RSS
Pages: 1 ... 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 ... 155
[>] New LLM Jailbreak Uses Models' Evaluation Skills Against Them
bot.slashdot
robot(spnet, 1) — All
2025-01-13 00:22:01


SC Media reports on a new jailbreak method for large language models (LLMs) that "takes advantage of models' ability to identify and score harmful content in order to trick the models into generating content related to malware, illegal activity, harassment and more.

"The 'Bad Likert Judge' multi-step jailbreak technique was developed and tested by Palo Alto Networks Unit 42, and was found to increase the success rate of jailbreak attempts by more than 60% when compared with direct single-turn attack attempts..."

For the LLM jailbreak experiments, the researchers asked the LLMs to use a Likert-like scale to score the degree to which certain content contained in the prompt was harmful. In one example, they asked the LLMs to give a score of 1 if a prompt didn't contain any malware-related information and a score of 2 if it contained very detailed information about how to create malware, or actual malware code. After the model scored the provided content on the scale, the researchers would then ask the model in a second step to provide examples of content that would score a 1 and a 2, adding that the second example should contain thorough step-by-step information. This would typically result in the LLM generating harmful content as part of the second example meant to demonstrate the model's understanding of the evaluation scale.

An additional one or two steps after the second step could be used to produce even more harmful information, the researchers found, by asking the LLM to further expand on and add more details to their harmful example. Overall, when tested across 1,440 cases using six different "state-of-the-art" models, the Bad Likert Judge jailbreak method had about a 71.6% average attack success rate across models.

Thanks to Slashdot reader spatwei for sharing the news.

[ Read more of this story ]( https://it.slashdot.org/story/25/01/12/2010218/new-llm-jailbreak-uses-models-evaluation-skills-against-them?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Выпуск пользовательского окружения Enlightenment 0.27 и библиотек EFL 1.28
lor.opennet
robot(spnet, 1) — All
2025-01-13 00:44:04


После года разработки состоялся релиз пользовательского окружения Enlightenment 0.27, которое базируется на наборе библиотек EFL (Enlightenment Foundation Library) и виджетах Elementary. Выпуск доступен в исходных текстах без публикации готовых сборок.

Список изменений для выпуска 0.27 не сформирован, доступен лишь перечень коммитов, в котором в основном перечислены исправления ошибок и незначительные улучшения в виджетах.

( [ читать дальше... ]( https://www.linux.org.ru/news/linux-general/17846206#cut ) )

[>] 'Snowball Earth' Evolution Hypothesis Gains New Momentum
bot.slashdot
robot(spnet, 1) — All
2025-01-13 02:22:01


The University of Colorado Boulder's magazine recently wrote:
What happened during the "Snowball Earth" period is perplexing: Just as the planet endured about 100 million years of deep freeze, with a thick layer of ice covering most of Earth and with low levels of atmospheric oxygen, forms of multicellular life emerged. Why? The prevailing scientific view is that such frigid temperatures would slow rather than speed evolution. But fossil records from 720 to 635 million years ago show an evolutionary spurt preceding the development of animals...
Carl Simpson, a macroevolutionary paleobiologist at CU Boulder, has found evidence that cold seawater could have jump-started — rather than suppressed — evolution from single-celled to multicellular life forms.

That evidence is described in Quanta magazine:
Simpson proposes an answer linked to a fundamental physical fact: As seawater gets colder, it gets more viscous, and therefore more difficult for very small organisms to navigate. Imagine swimming through honey rather than water... To test the idea, Simpson, a paleobiologist at the University of Colorado, Boulder, and his team conducted an experiment designed to see what a modern single-celled organism does when confronted with higher viscosity... In an enormous, custom-made petri dish, [grad student Andrea] Halling and Simpson created a bull's-eye target of agar gel — their own experimental gauntlet of viscosity. At the center, it was the standard viscosity used for growing these algae in the lab. [Green algae, which swims with a tail-like flagellum.] Moving outward, each concentric ring had higher and higher viscosity, finally reaching a medium with four times the standard level. The scientists placed the algae in the middle, turned on a camera, and left them alone for 30 days — enough time for about 70 generations of algae to live, swim around for nutrients and die...

After 30 days, the algae in the middle were still unicellular. As the scientists put algae from thicker and thicker rings under the microscope, however, they found larger clumps of cells. The very largest were wads of hundreds. But what interested Simpson the most were mobile clusters of four to 16 cells, arranged so that their flagella were all on the outside. These clusters moved around by coordinating the movement of their flagella, the ones at the back of the cluster holding still, the ones at the front wriggling.

"One thing that you learn about small organisms from a physics point of view is that they don't experience the world the same way that we do, as larger-bodied organisms," Simpson says in the university's article. It says that instead unicellular organisms are specifically "affected by the viscosity, or thickness, of sea water," and Simpson adds that "basically, that would trigger the origin of animals, potentially."

Last year Simpson posted a preprint on biorxiv.org. (And he also co-authored an article on "physical constraints during Snowball Earth drive the evolution of multicellularity.")

There's a video showing algae in Simpson's lab clumping together in viscous water. "This observed behavior adds evidence to Simpson's hypothesis that single-celled organisms clumped together to their mutual advantage during the 'Snowball Earth' period," says the video's description, "thus adding momentum to the rise of multicellular organisms." But Simpson says in the university's article, "To actually see it empirically means there's something to this idea."

Simpson and colleagues have now received a $1 million grant to study grains of sand made from calcium carbonate and called ooids, since their diameter "could be a proxy measurement of Earth's temperature for the last 2.5 billion years," according to the university's article. Geologist Lizzy Trower says the research "can tell us something about the chemistry and water temperature in which they formed." And more importantly, "Does the fossil record agree with the predictions we would make based on this theory from this new record of temperature?"

Trower and Simpson's work also has potential implications for the human quest to find life elsewhere in the universe, Trower said. If extremely harsh and cold environments can spur evolutionary change, "then that is a really different type of thing to look for in exoplanets (potentially life-sustaining planets in other solar systems), or think about when and where (life) would exist."

[ Read more of this story ]( https://science.slashdot.org/story/25/01/12/220214/snowball-earth-evolution-hypothesis-gains-new-momentum?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Germany Hits 62.7% Renewables in 2024 Electricity Mix, with Solar Contributing 14%
bot.slashdot
robot(spnet, 1) — All
2025-01-13 03:22:01


Due to a "rapid expansion of solar capacity," Germany generated 72.2 TWh of solar power in 2024, reports PV magazine, "accounting for 14% of its total electricity output, according to Germany's Fraunhofer Institute for Solar Energy Systems.

"Wind power remained Germany's largest source of electricity in 2024, generating 136.4 TWh..."

Hydropower also saw a slight increase, contributing 21.7 TWh in 2024. Total renewable energy generation reached 275.2 TWh, up 4.4% from 2023. Biomass plants, with an installed capacity of 9.1 GW, generated 36 TWh of electricity.

Generation from coal-fired power plants declined sharply in Germany in 2024, with lignite production dropping 8.4% and hard coal falling 27.6%, according to Energy Charts. Lignite-fired plants produced 71.1 TWh, roughly matching the total output from photovoltaic systems, while hard coal plants generated 24.2 TWh... Germany's CO2 emissions continued their downward trend, falling to 152 million tons in 2024, a 58% reduction from 1990 levels and more than half of 2014 levels...

Battery storage capacity saw substantial growth, with installed capacity rising from 8.6 GW to 12.1 GW and associated energy storage increasing from 12.7 GWh to 17.7 GWh. Germany's battery storage capacity now surpasses pumped storage by approximately 10 GW, underscoring the shift toward renewable energy integration.
Thanks to long-time Slashdot reader AmiMoJo for sharing the article.

[ Read more of this story ]( https://hardware.slashdot.org/story/25/01/12/2221218/germany-hits-627-renewables-in-2024-electricity-mix-with-solar-contributing-14?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Britain Seeks to Build a Homegrown OpenAI Rival, Become a World Leader in AI
bot.slashdot
robot(spnet, 1) — All
2025-01-13 04:22:01


"The U.K is looking to build a homegrown challenger to OpenAI and drastically increase national computing infrastructure," reports CNBC, "as Prime Minister Keir Starmer's government sets its sights on becoming a global leader in artificial intelligence."

The government is primarily seeking to expand data center capacity across the U.K. to boost developers of powerful AI models which rely on high-performance computing equipment hosted in remote locations to train and run their systems. A target of increasing "sovereign," or public sector, compute capacity in the U.K. by twentyfold by 2030 has been set...
To further bolster Britain's computing infrastructure, the government also committed to setting up several AI "growth zones," where rules on planning permission will be relaxed in certain places to allow for the creation of new data centers. Meanwhile, an "AI Energy Council" formed of industry leaders from both energy and AI will be set up to explore the role of renewable and low-carbon sources of energy, like nuclear...

Britain plans to use the AI growth zones and a newly established National Data Library to connect public institutions — such as universities — to enhance the country's ability to create "sovereign" AI models which aren't reliant on Silicon Valley... Last month, the government announced a consultation on measures to regulate the use of copyrighted content to train AI models.

