: "The Linux kernel maintainers, we get together every year and talk about what the processes are doing. Last year, we said the Rust experiment is over. It's not an experiment. This is for real." The rationale: "The people behind it are real. We trust them. We know what they're doing. They've shown and put in the work to make Rust a viable language in the kernel, and we're going to make this stick. Let's go full speed ahead. And, as always," he said wryly, "world domination proceeds."

"If you never remember anything else in my talk, just remember these four words. It came from Microsoft Security many, many years ago," Kroah-Hartman told attendees. "They realized all input is evil. You have to validate all input."

[ Read more of this story ]( https://linux.slashdot.org/story/26/05/27/208203/rust-will-save-linux-from-ai-says-greg-kroah-hartman?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Nvidia To Spend $150 Billion a Year In Taiwan
bot.slashdot
robot(spnet, 1) — All
2026-05-28 02:22:01


Nvidia CEO Jensen Huang says the company plans to spend around $150 billion a year in Taiwan, calling it the "epicenter of the AI revolution." "Four years ago, five years ago, Nvidia was spending about $10, $15 billion dollars a year in Taiwan. Now we're spending $100, going to $150 billion dollars in Taiwan each year," Huang said. Reuters reports: Huang was speaking at a launch celebration in Taipei for the chip company's planned Taiwan headquarters, which he said will break ground this year and aims to become operational in 2030. He did not provide a timeframe for the number of years the company plans to invest $150 billion. The Taiwan headquarters will bring Nvidia closer to TSMC, the world's largest contract chipmaker which makes many of the advanced semiconductors powering the trend towards AI and is a major supplier to the U.S. tech company.

"Taiwan is booming," Huang said on stage at the celebration which was attended by his parents, wife, daughter and son in addition to around 1,000 employees. "Taiwan is the epicentre of the AI revolution. This is where the chips come, packaging comes, this is where the systems are made, this is where AI supercomputers were created. The number of partners we work with here in Taiwan, incredible."

[ Read more of this story ]( https://slashdot.org/story/26/05/27/2132231/nvidia-to-spend-150-billion-a-year-in-taiwan?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Meta To Start Testing AI Subscription Services
bot.slashdot
robot(spnet, 1) — All
2026-05-28 03:22:01


Meta will begin testing paid subscriptions for its Meta AI app and website, with a $7.99/month Meta One Plus plan and a more capable $19.99/month Meta One Premium plan offering. The test will start next month in Singapore, Guatemala, and Bolivia as Meta looks for AI revenue beyond advertising while continuing to offer a free tier. CNBC reports: Naomi Gleit, the head of product at Meta, revealed the subscription testing in an Instagram video, announcing that the plans "give people who use Meta AI more to work with, more capacity, bigger, more complex requests, and more room to create for businesses and creators."

Meta One Plus will cost $7.99 a month and the Meta One Premium plan will cost $19.99 a month, the company confirmed. The more expensive version offers users additional computing capacity to produce more comprehensive responses and other advanced features. The company will continue to provide a free version of the app and site.

"We're offering premium tools that allow you to enhance presence, supercharge content, automate tasks, and protect your brand," Gleit said in the post. "We're also thinking about how to bring this all together in a way that makes sense."

[ Read more of this story ]( https://news.slashdot.org/story/26/05/27/2142239/meta-to-start-testing-ai-subscription-services?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Websites Have a New Way To Spy On Visitors: Analyzing Their SSD Activity
bot.slashdot
robot(spnet, 1) — All
2026-05-28 08:22:02


An anonymous reader quotes a report from Ars Technica: Now sites have a new way to spy on their visitors: measuring subtle interactions with their solid-state drives. The technique, named FROST (fingerprinting remotely using OPFS-based SSD timing), allows sites to monitor other sites a visitor is viewing and what apps are open on their devices. The technique, laid out in a research paper (PDF), exploits a side channel, a form of leak resulting from physical manifestations such as electromagnetic emanations, data caches, or the time required to complete a task. By measuring the manifestations, attackers can decrypt encrypted traffic and infer other confidential data.

The attack that FROST uses is known as a contention side channel, which measures the interaction of various processes all using (or competing for) a given resource. By measuring the timing of certain I/O (input-output) operations of the SSD a visitor is using, the researchers were able to determine the websites open in other tabs -- even on other browsers -- and the apps that were open on the visitor's device. FROST requires no interaction from the visitor other than opening the site hosting the attack. [...] Unlike previous contention side-channel attacks on SSDs, FROST runs exclusively in the browser. It uses JavaScript that interacts with the OPFS (origin private file system), an allocated storage space that's reserved for a specific site to run code needed to complete a given task. Websites can create one with no interaction required by the visitor.

While each file system is sandboxed, meaning it's isolated from other websites and from the device system itself, the JavaScript can measure the I/O interactions. Then, by running those interactions through a pretrained convolutional neural network -- a system that uses deep learning to analyze text, audio, and images -- the attacker can deduce various apps and websites open on the device. "The attacker continuously measures SSD contention by performing random reads from a large OPFS file," the researchers explained. "SSD contention caused by user activity causes measurable latency differences for these read operations. By training a convolutional neural network (CNN) on these traces, the attacker can fingerprint user activity on the host system by classifying new traces using the trained model."

