Slashdot

News for nerds, stuff that matters

Microsoft Reportedly Projects $1,200 To $1,800 Price For Next-Gen Xbox

An anonymous reader quotes a report from Ars Technica: We haven't heard many details about Microsoft's upcoming "Project Helix" gaming hardware since the company announced it in March as a device that will "play your Xbox and PC games." In a new wide-ranging profile of Xbox CEO Asha Sharma, though, Fortune alludes to a dual release strategy for upcoming Microsoft gaming hardware, with "a next-generation handheld device" planned by the end of next year and a 2028 holiday season console release that could cost between $1,200 and $1,800.

That future console price range is based on what has "internally been projected" at the company, according to Fortune. But the price for consumers could come down if "Microsoft decides to subsidize the cost," the outlet says, as many console makers have done in the past. While a $1,200 starting price would be historically high for the game console market, even accounting for inflation, it also reflects a new normal: The slowdown in Moore's Law and AI-driven component shortages mean cutting-edge gaming hardware just isn't as cheap as it used to be. This year, the Steam Machine broke the $1,000 starting price, while the 2-year-old technology in the PlayStation 5 Pro is now going for $900, and the 6-year-old Xbox Series X now starts at $750.

Read more of this story at Slashdot.

Meta Ordered to Pay New Mexico $25 Billion for Deceiving Users About Privacy On Facebook

A New Mexico judge has ordered Meta to pay $25 billion after a jury found Facebook liable for deceiving users about privacy during the Cambridge Analytica scandal. State Attorney General Raul Torrez called it "one of the largest, if not the single largest state verdict against a company in American history." While Meta plans to appeal the ruling, the funds that are to be collected will go toward state education spending. The Associated Press reports: Jurors in September found Meta liable for over 43 million violations of New Mexico consumer protection laws when a political consulting firm, Cambridge Analytica, harvested Facebook user data to generate targeted political ads for the 2016 election. Forty-eight other states settled with Facebook in a nationwide case, but New Mexico chose to take the social media company to court on its own. [...] During the trial, jurors assessed whether Facebook misled users about privacy and content moderation 34 separate times. State prosecutors, though, argued Facebook's statements deceived the entire population of New Mexico and extended beyond social media users.

In the end, jurors agreed with this premise and found Facebook liable for 2.1 million violations on certain counts, bringing the total number of violations to over 43 million. Facebook's attorneys have argued in subsequent court filings that the state's consumer protection laws don't apply to people in New Mexico who weren't using the platform at the time. [...] In one of the few wins for the defense, jurors found the state didn't prove that Facebook made false claims about removing harmful content, including misinformation about the COVID-19 pandemic.

The state said the company favored certain accounts and allowed for violent or inaccurate content to proliferate. Attorney Randi McGinn said in her closing argument for the state that Facebook profited off harmful content, which CEO Mark Zuckerberg denied during his video deposition. Zuckerberg said the company has to carefully balance freedom of speech with content moderation. Attorneys for Facebook said the company has adapted its policies since the state's lawsuit was filed in 2021 and that it removes 99% of content that violates standards.

Read more of this story at Slashdot.

OpenAI Models Are Now On All Three Major US Cloud Platforms

OpenAI is bringing its models to Google Cloud's model garden and Antigravity coding tool, putting its technology on all three major U.S. cloud platforms after Microsoft's exclusive license ended earlier this year. "Google Cloud's longstanding investment in machine learning and AI has made it a destination for AI workloads and the developers and data scientists building them," OpenAI said in a blog post. It continues: [...] The integration will pair OpenAI's frontier models with Google Cloud's built-in access controls, centralized data governance, and high-performance infrastructure to support demanding enterprise workloads.

Google Cloud customers will be able to purchase OpenAI frontier models via model garden, transacted through the Google Cloud Marketplace. Enterprises with Google Cloud spend commitments will be able to draw down their GCP commitments for these purchases.

Additionally, OpenAI models will soon be available in Google Antigravity and the Gemini Agent, providing enterprise customers with model choice flexibility and the best model for each task. [...] For context, Microsoft previously held exclusive licensing rights to OpenAI's intellectual property, but that arrangement ended less than six months ago as OpenAI began expanding its partnerships with other cloud providers.

Just one day after Microsoft's exclusivity ended, Amazon announced plans to host OpenAI's models on its cloud platform in April.

Read more of this story at Slashdot.

EA Is Shutting Down BioWare

"According to a recent report by Bloomberg's Jason Schreier (paywalled), EA has reportedly decided to shut down BioWare," the studio behind the Dragon Age and Mass Effect games, writes longtime Slashdot reader atari_kid. Quartz reports: Chief Studios Officer Cam Weber and Chief Operating Officer David Tinson wrote that "over the past several months, we've taken a hard look at our business." They said a small BioWare team had been doing early groundwork on a Mass Effect game, but EA chose to drop the effort. That decision means closing the studio and its Edmonton workspace, they wrote. "We do not take this decision lightly," Weber and Tinson said of the BioWare closure, according to Variety.

EA will keep investing in Apex Legends and is continuing work on two upcoming launches, Marvel's Iron Man and the next Star Wars Jedi game, the executives said. They added that EA's Respawn and DICE studios will join forces on an upcoming project, in addition to new Battlefield titles. Bloomberg said the project is probably a new installment of the Star Wars: Battlefront franchise.

Read more of this story at Slashdot.

Government Websites Go Dark After Severe PHP Vulnerabilities Disclosed

"PHP disclosed two critical vulnerabilities in their programming language and urged web site operators to immediately apply the fix," writes longtime Slashdot reader smooth wombat. "As a result, government web sites in Europe and elsewhere temporarily went dark on Wednesday as operators worked to protect their systems." The Independent reports: Dane Knecht, the chief technology officer of Web and cloud security firm Cloudflare, said that attacks were emerging and Cloudflare was updating its firewall rules as a stopgap measure. "We are seeing early attacks emerging and are updating mitigations as new vectors show up. This is a STOPGAP only. Patch as soon as PHP releases the update," he said on X.

