RSS 생중계

Tech companies Google and Palo Alto Networks are sounding the alarm over the "Scattered Spider" hacking group's interest in the aviation sector. From a report: In a statement posted on LinkedIn, Sam Rubin, an executive at Palo Alto's cybersecurity-focused Unit 42, said his company had "observed Muddled Libra (also known as Scattered Spider) targeting the aviation industry." In a similar statement, Charles Carmakal, an executive with Alphabet-owned Google's cybersecurity-focused Mandiant unit, said his company was "aware of multiple incidents in the airline and transportation sector which resemble the operations of UNC3944 or Scattered Spider." Axios adds: The group of mostly Western, English-speaking hackers has been on a months-long spree that's prompted operational disruptions at grocery suppliers, major retail storefronts and insurance companies in the U.S. and U.K. Hawaiian Airlines said Thursday it's addressing a "cybersecurity incident" that affected some of its IT systems. Canadian airline WestJet faced a similar incident last week that caused outages for some of its systems and mobile app. A source familiar with the incidents told Axios that Scattered Spider was likely behind the WestJet incident.

Read more of this story at Slashdot.

Steven J. Vaughan-Nichols writes in an opinion piece for The Register: Microsoft, tactically admitting it has failed at talking all the Windows 10 PC users into moving to Windows 11 after all, is -- sort of, kind of -- extending Windows 10 support for another year. For most users, that means they'll need to subscribe to Microsoft 365. This, in turn, means their data and meta-information will be kept in a US-based datacenter. That isn't sitting so well with many European Union (EU) organizations and companies. It doesn't sit that well with me or a lot of other people either. A few years back, I wrote in these very pages that Microsoft didn't want you so much to buy Windows as subscribe to its cloud services and keep your data on its servers. If you wanted a real desktop operating system, Linux would be almost your only choice. Nothing has changed since then, except that folks are getting a wee bit more concerned about their privacy now that President Donald Trump is in charge of the US. You may have noticed that he and his regime love getting their hands on other people's data. Privacy isn't the only issue. Can you trust Microsoft to deliver on its service promises under American political pressure? Ask the EU-based International Criminal Court (ICC) which after it issued arrest warrants for Israeli Prime Minister Benjamin Netanyahu for war crimes, Trump imposed sanctions on the ICC. Soon afterward, ICC's chief prosecutor, Karim Khan, was reportedly locked out of his Microsoft email accounts. Coincidence? Some think not. Microsoft denies they had anything to do with this. Peter Ganten, chairman of the German-based Open-Source Business Alliance (OSBA), opined that these sanctions ordered by the US which he alleged had been implemented by Microsoft "must be a wake-up call for all those responsible for the secure availability of state and private IT and communication infrastructures." Microsoft chairman and general counsel, Brad Smith, had promised that it would stand behind its EU customers against political pressure. In the aftermath of the ICC reports, Smith declared Microsoft had not been "in any way [involved in] the cessation of services to the ICC." In the meantime, if you want to reach Khan, you'll find him on the privacy-first Swiss email provider, ProtonMail. In short, besides all the other good reasons for people switching to the Linux desktop - security, Linux is now easy to use, and, thanks to Steam, you can do serious gaming on Linux - privacy has become much more critical. That's why several EU governments have decided that moving to the Linux desktop makes a lot of sense... Besides, all these governments know that switching from Windows 10 to 11 isn't cheap. While finances also play a role, and I always believe in "following the money" when it comes to such software decisions, there's no question that Europe is worried about just how trustworthy America and its companies are these days. Do you blame them? I don't. The shift to the Linux desktop is "nothing new," as Vaughan-Nichols notes. Munich launched its LiMux project back in 2004 and, despite ending it in 2017, reignited its open-source commitment by establishing a dedicated program office in 2024. In France, the gendarmerie now operates over 100,000 computers on a custom Ubuntu-based OS (GendBuntu), while the city of Lyon is transitioning to Linux and PostgreSQL. More recently, Denmark announced it is dropping Windows and Office in favor of Linux and LibreOffice, citing digital sovereignty. The German state of Schleswig-Holstein is following suit, also moving away from Microsoft software. Meanwhile, a pan-European Linux OS (EU OS) based on Fedora Kinoite is being explored, with Linux Mint and openSUSE among the alternatives under consideration.

Read more of this story at Slashdot.

