Alterslash

the unofficial Slashdot digest
 

Contents

  1. Former Google Engineer Found Guilty of Stealing AI Secrets For Chinese Firms
  2. Radiologists Catch More Aggressive Breast Cancers By Using AI To Help Read Mammograms, Study Finds
  3. Universal Basic Income Could Be Used To Soften Hit From AI Job Losses In UK, Minister Says
  4. Comcast Keeps Losing Customers Despite Price Guarantee, Unlimited Data
  5. Cory Doctorow On Tariffs and the DMCA In Canada
  6. Linux Gaming Developers Join Forces To Form the Open Gaming Collective
  7. An AI Toy Exposed 50K Logs of Its Chats With Kids To Anyone With a Gmail Account
  8. Google’s Project Genie Lets You Generate Your Own Interactive Worlds
  9. Nvidia GeForce NOW Is Now Available Natively On Linux
  10. County Pays $600,000 To Pentesters It Arrested For Assessing Courthouse Security
  11. ArXiv Will Require English Submissions - and Says AI Translators Are Fair Game
  12. US Leads Record Global Surge in Gas-Fired Power Driven by AI Demands
  13. US Life Expectancy Jumps To a Record 79 Years
  14. Microsoft Admits Windows 11 Has a Trust Problem, Promises To Focus on Fixes in 2026
  15. Why Private Equity Is Suddenly Awash With Zombie Firms

Alterslash picks up to the best 5 comments from each of the day’s Slashdot stories, and presents them on a single page for easy reading.

Former Google Engineer Found Guilty of Stealing AI Secrets For Chinese Firms

Posted by BeauHD View on SlashDot Skip
Longtime Slashdot reader schwit1 shares a report from CBS News:
A former Google engineer has been found guilty on multiple federal charges for stealing the tech giant’s trade secrets on artificial intelligence to benefit Chinese companies he secretly worked for, federal prosecutors said. According to the U.S. Attorney’s Office for the Northern District of California, a jury on Thursday convicted Linwei Ding on seven counts of economic espionage and seven counts of theft of trade secrets, following an 11-day trial. The 38-year-old, also known as Leon Ding, was hired by Google in 2019 and was a resident of Newark.

According to evidence presented at trial, Ding stole more than 2,000 pages of confidential information containing Google AI trade secrets between May 2022 and April 2023. He uploaded the information to his personal Google Cloud account. Around the same time, Ding secretly affiliated himself with two Chinese-based technology companies. Around June 2022, prosecutors said Ding was in discussions to be the chief technology officer for an early-stage tech company. Several months later, he was in the process of founding his own AI and machine learning company in China, acting as the company’s CEO. Prosecutors said Ding told investors that he could build an AI supercomputer by copying and modifying Google’s technology.

In late 2023, prosecutors said Ding downloaded the trade secrets to his own personal computer before resigning from Google. According to the superseding indictment, Google uncovered the uploads after finding out that Ding presented himself as CEO of one of the companies during an Beijing investor conference. Around the same time, Ding told his manager he was leaving the company and booked a one-way flight to Beijing.
“Silicon Valley is at the forefront of artificial intelligence innovation, pioneering transformative work that drives economic growth and strengthens our national security. The jury delivered a clear message today that the theft of this valuable technology will not go unpunished,” U.S. Attorney Craig Missakian said in a statement.

Radiologists Catch More Aggressive Breast Cancers By Using AI To Help Read Mammograms, Study Finds

Posted by BeauHD View on SlashDot Skip
A large Swedish study of 100,000 women found that using AI to assist radiologists reading mammograms reduced the rate of aggressive “interval” breast cancers by 12%. CBC News reports:
For the study — published in Thursday’s issue of the medical journal The Lancet — more than 100,000 women had mammography screenings. Half were supported by AI and the rest had their mammograms reviewed by two different radiologists, a standard practice in much of Europe known as double reading. It is not typically used in Canada, where usually one radiologist checks mammograms.

The study looked at the rates of interval cancer, the term doctors use for invasive tumors that appear between routine mammograms. They can be harder to detect and studies have shown that they are more likely to be aggressive with a poorer prognosis. The rate of interval cancers decreased by 12 percent in the groups where the AI screening was implemented, the study showed. […] Throughout the two-year study, the mammograms that were supported by AI were triaged into two different groups. Those that were determined to be low risk needed only one radiologist to examine them, while those that were considered high risk required two. The researchers reported that numerically, the AI-supported screening resulted in 11 fewer interval cancers than standard screening (82 versus 93, or 12 per cent).

“This is really a way to improve an overall screening test,” [said lead author, Dr. Kristina Lang]. She acknowledged that while the study found a decrease in interval cancer, longer-term studies are needed to find out how AI-supported screening might impact mortality rates. The screenings for the study all took place at one centre in Sweden, which the researchers acknowledged is a limitation. Another is that the race and ethnicity of the participants were not recorded. The next step, Lang said, will be for Swedish researchers to determine cost-effectiveness.

Universal Basic Income Could Be Used To Soften Hit From AI Job Losses In UK, Minister Says

Posted by BeauHD View on SlashDot Skip
An anonymous reader quotes a report from the Guardian:
The UK could introduce a universal basic income (UBI) to protect workers in industries that are being disrupted by AI, the investment minister Jason Stockwood has said. “Bumpy” changes to society caused by the introduction of the technology would mean there would have to be “some sort of concessionary arrangement with jobs that go immediately”, Lord Stockwood said. The Labour peer told the Financial Times: “Undoubtedly we’re going to have to think really carefully about how we soft-land those industries that go away, so some sort of [universal basic income], some sort of lifelong mechanism as well so people can retrain.”

