Alterslash

the unofficial Slashdot digest
 

Contents

  1. Canonical’s Upcoming AI Tool: Talk to Ubuntu Instead of Typing
  2. New Super PAC Aims to Rally Tech Workers to Help Limit AI: ‘the Guardrails Alliance’
  3. Facial Recognition on Public Buses? Kansas City Says Yes
  4. Polymarket Paid Dozens to Post Videos of Themselves ‘Winning’ With Fake Bets
  5. Gamers Sue PlayStation: It’s Not Clear They’re Selling Licenses Rather Than Ownership of Games
  6. How Millions of Digital Home Devices Are Secretly Powering Cyberattacks
  7. OpenAI Announces Benchmarks for AI Life Sciences Research. Its Best Model Failed 63.9% of the Test
  8. Remembering When Alan Turing Developed a Portable Voice Encryption Device
  9. Tech Pundit Cringely Co-Founds Startup ‘2Brains Inc’ to Solve LLM Hallucinations
  10. Waymo Recalls About 3,900 Robotaxis After Some Drove Into ‘Freeway Construction Zones’
  11. Cellphone Alert System Breached in Brazil, Message Sent in Leetspeak
  12. SMPTE Opens Entire Standards Catalog for Free, Removing Century-Old Paywall
  13. Microsoft Discovers Cryptocurrency Stealer That Spreads Through USB Drives and Uses Tor
  14. FSF Patches Two-Year-Old Vulnerability Found by AI Researchers in GNU Savannah Repository
  15. Student Loan Borrowers Will Get Interest Rate Cut If They Sign Up For Auto Pay

Alterslash picks up to the best 5 comments from each of the day’s Slashdot stories, and presents them on a single page for easy reading.

Canonical’s Upcoming AI Tool: Talk to Ubuntu Instead of Typing

Posted by EditorDavid View on SlashDot Skip
This week the Ubuntu desktop’s director of engineering announced they’re bringing speech-to-text dictation to Ubuntu Desktop, aiming for an experience “that feels like a natural part of the desktop while respecting user privacy and running entirely on local hardware.”

“Speech recognition has become a common feature on modern platforms, and we think it should be a first-class experience on Ubuntu Desktop as well.”

More details from the blog It’s FOSS:
For Ubuntu 26.10, the initial version of Myna is expected to be a desktop dictation tool built around GNOME on Wayland with a push-to-talk mechanism gatekeeping when your microphone accepts input. Using it means holding a hotkey, speaking, and letting go. A small activity indicator shows while it is listening, and the transcribed text lands wherever the cursor was sitting when dictation started.

Recognition itself happens inside a sandboxed component called the Canonical Inference Snap, while a Speech Orchestrator manages the session and an Audio Adapter handles whatever the microphone picks up, denoising and chunking it before it ever reaches the model… Speech recognition will happen locally, and an internet connection is not needed once the appropriate model is installed… The audio data won’t be sticking around either, being stored in a small in-memory buffer that gets discarded the moment the session ends. Features like dictation into password fields, wake words, continuous listening, voice assistants, voice commands, translation, speaker identification, and automatic language detection are all off the table…

You should also know that Canonical is looking for feedback before the specs for Myna are finalized, especially from people who already rely on dictation or assistive tools on Linux.

New Super PAC Aims to Rally Tech Workers to Help Limit AI: ‘the Guardrails Alliance’

Posted by EditorDavid View on SlashDot Skip
“A grassroots movement is forming among everyday tech workers who are demanding their companies develop and deploy AI responsibly,” reports TechCrunch.

Hoping to leverage that discontent is a new super PAC called the Guardrails Alliance. The New York Times reports that it launched Thursday with backers that included tech employees and labor unions:
Guardrails positions itself as a populist political movement that runs on small donations from people in the trenches of the AI boom. The PAC has about $5 million at its disposal today and planGuardrails will buy ads to support Alex Bores, a New York congressional candidate who became Leading the Future’s first target and is running in the primaries next week. s to raise $15 million this cycle — small potatoes compared to deep-pocketed adversaries like Leading the Future, which has more than $100 million from tech leaders like OpenAI president Greg Brockman…

“This is not about matching [Leading the Future] dollar for dollar,” [said the super PAC’s co-founder, political operative Shaunna Thomas]. “What this vehicle is meant to do is be a political home for people who are concerned about the way the anti-regulation AI tech sector is trying to manipulate elections.”
Meanwhile a former Netflix and Warner Bros. executive has launched the Alliance for Responsible Innovation in the Arts & Media, reports Variety, calling it an AI-focused content coalition that says it’s dedicated to supporting “responsible and sustainable AI innovation and the importance of human creativity.”
The initial members of the coalition, announced Monday, include Disney, the New York Times, Adobe, Condé Nast, the Financial Times, ITV, Advance, BBC, Cambridge University Press & Assessment, U.K. publisher Reach and Wiley. Many of the coalition’s members have either struck deals with AI companies or are developing their own AI tools… The group plans to argue for legal and policy guardrails around AI’s usage, with its funding directed towards analyses, tools and services focused on advancing those initiatives…

One of the group’s launch advisers is Damian Collins, OBE, who previously served as the U.K. Parliamentary Under-Secretary of State in the Department for Science, Innovation and Technology under prime ministers Boris Johnson and Liz Truss. “Using AI to break the law can never be an acceptable excuse,” he said in a statement. “Laws around personal safety, intellectual property and financial crime still apply in the age of AI. This is why ARIAM has been created and why I’m proud to working with this necessary initiative.”

