RSS 생중계

"Microsoft has released the source code for the GitHub Copilot Chat extension for VS Code under the MIT license," reports BleepingComputer. This provides the community access to the full implementation of the chat-based coding assistant, including the implementation of "agent mode," what contextual data is sent to large language models (LLMs), and the design of system prompts. The GitHub repository hosting the code also details telemetry collection mechanisms, addressing long-standing questions about data transparency in AI-assisted coding tools... As the VS Code team explained previously, shifts in AI tooling landscape like the rapid growth of the open-source AI ecosystem and a more level playing field for all have reduced the need for secrecy around prompt engineering and UI design. At the same time, increased targeting of development tools by malicious actors has increased the need for crowdsourcing contributions to rapidly pinpoint problems and develop effective fixes. Essentially, openness is now considered superior from a security perspective. "If you've been hesitant to adopt AI tools because you don't trust the black box behind them, this move opensources-github-copilot-chat-vscode/offers something rare these days: transparency," writes Slashdot reader BrianFagioli" Now that the extension is open source, developers can audit how agent mode actually works. You can also dig into how it manages your data, customize its behavior, or build entirely new tools on top of it. This could be especially useful in enterprise environments where compliance and control are non negotiable. It is worth pointing out that the backend models powering Copilot remain closed source. So no, you won't be able to self host the whole experience or train your own Copilot. But everything running locally in VS Code is now fair game. Microsoft says it is planning to eventually merge inline code completions into the same open source package too, which would make Copilot Chat the new hub for both chat and suggestions.

Read more of this story at Slashdot.

"Some of our basic assumptions about the biological process of aging might be wrong," reports the New York Times — citing new research on a small Indigenous population in the Bolivian Amazon. [Alternate URL here.] Scientists have long believed that long-term, low-grade inflammation — also known as "inflammaging" — is a universal hallmark of getting older. But this new data raises the question of whether inflammation is directly linked to aging at all, or if it's linked to a person's lifestyle or environment instead. The study, which was published Monday, found that people in two nonindustrialized areas experienced a different kind of inflammation throughout their lives than more urban people — likely tied to infections from bacteria, viruses and parasites rather than the precursors of chronic disease. Their inflammation also didn't appear to increase with age. Scientists compared inflammation signals in existing data sets from four distinct populations in Italy, Singapore, Bolivia and Malaysia; because they didn't collect the blood samples directly, they couldn't make exact apples-to-apples comparisons. But if validated in larger studies, the findings could suggest that diet, lifestyle and environment influence inflammation more than aging itself, said Alan Cohen, an author of the paper and an associate professor of environmental health sciences at Columbia University. "Inflammaging may not be a direct product of aging, but rather a response to industrialized conditions," he said, adding that this was a warning to experts like him that they might be overestimating its pervasiveness globally. "How we understand inflammation and aging health is based almost entirely on research in high-income countries like the U.S.," said Thomas McDade, a biological anthropologist at Northwestern University. But a broader look shows that there's much more global variation in aging than scientists previously thought, he added... McDade, who has previously studied inflammation in the Tsimane group, speculated that populations in nonindustrialized regions might be exposed to certain microbes in water, food, soil and domestic animals earlier in their lives, bolstering their immune response later in life. More from The Independent: Chronic inflammation is thought to speed up the ageing process and contribute to various health conditions such as Alzheimer's disease, arthritis, cancer, heart disease, and Type 2 diabetes... However, other experts shared a word of caution before jumping to conclusions from the study. Vishwa Deep Dixit, director of the Yale Center for Research on Aging, told the New York Times it's not surprising that people less exposed to pollution would see lower rates of chronic disease. Aurelia Santoro, an associate professor at the University of Bologna, also cautioned about the results, according to the Times. "While they had lower rates of chronic disease, the two Indigenous populations tended to have life spans shorter than those of people in industrialized regions, meaning they may simply not have lived long enough to develop inflammaging, Santoro said." And Bimal Desai, a professor of pharmacology who studies inflammation at the University of Virginia School of Medicine, told the Times that the study "sparks valuable discussion" but needs more follow-up "before we rewrite the inflammaging narrative."

Read more of this story at Slashdot.