Officials have said that all PHP versions from PHP 5 onward could be affected, although PHP has not yet disclosed which versions are vulnerable. Special thanks to Slashdot readers Alain Williams and mrspoonsi for sharing this critical PHP security release.

For more details, read the official PHP announcement and guidance on what to do next.

Read more of this story at Slashdot.

Formula 1 News

Formula 1® - The Official F1® Website

Our early Bet Builder for the United States Grand Prix

Our expert betting writers have picked a four-leg Bet Builder for the Circuit of the Americas, including a podium finish, two top-six hopefuls and a points bet.

Wel.nl

Minder lezen, Meer weten.

Tesla ziet winst fors zakken, maar verrast markt positief

AUSTIN (ANP) - Tesla heeft in het derde kwartaal een lagere winst geboekt dan een jaar eerder, terwijl de omzet gelijk bleef. Ondanks het lagere resultaat overtrof het bedrijf onder leiding van Elon Musk de verwachtingen op de financiële markten. Daar leefden zorgen dat toegenomen investeringen in kunstmatige intelligentie en mensachtige robots een te grote kostenpost zouden worden voor de fabrikant van elektrische auto's.

De nettowinst van Tesla kwam uit op 787 miljoen dollar, 43 procent minder dan in het derde kwartaal van vorig jaar. Het bedrijf verkocht iets minder auto's, maar de omzet bleef desondanks gelijk op 28 miljard dollar.

De vrije kasstroom, die aangeeft hoeveel geld er daadwerkelijk in- of uitstroomt, was 1,5 miljard dollar positief. Analisten rekenden er juist op dat Tesla met alle investeringen in AI en robots fors meer geld zou uitgeven dan binnenhalen.

De cijfers komen een dag nadat Musk bekend had gemaakt dat hij een megafusie van Tesla met zijn ruimtevaart- en AI-bedrijf SpaceX graag ziet gebeuren.


Meta voert resultaten op en investeert nog meer in AI

MENLO PARK (ANP/RTR) - Socialemediabedrijf Meta verwacht dit jaar nog meer te investeren in kunstmatige intelligentie (AI). Daarbij gaat het Amerikaanse bedrijf nieuwe aandelen zonder stemrecht uitgeven om extra geld op te halen om mee te kunnen blijven doen in de AI-race met andere grote techbedrijven.

Het moederbedrijf van Facebook en Instagram heeft bij de presentatie van zijn kwartaalcijfers op woensdag gezegd dat de kapitaaluitgaven dit jaar waarschijnlijk tussen de 135 miljard en 145 miljard dollar bedragen. Daarmee is de prognose aangescherpt. Eerder ging het concern nog uit van 130 miljard tot 145 miljard dollar.

Topman Mark Zuckerberg rechtvaardigt de flinke uitgaven met de opmerking dat de investeringen van zijn bedrijf inmiddels ook hun vruchten afwerpen. Hij noemt als voorbeeld de komst van Meta Muse, een persoonlijke AI-agent van Meta die zelfstandig digitale taken uitvoert. De omzet van Meta steeg met dik een kwart tot een kleine 65 miljard dollar en er ging bijna 10 miljard dollar winst in de boeken, bijna vier keer zoveel als een jaar terug.

Forse juridische kosten

Meta wordt ook geplaagd door forse juridische kosten. De resultaten hadden beduidend hoger kunnen uitpakken als Meta in augustus niet een schikking had getroffen die kan oplopen tot 18 miljard dollar. Het bedrijf kocht daarmee een rechtszaak af van Amerikaanse staten die Meta hadden aangeklaagd voor de vermeende verslavende werking van Instagram en Facebook op jongeren.

Eerder woensdag kwam er een nieuwe miljardenrekening. Een rechter in de staat New Mexico legde een boete op van 25 miljard dollar voor misleiding van Facebook-gebruikers rondom hun privacy. Volgens aanklagers heeft Meta gebruikers voorgelogen over de wijdverbreide toegang die andere partijen hadden tot persoonlijke gegevens. Meta meldde in hoger beroep te gaan en verwacht de rechtszaak dan te winnen.


Beurzen in New York op winst na kwartaalcijfers SpaceX

NEW YORK (ANP) - De aandelenbeurzen in New York zijn met duidelijke winsten gesloten, dankzij optimisme over de techsector na positief stemmende kwartaalresultaten van AI- en ruimtevaartconcern SpaceX. Onrust over een mogelijke escalatie van de spanningen in Saudi-Arabië ebde gedurende de handelssessie weg.

De Dow-Jonesindex won 0,7 procent tot 52.856,09 punten. De bredere S&P 500 ging 0,6 procent omhoog naar 7757,17 punten. De door techbedrijven gedomineerde Nasdaq won 1,1 procent tot 26.702,86 punten.

SpaceX was met een plus van 7,8 procent een opvallende winnaar. Het bedrijf van Elon Musk wist dankzij zijn AI-tak de omzet fors op te voeren en boekte winst. Daarnaast maakte Musk bekend dat hij SpaceX graag zou willen laten fuseren met Tesla (plus 3,4), de eveneens door hem geleide fabrikant van elektrische auto's.

Evacuatie Amerikaans ambassadepersoneel

Tegen het einde van de handelssessie dreigden berichten over een vermeende evacuatie van Amerikaans ambassadepersoneel uit Saudi-Arabië de goede stemming te verpesten. Maar die zorgen verdwenen toen de Amerikaanse regering verduidelijkte dat het alleen niet-essentieel personeel zou terughalen.

Streamingdienst Netflix wist ook de aandacht op zich gericht na de publicatie van de kwartaalcijfers. Het bedrijf meldde een hogere omzet, maar de groei was wel afgezwakt. Ook in het laatste kwartaal van dit jaar verwacht Netflix minder hard te groeien. Het aandeel verloor ruim 5 procent. Ook de producent van AI-servers Super Micro Computer kwam met resultaten en won bijna 10 procent.

