The restructuring goes back to March, when the Manjaro developers released the Manjaro 2.0 Manifesto, which was a very public critique of the way Manjaro was being run. The document claims that decision-making has effectively become the sole domain of the project founder, Philip Müller, with the other developers having very limited access to the infrastructure. There’s also a concern about the drop in participation, the persistent technical issues, and the continued prioritization of commercial interests over the actual development of the distribution…

The manifesto proposed the transfer of all project infrastructure, domains, repositories and community funds to the new organization, together with arrangements for the use of the Manjaro trademark. The contributors were warning that they might well consider forking the distro if the talks didn’t go their way. Müller then indicated that he’d be happy to talk about the proposed structure once the non-profit was in place. The association is now formally registered, and so one of the key aims of the manifesto has been realized…

Perhaps the most important point is the actual evolution of the distribution. The most recent testing and stable updates were kicked off by the Manjaro team themselves, without any oversight from Müller. This points to the developers having already started to operate on their own in an area which was previously the preserve of the project’s founder. They’re also in the process of optimizing their dev infrastructure, in part as a response to the continued automated bot attacks on the existing infrastructure.

The records we received revealed that WISeR has resulted in widespread delays and denials of care, operational chaos, and reports of patient harm. Further documents obtained by EFF show a rushed and rocky rollout, highlighting the dangers that arise when governments treat AI like a silver bullet for complex problems.

EFF has now published hundreds of pages of documents obtained through our lawsuit, available here… The documents also highlight the need for more transparency about safeguards against inappropriate, AI-driven denials. EFF has long argued that AI has no place in consequential government decisions about peoples’ rights or access to benefits, such as immigration enforcement and policing decisions. That’s because using automated decision-making in these contexts risks decisions that violate people’s rights or deprive them of benefits they’re entitled to based on biased or inappropriate considerations and without proper due process or accountability if there is an error. By outsourcing decision-making to private AI companies without sufficient transparency, testing, or legal limits, WISeR jeopardizes seniors’ access to medical care. Congress should step in to place greater legal limits on the use of automated decision-making in Medicare.

WISeR’s payment structure gives vendors, as the government put it, "an incentive to deny as many claims as possible....” [One company] denied more requests than it approved in the first few months of the program, and CMS inquired about "denials that appear inaccurate or inconsistent with applicable criteria.” Ultimately, the records obtained by EFF raise more questions than they answer about the safeguards used by WISeR vendors…

A growing body of scholarship points to the substantial limitations of “human in the loop” policies as guardrails for AI systems. AI-generated recommendations can unduly influence human decisions, leading reviewers to over-rely on automated judgements and rubber stamp them as correct. Even worse, at least one health insurance company actively pressured clinical reviewers to accept its AI systems’ recommendations. Another company built a system that allowed clinical reviewers to reject claims without opening patient files; clinical reviewers using this system spent an average of just 1.2 seconds on each case..

As the government expands its use of automated decision-making, the potential for consequential mistakes increases rapidly. The records we’ve obtained so far raise questions about the rushed rollout and lack of guardrails for automated decision-making by the U.S. government. EFF urges transparency, oversight, and legal limits to protect people from the harms of automated decision-making in high risk systems.

Joining the chorus online were voices of seemingly everyday people: a chef, a stock trader, a Hebrew teacher and several environmental activists. But at least 400 of them were fake, according to research from the nonprofit Midas Project, with links to a public relations firm involved in previous so-called “sockpuppet” campaigns… Many of the fake accounts, according to Midas Project executive director Tyler Johnston, replied to journalists, former U.S. officials and other prominent figures and backed not just Huang but Nvidia’s push to sell its cutting-edge chips to Chinese firms.

Like other documented influence campaigns, the posts appeared to have limited reach; the most-viewed tweet garnered about 8,000 views and 32 likes. Still, some of the posts targeted lawmakers, including accounts for the [U.S.] House Select Committee on China, Republicans on the House Foreign Affairs Committee and Sen. Elizabeth Warren (D-Massachusetts). “That’s a place where you might not need a lot of views, but maybe the staffers who are running the lawmakers’ account are paying attention to how their messages are received,” said Johnston, whose group advocates for safe AI development…

There were other clues that helped identify accounts as being part of an apparently coordinated campaign, according to the Midas Project. Some of them were created minutes or hours apart, and had user names and profile photos refreshed at similar times. They also sometimes engaged on oddly specific issues ranging from Qatar to Nippon Steel’s bid for U.S. Steel and a waste management plant in Oregon.... Any one one of the posts — often replies to other posts — might have not looked suspicious in isolation. But the various clues taken together, Johnston said, gave evidence that they were linked. Some of the accounts then rushed to delete posts after he posted his findings online, and at least 260 of them have been deactivated or suspended by X.

