Alterslash

the unofficial Slashdot digest
 

Contents

  1. Euclid Mission Data Release Spans More Than 900 Million Galaxies
  2. SpaceX To Invest $74 Billion Into Data Center Construction Projects In Texas, Arizona
  3. Whoop Launches a Social Network Where Every User Has a ‘Verified Heartbeat’
  4. Nintendo Takes Down Switch Emulators, Mod Chip Firmware in Massive GitHub DMCA Sweep
  5. Former Nvidia CEO Jensen Huang Had a Relationship With a Second Employee
  6. Singapore Says US Not Helpful On Investigation Into Suspected Spy’s Company
  7. Microsoft Outlook Goes Down Nationwide [UPDATE]
  8. Google Pushes Privacy Angle As Gemini-Powered Smartglasses Debut
  9. Iconic First Image of Black Hole Holds Up To Scrutiny
  10. Critical Apache HTTP/2 Flaw Could Let Unauthenticated Attackers Execute Code Remotely
  11. Jensen Huang Resigns As Nvidia CEO
  12. Tim Peters, Python User #2 and Prolific Contributor, Dies At 74
  13. Power Grids On 5 Continents Pulse Every 60s. Scientists Think They Know Why
  14. Sunken SS United States Set To Become World’s Largest Artificial Reef
  15. United Airlines Bans AI Agents From Booking Flights On Behalf of Travelers

Alterslash picks up to the best 5 comments from each of the day’s Slashdot stories, and presents them on a single page for easy reading.

Euclid Mission Data Release Spans More Than 900 Million Galaxies

Posted by BeauHD • • View on SlashDot • Skip
The European Space Agency has released the largest dataset yet from its Euclid space telescope, containing 1.7 petabytes of observations covering more than 900 million galaxies. “The data unveiled on Thursday covered a survey of the sky equal to about 9,500 times the size of the moon as viewed from Earth,” reports Reuters. “The mission’s goal is to complete the “largest-ever three-dimensional atlas of the cosmos, spanning more than a third of the sky, in 2031.” From the report:
“It marks a major milestone for ESA’s Euclid mission and for everyone involved,” said astrophysicist Valeria Pettorino, ESA’s Euclid project scientist. Euclid, launched from Florida in 2023, is gathering data on how the universe has expanded and how its structure has formed over time while amassing information about the nature of dark energy and dark matter and the role of gravity on large scales.

“Euclid will not just take images of galaxies in the sky, in two dimensions, but will also measure their distance, the third dimension. This will tell us where galaxies are in space and time, across 10 billion years, and in all directions beyond our galactic plane,” Pettorino said. “Galaxies cluster along filaments, surrounded by empty space, and form a network that we call the cosmic web. Euclid will reconstruct the cosmic web and how it has grown over time. This is important because the exact configuration of the cosmic web, how many clusters or voids are there, how fast it changed, depend on the properties of dark energy and dark matter,” Pettorino said.

[…] Previous Euclid data releases covered only a few days of observations. The newly released dataset includes more than a year of data and still spans only 14% of the total sky area Euclid is due to survey in visible and near-infrared light over six years. This data release will be completed next year with the first results on dark energy and dark matter.

SpaceX To Invest $74 Billion Into Data Center Construction Projects In Texas, Arizona

Posted by BeauHD • • View on SlashDot • Skip
An anonymous reader quotes a report from the Hill:
Elon Musk’s SpaceX plans to invest more than $74 billion into building two data centers in Texas and Arizona, the company announced Thursday, marketing them as projects that will boost local communities amid backlash surrounding such facilities. “These investments will expand local tax bases, generate substantial new revenue for schools and public services, and create economic opportunities that extend far beyond the facilities themselves,” the company said in a release. SpaceX said it will put more than $24 billion into a new project in Texas’s Rio Grande Valley, expanding the company’s headquarters in Starbase — a coastal town the tech giant established in 2025 in a previously unincorporated area of Cameron County. In Arizona, SpaceX will invest around $50 billion in Cochise County, a rural area east of Tucson bordering Mexico and New Mexico.

SpaceX pledged the new projects will be created cooperatively with the surrounding communities and will be environmentally conscious. The company said the project in Texas would generate its own power and invest $220 million to expand the water supply in nearby Brownsville. While in Arizona, it vowed to work with local electric cooperatives and “potentially” reduce electric bills, saying the site would use dry cooling without water consumption. “They require strong partnerships with local communities, responsible environmental stewardship, and stable, competitive policies that give companies the confidence to make long-term investments,” the company said in a release. Both sites promise hundreds of permanent jobs even once construction is complete.

Good luck with that

By rsilvergun • • Score: 3, Insightful • Thread
Both States just turned blue and a big part of that besides orange pedophile screwing up the economy is the Republicans welcoming data centers.

How the hell is Arizona supposed to have all these data centers given the Colorado River is cutting off water to it. Remembered data centers don’t have to use all that water but they do anyway because it’s slightly cheaper and then they lie about how much water they use in public.

And that’s before we talk about the electricity usage. Texas’ is grid can’t take it. It’s another reason the Republican party lost and the state turned blue. When you want shit fixed you elect a Democrat when you want to fun spectacle you go with the Republican and hope it’s your neighbor that gets fired during the inevitable recession. It’s been that way since the ‘90s when newt Gingrich started that contract with America bullshit.

Whoop Launches a Social Network Where Every User Has a ‘Verified Heartbeat’

Posted by BeauHD • • View on SlashDot • Skip
Whoop has launched Humans, a social network built into its fitness app where every account is a real person with a “verified heartbeat.” The wearable company claims its platform is “entirely human,” unlike other social media platforms that are “saturated with artificial intelligence, automated accounts and bots, and manufactured content.” The Verge reports:
Starting Thursday, Whoop members can share their data from its wearables on the app’s new Whoop Humans social network. Users can make their metrics, activities, and achievements visible to other Whoop wearers, post Story-like “Moments” with photos and captions, and add comments and reactions on other members’ posts. […]

In the Community tab in Whoop’s app, users can scroll through Moments from people they’re following, like tapping through your Stories feed on Instagram but with your friends’ fitness tracker data. In one of Whoop’s examples, swiping up on a user’s Moments post with a photo from their run shows a map with their route and details like their pace and distance. The Community tab also shows cards for people in your “community” with their sleep, recovery, and strain scores.

