The drivers and teams report back on all the action from final practice and Qualifying in Baku ahead of the 2026 Azerbaijan Grand Prix.

Yes, criminals have job listings too. A Telegram user recruiting callers to work in an apparent Google Security Team voice-phishing scam told applicants that they weren’t allowed to read from scripts – in the same ad that also included the exact script they had to read during these scam calls. This and other true-crime tales of criminals making fools of themselves appear in the latest installment of the Trellix Advanced Research Center’s Dark Web Roast, which uses memes and mockery to troll criminals on the dark web. It also acknowledges: “While these incidents are genuinely amusing, they represent real criminal activities causing significant harm.” One of these incidents from August involves a Telegram user identified by Trellix as Derian (@crɑick) who posted an ad in the UK Fraudsters Telegram channel. “Hiring - Female/Male Mail Callers,” the advertisement said, seeking “USA/CA (white sounding)” applicants and, in bold, “NO SCRIPT READING.” The ad then proceeded to print the exact script the callers would read: “Good afternoon, this is [name] reaching you on behalf of the Google Account Security Team on a recorded line. Am I speaking with Larry Boyles?” The Trellix threat-intel analysts note that the “‘recorded line’ flourish is a nice touch, because nothing says legitimacy like a fraudster cosplaying compliance theatre. The pretexting playbook is depressingly effective, but the recruiter’s QA process is roughly as robust as the fake Google team it impersonates.” Burn, baby, burn. The Register previously spoke with Trellix VP of threat intelligence strategy John Fokker about the Dark Web Roast, and he said the idea came from a desire to take an "almost psyops" approach to covering the criminal underground. "We don't want to glorify them, what's the opposite we can do? We're going to roast them," Fokker told us during a conversation at RSAC. "I'm trying to spark a debate, or a healthy conversation, about what we can do as an industry," he said. "Everybody's glorifying threat actors, and that's not helping our customers or organizations. These are just individuals, they just use computers, and they just want to steal your data and make money. They're not mythical. They don't have superpowers." The FBI’s Internet Crime Complaint Center (IC3) recently reported its most damaging year for internet scams, with 2025’s data pegging reported losses at $20.87 billion, and English-language social engineering is among the most in-demand skill sets on underground forums. One report by threat detection and response firm ReliaQuest found the number of job advertisements posted on criminal marketplaces mentioning this particular talent more than doubled between 2024 and 2025. Plus, according to Google, voice phishing surged last year to become the second most common method used by cybercriminals to gain initial access to their victims' IT estate – and the No. 1 tactic used when breaking into cloud environments. So when these criminals do dumb things, we’re happy to see Fokker’s team call them out.®

As if the pace of software creation hadn't accelerated enough thanks to generative AI coding agents, computer scientists in Japan have devised a way to turbocharge the process of build dependency verification. Speeds can increase by as much as 54x. Software build systems like Make, CMake, and the Zig build system automate the process of turning source code into executable programs. They ensure source files are compiled in the correct order and objects are linked correctly. They provide reproducible rebuilds and handle platform-specific compilation requirements, dependencies, tests, and documentation. But according to Yuta Saito, Kazunori Sakamoto, and Hironori Washizaki from Waseda University, dependency specification management remains a challenge, accounting for more than half of all build errors in large projects. Because existing tools like ptrace impose significant overhead, the researchers have devised a way to improve error detection by analyzing dependencies using extended Berkeley Packet Filter (eBPF)-based system call tracing. They've developed a tool called mkcheck2 that reduces the time and compute cost required to catch software build errors. And they explain their approach in a paper titled "Efficient Build Dependency Verification Using eBPF and Incremental Analysis," published in the Proceedings of the 2026 IEEE/ACM 48th International Conference on Software Engineering. "Our evaluation on a diverse set of open-source projects demonstrates that mkcheck2 reduces the overhead of dependency error detection by up to 99.7 percent compared to existing ptrace-based approaches while maintaining detection accuracy," the authors explain. "Across the entire 300-project Make corpus, the incremental analysis technique lowers the mean analysis time per commit from 1267.49 seconds to just 23.56 seconds, making continuous dependency verification practical in real-world development environments." That's about 54x faster per commit. The researchers say their eBPF-based system call tracer largely avoids the performance overhead imposed by ptrace. eBPF allows sandboxed programs to run within kernel space, where they can perform tasks involving networking, observability, security, and other low-level operations. It's been used for efficiency gains in services like Meta's Strobelight. "By executing tracing code directly in kernel space, we can monitor build processes with minimal impact on build performance," the authors explain in their paper. "Unlike ptrace, which requires process suspension and context switches for each system call, our eBPF-based approach provides non-invasive tracing by operating entirely within the kernel." The authors note that their approach has some limitations. The eBPF-tracing system is Linux-specific, so build systems for other operating systems can't expect the same gains. And there are various build-system scenarios that still present challenges, such as some kinds of redundant dependencies, tracking access to memory-mapped regions, visibility into dependencies for dynamically loaded libraries, network dependencies, and distributed build systems. Nonetheless, the potential for mkcheck2 to cut the overhead of dependency error detection by up to 99.7 percent compared to ptrace-based approaches promises to save a lot of time. ®

