Microsoft has announced NLWeb, an open protocol designed to democratize AI-powered search capabilities for websites and apps. Developed by Microsoft technical fellow Ramanathan V. Guha, who previously created RSS and Schema.org, NLWeb allows site owners to implement ChatGPT-style natural language search with minimal code. The protocol enables websites to process complex queries like "spicy and crunchy appetizers for Diwali" or "jackets warm enough for Quebec," requiring only an AI model, some code, and the site's own data. During his demonstration to news outlet The Verge, Guha showed how NLWeb remembers user preferences, such as dietary restrictions, for future interactions. "It's a protocol, and the protocol is a way of asking a natural-language question, and the answer comes back in structured form," explained Guha, who argues the approach is significantly cheaper than traditional search methods that require extensive web crawling and indexing. Microsoft is partnering with publishers and companies including TripAdvisor, Eventbrite, and Shopify to implement NLWeb, though Guha acknowledges the challenge of achieving widespread adoption in a web that historically tends toward centralization.

Read more of this story at Slashdot.

Windows Subsystem for Linux (WSL) is now open source, Microsoft said Monday. The tool, which allows developers to run Linux distributions directly in Windows, is available for download, modification, and contribution. "We want Windows to be a great dev box," said Pavan Davuluri, corporate VP at Microsoft. "Having great WSL performance and capabilities" allows developers "to live in the Windows-native experience and take advantage of all they need in Linux." First launched in 2016 with an emulated Linux kernel, WSL switched to using the actual Linux kernel in 2019 with WSL 2, improving compatibility. The system has since gained support for GPUs, graphical applications, and systemd. Microsoft significantly refactored core Windows components to make WSL a standalone system before open sourcing it.

Read more of this story at Slashdot.

An anonymous reader shares a report: Germany has dropped its long-held opposition to nuclear power, in the first concrete sign of rapprochement with France by Berlin's new government led by conservative Chancellor Friedrich Merz. Berlin has signalled to Paris it will no longer block French efforts to ensure nuclear power is treated on par with renewable energy in EU legislation, according to French and German officials. The move resolves a major dispute between the two countries that has delayed decisions on EU energy policy, including during the crisis that followed Russiaâ(TM)s full-scale invasion of Ukraine.

Read more of this story at Slashdot.

Miami-Dade County Public Schools, the nation's third-largest school district, is now deploying Google's Gemini chatbots to more than 105,000 high school students -- marking the largest U.S. school district AI deployment to date. This represents a dramatic reversal from just two years ago when the district blocked such tools over cheating and misinformation concerns. The initiative follows President Trump's recent executive order promoting AI integration "in all subject areas" from kindergarten through 12th grade. District officials spent months testing various chatbots for accuracy, privacy, and safety before selecting Google's platform.

Read more of this story at Slashdot.

New submitter optical_phiber writes: In March 2025, the New South Wales (NSW) Department of Education discovered that Microsoft Teams had begun collecting students' voice and facial biometric data without their prior knowledge. This occurred after Microsoft enabled a Teams feature called 'voice and face enrollment' by default, which creates biometric profiles to enhance meeting experiences and transcriptions via its CoPilot AI tool. The NSW department learned of the data collection a month after it began and promptly disabled the feature and deleted the data within 24 hours. However, the department did not disclose how many individuals were affected or whether they were notified. Despite Microsoft's policy of retaining data only while the user is enrolled and deleting it within 90 days of account deletion, privacy experts have raised serious concerns. Rys Farthing of Reset Tech Australia criticized the unnecessary collection of children's data, warning of the long-term risks and calling for stronger protections.

Read more of this story at Slashdot.

