RSS 생중계

Security updates have been issued by AlmaLinux (bind9.18, glib2, gstreamer1-plugins-bad-free, gstreamer1-plugins-good, kernel-rt, libcupsfilters, mysql8.4, mysql:8.4, pcp, perl-Date-Manip, php8.4, php:7.4, php:8.2, php:8.3, python3, and yggdrasil), Debian (designate, firefox-esr, and swift), Gentoo (acl, attr, Emacs, libssh2, and quickjs-ng), Oracle (.NET 10.0, .NET 9.0, attr, bind9.18, curl, glib2, gstreamer1-plugins-bad-free, gstreamer1-plugins-good, kernel, libXfont2, mysql8.4, nghttp2, nodejs:22, nodejs:24, pam, pcp, perl-Date-Manip, php8.4, python3, sg3_utils, and yggdrasil), Slackware (mozilla-firefox and mozilla-thunderbird), SUSE (open-iscsi, podman, python311, and python313), and Ubuntu (bind9, capnproto, curl, libheif, libpng, libpng1.6, libssh, nginx, and tiff).

bryanandaimee shares a report from ScienceDaily: A Finnish study has found an unexpected association between screen use and cognitive performance. Children who accumulated more screen time as they grew up tended to show better cognitive processing during adolescence. One of the researchers cautions against viewing screen time as entirely harmful and says the goal should be to balance physical activity with screen use that encourages active thinking. [...] "The findings suggest that screen time can support children's and adolescents' cognitive processing. Presumably, the essential point here is what kind of things they do in their screen time. Teachers and parents should encourage children to use devices and screens in such ways that promote active thinking, problem-solving, creativity and learning," states Doctoral Researcher Petri Jalanko from the University of Jyvaskyla. Digital activities that involve learning, creativity, problem-solving, or other forms of active mental engagement could potentially help explain the association observed in the study. "We should not regard screen time solely as harmful but seek balance between physical activity and screen time that promotes active thinking," Jalanko summarizes. The relationship between physical activity and cognition was more complicated. Among girls, greater amounts of light intensity physical activity since childhood were associated with better working memory during adolescence. Among boys, greater participation in guided physical activity from childhood through adolescence was linked to better working memory. The researchers also found an unexpected pattern involving unsupervised exercise. Lower levels of self-reported unsupervised physical activity were associated with better cognitive processing in adolescence. By contrast, physical activity and sedentary time measured using a device that tracked heart rate and movement were not associated with cognitive processing. One possible explanation is that these sensors can measure movement and physiological activity but cannot determine exactly what a person is doing during periods of activity or inactivity. The findings have been published in the journal Pediatric Exercise Science.

Read more of this story at Slashdot.

NASA has called off a $30 million mission to rescue its aging Swift space telescope after Katalyst Space's Link spacecraft developed persistent control and positioning problems. The Associated Press reports: Katalyst said Link will not attempt to capture Swift and boost it to a higher orbit because of problems with controlling the spacecraft. NASA said this means the telescope will plunge through the atmosphere after more than 20 years of tracking some of the biggest explosions in the universe like gamma ray bursts and exploding stars. Its demise is not expected before October. NASA paid $30 million to Katalyst in an attempt to raise the telescope to a safer, longer-lasting orbit. Intense solar activity caused it to lose altitude faster than expected. The rescue spacecraft went into an uncontrollable spin a few weeks after its liftoff in early July. While flight controllers managed to slow Link's tumble, issues continued to plague its pointing and positioning in orbit. "This is not the outcome we were working toward, but it does not change why this mission was worth attempting," NASA Administrator Jared Isaacman said in a statement. As a consolation prize, Katalyst will continue to operate Link in proximity with the telescope to demonstrate capabilities for future rescue operations. Katalyst CEO Ghonhee Lee said it was an ambitious mission on an aggressive timeline that was thrown together in under a year. "We took on this high-risk, high-reward challenge and are proud of the milestones we reached along the way," Lee said in a statement. "We have already learned a tremendous amount."

Read more of this story at Slashdot.