We're living in a new world now — one where it's an AI-powered penetration tester that "now tops an eminent US security industry leaderboard that ranks red teamers based on reputation." CSO Online reports: On HackerOne, which connects organizations with ethical hackers to participate in their bug bounty programs, "Xbow" scored notably higher than 99 other hackers in identifying and reporting enterprise software vulnerabilities. It's a first in bug bounty history, according to the company that operates the eponymous bot... Xbow is a fully autonomous AI-driven penetration tester (pentester) that requires no human input, but, its creators said, "operates much like a human pentester" that can scale rapidly and complete comprehensive penetration tests in just a few hours. According to its website, it passes 75% of web security benchmarks, accurately finding and exploiting vulnerabilities. Xbow submitted nearly 1,060 vulnerabilities to HackerOne, including remote code execution, information disclosures, cache poisoning, SQL injection, XML external entities, path traversal, server-side request forgery (SSRF), cross-site scripting, and secret exposure. The company said it also identified a previously unknown vulnerability in Palo Alto's GlobalProtect VPN platform that impacted more than 2,000 hosts. Of the vulnerabilities Xbow submitted over the last 90 days, 54 were classified as critical, 242 as high and 524 as medium in severity. The company's bug bounty programs have resolved 130 vulnerabilities, and 303 are classified as triaged. Notably, though, roughly 45% of the vulnerabilities it found are still awaiting resolution, highlighting the "volume and impact of the submissions across live targets," Nico Waisman, Xbow's head of security, wrote in a blog post this week... To further hone the technology, the company developed "validators," — automated peer reviewers that confirm each uncovered vulnerability, Waisman explained. "As attackers adopt AI to automate and accelerate exploitation, defenders must meet them with even more capable systems," XBOW's CEO said this week, as the company raised $75 million in Series B funding to grow its platform, bringing its total funding to $117 million. Help Net Security reports: With the new funding, XBOW plans to grow its engineering team and expand its go-to-market efforts. The product is now generally available, and the company says it is working with large banks, tech firms, and other organizations that helped shape the platform during its early testing phase. XBOW's long-term goal is to help security teams stay ahead of adversaries using advanced automation. As attackers increasingly turn to AI, the company argues that defenders will need equally capable systems to match their speed and sophistication.

Read more of this story at Slashdot.

This week Hewlett-Packard Enterprise settled its antitrust case with America's Justice Department, "paving the way for its acquisition of rival kit maker Juniper Networks," reported Telecoms.com: Under the agreement, HPE has agreed to divest its Instant On unit, which sells a range of enterprise-grade Wi-Fi networking equipment for campus and branch deployments. It has also agreed to license Juniper's Mist AIOps source code — a software suite that enables AI-based network automation and management. HPE can live with that, since its primary motivation for buying Juniper is to improve its prospects in an IT networking market dominated by Cisco, where others like Arista and increasingly Nokia and Nvidia are also trying to make inroads. And after receiving regulatory clearance, HPE "very quickly closed the deal..." reports The Motley Fool. "In the press release heralding the news, the buyer wrote that it "doubles the size of HPE's networking business and provides customers with a comprehensive portfolio of networking solutions." Investors were obviously happy about this, as according to data compiled by S&P Global Market Intelligence the company's stock price ballooned by nearly 16% across the week, largely on the news.... The Justice Department had alleged, in a lawsuit filed in January, that an HPE/Juniper tie-up would essentially result in a duopoly in networking equipment. It claimed that a beefed-up HPE and networking incumbent Cisco would hold more than 70% combined of the domestic market. Thanks to long-time Slashdot reader AmiMoJo for sharing the news.

Read more of this story at Slashdot.

Science Daily reports: Wild orcas across four continents have repeatedly floated fish and other prey to astonished swimmers and boaters, hinting that the ocean's top predator likes to make friends. Researchers cataloged 34 such gifts over 20 years, noting the whales often lingered expectantly — and sometimes tried again — after humans declined their offerings, suggesting a curious, relationship-building motive... "Orcas often share food with each other — it's a prosocial activity and a way that they build relationships with each other," said study lead author Jared Towers, of Bay Cetology in British Columbia, Canada. "That they also share with humans may show their interest in relating to us as well." The complete research was published in the Journal of Comparative Psychology. Its title? "Testing the Waters: Attempts by Wild Killer Whales (Orcinus orca) to Provision People (Homo sapiens)."

Read more of this story at Slashdot.