Abstract of a paper featured on NBER: This year marks the 40th anniversary of the NBER Macro Annual Conference, founded in 1986. This paper reviews the evolution of mainstream macroeconomics since then. It presents my views, informed by a survey of a number of researchers who have made important contributions to the field. I develop two main arguments. The first is that, starting from strikingly different positions, there has been substantial convergence, in terms of methodology, architecture, and main mechanisms. Methodology: Explicit micro foundations, explicit treatment of distortions, with, at the same time, an increased willingness to deviate from rational expectations, neoclassical utility and profit maximization. Architecture: The wide acceptance of nominal rigidities as an essential distortion, although with mixed feelings. Mechanisms: The wide nature of the shocks to both the demand and the supply side. The second is that this convergence has been, for the most part, good convergence, i.e. the creation of a generally accepted conceptual and analytical structure, a core to which additional distortions can be added, allowing for discussions and integration of new ideas and evidence, rather than fights about basic methodology. Not everything is right however, with too much emphasis on general equilibrium implications from the start, rather than, first, on partial equilibrium analysis of the phenomenon at hand.

Read more of this story at Slashdot.

"The Danish government plans to evaluate the prospect of beginning a nuclear power programme," reports the Telegraph, noting that this week Denmark lifted a nuclear power ban imposed 40 years ago. Unlike its neighbours in Sweden and Germany, Denmark has never had a civil nuclear power programme. It has only ever had three small research reactors, the last of which closed in 2001. Most of the renewed interest in nuclear seen around the world stems from the expected growth in electricity demand from AI data centres, but Denmark is different. The Danes are concerned about possible blackouts similar to the one that struck Iberia recently. Like Spain and Portugal, Denmark is heavily dependent on weather-based renewable energy which is not very compatible with the way power grids operate... ["The spinning turbines found in fossil-fuelled energy systems provide inertia and act as a shock absorber to stabilise the grid during sudden changes in supply or demand," explains a diagram in the article, while solar and wind energy provide no inertia.] The Danish government is worried about how it will continue to decarbonise its power grid if it closes all of its fossil fuel generators leaving minimal inertia. There are only three realistic routes to decarbonisation that maintain physical inertia on the grid: hydropower, geothermal energy and nuclear. Hydro and geothermal depend on geographic and geological features that not every country possesses. While renewable energy proponents argue that new types of inverters could provide synthetic inertia, trials have so far not been particularly successful and there are economic challenges that are difficult to resolve. Denmark is realising that in the absence of large-scale hydroelectric or geothermal energy, it may have little choice other than to re-visit nuclear power if it is to maintain a stable, low carbon electricity grid. Thanks to long-time Slashdot reader schwit1 for sharing the news.

Read more of this story at Slashdot.

"Despite many obstacles — and what you may read elsewhere — electric-vehicle sales continue to grow at a healthy pace in the U.S. market," Cox Automotive reported this week. "Roughly 7.5% of total new-vehicle sales in the first quarter were electric vehicles, an increase from 7% a year earlier." An anonymous reader shared this analysis from Autoweek: "Despite a cloud of uncertainty around future EV interest and potential economic headwinds hanging over the automotive industry, consumer demand for electric vehicles has remained stable," according to the J.D. Power 2025 US Electric Vehicle Consideration Study released yesterday. Specifically, the study showed that 24% of vehicle shoppers in the U.S. say they are "very likely" to consider purchasing an EV and 35% say they are "somewhat likely," both of which figures remain unchanged from a year ago... Globally the numbers are even more pro-EV. Electric car sales exceeded 17 million globally in 2024, reaching a sales share of more than 20%, according to a report issued this week by the International Energy Agency. "Just the additional 3.5 million electric cars sold in 2024 compared with the previous year is more than the total number of electric cars sold worldwide in 2020," the IEA said. China, which has mandated increases in EV sales, is the leader in getting electric vehicles on the road, with electric cars accounting for almost half of all Chinese car sales in 2024, the IEA said. "The over 11 million electric cars sold in China last year were more than global sales just 2 years earlier. As a result of continued strong growth, 1 in 10 cars on Chinese roads is now electric." Interesting figures on U.S. EV sales from the article: 2024 EV sales rose 7.3% from 2023, according to Cox Automotive data. "Last year American consumers purchased 1.3 million electric vehicles, which was a new record, according to data from KBB. "Sales have never stopped growing, and the percentage of new cars sold powered purely by gasoline continues to slip.