Whoop says users choose which activities, achievements, and metrics they want to share on Humans, including Recovery, Strain, Sleep, HRV, and resting heart rate. Any activities marked as sensitive aren’t shared by default. There’s also an option to keep Moments posts private and a “Stealth Mode” for temporarily hiding health and performance data without changing your sharing settings.

eeewww

By jhoegl • • Score: 3, Insightful • Thread
tracking of your bodies stats and performance so they can get more data to sell to advertisers.
They can tell when you crap, when you eat, when you work out, when you sleep, and when you have sex.
You really want that much data in the hands of Oligarchs?

We have real human data for you to mine!

By wickerprints • • Score: 3 • Thread

Why the fuck do we need yet another social media company that mines personal data for profit? Jumping on the anti-AI bandwagon might be commendable if it weren’t for the fact that, once again, the whole purpose of its existence is to harvest personal data from users.

These tech ghouls need to fuck off. I don’t care if you think this data is sensitive, or if you promise to respect people’s privacy. Don’t collect it and turn it into engagement bait. I’m so fucking tired of this shit. There’s something seriously wrong with people who feel this constant need to share these details about themselves with others.

Once again discrimination

By rsilvergun • • Score: 3 • Thread
Against the living impaired.

Nintendo Takes Down Switch Emulators, Mod Chip Firmware in Massive GitHub DMCA Sweep

Posted by BeauHD • • View on SlashDot • Skip
Nintendo has issued four DMCA takedown notices targeting two Nintendo Switch emulators, Yuzu and Citron Neo, along with mod chip firmware such as Picofly, SX Core and HWFLY. As a result, 144 repositories containing firmware used to circumvent the console’s copy protections have been removed by GitHub and replaced by a DMCA takedown notice. IGN reports:
GitHub has posted Nintendo’s November 6 DMCA notice, which says, “The Nintendo Switch console and video games contain technological protection measures (‘TPMs’) that permit the Nintendo Switch console to interact only with legitimate Nintendo video game files. This process protects Nintendo’s copyright-protected video games, (…) by preventing users from playing pirated copies of Nintendo’s video games on the Nintendo Switch console and by preventing users from unlawfully copying and playing Nintendo’s video games on unauthorized devices.”

However, while this takedown has effectively wiped out a ton of repositories with mod chip firmware, it seems like it’s still being hosted elsewhere on the site, according to TorrentFreak. It’s possible, though, that Nintendo isn’t finished yet; back in 2024, Nintendo effectively took down 8,500 copies of Yuzu by issuing a takedown that targeted 12 different mirrors of the emulator. This particular takedown also comes a few days after emulators were able to run the remake of The Legend of Zelda: Ocarina of Time on PC, so this could be a sign that Nintendo is winding up its lawyers to crack down on emulation once again.

“Massive Takedown”

By Valgrus Thunderaxe • • Score: 3 • Thread
Four Github sites? That’s not “massive” in my opinion.

Video Game Preservation

By omnichad • • Score: 4, Interesting • Thread

I knew Nintendo was about to do something big again after they announced their own video game preservation initiative. Trying to cover over the other reason emulation exists. I’m no pirate, but I don’t use original hardware for anything but my newest games. It’s way to hard to keep that stuff running - especially modern wireless controllers. A Dualsense controller is a perfect controller for SNES, NES, Playstation, and even Steam. I never owned a Pro controller for the Wii and I can’t easily get one now - so emulation is much more effective.

Things are going to get pretty messed up soon

By rsilvergun • • Score: 4, Interesting • Thread
AI is going to fuck up gaming in so many ways and this is one of them.

Basically you can take a little bit of AI code and somebody else’s project from when they did the hard stuff and combine the two and the AI will take the work that person did for a single project and generalize it so that it can be applied to basically any game in existence.

This means that you get stuff like bloodborne being ported to PC which is harmless enough because it’s an old game but then the code from that can be adopted and patched and updated by AI to the point where script kiddies can make PS5 games run on PC natively…

Whatever else you think about the topic there’s no way Sony and Nintendo and Microsoft can let that slide. Never mind what Adobe is eventually going to do.

The first thing will probably be to do something think of the children bullshit to ban local AI instances. I’m sure they’ll say something about pedophilia or guns or something. And honestly they probably will find some gun toting pedos just like how Ronald Reagan used Willie Horton to win an election. Fun fact the guy’s name isn’t Willie it’s William.

I don’t know what the fuck you do about any of this but we are going to have to figure out some kind of Middle ground between every single console game can be pirated with ease on your PC and none of us were allowed to own hobbyist PCS anymore.

I mean we don’t have to the corporations can just take our toys away. Although the last election shows they’re not 110% in charge of everything. I mean they spent like $2 billion dollars trying to get the Republican party here in America elected and surprisingly that didn’t work. Christ Mississippi elected a black man to the senate for the first time since before reconstruction…

Former Nvidia CEO Jensen Huang Had a Relationship With a Second Employee

Posted by BeauHD • • View on SlashDot • Skip
Reuters reports that former Nvidia CEO Jensen Huang had an intimate relationship with a third woman (source paywalled; alternative source ), an unnamed Nvidia employee. The revelation follows reports of two other extramarital affairs: one with Nvidia VP Kimberly Powell and another with Alice Huang, whom U.S. intelligence reportedly suspects of being a Chinese spy. The latter relationship has also prompted a shareholder lawsuit alleging Nvidia misled investors about its ties to a company suspected of circumventing U.S. chip export restrictions. Jensen Huang has since resigned as Nvidia’s CEO and stepped down from its board on Thursday. CFO Colette Kress has been appointed interim CEO while the company searches for a permanent successor.

