Andrea Stella believes that McLaren matched the performance of Ferrari and Red Bull during the United States Grand Prix, despite Lando Norris eventually slipping to fifth last weekend.
Simon Willison: “Battle Drones is heavily vibe coded — I’ve reviewed almost none of the code, and it’s built in a language (TypeScript) that I’ve hardly used myself.” There’s a French steampunk version too.
A UK-based developer and pentester has claimed a $2,000 Bitcoin prize for demonstrating the exploitability of the PHP2Shell vulnerabilities that melted the internet last week. Jaydip Modhwadia, 26, otherwise known as “Killa,” claimed the prize set by James Pavur, who launched the "Steal My Bitcoin" site on October 24. Pavur launched the CTF (capture the flag) challenge to prove that the PHP2Shell exploit was not as easy as those in the cybersecurity community claimed it to be, promising to award $2,000 in Bitcoin to anyone who could achieve Remote Code Execution (RCE) on his website. "My Bitcoin was stolen after 19.28 hours," the website now says, after Modhwadia claimed the prize, although the real time taken is thought to be less than three hours. Soon after Pavur launched the CTF on Saturday, prospective flag-catchers complained that the website he set up, which served only static HTML, was not built in a way that allowed the PHP2Shell exploit to achieve RCE. The web page was running a vulnerable version of PHP, but the exploit path required a vulnerable website to serve a PHP file for flag-catchers to use as a hook – something that Pavur seemingly updated at around 1300 UTC on October 25. Modhwadia achieved RCE on the website, exposing a PHP endpoint, at 1547 UTC. After an error from Pavur placing the wrong wallet key on the server, the CTF creator sent Modhwadia his award, which the community upped to $2,000 from Pavur’s initial $500. The pentester published a write-up of his method, a single-file Python script he says requires 20 HTTP requests "at most" to fully execute. Speaking to The Register, Modhwadia also confirmed that he got the flag in "around three or so hours in total." He said he followed the news about the competition, "but didn't attempt it until it gained significant notice." If he had attempted it before Pavur introduced the endpoint, he may have struggled. For hours, bug bounty hunters were trying to access the website to attempt the challenge, as news of the CTF had exploded across tech circles. "The fact that it took 19 hours was because after it went popular, the entire site became basically unusable for anyone at all," Modhwadia added. The challenge saw a huge number of attempts, despite Pavur's decision to introduce a prohibitive 1MB request limit on Nginx. Alon Gal, co-founder and CTO at Hudson Rock, commended Modhwadia's work, but added that his success achieved in just a few hours should not be taken to mean that the same attack could be automated at scale. He said: "Does this mean autonomous AI agents can now compromise arbitrary PHP servers at scale? No. This was a sophisticated, target-specific exploit. "But it does demonstrate that PHP2Shell can be weaponized against a live target, even with meaningful technical constraints." Modhwadia's proof of concept is not the first to prove PHP2Shell is exploitable, but it falls under the more advanced category. Early signs suggested that Address Space Layout Randomization (ASLR) on a vulnerable server would prove a significant barrier to real-world exploitation, and the pentester’s solution bypasses it, along with the others that were disclosed recently. Spencer McIntyre, director of exploit development at VulnCheck, told The Register last week that attackers are finding new ways to exploit PHP2Shell, and "are clearly spending time (and tokens) on this bug." Initially, experts said exploit code was being found online hours, or even days, before the vulnerabilities were disclosed publicly, which led to millions of exploit attempts, although it was too early to determine the efficacy of these on real-world systems. Scores of websites were taken down for maintenance last week as organizations raced to protect themselves from the attacks, which may or may not have proved successful. Modhwadia said he donated a portion of the prize he received to the Lupus Foundation to raise awareness about the condition, from which he also suffers. ®
Apple’s $2,000 folding phone, the iPhone Duo, came out just two days ago and people are already seeing big fat creases down the middle of the folding screen, and some devices are cracked in the same specific spot too.
People waited in line overnight at Apple stores to get this thing, and now we’re seeing photos of heinous cracked and creased-up Duos all over social media. In some cases, the phone screens have cracked along the crease, causing a crashout people are now calling “crackgate.”
“Had my iPhone Duo for about six hours and had probably opened it fewer than 20 times,” one person wrote on Reddit’s r/iPhoneDuo. “I was showing it to a friend, and as I opened it, I felt something around the internal hinge, underneath the screen. As I continued opening it, I heard an audible crack, and the screen broke right along the hinge.”
“How long before I join crack gang?” someone else wrote, posting a photo of their iPhone Duo with a wide, uneven gully down the center of the screen.
Other users report not just a fold, but a bright white line of stuck pixels extending from the center to the outer edge of the screen. iFixit wrote a teardown analysis of the Duo, and speculated that the components around the hinge could be causing this particular white line issue: “One possibility is that a central support bar isn’t retracting properly as the phone closes, potentially putting excessive pressure on the display. Another involves the curved rails that guide the hinge’s movement, which rise above the surrounding components during folding and could, in theory, interfere with the screen if they fail to move as intended,” they wrote.
Plenty of people seem happy with their creased-up new phone that only cost them two stacks. “Folks, it’s a foldable device. The crease is there. Just enjoy the fact that you have one,” someone commented on another happy customer’s crease pic.
9to5 Mac reported that most buyers seeing the white line screen glitch have been able to get a device replacement from Apple. Whether Apple will replace a phone that’s showing the center line crease everyone else is complaining about is yet to be seen. Apple did not immediately respond to my request for comment about the crease.
Apple released the Duo seven years after Samsung’s Galaxy Fold hit the market. That line of phones also gets a crease down the middle after using it for long enough that users say gets more noticeable with time. But the wait and hype around the Duo has meant gadget YouTubers and journalists have put this thing through extreme paces. TheCaseTester tested it with 1,000 folds and saw the crease by the end; Tim Pan folded his 11,500 times and saw a similar result. CNET’s test with a folding machine they custom-built to test the Duo just passed 55,000 folds. Journalist Joanna Stern found that after 32,000 folds, it felt “pretty much the same.”
For months, Turkey has tried to negotiate a maritime security agreement between Russia and Ukraine.
Een groot deel van de bezuinigingen op de ambtenarij komt voor de rekening van uitvoeringsorganisaties als het UWV. „Of we houden het zoals het nu is met elkaar, en dan blijven we klagen dat het niet goed werkt, óf we gaan dingen veranderen”, zegt staatssecretaris Eric van der Burg (Slagvaardige overheid, VVD).
