In a win for digital rights, a federal judge has issued a preliminary injunction blocking Utah’s SB 73, the state’s draconian anti-VPN age verification law… Signed into law earlier this year, SB 73 attempted to regulate adult websites by requiring them to block VPN users or to identify the physical location of visitors using them or similar tools that mask their network traffic. It even went so far as to prohibit websites from offering instructions on how to use a VPN to bypass these checks. This made Utah, to EFF’s knowledge, the first state in the nation to target the use of VPNs to avoid legally mandated age-verification gates. The Utah federal court halted enforcement of the law’s VPN provisions last week, ruling that the law likely violates the U.S. Constitution’s prohibition on passing laws that significantly burden businesses and people outside Utah’s borders.

SB 73 burdens the rights of all internet users outside of Utah because it requires adult websites to either know every visiting user’s physical location, and then block those in Utah, or to verify every visitor’s age just in case they might be in Utah. The law’s “actual-location provision in practice requires an entity to perform age verification services for every user visiting its site from any location because the entity would violate the law if even one of those users happened to be obfuscating,” the court wrote. The court essentially ruled that Utah has less-burdensome ways to prevent Utah minors from accessing adult websites than requiring all users in the world to comply with SB 73.

Every site-blocking bill has the same rotten idea at their core: That enforcing copyrights requires building a censorship machine for websites into the architecture of the internet. This is, of course, a disaster for a free and open web. These proposals keep coming, but there is still no way to create a mechanism for blocking access to an entire website that does not invite both deliberate abuse and lots of collateral harm to free and lawful speech.

After promising not to comply with the Trump administration’s “Lake America” gimmick, the platform announced a new “Surveillance Layer” that displays the locations of automated license plate readers (ALPRs), including those from Flock Safety. Per MapQuest, its new tool will identify the locations of known outdoor surveillance cameras and plate readers from Motorola Solutions (Vigilant), Genetec, Axis Communications, Axon, Leonardo (ELSAG), Neology, Rekor, PlateSmart, Ubicquia, Verkada, and others.

While the company didn’t specify how it sources its data, it appears to be similar to the data amassed by DeFlock, which maintains a user-submitted map of ALPR camera locations. MapQuest may be sourcing the information from DeFlock and the OpenStreetMap project.

A $330 million expansion to its Rocket Park campus in Cape Canaveral, expected to be complete in the summer of 2027, will enable it to produce up to 150 upper stages of its New Glenn rocket annually, Blue Origin said in a blog post. “These investments are centered on one goal: building the capacity to support more missions, more reliably, and more efficiently,” Ian Richardson, Blue Origin’s senior vice president of operations, wrote in the post. “As we look ahead, this infrastructure is designed to support multiple flights per week by the end of the decade....”

Blue Origin said it’s building a new customer integration facility with the U.S. Space Force at Cape Canaveral Space Force Station that will enable it to “prepare multiple missions at once” when it’s up and running. Blue Origin has invested more than $3 billion in its infrastructure and facilities in Florida, which now spans more than 20 sites across the state’s Brevard and Orange counties, with more than 5,000 employees, [Ian Richardson, Blue Origin’s senior vice president of operations, wrote in the blog post].

The first part of this story comes via a message sent to the Linux mailing list. It announces one of the major changes decided during the Maintainers Summit on October 8, 2026, in Prague, Czechia, where submissions to the kernel no longer need to use the “Assisted-by” tag… meaning that people can submit AI-generated code without needing to declare it as such.

In some correspondence regarding concern about this new disclosure removal, the creator of Linux, Linus Torvalds, made his thoughts known… [Torvalds] compares an AI ban to getting rid of text editors, as doing so would prove that someone could write a good commit message without making any mistakes. He then rounds off his argument by asking, “Do you not see how UTTERLY STUPID those kinds of rules would be?” and stating that he simply expects the people working on the Linux kernel to “understand what they are doing.”

The development branch purports to fix an old issue with massive cache contention when many CPUs are reading the same file — a scenario potentially encountered when using shared libraries, databases, and web servers. Several developers had already made attempts over the years at fixing the issue, all with varied results, none quite ideal as an all-encompassing solution… He’s now posted his solution in a development branch, and claims that he’s seen a 23x performance improvement in a dedicated synthetic benchmark, though he notes that actual real-world impact will be far less significant, as “no real load” will witness those figures.

This led to celld. Building on the Cloudflare Workers programming model, celld lets developers build distributed applications from the start while making the system simple to operate. What excites me greatly is that the scaling is built into the programming model, rather than infrastructure each app has to assemble itself.... We want to make this programming model the default way to build servers, whether you run on Cloudflare’s network or your own infrastructure.