Facial Recognition on Public Buses? Kansas City Says Yes

Posted by EditorDavid View on SlashDot Skip
An anonymous reader shared this report from the Associated Press:
Officials in Kansas City, Missouri, are preparing to equip cameras on some public buses with facial recognition software capable of identifying passengers who appear on a list of banned riders or missing persons. Supporters and opponents alike view the effort as a major litmus test for tapping the AI-powered software on a U.S. public transportation system, positioning Kansas City as the latest epicenter of a fierce debate over whether the safety benefits of artificial intelligence are worth the privacy costs.

“The idea of running face recognition on a camera that is pointed on live spaces in public is a line that until recently has never really been crossed in the last 25 years,” said Jay Stanley, senior policy analyst for the Project on Speech, Privacy and Technology at the American Civil Liberties Union. The state of Missouri declined to help fund the project as expected due to concerns with the facial recognition component. Still, the city is pushing ahead with local and federal money, said Tyler Means, chief mobility and strategy officer at the Kansas City Transportation Authority. “Privacy is always a tricky thing,” Means said. “We’ve always had cameras on our buses. It’s just new technology. I think in time it’ll smooth over and people will realize, ‘Well, it didn’t really feel any different’....”

Images captured by cameras aboard the buses would immediately be checked against any active alerts, generated when a missing person, banned rider or someone on a law enforcement watch list designated by the transportation authority is identified… After the buses return to the depot, the transportation authority would archive the regular video footage on a local server for up to five years.
The company partnering with Kansas City to run the cameras “started using live facial recognition years ago to alert nursing homes when residents left the building,” according to the article, and then “brought the technology to correctional institutions and schools.” But this is its first attempt at bringing its cameras onto public transportation.

The article also includes this quote from Will Owen, communications director for the Surveillance Technology Oversight Project. “City residents should not be guinea pigs for transit systems to test Silicon Valley’s latest unproven, biased surveillance tech.”

Re:Major payout when it goes wrong

By NotEmmanuelGoldstein • Score: 5, Interesting Thread

… encourage the software maker …

The UK polices have strict procedures for processing evidence. The US city police not so much: In fact, several cities have already proven their police are more interested in throwing someone in prison than collecting evidence.

The “software maker” isn’t accusing the wrong person of a crime, isn’t failing to seek supporting evidence, isn’t demanding immunity when the lack of supporting evidence is revealed.

Yes, someone should pay and if the burden is on the software maker, then the software maker should demand a cost-plus contract that transfers the fine to the relevant city. Next, $5,000 might do for a week in prison but when US police are enforcing months of imprisonment resulting in the loss of all assets, $5,000 is not enough.

Unjust act

By Pollux • Score: 4, Interesting Thread

I guarantee there isn’t a single city official in Kansas City that rides the city bus. If they did, they would have never voted in favor for this.

Also makes you wonder how many officials are getting kickbacks from SafeSpace Global for this.

Re:Maybe we’re looking at this all wrong

By sound+vision • Score: 4, Insightful Thread

I was contemplating whether or not I would trade facial recognition for bus service, because currently there is no bus service in my city.

I do, however, get facial-recognized by every neighbor’s door when I step outside in the morning, and again continually at work, and again at the store, then by the Flock camera when I go to the park… no bus service to speak of, though.

Polymarket Paid Dozens to Post Videos of Themselves ‘Winning’ With Fake Bets

Posted by EditorDavid View on SlashDot Skip
In January a college student posted a video showing him winning $100,000 on Polymarket — one of 145 that appeared to show bets adding up to almost $410,000, reports the Wall Street Journal. "But none of those bets were real.”

Instead its creator was “one of dozens of mostly college-age creators Polymarket paid to film themselves making fake trades and sometimes scoring fake wins,” the Journal reports, citing interviews with the creators an an analysis of more than 1,100 of their videos:
Polymarket built near-perfect copies of its website, then instructed creators to make simulated trades on those dummy sites and hide that they were being paid by Polymarket. To get the videos to go viral, Polymarket has recruited a social-media army to copy and re-post creators’ footage. Though the New York-based company has been banned from offering its primary crypto platform in the U.S. since 2022, the social-media creators are paid to specifically target U.S. users, who can still access the site with a virtual private network…

Polymarket hired and worked closely with a marketing contractor to promote the site. In a message reviewed by the Journal, that contractor told its social-media army to repost content made by 10 Polymarket creators in particular… These creators didn’t initially identify themselves as paid by Polymarket, although one offered a $20 bonus code in his social-media bio… The company instructed creators not to disclose they are paid, according to creators who have worked with the company. They said the pay often added up to $2,000 to $3,000 a month…

A handful of videos the Journal reviewed also contained short glimpses of URLs indicating the sites were test environments for Polymarket engineers… Creators said they send the finished videos to Polymarket for review. If a video isn’t engaging enough, or if it bears obvious signs of being faked, Polymarket will ask for the videos to be reshot, the creators said… Polymarket sends creators bullet-point guidance on what to say, according to creators who have worked with the company and a recruiting website… Polymarket’s viral clipping campaign racked up more than 140 million views on TikTok, YouTube and Instagram, according to the analytics provider Tubular…

Internal materials show that Polymarket and Virality promote videos showing how easy it is to conduct insider trades on the platform. Polymarket has paid clippers to promote at least 19 videos discussing opportunities to use inside information or other tactics to manipulate markets.
America’s advertising laws “require people who are paid to endorse a product to disclose their ties,” the article notes, “although there is some gray area about what’s permitted.” (After the Journal‘s investigation, the creators started adding "@polymarket partner” to their bios, the article points out._ And when asked for a comment, Polymarket “said it plans to conduct a comprehensive audit of active promotional content.”

Now hold on a second!

By TheMiddleRoad • Score: 3 Thread
Are you telling me that Polymarket is a scam? Shocked. Shocked, I say!

scams will continue until morale improves

By diffract • Score: 3 Thread
I feel sorry for victims of gambling and I totally understand the desire to get rich and beat the fiat system that made everyone poor, but these experiences teach you an expensive lesson to ignore the noise and only invest in hard assets like gold and bitcoin

Re:Now hold on a second!

