RSS 생중계

An anonymous reader quotes a report from MIT Technology Review: [T]he payment company Stripe, founded by brothers Patrick and John Collison, says it will fund a new $500 million nonprofit whose goal is preventing both the common cold and the flu. Its eventual aim is to get rid of respiratory viruses altogether. The new organization, called Intercept, will use grants and investments to back prevention approaches, including vaccines, as well as large-scale air-cleaning systems for schools, offices, and other public spaces. In addition to Stripe, other funders include Anthropic, Flu Lab, and the OpenAI Foundation, as well as Bill Gates and several traders at the quantitative investing fund Jane Street Capital, according to an Intercept spokesperson. "I think we treat respiratory infections as a minor nuisance, but have really underweighted the burden that they impose on society," says Nan Ransohoff, the Stripe executive leading the initiative along with Charlie Petty, a venture capitalist who joined Stripe this year. On average, people spend 5% of their lifetime fighting a cold or the flu, according to Ransohoff. Despite that, drug companies put relatively little effort into preventing colds. Part of the problem is that the sniffles are caused by more than 200 different viruses, according to the American Lung Association, with rhinoviruses being the most common culprits. There are so many that it typically doesn't pay to try to stop any one of them with a vaccine. "When pharma companies look at it, it's not as attractive as other things they could work on," says Ransohoff. "So it hasn't attracted the resources." [...] The project takes inspiration from efforts to fight the covid-19 virus, where Veesler's group was among those involved in the speedy development of vaccines, antiviral drugs, and antibodies. According to Ransohoff, Intercept's advisors will include Peter Marks, a former top FDA official, as well as Moncef Slaoui, the pharmaceutical executive who led the US coronavirus vaccine effort, Operation Warp Speed. A key challenge for Intercept will be coming up with ways to counter many viruses at one time. That accounts for the interest in air-cleaning technology, such as using strong ultraviolet light to inactivate viruses. The idea, the group says, is to remove them from the air in the same way municipalities remove impurities from the water supply before it's piped to people's homes.

Read more of this story at Slashdot.

Inside this week's LWN.net Weekly Edition:

• Front: Free-threaded Python; AUR attacks; Fedora 2FA; 7.2 merge window; BPF arenas; BPF coroutines; BPF JIT; RMR and BRMR; OSPM.
• Briefs: Tor deprecations; GIMP 0.54.1 flatpak; Mastodon 4.6; Systemd v261; Xfce on Wayland; Quotes; ...
• Announcements: Newsletters, conferences, security updates, patches, and more.

Slate Auto says its stripped-down electric pickup will start at $24,950 before fees, with the base model's estimated range increased from 150 to about 205 miles. The company has started taking preorders on Wednesday. "The aggressive pricing -- half the average cost of a new car in the United States -- puts Slate in position to capture a share of the lowest end of the new car market, which has few gas and fewer electric options these days," reports TechCrunch. From the report: The price reveal comes more than a year after Slate Auto emerged from stealth. Since then, the company has been steadily detailing the extremely basic, transforming EV, which starts as a two-seater pickup truck, but can be modified into a five-seater SUV. The SUV version will start at $29,950, Slate said Wednesday. Slate has said the conversion can be done by professionals or by owners themselves. On Wednesday, it finally showed off some of the first of its "Slate University" how-to videos, which guide people through the steps for doing everything from the SUV conversion to adding headlight covers. Everything else about the truck is bare, though it's customizable. It has hand-crank windows, lacks an infotainment system, and all orders start with the same gray composite material, with no paint options, as Slate plans to let buyers order customizable wraps for the vehicle. That likely helps cut out a major cost center, as factory paint shops can run in the hundreds of millions of dollars. The company did not offer more details about the buying process. Slate has said it "won't have traditional dealerships," and plans to sell directly to customers, similar to other EV companies like Tesla, Rivian, and Lucid Motors.

Read more of this story at Slashdot.

