Reuters reports: California energy officials on Friday issued a sober forecast for the state's electrical grid, saying it lacks sufficient capacity to keep the lights on this summer and beyond if heatwaves, wildfires or other extreme events take their toll.... California has among the most aggressive climate change policies in the world, including a goal of producing all of its electricity from carbon-free sources by 2045. In an online briefing with reporters, the officials forecast a potential shortfall of 1,700 megawatts this year, a number that could go as high as 5,000 MW if the grid is taxed by multiple challenges that reduce available power while sending demand soaring, state officials said during an online briefing with reporters. Supply gaps along those lines could leave between 1 million and 4 million people without power. Outages will only happen under extreme conditions, officials cautioned, and will depend in part on the success of conservation measures.

Read more of this story at Slashdot.

"Extreme drought has drastically reduced reservoir levels and is causing a decline in electricity production from hydropower," reports the Washington Post. "Yet while climate change has parched the West, these same forces have greatly increased precipitation in much of the Midwest, the South and the East. There, hydropower is gaining momentum, and supporters say that in many places it is poised for a big resurgence." And the Post sees this benefiting "a growing effort to retrofit so-called nonpowered dams, or any dams created for a need other than hydropower, for electricity production..." In 2016, a U.S. Department of Energy study forecast that hydropower in the United States could expand from its current capacity of 101 gigawatts to nearly 150 gigawatts by 2050. This growth would come not from new dam construction but from upgrading existing hydroelectric resources, adding pumped storage capacity, and retrofitting nonpowered dams for hydropower.... Nonpowered dams compose the vast majority of America's dam infrastructure. They can be found across the country, come in all sizes and were built to address a wide array of needs, including flood control, navigation, water supply and recreation. Out of the estimated 90,000 dams in the United States, about 2,200 of them generate hydroelectric power. These hydropower resources, however, account for 7 percent of national energy production and contribute 37 percent of the nation's renewable energy supply.... Solar and wind produce energy intermittently, but hydropower can operate day or night, 24/7. Some hydropower facilities can shut down or ramp up energy production very quickly, providing energy grids with stopgap flexibility during peak demand or in the case of blackouts.... The addition of hydropower to nonpowered dams can be financially attractive to developers. Typically the dam's operation is not changed, so there is usually much less opposition from communities and environmental groups than there would be to a new dam project. The article points out that last year's U.S. infrastructure funding included money to add hydropower to "nonpowered dams."

Read more of this story at Slashdot.

A UCLA assistant professor of Information Studies just published a short history of software engineering in Logic magazine — titled "Agile and the Long Crisis of Software." It begins by describing Agile's history as "a long-running wrestling match between what managers want software development to be and what it really is, as practiced by the workers who write the code." When software engineering failed to discipline the unwieldiness of development, businesses turned to Agile, which married the autonomy that developers demanded with a single-minded focus on an organization's goals. That autonomy is limited, however, as developers are increasingly pointing out. When applied in a corporate context, the methods and values that Agile esteems are invariably oriented to the imperatives of the corporation. No matter how flexible the workplace or how casual the meetings, the bottom line has to be the organization's profits. But this has major implications, the essay's conclusion argues: Could Agile even have played a role in some of the more infamous failures of the tech industry...? If a company sets a goal of boosting user engagement, Agile is designed to get developers working single-mindedly toward that goal — not arguing with managers about whether, for example, it's a good idea to show people content that inflames their prejudices. Such ethical arguments are incompatible with Agile's avowed dedication to keeping developers working feverishly on the project, whatever it might be. This issue becomes especially pressing when one considers that contemporary software is likely to involve things like machine learning, large datasets, or artificial intelligence — technologies that have shown themselves to be potentially destructive, particularly for minoritized people. The digital theorist Ian Bogost argues that this move-fast-and-break-things approach is precisely why software developers should stop calling themselves "engineers": engineering, he points out, is a set of disciplines with codes of ethics and recognized commitments to civil society. Agile promises no such loyalty, except to the product under construction. Agile is good at compartmentalizing features, neatly packaging them into sprints and deliverables. Really, that's a tendency of software engineering at large — modularity, or "information hiding," is a critical way for humans to manage systems that are too complex for any one person to grasp. But by turning features into "user stories" on a whiteboard, Agile has the potential to create what [software engineer] Yvonne Lam calls a "chain of deniability": an assembly line in which no one, at any point, takes full responsibility for what the team has created. Other observations from the article: "Daily standups, billed as lightweight, low key check-ins, have become, for some workers, exercises in surveillance. " "The warts-and-all breakdown of Agile 'retrospectives' seems healthy, but I've watched them descend into a structureless series of accusations; everything depends on who's leading the team." One freelance developer in the article even argues that "As developers, IT professionals, we like to think of ourselves as knowledge workers, whose work can't be rationalized or commodified. But I think Agile tries to accomplish the exact opposite approach." "Some people I talked to pointed out that Agile has the potential to foster solidarity among workers. If teams truly self-organize, share concerns, and speak openly, perhaps Agile could actually lend itself to worker organization. "Maybe management, through Agile, is producing its own gravediggers. Maybe the next crisis of software development will come from the workers themselves."