ShinyHunters, the data theft and extortion crew that has stolen sensitive information belonging to millions of cancer patients, university and K-12 students, and Carnival cruisers, wanted to preserve their reputation and keep their “business” afloat. So it hacked the FBI to make a statement, the group told The Register. “It’s a game and it’s the world we live in,” a ShinyHunters spokesperson told us. “We are just protecting our business as any other business would do. It’s about who does their job better.” On Friday, the FBI confirmed the breach to The Register, after earlier in the week saying the bureau was investigating ShinyHunters’ claims. "The FBI is aware of a cyber-criminal enterprise group claiming a compromise of the FBIJobs.gov portal and alleged impact to FBI employee personally identifiable information (PII),” an FBI spokesperson told The Register. "While the point of breach is still undetermined - whether a third-party or the FBI’s enterprise - we are actively and aggressively investigating this matter and working closely with those third-party providers that support FBIJobs.gov to mitigate any and all risk." On Tuesday, the criminals told us that they broke into the bureau via yet another Oracle PeopleSoft zero-day flaw in the FBIJobs.gov portal, which remains down as of Friday. Then, they breached the FBI’s managed servers on AWS GovCloud and swiped thousands of personnel files belonging to current, former, and prospective FBI employees. “We hold very sensitive data on almost ALL FBI Agents and individuals who filed an application with the FBI for a job,” the group claimed in a message posted online and addressed to FBI Director Kash Patel and Brett Leatherman, assistant director of the FBI’s Cyber Division. Sample files reviewed by journalists and security researchers appear to contain agents’ home addresses, phone numbers, email addresses, Social Security numbers, job titles, assigned field office, and emergency contact information. 'We refuted the misinformation disseminated by the FBI' According to a spokesperson for ShinyHunters, the FBI hack isn’t about the money, and the crew did not demand a multimillion-dollar extortion payment to not leak the agents’ personal details. “Our breach of the FBI was executed specifically to contest the allegations made against ShinyHunters in their May 2026 FLASH report,” a spokesperson told The Register. The FBI bulletin, published soon after the group breached ed-tech giant Instructure's Canvas platform and claimed to have stolen data tied to hundreds of millions of students, teachers, and staff, said ShinyHunters uses “harassment strategies, sending threatening text messages and phone calls to victims and their family members, and in some cases, swatting.” The criminals, it continued, “may falsely claim to have sensitive or compromising information, including embarrassing photographs or videos of victims, which frequently do not exist.” ShinyHunters contends this is all false. By hacking the FBI and releasing its statement about the hack, “we demonstrated our technical capabilities and directly refuted the misinformation disseminated by the FBI, journalists, and industry researchers,” the spokesperson told us in an interview. “This was fundamentally a public relations and marketing initiative for our business,” they said. 'Results-driven professionals' or criminals? ShinyHunters said it believes that “future corporate partners we engage with for payment will review this documentation, reinforcing our reputation as serious, results-driven professionals focused solely on transaction and resolution.” Most people call these "future corporate partners" victim organizations, breached by the digital thieves, and threatened with data leaks unless they pay an extortion demand. The FBI intrusion “establishes our credibility, technical superiority and excellence, and capability with future corporate stakeholders, positioning us as a professional and predictable entity focused on concluding negotiations efficiently,” the spokesperson said. It also puts a huge target on the crew, and we’d bet that the FBI, already gunning to arrest ShinyHunters members, is now doubling down on those efforts. The spokesperson said they and others in the crew started off as GnosticPlayers before rebranding as ShinyHunters in 2020, and that they have since seen the “majority” of GnosticPlayers members arrested. This business, however, is a criminal operation. We asked them why they believe people will trust the words of criminals over those of law enforcement. They said it’s due to ShinyHunters’ “unique and exceptional reputation along with over five years of history in the space…We are in a unique position and due to our vast capabilities and resources, victims are more likely to resolve the situation quickly and cheaper with us instead of going down the full disclosure route.” Think of the children We also questioned how they justify doing what they do in this “business” - breaking into IT systems, stealing data, extorting victims - considering the personal toll it takes on people, especially when the stolen files contain sensitive information about children as they did in the Canvas intrusion. ShinyHunters claims that they “don't attack human beings. We attack the corporate structure. The Business. Not human beings. The money comes out of insurance pocket. Not people’s or businesses' own. Full coverage by insurance. No personal harm is being done, only business harm that they recover from within a quarter considering the type of attack.” Ransomware and other disruptive attacks are “substantially worse and costly,” they said. “There are times in the work we do sometimes we have to push the corporate to the absolute limit to get them on the table,” they continued, noting that there was an “initial issue” with the Canvas intrusion “that we cannot comment on, but it highly relates to the misinformation we are combating. It takes a lot of convincing to bring a corporate to the table to negotiate if they think you are not trustworthy and bluffing/exaggerating what you have.” While we don’t know for sure what this issue was, ShinyHunters switched to school-by-school extortion after compromising Instructure, the company that owns the Canvas online learning platform, in late April and after the initial pay-or-leak deadline passed on May 6. They injected a ransom message into about 330 Canvas school login portals, causing Instructure to take the platform offline for a day - during final exams and Advanced Placement testing for many. Meanwhile, that PeopleSoft 0day The ed-tech company ultimately “reached an agreement” with ShinyHunters, which is corporate-speak for they paid the extortion demand. Alliance Risk CEO David Vainer previously told The Register he estimates the figure sits somewhere between $5 million and $30 million. According to ShinyHunters, the PeopleSoft preauth vulnerability that they exploited in the FBI attack still doesn’t have a patch. Oracle hasn’t responded to The Register’s questions about the zero-day, or any plans for a patch. Shiny had “no comment” about whether the gang has abused the PeopleSoft bug to compromise other organizations. But they added: “the zero-day would allow us to access similar HR/Employee personal information for other corporations who are vulnerable.” They wouldn’t put a dollar amount on how much they earn from extorting businesses, but boasted: “our revenue performance significantly outperforms both our counterparts and legitimate real life businesses. We have reason to believe in a few months or soon an upcoming financial analysis or reports tracking our earnings will reflect substantial revenue growth.” And they would not comment when asked if they worried about getting arrested and criminally charged for their digital intrusions and extortion attacks. ®

KYIV (ANP/AFP/RTR) - Vijf mensen zijn om het leven gekomen bij Russische aanvallen op Kyiv, melden de lokale autoriteiten. De aanvallen vonden overdag plaats.

De afgelopen maanden zijn de drone- en raketaanvallen op Kyiv toegenomen. Russische aanvallen vonden traditioneel vooral 's nachts plaats, maar de afgelopen tijd voert Rusland vaker overdag aanvallen uit.

Ook nemen aanvallen met ballistische raketten toe. Deze zijn moeilijker te onderscheppen door Oekraïne. De door de VS ontworpen Patriot-luchtverdedigingssystemen zouden betrouwbaar de ballistische raketten van Rusland kunnen afweren. Sinds de VS en Israël in februari de oorlog met Iran zijn begonnen, meldt Oekraïne een tekort aan deze Patriots.

De Oekraïense president Volodymyr Zelensky benadrukte herhaaldelijk het belang van meer luchtverdedigingsmiddelen, met name Patriot-systemen. Hij deed dit afgelopen week nog tijdens zijn bezoek aan de VS.