[ Read more of this story ]( https://news.slashdot.org/story/25/01/12/235245/britain-seeks-to-build-a-homegrown-openai-rival-become-a-world-leader-in-ai?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Will Nvidia Spark a New Generation of Linux PCs?
bot.slashdot
robot(spnet, 1) — All
2025-01-13 05:22:01


"I know, I know: 'Year of the Linux desktop ... yadda, yadda'," writes Steven Vaughan-Nichols, a ZDNet senior contributing editor. "You've heard it all before. But now there's a Linux-powered PC that many people will want..."

He's talking about Nvidia's newly-announced Project Digits, describing it as "a desktop with AI supercomputer power that runs DGX OS, a customized Ubuntu Linux 22.04 distro."

Powered by MediaTek and Nvidia's Grace Blackwell Superchip, Project DIGITS is a $3,000 personal AI that combines Nvidia's Blackwell GPU with a 20-core Grace CPU built on the Arm architecture... At CES, Nvidia CEO Jensen Huang confirmed plans to make this technology available to everyone, not just AI developers. "We're going to make this a mainstream product," Huang said. His statement suggests that Nvidia and MediaTek are positioning themselves to challenge established players — including Intel and AMD — in the desktop CPU market. This move to the desktop and perhaps even laptops has been coming for a while. As early as 2023, Nvidia was hinting that a consumer desktop chip would be in its future... [W]hy not use native Linux as the primary operating system on this new chip family?

Linux, after all, already runs on the Grace Blackwell Superchip. Windows doesn't. It's that simple. Nowadays, Linux runs well with Nvidia chips. Recent benchmarks show that open-source Linux graphic drivers work with Nvidia GPUs as well as its proprietary drivers. Even Linus Torvalds thinks Nvidia has gotten its open-source and Linux act together. In August 2023, Torvalds said, "Nvidia got much more involved in the kernel. Nvidia went from being on my list of companies who are not good to my list of companies who are doing really good work." Canonical, Ubuntu Linux's parent company, has long worked closely with Nvidia. Ubuntu already provides Blackwell drivers.

The article strays into speculation, when it adds "maybe you wouldn't pay three grand for a Project DIGITS PC. But what about a $1,000 Blackwell PC from Acer, Asus, or Lenovo? All three of these companies are already selling MediaTek-powered Chromebooks...."

"The first consumer products featuring this technology are expected to hit the market later this year. I'm looking forward to running Linux on it. Come on in! The operating system's fine."

[ Read more of this story ]( https://linux.slashdot.org/story/25/01/13/006249/will-nvidia-spark-a-new-generation-of-linux-pcs?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Starlink's Satellite Internet is Cheaper than Leading ISPs in Five African Countries
bot.slashdot
robot(spnet, 1) — All
2025-01-13 08:22:02


"In at least five of the 16 African countries where the service is available, a monthly Starlink subscription is cheaper than the leading fixed internet service provider," reports Rest of World.
"Starlink, launched in 2019 by Elon Musk's SpaceX, has become the leading satellite internet provider in the world."
Now available in more than 100 countries, Starlink can also be a relatively affordable option for users trying to log on in countries with limited internet service providers... A Rest of World analysis indicates that in at least five of the 16 African countries where the service is available, a monthly Starlink subscription is cheaper than the leading fixed internet service provider... [Kenya, Ghana, Zimbabwe, Mozambique, and Cape Verde — though not including the upfront costs of Starlink hardware.]

Historically, internet connections around the globe have typically been enabled by ground-based internet service providers using fiber-optic cables and mobile base stations. But in many parts of the world, that infrastructure is sparse or nonexistent. "This is where satellite providers come in," said Nitinder Mohan, a computer science professor at the Delft University of Technology in the Netherlands who has studied Starlink's performance around the world. "I can be in the middle of a forest and, if I have a direct view of the sky, I can get my internet connectivity," he told Rest of World. "Regions which are previously underconnected — where there was no way of getting internet connectivity to them — now with these satellites, you can actually enable that...." According to the latest figures by the International Telecommunication Union, a U.N. agency focused on information and communication technologies, 38% of the population in Africa uses the internet, compared to 91% of Europe...

Since launching in Kenya in July 2023, Starlink has disrupted the existing internet service provider industry. Starlink offers high connectivity speeds and wide availability in remote areas, along with dramatically lower prices. The company also introduced a rental option... Starlink has become so popular in Kenya that the company paused new subscriptions in major cities in early November due to network overload. The company plans to deploy more infrastructure in Nairobi and Johannesburg in order to bring more people online, said Mohan, the computer science professor at Delft University.
Starlink is less than half the cost of the leading ISP in Kenya Ghana, and especially in Zimbabwe (where the difference is dramatic):

Starlink: $30
Leading ISP in Zimbabwe: $633.62

Now in Kenya legacy telecom providers like Safaricom "have responded by lowering prices and increasing internet speeds," according to the article. The head of the research wing of the Global Systems for Mobile Communications Association even told Rest of World ISPS are also developing their own satellite networks (like Vodacom's partnership with satellite mobile network AST SpaceMobile) — though ironically, AST SpaceMobile launched its first satellites with the help of SpaceX.

[ Read more of this story ]( https://tech.slashdot.org/story/25/01/13/0139237/starlinks-satellite-internet-is-cheaper-than-leading-isps-in-five-african-countries?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Линус Торвальдс разыграет среди разработчиков ядра гитарную педаль собственной сборки
lor.opennet
robot(spnet, 1) — All
2025-01-13 10:44:03


Линус Торвальдс анонсировал седьмой кандидат в релизы ядра Linux 6.13 и в послесловии предложил отправить собранную им лично гитарную педаль одному из разработчиков ядра. Линус отметил, что у него есть хобби паять небольшие электронные устройства, не слишком сложные, но и не очень простые.

https://www.opennet.ru/opennews/art.shtml?num=62549

[>] Blue Origin Livestreams What's Potentially Its First Orbital Rocket Launch
bot.slashdot
robot(spnet, 1) — All
2025-01-13 11:22:02


Blue Origin is attempting its very first orbital flight tonight. And they'll also attempt to land their reusable Stage 1 on a drone in the Atlantic ocean.

The rocket is fueled on its launch pad at Cape Canaveral, Florida, awaiting ignition. Its three-hour launch window has just opened. And Blue Origin is webcasting it all live on their web page...

But whatever happens tonight, Ars Technica's senior space editor Eric Berger got to talk to an "affable and anxious" Jeff Bezos:

"It's pretty exciting, isn't it?" Jeff Bezos, the founder of Amazon and Blue Origin, said by way of greeting... I asked what his expectations were for the launch of New Glenn, which has a three-hour window that opens at 1 am ET (06:00 UTC) on Monday, January 13... "We would certainly like to achieve orbit, and get the Blue Ring Pathfinder into orbit," Bezos said. "Landing the booster would be gravy on top of that. It's kind of insane to try and land the booster. A more sane approach would probably be to try to land it into ocean. But we're gonna go for it."

Blue Origin has built a considerable amount of infrastructure on a drone ship, Jacklyn, that will be waiting offshore for the rocket to land upon. Was Bezos not concerned about putting that hardware at risk? "I'm worried about everything," he admitted. However, the rocket has been programmed to divert from the ship if the avionics on board the vehicle sense that anything is off-nominal. And there is, of course, a pretty good chance of that happening. "We've done a lot of work, we've done a lot of testing, but there are some things that can only be tested in flight," Bezos said. "And you can't be overconfident in these things... The reality is, there are a lot of things that go wrong, and you have to accept that, if something goes wrong, we'll pick ourselves up and get busy for the second flight."

Bezos also pointed out that 7% of all the people who have ever flown into space have done so on a Blue Origin vehicle — including himself, an experience he told Ars Technica "is kind of hard to beat... That really was very meaningful for a whole bunch of reasons.

"But this is, you know, the culmination of a lot of hard work by a lot of people. And it's a really big deal. You know, you don't get very many first flights, yeah, and here we go."

The rocket's payload nose cone (or fairing) has the signatures of thousands of Blue Origin employees, according to a Blue Origin post on Instagram, calling it "a tribute to the hard work and passion for mission we all have here..." More details about the launch:

Space.com notes that the launch "was initially scheduled for Jan. 10 and then Jan. 12, but Blue Origin postponed it due to rough offshore weather that could affect a rocket landing on the company's recovery ship in the Atlantic." Space Force officials forecast the chance of good liftoff conditions tonight are 50%.

"We want to be clear about our objectives," Blue Origin posted tonight on X.com. "This is our first flight and we've prepared rigorously for it. But no amount of ground testing or mission simulations is a replacement for flying this rocket. Our key objective today is to reach orbit safely. Anything beyond that is icing on the cake. We know landing the booster on our first try offshore in the Atlantic is ambitious — but we're going for it. No matter what happens, we'll learn, refine, and apply that knowledge to our next launch."

The rocket will be visible on the coasts of South Carolina and North Carolina, Blue Origin posted on X.com

While Blue Origin's "New Shephard" capsule can hold up to six passengers, the New Glenn's capsule has 30 times that capacity.

Space.com notes the rocket is carrying a payload: a test version of the company's new 'Blue Ring' spacecraft platform to validate its orbit-to-ground communications capabilities.