An anonymous reader quotes a report from NPR: Meta was infused with a culture in which employees obsessed over user numbers and consistently pushed safety to the side, according to Arturo Bejar, a former employee turned whistleblower, who testified today in the landmark child safety trial against the social media company. Only one man had the ability to change that, Bejar said: CEO Mark Zuckerberg. But he didn't. "At the end of the day, it was the company culture that Mark had created that made it so that it was practically impossible to deliver features that addressed the wellbeing and safety issues that we've been talking about," he said. Bejar is a linchpin witness for a consortium of states led by California, Colorado, Kentucky and New Jersey that sued Meta, alleging violations of consumer and child data protection laws, and that the company lied to the public about risks its platforms posed. The attorneys for the states say Meta designed Facebook and Instagram to hook young users and to keep them on site longer thanks to features such as infinite scrolling and the "like" button. Meta has denied the allegations. In his opening statement on Tuesday, attorney Paul Schmidt argued that the company was sensitive to the risks to teens, sought to address them and did not deceive the public about them. The state attorneys have not yet said if they will call Zuckerberg as a witness. Testifying in federal court in Oakland, California, for a second day on Wednesday, Bejar, who worked on safety issues at Meta for eight years, said he interacted with Zuckerberg dozens of times, and charged that Zuckerberg was not telling the truth when he made public denials that the company put profits over safety. In particular, Bejar addressed a widely-shared Facebook post Zuckerberg made in 2021 after another whistleblower, Frances Haugen, shared internal documents with The Wall Street Journal that highlighted risks to the mental health of teens. In the post, Zuckerberg said it's "just not true" that Meta prioritizes profit over safety and wellbeing. "Based on my experience at Meta, that is not an accurate statement," Bejar said. [...] Bejar testified, at almost every turn the company chose policies that boosted usership and revenue over safety. Safety was "not a meaningful priority," he said.

Read more of this story at Slashdot.

Inside this week's LWN.net Weekly Edition:

• Front: Debian AI GR; Python pathlib; bootstrappable builds; Fedora and AF_ALG; Arm 128-bit PTEs; BPF CI; 7.2 statistics.
• Briefs: Brief news items from throughout the community.
• Announcements: Newsletters, conferences, security updates, patches, and more.

BrianFagioli writes: PINE64 has some very bad news for Linux hardware fans. PINE64 says it has no plans to produce additional Linux devices in the near future because of the ongoing DRAM and eMMC shortage. Future production will depend on component pricing after mid 2027, while existing PineNote and PineTab2 inventory could run out in roughly three months. The company says PineTime, PineVoice, and Pinecil production will continue as usual, but the outlook for its Linux hardware is much less certain. "That's it for this post, all in all it's a bit bleak for the Linux devices, but in the meantime PineStore still have a great lineup of MCU powered devices which will continue to expand with more exciting devices," the company said.

Read more of this story at Slashdot.

Stripe is acquiring AI model marketplace OpenRouter as it pushes beyond payments into the infrastructure behind AI applications. According to The New York Times, the deal is reportedly valued at about $7.5 billion, with $1.5 billion allocated to OpenRouter's founders. Less than three months ago the company was valued at about $1.3 billion. CNBC reports: OpenRouter has become popular with developers seeking to use AI models, particularly those considered non-proprietary and available for free. Many of these so-called open-weight AI models stem from Chinese labs like DeepSeek and Z.ai, which have gained steam among developers for generally being more cost-efficient relative to proprietary AI models from U.S. companies like OpenAI and Anthropic. In a blog post about the deal, Stripe noted that it's been working with companies to "optimize their token costs and route tokens efficiently," referring to a kind of metric used to measure AI model usage. Stripe said it's difficult to manage AI costs relative to performance because of the rapid "pace at which models are released and repriced." [...] OpenRouter said in a blog post that combining with Stripe will help with its overall vision of "a healthy AI ecosystem where many models thrive, where AI neurodiversity is a strength, where a lab or an inference provider with a breakthrough can reach millions of developers, and where no single model becomes the default by inertia." "Stripe is building the economic infrastructure for AI, and together with OpenRouter we'll help businesses maximize profitability by routing their requests intelligently and spending their tokens efficiently," Stripe CEO Patrick Collison said in a statement.

Read more of this story at Slashdot.

