RSS 생중계

Security updates have been issued by AlmaLinux (buildah, coreutils, evince, libpng, libreoffice, libtasn1, libxml2, libxslt, nginx, nginx:1.24, nginx:1.26, postgresql:12, python-urllib3, python3.12-urllib3, python3.14, python3.14-urllib3, skopeo, tigervnc, tomcat, and vim), Debian (chromium, dnsdist, giflib, libdbi-perl, libssh2, libtext-csv-xs-perl, pdns, pdns-recursor, python-urllib3, and sogo), Fedora (goose, httpd, librabbitmq, perl-Compress-Raw-Bzip2, perl-DBI, perl-IO-Compress, perl-Socket, python-django-allauth, rsync, and strongswan), Oracle (389-ds-base, buildah, containernetworking-plugins, coreutils, evince, fence-agents, giflib, git-lfs, hplip, krb5, libcap, libexif, libtasn1, memcached, opencryptoki, podman, postfix, postgresql:12, postgresql:13, postgresql:15, postgresql:16, python-urllib3, python3.12-urllib3, python3.14-urllib3, python3.9, runc, skopeo, tigervnc, vim, webkit2gtk3, xorg-x11-server, and xorg-x11-server-Xwayland), SUSE (apache-commons-configuration2, apache-commons-text, apache2, containerd, kernel, libnilfs3, libopenbabel8, libtar, libzypp, lrzip, nodejs24, ofono, perl-Net-Dropbox-API, podman, python-pip, python-PyJWT, python311-aiohttp, python311-nltk, python311-python-multipart, python312, and python315), and Ubuntu (amd64-microcode, containerd, containerd-app, containerd-stable, cpp-httplib, imagemagick, mina2, node-pbkdf2, NSD, and xrdp).

The Linux Foundation, in a letter co-signed by a large range of organizations and companies, has announced the launch of "Akrites", a project to fast-track vulnerability fixes into projects.

As Akrites works upstream to fix projects at the source, we commit to support downstream efforts to secure critical infrastructure before it can be exploited. When patches are released to the public, adversaries are able to utilize AI to rapidly reverse engineer the underlying vulnerabilities, develop exploits, and launch attacks. The success of our efforts therefore will be measured in patch deployment, not publication. We will partner with critical infrastructure owners and operators, civil society efforts, and governments as they increase coordination to achieve these goals.

Confidentiality is non-negotiable: An undisclosed flaw in a widely deployed package is, in effect, a weapon, and the program is built first to prevent leaks. Fixes flow back into each project's own home, working with the maintainers. The engineering resources and other capabilities provided by Akrites participants contribute to this effort. Additionally, when a critical package has no one maintaining it, Akrites will stand as the maintainer of last resort so a fix can still reach everyone in a timely fashion. We will also align with government efforts so that public and private defenders move together, rather than in a disjointed fashion.

Notion announced that it will shut down its email client on September 22. The company says more than half of users already manage email through Notion's AI agents without opening their inbox, so it is shifting its focus from a traditional email client to agent-run workflows. Engadget reports: It has published an FAQ for users to make sure that they don't lose any messages or data in the transition. Most emails will still exist in a Gmail inbox, but customers will need to manually export their drafts, scheduled emails, snippets and auto label instructions. Notion first began offering Notion Mail after acquiring startup Skiff in 2024.

Read more of this story at Slashdot.

