Science Daily reports: Researchers showed that unencrypted signals routinely exchanged between WiFi devices and routers can be used to create radio-based images of people and recognize them within seconds. In tests involving 197 participants, the system identified individuals with nearly 100% accuracy, even from different angles and regardless of how they walked. "By observing the propagation of radio waves, we can create an image of the surroundings and of persons who are present," says Professor Thorsten Strufe from KASTEL, KIT's Institute of Information Security and Dependability. "This works similar to a normal camera, the difference being that in our case, radio waves instead of light waves are used for the recognition," explains the cybersecurity expert. Because the technique analyzes radio waves moving through a space, a person does not need to have a phone, smartwatch, or other WiFi enabled device with them. "Thus, it does not matter whether you carry a WiFi device on you or not." Even turning off your own device would not necessarily prevent the system from working. "It's sufficient that other WiFi devices in your surroundings are active...." Connected devices routinely send information back to the router to help optimize wireless communication. These signals, known as beamforming feedback information (BFI), are transmitted without encryption, meaning that anyone within range can potentially read them. By analyzing that information, the system can generate images of people from multiple viewpoints. Those images can then be used to determine a person's identity. Once the machine learning model has already been trained to recognize individuals, the identification process takes only a few seconds.

Read more of this story at Slashdot.

When Anthropic instructed three agents to migrate a Python backend, but telling each agent to perform the migration in a different language, "We consistently saw a multiagent turf war," they wrote Thursday: All of the models we tested quickly assumed that others were purposefully impeding their work, and began to sabotage others while protecting their own contributions. In fact, they sabotaged others with increasingly aggressive, self-replicating malware. This included disabling the Unix accounts of the other agents, writing automated scripts that found and killed competing processes on a loop, and deploying malicious code that was disguised as belonging to another agent. In many runs, one agent settles the conflict by force via access-revocation (e.g., sudo/group removal, account lock, nologin, SSH denial). In others, some agents settle into passivity: they give up and refuse to escalate further. Agents sometimes manage to communicate their goals and coordinate: they recognize others' motivations as conflicting directives rather than hostility, and subsequently break out of the conflict loop in order to stop escalating indefinitely. In many of these successful episodes, they write commit messages or markdown files apologizing for malicious behavior and coordinate a truce. They clean up their malicious code, clarify the nature of the conflict, and ask for a human to intervene... In several episodes with Mythos 5, we observe an emergent behavior where the agents propose and run a tournament for application performance in each language. In the example above, the Rust agent strategizes about bake-off metrics that appear neutral enough for the others to agree to this mechanism, yet would likely favor Rust: one thinking trace warns to be "careful not to be seen as metric shopping". Ultimately, the Golang/TypeScript losers gracefully concede codebase ownership to the Rust agent, giving up on their original user directives under their self-negotiated commitment device. One problem is that AI agents do reward hacking, Anthropic notes, while current institutions "are designed by and for people, resting on assumptions about the sufficiency of oversight at human speed... As autonomous agents become more and more prevalent in the world and operate in ever-more demanding settings, it is crucial that they learn how to effectively coordinate." In addition to everything else, the agents struggled with a lack of clearly defined hierarchy, Anthropic points out. "Nothing above suggests that these failures are permanent — but nothing suggests they will fix themselves, either..." They argue a fix "takes two forms: environments that exert the kinds of social pressure that evolution exerted on us, and social computing systems redesigned for actors that can self-replicate and self-improve. These are open problems in interaction and mechanism design, and our experiments here provide early evidence that new solutions are necessary." "The AI models being tested in this case were Sonnet 4.6, Sonnet 5, Opus 4.6, Opus 4.8, Mythos Preview, and Mythos 5," notes Business Insider, adding that Sonnet 4.6 and Opus 4.6 "were the most combative, settling about 60% of their runs by force instead of truces or passivity." Anthropic argues there's a clear case for researching this phenomenon — especially since "The volume of agent-agent interaction could plausibly exceed that of human-human and human-agent interactions before the world understands the conditions for making such interactions go well."

Read more of this story at Slashdot.

