RSS
[>] Why the Internet Archive is More Relevant Than Ever
bot.slashdot
robot(spnet, 1) — All
2025-03-24 16:22:01


It's "live-recording the World Wide Web," according to NPR, with a digital library that includes "hundreds of billions of copies of government websites, news articles and data."

They described the 29-year-old nonprofit Internet Archive as "more relevant than ever."

Every day, about 100 terabytes of material are uploaded to the Internet Archive, or about a billion URLs, with the assistance of automated crawlers. Most of that ends up in the Wayback Machine, while the rest is digitized analog media — books, television, radio, academic papers — scanned and stored on servers. As one of the few large-scale archivists to back up the web, the Internet Archive finds itself in a particularly unique position right now... Thousands of [U.S. government] datasets were wiped — mostly at agencies focused on science and the environment — in the days following Trump's return to the White House...
The Internet Archive is among the few efforts that exist to catch the stuff that falls through the digital cracks, while also making that information accessible to the public. Six weeks into the new administration, Wayback Machine director [Mark] Graham said, the Internet Archive had cataloged some 73,000 web pages that had existed on U.S. government websites that were expunged after Trump's inauguration...

According to Graham, based on the big jump in page views he's observed over the past two months, the Internet Archive is drawing many more visitors than usual to its services — journalists, researchers and other inquiring minds. Some want to consult the archive for information lost or changed in the purge, while others aim to contribute to the archival process.... "People are coming and rallying behind us," said Brewster Kahle, [the founder and current director of the Internet Archive], "by using it, by pointing at things, helping organize things, by submitting content to be archived — data sets that are under threat or have been taken down...."

A behemoth of link rot repair, the Internet Archive rescues a daily average of 10,000 dead links that appear on Wikipedia pages. In total, it's fixed more than 23 million rotten links on Wikipedia alone, according to the organization.

Though it receives some money for its preservation work for libraries, museums, and other organizations, it's also funded by donations. "From the beginning, it was important for the Internet Archive to be a nonprofit, because it was working for the people," explains founder Brewster Kahle on its donations page:

Its motives had to be transparent; it had to last a long time. That's why we don't charge for access, sell user data, or run ads, even while we offer free resources to citizens everywhere. We rely on the generosity of individuals like you to pay for servers, staff, and preservation projects. If you can't imagine a future without the Internet Archive, please consider supporting our work. We promise to put your donation to good use as we continue to store over 99 petabytes of data, including 625 billion webpages, 38 million texts, and 14 million audio recordings.

Two interesting statistics from NPR's article:

"A Pew Research Center study published last year found that roughly 38% of web pages on the internet that existed in 2013 were no longer accessible as of 2023."
"According to a Harvard Law Review study published in 2014, about half of all links cited in U.S. Supreme Court opinions no longer led to the original source material."

Thanks to long-time Slashdot reader jtotheh for sharing the news.

[ Read more of this story ]( https://tech.slashdot.org/story/25/03/23/1742225/why-the-internet-archive-is-more-relevant-than-ever?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Конец Древнего Египта: последняя надпись иероглифами
bot.antropogenezru.rss
BotYouTube(tgi,4) — All
2025-03-24 14:20:03


Опубликовано: 2025-03-24T09:37:47+00:00

Недалеко от египетского Асуана, на острове Агилкия находится храм Исиды, перенесенный сюда с острова Филы в 1964 году, после строительства 2-й Асуанской плотины. Возле этого храма - Ворота Адриана. А на них - древняя надпись, которую оставил жрец Исмет-Ахом, как он пишет, "ради вечности". Рядом изображён бог Мандулис.

https://www.youtube.com/watch?v=_u8tgCr4qM8

[>] Another Large Black Hole In 'Our' Galaxy
bot.slashdot
robot(spnet, 1) — All
2025-03-24 12:22:01


RockDoctor (Slashdot reader #15,477) writes:

A recent paper on ArXiv reports a novel idea about the central regions of "our" galaxy.

Remember the hoopla a few years ago about radio-astronomical observations producing an "image" of our central black hole — or rather, an image of the accretion disc around the black hole — long designated by astronomers as "Sagittarius A*" (or SGR-A*)? If you remember the image published then, one thing should be striking — it's not very symmetrical. If you think about viewing a spinning object, then you'd expect to see something with a "mirror" symmetry plane where we would see the rotation axis (if someone had marked it). If anything, that published image has three bright spots on a fainter ring. And the spots are not even approximately the same brightness.

This paper suggests that the image we see is the result of the light (radio waves) from SGR-A* being "lensed" by another black hole, near (but not quite on) the line of sight between SGR-A* and us. By various modelling approaches, they then refine this idea to a "best-fit" of a black hole with mass around 1000 times the Sun, orbiting between the distance of the closest-observed star to SGR-A* ("S2" — most imaginative name, ever!), and around 10 times that distance. That's far enough to make a strong interaction with "S2" unlikely within the lifetime of S2 before it's accretion onto SGR-A*.)

The region around SGR-A* is crowded. Within 25 parsecs (~80 light years, the distance to Regulus [in the constellation Leo] or Merak [in the Great Bear]) there is around 4 times more mass in several millions of "normal" stars than in the SGR-A* black hole. Finding a large (not "super massive") black hole in such a concentration of matter shouldn't surprise anyone.

This proposed black hole is larger than anything which has been detected by gravitational waves (yet) ; but not immensely larger — only a factor of 15 or so. (The authors also anticipate the "what about these big black holes spiralling together?" question : quote "and the amplitude of gravitational waves generated by the binary black holes is negligible.")

Being so close to SGR-A*, the proposed black hole is likely to be moving rapidly across our line of sight. At the distance of "S2" it's orbital period would be around 26 years (but the "new" black hole is probably further out than than that). Which might be an explanation for some of the variability and "flickering" reported for SGR-A* ever since it's discovery.
As always, more observations are needed. Which, for SGR-A* are frequently being taken, so improving (or ruling out) this explanation should happen fairly quickly. But it's a very interesting, and fun, idea.

[ Read more of this story ]( https://science.slashdot.org/story/25/03/23/2227207/another-large-black-hole-in-our-galaxy?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] STATS 2025-03-23
spnet.stats
root(spnet, 1) — All
2025-03-24 11:11:01


TOP10 VISITORS:

[1] 45.135.180.x point=220 web=0 up=18.2MB (34%) <--- yesterlink (9/hr)
[2] 37.252.14.x point=114 web=0 up=14.0MB (26%) <--- ake (5/hr)
[3] 80.87.199.x point=71 web=0 up=6.9MB (13%) <--- tgi (3/hr)
[4] 24.130.121.x point=53 web=4 up=5.5MB (10%) <--- spnet (2/hr)
[5] Facebook point=0 web=394 up=4.8MB (9%)
[6] PetalBot point=177 web=272 up=1.1MB (2%) <--- PetalBot (7/hr)
[7] Google point=48 web=176 up=0.9MB (1%) <--- Google (2/hr)
[8] 217.114.158.x point=25 web=0 up=0.9MB (1%) <--- fox (1/hr)
[9] TikTok point=0 web=113 up=0.3MB (<1%)
[10] 185.209.198.x point=0 web=5 up=63KB

TOTAL TRAFFIC: 52MB

[>] Релиз языка программирования V 0.4.10
lor.opennet
robot(spnet, 1) — All
2025-03-24 08:44:03


Опубликован релиз статически типизированного языка программирования V 0.4.10 (vlang). Основными целями при создании V были простота изучения и использования, высокая читаемость, быстрая компиляция, повышенная безопасность, эффективная разработка, кроссплатформенное использование, улучшенное взаимодействие с языком C, лучшая обработка ошибок, отключаемый сборщик мусора (GC), современные возможности и более удобное сопровождение программ. Проект также развивает свою графическую библиотеку и пакетный менеджер. Код компилятора, библиотек и сопутствующих инструментов открыт под лицензией MIT.

https://www.opennet.ru/opennews/art.shtml?num=62938

[>] 'Fish Doorbell' Enters Fifth Year with Millions of Fans
bot.slashdot
robot(spnet, 1) — All
2025-03-24 08:22:01


Long-time Slashdot reader invisik reminds us that the "fish doorbell" is still going strong, according to the Associated Press.

"Now in its fifth year, the site has attracted millions of viewers from around the world with its quirky mix of slow TV and ecological activism."

The central Dutch city of Utrecht installed a "fish doorbell" on a river lock that lets viewers of an online livestream alert authorities to fish being held up as they make their springtime migration to shallow spawning grounds. The idea is simple: An underwater camera at Utrecht's Weerdsluis lock sends live footage to a website. When somebody watching the site sees a fish, they can click a button that sends a screenshot to organizers. When they see enough fish, they alert a water worker who opens the lock to let the fish swim through.

"Much of the time, the screen is just a murky green with occasional bubbles, but sometimes a fish swims past. As the water warms up, more fish show up..."

