The man’s scalp got skull-fucked by a breeze on Sunday — bent over on a tarmac, cheeks spread, bald spot gaping at God and C-SPAN — and instead of taking the L like a person with a functioning shame gland, he showed up three days later wearing his mommy’s hair like the world’s most Oedipal glory-hole disguise, a lace-front so thirsty it’s basically edging the entire press pool.
https://jojofromjerz.substack.com/p/the-strawberry-blonde-merkin-of-state
via @touaregtweet
Two MIT researchers will present a new speculative execution attack at DEF CON 34 that uses precisely timed interrupts to bypass defenses against Spectre v2. Daniël Trujillo and Mengjia Yan of MIT's Computer Science and Artificial Intelligence Laboratory (CSAIL) shared their paper [PDF] with The Register ahead of publication. Their attack targets mitigations designed to neutralize potentially hostile branch predictor states before sensitive code runs. Such neutralization is an important defense against Spectre-style attacks. Depending on the mitigation, the processor or operating system isolates, clears, or safely retrains relevant predictor state when entering privileged code or shortly before a protected branch executes. Different chipmakers deploy neutralization mitigations slightly differently. Intel's eIBRS sanitizes branch predictors upon context switch, while AMD's Safe RET, introduced after the Inception attack Trujillo co-authored in 2023, focuses on the point immediately before a protected branch is executed. Trujillo and Yan refer to these as entry neutralization and in-place neutralization respectively. Crucially, the two classes share the same underlying assumption that attackers cannot alter branch predictor states within what's known as a "post-neutralization window" – the period between state neutralization and the branch predictor being used. The defense here relies on the assumption that everything between the point of neutralization and the usage by a victim branch is safe. Trujillo and Yan's attack shows how attackers can re-poison the branch predictor during the post-neutralization window. The researchers call the new class of attack TONTOU, for Time-of-Neutralization to Time-of-Use. They demonstrated that an attacker can exploit the post-neutralization window to re-poison branch predictor state on recent AMD and Intel processors. To do this, they developed an attack primitive called "interrupt injection." An unprivileged program schedules high-frequency timer interrupts in the hope that one will land during the often tiny post-neutralization window. Being able to trigger interrupts during the post-neutralization window allows attackers to divert control flow so that an interrupt handler executes after the sanitization phase and before the victim branch is used. The interrupt handler can then re-poison predictor structures such as the return stack buffer (RSB) or branch history buffer (BHB), causing a protected branch to speculatively jump to a disclosure gadget that leaks kernel data through a side channel. Practical attacks The researchers said that their tests showed the TONTOU attacks worked on both Intel and AMD-based Linux systems. They tested TONTOU on Intel Cascade Lake Refresh and Arrow Lake processors and AMD Zen 2 and Zen 4 chips. The researchers built a complete end-to-end exploit only for Zen 2, largely because the Intel attack requires specific software conditions. Speculative side-channel attacks remain difficult to pull off, and you're more likely to fall victim to ransomware than Spectre in the real world. Another serious caveat is that each end-to-end attempt took about 18 minutes, and you can see a sped-up version via the video Trujillo posted to YouTube. Trujillo and Yan identified the exact point at which they needed to inject their interruptions to poison the RSB, and through a series of attacks broke Linux's kernel address space layout randomization (KASLR), which allowed them to locate specific secrets such as etc/shadow, which contains the root password hash. Across ten total runs, the researchers were able to break KASLR every time, although they were only able to successfully locate and leak the contents of etc/shadow in five of these. "It's definitely not a simple attack, but we show that it's practical with our end-to-end exploit on AMD Zen 2," Trujillo told The Register. "Our demonstration does not assume anything special from the system: we use a stock Linux kernel version, no inserted modules, and all default mitigations. Any time you'd execute unprivileged code with timer availability on a system while sharing the kernel with a victim, this attack would be an issue. "For example, multi-tenant container platforms would fall in this category, allowing ordinary user space programs to leak memory from the shared kernel." The researchers hope that their work will inspire further investigations into interrupt injections and TONTOU attacks, and to help develop more robust mitigations against Spectre-style exploits. They engaged Intel, Arm, and AMD after gathering their results, but only the latter committed to address the issue via kernel patches. Intel told the pair that it won't be working up any other mitigations since real-world exploits are subject to too many factors, such as the availability of disclosure gadgets, although it awarded a prize from its bug bounty program in the hundreds of dollars. Arm said TONTOU's interrupt injections fall under "passive leakage," which it does not "actively protect against." ®
