Historian Garrett M. Graff describes his upcoming book, The Devil Reached Toward the Sky: An Oral History of the Making and Unleashing of the Atomic Bomb. "I assembled an oral history of the Manhattan Project, the bombings of Hiroshima and Nagasaki and the end of World War II in the Pacific, told through the voices of around 500 participants and witnesses of the events — including luminaries like Albert Einstein and Oppenheimer and political figures like President Harry Truman." It was 80 years ago this week that physicists and 150 other leaders in the atomic bomb program "gathered in the desert outside Alamogordo, New Mexico, for the world's first test of a nuclear explosion." In an except from his upcoming book, Graff publishes quotes from eyewitness: Brig. Gen. Leslie Groves: I had become a bit annoyed with Fermi when he suddenly offered to take wagers from his fellow scientists on whether or not the bomb would ignite the atmosphere, and if so, whether it would merely destroy New Mexico or destroy the world. He had also said that after all it wouldn't make any difference whether the bomb went off or not because it would still have been a well worthwhile scientific experiment. For if it did fail to go off, we would have proved that an atomic explosion was not possible. Afterward, I realized that his talk had served to smooth down the frayed nerves and ease the tension of the people at the base camp, and I have always thought that this was his conscious purpose. Certainly, he himself showed no signs of tension that I could see... As the hour approached, we had to postpone the test — first for an hour and then later for 30 minutes more — so that the explosion was actually three- and one-half hours behind the original schedule... Our preparations were simple. Everyone was told to lie face down on the ground, with his feet toward the blast, to close his eyes and to cover his eyes with his hands as the countdown approached zero. As soon as they became aware of the flash they could turn over and sit or stand up, covering their eyes with the smoked glass with which each had been supplied... The quiet grew more intense. I, myself, was on the ground between Bush and Conant... Edward Teller: We all were lying on the ground, supposedly with our backs turned to the explosion. But I had decided to disobey that instruction and instead looked straight at the bomb. I was wearing the welder's glasses that we had been given so that the light from the bomb would not damage our eyes. But because I wanted to face the explosion, I had decided to add some extra protection. I put on dark glasses under the welder's glasses, rubbed some ointment on my face to prevent sunburn from the radiation, and pulled on thick gloves to press the welding glasses to my face to prevent light from entering at the sides... We all listened anxiously as the broadcast of the final countdown started; but, for whatever reason, the transmission ended at minus five seconds... Kenneth T. Bainbridge: My personal nightmare was knowing that if the bomb didn't go off or hang-fired, I, as head of the test, would have to go to the tower first and seek to find out what had gone wrong... Brig. Gen. Thomas F. Farrell: Dr. Oppenheimer held on to a post to steady himself. For the last few seconds, he stared directly ahead. A few examples of how they remembered the explosion: William L. Laurence: There rose from the bowels of the earth a light not of this world, the light of many suns in one. Kenneth T. Bainbridge: I felt the heat on the back of my neck, disturbingly warm. George B. Kistiakowsky: I am sure that at the end of the world — in the last millisecond of the earth's existence — the last man will see what we have just seen. Brig. Gen. Thomas F. Farrell: Oppenheimer's face relaxed into an expression of tremendous relief. J. Robert Oppenheimer: We knew the world would not be the same. A few people laughed, a few people cried. Norris Bradbury, physicist, Los Alamos Lab: Some people claim to have wondered at the time about the future of mankind. I didn't. We were at war, and the damned thing worked.

Read more of this story at Slashdot.