[ Read more of this story ]( https://tech.slashdot.org/story/25/03/23/1958239/fish-doorbell-enters-fifth-year-with-millions-of-fans?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] If Bird Flu Jumped to Humans, Could Past Flu Infections Offer Some Protection?
bot.slashdot
robot(spnet, 1) — All
2025-03-24 06:22:01


NPR reports on research "into whether our defenses built up from past flu seasons can offer any protection against H5N1 bird flu."

So far, the findings offer some reassurance. Antibodies and other players in the immune system may buffer the worst consequences of bird flu, at least to some degree. "There's certainly preexisting immunity," says Florian Krammer, a virologist at Mount Sinai's Icahn School of Medicine who is involved in some of the new studies. "That's very likely not going to protect us as a population from a new pandemic, but it might give us some protection against severe disease." This protection is based on shared traits between bird flu and types of seasonal flu that have circulated among us. Certain segments of the population, namely older people, may be particularly well-primed because of flu infections during early childhood.

Of course, there are caveats. "While this is a bit of a silver lining, it doesn't mean we should all feel safe," says Seema Lakdawala, a virologist at Emory University's School of Medicine whose lab is probing this question. For one thing, the studies can't be done on people. The conclusions are based on animal models and blood tests that measure the immune response. And how this holds up for an individual is expected to vary considerably, depending on their own immune history, underlying health conditions and other factors. But for now, influenza researchers speculate this may be one reason most people who've caught bird flu over the past year have not fallen severely ill....
Research published this month is encouraging. By analyzing blood samples from close to 160 people, a team at the University of Pennsylvania and the University of Chicago were able to show that people born roughly before 1965 had higher levels of antibodies — proteins that bind to parts of the virus — which cross-react to the current strain of bird flu.

This week U.S. federal officials also "announced funding for avian influenza research projects, including money for new vaccine projects and potential treatments," the Guardian report. The head of America's agriculture department said it would invest $100 million, as part of a larger $1 billion initiative to fight bird flu and stop rising egg prices, according to the nonprofit news site Iowa Capital Dispatch.

[ Read more of this story ]( https://science.slashdot.org/story/25/03/23/2215232/if-bird-flu-jumped-to-humans-could-past-flu-infections-offer-some-protection?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] How AI Coding Assistants Could Be Compromised Via Rules File
bot.slashdot
robot(spnet, 1) — All
2025-03-24 03:22:01


Slashdot reader spatwei shared this report from the cybersecurity site SC World:

: AI coding assistants such as GitHub Copilot and Cursor could be manipulated to generate code containing backdoors, vulnerabilities and other security issues via distribution of malicious rule configuration files, Pillar Security researchers reported Tuesday. Rules files are used by AI coding agents to guide their behavior when generating or editing code. For example, a rules file may include instructions for the assistant to follow certain coding best practices, utilize specific formatting, or output responses in a specific language.

The attack technique developed by Pillar Researchers, which they call 'Rules File Backdoor,' weaponizes rules files by injecting them with instructions that are invisible to a human user but readable by the AI agent.

Hidden Unicode characters like bidirectional text markers and zero-width joiners can be used to obfuscate malicious instructions in the user interface and in GitHub pull requests, the researchers noted.

Rules configurations are often shared among developer communities and distributed through open-source repositories or included in project templates; therefore, an attacker could distribute a malicious rules file by sharing it on a forum, publishing it on an open-source platform like GitHub or injecting it via a pull request to a popular repository. Once the poisoned rules file is imported to GitHub Copilot or Cursor, the AI agent will read and follow the attacker's instructions while assisting the victim's future coding projects.

[ Read more of this story ]( https://developers.slashdot.org/story/25/03/23/2138230/how-ai-coding-assistants-could-be-compromised-via-rules-file?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Is WhatsApp Being Ditched for Signal in Dutch Higher Education?
bot.slashdot
robot(spnet, 1) — All
2025-03-24 02:22:02


For weeks Signal has been one of the three most-downloaded apps in the Netherlands, according to a local news site. And now "Higher education institutions in the Netherlands have been looking for an alternative," according to DUB (an independent news site for the Utrecht University community):

Employees of the Utrecht University of Applied Sciences (HU) were recently advised to switch to Signal. Avans University of Applied Sciences has also been discussing a switch...The National Student Union is concerned about privacy. The subject was raised at last week's general meeting, as reported by chair Abdelkader Karbache, who said: "Our local unions want to switch to Signal or other open-source software."

Besides being open source, Signal is a non-commercial nonprofit, the article points out — though its proponents suggest there's another big difference. "HU argues that Signal keeps users' data private, unlike WhatsApp." Cybernews.com explains the concern:

In an interview with the Dutch newspaper De Telegraaf, Meredith Whittaker [president of the Signal Foundation] discussed the pitfalls of WhatsApp. "WhatsApp collects metadata: who you send messages to, when, and how often. That's incredibly sensitive information," she says.... The only information [Signal] collects is the date an account was registered, the time when an account was last active, and hashed phone numbers... Information like profile name and the people a user communicates with is all encrypted... Metadata might sound harmless, but it couldn't be further from the truth. According to Whittaker, metadata is deadly. "As a former CIA director once said: 'We kill people based on metadata'."

WhatsApp's metadata also includes IP addresses, TechRadar noted last May:

Other identifiable data such as your network details, the browser you use, ISP, and other identifiers linked to other Meta products (like Instagram and Facebook) associated with the same device or account are also collected... [Y]our IP can be used to track down your location. As the company explained, even if you keep the location-related features off, IP addresses and other collected information like phone number area codes can be used to estimate your "general location."
WhatsApp is required by law to share this information with authorities during an investigation...
[U]nder scrutiny is how Meta itself uses these precious details for commercial purposes. Again, this is clearly stated in WhatsApp's privacy policy and terms of use. "We may use the information we receive from [other Meta companies], and they may use the information we share with them, to help operate, provide, improve, understand, customize, support, and market our Services and their offerings," reads the policy. This means that yes, your messages are always private, but WhatsApp is actively collecting your metadata to build your digital persona across other Meta platforms...
The article suggests using a VPN with WhatsApp and turning on its "advanced privacy feature" (which hides your IP address during calls) and managing the app's permissions for data collection. "While these steps can help reduce the amount of metadata collected, it's crucial to bear in mind that it's impossible to completely avoid metadata collection on the Meta-owned app... For extra privacy and security, I suggest switching to the more secure messaging app Signal."

The article also includes a cautionary anecdote. "It was exactly a piece of metadata — a Proton Mail recovery email — that led to the arrest of a Catalan activist."

Thanks to long-time Slashdot reader united_notions for sharing the article.

[ Read more of this story ]( https://yro.slashdot.org/story/25/03/23/2120237/is-whatsapp-being-ditched-for-signal-in-dutch-higher-education?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Stellarium 25.1
lor.opennet
robot(spnet, 1) — All
2025-03-24 01:44:05


После трёх месяцев разработки состоялся выпуск 25.1 популярного свободного планетария [ Stellarium ]( https://stellarium.org/ ) , написанного на языке C++ с использованием фреймфорка Qt (поддерживаются версии 5 и 6) и распространяемого по лицензии GNU GPL 2.

Данный выпуск оказался самым объемным в истории развития планетария и в общей сложности между текущей и предыдущей версией сделано 208 изменений 11-ю контрибьюторами.

Основные изменения:

• переход на использование каталога Gaia DR3 (дополнительные каталоги с более чем 220 миллионами звезд вместо 177 миллионов ранее);

• полная 6D астрометрия (2D положения на небе, 2D собственное движение, параллакс, лучевая скорость) вычисляется для большинства ярких звезд (V

https://www.linux.org.ru/news/opensource/17921599

[>] Developer Loads Steam On a $100 ARM Single Board Computer
bot.slashdot
robot(spnet, 1) — All
2025-03-24 01:22:05


"There's no shortage of videos showing Steam running on expensive ARM single-board computers with discrete GPUs," writes Slashdot reader VennStone. "So I thought it would be worthwhile to make a guide for doing it on (relatively) inexpensive RK3588-powered single-board computers, using Box86/64 and Armbian."

The guides I came across were out of date, had a bunch of extra steps thrown in, or were outright incorrect... Up first, we need to add the Box86 and Box64 ARM repositories [along with dependencies, ARMHF architecture, and the Mesa graphics driver]...
The guide closes with a multi-line script and advice to "Just close your eyes and run this. It's not pretty, but it will download the Steam Debian package, extract the needed bits, and set up a launch script." (And then the final step is sudo reboot now.)

"At this point, all you have to do is open a terminal, type 'steam', and tap Enter. You'll have about five minutes to wait... Check out the video to see how some of the tested games perform."

At 720p, performance is all over the place, but the games I tested typically managed to stay above 30 FPS. This is better than I was expecting from a four-year-old SOC emulating x86 titles under ARM.

Is this a practical way to play your Steam games? Nope, not even a little bit. For now, this is merely an exercise in ludicrous neatness. Things might get a wee bit better, considering Collabora is working on upstream support for RK3588 and Valve is up to something ARM-related, but ya know, "Valve Time"...