Meta

Meta won 0,5 procent. Een rechter in de staat New Mexico beval het socialemediabedrijf 25 miljard dollar te betalen vanwege misleiding van consumenten rondom hun privacy. Na de slotbel op Wall Street publiceert het concern achter Facebook en Instagram zijn kwartaalcijfers.

Abbott verloor 1,9 procent. Het gezondheidsbedrijf publiceerde tegenvallende resultaten en splitst zijn voedingstak af om die apart naar de beurs te brengen. Het onderdeel is onder andere verantwoordelijk voor babyvoeding. Enkele jaren geleden had een babyvoedingsmerk van Abbott te maken met een grote terugroepactie.


Tumor paus niet uitgezaaid, geen verdere behandeling nodig

VATICAANSTAD (ANP) - De tumor die op de long van de paus was ontdekt, is niet uitgezaaid. Volgens het Vaticaan is de operatie van vorige week succesvol verlopen en is er geen verdere behandeling nodig.

Paus Leo XVI maakte anderhalve week geleden zelf bekend dat er een knobbeltje op zijn rechterlong was gespot en dat hij daarom geopereerd moest worden. Dat gebeurde twee dagen later. Pas daarna werd aangekondigd dat het om een kwaadaardige tumor ging.

Nu bevestigen de artsen na testen met het verwijderde weefsel dat het ging om een adenocarcinoom, een kankergezwel. Ook stelden ze dat de tumor "gelokaliseerd" was. Dat wil zeggen dat die beperkt is gebleven tot de plek waar die ontstaan is.

Na enkele dagen in het ziekenhuis werd Leo zaterdag ontslagen. Zondag verscheen de 71-jarige paus weer in het openbaar bij het gebed op het Sint-Pietersplein.


Al je wachtwoorden wijzigen na het PHP-lek? Dat is niet nodig, alleen je e-mailwachtwoord verdient aandacht

Je wilde iets regelen, maar de website geeft een foutmelding over een beveiligingsprobleem. Dan wil je het liefst meteen al je wachtwoorden veranderen. Dat hoeft niet. Er is wel één wachtwoord waar je nu naar moet kijken, en dat is niet het wachtwoord van de site die offline ging.

Het herstel is begonnen. Bright meldt dat de PHP Group de nood-update voor de twee lekken heeft uitgebracht. Tweakers was daarna snel weer online. De site van RTL Nieuws volgde zo'n drie kwartier na het verschijnen van de patch. Welke diensten eerder op zwart gingen, lees je in ons stuk Steeds meer websites uit voorzorg offline vanwege ernstige lekken: deze diensten zijn getroffen (Stand 12.30). Hier gaat het om een andere vraag: wat moet jij zelf doen?

Het lek zit op de server, niet bij jou

PHP is de programmeertaal waarop een groot deel van het internet draait. Volgens De Dagelijkse Standaard kan een aanvaller via de lekken in theorie zonder wachtwoord code uitvoeren op een webserver en die zo overnemen. Het zwakke punt zit dus bij de computers van websites, niet op jouw laptop of telefoon.

Volgens het Nationaal Cyber Security Centrum (NCSC) wijst het lek ook niet automatisch op een inbraak. Plaatsvervangend directeur Corine Schipper-Derkse zei tegen de NOS:

Het is niet zozeer een aanval, maar een weeffout die in de software zit en dat kan gebeuren.

Corine Schipper-Derkse, plaatsvervangend directeur NCSC

Het NCSC zag nog geen actief misbruik. Ook de PHP Foundation zei tegen het ANP geen aanwijzing te hebben dat de lekken actief worden uitgebuit, schrijft het Reformatorisch Dagblad.

Alles wijzigen lost het probleem niet op

Dat een website onbereikbaar is, is volgens Redactie24 onvoldoende reden om aan te nemen dat je wachtwoord gestolen is. De site raadt aan eerst te kijken wat de dienst zelf communiceert. Vraagt die je om een nieuw wachtwoord in te stellen, doe dat dan via de vertrouwde website of app zodra die weer veilig werkt.

Ook tweestapsverificatie heeft zijn grenzen. Het beschermt je account wel, maar kan volgens Redactie24 geen zwakke plek in de servers van een aanbieder herstellen. Dat moet de beheerder doen door de update te installeren.

Een website die offline is, is juist beschermd.

Dit ene wachtwoord moet je wel vervangen

Het gevaar zit volgens De Dagelijkse Standaard vooral bij websites die het lek niet snel dichten. Daar kan een aanvaller in theorie gegevens buitmaken. Gebruik je overal hetzelfde wachtwoord, dan is dit volgens de site een goed moment om dat te veranderen, te beginnen bij je e-mail. Dat helpt ook tegen andere datalekken.

Je e-mail komt eerst omdat een buitgemaakt wachtwoord anders ook je andere accounts kan openen, schrijft Redactie24. Daarom raadt de site aan om van een hergebruikt wachtwoord overal een uniek wachtwoord te maken.

Dat advies blijft na vandaag gelden. Volgens het NCSC duurt het enige tijd voordat het grootste deel van de kwetsbare systemen is bijgewerkt. Bij vergelijkbare lekken in andere software bleven aanvallers de kwetsbaarheid lange tijd misbruiken, en het centrum verwacht dat ook bij PHP, meldt het Reformatorisch Dagblad.

De echte dreiging komt in je mailbox

Bij grote storingen duiken vaak nepmails en nep-sms'jes op, waarschuwt De Dagelijkse Standaard. Daarin staat bijvoorbeeld dat je je DigiD opnieuw moet activeren of dat je gegevens na een beveiligingslek gecontroleerd moeten worden. De overheid en je bank vragen je nooit via een link in een mail of sms om in te loggen of codes te geven.

Heb je zelf een website? Cybersecurityexpert Erik Jan Koedijk waarschuwt volgens De Zaak voor criminelen die zich voordoen als je hostingbedrijf en om inloggegevens vragen voor een "dringende beveiligingsupdate". Hostnet, Antagonist en Combell laten weten dat hun klanten zelf niets hoeven te doen.

