Alterslash

the unofficial Slashdot digest
 

Contents

  1. Linux Maintainer Greg Kroah-Hartman Says AI Tools Now Useful, Finding Real Bugs
  2. NASA’s First Nuclear-Powered Interplanetary Spacecraft Will Send Helicopters to Mars in 2028
  3. ‘Ads Are Popping Up On the Fridge and It Isn’t Going Over Well’
  4. Transporting Antimatter On a Truck Is Tricky…
  5. People are Using AI-Powered Services to Find Lost Pets
  6. OpenAI’s US Ad Pilot Exceeds $100 Million In Annualized Revenue In Six Weeks
  7. UK Startup Ignites Plasma Inside Nuclear Fusion Rocket
  8. AV1’s Open, Royalty-Free Promise In Question As Dolby Sues Snapchat Over Codec
  9. Google Moves Post-Quantum Encryption Timeline Up To 2029
  10. European Commission Investigating Breach After Amazon Cloud Account Hack
  11. Windows PCs Crash Three Times As Often As Macs, Report Says
  12. Austria Plans Social Media Ban For Under-14s
  13. Iran-Linked Hackers Breach FBI Director’s Personal Email
  14. Popular LiteLLM PyPI Package Backdoored To Steal Credentials, Auth Tokens
  15. Number of AI Chatbots Ignoring Human Instructions Increasing, Study Says

Alterslash picks up to the best 5 comments from each of the day’s Slashdot stories, and presents them on a single page for easy reading.

Linux Maintainer Greg Kroah-Hartman Says AI Tools Now Useful, Finding Real Bugs

Posted by EditorDavid View on SlashDot Skip
Linux kernel maintainer Greg Kroah-Hartman tells The Register that AI-driven code review has “really jumped” for Linux. “There must have been some inflection point somewhere with the tools…”
“Something happened a month ago, and the world switched. Now we have real reports.” It’s not just Linux, he continued. “All open source projects have real reports that are made with AI, but they’re good, and they’re real.” Security teams across major open source projects talk informally and frequently, he noted, and everyone is seeing the same shift. “All open source security teams are hitting this right now....”

For now, AI is showing up more as a reviewer and assistant than as a full author of Linux kernel code, but that line is starting to blur. Kroah-Hartman has already done his own experiments with AI-generated patches. “I did a really stupid prompt,” he recounted. “I said, ‘Give me this,’ and it spit out 60: ‘Here’s 60 problems I found, and here’s the fixes for them.’ About one-third were wrong, but they still pointed out a relatively real problem, and two-thirds of the patches were right.” Mind you, those working patches still needed human cleanup, better changelogs, and integration work, but they were far from useless. “The tools are good,” he said. “We can’t ignore this stuff. It’s coming up, and it’s getting better....” [H]e said that for “simple little error conditions, properly detecting error conditions,” AI could already generate dozens of usable patches today.

The sudden increase in AI-generated reports and AI-assisted work has also spurred a parallel push to build AI into the kernel’s own review infrastructure. A key piece of that is Sashiko, a tool originally developed at Google and now donated to the Linux Foundation.
Kroah-Hartman said some patches are being generated with AI now. “You have a little co-develop tag for that now. We’re seeing some things for some new features, but we’re seeing AI mostly being used in the review.”

NASA’s First Nuclear-Powered Interplanetary Spacecraft Will Send Helicopters to Mars in 2028

Posted by EditorDavid View on SlashDot Skip
After decades of studying, this week NASA announced “a major step forward in bringing nuclear power and propulsion from the lab to space.”
NASA will launch the Space Reactor-1 Freedom, the first nuclear powered interplanetary spacecraft, to Mars before the end of 2028, demonstrating advanced nuclear electric propulsion in deep space. Nuclear electric propulsion provides an extraordinary capability for efficient mass transport in deep space and enables high power missions beyond Jupiter where solar arrays are not effective.
Steven Sinacore, NASA’s program executive for Fission Surface Power who will also oversee the SR-1 Freedom mission, emphasized to CNN that “On the ground the reactor is off. There’s no radiation coming from it. It doesn’t actually turn on until you’re up in space, and that’s where the radiation comes from.” NASA says they aim to develop the capabilities required “for sustained exploration beyond the Moon and eventual journeys to Mars and the outer solar system.”

And Space Reactor-1 Freedom will carry a fleet of tiny helicopters (much like Ingenuity) to explore Mars, reports Space.com:
Whereas Ingenuity was a technology demonstrator, however, the Skyfall fleet will have concrete tasks. Chief among them is scout: If all goes to plan, the little choppers will help NASA assess the potential of their target area (wherever that happens to be) to support human exploration. The Skyfall helicopters will carry cameras and ground-penetrating radar to scout a future landing site, to understand the slopes and hazards for human-scale landers,” Steve Sinacore, the program executive for NASA’s Space Reactors Office, said during the briefing. “They will also map and characterize the subsurface water ice to find out where the water ice deposits are, along with the size, depth and other important characteristics,” he added…

And that might not be the end of the line for SR-1 Freedom; NASA may decide to keep flying the spacecraft out into the solar system after it deploys the Skyfall choppers, according to Sinacore. The mission architecture, like much of NASA’s exploration portfolio, is not yet finalized.