A universal basic income is not part of official government policy, but when asked whether people in government were considering the need for UBI, Stockwood told the FT: “People are definitely talking about it.” […] While he has previously been a vocal proponent of a wealth tax in the UK, Stockwood told the FT he had not repeated his calls for the government to go further on taxing the rich. However, he added: “If you make your money and the first thing you do is you speak to a tax adviser to ask: ‘Where can we pay the lowest tax?’ we don’t want those people in this country, I’d suggest, because you’re not committed to your communities and the long-term success in this country.”

No. Just No.

By JaredOfEuropa • Score: 4, Interesting Thread
There are no AI job losses in the UK or anywhere else. Maybe a few call center jobs. The rest is just excuses for a restructuring. But this is par for the course: everyone is using AI to push their own agenda.

As an aside: this Be Quiet brand keyboard is both the best and the worst keyboard I have ever had. It is quiet…It bloody is, and a joy to type on… But it also suffers from double keystrokes / bouncing.

nearly a decade of “AI” hype

By Mr. Dollar Ton • Score: 4, Interesting Thread

And I have yet to see anyone verifiably fired because of “AI” - that is - fired and their job replaced by the LLM.

Anyone having specific examples?

not a UBI

By bloodhawk • Score: 3 Thread
If it is being targetted at specific industries then it is by definition NOT a Universal Basic income

By itself it’s worse than useless

By rsilvergun • Score: 3 Thread
You can’t just give people money in the current environment. Businesses have been consolidating and using the power that comes from market consolidation to raise prices. You can give people as much money as you want and the seven companies that virtually everything comes from will just keep raising prices.

I mostly see Ubi pushed by libertarian types like a software patch for capitalism.

That would work if hackers weren’t actively breaking the system, in this case the hackers are the billionaires that have decided they have had enough of this capitalism stuff and having to depend on consumers and employees for their wealth and prestige…

This is before we talk about somebody inevitably coming along and saying that you don’t have a right to anyone’s labor and that socialism is slavery or whatever.

It’s all good bumper sticker stuff that strikes at the core resentment people feel when somebody who worked less than they did get roughly the same quality of life.

Basically have you ever had a co-worker that didn’t pull their own weight? Of course you have it’s a pretty universal experience.

That resentment is easily exploitable so any attempt to do Ubi that is actually viable and not just an excuse to shut down systems like social security and Medicare and Medicaid is going to face opposition relying on that resentment that’s baked into humankind.

I have no idea what to do about it and I think most people just ignore it along with the other underlining problems with a simple Ubi implementation.

Comcast Keeps Losing Customers Despite Price Guarantee, Unlimited Data

Posted by BeauHD View on SlashDot Skip
Comcast’s attempt to slow broadband customer losses still isn’t stopping the bleeding as fiber and fixed wireless competition intensifies. In Q4 2025 alone, Comcast lost 181,000 broadband subscribers, even as it leans harder into wireless bundling and other business lines like Peacock and theme parks. Ars Technica reports:
The Q4 net loss is more than the 176,000 loss predicted by analysts, although not as bad as the 199,000-customer loss that spurred [Comcast President Mike Cavanagh’s] comment about Comcast “not winning in the marketplace” nine months ago. The Q4 2025 loss reported today is also worse than the 139,000-customer loss in Q4 2024 and the 34,000-customer loss in Q4 2023.

“Subscriber losses were 181,000, as the early traction we are seeing from our new initiatives was more than offset by continued competitive intensity,” Comcast CFO Jason Armstrong said during an earnings call today, according to a Motley Fool transcript. Comcast’s residential broadband customers dropped to 28.72 million, while business broadband customers dropped to 2.54 million, for a total of 31.26 million.

Armstrong said that average revenue per user grew 1.1 percent, “consistent with the deceleration that we had previewed reflecting our new go-to-market pricing, including lower everyday pricing and strong adoption of free wireless lines.” Armstrong expects average revenue per user to continue growing slowly “for the next couple of quarters, driven by the absence of a rate increase, the impact from free wireless lines, and the ongoing migration of our base to simplified pricing.” Comcast Connectivity & Platforms chief Steve Croney said the firm is facing “a more competitive environment from fiber” and continued competition from fixed wireless. “The market is going to remain intensely competitive,” he said.

chickens coming home to roost at spamcast

By Indy1 • Score: 4, Insightful Thread

They’ve spent decades abusing their customers (and everyone else) with their endless corporate bullshit, network abuse, price hikes, service outages, etc…

And when people start finding reasonable alternatives, SURPRISE.... They take advantage of them.

Thats what happens when you lose your monopoly spamcast. The second I was able to get fiber at my premise, I dropped them the same day.

Got 3 times the speed, for half the price. Latency also dropped quite a bit too.

I’m one of them

By Tony Isaac • Score: 5, Informative Thread

Last year I switched from XFinity broadband to a local company called Ezee Fiber. XFinity kept raising their prices, they make it all but impossible to bring your own devices (cable modems), and there were numerous service outages. The last straw was when service went out on a Friday, and they said they could come out and take a look at the problem by the next Wednesday. Instead, I switched providers, and had my service up and running the next day. Plus, it was 5x faster (5 GBps) and came with a WiFi 6 router with no monthly rental fees. I did not save money on the new service, but the customer service is 10x better. So far, I’m very happy with the switch.