A Scottish NHS trust is investigating a data breach concerning the medical records of a nine-year-old girl who died earlier this week and was named publicly for the first time on Wednesday after a man was charged with her death. The alleged breach occurred at Ninewells Hospital in Dundee, and reportedly involved staff members accessing the girl’s medical records without authorization or clinical need. A spokesperson for NHS Tayside, which oversees Ninewells Hospital, said: “NHS Tayside is currently investigating the circumstances of an alleged data breach which happened in a working clinical area where staff access patient information. “As a matter of governance, any data protection breach would be recorded and investigated by NHS Tayside and, where appropriate, reported to the Information Commissioner’s Office (ICO). It would not be appropriate for us to comment further on individual staffing matters." NHS Tayside did not respond to questions about the nature of the accessed data nor who is thought to be behind the intrusion. Medical records in the UK are protected by the UK GDPR, contained in the Data Protection Act 2018 as well as several common law confidentiality rules. NHS staff are only allowed to access patient information where there is a legitimate clinical or other work-related need. A 35-year-old man whom police say was known to the child, was arrested and appeared in court on August 5 over the death of Minnie Merriman. The man issued no plea at Forfar Sheriff Court on the day of his arrest and has been remanded in custody. Merriman was found in Elliot Industrial Estate at approximately 0002 on Monday, August 3, with serious injuries. The young girl was then taken to Ninewells Hospital in Dundee, where she later died. Police Scotland said that they are not currently looking for anyone else in connection with her death. Other members of Merriman’s family, who are from West Yorkshire and were camping nearby, are being supported by specialists. A family statement, released through Police Scotland, read: “We are devastated with the loss of our beloved, absolutely incredible, beautiful and brave Minnie Moo. Our family asks that our privacy is respected at this extremely difficult time." Detective Inspector Mike Ness of Police Scotland’s major investigation team said: "Our thoughts remain with everyone affected by these events, especially Minnie's family. "A police presence will remain in the area while our enquiries continue. "Anyone with any concerns, or information, should approach these officers or contact Police Scotland on 101, quoting incident number 0008 of Monday, 3 August 2026." ®
Mourinho reportedly unhappy over Barça hijack
City ready to seal deal for Morocco star Bouaddi
Manchester City have rejected an offer of £38.5m (€45m) from Barcelona for Rodri and want at least £60m before allowing Spain’s World Cup-winning captain to depart.
Barcelona have emerged as Rodri’s preferred destination after talks with Real Madrid broke down this week. It is understood that the 30-year-old, who is now in the final year of his contract at City, has agreed personal terms with the Spanish champions after indicating that he would like to return to his homeland following the departure of Pep Guardiola.
Continue reading...Finding treasures is part of the fun of travel. Here, experts share their top tips on what to buy where
Speciality tea
Continue reading...Worried about microplastics? Whether it’s titanium pans or loose-leaf tea, here are the changes you can make right now
• The best sustainable subscriptions for greener, easier living
It all started with a black plastic spatula. When an article went viral in 2024 for suggesting we may be unwittingly infusing our food with harmful chemicals by using one, I, along with many I know, lobbed ours into the bin (without a backup in place, to the annoyance of my partner).
It later transpired that the study the article was based on had miscalculated the dosage by a factor of 10. UK regulations also limit certain hazardous substances in plastics, meaning that risks should be lower in this country. But alas, it was too late for our poor spatula.
Continue reading...The New Zealand actor, who died last month aged 78, will appear in live-action movie of popular video game, which is set for release next year
The New Zealand actor Sam Neill completed filming of a role in the forthcoming adaptation of The Legend of Zelda video game before he died, which will be one of his final screen appearances.
According to a report in Deadline, Neill, who died of pneumonia last month aged 78, will appear in the live-action movie, which finished filming in April this year and is set for release next May. Which role Neill plays has not been announced, but fans of the games have suggested that he would be a good casting choice for the King of Hyrule, the fictional fantasy realm in which the Zelda games are primarily set.
Continue reading...Delays to sexual assault charges and failures to report past convictions in court hearings gave Simon Levy chance to attack more women
Catastrophic errors left a prolific and proven sex offender free before he murdered two women in London, it can be revealed.
On Friday, an Old Bailey jury found Simon Levy, 40, guilty of murdering Carmenza Valencia-Trujillo in March 2025 and Sheryl Wilkins five months later.
The CPS admitted errors at three court hearings in May, June and August 2025, which ended in Levy remaining free. It would not specify publicly what those were, but a source authorised to speak for the organisation said they included failing to mention he had been arrested for Valencia-Trujillo’s murder, and that it could find no record or mention of Levy’s past sexual assault convictions, nor that he was a suspect in a 2024 rape.
The CPS said: “We accept there was relevant information regarding bail that was not provided to the court when bail applications were being considered. Our actions fell short of the standards that victims, families and the public are entitled to expect … We could and should have taken a more robust approach to representations about bail.”