Komen er toch gegevens op straat, dan kunnen oplichters die gebruiken om hun mails of telefoontjes overtuigender te maken, schrijft Test Aankoop. Daarbij merkt de organisatie op dat er nu nog geen datalek is vastgesteld.

Wat je nu kunt doen

  • Gebruik je één wachtwoord voor meerdere accounts? Vervang het, en begin bij je e-mail.
  • Maak van elk hergebruikt wachtwoord een uniek wachtwoord.
  • Zet tweestapsverificatie aan waar dat kan.
  • Klik niet op links in mails of sms'jes over het lek. Ga zelf naar de website of app van de dienst en log daar in.
  • Wacht op bericht van de dienst zelf. Pas als die je vraagt een nieuw wachtwoord in te stellen, is dat voor die site nodig.

Bronnen: NOS, De Dagelijkse Standaard, Redactie24, Bright, Reformatorisch Dagblad, De Zaak, Test Aankoop


American Sign Museum, Cincinnati, Ohio

Thomas Hawk posted a photo:

American Sign Museum, Cincinnati, Ohio

Close My Eyes, See Your Face

Thomas Hawk posted a photo:

Close My Eyes, See Your Face

The Register

Biting the hand that feeds IT — Enterprise Technology News and Analysis

OpenClaw creator says he spent $10 million in tokens last month

Peter Steinberger, member of technical staff at OpenAI and the creator of OpenClaw, estimates that he spent around $10 million in tokens running AI workloads last month. But don't feel bad for him, because it's all coming out of investors' pockets. He made this admission at the Cloudflare Connect 2026 conference in San Francisco on Wednesday, in a conversation with Cloudflare CTO Dane Knecht. Knecht previously observed that Steinberger has acknowledged having "a virtually unlimited token budget, which not all of us in the room have." Responding to the audible surprise rising from the audience, Steinberger added, "What people don't always understand is not all of that is useful." That only amplified the murmuring, perhaps not the effect he had been after. Meanwhile, his employer, OpenAI, is reportedly trying to "accelerate funding" ahead of rival Anthropic's expected IPO. Steinberger's subsequent musing about his preferred way of working failed to recognize Knecht's acknowledgement of financial limitations. "I feel like the main challenge a lot of people still have is that our infrastructure structure hasn't really caught up yet," Steinberger said. "Like why is this still using my computer? Shouldn't this all be in the cloud?" Apart from the privacy and compliance implications of relying on cloud-based AI, cost remains a consideration for anyone not setting venture funds alight. Cloud-hosted agents can be expensive. Shouldn't this all run locally? Pointing to the OpenClaw project and how a lot of open source maintainers have given up accepting pull requests due to frustration with AI slop, Knecht asked Steinberger whether we're approaching the death of open source or a golden age of AI. Steinberger said he thinks the way pull requests are handled needs to change because people don't explain how they arrived at their proposed changed code. "If I see your thoughts, how you got from A to B, my trust in the output is way higher than if you just throw the finished work across the fence," he said. Knecht also asked Steinberger whether everyone in the room would have hundreds of AI agents running in a few years. Steinberger doubts it will be hundreds. "I think everyone will have some sort of intelligence that runs and thinks and helps them throughout the day or even predicts what could help you in the future," he said. "So instead of asking the question, maybe you already get the answer." Toward the end of the session, Knecht raised the issue of trust and how to know what data to give to an agent. That's a hard question, Steinberger admitted. Part of it, he said, has to do with how much you trust the underlying model itself, because so much of model behavior is not governed by the harness – the code that wraps the model. "A lot of decisions that I built into OpenClaw early on now can change because the models are so much better," he said. Even if risks like prompt injection have been reduced through engineering efforts, Steinberger said, "you might not want to give your agent all the permissions." Instead, he suggested using an agent to authorize your agent. "You want to have another agent that can give it permissions or not and then this agent has to negotiate with another agent," he said. "Many times the agents are like, 'oh yeah, actually maybe I shouldn't do this,' or 'there's a simpler way that keeps it within the guardrails.' So those those two systems combined greatly increase my trust that I just can let the agent rip." ®

Reach new heights of laziness by burning tokens to let an AI tap your smartphone screen for you

Why use your smartphone when AI can do it for you? We’ve reached a new level of AI inanity with the launch of Opposable, a tool that taps, swipes, and types on Android phones and controls iPhones through a companion computer, sparing users the apparent burden of operating their own devices. If you don't want to update a calendar event, start a timer, or enable dark mode, you can apparently use an AI agent app on your computer (any client that supports MCP will do) to have Opposable do the thing for you on a connected phone. You could just do it on your computer, of course, but that’d require actually using your hands - like it’s some sort of baby’s toy. Lame. Opposable describes the purpose of its app as being to “give your AI thumbs” that allow an agent to open apps, read the screen, tap, and type, all while signed in to a device as the person too lazy to use a super-convenient technology themselves. As described in a blog post published by its creators Wednesday, Opposable's developers explain that its Android implementation uses accessibility services to inspect the screen, while screenshots provide visual input for an AI model. The model then decodes the images and figures out where it needs to tap on the screen in order to do whatever its user asked of it. The visual processing is handled by a vision-language model known as GUI-Owl 1.5 2B, running through llama.cpp, while tasks can be handled by either a paired desktop AI agent or an on-device agent that works without a desktop connection (the latter is available only on Android devices – iPhones require a companion computer, with a Mac beta available and a hardware-assisted Windows/Linux option also advertised). Even then, AI isn’t used for everything, with around 40 common tasks (setting an alarm, sending a text, switching Wi-Fi on or off) running as fixed code without an AI model involved. Opposable doesn’t appear to be particularly fast, however, and its accuracy is questionable too. Opposable’s website includes three different examples of tasks executed using its product, and none seem to merit using an AI over, you know, human hands. In one example, Claude Code over MCP is used to change the system’s theme to dark mode and then set a five-minute timer. This takes 50 seconds and requires 17 tool calls. In a second example using Claude Code and MCP, Opposable is asked to look up when Apollo 11 launched and who was on board, which takes just shy of 2 minutes. The number of tool calls isn’t mentioned, but the run cost is $0.44, which seems ridiculous when you can use your hands and figure it out for free. Hell, just asking Gemini or Siri right on a smartphone would return the answer faster and cheaper. Those half-a-buck requests to Opposable could add up pretty quickly if you’re lazy enough to justify its use. A third example shows a virtual Android device operating without a paired desktop agent, instead relying on the on-device agent that Opposable installs on Android phones. Opening the clock app and switching to the stopwatch tab takes it about 96 seconds, which is supposed to be impressive, apparently, as the company behind Opposable decided to showcase it on the thing’s website. As for Opposable’s ability to actually accomplish tasks, well, that’s not exactly a sure thing. “On eight tasks the model had never been tuned on, run on the emulator twice each, giving it the whole task succeeded 4 and 3 times,” the blog post notes. I’m pretty sure my brain and hands can do better without burning tokens to fail. “Giving it one subgoal at a time and checking each claimed success against the accessibility tree before the next subgoal succeeded 6 times in both rounds,” the blog continues - so even when it gets babysat each step of the way, it still only succeeds at three-quarters of tasks. Cool - that’s really going to free up all that time wasted setting timers and doing other mundane tasks on my handset. Why someone would install this on their Android device - which requires sideloading an APK and manually granting access to read and interact with the screen through accessibility settings - seems like a bit of a mystery. Opposable’s website even warns that it could be a security disaster: “whoever holds the token can operate the phone, so treat it like a password,” but still invites users to try. An argument could be made for using Opposable as an accessibility tool for people with difficulty using a smartphone, but this isn’t mentioned anywhere on its website. Opposable is instead billed as a way to “hand off the phone chores,” leaving users free to do something else - just not on the phone currently being slowly controlled by a clumsy AI. Sure, you could give your AI some virtual thumbs through Opposable, but … why? We reached out to the Opposable team to get an answer to that question, but didn’t hear back. ®