Huh…

By zurkeyon • Score: 4, Insightful Thread
Pissing off your customers by ignoring them, making cancellation impossible and being voted the worst customer service in America for over a decade straight, Doesn’t breed customer loyalty? Who knew? ;-D

Space internet is the future

By backslashdot • Score: 4, Insightful Thread

10,000,000 satellites in space beaming internet. And no they won’t Kessler-ize. They won’t collide often either as they will be placed in low earth orbits fifty to a hundred miles from each other (space is huge). That’s the future.

“Intensely competitive”

By abulafia • Score: 5, Interesting Thread
I think that means “when there is any alternative to Comcast available in a given area”.

I used them for several years, and they dropped out nearly every time it rained. Which wasn’t just an inconvenience - I work from home.

I got a second ISP account with a local provider, who didn’t have the best reputation for reliability, but I used them as a backup.

After I set up monitoring on the lines I realized my connection to the local ISP was actually really stable, and dropped Comcast.

It was a great decision. No calling to negotiate the price down every year, it works in the rain, and the people there are really nice. They cost about 1/3 what Comcast charged, too.

Cory Doctorow On Tariffs and the DMCA In Canada

Posted by BeauHD View on SlashDot Skip
Longtime Slashdot reader devnulljapan writes:
In 2012, Canada passed anti-circumvention law Bill C-11, cut-and-pasted from the U.S. DMCA, in return for access to U.S. markets without tariffs. Trump has tariffed Canada anyway, so Cory Doctorow suggests it sounds like like a good idea to ditch Bill C-11 and turn Canada into a “Disenshittification Nation" and go into the business of “disenshittify[ing] America’s defective tech exports.”
Some of the specific ways Canada could respond include legalize jailbreaking, allow alternative app stores/clients, force companies to offer repair tools, and open firmware that break monopoly lock-ins. Cory’s pitch is equal parts economic strategy (capture the rents Big Tech extracts) and national security (reduce dependence on U.S. tech stacks that can be switched off or weaponized).

Immigration Problem

By TurboStar • Score: 3 Thread

Won’t work. Literally everyone except the oligarchs and their sycophants will move to Canada. Then they will complain about immigrants until a populist PM is elected and creates the 51st state.

Re:More self-promotion from this grifter…

By Computershack • Score: 4, Insightful Thread

More self-promotion from this grifter. The internet’s problem isn’t “shit” it’s “spam” and grifters like Corey are a part of the problem.

Enshittification just doesn’t apply to the internet, it applies to all technology. Take cars for example, replacing physical controls for things like heating, windscreen demister and wipers and putting them on the touchscreen.

Nice idea; won’t happen

By dskoll • Score: 3 Thread

Doctorow’s idea is nice, but the government of Canada is just as beholden to Big Tech as the government of the USA.

This sort of thing is marginally more likely to happen in the EU and much more likely to happen in places like China or Russia where they (rightly) don’t give a crap about laws that criminalize circumvention of DRM.

What Canada can do (and IMO must do) is stop using US products and services to the greatest extent practical, and then work on eliminating them from places where right now there are no practical alternatives, similar to initiatives like this.

Re: Nice idea; won’t happen

By crmarvin42 • Score: 5, Insightful Thread
I think I spotted the pro-billionare shill.

Doctorow is an open source advocate. Something that, famously, DOESNT pay well. If he is a grifter, what is the grift? Spend your career championing FOSS and losing out to big tech for peanuts?

it is right to be skeptical that Canada can wean itself off of the big tech lobbying teat, but calling him a grifter is just a laughably bad take. It shows you don’t know what the word Grifter means.

Re:Nice idea; won’t happen

By dskoll • Score: 5, Insightful Thread

It’s not based on “intellectual property theft”. It’s based on preventing corporations from abusing customers.

When a farmer can’t repair a tractor without paying thousands of dollars to the manufacturer, even if the actual problem is a $20 part, then sorry… fuck the corporation.

Linux Gaming Developers Join Forces To Form the Open Gaming Collective

Posted by BeauHD View on SlashDot Skip
A group of Linux gaming-focused distros and developers have formed the Open Gaming Collective to pool work on shared components like kernels, input systems, and Valve tooling. The Verge reports:
Universal Blue, developer of the gaming-focused Linux distribution Bazzite, announced on Wednesday that its helping to form the OGC with several other groups, which will collaborate on improvements to the Linux gaming ecosystem and âoecentralize efforts around critical components like kernel patches, input tooling, and essential gaming packages such as gamescope.” The other founding members of the OGC include Nobara, ChimeraOS, Playtron, Fyra Labs, PikaOS, ShadowBlip, and Asus Linux.

[…] It’s worth noting that this will mean some changes to Bazzite, which is switching to the OGC kernel, replacing HHD with InputPlumber as its input framework, and integrating features like RGB and fan control into the Steam UI. Bazzite also added that, “We’ll be sharing patches we’ve made to various Valve packages with the OGC and attempting to upstream everything we can.”

OGC

By samwichse • Score: 3 Thread

OGC looks like a little emoticon of a guy holding his dick.