ABC News reports: Dialogue heard on a cockpit voice recording indicates that the captain of the Air India flight that crashed in June, killing 260 people, may have turned off the fuel just after takeoff, prompting the first officer to panic, according to The Wall Street Journal, which cited sources familiar with U.S. official's early assessment... The president of the Federation of Indian Pilots condemned the Wall Street Journal report, saying, "The preliminary report nowhere states that the pilots have moved the fuel control switches, and this has been corroborated by the CVR [cockpit voice recorder] recording." But meanwhile "India on Monday ordered its airlines to examine fuel switches on several Boeing aircraft models," reports Reuters, "while South Korea ordered a similar measure on Tuesday, as scrutiny intensified of fuel switch locks at the centre of an investigation into a deadly Air India crash." The precautionary moves by the two countries and airlines in several others came despite the planemaker and the U.S. Federal Aviation Administration assuring airlines and regulators in recent days that the fuel switch locks on Boeing jets are safe... [The preliminary report] noted a 2018 advisory from the FAA, which recommended, but did not mandate, operators of several Boeing models, including the 787, to inspect the locking feature of fuel cutoff switches to ensure they could not be moved accidentally... Some airlines around the world told Reuters they had been checking relevant switches since 2018 in accordance with the FAA advisory, including Australia's Qantas Airways. Others said they had made additional or new checks since the release of the preliminary report into the Air India crash. The web site of India's Financial Express newspaper spoke to Mary Schiavo, who was Inspector General of America's Transportation Department from 1990 to 1996 (and is also a long-time critic of the FAA). The site notes Schiavo "rejected the claims of human error that a pilot downed the Ahmedabad to London flight by cutting off the fuel supply." Schiavo exclusively told FinancialExpress.com that this is not the first time fuel switch transitioned from "Run" to "Cutoff" on its own. It happened five years ago, too. "There was an All Nippon Airways (ANA) flight in 2019 in which the 787 aircraft did this itself, while the flight was on final approach. No pilot input cutting off the fuel whatsoever," Schiavo told FinancialExpress.com... "The investigation revealed the plane software made the 787 think it was on the ground and the Thrust Control Malfunction Accommodation System cut the fuel to the engines," she told FinancialExpress.com, before adding, "The pilots never touched the fuel cutoff..." Both engines flamed out immediately after the pilot deployed the thrust reversers for landing. The aircraft, which was also a Boeing 787 Dreamliner, was towed away from the runway by the authorities, and no injuries were reported. UK Civil Aviation Authority, four weeks before the crash, had warned about similar fuel system issues on Boeing aircraft [on May 15, 2025]. "The FAA has issued an Airworthiness Directive addressing a potential unsafe condition affecting fuel shutoff valves installed on Boeing aircraft," the UK regulator's notice read, listing the B737, B757, B767, B777 and B787... Thrust Control Malfunction Accommodation informs FADEC [a digital computer] about whether the aircraft is on the ground or in the air, and if it believes the aircraft is on the ground, it may automatically throttle back the engines, without the pilot's input. Reuters notes that the Air India crash preliminary report "said maintenance records showed that the throttle control module, which includes the fuel switches, was replaced in 2019 and 2023 on the plane involved in the crash." Thanks to long-time Slashdot reader wired_parrot for sharing the news.

Read more of this story at Slashdot.

