The vendor’s assessment, published yesterday, also says “public research has demonstrated a reliable exploit” against a server in its default configuration with mod_http2 enabled. It does not name or link that research. Security company Wiz said later that day that no exploit was available and that no exploitation in the wild had been reported.

HTTP/2 runs only where the Protocols directive turns it on, as the module documentation explains. The directive uses h2 for HTTP/2 over TLS and h2c for HTTP/2 over plain TCP. It can be set for the whole server or for a single virtual host, so admins should check the server-wide setting and every virtual host.

Standalone builds of the module, released on GitHub as mod_h2, are affected from version 2.0.8 through 2.0.42. Admins who run the Apache HTTP Server project’s own releases should move to version 2.4.71, the fixed release named in its security advisory. That release also fixes a crash in mod_md, rated important, and a one-byte overwrite of stack memory in mod_vhost_alias, rated low.

Huang, 63, apologized on Sunday for being “unfaithful to my wife,” though he provided no details about the affair with businesswoman Alice Huang, who has worked for a Chinese company and Nvidia customer called Megaspeed. Late Wednesday, The New York Times reported that the Nvidia CEO also had a separate affair, this one with Kimberly Powell, vice president of health care at the chipmaker. Later that afternoon The Times and other outlets reported that Nvidia’s board met to discuss the company’s future.

Jensen Huang denied allegations that he had compromised national security or Nvidia secrets after reports of the Alice Huang affair. The news sparked concerns that Nvidia knew companies based in Singapore and Malaysia had been evading U.S. export controls in accessing its technology. The board said on Tuesday that it had hired Wachtell Lipton to investigate the intelligence allegations.

He’s best known for the Zen of Python, PEP 20, still printed by typing import this. In 2002, he gave Python Timsort, the sorting algorithm he designed for lists, later adopted by Java and Android. He also polished the cyclic garbage collector and the pymalloc allocator, worked on the dict implementation, the float object, the math module and Karatsuba multiplication in longobject, and wrote the first version of doctest, plus difflib, pickletools and tabnanny.

He was a director of the Python Software Foundation from 2001 to 2014. Before Python, he wrote compilers at Cray Research and speech-to-text software at Dragon Systems. The thread is full of recollections from core developers about his patient, detailed answers on the mailing lists, signed with his trademark .

Every minute, some uninterruptible power supplies perform routine battery checks, creating small but measurable surges in electricity demand. And it’s like clockwork. “Even benign control routines can become systemically relevant when many devices act coherently,” writes a team led by physicist Dirk Witthaut of the University of Cologne, Germany, in a paper published in Nature Energy. “Unintended synchronization can generate recurrent and potentially amplified oscillatory behavior in large-scale cyber-physical energy systems.”

To figure it out, Witthaut and his colleagues analyzed high-resolution electricity measurements from buildings at the Forschungszentrum Julich research campus in Germany. [… they found that] the 60-second pattern appeared in four buildings, all of which contained uninterruptible power supplies. None of the buildings they measured without these systems showed the same pattern. Following the electrical signals more closely, the researchers detected tiny bursts of current from the batteries at precisely one-minute intervals. They were able to trace the resulting fluctuations through one building’s electrical system, all the way to the connection with the public high-voltage grid.

The manufacturer subsequently confirmed the culprit’s identity — routine battery self-tests, conducted automatically by the systems’ management software. But why would equipment in different buildings, let alone different countries, be doing this at the same time? The answer appears to lie in the clocks. Digital devices can synchronize their internal clocks using external time signals, meaning that independently operating systems can end up performing their scheduled tasks together. Individually, these small checks are insignificant. But when enough devices act in synchrony, their combined electricity demand can produce a measurable effect across an entire power grid.

