RSS 생중계

Reddit wants to become a full-fledged search engine, leveraging its vast repository of human-generated content and expanding its AI-powered Reddit Answers tool. In its latest note (PDF) to investors, CEO Steve Huffman says the company is "concentrating our resources on the areas that will drive results for our most pressing needs," including "making Reddit a go-to search engine." The Verge reports: Huffman says that "every week, hundreds of millions of people come to Reddit looking for advice, and we're turning more of that intent into active users of Reddit's native search." Reddit's core search has more than 70 million weekly active unique users -- Reddit overall averages 416.4 million weekly active unique users -- and Reddit Answers, the platform's AI search tool that it launched in December, has 6 million weekly users, up from 1 million weekly users in the first quarter of this year. To continue to build out search, Reddit is "expanding Reddit Answers globally, integrating it more deeply into the core search experience, and making search a central feature across Reddit," Huffman says.

Read more of this story at Slashdot.

alternative_right shares a report from Phys.org: Researchers have created a microphone that listens with light instead of sound. Unlike traditional microphones, this visual microphone captures tiny vibrations on the surfaces of objects caused by sound waves and turns them into audible signals. In the journal Optics Express, the researchers describe the new approach, which applies single-pixel imaging to sound detection for the first time. Using an optical setup without any expensive components, they demonstrate that the technique can recover sound by using the vibrations on the surfaces of everyday objects such as leaves and pieces of paper. [...] To demonstrate the new visual microphone, the researchers tested its ability to reconstruct Chinese and English pronunciations of numbers as well as a segment from Beethoven's Fur Elise. They used a paper card and a leaf as vibration targets, placing them 0.5 meters away from the objects while a nearby speaker played the audio. The system was able to successfully reconstruct clear and intelligible audio, with the paper card producing better results than the leaf. Low-frequency sounds (1 kHz) showed slight distortion that improved when a signal processing filter was applied. Tests of the system's data rate showed it produced 4 MB/s, a rate sufficiently low to minimize storage demands and allow for long-term recording. "Currently, this technology still only exists in the laboratory and can be used in special scenarios where traditional microphones fail to work," said research team leader Xu-Ri Yao from Beijing Institute of Technology in China. "We aim to expand the system into other vibration measurement applications, including human pulse and heart rate detection, leveraging its multifunctional information sensing capabilities."

Read more of this story at Slashdot.

An anonymous reader quotes a report from The Guardian: A 515-mile (829km) lightning flash has set a new record as the longest ever identified. The World Meteorological Organization (WMO) confirmed the new world record for the flash registered on October 22, 2017, over the Great Plains in the US. It stretched from east Texas to near Kansas City, Missouri, roughly the distance between Paris and Venice. The previous record of 768km was also recorded in the Great Plains, a hotspot for severe thunderstorms, on April 29, 2020. Since 2016, scientific advances in space-based mapping have allowed for lightning flashes to be measured over a broader space, allowing these long flashes to be recorded. This event was one of the first flashes to be documented using the National Oceanic and Atmospheric Administration's latest model of orbital satellite, known as a geostationary operational environmental satellite. [...] The advances in technology have also allowed for the recording of the greatest duration for a single lightning flash. The record is a flash that lasted 17.1 seconds during a thunderstorm over Uruguay and northern Argentina on June 18, 2020. The findings have been published in the journal Bulletin of the American Meteorological Society.

Read more of this story at Slashdot.