Meta has paused its Model Compatibility Initiative that tracked employee mouse movements, clicks, keystrokes, and screen content to train AI agents, after some of its collected data became accessible to more employees than intended. Meta says it has no evidence the information was improperly accessed and will not restart the program until it is confident in its safeguards. Wired reports: Meta rolled out the Model Compatibility Initiative (MCI) tool in April to US employees. The tool "collects computer inputs such as mouse movements, click locations and keystrokes, as well as screen content," according to workers who have been petitioning against it over privacy, security, and personal liberty concerns. When MCI launched, employees couldn't opt out, but that changed to a limited degree after workers protested. Meta executives have repeatedly defended the data-gathering project, saying it was necessary to train AI systems to operate computer software the way humans do and that employees were the best examples for the artificial intelligence to learn from. On Monday, a Meta engineer issued an internal security notice stating that databases filled with information gathered by MCI had been exposed to anyone inside the company. A former employee actively involved in pushing back against MCI describes the lapse as "a mess" -- and one that employees had expected would occur. "When workers raised concerns, leadership doubled down and failed to acknowledge the risks workers raised about the safety and privacy of worker and customer data," the person says. "Leadership has clearly created an authoritarian environment where workers are no longer respected or heard." But after critical comments poured into internal forums on Monday expressing frustration about the security issue, Meta shocked some of its staff by pausing MCI altogether, telling WIRED about the development several hours before announcing it to employees. A few workers told WIRED they were confused in the meantime because the tool was continuing to run on their laptops. Late on Monday, Stephane Kasriel, a Meta vice president overseeing AI research, announced the pause and told staff that the security issue had been discovered on June 18 and addressed within four hours. But the initial fix didn't stick and access to the data had to be further locked down. The issue made "some MCI-derived data" accessible to more people than intended, he wrote, without elaborating.

Read more of this story at Slashdot.

Rockstar Games has revealed the price of Grand Theft Auto VI to be $79.99, and confirmed that the physical versions of the game won't include a disc. Instead, they'll contain a one-time download code when it launches November 19. "Not only is that a disappointing decision for people who like to own physical games, but given the scale of the next GTA, it also sets a bad precedent for the rest of the industry," reports The Verge. From the report: There are a lot of advantages to buying digital. You can start a download from your couch. You can store multiple games on one hard drive so you don't have to get up to play something else. Storefronts like Steam or the PlayStation Store don't run out of inventory of the newest game you're interested in, and you can often get games at a cheaper price thanks to frequent sales. But it's becoming increasingly clear that digital ownership has significant disadvantages, too. If a game you don't own digitally is removed from a storefront, whether that's for things like licensing, artificially limited availability, or even the store eventually closing down, your only option is to hope you can find a physical version. If your account on a platform is banned, even if that ban isn't warranted, you might be locked out of your digital library with no way to play those games unless you buy them again or hope your account gets restored. You can't sell or trade digital games you've purchased, and while there are ways to share digital games, they require some work and are usually intended just for families. It's also much harder to preserve digital games because they only "exist" on the hard drive of a console, PC, or device they were downloaded to. This is an issue across many industries, not just console games; there are multiple examples of things like mobile games and streaming shows becoming lost for good when they don't have a physical version. Without physical versions, you also can't find a used version of a game at a garage sale or a local game shop. It's unclear whether Rockstar will ever release a physical version of the game. As for why, The Verge suspects the decision was made in part to prevent leaks; "by only being available digitally, Rockstar can ensure that GTA VI unlocks at the same exact time for everyone." "The digital-only choice might also indicate that the game has a massive file size that's too big for PlayStation and Xbox game discs."

Read more of this story at Slashdot.

OpenAI and Broadcom have unveiled Jalapeno, OpenAI's first custom AI chip, designed primarily to handle inference for ChatGPT and other services. It's a major step in OpenAI's plan to "build the full stack behind its models and products," says OpenAI. "By designing more of the stack ourselves, we can serve more intelligence with greater efficiency and keep pushing advanced AI toward broader access." CNBC reports: The chip with Broadcom is an ASIC, which industry experts say is less flexible than Nvidia's GPU, but is also less expensive and can be designed for specific AI tasks. OpenAI said that it designed the chip in nine months, and that it also crafted large parts of the computer system where it will be used. The companies are calling the chip an "Intelligence Processor" and describe it as the first "AI accelerator" in a platform they're building "to make advanced AI faster, more reliable, and more accessible to more people." [...] A physical sample of the new chip will be delivered to OpenAI on Wednesday. The companies said they're aiming for initial deployment of the Jalapeno chips by the end of 2026, "expanding in the years ahead."