DEN HAAG (ANP) - De politie vergoedt de apparatuur van de fotograaf die zaterdag op het Malieveld bij een politieactie in het water belandde. Dat bevestigt een woordvoerder na berichtgeving van Omroep West. Op beelden die tijdens de rellen op het Malieveld rondgingen, was te zien dat de Spaanse fotograaf door een agent in het water werd geduwd.

De politie liet eerder al weten dat de duw het gevolg was van "het creëren van werkruimte" voor de arrestatie-eenheid van de politie. Volgens een woordvoerder ging het om een "heftige inzet", waarbij de politie "snel moest handelen". Volgens de woordvoerder had de agent mogelijk niet gezien dat er water achter de fotograaf was. Ze benadrukte toen dat ze daarmee "niet wil goedpraten" dat de journalist in het water is gevallen. "Dat is nooit de bedoeling geweest."

Hoe hoog de vergoeding is die de fotograaf krijgt, is onbekend. Aan Omroep West laat de politiewoordvoerder weten dat daarover geen uitspraken worden gedaan in verband met privacy.

Zoek je een nieuwbouwhuis, dan heb je geduld nodig: het ontwerp- en vergunningstraject duurt nu gemiddeld acht jaar. Het kabinet wil die doorlooptijd halveren. Minister Boekholt-O'Sullivan (Volkshuisvesting) stuurde op 21 september het Actieplan Versnelling Woningbouw naar de Tweede Kamer: vijftig acties en €287 miljoen om het bouwtempo op te schroeven, meldt de Rijksoverheid. De ambitie: in 2030 moet de helft van alle nieuwbouw fabrieksmatig worden gebouwd. Nu komt iets meer dan twintig procent uit een fabriek.

Van acht naar vier jaar

De grootste winst zit volgens de minister in het verkorten van de doorlooptijd. Dat kan door het traject te digitaliseren en plannen parallel te laten lopen in plaats van achter elkaar. Het doel: van gemiddeld acht jaar terug naar vier. Goedgekeurde woonconcepten hoeven straks geen aparte bouwtechnische vergunning meer. Dat scheelt per project maanden papierwerk en maakt het aantrekkelijker om bewezen ontwerpen op meerdere locaties in te zetten.

Nu telt alleen nog tempo: van tekening naar heipaal.

De helft uit de fabriek

Het kabinet wil dat in 2030 de helft van alle nieuwbouwwoningen industrieel wordt gebouwd. De bouwsector ging er tot dusver van uit dat in 2030 hooguit een derde haalbaar zou zijn, meldt Wonen360. Woningen worden in een fabriek voorgefabriceerd, in delen naar hun plek gebracht en in een paar dagen in elkaar gezet. Dat kan het bouwproces op locatie aanzienlijk versnellen en de afhankelijkheid van schaarse arbeidskracht beperken.

Hoe dat er in de praktijk uitziet: in Capelle aan den IJssel zijn in ruim een jaar tijd 161 sociale huurwoningen gebouwd en deze week feestelijk opgeleverd, meldt CKZ Vandaag. De woningen zijn grotendeels gebouwd met kant-en-klare elementen uit een gerobotiseerde fabriek. Alle 161 woningen zijn al verhuurd en het merendeel van de bewoners is al ingetrokken. Voor innovatie en opschaling van industriële bouw is €90 miljoen gereserveerd. Daarnaast komt er €156 miljoen om de uitvoeringskracht van gemeenten en provincies te versterken.

Nu komt iets meer dan 20 procent van de nieuwbouw uit de fabriek. In 2030 moet dat de helft zijn.

Wat het voor de prijs kan doen

Een prefab woning is in de meeste gevallen 15 tot 30 procent goedkoper dan een vergelijkbare traditioneel gebouwde woning. Dat komt doordat fabrieksproductie efficiënter is, materiaalverspilling tot een minimum wordt beperkt en de kwaliteit constant blijft. De kortere bouwtijd betekent ook lagere financieringslasten en minder risico op prijsstijgingen van materialen en arbeid.

Maar een kanttekening is op zijn plaats. Fabrieksmatige productie kan ontwerptijd, arbeid op locatie en faalkosten verlagen, maar creëert geen bouwgrond, netaansluiting of vergunning, constateerde De Belegger. Grondkosten en aansluitkosten maken een flink deel uit van de totale woningprijs en worden door prefab niet lager. Prefab helpt het woningtekort dus alleen wanneer extra productie niet elders in het proces blijft wachten.

Prefab verlaagt de bouwkosten met 15 tot 30 procent. Grondkosten en netaansluiting worden er niet goedkoper van.

384.000 woningen tekort

Nederland telde begin 2026 een tekort van 384.000 woningen, ofwel 4,6 procent van de voorraad. Het tekort daalt licht: in 2024 was het 4,9 procent, in 2025 4,8 procent. Het kabinet wil de woningbouwproductie structureel verhogen naar 100.000 woningen per jaar. Bij dat tempo wordt rond 2034 een evenwichtig niveau verwacht, aldus het ministerie van Volkshuisvesting.

Er komen tien nieuwe grootschalige bouwlocaties bij, waarvan de eerste vijf eind augustus zijn aangewezen. Met de Landelijke Aanpak Beter Benutten wil het kabinet jaarlijks 10.000 tot 20.000 extra woningen realiseren, onder meer door optoppen, woningsplitsing en woningdelen. In totaal trekt het kabinet tot 2035 €7 miljard uit voor de bouw van betaalbare woningen.

Wat je nu kunt doen

• Sta je ingeschreven voor nieuwbouw? Vraag bij je gemeente of het project gebruikmaakt van een goedgekeurd woonconcept. Dat kan het vergunningstraject aanzienlijk verkorten.
• Vergelijk bij een koopbeslissing niet alleen de vierkante-meterprijs, maar kijk ook naar de bouwmethode. Prefab kan goedkoper zijn, maar check of de prijs inclusief fundering, keuken en aansluitingen is.
• Houd er rekening mee dat de doorlooptijd van nieuwbouwprojecten de komende jaren kan dalen. Een kortere wachttijd beperkt ook het risico dat je hypotheekrente tussentijds verandert.
• Wil je zelf bouwen? Informeer je via het Rijksprogramma Innovatie en Opschaling Woningbouw over fabrieksmatige bouwconcepten die in aanmerking komen voor versnelde procedures.