The historic ocean liner SS United States will be intentionally sunk Wednesday off the coast of the Florida panhandle. Live coverage of the sinking of the SS United States is expected to start at 1 p.m. EST, with the sinking expected at 2 p.m. EST. Watch live in the video player above. In its heyday, the SS United States crushed the trans-Atlantic speed record, which it still holds. The luxury ocean liner took only three days to cross from New York to Europe on its maiden voyage in 1952. Carrying presidents and Hollywood stars, the nearly 1,000-foot vessel was a technical marvel of its time. However, the rise of air travel and high operating costs sunk its economic viability, and the ship was pulled from service in 1969. The ocean liner sat at Philadelphia’s Pier 82 for nearly 30 years.

After a contentious back and forth with a pier landlord over rent and docking fees, Okaloosa County in Florida eventually stepped in to purchase the ship and bring it to the Gulf of Mexico to become the world’s largest artificial reef. The multi-million dollar project is also aimed at creating an economic development opportunity as a major diving attraction. “It was our goal to make sure that she wasn’t lost forever,” said David Lawrence, a member of the board for the SS United States Conservancy, the group that sold the vessel to the Florida county.

Like the ship’s unconventional life, it will also have an unconventional sinking. Federal environmental and explosives rules prevent the county from using explosives. Instead, tanks inside the ship have been removed and large holes were cut into the decks. Once the valves are opened, water will flood the hull, sinking the ship. Resting at 180 feet below the surface of the water, the SS United States will join more than 500 artificial reefs in Okaloosa County, which the county relies on to support the underwater ecosystem.

To make an airline booking, an AI agent requires access to a customer’s personal information, including credentials like payment information. United has a problem with that, saying that “sharing account credentials with personal, third-party, AI assistants can expose sensitive information, and actions taken by these tools may result in unintended purchases, account changes, or use of MileagePlus miles.”

The carrier also said that using an AI agent to, for example, check in for a flight could violate federal regulations, including rules requiring travelers to verify in person that their luggage does not contain banned substances. “As a result, United is taking steps to restrict access — directly within our digital platforms and indirectly via travel agencies and aggregators — to prohibit use by unauthorized, third-party personal AI agents or assistants,” said the airline, which is updating its booking and ticketing policies to reflect the new rule.

The relationship, which has not been previously reported, was with Kimberly Powell, Nvidia’s vice president of health care, said the people, who spoke under the condition of anonymity to describe sensitive information. Under Nvidia’s code of conduct, employees are told to “avoid situations where our actions create conflict” including “personal relationships,” and the company states that it “promptly investigates reports of misconduct.” Many corporations have policies against managers having relationships with subordinates.

Mr. Huang, 63, and Ms. Powell, 48, were captured on video being affectionate at a San Jose, Calif., hotel during a Nvidia conference in March, according to two of the people who worked at the company. The New York Times has not seen the video. Both Mr. Huang and Ms. Powell are married to other people. […] One bystander captured the interaction on their phone, three people briefed on the incident said. Mr. Huang’s security witnessed the bystander with their phone and sequestered them, the people said. They made the person an offer to sign a nondisclosure agreement.

A shareholder has sued Nvidia and its CEO, Jensen Huang, accusing them of deceiving investors in their responses to media reports about Huang’s affair with a purported Chinese spy that threatens national security. […] The news reports said that the Commerce Department was investigating Alice Huang’s company, Singapore-based Megaspeed, on suspicions that it was helping to sidestep U.S. export restrictions blocking Nvidia chips from being sold to China. But Nvidia said then that its compliance team checked and determined that Megaspeed wasn’t doing anything illegal.

But, according to the complaint, the statements were misleading because they were made when Jensen Huang was having an affair with Alice Huang, who is “suspected of seeking to help smuggle Nvidia products into China.” It accuses Nvidia and Huang of failing to disclose the affair and issuing false statements about Nvidia’s relationship with Megaspeed, which posed a “material risk” to Nvidia’s reputation and business prospects.

[…] “As a result of Defendants’ wrongful acts and omissions, and the precipitous decline in the market value of the Company’s securities, Plaintiff and other Class members have suffered significant losses and damages,” the complaint said. Had investors known the truth, they wouldn’t have purchased Nvidia’s shares “at the artificially inflated prices that they did, or at all,” the complaint said.