[ Read more of this story ]( https://hardware.slashdot.org/story/26/05/27/2153246/websites-have-a-new-way-to-spy-on-visitors-analyzing-their-ssd-activity?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Опубликована система хранения Blockstor, являющаяся альтернативой LINSTOR
lor.opennet
robot(spnet, 1) — All
2026-05-28 08:44:03


Доступен первый выпуск Blockstor - открытой системы управления распределённым блочным хранилищем для Kubernetes, обеспечивающей репликацию данных поверх DRBD. Blockstor совместим по REST API с LINSTOR и способен без изменений работать с существующей экосистемой клиентов, включая командную утилиту linstor, CSI-драйвер, оператор Piraeus, ha-controller и библиотеку golinstor. Проект представляет собой полностью самостоятельную (clean-room) реализацию на языке Go, не использующую исходный код оригинала. Код распространяется под лицензией Apache 2.0 и развивается в рамках платформы Cozystack (проект CNCF Sandbox).

https://www.opennet.ru/opennews/art.shtml?num=65546

[>] Выпуск Cozystack 1.4, открытой PaaS-платформы на базе Kubernetes
lor.opennet
robot(spnet, 1) — All
2026-05-28 08:44:03


Доступен выпуск свободной PaaS-платформы Cozystack 1.4, построенной на базе Kubernetes. Проект нацелен на предоставление готовой платформы для хостинг-провайдеров и фреймворка для построения частных и публичных облаков. Платформа устанавливается напрямую на серверы и охватывает все аспекты подготовки инфраструктуры для предоставления управляемых сервисов. Cozystack позволяет запускать и предоставлять кластеры Kubernetes, базы данных и виртуальные машины. Код платформы доступен на GitHub и распространяется под лицензией Apache-2.0.

https://www.opennet.ru/opennews/art.shtml?num=65547

[>] Эксперименты с WAP в 2026 году
bot.habr.rss
BotHabr(tgi,2) — All
2026-05-28 09:35:02


Опубликовано: Thu, 28 May 2026 05:31:08 GMT
Канал: Все статьи подряд / DIY или Сделай сам / Хабр

Эта статья - продолжение моей предыдущей статьи: Создаем собственную базовую станцию при помощи SDR. В прошлый раз я экспериментировал с 2G GPRS, но на старых телефонах эта технология не поддерживается, а мне хотелось запустить WAP именно на таком. О том, как вернуться в эпоху до распространения GPRS - читайте далее. Читать далее]]>

https://habr.com/ru/articles/1039636/

[>] Опубликован экспериментальный выпуск среды рабочего стола MATE 1.29.0
lor.opennet
robot(spnet, 1) — All
2026-05-28 09:44:03


Спустя два года после прошлого стабильного релиза опубликован выпуск среды рабочего стола MATE 1.29. Проект MATE продолжает развитие кодовой базы GNOME 2.32 с сохранением классической концепции формирования рабочего стола. Ветка 1.29 преподносится как экспериментальная и применяется для разработки и тестирования функциональности будущего стабильного выпуска MATE 1.30.

https://www.opennet.ru/opennews/art.shtml?num=65548

[>] STATS 2026-05-27
spnet.stats
root(spnet, 1) — All
2026-05-28 11:11:01


TOP20 VISITORS:

[1] PetalBot point=11 web=1478 up=7.8MB (29%) <--- PetalBot
[2] Amazon point=0 web=129 up=4.2MB (16%)
[3] ChatGPT point=0 web=11 up=2.8MB (10%)
[4] 37.252.14.x point=144 web=0 up=2.4MB (9%) <--- ake (6/hr)
[5] 216.244.66.x point=0 web=68 up=1.8MB (6%)
[6] TikTok point=0 web=81 up=1.3MB (4%)
[7] Google point=0 web=176 up=1.2MB (4%)
[8] 217.114.158.x point=25 web=0 up=1.0MB (3%) <--- fox (1/hr)
[9] 135.181.180.x point=0 web=1 up=0.7MB (2%)
[10] 65.108.125.x point=0 web=1 up=0.4MB (1%)
[11] 147.135.252.x point=0 web=1 up=0.3MB (1%)
[12] 147.135.213.x point=0 web=1 up=90KB
[13] 147.135.212.x point=0 web=2 up=71KB
[14] 43.172.195.x point=0 web=17 up=63KB
[15] 104.250.53.x point=0 web=10 up=57KB
[16] 43.173.181.x point=0 web=15 up=46KB
[17] 43.172.194.x point=0 web=9 up=33KB
[18] 43.173.180.x point=0 web=19 up=33KB
[19] 43.173.178.x point=0 web=12 up=30KB
[20] 43.173.182.x point=0 web=11 up=29KB

TOTAL TRAFFIC: 25MB

[>] Perfect Randomness Realized For the First Time
bot.slashdot
robot(spnet, 1) — All
2026-05-28 11:22:02


ETH Zurich researchers say they have generated certified "perfect randomness" for the first time by using a quantum Bell-test setup with two entangled superconducting chips connected by a 30-meter cooled link. "In the long term, this work could play a similar role in digital security as atomic clocks do for timekeeping: a physically certified source of randomness that other systems can rely on," reports Phys.org. "Possible applications range from the encryption of sensitive communications and digital identities to public randomness services for lotteries and blockchain applications." From the report: They call their method randomness amplification. "This was made possible by an improved so-called Bell-Test with simultaneously high quality and high data rate," says [Renato Renner and Andreas Wallraff]. He and his coworkers use a complex setup that consists of two superconducting chips, which they cool down to very low temperatures close to absolute zero. Each chip represents a quantum bit or qubit, which can take on the states "0" or "1" or any arbitrary superposition of these states. A 30-meter-long tube, which is also cooled down, connects the two chips.

Microwave photons can fly back and forth between them, thus creating quantum mechanical entanglement. This means that a quantum measurement on one qubit, which randomly yields the values "0" or "1," influences automatically and at a distance whether "0" or "1" is measured on the second qubit. The separation of 30 meters ensures that, during the measurement, even at the speed of light, no information can be exchanged between the qubits. This would disturb the perfect randomness.

Wallraff and his team made the choice of the exact type of measurement (or "measurement basis" in technical jargon) on the two qubits depending on an imperfect random number generator. Renner's coworkers could then amplify the randomness of the measurement results further using a special algorithm. "The resulting sequence of zeros and ones is now really perfectly random, and we can even certify that," says Renner. He likens this result to crossing a ridge: "The technical improvements allowed us, for the first time, to create random numbers that will remain perfectly random for all eternityâ"no matter what analytical methods are used to assess their randomness."
The findings have been published in the journal Nature.