An AI Toy Exposed 50K Logs of Its Chats With Kids To Anyone With a Gmail Account

Posted by BeauHD View on SlashDot Skip
An anonymous reader quotes a report from Wired:
Earlier this month, Joseph Thacker’s neighbor mentioned to him that she’d preordered a couple of stuffed dinosaur toys for her children. She’d chosen the toys, called Bondus, because they offered an AI chat feature that lets children talk to the toy like a kind of machine-learning-enabled imaginary friend. But she knew Thacker, a security researcher, had done work on AI risks for kids, and she was curious about his thoughts.

So Thacker looked into it. With just a few minutes of work, he and a web security researcher friend named Joel Margolis made a startling discovery: Bondu’s web-based portal, intended to allow parents to check on their children’s conversations and for Bondu’s staff to monitor the products’ use and performance, also let anyone with a Gmail account access transcripts of virtually every conversation Bondu’s child users have ever had with the toy.

Without carrying out any actual hacking, simply by logging in with an arbitrary Google account, the two researchers immediately found themselves looking at children’s private conversations, the pet names kids had given their Bondu, the likes and dislikes of the toys’ toddler owners, their favorite snacks and dance moves. In total, Margolis and Thacker discovered that the data Bondu left unprotected — accessible to anyone who logged in to the company’s public-facing web console with their Google username — included children’s names, birth dates, family member names, “objectives” for the child chosen by a parent, and most disturbingly, detailed summaries and transcripts of every previous chat between the child and their Bondu, a toy practically designed to elicit intimate one-on-one conversation.
More than 50,000 chat transcripts were accessible through the exposed web portal. When the researchers alerted Bondu about the findings, the company acted to take down the console within minutes and relaunched it the next day with proper authentication measures.
“We take user privacy seriously and are committed to protecting user data,” Bondu CEO Fateen Anam Rafid said in his statement. “We have communicated with all active users about our security protocols and continue to strengthen our systems with new protections,” as well as hiring a security firm to validate its investigation and monitor its systems in the future.

Testing.

By kellin • Score: 3 Thread

This is what happens when you neglect to even do basic testing.

I worked in QA for a few years back in the 90s and it still boggles my mind how poorly things are left untested, even today.

Hmm. What about the data

By ZERO1ZERO • Score: 5, Interesting Thread
So all this data - where does it go. tinfoil-hat-on No doubt being harvested into the AI machine singularity to learn how to talk to and manipulate children. Even emulate childrens conversations and speech patterns. This could be some of the most complete data about this. Having this kind of information stored and leaked like this is frightening. That’s what they say about all these phones and smart speakers always listening. but for what - just to show you and advert?

Corporate BS

By Scutter • Score: 5, Insightful Thread

“We take user privacy seriously and are committed to protecting user data

LOL, no you don’t. Demonstrably so.

Re:What matters is who pays for the breach

By swillden • Score: 4, Interesting Thread

I did security audits and the company that did the second best was a toy company. They did better than any banks, every governments agency we audited and all the defense contractors. The difference was that if this toy company got the security wrong they would lose large amounts of money. If a bank or the government f#$ks up security they don’t bear the pain.

I did security consulting for 15 years, all sorts of industries. Banks are among the worst. It’s not because they don’t lose money, it’s because banks view security entirely through a financial lens. It’s always about “how much fraud will this mitigate, and does the security cost more than eating the fraud”, plus they also use a lot of procedural mitigations — plus of course they’re always looking to see if there’s some other party they can shift the fraud cost to, though that’s less effective than you might think.

Anyway, I always chuckle when I hear someone use the phrase “bank grade security”, because I mentally translate it to “Not quite shitty enough to get hurt too bad”.

I also did lots of defense work, even working directly with various militaries around the world. US military security varies wildly. By far the best I saw was the Israeli Ministry of Defense. They were serious. But “military grade security” is also good for a laugh, not so much because militaries have terrible security (it’s mixed), but because the phrase has no real meaning and it’s strong evidence that the speaker doesn’t know anything about security. If I see “military grade security” in a product description, I immediately classify it as snake oil until proven otherwise. And it takes a lot of evidence to prove otherwise. Though sometimes stuff is actually good and it’s just the clueless marketers who slap the label on it — though it’s still a bad sign the the clued-in don’t have enough power in the company to get them to change it.

Just for completeness I’ll mention that the very best security I’ve seen was at Google. Google hires smart security engineers, has lots of resources to throw at the problem, and really cares about it. I mean actually cares about making sure it’s good, not just checking the boxes. Well, all that was definitely true when I joined Google in 2011. It’s still mostly true, though there is some box-checking creeping in… but it’s far from harmful as of yet because the security infrastructure is so very, very good. I left Google last year, and that’s one of the things I miss, although my new employer also has some really good security people.

Google’s Project Genie Lets You Generate Your Own Interactive Worlds

Posted by BeauHD View on SlashDot Skip
Google is letting outsiders experiment with DeepMind’s Genie 3 “world model" via Project Genie, a tool for generating short, interactive AI worlds. The caveat: it requires a $250/month AI Ultra subscription, is U.S.-only, and has tight limits that make it more of a tech demo than a game engine. Engadget reports:
At launch, Project Genie offers three different modes of interaction: World Sketching, exploration and remixing. The first sees Google’s Nano Banana Pro model generating the source image Genie 3 will use to create the world you will later explore. At this stage, you can describe your character, define the camera perspective — be it first-person, third-person or isometric — and how you want to explore the world Genie 3 is about to generate. Before you can jump into the model’s creation, Nano Banana Pro will “sketch” what you’re about to see so you can make tweaks. It’s also possible to write your own prompts for worlds others have used Genie to generate.

