Alterslash

the unofficial Slashdot digest
 

Contents

  1. KDE Plasma 6.8 Released, Marks 30 Years of the KDE Project
  2. Hackers Hijack D-Link, Ubiquiti Devices To Resell Your Stolen Bandwidth
  3. World’s Timekeepers Vote to Eliminate the Leap Second
  4. Tesla Reveals SpaceX-Powered ‘Flying’ Roadster
  5. Police Seize Robot that Sexually Assaulted Teen Girl
  6. Ubuntu 26.10 Released
  7. IMF Warns of the Real AI Threat: Debt
  8. Flock CEO Defends Surveillance Tech Amid National Backlash
  9. First-Ever Public Confirmation of ‘Zero-Click’ Spyware Delivered Via Targeted Ads
  10. Meta and Apple Bring Muse Spark Open AI Model to Mac Studio
  11. Microsoft Says Windows 11 Is Now ‘More Responsive’, Runs Better On 8GB of RAM
  12. Amazon Launches New Bee ‘Personal AI’ Devices That Listen to Conversations
  13. Uber Begins Self-Driving Robotaxi Trial In Manchester
  14. Bank of America Hired 1,000 Contractors to Patch Software Flaws Exposed By Anthropic’s Mythos
  15. Mini Organs Launching to Space For Study On Aging

Alterslash picks up to the best 5 comments from each of the day’s Slashdot stories, and presents them on a single page for easy reading.

KDE Plasma 6.8 Released, Marks 30 Years of the KDE Project

Posted by BeauHD • • View on SlashDot • Skip
An anonymous reader quotes a report from Phoronix:
The feature-packed and polished Plasma 6.8 KDE desktop is now available. Making this release all the more special is that it coincides with the 30th anniversary of the KDE project. KDE Plasma 6.8 ships many exciting improvements including vRAM usage optimizations, dwell clicker support on Wayland, Wayland commit-timing protocol support for KWin, improvements for the Union theme engine, better remote desktop support, multi-GPU handling improvements, the new kscreenctl tool, server-side drop shadow support, multi-monitor improvements, and a lot of other polishing throughout. Especially from the Wayland angle there has been a lot of polishing and fine tuning for Plasma 6.8.
Accompanying the release is a new film, The KDE Documentary, which “tells the story of the pioneering open source community that gave computer users a free and open alternative to proprietary desktops like Windows.” The documentary is available to stream for free on YouTube.

Hackers Hijack D-Link, Ubiquiti Devices To Resell Your Stolen Bandwidth

Posted by BeauHD • • View on SlashDot • Skip
An anonymous reader quotes a report from BleepingComputer:
A proxyjacking campaign has impacted devices in 34 countries, monetizing victims’ internet connections through a commercial residential proxy network. The operator installed Pawns.app, a legitimate bandwidth-sharing application that lets users earn money by sharing their internet connections, on devices without the owners’ consent.

Pawns.app account holders are rewarded for allowing traffic from other users to flow through their network, provided it runs on trusted, non-blocking IP addresses. By installing the app on multiple systems, the attacker likely accumulated larger payouts. Threat intelligence company GreyNoise discovered the campaign while investigating suspicious activity at an unnamed organization, and identified at least 143 compromised devices worldwide.
According to researchers, the attacker exploited known vulnerabilities in D-Link ShareCenter NAS (CVE-2024-3272 and CVE-2024-3273), Ubiquiti UniFi Video NVR (CVE-2021-44228), and SAP NetWeaver Visual Composer (CVE-2025-31324) to install the Pawns.app software.
Hikvision and Dahua DVR/NVR devices were also targeted, though the specific vulnerabilities exploited were not identified. In some cases, the report says the attackers configured SSH key authentication to maintain backup access to the compromised systems.

wat

By drinkypoo • • Score: 3 • Thread

The operator installed Pawns.app, a legitimate bandwidth-sharing application that lets users earn money by sharing their internet connections

That sentence no worky

Re:wat

By drinkypoo • • Score: 4, Informative • Thread

It’s for a fundamentally illegitimate act, because virtually no ISP allows you to resell part of your connection to others. The only potentially non-infringing use of such a tool is to permit you to use your own connection remotely. Even wilder, have you been to Pawns.app? It’s all about surveys and shit, it says nothing about a connection sharing proxy on the front page, they’re tricking people into installing their proxy! Once they install the app, which said nothing about that, it asks them if they want to make some money by sharing their connection. Surely it doesn’t mention that this is theft of services…

Re:Doesn’t apply to me

By PPH • • Score: 4, Funny • Thread

Doesn’t apply to me either. I have Xfinity and nobody would want to share that.

World’s Timekeepers Vote to Eliminate the Leap Second

Posted by BeauHD • • View on SlashDot • Skip
Timekeepers have officially voted to eliminate the leap second, allowing Coordinated Universal Time to drift as much as one hour from Earth’s rotation before a correction is needed. The change ends decades of occasionally adding or subtracting seconds and replaces it with a hypothetical “leap hour” that likely wouldn’t be necessary for hundreds or even thousands of years. Smithsonian Magazine reports:
“It’s kind of a philosophical discussion, because if a leap hour happens, it won’t be for a very, very long time,” Christian Bizouard, director of the IERS Earth Orientation Center in France, tells the Guardian’s Ian Sample. “What we are doing is pushing back the decision.”

The move caps off 30 years of debate, as the leap second has been highly controversial in the world of timekeeping. Leap seconds aren’t nearly as smooth of a fix as leap years are, and they can cause computer and website issues. Reddit famously crashed when a leap second was added on June 30, 2012. It’s “always been a problem,” Judah Levine, a former researcher at the NIST’s Time and Frequency Division, tells Scientific American’s Emma Gometz.

Instead of adding the entire second all at once, companies such as Google and Meta add the extra time in smaller segments in a tactic called “smearing,” according to the Conversation. It’s not a simple task, however, and companies that employ smearing have long lobbied to get rid of the leap second. What’s more, with Earth’s recent spin acceleration, timekeepers around the world were facing the possibility of the world’s first negative leap second, in which a second would be subtracted from UTC. This sparked fears, akin to those surrounding Y2K, that our modern technologies wouldn’t be able to handle such a change.