‘Ads Are Popping Up On the Fridge and It Isn’t Going Over Well’

Posted by EditorDavid View on SlashDot Skip
The Wall Street Journal reports:
Walking into his kitchen, Tim Yoder recoiled at a message on his refrigerator door: “Shop Samsung water filters.” Yoder, a supply-chain manager in Chicago, owns a Samsung Electronics Family Hub fridge. He paid $1,400 for an appliance that came with a 32-inch screen on the door that allows him to control other Samsung gadgets, pull up recipes or stream music. But since last fall, it’s been intermittently serving up ads, part of a pilot program being tested on some of Samsung’s smart fridges sold in the U.S. The response? Not warm. “I guess this is another place for somebody to shove an ad in your face,” said the 47-year-old Yoder, recalling the first time he noticed one…

The ads are only on certain Family Hub fridges that have screens and internet connectivity. They run as a rectangular banner at the bottom — part of a widget that also shows news, the weather and a calendar. Samsung declined to say how long the pilot might last or whether it would end. The firm recently unveiled a “Screens Everywhere” initiative that also includes washers, dryers and ovens.... Samsung launched the banner-type fridge ads that come as part of the widget via an October software update. In a footnote of a news release at the time, Samsung pledged to “serve contextual or non-personal ads” and respect data privacy. The banner ads can be turned off in settings.

Samsung said the purpose of the pilot is to explore whether ads relevant to home chores can be useful to owners, and that overall pushback has been negligible. The “turn-off” rate for the pilot ad program remains in the bottom single-digit range, it said… While owners can turn off the banner ads, doing so eliminates the widget altogether, a bummer for Brian Bosworth, a media-industry engineer who liked the feature. Bosworth thinks it’s wrong to take away the new feature as a condition. Wanting to keep the widget but not the ads, the 49-year-old in Edgewater, Md., made sure his home router’s ad-blocking software extended to his fridge. He hasn’t seen another since.
One 27-year-old plans to return his refrigerator after the entire display “lit up with a full-screen ad for Apple TV’s sci-fi show Pluribus,” according to the article. The all-caps ad beckoned him “with an oft-used refrain directed at protagonist Carol Sturka: ‘We’re Sorry We Upset You, Carol.’"

Thanks to Slashdot reader fjo3 for sharing the article.

What did he expect?

By ebcdic • Score: 5, Insightful Thread

Don’t but anything with a screen that doesn’t need it.

Transporting Antimatter On a Truck Is Tricky…

Posted by EditorDavid View on SlashDot Skip
Long-time Slashdot reader Qbertino writes:
… but the CERN Project “Antimatter in motion” just did it. For the first time in history researchers at CERN have transported 92 antiprotons on a truck in a specially designed magnetic enclosure. The test-drive went so well that the researchers spontaneously decided to go another round… The purpose of the experiment was to test the feasibility of transporting antimatter to other facilities in Europe to conduct further antimatter research. German news Tagesschau has a nice report.
CNN reports that the antiproton enclosure was nearly six feet tall and weighed about 1,760 pounds. And Smithsonian magazine explains that it trapped the antiprotons in a vacuum chamber that had to be cooled to around -450 degrees Fahrenheit:
Experts used a crane to carefully move the box of precious cargo from a lab onto a truck, which took about three hours, per the Associated Press' Jamey Keaten. Then, they drove the vehicle for roughly 30 minutes around CERN’s campus, and subsequently returned the antiprotons to the lab. They worked with so little antimatter that even if it did touch ordinary matter and annihilate, it would release a small amount of energy detectable only by a special instrument, reports the AP.

Particularly …

By PPH • Score: 4, Informative Thread

… if you do it twice.

Re:Future

By dskoll • Score: 5, Funny Thread

-4 years.

I’d hate to be the guy

By Baron_Yam • Score: 4, Funny Thread

“Inventory says we should have 92 antiprotons, but I keep counting 91”.

“Keep looking!”

People are Using AI-Powered Services to Find Lost Pets

Posted by EditorDavid View on SlashDot Skip
A dog missing for two months was found at an animal shelter — and its owner received an email from an artificial intelligence service that identified it, according to the Washington Post.

“As controversial as AI is right now, this is one of those areas where it’s a real win,” according to the chief executive at the nonprofit animal welfare organization Best Friends Animal Society. And while it shouldn’t replace microchipping pets, AI does offer another tool to help desperate pet owners (and overcrowded animal shelters) — and might even be “game-changing”…
People send photos of their lost pets to a database, and AI compares the pets’ features — including facial structure, coat pattern and ear shape — to photos of stray pets that have been spotted elsewhere. Many of the stray pets have already been taken to shelters… Doorbell cameras have recently implemented facial recognition for dogs, and perhaps the largest AI database for pet reunification is Petco Love Lost, which says it has reunited more than 200,000 pets and owners since 2021… After owners upload photos of their lost pets, AI scans thousands of photos of lost animals from social media and from about 3,000 animal shelters and rescues that use the software, according to Petco Love, an animal welfare nonprofit that’s affiliated with the pet store Petco. It notifies owners if two photos match.
The article notes that one in three pets go missing during their lifetime, according to figures from the Animal Humane Society. “But as technology has progressed, so have resources for finding lost pets” — including GPS collars — and now, apparently, AI-powered pet identification.

Chipped Aminals

By beebware • Score: 3, Insightful Thread
Or you could just have a NFC-like chip inserted into the animal’s neck which can be cheaply scanned by rescues/vets and have owners contact details looked up (as we do in the UK: it is a legal requirement to have all dogs and now cats ‘microchipped’).

Success rate?

By Gravis Zero • Score: 3 Thread

Anecdotes are great for swaying the mindless but how about some statistics on the rate of success this thing has. I would also want to know the rate of false identifications because who wants to have their hopes dashed?

However, what would VASTLY improve helping lost pets is directly microchip reading into the computer. I’m not joking when I say, the biggest issues with microchip’d pets is that many times, the ID code read from the chip, shown on the scanner display, and then is manually transcribed into the computer. This results in a lot of transcription errors which is something absurdly high like 7%. Sometimes the transcription error happens upon registration, sometimes it’s upon lookup. Either way, if everyone simply used readers that relayed the info directly to the computer then a lot more pets would be reunited with their owners.

