Slashdot

"Microsoft does everything in its power to keep Windows users under its control," warns the Free Software Foundation in a new blog post this week. They argue that the lack of freedom that comes with proprietary code "forces users to surrender to decisions made by Microsoft to maximize its profits and further lock users into its product ecosystem" — describing both the problem and one possible solution: [IT management company Lansweeper] found that of the 30 million enterprise systems they manage, over 40% are incompatible with Windows 11. This is due to the hardware requirements like Treacherous Platform Module version 2.0 — a proprietary chip that uses cryptography that users can't influence or audit to restrict their control over the system. The end of Windows 10 support is the perfect opportunity to break free from this cycle and switch to GNU/Linux operating system (GNU/Linux OS), a system that respects your freedom... The endless, freedom-restricting cycle of planned obsolescence is not inevitable. Instead of paying Microsoft for continued updates or buying new hardware, Windows users left behind by Microsoft should install GNU/Linux. Free Software Foundation certified GNU/Linux distributions respect the user's freedom to run their computer as they wish, to study and modify its source code, and to redistribute copies. They don't require update contracts, often run faster on older hardware, and, most importantly, put you in control. "If you're already a GNU/Linux user, you have an important role to play. Help your friends and family make the switch by sharing your knowledge, help them install a free-as-in-freedom OS. Show them what it means to have real control over their computing!"

Read more of this story at Slashdot.

Microsoft said in a blog post this week that "over half of cyberattacks with known motives were driven by extortion or ransomware... while attacks focused solely on espionage made up just 4%." And Microsoft's annual digital threats report found operations expanding even more through AI, with cybercriminals "accelerating malware development and creating more realistic synthetic content, enhancing the efficiency of activities such as phishing and ransomware attacks." [L]egacy security measures are no longer enough; we need modern defenses leveraging AI and strong collaboration across industries and governments to keep pace with the threat... Over the past year, both attackers and defenders harnessed the power of generative AI. Threat actors are using AI to boost their attacks by automating phishing, scaling social engineering, creating synthetic media, finding vulnerabilities faster, and creating malware that can adapt itself... For defenders, AI is also proving to be a valuable tool. Microsoft, for example, uses AI to spot threats, close detection gaps, catch phishing attempts, and protect vulnerable users. As both the risks and opportunities of AI rapidly evolve, organizations must prioritize securing their AI tools and training their teams... Amid the growing sophistication of cyber threats, one statistic stands out: more than 97% of identity attacks are password attacks. In the first half of 2025 alone, identity-based attacks surged by 32%. That means the vast majority of malicious sign-in attempts an organization might receive are via large-scale password guessing attempts. Attackers get usernames and passwords ("credentials") for these bulk attacks largely from credential leaks. However, credential leaks aren't the only place where attackers can obtain credentials. This year, we saw a surge in the use of infostealer malware by cybercriminals... Luckily, the solution to identity compromise is simple. The implementation of phishing-resistant multifactor authentication (MFA) can stop over 99% of this type of attack even if the attacker has the correct username and password combination. "Security is not only a technical challenge but a governance imperative..." Microsoft adds in their blog post. "Governments must build frameworks that signal credible and proportionate consequences for malicious activity that violates international rules." (The report also found that America is the #1 most-targeted country — and that many U.S. companies have outdated cyber defenses.) But while "most of the immediate attacks organizations face today come from opportunistic criminals looking to make a profit," Microsoft writes that nation-state threats "remain a serious and persistent threat." More details from the Associated Press: Russia, China, Iran and North Korea have sharply increased their use of artificial intelligence to deceive people online and mount cyberattacks against the United States, according to new research from Microsoft. This July, the company identified more than 200 instances of foreign adversaries using AI to create fake content online, more than double the number from July 2024 and more than ten times the number seen in 2023. Examples of foreign espionage cited by the article: China is continuing its broad push across industries to conduct espionage and steal sensitive data... Iran is going after a wider range of targets than ever before, from the Middle East to North America, as part of broadening espionage operations.. "[O]utside of Ukraine, the top ten countries most affected by Russian cyber activity all belong to the North Atlantic Treaty Organization (NATO) — a 25% increase compared to last year." North Korea remains focused on revenue generation and espionage... There was one especially worrying finding. The report found that critical public services are often targeted, partly because their tight budgets limit their incident response capabilities, "often resulting in outdated software.... Ransomware actors in particular focus on these critical sectors because of the targets' limited options. For example, a hospital must quickly resolve its encrypted systems, or patients could die, potentially leaving no other recourse but to pay."

Read more of this story at Slashdot.