Old dad jokes of the sad stripe

By shanen • • Score: 3 • Thread

Time to try again to laugh it off! Who said dupes are bad? (It’s only potentially funny until the stock market overreacts and wipes out lots of smiles.)

So a thinking man goes bald from the front. A great lover goes bald from the top. Jensen Huang is going bald from the front and top because he thinks he’s a great lover.

Two angels are talking:
“Why is gawd in such a foul mood today?”
“He thinks he’s Jensen Huang thinking that he’s Elon Musk.”

Needs an STD joke here as a linkage to the doctor joke… Left as an exercise for the reader, because I don’t know enough about sex, so I have to jump directly to Huang’s visit to the doctor:

“Doc, what does it mean when I have vivid dreams about searching for a urinal?”
“Depends.”

Gimme Funny! Pretty please and all that jizz? [sic]

Then the YOB had to go and top all of my combined best efforts with the brilliant quip about Tim Apple nee Cook taking over at NVIDIA. Terrible fathers make the best = worst dad jokes?

In the words of Peter Griffin

By ArchieBunker • • Score: 3 • Thread

Oh my god who the hell cares.

Re:WTH supplements is this guy on?

By Whateverthisis • • Score: 5, Insightful • Thread
NVIDIA was always a niche player in the market as GPUs were not a major segment.

In 2006, NVIDIA launched a software tool called CUDA. CUDA allows you to network tens of thousands of NVIDIA GPUs together. Wall Street punished them for it; NVIDIA’s stock price was hit; the software was expensive to build and few people bought it, and NVIDIA gave it away to academics in computer science.

Those academics later figured out how to make blockchain. Then cryptocurrency. And then later LLMs. All of these models were built on arrays of NVIDIA GPUs because of CUDA. Those groups built better tools and an ecosystem of software on the back of CUDA.

And because of that bet 20 years ago, a bet that no one understood and penalized NVIDIA for it, NVIDIA is the most valuable company in the world and Jensen Huang moves mountains, until today. 20 years in the making, and Huang was right; his bet paid off big time, when everyone told him he was wrong.

Huang is a jerk for cheating on his wife and it appears tacitly allowing the illegal smuggling of his own technology to a peer adversary; you can’t condone what he’s done. But you can also kind of look at it and understand the catharsis of someone who pushed a vision for 20 years that everyone said was foolish, and not only finding that vision to not just be right, but right in a world-changing way. The high from being validated like that has got to be a stronger drug than Viagra.

Remember:

By Locke2005 • • Score: 5, Funny • Thread
Two Huangs don’t make a right!

Singapore Says US Not Helpful On Investigation Into Suspected Spy’s Company

Posted by BeauHD • • View on SlashDot • Skip
Singapore says U.S. authorities provided limited assistance in its investigation of Megaspeed, the company run by Alice Huang, the Chinese businesswoman whom U.S. intelligence suspects is a Chinese spy and whose relationship with Nvidia CEO Jensen Huang has drawn scrutiny. According to Singapore, authorities held Alice Huang’s passport from June 2025 until February while investigating “potential false declarations,” but ultimately released her with a “stern warning” and barred her from re-entering the country. The New York Times reports:
The statement raises new questions about the response of the Trump administration to the case and why the U.S. government did not more forcefully intervene. According to the timeline in the statement, Singaporean authorities had been holding Ms. Huang’s passport well after President Trump was briefed last fall about her relationship with Nvidia’s chief executive and the belief that she was a Chinese intelligence asset. The New York Times has reported that Taiwan began monitoring Ms. Huang in 2024 at the guidance of the U.S. government.

In its statement, Singapore said that it had sought information from an American server maker and close Nvidia business partner, Supermicro, but that the company had provided “limited cooperation.” Supermicro, a firm that packages Nvidia’s A.I. chips onto servers that can be used in data centers, has been at the center of a number of chip smuggling investigations across the globe. Supermicro was a supplier to Megaspeed, a company incorporated in Singapore and run by Ms. Huang, according to two people with knowledge of the matter.

Singapore said in the statement its authorities raised Supermicro’s “limited cooperation” with the U.S. Department of Justice and Federal Bureau of Investigation in July 2025 and “requested their assistance in securing the company’s cooperation.” “Despite these repeated requests, Singapore has to date received limited information or assistance in respect of the company,” the statement said.

Can’t imagine why

By OverlordQ • • Score: 5, Informative • Thread

Nvidia donated $25M to the Trump Ballroom.

Megaspeed paid up front

By Whateverthisis • • Score: 5, Interesting • Thread
That’s the bottom line.

Some estimates put that 25% of NVIDIA’s revenue was generated by customers that NVIDIA themselves financed, or backed with guarantees. So basically NVIDIA would invest in a new neocloud, who then used the new funds to buy NVIDIA chips. That neocloud then, often public, grows it’s stock price. NVIDIA wins because it gets revenue from the sales as well as growth of the stock, but it uses it’s own dollars to do so who basically come back to it as revenue.

That can come to an end right quick with rapid growth, so NVIDIA would need some customers who paid cash for NVIDIA products. Enter Megaspeed, who went from $75 in assets in 2022, to $33M in 2023, to $3B in cash on hand in 2024. They bought billions of servers from NVIDIA OEMS, who then bought billions of dollars in chips from NVIDIA and paid cash, but not circular financing. By all accounts, the cash came from pre-payments to Megaspeed from Alibaba, who was a guaranteed tenant for Megaspeed’s servers.

Alibaba money went to Megaspeed, who bought billions in chips with new cash, that helped give NVIDIA the cash it needed, who then used it to invest in or guarantee funding to US Neoclouds, who then used that money to buy NVIDIA chips and go public on the stock market. It’s pretty clear why they kept the relationship cozy. And frankly they might have kept it going too, if it was for Jensen Huang’s infidelity.