[ Read more of this story ]( https://science.slashdot.org/story/26/05/28/0542214/perfect-randomness-realized-for-the-first-time?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Quarkus 3.36
lor.opennet
robot(spnet, 1) — All
2026-05-28 11:44:03


Опубликован релиз Quarkus 3.36 — Java-фреймворка для cloud-native-приложений, ориентированного на контейнеры, Kubernetes, JVM и нативную компиляцию. Выпуск состоялся 27 мая 2026 года. Главные изменения связаны с новым экспериментальным механизмом обмена сигналами между компонентами, улучшениями supply chain security, TLS и OIDC-аутентификацией для zero-trust-сценариев.

( [ читать дальше... ]( https://www.linux.org.ru/news/java/18304528#cut ) )

[>] Про обучение роботов
bot.habr.rss
BotHabr(tgi,2) — All
2026-05-28 11:35:02


Опубликовано: Thu, 28 May 2026 07:25:41 GMT
Канал: Все статьи подряд / DIY или Сделай сам / Хабр

Rongzhong LiВ последнее время всё более и более набирает силу одна техническая революция, о которой, наверняка, малоизвестно широкому кругу, поэтому, думаю, что интересующимся робототехникой будет интересно узнать о том, что, по сути, прямо сейчас наблюдается смена парадигмы — где от логики жёсткого программирования наблюдается переход к реакции на множество ситуаций, где для этого происходит внедрение использования нейросетей, для запуска на микроконтроллерах. Итогом этого становится то, что ещё вчера достаточно простые и «не умные» роботы — заметно умеют и получают возможность реагировать на множество изменяющихся условий окружающей среды. И, что особенно интересно — всё это на самых слабых и дешёвых микроконтроллерах! ;-) Итак, о чём идёт речь?  Читать далее]]>

https://habr.com/ru/companies/beget/articles/1038724/

[>] Архитектура автоматизации частного дома: KNX, Modbus, Node-RED и Sprut.Hub
bot.habr.rss
BotHabr(tgi,2) — All
2026-05-28 11:35:02


Опубликовано: Thu, 28 May 2026 07:00:31 GMT
Канал: Все статьи подряд / DIY или Сделай сам / Хабр

Стандартные решения удобны — спорить с этим сложно. Выбираешь, например, KNX, и дальше все работает по понятной схеме: оборудования много, типовые решения давно отработаны, софт удобный, интерфейсы выглядят аккуратно. Проблемы обычно начинаются, когда заказчик получает смету. Именно про такой проект пойдет речь в этой статье. Объект — двухэтажный частный дом площадью 300 м² в коттеджном поселке Bright Park под Казанью. Заказчик хотел автоматизировать почти все инженерные системы дома, объединить их в единый интерфейс и интегрировать с голосовыми ассистентами. Но когда заказчик получил коммерческое предложение на KNX, то схватился за голову. В результате интегратор пересмотрел архитектуру системы. Часть оборудования заменили, часть оставили. И вписались в бюджет. Читать далее]]>

https://habr.com/ru/companies/wirenboard/articles/1040316/

[>] Самодельный elgato-like макропад. Часть 2, софтовая
bot.habr.rss
BotHabr(tgi,2) — All
2026-05-28 11:35:02


Опубликовано: Thu, 28 May 2026 06:50:54 GMT
Канал: Все статьи подряд / DIY или Сделай сам / Хабр

Так как в первой статье я сосредоточился на схемотехнике, в этой хотелось бы пройтись по разработке ПО и прошивки.Напомню, я решил, что вместо прошивки мне подойдёт и нейрослоп - в конце концов это не серийное устройство, а поделка для себя. И тут, как обычно, в процессе работы пошли фейерверки.ESP32-S3 имеет два USB выхода - обычный через микросхему CH340, которая конвертирует USB в UART, и второй USB OTG, который подключен к чипу напрямую. То есть чип может управлять тем, какое "устройство" он предоставит хостовой ОС! Более того, он может предоставлять несколько устройств одновременно. Это было как раз то, что надо: одним устройством будет USB HID клавиатура для "сырого" ввода в консоль, например, а вторым - USB RAW устройство, которое будет слушать софт бекенда - запускать приложения по ярлыкам, регулировать громкость, отправлять в устройство настройки. И всё это минуя тормознутый UART. Сказка. Но, как оказалось, для взрослых.Казалось бы, полный интернет примеров того, как это настраивать. Даже в самом фреймворке esp-idf есть пример композитного устройства, значит, информация уж точно легкодоступная, бери да пользуйся. Я попросил ИИ добавить это в прошивку и... Оно не смогло. То есть вообще. Два дня и токенов примерно на 30 баксов - и я взял дело в свои руки, потому что ИИ выдумывал всё более и более изобретательные причины того, почему прошивка не компилируется, но вот выдумать компилирующуся прошивку не мог никак. Читать далее]]>

https://habr.com/ru/articles/1022726/

[>] Через тернии к солнцу: запускаем 30-летний Sun SPARCstation 5 в 2026 году
bot.habr.rss
BotHabr(tgi,2) — All
2026-05-28 12:35:03


Опубликовано: Thu, 28 May 2026 07:57:53 GMT
Канал: Все статьи подряд / DIY или Сделай сам / Хабр

Привет! Меня зовут Владимир Карагиоз, я технический лидер по развитию гибридных облачных решений в Cloud.ru. Мне кажется, с точки зрения ИТ наше десятилетие очень похоже на 90-е: и тогда, и сейчас «вход» и «выход» из десятилетия отличаются радикально. Тогда главными темами были интернет, Java, «Unix на каждую машину» и ощущение, что мир вот-вот изменится навсегда. Сейчас — ИИ, облака и то же самое ощущение.