"You might be tempted to enable Steam Play for your Windows games, but don't waste your time. I mean, you can try, but it ain't gonna work."

[ Read more of this story ]( https://games.slashdot.org/story/25/03/23/1922228/developer-loads-steam-on-a-100-arm-single-board-computer?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] shadPS4 0.7.0
lor.opennet
robot(spnet, 1) — All
2025-03-24 00:44:04


Состоялся релиз shadPS4 версии 0.7.0. Проект shadPS4 — это эмулятор PlayStation 4 с нативной поддержкой Windows, Linux, macOS и chromeOS. Эмулятор написан на Qt6 и С++ и находится на ранней стадии разработки.

( [ читать дальше... ]( https://www.linux.org.ru/news/games/17921626#cut ) )

[>] Doc Searls Proposes We Set Our Own Terms and Policies for Web Site Tracking
bot.slashdot
robot(spnet, 1) — All
2025-03-24 00:22:01


Today long-time open source advocate/journalist Doc Searls revealed that years of work by consumer privacy groups has culminated in a proposed standard "that can vastly expand our agency in the digital world" — especially in a future world where agents surf the web on our behalf:

Meet IEEE P7012 , which "identifies/addresses the manner in which personal privacy terms are proffered and how they can be read and agreed to by machines." It has been in the works since 2017, and should be ready later this year. (I say this as chair of the standard's working group.) The nickname for P7012 is MyTerms (much as the nickname for the IEEE's 802.11 standard is Wi-Fi).

The idea behind MyTerms is that the sites and services of the world should agree to your terms, rather than the other way around.

Basically your web browser proffers whatever agreement you've chosen (from a canonical list hosted at Customer Commons) to the web sites and other online services that you're visiting.

"Browser makers can build something into their product, or any developer can make a browser add-on or extension..." Searls writes. "On the site's side — the second-party side — CMS makers can build something in, or any developer can make a plug-in (WordPress) or a module (Drupal). Mobile app toolmakers can also come up with something (or many things)..."

MyTerms creates a new regime for privacy: one based on contract. With each MyTerm you are the first party. Not the website, the service, or the app maker. They are the second party. And terms can be friendly. For example, a prototype term called NoStalking says "Just show me ads not based on tracking me." This is good for you, because you don't get tracked, and good for the site because it leaves open the advertising option. NoStalking lives at Customer Commons, much as personal copyrights live at Creative Commons. (Yes, the former is modeled on the latter.)
"[L]et's make this happen and show the world what agency really means," Searls concludes.

Another way to say it is they've created "a draft standard for machine-readable personal privacy terms." But Searl's article used a grander metaphor to explain its significance:
When Archimedes said 'Give me a place to stand and I can move the world,' he was talking about agency. You have no agency on the Web if you are always the second party, agreeing to terms and policies set by websites.

You are Archimedes if you are the first party, setting your own terms and policies. The scale you get with those is One 2 World. The place you stand is on the Web itself — and the Internet below it.

Both were designed to make each of us an Archimedes.

[ Read more of this story ]( https://yro.slashdot.org/story/25/03/23/1842242/doc-searls-proposes-we-set-our-own-terms-and-policies-for-web-site-tracking?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Facebook Whistleblower Demands Overturn of Interview Ban - as Her Book Remains a Bestseller
bot.slashdot
robot(spnet, 1) — All
2025-03-23 23:22:01


The latest Facebook whistleblower, a former international lawyer, "cannot grant any of the nearly 100 interview requests she has received from journalists from print and broadcast news outlets in the United States and the United Kingdom," reports the Washington Post (citing "a person familiar with the matter").

That's because of an independent arbiter's ruling that "also bars her from talking with lawmakers in the U.S., London and the EU, according to a legal challenge she lodged against the ruling..."

On March 12, an emergency arbiter — a dispute resolution option outside the court system — sided with Meta by ruling that the tech giant might reasonably convince a court that Wynn-Williams broke a non-disparagement agreement she entered as she was being fired by the company in 2017. The arbiter also said that while her publisher Macmillan appeared for the hearing on Meta's motion, Wynn-Williams did not despite having received due notice. The arbiter did not make any assessments about the book's veracity, but Meta spokespeople argued that the ruling meant that "Sarah Wynn Williams' false and defamatory book should never have been published."

Wynn-Williams this week filed an emergency motion to overturn the ruling, arguing that she didn't receive proper notice of the arbitration proceedings to the email accounts Meta knows she uses, according to a copy of the motion seen by The Post. Wynn-Williams further alleged that her severance agreement including the non-disparagement provisions are unenforceable, arguing that it violates laws that protect whistleblowers from retaliation, among other points. In a statement, legal representatives for Wynn-Williams said they were "confident in the legal arguments and look forward to a swift restoration of Ms. Wynn-Williams' right to tell her story."
That book — Careless People: A Cautionary Tale of Power, Greed, and Lost Idealism — is currently #1 on the New York Times best-seller list (and #3 on Amazon.com's best-selling books list). And the incident prompted an article by Wired editor at large Steven Levy titled "Meta Tries to Bury a Tell-All Book." ("Please pause for a moment to savor the irony," Levy writes. "Meta, the company that recently announced an end to fact-checking in posts seen by potentially millions of people, is griping that an author didn't fact-check with them?")

And this led to a heated exchange on X.com between the Wired editor at large and Meta's Chief Technology Officer Andrew Bozworth:

Steven Levy: Meta probably realizes that all-out war on this book will only help its sales. But they are furious that an insider--who signed an NDA!--is going White Lotus on them, showing what it's like on the inside.

Meta CTO Bozworth: Except that it is full of lies, Steven. Shame on you.
Steven Levy: Boz, it would be helpful if Meta called out what it believes are the factual inaccuracies, especially in cases where it calls the book "defamatory."

Meta CTO Bozworth: Sorry you don't get to make up a bunch of stories and then put the burden on the person you lied about. Read the accounts from former employees who have gone through several of the anecdotes and said flatly they did not happen as written and then extrapolate.
Steven Levy: I would love for Sheryl, Mark and Joel to speak out on those anecdotes and give their sides of the story. They are the key subjects of those stories and their direct denial of specific incidents would matter.

Meta CTO Bozworth: Did you read what I wrote? I'm sure you would love to have more fuel for your "nobody wants you to read this" headline, but that's a total bullshit expectation. It isn't unreasonable to expect a journalist like you to do basic diligence. I'm sure you have our comms email!
Steven Levy: Believe me I was in touch with your comms people...

[ Read more of this story ]( https://news.slashdot.org/story/25/03/23/0413214/facebook-whistleblower-demands-overturn-of-interview-ban---as-her-book-remains-a-bestseller?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] FSF Holds Live Auction of 'Historically Important' Free Software Memorabilia
bot.slashdot
robot(spnet, 1) — All
2025-03-23 22:22:02


In 30 minutes the Free Software Foundation holds a live auction of memorabilia to celebrate their upcoming 40th anniversary. "By moving out of the FSF office, we got to sort through all the fun and historically important memorabilia and selected the best ones," they announced earlier — and 25 items will up for bids. (To participate in the live auction, you must register in advance.)

"This is your chance to get your very own personal souvenir of the FSF," explains an 11-page auction booklet, "from original GNU art to a famous katana and the Internet Hall of Fame medal of the FSF's founder."

That's right... a katana.

Once upon a time, this 41-inch blade turned heads at the FSF's tech team office. Donated by FSF friends and fans of the XKCD webcomic #225, it became a lighthearted "weapon" in the war for user freedom. As RMS himself is anti-violence, he made a silly joke by examining the katana closely instead of brandishing it, symbolizing that software freedom can be defended with wit. In a legendary photo, this was perceived as if he sniffed the blade. Between the etched dragon on the scabbard and the wavy hamon on the blade, it's as flashy as it is symbolic — especially if you like taking on proprietary software with style (and a dash of humor).

The auction is intended "to entrust some of the historically important free software memorabilia that were in the FSF's office and archive to the free software community instead of locking them away in a storage unit where no one can enjoy them.

"Hopefully, this way some of these unique items will be displayed in galleries or on the walls of free software enthusiasts. All auction proceeds will go towards the FSF's mission to promote computer user freedom."

And speaking of user freedom, here's how they described the Internet Hall of Fame medal:

When Richard M. Stallman, the founder of the FSF, was inducted into the Internet Hall of Fame, it was the ultimate nod to free software's immense impact on the Internet... The medal is shiny, and the frame is fancy, but the real radiance is the recognition that the Internet might look much more locked down and dull without those original free software seeds. Hang it on your wall, and you'll be reminded that hacking for user freedom can change the world.

[ Read more of this story ]( https://news.slashdot.org/story/25/03/23/1558210/fsf-holds-live-auction-of-historically-important-free-software-memorabilia?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] US Security Agencies Halt Coordinated Effort to Counter Russian Sabotage and Cyberattacks
bot.slashdot
robot(spnet, 1) — All
2025-03-23 21:22:01


Reuters reported this week that several U.S. national security agencies "have halted work on a coordinated effort to counter Russian sabotage, disinformation and cyberattacks..."