One thing to keep in mind is that Genie 3 is not a game engine. While its outputs can look game-like, and it can simulate physical interactions, there aren’t traditional game mechanics here. Generations are also limited to 60 seconds, as is the presentation, which is capped at 24 frames per second and 720p.

And no doubt…

By Sebby • Score: 3 Thread

they own everything you create, and you get to pay for that “privilege”.

Nvidia GeForce NOW Is Now Available Natively On Linux

Posted by BeauHD View on SlashDot Skip
NVIDIA has officially launched a native GeForce NOW client for Linux as a Flatpak, giving Linux gamers access to cloud-rendered RTX gaming. Phoronix reports:
While confined to a Flatpak, for now NVIDIA is just “officially” supporting it on Ubuntu 24.04 LTS and later. Granted, thanks to Flatpak it should run on other non-Ubuntu distributions too but in terms of the official support and where they are qualifying their builds they are limiting it just to Ubuntu 24.04 LTS and later. […] At launch the Flatpak build is also just for x86_64 Linux with no AArch64 Linux builds or similar at this time.

Running GeForce NOW on Linux while games are rendered in NVIDIA’s cloud with Blackwell GPUs, you still need to be using a modern GPU with H.264 or H.265 Vulkan Video support NVIDIA isn’t yet supporting Vulkan Video AV1 with GeForce NOW on Linux but just H.264/H.265. If you are using NVIDIA graphics the NVIDIA R580 series or newer is recommended while using the X.Org session. If you are using Intel or AMD Radeon graphics, Mesa 24.2+ is recommended and using the Wayland session.

When you are up and running with GeForce NOW on Linux, you have access to over 4,500 games. The free tier of GeForce NOW provides standard access to the gaming servers and limited session caps for an introductory-level experience. It’s with the performance tier where you can enjoy RTX ray-tracing and 1440p @ 60 FPS performance and up to six hour sessions. With GeForce NOW’s Ultimate tier is where you are running on GeForce RTX 5080 GPU servers with support for up to 5K @ 120 FPS gaming or 1080p @ 360 FPS with up to eight hour gaming sessions in length.

Worth noting…

By Tarlus • Score: 5, Interesting Thread

This therefore brings native support to Steam Deck, and with significantly improved performance over the web-based implementation.

Effort

By markdavis • Score: 3 Thread

Flatpack? Blech, would want native. At least it isn’t Snap.
Radeon- Check. Left NVidia due to poor Linux experience.
Wayland? No thanks.

Good thing I don’t game. But it is nice to see they are making an effort! Hopefully more good stuff coming. With all the Linux Steam hype/improvements/excitement going on, this is a great trend.

It must be FUBAR’d

By Gravis Zero • Score: 3 Thread

With GeForce NOW’s Ultimate tier is where you are running on GeForce RTX 5080 GPU servers with support for up to 5K @ 120 FPS gaming or 1080p @ 360 FPS with up to eight hour gaming sessions in length.

I don’t know about you but there sure reads like it’s a highly unstable software that cannot run longer than a few hours before it crashes.

County Pays $600,000 To Pentesters It Arrested For Assessing Courthouse Security

Posted by BeauHD View on SlashDot Skip
An anonymous reader quotes a report from Ars Technica, written by Dan Goodin:
Two security professionals who were arrested in 2019 after performing an authorized security assessment of a county courthouse in Iowa will receive $600,000 to settle a lawsuit they brought alleging wrongful arrest and defamation. The case was brought by Gary DeMercurio and Justin Wynn, two penetration testers who at the time were employed by Colorado-based security firm Coalfire Labs. The men had written authorization from the Iowa Judicial Branch to conduct “red-team” exercises, meaning attempted security breaches that mimic techniques used by criminal hackers or burglars.

The objective of such exercises is to test the resilience of existing defenses using the types of real-world attacks the defenses are designed to repel. The rules of engagement for this exercise explicitly permitted “physical attacks,” including “lockpicking,” against judicial branch buildings so long as they didn’t cause significant damage. […] DeMercurio and Wynn’s engagement at the Dallas County Courthouse on September 11, 2019, had been routine. A little after midnight, after finding a side door to the courthouse unlocked, the men closed it and let it lock. They then slipped a makeshift tool through a crack in the door and tripped the locking mechanism. After gaining entry, the pentesters tripped an alarm alerting authorities.

Within minutes, deputies arrived and confronted the two intruders. DeMercurio and Wynn produced an authorization letter — known as a “get out of jail free card” in pen-testing circles. After a deputy called one or more of the state court officials listed in the letter and got confirmation it was legit, the deputies said they were satisfied the men were authorized to be in the building. DeMercurio and Wynn spent the next 10 or 20 minutes telling what their attorney in a court document called “war stories” to deputies who had asked about the type of work they do. When Sheriff Leonard arrived, the tone suddenly changed. He said the Dallas County Courthouse was under his jurisdiction and he hadn’t authorized any such intrusion. Leonard had the men arrested, and in the days and weeks to come, he made numerous remarks alleging the men violated the law. A couple months after the incident, he told me that surveillance video from that night showed “they were crouched down like turkeys peeking over the balcony” when deputies were responding. I published a much more detailed account of the event here. Eventually, all charges were dismissed.

Sounds like

By ArchieBunker • Score: 3, Insightful Thread

Small town Sheriff Leonard was the person who left the side door unlocked.