Amazon says its Prime Air drone delivery service will expand sixfold to nearly 500 U.S. cities and towns by the end of 2026, including metro areas around Chicago, Syracuse, Cleveland, Atlanta, and Boise. According to Amazon Prime Air vice president David Carbon, the service has already delivered "hundreds of thousands of packages to customers" this year, typically within about an hour. The Verge reports: These will join 11 locations across the US where Amazon already offers drone deliveries, with each Prime Air site serving an area of approximately 175 square miles. The service aims to quickly deliver packages of up to 5 pounds or less [...]. Amazon reiterated its drone safety features alongside these expansion plans, including Prime Air's "industry-leading Detect-and-Avoid system." That's likely an attempt to minimize any concerns raised by the communities where the service is expanding, given these drones have already been scrutinized for crashing into cranes, internet cables, gardens, and an apartment building.

Read more of this story at Slashdot.

Independent music publisher Round Hill is suing Suno and Anthropic for allegedly using hundreds of copyrighted songs without permission to train their AI systems. The company says potential damages could exceed $1 billion, arguing there is "nothing fair" about building multibillion-dollar AI businesses on copyrighted material while rights holders receive nothing. From The Hollywood Reporter: Round Hill is a prominent music publisher whose copyrights include the Goo Goo Dolls' "Iris," Bonnie Tyler's "Total Eclipse of the Heart," the Kinks' "Lola" and Dio's "Holy Diver." The company provided a list of 500 songs that the defendants had infringed upon. Round Hill said in the suits that the company plans to "amend to list potentially ten thousand or more of their musical compositions," with those damages potentially exceeding $1 billion. "While in other cases for copyright infringement, Defendant has waxed poetic about the necessity of progress and AI's value to society, there is simply no reason -- other than rote expediency -- to have that progress come at the cost of copyrights holders," prominent music attorney Richard Busch, representing Round Hill, wrote in the suits. Round Hill further argued that the latter "'expediency' arguments completely falter" when taking into account Suno and Anthropic's significant cash valuations they've earned while "exploiting illicit copies of copyrighted works, including the Round Hill Works." "There is simply nothing fair about a company using theft to build for purely commercial purposes a multi-billion dollar business while those from which they steal receive nothing," Round Hill said. Suno also faces a lawsuit from Universal Music Group and Sony Music Group.

Read more of this story at Slashdot.

CISA says the Medusa ransomware operation has breached more than 500 U.S. critical infrastructure organizations since 2021, up from more than 300 reported last year. The group has targeted healthcare, government, defense, manufacturing, IT and financial organizations, evolving into a ransomware-as-a-service operation that recruits initial-access brokers and uses stolen data to pressure victims into paying. BleepingComputer reports: The three federal agencies recommended that network defenders secure their networks against the ransomware group's attacks by mitigating security vulnerabilities to protect operating systems, software, and firmware from exploitation attempts. Security teams are also advised to segment networks to block lateral movement after compromise and to block access from untrusted origins to remote services on internal systems. [...] "Medusa developers typically recruit initial access brokers (IABs) in cybercriminal forums and marketplaces to obtain initial access to potential victims," the advisory says. "Potential payments between $100 USD and $1 million USD are offered to these affiliates with the opportunity to work exclusively for Medusa."

Read more of this story at Slashdot.

Go 1.27, the most recent version of the Go programming language, has been released with a number of new tools, the addition of support for the ML-DSA post-quantum algorithm, new JSON-processing packages, language updates, and more.

Greg Kroah-Hartman has announced the release of the 7.1.9, 6.18.45, 6.12.104, 6.6.152, 6.1.183, 5.15.216, and 5.10.265 stable kernels. Each contains important fixes throughout the tree; users are advised to upgrade.

Moderna and Merck say their personalized mRNA melanoma vaccine significantly reduced both cancer recurrence and spread in a late-stage trial. The treatment could reach patients as soon as next year if regulators approve it. Reuters reports: Moderna developed the vaccine with Merck and tested it together with immunotherapy drug Keytruda, a widely used treatment for melanoma. [...] This is the first positive late-stage trial result for an mRNA cancer vaccine, which trains a patient's immune system to fight tumors by targeting specific mutations in those cells and the first such study to show that adding a treatment to Keytruda worked better than that therapy alone. Similar approaches are being tested against lung, breast and pancreatic cancers. [...] The cancer treatment combines Merck's Keytruda with a made-to-order mRNA vaccine from Moderna that is based on an analysis of mutations found in the patients' own tumors. The trial enrolled 1,137 high-risk patients with stage IIB-IV melanoma that had been surgically removed. Volunteers were randomized to receive up to nine doses of Keytruda plus the personalized vaccine or Keytruda alone for about one year. The companies said no new safety signals have emerged in the trial. In January, the companies announced results of a mid-stage trial of the treatment showing that it reduced the risk of recurrence or death by 49% after five years. Karen Knudsen, CEO of the Parker Institute for Cancer Immunotherapy, said the Moderna results could signal a new era for treating solid-tumor cancers. "The positive hit here leads us into truly this next phase in immunotherapy," Knudsen said. "This is an auspicious start -- this is where things begin." Moderna shares more than doubled on the news, adding about $30 billion to its market value.