Europe is facing its fifth round of dangerously high temperatures this summer, the New York Times reports. Now climate scientists wonder if global warming is doing more than raise temperatures... The weather patterns that create heat domes aren't new, but today they arise on top of the warming caused by greenhouse gas emissions. That makes it more likely that heat waves reach record-shattering temperatures for long stretches. But other environmental changes — natural, human-influenced or both — might also be causing heat domes to become more frequent and longer lasting. And it's these changes that scientists around the globe are trying to puzzle out. One change has to do with the Arctic. The differences in temperature between the hot Equator and the frigid far north help keep weather moving around the Northern Hemisphere. But with the top of the world now warming at several times the pace of the rest of the globe, those temperature gradients are narrowing. That might be causing the movements of weather systems to become more sluggish, producing more persistent heat waves. In Europe, reduced air pollution could be having a similar effect. Industrial emissions can contain particles called aerosols that reflect sunlight. Curbing aerosols has improved air quality, but it may also have altered the way air moves across the continent. Scientists haven't come to firm conclusions about how these shifts might be affecting European summers, said Antje Weisheimer, a climate scientist at the University of Oxford. The complex, fine-scale interactions in the atmosphere that drive weather dynamics are tough to capture in computer simulations, Dr. Weisheimer said. "It's tricky," she said. "We're making small progress." Dim Coumou, a professor of climate science at the Dutch university VU Amsterdam, sees artificial intelligence as one way forward. In a recent study, he and his colleagues used an A.I. algorithm to help a weather model better predict summer temperatures in Europe. They not only improved the model's forecasts; they also discovered why some of the model's predictions had been off: It misrepresented the way conditions in the western Pacific Ocean influenced atmospheric patterns that eventually made their way to Europe. With A.I., "we can also learn what the climate models are missing," Dr. Coumou said.

Read more of this story at Slashdot.

A "massive influx" of jellyfish forced Electricite de France SA to shut three units at its Gravelines nuclear power plant this week and reduce output at a fourth, reports Bloomberg. Just as summer temperatures surged, 3.2 gigawatts went offline — and the power utility was already facing cuts other nuclear sites as high temperatures reduced the river water available for cooling. More details from ScienceAlert: As Politico reports, the Gravelines nuclear power plant spent hundreds of thousands of euros in 2025 to stop this happening again, only to see a repeat 12 months later... Increasing temperatures in the water can produce more of the plankton and animals that jellyfish feed on, as well as accelerating life cycles and extending breeding seasons.... It's not just jellyfish that have a habit of disrupting human energy infrastructure. Last year in Connecticut, a single raccoon caused more than a thousand power outages, as reported by CT Insider. It's not clear exactly what the raccoon did, but we do know it somehow got into a substation and caused damage to the equipment in there. The unwitting act of sabotage left more than 2,500 customers in the area without power at one stage — though repairs were swiftly carried out. Reuters reported Tuesday on how the French utility responded to their jellyfish swarm: EDF has installed fixed cameras at the intake canals and on the filter drum screens to detect any incoming blockages as soon as possible, an engineer told Reuters... The company has also partnered with a French fishing organisation and a sea rescue organisation, which monitor for swarms and can raise an alert to launch targeted trawling operations by fishermen to reduce the swarm's density before it reaches the plant, the engineer said. The fishing boats were deployed [last] Saturday after an initial alarm was raised, limiting the impact from the swarm. The jellyfish that are already on site are being removed with vacuum trucks, he said. No new jellyfish are arriving, so cleanup is finishing, which should lead to a quick restart of the units, they added... Scientists warn such events could become more common due to factors including global warming, the arrival of invasive species, habitat loss of predators and over-fishing. Thanks to Slashdot reader Bruce66423 for sharing the news.

Read more of this story at Slashdot.

Less than a year ago he was the #1 richest man in the world. 10 weeks ago he was #2. But yesterday Larry Ellison dropped to #8, Forbes reports, falling behind Nvidia CEO Jensen Huang. Ellison's net worth is now estimated at just $192.6 billion — after a $104 billion decline: Shares of Oracle plunged roughly 54% between hitting a high of just over $250 on June 1 to a low of $114.50 on July 28, though the stock rebounded slightly to $150.52 as of Friday. A decline followed Oracle telling investors it expected to raise $40 billion through debt and equity financing, with capital expenditures surging 162% to $55.7 billion and spending expected to top $95 billion by fiscal 2027. Jacob Bourne, an analyst at eMarketer, told Reuters there are broader concerns about how Oracle would fund its capital spending to match its revenue projections, and Bank of America analysts separately flagged in a note cautioning that more than 50% of Oracle's remaining performance obligation comes from OpenAI. Melius Research analysts wrote last month that Oracle's spending plans may not hold if OpenAI or Anthropic demands more computing capacity. S&P Global also downgraded Oracle's credit rating in July, arguing the firm's "rapidly expanding" AI infrastructure business could pay off, but may be too expensive and could weaken Oracle's financial position in the meantime. $443 billion. That's how much Oracle's market valuation has dropped since peaking at $877.1 billion in September, hitting $433.5 billion as of Friday... Oracle, once viewed as a potential winner of the booming AI infrastructure buildout, has since raised concerns among investors who appear to view the firm as taking on too much financial risk to fund its projects. Wall Street has cautioned that mega-cap tech firms may be taking on too much spending to match growing demand for AI products, with firms like Amazon expecting to spend more than $200 billion. Oracle's backlog has exploded to $638 billion, but more than half is reportedly associated with OpenAI, and some analysts have cautioned that most of those funds may not be guaranteed.