By Cyberpunk Reality • Score: 5, Funny Thread

At least we can count on the stock market to be honest and based on reality!

Follow the money

By BeaverCleaver • Score: 3 Thread

Who has a massive stake in Polymarket? https://www.cnbc.com/2025/08/2…

Gamers Sue PlayStation: It’s Not Clear They’re Selling Licenses Rather Than Ownership of Games

Posted by EditorDavid View on SlashDot Skip
The gaming news site Aftermath reports:
Four gamers are suing Sony Interactive Entertainment for allegedly breaking a California law that requires digital storefronts selling games to make it clear people are buying licenses, not actually owning the games.

Sony Interactive Entertainment’s PlayStation store uses language like “Buy Now” and “Confirm Purchase,” lawyers wrote in a complaint filed on Thursday… “In reality, consumers who ‘purchase’ digital games through PlayStation do not obtain ownership of those products,” lawyers wrote. “Instead, PlayStation grants only a limited, revocable license to access the software, subject to multiple restrictions contained in a separate Software Product License Agreement”....

[T]he PlayStation store does have a disclosure. Above the “Confirm Purchase” button, there’s a note: “By selecting [Confirm Purchase], you agree to complete the purchase in accordance with the PlayStation Terms of Service before using this content. You further acknowledge that your purchase of this digital product amounts to a license subject to the Software Product License Agreement.” These four gamers aren’t satisfied with that; they said in the complaint that it’s too small, and that “a reasonable customer completing a purchase would not necessarily notice this disclosure.”
“It’s a proposed class action complaint, meaning the group of four gamers is asking a judge to grant them class action status.”

Have you ever been able to buy the software?

By SeaFox • Score: 5, Informative Thread

Even if I go back to the 1990s and boxed retail software, you were never actually buying the software, your purchase was for the license to use it.
The real issue here is the gamers being sold software whose functionality is tied to third-party servers and denied first sale doctrine (the ability to transfer/resell their license if they want to someone else).

Re:Have you ever been able to buy the software?

By dgatwood • Score: 5, Informative Thread

The real issue here is the gamers being sold software whose functionality is tied to third-party servers and denied first sale doctrine (the ability to transfer/resell their license if they want to someone else).

It’s more than just the right of first sale; with software that is licensed via server-side communication, nothing prevents the company from terminating your authorization for any reason, and you have basically no recourse at that point, other than to sue.

There’s a lot wrong with software in the modern era.

Waste of time

By Bahbus • Score: 5, Interesting Thread

And just like all the other similar lawsuits to this, it will won’t get anywhere. Software sales have always worked this way (buying the license) and *online* software sales with server-sided or account-based licensing have always been inherently nontransferable (outside of selling your whole account privately). And Sony’s store has the required legal disclosures. People not bothering to read the text that is plainly in front of them, or not understanding basic software licensing, is their own problem. I would call the lawyers repping these kids (no way they’re older than 30) dumb for attempting this, but they’re probably getting paid either way and thus don’t care.

Re: revocable

By TheDarkMaster • Score: 5, Insightful Thread
You are the only loser here ;)

Actually, let’s correct my comment a bit since you, being a snowflake, couldn’t grasp the “why” of it. I actually used to buy games. But those were games that I still own, and if I want to play them again (even decades later), I can. While the games they currently sell to you they can take them away from you at any time, unilaterally and without warning. You’d have to be an idiot to accept those kinds of terms. So, pirating.

Maybe one of these days they’ll go back to selling games that are actually yours, and then I’ll go back to buying games. But I think it’s unlikely they’ll change their minds.

Re:Have you ever been able to buy the software?

By ambrandt12 • Score: 5, Interesting Thread

Say: I go to the store (whatever store it is), and buy GTA6 for $80 or whatever it’ll cost (haven’t bought a new game since Diablo II expansion was new).
The difference is I buy it (as in, the way we used to buy games, where that physical copy just worked, and once they got to the online activation thing, there was typically a way to activate it off-line) to what we have today (I “buy the game for the physical copy price, but am in fact _renting_ it long-term until such time the company deems the game ‘old enough’ and flips the switch).

If I’m not buying a copy of the game to use for as long as the disc still works (even if it has to be multiple discs), then I am in fact, not _buying_ it… I am merely renting it long term, and when I pay money for it, that should be stated plainly and clearly (and, I don’t want an $80 empty jewel case… couldn’t I just take a slip of paper to the register and fill out a thing at the register (to get the activation code on the receipt or maybe have the receipt contain a code you enter on the website and they send you a letter with the activation code _(and, either one includes the preset game deactivation/shut down date)_.

How Millions of Digital Home Devices Are Secretly Powering Cyberattacks

Posted by EditorDavid View on SlashDot Skip
The Wall Street Journal reports on internet-connected devices — and how every year millions of them “can contain a secret digital backdoor that opens up access to your home internet, so that anyone… can surf the web as if they were you.” (And this is especially true for “knockoffs that you buy online”…)

In a video report this week they tested two digital picture frames from Amazon and three streaming devices from Walmart “because we heard that they often ship with backdoor software used in cyberattacks. Security experts believe manufacturers are being paid to add this malware, but many people also get tricked into downloading the software onto their phones or computers… Within minutes of turning the devices on, there was a surge of internet traffic… Visits to gambling, porn, cryptocurrency and loads of other sketchy web sites started pouring in from users around the world.” (And remote visitors also tried to access Outlook and Gmail accounts…)

Residential proxy companies even rent out access to “tens of millions of home networks around the world,” according to the report. “But the problem is actually worse than that. Hackers figured out a way to seize control of these backdoors, and they started taking over these residential networks. Last month authorities arrested a 23-year-old Ottawa man, saying he’d taken control of more than a million devices to launch some of the largest cyberattacks anyone had ever seen..”