Read more of this story at Slashdot.

The Debian Project is voting on the usage of large language models (LLMs) to make contributions to the project. The first proposal, sent in late July by Matthias Geiger, would expressly forbid any contributions to Debian that are created by or with the assistance of LLMs. That kicked off a firestorm of discussion and a flood of alternate proposals. Debian developers are now voting on eight proposals in total that range from banning LLM-assisted contributions to explicitly approving them, as well as the standard "none of the above" option that would leave Debian with no agreed policy.

An anonymous reader quotes a report from 404 Media: X's algorithm learns what you hate and shows you more of it, according to a new study just published in the Proceedings of the National Academy of Sciences (PNAS). The paper, titled Value misalignment of X's feed algorithm is a reflection of value tensions in engagement, found that the site's algorithm prioritized engagement above all else when it generated a user's For You Page. It also showed that X serves more ragebait to people who say they are Democrats, although the exact reason for that is unclear. "In 2026 that's maybe not the most surprising headline ever," Ziv Epstein, a postdoctoral researcher at Stanford University, and co-author of the paper, told 404 Media. "So we actually dug in a little deeper to figure out why this is actually happening, and it turns out that X's feed algorithm, like a lot of these social media algorithms, is optimized for engagement [but] it turns out that not all types of engagement are considered equally." The researchers found that X's algorithm can push users toward content that conflicts with their stated values, especially when they reply to posts that anger or provoke them. Although replies accounted for just 6.8% of interactions, they appeared to carry disproportionate weight: "It's this feedback loop of outrage baiting. The algorithm learns that you get outraged and then continues to serve more content in that direction," said Epstein. It's unclear why X seems to serve ragebait to Democrats more often than Republicans. 404 Media speculates that it may be because there's more rightwing content on X overall or that Democrats tend to engage with posts they disagree with more often. "There might be some kind of differential effects on information diets there, or it might be something more psychological about how different you know partisan identities are triggering different kinds of actions and reactions, but ultimately I don't want to speculate too much," said Epstein. X's former product chief Nikita Bier confirmed that the site had been set to favor replies. "This is no longer true," Bier said in a post on X. "The largest contributor of seeing ragebait was the reply predictor and we were aware that angry replies were causing people to see more of that content. So last month, we gave the reply predictor a 15x boost if it's a friend's post -- and it reduced ragebait by [an] order of magnitude."

Read more of this story at Slashdot.

A U.S. Army battalion at Fort Stewart is offering soldiers a four-day pass timed to the release of Grand Theft Auto VI if they reenlist for at least two years. The program is limited to one unit for now, but it fits the Army's broader effort to appeal to gamers as a recruiting and retention pool. CBS News reports: Twenty soldiers at Fort Stewart in Georgia in the Army's 9th Brigade Engineering Battalion, part of the 3rd Infantry Division, have already chosen this incentive as part of their reenlistment, an Army spokesperson told CBS News on Wednesday. "The idea was to have a unique incentives program that connects to what Soldiers are interested in," Lt. Col. Angel Tomko, a spokesperson for the 3rd Infantry Division, said in a statement. "The command team, in conjunction with the career counselor, wanted to get soldiers excited to reenlist." [...] The Army memo, which has circulated online, says any soldier who signs a reenlistment contract between Aug. 1, 2026 and Nov. 14 will be authorized for a special four-day pass designated to coincide with "the highly anticipated release of the video game Grand Theft Auto VI (GTA 6)." About 130 soldiers are currently eligible for the incentive, Tomko said. Eligible soldiers must reenlist for a minimum of two years and up to six years.

Read more of this story at Slashdot.