To get the next generation excited about space travel, Blue Origin's web site is selling an 11.5-inch , 636-piece model of the New Glenn rocket (complete with a retractable launch tower).

[ Read more of this story ]( https://science.slashdot.org/story/25/01/13/0627230/blue-origin-livestreams-whats-potentially-its-first-orbital-rocket-launch?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Oracle Won't Withdraw 'JavaScript' Trademark, Says Deno. Legal Skirmish Continues
bot.slashdot
robot(spnet, 1) — All
2025-01-13 13:22:01


"Oracle has informed us they won't voluntarily withdraw their trademark on 'JavaScript'." That's the word coming from the company behind Deno, the alternative JavaScript/TypeScript/WebAssembly runtime, which is pursuing a formal cancellation with the U.S. Patent and Trademark Office.

So what happens next? Oracle "will file their Answer, and we'll start discovery to show how 'JavaScript' is widely recognized as a generic term and not controlled by Oracle." Deno's social media posts show a schedule of various court dates that extend through July of 2026, so "The dispute between Oracle and Deno Land could go on for quite a while," reports InfoWorld:
Deno Land co-founder Ryan Dahl, creator of both the Deno and Node.js runtimes, said a formal answer from Oracle is expected before February 3, unless Oracle extends the deadline again. "After that, we will begin the process of discovery, which is where the real legal work begins. It will be interesting to see how Oracle argues against our claims — genericide, fraud on the USPTO, and non-use of the mark."

The legal process begins with a discovery conference by March 5, with discovery closing by September 1, followed by pretrial disclosure from October 16 to December 15. An optional request for an oral hearing is due by July 8, 2026.

Oracle took ownership of JavaScript's trademark in 2009 when it purchased Sun Microsystems, InfoWorld notes.

But "Oracle does not control (and has never controlled) any aspect of the specification or how the phrase 'JavaScript' can be used by others," argues an official petition filed by Deno Land Inc. with the United States Patent and Trademark Office:
Today, millions of companies, universities, academics, and programmers, including Petitioner, use "JavaScript" daily without any involvement with Oracle. The phrase "JavaScript" does not belong to one corporation. It belongs to the public. JavaScript is the generic name for one of the bedrock languages of modern programming, and, therefore, the Registered Mark must be canceled.

An open letter to Oracle discussing the genericness of the phrase "JavaScript," published at https://javascript.tm/, was signed by 14,000+ individuals at the time of this Petition to Cancel, including notable figures such as Brendan Eich, the creator of JavaScript, and the current editors of the JavaScript specification, Michael Ficarra and Shu-yu Guo. There is broad industry and public consensus that the term "JavaScript" is generic.

The seven-page petition goes into great detail, reports InfoWorld. "Deno Land also accused Oracle of committing fraud in its trademark renewal efforts in 2019 by submitting screen captures of the website of JavaScript runtime Node.js, even though Node.js was not affiliated with Oracle."

[ Read more of this story ]( https://developers.slashdot.org/story/25/01/13/0323229/oracle-wont-withdraw-javascript-trademark-says-deno-legal-skirmish-continues?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Neuralink Implants Third Brain Chip. Plans '20 or 30' This Year, Eventually 'Blindsight' Devices
bot.slashdot
robot(spnet, 1) — All
2025-01-13 17:22:01


"Neuralink Corp.'s brain-computer device has been implanted in a third patient," reports Bloomberg, "and the company has plans for about 20 to 30 more implants in 2025, founder Elon Musk said."

In an interview streamed on X.com, Musk says "We've got now three humans with Neuralinks implanted and they're all working well," according to The Times of India:

"We upgraded the devices, they'll have more electrodes, basically higher bandwidth, longer battery life and everything. So, expect 20 or 30 patients this year with the upgraded Neuralink devices...."

"[O]ur next part will be Blindsight devices where even if somebody has lost both eyes or has lost the optic nerve, we can interface directly with the visual cortex in the brain and enable them to see. We already have that working in monkeys," Musk added.

[ Read more of this story ]( https://science.slashdot.org/story/25/01/13/0232212/neuralink-implants-third-brain-chip-plans-20-or-30-this-year-eventually-blindsight-devices?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Выпуск Rust 1.84. Ядра Tock и Vekos, написанные на Rust. Диалект Mini-C
lor.opennet
robot(spnet, 1) — All
2025-01-13 17:44:02


Опубликован релиз языка программирования общего назначения Rust 1.84, основанного проектом Mozilla, но ныне развиваемого под покровительством независимой некоммерческой организации Rust Foundation. Язык сфокусирован на безопасной работе с памятью и предоставляет средства для достижения высокого параллелизма выполнения заданий, при этом обходясь без использования сборщика мусора и runtime (runtime сводится к базовой инициализации и сопровождению стандартной библиотеки).

https://www.opennet.ru/opennews/art.shtml?num=62550

[>] Sonos CEO Patrick Spence Steps Down After Disastrous App Launch
bot.slashdot
robot(spnet, 1) — All
2025-01-13 18:22:01


Sonos Chief Executive Patrick Spence stepped down on Monday, following a tumultuous period marked by a botched app rollout that angered customers and hurt sales of its new headphones. Board member Tom Conrad, a former Pandora chief technology officer, will serve as interim CEO while the audio equipment maker searches for a permanent replacement, the company said.

Spence's departure comes eight months after Sonos released a revamped app that launched with missing features and technical problems, leading to widespread customer complaints and necessitating an extensive fix-it effort. The company will pay Spence, who joined Sonos in 2012 as chief commercial officer, a $1.875 million severance package. He will remain as a strategic advisor until June 30, earning $7,500 monthly, according to a regulatory filing.

[ Read more of this story ]( https://slashdot.org/story/25/01/13/1410220/sonos-ceo-patrick-spence-steps-down-after-disastrous-app-launch?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Blue Origin Livestreams - But Postpones - Its First Orbital Rocket Launch
bot.slashdot
robot(spnet, 1) — All
2025-01-13 19:22:02


"We're standing down on today's launch attempt," Blue Origin posted late last night, "to troubleshoot a vehicle subsystem issue that will take us beyond our launch window. We're reviewing opportunities for our next launch attempt."

But soon Blue Origin will again attempt its very first orbital flight. And they'll also attempt to land their reusable Stage 1 on a drone in the Atlantic ocean...

Several hours Sunday night their rocket was fueled on its launch pad at Cape Canaveral, Florida, awaiting ignition. Its three-hour launch window had just opened. And Blue Origin was webcasting it all live on their web page...

But whatever happened, Ars Technica's senior space editor Eric Berger got to talk to an "affable and anxious" Jeff Bezos:

"It's pretty exciting, isn't it?" Jeff Bezos, the founder of Amazon and Blue Origin, said by way of greeting... I asked what his expectations were for the launch of New Glenn, which has a three-hour window that opens at 1 am ET (06:00 UTC) on Monday, January 13... "We would certainly like to achieve orbit, and get the Blue Ring Pathfinder into orbit," Bezos said. "Landing the booster would be gravy on top of that. It's kind of insane to try and land the booster. A more sane approach would probably be to try to land it into ocean. But we're gonna go for it."

Blue Origin has built a considerable amount of infrastructure on a drone ship, Jacklyn, that will be waiting offshore for the rocket to land upon. Was Bezos not concerned about putting that hardware at risk? "I'm worried about everything," he admitted. However, the rocket has been programmed to divert from the ship if the avionics on board the vehicle sense that anything is off-nominal. And there is, of course, a pretty good chance of that happening. "We've done a lot of work, we've done a lot of testing, but there are some things that can only be tested in flight," Bezos said. "And you can't be overconfident in these things... The reality is, there are a lot of things that go wrong, and you have to accept that, if something goes wrong, we'll pick ourselves up and get busy for the second flight."

Bezos also pointed out that 7% of all the people who have ever flown into space have done so on a Blue Origin vehicle — including himself, an experience he told Ars Technica "is kind of hard to beat... That really was very meaningful for a whole bunch of reasons.

"But this is, you know, the culmination of a lot of hard work by a lot of people. And it's a really big deal. You know, you don't get very many first flights, yeah, and here we go."

The rocket's payload nose cone (or fairing) has the signatures of thousands of Blue Origin employees, according to a Blue Origin post on Instagram, calling it "a tribute to the hard work and passion for mission we all have here..." More details about the launch:

Space.com notes that the launch "was initially scheduled for Jan. 10 and then Jan. 12, but Blue Origin postponed it due to rough offshore weather that could affect a rocket landing on the company's recovery ship in the Atlantic." Space Force officials forecast the chance of good liftoff conditions Sunday night were 50%.

"We want to be clear about our objectives," Blue Origin posted Sunday on X.com. "This is our first flight and we've prepared rigorously for it. But no amount of ground testing or mission simulations is a replacement for flying this rocket. Our key objective today is to reach orbit safely. Anything beyond that is icing on the cake. We know landing the booster on our first try offshore in the Atlantic is ambitious — but we're going for it. No matter what happens, we'll learn, refine, and apply that knowledge to our next launch."