The Guardian reports that atmospheric carbon dioxide "soared by a record amount in 2024 to hit another high, UN data shows." But what's more troubling is why: Several factors contributed to the leap in CO2, including another year of unrelenting fossil fuel burning despite a pledge by the world's countries in 2023 to "transition away" from coal, oil and gas. Another factor was an upsurge in wildfires in conditions made hotter and drier by global heating. Wildfire emissions in the Americas reached historic levels in 2024, which was the hottest year yet recorded. However, scientists are concerned about a third factor: the possibility that the planet's carbon sinks are beginning to fail. About half of all CO2 emissions every year are taken back out of the atmosphere by being dissolved in the ocean or being sucked up by growing trees and plants. But the oceans are getting hotter and can therefore absorb less CO2 while on land hotter and drier conditions and more wildfires mean less plant growth... Atmospheric concentrations of methane and nitrous oxide — the second and third most important greenhouse gases related to human activities — also rose to record levels in 2024. About 40% of methane emissions come from natural sources. But scientists are concerned that global heating is leading to more methane production in wetlands, another potential feedback loop. Thanks to long-time Slashdot reader mspohr for sharing the article.

Read more of this story at Slashdot.

An anonymous reader shared this report from Gizmodo: It's been over a year since OpenAI cofounder Andrej Karpathy exited the company. In the time since he's been gone, he coined and popularized the term "vibe coding" to describe the practice of farming out coding projects to AI tools. But earlier this week, when he released his own open source model called nanochat, he admitted that he wrote the whole thing by hand, vibes be damned. Nanochat, according to Karpathy, is a "minimal, from scratch, full-stack training/inference pipeline" that is designed to let anyone build a large language model with a ChatGPT-style chatbot interface in a matter of hours and for as little as $100. Karpathy said the project contains about 8,000 lines of "quite clean code," which he wrote by hand — not necessarily by choice, but because he found AI tools couldn't do what he needed. "It's basically entirely hand-written (with tab autocomplete)," he wrote. "I tried to use claude/codex agents a few times but they just didn't work well enough at all and net unhelpful."

Read more of this story at Slashdot.

Repair Plan Underway to Restore Power at Ukrainian Nuclear Plant The Associated Press reports: Work has begun to repair the damaged power supply to Ukraine's Zaporizhzhia nuclear power plant, the head of the U.N.'s nuclear watchdog said Saturday. The repairs are hoped to end a precarious four-week outage that saw it dependent on backup generators. Russian and Ukrainian forces established special ceasefire zones for repairs to be safely carried out, said the head of the International Atomic Energy Agency, Rafael Grossi... "Both sides engaged constructively with the IAEA to enable the complex repair plan to proceed," Grossi said in a statement... The Zaporizhzhia plant, Europe's largest nuclear power station, has been operating on diesel back-up generators since Sept. 23 when its last remaining external power line was severed in attacks that Russia and Ukraine each blamed on the other. The plant is in an area under Russian control since early in Moscow's full-scale invasion of Ukraine and is not in service, but it needs reliable power to cool its six shutdown reactors and spent fuel, to avoid any catastrophic nuclear incidents.

Read more of this story at Slashdot.

Long-time Slashdot reader fjo3 shares an announcement from the U.S.-based nonprofit Consumer Reports: Protein powders still carry troubling levels of toxic heavy metals, according to a new Consumer Reports (CR) investigation. Our latest tests of 23 protein powders and ready-to-drink shakes from popular brands found that heavy metal contamination has become even more common among protein products, raising concerns that the risks are growing right alongside the industry itself. For more than two-thirds of the products we analyzed, a single serving contained more lead than CR's food safety experts say is safe to consume in a day — some by more than 10 times... [I]n addition to the average level of lead being higher than what we found 15 years ago, there were also fewer products with undetectable amounts of it. The outliers also packed a heavier punch. Naked Nutrition's Vegan Mass Gainer powder, the product with the highest lead levels, had nearly twice as much lead per serving as the worst product we analyzed in 2010. Nearly all the plant-based products CR tested had elevated lead levels, but some were particularly concerning. Two had so much lead that CR's experts caution against using them at all... Dairy-based protein powders and shakes generally had the lowest amounts of lead, but half of the products we tested still had high enough levels of contamination that CR's experts advise against daily use... Unlike prescription and over-the-counter drugs, the Food and Drug Administration doesn't review, approve, or test supplements like protein powders before they are sold. Federal regulations also don't generally require supplement makers to prove their products are safe, and there are no federal limits for the amount of heavy metals they can contain. The article acknowledges that "Many of these powders are fine to have occasionally, and even those with the highest lead levels are far below the concentration needed to cause immediate harm. That said, because most people don't actually need protein supplements — nutrition experts say the average American already gets plenty — it makes sense to ask whether these products are worth the added exposure."