“It’s never happened before, and therefore the software for that has never been tested,” Darryl Veitch, a researcher who leads the Timing Lab at the University of Technology Sydney, tells the Australian Broadcasting Corporation’s Ellen Phiddian. But others argued that it wouldn’t be much of a problem. The vote means that in the future, UTC will be allowed to diverge from astronomical time more than ever before.

Do you have the time if I have the energy?

By BladeMelbourne • • Score: 5, Funny • Thread

/sigh

I don’t have time for this.

We are all doomed, I tell you

By CaptainOfSpray • • Score: 3 • Thread
When any organization stops doing maintenance, that’s when they start forgetting HOW to do maintenance. “They” will delay the next leap-hour, for fear of disruption, and then everyone who has actual experience of doing it will have retired or died, and no apprentices will have been trained, and not all the necessary knowledge will have been written down.

That’s how greatness rots and empires fall.

Nobody mention TAI

By hazee • • Score: 4, Informative • Thread
There was already a perfectly good “uncorrected” standard: TAI.
Now we have two standards that measure the same thing, only with an offset between them.

good thing I guess

By Frederic54 • • Score: 3 • Thread
When I worked for a broadcasting software company that had customers worldwide, everything was using TC (timecode), PTP, and of course we needed to support leap year, different timezone etc when a broadcast was scheduled between different zone around the world (it can be complicated) ; and we needed to support leap second by contract! Easiest thing was to add a 1s black frame after the schedule after reaching midnight. Supporting negative leap second would have been complicated… Good thing we drop it I think.

Tesla Reveals SpaceX-Powered ‘Flying’ Roadster

Posted by BeauHD • • View on SlashDot • Skip
Tesla has unveiled a dramatically redesigned Roadster concept capable of performing midair flips, controlled landings, and a claimed 0-60 mph sprint in just 0.81 seconds. CarScoops reports:
Tonight, Tesla debuted the new Roadster by driving it up a vertical ramp that then went horizontal. Then, it repeated the feat but drove off of the ramp and used thrusters to flip itself over and make a controlled landing on the ground. After that, it did a barrel roll over the rest of the Tesla lineup and again landed without issue on the ground. Then, it did 0-60 mph in 0.81 seconds according to Tesla. All of that sounds amazing, and indeed, watching it happen was pretty spectacular, but boy do we have a lot to unpack.

It’s been nearly a decade since Tesla first showed us the Roadster. The company unveiled what it’s simply calling the Roadster. Not Roadster 2.0, not CyberRoadster, just Roadster, as if it’s a direct successor to the original Tesla. In terms of design, it’s quite a bit different from the car we saw in 2017. Rather than be a somewhat curvaceous sports car, it’s considerably more angular. If a Cybertruck and a Lamborghini Reventon had a runt of a baby, this would be that car. Still, at this stage, we’re still just touching on what we saw and what it looks like.
Let’s get into the details. Developed in collaboration with SpaceX, the Roadster uses 10 cold-gas thrusters powered by two 600-liter compressed-air tanks to accelerate and maneuver in mid-air. Underbody suction fans reportedly generate up to 2Gs of downforce even while stationary, while an active rear spoiler adjusts aerodynamics in real time.
Other features include steer-by-wire, brake-by-wire, and throttle-by-wire technology. Tesla plans three variants: Performance, which requires a $50,000 deposit; Thrust, a $250,000 model capable of sub-one-second acceleration; and Rocket, an invite-only, single-seat version capable of flying.

Production isn’t expected until 2028, and Tesla has yet to disclose key specifications, including range, horsepower, battery capacity, and motor configuration.

A recording of the event can be viewed on X.

Re:WTF is OP talking about?

By 93 Escort Wagon • • Score: 5, Insightful • Thread

It is real, I just watch the launch event video, it is incredible.

So was that Optimus robot demo from several years ago.

Something Something Metaphor

By Bobknobber • • Score: 5, Insightful • Thread

Honestly this stunt really sums up Tesla today. Spending time and money on investor bait while the core business is flailing around confused and headless especially in light of the disappointing sales of the CT, which no doubt ate up a ton of money and RnD for the company.

But hey, jumping cars amirite.

what is this world coming to?

By awwshit • • Score: 5, Funny • Thread

You can’t even drive your family off a cliff anymore.

Re:Until that very small insignificant looking bum

By saloomy • • Score: 5, Interesting • Thread
I put a deposit on the Roadster 2 a long while back, no word on queue or timeline, no communication at all. But If they let me buy this I will be really fucking happy. My daily is a Model X Plaid and that thing is an absolute joy. I’m so glad they are still making toys. I really thought they might be all semi trucks and model 3s going forward.

Re:Fucking Awesome

By Jeremi • • Score: 5, Insightful • Thread

As methods for by suicide-by-wealth go, it’s classier than drugs, and more accessible than a carbon-fiber submarine. I predict we’ll see some pretty spectacular Youtube videos of people making themselves (and their car) two-dimensional.

Police Seize Robot that Sexually Assaulted Teen Girl

Posted by BeauHD • • View on SlashDot • Skip
Slashdot reader alternative_right shares a story that has drawn international attention for being potentially the first documented instance of a robot being used directly in a sexual assault. According to the Associated Press, German police have opened a sexual harassment investigation after a robot allegedly touched a 16-year-old girl’s buttocks and made thrusting motions while two young men reportedly filmed and streamed the incident. Investigators seized the robot and the suspects’ phones and are trying to determine whether the movements were preprogrammed or controlled in real time. From the report:
Cologne police spokesman Christoph Bermel said the two male teenagers have not been charged but are considered suspects, and investigators were examining whether the robot’s movements were preprogrammed or controlled in real time.

Police were unfamiliar with this type of incident, he said. “We have not been aware of this phenomenon so far,” Bermel told The Associated Press, saying it was “new territory for us.” […] The robot, said to be 120 centimeters (about 3 ft 11 inches) tall, was dressed in a white tank top, black sweatpants and wearing a gold chain and sunglasses. It also had what appears to be a fake mustache. Videos circulated on the internet show two young men escorting the robot toward a group of women, bumping into one and hugging others, on a lively nighttime street.