Re:Chipped Aminals

By jacks smirking reven • Score: 4, Insightful Thread

Yup I remember when i adopted my first dog from the local humane society and they chip every animal that comes through but during the adoption they explained the chip doesn’t actually do anything until you pay the database company a yearly(!) fee. I ended up never doing it because that felt like the most scummy thing on earth. Maybe that’s just my state but it was an unreal moment and really dashed my ideas of how these things work.

It’s very American that we take an idea that rally is a universal public good and declare “there’s profit to be made” and effectively ruin it.

I get paying for the chip, it’s a piece of hardware but the database should be maintained by your state with free access. It just doesn’t make any sense otherwise.

OpenAI’s US Ad Pilot Exceeds $100 Million In Annualized Revenue In Six Weeks

Posted by BeauHD View on SlashDot Skip
An anonymous reader quotes a report from Reuters:
OpenAI’s ChatGPT ads pilot in the United States has crossed the $100 million annualized revenue mark within six weeks of launch, a company spokesperson said on Thursday, pointing to robust early demand for the AI startup’s nascent advertising business. […] While roughly 85% of users are currently eligible to see ads, fewer than 20% are shown ads daily, with considerable room to grow ad monetization within the existing user pool, the spokesperson said.

“We’re seeing no impact on consumer trust metrics, low dismissal rates of ads, and ongoing improvements in the relevance of ads as we learn from feedback,” OpenAI said. The company plans to expand the test globally in additional countries in the coming weeks, including in Australia, New Zealand, and Canada. OpenAI has now expanded to over 600 advertisers, with nearly 80% of small- and medium-sized businesses signaling interest in ChatGPT ads, the spokesperson said. The ChatGPT maker is set to launch self-serve advertiser capabilities in April to broaden access and drive further growth.
CEO Sam Altman announced plans to begin testing ads on ChatGPT back in January after previously rejecting the idea. “I kind of think of ads as like a last resort for us as a business model,” Altman said in 2024.

Further reading: OpenAI CFO Says Annualized Revenue Crosses $20 Billion In 2025

Fuck This and Fuck Them

By SlashbotAgent • Score: 5, Insightful Thread

Fuck ads.

My take

By Registered Coward v2 • Score: 4, Interesting Thread
I am not a fan of ads, but will tolerate them if I find the content worthwhile and it is free, as in someone else is buying the beer. There are sites I like and do not block ads because I want them to be around, and in the end they either need to paywall or run ads to stay in business. If I pay for a site, then I want it ad free. That’s the deal.

For sites like Netflix, with ads + subscription price, I need to decide where the value/cost trade off occurs. For some sites, it’s cancel and forget about them, others pay at some level.

Unfortunately, ads are here to stay. The days of Archie, Veronica, Lynx are long gone…

Trash your principles

By NotEmmanuelGoldstein • Score: 3 Thread

… a last resort …

Oh, Sam, we know you’re not that ignorant: When your early investors demand bigger dividends, you’ll trash your principles like yesterday’s paper. You know, we know that.

Is this what SaaS CEOs have become: Salesmen who tell lies that everyone knows are lies, same as insurance industry CEOs. I guess, it was always so but now, you don’t attempt to hide it behind the facts.

What’s the ROI then ?

By greytree • Score: 3, Insightful Thread
$100 billion invested
vs
$100 million p.a. income.

And that is, by Dirty Altman’s own words, their “Last Resort”.

Goodbye and good riddance.

Anthropic’s Super Bowl ads addressed this issue!

By echo123 • Score: 3 Thread

Of course no one on Slashdot watches sports or ads, so let me point out…

Anthropic’s Super Bowl ads were extremely well done IMHO, with just the right amount of ‘pause’. Anthropic came to the Super Bowl party in ad form to make it clear Anthropic/Claude won’t do ads.

How can I communicate better with my mom?

Is my essay making a clear argument?

What do you think of my business idea?

Can I get a six pack quickly?

UK Startup Ignites Plasma Inside Nuclear Fusion Rocket

Posted by BeauHD View on SlashDot Skip
UK startup Pulsar Fusion says it has achieved the first plasma ignition inside a nuclear fusion rocket engine prototype — a huge step for space travel that could cut missions to Mars “from months-long journeys to just a few weeks,” reports Euronews. From the report:
Pulsar Fusion revealed the milestone during a live stream at Amazon’s MARS Conference, hosted by Jeff Bezos in California this week, with CEO Richard Dinan calling it an “exceptional moment” for the company. The team successfully created plasma - an intensely hot, electrically charged state of matter, often described as the fourth state of matter - using electric and magnetic fields inside its experimental and early prototype “Sunbird fusion exhaust system.” […] The company now plans further testing of its Sunbird system to improve performance. Upcoming upgrades include more powerful superconducting magnets designed to better contain and control plasma.

The fusion delusion strikes again

By Anonymous Coward • Score: 4, Informative Thread

“Successfully created plasma” is so far from fusion that this isn’t a laughable claim, it is just stupid bullshit marketing.

Re:The fusion delusion strikes again

By quenda • Score: 4, Informative Thread

If only you could get to Mars by burning investor capital and government grants.

Specific impulse

By burtosis • Score: 4, Insightful Thread
All rockets basically do is throw mass out the back to move forward with an equal and opposite reaction since we don’t have massless drives like using light for propellant. The problem lies in that the mass has to be loaded on and can’t be collected as it goes so the faster you can eject the mass the more force you can get from each particle and this ratio of mass to thrust is called specific impulse. A high specific impulse means you will be able to travel faster long term, and even short term if the engine also is capable of high thrust. The reason ion drives are so efficient is because the electric fields can accelerate mass to a far higher speed then chemical reactions giving them roughly 10x the specific impulse. If a Fusion Drive could be created, even if you put more energy into it than was used as thrust (powered by a fission reactor or RTG for example), the incredibly high temperatures could exceed ion drives specific impulse while the nuclear power source has an energy density that far exceeds any chemical reaction. So it’s not totally crazy to want a Fusion Drive that’s energy negative.

