RSS 생중계

Smatch is a GPL-licensed static-analysis tool for C that has a lot of specialized checks for the kernel. Smatch has been used in the kernel for more than 20 years; Dan Carpenter, its primary author, decided last year that some details of its plugin system were due for a rewrite. He spoke at Linaro Connect 2025 about his work on Smatch, the changes to its implementation, and how those changes enabled him to easily add additional checks for locking bugs in the kernel.

The "Local Mess" GitHub repository is dedicated to the disclosure of an Android tracking exploit used by (at least) Meta and Yandex.

While there are subtle differences in the way Meta and Yandex bridge web and mobile contexts and identifiers, both of them essentially misuse the unvetted access to localhost sockets. The Android OS allows any installed app with the INTERNET permission to open a listening socket on the loopback interface (127.0.0.1). Browsers running on the same device also access this interface without user consent or platform mediation. This allows JavaScript embedded on web pages to communicate with native Android apps and share identifiers and browsing habits, bridging ephemeral web identifiers to long-lived mobile app IDs using standard Web APIs.

This backdoor, the use of which has evidently stopped since its disclosure, allow tracking of users across sites regardless of cookie policies or use of incognito browser modes.

Security updates have been issued by AlmaLinux (glibc, grafana, kernel-rt, libjpeg-turbo, libxslt, and thunderbird), Debian (curl), Fedora (dtk6core, dtk6gui, dtk6log, dtk6widget, fcitx5-qt, gammaray, kddockwidgets, kwin, LabPlot, libqtxdg, nheko, plasma-integration, python-pyqt6, python-pyside6, qt-creator, roundcubemail, zeal, and a large number of qt6 packages), Oracle (firefox, glibc, grafana, kernel, libxslt, perl-FCGI, python3.12-cryptography, thunderbird, and zlib), SUSE (glib2, libjxl, libsoup2, nbdkit, nodejs22, perl-Crypt-OpenSSL-RSA, perl-YAML-LibYAML, python3, tomcat, and transfig), and Ubuntu (dotnet8, dotnet9 and samba).

An anonymous reader quotes a report from TorrentFreak: Fresh data released by piracy tracking outfit MUSO shows that pirate sites remain popular. In a report released today, MUSO reveals that there were 216 billion pirate site visits globally in 2024, a slight decrease compared to the 229 billion visits recorded a year earlier. TV piracy remains by far the most popular category, representing over 44.6% of all website visits. This is followed by the publishing category with 30.7%, with film, software and music all at a respectable distance. Pirate site visitors originate from all over the world, but one country stands tall above all the rest: America. The United States remains the top driver of pirate site traffic accounting for more than 12% of all traffic globally, good for 26.7 billion visits in 2024. India has been steadily climbing the ranks for years and currently sits in second place with 17.6 billion annual visits, with Russia, Indonesia, and Vietnam completing the top five. As a country with one of the largest populations worldwide, it's not a complete surprise that the U.S. tops the list. If we counted visits per internet user, Canada and Ukraine would top the list. While pirate site visits dipped by more than 5% in 2024, one category saw substantial growth. Visits to publishing-related pirate sites increased 4.3% from 63.6 to 66.4 billion. The increase is largely driven by the popularity of manga, which accounts for more than 70% of all publishing piracy. Traditional book piracy, meanwhile, is stuck at 5%. The publishing piracy boom is relatively new. Over the past five years, the category grew by more than 100% while the overall number of global pirate site visits remained relatively flat. Looking at the global demand, we see that the U.S. also leads the charge here, followed by Indonesia and Russia. Notably, Japan, the home of manga, ranks fifth in the publishing category. This stands out because Japan is not listed in the global top 15 in terms of total pirate site visits. In the other content categories, MUSO's data shows a dip in pirate site visits. The changes are relatively modest for TV (-6.8%) and software (-2.1%) but the same isn't true for the music and film categories. In 2024, there were 18% fewer visits for pirated movies compared to a year earlier. MUSO notes that this is due to a "lighter blockbuster calendar" which reduced piracy peaks. "The drop in demand is as much about what wasn't released as it is about access," the report explains. The music category saw a 19% decline in piracy visits year over year, with a more uplifting explanation for rightsholders. According to MUSO, the drop can be partly attributed to "secure app ecosystems" and the "wide adoption of licensed platforms like Spotify and Apple Music."