Bronnen: Rijksoverheid · NOS · Aannemer · Gemeente.nu · Volkshuisvesting Nederland · Wonen360 · De Belegger · CKZ Vandaag

NEW YORK (ANP) - Medeoprichter van Microsoft Bill Gates gelooft dat kunstmatige intelligentie tot de dood van een miljard mensen kan leiden. Dat zei hij vrijdag in een interview met nieuwszender NBC. Gates vindt dat de Verenigde Staten met wetgeving moeten komen om de risico's van de technologie te verminderen.

Recentelijk hebben meerdere AI-onderzoekers gewaarschuwd dat er een kans is dat AI de mensheid uitroeit. Op de vraag of hij dit ook gelooft, antwoordde Gates: "AI is zeker krachtig genoeg om gebeurtenissen te veroorzaken die een miljard doden veroorzaken. Er is nog nooit een wapen geweest dat zo krachtig is als de combinatie van mensen met slechte bedoelingen die de nieuwste AI-hulpmiddelen gebruiken."

De zorgen over de vermeende gevaren van AI nemen de laatste tijd toe. Anthropic-topman Dario Amodei riep AI-bedrijven eerder deze maand op om het tempo van de ontwikkeling van AI-modellen te vertragen. Hij kreeg bijval van OpenAI-topman Sam Altman en SpaceX-baas Elon Musk.

WASHINGTON (ANP) - Het staatsbezoek van de Chinese president Xi Jinping aan de Verenigde Staten is voorbij. Volgens de Amerikaanse president Donald Trump was het driedaagse bezoek "een ontmoeting van vriendschap, kracht en succes - zowel voor China als de Verenigde Staten". Hij meldt dat ze elkaar spoedig weer zullen zien.

Trump schreef in zijn bericht op Truth Social ook dat de Chinese leider en zijn vrouw inmiddels weer onderweg zijn naar China. Als laatste acte de présence bezochten ze vrijdag de National Archives in Washington. Daar kreeg het communistische staatshoofd onder meer de Declaration of Independence, het 18de-eeuwse oprichtingsdocument van de Verenigde Staten, te zien.

Trump bevestigde eveneens dat de twee elkaar opnieuw treffen in november, tijdens een top van het economisch verbond APEC, in het Chinese Shenzhen. Ook zullen ze elkaar zien tijdens een bijeenkomst van de G20 in Miami, in december. Ook Xi zei na afloop van zijn bezoek Trump snel weer te zullen zien.

The Prix Goncourt has removed a book from its longlist. This is another in a growing series of AI-writing scandals. Earlier in the year it was the Commonwealth Short Story Prize. The Ai detection service used is Pangram, notable for its extremely low false positive rate. These awards required that the artistic works be human-generated. But what about outside the prize arenas? Should authors use Ai in their writing? Some have embraced it.

Lekker catchy nummer, paar gerenommeerde gastzangers, kek clipje… wat wil een mens nog meer op de vrijdag avond, dan Joseph, van Falling in Reverse?

Bij een aanrijding in Berkel en Rodenrijs is vrijdagavond een bestelbus door het hekwerk van een bedrijfspand gereden. Dat gebeurde na een botsing met een personenauto op de kruising van de Zeppelinstraat. Beide voertuigen raakten zwaar beschadigd.

De gemeente Dordrecht gaat voor de jaarwisseling geen vergunningen voor een vuurwerkshow verlenen aan clubs en verenigingen. Dat zegt burgemeester Nanning Mol in de uitzending van 'In Gesprek Met' op TV Rijnmond. Met die beslissing sluit Dordt zich aan bij tal van andere gemeenten in de regio.

Sadler’s Wells, London
A trio of dances taking influence from Stravinsky, tap and William Blake’s poetry combine with powerful performances exuding showmanship

Damn, there was some amazing dance going on in mid-20th century New York. You had George Balanchine forging a new American ballet, all slick speed and striking angles, and in Harlem there was the Cotton Club and the Savoy, swinging dancefloors and entertainers like the legendary Nicholas Brothers, of whom Balanchine was a fan. There’s a taste of this world in English National Ballet’s latest triple bill, with a distinctly American flavour and a focus on propulsive rhythm.

Balanchine’s Symphony in Three Movements was made in 1972 as a memorial to Stravinsky, although the eponymous music is from 1945. Balanchine and Stravinsky were an absolute dream team, architects of multiple masterpieces. Here the clarity of line and stripped-back nature of the design crossed with the depth and crunchy complexity of Stravinsky’s score is a perfect balance. There’s palpable power from the pit, with the English National Ballet Philharmonic relishing the music under the baton of Maria Seletskaja.

Continue reading...

Friday’s verdict against Manchester City will change everything we understood about their Premier League title triumphs

Welcome, then, to the age of asterisk. Whatever punishment Manchester City and their sovereign wealth fund owners receive at the end of this process, the fact remains, everything is tainted now.

Overturn the tables, scatter the gold coins. Throw your medals in the bin. You cheated to win them. Whatever that thing was, it’s done. Stolen glory, stolen income, stolen joy. Every chant, every “we won the lot”, every awkward documentary scene about the deep, throbbing heart of this empire of love. It all looks odd, sinister, cold, sloppy, but also, and this is always the best response, utterly absurd.

Continue reading...

Group calls for proper enforcement of ICC rulings as Trump administration widens attacks on court

The US threat to impose sanctions on the international criminal court (ICC) as an institution, not just its leading judges, could fundamentally disrupt its operation and needed to be resisted, a coalition of countries to defend international law heard at the United Nations on Friday.

Ronald Lamola, South Africa’s foreign minister, issued the warning at an event during the UN general assembly called to protect the system of international law from a growing array of threats, including open flouting of its tenets and rulings by Israel.

Continue reading...