Hackers from the group UNC2891 attempted a high-tech bank heist by physically planting a 4G-enabled Raspberry Pi inside a bank's ATM network, using advanced malware hidden with a never-before-seen Linux bind mount technique to evade detection. "The trick allowed the malware to operate similarly to a rootkit, which uses advanced techniques to hide itself from the operating system it runs on," reports Ars Technica. Although the plot was uncovered before the hackers could hijack the ATM switching server, the tactic showcased a new level of sophistication in cyber-physical attacks on financial institutions. The security firm Group-IB, which detailed the attack in a report on Wednesday, didn't say where the compromised switching equipment was located or how attackers managed to plant the Raspberry Pi. Ars Technica reports: To maintain persistence, UNC2891 also compromised a mail server because it had constant Internet connectivity. The Raspberry Pi and the mail server backdoor would then communicate by using the bank's monitoring server as an intermediary. The monitoring server was chosen because it had access to almost every server within the data center. As Group-IB was initially investigating the bank's network, researchers noticed some unusual behaviors on the monitoring server, including an outbound beaconing signal every 10 minutes and repeated connection attempts to an unknown device. The researchers then used a forensic tool to analyze the communications. The tool identified the endpoints as a Raspberry Pi and the mail server but was unable to identify the process names responsible for the beaconing. The researchers then captured the system memory as the beacons were sent. The review identified the process as lightdm, a process associated with an open source LightDM display manager. The process appeared to be legitimate, but the researchers found it suspicious because the LightDM binary was installed in an unusual location. After further investigation, the researchers discovered that the processes of the custom backdoor had been deliberately disguised in an attempt to throw researchers off the scent. [Group-IB Senior Digital Forensics and Incident Response Specialist Nam Le Phuong] explained: "The backdoor process is deliberately obfuscated by the threat actor through the use of process masquerading. Specifically, the binary is named "lightdm", mimicking the legitimate LightDM display manager commonly found on Linux systems. To enhance the deception, the process is executed with command-line arguments resembling legitimate parameters -- for example, lightdm -- session child 11 19 -- in an effort to evade detection and mislead forensic analysts during post-compromise investigations. These backdoors were actively establishing connections to both the Raspberry Pi and the internal Mail Server."

Read more of this story at Slashdot.

fjo3 shares a report from the Associated Press: The Trump administration announced it is launching a new program that will allow Americans to share personal health data and medical records across health systems and apps run by private tech companies, promising that will make it easier to access health records and monitor wellness. More than 60 companies, including major tech companies like Google, Amazon and Apple as well as health care giants like UnitedHealth Group and CVS Health, have agreed to share patient data in the system. The initiative will focus on diabetes and weight management, conversational artificial intelligence that helps patients, and digital tools such as QR codes and apps that register patients for check-ins or track medications. Officials at the Centers for Medicare and Medicaid Services, who will be in charge of maintaining the system, have said patients will need to opt in for the sharing of their medical records and data, which will be kept secure. Those officials said patients will benefit from a system that lets them quickly call up their own records without the hallmark difficulties, such as requiring the use of fax machines to share documents, that have prevented them from doing so in the past. Popular weight loss and fitness subscription service Noom, which has signed onto the initiative, will be able to pull medical records after the system's expected launch early next year. That might include labs or medical tests that the app could use to develop an AI-driven analysis of what might help users lose weight, CEO Geoff Cook told The Associated Press. Apps and health systems will also have access to their competitors' information, too. Noom would be able to access a person's data from Apple Health, for example. "Right now you have a lot of siloed data," Cook said.

Read more of this story at Slashdot.

The SEC has launched "Project Crypto" to overhaul outdated securities regulations for a blockchain-based future, aiming to support tokenized assets, crypto trading, and "super apps." "To achieve President Trump's vision of making America the crypto capital of the world, the SEC must holistically consider the potential benefits and risks of moving our markets from an off-chain environment to an on-chain one," SEC chair Paul Atkins said at the "American Leadership in the Digital Finance Revolution" conference on Thursday. "I have directed the Commission staff to update antiquated agency rules and regulations to unleash the potential of on-chain software systems in our securities markets ... Federal securities laws have always assumed the involvement of intermediaries that require regulation, but this does not mean that we should interpose intermediaries for the sake of forcing intermediation where the markets can function without them." CNBC reports: Atkins, the SEC chair, highlighted "super apps" (such as one Coinbase introduced two weeks ago) as a priority of his chairmanship, noting the need to allow the apps to thrive with an "efficient licensing structure," rather than subject to multiple regulatory authorities. So-called super apps like WeChat and Alipay -- which bundle several different services and functionalities into a single mobile app -- have long been viewed as the holy grail of financial technology by the industry. They're central to everyday life in China but haven't been successfully replicated in the West. Meta Platforms and X have made attempts to realize that vision, integrating payments, messaging and social content, among other functions. Atkins also said the Trump administration will work to prevent "innovative" companies from being driven offshore by burdensome regulations, and said the SEC "will encourage our nation's builders rather than constrain them with red tape and one-size-fits-all rules."