Read more of this story at Slashdot.

An anonymous reader quotes a report from Barron's: Walmart is signing a long-term contract to buy nuclear power for the first time ever, a promising sign that the industry's future is supported by more than just the AI data center boom. The retail giant agreed on Tuesday to buy power from a nuclear plant in Illinois owned by Constellation Energy for its operations in the area, including its stores and a high-tech warehouse in Illinois that stores and sorts perishable food. Walmart will buy 176 megawatts of power from the plant over a 15-year period, or enough power to serve around 150,000 homes. The Walmart deal will allow Constellation to expand the capacity of the Illinois plant by 30 megawatts, a process known as an uprate, which can involve replacing older equipment and improving efficiency. Walmart, which has pledged to eliminate net carbon emissions from its U.S. operations by 2040, will also receive the environmental attributes associated with the nuclear energy, which generates electricity without carbon emissions. Further reading: Trump Admin Announces $17.5 Billion In Loans For 10 New Large Nuclear Reactors

Read more of this story at Slashdot.

In an exit interview with The Financial Times (paywalled), former Disney CEO Bob Iger says the company seriously considered buying Twitter, explored a potential merger with Apple, and pursued the James Bond franchise during his tenure. The Verge reports: According to Iger, Disney came close to buying Twitter from co-founder Jack Dorsey "at a very attractive price," sometime prior to Elon Musk buying the social media platform in 2022 and changing its name to X. Iger had plans to turn Twitter into a global distribution platform for Disney, but walked away on the morning of the deal over concerns that it would be "a horrible distraction." Disney was also at one point involved in early conversations regarding a potential merger with Apple, something Iger thinks would have been "truly transformational." In the end, Iger says these conversations "never went anywhere," and that "Apple didn't show that much interest." The two companies have a mixed history -- Iger was an Apple board member from 2011 to 2019, and notably a driving force behind Disney acquiring Pixar in 2006, which was led by Apple co-founder Steve Jobs at the time. According to Iger, his first call with Jobs resulted in an almost immediate deal to put Disney content on the first video iPod. "All of a sudden, I'm now someone Steve likes and respects," Iger told The Financial Times. "The old Disney that he knew was lumbering in terms of bureaucracy. And so he thought, this is a new day." The Pixar acquisition spurred Iger to find more companies to bring under Disney's wing, though not every attempt was successful. "We felt unstoppable. We put together a list of acquisition targets," said Iger. "Marvel was one, Star Wars was another, James Bond was one. We had a list and I figured let's just tick them off and buy them all." Iger provides no details about Disney's attempt to buy the James Bond franchise, but we know it obviously failed -- Amazon bought the 007 distribution rights when it acquired MGM in 2022, and later paid more than $1 billion to take full creative control of the franchise in February 2025.

Read more of this story at Slashdot.

Compromised accounts are one of the most common ways that attackers can sneak malware into the open-source supply chain. One way to reduce account compromise is for projects to require two-factor authentication (2FA) or multi-factor authentication (MFA), but that is easier said than done. However, Fedora is currently discussing putting 2FA requirements in place soon, following an an alleged account compromise that led to an AI agent causing a number of problems for the project. After some discussion, Fedora will begin by requiring packagers in the "provenpackager" group to enable 2FA within the next three months or so.