Probably part of its programming

By Krishnoid • • Score: 3 • Thread

Police were unfamiliar with this type of incident, he said. “We have not been aware of this phenomenon so far,” Bermel told The Associated Press, saying it was “new territory for us.”

They just haven’t been paying attention.

A script isn’t an alibi

By CustomBuild • • Score: 5, Insightful • Thread

If somebody deliberately programmed a robot to do this, pressing “run” beforehand shouldn’t be an escape hatch compared with operating it live. The timing of the command matters for reconstructing events, but either way I’d want to know who chose the behavior and who directed the machine toward people. AP says those questions are still under investigation, so there’s plenty we don’t know yet. “The robot did it” certainly shouldn’t end the inquiry. The alleged filming and streaming bothers me too. The girl could have to deal with copies of that footage long after the police finish examining the hardware. I hope that doesn’t get buried under a thousand jokes about the robot’s sunglasses and mustache.

“It also had what appears to be a fake mustache.”

By TWX • • Score: 3 • Thread

Wouldn’t any robot’s mustache be a fake mustache unless it was literally shaved off of someone else and somehow affixed intact to said robot?

Robot my shiny metal ass

By RightwingNutjob • • Score: 4, Insightful • Thread

Let’s s/robot/broomstick/ into this story and see what we get, paraphrasing:

Police seized a broomstick [as physical evidence] and suspect’s phones after the suspects filmed themselves touching a woman’s ass with the broomstick and making thrusting motions.

Hmmm…seems like a slam dunk case of indecent assault in most American jurisdictions. Whether it was wooden broomstick, a WonderMop, or an ai-internet-connected-ninja-robot-vacuum-whatever.

No sensationalism required.

Ubuntu 26.10 Released

Posted by BeauHD • • View on SlashDot • Skip
prisoninmate shares a report from 9to5Linux:
Ubuntu 26.10 (Stonking Stingray) has been released today, and it is now available for download for those eager to update their Ubuntu systems to a newer release. Powered by the upcoming Linux 7.3 kernel series, Ubuntu 26.10 ships with the latest GNOME 51 desktop environment, TPM-backed full disk encryption (FDE) support on computers without a hardware root of trust, updated Settings to show whether a computer is certified for Ubuntu, and 100% Rust coreutils.

There are several App Center enhancements in Ubuntu 26.10, such as a unified app-details view for Snap and Debian packages, a dedicated Drivers page where you can review the available graphics drivers, including NVIDIA driver branches, and support for installing codecs for one-time playback when a media file uses a codec that’s not installed.’
Other additions include an optional, locally processed AI-powered speech-to-text tool called Myna, system-wide controls for disabling Ubuntu Insights data collection, and better integration with Microsoft Entra ID. Also worth mentioning are the security and software updates that will be available for nine months, through July 2027.

Wow

By drinkypoo • • Score: 5, Insightful • Thread

“Powered by the upcoming Linux 7.3 kernel series, Ubuntu 26.10 ships with the latest GNOME 51 desktop environment, TPM-backed full disk encryption (FDE) support on computers without a hardware root of trust, updated Settings to show whether a computer is certified for Ubuntu, and 100% Rust coreutils.”

That’s an impressive list of anti-features. I’ll be sure to avoid it right away.

Broke the shortcut I use the most.

By niftydude • • Score: 5, Interesting • Thread
Amazing. Ubuntu (or Gnome) have broken the shortcut I use the most in Stonking Stingray.

Even since Gnome Shell was released, I’ve always used the Super key to show the app overview, however not only has that been disabled in this release, but I also can no longer set the Super key to do anything on it’s own in the new keyboard shortcut settings.

Fan-bloody-tastic.

Setting it to Super-Q worked briefly - until the screen lock came on, and then that didn’t work either.

I think I need a list of projects that aren’t vibe-coded.

Super

By Grady Martin • • Score: 4, Informative • Thread
If you run X, you can restore this functionality with ksuperkey.

Re:1 … 2 … 3 …

By SeaFox • • Score: 4, Insightful • Thread

Protip: Countdowns usually go the other direction.

Maybe parent post was written by AI…

Re:Super

By niftydude • • Score: 4, Informative • Thread
I’ve been thinking it might be time to return back to X from Wayland.

IMF Warns of the Real AI Threat: Debt

Posted by BeauHD • • View on SlashDot • Skip
“Along with the dangers of continuing cyberattacks, the International Monetary Fund (IMF) reports that the threat of an AI market crash is putting the global markets at risk,” writes Slashdot reader databasecowgirl, citing the IMF’s latest semiannual Global Financial Stability Report. Here’s a summary:
Three salient risks could trigger a sharp tightening of financial conditions and market turmoil. Weaker or less durable investment and profitability in artificial intelligence could lead to a correction in AI-related asset prices, amplified by rising leverage and concentrated exposures. Resurgent inflation or fiscal concerns could drive a sharp rise in sovereign bond yields, with potentially broad repercussions across financial markets. Meanwhile, increasingly sophisticated cyber threats pose growing risks as finance becomes more digital and interconnected.

Underlying financial vulnerabilities could amplify these risks and turn market stress into systemic events. Although the global banking system remains broadly resilient, pockets of weaker banks persist. Liquidity mismatches among insurers and pension funds have increased, while rising leverage and contingent liquidity risks in private credit could amplify stress.

While hedge funds support market functioning in calm times, their use of leverage and exposure to crowded trades could exacerbate market stress too and create spillovers to prime brokers. Some emerging markets have seen policy buffers erode, and frontier economies have increasingly relied on less transparent forms of financing.

Finally, although markets for tokenized assets remain small and could offer efficiency gains in several areas, they can create new channels for the buildup of leverage and mismatches in liquidity and maturity, in addition to elevating risks related to technology and infrastructure. These vulnerabilities underscore the need for policies that strengthen resilience, enhance transparency, contain excessive leverage, and improve preparedness for future shocks.
The full report can be found here (PDF).

Did AI write that buzzword bingo summary?

By Somervillain • • Score: 5, Insightful • Thread
That is horrible, poorly written summary. I love learning about economics and even know exactly what they are saying and mean, but it’s just SHITTY writing. It’s like it was written by a 19yo college student looking to use as many fancy words she just learned her ECON 201 class in sentences. It’s closer to cryptography than journalism. You know impressive words…good for you…can you make your writing less obtuse and painful to read?