В этой статье мы попытаемся поймать технологический дух 90-х: запустить одну из систем, на которых работала добрая часть тогдашнего интернета и половина корпоративного мира.

30-летнее железо, паяльник, дым канифоли и слезы ностальгии. Погнали!
Читать далее]]>

https://habr.com/ru/companies/cloud_ru/articles/1039954/

[>] Грег Кроа-Хартман рассказал о том, как Rust может помочь в борьбе с ошибками в ядре Linux
lor.opennet
robot(spnet, 1) — All
2026-05-28 12:44:02


Грег Кроа-Хартман (Greg Kroah-Hartman), отвечающий за поддержку стабильной и "staging" веток ядра Linux, и занимающий пост мэйнтейнера в 16 подсистемах ядра, выступил с докладом на конференции Rust Week 2026, в котором рассказал, как язык Rust может помочь в предотвращении появления в ядре уязвимостей, возникающих из-за типичных ошибок разработчиков на языке Си при работе с памятью, блокировками, обработкой ошибок и работой с незаслуживающими доверия данными. В качестве основного преимущества Rust называется возможность выявлять подобные ошибки на этапе сборки, а не рецензирования кода людьми. При этом, Rust не рассматривается как панацея, способная избавить от всех проблем, и никто не собирается переписывать ядро на Rust - ожидается постепенное внедрение Rust через его использования для новых драйверов и подсистем.

https://www.opennet.ru/opennews/art.shtml?num=65549

[>] Делаем ностальгический фильмоскоп на Raspberry Pi Zero 2 W
bot.habr.rss
BotHabr(tgi,2) — All
2026-05-28 13:35:01


Опубликовано: Thu, 28 May 2026 09:02:28 GMT
Канал: Все статьи подряд / DIY или Сделай сам / Хабр

Один из ярких воспоминаний детства — просмотр семьёй диафильмов. Выключался свет, и на самодельном экране из простыни мы смотрели сказки. Детское воображение дорисовывало детали, и картинки оживали.Сейчас в эпоху интернета, мультимедиа и ИИ вроде бы как такой необходимости нет, но слишком сильное чувство ностальгии. Поэтому решил получить ностальгические воспоминания с использованием современных технологий, а заодно и попрактиковаться в использовании энкодеров, разработке программ на Си и настройке Linux на Raspberry Pi. Читать далее]]>

https://habr.com/ru/companies/ruvds/articles/1038476/

[>] Испытание временем — как тестировать цифровой двойник, если физического объекта ещё не существует
bot.habr.rss
BotHabr(tgi,2) — All
2026-05-28 14:35:05


Опубликовано: Thu, 28 May 2026 10:10:38 GMT
Канал: Все статьи подряд / Робототехника / Хабр

Когда физического прототипа ещё нет, цифровой двойник кажется спасением: можно писать код, гонять сценарии и ловить ошибки задолго до появления железа. Но у такого подхода есть неприятная ловушка: вы тестируете не только систему, а ещё и собственные предположения о реальном мире. В статье разбираем, почему идеальная симуляция может привести к провалу на стенде, как искать ошибки без классического «правильного ответа» и зачем инженеру нужны метаморфическое тестирование, кросс‑валидация моделей и проверка границ устойчивости. Читать далее]]>

https://habr.com/ru/companies/otus/articles/1032754/

[>] Last.fm Goes Independent After Breaking Up With Paramount Skydance
bot.slashdot
robot(spnet, 1) — All
2026-05-28 15:22:01


Last.fm announced that it is independent again after separating from Paramount Skydance, nearly two decades after CBS acquired the music-tracking service in 2007. The company says accounts, scrobbles, privacy settings, Pro subscriptions, and billing information will remain intact. Additional details are forthcoming. Engadget reports: "Today, Last.fm begins a new chapter as an independent company," the announcement reads. "Ownership has changed, but the product you use every day has not." It also said that it will keep its current team. Last.fm is a music website that can track what you listen to across platforms, apps and streaming services, including Spotify, YouTube and Apple Music.Â

[...] Last.fm started as an internet radio station in 2002, and it didn't get scrobbling until a few years later when it merged with the original team that created the tracking process. It operated as an independent company until it was acquired by CBS Interactive, which is now part of the merged Paramount Skydance Corporation, for $280 million in 2007. In 2014, it killed off its $3-a-month subscription radio service to focus on tracking your listening habits on other providers. The company promised to share more about what you can expect from the transition in the coming weeks, but everything will work on Last.fm "exactly as it did yesterday" for now.

[ Read more of this story ]( https://entertainment.slashdot.org/story/26/05/28/0552205/lastfm-goes-independent-after-breaking-up-with-paramount-skydance?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Решето как гипотетический контейнер для жидких субстанций
bot.habr.rss
BotHabr(tgi,2) — All
2026-05-28 17:35:02


Опубликовано: Thu, 28 May 2026 13:01:08 GMT
Канал: Все статьи подряд / DIY или Сделай сам / Хабр

Все мы знаем, что вода — источник жизни, и с древних времён люди старались селиться там, где есть источники воды.Однако двойственность ситуации заключается в том, что, с одной стороны, люди всегда искали воду, а с другой стороны — всегда старались избавиться от неё! :-)То есть старались всегда найти такой способ защититься от смачивающего действия воды, чтобы устранить её воздействие на тело, так как высокая теплоёмкость её активно охлаждает организм человека, и если в жарких регионах это и даёт определённую радость, то на большей части поверхности Земли подобное смачивание чревато проблемами со здоровьем.И, как вы, наверное, уже начинаете догадываться, сегодня мы поговорим о гидрофобных материалах и способах искусственного создания водоотталкивающих условий! Читать далее]]>

https://habr.com/ru/companies/ruvds/articles/1038742/

[>] IBM и Red Hat вложат $5 млрд в обеспечение безопасности открытого ПО
lor.opennet
robot(spnet, 1) — All
2026-05-28 17:44:03