A peer-reviewed Nature critique argues that Microsoft's 2025 Majorana quantum-computing breakthrough -- and its claim that it could enable "a truly meaningful quantum computer not in decades, as some have predicted, but in years" -- is fundamentally flawed. According to Dr Henry Legg, a lecturer at the University of St Andrews, the claims were undermined by omitted data, selective plotting, and basic Python errors that concealed alternative results. Microsoft, for its part, says the bugs were minor and stands by its findings and roadmap. The Register reports: "Last year they claimed to be years, not decades from a 'topological quantum supercomputer,'" Legg told The Register in an email. "My feeling is that they are centuries, not decades away. If it works at all -- and, based on what I have seen, the most likely scenario is that it doesn't work." Based on his analysis of the research Microsoft published in 2025, Legg argues that the company's claims about finding and being able to control the elusive Majorana particle to build a topological superconductor do not withstand scrutiny. "I demonstrate that Microsoft's tune-up software is flawed and that coding errors resulted in incorrect statements to peer reviewers," said Legg. "Raw data, which was omitted from the original paper, also appears to indicate Microsoft's devices contain considerable disorder and are not compatible with the existence of a topological gap. In other words, the prerequisites for Microsoft's claims do not appear to be met, but this was obscured because this data did not appear in the original publication." Essentially, Microsoft has proposed a Topological Gap Protocol (TGP) that can be used to detect the phase transition deemed to be a prerequisite for conducting quantum calculations using Majorana particles. Legg argues that based on his analysis of underlying transport data (measurements of particle change) -- omitted from the original publication -- Microsoft chose to focus on results that supported its thesis and ignored data that could be interpreted as a negative result. As he notes in his critique: "The TGP plotting code was set to highlight only the largest purportedly topological region." "The primary consequence was the omission of other regions that passed their tune-up protocol (the TGP)," said Legg. "When peer reviewers asked if other regions existed, Microsoft inaccurately stated that they had investigated the only region passing the protocol within the explored range. This was not correct." Legg also argues that Microsoft mishandled its code. "The code antisymmetrized bias voltage based on array index rather than physical value," his analysis says. In other words, Microsoft's researchers made a basic programming mistake by evaluating the array index -- the number identifying a value's position in an array -- instead of the value to which the index refers. "There were two pretty basic Python programming errors that hid these alternative regions," Legg explained. "Their plotting software was hardcoded with a filter (zbp_cluster_numbers=[1]) that forced it to display only the single largest region, concealing other successful results from their phase maps. Changing this to zbp_cluster_numbers=[1,2] shows already a second region." Legg added: "The TGP software transformed the data by simply reversing a Python array (x[::-1]) based on its index position, ignoring the actual physical bias voltages."

Read more of this story at Slashdot.

BPF arenas are areas of memory (potentially shared with user space) where programs have free reign to build their own data structures, unburdened by the verifier's bounds checks. Many of those data structures are potentially usable in multiple programs. Emil Tsalapatis brought his work on libarena, a library containing generic utilities for use in BPF arenas, to the 2026 Linux Storage, Filesystem, Memory-Management, and BPF Summit. Although the library is already available as part of the kernel, it is still in its early stages and he has more work planned.

An anonymous reader quotes a report from the Associated Press: The Trump administration is providing $17.5 billion to speed the development of 10 new large nuclear reactors to meet the skyrocketing power demand from massive data centers. Energy Secretary Chris Wright cited "tremendous interest" among developers of data centers that would buy the power, as well as utilities and energy companies. The nuclear plants could begin construction by 2030 and become operational in the mid-2030s, Wright and other officials said Tuesday. "This is the start," Wright said on a call with reporters. "We're going to move with the players that are ready to stand up and move quickly. Once that supply chain is up and running, do we think there will be dozens of these built going forward? I'd be very surprised if there were not." Most U.S. nuclear power plants were built between 1970 and 1990. Only two new large reactors have been built from scratch in the United States in recent decades. Those two reactors, at Georgia Power Co.'s Plant Vogtle, were completed years late and billions of dollars over budget. The 10 new reactors will use the same design, Westinghouse's AP1000. Wright said the Plant Vogtle project struggled because of bad planning, supply chain problems and the COVID-19 pandemic. But, he said, the reactor design is "robust and sound."

Read more of this story at Slashdot.