The shat is everywhere

By aaarrrgggh • • Score: 5, Funny • Thread

Most Index funds likely have >10% exposure to AI, and there are all kinds of secondary risks, today. When Anthropic and OpenAI go public the risk likely doubles. It is incredibly hard to protect yourself.

[click here to subscribe to my newsletter]

Re:Soooooo…

By Black Parrot • • Score: 5, Funny • Thread

Schadenfreude is priceless; no finite amount of money can match it.

Re:Panic behind closed doors

By Local ID10T • • Score: 5, Insightful • Thread

The economy is not the stock market.

The stock market is up. Big business is making innovations and selling them to each other.

The economy is hurting. Prices are up, and sales are down. People cannot afford the things they need.

making debt great again

By znrt • • Score: 4, Interesting • Thread

“weaker or less durable investment and profitability in artificial intelligence”. That’s like if your take on medicine was “medical research is a catastrophic thing to get involved with, instead of curing all cancers we might only cure certain varieties, do you want a future in which you die from those cancers?”

well, you need two things:

first, tech companies need a breakthrough that makes them profitable. that’s not impossible, and there is hope, but there is no real sign that that’s even on the horizon. meanwhile they’re burning cash and generating even more debt, chasing that breakthrough.

next, that breakthrough needs to empower business and people to be productive and profitable. growth isn’t a few ai companies getting filthy rich, nor stock profits, it’s the whole economy innovating and getting a productivity boost. the internet did that, and it took a while and a few crashes. however, debt kept growing, and multiplied.

so while growth is necessary, the fundamental problem and the solution isn’t really growth, it’s fiscal and economic policy, and governance. even if they find that holy ai-grail, without changes in policy and governance that limit or repurpose spending to facilitate growth debt will continue rising and getting more expensive. so far changes in policy have actually gone in the opposite direction.

that debt will never be repaid, ai or not. without a considerable change in policy at some point the choice will be a) default now or b) print more money and default tomorrow. actually, a) would hurt but would also be the best option for the vast majority of people. b) only makes things worse.

there’s also option c) plunge the world into chaos. can’t claim a debt if you’re dead, right? some might think they’re already at it.

Flock CEO Defends Surveillance Tech Amid National Backlash

Posted by BeauHD • • View on SlashDot • Skip
An anonymous reader quotes a report from TechCrunch:
Flock’s founder and CEO Garrett Langley doesn’t think the risks of introducing surveillance technology at scale outweigh the rewards. “If we want to live in a society where, if you commit a crime, you have a higher probability of being held accountable, we shouldn’t pause progress,” Langley said, speaking onstage during a panel at TechCrunch Disrupt 2026 in San Francisco on Wednesday.

During the interview, the controversial founder of the surveillance maker of license plate cameras and other recording devices deflected hard questions about the criticism Flock now faces — which has since led to canceled contracts and even layoffs. Instead, Langley tended to respond to questions with anecdotes from conversations with police chiefs and city leaders across the United States, and tales of the supposed numerous crimes Flock has solved, rather than offer tangible solutions to people’s concerns.

In doing so, Langley positioned Flock as an advance in technology that was somewhat inevitable. He stressed that if people wanted to live in a better society — that is, one with reduced crime — they would have to offer up their privacy in return. […] “Technology, at its core, in its definition, is just doing things better. It’s not doing things perfect,” he said. “Driverless cars, I think, is a fair analogy. Driverless cars, I think, are definitively safer than human drivers. And when there’s one accident, I don’t think the answer is to shut down driverless cars. The answer is to say, ‘Hey, let’s talk about how we prevent more accidents in the future.’"

[…] From Langley’s answers, it’s clear that the ethics around how Flock should be used is a decision he would much rather leave up to others. “We don’t want to tell city leaders how to do their job,” he noted. “We will provide recommendations, we’ll provide defaults, but we’re going to minimize the number of mandated features, functions, and policies,” he said.
Langley went on to argue that society too often judges technology “not on how it compares to the past, but how it compares to perfect.” He acknowledged that “Flock is far from perfect” but maintained that its technology helps police departments compensate for staffing shortages and improve public safety.
When pressed about potential abuse and privacy concerns, Langley offered few specifics, instead arguing that safeguards could be implemented without disrupting police operations. He insisted the benefits of what Flock offers outweigh the controversy. “There’s millions and millions of people who have a better life today because [of] Flock,” he said, adding that “it’s worth it because one day they might be a victim.”

Flock you too!

By Local ID10T • • Score: 5, Insightful • Thread

Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. -Benjamin Franklin

It is as true now as it was then.

We do not need to go to extremes to protect ourselves from rare risks. Life is pretty darned safe already. Really, it is.

Safe-guards could be implemented?

By Murdoch5 • • Score: 5, Insightful • Thread
People aren’t comparing Flock against perfect, they’re pointing out the basic design is so flawed and abused it’s a rapid deployment of digital molestation. He said it out loud, “Safe-guards could be implemented”, so fucking implement them! Does he honestly think people wanting their privacy and digital liberties respected is a call for perfect implementation? People don’t want perfect, they want functionally reasonably and adequate, which Flock is not, by design.

We keep hearing about cases where Flock was used, intentionally, to target and abuse innocent people. Where was the warrant? Where was the sign-off? How does the audit system force checks and balances to assure against misuse? Can the data be removed by the people it scanned? What happens on a false identification, or the fat ass police chief who can’t be bothered to collect evidence first, and uses Flock to side step their job?

Crime statistics

By Ogive17 • • Score: 5, Interesting • Thread
How many crimes have been committed DUE to Flock cameras? How many abuses that may not have been criminal but were unethical?

In a society that touts freedom as much as we do, the bar should be set extremely high for such a technology. Right now it’s the lowest, rotten hanging fruit.

Re:crime rates

By OrangeTide • • Score: 5, Informative • Thread

If you check the statistics, median time for stolen vehicle recovery fell by 6.7% in jurisdictions that installed Flock, saving people a fraction of a day in the recovery of their stolen property. Share of vehicles recovered in 1 to 7 days did not change though, so if you’re hoping Flock will get your car back, the statistics show we’re in basically the same situation we were in before Flock.