Read more of this story at Slashdot.

Last week California's Attorney General accused the fossil fuel/petrochemical industries of "perpetuating a myth that recycling can solve the plastics crisis," Reuters reports, and even launched an investigation into their role in "causing and exacerbating the global plastics pollution crisis." And meanwhile, "The rate of plastic waste recycling in the United States fell to between 5%-6% in 2021, as some countries stopped accepting U.S. waste exports and as plastic waste generation surged to new highs, according to a report released on Wednesday." The report by environmental groups Last Beach Clean Up and Beyond Plastics shows the recycling rate has dropped from 8.7% in 2018, the last time the Environmental Protection Agency published recycling figures. The decline coincides with a sharp drop in plastic waste exports, which had counted as recycled plastic.... "The U.S. must take responsibility for managing its own plastic waste," said the report, which used 2018 EPA, 2021 export and recent industry data to estimate the 2021 recycling rate..... "Recycling does not work, it never will work, and no amount of false advertising will change that," said report author Judith Enck [a former regional administrator at America's Environmental Protection Agency]. One sustainability site now even calls plastic recycling "a diversionary tactic preventing us from finding real solutions to our waste crisis," agreeing that it's being pushed by the plastics industry in "a clever, yet green-washed, ploy to maintain production by perpetuating a myth that all this plastic is destroyed. The sad truth is that it's not...." "[T]he real problem is the ever-increasing amount of STUFF, particularly single-use plastic stuff, that's produced, consumed briefly, and then added to existing colossal piles of trash. Recycling can't solve this problem." Or, as Cory Doctorow put it recently, "Recycling is puffery. Which is to say, recyling is bullshit...." In 1973, Exxon researchers told the company that there was no feasible way to recycle plastics, and that there likely never would be. Exxon sprang into action! They created a puffery campaign! They lobbied state legislatures to mandate the use of the recycling logo, three arrows pointing at each other, telling us that plastic was part of a new, "circular" economy. Oil is made into plastic, plastic is used, plastic is recycled. Everybody wins! We — the "consumers" (ugh) — bought it. We bought the plastic, sure, but we bought the puffery, too. We sorted our plastic, washed it, set it out on the curb. 90% of it was never recycled. 90% of it never will be. Thanks to Slashdot reader joshuark for sharing the link...

Read more of this story at Slashdot.