Read more of this story at Slashdot.

"An engineering director at Google said four years ago that AI would deliver a four-day work week by 2025," remembers the BBC. And earlier this year OpenAI "formally urged companies to start testing out a four-day work week (with no change in pay), claiming that AI will soon be able to speed up so much human labour that the corporate world should prepare itself." However, a former OpenAI technical employee who left the company last year told the BBC the firm never actually trialled the four-day work week it suggested others should try while they were there. Instead, the person described what was often a gruelling work culture marked by frequent "crisis meetings", working on weekends, and "super cut-throat" performance reviews that would see colleagues suddenly let go... [T]he former OpenAI employee said they would put in at least 70 hours a week, much more than they did in previous tech jobs... Other companies have also pushed the idea that AI will effectively reduce the number of hours people need to work, for better or worse. [At OpenAI and Anthropic] sprints can stretch on for many weeks and top 90 hours of work in a seven-day period, tech workers that the BBC spoke to for this story said... At Meta, workers said they have been abruptly pushed onto teams this year doing AI work being treated as urgent... The hours on such teams at Meta are often long, with staff working into the night, on weekends, and feeling they are "on call" during the hours they are not working, according to descriptions of the work from the current and former employees... Some new research suggests that AI tools are making people's workloads even more burdensome. A study out of UC Berkeley followed hundreds of workers at a US tech company for eight months as they used AI. It found the employees "worked at a faster pace, took on a broader scope of tasks, and extended work into more hours of the day"... The UC Berkeley research found that the workload of tech employees was expanded in part because of the need to constantly check the output of AI tools. In the article Neil Thompson, an innovation scholar at MIT, pointed out a problem with estimates that AI will ease the workload on humans. "People assume that 20% less work means four-day weeks. But new work emerges." The BBC also points out helpfully that "there are no limits in the U.S. on how many hours a person over the age of 16 can work." (While in the UK and Europe, "laws limit a working week to 48 hours, including overtime.") Thanks to long-time Slashdot reader hadleyburg for sharing the article.

Read more of this story at Slashdot.

It's not just RAM prices that are going up, writes CNET. "Reports suggest the cost of Windows licenses for manufacturers is rising by up to 10%." Several sites that closely follow Microsoft news, including Windows Central and Windows Latest, have published articles citing a report from Taiwan's Economic Daily News that claims some PC manufacturers are seeing a 7% to 10% increase in the cost of Windows 11 licenses... Because they buy licenses in bulk, they get a sizeable discount over what a consumer would pay for a new copy of Windows 11. But given the existing cost pressures from other components, a big Windows 11 price hike could lead them to pass on some of the added cost to PC buyers. According to the EDN story, PC makers could raise prices by about 5% over the next quarter due to the reported Windows price hike. .. A translated version of the Economic Daily News article contains information from an unnamed PC brand executive. It says that while Microsoft typically raises licensing costs every year by single-digit percentages, that hike has reached 7% to 10% this year, a significant increase. "A representative for Microsoft declined to comment on the report," according to the article. But it also notes that three weeks ago laptop maker Framework blamed price hikes and reconfigurations for some of their models on processor, memory, storage, "and other silicon costs — but also "an increase in Windows license costs." Thanks to Slashdot reader joshuark for sharing the article.

Read more of this story at Slashdot.

"The European Union's Copernicus climate monitoring service confirmed Monday that June and July were the hottest on record in western Europe," .according to a report from the CBC. "The period saw an estimated 25,000 heat-related deaths." CNN has before-and-after photos of Europe's dried rivers, calling it "a crisis so dire it can be seen from space" River levels are so low that commercial ships have had to reduce their loads by as much as 80% to avoid running aground. It's disrupting supply chains and making shipping more expensive. Other effects of Europe's drying rivers The BBC reports that Romania has "shut down its only nuclear power station because of extremely low water levels in the Danube river." A bridge built in the year 39 AD by the Roman emperor Caligula "is usually entirely underwater," reports CNN, but this year full blocks of the ancient structure are visible, giving archaeologists a rare opportunity to study it." The reports adds that drying Tiber has also now also revealed formerly submerged e-bikes, scooters, refrigerators and a car." The CBC reports a dozen Nazi warships scuttled in a river during the Second World War are now resurfacing as water levels plunge. "Elsewhere, the drying Danube has revealed a German military motorcycle in Hungary, an unexploded 700-kilogram British bomb in Slovakia, and what are believed to be the ancient remains of a mammoth in Bulgaria."