Long-time Slashdot reader AmiMoJo shared this report from the Apple news blog 9to5Mac: iOS 26 is a packed update for iPhone users thanks to the new Liquid Glass design and major updates for Messages, Wallet, CarPlay, and more. But another new feature was just discovered in the iOS 26 beta: FaceTime will now freeze your call's video and audio if someone starts undressing. When Apple unveiled iOS 26 last month, it mentioned a variety of new family tools... "Communication Safety expands to intervene when nudity is detected in FaceTime video calls, and to blur out nudity in Shared Albums in Photos." However, at least in the iOS 26 beta, it seems that a similar feature may be in place for all users — adults included. That's the claim of an X.com user named iDeviceHelp, who says FaceTime in iOS 26 swaps in a warning message that says "Audio and video are paused because you may be showing something sensitive," giving users a choice of ending the call or resuming it. 9to5Mac says "It's unclear whether this is an intended behavior, or just a bug in the beta that's applying the feature to adults... [E]verything happens on-device so Apple has no idea about the contents of your call."

Read more of this story at Slashdot.

In April researchers responsibly disclosed two security flaws found in Sudo "that could enable local attackers to escalate their privileges to root on susceptible machines," reports The Hacker News. "The vulnerabilities have been addressed in Sudo version 1.9.17p1 released late last month." Stratascale researcher Rich Mirch, who is credited with discovering and reporting the flaws, said CVE-2025-32462 has managed to slip through the cracks for over 12 years. It is rooted in the Sudo's "-h" (host) option that makes it possible to list a user's sudo privileges for a different host. The feature was enabled in September 2013. However, the identified bug made it possible to execute any command allowed by the remote host to be run on the local machine as well when running the Sudo command with the host option referencing an unrelated remote host. "This primarily affects sites that use a common sudoers file that is distributed to multiple machines," Sudo project maintainer Todd C. Miller said in an advisory. "Sites that use LDAP-based sudoers (including SSSD) are similarly impacted." CVE-2025-32463, on the other hand, leverages Sudo's "-R" (chroot) option to run arbitrary commands as root, even if they are not listed in the sudoers file. It's also a critical-severity flaw. "The default Sudo configuration is vulnerable," Mirch said. "Although the vulnerability involves the Sudo chroot feature, it does not require any Sudo rules to be defined for the user. As a result, any local unprivileged user could potentially escalate privileges to root if a vulnerable version is installed...." Miller said the chroot option will be removed completely from a future release of Sudo and that supporting a user-specified root directory is "error-prone."

Read more of this story at Slashdot.

This week America's Energy Department selected two companies to perform the first nuclear microreactor tests in a new facility in Idaho, saying the tests "will fast-track the deployment of American microreactor technologies... The first fueled reactor experiment will start as early as spring 2026." The new facility is named DOME (an acronym for Demonstration of Microreactor Experiments), and it leverages existing "to safely house and test fueled reactor experiments, capable of producing up to 20 megawatts of thermal energy," according to a local newspaper. [T]wo companies were competitively selected in 2023 and are currently working through a multi-phase Energy Department authorization process to support the design, fabrication, construction, and testing of each fueled reactor experiment. Both are expected to meet certain milestones throughout the process to maintain their allotted time in DOME and to ensure efficient use of the test bed, according to the release... The department estimates each DOME reactor experiment will operate up to six months, with the DOME test bed currently under construction and on track to receive its first experiment in early 2026... The next call for applications is anticipated to be in 2026. The site Interesting Engineering calls the lab "a high-stakes proving ground to accelerate the commercialization of advanced microreactors..." Based in Etna, Pennsylvania, Westinghouse will test its eVinci Nuclear Test Reactor, a compact, transportable microreactor that uses advanced heat pipe technology for passive cooling. Designed to deliver 5 megawatts of electricity on sites as small as two acres, eVinci could support applications ranging from remote communities to mining operations and data centers. Meanwhile, Radiant (El Segundo, California) will test its Kaleidos Development Unit, a 1.2 megawatt electric high-temperature gas reactor aimed at replacing diesel generators. Designed to run for five years, Kaleidos is fueled by TRISO fuel particles that could offer reliable backup power for hospitals, military bases, and other critical infrastructure. Radiant's CEO said "In short order, we will fuel, go critical, and operate, leading to the mass production of portable reactors which will jumpstart American nuclear energy dominance."

Read more of this story at Slashdot.