Ancient Slashdot reader Mark Round writes: Longtime reader here (since mid-1999 -- Hot Grits! Oog the Caveman! Beowulf clusters!), and I can still remember posting back on Slashdot's own 5th anniversary. Time's rolled on: my own blog just turned 25, and it's now roughly 40 years since I first sat down at a computer. So I went digging through archive.org, old backups, and a box of ZIP disks, and wrote up a long look back at four decades of computing through the one website that's been my online home along the way. It runs from my first 8-bit micro and a 1,200-baud modem through discovering the actual Internet at university (and burning far too many hours on Slashdot and sister sites like freshmeat.net), past gloriously pimped-out Enlightenment Linux desktops, all the way to the modern cloud-native world. Plenty of dodgy screenshots, terrible code, and fond memories of long-gone haunts like kuro5hin.org and Linux Coffee Talk along the way.

Read more of this story at Slashdot.

The Power Management and Scheduling in the Linux Kernel Summit, which still goes by the historical acronym OSPM, was held in Cambridge, UK, in mid-April. As has become traditional, the presenters at that event have since written summaries of their sessions, and this work has kindly been made available to LWN for publication. The second day's sessions covered a wide range of topics, including device frequency scaling, using time-slice duration for CPU selection, scheduling domains on multi-cluster Arm systems, the LAVD scheduler, and more.

Security updates have been issued by AlmaLinux (corosync, firefox, kernel, kernel-rt, libpq, memcached, postgresql, postgresql16, postgresql:13, postgresql:16, python-urllib3, python3.14-urllib3, redis:6, skopeo, and vim), Debian (beets, gst-plugins-bad1.0, imagemagick, libmatio, python-urllib3, and u-boot), Fedora (chromium, coturn, frr, grout, materialx, perl-Crypt-DSA, and yt-dlp), Mageia (opensc, perl-Archive-Tar, and podofo), Oracle (fence-agents, libpq, mysql:8.4, and postgresql:16), Red Hat (firefox, libpng, libpng12, libpng15, libreoffice, nginx:1.24, thunderbird, tigervnc, xorg-x11-server, and xorg-x11-server-Xwayland), Slackware (libarchive), SUSE (amazon-ssm-agent, ansible-core, apache2, bind, bitcoin-qt6, containerized-data-importer, curl, distribution, docker-stable, dovecot24, dracut, editorconfig-core-c, exiv2, firefox, freeipmi, freerdp, ghc-aws, ghc-crypton-asn1-encoding, ghc-crypton-asn1-parse, ghc-crypton-asn1-types, ghc-crypton-pem, glib-networking, go1.25, go1.26, google-guest-agent, graphite2, hamlib, helm, himmelblau, ignition, ImageMagick, kernel, ldns, libarchive, libcaca, libheif, libinput, libjxl, libsolv, libzypp, zypper, LibVNCServer, libxslt, libyang, mcphost, mozjs128, ncurses, nginx, opensc, openssl-3, openvswitch, papers, perl-HTML-Parser, perl-HTTP-Daemon, perl-Protocol-HTTP2, podman, postgresql14, postgresql15, postgresql16, postgresql17, python-aiohttp, python-ecdsa, python-paramiko, python-PyJWT, python-starlette, rekor, sqlite3, strongswan, tiff, tomcat, tomcat10, tomcat11, unbound, webkit2gtk3, xwayland, and zypper, libzypp, libsolv), and Ubuntu (libcap2, libnfs, libvncserver, libxml2, and mysql-8.0).