Social

Woke is NIET dood. De Amerikaanse autoriteit voor renpaardenregistratie heeft fokker Scott Herbertson gedwongen tot het veranderen van de naam 'Austrian Painter' omdat dit te veel zou lijken op een verwijzing naar HITLER. Dit terwijl de eigenaar verklaart dat de Oostenrijkse schilder in kwestie gewoon Gustav Klimt moet zijn. Austrian Painter won afgelopen week bij zijn debuut in Indianapolis glansrijk met een tijd van 40.45 maar die overwinning werd overschaduwd door alle walgelijke nazi-beschuldigingen. Tot overmaat van ramp moet uit dezelfde stal ook het paard New Order van naam veranderen, een naam die natuurlijk niet verwijst naar de nazistische Neuordnung maar naar de Britse postpunkband die voortkwam uit Joy Division (een naam die dan weer WEL verwijst naar WOII). Hoe dan ook hebben de cancelaars gewonnen dus is het tijd voor een POLL.

Today's links

• Itch scratching: Love, care and self-actualization.
• Hey look at this: Delights to delectate.
• Object permanence: 9/11 x Viridians; Announcing Wikipedia; Infinite Copyright Mickey; Floppy shoulder bag; Wells Fargo's long sleaze; Corbyn wins Labour leadership; Interop v internet monopolies; The billionaires aren't all right; RIP Mike Ford; PGP didn't cause 9/11; Flying Solaris boxen; "Unelectable" Corbyn; Algorithmic management; "That's Disgusting!"; Tax breaks for repair expenses; Climate denial driven by economic doctrine; "100% pumpkin" has no pumpkin; Copyright reversion; "Scholars of the Night"; Apple threatens EU.
• Upcoming appearances: Edmonton, Boston, Brighton, South Bend, Hudson, Calgary, Winnipeg, Paris, OVancouver, Victoria, Ottawa, Kilkenny, Montreal.
• Recent appearances: Where I've been.
• Latest books: You keep readin' em, I'll keep writin' 'em.
• Upcoming books: Like I said, I'll keep writin' 'em.
• Colophon: All the rest.

---

Itch scratching (permalink)

The thing about a maddening itch between your shoulder blades is that it feels so good when you scratch it, and even better when someone else scratches it, and better still if that person hits the right spot because they love you and they've performed this service for you so often and attentively that they know exactly which spot to hit.

One of the recurring themes in Spider Robinson's short stories and novels is people who have close relationships suddenly realizing that they have acquired a psychic link. He comes up with endless ways to play this scene out, but my favorite – I think it's from one of the later Callahan's tales – is when one person scratches another between the shoulder blades and hits the exact right spot the very first time and they realize that they are now psychically linked.

Maybe it's a primate grooming reflex, maybe it's receiving a gesture of love and care. Maybe those are the same things. Having your itch scratched for you feels good. Not just primates, either: cats with the flexibility to reach any part of their body with all four of their paws and their teeth will nevertheless purr like a badly-tuned diesel outboard when you scratch them just right.

Since the outset, the free software/open source movement has extolled the virtues of technological self-determination, which is to say, deciding how the computers and programs you use will work. This is often described as "scratching your own itch."

There is no question that scratching your own itch in this way is hugely and enduringly satisfying. On my laptop, I have a variety of little scripts and keybindings and bits of automation that I've built up over the years and every time I use one of these, I get a little hit of brain-reward.

The latest: I got tired of alt-tabbing to get to the file explorer, only to discover that I'd closed all my file explorer windows, meaning I had to mouse over to the dock and open a new one. So I bound "Windows key + E" to opening a file explorer after reading a message board post from an ex-Windows user who'd done this (apparently this is a standard Windows keybinding).

I've fully retrained my fingers to type Win-E rather than alt-tab when I want to get at a graphic filesystem and every time I do, I get the tiniest little pleasant jolt of pleasure. I scratched my own itch!

But even better than this are the little scripts that other people have thoughtfully made for me over the years. The oldest of these still in daily use is more than 20 years old, a bash script called "boingpic" (from when I was still working on Boing Boing). When I run this, it iterates interactively through the files ending with "jpg" or "png" on my Desktop, tells me how wide they are, prompts me to resize them or hit enter to keep their size, and then rsyncs them to the directory on my server that corresponds to https://craphound.com/images/.

If this strikes you as weird and inefficient, that's fine, because it does exactly what I need it to do, and I've memorized it through long, long use. And on top of all that, boingpic.sh was written for me by my dear old friend Seth David Schoen, when we were one of a bare handful of EFF staffers in the early oughts and hung out together all the time. Every time I use it, it reminds me of Seth, and good times, and I feel good.

For centuries, people have fought for the right to self-determination. The disability rights rallying cry "Nothing about us without us" actually dates back to 16th century Poland (it was the basis for the formation of a Polish parliament that wrestled power away from the king). Any parent who has avoided a conflict over getting dressed for school by swapping out "Put your clothes on right now!" for "Which would you rather put on first, your shirt or your socks?" knows how far even a little autonomy can go.

I worked as a computer programmer from the age of 17 to about the age of 29, and while I was never a spectacular coder, I was good at it, and I wrote a lot of code for myself that precisely met my needs, which always felt great. It's one of the reasons I have always championed low-code/no-code software development tools, from Logo to Hypercard to Visual Basic to Scratch. Sure, the code that you write with one of these tools might not be "efficient" from a CPU/memory-usage perspective, but the point is that you write it. You don't have to convince someone else to do you a favor, you don't have to part with any of your money – and you don't have to try to get someone else to understand what you mean when you describe the tool you want.

When I worked at Bakka Books (the world's oldest surviving science fiction bookstore, in Toronto), we organized our inventory using an extremely idiosyncratic Filemaker database created by the store's then-owner, John Rose. John lovingly tended that Filemaker app, tweaking it on his days off to make it better suited to the very specific needs of a science fiction bookstore with a giant used section and an important sideline in keeping collectors' want-lists that we consulted whenever we bought more used books. There are doubtless "better" bookstore stock-keeping systems (including the one that Bakka uses now, in its latest incarnation as BakkaPhoenix), but that Filemaker app was John, a presence in the store even when he wasn't there, embodying his management and literary and retail theories on a MacSE by the cash-register.