Joining also means choosing where to focus our effort… Deno will remain open source, and we welcome others who want to continue its development. Deno Deploy will continue operating for six months before shutting down. We will provide migration support for paying customers moving to Cloudflare Workers. [Deno’s JSR package registry for JavaScript and TypeScript] will continue operating, with its infrastructure moving to Cloudflare.

For CIOs evaluating serverless and edge platforms, portability now has a concrete answer… Released in August, [celld] is a single Rust binary that runs Workers and Durable Objects across many machines, with object storage as its only external dependency. Operators run multiple celld instances against one storage bucket, and the software handles placement, routing and persistence. Dahl and Belder will now lead an effort to merge celld into workerd and make self-hosting a supported way to run Workers applications. With this, customers can build an application on Cloudflare’s network and move it to a private data center without rewriting it.

Could the programming model make partitioning across machines part of the design from the start? The solution clicked into focus when I read about Cloudflare’s Durable Objects. It provided a very powerful abstraction: the distributed singleton with a SQLite database. Each Durable Object is like a small, individually addressable server with its own relational database. Its JavaScript execution is single-threaded (which is easy to reason about), it handles WebSockets, and its local SQLite database can be accessed synchronously. By building a chat application using one Durable Object per channel, you have sharded your data and WebSocket connections, and thus made your application scalable… What excites me is the leverage this model gives developers: compute, relational databases, queues, and real-time communication primitives designed for applications distributed across machines.

“Right now, every other server is really operating at the Linux VM layer. That is not what Cloudflare Workers are,” he said…

The ever-fickle Dahl first debuted Deno in 2018 as a rewrite of Node. The name ‘Deno’ is an anagram of Node, and it was Dahl’s attempt to fix everything he felt he got wrong with Node — built-in fetch, a permission model, native TypeScript support et al. Sequoia backed Dahl’s company for $21 million in 2022, and as of August, Deno amassed 400,000 monthly users. Nonetheless, Node’s gravity proved too heavy for Deno to achieve escape velocity.

“What we found over years of working on Deno is that you can’t really deviate from Node.js very much,” Dahl told The Register. “As we continued to try to get adoption for Deno, we found we had to essentially backpedal on some of the original promises and become more Node compatible over time, and that left us as a kind of an alternative Node.js implementation.” Going forward, Cloudflare will supply Deno with bug fixes and security patches for the next year, while Dahl looks for a new home for the MIT-licensed open source project.

The compromised information affects many more than the state’s current 5.7 million public-school students as the breach dates back to 2023 enrollments. Students who left California but did not confirm their transfer to another school also were affected, dating back to 2006.

The data breach involved [nonprofit] Educational Testing Service or ETS, which provides extensive services to California [including test participation and assessment data]… Affected former students, including those who are now adults, are eligible for 24 months of free identity-protection services and identity-restoration help if there is identity theft. Officials said that parents and guardians may want to consider requesting a free credit freeze for their children who are under 16 to help prevent unauthorized accounts from being opened in the names of their children.

“A stolen login credential should not become a months-long passport to millions of students’ personal records,” said Anton Dahbura, executive director of the Johns Hopkins University Information Security Institute. “If that is what happened here, the critical question is why authentication safeguards, access restrictions, and monitoring systems failed to detect and stop the unauthorized activity.”

He added: “Incidents like this expose a fundamental weakness in how we manage student data: School systems may outsource the storage and processing of sensitive information, but they cannot outsource the consequences of a breach. When millions of student records are concentrated with a single vendor, one security failure can become a statewide problem with consequences that follow children for years.”

“Isn’t it weird that I, like, did a TV show about kind of a business scam, and you got in trouble for like … a business scam?” comedian and filmmaker Nathan Fielder gently asks Elizabeth Holmes.

One month before the notorious Theranos CEO surrendered to begin her 11-year criminal fraud sentence in 2023, Holmes and her husband contacted A24 as a last-ditch effort to exonerate her in the public eye, suggesting they send a film crew to document her final days of freedom. Alongside director Lance Oppenheim, Fielder — a cringe-comedy mastermind whose work often walks the line between fact and fiction — embraced the impossible project of figuring out who the infamous Stanford dropout really is.

“I never actually made that connection,” says Holmes. “I think it’s a pretty different situation....”

We already know that Elizabeth Holmes is not innocent. What we still can’t figure out, though, is whether she really, truly believes she did nothing wrong. Even as she sat on trial — listening to testimonies from investors who lost hundreds of millions of dollars, whistleblowers who were silenced when they flagged that Theranos’ blood-testing devices didn’t work, and patients who acted on incorrect blood test results — Holmes never wavered.