America's most populous state is shrinking — at least a little. The Associated Press reports: With an estimated 39,185,605 residents, California is still the U.S.'s most populous state, putting it far ahead of second-place Texas and its 29.5 million residents. But after years of strong growth brought California tantalizingly close to the 40 million milestone, the state's population is now roughly back to where it was in 2016 after declining by 117,552 people this year. That's a drop of 0.29% — at least some of which seems attributable to the pandemic. California's population growth had been slowing even before the pandemic as baby boomers' aged, younger generations were having fewer children and more people were moving to other states. But the state's natural growth — more births than deaths — and its robust international immigration had been more than enough to offset those losses. That changed in 2020, when the pandemic killed tens of thousands of people above what would be expected from natural causes, a category demographers refer to as "excess deaths." And it prompted a sharp decline in international immigration because of travel restrictions and limited visas from the federal government. California's population fell for the first time that year. At the time, state officials thought it was a outlier, the result of a pandemic that turned the world upside down. But the new estimate released Monday by the California Department of Finance showed the trend continued in 2021, although the decline was less than it had been in 2020. State officials pointed specifically to losses in international immigration. California gained 43,300 residents from other countries in 2021. But that was well below the annual average of 140,000 that was common before the pandemic. The state's official demographer predicts California's population will go back to increasing in 2022. And even with the decline, the article points out that California "had a record budget surplus last year, and is in line for an even larger one this year of as much as $68 billion — mostly the result of a progressive tax structure and a disproportionate population of billionaires."

Read more of this story at Slashdot.

Long-time Slashdot reader destinyland writes: He was the co-publisher of the first popular digital culture magazine, MONDO 2000, from 1989–1993. Now as R. U. Sirius approaches his 70th birthday, a San Francisco-based writer conducts a rollicking interview for the Berlin-based Spike Art Magazine. ("I wanted to speak with someone who had weathered the shakedown of history with art, humour, and a dose of healthy delusion. Or derision. Whatever arrived first...") That interview itself was star-crossed. ("What came first, R.U.'s stroke or the Omicron surge? As I recovered from a bout of corona, R.U. fell ill with his own strain.. ") But eventually they did discuss the founding of that influential cyberculture magazine. (Editor Jude Milhon is credited with coining the word "cypherpunk" for an early crytography-friendly group co-founded by EFF pioneer John Gilmore.) Asked about the magazine's original vision, Sirius says "I was pretty much diverted by Timothy Leary and Robert Anton Wilson and their playful, hopeful futurisms, their whole shebang about evolutionary brain circuits being opened up by drugs and technology." I needed something to get me out of bed at the end of the 1970s. I mean, punk was great – rock and roll was great – but it wasn't inspiring any action. I remember my friends stole some giant lettering from a sign at a gas station and some of it hung behind the couch in our living room where we took whatever drugs were around and tossed glib nihilisms back and forth. The letters read "ROT".... I couldn't sink any deeper into that couch, so there was nowhere to go except up into outer space. The surrealism and so forth were influences that travelled with me when I moved to California to create this new thing based on psychedelics, technology, and incorrigible irreverence that eventually became Mondo 2000. It's a funny interview. ("The 'R.U. a Cyberpunk' page from an issue of Mondo is the only thing most people below a certain age have ever seen from the magazine and we were taking the piss out of ourselves....") They scrupulously avoid mentioning Mondo's undeniable influence on the early days of Wired. But inevitaby the conversation comes back around to that seminal question: whither cyberpunk? Q: The internet, which was a prime source of Mondo subject matter, is home to many eyes, rabbit holes, and agents of algorithmic manipulation. Where is cyberpunk culture alive and well in our contemporary moment? Are you still invested and engaged with cyberpunk as a means of exploring radical possibilities and ideas...? RUS: [T]here's not really a cyberpunk movement... Surrealism was a movement for a number of years because an anguished control freak named André Breton maintained it in various formations. We didn't have that person, and if we had, he or she or they probably would have been laughed out of the sandbox for the attempt.... I'll remain influenced by playful spontaneity from ancient 20th-century moments not because of any dedication, but only because that's probably the only way I was ever going to be able to write or create. I lack rigor and once declared it a sign of death. And Sirius jokes at the end that "usually my attitude is that the world today is bloated with people opinionizing so, this interview is a mistake!"

Read more of this story at Slashdot.