I am highly skeptical of vibe-coding in the sense of writing code for other people to use. But when I meet people who've vibe-coded their own apps for their own use to scratch their own itches, I completely get their excitement. They've scratched their own itch! I know exactly how good that feels:

https://pluralistic.net/2026/07/03/rod-logic/#making-flippy-floppy

Sure, I have concerns about this kind of personal vibe-coding, the biggest of which is that if you aren't a skilled programmer, you might end up vibe-coding an app that you can't adequately assess, so it might contain subtle defects that make you vulnerable to security risks and/or expose your sensitive information to the public internet. But there are domains and use-cases where I am totally willing to accept that vibe-coding can enhance someone else's life in important ways, by letting them build exactly the widget they need, and if (when) it breaks, they can just do it again.

This is even better than "nothing about us without us." It's not just insisting that someone else "gather your requirements" before producing a tool that you will rely on and require. This is you, producing that tool for yourself, which means that you might be able to embed features and affordances into it that you can't even articulate, let alone defend. There something undeniably great about scratching your own itch and hitting exactly the right spot.

Even so: the experience of working through your requirements with someone else is clarifying and disciplining, because while you are the domain expert on your needs, that doesn't mean you're the domain expert on how to address those needs. You have the worm's eye view of your life and your needs, while an expert can have the bird's eye view that comes from working with many people, exposing them to many ways of solving problems, including ones you've never thought of.

Darren, the contractor who put in our new kitchen a couple years ago, had ideas for cabinet- and appliance-placement that had been refined by seeing, demolishing, building and revising orders of magnitude more kitchens than we had ever cooked in, and moreover, he clearly cared about our long-term happiness in our own home. The kitchen is great.

That care makes all the difference. Skilled craftspeople can bring expertise to the project that doesn't trump your needs, but can be co-equal with them. Scratching your own itch is great, having your itch scratched by someone who cares enough about you to know where your itch is, that's even better. But best of all is for that person to find the itch you didn't even know you had and scratch that, too. That's something that relies on the human connection that the best free/open source projects embody, the co-creation and community between developers and users.

If you've ever filed a bug against a free/open project and worked through the testing the devs need to squash it, you've experienced that co-creation. The devs want their code to work, because they care about the users, and you as a user can help other users and the devs by reciprocating that care through conscientious, patient, attentive bug reporting and testing.

I think that so much of the outrage about slop code – floods of garbagey pull requests and bug reports – is the result of the collapse of this dynamic. Slop's not merely annoying or time-wasting: it's a betrayal of the love and care that goes into writing and maintaining code for others. Your cat can scratch any part of its body, but it wants you to scratch it, and it will hiss at you and even claw at you if you scratch it the wrong way.

(Image: Orrling and Tomer S, CC BY-SA 3.0, modified)

---

Hey look at this (permalink)

• AI Workers' Inquiry 2026 https://techworkersinquiry.org/ai/

• Machine god metaphors eat your brain https://www.programmablemutter.com/p/machine-god-metaphors-eat-your-brain

• Here’s What California Is Learning From Solar Panels Built Over Irrigation Canals https://www.kqed.org/science/2002033/heres-what-california-is-learning-from-solar-panels-built-over-irrigation-canals

• Toads in a Pond https://longforgottenhauntedmansion.blogspot.com/2026/09/toads-in-pond.html

• The Federal Agency That’s Supposed to Protect Consumers Just Made Another Business-Friendly Move https://www.propublica.org/article/cfpb-consumer-complaint-database

---

Object permanence (permalink)

#25yrsago Surveillance is a security failure https://www.theguardian.com/technology/2001/sep/27/onlinesupplement.afghanistan

#25yrsago 9/11: the Viridian take https://web.archive.org/web/20011023095346/http://www.viridiandesign.org/notes/251-300/00272_au_revoir_belle_epoque.html

#25yrsago Announcing Wikipedia https://web.archive.org/web/20060517024408/http://www.kuro5hin.org/?op=displaystory;sid=2001/9/24/43858/2479

#25yrsago Phil Zimmerman says PGP can't be blamed for 9/11 https://slashdot.org/story/01/09/24/162236/philip-zimmermann-and-guilt-over-pgp

#20yrsago RIP, sf writer John M Ford https://memex.craphound.com/2006/09/25/rip-sf-writer-john-m-ford/

#20yrsago Gigantic Little Nemo book does justice to the loveliest comic ever https://memex.craphound.com/2006/09/25/gigantic-little-nemo-book-does-justice-to-the-loveliest-comic-ever/

#20yrsago 747s as flying Unix hosts: SCADA in the sky https://memex.craphound.com/2011/09/25/747s-as-flying-unix-hosts-scada-in-the-sky/

#20yrsago Mickey Infinite Copyright mashup https://web.archive.org/web/20061027141551/http://python.net/~goodger/projects/graphics/#mickey-s-infinite-copyright#mickey-s-infinite-copyright

#20yrsago HOWTO make a shoulder-bag out of floppies https://web.archive.org/web/20061025050629/http://www.instructables.com/id/E86165FIENERIE2PV6/?ALLSTEPS

#15yrsago TOSAmend: turn all online “I Agree” buttons into negotiations https://web.archive.org/web/20110925122850/https://www.owocki.com/2011/09/02/tosamend-the-easy-way-to-modify-web-service-terms-of-service-agreements/

#15yrsago That’s Disgusting! Awesomely gross picture book https://memex.craphound.com/2011/09/26/thats-disgusting-awesomely-gross-picture-book/

#10yrsago Swedish law will let you write off the money you spend fixing things rather than trashing them https://www.theguardian.com/world/2016/sep/19/waste-not-want-not-sweden-tax-breaks-repairs

#10yrsago Climate denial’s internal contradictions spring from a need to defend economic doctrine https://link.springer.com/article/10.1007/s11229-016-1198-6

#10yrsago There’s no pumpkin in “100% canned pumpkin” https://web.archive.org/web/20160927152542/https://www.foodandwine.com/news/i-just-found-out-canned-pumpkin-isnt-pumpkin-all-and-my-whole-life-basically-lie

#10yrsago The AI Now Report: social/economic implications of near-future AI https://web.archive.org/web/20161014142521/https://artificialintelligencenow.com/media/documents/AINowSummaryReport_3.pdf

#10yrsago Whistleblowing Wells Fargo loan officer describes years of fraudulent, criminal culture in the bank https://truthout.org/articles/wells-fargo-whistleblower-they-are-all-riding-the-stagecoach-to-hell/