As Fielder ingratiates himself with Holmes and [her husband] Evans, he gets them comfortable enough to ask the hard questions: about Theranos, about prison, and even about themselves. The resulting footage is often shocking. You will see Elizabeth Holmes, who still maintains she did nothing wrong, answer “no” when Fielder asks her if she’s ever lied in her life… [Y]ou will also see Holmes and Evans spend a great deal of time in this movie attempting to boot up Theranos 2.0. They even go so far as to drag out some of the original Theranos blood testing apparatus, which looks like a bunch of random parts from TigerDirect they hooked together, to show Fielder what their product can do. We do not see it doing anything on screen, but the couple assures that it we would if it was, like, hooked up properly.

These scenes are extremely funny, but funny isn’t what Fielder is looking for. He’s trying to figure out if this woman is a clueless naif, if she believes her own lies, or if she is playing the character of an innocent woman, and doing so with such effectiveness that, to paraphrase Fielder, she might be the most manipulative person in the world. The answer proves fabulously elusive, and so Fielder and Oppenheim go to extremes in their attempt to find it. They hold the camera on Holmes’ rubbery elfin face for what feels like hours at a time, to see if she’ll blink (figuratively or literally!). They interview Holmes’ visiting parents, with the father, former Enron exec Christian Holmes, casually telling Fielder that everything changed for his daughter “when she was raped.” To the furthest extreme, they bring in actress Amanda Seyfried — who played Holmes in the Hulu TV show "The Dropout" — to recreate any dialogues Fielder had with Holmes herself that couldn’t be recorded on camera. Seyfried is so convincing in mimicking Holmes that you, the audience, might forget which scenes were Seyfried talking to the camera and not Holmes herself. I know I did.

My personal hunch is that Fielder came away thinking Holmes is on the level, to the extent that someone who sometimes seems like an AI program’s idea of how a human should behave can be on the level. There are a few possibilities that might explain how Holmes comes off the way she does in the movie: (a) She is a simpleton. (b) She is a conniving sociopath who happens to be utterly brilliant at playing a simpleton. (c) Somewhere between those poles, she is the very emblem of a woman who throughout her life has put herself in the sway of controlling men, to the detriment of her intellect, willpower and emotional development… Is it possible that the more you learn about someone, the less you might know how to think about them?

Elizabeth Holmes, who was convicted of fraud for siphoning hundreds of millions of dollars from several high-profile investors, is scheduled to be transferred from a minimum-security federal prison to a halfway house next year, according to one of her victims… [America’s Department of Justice “is required by law to notify victims of crime of case developments through letters and emails,” the article points out.] She was sentenced in 2022 to 11 years and three months in prison. She and her business partner, Ramesh “Sunny” Balwani, were ordered to pay 12 victims a total of $452 million in restitution.

Holmes has been serving that sentence at a minimum-security prison in Bryan, Texas. The halfway house will provide her greater freedom… In March, a judge cut Holmes’ sentence from 135 months to 123 months. According to a court document, the judge agreed with Holmes that she did not personally cause “substantial financial hardship” to her victims.

Microplastics are a source of extreme concern for health: the presence of these tiny pieces of plastic has been linked to heart attacks, stroke, dementia and brain tumors. But what drives these associations is unclear. Now a study published in Nature offers a tantalizing clue: microplastics interact with water, generating highly reactive molecules. When microplastics come into contact with water, the water near their surface can become chemically active, generating highly reactive species that can modify nearby substances, including biologically important molecules.

As plastics wear down to microscopic sizes, their surface-to-volume ratio increases dramatically. For example, when a credit card is fragmented into particles some 10 microns in diameter, there is a more than 200-fold increase in its surface area, says Wei Min, a chemist at Columbia University and one of the senior authors of the study. As a result, any chemical activity is amplified. Min and his colleagues examined various microplastics — including polystyrene, polyethylene, polyvinyl chloride, polypropylene and polyethylene terephthalate. Plastic surfaces are hydrophobic, meaning they repel water, Min says. Thus, water molecules cannot form the hydrogen bonds they maintain in liquid form. That changes molecular arrangements, and, in turn, the change influences the local electrical environment and chemical reactivity.

The presumed chemical inertness of bulk plastics overlooks the toxicity of their fragmented microscale forms. “For microplastics, this is especially important because fragmentation creates enormous amounts of new surface area,” Min says. In past research, microplastics have been shown to cause inflammation, oxidative stress and decreased mitochondrial activity. The new study provides a possible mechanism for this, showing that plastic-water interfaces can perturb proteins, cell membranes, and more. How this might contribute to damage in living tissues in humans is still unclear, Min says. “Ultimately, we hope to connect fundamental interfacial chemistry with quantitative measurements of biological effects, which would help us better understand potential health risks,” he adds.

Be Aware: A straightforward alert for estimated light shaking, letting you know an earthquake has been detected nearby.
Be Ready: A detailed alert for stronger shaking, alerting you to prepare to take action.
Take Action: A full-screen alert for moderate to heavy shaking, giving you immediate advice on how to stay safe.