Read more of this story at Slashdot.

The FDA plans to use AI to "radically increase efficiency" in deciding whether to approve new drugs and devices, drawing on lessons from Operation Warp Speed to reduce review times to weeks. The plan was laid out in an article published Tuesday in JAMA. The New York Times reports: Another initiative involves a review of chemicals and other "concerning ingredients" that appear in U.S. food but not in the food of other developed nations. And officials want to speed up the final stages of making a drug or medical device approval decision to mere weeks, citing the success of Operation Warp Speed during the Covid pandemic when workers raced to curb a spiraling death count. [...] Last week, the agency introduced Elsa, an artificial intelligence large-language model similar to ChatGPT. The FDA said it could be used to prioritize which food or drug facilities to inspect, to describe side effects in drug safety summaries and to perform other basic product-review tasks. The FDA officials wrote that A.I. held the promise to "radically increase efficiency" in examining as many as 500,000 pages submitted for approval decisions. Current and former health officials said the A.I. tool was helpful but far from transformative. For one, the model limits the number of characters that can be reviewed, meaning it is unable to do some rote data analysis tasks. Its results must be checked carefully, so far saving little time. Staff members said that the model was hallucinating, or producing false information. Employees can ask the Elsa model to summarize text or act as an expert in a particular field of medicine.

Read more of this story at Slashdot.

A mathematician on Reddit calculated that if all 8.2 billion humans were blended into a uniform goo, the resulting meatball would form a sphere just under 1 kilometer wide -- small enough to fit inside Central Park. ScienceAlert reports: "If you blended all 7.88 billion people on Earth into a fine goo (density of a human = 985 kg/m3, average human body mass = 62 kg), you would end up with a sphere of human goo just under 1 km wide," Reddit contributor kiki2703 wrote in a post ... Reasoning the density of a minced human to be 985 kilograms per cubic meter (62 pounds per cubic foot) is a fair estimate, given past efforts have judged our jiggling sack of grade-A giblets to average out in the ballpark of 1 gram per cubic centimeter, or roughly the same as water. And in mid-2021, the global population was just around 7.9 billion, give or take.

Read more of this story at Slashdot.

An anonymous reader quotes a report from Reuters: Indirect carbon emissions from the operations of four of the leading AI-focused tech companies rose on average by 150% from 2020-2023, due to the demands of power-hungry data centers, a United Nations report (PDF) said on Thursday. The use of artificial intelligence by Amazon, Microsoft, Alphabet and Meta drove up their global indirect emissions because of the vast amounts of energy required to power data centers, the report by the International Telecommunication Union (ITU), the U.N. agency for digital technologies, said. Indirect emissions include those generated by purchased electricity, steam, heating and cooling consumed by a company. Amazon's operational carbon emissions grew the most at 182% in 2023 compared to three years before, followed by Microsoft at 155%, Meta at 145% and Alphabet at 138%, according to the report. The ITU tracked the greenhouse gas emissions of 200 leading digital companies between 2020 and 2023. [...] As investment in AI increases, carbon emissions from the top-emitting AI systems are predicted to reach up to 102.6 million tons of carbon dioxide equivalent per year, the report stated. The data centres that are needed for AI development could also put pressure on existing energy infrastructure. "The rapid growth of artificial intelligence is driving a sharp rise in global electricity demand, with electricity use by data centers increasing four times faster than the overall rise in electricity consumption," the report found. It also highlighted that although a growing number of digital companies had set emissions targets, those ambitions had not yet fully translated into actual reductions of emissions. UPDATE: The headline has been revised to clarify that four leading AI-focused tech companies saw their operational emissions rise to 150% of their 2020 levels by 2023 -- a 50% increase, not a 150% one.