The value add that Flock pushes to police departments isn’t that it is faster or recovers more. It’s that it’s other police departments are already using it. Pure bandwagon argument. Flock will tell them marketing based on their own flawed surveys, that “42% of the 330 agencies answering the stolen-vehicle question said Flock was involved in recovering at least half of the stolen vehicles in their jurisdiction.” If I’m being generous, Flock might be cheaper than hiring more staff. But I don’t have data to support that, I looked, and couldn’t find it.

Re:It is true that

By ObliviousGnat • • Score: 5, Insightful • Thread

There is no expectation of privacy in public

But there’s expectation of not being stalked, and stalking is what these networked cameras do.

First-Ever Public Confirmation of ‘Zero-Click’ Spyware Delivered Via Targeted Ads

Posted by BeauHD • • View on SlashDot • Skip
Citizen Lab says it has documented the first publicly confirmed case of zero-click mercenary spyware being delivered through targeted online ads, a technique it calls “AdFection.” “There has been a lot of buzz that online ads can be used to identify and automatically hack targets with pinpoint precision, but now for the first time, we have concrete technical evidence showing this process in action,” said Bill Marczak, a researcher at Citizen Lab. The Guardian reports:
Citizen Lab, a digital investigations research unit at the University of Toronto, said it believed dozens of devices at the Qatari broadcaster Al Jazeera had been compromised by spyware delivered through ads run by Discover-Tech, which describes itself as a specialised digital advertising agency. According to Citizen Lab, Discover-Tech operates a software platform called Controlium that allows its clients to “mass-profile and deanonymize” internet users then covertly hack targets with third-party spyware. Unlike infections that rely on people interacting with links or files, the spyware requires no interaction from the victim to be installed, making it a new delivery technique, Citizen Lab says. The infections happen without a user’s knowledge, and in a matter of seconds, according to Citizen Lab.

"[The online advertising] ecosystem is being weaponized at a massive scale to profile millions of users, then silently infect targets with zero-click mercenary spyware,” the report says. According to the report, Controlium is able to harvest a user’s identity and IP address when the user is shown a seemingly benign custom-created ad — for example, for a digital game or a telecoms service. If the user has been selected as a target for hacking, a mercenary spyware firm can then send a malicious code containing spyware to their device, the researchers say. They say that millions of users worldwide have been served ads by Discover-Tech since 2024, including in Yemen, Brazil, Mexico and Czechia. […] The full extent of the targeting allegedly enabled by Discover-Tech is unknown. Citizen Lab’s findings join mounting evidence that the opaque arrangements underpinning the world of online advertising can be leveraged for surveillance.

Re:And this, kids…

By dskoll • • Score: 5, Interesting • Thread

I run Pi-Hole. When I’m not on my home network, I connect my device to it over OpenVPN and force the device to use my Pi-Hole as the DNS server—-it’s an OpenVPN option. So I have Pi-Hole protection wherever I am.

Re:And this, kids…

By toxonix • • Score: 5, Informative • Thread

Huge mistake says your credit card.

Re:Advertisers are the enemy of the Internet

By taustin • • Score: 5, Insightful • Thread

Advertisers are not the enemy of the internet. They are the enemy of human civilization. They are the enemy of sanity. They are the enemy of all that is decent and moral in the world.

Re:We can either have an internet or digital…

By cmdr_klarg • • Score: 5, Insightful • Thread

We can either have an internet or digital marketing.

We can’t have both.

Hell to the no. Advertisers poisoned the well; they don’t get to complain when I run the well water through a bunch of filters before ingesting it. Fuck them.

I’d be happy to pay to view some sites, but I can’t trust them to keep my view ad-free, nor can I trust them to not monetize my data. Again, fuck them.

No mention of what country this is from

By quonset • • Score: 5, Interesting • Thread

Interesting how the entire summary leaves out what country this company is from. Are we now protecting these genocidal criminals?

The country is Israel.

Meta and Apple Bring Muse Spark Open AI Model to Mac Studio

Posted by BeauHD • • View on SlashDot • Skip
Meta has released Muse Spark Open, an 816-billion-parameter open-weight model optimized to run locally across two 512GB M5 Ultra Mac Studios using Apple’s MLX framework. Meta says it’s the “most capable U.S. open-weight model to date.” MacRumors reports:
Muse Spark Open has 816 billion total parameters with 42 billion active parameters and a 1 million-token context window. It is meant for coding and agentic work, and Meta says it excels at extended tasks, multi-step reasoning, and software engineering. The new Muse model was tuned to run on Mac Studio, and Meta says the Mac Studio paired with Muse Spark Open is the “best way to run a powerful model on your own desktop.”

From Meta: “Apple’s unified memory architecture lets the M5 Ultra’s integrated GPU use up to 512 GB per Mac Studio, so two machines can hold an entire model. And the chip’s 1.2 TB/s of memory bandwidth is fast enough to read the small slice each token needs. The result is two Mac Studios behave like one supercomputer with a terabyte of unified memory.” Apple hasn’t released the 512GB Mac Studio as of yet, but it’s supposed to be coming later this month. It won’t be cheap, because the 256GB Mac Studio is already priced over $10,000.

Microsoft Says Windows 11 Is Now ‘More Responsive’, Runs Better On 8GB of RAM

Posted by BeauHD • • View on SlashDot • Skip
Microsoft says recent Windows 11 updates have made the operating system up to 20% more responsive by improving memory management and reducing background resource use. “A big part of that work is making smarter use of memory and system resources,” says Navjot Virk, corporate vice president of Windows experiences at Microsoft. “We’ve improved memory management and efficiency across Windows to help keep more of your PC’s resources focused on what you’re actively doing.” The Verge reports:
The improvements to memory management now make a “meaningful difference” on PCs with just 8GB of RAM. “Windows can now keep up to 2GB more of your active data in memory instead of moving it to slower storage,” says Virk. “For example, on PCs with 8GB of memory or less, Widgets load only when you open them, making more than 200 MB of memory available for your apps and other work.”

Microsoft has also made Windows Update less disruptive, cleaned up the Widgets section, and finally allowed the taskbar to be repositioned to the sides or top of a display. Windows Hello sign-in has also been sped up, and Bluetooth pairing is more reliable, “including an AirPods pairing experience that’s up to 15 seconds faster.”