We’ve built-out our Be Ready alert with new helpful guidance. In the coming months, you’ll see a map with a radius of where we’ve detected shaking, estimated earthquake magnitude, action you can take, and a button to learn more about the earthquake as information comes in.

The researchers found that some dead star white dwarfs can go a little green around the gills after snacking on orbiting planets. An example of this is WD J1330+6435, a cool white dwarf located around 326 light-years away, which has been accreting rocky material from a planetary companion. This has enriched its atmosphere with calcium, lithium, and sodium, and the team’s model suggests this would have led WD J1330+6435 to adopt a green hue.

[…] The researchers think that no other star, living or dead, has ever been credibly reported as green. That makes WD J1330+6435 the first known genuinely green star. “The traces of sodium in the atmosphere of this white dwarf absorb the orange part of the spectrum, leaving behind a ghostly green glow,” Hollands said. “Imagine standing on a planet and looking up at a green star. It feels like something out of science fiction.”

Prediction market boosters often tout the platforms as barometers of public opinion, or even “truth machines” offering a clearer picture of where things are headed than polling or other data. In 2024, for example, Kalshi beat many pollsters in forecasting the outcome of the US presidential race. But their trading activity can also tell more perplexing stories. Two global election markets on Polymarket’s offshore platform, for instance, generated over $600 million in trading volume, far more than most political markets typically attract. Most of the activity took place buying and selling contracts tied to long-shot candidates who ultimately did not win.

“Historically, matching decompilation has been a brutally difficult, time consuming task, on the scale of years for any moderately-sized game with a number of active contributors,” the pseudonymous admin of decomp.dev, who goes by Encounter, wrote on the site. But recent frontier AI models like GPT-6-Astra have made it trivially easy to decompile a game: “They are significantly better at following complex directions, cross-referencing resources for symbols or debug information, and writing natural code with enough guidance,” Encounter wrote. “It is now clear that, with the right guidance, human input, and code reviews, AI can expedite the decompilation process in a significant way. What is also now clear is that the community aspect of decompilation has been broken.”

Tencent Hunyuan, the company’s artificial intelligence unit, said in a post on X that the activity did not originate from its Hunyuan models. Its review found no evidence of deliberate targeting or coordination, it said. The Swarmchasers researchers said the agents sought information such as the commonly used entrances at Chinese parks, museums and zoos. […] Swarmchasers said it used the word “rogue” to describe agents taking actions outside their intended scope or completing a task in unintended ways.

After routine automated requests were blocked, the agents tried other methods, including public web tools that could open pages and run code, routing requests through other websites and using Amap keys and security codes found in publicly available software code. Swarmchasers said it found no evidence that the agents breached Amap’s main anti-bot safeguards. Most of the 2,818 attempts it recorded either failed or returned anti-bot pages, login screens or blank results.

Some requests returned information through cached pages and intermediary services, including data on visitor arrivals at Chengdu Zoo, Swarmchasers said. The researchers said they could not determine whether an agent read the result or completed its task.

Valve’s updated requirements explicitly state that 64-bit-only installations are not supported. Systems must still provide both 32-bit and 64-bit libraries and graphics drivers, including multilib support. The new client also requires Linux kernel 5.6 or newer and glibc 2.31 or newer.

The update also introduces Steam Achievement Sets, a feature we covered earlier that allows developers to organize achievements into separate groups for base games, DLCs and seasonal content. Players can complete individual sets without losing their existing completion status when developers add more achievements. Valve has also updated the achievements page to display progress across these groups.

The 64-bit Linux client and Achievement Sets are currently available through the Steam Client Beta. Valve has not confirmed when these changes will reach the stable Linux release. Until then, users on the regular Steam client will continue using the existing architecture.

As Nieman Lab reported Thursday, this will affect all business accounts but is particularly shocking for news publishers who could perhaps charge Meta millions in licensing fees to continually access their articles for AI training. Currently news organizations are fighting a battle with OpenAI over whether such training without licensing is fair use, and Meta’s terms seemingly risk granting it sweeping permissions, no matter which way the court leans. “While journalism isn’t the only industry that will be affected by this update, virtually every news organization has at least one Meta business account, including Nieman Lab,” the lab said.

[…] Notably, there is no mention of AI, but it’s inferred from a single use of the word “train” and references to automated scraping and crawling. Meta’s spokesperson told Nieman Lab that Meta has no plans to use the terms as a legal basis to ignore robots.txt instructions that block scraping on news sites. The company still allows news organizations to opt out of scraping and provides instructions on how to block crawling. A spokesperson told Ars that “there is no change to how Meta uses web crawlers; any suggestion to the contrary is false.” However, should courts affirm that AI training non-news articles is fair use, news organizations question if Meta’s stance might change, and the terms could be used to freely grab access to content by legally overriding robots.txt instructions.