Read more of this story at Slashdot.

Kate inherited a system where Java code generates JavaScript (by good old fashioned string concatenation) and embeds it into an output template. The Java code was written by someone who didn't fully understand Java, but JavaScript was also a language they didn't understand, and the resulting unholy mess was buggy and difficult to maintain.

Why trying to debug the JavaScript, Kate had to dig through the generated code, which led to this little representative line:

dojo.byId('html;------sites------fileadmin------en------fileadmin------index.html;;12').setAttribute('isLocked','true');

The byId function is an alias to the browser's document.getElementById function. The ID on display here is clearly generated by the Java code, resulting in an absolutely cursed ID for an element in the page. The semicolons are field separators, which means you can parse the ID to get other information about it. I have no idea what the 12 means, but it clearly means something. Then there's that long kebab-looking string. It seems like maybe some sort of hierarchy information? But maybe not, because fileadmin appears twice? Why are there so many dashes? If I got an answer to that question, would I survive it? Would I be able to navigate the world if I understood the dark secret of those dashes? Or would I have to give myself over to our Dark Lords and dedicate my life to bringing about the end of all things?

Like all good representative lines, this one hints at darker, deeper evils in the codebase- the code that generates (or parses) this ID must be especially cursed.

The only element which needs to have its isLocked attribute set to true is the developer responsible for this: they must be locked away before they harm the rest of us.

[Advertisement] ProGet’s got you covered with security and access controls on your NuGet feeds. Learn more.

TechCrunch reports: The world's only net-positive fusion experiment has been steadily ramping up the amount of power it produces, TechCrunch has learned. In recent attempts, the team at the U.S. Department of Energy's National Ignition Facility (NIF) increased the yield of the experiment, first to 5.2 megajoules and then again to 8.6 megajoules, according to a source with knowledge of the experiment. The new results are significant improvements over the historic experiment in 2022, which was the first controlled fusion reaction to generate more energy than the it consumed. The 2022 shot generated 3.15 megajoules, a small bump over the 2.05 megajoules that the lasers delivered to the BB-sized fuel pellet. None of the shots to date have been effective enough to feed electrons back into the grid, let alone to offset the energy required to power the entire facility — the facility wasn't designed to do that. The first net-positive shot, for example, required 300 megajoules to power the laser system alone. But they are continued proof that controlled nuclear fusion is more than hypothetical.

Read more of this story at Slashdot.

OpenAI CEO and Sam Altman believe Artificial General Intelligence could arrive within the next few years. But the speculations of some technologists "are getting ahead of reality," writes the New York Times, adding that many scientists "say no one will reach AGI without a new idea — something beyond the powerful neural networks that merely find patterns in data. That new idea could arrive tomorrow. But even then, the industry would need years to develop it." "The technology we're building today is not sufficient to get there," said Nick Frosst, a founder of the AI startup Cohere who previously worked as a researcher at Google and studied under the most revered AI researcher of the last 50 years. "What we are building now are things that take in words and predict the next most likely word, or they take in pixels and predict the next most likely pixel. That's very different from what you and I do." In a recent survey of the Association for the Advancement of Artificial Intelligence, a 40-year-old academic society that includes some of the most respected researchers in the field, more than three-quarters of respondents said the methods used to build today's technology were unlikely to lead to AGI. Opinions differ in part because scientists cannot even agree on a way of defining human intelligence, arguing endlessly over the merits and flaws of IQ tests and other benchmarks. Comparing our own brains to machines is even more subjective. This means that identifying AGI is essentially a matter of opinion.... And scientists have no hard evidence that today's technologies are capable of performing even some of the simpler things the brain can do, like recognizing irony or feeling empathy. Claims of AGI's imminent arrival are based on statistical extrapolations — and wishful thinking. According to various benchmark tests, today's technologies are improving at a consistent rate in some notable areas, like math and computer programming. But these tests describe only a small part of what people can do. Humans know how to deal with a chaotic and constantly changing world. Machines struggle to master the unexpected — the challenges, small and large, that do not look like what has happened in the past. Humans can dream up ideas that the world has never seen. Machines typically repeat or enhance what they have seen before. That is why Frosst and other sceptics say pushing machines to human-level intelligence will require at least one big idea that the world's technologists have not yet dreamed up. There is no way of knowing how long that will take. "A system that's better than humans in one way will not necessarily be better in other ways," Harvard University cognitive scientist Steven Pinker said. "There's just no such thing as an automatic, omniscient, omnipotent solver of every problem, including ones we haven't even thought of yet. There's a temptation to engage in a kind of magical thinking. But these systems are not miracles. They are very impressive gadgets." While Google's AlphaGo could be humans in a game with "a small, limited set of rules," the article points out that tthe real world "is bounded only by the laws of physics. Modelling the entirety of the real world is well beyond today's machines, so how can anyone be sure that AGI — let alone superintelligence — is just around the corner?" And they offer this alternative perspective from Matteo Pasquinelli, a professor of the philosophy of science at Ca' Foscari University in Venice, Italy. "AI needs us: living beings, producing constantly, feeding the machine. It needs the originality of our ideas and our lives."