Microsoft Outlook Goes Down Nationwide [UPDATE]

Posted by BeauHD • • View on SlashDot • Skip
Microsoft is suffering a major Microsoft 365 outage that’s disrupting Outlook, Teams, Copilot and SharePoint for users across the Americas, with more than 129,000 problem reports logged on Downdetector shortly after the disruption began. Microsoft blames the connectivity problems on an unexpectedly large number of unavailable servers that overloaded the remaining infrastructure. The company says it’s redistributing traffic and restarting affected systems. From a report:
Microsoft was not providing an estimated time by which it expects service to return. Both individual Outlook users and those on enterprise accounts experienced problems logging in to the service. The outage also affected other Microsoft services, including Microsoft Teams, the Copilot 365 AI service and SharePoint Online. “Users may be unable to connect to multiple Microsoft 365 services,” the company said on its Service Health Status page.
UPDATE 11/12/26, 19:50 UTC: From Microsoft 365 Status: “We’re testing a configuration change to address a problem that’s causing servers to fail automated health checks and become unavailable. In parallel, we’ve initiated a restart of all affected servers and are monitoring health as they return to service. More info under EX1550543 and MO1550821 in the Microsoft 365 admin center, as well as http://status.cloud.microsoft if the admin center is not available to you.”

UPDATE 11/12/26, 20:19 UTC: From Microsoft 365 Status: “We’ve not identified any recent change correlated with the start of impact; however, our investigation indicates the failed health checks may originate from a specific component that’s responsible for processing server health. We’ve taken steps to prevent additional servers from being impacted while we work to return the affected servers to service. More info under EX1550543 and MO1550821 in the Microsoft 365 admin center, as well as http://status.cloud.microsoft if the admin center is not available to you.

UPDATE 11/12/26, 20:29 UTC: “According to https://downdetector.com/, much of the major services are down,” writes Slashdot reader xocmot2. “AWS, Microsoft, Meta, on and on. Clearly not a Microsoft thing.”

UPDATE 11/12/26, 6:17 UTC: Microsoft is still struggling to resolve the outage, which is confirmed to be global with disruptions reported across 74 countries and territories. The outage has disrupted businesses and government services in countries including Japan, Singapore, India, and Australia, while OpenAI and Anthropic have also reported related problems.

Microsoft says its recovery efforts have produced some improvements, but the fixes are not delivering "sustained recovery.” Microsoft has ruled out a cybersecurity incident, and experts warn that the prolonged disruption could result in significant economic losses.

Developing…

Re:Copilot too…

By Smidge204 • • Score: 5, Funny • Thread

> Copilot isn’t working, either.

Well at least there’s an upside to all this.

=Smidge=

Re:Agent Orange

By Anonymous Coward • • Score: 5, Funny • Thread

i have the biggest outages, bigger than anyones seen before

sysadmin came to be, big man, beautiful ass, beatiful big muscles, he came to me, tears in his eyes and said “sir, ive never seen outages like this before”. true story, good friend of mine.

Countdown 2026

By awwshit • • Score: 5, Funny • Thread

Shit, I lost count.

I think we are at Microsoft 363 now.

Re:Just checked …

By 93 Escort Wagon • • Score: 5, Funny • Thread

No, he relies on emacs for that.

Slashdot is UP!

By rsilvergun • • Score: 5, Funny • Thread
Clearly the internet should move to Slashcode. It was a mistake to use anything else. Screw Unicode!

Google Pushes Privacy Angle As Gemini-Powered Smartglasses Debut

Posted by BeauHD • • View on SlashDot • Skip
Google is launching its first Gemini-powered smart glasses, with Samsung supplying the computing hardware. Given their built-in 12-megapixel camera, Google is emphasizing privacy protections, including a tamper-resistant recording light, automatic face redaction, and restrictions on real-time facial recognition and livestreaming. The company also promises not to use captured photos or videos for AI training or targeted advertising. Ars Technica reports:
Google says the frames all weigh about 41 grams, which is not terrible but is definitely near the top for glasses generally. They will, naturally, weigh much more when you account for lenses. That will also determine the final pricing. So far, we only have the starting prices for these devices, including non-prescription lenses.

The setup here is similar to the Ray-Ban Meta glasses we’ve seen for a few years. There are no screens in the lenses, but you can interact with the AI system via voice or by activating the integrated camera. The experience should be similar to using Gemini Live on your phone, but it will be a lot easier to fire up the AI. You can say “Hey Gemini” or tap a touch-sensitive area of the frame to start interacting with the robot.

Since this is the same chatbot that operates across the Google ecosystem, it has access to your data and preferences. You can ask questions and get personalized answers, have Google Maps guide you by voice, or just talk with the AI to kill time. The glasses use custom open-ear speakers to limit distractions for those around you. Google notes the directional microphones should not pick up speech from other people, either.

Adding the camera feed is where things get interesting. When the AI can see what you see, it has the potential to do more work on your behalf. Google suggests asking Gemini for recommendations when looking at a bookshelf or glancing at an event poster to have the AI add it to your calendar. The glasses will also support Gemini Guided Vision, which provides conversational audio descriptions for people who are visually impaired.
The new frames are available for preorder today starting at $395.

Nope

By RitchCraft • • Score: 3, Informative • Thread

Nope, nope, nope. Don’t care what measures are in place, glassholes are not allowed. Meta and Google have proven to be evil. Their guardrails mean nothing.

Pushing the Privacy Angle?

By crunchy_one • • Score: 3 • Thread
The only way that I can imagine Alphabet pushing the privacy angle is right off the ledge.

Spy Glasses from an Advertising Company

By BrendaEM • • Score: 5, Informative • Thread
Would ever would anyone trust Google?