Read more of this story at Slashdot.

An anonymous reader quotes a report from TorrentFreak: Efforts to introduce pirate site blocking to the United States continue with the introduction of the "Block BEARD" bill (PDF) in the Senate. The bipartisan proposal, backed by Senators Tillis, Coons, Blackburn, and Schiff, aims to create a new legal mechanism to combat foreign piracy websites. Block BEARD is similar to the previously introduced House bill "FADPA", but doesn't directly mention DNS resolvers. [...] The site-blocking proposal seeks to amend U.S. copyright law, enabling rightsholders to request federal courts to designate online locations as a "foreign digital piracy site". If that succeeds, courts can subsequently order U.S. service providers to block access to these sites. Pirate site designation would be dependent on rightsholders showing that they are harmed by a site's activities, that reasonable efforts had been made to notify the site's operator, and that a reasonable investigation confirms the operator is not located within the United States. Additionally, rightsholders must show that the site is primarily designed for piracy, has limited commercial purpose, or is intentionally marketed by its operator to promote copyright-infringing activities. If the court classifies a website as a foreign pirate site, rightsholders can go back to court to request a blocking order. At this stage, the court will determine whether it is technically and practically feasible for ISPs to block the site, and consider any potential harm to the public interest. The granted orders would stay in place for a year with the option to extend if necessary. If blocked sites switch to new locations, the court can also amend blocking orders to include new IP addresses and domain names. The Block BEARD bill broadly applies to service providers as defined in section 512(k)(1)(A) of the DMCA. This is a broad definition that applies to residential ISPs, but also to search engines, social media platforms, and DNS resolvers. Service providers with fewer than 50,000 subscribers are explicitly excluded, and the same applies to venues such as coffee shops, libraries, and universities that offer internet access to visitors. Unlike the FADPA bill introduced by Representative Lofgren earlier this year, the Senate bill does not specifically mention DNS resolvers. Block BEARD does not mention VPNs, but its broad definition of "service provider" could be interpreted to include them. The proposal states that providers have the option to contest their inclusion in a blocking order. Once an order is issued, they would have the freedom to choose their own blocking techniques. There are no transparency requirements mentioned in the bill, so if and how the public is informed is unclear.

Read more of this story at Slashdot.

Brazil has launched a massive program to release millions of laboratory-bred mosquitoes engineered to carry Wolbachia bacteria, which prevents them from transmitting dengue virus. The initiative aims to protect 140 million Brazilians across 40 municipalities over the next decade. The approach has already demonstrated significant results in Niteroi, where officials documented a roughly 90% drop in dengue cases when comparing the 10 years prior to the modified mosquitoes' introduction to the five years afterward. Nearly all mosquitoes in the city now carry the Wolbachia bacteria. Cases of chikungunya and Zika also fell by over 96% and 99% respectively. The World Mosquito Program operates high-tech breeding facilities, including one in Rio de Janeiro that produces mosquitoes by the millions. A new factory in Curitiba will produce 5 billion mosquitoes in its first year. The Wolbachia bacteria, naturally present in roughly half of all insect species, creates conditions where dengue virus cannot replicate inside mosquitoes, effectively breaking the transmission cycle when these modified insects bite humans.

Read more of this story at Slashdot.

CISA has publicly released Thorium, a powerful open-source platform developed with Sandia National Labs that automates malware and forensic analysis at massive scale. According to BleepingComputer, the platform can "schedule over 1,700 jobs per second and ingest over 10 million files per hour per permission group." From the report: Security teams can use Thorium for automating and speeding up various file analysis workflows, including but not limited to: - Easily import and export tools to facilitate sharing across cyber defense teams, - Integrate command-line tools as Docker images, including open-source, commercial, and custom software, - Filter results using tags and full-text search, - Control access to submissions, tools, and results with strict group-based permissions, - Scale with Kubernetes and ScyllaDB to meet workload demands. Defenders can find installation instructions and get their own copy of Thorium from CISA's official GitHub repository.

Read more of this story at Slashdot.