Read more of this story at Slashdot.

An anonymous reader quotes a report from Reuters: Indirect carbon emissions from the operations of four of the leading AI-focused tech companies rose on average by 150% from 2020-2023, due to the demands of power-hungry data centers, a United Nations report (PDF) said on Thursday. The use of artificial intelligence by Amazon, Microsoft, Alphabet and Meta drove up their global indirect emissions because of the vast amounts of energy required to power data centers, the report by the International Telecommunication Union (ITU), the U.N. agency for digital technologies, said. Indirect emissions include those generated by purchased electricity, steam, heating and cooling consumed by a company. Amazon's operational carbon emissions grew the most at 182% in 2023 compared to three years before, followed by Microsoft at 155%, Meta at 145% and Alphabet at 138%, according to the report. The ITU tracked the greenhouse gas emissions of 200 leading digital companies between 2020 and 2023. [...] As investment in AI increases, carbon emissions from the top-emitting AI systems are predicted to reach up to 102.6 million tons of carbon dioxide equivalent per year, the report stated. The data centres that are needed for AI development could also put pressure on existing energy infrastructure. "The rapid growth of artificial intelligence is driving a sharp rise in global electricity demand, with electricity use by data centers increasing four times faster than the overall rise in electricity consumption," the report found. It also highlighted that although a growing number of digital companies had set emissions targets, those ambitions had not yet fully translated into actual reductions of emissions.

Read more of this story at Slashdot.

Michael Larabel of Phoronix highlights the key updates in today's stable release of FreeBSD 14.3: FreeBSD 14.3 has back-ported a number of improvements from FreeBSD 15 back to the FreeBSD 14 series. Plus a number of routine package updates and other fixes. Some of the FreeBSD 14.3-RELEASE highlights include: - Updating the ZFS support against OpenZFS 2.2.7. - Merging of the Realtek RTW88 and RTW89 WiFi drivers based on the Linux 6.14 kernel code. - The LinuxKPI code has been improved to support crypto offload as well as the 802.11n and 802.11ac standards. - The Intel IX Ethernet driver has added support for the x550 1000BAS-BX SFP modules. - Thor2 PCI IDs added to the Broadcom NetXtreme "BNXT" driver along with support for 400G speed modules. - XZ 5.8.1, OpenSSH 9.9p2, OpenSSL 3.0.16, and many other package updates. - Syscons as the legacy system console driver is now considered deprecated. Syscons is not compatible with UEFI, lacks UTF-8 support, and is Giant-locked. You can download and learn more about FreeBSD 14.3 via FreeBSD.org.

Read more of this story at Slashdot.

"Twelve years ago, a baby was born after someone used bitcoin to pay for a frozen egg IVF," writes longtime Slashdot reader bobdevine. "I, for one, welcome..." Blockworks tells the story of how it all came to be: In February 2012 -- almost two years after Laszlo's pizzas -- a fertility doctor named C. Terence Lee set about a personal and professional quest to onboard his patients to Bitcoin by accepting BTC for his services. He started with a "Bitcoin accepted here" sign in his window, and then a Reddit post. "Jumping in to do my part to support the BTC economy. This may be a historic first?" Lee wrote in a post on the BitMarket subreddit, titled: "[WTS][USA] Male Fertility Evaluation." Lee was offering a 15-minute consultation to discuss fertility questions and a sperm analysis in exchange for 15 BTC, valued at $70 or so at the time. "Actual value over $100," he wrote. Within three months, he'd found a Bitcoin customer. "The patient turned out not... so much having a burning desire to know about his fertility, but he was a Bitcoin enthusiast, and he liked the idea of participating in history, in this ritual ceremony of what could be perhaps the world's first Bitcoin medical transaction," Lee explained at a 2013 conference in San Jose. "So we chatted about Bitcoin. He taught me a lot about mining. That's how he acquired bitcoin. And we did a sperm test, and it turned out he had really good sperm ... after it was done he sent me 15 bitcoins... " Lee changed up his strategy to only quiz his most trusted patients. There was one couple, who, on their fourth attempt at IVF, agreed to pay in bitcoin for a 50% discount, with Lee walking them through exchanging U.S. dollars for bitcoin via CryptoXChange, a now-defunct exchange operating out of Australia. The sperm stuck, leading CNN to reveal, on this day in 2013, "the world's first Bitcoin baby" -- a baby bought entirely with bitcoin. Thirty bitcoin to be exact, an amount then worth $500, or $3 million today.