“Promises”

By gurps_npc • • Score: 5, Insightful • Thread

“promises not to use captured photos or videos for AI training or targeted advertising”

Google’s promise is as valuable as their commitment to ‘not be evil’. On a scale of 1-10, that is a -4

Moreover, note it only promises for those two things. 10 years ago they would not have mentioned AI training cause it wasn’t a thing yet. I wonder what is not a thing yet today but will be in 10 years.

Promise not to use our video for ANYTHING, anything less is not a promise at all.

Re:Nope

By AmiMoJo • • Score: 4, Informative • Thread

I know some people who are really hoping these become available to people with disabilities, because they would be extremely useful. For people with things like face blindness they could recognize people they know. For people with vision problems they could recognize dangers and describe the scene in front of them.

So I think it’s worth asking if they could be made private enough to be acceptable. Obviously it can’t be left in the hands of any tech company, but legislation could maybe work.

Iconic First Image of Black Hole Holds Up To Scrutiny

Posted by BeauHD • • View on SlashDot • Skip
An anonymous reader quotes a report from The Conversation:
On April 10 2019, the Event Horizon Telescope (EHT) Collaboration revealed the first picture of a black hole. The object is at the centre of a galaxy known as M87, about 55 million light-years away. The iconic ring structure instantly became one of the most recognized scientific images of the modern era. It showed a black hole “shadow” outlined by light from swirling hot gas — just as predicted by Einstein’s theory of general relativity. The result supported the long-standing idea that the centers of galaxies house supermassive black holes. However, scientists have since had some disagreements on whether the details and structure of the ring in the original publication were accurate. Our new research, published today in Nature, used new techniques to investigate the original datasets. Not only do our results validate the original work, but they also provide a fresh perspective on the ring structure. Our independent results enhance confidence in one of the most significant modern scientific results. And we bring the image of a black hole millions of light-years away back into focus.

[…] When compared directly to images from the EHT collaboration, our result is consistent in diameter and overall orientation. Naturally, there are some differences in the fine details of ring width and surface brightness along the circumference, but the overall structure matches. This provides a fresh perspective on the iconic black hole ring while also resolving previous discrepancies. To prove this success didn’t depend solely on advanced machine learning, we also developed a complementary imaging method based on traditional statistical techniques. This entirely different method also validated our structure using the new closure invariant data we produced. Overall, our work delivers a strong independent validation of the supermassive black hole structure at the centre of galaxy M87. And it could do more in the future. Our technique could also be useful in other situations where data from multiple sensors are combined to map unknown structures — such as medical imaging or mapping earthquakes.

Re: How you get image of black hole?

By alter-memo • • Score: 4, Informative • Thread

the black hole in the center itself is not visible, but is surrounded by an accretion disc of compressed dust and gas that heats up and shows up in the image.

Critical Apache HTTP/2 Flaw Could Let Unauthenticated Attackers Execute Code Remotely

Posted by BeauHD • • View on SlashDot • Skip
A critical flaw in Apache HTTP Server’s HTTP/2 module could allow unauthenticated attackers to remotely execute code and potentially take control of affected server processes. Tracked as CVE-2026-119618, the vulnerability affects Apache HTTP Server 2.4.55 through 2.4.70 when HTTP/2 is enabled and is fixed in version 2.4.71. The Hacker News reports:
The vendor’s assessment, published yesterday, also says “public research has demonstrated a reliable exploit” against a server in its default configuration with mod_http2 enabled. It does not name or link that research. Security company Wiz said later that day that no exploit was available and that no exploitation in the wild had been reported.

HTTP/2 runs only where the Protocols directive turns it on, as the module documentation explains. The directive uses h2 for HTTP/2 over TLS and h2c for HTTP/2 over plain TCP. It can be set for the whole server or for a single virtual host, so admins should check the server-wide setting and every virtual host.

Standalone builds of the module, released on GitHub as mod_h2, are affected from version 2.0.8 through 2.0.42. Admins who run the Apache HTTP Server project’s own releases should move to version 2.4.71, the fixed release named in its security advisory. That release also fixes a crash in mod_md, rated important, and a one-byte overwrite of stack memory in mod_vhost_alias, rated low.

Today I learned

By Valgrus Thunderaxe • • Score: 3 • Thread
people still use Apache.

Re:Today I learned

By eneville • • Score: 4, Informative • Thread

Generally, LAMP still makes up a lot of the internet, nginx has taken a subset that is internet facing and needs nothing more than routing to an application of some description. However, Apache and mod_rewrite, mod_php, mod_perl etc is still very much alive and kicking.

I wouldn’t say use Apache for everything, unless you need the features you can get from its modules then use something skinny, perhaps removing those modules is all you need, then you’ll eventually have something closer to nginx anyhow :)

Not Enough Information

By Aighearach • • Score: 3 • Thread

It isn’t clear to me that this allows arbitrary remote code execution in otherwise-safe Apache configurations

The bug is
apr_table_setn(req->headers, “Content-Length”, “0”);
And the fix is
apr_table_setn(r->headers_in, “Content-Length”, “0”);
so it is clearly a bug.

But the context is: /* If we have a content-type, but already seen eos, no more
                                  * data will come. Signal a zero content length explicitly.
                                  */

So, until later when we see an actual description of the problem, it doesn’t look to me like it would allow arbitrary execution unless you’re already allowing arbitrary execution and protecting it with some sort of access control. It seems more likely that it could allow execution of protected APIs in situations where they’re running on the same server that also allows direct public connections. That’s a pretty dubious setup to start with.

These days you should always have a thin caching layer in the front anyways, the public internet shouldn’t actually be able to talk to the web server that’s generating the content. So if this bug affects you… Bad sysadmin! No Biscuit!