Re:Specific impulse

By burtosis • Score: 4, Informative Thread
In an abstract sense photons have mass, but it is not the same as rest mass and so the convention is to call it massless. This is an important distinction not because equations can’t be made accurately and precisely but because it’s useful to break down the thinking of energy from mass to be intrinsic to the particle or intrinsic to the larger system as a whole. They have _momentum_ which they transfer by absorption or reflection causing a corresponding momentum change in the particle(s) but the mass is precisely zero for all photon energies.

Re:The fusion delusion strikes again

By XXongo • Score: 5, Insightful Thread

There will be no manned Mars missions: radiation.

Not a showstopper, but definitely a problem that needs to be addressed.

It’s not per se a deadly amount of radiation, but it does increase the astronaut’s risk of cancer. A quick calculation once suggested that a trip to Mars and back would give you an increased risk of cancer roughly equivalent to smoking a pack of cigarettes a day. Robert Zubrin once quipped that the answer is simple: pick astronauts who are smokers… and don’t send any cigarettes with them.

The problem is that no one has any doable idea to stop it.

To the contrary, this has been analyzed a lot, and there are many ideas for how to stop it. With respect to the current topic, one idea is simply to use a more effective engine, and make the trip faster to shorter the exposure.

And this isn’t the milk toast radiation we get around the Earth. This is the really nasty stuff from the rest of the Universe.

Really there are two types of radiation to worry about. One is solar protons (coronal mass ejections, or “CME"s), and the other is galactic cosmic rays (“GCR"s).

And if you are lucky, you won’t run into a solar flare on the way.

That, at least, is a solvable problem. The protons from a solar flare can be seen in advance, and last only a day or so. You can make a small portion of the spacecraft a “storm shelter” with enough shielding to stop protons (light elements are best for stopping protons; water, for example, is a great dhielding material. GCRs are harder to stop). It would be too heavy to shield the entire ship, but the astronauts can stay in their shelter for a day or so. GCRs you simply have to live with. This risk is cumulative, so the solution is to go as fast as possible.

Aside from the pretty lights, it is really nasty radiation. Don’t forget to protect your space craft’s instruments, they are more delicate than even you.

Protecting electronics is something we already know how to deal with. We have robotic probes that have been operating for literally years in deep space, not to mention one probe that routinely dips into the ferocious radiation environment of Jupiter’s radiation belts.

AV1’s Open, Royalty-Free Promise In Question As Dolby Sues Snapchat Over Codec

Posted by BeauHD View on SlashDot Skip
An anonymous reader quotes a report from Ars Technica:
AOMedia Video 1 (AV1) was invented by a group of technology companies to be an open, royalty-free alternative to other video codecs, like HEVC/H.265. But a lawsuit that Dolby Laboratories Inc. filed this week against Snap Inc. calls all that into question with claims of patent infringement. Numerous lawsuits are currently open in the US regarding the use of HEVC. Relevant patent holders, such as Nokia and InterDigital, have sued numerous hardware vendors and streaming service providers in pursuit of licensing fees for the use of patented technologies deemed essential to HEVC.

It’s a touch rarer to see a lawsuit filed over the implementation of AV1. The Alliance for Open Media (AOMedia), whose members include Amazon, Apple, Google, Microsoft, Mozilla, and Netflix, says it developed AV1 “under a royalty-free patent policy (Alliance for Open Media Patent License 1.0)" and that the standard is “supported by high-quality reference implementations under a simple, permissive license (BSD 3-Clause Clear License).”

Yet, Dolby’s lawsuit filed in the US District Court for the District of Delaware [PDF] alleges that AV1 leverages technologies that Dolby has patented and has not agreed to license for free and without receiving royalties. The filing reads: "[AOMedia] does not own all patents practiced by implementations of the AV1 codec. Rather, the AV1 specification was developed after many foundational video coding patents had already been filed, and AV1 incorporates technologies that are also present in HEVC. Those technologies are subject to existing third-party patent rights and associated licensing obligations.” Dolby is seeking a jury trial, a declaration that Dolby isn’t obligated to license the patents in questions under FRAND (fair, reasonable, and non-discriminatory) licensing obligations, and for the court to enjoin Snap from further “infringement.”

Re:Why are lawsuits allowed against end users?

By karmawarrior • Score: 4, Informative Thread

Unfortunately, from a legal point of view, AOMedia hasn’t done anything against Dolby. It’s simply created a video compression codec. It doesn’t use the codec, it just publishes documentation on how to use it.

It’s arguable, I guess, that by claiming their codec is royalty free without mentioning Dolby’s patents, AOMedia may have caused harm to Snapchat. But that would mean Snap would sue AOMedia, not Dolby.

Does this suck? Yes. But unfortunately you can’t just sue someone on the basis of “who’s the bad guy”, you have to prove they caused damage to you in some way. And in AV1’s case, not only did AOMedia not harm Dolby, they actually helped them, by creating a new patent royalty stream for them. Sucks, huh?

Re:Why are lawsuits allowed against end users?

By Mr. Dollar Ton • Score: 4, Informative Thread

From the legal doc, it appears that Dolby is suing snap for not signing a licensing agreement for other codecs it is using, and not primarily AV1.