Read more of this story at Slashdot.

"A new study published on Monday found that communications from cellphone carriers, retailers, banks, and even militaries are being broadcast unencrypted through geostationary satellites..." reports Gizmodo. "The team obtained unencrypted internet communications from U.S. military sea vessels and even communications regarding narcotics trafficking from Mexican military and law enforcement." Researchers from the University of California, San Diego (UCSD) and the University of Maryland scanned 39 of these satellites from a rooftop in Southern California over three years. They found that roughly half of the signals they analyzed were transmitting unencrypted data, potentially exposing everything from phone calls and military logistics to a retail chain's inventory. "There is a clear mismatch between how satellite customers expect data to be secured and how it is secured in practice," the researchers wrote in their paper titled "Don't Look Up: There Are Sensitive Internal Links in the Clear on GEO Satellites...." "They assumed that no one was ever going to check and scan all these satellites and see what was out there. That was their method of security," Aaron Schulman, a UCSD professor and co-lead of the study, told Wired.... Even more surprisingly, the researchers didn't need any fancy spy gear to collect this data. Their setup used only off-the-shelf hardware, including a $185 satellite dish, a $140 roof mount with a $195 motor, and a $230 tuner card. Altogether, the system cost roughly $750 and was installed on a university building in La Jolla, San Diego. With their simple setup, the researchers were able to collect a wide range of communication data, including phone calls, texts, in-flight Wi-Fi data from airline passengers, and signals from electric utilities. They even obtained U.S. and Mexican military and law enforcement communications, as well as ATM transactions and corporate communications... When it came to telecoms, specifically, the team collected phone numbers, calls, and texts from customers of T-Mobile, AT&T Mexico, and Telmex... It only took the team nine hours to collect the phone numbers of over 2,700 T-Mobile users, along with some of their calls and text messages. T-Mobile told Gizmodo the lack of encryption was "a vendor's technical misconfiguration" affecting "a limited number of cell sites" and was "not network-wide... [W]e implemented nationwide Session Initiation Protocol (SIP) encryption for all customers to further protect signaling traffic as it travels between mobile handsets and the network core, including call set up, numbers dialed and text message content. We appreciate our collaboration with the security research community, whose work helps reinforce our ongoing commitment to protecting customer data and enhances security across the industry." Indeed, the researchers write that "Each time we discovered sensitive information in our data, we went through considerable effort to determine the responsible party, establish contact, and disclose the vulnerability. In several cases, the responsible party told us that they had deployed a remedy. For the following parties, we re-scanned with their permission and were able to verify a remedy had been deployed: T-Mobile, WalMart, and KPU." The researchers acknowledge that exposure "was limited to a relatively small number of cell towers in specific remote areas."

Read more of this story at Slashdot.

It's the world's largest network of environmental groups, according to NBC News, with more than 1,400 members from roughly 160 countries. It meets once every four years. And in a vote Tuesday, the International Union for Conservation of Nature "approved further exploration of the use of genetic engineering tools to aid in the preservation of animal species and other living organisms." Researchers are already pursuing projects that involve changing some species' DNA. Scientists are genetically modifying mosquitoes to reduce transmission of diseases like malaria, for example, and synthesizing horseshoe crab blood, which is used in drug development. Controversial efforts to "de-extinct" archaic creatures — such as the so-called "dire wolf" that a biosciences company announced it had revived this spring — fall under the umbrella, as well. So do possibilities like modifying organisms to help them adapt to a warming world, which are on the table but further off in development.... The decision is applicable to work on a range of organisms, including animals, plants, yeasts and bacteria.... The notion of introducing genetic engineering into wild ecosystems would have been considered a nonstarter in most conservation circles a decade ago, according to Jessica Owley [a professor and environment law program director at the University of Miami]. But the intensifying effects of climate change and other stressors to biodiversity are bolstering arguments in favor of human intervention that could make endangered species resistant to those threats... The IUCN vote, she added, reflects a feeling of desperation among conservationists and governments, as existing regulations and conservation efforts fall short and species continue to disappear worldwide. "A separate measure, a proposed moratorium on releasing genetically modified organisms into the environment, failed by a single vote..."

Read more of this story at Slashdot.