Also, r is the sanitized/massaged request that’s being built, req is the original request that was passed in. This is an example of something I’d hope to test for: is the data we’re not supposed to change being changed? I guess the, “Change languages every 5 years… for security!” people will snear,” That could have been prevented with a better type system.” Which is true, but here I’d rather have lower overhead and more stable code. This particular function may not need to be changed again in the next 30 years. I’d rather that than have new bugs all the time because things are being rewritten to be “safer.” Better is as here, to rake it over the coals until it’s perfected.

The really good news is that the bug is in http2, not apr.

Jensen Huang Resigns As Nvidia CEO

Posted by BeauHD • • View on SlashDot • Skip
Jensen Huang has stepped down as CEO of Nvidia after 33 years leading the company, with CFO Colette Kress taking over as interim CEO while the board searches for a permanent replacement.

“The Board has full confidence in Colette and the leadership team, and we expect the company’s operations, customer commitments and product roadmap to continue without interruption,” said board chair Harvey Jones in a release announcing the news.

The abrupt departure follows revelations about Huang’s affairs, including one with a woman U.S. intelligence reportedly believes was a Chinese spy. CNBC reports:
Huang, 63, apologized on Sunday for being “unfaithful to my wife,” though he provided no details about the affair with businesswoman Alice Huang, who has worked for a Chinese company and Nvidia customer called Megaspeed. Late Wednesday, The New York Times reported that the Nvidia CEO also had a separate affair, this one with Kimberly Powell, vice president of health care at the chipmaker. Later that afternoon The Times and other outlets reported that Nvidia’s board met to discuss the company’s future.

Jensen Huang denied allegations that he had compromised national security or Nvidia secrets after reports of the Alice Huang affair. The news sparked concerns that Nvidia knew companies based in Singapore and Malaysia had been evading U.S. export controls in accessing its technology. The board said on Tuesday that it had hired Wachtell Lipton to investigate the intelligence allegations.

Re:Pyzondar

By OrangeTide • • Score: 5, Interesting • Thread

He gets to keep his $150B, or at least half of it. I’m sure he is allowed to do as he pleases now that he doesn’t have a company to manage. I found him to be a “hands on” manager when I worked there, but I didn’t realize he was far more hands on with some of his staff. Irritating that I had to do training sessions on export controls and sexual harassment every year when he had been violating company policy, ethics, and potentially the law all this time.

No shortage of RAM for him…

By Flownez • • Score: 5, Funny • Thread
I’ll show myself out.

Re:Pyzondar

By rsilvergun • • Score: 5, Funny • Thread
We do not spill the blood of Kings

Re:Game over

By CubicleZombie • • Score: 5, Insightful • Thread

But for some run of the mill consensual affairs it all seems weirdly puritanical and unnecessary to me.

It’s not a moral question, it’s liability. Shagging an underling can be interpreted as sexual harassment and end in a very expensive lawsuit. Very poor judgement.

Re:This would had never happened…

By methano • • Score: 5, Insightful • Thread
They would have been run into the ground a long time ago.

Tim Peters, Python User #2 and Prolific Contributor, Dies At 74

Posted by BeauHD • • View on SlashDot • Skip
Tim Peters, one of Python’s earliest and most influential contributors, died on July 15 at age 74. Known as Python’s second real user, Peters created the Zen of Python and Timsort sorting algorithm while contributing to numerous core components. He also served as a Python Software Foundation director from 2001 to 2014. Adafruit remembers Peters in a blog post:
He’s best known for the Zen of Python, PEP 20, still printed by typing import this. In 2002, he gave Python Timsort, the sorting algorithm he designed for lists, later adopted by Java and Android. He also polished the cyclic garbage collector and the pymalloc allocator, worked on the dict implementation, the float object, the math module and Karatsuba multiplication in longobject, and wrote the first version of doctest, plus difflib, pickletools and tabnanny.

He was a director of the Python Software Foundation from 2001 to 2014. Before Python, he wrote compilers at Cray Research and speech-to-text software at Dragon Systems. The thread is full of recollections from core developers about his patient, detailed answers on the mailing lists, signed with his trademark .
Python creator Guido van Rossum also paid tribute to Peters in a post on discuss.python.org, writing: “It’s hard to overestimate Tim’s influence on Python. He’s probably best known for writing the Zen of Python (PEP 20), but to me he was a mentor and language co-designer long before that…”

Further discussions can be found on Hacker News and Reddit.

I see that Slashdot

By rossdee • • Score: 3 • Thread

Still has up to date news…

Imported in 1952

By Viol8 • • Score: 5, Insightful • Thread

Yielded in 2026. RIP.

Re:I see that Slashdot

By greytree • • Score: 5, Funny • Thread
He had to be deprecated for 3 months before he could be officially removed.

His remains …

By PPH • • Score: 3 • Thread

… will be cremated. And his ashes distributed throughout all the unused whitespace.

Trademark and Ban

By Grady Martin • • Score: 3 • Thread

Fixed it for you:

… signed with his trademark <wink>.

Poor Tim was banned from the foundation he helped found, for violating its code of conduct with “potentially offensive language”. His public response remains available for now.

What a way to spend the last couple of years of a life.

Power Grids On 5 Continents Pulse Every 60s. Scientists Think They Know Why

Posted by BeauHD • • View on SlashDot • Skip
“ScienceAlert is reporting that researchers may have finally determined why, for many years, power grids around the world have been pulsing every 60 seconds,” writes longtime Slashdot reader fahrbot-bot. The likely culprit? Uninterruptible power supplies running routine battery checks. From the report:
Every minute, some uninterruptible power supplies perform routine battery checks, creating small but measurable surges in electricity demand. And it’s like clockwork. “Even benign control routines can become systemically relevant when many devices act coherently,” writes a team led by physicist Dirk Witthaut of the University of Cologne, Germany, in a paper published in Nature Energy. “Unintended synchronization can generate recurrent and potentially amplified oscillatory behavior in large-scale cyber-physical energy systems.”