The next big step is a new Windows Search experience that’s a lot faster and more capable. […] It’s currently available for Windows Insiders, and Microsoft says it will “roll out more broadly later this year.”

The taskbar is a mess!

By Murdoch5 • • Score: 5, Interesting • Thread
Congratulations Microsoft, it’s 2026, and your OS finally supports taskbar positioning, except, you did it wrong. Look at how Gnome, XFCE, or KDE Plasma works with a top positioned taskbar, then, contrast against Windows 11, and you’ll realize Microsoft has shoved their head up their ass, again. What some people wanted was a functional, properly designed, formatted, styled, and interactive top taskbar. What we got, a sloppy, unprofessional, gap filled mess, that doesn’t properly reposition the taskbar, and, everything it’s hooked into.

Did no one at Microsoft on this feature think to install KDE Plasma, or Gnome, and take a look at how a professional product does a top position taskbar? Since it’s a mess, and insult to any user who wanted this feature, it’s incomplete and has yet again proven Microsoft doesn’t respect their user base. It’s broken enough that you have to leave it bottom positioned not to get annoyed or wonder what hard drug the designers were using.

Re:Widgets

By slaker • • Score: 5, Informative • Thread

You can exclude them from installing through an autounattend.xml (see Schneegans.de for help building one) and prevent them from display via a GPO. You really want to use a group policy object because otherwise a Windows Update might put them back; it’ll override a plain old registry change or user preference any time it wants but GPO changes persist.

It is trivial to restore Local Group Policy editing on Windows Home SKUs with a little powershell.

Get-ChildItem @(
        “C:\Windows\servicing\Packages\Microsoft-Windows-GroupPolicy-ClientTools-Package*.mum”,
        “C:\Windows\servicing\Packages\Microsoft-Windows-GroupPolicy-ClientExtensions-Package*.mum”
) | ForEach-Object { dism.exe /online /norestart /add-package:"$_” }

Some GPO settings are ignored outside the context of Windows Education or Enterprise SKUs, but most of those are related to user behavior data mining. I can verify that if you’re just trying to supress OneDrive, Bing Search and Microsoft Account sign-ins, those are all maintained just fine even on Windows Home.

But

By RitchCraft • • Score: 5, Interesting • Thread

But it’s still Windows 11. Puke.

Re:The taskbar is a mess!

By pla • • Score: 5, Insightful • Thread
Never mind the Linux World - For a good example of a well-behaved taskbar, they only need to look as far away as… Windows 10! It handled all four sides of the screen and at arbitrary thicknesses perfectly well.

Much like the start menu. Worked fine from 95 through 10, then how many years did it take MS to finally let us make Win11’s behave like, y’know, some kind of “menu” for “start"ing installed programs?

I dare say the only reason people have finally started saying “Y’know, Win11 is halfway usable” is because Microsoft finally started letting us revert the look and feel back in the direction of XP.

Re:I have only…

By backslashdot • • Score: 5, Insightful • Thread

Bill Gates should have been taken more seriously .. like think about it .. how the hell is 8 BILLION bytes not enough???

Up until, I would say the 90s .. we used to view RAM as a precious rare mineral allocated to us by God. Every bit had to be accounted for. You didn’t just go allocating memory willy nilly. You can’t be like malloc this, malloc that, as if you own the place. Every bit and byte and to be mulled over. You’d think “do I really need to use an int? perhaps byte or maybe even a boolean would suffice?” Sometimes you’d have to compromise “I really need a double here, but fuck it, all I have is two booleans” That’s how we dealt with shit. Contrast that with you Gen Z fuckers nowadays who are like “hmm, I need to store an on-off state .. let me use an entire JSON structure embedded in an HTML file!”

You know what, fuck all of you!

Amazon Launches New Bee ‘Personal AI’ Devices That Listen to Conversations

Posted by BeauHD • • View on SlashDot • Skip
Amazon has unveiled two new Bee “personal AI” devices designed to continuously record, transcribe, and analyze conversations: the $75 wearable Bee Frontier and the $100 phone-mounted Bee Eclipse. Amazon says the devices can generate conversation summaries, surface recurring themes, and recommend actions or purchases, while claiming audio itself is never stored and users can delete transcripts and summaries. CNBC reports:
The Bee Frontier is an upgraded version of Amazon’s existing wearable that can either be worn on a wrist or clipped to clothing. Similar to earlier generations, the Bee Frontier has up to seven days of battery life, but it’s also more expensive, costing $75 compared with its $50 predecessor.

Amazon acquired Bee, a San Francisco startup known for its always-listening bracelet, in July 2025 for an undisclosed amount. Bee bracelets are equipped with artificial intelligence and microphones that can record, transcribe and analyze conversations. The dual mics on the Bee Frontier have upgraded noise filtering, “so it can take note of what matters and ignore what doesn’t, even in noisy environments like a crowded restaurant or open office,” Amazon said in a blog post.

Amazon also debuted the $100 Bee Eclipse, which functions like other Bee devices, but instead of being worn, the credit card-sized gadget magnetically snaps on to the back of a smartphone. The Bee Frontier is available Thursday, while the Bee Eclipse “will be available soon,” the company said.

damn

By hjf • • Score: 5, Insightful • Thread

why does big tech HAVE to be so fucking creepy?

Shady Enterprise Note Taking goes Viral

By hutkept • • Score: 5, Informative • Thread
For at least several years now enterprise “note taking” apps have been skirting ethical and legal grey areas. Sales people use them to record other zoom/google-meet participants without having to ask the other participants’ permission because the recording app is outside zoom, explicitly because they know it would raise questions and freak them out. Many states make it clear this is illegal and all these apps simply say “it is the ethical and legal responsibility of the recording party to inform other participants as required” etc… In other words the companies selling this software are absolutely aware this is being done and are turning a blind eye intentionally. Now Amazon is going to make the same thing available to consumers, taking it from enterprise to the consumer space. However, the two are subtly different: nobody wants to be recorded, but at least in enterprise settings we have our “shields up”, but consumer/personal settings are when we are most vulnerable, so this level of violation is way above what had been foisted on us in the enterprise space. It is much worse than Meta’s glasses.

And why am I paying for a gadget to do this?