Longtime Slashdot reader sinij shares a report from Car and Driver with the comment: "Lack of visibility is a significant consequence of improving safety on the front overlap crash testing." Here's an excerpt from the report: The Insurance Institute for Highway Safety has a new method to look at what drivers can't look at, and the results of a DOT study using the method suggest that things have gotten worse over the past quarter-century. [...] For the study, researchers with the U.S. Department of Transportation's Volpe Center used the IIHS method to examine every generation of some popular vehicles sold between 1997 and 2023. The models chosen were the Chevrolet Suburban, the Ford F-150, the Honda Accord, the Honda CR-V, the Jeep Grand Cherokee, and the Toyota Camry. The analysis measured how much of a 10-meter radius is visible to a driver; this distance was chosen because that's approximately how much space a driver needs to react and stop when traveling at 10 mph. The study also measured visibility between 10 and 20 meters from the vehicle. The biggest model-specific difference was observed with the Honda CR-V. In a 1997 model, the researchers measured 68 percent visibility, while the 2022 came in at just 28 percent. In a 2000 Suburban, the study measured 56 percent visible area within the 10-meter radius, but in a 2023 model it was down to 28 percent. The study concluded that higher hoods on newer versions of both models had the biggest impact on outward visibility. The F-150 started out with low visibility (43% for a 1997 model) and also declined (36% for the 2015 version). The two sedans in the study saw the least regression: A 2003 Accord was measured at 65 percent visibility, with the 2023 close behind at 60 percent, and the Camry went from 61 percent for the 2007 model to 57 percent for a 2023. Results for visibility between 10 and 20 meters were mixed, with some improving and others decreasing over subsequent generations. While this is not conclusive evidence across the industry, the results from these representative vehicles suggest an overall decline in outward frontal visibility. The study also notes that, during the same time period, pedestrian and bicyclist deaths on U.S. roads increased dramatically -- 37 and 42 percent, respectively. There's likely at least some causation with that correlation, even when you consider the addition of features such as automated emergency braking that are meant to intervene and prevent such collisions.

Read more of this story at Slashdot.

Federal Reserve Chair Jerome Powell told the U.S. Senate that while AI hasn't yet dramatically impacted the economy or labor market, its transformative effects are inevitable -- though the timeline remains uncertain. The Register reports: Speaking to the US Senate Banking Committee on Wednesday to give his semiannual monetary policy report, Powell told elected officials that AI's effect on the economy to date is "probably not great" yet, but it has "enormous capabilities to make really significant changes in the economy and labor force." Powell declined to predict how quickly that change could happen, only noting that the final few leaps to get from a shiny new technology to practical implementation can be a slow one. "What's happened before with technology is that it seems to take a long time to be implemented," Powell said. "That last phase has tended to take longer than people expect." AI is likely to follow that trend, Powell asserted, but he has no idea what sort of timeline that puts on the eventual economy-transforming maturation point of artificial intelligence. "There's a tremendous uncertainty about the timing of [economic changes], what the ultimate consequences will be and what the medium term consequences will be," Powell said. [...] That continuation will be watched by the Fed, Powell told Senators, but that doesn't mean he'll have the power to do anything about it. "The Fed doesn't have the tools to address the social issues and the labor market issues that will arise from this," Powell said. "We just have interest rates."

Read more of this story at Slashdot.

An anonymous reader quotes a report from UploadVR: Software developer Stijn Spanhove used the newest SDK features of Snap OS to build a prototype of [a real-world ad blocker for Snap Spectacles]. If you're unfamiliar, Snap Spectacles are a bulky AR glasses development kit available to rent for $99/month. They run Snap OS, the company's made-for-AR operating system, and developers build apps called Lenses for them using Lens Studio or WebXR. Spanhove built the real-world ad blocker using the new Depth Module API of Snap OS, integrated with the vision capability of Google's Gemini AI via the cloud. The Depth Module API caches depth frames, meaning that coordinate results from cloud vision models can be mapped to positions in 3D space. This enables detecting and labeling real-world objects, for example. Or, in the case of Spanhove's project, projecting a red rectangle onto real-world ads. However, while the software approach used for Spanhove's real-world ad blocker is sound, two fundamental hardware limitations mean it wouldn't be a practical way to avoid seeing ads in your reality. Firstly, the imagery rendered by see-through transparent AR systems like Spectacles isn't fully opaque. Thus, as you can see in the demo clip, the ads are still visible through the blocking rectangle. The other problem is that see-through transparent AR systems have a very limited field of view. In the case of Spectacles, just 46 degrees diagonal. So ads are only "blocked" whenever you're looking directly at them, and you'll still see them when you're not.

Read more of this story at Slashdot.