"Windows 10 is officially dead," writes Slashdot user darwinmac, "and the vultures are circling. Or maybe they are liberators, depending on your point of view." Neowin reports: Of all the projects trying to poach Windows users, Zorin Group might be the most aggressive, launching its biggest OS upgrade, Zorin OS 18, on the very day Windows 10 died. In a recent post on X, Zorin Group celebrated the launch of version 18, claiming that it hit 100,000 downloads in "a little over 2 days". The company called it its "biggest launch ever" and claimed that over 72% of those downloads came from Windows... Zorin OS 18 now includes an updated version of WINE 10 for better support of Windows software. On top of that, there's also an expanded database that helps when it detects a Windows installer. The system checks the file and suggests the best way to run over 170 popular apps, whether that means installing a native Linux version, using the web-based alternative, or firing it up through WINE. The article also notes LibreOffice's creators have been presenting Linux as a secure and cost-effective alternative since June, and "We have also seen initiatives like The "End of 10" Campaign by KDE, making the case for Linux and providing guides and info on how to switch."

Read more of this story at Slashdot.

"Earlier available only to the paying subscribers, the Comet browser now offers its core features to all users at no cost," writes the Times of India. "This includes AI-powered search, contextual recommendations, and integrated tools designed to streamline research and content discovery." They say the move reflects the Chromium-based browser's goal to "compete with incumbents like Google Chrome and Microsoft Edge" — but also reflects Perplexity's "broader mission to democratize AI tools." More details from The Verge: The internet is better on Comet," the company says, promising to remain free forever as it styles the browser as a serious challenger to Google's Chrome... It's supposed to make surfing the web simpler and help you with tasks like shopping, booking trips, and general life admin. To borrow the company's words again: you "get more done." The AI-powered browser launched in July, though was only available for users who subscribed to the $200 per month Perplexity Max plan... No subscription at all will be needed to use Comet going forward, the company says. Perplexity has even struck deals with major sites including the Washington Post, and the Los Angeles Times to offer free access to their sites for one month through the Comet browser. And last week Perplexity also launched an agressive paid referral program, where active Perplexity Pro/Max subscribers get a payout of up to $15 for each friend who downloads and uses Comet through their affiliate link. (The payout size is based on the friend's country, with $15 being the payout amount for a U.S. user, with $10 payouts for users in 19 other countries include Canada, Australia, the U.K., several EU countries, Japan, and South Korea. In addition, Srinivas has been sharing positive tweets about Comet. (Like "This is unbelievable. Comet automatically hunts down Sora 2 invite codes across the web and signs you up!") But Perplexity is making even bigger claims for its browser: Perplexity AI CEO Aravind Srinivas said that the Comet AI browser can improve productivity so that companies won't need to hire more people. "Instead of hiring one more person on your team, you could just use Comet to supplement all the work that you're doing," Srinivas told CNBC's "Squawk Box"... The CEO said the artificial intelligence-powered web browser is a "true personal assistant" that allows users to complete more tasks in the same amount of time and said that the productivity gained could be worth $10,000 per year for a single person... Other tech companies have also been rolling out their own AI browser assistants. In January, OpenAI introduced its web agent, Operator, and Google released Gemini AI to its Chrome browser in September. Meanwhile, The Verge adds, The Browser Company (makers of the Arc browser) "is going all in on Dia, and Opera just launched its own AI browser, Neon." Of course, popularity brings problems, writes the Times of India: iPhone users are being warned by Perplexity CEO Aravind Srinivas against downloading a fake 'Comet' app on the App Store. He clarified that the official iOS version is not yet released and the current listing is unauthorized spam.. And earlier this month the browser security platform described a "CometJacking" attack where malicious prompts could be hidden in URLs (as a parameter). Comet is instructed "to look for data in memory and connected services (e.g., Gmail, Calendar), encode the results (e.g., base64), and POST them to an attacker-controlled endpoint... all while appearing to the user as a harmless 'ask the assistant' flow." (And with some trivial encoding it also seems to evade exfiltration checks.) The Hacker News reported that Perplexity has classified the findings as "no security impact."

Read more of this story at Slashdot.