"The U.S. is absolutely facing the most serious Chinese hacking ever." That's what the Washington Post was told by a China-focused consultant at security company SentinelOne: Undeterred by recent indictments alleging widespread cyberespionage against American agencies, journalists and infrastructure targets, Chinese hackers are hitting a wider range of targets and battling harder to stay inside once detected, seven current and former U.S. officials said in interviews. Hacks from suspected Chinese government actors detected by the security firm CrowdStrike more than doubled from 2023 to more than 330 last year and continued to climb as the new administration took over, the company said... Although the various Chinese hacking campaigns seem to be led by different government agencies and have different goals, all benefit from new techniques and from Beijing's introduction of a less constrained system for cyber offense, the officials and outside researchers told The Washington Post... Chinese intelligence, military and security agencies previously selected targets and tasked their own employees with breaking in, they said. But the Chinese government decided to take a more aggressive approach by allowing private industry to conduct cyberattacks and hacking campaigns on their own, U.S. officials said. The companies are recruiting top hackers who discover previously unknown, or "zero-day," flaws in software widely used in the United States. Then the companies search for where the vulnerable programs are installed, hack a great many of them at once, and then sell access to multiple Chinese government customers and other security companies. That hacking-for-hire approach creates hundreds of U.S. victims instead of a few, making it hard to block attacks and to decide which were China's key targets and which were unintentionally caught in the hacks, an FBI official said, speaking on the condition of anonymity to follow agency practices... "The result of that incentive structure is that there is significantly more hacking...." China has mastered the ability to move undetected through networks of compromised U.S. devices, so that the final connection to a target appears to be an ordinary domestic connection. That makes it easy to get around technology that blocks overseas links and puts it outside the purview of the National Security Agency, which by law must avoid scrutinizing most domestic transmissions. Beijing is increasingly focused on hacking software and security vendors that provide access to many customers at once, the FBI official said. Once access is obtained, the hackers typically add new email and collaboration accounts that look legitimate... Beyond the increased government collaboration with China's private security sector is occasional collaborating with criminal groups, said Ken Dunham, an analyst at the security firm Qualys. The article notes that China's penetration of U.S. telecom carriers "is still not fully contained, according to the current and former officials." But in addition, the group behind that attack "has more recently shown up inside core communications infrastructure in Europe, according to John Carlin, a former top national security official in the Justice Department who represents some U.S. victims of the group." And documents leaked last year from a security contractor that works with the Chinese military and other government groups "described contracts and targets in 20 countries, with booty including Indian immigration data, logs of calls in South Korea, and detailed information on roads in Taiwan. "It also detailed prices for some services, such as $25,000 for promised remote access to an iPhone, payment disputes with government customers and employee gripes about long hours..."

Read more of this story at Slashdot.

"Commodore has returned from a parallel timeline where tech stayed optimistic, inviting, and human," explains the official web site for "the first real Commodore computer in over 30 years..." You can check out an ad for it here. "Not an emulator. Not a PC... Powered by a FPGA recreation of the original motherboard, wrapped in glowing game-reactive LEDs (or classic beige of course)." Fast Company calls it "a $299 device that its makers claim is compatible with over 10,000 retro games, cartridges, and peripherals." In a YouTube video posted last month, "Peri Fractic" said he'd purchased the company for "a low seven-figure sum," and said he'd recruited several former Commodore employees to help relaunch the brand. The new C64s are expected to begin shipping as early as October, though that date could slip... There are three models to choose from, all with the same internal components. If you were expecting a vastly outdated machine, however, you're in for a surprise. The Commodore 64 Ultimate will include 128 megabytes of RAM and 16 megabytes of flash memory. It connects to modern monitors via HDMI in high-definition 1080p resolution and features three USB-A ports and one USB-C port. Beyond the computer itself, the power source, and HDMI cable, your $299 also gets you a spiral-bound user guide, a 64-gigabyte USB drive featuring over 50 licensed games, a quick-start guide, and stickers. Aesthetically, the Commodore 64 Ultimate is available in the original beige or in premium variants: the Starlight Edition, with a clear case and LED lights ($249), or the Founder's Edition, which includes 24-karat gold-plated badges, satin gold keys, and a translucent amber case ($499). Just 6,400 units of the Founder's Edition will be produced, according to the company. The preorder setup resembles a Kickstarter campaign, though it doesn't use that platform. Commodore says all preorders come with a money-back guarantee, but it chose to skip the service's fees. Buyers should be aware that accounts are charged at the time of preorder... The product will come with a one-year limited warranty, and Commodore says most parts are already in production, including the updated motherboard, the case, and the keycaps that recreate the blocky keys that early users remember.

Read more of this story at Slashdot.