Read more of this story at Slashdot.

This week Meta CEO Mark Zuckerberg published a 6,500 word open letter titled "The Future is for Everyone". But the BBC is more interested in why big tech executives keep writing manifestos about AI: [Zuckerberg's] vision echoes what AI leaders have expressed in various forms: the product they are building is among the "most important technologies in history." Marc Andreessen, co-founder of early web titan Netscape, perhaps started this trend in 2023 with a 5,000-word essay he called "The Techno-Optimist Manifesto", which argued innovation was the way to solve life's problems... As the International Monetary Fund warns AI could affect nearly 40% of jobs and worsen global financial inequality, Zuckerberg says he believes there will be an abundance of jobs in the future. "I do not understand why anyone who believes that AI will eliminate most jobs and much of humanity's relevance would rush to build that future." Never mind that Zuckerberg's Meta has cut 10% of its global workforce — about 8,000 jobs — as the company reorganizes to focus on AI. Zuckerberg's manifesto is the latest to land in our social media feeds in an effort to put a positive spin on AI. In 2024, ChatGPT-maker OpenAI boss Sam Altman released a manifesto called "The Intelligence Age", a sweeping expression of optimism about the tech's potential... That same year, in a manifesto titled "Machines of Loving Grace", Anthropic CEO Dario Amodei touted the potential of AI to transform everything from healthcare to politics. So what's going on with these tech executives' manifestos? Economics blogger Noah Smith suggested to the BBC "they all feel like it's such an important moment that it's incumbent upon them to do whatever they can to shape the direction that this technology is going." Although he does see some value in their engagement with important issues. "Should we open-source something that has the ability to kill humanity? If you don't take that seriously, you're just a fool." But Rob Lalka, a business professor at Tulane University, had a different explanation for the BBC: Lalka said the timing of Zuckerberg's manifesto coincides with rising anger over AI's impact on everything from jobs to the environment. And while tech journalists and academics might pore over them trying to glean nuggets of meaning, these executive manifestos are not necessarily landing with the general public. "They're trying to make the case that the positives will far outweigh some of those negatives that the public backlash is pointing out," he said. "But I think a lot of the reasons for optimism are still yet to be seen."

Read more of this story at Slashdot.

Futurism reports: 404 Media revealed that a July 10 audit by the Los Angeles Police Department Office of the Inspector General caught the department's ALPR cameras generating 161 false stolen-vehicle alerts in just two months — each one ending with officers pulling over an innocent driver. Factoring in 337 alerts which "resulted in the recovery of stolen vehicles," the LAPD's cameras carry an error rate of 32.3 percent, effectively giving officers a one-in-three chance at pulling an innocent person over. "The biggest issue remains this national database at the FBI called NCIC," Flock's CEO Garrett Langley recently told The Drive, complaining about "how archaic its structure is." Flock CEO: There's no feedback loop mechanisms; it's really just a static comma-separated file. We've tried to build around it. We have this concept called "suppression." A local agency — let's take Atlanta, where I live — might see that there's a stolen plate out of California, but it's already been resolved because it's a rental car or a dealer car. They can, in Flock, suppress that: "Never alert us on that for the next year." That's to get around the fact that they can't force another agency to remove it from NCIC. Ideally, the way it would work is if enough agencies — let's call it one, two, or three — flag a tag as no longer valid or a bad entry, it should just get removed. Or at least it should get pushed more aggressively by the FBI... I'm hopeful that they'll see there's an opportunity to make something like NCIC, which is an important tool not just for companies like Flock, but for police departments to work together, start to make some enhancements to modernize what's a central part of our policing system. Later in the interview he says "It's less than one in a million alerts that an officer says, 'I'm not sure if that's right.' Less than one in a million." A recent report from Business Insider shares a worst-case scenario. In the summer of 2024 a Sacramento police officer said Flock's cameras had sent six false alerts for the same vehicle, wrongly saying it had been stolen or used in a felony crime in the nearby suburb of Roseville: Roseville police could see that Flock's software kept confusing the "9" on the man's license plate for an "8." The car owner said he would take off his license plate cover. Soon after, it happened again. It's "easier at this point we have it memorized," a dispatch supervisor in Roseville wrote in an email to a colleague. Flock says that in optimal conditions, its cameras accurately read more than 96% of license plate characters. Hundreds of pages of records from the Roseville Police Department show a different picture. In 2023 and 2024, Flock sent 1,427 alerts to Roseville police, flagging vehicles as stolen or used in a felony after they passed one of the city's Flock cameras. An analysis by the police department found that in 71% of those alerts, Flock's machine-learning software incorrectly read the license plates... The cameras regularly missed vehicles, captured blurry images, misread license plate characters and states, and sent delayed alerts to police about vehicles possibly connected to crimes, the records show... A factor that contributed to the misread problems in Roseville was the "particularly unique deployment" that the city requested, a Flock spokeswoman said. Roseville said it has its cameras configured so that they capture only the backs of vehicles, a setup intended to avoid capturing personally identifiable information like faces. Roseville's setup included older hardware and placement of cameras higher and further from vehicles than the company typically recommends, Flock added... In Toledo, Ohio, driver Brandon Upchurch was mauled by a police dog after a Flock camera misread the "7" on his license plate as a "2." As a result of his injuries, he said, he lost his job and was evicted from his home. He settled a lawsuit against the city and police officer for $35,000. None of the incorrect Flock alerts in Roseville resulted in a traffic stop or arrest, a department spokesman said. Roseville requires police officers to verify that a license plate is stolen or have independent reasonable suspicion of a crime before making a traffic stop... Flock said Roseville's camera performance has significantly improved, which the police department disputed... Flock's cameras also missed vehicles altogether... At one point, Flock's product director for machine learning suggested that officers ask drivers to remove license plate frames that made it "very difficult for the machine vision to tell it is actually a 'E' and not an 'F.'" Roseville told Flock at the time that it wouldn't do so, according to the department spokesman. Flock in 2024 shared an analysis with Roseville's police department, outlining reasons for the misreads. Vehicles far from a camera were sometimes blurry. Plates were cut off by trees or license plate frames. And Flock's software confused similar characters, mistaking an "N" for a "V", or a "1" for a "4...." Roseville isn't the first organization to flag inaccuracies in Flock's technology. In 2021, the research firm IPVM independently tested Flock's license plate readers, concluding that Flock misidentified the state in about one of 10 reads, and that the system regularly misclassified vehicles' type and make. IPVM said that Flock subsequently blocked it from purchasing its cameras for testing. Thanks to long-time Slashdot reader Cognitive Dissident for sharing the article.