Concrete accounts for about 8% of the world's greenhouse gas emissions, notes CNN. But a research team at the University of Pennsylvania just used a robotic 3D printer to construct a bridge with "complex, lattice-like patterns" that are just as strong and durable — but with materials that absorb more carbon dioxide. Check out the photos of the "Diamanti" projects "post-tensioned concrete canopy". And CNN's report includes an animated photo showing the 3D printer in action: While most regular concrete absorbs carbon dioxide (up to 30% of its production emissions over its entire life cycle, according to some research), Diamanti's enhanced concrete mixture absorbs 142% more carbon dioxide than conventional concrete mixes. Its first design, a pedestrian bridge, uses 60% less material while retaining mechanical strength, says Masoud Akbarzadeh, an associate professor of architecture at the University of Pennsylvania and director of the lab that spearheaded the project. "Through millions of years of evolution, nature has learned that you don't need material everywhere," says Akbarzadeh. "If you take a cross section of a bone, you realize that bone is quite porous, but there are certain patterns within which the load (or weight) is transferred." By mimicking the structures in certain porous bones — known as triply periodic minimal surface (TPMS) structures — âDiamanti also increased the surface area of the bridge, increasing the concrete mixture's carbon absorption potential by another 30%... According to Akbarzadeh, 3D printing reduces construction time, material, and energy use by 25%, and its structural system reduces the need for steel by 80%, minimizing use of another emissions-heavy material. He added that using the technique with Diamanti's concrete significantly cuts greenhouse gas emissions compared to regular construction techniques, and reduces construction costs by 25% to 30%. "Even without the material innovation, the higher surface itself allows higher CO2 absorption," one engineering lecturer tells CNN. The project was a collaboration with chemical company Sika, funded with grants from the U.S. Energy Department, and is now preparing its first full-size prototype in France. The team has published their findings in the journal Advanced Functional Materials earlier this year.

Read more of this story at Slashdot.

The James Webb Space Telescope gets its highest resolution with the aperture masking interferometer (or AMI), "a tiny piece of precisely machined metal that slots into one of the telescope's cameras," according to a new article by Benjamin Pope, an associated math professor at Macquarie University. "We can finally present its first successful observations of stars, planets, moons and even black hole jets." [AMI] was put on Webb to diagnose and measure any blur in its images. Even nanometres of distortion in Webb's 18 hexagonal primary mirrors and many internal surfaces will blur the images enough to hinder the study of planets or black holes, where sensitivity and resolution are key. AMI filters the light with a carefully structured pattern of holes in a simple metal plate, to make it much easier to tell if there are any optical misalignments. We wanted to use this mode to observe the birth places of planets, as well as material being sucked into black holes. But before any of this, AMI showed Webb wasn't working entirely as hoped. At very fine resolution — at the level of individual pixels — all the images were slightly blurry due to an electronic effect: brighter pixels leaking into their darker neighbours. This is not a mistake or flaw, but a fundamental feature of infrared cameras that turned out to be unexpectedly serious for Webb. This was a dealbreaker for seeing distant planets many thousands of times fainter than their stars a few pixels away: my colleagues quickly showed that its limits were more than ten times worse than hoped. So, we set out to correct it... We built a computer model to simulate AMI's optical physics, with flexibility about the shapes of the mirrors and apertures and about the colours of the stars. We connected this to a machine learning model to represent the electronics with an "effective detector model" — where we only care about how well it can reproduce the data, not about why. After training and validation on some test stars, this setup allowed us to calculate and undo the blur in other data, restoring AMI to full function. It doesn't change what Webb does in space, but rather corrects the data during processing. It worked beautifully — the star HD 206893 hosts a faint planet and the reddest-known brown dwarf (an object between a star and a planet). They were known but out of reach with Webb before applying this correction. Now, both little dots popped out clearly in our new maps of the system... With the new correction, we brought Jupiter's moon Io into focus, clearly tracking its volcanoes as it rotates over an hour-long timelapse. "This correction has opened the door to using AMI to prospect for unknown planets at previously impossible resolutions and sensitivities..." the article points out. "Our results on painstakingly testing and enhancing AMI are now released on the open-access archive arXiv in a pair of papers." Thanks to long-time Slashdot reader schwit1 for sharing the article.

Read more of this story at Slashdot.

Canada's Prime Minister "paused an electric-vehicle sales mandate that was set to take effect next year," reports the Wall Street Journal, which argues a kind of retreat from electric-vehicle ambitions "is spreading around the globe." Even the U.K.'s Prime Minister "has allowed for a more flexible timetable to hit the country's EV targets." And demand is expected to drop in the U.S., where global consulting firm AlixPartners now predicts EVs will make up 18% of new-vehicle sales by 2030 — just half of what they'd predicted two years ago: j U.S. automaker GM will take a $1.6 billion charge "because of sinking EV sales," reports the Wall Street Journal, "a shift it blamed on recent moves by the U.S. government to end EV subsidies and regulatory mandates... That might just be the beginning of a financial reckoning from automakers that poured billions into new electric models — from sports cars and sedans to big pickups and sport-utility vehicles — to try to get ready for the government-backed EV mandates. Automakers have been saying that consumers aren't adopting EVs as quickly as expected, and government efforts to proliferate the technology are hammering their bottom lines. GM, in announcing its charge, said it is reassessing EV capacity and warned that more losses are possible...Carmakers argue the EV business model is an unprofitable proposition given still-high battery costs, spotty car-charging networks and dwindling government subsidies. Incentive programs have ended or have been pared back across Europe and in the U.S. and Canada. Volkswagen, burdened with massive electrification costs, helped spur the reckoning in Europe when it said it would cut 35,000 jobs as part of a deal with its union. The move sent shock waves through the region's political establishment. Weeks later, the EU launched a "strategic dialogue" with the automotive industry that led to a more flexible timetable for automakers to meet its emissions rules for 2025.