Read more of this story at Slashdot.

"It is true, Google AI is stomping on the entire internet," writes Slashdot reader TheWho79, sharing a report from the Wall Street Journal. "From HuffPost to the Atlantic, publishers prepare to pivot or shut the doors. ... Even highly regarded old school bullet-proof publications like Washington Post are getting hit hard." From the report: Traffic from organic search to HuffPost's desktop and mobile websites fell by just over half in the past three years, and by nearly that much at the Washington Post, according to digital market data firm Similarweb. Business Insider cut about 21% of its staff last month, a move CEO Barbara Peng said was aimed at helping the publication "endure extreme traffic drops outside of our control." Organic search traffic to its websites declined by 55% between April 2022 and April 2025, according to data from Similarweb. At a companywide meeting earlier this year, Nicholas Thompson, chief executive of the Atlantic, said the publication should assume traffic from Google would drop toward zero and the company needed to evolve its business model. [...] "Google is shifting from being a search engine to an answer engine," Thompson said in an interview with The Wall Street Journal. "We have to develop new strategies." The rapid development of click-free answers in search "is a serious threat to journalism that should not be underestimated," said William Lewis, the Washington Post's publisher and chief executive. Lewis is former CEO of the Journal's publisher, Dow Jones. The Washington Post is "moving with urgency" to connect with previously overlooked audiences and pursue new revenue sources and prepare for a "post-search era," he said. At the New York Times, the share of traffic coming from organic search to the paper's desktop and mobile websites slid to 36.5% in April 2025 from almost 44% three years earlier, according to Similarweb. The Wall Street Journal's traffic from organic search was up in April compared with three years prior, Similarweb data show, though as a share of overall traffic it declined to 24% from 29%. Further reading: Google's AI Mode Is 'the Definition of Theft,' Publishers Say

Read more of this story at Slashdot.

An anonymous reader quotes a report from Axios: President Trump quietly took a red pen to much of the Biden administration's cyber legacy in a little-noticed move late Friday. Under an executive order signed just before the weekend, Trump is tossing out some of the major touchstones of Biden's cyber policy legacy -- while keeping a few others. The order preserves efforts around post-quantum cryptography, advanced encryption standards, and border gateway protocol security, along with the Cyber Trust Mark program -- an Energy Star-type labeling initiative for consumer smart devices. But hallmark programs tied to software bills of materials, zero-trust implementation, and space contractor cybersecurity requirements have been either rescinded or left in limbo. The new executive order amends both the Biden cyber executive order signed in January and an Obama administration order. Each of the following Biden-era programs is now out the door or significantly rolled back: - A broad requirement for federal software vendors to provide a software bill of materials - essentially an ingredient list of code components - is gone. - Biden-era efforts to encourage federal agencies to accept digital identity documents and help states develop mobile driver's licenses were revoked. - Several AI cybersecurity research mandates, including those focused on AI-generated code security and AI-driven patch management pilots, have been scrapped or deprioritized. - The requirement that software contractors formally attest they followed secure development practices - and submit those attestations to a federal repository - has been cut. Instead, the National Institute of Standards and Technology will now coordinate a new industry consortium to review software security guidelines.

Read more of this story at Slashdot.