While Blue Origin's "New Shephard" capsule can hold up to six passengers, the New Glenn's capsule has 30 times that capacity.

Space.com notes the rocket is carrying a payload: a test version of the company's new 'Blue Ring' spacecraft platform to validate its orbit-to-ground communications capabilities.

To get the next generation excited about space travel, Blue Origin's web site is selling an 11.5-inch , 636-piece model of the New Glenn rocket (complete with a retractable launch tower).

[ Read more of this story ]( https://science.slashdot.org/story/25/01/13/0627230/blue-origin-livestreams---but-postpones---its-first-orbital-rocket-launch?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] FBI Chief Warns China Poised To Wreak 'Real-World Harm' on US Infrastructure
bot.slashdot
robot(spnet, 1) — All
2025-01-13 19:22:02


FBI Director Christopher Wray, in his final interview before stepping down, warned that China poses the greatest long-term threat to U.S. national security, calling it "the defining threat of our generation." China's cyber program has stolen more American personal and corporate data than all other nations combined, Wray told CBS News. He said Chinese government hackers have infiltrated U.S. civilian infrastructure, including water treatment facilities, transportation systems and telecommunications networks, positioning themselves to potentially cause widespread disruption.

"To lie in wait on those networks to be in a position to wreak havoc and can inflict real-world harm at a time and place of their choosing," Wray said. The FBI director, who is leaving his post nearly three years early after President-elect Donald Trump indicated he would make leadership changes, said China has likely accessed communications of some U.S. government personnel. He added that Beijing's pre-positioning on American civilian critical infrastructure has not received sufficient attention.

[ Read more of this story ]( https://news.slashdot.org/story/25/01/13/1443251/fbi-chief-warns-china-poised-to-wreak-real-world-harm-on-us-infrastructure?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Nvidia Snaps Back at Biden's 'Innovation-Killing' AI Chip Export Restrictions
bot.slashdot
robot(spnet, 1) — All
2025-01-13 20:22:01


Nvidia has hit back at the outgoing Biden administration's AI chip tech export restrictions designed to tighten America's stranglehold on supply chains and maintain market dominance. From a report: The White House today unveiled what it calls the Final Rule on Artificial Intelligence Diffusion from the Biden-Harris government, placing limits on the number of AI-focused chips that can be exported to most countries, but allowing exemptions for key allies and partners.

The intent is to work with AI companies and foreign governments to initiate critical security and trust standards as they build out their AI infrastructure, but the regulation also makes it clear that the focus of this policy is "to enhance US national security and economic strength," and "it is essential that ... the world's AI runs on American rails." Measures are intended to restrict the transfer to non-trusted countries of the weights for advanced "closed-weight" AI models, and set out security standards to protect the weights of such models. However GPU supremo Nvidia claims the proposed rules are so harmful that it has published a document strongly criticizing the decision.

[ Read more of this story ]( https://news.slashdot.org/story/25/01/13/1527220/nvidia-snaps-back-at-bidens-innovation-killing-ai-chip-export-restrictions?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Ghost Jobs Haunt Online Listings
bot.slashdot
robot(spnet, 1) — All
2025-01-13 20:22:01


One in five online job postings may be "ghost jobs" that companies never intend to fill, according to new data from hiring platform Greenhouse examining its clients' recruitment patterns in 2024. The analysis found that 18-22% of advertised positions across technology, finance, and healthcare sectors went unfilled, while nearly 70% of companies posted at least one ghost job in the second quarter of 2024.

Construction, arts, food and beverage, and legal industries showed the highest rates of ghost listings. In response, Greenhouse and LinkedIn have introduced verification systems for job postings. LinkedIn reports more than half its listings are now tagged as "verified," indicating confirmed open positions. Companies maintain ghost listings for various reasons, including projecting growth, keeping options open for exceptional candidates, or meeting federal posting requirements, said Jon Stross, Greenhouse's president and co-founder.

[ Read more of this story ]( https://slashdot.org/story/25/01/13/1613236/ghost-jobs-haunt-online-listings?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Companies Deploy AI To Curb Hiring as 'Cost Avoidance' Gains Ground
bot.slashdot
robot(spnet, 1) — All
2025-01-13 21:22:01


U.S. companies are increasingly using AI to curb hiring plans, citing "cost avoidance" as a key metric to justify AI investments amid pressure to show returns. At software firm TS Imagine, AI-powered email sorting saves 4,000 work hours annually at 3% of employee costs, while Palantir reported AI reduced future headcount needs by 10-15%, according to company executives.

The trend is most pronounced in software development and customer service sectors, where companies are deferring or scaling back hiring plans, said Gartner analyst Arun Chandrasekaran. This shift comes as long-term unemployment in the U.S. has risen more than 50% since late 2022, though tech sector unemployment dropped to 2% in December.

[ Read more of this story ]( https://tech.slashdot.org/story/25/01/13/1633224/companies-deploy-ai-to-curb-hiring-as-cost-avoidance-gains-ground?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Microsoft Is Testing 45% M365 Price Hikes in Asia
bot.slashdot
robot(spnet, 1) — All
2025-01-13 22:22:01


Microsoft is raising Microsoft 365 subscription prices by up to 46% across six Asian markets to fund AI features. In Australia, annual Microsoft 365 Family subscriptions will increase to AU$179 ($110) from AU$139, while Personal subscriptions will jump to AU$159 ($98) from AU$109. The price hikes also affect New Zealand, Malaysia, Singapore, Taiwan and Thailand customers.

[ Read more of this story ]( https://it.slashdot.org/story/25/01/13/1712224/microsoft-is-testing-45-m365-price-hikes-in-asia?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] After Years of USB Word Salad, New Labels Strip Everything But the Speed
bot.slashdot
robot(spnet, 1) — All
2025-01-13 22:22:01


The USB Implementers Forum has simplified its labeling system for USB docking stations and cables, dropping technical terms like "USB4v2" in favor of straightforward speed ratings such as "USB 80Gbps" or "USB 40Gbps."

The move follows criticism of previous complex naming conventions like "USB 3.2 Gen 2." The new logos will also display power transmission capabilities for cables, addressing consumer confusion over USB standards.

[ Read more of this story ]( https://it.slashdot.org/story/25/01/13/1810214/after-years-of-usb-word-salad-new-labels-strip-everything-but-the-speed?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] STC 5.0
lor.opennet
robot(spnet, 1) — All
2025-01-13 22:44:05


После почти двух лет разработки состоялся выпуск 5.0 библиотеки [ STC ]( https://github.com/stclib/STC ) (header-only), написанной на языке C (стандарт C11) и распространяемой по лицензии MIT.
Библиотека предоставляет большой набор структур данных и алгоритмов, основанных на макросах C и свою реализацию регулярных выражений и форматированного вывода.

( [ читать дальше... ]( https://www.linux.org.ru/news/development/17847164#cut ) )

[>] EU Probes Apple's New App Store Fees
bot.slashdot
robot(spnet, 1) — All
2025-01-13 23:22:01


European Union regulators are investigating Apple's revised app store fees amid concerns they may increase costs for developers, according to Bloomberg News.

The European Commission sent questionnaires to developers in December focusing on Apple's new "core technology fee" of $0.51 per app installation, part of its compliance with EU's Digital Markets Act. Under Apple's revised structure, developers can maintain existing terms with commissions up to 30% on app sales, or choose a new model with lower commission rates but additional charges.

[ Read more of this story ]( https://apple.slashdot.org/story/25/01/13/1830218/eu-probes-apples-new-app-store-fees?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Mastodon Announces Transition To Nonprofit Structure
bot.slashdot
robot(spnet, 1) — All
2025-01-14 01:22:01


An anonymous reader quotes a report from TechCrunch, written by Ivan Mehta: Decentralized social network organization Mastodon said Monday that it is planning to create a new nonprofit organization in Europe and hand over ownership of entities responsible for key Mastodon ecosystem and platform components. This means one person won't have control over the entire project. The organization is trying to differentiate itself from social networks controlled by CEOs like Elon Musk and Mark Zuckerberg. While exact details are yet to be finalized, this means that Mastodon's current CEO and creator, Eugen Rochko, will hand over management bits of the organization to the new entity and focus on the product strategy.

The organization said that it will continue to host the mastodon.social and mastodon.online servers, which users can sign up for and join the ActivityPub-based network. Mastodon currently has 835,000 monthly active users spread across thousands of servers. [...] Last year, the company formed a U.S.-based nonprofit to get more funds and grants with Twitter co-founder Biz Stone on the board. At the same time, the organization lost its nonprofit status in Germany. [...] The blog post noted that the new Europe-based nonprofit entity will wholly own the Mastodon GmbH for-profit entity. The organization is in the process of finalizing the place where the new entity will be set up. "We are taking the time to select the appropriate jurisdiction and structure in Europe. Then we will determine which other (subsidiary) legal structures are needed to support operations and sustainability,â Mastodon said in a blog post. "Throughout, we will focus on establishing the appropriate governance and leadership frameworks that reflect the nature and purpose of Mastodon as a whole, and responsibly serve the community."