alternative_right shares a report from ScienceAlert: If you consumed a wild mushroom and suddenly started seeing tiny people around you, you might reasonably assume it contained a familiar psychedelic. But that does not appear to be the case with Lanmaoa asiatica, known locally as jian shou qing, a mushroom species sold in markets in Yunnan, southwestern China. When eaten undercooked, the mushroom can produce vivid visions of miniature people -- not unlike Gulliver on his travels to Lilliput. To try and find out the root cause, University of Utah mycologists Colin Domnauer and Bryn Dentinger sequenced the genomes of 53 mushroom samples from across the wider Lanmaoa genus. And despite the reported hallucinations, they found no close matches to genes associated with psilocybin or ibotenic acid, two well-known mushroom hallucinogens whose biosynthetic pathways were specifically examined in the study. "Biosynthetic gene mining of the L. asiatica genome found no close hits with any genes known in the production of mushroom psychoactive compounds," write the researchers in their published paper. "This supports our hypothesis of the presence of a novel unidentified metabolite responsible for the unique hallucinogenic properties of L. asiatica." [...] Whatever chemical pathways are causing these effects in the brain, the responsible compound appears to be something scientists have not yet identified. [...] By identifying 1,515 corresponding genes across the selected specimens, the researchers obtained a clearer answer to the question of what defines a mushroom species as part of the genus Lanmaoa. There are now 17 recognized species in the genus, including four that haven't been identified before, two of which the researchers specifically named here: Lanmaoa fallax and Lanmaoa carbonilivor. The researchers say the Lanmaoa family and evolutionary tree can now be more fully mapped out, and some existing specimens may need to be reclassified.

Read more of this story at Slashdot.

fjo3 shares a report from the AFP: The latest heatwave sweeping across Europe is a stark reminder that it is the world's fastest-warming continent, stretching into an Arctic that is heating at an even greater pace. Britain, France, Italy and Spain have issued red alerts and health warnings for much of their territory this week as the region endures its second heat episode since May. Here is a look at why Europe is warming faster than elsewhere: The planet as a whole is around 1.4C warmer than in preindustrial times, defined as 1850-1900. By comparison, Europe is around 2.4C hotter than the preindustrial era, according to the EU's Copernicus Climate Change Service. The long-term rise in global average temperatures is mainly due to greenhouse gas emissions from burning oil, gas and coal, but it varies by regions due to a combination of factors. Land warms faster than the ocean as water can absorb more heat and cool through evaporation. Shifts in atmospheric circulation have driven more frequent and more intense heatwaves in the European summer, according to Copernicus. High-pressure systems, which bring settled weather and higher temperatures, have become more common in Europe, Copernicus director Carlo Buontempo said. [...] Another major reason is geography as Europe is connected to the Arctic, which is 3.2C warmer than in preindustrial times. The region's rising temperatures are partly due to a process known as the albedo feedback. Bright snow and ice reflect much of the sun's heat back into space, but as they melt they reveal darker, heat-absorbing surfaces such as land and the ocean. In other parts of Europe, areas where snow was very frequent in winter have seen this coverage shrink, exposing dark land. Stricter air quality regulations have reduced aerosol emissions since the 1980s. But tackling the pollutant had the side effect of contributing to global warming, as these tiny airborne particles have a cooling effect by reflecting sunlight and making clouds more reflective.

Read more of this story at Slashdot.

An anonymous reader quotes a report from The Guardian: A tech sell-off shook global markets on Tuesday as attention turned away from developments in the US war with Iran and toward the future of AI companies and chipmakers that have driven stock markets to record highs. The tech-heavy Nasdaq index closed 2.2% lower on Tuesday. The S&P 500 was also down by Tuesday afternoon, dropping 1.43% while the Dow remained steady. All three major US indices have hit record highs this year, riding off a rush of funding to support AI technology and infrastructure. Nasdaq is up 10% for the year, while the Dow jumped 6% so far this year, breaching past 51,000 points, and the S&P 500 is up 7.3%. But some economists have warned that the influx of AI spending is a bubble reminiscent of the dot-com bubble that burst in the early 2000s. Seven tech companies make up 30% of the S&P 500's value. The heavy reliance on a single industry and a few key companies has some investors wondering if it's a matter of when, not if, there will be a burst. Those concerns have been heightened by signals from the Federal Reserve last week that it may increase interest rates, and therefore the cost of borrowing, in order to tackle rising inflation. Alphabet fell 5% on Monday. SpaceX plunged 16%. The selloff also spread to Asia, with South Korea's benchmark dropping 10% as SK Hynix and Samsung Electronics each lost more than 12%, while Japan's Nikkei 225 declined 3.5%.

Read more of this story at Slashdot.