VK: Voorpagina

Volkskrant.nl biedt het laatste nieuws, opinie en achtergronden

Amerika trekt ambassadepersoneel terug uit Saoedi-Arabië vanwege Houthi-aanvallen

kottke.org

Jason Kottke's weblog, home of fine hypertext products

How did life on Earth arise? Three of the biggest...

How did life on Earth arise? Three of the biggest inflection points were ~4 billion years ago when life first emerged, ~2 billion years ago when eukaryotic cells appeared, and ~580 million years ago when life got big.

Pluralistic: Daily links from Cory Doctorow

No trackers, no ads. Black type, white background. Privacy policy: we don't collect or retain any data at all ever period.

Pluralistic: Adversarial interoperability is a team sport (21 Oct 2026)


Today's links

  • Adversarial interoperability is a team sport: Vibe-coded jailbreaks are fun, but don't solve the problem.
  • Hey look at this: Delights to delectate.
  • Object permanence: Labour Whip's pro-Iraq war threats; LoC's emulators; Kevin Mitnick plays CIA stooge; ICE: "The warrant is coming out of my balls"; WIPO's secret trademark meeting; Linking isn't libel (in Canada); Make: singing busts; Tory minister kills Turing's Law; Trump hotels rebrand as "Scion".
  • Upcoming appearances: Vancouver, Ottawa, Vienna, Kilkenny, Courtenay, Vancouver, Oxford, Sheffield, Virtual, Oxford, Montreal.
  • Recent appearances: Where I've been.
  • Latest books: You keep readin' em, I'll keep writin' 'em.
  • Upcoming books: Like I said, I'll keep writin' 'em.
  • Colophon: All the rest.



A medieval engraving of an Italianate city; floating in the middle is a giant skull (anterior view). Surrounding the skull is a series of 17th C European machine parts, being worked by tiny engravings of 17th C rude mechanicals. A strangely erotic, massive flower looms out of the right; standing amid its proudly thrusting stamen is a 17th C swordsman.

Adversarial interoperability is a team sport (permalink)

Enshittification is particularly galling because (in theory, at least), digital technology should be really hard to enshittify.

That's because the only digital computer we know how to build is the "Turing-complete, universal von Neumann machine," which is to say, a calculating engine capable of computing every valid program. In some deep, important, foundational sense, every computer is the same as every other computer. Sure, they vary in terms of speed, storage and RAM, but given enough time and electricity, every computer can run every program.

This has profound implications for enshittification. Say a tech boss takes away a feature you value (as when Sonos pushed an update that removed nearly all the functionality from its "smart" speakers), or adds a feature you hate (like when Chamberlain blocked third-party apps from controlling its garage doors so it could force its customers to view seven ads before they could open or close their garages). At that point, a programmer can write an "interoperable" program that restores the good feature or blocks the bad one.

This program can be costlessly and instantaneously distributed to every affected technology user, and those users will likely pay something for it. After all, enshittification is a way to shift value away from technology users to tech companies, which makes the case for you paying for disenshittification technology that wrestles that value back.

All of that means that, in a state of nature, companies that are contemplating enshittification need to worry that their greed will tempt new companies to enter the market and poach their customers and suppliers. This alone might be enough to frighten companies off from enshittificatory gambits, and if companies press ahead regardless, then they open market opportunities for better companies that can costlessly, instantaneously usurp the original manufacturer's relationship with their entire affected customer base.

That's how it should work. But in 1998, Bill Clinton signed the Digital Millennium Copyright Act, and Section 1201 of the DMCA establishes a felony (punishable by a five-year prison sentence and a $500,000 fine) for reverse-engineering and modifying technology without the manufacturer's permission. Then, the US Trade Rep spent the next 25 years making sure that every US trading partner had an identical (or even worse!) "anticircumvention" law:

https://pluralistic.net/2025/05/26/babyish-radical-extremists/#cancon

The result is a grotesquely asymmetrical digital world, in which companies are free to use the flexibility of digital computers to downgrade or brick your digital devices, but where you commit a crime if you avail yourself of a countermeasure to get more out of something you own. This is the core technological factor at play in enshittification.