"Employee monitoring software became the new normal during COVID-19..." writes Australia's public broadcaster ABC, "logging keystrokes and mouse movement, capturing screenshots, tracking location, and even activating webcams and microphones." And now "It seems workers are stuck with it.... Surveys of employers in white-collar industries show that even returned office workers will be subject to these new tools. What was introduced in the crisis of the pandemic, as a short-term remedy for lockdowns and working from home has quietly become the 'new normal' for many Australian workplaces." (Thousands of employees have apparently even purchased mouse-jiggling software just to fool the surveillance software.) But is there a larger issue? "The vast majority of people are not paid enough for the productivity that is demanded of them," argues BuzzFeed's former senior culture writer (now publishing a newsletter called "Culture Study.") After looking at technology's escalating demands, Petersen warns that the real problem is that human productivity ultimately has a ceiling. "We have to collectively reject the engine of endless growth, and the aspiration for infinite productivity, before it breaks us all." Thanks to long-time Slashdot reader theodp for sharing the stories!

Read more of this story at Slashdot.

America's law schools "would be given a green light to end admission test requirements," reports the Washington Post, "under a recommendation from a key committee of the American Bar Association that is scheduled for review in a public meeting this month." The proposal still faces layers of scrutiny within the ABA and would not take effect until next year at the earliest. If approved, it could challenge the long-dominant role of the Law School Admission Test, or LSAT, in the pathway to legal education. Some context from The Week US: Like the SAT in undergraduate admissions, the LSAT has been accused of racial bias and promoting a destructive obsession with rankings. Critics also argue that the LSAT, which was designed to predict academic performance, has little connection to professional accomplishment.... The incentives for law schools to dump the LSAT aren't only political, though.... [L]aw schools face declining applications after a pandemic-driven spike in interest. That's partly because word is getting out that the legal profession isn't as glamorous or lucrative as people imagine or the media depict. Accepting alternate exams, such as the GRE, or going test-optional altogether can help pump up enrollment, particularly at marginal institutions. The article points out that admitted law students will still eventually have to pass the official certifying "bar exam" before they're ever allowed to actually practice law.

Read more of this story at Slashdot.

Long-time Slashdot reader slack_justyb writes: IBM announces IBM i (some you of you may know it under the old name of AS/400) 7.5 the first new release in three years since the 7.4 release. One of the big headlines with the IBM i 7.5 announcement is Merlin which stands for the Modernization Engine for Lifecycle Integration.... With the Db2 product, IBM i is now receiving Boolean data types with support for this new type in RPG and JSON environments. Larger Indexes, the previous limit was 1.6TB indexes, that has now been increased to 16TB. And Db2 is now fully compliant with SQL:2016 the most recent publication of the SQL standard, beating Oracle to the punch on full support of the standard. And finally, QSYS2-based functions for using HTTP requests to publish or consume Web services, including the use of embedded SQL in REST services. These are enhanced versions of the functions that were seen in 7.3/7.4 where IBM removed the requirement for a JVM to use SQL to consume web services. IT Jungle has many more details. Some of the highlights: Merlin provides a lightweight, browser-based development environment for creating new applications or modernizing existing RPG-based application. It's an alternative to Rational Developer for i (RDi) based on Eclipse, which many developers seem to hate. Developed in partnership with ARCAD Software, Merlin comes pre-loaded with tools like Git and Jenkins for DevOps-style code management, as well as an RPG code-converter. It runs in a Linux-based Red Hat OpenShift container running on the Power platform. While it's not technically tied to IBM i version 7.5 or 7.4 TR6, Merlin represents an important change in how IBM is packaging and delivering capabilities for IBM i shops, as well as a recognition that IBM should take a more active role in helping users modernize their codebases.... IBM is now enabling customers to buy subscriptions to IBM i for periods of one to five years. Allowing customers to use operating expenditure (Opex) budget lines instead of the dreaded capital expenditure (CapEx) accounting code for subscriptions. IBM is focusing on lower-end IBM i environments at the moment, so the subscription is limited to four-core P05 machines at this time. As part of this shift to software subscriptions, IBM is rethinking how it bundles ancillary products that are often used with IBM i. 11 packages are being moved into the core OS entitlement.