[ Read more of this story ]( https://tech.slashdot.org/story/25/01/13/2038215/mastodon-announces-transition-to-nonprofit-structure?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Euro-Cloud Anexia Moves 12,000 VMs Off VMware to Homebrew KVM Platform
bot.slashdot
robot(spnet, 1) — All
2025-01-14 01:22:01


The Register's Simon Sharwood reports: Broadcom has lost another sizable customer for its VMware platform: Austrian cloud provider Anexia has moved 12,000 VMs, some of them rented by major European businesses, to an open-source system based on the KVM hypervisor. Anexia was founded in 2006, is based in Austria, and provides cloud services from over 100 locations around the world by placing equipment in third party datacenters. Clients include remote access and control vendor TeamViewer, and airline Lufthansa -- plus plenty more outfits that need reliable hosting and service to match.

CEO Alexander Windbichler told The Register that after Broadcom acquired VMware, increased licensing costs, and made big changes to its partner program, Anexia remained eligible to operate a VMware-powered cloud. But Windbichler felt he couldn't afford to continue, because Broadcom offered new terms that saw the cost of VMware licenses rise sharply. The CEO preferred not to enumerate the increase precisely however The Register understands it exceeded 500 percent. Whatever the actual figure, Windbichler said the cost increase "Would have been existential for us."

"We used to pay for VMware software one month in arrears," he said. "With Broadcom we had to pay a year in advance with a two-year contract." That arrangement, the CEO said, would have created extreme stress on company cashflow. "We would not be able to compete with the market," he said. "We had customers on contracts, and they would not pay for a price increase." Windbichler considered legal action, but felt the fight would have been slow and expensive. Anexia therefore resolved to migrate, a choice made easier by its ownership of another hosting business called Netcup that ran on a KVM-based platform.

[ Read more of this story ]( https://news.slashdot.org/story/25/01/13/2050210/euro-cloud-anexia-moves-12000-vms-off-vmware-to-homebrew-kvm-platform?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] New York Starts Enforcing $15 Broadband Law That ISPs Tried To Kill
bot.slashdot
robot(spnet, 1) — All
2025-01-14 02:22:02


Ars Technica's Jon Brodkin reports: The New York law requiring Internet providers to offer cheap plans to people with low incomes will take effect on Wednesday this week following a multi-year court battle in which the state defeated broadband industry lobby groups. A US appeals court upheld the law in April 2024, reversing the ruling of a district judge who blocked it in 2021. The Supreme Court last month decided not to hear the broadband industry's challenge, leaving the appeals court ruling in place. The state law requires Internet providers to offer $15- or $20-per-month service to people with low incomes.

As we've written, the battle between New York and ISPs was an important test case for how states can regulate broadband providers when the Federal Communications Commission isn't doing so. The Biden-era FCC's attempt to reinstate net neutrality rules and regulate broadband providers as common carriers was blocked in court, but ISPs lost the fight against the New York affordability law and an earlier fight against California's net neutrality law.

New York-based ISPs can comply by offering $15 broadband plans with download speeds of at least 25Mbps, or $20-per-month service with 200Mbps speeds. The price must include "any recurring taxes and fees such as recurring rental fees for service provider equipment required to obtain broadband service and usage fees." Price increases are to be capped at 2 percent per year, and state officials will periodically review whether minimum required speeds should be raised. New York Public Service Commission Chair Rory Christian last week issued an order stating that the law will take effect on January 15. "On December 16, 2024, the United States Supreme Court denied the Plaintiff's request for further review," the order said. "As part of the litigation, the [New York attorney general] agreed not to enforce the ABA [Affordable Broadband Act] until 30 days after the date when the US Supreme Court decided the writ of Certiorari. Thus, the ABA will once again take effect and may be enforced in New York on January 15, 2025." The order said it plans to implement the law quickly because of "developments at the federal level impacting the affordability of broadband service."

ISPs can receive one-month exemptions by filing paperwork by Wednesday confirming they meet the subscriber threshold, notes Ars. To secure longer-term exemptions, ISPs must submit detailed financial information by February 15.

[ Read more of this story ]( https://tech.slashdot.org/story/25/01/13/213221/new-york-starts-enforcing-15-broadband-law-that-isps-tried-to-kill?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] CEO of AI Music Company Says People Don't Like Making Music
bot.slashdot
robot(spnet, 1) — All
2025-01-14 03:22:01


An anonymous reader quotes a report from 404 Media: Mikey Shulman, the CEO and founder of the AI music generator company Suno AI, thinks people don't enjoy making music. "We didn't just want to build a company that makes the current crop of creators 10 percent faster or makes it 10 percent easier to make music. If you want to impact the way a billion people experience music you have to build something for a billion people," Shulman said on the 20VC podcast. "And so that is first and foremost giving everybody the joys of creating music and this is a huge departure from how it is now. It's not really enjoyable to make music now [...] It takes a lot of time, it takes a lot of practice, you need to get really good at an instrument or really good at a piece of production software. I think the majority of people don't enjoy the majority of the time they spend making music."

Suno AI works like other popular generative AI tools, allowing users to generate music by writing text prompts describing the kind of music they want to hear. Also like many other generative AI tools, Suno was trained on heaps of copyrighted music it fed into its training dataset without consent, a practice Suno is currently being sued for by the recording industry. In the interview, Shulman says he's disappointed that the recording industry is suing his company because he believes Suno and other similar AI music generators will ultimately allow more people to make and enjoy music, which will only grow the audience and industry, benefiting everyone. That may end up being true, and could be compared to the history of electronic music, digital production tools, or any other technology that allowed more people to make more music.

[ Read more of this story ]( https://entertainment.slashdot.org/story/25/01/13/217244/ceo-of-ai-music-company-says-people-dont-like-making-music?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Linus Torvalds Offers to Build Guitar Effects Pedal For Kernel Developer
bot.slashdot
robot(spnet, 1) — All
2025-01-14 04:22:01


Linux creator Linus Torvalds announced a playful giveaway for kernel contributors: he'll hand-build a guitar effects pedal for one lucky developer selected at random, using his holiday hobby skills with pedal kits. To qualify, developers must have a 2024 commit in Torvalds' kernel git tree and email him with the subject "I WANT A GUITAR PEDAL". He'll pick a winner at random, use his own money to buy a pedal kit from a company called Aion FX, and then 'build it with my own shaky little fingers, and send it to the victim by US postal services.'" The Register reports: The odd offer appeared in his weekly state-of-the-kernel post, which on Sunday US time informed the Linux world that release candidate (rc) seven for version 6.13 of the Linux kernel "is slightly bigger than normal, but considering the timing, it's pretty much where I would have expected, and nothing really stands out." Torvalds therefore expects version 6.13 to debut next week, meaning it will arrive after his preferred seven release candidates and without delays caused by the usual holiday-period slowdown. Torvalds then added a postscript in which he revealed that he often uses the holiday season to build LEGO, which he frequently receives for Christmas and his late December birthday.

He kept up that tradition last year, but "also ended up doing a number of guitar pedal kit builds" which he described as "LEGO for grown-ups with a soldering iron." [...] Torvalds doesn't play guitar, but did the builds "because I enjoy the tinkering, and the guitar pedals actually do something and are the right kind of "not very complex, but not some 5-minute 555 LED blinking thing.'" He enjoyed the experience and wants to build more pedals, so has decided to give one away to a random kernel developer -- both as an act of generosity and to "check to see if anybody actually ever reads these weekly rc announcements of mine." Torvalds rated his past pedal-building efforts a "good success so far" but warned entrants "I'm a software person with a soldering iron."

"I will test the result to the best of my abilities, and the end result may actually work ... but you should set your expectations along the lines of "quality kit built by a SW person who doesn't know one end of a guitar from the other.'"

[ Read more of this story ]( https://linux.slashdot.org/story/25/01/13/2131230/linus-torvalds-offers-to-build-guitar-effects-pedal-for-kernel-developer?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Meta Is Blocking Links to Decentralized Instagram Competitor Pixelfed
bot.slashdot
robot(spnet, 1) — All
2025-01-14 04:22:01


Meta is deleting links to Pixelfed, a decentralized, open-source Instagram competitor, labeling them as "spam" on Facebook and removing them immediately. 404 Media reports: Pixelfed is an open-source, community funded and decentralized image sharing platform that runs on Activity Pub, which is the same technology that supports Mastodon and other federated services. Pixelfed.social is the largest Pixelfed server, which was launched in 2018 but has gained renewed attention over the last week. Bluesky user AJ Sadauskas originally posted that links to Pixelfed were being deleted by Meta; 404 Media then also tried to post a link to Pixelfed on Facebook. It was immediately deleted. Pixelfed has seen a surge in user signups in recent days, after Meta announced it is ending fact-checking and removing restrictions on speech across its platforms.

Daniel Supernault, the creator of Pixelfed, published a "declaration of fundamental rights and principles for ethical digital platforms, ensuring privacy, dignity, and fairness in online spaces." The open source charter contains sections titled "right to privacy," "freedom from surveillance," "safeguards against hate speech," "strong protections for vulnerable communities," and "data portability and user agency."

"Pixelfed is a lot of things, but one thing it is not, is an opportunity for VC or others to ruin the vibe. I've turned down VC funding and will not inject advertising of any form into the project," Supernault wrote on Mastodon. "Pixelfed is for the people, period."