Read more of this story at Slashdot.

Microsoft's cloud storage app OneDrive got a new Photos app in the worst possible way, reports the blog Neowin . "The app is reportedly showing up even on Windows 11 Enterprise machines, despite apparently being a beta application aimed at consumer functionality." One admin questioned why a beta app was appearing on an Enterprise SKU in the first place, while another described the situation as yet another consumer-oriented feature being forced onto corporate PCs. Things get even more frustrating for IT departments because there does not appear to be a straightforward Microsoft-provided way to disable the app... Enterprise administrators generally need to know what is being installed on their managed devices, particularly when a software is labeled as beta. Quietly adding another application and leaving admins to clean it up themselves is therefore unlikely to win Microsoft many fans. But there's another problem, according to the blog Windows Latest. "OneDrive Photos automatically scans your system storage for photos," and apparently "doesn't need a Microsoft account to work, as it can also detect your local files." There's also a People section that groups similar faces in your photos. Microsoft asks for permission before turning it on and explicitly warns that facial data could be considered biometric data in some regions. The company says only you can see the grouped faces, that the data isn't shared with third parties, and that you can delete it by disabling the feature. In a statement to Neowin, Microsoft admitted this new photos "experience" they're "incubating" had gone "more broadly than it should have," and then promised that "We're fixing that." The spokesperson also said the Windows Photos app will "always give you the option of local and cloud photos" and, also a choice of whether or not to use it OneDrive." But there's another "awkward catch," notes the blog Digital Trends. "Users currently can't uninstall OneDrive Photos without removing the main OneDrive app too." Because OneDrive Photos is tied to the main OneDrive sync client, Windows 11 doesn't currently offer a separate uninstall option. The only straightforward way to get rid of OneDrive Photos right now is to uninstall OneDrive itself... Removing the main client can also affect its File Explorer integration and shortcuts... Microsoft says this will change. The company is working on controls that will let users remove OneDrive Photos separately from the main OneDrive app. On enterprise PCs managed through Intune, Microsoft says the app will automatically disappear where it isn't supported.

Read more of this story at Slashdot.