Read more of this story at Slashdot.

"Developers of the Deno JavaScript and TypeScript runtime are exploring the possibility of JavaScript containers — and the JavaScript sandbox itself — as a higher-level alternative to Linux containers," reports InfoWorld, citing a blog post by Node.js and Deno creator Ryan Dahl: Dahl also noted that Docker popularized the use of Linux containers, with operating system-level virtualization for distributing server software. Each container image is a dependency-free, ready-to-run software package. But browser JavaScript offers a similar hermetic environment at a higher level of abstraction, he said. Dahl said he expects JavaScript container technology to unfold over the next couple of years. In the blog post Dahl says scripting languages are "all pretty much the same" — but that JavaScript is "by far more widely used and future proof." [A JavaScript sandbox container] isn't meant to address the same breadth of problems that Linux containers target. Its emergence is a result of its simplicity. It minimizes the boilerplate for web service business logic. It shares concepts with the browser and reduces the concepts that the programmer needs to know. (Example: when writing a web service, very likely any systemd configuration is just unnecessary boilerplate.) Every web engineer already knows JavaScript browser APIs. Because the JavaScript container abstraction is built on the same browser APIs, the total amount of experience the engineer needs is reduced. The universality of Javascript reduces complexity.... In this emerging server abstraction layer, JavaScript takes the place of Shell. It is quite a bit better suited to scripting than Bash or Zsh. Instead of invoking Linux executables, like shell does, the JavaScript sandbox can invoke Wasm.... Maybe the majority of "web services" can be simplified by thinking in terms of JavaScript containers, rather than Linux containers. At Deno we are exploring these ideas; we're trying to radically simplify the server abstraction. We're hiring if this sounds interesting to you.

Read more of this story at Slashdot.

Amazon defeated an attempt by a second warehouse to unionize, CNBC reports — after "holding mandatory worker meetings to persuade its employees not to unionize." But now the U.S. government's National Labor Relations Board "has found merit in a union charge that Amazon violated labor law..." The labor board has in the past allowed employees to mandate such meetings, which are routinely held at companies like Amazon and Starbucks during union drives. But in a memo sent to the agency's field offices last month, NLRB General Counsel Jennifer Abruzzo said she believes the meetings, often called "captive audience meetings," are at odds with labor law, and would seek to get them outlawed... An NLRB spokesperson said the agency will issue a complaint against Amazon unless the retailer agrees to a settlement. If the company doesn't settle, the complaint would trigger an administrative court process where both parties can litigate the case.... The agency also found merit in an accusation from the union that the company indicated to workers they could be fired if they voted to unionize, and threatened to withhold benefits should they chose to do so, according to an email from Matt Jackson, an attorney with the NLRB's field office in Brooklyn. "These allegations are false and we look forward to showing that through the process," Amazon spokesperson Kelly Nantel said in a statement. In addition, an Amazon spokesperson tells CNBC, "These meetings have been legal for over 70 years."

Read more of this story at Slashdot.