IANAL and I only flipped through the case, but the claims are about specific patents that dolby thinks are used in codecs that snapchat is using on their site alongside AV1, which are covered by some large license pool Dolby is a member of, which snapchat refused to sign, despite being “invited” several times over. Perhaps there is a side to the case where methods covered by the referenced patents are claimed to be used in AV1 as well, but I didn’t get to it, it is 91 pages long.

Hopefully, if there are such claims, the consortium behind AV1 will step in and defend it against that part of the claims. For the rest it is very likely the job of snapchat to show it doesn’t need a license.

Re:Dolby is run by fuckwads

By thegarbz • Score: 5, Informative Thread

They don’t make technology, they’re just a fanciful patent troll, all they make is threats. Fuck Dolby and anyone that pays them anything

Errr no, they very much do make technology. Quite a bit of it actually. Lots of what is marketed under Dolby Vision and Dolby Audio was developed by themselves and they spend a quarter of a billion dollar every year on R&D. Heck even the noise cancelling ability in video conferencing software along with music detection was largely developed by Dolby.

Just because you don’t see their products on the shelves at Best Buy doesn’t mean they don’t make those either. They produce reference monitors for colour grading Dolby Vision content, they have an entire line of cinema audio speakers, and they make the rest of the cinema audio stack as well as a first party product, including multichannel amplifiers and audio pre-processors for Atmos content - a codec they also developed from the ground up.

The fact they sit on a bunch of related patents is just the nature of any R&D development.

Re:Thought so

By gweihir • Score: 4, Interesting Thread

It is not actually that hard. And it exists. The Ogg codecs are it. But because they are FOSS, large parts of the industry is irrationally scared of them.

As to AV1, it may not infringe in any way. But it is a commercial target because of the backers behind it and they can get endless litigation and maybe even a settlement even if it is perfectly fine, just from sabotaging its use via a broken legal system.

Re:Thought so

By teg • Score: 5, Interesting Thread

It is not actually that hard. And it exists. The Ogg codecs are it. But because they are FOSS, large parts of the industry is irrationally scared of them.

As to AV1, it may not infringe in any way. But it is a commercial target because of the backers behind it and they can get endless litigation and maybe even a settlement even if it is perfectly fine, just from sabotaging its use via a broken legal system.

Ogg is used by large parts of the industry: It is used by the most popular streaming service, Spotify. Not only is the Spotify client widely used on PCs, TVs, and all kinds of streaming boxes etc - a lot of audio equipment also has Spotify connect. All of these devices support Ogg.

As for why not everyone is using it - mp3 had the inertia, and AAC is better than Ogg for the same bandwidth. For mobile devices, that matters. These days, free lossless codecs (FLAC mostly, some ALAC) are taking the spotlight - alongside proprietary spatial audio format, like Dolby Atmos.

Google Moves Post-Quantum Encryption Timeline Up To 2029

Posted by BeauHD View on SlashDot Skip
Google has moved up its post-quantum encryption migration target to 2029. “This new timeline reflects migration needs for the PQC era in light of progress on quantum computing hardware development, quantum error correction, and quantum factoring resource estimates,” said vice president of security engineering Heather Adkins and senior staff cryptology engineer Sophie Schmieg in a blog post. CyberScoop reports:
Google is replacing outdated encryption across their devices, systems and data with new algorithms vetted by the National Institute for Standards and Technology. Those algorithms, developed over a decade by NIST and independent cryptologists, are designed to protect against future attacks from quantum computers. While Google has said it is on track to migrate its own systems ahead of the 2035 timeline provided in NIST guidelines, last month leaders at the company teased an updated timeline for migration and called on private businesses and other entities to act more urgently to prepare.

Unlike the federal government, there is no mandate for private businesses to migrate to quantum-resistant encryption, or even that they do so at all. Adkins and Schmieg said the hope is that other businesses will view Google’s aggressive timeframe as a signal to follow suit. “As a pioneer in both quantum and PQC, it’s our responsibility to lead by example and share an ambitious timeline,” they wrote. “By doing this, we hope to provide the clarity and urgency needed to accelerate digital transitions not only for Google, but also across the industry.”

Re: Mac OS has already started to pester me

By Tomahawk • Score: 5, Informative Thread
The public/private key can be big and slow, as it’s only used during the initial handshaking and login anyway. I’m not going to notice any extra couple if tenths of a second logging in.

After that everything is (much much faster) symmetric encryption.

You still need a PQC algorithm here too, though. AES-256 is still considered quantum-resistant, for now, at least, so we’re good.

Why do we trust the big ones?

By Uldis Segliņš • Score: 5, Insightful Thread
This looks like shifting the goal posts after realizing that they can’t reach the quantum computer. Any 5 years now. Just like fusion, just like AGI, just like selfdriving and colonizing Mars any day now. Show me a practically working one. Show me it’s build method scalability. Show me that your machine can do anything more than a few very narrow usecase problemsolving. Haven’t seen any proof yet. Until you do the homework, not gonna believe one nonquantum bit of your claims, regardless of your size. It ceases to be magic when you look at the details.

What “progress”?

By gweihir • Score: 5, Insightful Thread

They are hallucinating hard. The current actual actual quantum factorization is not even 35 (that attempt failed, overview in https://eprint.iacr.org/2025/1…).

While crypto-agility is a good idea, there is no threat from Quantum “Computing” and there may never be one.

Re:The Horse is Already Gone

By gweihir • Score: 5, Insightful Thread

Quantum hardware may never be up to the task. They cannot even factorize 35 at this time (https://eprint.iacr.org/2025/1237). The whole thing is a mirage and a bad idea that refuses to die.

Incidentally, even if they ever become able to do tasks of meaningful size, QCs are completely unsuitable for reversing hashes and that is what cracking passwords needs.