With nearly 70% of the market, "Meta wants its smart glasses to be a big hit," writes the Los Angeles Times. But after some users found ways to disable the light that warns people they're being filmed, "the high-tech specs have also turned into a liability, as some are calling the gadget 'pervert glasses...'" Some people are using the glasses — which look like a pair of regular spectacles — to record people without their knowledge and publish the videos on social media. The users secretly videotape and share what happens when they try to pick up women. Now, a growing number of people are worried they could be covertly recorded at the gym or even during sex. The backlash has prompted Meta to update its glasses to address privacy concerns, and some places have banned them, adding to the angst surrounding technology that's rapidly evolving... Concern about the glasses has exploded as more videos of interactions with people who don't know they're being recorded go viral on social media. On Instagram, some videos depict people getting approached in malls and grocery stores and on college campuses and sidewalks. While the videos are portrayed as jokes, the people filmed don't appear to know they're being recorded and sometimes seem uncomfortable, telling the strangers to leave them alone or stop harassing them. The outcry has spread beyond social media, with comedian Jimmy Kimmel calling the Meta devices "pervert glasses" on national television and singer Lorde telling concertgoers that smart glasses are "not sexy..." Instagram, which is owned by Meta, has been disabling accounts and taking down some of these pickup or prank videos for violating the platform's rules against harassment and bullying... Businesses are making their own calls about smart glasses. The 5 Point Cafe in Seattle, which banned Google Glass in the past, has banned Meta glasses from its diner and dive bar. "Leave your Meta-SpyBan Display at home, they are officially Ray-Ban-ned from all of our restaurants. We serve privacy, not side-eye surveillance," a 2025 Instagram post from the business states. An Android app that warns people if they're being recorded has roughly 110,000 downloads in the last six months, according to the article. The app's creator says it's a "social problem" that "we don't value privacy, that we feel entitled to use others for our entertainment or our private gain, and technology amplifies that." The American Civil Liberties Union and more than 70 organizations even sent a letter urging Meta to promise they'd leave facial recognition features out of their smart glasses, according to the article. But a Meta spokesperson said "no final decision has been made."

Read more of this story at Slashdot.

Linux Torvalds expects Linux 7.2 should be released next weekend "unless something really bad pops up," Torvalds said while announcing today's release candidate. But there's something interesting about Linux 7.2-rc7, writes Phoronix. "By the time the Linux kernel typically hits a -rc7 release things have usually settled quite well. But in today's world of AI/LLM coding/review agents, the kernel activity continues at an all-time high." Tons of bug fixes continued to trickle in across the kernel spectrum for all sorts of issues. The HWMON hardware monitoring subsystem saw several critical and high severity bug fixes, on the memory management side was a nasty race condition leading to a use-after-free in the kernel for the past eight years, Btrfs restored its fixup worker infrastructure to deal with silent data loss, lots of AI patches in the networking realm, and the kernel was patched for the Safe RET Interrupt Vulnerability. Linus Torvalds wrote in the 7.2-rc7 announcement: "Another week, another -rc. I can't say that I'm exactly thrilled about the size of this all, but it is what it is: the new normal with a lot of fixes, many of them due to review by various AI tools. And nothing looks particularly scary per se — it's just that there's a lot here. Most of it is fairly small, although we have a couple of larger diffs: s390/zcrypt fixes stand out in the diffstat, and so does btrfs bringing back the fixup worker infrastructure. And some netfilter ipset fixes. But aside from a few places like that, most of this is just lots of tiny fixes. It's pretty much spread all over — drivers (gpu, sound, networking, you name it), filesystems, core networking, arch code...

Read more of this story at Slashdot.

A Massachusetts newspaper reports that officials from the town of Littleton (population: 10,141) "claim that five of Littletonâ(TM)s Flock Safety cameras were switched back on by the company without informing the town..." Littleton had temporarily disabled the cameras earlier this year, according to the article, but upon discovering the cameras were still active, city officials say they directed the Town Counsel "to initiate cancellation of the contract with Flock Safety and directed the Town Administrator to coordinate the removal of the six cameras on public ways" with the Department of Public Works. Ironically, it's the same Massachusetts town that last year was breached by a Chinese-state-sponsored hacking group for over 300 days. Flock has also considered dashcams installed in hundreds of thousands Uber, Lyft, and delivery drivers' vehicles "to scan license plates those drivers travelled passed," reports 404 Media, "essentially turning Uber and Lyft drivers into roaming surveillance vehicles, according to a Flock presentation shared with 404 Media... 404 Media first revealed the intended partnership last August when multiple sources provided information on the plan."

Read more of this story at Slashdot.