After Russia invaded Ukraine in late February, "VPNs have been downloaded in Russia by the hundreds of thousands a day," reports the Washington Post, "a massive surge in demand that represents a direct challenge to President Vladimir Putin and his attempt to seal Russians off from the wider world. "By protecting the locations and identities of users, VPNs are now granting millions of Russians access to blocked material...." Daily downloads in Russia of the 10 most popular VPNs jumped from below 15,000 just before the war to as many as 475,000 in March. As of this week, downloads were continuing at a rate of nearly 300,000 a day, according to data compiled for The Washington Post by the analytics firm Apptopia, which relies on information from apps, public data and an algorithm to come up with estimates. Russian clients typically download multiple VPNs, but the data suggests millions of new users per month. In early April, Russian telecom operator Yota reported that the number of VPN users was over 50 times as high as in January, according to the Tass state news service. The Internet Protection Society, a digital rights group associated with jailed Russian opposition leader Alexei Navalny, launched its own VPN service last month and reached its limit of 300,000 users within 10 days, according to executive director Mikhail Klimarev. Based on internal surveys, he estimates that the number of VPN users in Russia has risen to roughly 30 percent of the 100 million Internet users in Russia. To combat Putin, "Ukraine needs Javelin and Russians need Internet," Klimarev said.... In the days before the war, and in the weeks since then, Russian authorities have also ratcheted up pressure on Google, asking the search engine to remove thousands of Internet sites associated with VPNs, according to the Lumen database, an archive of legal complaints related to Internet content. Google, which did not respond to a request for comment, still includes banned sites in search results.... Although downloading a VPN is technically easy, usually requiring only a few clicks, purchasing a paid VPN has become complicated in Russia, as Western sanctions have rendered Russian credit and debit cards nearly useless outside the country. That has forced many to resort to free VPNs, which can have spotty service and can sell information about users. Vytautas Kaziukonis, chief executive of Surfshark — a Lithuania-based VPN that saw a 20-fold increase in Russian users in March — said some of those customers are now paying in cryptocurrencies or through people they know in third countries. One 52-year-old told the Post that downloading a VPN "brought back memories of the 1980s in the Soviet Union, when he used a shortwave radio to hear forbidden news of dissident arrests on Radio Liberty, which is funded by the United States." "We didn't know what was going on around us. That's true again now."

Read more of this story at Slashdot.

The BBC reports: Large tech companies such as Google and Facebook will have to abide by new competition rules in the UK or risk facing huge fines, the government said. The new Digital Markets Unit (DMU) will be given powers to clamp down on "predatory practices" of some firms. The regulator will also have the power to fine companies up to 10% of their global turnover if they fail to comply.... The Department for Digital, Culture, Media and Sport (DCMS) said as well as large fines, tech firms could be handed additional penalties of 5% of daily global turnover for each day an offence continues. For companies like Apple that could be tens of billions of US dollars. "Senior managers will face civil penalties if their firms fail to engage properly with requests for information," the government said. However, it is unclear when exactly the changes will come into force, as the government has said the necessary legislation will be introduced "in due course...." Google's search engine, which is currently the default search engine on Apple products, will also be looked at by the regulator, the government said. It added it wants news publishers to be paid fairly for their content — and will give the regulator power to resolve conflicts. The BBC reports the new rules also "aim to give users more control over their data," and that the new regulator "will also make it easier for people to switch between phone operating systems such as Apple iOS or Android and social media accounts, without losing data and messages."

Read more of this story at Slashdot.

"Comic book nerd Christmas has arrived," quips Mashable, noting this is the big 20th anniversary of Free Comic Book Day. Basically if you walk into your local comic book store on the first Saturday in May: they'll hand you some free comic books. Bleeding Cool points out that several stores are even having free signings from famous comic book artists and writers. Although in 2017 NPR had this advice for visiting comics fans. "While you're there, buy something... The comics shops still have to pay for the 'free' FCBD books they stock, and they're counting on the increased foot traffic to lift sales." The official site includes a comic-shop locator — but many of the comics are also available online as free downloads. (For example, as free ebooks in Amazon's Kindle store.) This year's free offerings include a special issue of a new Sleepy Hollow comic and a unique "yearbook" commemorating the 25th anniversary of Buffy the Vampire Slayer. Other geek-friendly choices include: Doctor Who Avatar: the Last Airbender Sonic the Hedgehog Teenage Mutant Ninja Turtles The Three Stooges Stranger Things Spider-Man and Venom Avengers/X-Men/Eternals: Judgment Day DC League of Super-Pets and Dark Crisis: Special Edition Winchester Mystery House: The Hundred Year Curse A graphic novel called The Guardian of Fukushima Clementine ("the next big thing from Robert Kirkman's The Walking Dead") And in addition — and perhaps inevitably.... "A new dawn of Archie is upon us!"

Read more of this story at Slashdot.