Read more of this story at Slashdot.

An anonymous reader shared this report from Kotaku: One of the most striking things about Bungie's Marathon is its presentation. The sci-fi extraction shooter combines bleak settings with bright colors in a way that makes it feel a bit like a sneaker promo meets Ghost in the Shell, or as designer Jeremy Skoog put it, "Y2K Cyberpunk mixed with Acid Graphic Design Posters." But it now looks like at least a few of the visual design elements that appeared in the recent alpha test were lifted from eight-year old work by an outside artist. "The Marathon alpha released recently and its environments are covered with assets lifted from poster designs I made in 2017," Bluesky user antire.alâ posted on Thursday. She shared two images showing elements of her work and where they appeared in Marathon's gameplay, including a rotated version of her own logo. A poster full of small repeating icon patterns also seems to be all but recreated in Marathon's press kit ARG and website... Bungie has responded and blamed the incident on a former employee. The studio says it's reaching out to the artist in question and conducting a full review of its in-game assets for Marathon ["and implementing stricter checks to document all artist contributions."] "We immediately investigated a concern regarding unauthorized use of artist decals in Marathon and confirmed that a former Bungie artist included these in a texture sheet that was ultimately used in-game," the studio posted on X. "As a matter of policy, we do not use the work of artists without their permission..." their X post emphasizes. "We value the creativity and dedication of all artists who contribute to our games, and we are committed to doing right by them. Thank you for bringing this to our attention."

Read more of this story at Slashdot.