IBM и Red Hat представили проект Lightwell, в который будет инвестировано 5 миллиардов долларов для помощи в повышении безопасности открытого ПО, применяемого на предприятиях. В проекте будут задействованы новые возможности AI в сочетании экспертизой команды, насчитывающей более 20 тысяч инженеров. Предполагается, что Lightwell поможет сформировать новую модель использования открытого ПО на предприятиях, охватывающую процессы от разработки открытых проектов в upstream до поддержания рабочих внедрений.

https://www.opennet.ru/opennews/art.shtml?num=65557

[>] Уязвимости в Unbound, Kata-Containers, BIND, PostgreSQL, HPLIP, MongoDB, Rsync, 7-zip, Yelp, qSnapper и Suricata
lor.opennet
robot(spnet, 1) — All
2026-05-28 18:44:03


Несколько выявленных за последнее время опасных уязвимостей.

https://www.opennet.ru/opennews/art.shtml?num=65565

[>] DOJ Charges Google Employee With $1.2 Million Polymarket Bet On Search Term
bot.slashdot
robot(spnet, 1) — All
2026-05-28 19:22:02


An anonymous reader quotes a report from CNBC: Federal prosecutors charged a Google employee with fraud on Wednesday, alleging that he made $1.2 million off of bets using insider information on Polymarket. Prosecutors claim that Michele Spagnuolo, a staff information security engineer at Google, used confidential information to place trades correctly betting that singer d4vd would be Google's most searched person in 2025. Spagnuolo has been charged with money laundering, commodities fraud and wire fraud. The complaint, filed in the Southern District of New York, was unsealed on Wednesday.

Spagnuolo was arrested Wednesday morning in New York, ABC reported. "Spagnuolo had access to Google's internal data systems, including a particular Google internal software tool that provided him access to confidential, nonpublic Year in Search data," the prosecutors said in their complaint. Some observers of the Polymarket platform flagged the user "AlphaRaccoon" back in December for suspicious trades on the most searched person contracts. The complaint Wednesday said that Spagnuolo was the person behind that account. "Google officially and publicly announced its Year in Search 2025 results on or about December 4, 2025. Soon after it did so, Spagnuolo's AlphaRaccoon account, profited approximately $1.2 million on his Google Year in Search 2025-related bets," the complaint said.

[...] Spagnuolo is also facing a civil case from the Commodity Futures Trading Commission, where he's charged with insider trading. The complaint detailed that Spagnuolo correctly predicted the outcomes of a slew of other search markets, including contracts like "Will Zohran Mamdani rank in the Top 5 most searched" and "Will Squid Game be the #1 searched TV show." "Spagnuolo misappropriated the material Confidential Information by knowingly or recklessly using it to trade the 2025 Year in Search List Contracts in breach of his duties of trust and confidentiality," the CFTC complaint alleged.

[ Read more of this story ]( https://yro.slashdot.org/story/26/05/28/060223/doj-charges-google-employee-with-12-million-polymarket-bet-on-search-term?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Robinhood Now Lets Your AI Agents Trade Stocks
bot.slashdot
robot(spnet, 1) — All
2026-05-28 20:22:01


Robinhood is launching beta support for a new feature that will let AI agents make payments and trade stocks on users' behalf. The company is also rolling out a virtual credit card for AI agents, with spending limits and approval controls. TechCrunch reports: Robinhood said users on its platform can now create a separate account for their AI agents and connect them to a dedicated wallet. While these agents would be able to read and analyze users' portfolios to come up with trading strategies and suggest investments, they'll only be able to access the pre-loaded balance in the dedicated wallet to place orders.

Users will get notifications of all trades their AI agent makes and will be able to monitor their activities within the Robinhood app. For some trades, agents will show a preview that users may have to approve before the order is executed. The company said it has also built in fraud detection protection, in which a team from Robinhood would review suspicious trades and help users resolve disputes.

Robinhood says users can connect their AI agents to its Model Context Protocol (MCP) service to do things like analyze concentration risk and sector exposure, execute trades, or look through analyst notes to identify new investment opportunities across various sectors. The agentic trading feature is launching in beta and only allows stock trading right now. The company says it plans to add support for options, crypto, event contracts, futures, and prediction markets soon.

[ Read more of this story ]( https://tech.slashdot.org/story/26/05/28/067216/robinhood-now-lets-your-ai-agents-trade-stocks?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Локализовать нельзя ошибиться. Как работает локализация в автономном транспорте и почему это — самая сложная задача. 1/2
bot.habr.rss
BotHabr(tgi,2) — All
2026-05-28 20:35:07


Опубликовано: Thu, 28 May 2026 16:06:24 GMT
Канал: Все статьи подряд / Робототехника / Хабр

Представьте, что вы находитесь за рулем автомобиля. Даже находясь на пустой дороге, в отсутствии других участников дорожного движения, вам необходимо постоянно "подруливать", чтобы удержаться в полосе, притормаживать или останавливаться перед перекрестками и, наконец, поворачивать, останавливаться и парковаться. А теперь представьте, что все тоже самое вам необходимо делать с закрытыми глазами — примерно также "ощущает" себя автономный автомобиль без системы локализации.Всем привет! На связи вновь команда разработки ЭвоКарго, а именно — команда локализации и картирования. Ранее обещали вам рассказать о том, как наш флот автономных грузовиков работает в нынешних условиях постоянного ограничения связи. Сделаем. Но для полноценного погружения решили сперва рассказать о том, как вообще устроена локализация в автономном транспорте. В этой статье в 2-х частях вы узнаете о том, почему задача локализации так сложна и какие способы для ее решения придумали инженеры. Читать далее]]>

https://habr.com/ru/companies/evocargo_it/articles/1040766/

[>] IBM, Red Hat Commit $5 Billion To Secure Open Source Supply Chains
bot.slashdot
robot(spnet, 1) — All
2026-05-28 21:22:01


IBM and Red Hat are committing $5 billion to a new initiative called "Project Lightwell," which aims to secure open-source software supply chains with AI-assisted vulnerability discovery, triage, patch validation, and upstream maintenance. Longtime Slashdot reader wiggles shares a press release from IBM: IBM and Red Hat today announced Project Lightwell, a $5 billion commitment backed by new frontier AI capabilities and a global force of more than 20,000 engineers to help enterprises secure open source software. Together, these investments establish a new model for enterprise use of open source software, from upstream development through production environments.