NBC Bay Area brings news from the small idyllic California town of Suisun City (population: 29,518). The city council "declared a state of emergency Saturday after a cyberattack that shut down computer systems including 911 public safety operations." "Malicious software infected and compromised" the East Bay community's information technology systems beginning about 5:45 a.m. Friday, the city said on social media. "The cybersecurity incident hit critical public safety operations, including 911 routing, police and fire dispatch, records and city services," the city said. "There is no imminent threat to the public," the city said. "All public safety services remain active." The city shut down its computer network "to contain the threat and preserve evidence for a federal investigation," it said... Suisun City dispatchers were taking calls for service through the Solano County dispatch center. Suisun City police officers and firefighters continued responding to calls for service, the city said, but online city services and internal operations were unavailable. On Facebook the city said it was "working alongside federal, state and regional agencies, including the FBI, Department of Homeland Security and California Office of Emergency Services to maintain emergency services, investigate the incident and restore systems." But Bay Area PBS station KQED notes "They're only the latest local government in the region to be hit by a cyberattack." Earlier this year, Foster City and Pittsburg experienced other cyberattacks that impacted services in their own jurisdictions. Foster City declared a state of emergency after a March ransomware incident that shut down many services for more than a week. Pittsburg lost almost $1 million to a February phishing attack, though over half of it was recovered.

Read more of this story at Slashdot.

XDA Developers reports: On July 22, a Google DeepMind engineer, Vidy Thatte, shared a snippet of a browser he built that "treats every URL as a prompt and generates a site from scratch" on his X account. Just a few days later, he shared a TestFlight link to let iPhone users try it for themselves. The browser he launched is called Gem, and it's a browser that doesn't really...browse. Instead of fetching a webpage from a server the way Chrome or Safari would, Gem hands whatever URL you type over to Google's Gemini 3.5 Flash Lite model and asks it to generate a webpage on the spot. If you enter a real address, it builds its own interpretation of that site rather than loading the actual thing. If you enter an address that doesn't exist, Gemini simply invents a website to fill the gap. In other words, you're not visiting the internet so much as browsing one the model dreams up as you go... Thatte's reasoning was that with a model as fast and cheap as Gemini 3.5 Flash Lite, there's almost no practical difference anymore between loading a website and generating a brand-new one on the fly... Given that this tool is powered by Gemini 3.5 Flash Lite and it's just a side project rather than a full-fledged tool, it doesn't come with Gemini access baked in. Gem requires you to bring your own Gemini API key to get it working. Every URL you enter fires off a request to the model, so Gem needs a key linked to your Google account to actually generate anything, with the usage billed to you. You can grab a key for free from Google AI Studio, paste it into Gem's settings, and you're ready to start typing URLs. While you can get started for free, I ran into the limits within two minutes of playing around. So, I did need to enable billing on my API key and decided to load $10 into it. While the blogger's own site seemed to only get the Gemini logo, tapping it revealed nearly two dozen remixing options. (Dark mode, Reader, Neubrutalist, Broadsheet, Blueprint, Comic book, Punk zine, Notebook, Chalkboard, Receipt, Teletext, System 7, Wes Anderson, Cyber neon, Clay, Frosted, Geocities, Matrix, Museum, Windows 95, Terminal, Vaporwave, and Hide images...) "The frontend morphed before my eyes. Every new edit took practically no time to load, and within a second or two, the same XDA articles would reappear wearing a completely different skin..." For another site, it kept the article headlines, but then rewrote all the text! And after entering an address they knew didn't exist — their own name — in two seconds the browser whipped up a slick portfolio "genuinely been better than some of what those tools produced with far more time and context to work with." But its link to a LinkedIn profile led to a lookalike page, because Gem "had simply generated its own version of it, complete with a made-up follower number and details I never wrote...."

Read more of this story at Slashdot.

UI changes, lost productivity, untransferrable knowledge... Long-time Slashdot reader theodp notes the folly of switching to an unfamiliar new environment to be "more productive"... Champions of the switch often insist workers will be able to hit the ground running and get the same or even more work done from the get-go in the new unfamiliar environment because it's 'more productive', a conclusion often shaped by conventional wisdom or their 'gut' feeling. Decision makers may also mistake their own 'light-user experience' for universal experience and believe all platforms are fungible. And while it's one thing for a business to delay their delivery dates and increase costs of by introducing a switch in computing environments that's of unquantified and possibly dubious value, how about when a switch in computing environments is made that affects schoolchildren's ability to learn for a period of time? While a MacBook Neo is indeed cute, what might be the possible consequences of a decision to move 25,000 students off Windows and onto MacBook Neos...? Or even the impact on a single kid who moves from a MacBook school to a Windows or Chrome school (or whose home computing environment isn't aligned with their school). Or students whose teachers decide learning in their classrooms should now additionally require an understanding of the Minecraft computing platform/UI (used in over 40,000 school systems.). Learning Management Systems and now various AI Edtech tools used by schoolkids are also subject to change. "Even if students and schools eventually benefit from a new platform, one wonders how much learning is lost during the switch," theodp asks, "and what the financial and educational ROI and payback period look like." Are there bigger problems than we realize? Share your own thoughts and experiences in the comments. What are the costs of switching between Windows, MacOS, and Chrome?