Under the terms of the settlement, T-Mobile must:

- Eliminate data caps on its ABA plans and deliver guaranteed 25 Mbps download speeds.
- Expand ABA plan availability to all geographic areas where it offers fixed-wireless home internet service.
- Make its ABA webpage indexed and easily discoverable via standard web searches.

Yandex clarified that customers who had previously enabled the platform’s backup tools did not experience any data loss, as their information remained fully preserved. The incident has prompted the company to revise its approach to data protection and disaster recovery, particularly the default settings for cloud infrastructure. Under the updated policy, automatic backups will be enabled by default whenever customers create new virtual machines on Yandex Cloud. Users will retain the option to disable the feature manually through the management console. In addition to changing its backup policy, Yandex Cloud announced the launch of a new availability zone, designated ru-central1-f. The new availability zone operates from a separate location, improving the resilience and reliability of the services.

The Trump administration’s fight to stop suspected leaks of top-secret military information on LinkedIn can’t sweep in “a vast number of confidential sources” of random journalists “who have no conceivable relationship” to the Department of Justice’s investigation, an appeals court ruled (PDF) Tuesday. The order came after the DOJ asked LinkedIn to turn over 18 months of communications from targeted journalists who collectively published more than 1,000 articles on many different topics over that time period. The request was not limited to journalists involved in a controversial report from a news outlet that Trump said exposed confidential military information in a foreign country. (The outlet is not being named to protect national security secrets.) Instead, the DOJ cast a wide net, requesting extensive LinkedIn data on journalists who had any possible link to the journalists around the time the report was drafted.

The majority of journalists have LinkedIn accounts and publish their contact information to encourage sources to connect on the platform, LinkedIn argued. So allowing that government overreach went beyond harming targeted journalists and threatened to undermine a critical platform where journalists frequently connect with confidential sources, judges ruled. Even more concerning, the Trump administration secured a secrecy order barring LinkedIn from telling anyone about the sweeping request for a year. That left journalists unaware for far too long that their First Amendment rights had been compromised, judges ruled.

As for Logitech, the company believes that it’s time for people to move away from the belief that playing games is a waste of time, hence its new initiative. It makes sense for a company that makes gaming accessories to say that, of course, but CEO Hanneke Faber argues that the company sees “how engagement in one sphere supports performance in the other.” The hope will be that, by allowing employees to play games, a productivity boost will follow.

“The Apple Support Community will permanently close on November 20, 2026. Starting today, the site will no longer accept new posts and is available in a read-only state. You can continue to find trusted guidance and support on the official Apple Support site. We want to thank the community members who have contributed their time and expertise to help others with their Apple products.”

Amazon’s Ring is going deeper into surveillance with an indoor drone for home monitoring and an autonomous robot designed to patrol businesses. The company on Tuesday unveiled the $250 Ring Drone Cam, a security camera that can fly from room to room, including upstairs, as well as capture footage during the day or at night. When an alarm or sensor on windows, doors and home security devices is triggered, the textbook-sized drone travels a preset path to investigate suspicious activity. Users can also deploy the drone at any time, the company said.

[…] The company on Tuesday also debuted the $1,000 Ring Rover Cam. The device repurposes Amazon’s Astro home robot, which had a short life as a business device and has seen few upgrades since its 2021 debut, for companies to use to patrol offices, warehouses and other workspaces. Ring said it “leveraged the best of Astro” to build the Ring Rover Cam, which it describes as a “purpose-built security robot.” Similar to the Astro, the device is a display mounted on a two-wheeled base with an extendable periscope camera. It also features a “built-in siren,” two-way audio and a “light tower” that shines onto the ceiling to help users keep track of its whereabouts.

GTA VI is now available for preloading. The download weighs in at a whopping 210+ gigabytes on the PS5! Start downloading now and remember to take Nov. 19th off from work.