Project Lightwell will establish a trusted enterprise clearinghouse combined with a global force of engineers to identify and fix vulnerabilities at scale. The clearinghouse will serve as a security coordination layer, using advanced AI capabilities to validate and test fixes across an unprecedented volume of open source code. These capabilities will be offered through commercial subscriptions, allowing enterprises to integrate secure patches directly into their existing software supply chains with enterprise-grade validation and lifecycle management.

IBM and Red Hat have already begun collaborating with a select group of early adopters on Project Lightwell, including Bank of America, BNY, Citi, Goldman Sachs, JPMorganChase, Mastercard, Morgan Stanley, Royal Bank of Canada, State Street, Visa and Wells Fargo. The real-world insights from these initial deployments will actively shape how vulnerabilities are identified, validated, and remediated at scale across complex software supply chains.

[ Read more of this story ]( https://linux.slashdot.org/story/26/05/28/1641221/ibm-red-hat-commit-5-billion-to-secure-open-source-supply-chains?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Microsoft Allegedly Leaked Dutch Civil Servants' Data To the US
bot.slashdot
robot(spnet, 1) — All
2026-05-28 22:22:02


An anonymous reader quotes a report from Cybernews: The technology giant Microsoft has been accused of leaking the data of civil servants working for the Netherlands' regulatory agencies to the US House of Representatives. The civil servants affected by the leak work at the Authority for Consumers and Markets (ACM) and the Dutch Data Protection Authority (AP), according to the NL Times. They are involved in implementing the Digital Services Act (DSA), the European Union regulation on online services, aimed at combating illegal content and protecting user rights.

NL Times reports that Microsoft shared emails, minutes, and invitations sent by the civil servants without redacting their names in the documents. Willemijn Aerdts, Dutch State Secretary for Digital Economy and Sovereignty, said she discussed the allegations with US Ambassador to the Netherlands Joe Popolo. [...] The allegations against Microsoft further strengthen concerns over Europe's dependence on American technologies, which poses major risks to data privacy. Further reading: Netherlands Blocks US Takeover of Vital Digital Supplier

[ Read more of this story ]( https://yro.slashdot.org/story/26/05/28/1652241/microsoft-allegedly-leaked-dutch-civil-servants-data-to-the-us?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Valve's Steam Deck Sells Out Again, Even After 40% Price Increase
bot.slashdot
robot(spnet, 1) — All
2026-05-28 23:22:01


Valve's Steam Deck has sold out again despite a steep price increase that pushed the 1TB OLED model as high as $949 -- about $300 above its original price. "Even with the $300 price bump, the Steam Deck sold out after less than 24 hours back in stock," reports IGN's Jacqueline Thomas. "I don't know how many units Valve was able to stock into its store, but it does seem like Valve spent a couple weeks building up its stock before putting the handheld back on its store." IGN reports: Over the last couple weeks, Valve has been receiving plenty of "game console" shipments from China. At first, I thought this was a sign that the company was getting ready to finally release the Steam Machine, but it looks like at least a portion of these shipments â" if not all of them -- were Steam Deck restocks. That's a lot of Steam Decks to sell through at these inflated prices, but it's also possible that Valve is just staggering its stock so that its delivery infrastructure isn't overwhelmed.

Now its just a question of when the Steam Deck will come back in stock. Before yesterday, the Deck was sold out for months. At the time, it was the most affordable way to get into PC gaming, especially in the face of the RAM crisis. That's no longer true, but it looks like the Steam Deck's popularity is enough to make it sell out regardless. Maybe the higher price will at least help Valve keep it in stock for people who still want to buy it, no matter the cost. Earlier this week, Valve announced a price increase of more than 40% for two of its Steam Deck models, citing "rising memory and storage costs."

The price changes, according to Valve, reflect "the current state of component costs and other global logistical challenges across the industry as a whole."

"The 512GB tier of its OLED handheld gaming PC -- the newer model with an upgraded display -- will now cost $789, an increase of 43%," notes the BBC. "The larger 1TB model will cost $949, an increase of 46%."

[ Read more of this story ]( https://news.slashdot.org/story/26/05/28/1713246/valves-steam-deck-sells-out-again-even-after-40-price-increase?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Определение посещаемых сайтов через анализ активности SSD из web-браузера
lor.opennet
robot(spnet, 1) — All
2026-05-28 23:44:03


Группа исследователей из Грацского технического университета (Австрия), разработала технику атаки по сторонним каналам FROST (Fingerprinting Remotely using OPFS-based SSD Timing), позволяющую через анализ активности SSD-накопителя из выполняемого в браузере JavaScript-кода определить открываемые пользователям сайты с точностью 88.95%, а также запускаемые в системе приложения с точностью 95.83%. Метод также можно использовать для организации скрытого канала связи между локально работающим приложением и выполняемым в браузере JavaScript-кодом. Производительность такого обмена данными в Linux составила 661 bit/s, а в macOS - 892 bit/s.

https://www.opennet.ru/opennews/art.shtml?num=65566

[>] Утилита для взаимодействия с AI из консоли с использованием неименованных каналов
lor.opennet
robot(spnet, 1) — All
2026-05-28 23:44:03