Researchers say they detected the first gravitational-wave "fingerprints" of a black hole's event horizon by analyzing the final moments of the powerful GW250114 merger. The findings support Einstein's general relativity and may eventually help probe frame dragging and quantum fluctuations near black holes. Phys.org reports: For the new research published in Nature, an international team of researchers analyzed data from the strongest gravitational wave ever recorded, known as GW250114, detected by the LIGO observatory in January 2025. By isolating the last burst of waves -- known as "direct waves" -- from this black hole merger, the scientists said they were able to extract information from closer to an event horizon than ever before. "This black hole horizon concept normally appears in science fiction," lead study author Sizheng Ma of the Perimeter Institute for Theoretical Physics in Canada told AFP. "But now we are really able to touch the region around the horizon with gravitational data," he added. "Sometimes I cannot believe this is really happening." The last stage of two black holes merging is like a spoon stirring a glass of water, Ma explained. The resulting swirl in space creates the ripple of gravitational waves that travel at the speed of light in all directions. If the metaphorical spoon is stirring close enough to the black hole's event horizon, "this offers us a chance to decode the physics around that region," Ma said. By supporting the theory of general relativity, the results "proved that Einstein was correct again," he added. The scientists emphasized that more research was needed to decipher what can be gleaned about event horizons using this method. But they did detect information about how black holes twist space around themselves as they rotate -- a phenomenon known as "frame dragging." "This is similar to pushing a glass into a table and twisting it, so that the tablecloth winds up around it," Maximiliano Isi, a gravitational wave astrophysicist at Columbia University, told AFP. In the future, the scientists hope to find signs of tiny changes known as quantum fluctuations. "In this way, we can really probe this near-horizon region to look for new physics," including searching for a deviation from general relativity, Ma said.

Read more of this story at Slashdot.

An anonymous reader quotes a report from Reuters: Spain will require mobile networks to have backup systems that maintain connectivity when power outages occur. Per a royal decree that will be approved by the end of 2026, mobile network operators (MNOs) and infrastructure companies will need to install batteries or other backups to keep service active for at least four hours during a blackout. The mobile network rules will apply to businesses that serve at least 500,000 users or generate upwards of 50 million euros ($56.9 million) in annual revenue. The decree will stipulate that half of the population will need to be covered by this failsafe within the first year, then 65 percent in the second year and three quarters in the third. [...] The decree will require other key infrastructure elements to remain up and running for a certain period after a power outage. For instance, control centers that could impact all of Spain if they were to go offline will need to remain in service for at least 24 hours. Emergency call centers will also need to have plans in place to maintain operations, as Reuters notes. The move is in response to the widespread blackout across the Iberian peninsula in 2025, which left more than 50 million people without power. Experts called it "the most severe and unprecedented blackout that had occurred in Europe in the past 20 years."

Read more of this story at Slashdot.

Longtime Slashdot reader schwit1 shares a report from autoevolution: The U.S. Department of Commerce's Bureau of Industry and Security denied Polestar an authorization under the Connected Vehicle Rule. Polestar will continue to sell its existing inventory of Polestar 3 and 4 crossovers in the United States and will continue to offer support to customers and access to its service network. But no new 2027 models will set wheels on American soil. The Connected Vehicle Rule is a regulation that restricts the import and sale of vehicles equipped with Vehicle Connectivity Systems (VCS) and Automated Driving Systems (ADS) tied to foreign adversaries, primarily from China and Russia. Polestar is owned by Chinese auto giant Geely, which has also been the parent company of Swedish brand Volvo since 2010. However, Volvo has recently been granted authorization to sell connected vehicles in the United States. The rule, set out by the Bureau of Industry and Security (BIS), classifies modern vehicles as mobile data centers and is designed to protect national security by keeping sensitive driver data and vehicle control systems out of the hands of foreign governments. Michael Lohscheller, Polestar CEO, confirms that the company is well aware that the automotive industry is entering a new phase, based on regional dynamics. So, Polestar will shift its strategy to its biggest market as it is preparing its exit from the U.S. market. The report notes that Polestar sold 5,384 cars in the U.S. in 2025, with 60,119 units sold globally.

Read more of this story at Slashdot.

The Trump administration has reportedly asked OpenAI to stagger the release of GPT-5.6 over security concerns. The model will initially be offered to a small group of partners, with the government "approving access customer by customer during this preview period," reports The Information. The request came from conversations with the Office of the National Cyber Director and the Office of Science and Technology Policy, the report said.

Read more of this story at Slashdot.