The BBC visits "the strange, stubborn world of obsolete Windows machines." Even if you're a diehard Apple user, you're probably interacting with Windows systems on a regular basis. When you're pulling cash out, for example, chances are you're using a computer that's downright geriatric by technology standards. (Microsoft declined to comment for this article.) "Many ATMs still operate on legacy Windows systems, including Windows XP and even Windows NT," which launched in 1993, says Elvis Montiero, an ATM field technician based in Newark, New Jersey in the US. "The challenge with upgrading these machines lies in the high costs associated with hardware compatibility, regulatory compliance and the need to rewrite proprietary ATM software," he says. Microsoft ended official support for Windows XP in 2014, but Montiero says many ATMs still rely on these primordial systems thanks to their reliability, stability and integration with banking infrastructure. And a job listing for an IT systems administrator for Germany's railway service "were expected to have expertise with Windows 3.11 and MS-DOS — systems released 32 and 44 years ago, respectively. In certain parts of Germany, commuting depends on operating systems that are older than many passengers." It's not just German transit, either. The trains in San Francisco's Muni Metro light railway, for example, won't start up in the morning until someone sticks a floppy disk into the computer that loads DOS software on the railway's Automatic Train Control System (ATCS). Last year, the San Francisco Municipal Transit Authority (SFMTA) announced its plans to retire this system over the coming decade, but today the floppy disks live on. Apple is "really aggressive about deprecating old products," M. Scott Ford, a software developer who specialises in updating legacy systems, tells the BBC. "But Microsoft took the approach of letting organisations leverage the hardware they already have and chasing them for software licenses instead. They also tend to have a really long window for supporting that software." And so you get things like two enormous LightJet printers in San Diego powered by servers running Windows 2000, says photographic printer John Watts: Long out of production, the few remaining LightJets rely on the Windows operating systems that were around when these printers were sold. "A while back we looked into upgrading one of the computers to Windows Vista. By the time we added up the money it would take to buy new licenses for all the software it was going to cost $50,000 or $60,000 [£38,000 to £45,000]," Watts says. "I can't stand Windows machines," he says, "but I'm stuck with them...." In some cases, however, old computers are a labour of love. In the US, Dene Grigar, director of the Electronic Literature Lab at Washington State University, Vancouver, spends her days in a room full of vintage (and fully functional) computers dating back to 1977... She's not just interested in early, experimental e-books. Her laboratory collects everything from video games to Instagram zines.... Grigar's Electronic Literature Lab maintains 61 computers to showcase the hundreds of electronic works and thousands of files in the collection, which she keeps in pristine condition. Grigar says they're still looking for a PC that reads five-and-a-quarter-inch floppy disks.

Read more of this story at Slashdot.

While Amazon won FAA approval to fly beyond an operators' visual line of sight, "the program remains a work in progress," reports Bloomberg: A pair of Amazon.com Inc. package delivery drones were flying through a light rain in mid-December when, within minutes of one another, they both committed robot suicide... [S]ome 217 feet (66 meters) in the air [at a drone testing facility], the aircraft cut power to its six propellers, fell to the ground and was destroyed. Four minutes later and 183 feet over the taxiway, a second Prime Air drone did the same thing. Not long after the incidents, Amazon paused its experimental drone flights to tweak the aircraft software but said the crashes weren't the "primary reason" for halting the program. Now, five months after the twin crashes, a more detailed explanation of what happened is starting to emerge. Faulty readings from lidar sensors made the drones think they had landed, prompting the software to shut down the propellers, according to National Transportation Safety Board documents reviewed by Bloomberg. The sensors failed after a software update made them more susceptible to being confused by rain, the NTSB said. Amazon also removed a backup sensor present that had been present on earlier iterations, according to the article — though an Amazon spokesperson said the company had found ways to replicate the removed sensors. But Bloomberg notes Amazon's drone efforts has faced "technical challenges and crashes, including one in 2021 that set a field ablaze at the company's testing facility in Pendleton, Oregon." Deliveries are currently limited to College Station, Texas, and greater Phoenix, with plans to expand to Kansas City, Missouri, the Dallas area and San Antonio, as well as the UK and Italy. Starting with a craft that looked like a hobbyist drone — and was vulnerable to even modest gusts of wind — Amazon went through dozens of designs to toughen the vehicle and ultimately make it capable of carting about 5 pounds, giving it the capability to transport items typically ordered from its warehouses. Engineers settled on a six-propeller design that takes off vertically before cruising like a plane. The first model to make regular customer deliveries, the MK27, was succeeded last year by the MK30, which flies at about 67 miles an hour and can deliver packages up to 7.5 miles from its launch point. The craft takes off, flies and lands autonomously.

Read more of this story at Slashdot.