Facebook is prompting users to opt into a feature that uploads photos from their camera roll -- even those not shared on the platform -- to Meta's servers for AI-driven suggestions like collages and stylized edits. While Meta claims the content is private and not used for ads, opting in allows the company to analyze facial features and retain personal data under its broad AI terms, raising privacy concerns. TechCrunch reports: The feature is being suggested to Facebook users when they're creating a new Story on the social networking app. Here, a screen pops up and asks if the user will opt into "cloud processing" to allow creative suggestions. As the pop-up message explains, by clicking "Allow," you'll let Facebook generate new ideas from your camera roll, like collages, recaps, AI restylings, or photo themes. To work, Facebook says it will upload media from your camera roll to its cloud (meaning its servers) on an "ongoing basis," based on information like time, location, or themes. The message also notes that only you can see the suggestions, and the media isn't used for ad targeting. However, by tapping "Allow," you are agreeing to Meta's AI Terms. This allows your media and facial features to be analyzed by AI, it says. The company will additionally use the date and presence of people or objects in your photos to craft its creative ideas. [...] According to Meta's AI Terms around image processing, "once shared, you agree that Meta will analyze those images, including facial features, using AI. This processing allows us to offer innovative new features, including the ability to summarize image contents, modify images, and generate new content based on the image," the text states. The same AI terms also give Meta's AIs the right to "retain and use" any personal information you've shared in order to personalize its AI outputs. The company notes that it can review your interactions with its AIs, including conversations, and those reviews may be conducted by humans. The terms don't define what Meta considers personal information, beyond saying it includes "information you submit as Prompts, Feedback, or other Content." We have to wonder whether the photos you've shared for "cloud processing" also count here.

Read more of this story at Slashdot.

In a year when average air temperatures consistently breached the 1.5C warming threshold, global COâ-equivalent emissions from energy rose by 1%, marking yet another record, the fourth in as many years. From a report: Wind and solar energy alone expanded by an impressive 16% in 2024, nine times faster than total energy demand. Yet this growth did not fully counterbalance rising demand elsewhere, with total fossil fuel use growing by just over 1%, highlighting a transition defined as much by disorder as by progress. Crude oil demand in OECD countries remained flat, following a slight decline in the previous year. In contrast, non-OECD countries, where much of the world's energy demand growth is concentrated and fossil fuels continue to play a dominant role, saw oil demand rise by 1%. Notably, Chinese crude oil demand fell in 2024 by 1.2%, indicating that 2023 may have reached a peak. Elsewhere, global natural gas demand rebounded, rising by 2.5% as gas markets rebalanced after the 2023 slump. India's demand for coal rose 4% in 2024 and now equals that of the CIS, Southern and Central America, North America, and Europe combined.

Read more of this story at Slashdot.

Germany's data protection commissioner has urged Apple and Google to remove Chinese AI startup DeepSeek from their app stores due to concerns about data protection. Reuters reports: Commissioner Meike Kamp said in a statement on Friday that she had made the request because DeepSeek illegally transfers users' personal data to China. The two U.S. tech giants must now review the request promptly and decide whether to block the app in Germany, she added, though her office has not set a precise timeframe. According to its own privacy policy, DeepSeek stores numerous pieces of personal data, such as requests to its AI program or uploaded files, on computers in China. "DeepSeek has not been able to provide my agency with convincing evidence that German users' data is protected in China to a level equivalent to that in the European Union," [Commissioner Meike Kamp] said. "Chinese authorities have far-reaching access rights to personal data within the sphere of influence of Chinese companies," she added. The commissioner said she took the decision after asking DeepSeek in May to meet the requirements for non-EU data transfers or else voluntarily withdraw its app. DeepSeek did not comply with this request, she added.

Read more of this story at Slashdot.

An anonymous reader quotes a report from Bloomberg: Canada is proceeding with its digital services tax on technology companies such as Meta despite a Group of Seven agreement that resulted in removing the Section 899 "revenge tax" proposal from U.S. President Donald Trump's tax bill. The first payment for Canada's digital tax is still due Monday, the country's Finance Department confirmed, and covers revenue retroactively to 2022. The tax is three percent of the digital services revenue a firm makes from Canadian users above $20 million in a calendar year. Keeping the digital tax will not affect the G7 agreement, which focuses on global minimum taxes, the Finance Department said. The Section 899 provision would have targeted companies and investors from countries that the U.S. determines are unfairly taxing American companies. [...] Finance Minister Francois-Philippe Champagne suggested to reporters last week that the digital tax may be negotiated as part of broader, ongoing U.S.-Canada trade discussions. "Obviously all of that is something that we're considering as part of broader discussions that you may have," he said. Business groups in the country have opposed the tax since it was announced, arguing it would increase the cost of digital services and invite retaliation from the U.S. It also raised the ire of U.S. businesses and lawmakers. A group of 21 members of U.S. Congress wrote to Trump earlier this month asking him to push for the tax's removal, estimating the June 30 payment will cost U.S. companies $2 billion. Before scrapping its digital services tax, Canada wants to see an OECD deal on policies that expand a country's authority to tax profits earned within that country even if a company doesn't have a physical location there -- which is different from a global minimum tax. Earlier today, President Trump said the U.S. is immediately ending trade talks with Canada in response to the tax, calling it a "direct and blatant attack on our country." "Based on this egregious Tax, we are hereby terminating ALL discussions on Trade with Canada, effective immediately," Trump wrote in a post on Truth Social. "We will let Canada know the Tariff that they will be paying to do business with the United States of America within the next seven day period."