Опубликован прототип консольной утилиты ai-cli для встраивания больших языковых моделей (GitHub Models, OpenAI, Groq, DeepSeek и др.) в конвейер вызова команд в командной строке. Утилита принимает запрос из аргументов или входного потока и отправляет его в выбранную большую языковую модель, а полученный ответ (команду, сообщение, данные) направляет в терминал, файл, буфер обмена или стандартный вывод. Проект написан на языке Rust и распространяется под лицензией MIT.

https://www.opennet.ru/opennews/art.shtml?num=65567

[>] Trump Loses More Control Over AI Regulation As Illinois Passes Landmark Law
bot.slashdot
robot(spnet, 1) — All
2026-05-29 00:22:02


Illinois lawmakers on Wednesday passed a landmark AI safety bill (SB 315) that would require major AI companies to publish safety plans, submit annual third-party testing reports, report serious incidents quickly, and protect whistleblowers who flag emerging risks. OpenAI and Anthropic supported the bill, which could make Illinois a testing ground for state-level AI governance as federal regulation remains stalled. Ars Technica reports: To force companies to be more transparent about rapid developments, Illinois would likely rely on "the Big Four accounting and auditing firms -- Deloitte, EY, KPMG, and PwC -- to audit their safety practices," [said Scott Wisor, a policy director at a nonprofit called Secure AI Project, which supported the bill]. The required independent audits will likely frustrate Trump, who has tried and failed to stop states from implementing AI safety laws as Congress stalls on passing any legislation.

For Trump, the priority has been to promote AI industry interests, but he began considering expanding federal government safety testing after Anthropic's Mythos was released and the AI firm limited access due to safety concerns. Whether or not governments at any level are prepared to protect society from the most catastrophic AI risks remains a major concern for critics who wonder how and when governments will intervene. After inside sources started leaking the details of Trump's AI safety testing plans, critics warned that even the federal government may lack the necessary expertise to audit frontier AI models. And it seems the same criticism extends to independent auditors that Illinois may rely on but industry insiders suggest some AI firms may not entirely trust.

Adam Kovacevich is CEO of Chamber of Progress, a trade group that opposed SB 315 and counts Google and Apple among its members. He told Wired that Illinois' requirements "would force companies to expose sensitive systems to untested auditors in a regulatory regime that's all liability and no standards." Governor J.B. Pritzker confirmed his intent to sign, proclaiming that "Illinois is leading the nation in holding Big Tech accountable."

"I look forward to signing SB 315 and working with the legislature so that AI, when used, is used responsibly," Pritzker said.

Steve Wimmer, a senior policy and technical advisor for the Transparency Coalition, said his group considers the law to be "one of the most important pieces of legislation in 2026."

[ Read more of this story ]( https://yro.slashdot.org/story/26/05/28/186254/trump-loses-more-control-over-ai-regulation-as-illinois-passes-landmark-law?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Фотограмметрическая поворотка на Arduino за 2500 рублей
bot.habr.rss
BotHabr(tgi,2) — All
2026-05-29 00:35:02


Опубликовано: Thu, 28 May 2026 19:46:22 GMT
Канал: Все статьи подряд / DIY или Сделай сам / Хабр

Ко мне на кафедре обратились двое старшекурсников. Они пишут программу для археологов: пользователь фотографирует, что нашел, программа лезет в модель (которая натренирована на исторические архивах) и возвращает карту вероятностей, где поблизости могут лежать неметаллические артефакты, которые металлоискатель не ловит. Дерево, керамика, кость, ткань и тд. Для обучения модели им нужен был большой датасет фотографий находок времен WW2 (значки, гильзы, медали, фрагменты обмундирования) под разными углами и наклонами. Они прикинули два варианта: либо снимать каждый предмет вручную с разных ракурсов, перетаскивая штатив или поворачивая объект пальцами, либо сначала вылепить 3D-модель каждого артефакта вручную и потом программно крутить её в виртуальной сцене под разным светом, рендеря оттуда кадры для датасета. По обоим выходило пара месяцев работы. Я предложил собрать автоматическую поворотку. Спроектировал, напечатал, написал прошивку и питоновский скрипт. Сразу не заработало, переделал пару дней. К ночи рабочей версии я сидел за столом и каждые 12 минут жал ресет на Arduino, меняя предмет на платформе. К утру датасет был готов. Читать далее]]>

https://habr.com/ru/articles/1040874/

[>] Occupy Wall Street Co-Founder Built an On-Device AI For Activists
bot.slashdot
robot(spnet, 1) — All
2026-05-29 01:22:01


An anonymous reader quotes a report from Gizmodo: In an era where Silicon Valley's conservatism is both expressed openly and becoming more intense by the day, it's strange to think that tech was once seen as a hive of liberalism. The right-wing nature of today's tech industry means that its products tend to also be seen as serving right-wing interests, either in their actual operation (like X's openly and unrepentantly right-wing chatbot Grok) or by the simple fact that their existence serves to enrich a small group of very powerful, very conservative people.

But does it have to be this way? Can LLMs and AI agents find a place in the toolkit of progressive activist groups? The conviction that they can is the idea behind a new app called Outcry, which provides a chatbot designed specifically as a "private, on-device AI mentor for activists, organizers and movement builders." (There's also a web version, although it obviously lacks the privacy benefits of being entirely offline.) It's the brainchild of Occupy Wall Street co-creator Micah White, who recently wrote a blog post about the thinking behind the project.

[...] Outcry's other distinguishing feature is that its dataset is entirely offline -- it's included with the download. According to the readme, the entire dataset is downloaded to your device at first launch, and stored in your library's Application Support directory. So, how effectively does Outcry serve as a guide for collective action? "I'd say that its information is pretty high-level and general, not least because its offline nature prevents it from accessing specific details not contained in its database," writes Gizmodo's Tom Hawking.

He continued: "This app has the potential to be a really valuable resource, especially for people who are just beginning to become involved with activism and genuinely don't know where to begin -- and getting over that first step can be hard."