IBM laid off "a couple hundred" HR workers and replaced them with AI agents. "It's becoming a huge thing," says Mike Peditto, a Chicago-area consultant with 15 years of experience advising companies on hiring practices. He tells Slate "I do think we're heading to where this will be pretty commonplace." Although A.I. job interviews have been happening since at least 2023, the trend has received a surge of attention in recent weeks thanks to several viral TikTok videos in which users share videos of their A.I. bots glitching. Although some of the videos were fakes posted by a creator whose bio warns that his content is "all satire," some are authentic — like that of Kendiana Colin, a 20-year-old student at Ohio State University who had to interact with an A.I. bot after she applied for a summer job at a stretching studio outside Columbus. In a clip she posted online earlier this month, Colin can be seen conducting a video interview with a smiling white brunette named Alex, who can't seem to stop saying the phrase "vertical-bar Pilates" in an endless loop... Representatives at Apriora, the startup company founded in 2023 whose software Colin was forced to engage with, did not respond to a request for comment. But founder Aaron Wang told Forbes last year that the software allowed companies to screen more talent for less money... (Apriora's website claims that the technology can help companies "hire 87 percent faster" and "interview 93 percent cheaper," but it's not clear where those stats come from or what they actually mean.) Colin (first interviewed by 404 Media) calls the experience dehumanizing — wondering why they were told dress professionally, since "They had me going the extra mile just to talk to a robot." And after the interview, the robot — and the company — then ghosted them with no future contact. "It was very disrespectful and a waste of time." Houston resident Leo Humphries also "donned a suit and tie in anticipation for an interview" in which the virtual recruiter immediately got stuck repeating the same phrase. Although Humphries tried in vain to alert the bot that it was broken, the interview ended only when the A.I. program thanked him for "answering the questions" and offering "great information" — despite his not being able to provide a single response. In a subsequent video, Humphries said that within an hour he had received an email, addressed to someone else, that thanked him for sharing his "wonderful energy and personality" but let him know that the company would be moving forward with other candidates.

Read more of this story at Slashdot.

The Prossimo project (funded by the nonprofit Internet Security Research Group) seeks to "move the Internet's security-sensitive software infrastructure to memory safe code." Two years ago the Prossimo project made an announcement: they'd begun work on rav1d, a safer high performance AV1 decoder written in Rust, according to a new update: We partnered with Immunant to do the engineering work. By September of 2024 rav1d was basically complete and we learned a lot during the process. Today rav1d works well — it passes all the same tests as the dav1d decoder it is based on, which is written in C. It's possible to build and run Chromium with it. There's just one problem — it's not quite as fast as the C version... Our Rust-based rav1d decoder is currently about 5% slower than the C-based dav1d decoder (the exact amount differs a bit depending on the benchmark, input, and platform). This is enough of a difference to be a problem for potential adopters, and, frankly, it just bothers us. The development team worked hard to get it to performance parity. We brought in a couple of other contractors who have experience with optimizing things like this. We wrote about the optimization work we did. However, we were still unable to get to performance parity and, to be frank again, we aren't really sure what to do next. After racking our brains for options, we decided to offer a bounty pool of $20,000 for getting rav1d to performance parity with dav1d. Hopefully folks out there can help get rav1d performance advanced to where it needs to be, and ideally we and the Rust community will also learn something about how Rust performance stacks up against C. This drew a snarky response from FFmpeg, the framework that powers audio and video processing for everyone from VLC to Twitch. "Rust is so good you can get paid $20k to make it as fast as C," they posted to their 68,300 followers on X.com. Thanks to the It's FOSS blog for spotting the announcement.

Read more of this story at Slashdot.