/s3/static.nrc.nl/wp-content/uploads/2026/10/26165745/261026VER_2037732303_1.jpg)
America's Defense Department "has spent months quietly building an elite new tech agency," reports Politico, "to help covertly disrupt and sabotage foreign technology programs considered threats to American military superiority."
Information on the Technology Support Office, or TSO as it is called internally, is nearly impossible to find on Pentagon websites, and the agency is mentioned by name only in several previously unreported Defense Department historical records and memoranda. While the specifics of its work are highly classified, POLITICO spoke with 12 current and former U.S. national security officials with varying degrees of knowledge about TSO to understand how the agency came to be, the broad contours of its mission and why its operations are shrouded in secrecy...
[The Pentagon's Defense Secretary and Deputy Defense Secretary] established TSO quickly and without attracting outside scrutiny because they largely built the agency by reorganizing two classified Pentagon intelligence programs that have conducted similar clandestine tech-sabotage efforts at a smaller scale since 2023. But by creating an agency dedicated to expanding that work, the Defense Department is signaling its intent to ramp up a range of aggressive covert activities abroad — potentially including cyberattacks, supply chain disruptions and disinformation operations. Many of the people who spoke to POLITICO argued that the aggressive new initiative is needed to help the Pentagon counter foreign adversaries they say are harnessing artificial intelligence and advanced commercial technologies, such as drones, in creative ways that could erode America's military advantage...
While TSO lacks the legal authority to conduct clandestine operations directly, it works closely with senior U.S. military and intelligence officers to develop cutting-edge tools and strategies to disrupt adversaries' access to critical defense technologies — or subvert them from afar. TSO is staffed with engineers, special operators and intelligence officers, and its work spans everything from building bespoke hacking tools to planning elaborate deception operations that trick adversaries into installing faulty components — likely designed by TSO — in key foreign weapons platforms. TSO's overarching goal is to "buy time or stop adversaries from developing technologies" that would most threaten the U.S. military in a major conflict, said a former U.S. intelligence official who worked closely with the agency... A second former Pentagon official and a former U.S. national security official said the agency has told some defense contractors it's interested in offensive hacking capabilities. The former senior Pentagon intelligence official estimated that its budget for classified contracts alone is likely north of $1.5 billion.
They are seeking contractors on "the leading edge of technology," that official said, and hope to procure "a whole host of tools wherever your imagination can go."
Pentagon staff had been exploring the need for a new agency for over a year, the article explains. Creating a new agency with its own budget and procurement powers "would empower the agency to more quickly integrate cutting-edge tech from the private sector," Pentagon staff concluded, "and think more strategically about which foreign defense technologies pose the biggest threats across U.S. military organizations."
"Several people who spoke to POLITICO support TSO's mission but worry that the secrecy surrounding its work could embolden current Pentagon leadership to carry out missions that flout international law or funnel coveted classified contracts to political allies."
Thanks to long-time Slashdot reader schwit1 for sharing the news.
Information on the Technology Support Office, or TSO as it is called internally, is nearly impossible to find on Pentagon websites, and the agency is mentioned by name only in several previously unreported Defense Department historical records and memoranda. While the specifics of its work are highly classified, POLITICO spoke with 12 current and former U.S. national security officials with varying degrees of knowledge about TSO to understand how the agency came to be, the broad contours of its mission and why its operations are shrouded in secrecy...
[The Pentagon's Defense Secretary and Deputy Defense Secretary] established TSO quickly and without attracting outside scrutiny because they largely built the agency by reorganizing two classified Pentagon intelligence programs that have conducted similar clandestine tech-sabotage efforts at a smaller scale since 2023. But by creating an agency dedicated to expanding that work, the Defense Department is signaling its intent to ramp up a range of aggressive covert activities abroad — potentially including cyberattacks, supply chain disruptions and disinformation operations. Many of the people who spoke to POLITICO argued that the aggressive new initiative is needed to help the Pentagon counter foreign adversaries they say are harnessing artificial intelligence and advanced commercial technologies, such as drones, in creative ways that could erode America's military advantage...
While TSO lacks the legal authority to conduct clandestine operations directly, it works closely with senior U.S. military and intelligence officers to develop cutting-edge tools and strategies to disrupt adversaries' access to critical defense technologies — or subvert them from afar. TSO is staffed with engineers, special operators and intelligence officers, and its work spans everything from building bespoke hacking tools to planning elaborate deception operations that trick adversaries into installing faulty components — likely designed by TSO — in key foreign weapons platforms. TSO's overarching goal is to "buy time or stop adversaries from developing technologies" that would most threaten the U.S. military in a major conflict, said a former U.S. intelligence official who worked closely with the agency... A second former Pentagon official and a former U.S. national security official said the agency has told some defense contractors it's interested in offensive hacking capabilities. The former senior Pentagon intelligence official estimated that its budget for classified contracts alone is likely north of $1.5 billion.
They are seeking contractors on "the leading edge of technology," that official said, and hope to procure "a whole host of tools wherever your imagination can go."
Pentagon staff had been exploring the need for a new agency for over a year, the article explains. Creating a new agency with its own budget and procurement powers "would empower the agency to more quickly integrate cutting-edge tech from the private sector," Pentagon staff concluded, "and think more strategically about which foreign defense technologies pose the biggest threats across U.S. military organizations."
"Several people who spoke to POLITICO support TSO's mission but worry that the secrecy surrounding its work could embolden current Pentagon leadership to carry out missions that flout international law or funnel coveted classified contracts to political allies."
Thanks to long-time Slashdot reader schwit1 for sharing the news.
Read more of this story at Slashdot.
Computer Weekly reports:
A Censuswide survey of 2,018 CIOs and senior IT decision-makers at large organisations in the US and UK for independent software maintenance provider Origina has found that organisations spend almost $13m on upgrades pushed by IT providers. On average, 28% of enterprise software budgets go on upgrades, migrations and licensing changes driven by their IT suppliers. IT leaders who took part in the study reported that their organisation would not have actively chosen to upgrade...