Her home in the Bridgestone neighborhood is nestled right in the flight path of Amazon’s drone service. Gibson said she hears roughly a dozen drones flying over her home each day. Noise pollution has become a frequent complaint in Texas neighborhoods where the service operates. Residents have compared the sound to everything from a massive beehive to a full-on air raid. “It does not sound like a [single] bumble bee. It sounds like a large swarm of bees at a much higher volume than a normal swarm of bees. And it’s all day long,” said Gibson.

Amazon’s drone delivery service is currently operating in four Texas cities, including Houston, Waco, San Antonio and Richardson. The company announced major expansion plans in August, but growing complaints in pilot neighborhoods could foreshadow complications later down the line, with regions such as Harris County already taking legal action in response… So far, a group of fifteen states, plus Harris County, [Texas] have formed a coalition that has filed a petition in the US Court of Appeals challenging the Federal Aviation Administration’s environmental review, citing that it failed to adequately address the effects of expanding drone deliveries.

Less than two weeks after Amazon began delivering packages by drone in Nampa, the cities of Nampa and Meridian say they have received complaints over the noise and how often the drones fly… Amazon began Prime Air drone deliveries Oct. 30 from its East Franklin Road fulfillment center, making Nampa the company’s first Idaho drone site…

How people feel about the drones depends on whom you ask. A Meridian man who has received drone deliveries says the noise doesn’t bother him. Neighbors closest to the launch site say the drones fly from sunup to sundown and are disturbing their peace. Randy Nye, who has lived in Cherry Creek Estates for 17 years, compared it to living in a beehive. “It’s just a constant presence,” he said.... Nye, who works from home, said he and his neighbors who technically are just outside city limits had no idea this was coming. He said the city approved the drones in May, and they were never given written notice this was coming, despite living so close. He said they were shocked when deliveries started by drones just 12 days ago. Nye said he hopes something can change.

A few homes down, Kerri Wattier has started counting. On Wednesday with KTVB, she clicked a handheld counter each time a drone passed over her home. She started at 3:30 p.m. By 4:18 p.m., she had counted 39. “It sounds like lawnmowers and leaf blowers flying over our house,” Wattier said.

Bailey said customers should clear the area when a drone delivery is incoming. The drones drop packages from about 12 feet. If the drone detects movement in the area, he said, the delivery will be canceled. “You want your kids inside the house,” Bailey said. “We will not drop a package in an unsafe location. People who want to stand below and try to catch it, don’t do that.”

[U.S. Transportation Secretary Sean] Duffy said a router involved in the switch from copper wire to fiber “started flooding other routers in our air traffic control system.” The system saw “over 1,000 connection attempts every four to five seconds,” he said. That disrupted communications with airplanes and radar.

In an Oct. 13 letter to the Government Accountability Office, more than 20 members of Congress requested an independent review of the FAA’s development and implementation of its Strategic Management of Airspace, Routes and Trajectories system, known as SMART. The lawmakers questioned whether the technology was being deployed with adequate input from frontline air traffic controllers, sufficient training and appropriate safety evaluations… In their letter to the GAO, the lawmakers specifically questioned whether the FAA had adequately evaluated risks associated with SMART’s artificial intelligence capabilities, including the potential for the technology to interfere with experienced controllers’ decision-making or generate inaccurate safety-critical information. “The nation’s frontline aviation safety workforce apparently had little to no input into SMART’s development and have received limited training and information during the current deployment process,” the lawmakers wrote. The letter also questioned the FAA’s decision to initially pilot the technology in heavily congested airspace, including the National Capital Region.

“This is completely disconnected, and I love that some people have said this would be the root cause. By the way, if it was, I’ll tell you that, but this is not even plugged in,” he said. “So, there’s no possible way SMART would have impacted.”

Duffy also asked Congress for $50 billion to rebuild what he described as an “incredibly old” air traffic control system.

CNN Aviation Analyst: “Many times in the past, what we have seen, and this has gone back decades, is that because air traffic control is this piecemeal, mishmash of a whole bunch of different systems… some going back to radio, telephones and floppy disks… when they put in new computer systems, they often have difficulty talking with, communicating with, or working with the much older systems. And I have to say, it’s a tremendous amount of coincidence… If they’re putting in new software now, this new SMART system to start managing that, and now we have a communications outage, I’m — we’ve seen this so many times in the past. I don’t know if they’re linked, but it’s just too much coincidence that they were trying to start that moving today, and now we have problems with the en route system.