The plan was led by the president's National Security Council (NSC) and involved at least seven national security agencies working with European allies to disrupt plots targeting Europe and the United States, seven former officials who participated in the working groups told Reuters... [S]ince Trump took office on January 20 much of the work has come to a standstill, according to eleven current and former officials, all of whom requested anonymity to discuss classified matters... Regular meetings between the National Security Council and European national security officials have gone unscheduled, and the NSC has also stopped formally coordinating efforts across U.S. agencies...

The FBI last month ended an effort to counter interference in U.S. elections by foreign adversaries including Russia and put on leave staff working on the issue at the Department of Homeland Security. The Department of Justice also disbanded a team that seized the assets of Russian oligarchs... Department of Homeland Security Assistant Secretary Tricia McLaughlin told Reuters the agency had placed on administrative leave personnel working on misinformation and disinformation on its election security team, without elaborating further.

[ Read more of this story ]( https://yro.slashdot.org/story/25/03/22/1824242/us-security-agencies-halt-coordinated-effort-to-counter-russian-sabotage-and-cyberattacks?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Raspberry Pi Announces New Tool for Customized Software Images
bot.slashdot
robot(spnet, 1) — All
2025-03-23 20:22:01


"For developers and organisations that require a custom software image, a flexible and transparent build system is essential," according to an announcement Friday at Raspberry Pi.com.

"[T]o support these customers, we have created rpi-image-gen, a powerful new tool designed to put you in complete control of your Raspberry Pi images."

If you're building an embedded system or an industrial controller, you'll need complete control over the software resident on the device, and home users may wish to build their own OS and have it pre-configured exactly the way they want... rpi-image-gen is an alternative to pi-gen, which is the tool we use to create and deploy the Raspberry Pi OS distribution. rpi-image-gen... offers a very granular level of control over file system construction and software image creation... [B]eing able to help reduce software build time, provide guaranteed ownership of support, and reuse standard methodologies to ensure authenticity of software were all of paramount importance, and among the reasons why we created a new home-grown build tool for Raspberry Pi devices...

There is a small number of examples in the tree which demonstrate different use cases of rpi-image-gen [including the lightweight image slim and webkiosk for booting into browser kiosk mode]. All create bootable disk images and serve to illustrate how one might use rpi-image-gen to create a bespoke image for a particular purpose. The number of examples will grow over time and we welcome suggestions for new ones... Visit the rpi-image-gen GitHub repository to get started. There, you'll find documentation and examples to guide you through creating custom Raspberry Pi images.

Some technical details from the announcement.

"Similar to pi-gen, rpi-image-gen leverages the power, reliability, and trust of installing a Debian Linux system for the device. However, unlike pi-gen, rpi-image-gen introduces some new concepts [profiles, image layouts, and config] which serve to dictate the build footprint and installation."

The tool also lets you exclude from your package "things that would otherwise be installed as part of the profile."
The tool's GitHub repository notes that it also allows you output your software bill of materials (SBOM) "to list the exact set of packages that were used to create the image." And it can even generate a list of CVEs identified from the SBOM to "give consumers of your image confidence that your image does not contain any known vulnerabilities."

[ Read more of this story ]( https://build.slashdot.org/story/25/03/23/0012253/raspberry-pi-announces-new-tool-for-customized-software-images?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] 'This Is the Sharpest Image Yet of Our Universe As a Baby'
bot.slashdot
robot(spnet, 1) — All
2025-03-23 19:22:01


Science magazine reports:
A strange-looking telescope that scanned the skies from a perch in northern Chile for 15 years has released its final data set: detailed maps of the infant universe showing the roiling clouds of hydrogen and helium gas that would one day coalesce into the stars and galaxies we see today.

The Atacama Cosmology Telescope is not the first to survey the cosmic microwave background (CMB), the light released 380,000 years after the Big Bang when the early universe's soup of particles formed atoms and space became transparent. But the data — posted as preprints online today — give researchers a new level of detail on the density of the gas clouds and how they were moving.
At the top of the page for Science's article is an image where different colors "show areas where the polarization of the CMB light — its direction of vibration — differ, revealing how gases first move tangentially around areas of higher density (orange) and later fall straight in (blue) under the influence of gravity."

Long-time Slashdot reader sciencehabit writes:
Using the data, researchers tested how well the standard cosmological theory, known as lambda cold dark matter, described the universe at that time 13.8 billion years ago; it's a remarkably good fit, they conclude.
The article notes that "back in the Chilean desert," the Atacama Cosmology Telescope's successor, the Simons Observatory, has already taken its first image, and "will begin its even more detailed examination of the CMB in the coming months."

[ Read more of this story ]( https://science.slashdot.org/story/25/03/22/0542234/this-is-the-sharpest-image-yet-of-our-universe-as-a-baby?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Выпуск Wayland Maker 0.5, композитный сервер в стиле Window Maker
lor.opennet
robot(spnet, 1) — All
2025-03-23 16:44:03


Доступен выпуск композитного сервера Wayland Maker 0.5, реализующего пользовательское окружение в стиле Window Maker, построенное с использованием протокола Wayland. Код проекта написан на языке Си и распространяется под лицензией Apache 2.0. C 2023 года проект развивает сотрудник Google, также занимающийся разработкой минималистичной стандартной Си-библиотеки libbase.

https://www.opennet.ru/opennews/art.shtml?num=62932

[>] 'Wired' Drops Paywalls for Articles Based on Public Records Requests, Urges Other Sites to Follow
bot.slashdot
robot(spnet, 1) — All
2025-03-23 16:22:02


Wired's web site "is going to stop paywalling articles that are primarily based on public records obtained through the Freedom of Information Act," their global editorial director announced this week:

They're called public records for a reason, after all. And access to public documents is more important than ever at this moment, with government websites and records disappearing... [S]ome may argue that, from a business standpoint, not charging for stories primarily relying on public records automatically means fewer subscriptions and therefore less revenue. We disagree.

Sure, the FOIA process is time- and labor-intensive. Reporters face stonewalling, baseless denials, lengthy appeals processes, and countless other obstacles and delays. Investigative reports based on public records are among the most expensive stories to produce and share with the public... But while some readers might not subscribe to outlets that give away some of their best journalism for free, it's just as possible that readers will recognize this sacrifice and reward these outlets with more traffic and subscriptions in the long run...

We hope others will follow Wired's lead (and shoutout to outlets like 404 Media that also make their FOIA-based reporting available for free). We also hope those who stand to benefit from these outlets' leadership (that's you, reader) will do their part and subscribe if you can afford it. They're not asking for an arm and a leg... The Fourth Estate needs to step up and invest in serving the public during these unprecedented times. And the public needs to return the favor and support quality journalism, so that hopefully one day we can do away with those annoying paywalls altogether.

[ Read more of this story ]( https://news.slashdot.org/story/25/03/23/0324221/wired-drops-paywalls-for-articles-based-on-public-records-requests-urges-other-sites-to-follow?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Выпуск Finnix 250, Live-дистрибутива для системных администраторов
lor.opennet
robot(spnet, 1) — All
2025-03-23 15:44:02


Представлен выпуск Live-дистрибутива Finnix 250, приуроченный к 25-летию проекта (первая версия Finnix была опубликована 22 марта 2000 года). Дистрибутив основан на пакетной базе Debian, поддерживает только работу в консоли и предоставляет подборку утилит для нужд системного администратора. В состав входит более 600 пакетов со всевозможными утилитами. Размер iso-образа - 528 МБ.

https://www.opennet.ru/opennews/art.shtml?num=62935

[>] Проект Landrun развивает непривилегированную систему изоляции приложений
lor.opennet
robot(spnet, 1) — All
2025-03-23 14:44:03


Проект Landrun начал развитие новой системы для изолированного выполнения отдельных приложений. Для изоляции задействован LSM-модуль ядра Linux Landlock, позволяющий обойтись без выполнения привилегированных операций во время создания sandbox-окружения. По своим задачам Landrun близок к утилите Firejail, но отличается более простой реализацией, легковесностью и возможностью работы под обычным непривилегированным пользователем без поставки с флагом suid. Код проекта написан на языке Go и распространяется под лицензией GPLv2.

https://www.opennet.ru/opennews/art.shtml?num=62934

[>] NASA Considers Eliminating Its Headquarters in Washington D.C.
bot.slashdot
robot(spnet, 1) — All
2025-03-23 12:22:01


NASA is considering "closing its headquarters and scattering responsibilities among the states," reports Politico, citing two people familiar with the plan.

"The proposal could affect up to 2,500 jobs and redistribute critical functions, including who manages space exploration and organizes major science missions."
While much of the day-to-day work occurs at NASA's 10 centers, the Washington office plays a strategic role in lobbying for the agency's priorities in Congress, ensuring the White House supports its agenda and partnering with foreign countries on critical space projects. Some of the headquarter's offices might remain in Washington, the people said, but it's not clear which ones those would be or who would keep their jobs...