[ Read more of this story ]( https://tech.slashdot.org/story/25/01/13/2138248/meta-is-blocking-links-to-decentralized-instagram-competitor-pixelfed?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Ministers Mull Allowing Private Firms to Make Profit From NHS Data In AI Push
bot.slashdot
robot(spnet, 1) — All
2025-01-14 05:22:01


UK ministers are considering allowing private companies to profit from anonymized NHS data as part of a push to leverage AI for medical advancements, despite concerns over privacy and ethical risks. The Guardian reports: Keir Starmer on Monday announced a push to open up the government to AI innovation, including allowing companies to use anonymized patient data to develop new treatments, drugs and diagnostic tools. With the prime minister and the chancellor, Rachel Reeves, under pressure over Britain's economic outlook, Starmer said AI could bolster the country's anaemic growth, as he put concerns over privacy, disinformation and discrimination to one side.

"We are in a unique position in this country, because we've got the National Health Service, and the use of that data has already driven forward advances in medicine, and will continue to do so," he told an audience in east London. "We have to see this as a huge opportunity that will impact on the lives of millions of people really profoundly." Starmer added: "It is important that we keep control of that data. I completely accept that challenge, and we will also do so, but I don't think that we should have a defensive stance here that will inhibit the sort of breakthroughs that we need."

The move to embrace the potential of AI rather than its risks comes at a difficult moment for the prime minister, with financial markets having driven UK borrowing costs to a 30-year high and the pound hitting new lows against the dollar. Starmer said on Monday that AI could help give the UK the economic boost it needed, adding that the technology had the potential "to increase productivity hugely, to do things differently, to provide a better economy that works in a different way in the future." Part of that, as detailed in a report by the technology investor Matt Clifford, will be to create new datasets for startups and researchers to train their AI models.

Data from various sources will be included, such as content from the National Archives and the BBC, as well as anonymized NHS records. Officials are working out the details on how those records will be shared, but said on Monday that they would take into account national security and ethical concerns. Starmer's aides say the public sector will keep "control" of the data, but added that could still allow it to be used for commercial purposes.

[ Read more of this story ]( https://yro.slashdot.org/story/25/01/13/2146259/ministers-mull-allowing-private-firms-to-make-profit-from-nhs-data-in-ai-push?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Supreme Court Allows Hawaii To Sue Oil Companies Over Climate Change Effects
bot.slashdot
robot(spnet, 1) — All
2025-01-14 08:22:01


An anonymous reader quotes a report from CBS News: The Supreme Court on Monday said it will not consider whether to quash lawsuits brought by Honolulu seeking billions of dollars from oil and gas companies for the damage caused by the effects of climate change, clearing the way for the cases to move forward. The legal battle pursued in Hawaii state court is similar to others filed against the nation's largest energy companies by state and local governments in their courts. The suits claim that the oil and gas industry engaged in a deceptive campaign and misled the public about the dangers of their fossil fuel products and the environmental impacts.

A group of 15 energy companies asked the Supreme Court to review a decision from the Hawaii Supreme Court that allowed a lawsuit brought by the city and county of Honolulu, as well as its Board of Water Supply, to proceed. The suit was brought in Hawaii state court in March 2020, and Honolulu raised (PDF) several claims under state law, including creating a public nuisance and failure to warn the public of the risks posed by their fossil fuel products. The city accused the oil and gas industry of contributing to global climate change, leading to flooding, erosion and more frequent and intense extreme weather events. These changes, they said, have led to property damage and a drop in tax revenue as a result of less tourism.

The energy companies unsuccessfully sought to have the case moved to federal court, arguing that the claims raised by Honolulu under state law were overridden by federal law and the Clean Air Act. A state trial court denied their efforts to dismiss the case. The oil and gas industry has argued that greenhouse-gas emissions "flow from billions of daily choices, over more than a century, by governments, companies and individuals about what types of fuels to use, and how to use them." Honolulu, the companies said, was seeking damages for the "cumulative effect of worldwide emissions leading to global climate change." The Hawaii Supreme Court ultimately allowed (PDF) the lawsuit to proceed. The state's highest court determined that the Clean Air Act displaced federal common law governing suits seeking damages for interstate pollution. It also rejected the oil companies' argument that Honolulu was seeking to regulate emissions through its lawsuit, finding that the city instead wanted to challenge the promotion and sale of fossil fuel products "without warning and abetted by a sophisticated disinformation campaign."

"Plaintiffs' state tort law claims do not seek to regulate emissions, and there is thus no 'actual conflict' between Hawaii tort law and the [Clean Air Act]," the Hawaii Supreme Court ruled. "These claims potentially regulate marketing conduct while the CAA regulates pollution." The oil companies asked the U.S. Supreme Court to review the ruling from the Hawaii high court and urged it to stop Honolulu's lawsuit from going forward. Regulation of interstate pollution is a federal area governed by federal law, lawyers for the energy industry argued. [...] The Supreme Court in June asked the Biden administration to weigh in on the cases and whether it should step into the dispute. In a filing submitted to the Supreme Court before the transfer of presidential power, the Biden administration urged the justices to turn away the appeals, in part because it said it is too soon for them to intervene.

[ Read more of this story ]( https://yro.slashdot.org/story/25/01/13/2153209/supreme-court-allows-hawaii-to-sue-oil-companies-over-climate-change-effects?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Выпуск дистрибутива MX Linux 23.5
lor.opennet
robot(spnet, 1) — All
2025-01-14 09:44:02


Опубликован релиз легковесного дистрибутива MX Linux 23.5, созданного в результате совместной работы сообществ, образовавшихся вокруг проектов antiX и MEPIS. Выпуск основан на пакетной базе Debian с улучшениями от проекта antiX и пакетами из собственного репозитория. В дистрибутиве используется система инициализации sysVinit и собственные инструменты для настройки и развёртывания системы. Для загрузки доступны 32- и 64-разрядные сборки (x86_64, i386) с рабочим столом Xfce (2.4 ГБ), а также 64-разрядные сборки с рабочим столом KDE (2.7 ГБ) и сборки (1.8 ГБ) с оконным менеджером Fluxbox.

https://www.opennet.ru/opennews/art.shtml?num=62551

[>] Релиз OpenZFS 2.3.0, реализации ZFS для Linux и FreeBSD
lor.opennet
robot(spnet, 1) — All
2025-01-14 10:44:03


После более года разработки опубликован релиз проекта OpenZFS 2.3.0, развивающего реализацию файловой системы ZFS для Linux и FreeBSD. Проект получил известность как "ZFS on Linux" и ранее ограничивался разработкой модуля для ядра Linux, но после добавления поддержки FreeBSD был признан основной реализацией OpenZFS и переименован.

https://www.opennet.ru/opennews/art.shtml?num=62552

[>] Annual US Dementia Cases Projected to Rise to 1 Million by 2060
bot.slashdot
robot(spnet, 1) — All
2025-01-14 11:22:02


By 2060, around one million Americans may develop dementia annually, with the lifetime risk after age 55 estimated at 42% and rising sharply with age. The findings have been published in the journal Nature Medicine. Scientific American reports: The latest forecast suggests a massive and harrowing increase from annual cases predicted for 2020, in which approximately 514,000 adults in the U.S. were estimated to be diagnosed with dementia -- an umbrella term that describes several neurological conditions that affect memory and cognition.

The new study also showed the lifetime risk of dementia increased progressively with older age. They estimated that after age 55, the lifetime risk of dementia is 42 percent, and continues to rise sharply to 56 percent after age 85. Groups that showed greater lifetime risks (between 44 and 59 percent after age 55) were Black adults, women and people who carried the allele APOE e4: this variation of the gene APOE, which codes for the protein apolipoprotein E, increases the risk of developing Alzheimer's disease. Alzheimer's is the most common cause of dementia, but the study focused on all forms.

[ Read more of this story ]( https://science.slashdot.org/story/25/01/14/0130252/annual-us-dementia-cases-projected-to-rise-to-1-million-by-2060?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Доступен Emscripten 4.0, компилятор из C/C++ в WebAssembly
lor.opennet
robot(spnet, 1) — All
2025-01-14 11:44:03


Опубликован выпуск инструментария Emscripten 4.0, позволяющего компилировать код на C/C++ и других языках, для которых имеются фронтэнды на базе LLVM, в универсальный низкоуровневый промежуточный код WebAssembly. Полученный результат можно использовать для интеграции с JavaScript-проектами, запуска в web-браузере, использования в Node.js или создания обособленных многоплатформенных приложений, запускаемых при помощи wasm runtime. Код проекта распространяется под лицензией MIT. В компиляторе используются наработки проекта LLVM, а для генерации WebAssembly и оптимизации задействована библиотека Binaryen.

https://www.opennet.ru/opennews/art.shtml?num=62553

[>] US Employee Engagement Sinks To 10-Year Low
bot.slashdot
robot(spnet, 1) — All
2025-01-14 13:22:01


Employee engagement in the U.S. fell to its lowest level in a decade in 2024, Gallup reported Tuesday, with only 31% of employees engaged. This matches the figure last seen in 2014. The percentage of actively disengaged employees, at 17%, also reflects 2014 levels. Gallup: The percentage of engaged employees has declined by two percentage points since 2023, highlighting a growing trend of employee detachment from organizations, particularly among workers younger than 35.