The research published in Origina's The Software Tax report, in partnership with Thinkers50, suggests these costs have shifted the balance of power between buyers and sellers. Customers exercise choice once, at the point of purchase. After that, control over the timing and terms of change passes largely to the IT supplier. Out of those surveyed, 78% agree their primary provider of enterprise software, rather than their own organisation, sets the timing and terms of change. A similar proportion said they would have no meaningful choice but to accept if a major enterprise IT provider changed its commercial terms. Some 76% said their organisation has very little real leverage in negotiations, and 80% said moving away from major IT suppliers would cause significant disruption...
Marshall Van Alstyne, professor at Boston University and co-author of The Software Tax, said: "Economists have studied this problem for decades: once a customer makes relationship-specific investments, the vendor gains leverage that no contract can fully anticipate. For CIOs, the lesson is simple: negotiate the exit before the entry. You don't have to leave a vendor to benefit from being able to."
The problem can be summarized succinctly, says Tomás O'Leary, CEO/founder of Origina and co-author of The Software Tax.
"The market has left some of the most experienced technology leaders in the world with little room to refuse, and that cost shows up in budgets, in engineering time and in innovation that never gets funded. We want to make that cost visible so customers can start to take back control of it."
A Censuswide survey of 2,018 CIOs and senior IT decision-makers at large organisations in the US and UK for independent software maintenance provider Origina has found that organisations spend almost $13m on upgrades pushed by IT providers. On average, 28% of enterprise software budgets go on upgrades, migrations and licensing changes driven by their IT suppliers. IT leaders who took part in the study reported that their organisation would not have actively chosen to upgrade...
The research published in Origina's The Software Tax report, in partnership with Thinkers50, suggests these costs have shifted the balance of power between buyers and sellers. Customers exercise choice once, at the point of purchase. After that, control over the timing and terms of change passes largely to the IT supplier. Out of those surveyed, 78% agree their primary provider of enterprise software, rather than their own organisation, sets the timing and terms of change. A similar proportion said they would have no meaningful choice but to accept if a major enterprise IT provider changed its commercial terms. Some 76% said their organisation has very little real leverage in negotiations, and 80% said moving away from major IT suppliers would cause significant disruption...
Marshall Van Alstyne, professor at Boston University and co-author of The Software Tax, said: "Economists have studied this problem for decades: once a customer makes relationship-specific investments, the vendor gains leverage that no contract can fully anticipate. For CIOs, the lesson is simple: negotiate the exit before the entry. You don't have to leave a vendor to benefit from being able to."
The problem can be summarized succinctly, says Tomás O'Leary, CEO/founder of Origina and co-author of The Software Tax.
"The market has left some of the most experienced technology leaders in the world with little room to refuse, and that cost shows up in budgets, in engineering time and in innovation that never gets funded. We want to make that cost visible so customers can start to take back control of it."
Read more of this story at Slashdot.
"Scientists have transformed old blood cells into young brain stem cells, which continued to grow younger as they grew older," reports ScienceAlert:
Cellular transformations can be done in two main ways. The first, more circuitous route turns a specific cell back into a pluripotent stem cell, or an embryonic "blank slate," and then into a different cell type. The second method involves a "direct conversion," which skips the middle stage and directly transforms a cell into a different type.
"Using this method, we have directly converted red blood cell precursors into neural stem cells," summarizes Oliver Brüstle, the director of the Institute of Reconstructive Neurobiology at the University Hospital of Bonn...
The researchers used a virus to deliver two transcription factors, or proteins that attach to DNA to regulate gene activity, to get the cells to change their types. Then they used two genome-bloodhounding methods — DNA methylation measures and RNA sequencing — to track the resultant anti-aging effects and genetic behavior. By the 12th day after the viral "infection," the cells started showing their new identity, ditching their blood-like proteins and replacing them with the expression of neural-like proteins instead. Initially, the epigenetic age (the DNA changes accumulated over time) of the EPCs was highly correlated with the chronological age of their donors [but] the neuronal stem cells kept getting younger as they got older... Over the following 50 to 100 days, they kept de-aging, eventually reaching about 5 percent of the donor age, with the majority of epigenetic age-related traits resetting by around 50 days of the conversion process...
In effect, the converted cells became 60 years younger in 50 days, the researchers note in their official statement.
The researchers, from the University Hospital of Bonn and the University of Bonn, in Germany, described their methods in the journal Aging Cell.
Cellular transformations can be done in two main ways. The first, more circuitous route turns a specific cell back into a pluripotent stem cell, or an embryonic "blank slate," and then into a different cell type. The second method involves a "direct conversion," which skips the middle stage and directly transforms a cell into a different type.
"Using this method, we have directly converted red blood cell precursors into neural stem cells," summarizes Oliver Brüstle, the director of the Institute of Reconstructive Neurobiology at the University Hospital of Bonn...
The researchers used a virus to deliver two transcription factors, or proteins that attach to DNA to regulate gene activity, to get the cells to change their types. Then they used two genome-bloodhounding methods — DNA methylation measures and RNA sequencing — to track the resultant anti-aging effects and genetic behavior. By the 12th day after the viral "infection," the cells started showing their new identity, ditching their blood-like proteins and replacing them with the expression of neural-like proteins instead. Initially, the epigenetic age (the DNA changes accumulated over time) of the EPCs was highly correlated with the chronological age of their donors [but] the neuronal stem cells kept getting younger as they got older... Over the following 50 to 100 days, they kept de-aging, eventually reaching about 5 percent of the donor age, with the majority of epigenetic age-related traits resetting by around 50 days of the conversion process...
In effect, the converted cells became 60 years younger in 50 days, the researchers note in their official statement.
The researchers, from the University Hospital of Bonn and the University of Bonn, in Germany, described their methods in the journal Aging Cell.
Read more of this story at Slashdot.
Reuters reports:
Last week, Getty announced plans to file for bankruptcy, marking a major reset after its planned merger with rival Shutterstock collapsed under the weight of heavy debt and growing competition from AI-generated imagery. Getty said the affiliates of the Getty family and Koch Equity Development, which committed to provide up to $533 million in new equity, will own 100% of the company after the restructuring It's hard to compete against things like the DALL-E image generator.
Long-time Slashdot reader schwit1 quips that maybe "It's hard to compete against things like the DALL-E image generator..."
Last week, Getty announced plans to file for bankruptcy, marking a major reset after its planned merger with rival Shutterstock collapsed under the weight of heavy debt and growing competition from AI-generated imagery. Getty said the affiliates of the Getty family and Koch Equity Development, which committed to provide up to $533 million in new equity, will own 100% of the company after the restructuring It's hard to compete against things like the DALL-E image generator.