After a couple months the Journal’s reporter collected logs of all the traffic, and sent it to an investigator at Comcast, who said both were conducting DDoS attacks. But estimate for the number of infected devices are as low as tens of millions or as high 500 million-plus. “We’ve seen nation state attacks launched through these kind of endpoints, which means your device sitting in your house is part of a nation state attack against another nation state… We’ve seen ad fraud, we’ve seen ticket scalping, we’ve seen financial fraud.”

But more importantly, “We have seen some of the largest computer attacks — meaning computers attacking other computers at human request — ever recorded in our digital history in the last several months.” At cybersecurity conferences, some are warning “there are much larger ones on the horizon if we don’t get a hold of this problem.”

The company making the picture frame “couldn’t be reached for comment,” while Amazon said it’s been out of stock since last year. Both Amazon and Walmart said they take action when they confirm malware on a third-party product.

IoT SSID

By aaarrrgggh • Score: 5, Informative Thread

Needs to be easier for end users to create IoT VLANs with default restrictions. I am getting to the point where I want to segment my IoT VLAN into different trust zones. Unfortunately there is some crap that has to sit in the “Guest” VLAN (which doesn’t address the concern in TFS), but mostly I try to eliminate such products.

A searchable list?

By Shakes Fist • Score: 5, Insightful Thread
It would be quite useful to have a database to search and find out what devices I own have been shown as guilty.

Re:A searchable list?

By Scutter • Score: 5, Informative Thread

No, it’s easier to just post a fear-mongering article with no real substance. You can’t have people actually *knowing* what tech is compromised or anything.

Wishful thinking

By spaceman375 • Score: 5, Interesting Thread

I periodically go thru my network and enumerate every single device. Things like a picture frame do not get internet access. If a smart plug or light or other IoT device needs net, I won’t buy it. My TVs don’t get internet; they are either on a roku or a linux computer. Connected TVs send “home” screen shots. Roku can only scrape what I watch thru them, so no need to take a screen shot anyway. I had an amazon firetv cube with a third party network dongle to get better bandwidth than wifi. The dongle kept connecting to chinese IPs, even when the TV was off for days. That’s when I started locking things down. That dongle went in the trash.
If only more people were so nerdily inclined, this would be less of a problem. I wish.

Re:IoT SSID

By lsllll • Score: 4, Informative Thread

Despite having OpnSense as my router and a managed switch, for some reason I never considered separating things on my local LAN subnet until I was working on a remote backup PBS server I was going to put in my daughter’s home and wanted it to by default VPN into my home, but I didn’t want it to end up on my home subnet. Out came a separate subnet for a DMZ with no access to anything except me being able to access it. Once I did that, I ended up setting a guest WiFi VLAN, a second VPN subnet for remote access instead of SSH, and a separate VLAN for stuff like Roku which don’t do anything but access the internet.

To be honest, doing the whole thing was somewhat easier than I thought, but nowhere near what a casual, non-technical user would be able to do. The problem is that without an actual VLAN implementation, a “guest” SSID is not ironclad. It just takes more equipment and more know-how to separate things for casual users.

OpenAI Announces Benchmarks for AI Life Sciences Research. Its Best Model Failed 63.9% of the Test

Posted by EditorDavid View on SlashDot Skip
This week OpenAI announced a 750-task test to to measure “whether AI systems can support realistic life science research tasks, not just answer biology questions.”

But while OpenAI’s top-performing GPT-Rosalind model led the rankings, Slashdot reader BrianFagioli notes that “it achieved a pass rate of just 36.1 percent, failing nearly two-thirds of benchmark tasks.” Nerds.xyz points out that means “the best-performing model failed nearly two-thirds of the benchmark’s tasks.”
The benchmark also revealed a familiar weakness. AI systems generally perform better when everything is presented as text. Once they are forced to work with supporting documents, figures, or complex datasets, performance drops noticeably. GPT-Rosalind’s pass rate fell from 45.1 percent on text-only tasks to 28.1 percent on tasks involving artifacts or URLs.

To be fair, the benchmark is not intended to suggest AI is useless in research. Quite the opposite. OpenAI found that models are becoming increasingly capable of scientific communication, evidence synthesis, and translating research findings into practical explanations. Those are valuable skills, particularly for researchers drowning in information. But LifeSciBench serves as a useful reminder that today’s AI systems are still far from autonomous scientists. They can help. They can assist. They can sometimes provide surprisingly useful insights. What they cannot reliably do, however, is replace the expertise, judgment, and skepticism that real scientific research requires.

Stupid headline and stupid statistics

By subreality • Score: 5, Insightful Thread

36.1% pass would be worrying if this was a qualification test of things it needs to be able to do. It’s not. This is a benchmark, and it SHOULD have a low pass rate. That’s how you know if you’re making improvements.

We could quite easily create a different benchmark where it passes 99.9%. That wouldn’t mean the device being tested is good. It would just mean we have a useless benchmark.

I have no opinion on whether AI is good or bad for this use case. I just hate when statistics are used to mislead people.

How does it compare to a human?

By SubmergedInTech • Score: 5, Interesting Thread

For example, a new grad with a BS in Biology? Or a mid-career researcher?

And with what time limits? Is the amount of work in this benchmark something that would take the human a day? A week? A month?

I’d also like to know how quickly a new grad or mid-career researcher can identify which things the AI got right? For example, day it’s asked a week’s worth of work and gets 36% right = 14 hours. If it takes the human 10 hours to figure that out, it’s a win. If it takes the human 20 hours to figure it out, it’s not.

And how well could the human figure out ahead of time which things it thought the AI would get right? If the human only asks that subset, then the payoff is better. Say the human only asks the AI to do 20% of the tasks (8 hours of work), but now it takes 20% of the time to grade (so instead of 20 hours, it takes 4 hours). Now it’s a win again.