An anonymous reader quotes a report from Motor1: The two flagship models from Mercedes-Benz, the S-Class and the all-electric EQS, will soon be able to be ordered with conditional self-driving tech in Germany. Starting from May 17, the so-called Drive Pilot system will be offered as an extra-cost option for the two sedans, allowing the driver to hand the entire control of the machine over to the system under certain conditions. The Stuttgart-based automaker became the first in the industry to receive international approval for Level 3 autonomous tech in December last year. Releasing the system on the market now becomes the next logical step and Mercedes will ask 5,000 euros for Drive Pilot on the S-Class and 7,430 euros on the EQS, respectively around $5,260 and $7,813 at the current exchange rates. These figures include both the required hardware and software and for now, no further subscriptions are needed. It's important to note that Level 3 doesn't mean a fully autonomous vehicle. The system used by Mercedes allows the driver to hand all driving tasks to the tech in heavy traffic or on suitable motorways in Germany with speeds of up to 60 kilometers per hour. Under these conditions, the driver can fully disengage from driving with the system controlling the speed and distance, as well as guiding the vehicle within its lane. More importantly, the system also reacts to unexpected traffic situations and avoids dangerous maneuvers. Mercedes is currently working on receiving certification in the United States, notes Motor1.

Read more of this story at Slashdot.

Heroku has now revealed that the stolen GitHub integration OAuth tokens from last month further led to the compromise of an internal customer database. BleepingComputer reports: The Salesforce-owned cloud platform acknowledged the same compromised token was used by attackers to exfiltrate customers' hashed and salted passwords from "a database." Like many users, we unexpectedly received a password reset email from Heroku, even though BleepingComputer does not have any OAuth integrations that use Heroku apps or GitHub. This indicated that these password resets were related to another matter. [...] In its quest to be more transparent with the community, Heroku has shed some light on the incident, starting a few hours ago. "We value transparency and understand our customers are seeking a deeper understanding of the impact of this incident and our response to date," says Heroku. The cloud platform further stated that after working with GitHub, threat intel vendors, industry partners and law enforcement during the investigation it had reached a point where more information could be shared without compromising the ongoing investigation: "On April 7, 2022, a threat actor obtained access to a Heroku database and downloaded stored customer GitHub integration OAuth tokens. Access to the environment was gained by leveraging a compromised token for a Heroku machine account. According to GitHub, the threat actor began enumerating metadata about customer repositories with the downloaded OAuth tokens on April 8, 2022. On April 9, 2022, the attacker downloaded a subset of the Heroku private GitHub repositories from GitHub, containing some Heroku source code. GitHub identified the activity on April 12, 2022, and notified Salesforce on April 13, 2022, at which time we began our investigation. As a result, on April 16, 2022, we revoked all GitHub integration OAuth tokens, preventing customers from deploying apps from GitHub through the Heroku Dashboard or via automation. We remain committed to ensuring the integration is secure before we re-enable this functionality." Heroku users are advised to continue monitoring the security notification page for updates related to the incident.

Read more of this story at Slashdot.

Iamthecheese writes: The Mars XR Operations Support System is a virtual environment making use of [Epic Games'] Unreal Engine 5. [NASA is seeking to gather contributions to "replicate the harsh conditions of Mars in order to better train the next generation of astronauts," reports VRScout.] There is a $70,000 prize to be split between 20 contestants. It will be awarded to those with the best assets and scenarios. There are five (5) different categories to participate in, with particular scenarios to explore in each category: -Set Up Camp -Scientific Research -Maintenance -Exploration -Blow Our Minds I'm guessing little green men will feature heavily in submissions. In any case, it's not just a chance to earn money, but prove oneself to potential employers. Prize and contest information here.

Read more of this story at Slashdot.