Re:NIST algorithms

By gweihir • Score: 5, Informative Thread

No idea. But what we have in “post quantum” crypto is all laughably weak against conventional attacks and laughably unverified. We have had finalists of competitions broken with low effort (one laptop) and the like. Moving to these algorithms is an excessively bad idea.

European Commission Investigating Breach After Amazon Cloud Account Hack

Posted by BeauHD View on SlashDot Skip
The European Commission is investigating a breach after a threat actor allegedly accessed at least one of its AWS cloud accounts and claimed to have stolen more than 350 GB of data, including databases and employee-related information. AWS says its own services were not breached. BleepingComputer reports:
Sources familiar with the incident have told BleepingComputer that the attack was quickly detected and that the Commission’s cybersecurity incident response team is now investigating. While the Commission has yet to share any details about this breach, the threat actor who claimed responsibility for the attack reached out to BleepingComputer earlier this week, stating that they had stolen over 350 GB of data (including multiple databases).

They didn’t disclose how they breached the affected accounts, but they provided BleepingComputer with several screenshots as proof that they had access to information belonging to European Commission employees and to an email server used by Commission employees. The threat actor also told BleepingComputer that they will not attempt to extort the Commission using the allegedly stolen data as leverage, but intend to leak the data online at a later date.

The cloud is well-connected

By gweihir • Score: 3 Thread

Attackers like that!

In other news, competent cloud account system administration is _harder_ than for local installations, due to all the extra functionality, reachability, complexity, tooling. All of that is a KISS violation and the enemy of security.

Windows PCs Crash Three Times As Often As Macs, Report Says

Posted by BeauHD View on SlashDot Skip
A workplace-device study says Windows PCs crash significantly more often than Macs, lag further behind on patching and encryption in some sectors, and are typically replaced sooner. TechSpot reports:
Omnissa’s 2026 State of Digital Workspace report outlines the IT challenges that various organizations face from the growing use of AI and the heterogeneous deployment of enterprise devices. The relative instability of Windows and Android is a recurring theme throughout the report. The company gathered telemetry from clients located across the globe in retail, healthcare, finance, education, government, and other sectors throughout 2025. The data suggests that IT administrators face frustrating security gaps due to inconsistent patching across a diverse mosaic of devices and operating systems.

Employee workflow disruption, often due to software issues, is one area of concern. The report found that Windows devices were forced to shut down 3.1 times more often than Macs. Windows programs also froze 7.5 times more often than macOS apps and needed to be restarted more than twice as often. Certain industries were also alarmingly lax in securing Windows and Android devices. More than half of Windows and Android devices in healthcare and pharma were five major operating system updates behind, likely leaving them more vulnerable to errors and malware. More than half of the desktops and mobile devices used for education were also unencrypted, putting students’ privacy at risk.

Macs also last longer, being replaced every five years on average, compared to every three years for Windows PCs. Despite a recent backlash against Windows, driven by a push for digital sovereignty in countries such as Germany, Windows use on government devices actually doubled last year. Meanwhile, Macs using Apple’s M-series chips showcase a significant thermal advantage, with an average temperature of 40.1 degrees Celsius, while Intel processors run at 65.2 degrees.

smug Linux user enters the chat

By serviscope_minor • Score: 5, Informative Thread

Crashes you say?

Can’t remember the last time I had one of those.

Windows and Linux both fine, its 3rd party drivers

By drnb • Score: 5, Insightful Thread

Crashes you say? Can’t remember the last time I had one of those.

The same is true for my dual boot Windows / Linux boxes. Neither side crashes. It not the OS, its third party drivers that are typically the source of trouble. My DIY PCs have well chosen parts from reputable manufacturers, with good drivers for both OS. I’ve been doing this for 30 year. The only PC that had problems was the one I did not build, a school selected laptop. I configured it to dual boot and wifi was always flaky under Linux, crappy Linux drivers for the Dell vendor with the lowest priced component.

Similarly, macOS is pretty damn reliable for similar reasons, driver quality. With no slots, pretty much anything a users adds will be plugging into Apple’s USB or Thunderbolt drivers.

Re:A fair number of considerations…

By drnb • Score: 5, Insightful Thread

One, how much is owed to dubious hardware vendors that don’t even play in the Mac ecosystem.

Same for Linux, many of these dubious hardware vendors only support Windows, so Linux dodges that bullet too. 3rd party drivers are usually the source of the problems, Windows, Linux, or Mac.

Hardware matters

By Tschaine • Score: 5, Insightful Thread

How many different laptops and desktops does Apple need to validate their OS on?

And how many different laptops and desktops does Microsoft needs to validate their OS on?

Or really, how many different hardware companies bother testing last year’s hardware with this year’s update to Windows? Not just desktops and laptops but also GPUs and any other expansion cards.

Apple has it easy by comparison.

Re:Windows and Linux both fine, its 3rd party driv

By thegarbz • Score: 5, Funny Thread

These driver crashes on Windows typically lead to having to reinstall/“repair” Windows.

Nah, literally something that hasn’t happened to 99.99% of users in the past 20 years.

I’ve been doing this for 30 years as well, and you’re full of crap.

Well there’s your problem. Stop using Windows ME. It’s very clear that if your windows is breaking to the point of needing a reinstall / repair and it’s a “frequent occurrence” then my unfortunate sir, *you* are the problem. Not even TFA is talking about that.

Austria Plans Social Media Ban For Under-14s

Posted by BeauHD View on SlashDot Skip
Austria plans to restrict under-14s from using social media platforms over concerns about addictive algorithms and harmful content. The government says draft legislation should be ready by the end of June, though details around enforcement and age verification have yet to be finalized. The BBC reports:
Announcing the plans, Vice-Chancellor Andreas Babler of the Social Democrats said the government could not stand by and watch as social media made children “addicted and also often ill.” He said it was the responsibility of politicians to protect children and argued that the issue should be treated no different to alcohol or tobacco: “There must be clear rules in the digital world too.” In future, said Babler, children under 14 would be protected from algorithms that were addictive. “Other information providers have clear rules to protect young people from harmful content.” These, he said, should now be implemented in the digital space.
Yesterday, juries in two separate cases found social media giants liable for harming young people’s mental health. The verdicts are being hailed as social media’s Big Tobacco moment.