Apple reported its strongest quarterly revenue growth since 2021, with iPhone sales jumping 13% and total revenue up 10%. CEO Tim Cook also announced increased AI investments and hinted at future acquisitions to accelerate Apple's AI roadmap. CNBC reports: "It was an exceptional quarter by any measure," Apple CEO Tim Cook told CNBC's Steve Kovach. Cook said that about 1% of the company's 10 percentage points of revenue growth could be attributed to customers buying more products to get ahead of potential tariffs. The company's most important business remains the iPhone, which saw 13% growth on an annual basis during the quarter to $44.58 billion in sales. Cook said that iPhone revenue was strong because the iPhone 16 is more popular compared to the iPhone 15 devices on sale last year at the same time. Cook said iPhone 16 sales were up "strong double digits" versus its predecessor. Cook specifically highlighted popularity among current iPhone users upgrading to a new one. Apple's Mac business grew the fastest of any of Apple's units during the June quarter, growing nearly 15% to $8.05 billion in revenue. Apple released updated MacBook Air laptops, its best-selling Mac, just before the quarter started. The company's services business, which includes the company's warranties, content subscriptions, licensing deals with Google, and iCloud continued to grow to $27.42 billion in the period, a 13% increase. Cook highlighted growth in the company's iCloud subscriptions and said App Store revenue grew "double digits" during the quarter. The two tougher spots in Apple's report were iPad sales and the company's other products division, which it sometimes calls its wearables. It consists of Apple Watch, AirPods, and other accessories. Revenue for iPad was down 8% to $6.58 billion, despite the company launching a low-cost iPad in March. Apple's wearables unit declined 8.64% to $7.4 billion during the quarter. Apple also saw success in China during the quarter, with sales rising 4% on an annual basis to $15.37 billion. Apple reports its sales from China, Hong Kong and Taiwan in the same unit. It's a reversal from the past two quarters, where Apple's China sales declined 2% in Apple's second fiscal quarter and 11% in the first quarter. Cook said a Chinese subsidy for some devices helped Apple in the region. "The subsidy does apply to some of our products, and it clearly helps," Cook said.

Read more of this story at Slashdot.

An anonymous reader quotes a report from Ars Technica: E-commerce giants everywhere felt the sting Wednesday when President Donald Trump announced that the US will be "suspending duty-free de minimis treatment for low-value shipments" worth $800 or less from anywhere in the world. Americans will likely soon feel the crunch, with one recent study estimating that the cost of eliminating the trade loophole overall to US consumers could fall between $10.9 billion and $13 billion while "disproportionately" hurting "lower-income and minority consumers" who buy a higher percentage of cheap imports. Price hikes will likely come this fall, as the trade loophole will be closed starting on August 29, with Amazon emerging as perhaps the biggest question mark for US consumers wondering how hard their wallets may be hit by the major trade policy change ahead of the holiday shopping season. In February, Trump temporarily ended the de minimis exemption for all imports from China, prompting China-based retailers Temu and Shein to raise their prices.

Read more of this story at Slashdot.

Apple began selling iPad repair parts to the public in late May following new right-to-repair legislation, but independent repair professionals say the pricing makes most repairs economically unviable. A charge port for an iPad Pro 11 costs $250 from Apple compared to less than $20 for aftermarket parts, Brian Clark of iGuys Tech Shop told 404 Media. An iPad A16 digitizer costs $200 from Apple versus $50 from third-party suppliers, while the entire iPad A16 retails for $349. The iPad Pro 13 screen assembly costs $749. Jonathan Strange of XiRepair analyzed the parts catalog and found more than one-third of components cost too much for repair shops to use profitably, 404 Media reported Thursday. Strange calculates repair viability by adding $85 labor costs and 10% profit margin to parts prices, then comparing the total to half the device's retail cost.

Read more of this story at Slashdot.

Google lost its appeal Thursday of a judge's order that will force the tech giant to open up its app store to competitors. The 9th Circuit Court of Appeals upheld a lower court ruling requiring Google Play to allow rival marketplaces and billing systems, ending a legal battle that began when Epic Games sued over anticompetitive practices. A jury sided with Epic in December 2023, finding Google paid phone makers and app developers to use its store exclusively.

Read more of this story at Slashdot.