Read more of this story at Slashdot.

Android 16 will include a new security feature that warns users when their phones connect to fake cell towers designed for surveillance. The "network notification" setting alerts users when devices connect to unencrypted networks or when networks request phone identifiers, helping protect against "stingray" devices that mimic legitimate cell towers to collect data and force phones onto insecure communication protocols.

Read more of this story at Slashdot.

The Supreme Court ruled Friday that the FCC's Universal Service Fund can continue operating, rejecting claims that the program's funding mechanism violates the Constitution. In a 6-3 decision written by Justice Elena Kagan, the court found that Congress did not exceed its authority when it enacted the 1996 law establishing the fund and that the FCC could delegate administration to a private corporation. The Universal Service Fund subsidizes telecommunications services for low-income consumers, rural health care providers, schools and libraries through fees generally passed on to customers that raise billions of dollars annually. The program is administered by the Universal Service Administrative Company, a nonprofit the FCC designated to run the fund. Conservative advocacy group Consumers' Research challenged the structure, arguing that "a private company is taxing Americans in amounts that total billions of dollars every year, under penalty of law, without true governmental accountability." The Fifth Circuit Court of Appeals ruled in favor of Consumers' Research, prompting the FCC to petition the Supreme Court for review. Kagan wrote that Congress "sufficiently guided and constrained the discretion that it lodged with the FCC to implement the universal-service contribution scheme," adding that the FCC "retained all decision-making authority within that sphere." She concluded that "nothing in those arrangements, either separately or together, violates the Constitution." The challengers argued the program violates the "nondelegation doctrine," a conservative legal theory that says Congress has limited powers to delegate its lawmaking authority to the executive branch.

Read more of this story at Slashdot.

In 2023, Fujita Tomonori wrote a Rust version of the existing driver for the Asix AX88796B embedded Ethernet controller. At slightly more than 100 lines, it's about as simple as a driver can be, and therefore is a useful touchstone for the differences between writing Rust and C in the kernel. Looking at the Rust syntax, types, and APIs used by the driver and contrasting them with the C version will help illustrate those differences.

Brazil's supreme court has ruled that social media platforms can be held legally responsible for their users' posts. From a report: Companies such as Facebook, TikTok and X will have to act immediately to remove material such as hate speech, incitement to violence or "anti-democratic acts," even without a prior judicial takedown order, as a result of the decision in Latin America's largest nation late on Thursday.

Read more of this story at Slashdot.

theodp writes: FWD.us, the immigration and criminal justice-focused nonprofit of Meta CEO Mark Zuckerberg -- the world's third richest person, according to Forbes with an estimated $250B net worth -- has released a new research report warning that announced immigration policies will hurt American families, who can't afford it with their meager savings. The report begins: "Inflation remains a top concern for the majority of Americans. But new immigration policies announced by President Trump, and already underway, such as revoking immigrant work permits, deporting millions of people, and limiting legal immigration, would directly undermine the goal to level out, or even lower, the costs of everyday and essential goods and services. In fact, all Americans, particularly working-class families, are about to unnecessarily see prices for goods and services like food and housing increase substantially again, above and beyond other economic policies like global tariffs that could also raise prices. Announced immigration policies will result in American families paying an additional $2,150 for goods and services each year by the end of 2028, or the equivalent of the average American family's grocery bill for 3 months or their combined electricity and gas bills for the entire year. Such an annual increase would represent a tax that would erase many American families' annual savings, and amount to one of their bi-weekly paychecks each year. Unlike past periods of inflation, Americans have not been saving at the same rate as earlier years, and can't as easily absorb these price increases, squeezing American budgets even further." In 2021, Zuckerberg's FWD.us teamed with the nation's tech giants to file a brief with the Supreme Court case to help crush WashTech (a tiny programmers' union), who challenged the lawfulness of hiring international students under the Optional Practical Training (OPT) program. "Striking down OPT and STEM OPT," FWD.us and its tech giant partners argued in their filing, [PDF] "would create a sudden labor shortage in the United States for many companies' most important technical jobs" and "hurt U.S. workers." The brief also dismissed WashTech's contention that the programs coupled with a talent surplus would shut U.S. workers out of the labor market, citing Microsoft's President Brad Smith's claim of an acute talent shortage and a 2.4% unemployment rate for computer occupations (that was then, this is now).