The only nuclear power plant still operating in Taiwan was shut down on Saturday, reports Japan's public media organization NHK: People in Taiwan have grown increasingly concerned about nuclear safety in recent years, especially after the 2011 nuclear disaster in Fukushima, northeastern Japan... Taiwan's energy authorities plan to focus more on thermoelectricity fueled by liquefied natural gas. They aim to source 20 percent of all electricity from renewables such as wind and solar power next year. AFP notes that nuclear power once provided more than half of Taiwan's energy, with three plants operating six reactors across an island that's 394 km (245 mi) long and 144 km (89 mi) wide. So the new move to close Taiwan's last reactor is "fuelling concerns over the self-ruled island's reliance on imported energy and vulnerability to a Chinese blockade," — though Taiwan's president insists the missing nucelar energy can be replace by new units in LNG and coal-fired plants: The island, which targets net-zero emissions by 2050, depends almost entirely on imported fossil fuel to power its homes, factories and critical semiconductor chip industry. President Lai Ching-te's Democratic Progressive Party has long vowed to phase out nuclear power, while the main opposition Kuomintang (KMT) party says continued supply is needed for energy security... [The Ma'anshan Nuclear Power Plant] has operated for 40 years in a region popular with tourists and which is now dotted with wind turbines and solar panels. More renewable energy is planned at the site, where state-owned Taipower plans to build a solar power station capable of supplying an estimated 15,000 households annually. But while nuclear only accounted for 4.2 percent of Taiwan's power supply last year, some fear Ma'anshan's closure risks an energy crunch.... Most of Taiwan's power is fossil fuel-based, with liquefied natural gas (LNG) accounting for 42.4 percent and coal 39.3 percent last year. Renewable energy made up 11.6 percent, well short of the government's target of 20 percent by 2025. Solar has faced opposition from communities worried about panels occupying valuable land, while rules requiring locally made parts in wind turbines have slowed their deployment. Taiwan's break-up with nuclear is at odds with global and regional trends. Even Japan aims for nuclear to account for 20-22 percent of its electricity by 2030, up from well under 10 percent now. And nuclear power became South Korea's largest source of electricity in 2024, accounting for 31.7 percent of the country's total power generation, and reaching its highest level in 18 years, according to government data.... And Lai acknowledged recently he would not rule out a return to nuclear one day. "Whether or not we will use nuclear power in the future depends on three foundations which include nuclear safety, a solution to nuclear waste, and successful social dialogue," he said. DW notes there's over 100,000 barrels of nuclear waste on Taiwan's easternmost island "despite multiple attempts to remove them... At one point, Taiwan signed a deal with North Korea so they could send barrels of nuclear waste to store there, but it did not work out due to a lack of storage facilities in the North and strong opposition from South Korea... "Many countries across the world have similar problems and are scrambling to identify sites for a permanent underground repository for nuclear fuel. Finland has become the world's first nation to build one." Thanks to long-time Slashdot reader AmiMoJo for sharing the news.

Read more of this story at Slashdot.

During this year's annual Pwn2Own contest, two researchers from Palo Alto Networks demonstrated an out-of-bounds write vulnerability in Mozilla Firefox, reports Cyber Security News, "earning $50,000 and 5 Master of Pwn points." And the next day another participant used an integer overflow to exploit Mozilla Firefox (renderer only). But Mozilla's security blog reminds users that a sandbox escape would be required to break out from a tab to gain wider system access "due to Firefox's robust security architecture" — and that "neither participating group was able to escape our sandbox..." We have verbal confirmation that this is attributed to the recent architectural improvements to our Firefox sandbox which have neutered a wide range of such attacks. This continues to build confidence in Firefox's strong security posture. Even though neither attack could escape their sandbox, "Out of abundance of caution, we just released new Firefox versions... all within the same day of the second exploit announcement." (Last year Mozilla responded to an exploitable security bug within 21 hours, they point out, even winning an award as the fastest to patch.) The new updated versions are Firefox 138.0.4, Firefox ESR 128.10.1, Firefox ESR 115.23.1 and Firefox for Android. "Despite the limited impact of these attacks, all users and administrators are advised to update Firefox as soon as possible...." To review and fix the reported exploits a diverse team of people from all across the world and in various roles (engineering, QA, release management, security and many more) rushed to work. We tested and released a new version of Firefox for all of our supported platforms, operating systems, and configurations with rapid speed.... Our work does not end here. We continue to use opportunities like this to improve our incident response. We will also continue to study the reports to identify new hardening features and security improvements to keep all of our Firefox users across the globe protected.

Read more of this story at Slashdot.