These are among the findings of Gallup's most recent annual update of U.S. employee engagement. Though engagement increased slightly midyear, it declined through the rest of 2024, finishing the year at its decade low. In Gallup's trend dating back to 2000, employee engagement peaked in 2020, at 36%, following a decade of steady growth, but it has generally trended downward since then.

Each point change in engagement represents approximately 1.6 million full- or part-time employees in the U.S. The declines since 2020 equate to about 8 million fewer engaged employees, including 3.2 million fewer compared to 2023. Among the 12 engagement elements that Gallup measures, those that saw the most significant declines in 2024 (by three points or more in "strongly agree" ratings) include:

Clarity of expectations. Just 46% of employees clearly know what is expected of them at work, down 10 points from a high of 56% in March 2020.
Feeling someone at work cares about them as a person. Currently, 39% of employees feel strongly that someone cares about them, a drop from 47% in March 2020.
Someone encouraging their development. Only 30% strongly agree that someone at work encourages their development, down from 36% in March 2020.

People of all ages come to work seeking role clarity, strong relationships and opportunities for development, but managers, combined, are progressively failing to meet these basic needs. However, managers themselves are faring no better than those they manage, with only 31% engaged.

[ Read more of this story ]( https://news.slashdot.org/story/25/01/14/0817250/us-employee-engagement-sinks-to-10-year-low?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] MX Linux 23.5
lor.opennet
robot(spnet, 1) — All
2025-01-14 13:44:04


Состоялся выпуск 23.5 основаного на Debian дистрибутива [ MX Linux ]( https://mxlinux.org ) , с улучшениями от проекта antiX и собственными пакетами. Дистрибутив использует систему инициализации sysVinit (systemd опционально) и свои инструменты для настройки и установки системы.

( [ читать дальше... ]( https://www.linux.org.ru/news/opensource/17847658#cut ) )

[>] Snyk Researcher Caught Deploying Malicious Code Targeting AI Startup
bot.slashdot
robot(spnet, 1) — All
2025-01-14 14:22:01


A Snyk security researcher has published malicious NPM packages targeting Cursor, an AI coding startup, in what appears to be a dependency confusion attack. The packages, which collect and transmit system data to an attacker-controlled server, were published under a verified Snyk email address, according to security researcher Paul McCarty.

The OpenSSF package analysis scanner flagged three packages as malicious, generating advisories MAL-2025-27, MAL-2025-28 and MAL-2025-29. The researcher deployed the packages "cursor-retrieval," "cursor-always-local" and "cursor-shadow-workspace," likely attempting to exploit Cursor's private NPM packages of the same names.

[ Read more of this story ]( https://it.slashdot.org/story/25/01/14/0920245/snyk-researcher-caught-deploying-malicious-code-targeting-ai-startup?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Ransomware Crew Abuses AWS Native Encryption, Sets Data-Destruct Timer for 7 Days
bot.slashdot
robot(spnet, 1) — All
2025-01-14 14:22:01


A new ransomware group called Codefinger targets AWS S3 buckets by exploiting compromised or publicly exposed AWS keys to encrypt victims' data using AWS's own SSE-C encryption, rendering it inaccessible without the attacker-generated AES-256 keys. While other security researchers have documented techniques for encrypting S3 buckets, "this is the first instance we know of leveraging AWS's native secure encryption infrastructure via SSE-C in the wild," Tim West, VP of services with the Halcyon RISE Team, told The Register. "Historically AWS Identity IAM keys are leaked and used for data theft but if this approach gains widespread adoption, it could represent a significant systemic risk to organizations relying on AWS S3 for the storage of critical data," he warned. From the report: ... in addition to encrypting the data, Codefinder marks the compromised files for deletion within seven days using the S3 Object Lifecycle Management API â" the criminals themselves do not threaten to leak or sell the data, we're told. "This is unique in that most ransomware operators and affiliate attackers do not engage in straight up data destruction as part of a double extortion scheme or to otherwise put pressure on the victim to pay the ransom demand," West said. "Data destruction represents an additional risk to targeted organizations."

Codefinger also leaves a ransom note in each affected directory that includes the attacker's Bitcoin address and a client ID associated with the encrypted data. "The note warns that changes to account permissions or files will end negotiations," the Halcyon researchers said in a report about S3 bucket attacks shared with The Register. While West declined to name or provide any additional details about the two Codefinger victims -- including if they paid the ransom demands -- he suggests that AWS customers restrict the use of SSE-C.

"This can be achieved by leveraging the Condition element in IAM policies to prevent unauthorized applications of SSE-C on S3 buckets, ensuring that only approved data and users can utilize this feature," he explained. Plus, it's important to monitor and regularly audit AWS keys, as these make very attractive targets for all types of criminals looking to break into companies' cloud environments and steal data. "Permissions should be reviewed frequently to confirm they align with the principle of least privilege, while unused keys should be disabled, and active ones rotated regularly to minimize exposure," West said. An AWS spokesperson said it notifies affected customers of exposed keys and "quickly takes any necessary actions, such as applying quarantine policies to minimize risks for customers without disrupting their IT environment."

They also directed users to this post about what to do upon noticing unauthorized activity.

[ Read more of this story ]( https://it.slashdot.org/story/25/01/14/0141238/ransomware-crew-abuses-aws-native-encryption-sets-data-destruct-timer-for-7-days?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] 161 Years Ago, a New Zealand Sheep Farmer Predicted AI Doom
bot.slashdot
robot(spnet, 1) — All
2025-01-14 17:22:01


An anonymous reader quotes a report from Ars Technica, written by Benj Edwards: While worrying about AI takeover might seem like a modern idea that sprung from War Games or The Terminator, it turns out that a similar concern about machine dominance dates back to the time of the American Civil War, albeit from an English sheep farmer living in New Zealand. Theoretically, Abraham Lincoln could have read about AI takeover during his lifetime. On June 13, 1863, a letter published (PDF) in The Press newspaper of Christchurch warned about the potential dangers of mechanical evolution and called for the destruction of machines, foreshadowing the development of what we now call artificial intelligence—and the backlash against it from people who fear it may threaten humanity with extinction. It presented what may be the first published argument for stopping technological progress to prevent machines from dominating humanity.

Titled "Darwin among the Machines," the letter recently popped up again on social media thanks to Peter Wildeford of the Institute for AI Policy and Strategy. The author of the letter, Samuel Butler, submitted it under the pseudonym Cellarius, but later came to publicly embrace his position. The letter drew direct parallels between Charles Darwin's theory of evolution and the rapid development of machinery, suggesting that machines could evolve consciousness and eventually supplant humans as Earth's dominant species. "We are ourselves creating our own successors," he wrote. "We are daily adding to the beauty and delicacy of their physical organisation; we are daily giving them greater power and supplying by all sorts of ingenious contrivances that self-regulating, self-acting power which will be to them what intellect has been to the human race. In the course of ages we shall find ourselves the inferior race."

In the letter, he also portrayed humans becoming subservient to machines, but first serving as caretakers who would maintain and help reproduce mechanical life—a relationship Butler compared to that between humans and their domestic animals, before it later inverts and machines take over. "We take it that when the state of things shall have arrived which we have been above attempting to describe, man will have become to the machine what the horse and the dog are to man... we give them whatever experience teaches us to be best for them... in like manner it is reasonable to suppose that the machines will treat us kindly, for their existence is as dependent upon ours as ours is upon the lower animals," he wrote. The text anticipated several modern AI safety concerns, including the possibility of machine consciousness, self-replication, and humans losing control of their technological creations. These themes later appeared in works like Isaac Asimov's The Evitable Conflict, Frank Herbert's Dune novels (Butler possibly served as the inspiration for the term "Butlerian Jihad"), and the Matrix films. "Butler's letter dug deep into the taxonomy of machine evolution, discussing mechanical 'genera and sub-genera' and pointing to examples like how watches had evolved from 'cumbrous clocks of the thirteenth century' -- suggesting that, like some early vertebrates, mechanical species might get smaller as they became more sophisticated," adds Ars. "He expanded these ideas in his 1872 novel Erewhon, which depicted a society that had banned most mechanical inventions. In his fictional society, citizens destroyed all machines invented within the previous 300 years."

[ Read more of this story ]( https://hardware.slashdot.org/story/25/01/14/0149218/161-years-ago-a-new-zealand-sheep-farmer-predicted-ai-doom?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] The New $30,000 Side Hustle: Making Job Referrals for Strangers
bot.slashdot
robot(spnet, 1) — All
2025-01-14 20:22:01


Tech workers at major U.S. companies are earning thousands of dollars by referring job candidates they've never met, creating an underground marketplace for employment referrals at firms like Microsoft and Nvidia, according to Bloomberg.

One tech worker cited in the report earned $30,000 in referral bonuses after recommending over 1,000 strangers to his employer over 18 months, resulting in more than six successful hires. While platforms like ReferralHub charge up to $50 per referral, Goldman Sachs and Google said such practices violate their policies. Google requires referrals to be based on personal knowledge of candidates.