The world's "oldest baby" has been born in the US from an embryo that was frozen in 1994, it has been reported. The Guardian: Thaddeus Daniel Pierce was born on 26 July in Ohio to Lindsey and Tim Pierce, using an "adopted" embryo from Linda Archerd, 62, from more than 30 years ago. In the early 1990s, Archerd and her then husband decided to try in vitro fertilisation (IVF) after struggling to become pregnant. In 1994 four embryos resulted: one was transferred to Archerd and resulted in the birth of a daughter, who is now 30 and mother to a 10-year-old. The other embryos were cryopreserved and stored. "We didn't go into it thinking we would break any records," Lindsey told the MIT Technology Review, which first reported the story. "We just wanted to have a baby."

Read more of this story at Slashdot.

Microsoft has abandoned a decades-long tradition of calling out the names of its rivals in regulatory documents. From a report: When the 50-year-old technology company released its annual report Wednesday, the 101-page document contained zero references to longtime foes Apple and IBM. Nor did it mention privately held challengers such as Anthropic or Databricks. Last year's Microsoft annual report officially designated over 25 companies as competitors. The names of Microsoft's enemies have appeared in its annual reports at least since 1994.

Read more of this story at Slashdot.

Microsoft's internal pay guidelines show exactly how much the company will pay new engineering hires, according to documents obtained by Business Insider. The guidelines, updated in May, break down salary ranges, stock awards, and bonuses for every level from entry-level engineers to the company's most senior technical talent. The documents come with an important caveat: recruiters can get approval to pay more when competing for exceptional candidates. At Microsoft's highest tier, Level 70 "distinguished engineers" can earn up to $408,000 in annual salary. But the real money comes from stock: these hires get up to $1.9 million in stock when they join, plus annual stock awards reaching $1.476 million. The company uses different pay scales depending on location. Engineers in expensive markets like San Francisco get higher ranges than those at Microsoft's Redmond headquarters, where most hiring happens. For entry-level engineers at Level 57, Microsoft offers salaries between $83,000 and $108,000 in its main markets, with higher ranges of $95,800 to $124,600 in expensive areas like San Francisco. These new hires get modest stock awards of $5,000 to $13,000 and signing bonuses up to $9,000. The company considers levels 57 through 59 as entry-level positions. The compensation jumps significantly as engineers advance. By Level 63, when engineers reach senior status, salaries range from $145,000 to $237,600 depending on location, with stock awards reaching $220,000.

Read more of this story at Slashdot.

SilverBullet is a MIT-licensed note-taking application, designed to run as a self-hosted web server. Started in 2022, the project is approaching its 2.0 release, making this a good time to explore the features it offers. SilverBullet stores notes as plain Markdown files, and provides a Lua scripting API to customize the application's appearance and behavior.

Matthew Garrett has posted a detailed followup to our recent article on the coming expiration if Microsoft's Secure Boot signing key.

The upshot is that nobody actually enforces these expiry dates - here's the reference code that disables it. In a year's time we'll have gone past the expiration date for 'Microsoft Windows UEFI Driver Publisher' and everything will still be working, and a few months later 'Microsoft Windows Production PCA 2011' will also expire and systems will keep booting Windows despite being signed with a now-expired certificate. This isn't a Y2K scenario where everything keeps working because people have done a huge amount of work - it's a situation where everything keeps working even if nobody does any work.

Sony has filed a lawsuit in California court against Tencent, alleging the Chinese company's upcoming game Light of Motiram constitutes a "slavish clone" of Sony's Horizon series. The complaint details extensive similarities between the games, from post-apocalyptic robot dinosaur settings to red-haired female protagonists. Tencent had approached Sony for licensing deals in 2024, which Sony rejected twice.

Read more of this story at Slashdot.

Britain's Competition and Markets Authority concluded that Microsoft and Amazon hold "significant unilateral market power" in cloud services and recommended investigating both companies under new competition rules. The regulator said it had concerns about practices creating customer "lock-in" effects through egress fees and unfavorable licensing terms that trap businesses in difficult-to-exit contracts. Microsoft and Amazon each control roughly 30-40% of the infrastructure-as-a-service market, while Google holds 5-10%. Microsoft disputed the findings, calling the cloud market "dynamic and competitive." Amazon said the probe recommendations were "unwarranted."

Read more of this story at Slashdot.