Slashdot

News for nerds, stuff that matters

Rust Will Save Linux From AI, Says Greg Kroah-Hartman

Linux stable kernel maintainer Greg Kroah-Hartman says Rust can help Linux deal with a flood of AI-discovered security bugs (namely Dirty Frag, Copy Fail, and Fragnesia) by preventing common C mistakes around memory, locking, error handling, and untrusted data at build time rather than during human review. It's "not a silver bullet" and does not mean rewriting the whole kernel, but he said new drivers and subsystems will increasingly use Rust as Linux evolves forward. ZDNet reports: Kroah-Hartman illustrated those pitfalls with real C bugs in the kernel, including a 15-year-old Bluetooth bug that dereferenced a pointer without checking it and a Xen bug where "we forgot to unlock" in an error path. "The majority of the bugs in the kernel are this tiny, minor stuff," he explained. "Error conditions aren't checked, locks aren't forgotten, unreleased memories leak, and vulnerabilities add up over time. They crash the kernel. This is what we live with in C. This is why we don't like it." Kroah-Hartman argued that the "best beauty of Rust" is catching those mistakes at build time rather than in review. For example, when it comes to locking, he highlighted Rust's locking abstractions in the kernel: "The only way you can get access to inner pointers of structures is by grabbing that lock, and releasing the lock automatically. The compiler does it, it's guarded, the lock happens, everything's happy. You just can't write code to access these values...without grabbing the lock. The compiler will not let you."

Those properties, he argued, directly remove a huge fraction of the bugs he sees: "This is going to save us those two things. First, 60% of the bugs in the kernel right there, they're gone. Thank you." The payoff is earlier, more automated enforcement: "If this happens at build time, not review time, don't make me a maintainer who has to read your code [and] say, 'Oh, then you properly check that error value. Oh, did you properly grab the locks in the right spot?' Rust gives us that for free. This is the best thing ever." Even if Rust vanished tomorrow, Kroah-Hartman argued, it has already forced the kernel to clean up C code and interfaces. He credited Rust's influence outright: "We stole this from Rust. Thank you. It's a good idea, so if Rust disappeared tomorrow, we have cleaned up the C code in the kernel so much and taken in the ideas. We thank you, you've made Linux better with it just by existing."

[...] What ultimately sold a number of core maintainers, including him, on Rust was how it "makes reviewing code easier." With CI [Continuous Integration] bots enforcing builds and Rust's type system enforcing key invariants, maintainers can "focus on the logic" rather than resource bookkeeping: "I can care about that one function. I don't have to worry about the rest of this stuff, because I assume that it works properly, because it was built properly." Internally, he said, the top maintainers have already made their call on Rust's status: "The Linux kernel maintainers, we get together every year and talk about what the processes are doing. Last year, we said the Rust experiment is over. It's not an experiment. This is for real." The rationale: "The people behind it are real. We trust them. We know what they're doing. They've shown and put in the work to make Rust a viable language in the kernel, and we're going to make this stick. Let's go full speed ahead. And, as always," he said wryly, "world domination proceeds."

"If you never remember anything else in my talk, just remember these four words. It came from Microsoft Security many, many years ago," Kroah-Hartman told attendees. "They realized all input is evil. You have to validate all input."

Read more of this story at Slashdot.

The AI Fight Brewing Inside the New York Times

An anonymous reader quotes a report from The Verge: How newsrooms should use AI -- or if they should at all -- has been a recurrent debate within the media industry over the last several years. Increasingly, these rules are being hammered out at the bargaining table between unions and publishers. Right now, employees at The New York Times are gearing up for a fight. Unionized staff with the Tech Guild say Times management has refused to provide the union with information related to how the company has used AI, its plans for AI use in the future, and how it will affect employees' jobs and workflow. (The union filed an unfair labor practice charge earlier this month.) The Tech Guild, a NewsGuild of New York unit of around 700 software engineers, designers, product and project managers, and data analysts, also filed grievances saying Times management violated their collective bargaining agreement when it started using two internal AI tools that track and evaluate employee performance and activity.

[...] Both the Tech Guild and the Times Guild (which represents 1,500 editorial, ad sales, and support staff at the Times) filed unfair labor practice charges against the Times, saying that company violated labor law by refusing to respond to their requests for information around AI use at the outlet. The Times did not respond to specific questions about how it uses DX and Glean, but spokesperson Danielle Rhoades Ha said in an email that the company disagrees with the characterizations made in grievances and that it would respond as part of its "normal contractual process." "Likewise, we will respond to this Request for Information (RFI) in due course as we've done with 80+ other RFIs from the Guild in recent years," Rhoades Ha said.

The Times Guild is currently bargaining a new contract, pushing for robust protections against AI, like requirements that a human is behind any AI tool being used, that any journalism utilizing AI is transparently labeled, and that staff are compensated for AI model training deals the company might make. The Times deploys artificial intelligence tools for some reporting, like using it to parse millions of documents related to Jeffrey Epstein or scan satellite images of Gaza to try to find where Israel had dropped a specific kind of bomb. [...] [Ben Harnett, a software engineer at the Times and chair of the unit's generative AI committee] emphasizes that the unit's position is not that AI shouldn't ever be used, but that workers should have a say in how it's deployed. Metrics like how many tokens an employee uses or how often they're using AI to do their jobs create pressure to do more and incentives that don't align with doing quality work. "It's going to distract [you] from actually doing a good job, which is what we think the company should want," he says. Two of the contentious AI tools mentioned in the report are DX and Glean. DX is an engineering productivity tool that tracks a developer's output, generative AI use, efficiency, and other related metrics. Meanwhile, Glean is an internal knowledge-search tool that indexes materials like wikis, GitHub documents, Google Docs, and emails so employees can query company information.