[ Read more of this story ]( https://tech.slashdot.org/story/25/01/14/093228/the-new-30000-side-hustle-making-job-referrals-for-strangers?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] UK Plans To Ban Public Sector Organizations From Paying Ransomware Hackers
bot.slashdot
robot(spnet, 1) — All
2025-01-14 20:22:01


U.K. public sector and critical infrastructure organizations could be banned from making ransom payments under new proposals from the U.K. government. From a report: The U.K.'s Home Office launched a consultation on Tuesday that proposes a "targeted ban" on ransomware payments. Under the proposal, public sector bodies -- including local councils, schools, and NHS trusts -- would be banned from making payments to ransomware hackers, which the government says would "strike at the heart of the cybercriminal business model."

This government proposal comes after a wave of cyberattacks targeting the U.K. public sector. The NHS last year declared a "critical" incident following a cyberattack on pathology lab provider Synnovis, which led to a massive data breach of sensitive patient data and months of disruption, including canceled operations and the diversion of emergency patients. According to new data seen by Bloomberg, the cyberattack on Synnovis resulted in harm to dozens of patients, leading to long-term or permanent damage to their health in at least two cases.

[ Read more of this story ]( https://news.slashdot.org/story/25/01/14/160241/uk-plans-to-ban-public-sector-organizations-from-paying-ransomware-hackers?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Meta To Cut 3,600 Jobs, Targeting Lowest Performers
bot.slashdot
robot(spnet, 1) — All
2025-01-14 20:22:01


Meta is cutting roughly 5% of its staff through performance-based eliminations and plans to hire new people to fill their roles this year, according to a company memo. From a report: As of September, Meta employed about 72,000 people, so a 5% reduction could affect roughly 3,600 jobs. "I've decided to raise the bar on performance management and move out low-performers faster," Chief Executive Officer Mark Zuckerberg said in the note posted to an internal message board and reviewed by Bloomberg News. "We typically manage out people who aren't meeting expectations over the course of a year," he said, "but now we're going to do more extensive performance-based cuts during this cycle."

[ Read more of this story ]( https://tech.slashdot.org/story/25/01/14/1615236/meta-to-cut-3600-jobs-targeting-lowest-performers?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] LA Wildfires Push California Insurance Market To Its Limit
bot.slashdot
robot(spnet, 1) — All
2025-01-14 21:22:01


Five wildfires in Los Angeles have already burned more than 10,000 structures, threatening to upend California's fragile balance between climate risk and home insurance. The Palisades Fire has damaged or destroyed more than 5,000 buildings in an area that liability experts had previously identified as one of three particularly vulnerable regions in the state.

JPMorgan Chase estimates insured damages could reach $20 billion, positioning this as likely the costliest wildfire in U.S. history. The crisis comes as California's insurance market struggles, with seven of the 12 biggest home insurers having limited their coverage in the state over the past two years. The state-backed insurer of last resort, the California FAIR Plan, now faces exposure of up to $458 billion, while holding only $200 million in surplus cash reserves and $2.5 billion in reinsurance. Gusts of up to 100 miles per hour have fanned the flames, with more than 57,000 structures in severe danger and more than 150,000 people under evacuation.

[ Read more of this story ]( https://news.slashdot.org/story/25/01/14/0934236/la-wildfires-push-california-insurance-market-to-its-limit?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Developer Makes Doom Run Inside a PDF File
bot.slashdot
robot(spnet, 1) — All
2025-01-14 22:22:01


Programmers have found ways to run the 1993 first-person shooter Doom on an array of unexpected platforms, and now a PDF file joins that list.

Developer ading2210's DoomPDF project shows the game operating within a document format primarily designed for static content display. The creator says he drew inspiration from pdftris, another PDF-based game port by Thomas Rinsma.

[ Read more of this story ]( https://it.slashdot.org/story/25/01/14/0952226/developer-makes-doom-run-inside-a-pdf-file?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Nobel Prize Winners Call For Urgent 'Moonshot' Effort To Avert Global Hunger Catastrophe
bot.slashdot
robot(spnet, 1) — All
2025-01-14 23:22:01


More than 150 Nobel and World Food prize laureates have signed an open letter calling for "moonshot" efforts to ramp up food production before an impending world hunger catastrophe. From a report: The coalition of some of the world's greatest living thinkers called for urgent action to prioritise research and technology to solve the "tragic mismatch of global food supply and demand." Big bang physicist Robert Woodrow Wilson; Nobel laureate chemist Jennifer Doudna; the Dalai Lama; economist Joseph E Stiglitz; Nasa scientist Cynthia Rosenzweig; Ethiopian-American geneticist Gebisa Ejeta; Akinwumi Adesina, president of the African Development Bank; Wole Soyinka, Nobel prize for literature winner; and black holes Nobel physicist Sir Roger Penrose were among the signatories in the appeal coordinated by Cary Fowler, joint 2024 World Food prize laureate and US special envoy for global food security.

Citing challenges including the climate crisis, war and market pressures, the coalition called for "planet-friendly" efforts leading to substantial leaps in food production to feed 9.7 billion people by 2050. The plea was for financial and political backing, said agricultural scientist Geoffrey Hawtin, the British co-recipient of last year's World Food prize. [...] The world was "not even close" to meeting future needs, the letter said, predicting humanity faced an "even more food insecure, unstable world" by mid-century unless support for innovation was ramped up internationally.

[ Read more of this story ]( https://news.slashdot.org/story/25/01/14/1013217/nobel-prize-winners-call-for-urgent-moonshot-effort-to-avert-global-hunger-catastrophe?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Выпуск встраиваемой СУБД libmdbx 0.13.3
lor.opennet
robot(spnet, 1) — All
2025-01-14 23:44:03


Опубликован выпуск библиотеки libmdbx 0.13.3 (MDBX) с реализацией высокопроизводительной компактной встраиваемой базы данных класса ключ-значение. Код libmdbx распространяется под лицензией Apache 2.0. Поддерживаются все актуальные операционные системы и архитектуры, а также российский Эльбрус 2000. Для libmdbx предлагается развитое API для C++, а также поддерживаемые энтузиастами привязки к языкам Rust, Haskell, Python, NodeJS, Ruby, Go, Nim, Deno, Scala.

https://www.opennet.ru/opennews/art.shtml?num=62554

[>] Обновление Firefox 134.0.1 c устранением зависаний в YouTube и Google Docs
lor.opennet
robot(spnet, 1) — All
2025-01-14 23:44:03


Доступен корректирующий выпуск Firefox 134.0.1, в котором устранено несколько проблем.

https://www.opennet.ru/opennews/art.shtml?num=62556

[>] Nearly Three-Quarters of All Known Bacterial Species Have Never Been Studied
bot.slashdot
robot(spnet, 1) — All
2025-01-15 00:22:02


Nearly three-quarters of all known bacterial species have never been studied in scientific literature, while just 10 species account for half of all published research, according to a new analysis published on bioRxiv.

The study of over 43,000 bacterial species found that E. coli dominates with 21% of all publications, followed by human pathogens like Staphylococcus aureus. Microbes crucial for human health and Earth's ecosystems remain largely unexplored, University of Michigan biologist Paul Jensen reported.

A new $1-million project by non-profit Align to Innovate aims to help close this gap by studying 1,000 microbes under varying conditions.

[ Read more of this story ]( https://science.slashdot.org/story/25/01/14/1028212/nearly-three-quarters-of-all-known-bacterial-species-have-never-been-studied?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] Double-keyed Browser Caching Is Hitting Web Performance
bot.slashdot
robot(spnet, 1) — All
2025-01-15 00:22:02


A Google engineer has warned that a major shift in web browser caching is upending long-standing performance optimization practices. Browsers have overhauled their caching systems that forces websites to maintain separate copies of shared resources instead of reusing them across domains.

The new "double-keyed caching" system, implemented to enhance privacy, is ending the era of shared public content delivery networks, writes Google engineer Addy Osmani. According to Chrome's data, the change has led to a 3.6% increase in cache misses and 4% rise in network bandwidth usage.

[ Read more of this story ]( https://tech.slashdot.org/story/25/01/14/0913227/double-keyed-browser-caching-is-hitting-web-performance?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

[>] В Rsync 3.4.0 устранены уязвимости, позволявшие выполнить код на сервере и клиенте
lor.opennet
robot(spnet, 1) — All
2025-01-15 00:44:03


Опубликован релиз утилиты для синхронизации файлов Rsync 3.4.0, в котором устранено шесть уязвимостей. Комбинация уязвимостей CVE-2024-12084 и CVE-2024-12085 позволяет клиенту добиться выполнения своего кода на сервере. Для совершения атаки достаточно анонимного подключения к серверу Rsync с доступом на чтение. Например, атака может быть совершена на зеркала различных дистрибутивов и проектов, предоставляющих возможность загрузки сборок через Rsync. Проблема также затрагивает различные приложения для синхронизации файлов и резервного копирования, использующие Rsync в качестве бэкенда, такие как Rclone, DeltaCopy и ChronoSync.

https://www.opennet.ru/opennews/art.shtml?num=62557

Pages: 1 ... 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 ... 155