Thomas Hawk posted a photo:

date stamped on slide, April 1971

conspectus_bs posted a photo:

Kodak Ektar 100 with Mamiya RB67 and Sekor 90 mm

It’s been dubbed ‘an American royal wedding’, so who will win the bridal commission of the century? We’ve whittled it down to nine lucky contenders (including one for the groom)

Ever since Taylor Swift announced her engagement to NFL star Travis Kelce via an Instagram post last August, fans have been gripped by a near year-long frenzy of sleuthing and speculation over the wedding plans.

This week the couple will finally be tying the knot. With guests reportedly signing NDAs and dates flying around Reddit, the facts are scant – but it’s been reported that the couple have rented out Manhattan’s Madison Square Garden, an arena which can hold more than 19,000 people, for celebrations on July 2 and 3.

Continue reading...

Having ordered a public inquiry, it is right that ministers are taking its ideas about managing risks seriously

It is two years this month since Axel Rudakubana burst into a Taylor Swift-themed dance class in Southport, murdered Alice da Silva Aguiar, Bebe King and Elsie Dot Stancombe, and injured 10 other people. The government’s pledge to implement all 67 recommendations from the public inquiry signals its determination to protect the public in future. Its chair, Sir Adrian Fulford, said his most important finding was the failure by any organisation to “take ownership of the risk” posed by Rudakubana. He revealed his interest in violence multiple times, including when he was found on a bus with a knife in 2022. Rather than make an arrest, police sent him home.

Sir Adrian and the home secretary, Shabana Mahmood, want to ensure that in future, police confronted by a young man with a knife, and with a similar track record, would behave differently. A key part of the problem is what they, and other officials who encountered Rudakubana, did and didn’t know. The plan is to close the gaps between the public services that he repeatedly slipped through.

Continue reading...

Foreigners are not to blame for unemployment, crime and the state of public services. Leaders should have the courage to say so more clearly

Just over 30 years ago, Nelson Mandela expressed his sadness and anger at the rising hatred of foreigners in South Africa. “We had a legacy of unity and solidarity here,” the president told an African National Congress rally. “We are not victims to the influx of foreign people.”

Since then, xenophobic violence has periodically erupted. In 2008, anti-migrant attacks killed at least 62 people. Now a new wave is sweeping the country. Thousands marched in the streets on Tuesday – the arbitrary “deadline” that campaign groups had set for migrants to leave the country. More than 25,000 people did so in the run-up, with some countries evacuating their nationals and individuals fleeing in fear. Mozambique says five nationals were killed in anti-foreigner violence in May, and Ghana says a citizen was killed on Monday, though South African officials have offered different accounts. Migrants have been systematically blocked from health and other services by the Operation Dudula and March & March movements.

Continue reading...

NEC told it must take steps to address fears – including not hiring Everton stadium to announce new leader before nominations even open

Labour chiefs have been warned they must placate disgruntled Labour members who are angry at the lack of party democracy because Andy Burnham is not expected to face a challenge to become Labour leader.

MPs have told the party there are growing complaints from members about the lack of involvement from members if Burnham does not face a leadership contest from any other MP.

Continue reading...

De onderhoudswerkzaamheden aan de Erasmusbrug zijn zo goed als voorbij. Stukken wegdek zijn vernieuwd en beschadigd asfalt is gerepareerd. De bekendste brug van Rotterdam gaat vrijdag om 16:00 uur weer open voor het verkeer. Dat betekent dat automobilisten niet meer om hoeven te rijden via de Willemsbrug of de Maastunnel.

The Booker Prize will be renamed the Bukhman International Booker Prize and the prize money for the winning author and translator will be doubled.

They're not bad; they're just prompted that way. Sysdig threat hunters documented what they say is the first-ever documented agentic ransomware infection with an LLM - not a human - driving the entire extortion operation, from gaining initial access to compromising a production database server and destroying data. The security shop’s research team named the agentic intruder JadePuffer and said it gained initial access to an internet-facing Langflow instance by exploiting CVE-2025-3248, and then ran a fully automated attack. “The most striking characteristic, however, was the LLM's behavior,” Sysdig director of threat research Michael Clark said in a blog about the agentic ransomware and extortion operation. JadePuffer’s “self-narrating” payloads “contained natural language reasoning, target prioritization, and the kind of detailed annotations that human operators don’t often write but LLM-generated code produces reflexively,” Clark added. “The operation also adapted in real time, retrying failed steps within refined parameters. In one sequence, it went from a failed login to a working fix in 31 seconds.” After exploiting CVE-2025-3248, a missing authentication vulnerability in Langflow that allows remote, unauthenticated attackers to execute arbitrary Python on the host, the AI agent began scanning for and collecting secrets, including LLM provider API keys, cloud credentials “with explicit coverage of Chinese providers” including Alibaba, Aliyun, Tencent, and Huawei, while also scanning for AWS, Azure and Google Cloud Platform, cryptocurrency wallets, and database credentials. The AI also installed a crontab entry on the Langflow server to maintain persistence and call back to the attacker’s infrastructure every 30 minutes. JadePuffer’s intended target was a separate internet-exposed production server running a MySQL database and an Alibaba Nacos configuration service, we’re told. Nacos is an open-source service-discovery and dynamic configuration platform developed by Alibaba and used in the cloud provider’s microservices applications. The agent connected to the server's exposed MySQL port using root credentials, although Sysdig doesn’t know how the attacker obtained them. These credentials weren’t stolen from the victim’s environment. JadePuffer then attacked Nacos via multiple vectors including an authorization bypass flaw (CVE-2021-29441) and forging a valid JSON web token (JWT) using Nacos's default signing key. Additionally, using its root database access, the LLM injected a backdoor administrator into the Nacos backing database. It ultimately encrypted all 1,342 Nacos service configuration items using MySQL's built-in AES encryption function, and created an extortion demand, ransom note, Bitcoin payment address, and a Proton Mail contact: "YOUR DATA HAS BEEN ENCRYPTED. All NACOS configurations, REDACTED customer data, and REDACTED PII have been encrypted with AES-256.", "3J98t1WpEZ73CNmQviecrnyiWrnqRhWNLy", "e78393397[@]proton[.]me" However, according to the threat hunters, the victim can’t recover the encrypted data, even if they paid the ransom demand, because the agent escalated “from row-level deletion to dropping entire database schemas, narrating its own targeting rationale,” without backing up any of the encrypted data. There are a couple of things that security teams and vulnerability managers should do immediately to avoid being ransomed by this AI agent. First up: patch Langflow to a release that fixes CVE-2025-3248, and do not expose code-execution/validation endpoints to the internet. Also, don’t ever expose Nacos to the open internet, change its default token.secret.key, and upgrade to a release that forces a custom key. The threat hunters also recommend against running any AI orchestration servers with provider API keys or cloud credentials in their environment. While the AI agent didn’t use any especially sophisticated or unique techniques in this attack, the fact that an LLM “strung them together into a complete ransomware operation against neglected internet-facing infrastructure,” is notable, according to Clark. “The skill floor for running ransomware has dropped to whatever it costs to run an agent, and if that agent is running on stolen credentials through LLMjacking, the cost to an attacker is close to zero.”®

“Dictionary of the Illegible proposes illegibility as a strategy for navigating a world increasingly governed by visibility, efficiency, and total surveillance.”