Long-time Slashdot reader schwit1 quips that maybe "It's hard to compete against things like the DALL-E image generator..."
Read more of this story at Slashdot.
"As of 2026, the company has issued more than 60 million digital certificates," notes Wikipedia. But now, InfoWorld reports:
A certificate authority's decision to abandon the global SSL/TLS market is exposing a weakness many organizations rarely examine: their dependence on complex PKI trust chains. Following the compromise of private keys behind eight of its intermediate certificate authorities, eMudhra is exiting the global SSL/TLS certificate business and is offering customers Sectigo-issued replacements... [In a press note the company added] that data sovereignty and compliance requirements had increased the business's complexity and cost... The company said it will contact affected customers to replace certificates free of cost. It also said it will keep revocation and certificate status services running until every issued certificate has expired or been replaced...
Yash Kadakia, co-founder and CTO of Security Brigade, said that moving to another root operated by the same company does not necessarily address concerns over trust and governance. "The last thing organisations need is to migrate twice," Kadakia said.
But there's another concern, the article points out. "Analysts warn that enterprises may discover they have only limited visibility into the certificate hierarchies underpinning critical services."
Replacing a website's certificate may not address every dependency in an enterprise environment, according to Sakshi Grover, research director at IDC. She said residual exposure lies in systems that maintain their own trust stores and do not update on the same schedule as browsers. These include Java keystores, language runtimes, container images, mutual TLS configurations, proxies, load balancers, VPN and security appliances, and embedded devices. "The harder finding for many organizations will be that they can't answer these questions at all," Grover said, referring to where certificate trust decisions are made outside browsers and operating systems...
Grover recommended that security teams first identify where trust decisions occur outside browsers and operating systems, prioritising systems that accept connections from external parties and mutual TLS endpoints. Teams should then determine which systems can be updated to distrust a specific intermediate certificate or public key, she said.
A certificate authority's decision to abandon the global SSL/TLS market is exposing a weakness many organizations rarely examine: their dependence on complex PKI trust chains. Following the compromise of private keys behind eight of its intermediate certificate authorities, eMudhra is exiting the global SSL/TLS certificate business and is offering customers Sectigo-issued replacements... [In a press note the company added] that data sovereignty and compliance requirements had increased the business's complexity and cost... The company said it will contact affected customers to replace certificates free of cost. It also said it will keep revocation and certificate status services running until every issued certificate has expired or been replaced...
Yash Kadakia, co-founder and CTO of Security Brigade, said that moving to another root operated by the same company does not necessarily address concerns over trust and governance. "The last thing organisations need is to migrate twice," Kadakia said.
But there's another concern, the article points out. "Analysts warn that enterprises may discover they have only limited visibility into the certificate hierarchies underpinning critical services."
Replacing a website's certificate may not address every dependency in an enterprise environment, according to Sakshi Grover, research director at IDC. She said residual exposure lies in systems that maintain their own trust stores and do not update on the same schedule as browsers. These include Java keystores, language runtimes, container images, mutual TLS configurations, proxies, load balancers, VPN and security appliances, and embedded devices. "The harder finding for many organizations will be that they can't answer these questions at all," Grover said, referring to where certificate trust decisions are made outside browsers and operating systems...
Grover recommended that security teams first identify where trust decisions occur outside browsers and operating systems, prioritising systems that accept connections from external parties and mutual TLS endpoints. Teams should then determine which systems can be updated to distrust a specific intermediate certificate or public key, she said.
Read more of this story at Slashdot.
The Free Software Foundation's "EncryptFest" today covers both encryption and privacy. The free two-hour event runs from 13:00-15:00 Eastern Daylight Time (17:00-19:00 UTC), and includes:
— A discussion on "bulk surveillance, and how encryption protects personal privacy"
— A short video from renowned cryptographer Bruce Schneier.
— A discussion with Henry Fisher, the founder of Techlore and a digital rights activist
— A hands-on workshop on how you can encrypt your email using the FSF's Email Self-Defense guide "as a concrete step to enhance your data privacy"
You may join us virtually, or if you are in Boston, Massachusetts, United States (the FSF's home base), you can join us in-person at the Boston Public Library's Copley Square branch. You may also join us in-person at MakeHaven in New Haven, Connecticut, US, and meet our deputy director Sean O'Brien. Whether attending our event online or in-person, please register. It will help us plan ahead and enable us to contact you about other important details before the workshop, like what to expect and what to bring...
Bulk surveillance violates our fundamental rights and makes free speech dangerous. Email encryption is an excellent tool you can use to shield yourself from bulk surveillance. Encrypting your email is also a concrete step towards protecting your data from others whose intentions may not be honorable.
— A discussion on "bulk surveillance, and how encryption protects personal privacy"
— A short video from renowned cryptographer Bruce Schneier.
— A discussion with Henry Fisher, the founder of Techlore and a digital rights activist
— A hands-on workshop on how you can encrypt your email using the FSF's Email Self-Defense guide "as a concrete step to enhance your data privacy"
You may join us virtually, or if you are in Boston, Massachusetts, United States (the FSF's home base), you can join us in-person at the Boston Public Library's Copley Square branch. You may also join us in-person at MakeHaven in New Haven, Connecticut, US, and meet our deputy director Sean O'Brien. Whether attending our event online or in-person, please register. It will help us plan ahead and enable us to contact you about other important details before the workshop, like what to expect and what to bring...
Bulk surveillance violates our fundamental rights and makes free speech dangerous. Email encryption is an excellent tool you can use to shield yourself from bulk surveillance. Encrypting your email is also a concrete step towards protecting your data from others whose intentions may not be honorable.
Read more of this story at Slashdot.
The blog Android Authority offers this TLDR:
Google updated its privacy policy to clarify that it could use information shared through Personal Intelligence to personalize ads. Gmail, Drive, and Photos content isn't used for targeted ads by default, but connecting them to eligible Google services could change that.
Digital Trends explains:
Google has long promised that your Gmail, Drive, and Google Photos content never helps it personalize ads. However, since October 16, 2026, its privacy policy adds a catch. The promise lapses if you let other ad-showing Google services use that content. That means using Personal Intelligence, an opt-in tool that lets Google's AI search read your connected apps, does exactly that (via Google).