Without knowing these things, it’s like saying, “AI sucks at playing golf!” Without saying whether it’s having trouble with 400-yard drives or just getting the ball into the windmill before the ramp goes up.

Remembering When Alan Turing Developed a Portable Voice Encryption Device

Posted by EditorDavid View on SlashDot Skip
Long-time Slashdot reader smooth wombat writes:
Alan Turing, one of the more famous people who worked at Bletchley Park to decipher the German Enigma coding machine, was also working on a separate project. His private papers, known as the Bayley papers for his assistant Donald Bayley who held onto the papers until his death in 2020, reveal Turning had produced a working model of a portable voice encryption device. He even demonstrated it by using a Winston Churchill speech recording.

“Weighing just 39 kg, including its power pack,” Jack Copeland wrote in an article for IEEE Spectrum, “Delilah would be at home in a truck, a trench, or a large backpack.”
More from Popular Mechanics:
Turing’s work at Bletchley Park actually informed the Delilah experimentation he was doing at Hanslope Park, and not just because he used Red Forms, the Army-issue sheets Hanslope staffers were meant to use to alert Bletchley staffers to enemy signals, as his personal scrap paper for Delilah experiments. He drew inspiration from one of the German cipher machines they had decoded at Bletchley; not the famed Enigma machine, but rather the SZ42. While the former relied on Morse Code, the latter utilized a 5-bit telegraph code, which Copeland notes âoewas a forerunner of ASCII and Unicode and is still used by some ham radio operators.â The SZ42 produced an obscuring key of telegraph characters, with an identical key produced to both the sender and receiver. If it could be done for text, Turing reasoned it could be done for sound as well…

[T]he reason Delilah fell to the wayside of history isn’t because it was a failure, but rather because it simply wasn’t needed anymore. By the time Turing had built and demonstrated his device, the war was over. What good was a portable voice encryptor if you had no major enemies trying to intercept your calls, the government reasoned. So funding for the project stopped, and Turing’s two-year experiment ended with a whimper. Turing’s time as an electrical engineer at Hanslope Park became a footnote in his story, if even that.

More AI garbage or just bad writing?

By HotNeedleOfInquiry • Score: 3 Thread

“Today, there is intense interest in the use of multivibrators in cryptography. Turing’s key generator, the most original part of Delilah, contained eight multivibrator circuits, along with the five-wheel assembly mentioned previously. In effect the multivibrators were eight more very complicated “wheels,” and there was additional circuitry for enhancing the random appearance of the numbers the multivibrators produced.”

DELILAH - now rebuilt

By AndyCater • Score: 5, Informative Thread

https://hmgcc.gov.uk/our-story - has details of Alan Turing’s work on this and pictures of the rebuild.

Tech Pundit Cringely Co-Founds Startup ‘2Brains Inc’ to Solve LLM Hallucinations

Posted by EditorDavid View on SlashDot Skip
Long-time tech pundit Robert Cringely started his career at the Stanford Artificial Intelligence Lab back in 1978. Last month 73-year-old Cringely explained why his site went on a two-year hiatus — and it’s not just because of a heart attack and a stroke last July:
Just like everyone else, I’ve been busy all this time on Artificial Intelligence, founding with two partners a company called 2Brains… The work we were doing together is unfinished, but it’s not stopped. The patents are filed, the architecture is documented, and the small team continuing the work includes me.
Cringely’s first piece made the cast that “the trillion-dollar bet the AI industry is making right now may be wrong, and that there’s an architectural alternative we’ve patented and built.”
In Machines of Loving Grace, Amodei made the case that scaling compute would eventually solve essentially every hard problem in artificial intelligence. Buried in that optimism — or maybe not buried, maybe right out in the open — was a quiet absolution. Hallucinations, the embarrassing tendency of these systems to state falsehoods with total confidence, would take care of themselves. Make the models big enough, train them long enough, and the problem dissolves. You don’t have to solve it. You just have to wait, and spend. And so the entire AI industry breathed a sigh of relief.

I have spent forty years watching this industry, and I know a permission slip when I see one.

Because that is what the essay became, whatever Amodei intended. It gave every other person writing nine- and ten-figure checks a reason not to worry about the one thing that should worry them most. The hallucination problem is the difference between a clever toy and a system a hospital or a bank or a court can actually rely on. It is the whole ballgame for enterprise AI. And the prevailing wisdom, blessed from the top, is that you needn’t address it directly. Scale will provide…

A small company I helped start, 2Brains Inc., set out in 2022 to solve hallucinations — before ChatGPT, before the scaling consensus hardened into received truth, back when the polite assumption was that the problem was simply insurmountable. We did not solve it by waiting for bigger models. We solved it architecturally, by separating the part of the system that generates language from the part that retrieves and verifies facts, and reconciling the two before anything reaches the user. It runs on ordinary processors. It is cheap. And on the industry’s own benchmark for this kind of faithfulness, it more than doubles the published baseline, with no fabricated facts in the verified case at all.
The article asks whether scaling will, at tremendous cost, eventually reduce hallucinations — or even worse, if the largest companies in the world “are spending a fortune chasing a cure that is not coming.”

And last week Cringely pitched more advantages for their solution, noting that most prompts aren’t even chatbot-level creative prompts — but just requests to retrieve simple data:
The reason 2Brains doesn’t lie and the reason it’s cheap are the same reason. It looks the fact up instead of guessing it — so it cannot fabricate, and the lookup runs on a processor that sips power instead of a chip that gulps it. Trust and thrift are not a trade-off you balance against each other. They fall out of a single design decision. You do not pay extra for the honest version. The honest version is the cheap version. That sentence is the whole company.

Isn’t Robert X. Cringely a pseudonym?