It's a nonprofit that's provide hosting for the Linux Foundation, the Apache Software Foundation, Drupal, Firefox, and 160 other projects — delivering nearly 430 terabytes of information every month. (It's currently hosting Debian, Fedora, and Gentoo Linux.) But hosting only provides about 20% of its income, with the rest coming from individual and corporate donors (including Google and IBM). "Over the past several years, we have been operating at a deficit due to a decline in corporate donations," the Open Source Lab's director announced in late April. It's part of the CS/electrical engineering department at Oregon State University, and while the department "has generously filled this gap, recent changes in university funding makes our current funding model no longer sustainable. Unless we secure $250,000 in committed funds, the OSL will shut down later this year." But "Thankfully, the call for support worked, paving the way for the OSU Open Source Lab to look ahead, into what the future holds for them," reports the blog It's FOSS. "Following our OSL Future post, the community response has been incredible!" posted director Lance Albertson. "Thanks to your amazing support, our team is funded for the next year. This is a huge relief and lets us focus on building a truly self-sustaining OSL." To get there, we're tackling two big interconnected goals: 1. Finding a new, cost-effective physical home for our core infrastructure, ideally with more modern hardware. 2. Securing multi-year funding commitments to cover all our operations, including potential new infrastructure costs and hardware refreshes. Our current data center is over 20 years old and needs to be replaced soon. With Oregon State University evaluating the future of this facility, it's very likely we'll need to relocate in the near future. While migrating to the State of Oregon's data center is one option, it comes with significant new costs. This makes finding free or very low-cost hosting (ideally between Eugene and Portland for ~13-20 racks) a huge opportunity for our long-term sustainability. More power-efficient hardware would also help us shrink our footprint. Speaking of hardware, refreshing some of our older gear during a move would be a game-changer. We don't need brand new, but even a few-generations-old refurbished systems would boost performance and efficiency. (Huge thanks to the Yocto Project and Intel for a recent hardware donation that showed just how impactful this is!) The dream? A data center partner donating space and cycled-out hardware. Our overall infrastructure strategy is flexible. We're enhancing our OpenStack/Ceph platforms and exploring public cloud credits and other donated compute capacity. But whatever the resource, it needs to fit our goals and come with multi-year commitments for stability. And, a physical space still offers unique value, especially the invaluable hands-on data center experience for our students.... [O]ur big focus this next year is locking in ongoing support — think annualized pledges, different kinds of regular income, and other recurring help. This is vital, especially with potential new data center costs and hardware needs. Getting this right means we can stop worrying about short-term funding and plan for the future: investing in our tech and people, growing our awesome student programs, and serving the FOSS community. We're looking for partners, big and small, who get why foundational open source infrastructure matters and want to help us build this sustainable future together. The It's FOSS blog adds that "With these prerequisites in place, the OSUOSL intends to expand their student program, strengthen their managed services portfolio for open source projects, introduce modern tooling like Kubernetes and Terraform, and encourage more community volunteers to actively contribute." Thanks to long-time Slashdot reader I'm just joshin for suggesting the story.

Read more of this story at Slashdot.

A new YouTube tool will let advertisers use Google's Gemini AI model to target ads to viewers when they're most engaged, reports CNBC: Peak Points has the potential to enable more impressions and a higher click-through rate on YouTube, a primary metric that determines how creators earn money on the video platform... Peak Points is currently in a pilot program and will be rolling out over the rest of the year. The product "aims to benefit advertisers by using a tactic that aims to grab users' attention right when they're most invested in the content," reports TechCrunch: This approach appears to be similar to a strategy called emotion-based targeting, where advertisers place ads that align with the emotions evoked by the video. It's believed that when viewers experience heightened emotional states, it leads to better recall of the ads. However, viewers may find these interruptions frustrating, especially when they're deeply engaged in the emotional arc of a video and want the ad to be over quickly to resume watching. In related news, YouTube announced another ad format that may be more appealing to users. The platform debuted a shoppable product feed where users can browse and purchase items during an ad.

Read more of this story at Slashdot.