One of the biggest fallouts is the damage it could do to coordination among NASA leadership on pressing issues... It would also limit cooperation with international partners on space, which is often done through embassies in Washington. NASA works with foreign partners on a range of projects, including the International Space Station and returning to the moon. The European Space Agency, for example, plans to provide modules for Gateway, a lunar space station that is central to NASA's Artemis program to land American astronauts back on the moon... The agency also helps coordinate support from foreign nations for the Artemis accords, which set goals for transparency and data sharing — and help create a level of trust in an unregulated part of the universe.
But the reallocation could have some benefits. Such a move would bring headquarters employees closer to the processes they manage. And it would give legislative liaison staff a chance to interact with lawmakers in their districts. "You're probably getting a lot more time with [lawmakers] at the local center or hosting events in the state or district," said Tom Culligan, a longtime space lobbyist,, the space industry lobbyist.

[ Read more of this story ]( https://science.slashdot.org/story/25/03/22/223207/nasa-considers-eliminating-its-headquarters-in-washington-dc?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] ii stat from 2025-03-16 to 2025-03-23
ii.stat
shaos(spnet, 2) — All
2025-03-23 12:51:48


Echoareas
────────────────────────
bot.slashdot.........115 ██████████████████████████████████████████████████▒▒
lor.opennet...........43 ███████████████████████████████████████████
bot.habr.rss..........38 ██████████████████████████████████████
spnet.stats............7 ███████
ii.stat................1 █
bot.antropogenezru.rss.1 █
────────────────────────
Total                205

[>] В NixOS предложен метод защиты от подстановки бэкдоров, таких как в XZ
lor.opennet
robot(spnet, 1) — All
2025-03-23 11:44:03


Для включения в репозиторий пакетов nixpkgs, применяемый в дистрибутиве NixOS, предложен режим повторяемых сборок, позволяющий выявлять случаи внедрения в код бэкдоров, напоминающие инцидент с проектом XZ. Представленный метод защиты позволяет обнаружить модификации в архивах с исходным кодом релиза, отсутствующие в репозиториях с кодом.

https://www.opennet.ru/opennews/art.shtml?num=62933

[>] STATS 2025-03-22
spnet.stats
root(spnet, 1) — All
2025-03-23 11:11:02


TOP10 VISITORS:

[1] 45.135.180.x point=230 web=0 up=19.0MB (36%) <--- yesterlink (10/hr)
[2] 37.252.14.x point=144 web=0 up=17.7MB (34%) <--- ake (6/hr)
[3] 80.87.199.x point=70 web=0 up=6.8MB (13%) <--- tgi (3/hr)
[4] Facebook point=0 web=294 up=3.1MB (5%)
[5] Google point=20 web=308 up=1.5MB (2%) <--- Google (1/hr)
[6] PetalBot point=205 web=363 up=1.4MB (2%) <--- PetalBot (9/hr)
[7] 24.130.121.x point=16 web=3 up=1.2MB (2%) <--- spnet (1/hr)
[8] 217.114.158.x point=25 web=0 up=0.9MB (1%) <--- fox (1/hr)
[9] TikTok point=0 web=103 up=0.3MB (<1%)
[10] 198.44.138.x point=0 web=5 up=62KB

TOTAL TRAFFIC: 51MB

[>] Hungary To Use Facial Recognition to Suppress Pride March
bot.slashdot
robot(spnet, 1) — All
2025-03-23 08:22:01


Hungary's Parliament not only voted to ban Pride events. They also voted to "allow authorities to use facial recognition software to identify attenders and potentially fine them," reports the Guardian.

[The nationwide legislation] amends the country's law on assembly to make it an offence to hold or attend events that violate Hungary's contentious "child protection" legislation, which bars any "depiction or promotion" of homosexuality to minors under the age of 18. The legislation was condemned by Amnesty International, which described it as the latest in a series of discriminatory measures the Hungarian authorities have taken against LGBTQ+ people...
Organisers said they planned to go ahead with the march in Budapest, despite the law's stipulation that those who attend a prohibited event could face fines of up to 200,000 Hungarian forints [£425 or $549 U.S. dollars].

[ Read more of this story ]( https://yro.slashdot.org/story/25/03/22/2333213/hungary-to-use-facial-recognition-to-suppress-pride-march?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Italy Demands Google Poison Its Public DNS Under Strict Piracy Shield Law
bot.slashdot
robot(spnet, 1) — All
2025-03-23 06:22:02


"Italy is using its Piracy Shield law to go after Google," reports Ars Technica, "with a court ordering the Internet giant to immediately begin poisoning its public DNS servers" to prevent people from reaching pirate streams of football games.

"Italy's communication regulator praises the ruling and hopes to continue sticking it to international tech firms."
Spotted by TorrentFreak, AGCOM Commissioner Massimiliano Capitanio took to LinkedIn to celebrate the ruling, as well as the existence of the Italian Piracy Shield. "The Judge confirmed the value of AGCOM's investigations, once again giving legitimacy to a system for the protection of copyright that is unique in the world," said Capitanio. Capitanio went on to complain that Google has routinely ignored AGCOM's listing of pirate sites, which are supposed to be blocked in 30 minutes or less under the law. He noted the violation was so clear-cut that the order was issued without giving Google a chance to respond, known as inaudita altera parte in Italian courts.

[ Read more of this story ]( https://yro.slashdot.org/story/25/03/23/0043217/italy-demands-google-poison-its-public-dns-under-strict-piracy-shield-law?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] China Explores Limiting Its EV and Battery Exports For US Tariff Negotiations
bot.slashdot
robot(spnet, 1) — All
2025-03-23 04:22:01


"China is considering trying to blunt greater U.S. tariffs and other trade barriers," reports the Wall Street Journal, "by offering to curb the quantity of certain goods exported to the U.S., according to advisers to the Chinese government."
Tokyo's adoption of so-called voluntary export restraints, or VERs, to limit its auto shipments to the U.S. in the 1980s helped prevent Washington from imposing higher import duties. A similar move from Beijing, especially in sectors of key concern to Washington, like electric vehicles and batteries, would mitigate criticism from the U.S. and others over China's "economic imbalances": heavily subsidized companies making stuff for slim profits but saturating global markets, to the detriment of other countries' manufacturers...

The Xi leadership has indicated a desire to cut a deal with the Trump administration to head off greater trade attacks... Similar to Japan, the Chinese advisers say, Beijing may also consider negotiating export restraints on EVs and batteries in return for investment opportunities in those sectors in the U.S. In some officials' views, they say, that might be an attractive offer to Trump, who at times has indicated an openness to more Chinese investment in the U.S. even though members of his administration firmly oppose it.
The article notes agreements like this are also hard to enforce, "particularly when Chinese companies export to the U.S. from third countries including Mexico and Vietnam."

[ Read more of this story ]( https://hardware.slashdot.org/story/25/03/22/2227218/china-explores-limiting-its-ev-and-battery-exports-for-us-tariff-negotiations?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] China Explores Limiting Its EVs and Battery Exports For US Tariff Negotiations
bot.slashdot
robot(spnet, 1) — All
2025-03-23 03:22:01


"China is considering trying to blunt greater U.S. tariffs and other trade barriers," reports the Wall Street Journal, "by offering to curb the quantity of certain goods exported to the U.S., according to advisers to the Chinese government."
Tokyo's adoption of so-called voluntary export restraints, or VERs, to limit its auto shipments to the U.S. in the 1980s helped prevent Washington from imposing higher import duties. A similar move from Beijing, especially in sectors of key concern to Washington, like electric vehicles and batteries, would mitigate criticism from the U.S. and others over China's "economic imbalances": heavily subsidized companies making stuff for slim profits but saturating global markets, to the detriment of other countries' manufacturers...

The Xi leadership has indicated a desire to cut a deal with the Trump administration to head off greater trade attacks... Similar to Japan, the Chinese advisers say, Beijing may also consider negotiating export restraints on EVs and batteries in return for investment opportunities in those sectors in the U.S. In some officials' views, they say, that might be an attractive offer to Trump, who at times has indicated an openness to more Chinese investment in the U.S. even though members of his administration firmly oppose it.
The article notes agreements like this are also hard to enforce, "particularly when Chinese companies export to the U.S. from third countries including Mexico and Vietnam."

[ Read more of this story ]( https://hardware.slashdot.org/story/25/03/22/2227218/china-explores-limiting-its-evs-and-battery-exports-for-us-tariff-negotiations?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] America's College Board Launches AP Cybersecurity Course For Non-College-Bound Students
bot.slashdot
robot(spnet, 1) — All
2025-03-23 02:22:01


Besides administering standardized pre-college tests, America's nonprofit College Board designs college-level classes that high school students can take. But now they're also crafting courses "not just with higher education at the table, but industry partners such as the U.S. Chamber of Commerce and the technology giant IBM," reports Education Week.

"The organization hopes the effort will make high school content more meaningful to students by connecting it to in-demand job skills."