By Hank21 • • Score: 4, Insightful • Thread
When all that tech is already built into my smartphone - an app would have been much simpler for everyone - unless I’m missing something novel about this hardware.

if you can’t internalize a conversation

By OrangeTide • • Score: 5, Insightful • Thread

Then recording it and never looking at the transcription and analysis isn’t going to accomplish much.

I would rather see AI used to help humans builds skills such as active listening, critical thinking, and organization. Making various crutches to build a society dependent on AI might seem sensible for revenue but it does not better society.

Humanity is at a crossroads. We have to decide if technology works for humanity. Or if we all work for the technology. Not making the choice is a choice in itself.

Re:Legal question: All party, in person, states

By Local ID10T • • Score: 4, Insightful • Thread

Details matter. Especially in law.

Taking notes is not illegal. Using a device to assist in taking notes is not illegal (speech to text use is ADA protected). Transcription is not the same as recording. As long as the device is not producing an audio recording, it is not recording audio. Transitory processing of audio is not the same as recording audio.

The devil is in the details, and they are carefully to stay within the letter of the law.

Uber Begins Self-Driving Robotaxi Trial In Manchester

Posted by BeauHD • • View on SlashDot • Skip
An anonymous reader quotes a report from The Guardian:
Uber has begun a trial of autonomous vehicles on the streets of Manchester as it looks to bring robotaxis to cities around the UK. The first self-driving cars are operating, using the technology of its partner firms Pony and Verne, with whom Uber recently launched Europe’s first autonomous taxi service in the Croatian capital, Zagreb. Uber said it was “excited to take this first step toward making this technology accessible to people across the UK.”

In social media posts, Verne said it had “started our autonomous vehicle testing in Manchester,” while Pony said there were “plans to bring robotaxis to the city” and that testing was under way. The tests involve the company mapping the streets of the city in north-west England with a safety driver behind the wheel and no passengers. Limited passenger services started last month in London, but with a safety driver in the front seat of cars supplied by Wayve under Transport for London’s licensing rules for private hire vehicles.

The next steps are unclear. Opposition from Uber drivers, their unions and the capital’s politicians to the rollout of robotaxis is mounting. The GMB and ADCU unions have both said thousands of drivers jobs will be lost and have called for help for those affected. A critical report from London assembly’s transport committee this week called for the government to devolve authority over autonomous taxi services. It said there was “considerable uncertainty about many of the claimed benefits of autonomous passenger vehicles”, and fears over the impact on public transport and congestion, as well as safeguarding and accessibility for disabled passengers. There has been no official application to launch passenger services in Manchester so far.

Who’s surprised?

By TWX • • Score: 5, Insightful • Thread

This was Uber’s end-goal from the very beginning. The human drivers were only a stop-gap, as Uber wanted to position itself to lead the market in self-driving private on-demand transportation. To do that it first sought to position itself as the lead in the market for conventional private on-demand transportation.

Many businesses don’t care about the people that work for them because they only view them as liabilities, not as assets. This becomes more and more relevant the more a given business pushes their employees into being meat-cogs in their corporate machinery. Originally it was manufacturing but now the new hot thing is to push this into services.

So yeah, this is no surprise at all.

They don’t have the tech

By rsilvergun • • Score: 5, Informative • Thread
Waymo runs their taxis remotely from a call center in the Philippines when they’re not in dead simple situations and they’re 10 years ahead of everyone else. Drag these jokers in front of a committee under oath and I’m sure they’re doing the same.

Nop Thanks

By eddy_crim • • Score: 4, Insightful • Thread

As a resident of manchester.. fuck off. Manchester has spent years minimising the cars and vehicles in the city center creating an increasingly walkable, cyclable and public transport rich area that makes getting around easy and pleasant. Compared to 10 years ago its a great place to live and work and cars for city center residents are increasingly optional.

Clogging the streets up with robotaxis would be a huge backward step (footnote: i spend a lot of time in San Francisco and the density of driverless cars there is getting stupid already and SF is a car centric city by design)

Re:Who’s surprised?

By wagnerer • • Score: 4, Informative • Thread

Incorrect. There are multiple classes of stocks where growth isn’t expected. For instance, utilities aren’t bought for growth and tend to be relatively stable in value but they provide consistent dividends from the company’s profits. Value stocks are companies that also land into that category. Either they are too big to significantly grow or growth just isn’t an expectation due to other reasons. They tend to be long term stable companies that consistently make money and share that with their stock holders.

Re:They don’t have the tech

By rsilvergun • • Score: 4, Informative • Thread
You can look up the Congressional hearings where they admitted it under oath. And I don’t believe anything any corpo tells me that isn’t under oath. When they can’t be tossed in jail for perjury they’ll tell you all kinds of bullshit. Christ you’d think you’d have learned that from Elon Musk but you probably believe you’re still going to Mars…

At least you’ve got plenty of time to post here since you have a fleet of self-driving Tesla is making money for you in 2016 right?

Bank of America Hired 1,000 Contractors to Patch Software Flaws Exposed By Anthropic’s Mythos

Posted by BeauHD • • View on SlashDot • Skip
Bank of America hired 1,000 outside contractors to help patch software vulnerabilities exposed by advanced AI models, including Anthropic’s Mythos. The effort added hundreds of millions of dollars in third-quarter expenses. CNBC reports:
In an interview after the bank’s third-quarter earnings release, [CEO Brian Moynihan] said that earlier this year the company rushed to bolster a wide spectrum of its internal and vendor code using thousands of employees and outside personnel. “That risk is real risk, and that’s why when the frontier-type models came out. … A lot of us sat down and said, ‘How do we figure out how to get through this quickly?’" Moynihan told CNBC’s Leslie Picker.

“We put on 1,000 contractors to help us do the patching work in the second quarter, and those people remain here today, helping us, on top of the 3,000 people we have in that area,” he said. The bank spent a “couple hundred million plus” on the software remediation and regulatory issues related to anti-money laundering compliance in the third quarter, Moynihan told analysts earlier Wednesday.

Re:sounds like the right way to do it

By gtall • • Score: 5, Interesting • Thread

In this case, they needed to get the flaws fixed fast, too fast to on-board new employees and get them working properly. Hiring a whole raft of new employees on a moment’s notice would only lead to financial problems.