BrianFagioli writes: The Linux Foundation has announced Akrites, a new initiative to coordinate vulnerability disclosure and remediation for critical open source software as AI dramatically speeds up vulnerability discovery. Founding members include AWS, Google, Microsoft, OpenAI, Red Hat, NVIDIA, IBM, Cisco, JPMorganChase, and others. Akrites will provide a shared Security Incident Response Team (SIRT), a standardized coordinated vulnerability disclosure process, and act as a "maintainer of last resort" for abandoned but widely used packages. The goal is to reduce duplicate reports, avoid conflicting patches, and help upstream maintainers address vulnerabilities before they can be exploited. As AI makes it easier to find security flaws, can a coordinated industry effort help protect open source, or does it risk giving large corporations too much influence over the ecosystem? "Akrites is the largest coordinated effort in history to create systems and deploy tooling that leverages the collective power of the community to make everyone safer," the Linux Foundation said in an open letter. "Akrites participants will contribute engineering resources; work to build and ship fixes; or fund the engineers who do. Some companies have contributed mightily already. The reality is, collectively, we need to contribute more."

Read more of this story at Slashdot.

Apple has sharply raised prices across its Mac, iPad, HomePod, and Apple TV lineups as surging AI-driven demand creates a global memory and storage shortage. Increases range from $30 for the HomePod mini to $1,300 for the M3 Ultra Mac Studio, with Apple CEO Tim Cook saying efforts to shield customers from higher costs had become "unsustainable." The Verge reports: On Thursday, the company adjusted the price of its new MacBook Neo, which will now start at $699 instead of $599, while the base MacBook Air will jump to $1,299 from $1,099, as reported earlier by Bloomberg. The 14-inch MacBook Pro is getting an increase as well, going from $1,699 to $1,999. Meanwhile, the iPad Air will now start at $749 instead of $599, while the iPad Pro is increasing to $1,199 from $999. As spotted by MacRumors, the M4 Max Mac Studio will now cost $2,499, a big jump from $1,999. The M3 Ultra Mac Studio is now priced at $5,299, up from $3,999. Apple is even raising the prices of its HomePod, which now costs $349 instead of $299, as well as bumping the price of the HomePod mini to $129 instead of $99. The Apple TV also now costs $199 instead of $129.

Read more of this story at Slashdot.

LastPass says hackers stole customers' personal information, support case records, and sales data by breaching market research partner Klue. The password manager told TechCrunch that its own systems and password vaults were unaffected. However, the hackers used their access to obtain "reams of data about LastPass customers," the report says. From the report: In a blog post that shared information about the incident, LastPass said the hackers took customers' names, phone numbers, email addresses, and physical addresses, as well as customer support case data and sales-related data. It's not yet known what was in the contents of customer support tickets, although they likely contain fragments of potentially private or sensitive information. Customers typically contact customer service when they are having a billing issue or need assistance in gaining access to their accounts. Past incidents involving customer support tickets have included credentials and government-issued identity documents. The last data breach LastPass reported was in 2022, when hackers stole the company's entire store of customer password vaults.

Read more of this story at Slashdot.