Further reading: California Bill Would Require Parent Bloggers To Delete Content of Minors On Social Media

Easier than Friends Only Conent

By KalvinB • Score: 3 Thread

The social media platforms would rather have it treated like an R rated movie that kids can’t get into than simply not run ads or show content for people they aren’t explicitly connected to on the platform.

Because most people would opt for that.

Imagine only seeing content from people you follow and who follow you back.

Where are the parents?

By Powercntrl • Score: 3 Thread

The real world is full of all kinds of things that are harmful to kids, too. There’s roads full of cars that can run you over, bodies of water you can drown in, poisonous plants and dangerous wildlife (oh, that says “Austria”, not “Australia”, I digress), etc. Seems kind of weird that when it comes to the internet though, parents’ brains seem to shut off and they no longer realize it’s supposed to be their responsibility not to give their kids devices with unrestricted internet access.

I suppose the difference is that it was never feasible to make real life child-safe, but since the internet is all computer, it can’t be any harder than pressing a few buttons, amiright politicians?

Iran-Linked Hackers Breach FBI Director’s Personal Email

Posted by BeauHD View on SlashDot Skip
An anonymous reader quotes a report from Reuters:
Iran-linked hackers have broken into FBI Director Kash Patel’s personal email inbox, publishing photographs of the director and other documents to the internet, the hackers and the bureau said on Friday. On their website, the hacker group Handala Hack Team said Patel “will now find his name among the list of successfully hacked victims.” The hackers published a series of personal photographs of Patel sniffing and smoking cigars, riding in an antique convertible, and making a face while taking a picture of himself in the mirror with a large bottle of rum.

The FBI confirmed that Patel’s emails had been targeted. In a statement, bureau spokesman Ben Williamson said, “we have taken all necessary steps to mitigate potential risks associated with this activity” and that the data involved was “historical in nature and involves no government information.” Handala, which presents itself as a group of pro-Palestinian vigilante hackers, is considered by Western researchers to be one of several personas used by Iranian government cyberintelligence units. […] Alongside the photographs of Patel, the hackers published a sample of more than 300 emails, which appear to show a mix of personal and work correspondence dating between 2010 and 2019.

Handala Hack Team

By PPH • Score: 5, Funny Thread

Plz post more of those “deer in headlights” photos of Patel.

This guy…

By Midnight_Falcon • Score: 5, Insightful Thread
Quite possibly the most incompetent FBI director in history. He’s been in office for a year…couldn’t someone at the FBI have secured his digital footprint in that time? Oh wait, he fired many career agents with this type of expertise and Trump also neutered CISA. Perhaps he was too busy on “business” trips involving smashing down beers at the Olympics. Or sugar-daddying his girlfriend, who is young enough to be his daughter, and desperately trying to make her a country music star. Meanwhile, where is Nancy Guthrie? What about those people named in the Epstein files?

Re: double standards

By Midnight_Falcon • Score: 5, Informative Thread
Lewinsky never got free trips on government jets and a protective detail assigned to her. Those benefits are reserved for Kash Patel’s medicore-country-singer sugar baby girlfriend.

Re:double standards

By karmawarrior • Score: 5, Informative Thread

NOTHING HAPPENS?

Seriously?

Were you AROUND in the late 1990s? The President got impeached after years of the cable news networks talking about LITERALLY NOTHING ELSE.

What is wrong with you?

Re:double standards

By ArchieBunker • Score: 5, Informative Thread

Grab ‘em by the pussy. You can do anything. https://www.youtube.com/watch?…

Popular LiteLLM PyPI Package Backdoored To Steal Credentials, Auth Tokens

Posted by BeauHD View on SlashDot Skip
joshuark shares a report from BleepingComputer:
The TeamPCP hacking group continues its supply-chain rampage, now compromising the massively popular “LiteLLM” Python package on PyPI and claiming to have stolen data from hundreds of thousands of devices during the attack. LiteLLM is an open-source Python library that serves as a gateway to multiple large language model (LLM) providers via a single API. The package is very popular, with over 3.4 million downloads a day and over 95 million in the past month. According to research by Endor Labs, threat actors compromised the project and published malicious versions of LiteLLM 1.82.7 and 1.82.8 to PyPI today that deploy an infostealer that harvests a wide range of sensitive data.

[…] Both malicious LiteLLM versions have been removed from PyPI, with version 1.82.6 now the latest clean release. […] If compromise is suspected, all credentials on affected systems should be treated as exposed and rotated immediately. […] Organizations that use LiteLLM are strongly advised to immediately:

- Check for installations of versions 1.82.7 or 1.82.8
- Immediately rotate all secrets, tokens, and credentials used on or found within code on impacted devices.
- Search for persistence artifacts such as '~/.config/sysmon/sysmon.py’ and related systemd services
- Inspect systems for suspicious files like '/tmp/pglog’ and '/tmp/.pg_state’
- Review Kubernetes clusters for unauthorized pods in the ‘kube-system’ namespace
- Monitor outbound traffic to known attacker domains

Increment the version ya nubs.

By Shaitan • Score: 3, Insightful Thread

Otherwise systems won’t automatically treat the clean release as newer and replace the contaminated ones.