Connor Jones reports via The Register: Security researchers managed to access the live feeds of 40,000 internet-connected cameras worldwide and they may have only scratched the surface of what's possible. Supporting the bulletin issued by the Department of Homeland Security (DHS) earlier this year, which warned of exposed cameras potentially being used in Chinese espionage campaigns, the team at Bitsight was able to tap into feeds of sensitive locations. The US was the most affected region, with around 14,000 of the total feeds streaming from the country, allowing access to the inside of datacenters, healthcare facilities, factories, and more. Bitsight said these feeds could potentially be used for espionage, mapping blind spots, and gleaning trade secrets, among other things. Aside from the potential national security implications, cameras were also accessed in hotels, gyms, construction sites, retail premises, and residential areas, which the researchers said could prove useful for petty criminals. Monitoring the typical patterns of activity in retail stores, for example, could inform robberies, while monitoring residences could be used for similar purposes, especially considering the privacy implications. "It should be obvious to everyone that leaving a camera exposed on the internet is a bad idea, and yet thousands of them are still accessible," said Bitsight in a report. "Some don't even require sophisticated hacking techniques or special tools to access their live footage in unintended ways. In many cases, all it takes is opening a web browser and navigating to the exposed camera's interface." HTTP-based cameras accounted for 78.5 percent of the total 40,000 sample, while RTSP feeds were comparatively less open, accounting for only 21.5 percent. To protect yourself or your company, Bitsight says you should secure your surveillance cameras by changing default passwords, disabling unnecessary remote access, updating firmware, and restricting access with VPNs or firewalls. Regularly monitoring for unusual activity also helps to prevent your footage from being exposed online.

Read more of this story at Slashdot.

Starbucks is piloting a generative AI assistant called "Green Dot Assist" to streamline barista tasks and improve service speed, with plans for a broader rollout in fiscal 2026. The assistant is built on Microsoft Azure's OpenAI platform. CNBC reports: Instead of flipping through manuals or accessing Starbucks' intranet, baristas will be able to use a tablet behind the counter equipped with Green Dot Assist to get answers to a range of questions, from how to make an iced shaken espresso to troubleshooting equipment errors. Baristas can either type or verbally ask their queries in conversational language. As the AI assistant evolves, Starbucks has even bigger plans for its next generation. Those ideas include automatically creating a ticket with IT for equipment issues or generating suggestions for a substitute when a barista calls out of work, according to [Starbucks Chief Technology Officer Deb Hall Lefevre]. [...] Lefevre said tenured baristas have been learning to use the new POS in as little as an hour. Plus, the technology can offer personalized recommendations and loyal customers' repeat orders, helping Starbucks achieve the personalized touch it's looking to bring back to its cafes. "It's just another example of how innovation technology is coming into service of our partners and making sure that we're doing all we can to simplify the operations, make their jobs just a little bit easier, maybe a little bit more fun, so that they can do what they do best," Lefevre told CNBC.

Read more of this story at Slashdot.

An anonymous reader shares a blog post from Google: Today, we're bringing you Android 16, rolling out first to supported Pixel devices with more phone brands to come later this year. This is the earliest Android has launched a major release in the last few years, which ensures you get the latest updates as soon as possible on your devices. Android 16 lays the foundation for our new Material 3 Expressive design, with features that make Android more accessible and easy to use.

Read more of this story at Slashdot.

Bluesky's user engagement has fallen roughly 50% since peaking in mid-November, according to a recent Pew Research Center analysis, as progressive groups' efforts to migrate users from Elon Musk's X platform show signs of failure. The research found that while many news influencers maintain Bluesky accounts, two-thirds post irregularly compared to more than 80% who still post daily to X. A Washington Post columnist tries to make sense of it: The people who have migrated to Bluesky tend to be those who feel the most visceral disgust for Musk and Trump, plus a smattering of those who are merely curious and another smattering who are tired of the AI slop and unregenerate racism that increasingly pollutes their X feeds. Because the Musk and Trump haters are the largest and most passionate group, the result is something of an echo chamber where it's hard to get positive engagement unless you're saying things progressives want to hear -- and where the negative engagement on things they don't want to hear can be intense. That's true even for content that isn't obviously political: Ethan Mollick, a professor at the University of Pennsylvania's Wharton School who studies AI, recently announced that he'll be limiting his Bluesky posting because AI discussions on the platform are too "fraught." All this is pretty off-putting for folks who aren't already rather progressive, and that creates a threefold problem for the ones who dream of getting the old band back together. Most obviously, it makes it hard for the platform to build a large enough userbase for the company to become financially self-sustaining, or for liberals to amass the influence they wielded on old Twitter. There, they accumulated power by shaping the contours of a conversation that included a lot of non-progressives. On Bluesky, they're mostly talking among themselves.