An anonymous reader quotes a report from Ars Technica: Anthropic has accused the Chinese firm Alibaba of launching the largest attack yet attempting to clone Claude, as China races to match the capabilities of Anthropic's leading model following Mythos' release and subsequent restriction from foreign markets. Ars obtained a June 10 letter sent to Senators Tim Scott (R-S.C.) and Elizabeth Warren (D-Mass.) one day ahead of a Senate committee hearing on "AI and the American Dream." In the letter, Anthropic shared "new, confidential evidence of the largest campaign to illicitly extract Claude's capabilities we have ever measured." The attacks occurred between April 22 and June 5, when "operators afliated with Alibaba and Alibaba Qwen, Alibaba's AI lab" allegedly generated "more than 28.8 million exchanges with Claude through almost 25,000 fraudulent accounts," Anthropic said. Violating Claude's terms of service and access restrictions, this campaign "targeted some of Claude's most valuable capabilities, such as agentic reasoning, software engineering, and long-horizon tasks." According to Anthropic, Alibaba evaded detection by "using obfuscation techniques and proxy networks." As Chinese demand for reliable obfuscation techniques increases, Anthropic warned there's already "a growing circumvention economy" to fuel an ever-expanding web of future distillation attacks. [...] "Alibaba is governed by an independent board, none of whom has any military affiliation," Alibaba said. "Its products and services are built for retail, logistics, and enterprise information technology -- not weapons, defense, or intelligence." Anthropic appears unconvinced, however, that Alibaba isn't working with the Chinese government. In the letter, Anthropic warned that without stronger interventions, these distillation attacks will "help China reach Mythos Preview-level capabilities sooner." To keep the US ahead of China, Anthropic recommended that Congress pass legislation with three objectives. First, antitrust laws must be updated to allow AI firms to share information about evolving Chinese tactics to deter more threats. Second, the US needs more export controls on chips to hamstring Chinese access to advanced compute so that they simply can't train on US model outputs. That could make conducting distillation attacks pointless, Anthropic suggested. Finally, Congress should pass laws penalizing Chinese labs' "bad behavior" so that it's "more difficult and costly" to rely on distillation attacks to advance Chinese models. Penalties could include limiting Chinese firms from accessing US models or advanced US chips or from relying on data centers outside of China, Anthropic suggested.

Read more of this story at Slashdot.

MinIO is a popular object-storage server that offered compatibility with the Amazon Simple Storage Service (S3) API. In December 2025, the company behind the project (also named MinIO) announced that the project was in maintenance mode and would not accept new changes; it was archived completely in February 2026. MinIO users have been hunting for alternatives since then, but the array of choices can be baffling. While many other projects aim to fill the space, their strengths and areas of focus tend to vary. Two of the alternatives—Ceph and Garage—are particularly compelling, and both offer solid S3 compatibility.

After Ford's automated quality-control systems and AI tools fell short, the automaker hired 350 veteran engineers over the past three years to mentor younger staff and reprogram the underperforming technology. "Artificial intelligence is a fantastic tool, but it's only as good as the information you use to train it," Charles Poon, Ford's vice president of vehicle hardware engineering, told reporters on a call Wednesday. "Over prior years, we didn't pay as much attention as we should have to the experience of our most knowledgeable engineers that have been with us through many product cycles." Bloomberg reports: Those engineers were "at the heart" of Ford's efforts to turn around quality problems, said Kumar Galhotra, chief operating officer. They now run mandatory meetings that rigorously troubleshoot quality problems and they have reprogrammed AI tools to head off glitches before they happen. "We had been relying more and more on automated quality systems" and not getting the desired results, Galhotra said. "We brought back technical specialists" and "they hunt for failure points before a part ever reaches the plant floor." The return of the veteran engineers at Ford cuts against the prevailing wisdom -- and fear -- that AI will replace all kinds of knowledge workers. But Ford found the machines couldn't replace experience. "Mistakenly we thought that by just introducing artificial intelligence and ingesting the design requirements that we had, that that would produce a high-quality product," Poon said. But "we recognized that for us to enhance some of our automation and machine learning and artificial intelligence tools we needed to ensure that they were trained by the most experienced individuals." As a result of the efforts of the old hands, Ford vaulted above quality stalwarts such as Toyota and Honda on JD Power's bellwether survey that measures the quality of a car during the first three months of ownership. Only luxury brands Porsche and Genesis topped Ford this year.

Read more of this story at Slashdot.

Version 6.0.0 of the Podman container-management tool has been released. Notable new features include the ability to set multiple static IP addresses for containers, improvements in network isolation that make Podman more compatible with Docker, changes to the way Quadlet commands function, many new options for many existing podman commands, and a rewrite of Podman's configuration file handling. There are many breaking changes; see the release notes for a full list of all new features, changes, and bug fixes.