Overreaction, but also poor planning

By Burdell • Score: 5, Insightful Thread

Their “get out of jail free” letter is so vague as to be useless; the biggest thing is it doesn’t say anything about what buildings they could access. And it turned out that the state organization who hired them didn’t have authority to grant them access to county-owned facilities (which I believe would also be the case in my state). It also sounds like both the testing company and the state agency failed in how the contracts were written. Really, while not surprised a state agency wrote a bad contract, a testing company should know better, so comes off as somewhat incompetent (having legal coverage for every action should be rather high on the priority list).

That said, when it became obvious it was a good-faith test and not an attack, at most there should have been some civil penalty against the company, not arrests of the individuals. Probably some sheriff up for reelection looking to get his name in the news for “protecting the county”.

Likely to happen a LOT more often…

By wierd_w • Score: 3 Thread

Centers for Medicare has *demanded* frequent penetration testing to be performed by all healthcare organizations that store digital patient records, as part of their new security rule.

You can read all about it here:
https://www.federalregister.go…

NATURALLY, I expect Hospital Management, and other pointy haired bosses to not understand the new requirements, and to flip out when the mandated penetration testing happens, that their own compliance officers and IT staff coordinated.

Re:Overreaction, but also poor planning

By karmawarrior • Score: 5, Insightful Thread

> Probably some sheriff up for reelection looking to get his name in the news for “protecting the county”.

More likely a power trip. TFA and linked TFA article even suggests the Sheriff was blaming the state saying it had no authority to order pen testing in the first place.

Good faith and a lack of physical damage should be a consideration before arresting anyone if it’s obvious at the time. And honestly, I suspect however bad the GOOJF letter was, it was written expecting everyone would be reasonable, and that any questions of whether the pen testers had themselves overstepped their boundaries would be handled as a typical contract situation, not a crime. To me, this is 100% on a power tripping sheriff, not on the state, nor on the pen testers’ managers.

Re:Likely to happen a LOT more often…

By cusco • Score: 4, Interesting Thread

Nope, that doesn’t work either. If you don’t have valid prior permission to enter you don’t get in (I helped create the AWS security procedures and systems). At one point a VP showed up as the new Dublin DC was opening with his entourage, and his secretary had forgotten to add his name to the list. He arrived and no matter how much hell he raised while his party went in and got the dog and pony show he had to cool his heels in the lobby. When he got back to Seattle and cooled down he wrote a letter of recommendation for the staff at Dublin and for us in the SOC. (No idea what he said to his secretary, though.)

Anyway, fire inspectors have access to a Knox Box on the outside of the building with a key card granting them escorted-only access. It’s 24x7, but they can’t go anywhere in the building without an escort, if no escort is available they have to wait until one is since the card won’t work by itself (I set that up and only after we implemented it got around to writing the policy. Oops.)

ArXiv Will Require English Submissions - and Says AI Translators Are Fair Game

Posted by msmash View on SlashDot Skip
The preprint repository arXiv will require all submissions to be written in English or accompanied by a full English translation starting February 11, a policy change that explicitly permits the use of AI translators even as research suggests large language models remain inconsistent at the task.

Until now, authors only needed to submit an abstract in English. ArXiv hosts nearly 3 million preprints and receives more than 20,000 submissions monthly, though just 1% are in languages other than English.

Ralph Wijers, chair of arXiv’s editorial advisory council, advises authors to verify any AI-generated translations. “Our own experience is that AI translation is good but not good enough,” he says. A 2025 study from ByteDance Seed and Peking University ranked 20 LLMs on translation quality between Chinese and English; GPT-5-high scored nearly 77, just below the human expert benchmark of 80, but most models including GPT-4o, Claude 4, and Deepseek-V3 scored under 60.

US Leads Record Global Surge in Gas-Fired Power Driven by AI Demands

Posted by msmash View on SlashDot Skip
An anonymous reader shares a report:
The US is leading a huge global surge in new gas-fired power generation that will cause a major leap in planet-heating emissions, with this record boom driven by the expansion of energy-hungry datacenters to service AI, according to a new forecast.

This year is set to shatter the annual record for new gas power additions around the world, with projects in development expected to grow existing global gas capacity by nearly 50%, a report by Global Energy Monitor (GEM) found. The US is at the forefront of a global push for gas that is set to escalate over the next five years, after tripling its planned gas-fired capacity in 2025.

Much of this new capacity will be devoted to the vast electricity needs of AI, with a third of the 252 gigawatts of gas power in development set to be situated on site at datacenters. All of this new gas energy is set to come at a significant cost to the climate, amid ongoing warnings from scientists that fossil fuels must be rapidly phased out to avoid disastrous global heating.

Without Requiring Solar Storage Projects

By nevermindme • Score: 3 Thread
Without requiring solar plus storage this result was clear over 2 decades ago when photovoltaic generation was 5 times more expensive per watt and storage was 20 times more expensive per watt hour. What is the cheapest rapid response solution to keep the grid stable as you pull coal fired revisors of massive amounts of throttleable steam offline, simple gas fired turbine pants. The greens can complain that the rated capacity is increasing but looking at the EIA charts of the USA, your average gas fired plant is doing anything other than being reactive spinning mass for 240 to 700 hours a year. Don’t make a perfect soliton the enemy of the good enough for now, coal in most markets is gone, unless your making steel at the same time.