Read more of this story at Slashdot.

The World Bank sharply reduced its global economic growth forecast for 2025 to 2.3% from 2.7%, warning that the current decade is on track to become the weakest for the global economy since the 1960s. The Washington-based lender attributed the downgrade to mounting costs from "international discord -- about trade, in particular," as Donald Trump's tariff policies create unprecedented uncertainty. The revised forecast would mark the slowest growth rate outside full-blown recessions since 2008. Even with a modest recovery to 2.4% expected in 2026, the bank characterized the outlook as merely "tepid." Chief economist Indermit Gill said "outside of Asia, the developing world is becoming a development-free zone." Growth in developing economies has steadily declined from 6% annually in the 2000s to 5% in the 2010s, now falling below 4% in the 2020s. The bank said that "many of the forces behind the great economic miracle of the last 50 years" have reversed, with more than half of low-income countries either in debt distress or at high risk.

Read more of this story at Slashdot.

AI is speeding up the work of America's intelligence services, Director of National Intelligence Tulsi Gabbard said Tuesday. From a report: Speaking to a technology conference, Gabbard said AI programs, when used responsibly, can save money and free up intelligence officers to focus on gathering and analyzing information. The sometimes slow pace of intelligence work frustrated her as a member of Congress, Gabbard said, and continues to be a challenge. AI can run human resource programs, for instance, or scan sensitive documents ahead of potential declassification, Gabbard said. Her office has released tens of thousands of pages of material related to the assassinations of President John F. Kennedy and his brother, New York Sen. Robert F. Kennedy, on the orders of President Donald Trump. Experts had predicted the process could take many months or even years, but AI accelerated the work by scanning the documents to see if they contained any material that should remain classified, Gabbard said during her remarks at the Amazon Web Services Summit in Washington. "We have been able to do that through the use of AI tools far more quickly than what was done previously -- which was to have humans go through and look at every single one of these pages," Gabbard said.

Read more of this story at Slashdot.

Jean Baptiste Lallement, a member of Canonical's desktop team, has announced that Ubuntu will drop support for GNOME on X11 in the 25.10 ("Questing Quokka") release set for October. GNOME plans to remove X11 support in GNOME 49, which is scheduled for September, so Ubuntu is looking to be proactive:

Ubuntu 25.10 is the last interim release before our next LTS (Ubuntu 26.04). By moving now, we give developers and users a full cycle to adapt before the next LTS, align with GNOME 49 and reduce fragmentation while simplifying our support matrix heading into the LTS.

Fedora decided in early May to drop X11 support for GNOME in Fedora 43, which is also due in October.

A NASA-backed project using observations from the James Webb Space Telescope (JWST) has released more than 1.5 TB of data for open science, offering the largest view deep into the universe available to date. From a report: The Cosmic Evolution Survey (COSMOS), a joint project from the University of California, Santa Barbara and Rochester Institute of Technology, has launched a searchable dataset for budding astrophysics enthusiasts worldwide. As well as a catalog of galaxies, the dataset includes an interactive viewer that users can search for images of specific objects or click them to view their properties, covering approximately 0.54 square degrees of sky with the Near Infrared Camera (NIRCam) and a 0.2 square degree area with the Mid Infrared Instrument (MIRI). Although the raw data was already publicly available to the science community, the aim of the COSMOS-Web project was to make it more usable for other scientists.

Read more of this story at Slashdot.