A 29-year-old bug in the Squid web proxy, dubbed Squidbleed and tracked as CVE-2026-47729, can let an authorized proxy user retrieve fragments of another user's cleartext HTTP requests, including credentials and session tokens. The security researcher who reported the flaw credited Anthropic's Claude Mythos Preview for the discovery. The Hacker News reports: Squid describes this as an attack by a trusted client: someone already permitted to use the proxy, not any random host on the internet. That matches Squid's usual home, shared networks like schools, offices, and public Wi-Fi. In those setups, the attacker is just another user of the same proxy. The leak also only reaches traffic that Squid can read. Normal HTTPS rides an opaque CONNECT tunnel, so Squid never sees inside it; the exposed traffic is cleartext HTTP, plus TLS-terminating setups where Squid decrypts and inspects. The attacker also needs the proxy to reach an FTP server they control on port 21. Both FTP and that port are on by default. [...] If you patch, verify the fix, not just the version. Confirm the guard is in FtpGateway.cc, or check your distribution's backport, since distros ship their own builds (Debian packages Squid 5.7). The public thread is still inconsistent: maintainer Amos Jeffries first said Squid 7.6 carried the fix, then corrected that to 7.7, and on June 22 Debian's Salvatore Bonaccorso noted the referenced commit looks like it is already in 7.6. The fix is small, a null-terminator check before the vulnerable strchr calls, merged to the development branch in April and v7 in May. Squid 7.6 does separately patch CVE-2026-50012, an unrelated cache_digest heap overflow. The cleaner move is the one the researchers recommend anyway: turn FTP off. Chromium dropped FTP years ago, and most networks carry almost none of it, so disabling it removes this attack surface for free, whatever build you run. The risk is real but bounded. SUSE rates it moderate, CVSS 6.5, and the vector explains the score: the attacker needs proxy access (low privileges), and the only impact is confidentiality, nothing on integrity or availability.

Read more of this story at Slashdot.

Longtime Slashdot reader hackingbear shares a report from TOP500: The 67th edition of the TOP500 list of the world's most powerful supercomputers was announced today at the ISC 2026 conference in Hamburg, Germany. LineShine, a previously unlisted system installed in China, debuts at No. 1, displacing El Capitan as the world's most powerful supercomputer as measured by the High Performance Linpack (HPL) benchmark. LineShine achieved 2.198 Exaflop/s on HPL -- about 80 percent of its 2.736 Exaflop/s theoretical peak -- making it the first system on the TOP500 to exceed two exaflops of sustained double-precision performance using CPUs only. Installed at the National Supercomputing Centre in Shenzhen (NSCS) and built by the Shenzhen Cloud Computing Center, the system is based on a custom Chinese processor and the "LingKun" platform: 13.79 million cores across 304-core LX2 processors running at 1.55 GHz, linked by the proprietary LingQi interconnect and running Kylin OS. LineShine draws approximately 42.2 megawatts of power, for an efficiency of 52.07 Gigaflops/Watt. Its debut marks the first time since 2017 that a Chinese system has led the TOP500, and it also takes over the No. 1 position on the HPCG ranking with 22.00 HPCG-Petaflop/s. On the HPL-MxP mixed-precision benchmark, LineShine reached 7.92 Exaflop/s for fourth place, a comparatively modest 3.6x speedup over its HPL score that points to a CPU-only design without dedicated low-precision accelerators. While impressive, "the results may say more about Beijing's desire to show self-sufficiency in computing systems than its standing in the global AI race," reports Reuters. Reuters interviewed tech and policy experts who said that the results "do not mean that China has the world's fastest computer for AI work because of changes in the computing industry in recent years and the methods used to compile the list." The reports notes that LineShine "ranked fourth on a benchmark test designed to simulate computing work that is more similar to AI." Jimmy Goodrich, a senior fellow at the University of California's Institute for Global Conflict and Cooperation, said: "If the hyperscalers submitted their systems, this 'world's fastest' would not crack the top five." Addison Snell, CEO of Intersect360 Research, a firm that focuses on supercomputers, added: "I'm not surprised it's the number one system. What I'm surprised by is that they submitted it and want recognition for it."

Read more of this story at Slashdot.