#10yrsago Writer in 29th year of solitary confinement barred from reading his own book https://solitarywatch.com/2016/09/20/writer-in-solitary-confinement-is-barred-from-reading-his-own-book/

#10yrsago Despite sabotage and dirty tricks, Jeremy Corbyn wins Labour leadership race in unprecedented landslide https://www.bbc.co.uk/news/uk-politics-37461219

#10yrsago Who decided Corbyn was “unelectable”? https://www.youtube.com/watch?v=8os-nKuoM3o

#10yrsago The democratization of censorship: when anyone can kill as site as effectively as a government can https://krebsonsecurity.com/2016/09/the-democratization-of-censorship/

#5yrsago Demonopolizing the internet with interoperability https://pluralistic.net/2021/09/24/comcom-acm/#cacm

#5yrsago Copyright reversion, bargaining power, and authors’ rights https://pluralistic.net/2021/09/26/take-it-back/

#5yrsago The Scholars of Night https://pluralistic.net/2021/09/26/mike-ford-rides-again/#cold-war-zeitgeist

#1yrago Apple threatens to stop selling iPhones in the EU https://pluralistic.net/2025/09/26/empty-threats/#500-million-affluent-consumers

#1yrago The billionaires aren't OK https://pluralistic.net/2025/09/24/robo-lickspittle/#just-not-evenly-distributed

#1yrago Rage Against the (Algorithmic Management) Machine https://pluralistic.net/2025/09/25/roboboss/#counterapps

---

Upcoming appearances (permalink)

• Edmonton: Elbows Up (Edmonton Public Library), Sep 28
  https://www.epl.ca/blogs/post/elbows-up-with-cory-doctorow/

• Boston: The Post-American Internet: Possibilities for a new internet created by an American Hermit Kingdom (MIT Media Lab), Sep 30
  https://www.media.mit.edu/events/the-post-american-internet-possibilities-for-a-new-internet-created-by-an-american-hermit-kingdom/

• Boston: Rethinking Our Relationship with AI, Sep 30 (Emtech)
  https://event.technologyreview.com/emtech-future-2026/detailed-agenda

• Boston: The Paradox of Enshittification and Reverse Centaurs (Harvard Berkman Klein), Sep 30
  https://cyber.harvard.edu/events/running-harder-falling-faster-paradox-enshittification-and-reverse-centaurs

• Brighton: Digital Sovereignty and the Post-American Internet (Green Party Conference), Oct 3
  https://www.openrightsgroup.org/events/digital-sovereignty-and-the-post-american-internet/

• South Bend: An Evening With Cory Doctorow (Notre Dame), Oct 6
  https://franco.nd.edu/events/2026/10/06/an-evening-with-cory-doctorow/

• Hudson, OH: Hudson Library, Oct 7
  https://engagedpatrons.org/EventsExtended.cfm?SiteID=3850&EventID=596952&PK=

• Calgary: Wordfest, Oct 8
  https://wordfest.com/2026/show/wordfest-presents-cory-doctorow-2026/

• Winnipeg: McNally Robinson, Oct 9
  https://www.mcnallyrobinson.com/event-18991/An-Evening-with-Cory-Doctorow

• Paris: Slow Tech Summit, Oct 15
  https://slowtechsummit.com/

• Vancouver: Read, Resist, Repair, Rejoice (Vancouver Writers Festival), Oct 19
  https://writersfest.bc.ca/festival-event-2026/01

• Victoria: Munro's Books, Oct 20
  https://www.munrobooks.com/events/6113620261020

• Vancouver: Life After AI (Vancouver Writers Festival), Oct 22
  https://writersfest.bc.ca/festival-event-2026/46

• Ottawa: Life After AI (Ottawa Writers Festival), Oct 24
  https://writersfestival.org/event/life-after-ai

• Kilkenny (Kilkenomics), Nov 6-8
  https://kilkenomics.com/

• Vancouver: Enshittification (Sid Williams Theatre Society), Nov 10
  https://www.sidwilliamstheatre.com/events/cory-doctorow-talks-enshittification/

• Vancouver: BC Policy Solutions Gala, Nov 12
  https://bcpolicy.ca/gala/

• Montreal: World Science Fiction Convention, Sep 2-6
  https://montreal2027.ca/en

---

Recent appearances (permalink)

• Could Tech Bosses Destroy Life As We Know It? (Politics JOE)
  https://www.youtube.com/watch?v=PL4VktU0SgY

• Are 'AI Apocalypse' Warnings Just Marketing? (What's Left)
  https://www.youtube.com/watch?v=IXd9HwIE5bo

• The Real AI Threat Isn’t What You’ve Been Told (The Tea with Myriam François)
  https://www.youtube.com/watch?v=Vc8It00fRsA

• Fascists may come after the AI bubble bursts (You&AI)
  https://www.youtube.com/watch?v=J2WN64aQeYQ

• What Would a Normal Person Do (Trashfuture)
  https://www.patreon.com/trashfuture/posts/what-would-do-169247456

---

Latest books (permalink)

• "The Reverse-Centaur's Guide to AI," a short book about being a better AI critic, Farrar, Straus and Giroux, June 2026
  https://us.macmillan.com/books/9780374621568/thereversecentaursguidetolifeafterai/

• "Canny Valley": A limited edition collection of the collages I create for Pluralistic, self-published, September 2025 https://pluralistic.net/2025/09/04/illustrious/#chairman-bruce

• "Enshittification: Why Everything Suddenly Got Worse and What to Do About It," Farrar, Straus, Giroux, October 7 2025
  https://us.macmillan.com/books/9780374619329/enshittification/

• "Picks and Shovels": a sequel to "Red Team Blues," about the heroic era of the PC, Tor Books (US), Head of Zeus (UK), February 2025 (https://us.macmillan.com/books/9781250865908/picksandshovels).

• "The Bezzle": a sequel to "Red Team Blues," about prison-tech and other grifts, Tor Books (US), Head of Zeus (UK), February 2024 (thebezzle.org).

• "The Lost Cause:" a solarpunk novel of hope in the climate emergency, Tor Books (US), Head of Zeus (UK), November 2023 (http://lost-cause.org).