Micron has signed 16 "strategic customer agreements" (SCAs) that include a floor price the company says comes with "a very robust gross margin for Micron, well above our peak quarterly margins in any past cycle." Most of the deals run through 2030 and cover about 40% of Micron's revenue. The Register reports: Micron CEO, president and chairman Sanjay Mehrotra explained the SCAs in prepared remarks delivered during the company's Q3 earnings call. He explained that Micron has signed 16 SCAs, most of them covering 2026 to 2030, and that they involve a commitment to buy a certain quantity of product and pay for it in a pricing band that has a floor and a ceiling price. The floor price covers the historically high gross margins mentioned above, and the ceiling price means those who commit to an SCA are insulated if memory prices go even higher. The CEO said 16 customers have signed SCAs and then explained why it's worth locking into the deals even though they bake in such high margins. "Our customers are recognizing that supply shortages in memory and storage will take considerable time to improve," he said. "Even as we expect industry supply to improve gradually in 2028, we currently do not have line of sight as to when memory supply will be able to catch up with increasing demand." Even massive efforts to build new chip fabs aren't much help, he said, because the increasing complexity of new memory types means it takes longer to build factories -- and when they come online there still won't be enough capacity to build both the high-bandwidth memory needed for AI and other types of NAND and DRAM. "Supply is structurally constrained in its growth and ability to meet industry demand, despite our comprehensive efforts to increase supply," he said. Don't assume that SCAs mean your suppliers get price certainty, because Mehrotra said the deals will account for 40 percent of Micron revenue -- meaning the company is reserving most of its inventory to sell at prices it can negotiate. The CEO did have a little good news in the form of predictions that Micron's DRAM output in 2026 will "grow in the low- to mid-20s percentage range, slightly above our prior outlook." He also revealed that the SCAs see customers pay up front, which helps Micron to fund its fab expansions.

Read more of this story at Slashdot.

An anonymous reader quotes a report from Ars Technica: Google spent the last few years locked in a legal grudge match with Epic Games, which claimed that Google's stewardship of the Play Store was anticompetitive. Now, the companies are thick as thieves, and Google is beginning to implement app store changes as agreed in its settlement with Epic. The lower developer fees and new payment options that Google promised are rolling out in select markets this month before expanding. [...] Starting on June 30, developers in Europe, the UK, and the US will have access to the new fee structure. This system will split the commission into two components: billing and service fees. The biggest win for small developers is the new flat 10 percent service fee for the first $1 million in earnings every year. Above that, the rate for various transaction types may reach 25 percent on existing installs. Apps installed after June 30 will top out at 20 percent. Developers will finally be allowed to send users outside the Play Store to complete a transaction, too. Google says they can design a choice screen "in accordance with our UX guidelines" to direct users to these external options. Devs pay the standard service fee on these purchases, but they'll avoid the billing fee. All transactions that run through Google's Play Store platform add a 5 percent billing fee -- even the base rate for publishers earning less than $1 million. Google notes that the billing fee is set at 5 percent in the initial markets, but it could be different in other regions. Google will expand the new fee structure globally through September 2027, while also offering reduced fees through updated developer programs. Although the changes may let developers retain more revenue, Google will continue controlling Android distribution and collecting a share of sales as it works toward allowing certified third-party app stores to operate more like the Play Store.

Read more of this story at Slashdot.

There is a lot of work going into eliminating exploitable bugs from the kernel and preventing the addition of new ones. Even if this work is maximally successful, though, there is no chance that the kernel will be free of these bugs anytime soon. Thus, there is also ongoing interest in hardening the kernel to make the existing bugs more difficult to exploit. The upcoming 7.2 kernel release will include a change to how dynamically allocated structures are placed in memory to make them harder to overwrite, while a project to randomize structure layout at boot time has a rather longer timeline.