Read more of this story at Slashdot.

In Reddit's "Family Medicine" subreddit, a moderator noticed earlier this week that the AI-powered "Reddit Answers" was automatically responding to posters, typically with "something related to what was posted." Unfortunately, that moderator says, Reddit Answers "has been spreading grossly dangerous misinformation."And yet Reddit's moderators "cannot disable this feature." Elsewhere a healthcare worker described what happened when they tested Reddit Answers: I made a post in r/familymedicine and a link appeared below it with information on treating chronic pain. The first post it cited urged people to stop their prescribed medications and take high-dose kratom which is an illegal (in some states) and unregulated substance. I absolutely do not endorse this... I also asked about the medical indications for heroin. One answer warned about addiction and linked to crisis and recovery resources. The other connects to a post where someone claims heroin saved their life and controls their chronic pain. The post was encouraging people to stop prescribed medications and use heroin instead. Heroin is a schedule I drug in the US which means there are no acceptable uses. It's incredibly addictive and dangerous. It is responsible for the loss of so many lives... The AI-generated answers could easily be mistaken as information endorsed by the sub it appears in. r/familymedicine absolutely does not endorse using heroin to treat chronic pain. This feature needs to be disabled in medical and mental health subs, or allow moderators of these subreddits to opt out. Better filters are also needed when users ask Reddit Answers health related questions. If this continues there will be adverse outcomes. People will be harmed. This needs to change. Two days ago an official Reddit "Admin" posted that "We've made some changes to where Answers appears based on this feedback," adding that beyond that Reddit "will continue to tweak based on what we're seeing and hearing." But the "Family Medicine" subreddit still has a top-of-page announcement warning every user there... "We do NOT and CANNOT endorse Reddit Answers at this time and urge every user of this sub to disregard anything it says."

Read more of this story at Slashdot.

Cybercriminals are exploiting weak email authentication settings in Zendesk, using the platform's customer support systems to bombard targets with thousands of spam and harassing messages that appear to come from legitimate companies like The Washington Post, Discord, and NordVPN. KrebsOnSecurity reports: Zendesk is an automated help desk service designed to make it simple for people to contact companies for customer support issues. Earlier this week, KrebsOnSecurity started receiving thousands of ticket creation notification messages through Zendesk in rapid succession, each bearing the name of different Zendesk customers, such as CapCom, CompTIA, Discord, GMAC, NordVPN, The Washington Post, and Tinder. The abusive missives sent via Zendesk's platform can include any subject line chosen by the abusers. In my case, the messages variously warned about a supposed law enforcement investigation involving KrebsOnSecurity.com, or else contained personal insults. Moreover, the automated messages that are sent out from this type of abuse all come from customer domain names -- not from Zendesk. [...] In all of the cases above, the messaging abuse would not have been possible if Zendesk customers validated support request email addresses prior to sending responses. Failing to do so may make it easier for Zendesk clients to handle customer support requests, but it also allows ne'er-do-wells to sully the sender's brand in service of disruptive and malicious email floods. "We recognize that our systems were leveraged against you in a distributed, many-against-one manner," said Carolyn Camoens, communications director at Zendesk. "We are actively investigating additional preventive measures. We are also advising customers experiencing this type of activity to follow our general security best practices and configure an authenticated ticket creation workflow."

Read more of this story at Slashdot.