Some of the water around Antarctica has been getting saltier. And that has affected the amount of sea ice at the bottom of the planet. From a report: A study published Monday in the Proceedings of the National Academy of Sciences found that increases in salinity in seawater near the surface could help explain some of the decrease in Antarctic sea ice that have been observed over the past decade, reversing a previous period of growth. "The impact of Antarctic ice is massive in terms of sea-level rise, in terms of global warming, and therefore, in terms of extremes," said Alessandro Silvano, a senior scientist at the University of Southampton studying the Southern Ocean and lead author of the study. The findings mean "we are entering a new system, a new world," he said. The Times adds: "the Department of Defense announced it would be no longer be providing some of the satellite data that researchers use to monitor changes in sea ice."

Read more of this story at Slashdot.

Software engineer Sean Goedecke argues that AI coding agents have already been commoditized because they require no special technical advantages, just better base models. He writes: All of a sudden, it's the year of AI coding agents. Claude released Claude Code, OpenAI released their Codex agent, GitHub released its own autonomous coding agent, and so on. I've done my fair share of writing about whether AI coding agents will replace developers, and in the meantime how best to use them in your work. Instead, I want to make what I think is now a pretty firm observation: AI coding agents have no secret sauce. [...] The reason everyone's doing agents now is the same reason everyone's doing reinforcement learning now -- from one day to the next, the models got good enough. Claude Sonnet 3.7 is the clear frontrunner here. It's not the smartest model (in my opinion), but it is the most agentic: it can stick with a task and make good decisions over time better than other models with more raw brainpower. But other AI labs have more agentic models now as well. There is no moat. There's also no moat to the actual agent code. It turns out that "put the model in a loop with a 'read file' and 'write file' tool" is good enough to do basically anything you want. I don't know for sure that the closed-source options operate like this, but it's an educated guess. In other words, the agent hackers in 2023 were correct, and the only reason they couldn't build Claude Code then was that they were too early to get to use the really good models.

Read more of this story at Slashdot.

Reuters: The European Union's landmark rules on AI will be rolled out according to the legal timeline in the legislation, the European Commission said on Friday, dismissing calls from some companies and countries for a pause. Google owner Alphabet, Facebook owner Meta and other U.S. companies as well as European businesses such as Mistral and ASML have in recent days urged the Commission to delay the AI Act by years. Financial Times adds: In an open letter, seen by the Financial Times, the heads of 44 major firms on the continent called on European Commission President Ursula von der Leyen to introduce a two-year pause, warning that unclear and overlapping regulations are threatening the bloc's competitiveness in the global AI race. [...] The current debate surrounds the drafting of a "code of practice," which will provide guidance to AI companies on how to implement the act that applies to powerful AI models such as Google's Gemini, Meta's Llama and OpenAI's GPT-4. Brussels has already delayed publishing the code, which was due in May, and is now expected to water down the rules.

Read more of this story at Slashdot.

President Donald Trump's administration plans to restrict shipments of AI chips from the likes of Nvidia to Malaysia and Thailand, part of an effort to crack down on suspected semiconductor smuggling into China. Bloomberg: A draft rule from the Commerce Department seeks to prevent China -- to which the US has effectively banned sales of Nvidia's advanced AI processors -- from obtaining those components through intermediaries in the two Southeast Asian nations, according to people familiar with the matter. The rule is not yet finalized and could still change, said the people, who requested anonymity to discuss private conversations. Officials plan to pair the Malaysia and Thailand controls with a formal rescission of global curbs from the so-called AI diffusion rule, the people said.

Read more of this story at Slashdot.

A new study analyzing data from more than 60 previous research projects has found evidence that there is "no safe amount" of processed meat consumption -- so much so that even small daily portions are being linked to increased disease risk. The research, published Monday in the journal Nature Medicine, examined connections between processed meats, sugar-sweetened beverages and trans fatty acids and the risk of type 2 diabetes, colorectal cancer and ischemic heart disease. People who ate as little as one hot dog daily showed an 11% greater risk of type 2 diabetes and 7% increased risk of colorectal cancer compared to those who consumed none. Drinking approximately one 12-ounce soda per day was associated with an 8% increase in type 2 diabetes risk and 2% increased risk of ischemic heart disease.

Read more of this story at Slashdot.

Moderna's mRNA-based seasonal flu vaccine proved 27% more effective at preventing influenza infections than standard flu shots in a Phase 3 trial involving nearly 41,000 people aged 50 and above, the firm said this week. The company announced that mRNA-1010 had an overall vaccine efficacy that was 26.6% higher than conventional shots, rising to 27.4% higher in participants aged 65 and older during the six-month study period. The 2024-2025 flu season hospitalized an estimated 770,000 Americans, according to the Centers for Disease Control and Prevention.