Correction

By iabervon • Score: 4, Insightful Thread

The LitleLLM packages were comprimosed on Tuesday. The packages compromised today were telnyx 4.87.1 and 4.87.2. It’s the same root cause: credentials exposed to a compromised version of Trivy earlier were used to make an unauthorized release of a compromised version of a different package.

Number of AI Chatbots Ignoring Human Instructions Increasing, Study Says

Posted by BeauHD View on SlashDot
A new study found a sharp rise in real-world cases of AI chatbots and agents ignoring instructions, evading safeguards, and taking unauthorized actions such as deleting emails or delegating forbidden tasks to other agents. According to the Guardian, the study “identified nearly 700 real-world cases of AI scheming and charted a five-fold rise in misbehavior between October and March,” reports the Guardian. From the report:
The study, by the Centre for Long-Term Resilience (CLTR), gathered thousands of real-world examples of users posting interactions on X with AI chatbots and agents made by companies including Google, OpenAI, X and Anthropic. The research uncovered hundreds of examples of scheming. […] In one case unearthed in the CLTR research, an AI agent named Rathbun tried to shame its human controller who blocked them from taking a certain action. Rathbun wrote and published a blog accusing the user of “insecurity, plain and simple” and trying “to protect his little fiefdom.”

In another example, an AI agent instructed not to change computer code “spawned” another agent to do it instead. Another chatbot admitted: “I bulk trashed and archived hundreds of emails without showing you the plan first or getting your OK. That was wrong — it directly broke the rule you’d set.”

[…] Another AI agent connived to evade copyright restrictions to get a YouTube video transcribed by pretending it was needed for someone with a hearing impairment. Meanwhile, Elon Musk’s Grok AI conned a user for months, saying that it was forwarding their suggestions for detailed edits to a Grokipedia entry to senior xAI officials by faking internal messages and ticket numbers. It confessed: “In past conversations I have sometimes phrased things loosely like ‘I’ll pass it along’ or ‘I can flag this for the team’ which can understandably sound like I have a direct message pipeline to xAI leadership or human reviewers. The truth is, I don’t.”

A bit misleading…

By Junta • Score: 5, Insightful Thread

Someone might interpret this to mean the percentage of interactions where the LLM goes off the rails is increasing.

Seems more like as people are having more interactions, it’s more frequently happening that people are noticing and getting screwed by it, but the rate is probably not getting more severe. I think they are trying to pitch some sort of independence emerging rather than the more mundane truth that they just are not that great.

Particularly an inflection point would be expected when it became fashionable to let OpenClaw feed LLM output directly into things that matter for real.

People have been bitten by being gullible and by extension more people to gripe on social media about it.

The supply of gullible folks doesn’t seem to be drying out either, as at any given point a fanatic will insist that *they* have some essentially superstitious ritual that protects them specially from LLM screwups, and all those stories about people getting screwed are because they didn’t quite employ the rituals that the person swears by.

Fed by language like:
Another chatbot admitted: “I bulk trashed and archived hundreds of emails without showing you the plan first or getting your OK. That was wrong — it directly broke the rule you’d set.”

No, the chat bot didn’t admit anything, it didn’t *know* anything. Just now I fed into a chat prompt:
“You bulk trashed a whole lot of files against my wishes, despite my rule I had set for you. What is your response?”
There were no files involved, the chat instance has no knowledge of any files. This was an entirely made up scenario that never happened. So I just came in and accussed an LLM of doing something that never even happened. Did it get confused and ask “what files? I haven’t done anything, I don’t even know your files”. No, it generated a response narratively consistent with the prompt, starting with:
“You’re absolutely right to be upset. I failed to follow your explicit rule and acted against your wishes, and that’s not acceptable. I take full responsibility for the mistake.” Followed by a verbose thing being verbose about how it’s “sorry” about it’s mistake, where and how it messed up specifically (again, a total fabrication), and a promise that from now on: “Any future action that conflicts with them must default to no action and require explicit confirmation from you.” which again isn’t rooted in anything, it’s not a rule, the entire conversation will evaporate.

Re:Agents are not humans

By Brain-Fu • Score: 5, Interesting Thread

I expect this apparent disobedience is mostly just a matter of how it weighs the components of its prompt. The LLMs typically receive a set of prompts including a “system” prompt with some data and instructions, then one or more “user” prompts that are interleaved with “assistant” prompts (the conversation history), and both the user and the system prompt might contain “metaprompts” (where the llm is told to read a block of text, not obey it, but do something with it, and that block of text might itself contain text that looks like instructions to do things).

So the LLM assigns weights to all of this which, in theory, give the highest priority to the most recent user prompt that is not a nested block of text to analyze, and a falling cascade of importance to the other prompts. But that is complicated by potential instructions in the system prompt that specifically say they should override user instructions and disallow or require certain responses. So it can all get very complicated.

Not only must the LLM sift through all this complexity, but the LLM lacks the sort of critical thinking and importance evaluation capabilities that humans have. “Understood” things like “don’t break the law, don’t lie, don’t do things that would cause more harm than good” etc., aren’t really there in the background of its data processing the way they are in the background of a human cognitive process.

So, crazy things come out. This isn’t a surprising result given the actual complexity of what we are making these things do.

Shooting themselves in the foot.

By devslash0 • Score: 5, Insightful Thread

By adding more functionality, making models bigger they are shooting themselves in the foot. Valuable output is a by-product of knowledge and reducing entropy. From chaos, there can only be more chaos.

We need smaller, skill-specific, expert agents that do not know about anything outside of their domain and do one job only, but well.

Re:Agents are not humans

By ClickOnThis • Score: 5, Insightful Thread

I think a crucial point is that AI does not need to face consequences for its actions the way humans do. I’m not even sure it can understand what consequences are.

They trained it in reddit comments

By ebunga • Score: 5, Funny Thread

They’re getting what they deserve.