By marcle • Score: 3 Thread

I don’t have the exact link, but I remember reading that more than one person wrote the column under that name

Ya, but … not sure two is better than one.

By fahrbot-bot • Score: 5, Interesting Thread

Co-Founds Startup ‘2Brains Inc’ to Solve LLM Hallucinations

Makes me think of that saying, “A man with one watch knows the time, a man with two is never sure.”

Re:Isn’t Robert X. Cringely a pseudonym?

By Mspangler • Score: 5, Interesting Thread

That’s what I remember too. There was a real Cringely at first, but somehow he ended up signing away his name in the context of the column and then it was done by the magazine staff. (memo: read the fine print)

I ran headlong into what we now call hallucinations in 1996 working on my Ph.D. on process control using neural networks. I decided it wasn’t going work for real-word real-time control (and the committee agreed). I’ve been very amused by this whole AI rush.

As the saying goes, “It’s human to err, but it takes a computer to really screw things up.”

Re: Isn’t Robert X. Cringely a pseudonym?

By Mspangler • Score: 5, Informative Thread

https://www.wesh.com/article/w…

That was easily refuted.

Re:Yeah.....

By dfghjk • Score: 4, Interesting Thread

You don’t know what the alleged patents are, or whether they are granted rather than just filed. If “everyone already does this”, where this is what is claimed in the patent, then there will be documentation. If there is documentation, the patent will not be granted. It’s not magic.

Waymo Recalls About 3,900 Robotaxis After Some Drove Into ‘Freeway Construction Zones’

Posted by EditorDavid View on SlashDot Skip
CNBC reports:
Waymo is recalling almost 3,900 robotaxis in the U.S. to fix software issues after some cars drove into freeway construction zones, according to notices filed with the National Highway Traffic Safety Administration. The voluntary recall, the Alphabet-owned company’s second in just over a month, followed 13 known incidents where Waymo robotaxis drove into construction zones on freeways in Phoenix, or entered freeway lanes with active construction in the San Francisco area, the filings published Thursday said… A letter posted to the regulator’s website… noted that, “Driving through a closed construction zone increases the risk of a crash…”

[Waymo said in a statement emailed to CNBC] “We voluntarily restricted freeway operations last month while making improvements, proactively notified state and federal regulators, and decided to file a voluntary software recall with NHTSA. We continue to safely serve riders on surface streets in all the cities where we operate....”

The company implemented another voluntary recall in May after some of its robotaxis had driven into flooded zones or standing water. The NHTSA Safety Board also initiated a probe of Waymo after a January incident in which a robotaxi illegally passed a stopped school bus.

who will do hard time hitting a worker can be char

By Joe_Dragon • Score: 4, Interesting Thread

who will do hard time hitting a worker can be charged as a felony under the state’s “endangerment of a highway worker” or “aggravated endangerment of a highway worker”

Recall to base via construction zones?

By 4wdloop • Score: 4, Funny Thread

So some will crash in construction zones in the process of recalling them?

The standard pro self-driving argument

By ZombieCatInABox • Score: 4, Interesting Thread

Whenever self-driving cars are criticized, the standard argument served by the defenders is almost always “Yeah but self-driving cars today already drive better than the average human driver”, which, to a certain point, might very well be true.

But this argument falls flat under scrutiny. See, like most things concerning humans, the quality of human drivers follows a bell curve; There are a few superb drivers, a few shitty drivers, and most drivers are average. But with self-driving cars, all vehicules drive exactly the same way, since they all have the same software. If one of them zooms past a school bus with its stop signals on, they all do. So, for example, if self-driving cars today drive 10% better than the average driver, this also means that they all drive worse than 40% of human drivers out there.

To be clear: I’m all in favor of self-driving cars, even though I’m among those who criticize them regularly. I’ve been dreaming of self driving cars since I was a child, and as I’m getting older, I would hope that self-driving cars would allow me to keep my autonomy as my eyesight is getting weaker and my reflexes slower. What I’m saying is that the current approch for self-driving cars is the wrong approch, and the solution is not more sensors, 5G network everywhere, etc. Furthermore, I considers these vehicules, in their current state to be too dangerous to be on public roads.

But I’m sure the usual binary-thinking simpletons will simply put me in their little “against” box anyway, just like they do when I criticize the current technology of nuclear reactors, so who am I kidding.

Did they cut back on the number of operators?

By rsilvergun • Score: 4, Insightful Thread
We found out in a congressional hearing that the dirty Little secret of Google is that their self-driving cars are actually just remote controlled cars that occasionally use some fancy Lane assist features. But when anything needs to be done that’s even slightly complicated it’s a human being in the Philippines driving the car.

I don’t want the damn things on my road not that it matters. There is so much money involved I don’t get a say and neither do you. So I’ve got remote control cars being piloted by people in foreign countries over high latency internet connections and I just got a kind of accept that that’s a thing I need to worry about now.

Cellphone Alert System Breached in Brazil, Message Sent in Leetspeak

Posted by EditorDavid View on SlashDot Skip
CNN reports:
An unauthorized alert bearing a mysterious message that was sent to cell phones in several states across Brazil on Saturday morning is suspected to be the work of hackers, the Brazilian government said. Devices lit up with the word “misantropi4,” an alphanumeric spelling of the Portuguese word “misantropia,” which in English translates to “misanthropy”. The final letter “a” was substituted with a number ‘4’ — a practice often used by hackers and termed “leetspeak.”. The alert — categorized as “extreme” — was initially received in the southern state of Paraná, but a second warning was triggered a few minutes later for cell phones in the major cities of São Paulo and Rio de Janeiro. Brazilian authorities said that the National Civil Defense’s warning platform was taken offline after being targeted by a likely hacker attack, and the government is working to restore the tool once all security conditions are reestablished.