If you ask Google's AI Mode where to eat near your hotel, and it can identify your hotel from the booking confirmation in Gmail, find the location in Maps, and then suggest a few places you might like. That's the helpful half. The twist, however, is that AI Mode can also show sponsored results. Google mentions that the personalized ads follow what the question and answer are about. So, while your inbox never goes to an advertiser, it can quietly shape the answer, which, in turn, shapes the ads.
Google's defense is elaborate. First, it says connecting the apps is optional. Second, advertisers can't see the information or content Google accesses in your Workspace apps (including your inbox and photos). Finally, sensitive topics like health are off-limits.
Ars Technica shares the response they got from a Google spokesperson: that Google isn't scanning your entire inbox to feed their advertising profiles, but if you choose to pipe your personal data into an AI search tool — then the ads Google shows you could be based on that information.
If you want to ensure ads never use your personal data in this way, you'll need to make sure Personal Intelligence is turned off. The easiest way is to access the Gemini settings for Personal Intelligence and disable the connected apps. These settings are also a few levels deep in your main Google account settings under Data & privacy > Personalization settings > Manage Personalized Recommendations in Search Services > Connected Content Apps. From there, you can disable connections to Workspace and Google Photos.
Google updated its privacy policy to clarify that it could use information shared through Personal Intelligence to personalize ads. Gmail, Drive, and Photos content isn't used for targeted ads by default, but connecting them to eligible Google services could change that.
Digital Trends explains:
Google has long promised that your Gmail, Drive, and Google Photos content never helps it personalize ads. However, since October 16, 2026, its privacy policy adds a catch. The promise lapses if you let other ad-showing Google services use that content. That means using Personal Intelligence, an opt-in tool that lets Google's AI search read your connected apps, does exactly that (via Google).
If you ask Google's AI Mode where to eat near your hotel, and it can identify your hotel from the booking confirmation in Gmail, find the location in Maps, and then suggest a few places you might like. That's the helpful half. The twist, however, is that AI Mode can also show sponsored results. Google mentions that the personalized ads follow what the question and answer are about. So, while your inbox never goes to an advertiser, it can quietly shape the answer, which, in turn, shapes the ads.
Google's defense is elaborate. First, it says connecting the apps is optional. Second, advertisers can't see the information or content Google accesses in your Workspace apps (including your inbox and photos). Finally, sensitive topics like health are off-limits.
Ars Technica shares the response they got from a Google spokesperson: that Google isn't scanning your entire inbox to feed their advertising profiles, but if you choose to pipe your personal data into an AI search tool — then the ads Google shows you could be based on that information.
If you want to ensure ads never use your personal data in this way, you'll need to make sure Personal Intelligence is turned off. The easiest way is to access the Gemini settings for Personal Intelligence and disable the connected apps. These settings are also a few levels deep in your main Google account settings under Data & privacy > Personalization settings > Manage Personalized Recommendations in Search Services > Connected Content Apps. From there, you can disable connections to Workspace and Google Photos.
Read more of this story at Slashdot.
"Despite massive investments and widespread hype around AI , the technology has delivered zero financial payoff to corporate America outside of tech," writes the chief economist at U.S. asset management firm Apollo Global.
He adds that "there are still no signs of AI boosting productivity growth... [M]ainstream corporate America is pulling back and starting to view token spending not as a source of growth but as a cost center that weighs on margins."
VC-backed companies are spending more and more on tokens, but mainstream corporate America does not need the latest model and is unwilling to pay for it. As long as agentic AI and token spending are confined to a small part of the economy, the macroeconomic effects of AI will be very limited...
The question looking ahead is whether, even as models become commoditized, mainstream corporate America can turn increasingly cheap intelligence into higher revenue growth and higher profit margins. That may be harder than it sounds. AI may be a great calculator, but in business, intelligence is mostly judgment. Judgment depends on context, and the answer varies with which human or which model you ask. Perhaps most importantly, AI does not understand accountability, trust, culture, unwritten rules, ethical trade-offs or fairness, all of which shape reputational risk and ultimately drive revenue growth and profit margins.
The bottom line is that the AI story will be decided in the S&P 493, not the Mag 7, and so far, there is no evidence that revenue growth or margins are improving outside the tech sector.
More details from TechCrunch:
Apollo's Torsten Slok focuses on what he calls the S&P 493 — the S&P 500, minus Alphabet, Amazon, Apple, Meta, Microsoft, Nvidia and Tesla — finding that profit margins and revenue per worker appear to be flat, with no evidence that AI is improving productivity...
Recent studies have also found that AI has yet to deliver significant productivity gains.
He adds that "there are still no signs of AI boosting productivity growth... [M]ainstream corporate America is pulling back and starting to view token spending not as a source of growth but as a cost center that weighs on margins."
VC-backed companies are spending more and more on tokens, but mainstream corporate America does not need the latest model and is unwilling to pay for it. As long as agentic AI and token spending are confined to a small part of the economy, the macroeconomic effects of AI will be very limited...
The question looking ahead is whether, even as models become commoditized, mainstream corporate America can turn increasingly cheap intelligence into higher revenue growth and higher profit margins. That may be harder than it sounds. AI may be a great calculator, but in business, intelligence is mostly judgment. Judgment depends on context, and the answer varies with which human or which model you ask. Perhaps most importantly, AI does not understand accountability, trust, culture, unwritten rules, ethical trade-offs or fairness, all of which shape reputational risk and ultimately drive revenue growth and profit margins.
The bottom line is that the AI story will be decided in the S&P 493, not the Mag 7, and so far, there is no evidence that revenue growth or margins are improving outside the tech sector.
More details from TechCrunch:
Apollo's Torsten Slok focuses on what he calls the S&P 493 — the S&P 500, minus Alphabet, Amazon, Apple, Meta, Microsoft, Nvidia and Tesla — finding that profit margins and revenue per worker appear to be flat, with no evidence that AI is improving productivity...
Recent studies have also found that AI has yet to deliver significant productivity gains.
Read more of this story at Slashdot.
BeamFS creator Aurelien Desbrieres is not calling for a merge, but is requesting feedback on an 18-patch proposal that takes the place of FTRFS, an earlier filesystem he proposed in April.
The Linux/Open Source blog It's FOSS reports:
Filesystems that can repair damage, like Btrfs and ZFS, usually do it by falling back on a spare copy of the data. BeamFS skips that and stores Reed-Solomon error-correcting codes inside every block. Every read gets checked against those codes, and small amounts of damage are corrected before the data reaches the application. If the filesystem can tell the damage is beyond repair, the read fails with an error instead of returning the wrong bytes...