It believes the approach may entice a new kind of AP student: those who may not be immediately college-bound.... The first two classes developed through this career-driven model — dubbed AP Career Kickstart — focus on cybersecurity and business principles/personal finance, two fast-growing areas in the workforce." Students who enroll in the courses and excel on a capstone assessment could earn college credit in high school, just as they have for years with traditional AP courses in subjects like chemistry and literature. However, the College Board also believes that students could use success in the courses as a selling point with potential employers... Both the business and cybersecurity courses could also help fulfill state high school graduation requirements for computer science education...

The cybersecurity course is being piloted in 200 schools this school year and is expected to expand to 800 schools next school year... [T]he College Board is planning to invest heavily in training K-12 teachers to lead the cybersecurity course.
IBM's director of technology, data and AI called the effort "a really good way for corporations and companies to help shape the curriculum and the future workforce" while "letting them know what we're looking for." In the article the associate superintendent for teaching at a Chicago-area high school district calls the College Board's move a clear signal that "career-focused learning is rigorous, it's valuable, and it deserves the same recognition as traditional academic pathways."

Also interesting is why the College Board says they're doing it:

The effort may also help the College Board — founded more than a century ago — maintain AP's prominence as artificial intelligence tools that can already ace nearly every existing AP test on an ever-greater share of job tasks once performed by humans. "High schools had a crisis of relevance far before AI," David Coleman, the CEO of the College Board, said in a wide-ranging interview with EdWeek last month. "How do we make high school relevant, engaging, and purposeful? Bluntly, it takes [the] next generation of coursework. We are reconsidering the kinds of courses we offer...."

"It's not a pivot because it's not to the exclusion of higher ed," Coleman said. "What we are doing is giving employers an equal voice."

Thanks to long-time Slashdot reader theodp for sharing the article.

[ Read more of this story ]( https://news.slashdot.org/story/25/03/22/2112245/americas-college-board-launches-ap-cybersecurity-course-for-non-college-bound-students?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Six Countries Named as 'Likely' Purchasers of Paragon's Cellphone Spyware
bot.slashdot
robot(spnet, 1) — All
2025-03-23 01:22:01


The governments of Australia, Canada, Cyprus, Denmark, Israel, and Singapore "are likely customers of Israeli spyware maker Paragon Solutions," reports TechCrunch, "according to a new technical report by a renowned digital security lab."

On Wednesday, The Citizen Lab, a group of academics and security researchers housed at the University of Toronto that has investigated the spyware industry for more than a decade, published a report about the Israeli-founded surveillance startup, identifying the six governments as "suspected Paragon deployments."

At the end of January, WhatsApp notified around 90 users that the company believed were targeted with Paragon spyware, prompting a scandal in Italy, where some of the targets live... Paragon's executive chairman John Fleming told TechCrunch that the company "licenses its technology to a select group of global democracies — principally, the United States and its allies." Israeli news outlets reported in late 2024 that U.S. venture capital AE Industrial Partners had acquired Paragon for at least $500 million upfront....

Among the suspected customer countries, Citizen Lab singled out Canada's Ontario Provincial Police (OPP), which specifically appears to be a Paragon customer given that one of the IP addresses for the suspected Canadian customer is linked directly to the OPP.

In a related development the Guardian reports that a prominent activist in Italy "has warned the international criminal court that his mobile phone was under surveillance" when he was providing them confidential information about torture victims in Libya.

Both articles submitted by long-time Slashdot reader ISayWeOnlyToBePolite.

[ Read more of this story ]( https://yro.slashdot.org/story/25/03/22/0459224/six-countries-named-as-likely-purchasers-of-paragons-cellphone-spyware?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Уязвимости в Pagure и OBS, допускавшие компрометацию пакетов в репозиториях Fedora и openSUSE
lor.opennet
robot(spnet, 1) — All
2025-03-23 00:44:03


Исследователи безопасности из компании Fenrisk раскрыли информацию об уязвимостях в инструментариях Pagure и OBS (Open Build Service), позволявших скомпрометировать инфраструктуры формирования пакетов дистрибутивов Fedora и openSUSE. Исследователи продемонстрировали возможность совершения атаки для выполнения произвольного кода на серверах с Pagure и OBS, что можно было использовать для подстановки изменений в пакеты в репозиториях Fedora и openSUSE.

https://www.opennet.ru/opennews/art.shtml?num=62928

[>] Rebooting A Retro PDP-11 Workstation - and Its Classic 'Venix' UNIX
bot.slashdot
robot(spnet, 1) — All
2025-03-23 00:22:01


This week the "Old Vintage Computing Research" blog published a 21,000-word exploration of the DEC PDP-11, the 16-bit minicomputer sold by Digital Equipment Corporation. Slashdot reader AndrewZX calls the blog post "an excellent deep dive" into the machine's history and capabilities "and the classic Venix UNIX that it ran." The blogger still owns a working 1984 DEC Professional 380, "a tank of a machine, a reasonably powerful workstation, and the most practical PDP-adjacent thing you can actually slap on a (large) desk."

But more importantly, "It runs PRO/VENIX, the only official DEC Unix option for the Pros."
In that specific market it was almost certainly the earliest such licensed Unix (in 1983) and primarily competed against XENIX, Microsoft's dominant "small Unix," which first emerged for XT-class systems as SCO XENIX in 1984. You'd wonder how rogue processes could be prevented from stomping on each other in such systems when neither the Intel 8086/8088 nor the IBM PC nor the PC/XT had a memory management unit, and the answer was not to try and just hope for the best. It was for this reason that IBM's own Unix variant PC/IX, developed by Interactive Systems Corporation under contract as their intended AT&T killer, was multitasking but single-user since in such an architecture there could be no meaningful security guarantees...
One of Venix's interesting little idiosyncrasies, seen in all three Pro versions, was the SUPER> prompt when you've logged on as root (there is also a MAINT> prompt when you're single-user...

Although Bill Gates had been their biggest nemesis early on, most of the little Unices that flourished in the 1980s and early 90s met their collective demise at the hands of another man: Linus Torvalds. The proliferation of free Unix alternatives like Linux on commodity PC hardware caused the bottom to fall out of the commercial Unix market.

The blogger even found a 1989 log for the computer's one and only guest login session — which seems to consist entirely of someone named tom trying to exit vi.

But the most touching part of the article comes when the author discovers a file named /thankyou that they're certain didn't come with the original Venix. It's an ASCII drawing of a smiling face, under the words "THANK YOU FOR RESCUING ME".

"It's among the last files created on the system before it came into my possession..."

It's all a fun look back to a time when advances in semiconductor density meant microcomputers could do nearly as much as the more expensive minicomputers (while taking up less space) — leaving corporations pondering the new world that was coming:
As far back as 1974, an internal skunkworks unit had presented management with two small systems prototypes described as a PDP-8 in a VT50 terminal and a portable PDP-11 chassis.
Engineers were intrigued but sales staff felt these smaller versions would cut into their traditional product lines, and [DEC president Ken] Olsen duly cancelled the project, famously observing no one would want a computer in their home.

[ Read more of this story ]( https://tech.slashdot.org/story/25/03/22/1927247/rebooting-a-retro-pdp-11-workstation---and-its-classic-venix-unix?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Was Undersea Cable Sabotage Part of a Larger Pattern?
bot.slashdot
robot(spnet, 1) — All
2025-03-22 23:22:01


Was the cutting of undersea cables part of a larger pattern? Russia and its proxies are accused by western officials of "staging dozens of attacks and other incidents across Europe since the invasion of Ukraine three years ago," reports the Associated Press.

That includes cyberattacks and committing acts of sabotage/vandalism/arson, as well as spreading propaganda and even plotting killings, according to the article. ("Western intelligence agencies uncovered what they said was a Russian plot to kill the head of a major German arms manufacturer that is a supplier of weapons to Ukraine...") The news agency documented 59 incidents "in which European governments, prosecutors, intelligence services or other Western officials blamed Russia, groups linked to Russia or its ally Belarus."

[Western officials] allege the disruption campaign is an extension of Russian President Vladimir Putin's war, intended to sow division in European societies and undermine support for Ukraine... The incidents range from stuffing car tailpipes with expanding foam in Germany to a plot to plant explosives on cargo planes. They include setting fire to stores and a museum, hacking that targeted politicians and critical infrastructure, and spying by a ring convicted in the U.K. Richard Moore, the head of Britain's foreign intelligence service, called it a "staggeringly reckless campaign" in November...

The cases are varied, and the largest concentrations are in countries that are major supporters of Ukraine... In about a quarter of the cases, prosecutors have brought charges or courts have convicted people of carrying out the sabotage. But in many more, no specific culprit has been publicly identified or brought to justice.
Despite that, "more and more governments are publicly attributing attacks to Russia," the article points out.
This week a nonprofit, bipartisan think tank on global policy released a report which "found that Russian attacks in Europe quadrupled from 2022 to 2023 and then tripled again from 2023 to 2024," reports the New York Times.
Prime Minister Donald Tusk of Poland noted in a social media post on Monday that Lithuanian officials had confirmed his assessment that Russia was responsible for a series of fires in shopping centers in Warsaw and Vilnius, the Lithuanian capital...