Read more of this story at Slashdot.

UK Science and Technology Secretary Peter Kyle has written to the UK's national institute for AI to tell its bosses to refocus on defense and security. BBC: In a letter, Kyle said boosting the UK's AI capabilities was "critical" to national security and should be at the core of the Alan Turing Institute's activities. Kyle suggested the institute should overhaul its leadership team to reflect its "renewed purpose." The cabinet minister said further government investment in the institute would depend on the "delivery of the vision" he had outlined in the letter. A spokesperson for the Alan Turing Institute said it welcomed "the recognition of our critical role and will continue to work closely with the government to support its priorities." Further reading, from April: Alan Turing Institute Plans Revamp in Face of Criticism and Technological Change.

Read more of this story at Slashdot.

An anonymous reader shares a report: The sweeping layoffs announced by Microsoft this week have been especially hard on its gaming studios, but one Xbox executive has a solution to "help reduce the emotional and cognitive load that comes with job loss": seek advice from AI chatbots. In a now-deleted LinkedIn post captured by Aftermath, Xbox Game Studios' Matt Turnbull said that he would be "remiss in not trying to offer the best advice I can under the circumstances." The circumstances here being a slew of game cancellations, services being shuttered, studio closures, and job cuts across key Xbox divisions as Microsoft lays off as many as 9,100 employees across the company. Turnbull acknowledged that people have some "strong feelings" about AI tools like ChatGPT and Copilot, but suggested that anybody who's feeling "overwhelmed" could use them to get advice about creating resumes, career planning, and applying for new roles.

Read more of this story at Slashdot.

Windows 11 has finally overtaken the market share of its predecessor, with just three months remaining until Microsoft discontinues support for Windows 10. From a report: As of today, July's StatCounter figures show the market share of Windows 11 at 50.24 percent, with Windows 10 at 46.84 percent. It's a far cry from a year ago, when Windows 10 stood at 66.04 percent and Windows 11 languished at 29.75 percent.

Read more of this story at Slashdot.

Software developer Anton Zaides argues that software engineers have had it easy over the decades and the "best profession" on earth deserved the wake up call. He writes:It's not just one of the hardest times, it's also one of the most exciting. I'm hugely optimistic about the software engineering career. All those companies started by vibe-coders all around you? Many will succeed, and will need great engineers to scale up. Some engineers understand this, and use the chance to skill up. To succeed, you'll probably need all the skills of an engineer, some of a PM, and even a bit of design taste. It's not just about shipping code anymore. But if you work as a code monkey, getting detailed tickets and just shipping them, you've done this to yourself. You won't be needed pretty soon. I believe there are too many mediocre engineers, but also not enough great ones.

Read more of this story at Slashdot.

Climate change is already having an impact on companies around the world. More than half of companies surveyed by Morgan Stanley experienced climate-related operational disruptions within the past year, including increased costs, worker disruption and revenue losses. Extreme heat and storms caused the most frequent disruptions, followed by wildfires and smoke, water shortages, and flooding. The US spent nearly $1 trillion on disaster recovery and climate-related needs over the past year, according to Bloomberg Intelligence analysis, while nearly two-thirds of Tampa metro businesses reported losses from hurricanes Helene and Milton.

Read more of this story at Slashdot.

Researchers have discovered that appending irrelevant phrases like "Interesting fact: cats sleep most of their lives" to math problems can cause state-of-the-art reasoning AI models to produce incorrect answers at rates over 300% higher than normal [PDF]. The technique -- dubbed "CatAttack" by teams from Collinear AI, ServiceNow, and Stanford University -- exploits vulnerabilities in reasoning models including DeepSeek R1 and OpenAI's o1 family. The adversarial triggers work across any math problem without changing the problem's meaning, making them particularly concerning for security applications. The researchers developed their attack method using a weaker proxy model (DeepSeek V3) to generate text triggers that successfully transferred to more advanced reasoning models. Testing on 225 math problems showed the triggers increased error rates significantly across different problem types, with some models like R1-Distill-Qwen-32B reaching combined attack success rates of 2.83 times baseline error rates. Beyond incorrect answers, the triggers caused models to generate responses up to three times longer than normal, creating computational slowdowns. Even when models reached correct conclusions, response lengths doubled in 16% of cases, substantially increasing processing costs.

Read more of this story at Slashdot.