An anonymous reader quotes a report from Scientific American: During spring in the Pacific Northwest, meltwater from thawing snow rushes down rivers and the wind often blows hard. These forces spin the region's many power turbines and generate a bounty of electricity at a time of mild temperatures and relatively low energy demand. But much of this seasonal surplus electricity -- which could power air conditioners come summer -- is lost because batteries cannot store it long enough. Researchers at Pacific Northwest National Laboratory (PNNL), a Department of Energy national laboratory in Richland, Wash., are developing a battery that might solve this problem. In a recent paper published in Cell Reports Physical Science, they demonstrated how freezing and thawing a molten salt solution creates a rechargeable battery that can store energy cheaply and efficiently for weeks or months at a time. Most conventional batteries store energy as chemical reactions waiting to happen. When the battery is connected to an external circuit, electrons travel from one side of the battery to the other through that circuit, generating electricity. To compensate for the change, charged particles called ions move through the fluid, paste or solid material that separates the two sides of the battery. But even when the battery is not in use, the ions gradually diffuse across this material, which is called the electrolyte. As that happens over weeks or months, the battery loses energy. Some rechargeable batteries can lose almost a third of their stored charge in a single month. "In our battery, we really tried to stop this condition of self-discharge," says PNNL researcher Guosheng Li, who led the project. The electrolyte is made of a salt solution that is solid at ambient temperatures but becomes liquid when heated to 180 degrees Celsius -- about the temperature at which cookies are baked. When the electrolyte is solid, the ions are locked in place, preventing self-discharge. Only when the electrolyte liquifies can the ions flow through the battery, allowing it to charge or discharge. Creating a battery that can withstand repeated cycles of heating and cooling is no small feat. Temperature fluctuations cause the battery to expand and contract, and the researchers had to identify resilient materials that could tolerate these changes. [...] The result is a rechargeable battery made from relatively inexpensive materials that can store energy for extended periods. "Right now the experimental technology is aimed at utility-scale and industrial uses," notes the report. "The PNNL team plans to continue developing the technology, but ultimately it will be up to industry to develop a commercial product."

Read more of this story at Slashdot.

Chinese researchers show off a swarm of drones collectively navigating a dense forest they've never encountered. TechCrunch reports: Researchers at Zheijang University in Hangzhou have succeeded, however, with a 10-strong drone swarm smart enough to fly autonomously through a dense, unfamiliar forest, but small and light enough that each one can easily fit in the palm of your hand. It's a big step toward using swarms like this for things like aerial surveying and disaster response. Based on an off-the-shelf ultra-compact drone design, the team built a trajectory planner for the group that relies entirely on data from the onboard sensors of the swarm, which they process locally and share with each other. The drones can balance or be directed to pursue various goals, such as maintaining a certain distance from obstacles or each other, or minimizing the total flight time between two points, and so on. The drones can also, worryingly, be given a task like "follow this human." We've all seen enough movies to know this is how it starts ... but of course it could be useful in rescue or combat circumstances as well. A part of their navigation involves mapping the world around them, of course, and the paper includes some very cool-looking 3D representations of the environments the swarm was sent through. Zhou et alThe study is published in the most recent issue of the journal Science Robotics, which you can read here, along with several videos showing off the drones in action.

Read more of this story at Slashdot.

A bug in Google Docs is causing it to crash when a series of words are typed into a document opened with the online word processor. BleepingComputer reports: It's official -- Google Docs crashes at the sight of "And. And. And. And. And." when the "Show grammar suggestion" is turned on. A Google Docs user, Pat Needham brought up the issue on Google Docs Editors Help forum. [...] Another user, Sergii Dymchenko, said strings like "But. But. But. But. But." triggered the same response. Some also noticed putting any of the terms like "Also, Therefore, And, Anyway, But, Who, Why, Besides, However," in the same format achieved the outcome. Once crashed, you may not be able to easily re-access the document as doing so would trigger the crash again. BleepingComputer was able to reproduce the issue last night and reached out to Google. Google told us it is aware of the bug and working on a fix. [...] Until Google has an answer as to what causes this problem, it might be wise to turn off grammar suggestions by navigating to Tools, Spelling and grammar and unticking 'Show grammar suggestions.' If the bug has already been triggered and you're locked out of the Google Doc in question, there might be a workaround. Use the Google Docs mobile app to access the document, remove the offending words and the file should now open up gracefully on your Google Docs web version too.

Read more of this story at Slashdot.