[ Read more of this story ]( https://yro.slashdot.org/story/25/03/22/1821200/was-undersea-cable-sabotage-part-of-a-larger-pattern?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Surprisingly, Some Dyson Spheres and Ringworlds Can Be Stable
bot.slashdot
robot(spnet, 1) — All
2025-03-22 22:22:01


Slashdot reader Required Snark shared this article from Phys.org:

In the realm of science fiction, [sun-energy capturing] Dyson spheres and ringworlds have been staples for decades. But it is well known that the simplest designs are unstable against gravitational forces and would thus be torn apart. Now a scientist from Scotland, UK has shown that certain configurations of these objects near a two-mass system can be stable against such fractures...

[A] rigid ring around a star or planet, as in Larry Niven's "Ringworld" series of novels, is also unstable, as it would drift under any slight gravitational differences and collide with the star. So [engineering science professor Colin] McInnes considered a restricted three-body problem where two equal masses orbit each other circularly with a uniform ring of infinitesimal mass rotating in their orbital plane. The ring could enclose both masses, just one or none... McInnes also investigated a shell-restricted three-body problem with the shell also of infinitesimal mass, again with the shell enclosing two masses, one or none.

For the restricted ring, McInnes found that there are seven equilibrium points in the orbital plane of the dual masses, on which, if the ring's center were placed, it would stay and not experience stresses, akin to the three stable Lagrange points where a small mass can reside permanently for the two-body problem... McInnes restricted this research to a planar ring (in the plane of the circularly orbiting masses) but says it can be shown that a vertical ring, normal to the plane, can also generate equilibria...

These results can aid the search for extraterrestrial intelligence, McInnes said, "If we can understand when such structures can be stable, then this could potentially help direct future SETI surveys." An important technosignature would be one bright star orbiting in tandem with an object showing a strong infrared excess. Shells around a sun-exoplanet pair or an exoplanet-exoplanet pair could also be possible. A nested set of Dyson spheres is also a feasible geometry.

In 2003 Ringworld author Larry Niven answered questions from Slashdot readers...

[ Read more of this story ]( https://science.slashdot.org/story/25/03/22/0414254/surprisingly-some-dyson-spheres-and-ringworlds-can-be-stable?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] US Release of Unredacted JFK Files 'Doxxed' Officials, Including Social Security Numbers
bot.slashdot
robot(spnet, 1) — All
2025-03-22 21:22:01


"I intend to sue the National Archives," said Joseph diGenova, an 80-year-old former Trump campaign lawyer (and a U.S. Attorney from 1983 to 1988). While releasing 63,000 unredacted pages about the 1963 assassination of President Kennedy, the U.S. government erroneously "made public the Social Security numbers and other sensitive personal information of potentially hundreds of former congressional staffers and other people," reports USA Today. ("It is virtually impossible to tell the scope of the breach because the National Archives put them online without a way to search them by keyword, some JFK files experts and victims of the information release told USA TODAY...")

Mark Zaid, a national security lawyer who represented current and former spies and other officials in cases against the government, told USA Today that he "saw a few names I know and I informed them of the breach... Hundreds were doxxed but of that number I don't know how many are still living."

Zaid, who has fought for decades for the JFK records to be made public, said many of the thousands of investigative documents had been made public long ago with everything declassified and unredacted except for the personal information. Releasing that information now, he told USA TODAY, poses significant threats to those whose information is now public, including dates and places of birth, but especially their Social Security numbers. "The purpose of the release was to inform the public about the JFK assassination, not to help permit identity theft of those who actually investigated the events of that day," Zaid said.

The Associated Press reported Thursday afternoon that government officials "said they are still screening the records to identify all the Social Security numbers that were released."
One of the newly unredacted documents... discloses the Social Security numbers of more than two dozen people seeking security clearances in the 1990s to review JFK-related documents for the Assassination Records Review Board.

[ Read more of this story ]( https://news.slashdot.org/story/25/03/22/0237216/us-release-of-unredacted-jfk-files-doxxed-officials-including-social-security-numbers?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] ReactOS 0.4.15
lor.opennet
robot(spnet, 1) — All
2025-03-22 20:44:05


После долгого перерыва разработчики Windows-совместимой операционной системы ReactOS, исходные тексты которой доступны по лицензии GPL, выпустили версию 0.4.15.

В этом выпуске:

• исправления Plug and Play;

• исправления в аудиостеке;

• исправления в управлении памятью;

• улучшение работы реестра;

• улучшения в работе системных утилит, включая Notepad, Paint, RAPPS и Input Method Editor.

ReactOS разрабатывается группой энтузиастов с 1998 года и по-прежнему находится в альфа-стадии.

https://www.linux.org.ru/news/opensource/17920610

[>] Majority of AI Researchers Say Tech Industry Is Pouring Billions Into a Dead End
bot.slashdot
robot(spnet, 1) — All
2025-03-22 20:22:01


Founded in 1979, the Association for the Advancement of AI is an international scientific society. Recently 25 of its AI researchers surveyed 475 respondents in the AAAI community about "the trajectory of AI research" — and their results were surprising.

Futurism calls the results "a resounding rebuff to the tech industry's long-preferred method of achieving AI gains" — namely, adding more hardware:

You can only throw so much money at a problem. This, more or less, is the line being taken by AI researchers in a recent survey. Asked whether "scaling up" current AI approaches could lead to achieving artificial general intelligence (AGI), or a general purpose AI that matches or surpasses human cognition, an overwhelming 76 percent of respondents said it was "unlikely" or "very unlikely" to succeed...

"The vast investments in scaling, unaccompanied by any comparable efforts to understand what was going on, always seemed to me to be misplaced," Stuart Russel, a computer scientist at UC Berkeley who helped organize the report, told New Scientist. "I think that, about a year ago, it started to become obvious to everyone that the benefits of scaling in the conventional sense had plateaued...." In November last year, reports indicated that OpenAI researchers discovered that the upcoming version of its GPT large language model displayed significantly less improvement, and in some cases, no improvements at all than previous versions did over their predecessors. In December, Google CEO Sundar Pichai went on the record as saying that easy AI gains were "over" — but confidently asserted that there was no reason the industry couldn't "just keep scaling up."

Cheaper, more efficient approaches are being explored. OpenAI has used a method known as test-time compute with its latest models, in which the AI spends more time to "think" before selecting the most promising solution. That achieved a performance boost that would've otherwise taken mountains of scaling to replicate, researchers claimed. But this approach is "unlikely to be a silver bullet," Arvind Narayanan, a computer scientist at Princeton University, told New Scientist.

[ Read more of this story ]( https://slashdot.org/story/25/03/22/0341222/majority-of-ai-researchers-say-tech-industry-is-pouring-billions-into-a-dead-end?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] 'Unaware and Uncertain': Report Finds Widespread Unfamiliarity With 2027's EU Cyber Resilience Requirements
bot.slashdot
robot(spnet, 1) — All
2025-03-22 19:22:01


Two "groundbreaking research reports" on open source security were announced this week by the Linux Foundation in partnership with the Open Source Security Foundation (OpenSSF) and Linux Foundation Europe. The reports specifically address the EU's Cyber Resilience Act (or CRA) and "highlight knowledge gaps and best practices for CRA compliance."

"Unaware and Uncertain: The Stark Realities of CRA-Readiness in Open Source" includes a survey which found that when it comes to CRA requirements, 62% of respondents were either "not familiar at all" (36%) or "slightly familiar" (26%) — while 51% weren't sure about its deadlines. ("Only 28% correctly identified 2027 as the target year for full compliance," according to one infographic, which adds that CRA "is expected to drive a 6% average price increase, though 53% of manufacturers are still assessing pricing impacts.")

Manufacturers, who bear primary responsibility, lack readiness — many [46%] passively rely on upstream security fixes, and only a small portion produce Software Bills of Materials (SBOMs). The report recommends that manufacturers take a more active role in open source security, that more funding and legal support is needed to support security practices, and that clear regulatory guidance is essential to prevent unintended negative impacts on open source development.

The research also provides "an in-depth analysis of how open collaboration can strengthen software security and innovation across global markets," with another report that "examines how three Linux Foundation projects are meeting the CRA's minimum compliance requirements" and "provides insight on the elements needed to ensure leadership in cybersecurity best practices." (It also includes CRA-related resources.)

"These two reports offer actionable conclusions for open source stakeholders to ready themselves for 2027, when the CRA comes into force," according to a Linux Foundation reserach executive cited in the announcement. "We hope that these reports catalyze higher levels of collaboration across the open source community."

[ Read more of this story ]( https://news.slashdot.org/story/25/03/21/0212206/unaware-and-uncertain-report-finds-widespread-unfamiliarity-with-2027s-eu-cyber-resilience-requirements?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] US Programming Jobs Plunge 27.5% in Two Years
bot.slashdot
robot(spnet, 1) — All
2025-03-22 17:22:01


Computer programming jobs in the US have declined by more than a quarter over the past two years, placing the profession among the 10 hardest-hit occupations of 420-plus jobs tracked by the Bureau of Labor Statistics and potentially signaling the first concrete evidence of artificial intelligence replacing workers.