Enter AI. Thanks to vibe-coding, everyday people are rolling their own software for their devices and building the tools to shatter the digital locks that manufacturers use to block disenshittification. An excellent article by 404 Media's Jason Koebler runs down some of these hacks, including drop-in replacements for smart TV software that blocks the endless ads and surveillance that have made TVs all but unusable:

https://www.404media.co/reverse-engineer-anything-is-the-new-wild-west-of-ai/

These AI tools mix several techniques to disenshittify users' devices. One major component is automating the installation of existing alternative firmware for these devices that have been (possibly illegally) created by hobbyists and uploaded to various code repositories. Installing these alternative OSes is typically a gnarly task, requiring the user to do a lot of complex, fiddly, highly technical work to bypass their devices' digital locks.

In a world without anticircumvention law, a company that sold alternative OSes could hire a ton of programmers and UX developers to smooth over this process, but this is beyond the reach of a typical hobbyist or even a community of hobbyists, especially if they must operate in the shadows, under the threat of civil and criminal liability.

There's a useful analogy here to the trajectory of desktop versions of GNU/Linux. The first time I tried to install Linux (on an original iMac, in the late 1990s), the installation process included a multi-week post-installation wrangle that saw me (often unsuccessfully) compiling key modules from source code and then painstakingly configuring them to get the computer's graphics and I/O working reliably.

Fast forward 30+ years and installing Linux is trivial, thanks to highly capitalized companies like Canonical (makers of Ubuntu, the flavor of Linux I've used for nearly 20 years now). Installing Ubuntu today merely requires that you download the OS to a thumbdrive, reboot your computer using the drive as a startup disk, and click "install." Canonical's installer automatically hunts down the correct software for your hardware and configures it. Canonical writes and contributes to a lot of parts of the Linux OS, but the most important work it does is the fiddly, painstaking, labor- and capital-intensive work of perfecting that installer so it Just Works.

Much of what a vibe-coded jailbreaking tool does is stand in for Canonical, but for hobbyist OSes for smart TVs and speakers and many other devices. These LLMs patiently research every weird error and peccadillo and parse through message boards and logfiles detailing other hobbyists' struggles to get the code working and methodically apply and adapt those solutions until your device Just Works.

Some of these vibe-coded interop tools go farther than that. According to Koebler's coverage, some device owners had their coding assistants scratch-build entirely new, heavily customized OSes for their devices, complete with bypasses that allow this new code to be installed despite the manufacturer's countermeasures which are designed to prevent this. Delightfully, many of these users have created software that revives their bricked, discontinued devices. This poses the possibility of a world in which manufacturers no longer have the last word in your use of your own property: the mere fact that the manufacturer lost interest in a device and killswitched it does not mean that you must consign that valuable device to a landfill to become immortal, toxic e-waste.

All of this is good news. Some of the most sophisticated jailbreaking tools (such as those on the super viral "Reverse Engineer Anything" Github page) run locally, on your own computer, without invoking the "frontier models" that the big, awful AI companies have created:

https://github.com/morluto/rea

This is good even if you're just modifying your own devices to get them to more closely conform to your own use-case. LLMs are genuinely good at coming up with the abstruse and obscure configuration lines and other incantations to get your technology working. Recently, I used a local model to fine-tune the power-management on my new laptop in ways that go beyond the options that are exposed through user-friendly graphic interfaces. The LLM spat out a grub "GRUB_CMDLINE_LINUX_DEFAULT" line that (again) Just Worked.

The last time I had to do this, I spent days painstakingly trouble-shooting options by trial-and-error. Using a chatbot to fill in the gaps left by decisions about which configuration options to place within reach of regular users and which to reserve for power-users has made my computer much more useful to me for the things I want to do, like writing and making collages.

The reality is that it's just not practical for technology developers to turn every conceivable function of your computer into a simple-to-use, accessible tool. A large part of technology design is about leaving things out (or, as my favorite Eno Oblique Strategy goes, "Be the first person to not do something that no one else has ever thought of not doing before"). No matter how thoughtful and diligent a technology designer is, they will never fully anticipate the needs and exigencies of their users. That's why the motto of the disability rights movement is "Nothing about us without us."

The users of technology know more about their use-cases than can ever be captured through a requirements gathering exercise and user testing. One of the best and proudest legacies of technology is the lineage of "user-friendly" programming tools that let nontechnical people design their own applications that exactly met their needs, from Hypercard to Visual Basic to Scratch, a lineage that vibe-coding tools are arguably part of:

https://pluralistic.net/2026/09/25/other-people/#right-there

But these tools are not perfect (nothing is). For all that Hypercard lets you do many things that would otherwise require a skilled programmer, it was also always limited relative to, say, writing MacOS code in Objective C. Your Hypercard program might do exactly what you needed it to, but slowly, and sometimes unreliably, and with serious limitations, such as a relatively low ceiling for the number of records you could add to a database.

Vibe-coded personal apps aren't necessarily subject to these limitations, but they come with some significant risks. Vibe-code can have serious security vulnerabilities that expose the user to things like identity theft or sextortion. It's conceivable that a vibe-coded garage-door opener app might make it possible for attackers to open your garage door when you're not home (or worse, when you are!). Depending on your risk-tolerance and expertise, these might be acceptable prices, or they might be too high.

But it's important to clearly identify the problem here: if the alternative OS you install on your smart TV exposes you to privacy-invading hack attacks, the problem is the defect in that software. The problem isn't that you had the temerity to rip out the manufacturer's own software and replace it with code of your choosing. You bought that TV, it's yours, and you don't owe the manufacturer an obligation to expose yourself to its own, built-in, intentional surveillance and invasive ads.

Here's a parallel: you have the right to put any shoelaces in your running shoes. Sure, Nike might prefer you to lace up your Jordans with its expensive OEM laces, but that's Nike's problem, not yours. Now, Nike might argue that by using no-name laces, you run the risk of having a lace break while you're running, which could also break your ankle. That's certainly a possibility: shoelaces do break, and Nike might be justifiably proud of the quality of its laces. But if your generic laces snap (and so does your ankle), the problem is that the shoelaces you chose were defective. The problem is not that you chose someone else's laces.