So if I was to guess — and we haven’t heard any, you know, it’s not that it’s threats or criminals or terrorists. We haven’t heard anything like that. So I am guessing that once again we have a problem with new air traffic control computer systems, AI — you know, modern systems trying to communicate with old systems. And we have just seen this so many times in the past, and it’s a big problem… Our whole national airspace system is you know, pieces and parts. It’s kind of a Franken-system. And that would be my guess, that they are having computer issues by putting the new software in with the old, just because today they announced that that were going to do this new system.

According to the FAA, the system consolidates approximately 200 data streams, including airline schedules, flight paths, weather patterns, airport capacity, airspace conditions and air traffic controller staffing metrics. The agency says SMART uses artificial intelligence to analyze that information, predict traffic flows, identify potential conflicts and recommend adjustments to flight routes and departure schedules before disruptions occur. The FAA describes the technology as a shift from a reactive approach to a predictive one, allowing aviation officials to identify congestion, weather-related restrictions and other operational problems hours, days or even weeks in advance…

The congressional letter raised questions about whether the FAA’s implementation strategy was moving faster than its safety evaluations, workforce training and independent oversight could support.

Such fixes are necessary because ever since Anthropic launched its Mythos bug-finding model in April, developers have been able to find more software flaws than was previously possible. Microsoft, for example, addressed a record 974 flaws in September — its third record fixing spree this year after it whacked 622 flaws in July and 206 in June. Oracle addressed 1,449 flaws in a single month. That’s many more patches than IT teams are set up to handle, yet they must find ways to deal with bugs more quickly because attackers are increasingly targeting flaws found by AI.

Torvalds’ post suggests that, perhaps, the worst of this is behind us. “This time around Alexei claims that on the bpf side at least the fixes are now coming in faster than the new reports, and that sounds lovely if true,” he wrote. That’s a reference to Alexei Starovoitov, co-creator and lead dev on the Extended Berkeley Packet Filter (eBPF), the project that makes it possible to run sandboxed programs within the Linux kernel. “I think most other areas haven’t reached that point yet, but it’s at least a sign that we _may_ be starting to see the tide starting to turn,” he added.

Earlier this week he posted an email to the Linux kernel mailing list to say that he was planning to drop some of his workload. He explained: “Given the current throughput in the kernel resulting from AI-generated series, I unfortunately lack the bandwidth to generally be able to offer review except in those areas I maintain. […] Apologies for doing this, but given the current trends I’d like to do something to make my inbox a little more manageable.”

The Australian STEM Videogame Challenge, a “free national videogame development competition for students,” has confirmed that the rise of generative AI means this year’s event will be the last… Speculation as to the cause of the program’s cancellation focused primarily on the presence of AI in entries: Another self-proclaimed judge said the problem wasn’t merely the use of AI in itself but that “some students just completely generate their games with AI....”

[T]he Australian Council for Educational Research has confirmed that the cancellation was in fact due to AI.... “making it harder to judge what students made themselves, and moving the program away from its original purpose.”

Former Nvidia CEO Jensen Huang misled several of the company’s leaders, including general counsel Tim Teter and chief marketing officer Alison Wagonfeld, about the nature of his relationship with Chinese businesswoman Alice Huang, with whom he had an affair, according to two people familiar with the matter and internal correspondence reviewed by Reuters. […] During the autumn of 2025 and in October 2026, in response to press queries that drew some Nvidia leaders’ attention to his relationship with Megaspeed and Alice Huang, Huang at both times described their interactions as appropriate, the people said, speaking on the condition of anonymity. Reuters only reviewed messages from the exchanges in October, not the ones from 2025. In two separate messages in October, Huang told Nvidia leaders, including Teter and Wagonfeld, that the interactions reflected standard business dealings with customers. In other messages, Huang affirmed the routine nature of his interactions with Megaspeed.

Nvidia’s Huang also discussed taking legal action against the New York Times after it published an article in October of last year that drew attention to his meetings in public with Alice Huang, the people said. That article had prompted Jensen Huang to communicate with some Nvidia leaders in 2025 about their interactions, which he did not describe as an affair, the people said. Ultimately, neither Nvidia nor Huang filed a lawsuit against the paper. A spokesperson for the New York Times said the paper received no legal demand. It is unclear when his relationship with Alice Huang became intimate. Photos posted online and verified by Reuters show them together in the US, China and elsewhere, dating as far back as December 2023.

Nightmare Eclipse, the pseudonym of a researcher with an ongoing, very public beef with Microsoft, has dropped yet another Windows zero-day. On Tuesday, Nightmare Eclipse disclosed SignDrop, a vulnerability that gives local users full System rights on some versions of Windows. The vulnerability resides in the Common Log File System, which Microsoft describes as a “general-purpose logging service used by software clients running in user-mode or kernel-mode.” By forcing a privileged process such as Windows Defender to open a crafted CLFS container, an attacker with ordinary user rights can abuse the privileged file creation to elevate privileges to System.