In his technical report, ext4 and ext3 returned wrong data without any error, while Btrfs refused to read the file. BeamFS returned the correct file every time except once, when a flip hit a pointer to the file's data and it refused the read.
"Aurelien says he used Anthropic's Claude to write the code, the tool that checks the patches, and the cover letter..."
The Linux/Open Source blog It's FOSS reports:
Filesystems that can repair damage, like Btrfs and ZFS, usually do it by falling back on a spare copy of the data. BeamFS skips that and stores Reed-Solomon error-correcting codes inside every block. Every read gets checked against those codes, and small amounts of damage are corrected before the data reaches the application. If the filesystem can tell the damage is beyond repair, the read fails with an error instead of returning the wrong bytes...
In his technical report, ext4 and ext3 returned wrong data without any error, while Btrfs refused to read the file. BeamFS returned the correct file every time except once, when a flip hit a pointer to the file's data and it refused the read.
"Aurelien says he used Anthropic's Claude to write the code, the tool that checks the patches, and the cover letter..."
Read more of this story at Slashdot.
From the student newspaper at the University of California, Berkeley:
Richard Borcherds, a UC Berkeley professor and Fields medalist, no longer grades his students' homework. After seeing how many of his students used AI to consistently receive top scores, he felt there was "no point" in paying readers to grade for correctness in homework, as AI use is now unavoidable.
Borcherds revealed this in a sit-down interview Tuesday, following OpenAI's announcement that AI agents apparently solved one of mathematics' most difficult unsolved problems, the Navier-Stokes existence and smoothness problem. "If AI continues to improve at present rate, then, in a few years, there'll be nothing human mathematicians can do that AI can't do better," Borcherds said.
Borcherds said he currently grades on completion if a student hands in their homework. He admitted that it is "not a very good system," but at the moment, he has no alternative... Campus has tried several AI detection tools, including Turnitin and Rumi, but have determined that these tools aren't adequate enough to be standardized on campus.
The article points out that at the university, each class's AI policy "is up to the discretion of faculty."
Richard Borcherds, a UC Berkeley professor and Fields medalist, no longer grades his students' homework. After seeing how many of his students used AI to consistently receive top scores, he felt there was "no point" in paying readers to grade for correctness in homework, as AI use is now unavoidable.
Borcherds revealed this in a sit-down interview Tuesday, following OpenAI's announcement that AI agents apparently solved one of mathematics' most difficult unsolved problems, the Navier-Stokes existence and smoothness problem. "If AI continues to improve at present rate, then, in a few years, there'll be nothing human mathematicians can do that AI can't do better," Borcherds said.
Borcherds said he currently grades on completion if a student hands in their homework. He admitted that it is "not a very good system," but at the moment, he has no alternative... Campus has tried several AI detection tools, including Turnitin and Rumi, but have determined that these tools aren't adequate enough to be standardized on campus.
The article points out that at the university, each class's AI policy "is up to the discretion of faculty."
Read more of this story at Slashdot.
"As of today in systemd Git it's now possible for the systemd programs to be written in the Rust programming language as an alternative to C," reports Phoronix:
Core systemd code like the systemd library doesn't yet support Rust code, but for the various systemd programs / leaf components there is now support for using Rust... The new systemd-keyring-setup utility in Rust is used for provisioning keyrings and enrolling X.509 certificates into the kernel's dm-verity / fs-verity / BPF keyrings during the boot process while dealing them afterward. This systemd-keyring-setup code hasn't been merged yet but is expected soon now that the Rust infrastructure has landed. Originally it was all part of a single big commit before being split-up for the Rust enablement, systemd-keyring-setup, and other preparations for this new component.
Systemd developers aren't planning on porting existing C code to Rust, all the Rust code is built with Meson [no Cargo usage], and C linkage only is mandated.
Systemd Rust components come out slightly larger than C with a test program being 32KB compared to 20KB for its C twin. For now at least the systemd Rust support is optional and toggled by the -Drust= Meson option with it being auto by default.
Core systemd code like the systemd library doesn't yet support Rust code, but for the various systemd programs / leaf components there is now support for using Rust... The new systemd-keyring-setup utility in Rust is used for provisioning keyrings and enrolling X.509 certificates into the kernel's dm-verity / fs-verity / BPF keyrings during the boot process while dealing them afterward. This systemd-keyring-setup code hasn't been merged yet but is expected soon now that the Rust infrastructure has landed. Originally it was all part of a single big commit before being split-up for the Rust enablement, systemd-keyring-setup, and other preparations for this new component.
Systemd developers aren't planning on porting existing C code to Rust, all the Rust code is built with Meson [no Cargo usage], and C linkage only is mandated.
Systemd Rust components come out slightly larger than C with a test program being 32KB compared to 20KB for its C twin. For now at least the systemd Rust support is optional and toggled by the -Drust= Meson option with it being auto by default.
Read more of this story at Slashdot.
"59% of maintainers report growing contribution volume since the rise of GenAI," according to a new study published by Linux Foundation Research. But 25% of their incoming pull requests "are estimated to be low-quality, also known as 'AI slop'." And on large projects, 69% see growing contributions — and estimate that 31% are low-quality/AI slop.
So what do these results show us? "Generative AI is fundamentally changing how people participate in open source," says the head of Open Source Ecosystem Development at Huawei's R&D subsidiary Futurewei, which helped support the study. Specifically GenAI is "lowering barriers to contribution" but also "creating new challenges" for maintainers and communities. Their recommendation? "Build the governance, transparency and trust mechanisms that allow AI-assisted contributions to strengthen, but not overwhelm, the open source ecosystem."
"Open source projects need to design for a growing AI-generated contributor base, not simply react to it," said Hilary Carter, SVP of Research at the Linux Foundation. "That means setting clear expectations for GenAI, putting responsibility for testing and disclosure on contributors and giving maintainers better tools to manage incoming pull requests. If we get those fundamentals right, AI can expand participation without overburdening and increasing costs for maintainers."
More from the blog It's FOSS:
LF Research is the Linux Foundation's research arm. It was set up in 2021 and publishes studies on how open source is built and used, drawing on surveys and project data. Its latest report, Navigating Open Source Software Development in the Generative AI Era, surveyed 234 contributors and maintainers on how generative AI is affecting the way open source gets made...