To figure it out, Witthaut and his colleagues analyzed high-resolution electricity measurements from buildings at the Forschungszentrum Julich research campus in Germany. [… they found that] the 60-second pattern appeared in four buildings, all of which contained uninterruptible power supplies. None of the buildings they measured without these systems showed the same pattern. Following the electrical signals more closely, the researchers detected tiny bursts of current from the batteries at precisely one-minute intervals. They were able to trace the resulting fluctuations through one building’s electrical system, all the way to the connection with the public high-voltage grid.

The manufacturer subsequently confirmed the culprit’s identity — routine battery self-tests, conducted automatically by the systems’ management software. But why would equipment in different buildings, let alone different countries, be doing this at the same time? The answer appears to lie in the clocks. Digital devices can synchronize their internal clocks using external time signals, meaning that independently operating systems can end up performing their scheduled tasks together. Individually, these small checks are insignificant. But when enough devices act in synchrony, their combined electricity demand can produce a measurable effect across an entire power grid.

Re:Smdh

By fahrbot-bot • • Score: 5, Informative • Thread

The straightforward solution is for the UPS manufacturers to jitter the test time and it becomes a total non-issue.

From TFA:

Fortunately, the solution may be relatively straightforward, at least for big batteries and backup systems. Rather than having thousands of devices perform the same task at the same moment, manufacturers could introduce small variations into their software schedules, preventing the minutely pile-up.

Indeed, they have already contacted the manufacturer of one of the systems they identified, and the company issued a software update that relaxed the strict periodicity of its system checks.

Coherence

By pz • • Score: 5, Interesting • Thread

When I was working for a startup in the early 2000s, we had our own servers. We were growing, so were adding servers at a pretty good clip. After one particular expansion, all of a sudden, Saturday night at 3 am, we blew breaker. No one had a good explanation, but the sysadmins were not happy about needing to go to the office in the middle of the night to fix things up.

A week later, the same thing happened. I suggested that it was the RAID check kickoff that might be doing it. And, indeed, it was. A couple of dozen servers all seeking their drives at once was too much for the circuits they were on. Staggering the startup time fixed it.

Coherence can be good, like when you’re rowing crew, or bad, like when you have dozens of drives all drawing max power. Or, from the summary, gazoober UPS systems doing a battery check.

Blast from the past

By dsgrntlxmply • • Score: 5, Interesting • Thread
In the 70s I wrote embedded asm code for networked terminals. There were around 400 terminals. They checked with a central system every night at midnight for software updates, and at some other interval for clock sync. Unfortunately, there was not much relative drift in the terminal clocks, so the central system began having overload failures at midnight. We ended up putting a request time spreading factor into the terminal’s update request code.

Re: Coherence

By topham • • Score: 5, Informative • Thread

Maximum amperage draw for 1/10th of a second is not usually taken into account, breakers don’t usually blow that fast because of a current spike. (Those numbers are usually not on the specification sheet either.)

The maximum load is calculated over a period of time, not a very short period of time. It is in this fuzzy gap that issues like this arrive.

Lessons from the physical world - 1831 bridge fail

By mccalli • • Score: 5, Informative • Thread
This is eerily similar to the marching soldiers’ bridge collapse - Broughton Bridge in 1831, often misattributed to Napoleon but happened after his reign.

Lessons weren’t learned 180 years later either, for the Milllennium Suspension Bridge, which I happened to work next to at the time and watched the construction and failure unfold. People tend to walk in sync. When things happen in sync, a resonant pattern emerges. It’s true for people crossing bridges. It’s true for people synchronising machines to exact clocks and nice rounded-off times as well.

Sunken SS United States Set To Become World’s Largest Artificial Reef

Posted by BeauHD • • View on SlashDot • Skip
An anonymous reader quotes a report from PBS:
The historic ocean liner SS United States will be intentionally sunk Wednesday off the coast of the Florida panhandle. Live coverage of the sinking of the SS United States is expected to start at 1 p.m. EST, with the sinking expected at 2 p.m. EST. Watch live in the video player above. In its heyday, the SS United States crushed the trans-Atlantic speed record, which it still holds. The luxury ocean liner took only three days to cross from New York to Europe on its maiden voyage in 1952. Carrying presidents and Hollywood stars, the nearly 1,000-foot vessel was a technical marvel of its time. However, the rise of air travel and high operating costs sunk its economic viability, and the ship was pulled from service in 1969. The ocean liner sat at Philadelphia’s Pier 82 for nearly 30 years.

After a contentious back and forth with a pier landlord over rent and docking fees, Okaloosa County in Florida eventually stepped in to purchase the ship and bring it to the Gulf of Mexico to become the world’s largest artificial reef. The multi-million dollar project is also aimed at creating an economic development opportunity as a major diving attraction. “It was our goal to make sure that she wasn’t lost forever,” said David Lawrence, a member of the board for the SS United States Conservancy, the group that sold the vessel to the Florida county.

Like the ship’s unconventional life, it will also have an unconventional sinking. Federal environmental and explosives rules prevent the county from using explosives. Instead, tanks inside the ship have been removed and large holes were cut into the decks. Once the valves are opened, water will flood the hull, sinking the ship. Resting at 180 feet below the surface of the water, the SS United States will join more than 500 artificial reefs in Okaloosa County, which the county relies on to support the underwater ecosystem.

Re:Capsized?

By CaptQuark • • Score: 5, Informative • Thread

Looks like the sinking did not go as planned, and the ship will settle on its side. Probably would have been easier to control if they would have been allowed to use explosives.

Not really. What you saw was the ship taking on water and listing to the side. That has very little influence on how the ship will sink and settle to the bottom.

If you want to see an example of how thinks sink, drop a quarter into a glass bowl and watch it tumble to the bottom. It slides sideways, sometimes tumbles, and sometimes travels sideways a fair distance from where you dropped it into the water.