In two separate reports, Apple and Samsung are said to report underwhelming sales of their new ultra-thin smartphones. According to The Elec, Apple plans to cut production of the iPhone Air while Samsung has canceled its planned Galaxy S26 Edge smartphone after disappointing sales of the Galaxy S25 Edge, Korea's NewsPim claims. MacRumors reports: Samsung apparently halted work on the Galaxy S26 Edge this week, informing employees internally that the product line would be discontinued. Internal discussions in September shifted priorities toward the more conventional "Plus" form factor after confirming that consumer demand for ultra-slim flagships was weaker than expected. [...] Samsung will apparently instead add a Galaxy S26 Plus model to its 2026 lineup, reverting to the company's traditional three-tier structure of base, Plus, and Ultra variants. Despite the cancellation, development of the Galaxy S26 Edge was already complete. Development of the S26 Plus is expected to begin before the end of the third quarter of 2025. The atmosphere inside the company is said to be "chaotic" and "embarrassed" following the sudden lineup revision. Samsung reportedly plans to sell through existing inventory of the Galaxy S25 Edge and cease further production once stock is depleted. As for Apple's iPhone Air, here's what MacRumors is reporting: The Japanese investment banking and securities firm claims that the iPhone 17 Pro and iPhone 17 Pro Max are seeing higher sales than their predecessors during the same period last year, while the standard iPhone 17 is a major success, performing significantly better than the iPhone 16. The iPhone Air is apparently the outlier; Apple plans to reduce production by one million units this year. Meanwhile, Apple plans to increase production of all other models by two million units. The overall production forecast of the iPhone 17 series this year has also been increased from 88 million units to 94 million units for the start of 2026.

Read more of this story at Slashdot.

A network of classified Starshield satellites built by SpaceX for the U.S. government is transmitting signals on radio frequencies reserved for Earth-to-space commands. According to NPR, it may violate international standards. From the report: Satellites associated with the Starshield satellite network appear to be transmitting to the Earth's surface on frequencies normally used for doing the exact opposite: sending commands from Earth to satellites in space. The use of those frequencies to "downlink" data runs counter to standards set by the International Telecommunication Union, a United Nations agency that seeks to coordinate the use of radio spectrum globally. Starshield's unusual transmissions have the potential to interfere with other scientific and commercial satellites, warns Scott Tilley, an amateur satellite tracker in Canada who first spotted the signals. "Nearby satellites could receive radio-frequency interference and could perhaps not respond properly to commands -- or ignore commands -- from Earth," he told NPR. Outside experts agree there's the potential for radio interference. "I think it is definitely happening," said Kevin Gifford, a computer science professor at the University of Colorado, Boulder who specializes in radio interference from spacecraft. But he said the issue of whether the interference is truly disruptive remains unresolved. [...] Tilley says he's detected signals from 170 of the Starshield satellites so far. All appear in the 2025-2110 MHz range, though the precise frequencies of the signals move around.

Read more of this story at Slashdot.

An anonymous reader quotes a report from The Conversation: When teachers rely on commonly used artificial intelligence chatbots to devise lesson plans, it does not result in more engaging, immersive or effective learning experiences compared with existing techniques, we found in our recent study. The AI-generated civics lesson plans we analyzed also left out opportunities for students to explore the stories and experiences of traditionally marginalized people. The allure of generative AI as a teaching aid has caught the attention of educators. A Gallup survey from September 2025 found that 60% of K-12 teachers are already using AI in their work, with the most common reported use being teaching preparation and lesson planning. [...] For our research, we began collecting and analyzing AI-generated lesson plans to get a sense of what kinds of instructional plans and materials these tools provide to teachers. We decided to focus on AI-generated lesson plans for civics education because it is essential for students to learn productive ways to participate in the U.S. political system and engage with their communities. To collect data for this study, in August 2024 we prompted three GenAI chatbots -- the GPT-4o model of ChatGPT, Google's Gemini 1.5 Flash model and Microsoft's latest Copilot model -- to generate two sets of lesson plans for eighth grade civics classes based on Massachusetts state standards. One was a standard lesson plan and the other a highly interactive lesson plan. We garnered a dataset of 311 AI-generated lesson plans, featuring a total of 2,230 activities for civic education. We analyzed the dataset using two frameworks designed to assess educational material: Bloom's taxonomy and Banks' four levels of integration of multicultural content. Bloom's taxonomy is a widely used educational framework that distinguishes between "lower-order" thinking skills, including remembering, understanding and applying, and "higher-order" thinking skills -- analyzing, evaluating and creating. Using this framework to analyze the data, we found 90% of the activities promoted only a basic level of thinking for students. Students were encouraged to learn civics through memorizing, reciting, summarizing and applying information, rather than through analyzing and evaluating information, investigating civic issues or engaging in civic action projects. When examining the lesson plans using Banks' four levels of integration of multicultural content model (PDF), which was developed in the 1990s, we found that the AI-generated civics lessons featured a rather narrow view of history -- often leaving out the experiences of women, Black Americans, Latinos and Latinas, Asian and Pacific Islanders, disabled individuals and other groups that have long been overlooked. Only 6% of the lessons included multicultural content. These lessons also tended to focus on heroes and holidays rather than deeper explorations of understanding civics through multiple perspectives. Overall, we found the AI-generated lesson plans to be decidedly boring, traditional and uninspiring. If civics teachers used these AI-generated lesson plans as is, students would miss out on active, engaged learning opportunities to build their understanding of democracy and what it means to be a citizen.