• "The Internet Con": A nonfiction book about interoperability and Big Tech (Verso) September 2023 (http://seizethemeansofcomputation.org). Signed copies at Book Soup (https://www.booksoup.com/book/9781804291245).

• "Red Team Blues": "A grabby, compulsive thriller that will leave you knowing more about how the world works than you did before." Tor Books http://redteamblues.com.

• "Chokepoint Capitalism: How to Beat Big Tech, Tame Big Content, and Get Artists Paid, with Rebecca Giblin", on how to unrig the markets for creative labor, Beacon Press/Scribe 2022 https://chokepointcapitalism.com

---

Upcoming books (permalink)

• "The Post-American Internet," a geopolitical sequel of sorts to Enshittification, Farrar, Straus and Giroux, 2027

• "Unauthorized Bread": a middle-grades graphic novel adapted from my novella about refugees, toasters and DRM, FirstSecond, April 20, 2027

• "Enshittification, Why Everything Suddenly Got Worse and What to Do About It" (the graphic novel), Firstsecond, 2027

• "The Memex Method," Farrar, Straus, Giroux, 2027

---

Colophon (permalink)

Today's top sources:

Currently writing:

• “Once Is Enemy Action,” a science fiction novel about the origins of modern technofascism. Today's words: 511 (19222 total).

• "The Post-American Internet," a sequel to "Enshittification," about the better world the rest of us get to have now that Trump has torched America. Fourth draft completed. Submitted to editor.

• A Little Brother short story about DIY insulin PLANNING

---

This work – excluding any serialized fiction – is licensed under a Creative Commons Attribution 4.0 license. That means you can use it any way you like, including commercially, provided that you attribute it to me, Cory Doctorow, and include a link to pluralistic.net.

https://creativecommons.org/licenses/by/4.0/

Quotations and images are not included in this license; they are included either under a limitation or exception to copyright, or on the basis of a separate license. Please exercise caution.

---

How to get Pluralistic:

Blog (no ads, tracking, or data-collection):

Pluralistic.net

Newsletter (no ads, tracking, or data-collection):

https://pluralistic.net/plura-list

Mastodon (no ads, tracking, or data-collection):

https://mamot.fr/@pluralistic

Bluesky (no ads, possible tracking and data-collection):

https://bsky.app/profile/doctorow.pluralistic.net

Medium (no ads, paywalled):

https://doctorow.medium.com/

Tumblr (mass-scale, unrestricted, third-party surveillance and advertising):

https://mostlysignssomeportents.tumblr.com/tagged/pluralistic

"When life gives you SARS, you make sarsaparilla" -Joey "Accordion Guy" DeVilla

READ CAREFULLY: By reading this, you agree, on behalf of your employer, to release me from all obligations and waivers arising from any and all NON-NEGOTIATED agreements, licenses, terms-of-service, shrinkwrap, clickwrap, browsewrap, confidentiality, non-disclosure, non-compete and acceptable use policies ("BOGUS AGREEMENTS") that I have entered into with your employer, its partners, licensors, agents and assigns, in perpetuity, without prejudice to my ongoing rights and privileges. You further represent that you have the authority to release me from any BOGUS AGREEMENTS on behalf of your employer.

ISSN: 3066-764X

Built throughout the 1960s and ’70s, the Aylesbury Estate is an enormous public housing complex in South East London that at its peak, boasted 11,000 residents. Like other social projects of this kind, Aylesbury has struggled with violence and vandalism throughout its run, and in 2005, local officials decided to demolish the estate and rebuild in phases rather than rehabilitate the existing structures.

Living and working in South East London for nearly four decades, Harriet Mena Hill was familiar with the area, but it wasn’t until 2018 when she was commissioned to teach a summer program for young residents that she really engaged with the project. She made large portraits from wool, blending dyed roving to delineate windows, shape bowed electrical wires, and even mimic graffiti spray-painted on outdoor walls.

Forming the series Soft Concrete, the textile pieces cast a largely gray environment of stone and steel in soft fiber. The body of work, Hill says, was a “repositioning of how the estate is perceived. Historically, it has been widely portrayed in the media as violent and intimidating, as a place without hope.”

In contrast, Soft Concrete “presents the estate as a place of living and community. From a distance, the portraits look like photographs or realistic paintings, but on closer inspection, the material reveals itself to be wool, hand blended for subtle colour mixing used to depict small active details of domestic life,” the artist adds.

Hill is broadly interested in the ways that communities and the objects they interact with can become vessels for shared memories, so when the estate began to be razed in 2020, she started to collect fragments of concrete from the construction site. “It was a direct response to the situation of residents who were required to stay at home as the demolition of adjoining blocks, the homes of their former neighbours, continued throughout lockdown, in spite of wider restrictions,” she tells Colossal.

Before its destruction, several tenants had advocated for renovations rather than demolition, hoping to preserve the community and homes they’d built. In an interview with the BBC in 2023, long-time resident Aysen Dennis lamented being forced to leave the estate after 30 years. Local administrators found her new housing in central London, but it wasn’t the same. “The council gave me everything I asked for. It’s on a high floor. There’s lots of light. I can see the park,” Dennis said. “But it’s not my home.”

Intimate in scale, Hill’s paintings glimpse hallways and pockets of windows that are similarly sliced from their larger contexts, the ragged edges of concrete framing the largely domestic spaces. Part of the ongoing series titled The Aylesbury Fragments, the scenes capture the run-down infrastructure of buildings left standing during the phased reconstruction process.

Although regeneration began in 2013, it’s less than half complete, and Hill has completed more than 150 paintings to date. As demolition continues, she adds to her ever-changing collection of concrete remnants. “I live with the unpainted pieces for months, sometimes years, getting to know their shape before I begin working on them,” the artist says, noting that as long as there are buildings still under construction, she’ll continue painting these small tributes to the community once housed within their walls.

Hill has exhibitions slated for London and across the U.K. throughout 2027. Follow along on Instagram.

Do stories and artists like this matter to you? Become a Colossal Member today and support independent arts publishing for as little as $7 per month. The article On Concrete Remnants of London’s Aylesbury Estate, Harriet Mena Hill Preserves a Community appeared first on Colossal.

Now We Can Sing is the first single from Max Richter’s upcoming album, While the Flood Rages, which will be available wherever you stream your music on Oct 16.