Read more of this story at Slashdot.

A new study challenges previous research about which sleep stages help people achieve breakthrough moments in problem-solving. Researchers found that N2 sleep, a deeper stage of non-REM sleep, significantly increased participants' likelihood of experiencing sudden insights during a perceptual task. The preregistered study involved 90 participants who performed a visual pattern recognition task before and after a 20-minute daytime nap while researchers monitored their brain activity with EEG. Participants who reached N2 sleep showed an 85.7% rate of achieving insights about a hidden strategy in the task, compared to 63.6% for those who only reached N1 sleep (the first stage of non-rapid eye movement sleep) and 55.5% for participants who remained awake. The findings contradict earlier work by Lacaux and colleagues, which suggested that lighter N1 sleep promoted insight while deeper sleep hindered it. News coverage: Stuck on a problem? Take a nap!

Read more of this story at Slashdot.

The history of the bcachefs filesystem in the kernel has been turbulent, most recently with Linus Torvalds refusing a pull request for the 6.16-rc3 release. Torvalds has now pulled the code in question, but also said:

I think we'll be parting ways in the 6.17 merge window.

You made it very clear that I can't even question any bug-fixes and I should just pull anything and everything.

Honestly, at that point, I don't really feel comfortable being involved at all, and the only thing we both seemed to really fundamentally agree on in that discussion was "we're done".

Bcachefs developer Kent Overstreet has his own view of the situation. Both Torvalds and Overstreet refer to a seemingly private conversation where the pull request (and other topics) were discussed.

Eight nations have surpassed 50% IPv6 deployment since June 2024, bringing the total number of countries in the majority IPv6 club to 21, according to the Internet Society. Brazil, Guatemala, Hungary, Japan, Mexico, Puerto Rico, Sri Lanka, and Tuvalu all crossed the threshold over the past year. Tuvalu's adoption coincided with the arrival of Elon Musk's Starlink satellite broadband service, which operates as IPv6-only. The Internet Society's Pulse platform found no IPv6 deployment in the Pacific nation in June 2024, but Starlink now holds 88% market share there and 59% of Tuvalu's internet connections use IPv6. France moved from third place to tie with India for the global lead at 73% IPv6 deployment. Japan rebounded from 49% to 55%, returning to the 50% club after dropping below the mark in mid-2024. Puerto Rico climbed from 49% to 53%. Thailand appears positioned to join next at 49% deployment, followed by Estonia at 46% and the United Kingdom at 45%.

Read more of this story at Slashdot.

Kernel versions 6.15.4, 6.12.35, 6.6.95, 6.1.142, 5.15.186, 5.10.239, and 5.4.295 have all been released.

36% of all Chinese undergraduate entrants -- about 1.6 million people -- selected engineering degrees in 2022 (the latest year for which data are available), up from 32% in 2010, according to data from China's Ministry of Education. In Britain and America, which have far fewer students to start with, the proportion hovers around 5%. The surge comes as China's government directs universities to focus on strategic industries and technological bottlenecks. Over 600 Chinese universities now offer undergraduate programs in artificial intelligence, a field the Communist Party vows to dominate by 2030. In 2023, officials started telling universities to overhaul their degree programs, and the education ministry announced an "emergency mechanism" to create degrees more quickly to meet "national priorities." Over half of China's young people now complete some form of higher education through 3,000-odd institutions. Youth unemployment reached 14.9% in May, driving students toward technical fields they believe offer better job prospects.

Read more of this story at Slashdot.

Security updates have been issued by Debian (freeradius and icu), Fedora (clamav, glow, libssh, perl-Crypt-OpenSSL-RSA, perl-CryptX, podman, trafficserver, and xorg-x11-server), Mageia (gdk-pixbuf2.0 and thunderbird), Red Hat (osbuild-composer and weldr-client), SUSE (afterburn, google-osconfig-agent, libblockdev, pam, python-tornado6, screen, and yelp-xsl), and Ubuntu (libxslt and python-pip).