Everywhere around the world…

By ffkom • Score: 4 Thread
… thousands of Crypto-Bros were endlessly disappointed to learn this opportunity was missed to advertise some Meme-Coin.

Obligatory leetspeak wiki article for youngsters

By echo123 • Score: 3 Thread

https://en.wikipedia.org/wiki/…

SMPTE Opens Entire Standards Catalog for Free, Removing Century-Old Paywall

Posted by EditorDavid View on SlashDot Skip
The Society of Motion Picture and Television Engineers has published over 800 technical standards over the years (as a professional association for the media and entertainment industry).

But this week SMPTE "announced that its complete Standards catalog, the technical backbone behind everything from SDI and timecode to IP-based broadcast workflows, is now freely available to anyone in the global media technology community,” reports the filmmaking news site CineD, arguing it’s “one of the more meaningful structural shifts we have seen from a standards body in years” that could “reshape how smaller developers and educators engage with professional media technology.”
The move covers all published Standards, Recommended Practices, Engineering Guidelines and Registered Disclosure Documents, plus every future release, ending a long-standing model in which individual documents often sold for well over $100 each. For more than a century, SMPTE Standards have quietly governed how images and sound move through the production chain. If you have ever recorded timecode in the HH:MM:SS:FF format, routed a signal over 3G-SDI, or built a facility around the ST 2110 suite for media over IP, you have relied on SMPTE specifications, whether you knew it or not… Until now, accessing the actual text of those documents usually meant paying per file, a barrier that this announcement removes entirely… The latest releases are available through the Recently Published Documents page on the SMPTE website, with the complete archive reachable through the SMPTE Standards Library

There is also a practical, behind-the-scenes story here. The open-access move is part of a broader modernization of how SMPTE develops and publishes Standards. Recent initiatives include adopting GitHub-based workflows for version control, issue tracking and automation, transitioning to structured HTML-based authoring, and implementing an integrated publishing pipeline that streamlines document creation, review, validation and release… The most consequential beneficiaries are arguably not the large members already inside the system, but the developers, integrators, educators and manufacturers who previously worked around the paywall… The practical upshot is that developers and emerging markets can build from accurate primary specifications rather than secondhand sources, which matters enormously when a single misread tolerance or metadata field can break compatibility down the line.

This also fits a wider pattern of the industry moving toward openness. We have previously covered moments like GoPro’s decision to make its CineForm codec open source and release the SDK, a codec that SMPTE itself standardized in 2015 as an open standard for acquisition and post production. Lowering the cost of knowledge tends to widen the pool of people who can contribute to it, and a freely readable standards library is a significant step in that direction for an organization that has historically sat behind a per-document fee.
“This was a decision we did not make lightly,” says SMPTE President Rich Welsh. But “For 110 years, SMPTE has evolved alongside the media technology industry, helping to drive change and innovation — and we’re not stopping now.”
“Our industry is confronting transformative shifts, from IP-based workflows to AI authenticity and content provenance, and we find ourselves at another inflection point. We listened to our Members, Partners and the global Standards community, and the answer was clear: Interoperability is essential to the future of media. Now is the time to open the gates and ensure the next generation of media technology is built on a stronger, more accessible foundation.”
Thanks to innocent_white_lamb (Slashdot reader #151,825) for sharing the news.

Translation: AI publishes our material anyway

By ffkom • Score: 5, Interesting Thread
Given that people can just ask their favorite LLM for any part of those standard documents and get a more or less verbatim copy, they probably realized their Paywall became useless anyway.

And in this particular one case, I for one welcome the blatant stealing the LLM training companies did, as such standards belong in the public domain anyway.

At last - but probable done to keep relevance

By FeelGood314 • Score: 3 Thread
I always hated having to buy 4 different standards each referencing the next about some requirement for my key pad that I must have, only to find buried in the 4 document that my correction button had to be yellow. I generally avoided any standard that required payment to implement, even if the standard claimed to be open (looking at you Connected Standards Alliance).

The more general problem for society is allowing existing groups to govern who can join or practice in their field. Hair stylists should not be able to restrict who is able to cut hair. Doctors should not be policing themselves. A Law society, run by lawyers, definitely shouldn’t be the ones you have to complain to about a problem lawyer. Here is a good libertarian take on it: https://reason.com/2022/03/21/…

Microsoft Discovers Cryptocurrency Stealer That Spreads Through USB Drives and Uses Tor

Posted by EditorDavid View on SlashDot Skip
Ars Technica‘s senior security editor reports:
Microsoft says it has detected new self-propagating malware that spreads through USB drives in search of cryptocurrency credentials, which it then sends to attacker-controlled servers.

The company named the worm Crypto Clipper because it monitors the contents of device clipboards for patterns consistent with wallet addresses or seed phrases. When found, the malware also takes five screenshots over a 10-second period… “The execution of this clipper is notable because it does not depend on a traditional installer or exposed IP-based C2 infrastructure,” Microsoft said Thursday. “Instead, it deploys a portable Tor client, routes traffic through a local SOCKS5 proxy, and blends data theft with remote code execution, turning a financially motivated stealer into a lightweight backdoor.”

Microsoft said it observed Crypto Clipper spreading through .lnk file on a USB drive. These files store executable code. When an infected USB drive is plugged into a device, the code checks whether it is already installed on the machine. If it isn’t, the malware downloads it through the Tor proxy. To better conceal evidence of the worm, the malware scans the infected USB drive and names the .lnk files with similar names… The stealer also replaces addresses it finds with ones belonging to attacker-controlled wallets. This allows the malware to divert payments to the attacker’s pockets. Microsoft believes the purpose of the screenshots is to provide context that may be useful. “This malware family shows how lightweight, script-based stealers can deliver outsized impact when paired with anonymized communications and runtime tasking,” Microsoft said. “The combination of Tor-routed C2, clipboard targeting, screenshot capture, and remote code execution gives attackers both immediate monetization paths and continued control over compromised devices.”
Thanks to Slashdot reader joshuark for sharing the news.