The main factors that determine how the ship settles on the bottom are the keel shape and the flatness of the bottom. Most of the wrecks sunk in that area are purposely put in vast sandy “deserts” where there are no other rocks or items to attract coral or fish, hence the advantage of putting artificial structures to create a place for fish to congregate and predators to feed.

I’ve made dives on the Duane/Bibb and Eagle in Florida’s Keys and the fish population is wondrous to see. You can see some pictures and descriptions of the sunken ships in the keys here on Quartz and other sites.

Re:Capsized?

By kriston • • Score: 5, Informative • Thread

The insulation was removed decades ago. It’s an empty hulk that had been scraped down to the steel.

Um, Gulf of what PBS?

By fahrbot-bot • • Score: 5, Funny • Thread

Okaloosa County in Florida eventually stepped in to purchase the ship and bring it to the Gulf of Mexico …

Good for you, now let’s re-check your federal funding and access to the White House Press Pool … /s

Re: Capsized?

By ThurstonMoore • • Score: 5, Informative • Thread

Any dive to 180’ is considered a technical dive and beyond standard recreational limits.

The end of a long, and for me, sad vigil…

By golem100 • • Score: 5, Interesting • Thread

I was five when my family travelled on the SS United States from New York to Germany.
I have a whole variety of “Flash Memories”—little blinks of the past: putting on the life vest with my father during the lifeboat drill; watching a Disney film with him in the theater, “Tiko and the Shark”(…it took me years of searching with various phrases to find this movie—I started to look for it when I turned 36, age my Father died); my mother buying Hershey’s chocolate bars at the gift shop, breaking them up by pounding on them and stirring them into warm milk, because I wanted chocolate milk and they did not have any onboard!

My Father died two years later.

For 30 years I watched her age and rust as I drove past her on I-95 heading into Philly.

I am an American citizen who had his 1st view of the Statue of Liberty from the deck of a North Atlantic ocean liner.

I visited her once at the pier. It was in mid January, bitter cold, icy. The Security guard waved me past when he saw my SLR with its 420mm lens. I have an A3 print of one of my exposures on my office wall. The paint curling off of the rusting metal. I remember my Father and I think of the lives: mine, my daughter, my brother, he did not get to see…

United Airlines Bans AI Agents From Booking Flights On Behalf of Travelers

Posted by BeauHD • • View on SlashDot
United Airlines is banning unauthorized third-party AI agents from booking flights, checking in passengers or making account changes on travelers’ behalf. CBS News reports:
To make an airline booking, an AI agent requires access to a customer’s personal information, including credentials like payment information. United has a problem with that, saying that “sharing account credentials with personal, third-party, AI assistants can expose sensitive information, and actions taken by these tools may result in unintended purchases, account changes, or use of MileagePlus miles.”

The carrier also said that using an AI agent to, for example, check in for a flight could violate federal regulations, including rules requiring travelers to verify in person that their luggage does not contain banned substances. “As a result, United is taking steps to restrict access — directly within our digital platforms and indirectly via travel agencies and aggregators — to prohibit use by unauthorized, third-party personal AI agents or assistants,” said the airline, which is updating its booking and ticketing policies to reflect the new rule.
“United is saying they don’t want to add yet another, and potentially even more powerful, intermediary than they already face in terms of Google search, price-comparison metasearch sites and online travel agencies,” said Henry Harteveldt, an aviation analyst at Atmosphere Research Group. “Flight searches cost airlines money, and undoubtedly United wants to avoid the expense associated with the surge of AI bot flight searches.”

An AI search is different from AI ticket purchase

By drnb • • Score: 5, Informative • Thread

You don’t choose random banks every other day and have agents suggesting which bank suits you on any given Tuesday and comparing what time on that Tuesday is the cheapest time to bank.

An AI search is different from an AI ticket purchase. Your AI search process still has a human deciding what to buy and placing the order. What they are banning is an agent deciding and placing the order and making a payment itself, without human involvement.

Horseshit.

By Gravis Zero • • Score: 5, Insightful • Thread

The reason they are doing this is because AI cuts through all their bullshit that is designed to fool humans. Naturally, they have no problem with you using their AI which undoubtedly is instructed to lead people to accept worse options.

AI is stupid but United Airlines is a bunch of hypocrites that is bursting at the seams with malice.

Using AI agents should be an opt-in, not forced

By drnb • • Score: 5, Insightful • Thread

that is precisely an industry that is ripe for automation with AI.

On the search side, yes. With respect to automatically filling in the fields for booking the flight, OK if you opt-in and are responsible for errors. However having an AI make the final decision and payment is something new and different. That’s where the airline may have the right to say no, we do not opt-in for agent based booking and purchase, we require a human to review the transaction and approve it.

Idiots

By gurps_npc • • Score: 5, Insightful • Thread

How stupid do you have to be to give financial permissions to devices known to hallucinate.

Congratulations you have bought $30,000 worth of shares in the Brooklyn Bridge.

Make booking easier then

By DrXym • • Score: 5, Insightful • Thread
I don’t fly much with US carriers but I fly a lot with Ryanair and the booking / checkin process is an obstacle course of dark patterns. Patterns that hide the cheapest option and use scary warnings and confusing layouts to upsell to things people may not want or need. It’s intentionally not simple, it’s excruciating.

So I’d certainly be interested in using an AI driven browser like Perplexity to wade through this garbage, to find the cheapest tickets for my criteria and get me to the booking screen. I would not trust it with my personal details or complete the final purchase but if it saved me time to finding a flight and getting me to that final screen then I’d be all for it.

So here’s a whacky idea for airlines. If the thought that people might use an AI to find best value flights for their needs, then bring it in-house. Allow people to set up an account, and choose to see a streamlined search and ticket purchasing flow. A flow that truthfully finds the best flights that match their criteria and lets them quickly book with their choices prefilled. They can still edit them at the end, e.g. to add bags or whatnot. But knows, perhaps if booking was not an ordeal people might actually like using that airline especially if there is a choice to use another.