64% say reviews now take longer. Burnout is their top concern at 63%, narrowly ahead of contribution quality at 60%.
You will also find that policies have not caught up to the AI-assisted coding and vulnerability reporting trend. Of the 119 respondents who answered the question, 35% said their project has a formal policy permitting AI use. Another 32% have none and no plans for one, 23% plan to write one, and 10% ban AI contributions outright....
Most maintainers (71%) say AI makes it easier for newcomers to start contributing.
Other interesting findings:
"Respondents estimate average time reductions across all six OSS development activities measured, including proposal discussions (19%) and code authoring (52%). For high-complexity tasks, however, 21% of respondents report taking more time when using GenAI."
"71% of maintainers agree GenAI reduces barriers to entry for OSS, but 53% of maintainers disagree that GenAI has improved community trust."
Developers are reinvesting the time they save back into open source: 66% report using productivity gains to address technical debt, 63% to develop new features and 58% for learning and upskilling.
Continued investment in human mentorship remains important: 46% of maintainers say GenAI increases the need for mentorship of new contributors, compared with 32% who say it decreases that need.
OpenSSF and LF AI & Data also helped support the study.
So what do these results show us? "Generative AI is fundamentally changing how people participate in open source," says the head of Open Source Ecosystem Development at Huawei's R&D subsidiary Futurewei, which helped support the study. Specifically GenAI is "lowering barriers to contribution" but also "creating new challenges" for maintainers and communities. Their recommendation? "Build the governance, transparency and trust mechanisms that allow AI-assisted contributions to strengthen, but not overwhelm, the open source ecosystem."
"Open source projects need to design for a growing AI-generated contributor base, not simply react to it," said Hilary Carter, SVP of Research at the Linux Foundation. "That means setting clear expectations for GenAI, putting responsibility for testing and disclosure on contributors and giving maintainers better tools to manage incoming pull requests. If we get those fundamentals right, AI can expand participation without overburdening and increasing costs for maintainers."
More from the blog It's FOSS:
LF Research is the Linux Foundation's research arm. It was set up in 2021 and publishes studies on how open source is built and used, drawing on surveys and project data. Its latest report, Navigating Open Source Software Development in the Generative AI Era, surveyed 234 contributors and maintainers on how generative AI is affecting the way open source gets made...
64% say reviews now take longer. Burnout is their top concern at 63%, narrowly ahead of contribution quality at 60%.
You will also find that policies have not caught up to the AI-assisted coding and vulnerability reporting trend. Of the 119 respondents who answered the question, 35% said their project has a formal policy permitting AI use. Another 32% have none and no plans for one, 23% plan to write one, and 10% ban AI contributions outright....
Most maintainers (71%) say AI makes it easier for newcomers to start contributing.
Other interesting findings:
"Respondents estimate average time reductions across all six OSS development activities measured, including proposal discussions (19%) and code authoring (52%). For high-complexity tasks, however, 21% of respondents report taking more time when using GenAI."
"71% of maintainers agree GenAI reduces barriers to entry for OSS, but 53% of maintainers disagree that GenAI has improved community trust."
Developers are reinvesting the time they save back into open source: 66% report using productivity gains to address technical debt, 63% to develop new features and 58% for learning and upskilling.
Continued investment in human mentorship remains important: 46% of maintainers say GenAI increases the need for mentorship of new contributors, compared with 32% who say it decreases that need.
OpenSSF and LF AI & Data also helped support the study.
Read more of this story at Slashdot.
The problem? Understanding how AI coding agents interact with the software you build. "Whether you're maintaining an SDK, building a command-line interface, or publishing an MCP server or skills... you need to understand whether agents can discover and use what you ship, and what your team can change."
Results can vary, and configurations keep changing, with behaviors influenced by everything from custom instructions and MCP servers to skills and plugins. So after a year of development Microsoft has created Scope, "an open-source platform built on Kubernetes for turning those interactions into evidence product teams can act on."
Details are available on... the Microsoft open source blog:
Available under the MIT License, Scope supports a continuous Developer Agent Experience (DevAx) learning loop grounded in repeatable experiments.
The Azure Cosmos DB team's experience shows what that loop can deliver... "The evaluations led to 20 Agent Kit issues and 27 documentation issues resolved," [says Jay Gordon, Senior Program Manager, Azure Cosmos DB]... These results connect evaluation to decisions a product team can make: which documentation needs clarification, where tooling needs a fix, and whether an update changes agent behavior.... [The gains] demonstrate how targeted changes, informed by observed behavior, can improve the way agents use a product.
For more on the shift from building for human developers to supporting agents, watch Your Product Was Built for Humans. Is It Ready for Agents? or join us at AI DevCon NYC conference in November.
Scope surfaces everything from incorrect assumptions in documentation (or recurring missed instructions) to whether agents select the intended SDK, initialize it correctly, and use its APIs, leading to clearer descriptions for command-line tool and more actionable errors.
Microsoft's open source blog also explains why AI agent evaluation needs an open-source foundation:
The challenges behind agent experience aren't unique to one product or organization. SDK maintainers, tool authors, researchers, and agent developers are all asking how agents behave and what helps them succeed. No single team can represent every language, workflow, or integration. An open project can bring more scenarios, more failure cases, and more viewpoints into the evaluation process... Opening Scope's execution and evaluation code gives contributors a way to question the methods, investigate unexpected results, and improve the evaluation itself. A shared foundation also reduces duplicated infrastructure. Agent integrations, reusable criteria, and trace-analysis improvements can help other teams study their own products without rebuilding the same machinery. The goal isn't one universal benchmark or definition of success. It's a common starting point that teams can adapt to their needs.
The MIT License lets teams use and extend Scope, while self-managed deployments let them evaluate private workloads without publishing their code or run data.... Scope streams activity as the agent works and retains interactions and workspace snapshots for later review. Your team can follow tool calls, inspect generated files, and connect a failed requirement to the steps that preceded it. Those traces provide observable evidence of what the agent did, helping turn a failure into a concrete documentation, SDK, or tooling improvement.
Results can vary, and configurations keep changing, with behaviors influenced by everything from custom instructions and MCP servers to skills and plugins. So after a year of development Microsoft has created Scope, "an open-source platform built on Kubernetes for turning those interactions into evidence product teams can act on."
Details are available on... the Microsoft open source blog:
Available under the MIT License, Scope supports a continuous Developer Agent Experience (DevAx) learning loop grounded in repeatable experiments.