Your stuff is yours. You can put anyone's milk on your cereal, not just the milk that Kellogg's endorses. If the milk you choose is sour and you have to pour your cereal down the toilet, that's too bad, but it doesn't mean that Kellogg's should have the right to shame you for having the temerity to choose the milk you preferred, and it certainly doesn't militate for DMCA-style enforcement to coerce you into using Kellogg's official milk in the name of protecting you from food wastage.

I raise this because there's a live debate over this subject, which is well represented in the latest 404 Media podcast:

https://www.youtube.com/watch?v=UbG1qwxMtU0

In the podcast, Koebler and his 404 co-founder Joseph Cox express misgivings about various possible uses of "slop interop." Koebler discusses the fact that John Deere sells the same physical tractor at many different price-points, depending on which software a farmer chooses, and raises the possibility that a farmer might vibe-code software that replicates the high-end functionality without paying for it. Koebler discusses two possible downsides to this: first, that the vibe-coded software might be defective and expose the farmer to risk; and second, a question about whether it's fair or just for a farmer to get those additional functions of their tractor without paying for them.

I think the first objection is entirely legitimate. The software you run on your expensive tractor should be secure, both for your own benefit and for the security of our food supply. That's actually a pretty good reason to ditch John Deere's own software, which is very insecure:

https://pluralistic.net/2022/05/08/about-those-kill-switched-ukrainian-tractors/

But I think the second question – whether it's legit to get this functionality without paying John Deere for it – is spurious. Sure, if John Deere provides you with that functionality, then they can send you the bill for it. But if you provide yourself with that functionality, using software you procured independently of John Deere, then John Deere has no right to get paid for it, and they certainly shouldn't have the right to stop you.

That tractor is yours. The fact that John Deere manufactured it is irrelevant. If you pay a contractor to build a house for you and later on pay a different contractor to add another bathroom to it, you don't owe the first contractor anything. It's your house (and if that bathroom has a leaky toilet, that's a matter between you and the second contractor, and not a reason to force you to only use your original contractor).

The law defines a narrow slice of functions that manufacturers get to control: those ideas that a patent examiner deems "novel, useful and nonobvious." It's legit (and good) for commercial operators to copy and improve the ideas of their rivals and competitors. It's why skilled tradespeople cluster together in the same geographic area.

Take Clerkenwell, the neighborhood in London where precision machining was invented by the jewelers and machinists who clustered there during the Longitude rewards. The reason all those competitors sought such close promixity to one another was because they wanted to copy the new techniques their rivals were developing (even if that meant that their rivals would be able to copy them):

https://en.wikipedia.org/wiki/Longitude_rewards

If you're old enough to remember the advent of spreadsheets and the rollout of Visicalc, Lotus 1-2-3 and Excel, you'll know that every time a software vendor invented a new spreadsheet feature, all the other ones immediately copied it. This wasn't bad for spreadsheets: it was good for spreadsheets, just as copying your competitors was good for precision machining in Clerkenwell.

Everything from GNU/Linux (a feature-for-feature clone of AT&T Unix) to SAMBA (a plug-compatible clone of Microsoft's SMB) to iWork (file-compatible, feature compatible clones of MS Office's apps) came about through this "adversarial interoperability." What's more, the heyday of this kind of adversarial interop was also the heyday of disenshittification, the era in which any anti-feature installed by your existing vendor could be countered by a disenshittifying patch from a new one:

https://www.eff.org/deeplinks/2019/06/adversarial-interoperability-reviving-elegant-weapon-more-civilized-age-slay

The question of whether vibe-coded software is any good is separate from the question of whether it's good to replace the software in your devices, even if you replace it with software that has features that the manufacturer would normally charge a premium for. You are under no obligation to arrange your commercial affairs to the financial benefit of manufacturers, and anyone who claims to be surprised that someone they sold a device to used it to benefit themselves at the manufacturer's expenses is either disingenuous…or unserious. You bought it, it's yours.

But just as this vibe-coded adversarial interop has drawn both valid and spurious criticism, it's also drawn excitement that is partially justified and partially overblown.

When it comes to reviving bricked devices or rooting out the surveillance and ads from your smart TV, vibe-coded interop tools are genuinely exciting. These are the kinds of enshittification that can truly be remediated with individual jailbreaks.

But the real, meaty examples of enshittification can't be addressed on an individual level – they require systemic fixes. If you jailbreak your iPhone so that it can use alternative app stores, that fact is not sufficient to cause those alternative app stores to come into existence. If we want to stop Apple from levying a $100b "app tax" on the digital economy, it's not enough for individuals to vibe-code their own iPhone patches. We need to repeal the law that bans jailbreaking iPhones, so that a would-be alternative app store can raise capital and pay programmers and tech support staff and salespeople to assemble rival catalogs of software and help customers figure out how to get up their phones to use it.

The same goes for jailbreaking your printer so it accepts generic ink. Sure, this may work for you if you're up for refilling your own cartridges, and I'm sure that you can find someone on Alibaba who will sell you ink by the gallon. But the mere fact that a few users have secretly and privately jailbroken their inkjets won't conjure up a generic inkjet cartridge manufacturing sector. For that to happen, we need to make jailbreaking printers legal, not just possible.

Indeed, if we want to improve the quality of all that jailbreaking code the chatbots are writing and circulating, we need to be able to put those jailbreaks in public repositories for public inspection and public critique. It's possible for some of the code produced by an LLM to be slop, and for other code to be fine, and for yet a third tranche of code to be remediable slop that can be made robust and reliable through auditing and refactoring. You can't figure out which is which if you have to keep that vibe code a secret on pain of a long prison-sentence.

I think there's good cause to be excited at the prospect of getting your devices working better, or just working at all. I think that even if the code stops working after a while, that's still fine – either you got more use out of your device than you would have without the new code, or maybe you just make more code that runs for a while for you, and then you do it again.