Bright idea, that…

By jddj • Score: 3 Thread

To run whatever code you find on a USB drive.

FSF Patches Two-Year-Old Vulnerability Found by AI Researchers in GNU Savannah Repository

Posted by EditorDavid View on SlashDot Skip
The Free Software Foundation’s GNU Savannah hosts thousands of free software projects — both GNU and non-GNU projects, including Drupal.

But in early May, security researchers from Hacktron.AI reported vulnerabilities and demonstrated an exploit, according to a new statement Friday from the FSF:
We have been working with these researchers since their initial report, and have also addressed additional security issues they submitted. All reported issues have been patched thanks to the hard work of GNU and FSF volunteers, as well as FSF staff. After thorough review, we have found no reason to believe that sensitive project data or credentials were accessed, nor that there has been any compromise of Savannah’s software supply chain.

Nevertheless, we take the security of the GNU system, the tools which make it possible, and the projects we host very seriously. This body of software has become essential to millions (if not billions) of users around the world. We are therefore taking additional precautionary steps. Though the initial security issue was reported to us in early May, the vulnerabilities were discovered in software that was published approximately two years prior. We will be communicating directly with Savannah-hosted projects about steps they can take to review and strengthen the security of their projects.

We have also communicated with the other Savane instances we’re aware of to assist their review of their own environments, and take any steps needed to help protect their users… This statement is intended as an initial notice. We expect to publish a report on the incident within 30 days.
Hacktron.AI bills itself as “Your AI teammate for security.” Its web page notes that its investors include Meta, DeepMind, and Perplexity.

Doesn’t surprise me it took this long…

By Excelcia • Score: 5, Interesting Thread

Savannah likes to advertise its thousands of projects and call itself an incubator. I have a small open source project I wanted to move off of Github a couple years ago, and the pain I went through to try and get hosting there was immeasurable. The arrogance they displayed, like they were God’s gift to hosting. And the “advertising” requirements they had. Not just the project licensing, which I can understand them wanting to be GPL and which I had no problems with. But the wording in the documentation, needing it to talk up GNU. The changes I had to make in actual functionality too were not insignificant. And the sheer arrogance with which they made these demands. Not all at once in a list. One. By. One. Always in a “Ya, your reply to our last request wasn’t good enough… because what about this?” way.

I kept the whole painful email exchange in a separate email folder just in case I ever get tempted to go back. I ended up going with Codeberg, which was simple, easy, and very philosophically compatible.

So it doesn’t surprise me they have unpatched problems. Savannah itself is ancient and primitive. The kind of thing a couple hackers whip up in a day which suits them so doesn’t need polish. They are far too interested in resting on decades-old laurels than in actually doing good work today.

How long before GNU realizes that its entire code base has been static so long that it’s irrelevant and that “GNU/Linux” just isn’t a think because there is very little left that hasn’t been replaced.

Student Loan Borrowers Will Get Interest Rate Cut If They Sign Up For Auto Pay

Posted by BeauHD View on SlashDot
An anonymous reader quotes a report from NPR:
Student loan borrowers who enroll in automatic payments will get a much bigger discount on interest starting July 1, the U.S. Department of Education says. Auto pay has long offered a modest discount off borrowers’ interest rate — .25 percentage points — but after millions of borrowers opted out during the long COVID repayment pause, with some making no payments for years, the nation’s student debt portfolio swelled to $1.7 trillion. On Thursday, the department said it will temporarily increase its auto pay interest rate discount to one full percentage point. Practically, that means an undergraduate borrower with a loan at the current 6.39% would see their interest rate drop temporarily to 5.39%. The rate cut will last for two years, from July 1, 2026 through June 30, 2028. Borrowers already enrolled in auto pay do not need to act. They will automatically receive the rate cut. […] The department says borrowers will have until Sept. 30 to sign up for auto pay and qualify for the two-year interest discount.

Re:Cool Cool

By ClickOnThis • Score: 5, Insightful Thread

Can we talk about the fact that these loans are at 6.39% when the 30 Yr. bond rate is only 4.9% and the 10 year is 4.45%?

Sure, let’s. Student loans have a higher-than-market rate because there is increased risk to the lenders. The lender can’t repossess a college degree to make themselves whole.

That said, I think the real discussion is why students need to go into debt in the first place. Many other countries besides the USA have lower tuitions and lower per-student debts. Why? Government support for education.

Re:Cool Cool

By belg4mit • Score: 5, Informative Thread

No. Federal loans are not readily dispatchable, are supposed to be an investment in the future of the country, and still Congress sets the rate stupidly high.

Re:Cool Cool

By bill_mcgonigle • Score: 5, Insightful Thread

> The lender can’t repossess a college degree to make themselves whole.

No but if the borrower can’t get a good job there should be cause of action for Warranty Act claims against the college.

Extremely few people go to college with the expectation of borrowing to be unemployable.

Re:Cool Cool

By markdavis • Score: 5, Insightful Thread

>“No but if the borrower can’t get a good job there should be cause of action for Warranty Act claims against the college. Extremely few people go to college with the expectation of borrowing to be unemployable. "

THIS

The colleges/universities should be held at least partially financially responsible for loan-enrolling so many people who probably are not ready or suitable for college (or at least THAT college) and are destined to either pick a useless major, or drop out. The colleges currently have ZERO risk, and their behavior and spending/pricing exactly matches that reality.

Re:Cool Cool

By ArchieBunker • Score: 5, Insightful Thread

Trump could waive student debt and the republicans would stand up with tears in the eyes yelling bravo sir! Biden tried it and was immediately stopped by the courts.