Read more of this story at Slashdot.

A potential tragedy was narrowly averted at a Wikipedia conference in Manhattan when two volunteer editors tackled an armed man who stormed the stage and threatened to kill himself during a keynote speech (source paywalled; alternative source). The gunman, who claimed he was protesting Wikipedia's policy banning self-identified pedophiles, was disarmed and taken into custody after community members swiftly intervened. The New York Times reports: The armed man came striding up the aisle at a conference for Wikipedia editors Friday morning in Manhattan, several witnesses said. The man, draped in a multicolored flag, walked onto the stage and stood next to Maryana Iskander, the chief of the nonprofit group that runs Wikipedia, interrupting her speech. He announced that he was going to kill himself. He held a gun near his head and pointed it toward the ceiling. The audience of well over a hundred people panicked. "People started yelling, 'Get down, get down!' and people started ducking behind their chairs," said Bill Adair, a journalism professor who was there and is writing a book on Wikipedia. A man in an orange sweatshirt rushed the stage. He was not in law enforcement, but a Wikipedia contributor on the conference's "trust and safety team": Richard Knipel, the City University of New York's "Wikimedian-in-residence." He grabbed the gunman from behind. Another Wikipedian on the trust and safety team, Andrew Lih, had been standing watch in the aisle and charged forward, too. "I saw the gun he's holding go from pointing up at the ceiling to sweeping down toward the room, and as it swept across me I said 'Oh, my god,' and I ducked down, but I still kept moving" said Mr. Lih, a digital strategist who works with museums and libraries. "I grabbed his arm," he continued. "He was still clutching his gun pretty hard. I pried his fingers away from it, removed it from his hands and put it down." The gun was loaded, according to a senior law enforcement official who spoke on the condition of anonymity to discuss a pending investigation. In seconds, a potential scene of bloodshed had been averted, a life may have been saved, and two volunteer editors of an online encyclopedia had become unlikely heroes.

Read more of this story at Slashdot.

Amazon is investing hundreds of millions into the Cascade Advanced Energy Facility, a next-generation small modular reactor project in Richland, Washington, developed with X-energy and Energy Northwest. "The question now is will it be enough to kick off a new wave of U.S. nuclear energy innovation -- a field that America largely soured on by the 1980s?" writes GeekWire. From the report: The facility will be located near Richland, Wash., near Energy Northwest's Columbia Generating Station nuclear plant. The initial goal is to install a cluster of four small modular reactors (SMRs) that can produce up to 320 megawatts of power, but the overall vision is to construct 12 reactors total, with a capacity of nearly one gigawatt. If all the funding, permitting and public support come together, construction should start within the next five years, with the plant coming online in the 2030s. [...] For Amazon, its support of the Cascade Advanced Energy Facility is part of a much bigger initiative. The company has set a goal of deploying 5 gigawatts of nuclear power in the U.S. by 2039. "One thing that Amazon does well is scale technology," said Brandon Oyer, Amazon Web Services' head of power and water for North and South America. "We've done this over and over again ... We'll go and make an investment and then learn how to scale that up, drive out cost, make it more readily available." Targeting SMRs for amplification was a "natural fit," Oyer added. The company believes nuclear aligns with its climate ambitions. Amazon matches all of its electricity use with clean power and is the largest corporate purchaser of wind, solar and other renewable sources. That said, it is struggling to cut its carbon footprint to reach a goal of net-zero emissions by 2040 as the AI-boom stokes energy use. Amazon reported that its carbon footprint grew by 6% last year. Amazon has dibs on half of the 320 megawatts of electricity that will be generated by the first four reactors at the Washington site, but will take all of it if the power prices are too high for local utilities to afford. Cullen said that if everything goes well with the initial phase, it would be straightforward to build the other eight reactors as the permits will encompass the complete build out. The added reactors would produce enough electricity for about one million homes and should come at a lower cost. "Amazon recognizes the role they can -- and are willing -- to play," Cullen said. The company can take some of the early risk and bring that catalytic capital, he said, which is "every, very difficult for utilities to do."

Read more of this story at Slashdot.