These individual improvements to your devices and technology are worth celebrating. But they are no substitute for systemic intervention. If we're going to have a new, good internet, a post-American internet that truly disenshittifies America's defective tech exports and replaces them with robust, transparent digital public goods, we need to make reverse-engineering legal again. Once we fix our policy, then we can fix our code:

https://pluralistic.net/2026/01/01/39c3/#the-new-coalition


Hey look at this (permalink)



A shelf of leatherbound history books with a gilt-stamped series title, 'The World's Famous Events.'

Object permanence (permalink)

#25yrsago Secret recording of Labour Whip demanding support for Iraq invasion https://www.theguardian.com/politics/2001/oct/22/uk.september11

#25yrsago LoC launches emulator-based digital file preservation https://web.archive.org/web/20011217002337/http://www.techreview.com/magazine/oct01/innovation5.asp

#25yrsago Kevin Mitnick to play CIA lackey https://web.archive.org/web/20011111105016/http://www.theregister.co.uk/content/55/22395.html

#15yrsago ACLU Tennessee brings suit against ICE officers who broke into house and said, “We don’t need a warrant, we’re ICE, the warrant is coming out of my balls.” https://web.archive.org/web/20111025092605/http://www.aclu.org/blog/immigrants-rights/we-dont-need-warrant-were-ice/

#15yrsago WIPO’s secret, corporate-run trademark enforcement meeting https://web.archive.org/web/20220121054715/https://craphound.com/PROGRAMManilaEdited10212011-FINAL.pdf

#15yrsago Canada’s Supreme Court: Linking isn’t libel https://web.archive.org/web/20111026134334/http://www.bbc.co.uk/news/world-us-canada-15374238

#15yrsago HOWTO recreate the Haunted Mansion’s singing busts https://www.youtube.com/watch?v=zRtiiMW47i4

#10yrsago Facebook’s crackdown on publishers feeds has sites paying celebs to repost https://digiday.com/media/facebook-thirsty-publishers-turn-celebrities-worm-news-feed/

#10yrsago Internet-destroying outages were caused by “amateurish” IoT malware https://krebsonsecurity.com/2016/10/hacked-cameras-dvrs-powered-todays-massive-internet-outage/

#10yrsago Tory minister’s filibuster kills Turing’s law and pardons for 65,000 persecuted gay men https://www.theguardian.com/law/2016/oct/21/chris-bryant-commons-plea-gay-pardon-law

#10yrsago Trump hotels, faced with massive declines in bookings, rebrand as “Scion Hotels” https://web.archive.org/web/20161023182616/http://www.travelandleisure.com/hotels-resorts/trump-scion-hotels


Upcoming appearances (permalink)

A photo of me onstage, giving a speech, pounding the podium.



A screenshot of me at my desk, doing a livecast.

Recent appearances (permalink)



A grid of my books with Will Stahle covers..

Latest books (permalink)



A cardboard book box with the Macmillan logo.

Upcoming books (permalink)

  • "The Post-American Internet," a geopolitical sequel of sorts to Enshittification, Farrar, Straus and Giroux, 2027

  • "Unauthorized Bread": a middle-grades graphic novel adapted from my novella about refugees, toasters and DRM, FirstSecond, April 20, 2027

  • "Enshittification, Why Everything Suddenly Got Worse and What to Do About It" (the graphic novel), Firstsecond, 2027

  • "The Memex Method," Farrar, Straus, Giroux, 2027



Colophon (permalink)

Today's top sources:

Currently writing:

  • “Once Is Enemy Action,” a science fiction novel about the origins of modern technofascism. Today's words: 533 (27469 total).

  • "The Post-American Internet," a sequel to "Enshittification," about the better world the rest of us get to have now that Trump has torched America. Fourth draft completed. Submitted to editor.

  • A Little Brother short story about DIY insulin PLANNING


This work – excluding any serialized fiction – is licensed under a Creative Commons Attribution 4.0 license. That means you can use it any way you like, including commercially, provided that you attribute it to me, Cory Doctorow, and include a link to pluralistic.net.

https://creativecommons.org/licenses/by/4.0/

Quotations and images are not included in this license; they are included either under a limitation or exception to copyright, or on the basis of a separate license. Please exercise caution.


How to get Pluralistic:

Blog (no ads, tracking, or data-collection):

Pluralistic.net

Newsletter (no ads, tracking, or data-collection):

https://pluralistic.net/plura-list

Mastodon (no ads, tracking, or data-collection):

https://mamot.fr/@pluralistic

Bluesky (no ads, possible tracking and data-collection):

https://bsky.app/profile/doctorow.pluralistic.net

Medium (no ads, paywalled):

https://doctorow.medium.com/

Tumblr (mass-scale, unrestricted, third-party surveillance and advertising):

https://mostlysignssomeportents.tumblr.com/tagged/pluralistic

"When life gives you SARS, you make sarsaparilla" -Joey "Accordion Guy" DeVilla

READ CAREFULLY: By reading this, you agree, on behalf of your employer, to release me from all obligations and waivers arising from any and all NON-NEGOTIATED agreements, licenses, terms-of-service, shrinkwrap, clickwrap, browsewrap, confidentiality, non-disclosure, non-compete and acceptable use policies ("BOGUS AGREEMENTS") that I have entered into with your employer, its partners, licensors, agents and assigns, in perpetuity, without prejudice to my ongoing rights and privileges. You further represent that you have the authority to release me from any BOGUS AGREEMENTS on behalf of your employer.

ISSN: 3066-764X

Israel’s election overseer on how to stop AI distorting votes

Chatbots can help inform citizens but should not be allowed to make choices for them, says Dean Livne.


Rijnmond - Nieuws

Het laatste nieuws van vandaag over Rotterdam, Feyenoord, het verkeer en het weer in de regio Rijnmond

Feyenoord houdt stand in moeizame eerste helft tegen Real Betis

Feyenoord heeft het in de eerste helft tegen Real Betis niet gemakkelijk gehad. De Rotterdammers stonden op het hobbelige veld in Sevilla lange tijd onder druk en mochten doelman Tjark Ernst bedanken dat ze niet op achterstand kwamen. Aan de andere kant liet Gjivai Zechiël een enorme kans op de openingstreffer liggen.