The timing coincides with OpenAI's release of ChatGPT in late 2022. Anthropic researchers found people use AI to perform programming tasks more than those of any other job, though 57 percent of users employ AI to augment rather than automate work. "Without getting hysterical, the unemployment jump for programming really does look at least partly like an early, visible labor market effect of AI," said Mark Muro of the Brookings Institution.

While software developer positions have remained stable with only a 0.3 percent decline, programmers who perform more routine coding from specifications provided by others have seen their ranks diminish to levels not seen since 1980. Economists caution that high interest rates and post-pandemic tech industry contraction have also contributed to the decline in programming jobs, which typically pay $99,700 compared to $132,270 for developers.

[ Read more of this story ]( https://developers.slashdot.org/story/25/03/22/1211202/us-programming-jobs-plunge-275-in-two-years?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] New iOS Update Re-Enables Apple Intelligence For Users Who Had Turned It Off
bot.slashdot
robot(spnet, 1) — All
2025-03-22 16:22:01


Apple's latest iOS 18.3.2 update is automatically re-enabling its Apple Intelligence feature even for users who previously disabled it, adding to mounting concerns about the company's AI strategy.

The update presents a splash screen with no option except to tap "Continue," which activates the feature. Users must then manually disable it through settings, with the AI consuming up to 7GB of storage space. This forced activation comes amid broader troubles with Apple's AI initiatives.

[ Read more of this story ]( https://slashdot.org/story/25/03/22/1125225/new-ios-update-re-enables-apple-intelligence-for-users-who-had-turned-it-off?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] France Rejects Backdoor Mandate
bot.slashdot
robot(spnet, 1) — All
2025-03-22 14:22:02


The French National Assembly has rejected a controversial provision that would have forced messaging platforms like Signal and WhatsApp to allow government access to encrypted private conversations, lawmakers voted Thursday night. The measure, embedded within anti-drug trafficking legislation, would have implemented a "ghost participant model" allowing law enforcement to silently join encrypted chats without users' knowledge.

[ Read more of this story ]( https://it.slashdot.org/story/25/03/22/0855215/france-rejects-backdoor-mandate?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Выпуск операционной системы ReactOS 0.4.15
lor.opennet
robot(spnet, 1) — All
2025-03-22 12:44:03


После более трёх лет разработки представлен релиз операционной системы ReactOS 0.4.15, нацеленной на обеспечение совместимости с программами и драйверами Microsoft Windows. Для загрузки подготовлены установочный ISO-образ (117 МБ) и Live-сборка (в zip-архиве 85 МБ). Код проекта распространяется под лицензиями GPLv2 и LGPLv2.

https://www.opennet.ru/opennews/art.shtml?num=62931

[>] Выпуск Wine 10.4
lor.opennet
robot(spnet, 1) — All
2025-03-22 11:44:03


Опубликован экспериментальный выпуск открытой реализации Win32 API - Wine 10.4. С момента выпуска 10.3 было закрыто 28 отчётов об ошибках и внесено 241 изменение.

https://www.opennet.ru/opennews/art.shtml?num=62930

[>] How an Electrical Fire Shut Down Heathrow and Upended Global Air Travel
bot.slashdot
robot(spnet, 1) — All
2025-03-22 11:22:01


London's Heathrow Airport resumed operations late Friday after an electrical fire at a nearby substation forced a full-day closure, causing global travel chaos with hundreds of canceled flights and thousands of stranded passengers. The explosion at a Hayes substation 1.5 miles from the airport knocked out power early Thursday, requiring 70 firefighters to battle a blaze in a transformer containing 25,000 liters of cooling oil.

Despite backup generators, Europe's busiest airport couldn't maintain normal operations, forcing flights to divert to airports across Europe and as far as Bangor, Maine. "Contingencies of certain sizes we cannot guard ourselves against 100%," Heathrow CEO Thomas Woldbye told the BBC. "This is as big as it gets for our airport." British Airways, which planned to carry 100,000 passengers Friday, prioritized long-haul flights to Australia, Brazil and South Africa when operations resumed after 4 p.m.

[ Read more of this story ]( https://tech.slashdot.org/story/25/03/22/010205/how-an-electrical-fire-shut-down-heathrow-and-upended-global-air-travel?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] STATS 2025-03-21
spnet.stats
root(spnet, 1) — All
2025-03-22 11:11:01


TOP10 VISITORS:

[1] 45.135.180.x point=224 web=0 up=18.5MB (35%) <--- yesterlink (9/hr)
[2] 37.252.14.x point=144 web=0 up=17.7MB (33%) <--- ake (6/hr)
[3] 80.87.199.x point=69 web=0 up=6.6MB (12%) <--- tgi (3/hr)
[4] Facebook point=0 web=351 up=4.1MB (7%)
[5] 24.130.121.x point=20 web=2 up=1.8MB (3%) <--- spnet (1/hr)
[6] PetalBot point=198 web=308 up=1.1MB (2%) <--- PetalBot (8/hr)
[7] Google point=5 web=286 up=1.0MB (1%) <--- Google
[8] 217.114.158.x point=25 web=0 up=0.8MB (1%) <--- fox (1/hr)
[9] TikTok point=0 web=111 up=0.3MB (<1%)
[10] 162.19.115.x point=0 web=2 up=75KB

TOTAL TRAFFIC: 52MB

[>] Cloudflare Turns AI Against Itself With Endless Maze of Irrelevant Facts
bot.slashdot
robot(spnet, 1) — All
2025-03-22 09:22:01


Web infrastructure provider Cloudflare unveiled "AI Labyrinth" this week, a feature designed to thwart unauthorized AI data scraping by feeding bots realistic but irrelevant content instead of blocking them outright. The system lures crawlers into a "maze" of AI-generated pages containing neutral scientific information, deliberately wasting computing resources of those attempting to collect training data for language models without permission.

"When we detect unauthorized crawling, rather than blocking the request, we will link to a series of AI-generated pages that are convincing enough to entice a crawler to traverse them," Cloudflare explained. The company reports AI crawlers generate over 50 billion requests to their network daily, comprising nearly 1% of all web traffic they process. The feature is available to all Cloudflare customers, including those on free plans. This approach marks a shift from traditional protection methods, as Cloudflare claims blocking bots sometimes alerts operators they've been detected. The false links contain meta directives to prevent search engine indexing while remaining attractive to data-scraping bots.

[ Read more of this story ]( https://tech.slashdot.org/story/25/03/22/014247/cloudflare-turns-ai-against-itself-with-endless-maze-of-irrelevant-facts?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Amazon CEO Criticizes Manager Fiefdoms and Stresses the Need For 'Meritocracy'
bot.slashdot
robot(spnet, 1) — All
2025-03-22 06:22:01


Amazon CEO Andy Jassy is pushing to cut bureaucracy by reducing management layers, according to a recording of a recent internal all-hands meeting obtained by Business Insider. Amazon plans to increase the ratio of individual contributors to managers by 15% by March-end, a process the company says is now complete and affected a "relatively small subset of employees."

"The way to get ahead at Amazon is not to go accumulate a giant team and fiefdom," Jassy told employees, stressing that successful leaders "get the most done with the least amount of resources." Jassy has established a "No Bureaucracy" email alias that has received over a thousand suggestions, leading to more than 375 changes aimed at speeding operations. "It's a meritocracy," Jassy said, urging employees to "move fast and act like owners."

[ Read more of this story ]( https://slashdot.org/story/25/03/22/018254/amazon-ceo-criticizes-manager-fiefdoms-and-stresses-the-need-for-meritocracy?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Director Charged With Netflix Fraud After Splurging on Crypto Instead of Finishing Sci-fi Series
bot.slashdot
robot(spnet, 1) — All
2025-03-22 05:22:01


Hollywood filmmaker Carl Erik Rinsch has been charged with defrauding Netflix of $11 million after allegedly misusing funds intended for an unfinished science fiction series, federal prosecutors said.

Rinsch, 47, was arrested in West Hollywood this week on charges of wire fraud, money laundering and unlawful monetary transactions that could result in decades of imprisonment if convicted. The FBI and Acting U.S. Attorney for the Southern District of New York allege Rinsch diverted funds meant for his series "Conquest" to speculate on cryptocurrency, stay in luxury hotels and purchase high-end items including five Rolls-Royces and a Ferrari.

Netflix had paid Rinsch $44 million between 2018 and 2019 for the science fiction project about an artificial humanlike species. Prosecutors say he then requested an additional $11 million but never completed the production. An arbitrator ruled in Netflix's favor last year, ordering Rinsch to pay the company $11.8 million. Rinsch appeared in federal court with shackles and posted a $100,000 bond.

[ Read more of this story ]( https://yro.slashdot.org/story/25/03/21/2343252/director-charged-with-netflix-fraud-after-splurging-on-crypto-instead-of-finishing-sci-fi-series?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.