That said, at least the precis did not mention BofA deciding to increase their employee count over the longer haul to keep the security risks down. My guess is they think this is a one and done deal so they can proudly declare to the board and their investors that they met the problem and had it fixed quickly.

The fact Maude, Claude, Wee Willie Winky, etc. could find the flaws means there a probably a lot more hiding and they haven’t a clue how to address them before they get hurt by them. And their board and investors are likely to be similarly blinkered.

1,000 contractors hired to patch software :o

By Mirnotoriety • • Score: 5, Insightful • Thread
Frederick P. Brooks: “All repairs tend to destroy the structure, to increase the entropy and disorder of the system. Less and less effort is spent on fixing the original design flaws; more and more is spent on fixing flaws introduced by earlier fixes.”

“As time passes, the system becomes less and less well-ordered. Sooner or later the fixing ceases to gain any ground. Each forward step is matched by a backward one. Although in principle usable forever, the system has worn out as a base for progress.”

Banking & Finance Technical Debt

By Whatchamacallit • • Score: 5, Insightful • Thread

The banking and financial services industry is loaded with enormous technical debt. BOA is not the only one running 20+ year old software and for decades, the rule of thumb was “If it ain’t broke don’t fix it”. Now they have legacy systems full of security vulnerabilities that they MUST patch and it’s a crisis because they were behind the upgrade ball for many years. Hence the need to scramble and throw massive resources at the problem. Had they been more vigilant in keeping up with technology they wouldn’t be in panic mode right now.

Re:sounds like the right way to do it

By DarkOx • • Score: 5, Insightful • Thread

My question is how do they actually know anything is fixed?

Fundamentally hiring contractors to write a lot quick patches, has the same problems as having AI write a lot quick patches. We are talking about systems that have man-years of development and maintenance in them newly on boarded contract workers lack the context and social authority to make invasive changes.

They only way you could get thru a really large volume of scatter shot patchwork across the enterprise is if you let people read a bunch of AI summaries of the issue, and work from that. That then leads you with a lot of code reviews and merges to do, as the new bottleneck those people also need to understand what they are looking at to really be sure it is right, so again what do they read an AI evidence summary and just sign off, if not that is just the next bottleneck?

What really smells is the why did the pipeline/workflow just have claude-agents authoring the patches too? I think I know the answer, Anthropic probably told them ‘No’ even though really it is the smallest and after all the analysis work is done best specified part of the job. Real architects don’t get blame the framers, when the building collapses because the dimensions of the materials were unspecified, and real mechanical engineers don’t get blame the lather operator when the crank shafts wear prematurely because they did not account for unavoidable heating while machining and the effect it would have on the metal surface. That is what Anthropic wants here though, they want to be able to say it was the guys writing the patches and the people who approved them that screwed up, even as their faulty tools fed them bad information and reviewers were handed an impossible volume of work.

This seems like a massive CYA on the part of Anthropic and it is really disingenuous. If it works they get to claim they are heroes that enabled what would have been impossible to achieve before, if it leads to any serious problem, its the fault of those ‘contractors’ and or the reviewers who did not take their responsibilities seriously, without mention of how unrealistic that likely was.

Re:sounds like the right way to do it

By gurps_npc • • Score: 5, Insightful • Thread

Claude agents, like human people, are much better at finding problems than they are at patching them without causing more problems.

As someone that posts on slashdot you should know it is a lot easier to complain about something than to fix it.

Mini Organs Launching to Space For Study On Aging

Posted by BeauHD • • View on SlashDot
Researchers from Mount Sinai, NASA, and Space Tango have launched miniature human hearts and brains to the International Space Station to study how microgravity and radiation affect organs and potentially accelerate aging. “If people are going to be living and working in space, then we need to understand what’s going to happen to them,” David Sachs, assistant professor of surgery at the Icahn School of Medicine at Mount Sinai, told ABC News. “But also, because it’s interesting as a model of accelerated aging for studying people on Earth.” From the report:
The mini organs launched aboard commercial resupply mission CRS-35 on Tuesday morning from Cape Canaveral Space Force Station in Florida. They are expected to arrive at the International Space Station (ISS) on Thursday. The miniature organs offer researchers a unique opportunity to simulate aging in a much shorter period of time to understand disease and develop treatments. “Six months in space … is equivalent to about 10 to 20 years of aging on Earth,” Kevin Costa, associate professor of surgery at the Icahn School of Medicine at Mount Sinai, told ABC News.

Sachs and Costa are sending up to 16 miniature hearts to the ISS to test how they respond to electrical signals and monitor how they may react to near-zero gravity. The technology, which is integrated into a miniature laboratory called CubeLab, was developed by Space Tango and simulates the natural environment in the human body. "[It is] slightly bigger than a shoebox, and it is a fully automated, miniaturized system,” Gentry Barnett, chief technology officer at Space Tango, told ABC News.

[…] As part of the new effort, the team is sending miniature brains, called miBrain, to the ISS. Around the size of a peppercorn, the miBrains reflect models of healthy and diseased brains. By exposing them to the space environment, scientists can see how mini-brains respond and better understand why living in space accelerates aging. Though the mini organs are not full-sized human organs, the researchers say they are good substitutes, cost-effective and don’t take up much of the limited space aboard the space station. They also believe discoveries made in space can translate to uses in everyday medical care.

The microgravity environment uniquely allows researchers to study what happens to humans with a sedentary lifestyle or prolonged bed rest, which isn’t easily simulated on Earth, Sachs explained. "[The research is] translating to stuff in space, but it’s also translating back to the research we do in the laboratory to help people with Parkinson’s and Alzheimer’s disease,” Joel Blanchard, associate professor of stem cell biology and regenerative medicine and neuroscience at the Icahn School of Medicine at Mount Sinai, told ABC News. Lisa Carnell, the director of the biological and physical sciences division at NASA, told ABC News that these experiments serve as a starting point for future research beyond low Earth orbit, including to the moon and beyond.

Investors

By fluffernutter • • Score: 4, Interesting • Thread
Don’t we know what happens to people working and living in space by having people working and living in space? People complain about experiments for the sake of attracting investors, this seems like it.

Re:Mini?

By jfdavis668 • • Score: 4, Informative • Thread
They could play the Blue Danube Waltz while they are docking.