The Azure Cosmos DB team's experience shows what that loop can deliver... "The evaluations led to 20 Agent Kit issues and 27 documentation issues resolved," [says Jay Gordon, Senior Program Manager, Azure Cosmos DB]... These results connect evaluation to decisions a product team can make: which documentation needs clarification, where tooling needs a fix, and whether an update changes agent behavior.... [The gains] demonstrate how targeted changes, informed by observed behavior, can improve the way agents use a product.
For more on the shift from building for human developers to supporting agents, watch Your Product Was Built for Humans. Is It Ready for Agents? or join us at AI DevCon NYC conference in November.
Scope surfaces everything from incorrect assumptions in documentation (or recurring missed instructions) to whether agents select the intended SDK, initialize it correctly, and use its APIs, leading to clearer descriptions for command-line tool and more actionable errors.
Microsoft's open source blog also explains why AI agent evaluation needs an open-source foundation:
The challenges behind agent experience aren't unique to one product or organization. SDK maintainers, tool authors, researchers, and agent developers are all asking how agents behave and what helps them succeed. No single team can represent every language, workflow, or integration. An open project can bring more scenarios, more failure cases, and more viewpoints into the evaluation process... Opening Scope's execution and evaluation code gives contributors a way to question the methods, investigate unexpected results, and improve the evaluation itself. A shared foundation also reduces duplicated infrastructure. Agent integrations, reusable criteria, and trace-analysis improvements can help other teams study their own products without rebuilding the same machinery. The goal isn't one universal benchmark or definition of success. It's a common starting point that teams can adapt to their needs.
The MIT License lets teams use and extend Scope, while self-managed deployments let them evaluate private workloads without publishing their code or run data.... Scope streams activity as the agent works and retains interactions and workspace snapshots for later review. Your team can follow tool calls, inspect generated files, and connect a failed requirement to the steps that preceded it. Those traces provide observable evidence of what the agent did, helping turn a failure into a concrete documentation, SDK, or tooling improvement.
Read more of this story at Slashdot.
Brazil's 80-year-old president Luiz Inácio Lula da Silva was re-elected Sunday, reports the Guardian, "defeating his far-right opponent, Flávio Bolsonaro, to claim a historic fourth term in power."
And the results could impact the climate, suggests the Associated Press, since under da Silva the annual deforestation rate in the Amazon fell to its lowest level since records began in 1988:
Official satellite data showed the rainforest lost 3,335 square kilometers (1,300 square miles) from Aug. 2025 through July 2026, the period used to calculate the annual rate...
During Jair Bolsonaro's presidency, from 2019 to 2022, Amazon deforestation surged by about 60%, with more than 45,000 square kilometers (17,400 square miles) cleared, according to official data. Under Lula, deforestation has fallen 71% since 2023, the government said. One of Lula's first moves after taking office in January 2023 for a third, non-consecutive term was to revive the Action Plan for the Prevention and Control of Deforestation in the Legal Amazon, known by its Portuguese acronym, PPCDAm. Launched in 2004 during his first administration, the plan had been shelved under Bolsonaro....
The plan has four pillars: strengthening monitoring and enforcement; promoting a sustainable economy; managing protected areas and determining how undesignated public forests should be used; and using regulations and financial incentives to curb deforestation. Measures included restoring sanctions for illegal forest clearing detected by satellites, a practice seen as the most effective tool to curb deforestation that was halted under Bolsonaro. The government also proposed barring properties with illegal deforestation from receiving bank loans and allocated more funding to priority Amazon municipalities that demonstrated reductions in forest loss. It also funded efforts to fight environmental crime and develop subsidized credit for sustainable businesses in the Amazon...
Deforestation and other land-use changes are Brazil's largest sources of greenhouse gas emissions, which drive global warming. The stakes are especially high in the Amazon, which stores vast amounts of carbon dioxide and generates atmospheric moisture that helps regulate weather far beyond South America... Degradation from wildfires, logging and drought affects about 40% of the Amazon and has outpaced clear-cutting in recent years. A strong El Niño, a periodic warming of the equatorial Pacific, could intensify those threats in 2026 and 2027 by bringing hotter, drier conditions that fuel wildfires.
The article notes that Lula's reelection campaign promised zero net deforestation by 2030, plus restoration to offset all forest loss, legal or illegal.
And the results could impact the climate, suggests the Associated Press, since under da Silva the annual deforestation rate in the Amazon fell to its lowest level since records began in 1988:
Official satellite data showed the rainforest lost 3,335 square kilometers (1,300 square miles) from Aug. 2025 through July 2026, the period used to calculate the annual rate...
During Jair Bolsonaro's presidency, from 2019 to 2022, Amazon deforestation surged by about 60%, with more than 45,000 square kilometers (17,400 square miles) cleared, according to official data. Under Lula, deforestation has fallen 71% since 2023, the government said. One of Lula's first moves after taking office in January 2023 for a third, non-consecutive term was to revive the Action Plan for the Prevention and Control of Deforestation in the Legal Amazon, known by its Portuguese acronym, PPCDAm. Launched in 2004 during his first administration, the plan had been shelved under Bolsonaro....
The plan has four pillars: strengthening monitoring and enforcement; promoting a sustainable economy; managing protected areas and determining how undesignated public forests should be used; and using regulations and financial incentives to curb deforestation. Measures included restoring sanctions for illegal forest clearing detected by satellites, a practice seen as the most effective tool to curb deforestation that was halted under Bolsonaro. The government also proposed barring properties with illegal deforestation from receiving bank loans and allocated more funding to priority Amazon municipalities that demonstrated reductions in forest loss. It also funded efforts to fight environmental crime and develop subsidized credit for sustainable businesses in the Amazon...
Deforestation and other land-use changes are Brazil's largest sources of greenhouse gas emissions, which drive global warming. The stakes are especially high in the Amazon, which stores vast amounts of carbon dioxide and generates atmospheric moisture that helps regulate weather far beyond South America... Degradation from wildfires, logging and drought affects about 40% of the Amazon and has outpaced clear-cutting in recent years. A strong El Niño, a periodic warming of the equatorial Pacific, could intensify those threats in 2026 and 2027 by bringing hotter, drier conditions that fuel wildfires.
The article notes that Lula's reelection campaign promised zero net deforestation by 2030, plus restoration to offset all forest loss, legal or illegal.
Read more of this story at Slashdot.