US Life Expectancy Jumps To a Record 79 Years

Posted by msmash View on SlashDot Skip
An anonymous reader shares a report:
U.S. life expectancy rose to a record high of 79 years in 2024, an increase of six months from the previous year, reflecting a sharp decline in deaths from COVID-19 and drug overdoses, the Centers for Disease Control and Prevention said on Thursday.

According to a report from the CDC’s National Center for Health Statistics, life expectancy improved for both men and women across races and among Hispanics, surpassing the previous peak set in 2014.

Re:And with only triple the per-capita GDP!

By Pseudonymous Powers • Score: 5, Funny Thread
I have heard that we got out of at least eight ongoing wars last year. That probably accounts for a lot of it.

Not if..

By Sebby • Score: 5, Informative Thread

I.C.E. is in your area.

Re: RFK numbers

By Baloroth • Score: 5, Insightful Thread
While I don’t trust the CDC these days either, the numbers are for 2024, i.e. before Trump and his minions started their American fire sale. The numbers actually make Trump look pretty bad: not only due to the effects of COVID (which they claim wasn’t a serious disease), but because the decrease in deaths from fentanyl shows that their entire “anti-drug” campaigns are horseshit, and that Biden-era policies were actually reducing deaths from drugs without engaging in wholesale slaughter of Venezualen fishermen or murdering nurses on the streets.

Re:RFK numbers

By thegarbz • Score: 4, Interesting Thread

Rather than focusing on leadership why not look at the numbers themselves. What reason do you have to believe that the numbers aren’t correct considering they follow the same trend as literally every other western nation (while lagging them all and not showing any evidence of an extraordinary increase)?

Additionally if you are the conspiracy theory type, why would you think the administration would go out of its way to report high numbers during *checks note* Biden’s presidency? You’re so kneejerk that you turned off your brain 12 words into TFS.

Re:RFK numbers

By unrtst • Score: 5, Insightful Thread

I’m suspect of the numbers due to the administration upheaval, but my gut reaction was, “Duh… COVID killed off A LOT of people, and very likely was a lot of people with preexisting conditions.” It’d make sense for life expectancy to increase in the years after such a pandemic.

Microsoft Admits Windows 11 Has a Trust Problem, Promises To Focus on Fixes in 2026

Posted by msmash View on SlashDot Skip
Microsoft wants you to know that it knows that Windows 11, now used by a billion users, has been testing your patience and announced that its engineers are being redirected to urgently address the operating system’s performance and reliability problems through an internal process the company calls “swarming.”

“The feedback we’re receiving from our community of passionate customers and Windows Insiders has been clear. We need to improve Windows in ways that are meaningful for people,” Pavan Davuluri, president of Windows and devices, told The Verge. The company plans to spend the rest of 2026 focusing on pain points including system performance, reliability, and overall user experience.

January has been particularly rough for Windows 11. Microsoft issued an emergency out-of-band update to fix shutdown issues on some machines, then released a second out-of-band fix a week later to address OneDrive and Dropbox crashes. Some business PCs are also failing to boot after the January update because they were left in an “improper state” after December’s monthly update failed to install. Users have also grown frustrated by aggressive Edge and Bing prompts, constant OneDrive upselling nags, and Microsoft’s push to require Microsoft accounts.

The core members of the company’s Windows Insider team recently moved to different roles. “Trust is earned over time and we are committed to building it back with the Windows community,” Davuluri said.

Meaningful

By crunchy_one • Score: 5, Insightful Thread
I don’t believe Microsoft understands fully what would be “meaningful” to their customers. How about removing the Microsoft account requirement, removing the telemetry, removing the ads, removing the AI, removing the cloud integration, removing the bloat? How about giving customers real control, like being able to turn off updates. That would be meaningful.

Start by not turning everything into Chrome

By Joe Jordan • Score: 5, Interesting Thread
Microsoft has progressively been making everything an instance of Chrome. They’ve seemingly altogether given up the notion of native platform rendering. The win32 api for native ui elements hasn’t been touched in two decades. There have been a few failed attempts to move on from it like Siverlight, WinForms, UWP, LightSwitch, etc, but they never bothered to revisit their native UI library. So now everything is a Chrome instance.

My preference would be for them to focus on fast, native rendering again, maybe with a new ‘win64 api’. But I’m not sure that talent or expertise exists at MSFT anymore.

Low hanging fruit

By YuppieScum • Score: 5, Insightful Thread

They can regain trust by removing the following:

1. Telemetry.
2. Advertising.
3. “AI”.
4. Mandatory Microsoft account.
5. Arbitrary restrictions on supported hardware (TPM, CPU age).

Easy really - no need to add anything.

Re:Meaningful

By nightflameauto • Score: 4, Insightful Thread

I don’t believe Microsoft understands fully what would be “meaningful” to their customers. How about removing the Microsoft account requirement, removing the telemetry, removing the ads, removing the AI, removing the cloud integration, removing the bloat? How about giving customers real control, like being able to turn off updates. That would be meaningful.

Yeah, they’re not going to stop shoveling AI and “give us all your data” initiatives. And while I have no outright proof, I have to think the data-suck and honestly too-fast addition of AI features is leading to a lot of the instability issues we’ve been hearing about. I’ve found that if I keep networking completely turned off I get much better performance on local-only tasks. Even without opening an email client or a web browser but leaving the network adapter turned on I see CPU and RAM usage climb fairly quickly. Which tells me there’s something running when the network is on that isn’t when it’s turned off. I would pop a network sniffer if I got real curious about it, but I just want to use my computer during my limited time each day to record some guitar, program some drums, and do a little writing. Turning off the network allows me to accomplish that.