By May 2025, police wanted Levy remanded, fearing he posed a “high risk of reoffending” with his crimes “escalating”.
Levy failed to attend three crown court hearings for the train attacks, and the CPS accepts there is no evidence of a warrant being sought for his detention. For two he claimed illness, for the other that he was not informed.
His final non-appearance in crown court was on 11 August 2025. A fortnight later he murdered Wilkins.
A CPS source said individuals involved in the Levy case had been disciplined.
The assaults on the London tube network and trains were investigated by BTP. Officers arrested Levy, who was travelling on a stolen Oyster travel card, but handed it back to him, unaware it was stolen. With it he travelled to south London to commit his first murder, and carried out further sexual assaults on trains.
BTP admitted the charging of Levy for his sexual assaults on trains in November 2024 was held up because of a delay in holding an identification parade after his arrest. It meant his bail was extended and during this delay he attacked and raped another woman and murdered Valencia-Trujillo, a mother of two.
BTP identified him as a suspect and charged him but never searched his home. Peter Fulton, BTP’s head of crime, said: “There’s a fine line between going fishing and breaching someone’s human rights.” He said that every woman who reported Levy for attacking them on a train saw him charged and convicted. When the Met, which investigated the murders, searched Levy’s home, evidence was found about his attack on the prison officer.
The police watchdog has placed two Met officers under investigation over whether Levy was supervised correctly as a person on the sex offender register. A constable is under investigation for gross misconduct, meaning he could be dismissed. The other officer, under investigation for misconduct, is a detective sergeant.
BTP said it had not referred its errors to the police watchdog. Instead it has moved one officer, who it says delayed the holding of the ID parade, out of investigations, and given a supervisor words of advice.
Continue reading...Sign up now! Sign up now! Sign up now? Sign up now!
“We were so close … At the end of the day, really, they made him an offer he couldn’t refuse … It shows where we’re trying to aim for the club … There has been a lot of stuff written in the papers that you have to take on the chin I’m afraid – they should be talking about how well the England cricket team are playing at the moment.” Words said not by Mikel Arteta about Arsenal missing out on Vinícius Júnior after the Brazilian megastar signed a new Real Madrid contract, but by Glenn Hoddle in 2002, as Tottenham missed out on signing … yes, Rivaldo. That last sentence was probably a dead giveaway. Tottenham’s solution to the Brazilian-shaped hole in their transfer ambitions was to sign Robbie Keane to his boyhood club. What might Arsenal do next? Eye up Cristian Romero, you say?
Mikel Arteta said after Arsenal’s 3-1 loss to Betis that ‘sometimes it’s good to create even more fire in the belly’ (yesterday’s News, Bits and Bobs, full email edition). Having the squad eat American lettuce would probably be faster in that regard” – George Ronczy.
Re: commemorative days of the year (yesterday’s Football Daily). According to the website, 7 August is International Beer Day, with (appropriately) 8 August being International Hangover Day. That’s well planned” – Mark Jones.
You claim to have an ever-forgiving reader (yesterday’s Football Daily). That is some claim. Can you let us know who this poor, deluded sap is? That might go some way to proving it. It would also help the rest of us help to show them the error of their ways” – Peter Holford (no, I’m not the ever-forgiving reader).
This is an extract from our daily football email … Football Daily. To get the full version, just visit this page and follow the instructions.
Continue reading...Yinon Levy charged with manslaughter in first exception this decade to culture of impunity for Israelis who kill Palestinians in the occupied West Bank
Prosecutors in Israel have indicted an extremist settler for shooting a Palestinian activist last July, the first attempt this decade to hold an Israeli responsible for killing a Palestinian in the occupied West Bank.
Yinon Levy, who was under western sanctions, is charged with manslaughter over the death of Awdeh Hathaleen, an English teacher and peace activist. In his last moments, Hathaleen filmed the settler drawing his weapon and opening fire towards him.
Continue reading...De menstruatie-app Monthly, die al haar data doorverkoopt aan commerciële partijen, wil graag weten wat de bodycount is van haar gebruikers en waarom er zulke sletten tussen zitten.
“Het is voor ons van belang om precies te weten hoe onze gebruikers in elkaar steken. Hoe vaak masturbeer je? Houd je van voorspel? Hoeveel bedpartners heb je gehad? En waarom ben je met Gert-Jan, die knor, naar bed geweest waar je beste vriendin ook al seks mee heeft gehad?”, legt een woordvoerder van Monthly uit. “Al die informatie schetst een beeld waar adverteerders goed mee uit de voeten kunnen.”