[…] Researcher Will Dormann said in an interview that he has been able to reproduce the exploit and that it works as described, but not on all versions of Windows 11. But there’s a catch, he said. “The requirements are important in that it seems to require Windows 26H2, and one that has existed for more than 90 days, it seems,” he explained. “That is, you can’t just take a new 26H2 system and install updates and have it work.” For a system to be vulnerable, Dormann said, the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CLFS\Authentication\Mode value must be 0 or 1.” Of the many machines Dormann uses, only a single one met this requirement.

US Transportation Secretary Sean Duffy said just after 4:15 pm. Eastern time that the nationwide flight traffic halt came “following a communication issue impacting all Air Route Traffic Control Centers.” “FAA technicians are investigating the issue,” he said in a post on X. The outage comes the same week as the FAA deployed SMART, a new AI tool to help air traffic control. ASI, the company that makes the SMART system for the FAA, said that Friday’s issues weren’t “based on or a result of the SMART system, any product of ASI or our integration with FAA and ATC.”

Homeland Security Secretary Markwayne Mullin said in a press conference Friday, when asked if the AI system might be related to the outage: “That’s what we’re looking at.” Microsoft, which faced massive issues across its services this week, also said that it had “no indication” the ground stop was related to any Microsoft services. Meanwhile, the FAA said that the ground stop was due to “extraordinary circumstances and for reasons of safety.”

The original goal was to retrieve every single piece of the rocket for the purpose of future recycling, something yet to be achieved anywhere in the world. Musk sees this leading to the kind of fast and consistent launch rates necessary for building moon bases and sending people to Mars. Shortly after reaching orbit, Starship dropped off 26 of the company’s most advanced Starlink satellites. The plan is for Starship to complete 15 laps around the world at an altitude of around 170 miles (275 kilometers) before heading back to the launch site for Saturday’s grand finale.

SpaceX had already made three booster grabs at the company’s sprawling Starbase near the U.S.-Mexico border. That made Friday’s miss all the more surprising. “Well, that certainly isn’t the news that we had hoped to hear for today,” observed SpaceX launch commentator Kate Tice, adding that it was in line with the many rigorous safety checks to protect the pad. No explanation was provided for what went wrong. This was the first attempt to capture the upgraded version of the booster that stretches 236 feet (72 meters) — the production model for moon and Mars expeditions. It will also be the first time the company attempts to catch the spacecraft, which spans 171 feet (52 meters). Together, they form the world’s biggest and most powerful rocket — an astounding 407 feet (124 meters) in height.

The spacecraft portion of the 14 previous Starships ended up in the ocean, either by design at flight’s end or by accident in a stream of flaming wreckage. During the first full-scale test flight in 2023, multiple engines failed to ignite and the tumbling rocket’s self-destruct system was activated. The last test, in September, was the first to reach orbit, but SpaceX did not try to recover any of the rocket stages.

Collective efforts between the U.S. government and private sector have resulted in more than $2.7 billion of that amount being frozen. […] The DOJ said it was taking coordinated action against what it called the North Korean government’s “schemes to fund its regime through the massive theft of cryptocurrency.” That includes “the court-authorized seizure and restraint of more than $1.2 billion worth of cryptocurrency recently stolen from Binance,” it said. DOJ units, law enforcement partners and virtual asset service providers have been working to intercept the stolen assets. But efforts to track and freeze the assets are ongoing, as TraderTraitor actors continue to launder them through various cryptocurrency channels.

Authorities have also seized cloud-based infrastructure used in a massive identity impersonation scam known as “FaceStealer,” which has seen more than $400 million worth of cryptocurrency stolen over 18 months, the DOJ said. The scheme sees hackers set up fake video meetings using stolen accounts and recordings of people known to the target by using AI-generated deepfakes. The hackers then say a technical problem requires a fix, install malware on a computer and take over the victim’s communications, steal their cryptocurrency and target their contacts — sometimes months or more than a year after the initial compromise.

Mozilla launched Solo in December 2023 as a “Mozilla Innovation Project,” aimed at helping sole traders to build themselves a webpage for their services. Some 54,000 people used its LLM to build pages, and relied on Mozilla to host them — complete with custom domain names. Users now have just over two weeks left to find a new home for their pages, although Mozilla says it first notified them on October 1. According to the support FAQ, users can download a ZIP containing an HTML export, contact form and newsletter submissions, and a CSV linking to their images. The images themselves must be downloaded separately. Domains purchased through Solo Domains must also be moved to Name.com, with Mozilla handling the transfer after users create an account and supply its code.