Version 0.11 of the Tuba fediverse client has been released. Notable changes in this release include support for Mastodon collections and quotes, ability to create custom thumbnails for attachments, a new emoji picker, a build for Android, as well as many other enhancements.

At the outset of his PyCon US 2026 talk, Trey Hunner said that his goal was for attendees to stop representing filesystem paths as strings and to use pathlib instead. That's kind of a tall order, at least for longtime Python users, since string-based paths have been pervasive—and mostly work. It is that "mostly" part that makes Hunner want to see things change, of course, so he set out to describe a lesser-known corner of the language and to try to change some minds.

Chinese robotics giant Unitree surged more than 600% in its Shanghai stock market debut, marking the first mainland Chinese listing by a humanoid robot maker and a major milestone for Beijing's robotics ambitions. The BBC reports: Unitree, officially known as Yushu Technology Co Ltd, was founded in 2016 and now plays a key role in Beijing's ambitions to develop advanced technology. It has become a robotics industry leader, selling devices from sensors and automated arms to four-legged and human-like machines. The firm shipped more than 5,500 humanoid robots last year as demand for the technology grows. Unitree is one of the few companies in the sector to make money, delivering a net profit of 278 million yuan in 2025. It is a fierce rival to developers in the US as it produces robots with similar features but at lower prices. The company is based in Hangzhou, in eastern China. The region is home to a so-called golden cluster zone of robotics firms, which have benefited from huge government investments. That support helped drive a more than threefold increase in the number of Chinese robotics firms between 2020 and 2024, according to state-run China Daily. [...] Unitree's robot dogs start at $2,700, a fraction of the roughly $70,000 price tag for Boston Dynamics' four-legged device, Spot. "They're not exactly comparable because some of Unitree's dogs are much smaller," [said Harold Soh, a researcher from the National University of Singapore]. "But the price is a big difference." Unitree has been selling humanoid robots since 2023, with its $13,500 child-sized G1 model hitting the market the following year. Meanwhile, major US rivals -- including Elon Musk's Tesla -- have yet to start delivering rival products. [...] Some experts expect Unitree's market debut to be a gauge of investor appetite for the fast-growing humanoid robotics sector. The listing has given the public a rare chance to invest in a humanoid robotics company and could set a benchmark for other manufacturers, said Jack Pearson from investment firm RoboStrategy. The listing also marks a "turning point" for China's robotics industry, as Unitree's success comes even as the US is curbing imports of foreign-made robots, Pearson said.

Read more of this story at Slashdot.

Security updates have been issued by AlmaLinux (.NET 10.0, .NET 9.0, 389-ds-base, attr, curl, glib2, gstreamer1-plugins-bad-free, gstreamer1-plugins-bad-free and gstreamer1-plugins-ugly-free, gstreamer1-plugins-good, gstreamer1-plugins-ugly-free, haproxy, kernel, libssh, libXfont2, nodejs22, pam, php, php8.4, sg3_utils, and unbound), Debian (librabbitmq, ruby-grape, spip, srt, and swift), Fedora (GitPython, lemonldap-ng, libgit2, libnfs, perl-Imager, perl-List-SomeUtils-XS, python3.12, python3.14, and radsecproxy), Oracle (.NET 10.0, 389-ds-base, 389-ds:1.4, bind, curl, gstreamer1-plugins-bad-free, gstreamer1-plugins-bad-free and gstreamer1-plugins-ugly-free, gstreamer1-plugins-good, gstreamer1-plugins-ugly-free, haproxy, libssh, libXfont2, nodejs22, nodejs:22, pcp, and unbound), Red Hat (golang, grafana, grafana-pcp, osbuild-composer, and rhc), SUSE (erlang, forgejo-cli, go1.25, go1.26, htop, python-pypdf2, python313-tablib, and snphost), and Ubuntu (c3p0, dotnet8, dotnet10, kernel, linux, linux-aws, linux-aws-fips, linux-aws-hwe, linux-fips, linux-hwe, linux-kvm, linux, linux-aws, linux-aws-fips, linux-azure, linux-fips, linux-gcp, linux-gcp-6.8, linux-gcp-fips, linux-gkeop, linux-oracle, linux-realtime, linux-realtime-6.8, linux-xilinx, linux-hwe-7.0, linux-oracle, linux-oracle-6.17, and linux-oracle-6.8).