Een gebruiker van de app laat anoniem weten dat ze sommige vragen niet helemaal kon plaatsen. “Ik zat in de derde week van mijn cyclus en kreeg de vraag waarom ik in godsnaam weer seks had gehad met mijn ex, ‘nota bene in de derde week’ en ‘met die domme eikel die nog bij zijn ouders woont’, zeiden ze. Heel vreemd. Ik heb toen uit alle opties maar gekozen dat ik me kwetsbaar en eenzaam voelde.”
Verder wil Monthly graag weten of je een strafblad hebt, stiekem je moeder haat, weleens snot onder de tafel smeert, hoe je eerste huisdier heette en wat je pincode is.
&
Social
We proberen het te begrijpen. Fatbikes zijn ontegenzeggelijk hondslelijke dingen, maar in de kern natuurlijk hartstikke functioneel als je een middelgrote afstand moet afleggen, bijvoorbeeld van de ene kant van Amsterdam naar de andere, dat scheelt zo een kwartier, en tijd is geld, dat weten ambitieuze jongemannen zoals we hierboven zien natuurlijk als geen ander, daarom hebben ze natuurlijk zo'n kreng. Blijven wij dus met een haast filosofische vraag achter. Waarom zou je überhaupt met je fatbike de metro in willen?
Marijn de Vries zag met eigen ogen wat er gebeurde in het startvak van de tijdrit van de Tour de France Femmes. Of er borsten gecheckt werden.
:format(jpeg):fill(f8f8f8,true)/s3/static.nrc.nl/taxonomy/64ea993-Vries%2520Marijn%2520de%25202023%252001%25201280.png)
Een nieuwe wet maakt kledingproducenten verantwoordelijk voor hun afval, om de berg vuilnis door fast fashion in te dammen. Maar de overheid laat veel aan de sector over en fabrikanten kopen voor een paar cent per kledingstuk hun plicht af.
/s3/static.nrc.nl/wp-content/uploads/2026/08/07145217/070826ECO_2033612624_WEB_HP_ILLU_Kledingindustrie_Lois-Konijn.jpg)
NEW YORK (ANP) - De aandelenbeurzen in New York zijn vrijdag met winsten begonnen. Beleggers op Wall Street reageerden op het banenrapport van de Amerikaanse overheid. Uit dat rapport bleek dat er in juli 23.000 banen zijn verdwenen, terwijl er een groei van ongeveer 80.000 arbeidsplaatsen werd verwacht. Daardoor kan de Amerikaanse centrale bank voorzichtiger worden met het verhogen van de rente.
De banengroei speelt naast de inflatie een belangrijke rol in het rentebeleid van de Federal Reserve. Vorige week hield de Fed de rente nog onveranderd, maar door de hoge inflatie houden de financiële markten rekening met een verhoging in september. Door de afkoelende arbeidsmarkt in 's werelds grootste economie kan de Fed volgende maand terughoudender worden met een eventuele renteverhoging.
De Dow-Jonesindex noteerde kort na opening van de markt 0,1 procent in de plus op 53.914 punten. De brede S&P 500-index steeg 0,3 procent tot 7738 punten en de technologiegraadmeter Nasdaq won 0,9 procent tot 26.577 punten.
Klantenservice
Airbnb steeg ruim 12 procent. Het verhuurplatform verhoogde de omzetverwachting voor de tweede keer dit jaar na een sterke vraag naar reizen in het afgelopen kwartaal. Het bedrijf kende in Noord-Amerika de grootste groei in bijna drie jaar, mede door het WK voetbal. Ook heeft Airbnb de kosten van klantenservice weten te verlagen door de inzet van AI.
Cloudflare werd 12,5 procent meer waard. Het cloudservice- en cyberbeveiligingsbedrijf werd positiever over de omzet dit jaar na sterke resultaten. Ook chipfabrikant Microchip Technology (plus 11,3 procent) gaf een sterke omzetverwachting voor het huidige kwartaal.
Breuk
Lyft won 1,8 procent. De taxidienst boekte in het afgelopen kwartaal meer omzet dan verwacht.
Zonne-energiebedrijven First Solar en SolarEdge stegen 9,2 en 6,6 procent, na nieuwe handelsmaatregelen van de Amerikaanse overheid om beter te kunnen concurreren met China. Om de binnenlandse productie te stimuleren, heeft het Witte Huis een reeks minimumprijzen en een importheffing van 15 procent ingesteld op producten gemaakt van polysilicium, de grondstof die wordt gebruikt in halfgeleiders en zonnepanelen en die voornamelijk in China wordt geproduceerd.
Under Armour daalde 6,5 procent. De sportkledingketen voorspelt een scherpere omzetdaling dan verwacht en heeft last van importheffingen en de recente breuk met NBA-ster Stephen Curry.