Security updates have been issued by AlmaLinux (libpng, libsolv, libtasn1, libxml2, libxslt, python3.14, tigervnc, and vim), Debian (cloud-init, postgresql-13, and yelp), Mageia (nats-server), Oracle (.NET 10.0, .NET 8.0, .NET 9.0, bind9.18, cockpit, compat-openssl11, dnsmasq, dovecot, evince, expat, flatpak, freerdp, gimp, golang, grafana, grafana-pcp, httpd, jmc, jq, kernel, libsndfile, libsoup, libtiff, mod_http2, mysql:8.0, nginx, nginx:1.24, openexr, php:8.2, poppler, pyOpenSSL, python-markdown, redis:7, samba, thunderbird, tigervnc, unbound, and vim), Red Hat (libpng, libpng12, and libpng15), SUSE (apptainer, bind, crun, freeipmi, ghc-crypton-x509-store, ghc-crypton-x509-system, google-guest-agent, google-osconfig-agent, GraphicsMagick, gstreamer-plugins-bad, hamlib, iproute2, java-1_8_0-openjdk, kubevirt1, libarchive, libheif, libpng15, mbedtls, mbedtls-2, openssl-1_1, python-biopython, python-PyJWT, tar, webkit2gtk3, and xen), and Ubuntu (ffmpeg, libdbi-perl, and perl).

joshuark shares a report from Car and Driver: A new study conducted by the New York Times shows that the increase in vehicle hood height seen over the last two and a half decades, mainly due to the rise in popularity of large SUVs and trucks, has resulted in several thousand deaths that otherwise may not have happened. The study shows that while automakers and regulators have focused on occupant safety, they have turned a blind eye to pedestrian safety, which has fallen since around 2009. Researchers looked at four main datasets in their investigation: crash test data from the National Highway Traffic Safety Administration's (NHTSA) Crash Report Sampling System (CRSS) from 2016 to 2024; NHTSA's Fatality Analysis Reporting System (FARS); vehicle measurement data from Expert AutoStats; and vehicle registration data from S&P Global from 2002 to 2024. The researchers concluded that the increased danger to pedestrians is caused by two main culprits. First, large SUVs and trucks have taller hoods, raising the point of impact above most people's center of gravity and pushing them to the ground, typically hard asphalt, rather than up and onto the hood, which is designed to absorb impacts. Second, with larger A-pillars designed to protect occupants in rollover crashes, modern cars tend to have larger blind spots than cars sold at the turn of the century (presuming the 21st century). The shift toward vehicles with taller hoods led to roughly 3000 deaths between 2016 and 2024. This number is conservative because it does not include crashes that take place in parking lots, driveways, or private roads, which aren't part of the federal database. The data also showed an estimated 2.8 percent increase in the odds of a pedestrian fatality for every one-inch increase in vehicle hood height. Between two different scenarios, one decreasing the hood height of every vehicle in the dataset by 3 inches, and the second using a random sampling of hood heights from 2002 across 10,000 simulated crashes, between 2624 (for scenario two) and 3077 (for scenario one) lives could have been saved from 2016 to 2024.

Read more of this story at Slashdot.

NASA's Perseverance rover has detected complex organic carbon in ancient Martian mudstones. The measurements were taken by the rover's Sherloc instrument and the organic carbon that was identified was from the Bright Angel outcrop, "a dried-up river that carried water into the planet's Jezero crater billions of years ago," notes The Guardian. From the report: The form of carbon detected, known as macromolecular carbon or MMC, can originate from living organisms. Geological processes can also produce the material, meaning its detection does not amount to proof of past Martian life. Dr Ashley Murphy at the Planetary Science Institute in Arizona said MMC can be found in different settings and types of rocks. "It may originate from biological sources such as fossilized organic matter found in microbial mats and coal," she said, but could also form in reactions between rocks and water or arrive on impacting meteorites. The mudstone rocks from the Bright Angel outcrop caused a stir in 2024 when the Perseverance rover discovered intriguing surface spots and nodules that resemble features produced by fossilized microbes on Earth. When the scientific details were published last year, Sean Duffy, the former acting head of Nasa, said: "This very well could be the clearest sign of life that we've ever found on Mars." [...] The discovery means Nasa rovers have now found organic-bearing mudstones more than 2,000 miles apart on Mars. The others were reported by the Curiosity rover which is exploring the planet's Gale crater. It "indicates that the habitability of Mars, and the availability of organics, may have been widespread across the planet billions of years ago," the authors write in Science Advances.

Read more of this story at Slashdot.