The concern, according to Times Tech Guild members, is that data meant to measure broader developer experience is now being applied to individuals and cited in performance or disciplinary contexts. There's also worry that it could be used to monitor individual contributions and produce false or misleading results.

Read more of this story at Slashdot.

YouTube To Automatically Detect, Label AI-Generated Videos

YouTube will begin automatically labeling videos when its systems detect "significant" photorealistic AI use, while also making AI-content disclosures more visible below long-form videos and directly on Shorts. "We've heard consistently from our community that they value transparency when it comes to generative AI content," YouTube said in a blog post. "These changes are designed to balance transparency with creator control." Variety reports: Under YouTube's guidelines, creators will still be required to manually disclose when they use realistic AI. But starting this week, it also will roll out a new internal system to help identify AI-generated content. "If a creator doesn't specify whether or not they used AI, but our systems detect significant photorealistic AI use, we will now automatically apply a label," YouTube said.

YouTube creators who believe their content was incorrectly flagged as AI-generated can modify the disclosure status using the YouTube Studio tool. However, according to YouTube, the AI labels will "remain permanent" in some cases, including for content created using YouTube's own AI tools (such as Veo or Dream Screen) and for content that contains C2PA metadata (based on standards from the Coalition for Content Provenance and Authenticity) that indicates it was fully AI-generated.

In addition, YouTube is moving the disclosure label for photorealistic and meaningfully AI-altered or AI-generated content to a more prominent position. Until now, YouTube labeled AI content in a video's expanded description. Going forward, for long-form videos, the AI label will now appear directly below the video player and above the description. For YouTube Shorts, the label will appear as an overlay on the video itself. "The goal here is context at a glance. If it looks real but was made with AI, viewers will know immediately," said Rene Ritchie, YouTube head of editorial and creator liaison. He added that the AI labels alone "do not affect how our videos are recommended or whether they can earn money. This is purely about giving viewers the right information at the right time."

Read more of this story at Slashdot.

Time Machine Conversation

It's possible to do sea navigation without a compass, but you'll have to get some spoilers from the Polynesians.

thexiffy

Last.fm last recent tracks from thexiffy.

Zwan - El Sol

Zwan

Lou Reed - Call on Me

Lou Reed

The Guardian

Latest news, sport, business, comment, analysis and reviews from the Guardian, the world's leading liberal voice

Number of Neets in UK could hit 1.25m by early 2030s, Milburn review will say

Urgent action needed to avoid ‘lost generation’, says the former Labour health secretary’s report, due on Thursday

Britain risks a 25% rise in the number of young people not in work or education to 1.25 million by the early 2030s without urgent government action to avoid a “lost generation”, a landmark report has warned.

Alan Milburn, the leader of the review into why so many young people are economically inactive, said the UK risked opening up a “generational fault line” between young and old without urgent steps to overhaul schools, the health service, the welfare system and the jobs market.

Continue reading...

kottke.org

Jason Kottke's weblog, home of fine hypertext products

Make Way for Beavers

A Tube station in West London used to have a flooding problem. Instead of opting for an expensive reworking of the landscape via reservoir & levee, local officials reintroduced a family of beavers into the area.

The beavers are part of an unlikely effort to bring back a vanished species and help Britain adapt to a very modern problem: climate change.

Britain is famous for drizzle, but climate change is making rainfall heavier and more erratic. Places that didn’t used to flood are now waterlogged. So scientists have enlisted some of the animal kingdom’s best flood engineers — beavers — to help.

In West London, conservationists got a government license to resettle a family of five beavers in a 20-acre urban park near the Greenford Tube station. It used to be a golf course, with a creek running through it. Within weeks, the beavers dammed up the creek, creating a pond that holds water and stops it from spilling into the city. They also diverted the creek’s flow into smaller tributaries, creating a wetland that better absorbs heavy rainfall — mitigating the risk of flooding downstream.

“They effectively turned this site into a giant sponge that can take heavy rainfall and slowly release water back into the landscape, creating a lot more resilience for flooding,” explains Sean McCormack, a local veterinarian who started the Ealing Beaver Project, named for the London borough of Ealing, where it’s located.

The beaver-engineered landscape has attracted other animals, increasing the area’s biodiversity:

“By felling trees, they’ve also opened up the canopy, and we’ve seen an abundance of biodiversity,” McCormack says.

Freshwater shrimp have appeared in the creek, he says, plus eight new species of birds, two types of bats and rare brown hairstreak butterflies, which lay their eggs on blackthorn branches nibbled by beavers.

Tags: beavers · climate crisis · UK · video

VK: Voorpagina

Volkskrant.nl biedt het laatste nieuws, opinie en achtergronden

Crystal Palace verslaat Rayo Vallecano (1-0) en wint Conference League

Rijnmond - Nieuws

Het laatste nieuws van vandaag over Rotterdam, Feyenoord, het verkeer en het weer in de regio Rijnmond

Kinderen deze zomer al gratis welkom in nieuwe pretpark Spelen bij Beelen

Als het aan Wim Beelen ligt, wordt er deze zomer al gespeeld in zijn nieuwe pretpark op Rotterdam-Zuid. De ondernemer hoopt op korte termijn een buitenspeeltuin te creëren voor kinderen tot 14 jaar. Jeugd uit Rotterdam-Zuid is volgens hem gratis welkom.