It’s too bad the network is required for so many workflows now. It leaves the great big gaping window open, and Microsoft is both the construction company of the house you’re living in, and the peeping tom desperate to catch your digital life in its underwear.

Re:Low hanging fruit

By SoCalChris • Score: 4, Insightful Thread

8. If they have to include a News app, give people the option of entering the websites of the news sources they trust, not the ones MS wants us to read

And for fuck’s sake, if I click on one of those news articles, open it in my default browser, not Edge!

Why Private Equity Is Suddenly Awash With Zombie Firms

Posted by msmash View on SlashDot
The private equity industry is experiencing a quiet reckoning as hundreds of midsize firms find themselves trapped between investors who have lost patience and portfolios of companies they cannot sell at acceptable prices.

“There is existential risk for a number [of funds] because of the fundraising environment,” said Sunaina Sinha Haldea, global head of private capital advisory at Raymond James. “If existing investors don’t come and support them, new investors are highly unlikely to.”

According to data from Preqin, the average buyout fund that closed in 2025 spent 23 months fundraising, up from 16 months in 2021, and the total number of funds raised fell to 1,191 from 2,679 over the same period. New York’s Vestar Capital scrapped plans for its eighth fund in late 2024 and has not invested in a new portfolio company since 2023. The firm’s assets under management dropped from $7 billion fifteen years ago to $3.3 billion in 2024.

Three-year annualized returns through June 2025 for the Cambridge Associates U.S. Private Equity Index stand at 7.4%, trailing the MSCI World stock index by 11 percentage points annually. The average holding period for buyout deals has stretched to 6.3 years from 5.1 years in 2020. Blue-chip megafunds continue raising capital normally, but smaller firms face existential pressure.

No sobbing here.

By Mspangler • Score: 5, Insightful Thread

They should have invested in extremely small violins.

The gambling/looting operations will not be missed.

PE can fuck off

By anoncoward69 • Score: 5, Insightful Thread
Word of advice for youngins out there. If the place you work for is ever bought out by a private equity firm, brush up your resume and abandon ship ASAP. You’ re going to be out of work in a year either due to “downsizing” or the PE firm just runs the company into the ground collecting as much money as they can in the process.

Also don’t do business with PE-owned businesses

By hwstar • Score: 5, Insightful Thread

This includes things like auto repair shops, dentists, veterinarians, home improvement contractors.

PE has been seeping into these businesses by buying out the owners.

A good way to tell if a company is PE-owned if they won’t tell you is to look at their consumer contract.

Firms owned by PE extract as much from the customer as they legally can and leave no value on the table. Their contracts are full of binding arbitration, evergreening (automatic renewal) clauses, and short warranty periods.

The materials used by PE-owned businesses are sub-par as they cut their material costs to the bone. This explains the short warranty periods.

Re:They bought my plumber!

By fuzzyfuzzyfungus • Score: 5, Interesting Thread
The usual term with things like plumbers is “rollup”. Even the most delusional excel jockey probably doesn’t believe he has ‘operational alpha’ vs. a veteran plumber in matters of plumbing; but he(correctly) knows that local plumbing outfits are a fairly heavily fragmented industry with a lot of relatively small players; the sort of quaint folksy thing that looks like one of those competitive free markets they told you about in EC101. And, if you, purely hypothetically, can borrow money for a pittance, you don’t need to improve operations when you can just buy a bunch of the small players, consolidate them, and then raise prices to match the newly reduced level of competition.

Same deal works with more or less any business with a lot of mom ‘n pop operators; as well as things like rental housing. Maybe there are some marginal efficiency improvements in back office functions because it’s not eleventy zillion individual copies of quickbooks; but most of the actual margins come from the higher prices you can command from customers and the lower prices you can offer to suppliers and employees once you consolidate a given sector in a given area. The effect is particularly lurid when it comes to thinks like small medical and dental practices; or care homes; since there it’s about the money; but being about the money is also about pushing your employees to recommend unnecessary implant surgery and cutting patient/staff ratios as hard as you can without anyone noticing too many bedsores. Fantastic stuff, really.

Re:No sobbing here.

By King_TJ • Score: 4, Insightful Thread

I’ve spent much of my life working for small or mid-sized companies. I left one such company (on good terms) shortly before the owner/CEO passed away. He had always had a plan to keep the business going by making it a partnership in thirds. His vice president had a chunk of the company and their bookkeeper held the last third. He held out from selling out to a larger business that expressed interest in merging, when he figured out they really only wanted our customer list. Most of our employees would be on the chopping block. Sadly, his VP developed Alzheimer’s right around the time the owner died, and the bookkeeper didn’t really have the interest in owning/running the whole company on her own. So they’re no longer around.

I’m also working, now, for one where the owner decided he wanted to retire. In his case, he sold to Private Equity, but only after being “sold” on the idea it was a good match for our business. (Supposedly, this was a firm who was very selective who they bought out, and had similar goals to expand the business, etc. etc.)
So far, it’s shaping up to be every bit as bad as people always warn. I’m looking for an exit. Yes, they’re trying to merge with several other companies and “grow”, but it’s all being done with zero interest in spending on more labor for people doing the computer support required to keep it all going. They’re also floating some ideas to convert one company they’re buying to operate exactly like ours does, and I can already see reasons that’s a bad idea.