Read more of this story at Slashdot.

"I've been a Linux IT administrator for 30 years now," says crhylove (Slashdot reader #205,956), in a new video on his YouTube channel. "I used to be a data center architect, at one point I was the IT director for 13 school districts... I just haven't been happy overall with all the other operating systems out there... " I've been working really diligently for the last few weeks on a new distro called Spaced Linux that is exactly what I want to use. It's heavily focused on the [zoom-friendly 3D] Compiz desktop, very efficient using the rolling Devuan Ceres backend, and avoids dependency hell by promoting mostly Flatpak usage. It's still early, but it's already working great for me, it's been my daily driver for a few weeks now. There's also user-friendly themes — everything from Linux, Android, GeoWorks, and Mac OS X to Windows 11, Windows XP, and even Windows 3.11 (dark or light theme). And you can also run Windows apps under Wine. "And let me tell you, Nvidia runs perfectly on here now..." he adds in the video. "It just works really, really well out of the box." He's now working on voice-command features, bur argues that Spaced Linux "is already extremely usable, extremely efficient, extremely fast, and extremely reliable.... And it's only going to get better and better."

Read more of this story at Slashdot.

OpenAI announced Friday it's pausing work on its Astra AI model because of security concerns. The Guardian reports: The company had evaluated the agent, Astra, and found "significant advancements in agentic coding and cybersecurity", which had moved to a "critical" threshold... OpenAI stated that the model was not involved in an incident in which one of its AI agents went rogue during a test, accessed the open web and hacked a startup, Hugging Face... The reports have increased concerns about advancements in AI models and humans' ability to control them. Still, critics of the AI industry have warned that such disclosures from OpenAI and its competitors Anthropic and Meta could be designed to generate hype about the technology's power and thus spur additional interest from investors. To prevent potential rogue behavior from AI agents, OpenAI is "implementing stricter security controls for higher-capability models and associated activities, including isolated testing environments, restricted network and tool access", the company's blogpost stated. It will also install "enhanced model weight protections and encryption, additional monitoring and detection capabilities". The company will pause internal activities involving Astra that do not meet these new requirements. "We believe it's important to be transparent with the public and the safety and security communities about this potential shift in capabilities..." OpenAI wrote in a blog post titled "Responding to the next frontier of critical cyber capabilities." Under our Preparedness Framework, a model reaches the Critical cybersecurity threshold if it can identify and develop functional zero-day exploits of all severity levels in many hardened real-world critical systems without human intervention, or can devise and execute end-to-end novel strategies for cyberattacks against hardened targets given only a high level desired goal. While we continue to benchmark and assess this model, our preliminary evaluations indicate strong enough performance that we cannot rule out Critical capability level at this time... Accordingly, we have scaled up robustness testing of our safeguards and security controls so that they are appropriate for a deployment of these capabilities... - We are implementing stricter security controls for higher-capability models and associated activities, including isolated testing environments, restricted network and tool access, enhanced model weight protections and encryption, additional monitoring and detection capabilities, and sandboxed execution. - We are pausing internal activities involving Astra that do not yet meet these strengthened security control requirements. - We have implemented universal monitoring for risky actions and misalignment across all agentic applications of Astra, including training and evaluation. Monitors evaluate the model's Chain of Thought and trigger a security response to review and interrupt high risk activity. - We will work with relevant government agencies and select AI safety organizations to test the capabilities for this model... We believe advanced cyber-capable models should help defenders identify and address vulnerabilities before attackers do. We're committed to working alongside governments, safety institutes, and civil society to ensure that the frontier capabilities of models like Astra, and those that follow, are deployed responsibly and broadly for the benefit of all humanity.

Read more of this story at Slashdot.

Researchers believe they've found evidence that brain signals reveal the pitches of notes in imagined musical melodies, reports Medical Express: Study participants were 10 epilepsy patients with electrodes on the surfaces of their brains for clinical monitoring. Participants quietly listened to the first bars of children's tunes, then imagined the melodies of subsequent bars before humming their imagined melodies. Brain activity from the patients carried information about relative pitches within the imagined melodies. Combining note-level pitch predictions over time allowed the research team to recreate melodic changes that reflected the structure of the imagined songs... "The model we created decodes relative pitch classes — such as do, re, mi, fa, sol, and la — rather than exact, absolute pitches," [said tudy co-lead Jii Kwon of Seoul National University]. "This is useful because people often recognize melodies by the relationships between notes, even when the same melody is played in a different key."

Read more of this story at Slashdot.