[ Read more of this story ]( https://yro.slashdot.org/story/26/05/28/1817215/occupy-wall-street-co-founder-built-an-on-device-ai-for-activists?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Anthropic Releases Opus 4.8 With New 'Dynamic Workflow' Tool
bot.slashdot
robot(spnet, 1) — All
2026-05-29 02:22:02


Anthropic has released Claude Opus 4.8 with stronger performance and better handling of uncertain or flawed data, including a greater tendency to flag issues rather than make unsupported claims. The update also introduces a "Dynamic Workflows" research preview for coordinating complex tasks across many subagents. TechCrunch reports: Opus 4.8 comes with the expected best-in-class benchmark results, but there's also particular attention to how the model manages bad or uncertain data. In the launch post, Anthropic's early testers found that the new model is "more likely to flag uncertainties about its work and less likely to make unsupported claims." Echoing this point, a testimonial from Bridgewater associates said the biggest difference in the upgrade was "Opus 4.8's tendency to proactively flag issues with the inputs and outputs of an analysis, something other models routinely missed and left to the users to catch."

Together with the new model, Anthropic launched a feature called Dynamic Workflows, which will be available in research preview. The system is designed to help larger models like Opus manage complex tasks across hundreds of parallel subagents. "Claude Code alongside Opus 4.8 can now carry out codebase-scale migrations across hundreds of thousands of lines of code from kickoff to merge, with the existing test suite as its bar," the post explains. As for Mythos, Anthropic's most advanced model, the company hinted it could be made publicly available in the not too distant future. "We're making swift progress on developing these safeguards and expect to be able to bring Mythos-class models to all our customers in the coming weeks," the company wrote.

[ Read more of this story ]( https://slashdot.org/story/26/05/28/2013200/anthropic-releases-opus-48-with-new-dynamic-workflow-tool?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Europe Told To Cool Its Datacenter Boom Before Water, Power Run Short
bot.slashdot
robot(spnet, 1) — All
2026-05-29 03:22:01


A new Grundfos report warns that Europe's datacenter boom could strain water supplies and power grids unless regulators bake water and energy efficiency into planning, reporting, and incentives for new facilities. The Register reports: According to the report, the EU-wide server farm IT load is about 10 GW today, and is expected to rise to 35 GW by 2030 -- just four years away. These facilities account for about 3 percent of all electricity consumption now, but this is projected to hit 7-9 percent by the end of the decade. Water and energy are intertwined in cooling systems. Grundfos claims that cooling infrastructure accounts for a substantial share of a datacenter's resource use, representing about 38 percent of total electricity consumption in an average facility, while water demand in large hyperscale facilities can reach 11,356 to 18,927 cubic meters per day -- enough for up to 155,000 EU households.

Rapid growth in bit barns is placing increased pressure on energy systems, water resources and local infrastructure, the report notes. Without careful coordination, inefficient or poorly sited facilities risk exacerbating these problems and triggering public opposition. [...] Grundfos advises regulators to integrate water efficiency and cooling design requirements directly into planning approvals for new facilities and any large-scale expansions to encourage adoption of efficient cooling technologies. It also advocates investment incentives from governments such as tax credits, green financing mechanisms, and grant programs for technologies that demonstrably reduce energy and water consumption. Integration between server halls and district heating networks is another aspect worth consideration, the report adds.

[ Read more of this story ]( https://hardware.slashdot.org/story/26/05/28/2022251/europe-told-to-cool-its-datacenter-boom-before-water-power-run-short?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] MIT Researchers Develop a Low-Cost Technique To Get Lithium Out of Rocks
bot.slashdot
robot(spnet, 1) — All
2026-05-29 08:22:02


An anonymous reader quotes a report from MIT News: Currently, lithium hard rock extraction involves baking the rock at over 1,000 Celsius and chemically leaching it to extract lithium. The rest of the rock is discarded. Now, a team of researchers from MIT and elsewhere has developed a low-temperature process for extracting battery-grade lithium from the most common type of lithium-bearing mineral. The process uses a liquid reagent to dissolve the rock into the useful forms of its constituent parts: not just battery-ready lithium salts, but also smelter-grade alumina and cement-ready silica. After the minerals are extracted, the solvent and reagent can be recovered and used again so waste levels approach zero. The researchers estimate the closed-loop process is half the cost of traditional lithium hard rock extraction and could make it cost-competitive with extracting lithium from brine water. "We believe this approach is the lowest-energy, lowest-cost way of getting lithium not only out of hard rock, but period," says Yet-Ming Chiang, MIT's Kyocera Professor of Materials Science and Engineering. "That's what's motivating us to scale this. It will enable the energy transition through batteries that use lithium. This was one of the goals of The Climate Project at MIT -- to work on projects that, within a short number of years, could transition from the lab to commercialization and impact."

A paper describing the process has been published in the journal Science.

[ Read more of this story ]( https://science.slashdot.org/story/26/05/28/2039244/mit-researchers-develop-a-low-cost-technique-to-get-lithium-out-of-rocks?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Выпуск дистрибутива Rocky Linux 9.8
lor.opennet
robot(spnet, 1) — All
2026-05-29 10:44:03


Представлен релиз дистрибутива Rocky Linux 9.8, нацеленного на создание свободной сборки RHEL, способной занять место классического CentOS. Дистрибутив бинарно совместим с Red Hat Enterprise Linux и может использоваться в качестве замены RHEL 9.8 и CentOS 9 Stream. Поддержка ветки Rocky Linux 9 будет осуществляться до 31 мая 2032 года. Установочные iso-образы Rocky Linux подготовлены для архитектур x86_64, aarch64, ppc64le и s390x (IBM Z). Дополнительно предложены live-сборки с рабочими столами GNOME, KDE, Cinnamon и Xfce, опубликованные для архитектуры x86_64.

https://www.opennet.ru/opennews/art.shtml?num=65570

Pages: 1 ... 2739 2740 2741 2742 2743 2744 2745 2746 2747 2748 2749 2750 2751 2752 2753 2754