The Independent notes a remarkable-if-true figure that's being bandied around this week. Meta "started making these, like, giant offers to a lot of people on our team," OpenAI CEO Sam Altman told his brother Jack on his podcast. "You know, like, $100 million signing bonuses, more than that [in] compensation per year... I'm really happy that, at least so far, none of our best people have decided to take him up on that." Previous reports have also suggested that Meta is targeting employees at Google DeepMind, offering similar levels of compensation. Some of these efforts appear to have been successful, with DeepMind researcher Jack Rae joining Meta's 'Superintelligence' team earlier this month... During the podcast, which was published on Tuesday, Mr Altman also gave details about future AI products that OpenAI is hoping to build, claiming that they will enable "crazy new social experiences" and "virtual employees". The most important breakthrough over the next decade, he said, would involve radical new discoveries powered by AI. "The thing that I think will be the most impactful in that five-to-10 year timeframe is AI will actually discover new science," he said. The Washington Post notes that Zuckerberg "responded to recent reports of his compensation offers in an interview posted by the Information on YouTube on Tuesday, saying that 'a lot of the numbers specifically have been inaccurate" but acknowledging there is "an absolute premium for the best and most talented people." Zuckerberg's recent hires and other comments this week suggest he's not taking any chances of being left behind. He announced plans for a giant data center campus large enough to obscure Manhattan to power future AI projects by his superintelligence team.

Read more of this story at Slashdot.

Felix Baumgartner has died. He was 56. In 2012 Slashdot extensively covered the skydiver's "leap from the edge of space." ABC News remembers it as a Red Bull-financed stunt that involved "diving 24 miles from the edge of space, in a plummet that reached a speed of more than 500 mph." Baumgartner recalled the legendary jump in the documentary, "Space Jump," and said, "I was the first human being outside of an aircraft breaking the speed of sound and the history books. Nobody remembers the second one...." Baumgartner, also known as "Fearless Felix," accomplished many records in his career, including setting the world record for highest parachute jump atop the Petronas Towers in Malaysia, flying across the English Channel in a wingsuit in 2003, and base jumping from the 85-foot arm of the Christ the Redeemer statue in Brazil in 2007. "Baumgartner's altitude record stood for two years," remembers the Los Angeles Times, "until Google executive Alan Eustace set new marks for the highest free-fall jump and greatest free-fall distance." They report that Baumgartner died Thursday "while engaged in a far less intense activity, crashing into the side of a hotel swimming pool while paragliding in Porto Sant Elpidio, a town on central Italy's eastern coast." More details from the Associated Press: "It is a destiny that is very hard to comprehend for a man who has broke all kinds of records, who has been an icon of flight, and who traveled through space," Mayor Massimiliano Ciarpella told The Associated Press.Ciarpella said that Baumgartner had been in the area on vacation, and that investigators believed he may have fallen ill during the fatal flight... Baumgartner, a former Austrian military parachutist, made thousands of jumps from planes, bridges, skyscrapers and famed landmarks... ABC News remembers that in 2022 Baumgartner wrote in Newsweek that "Since I was a little kid, I've always looked up to people who left a footprint on this planet... now I think I have left a footprint... "I believe big dreamers always win."

Read more of this story at Slashdot.

An anonymous reader quotes a report from TechCrunch: California Forever announced on Thursday plans to build a massive manufacturing park called Solano Foundry, the newest addition to its master-planned "utopian" city backed by a group of Silicon Valley billionaires. Solano Foundry is 2,100 acres that can host 40 million square feet of advanced tech manufacturing space. The manufacturing park will be built as part of its planned walkable city with over 175,000 homes, CEO Jan Sramek said at the Reindustrialize conference in Detroit. Sramek tweeted that U.S. manufacturers can't win by "building factories off of random freeway exits in the middle of nowhere. The best people don't want to work there." This site will offer expedited permitting, transportation for finished goods, and plenty of power from renewable energy, he said. The hope is that it will attract hardware, engineering, and AI talent from relatively nearby Silicon Valley. Solano County is about 40 miles northeast of San Francisco.

Read more of this story at Slashdot.

Microsoft will stop using China-based engineers to support U.S. military cloud services after a ProPublica report revealed their involvement, prompting backlash from Senator Tom Cotton and a two-week Pentagon review ordered by Defense Secretary Pete Hegseth. In response, Hegseth announced an immediate ban on any Chinese involvement in Department of Defense cloud contracts. Reuters reports: The report detailed Microsoft's use of Chinese engineers to work on U.S. military cloud computing systems under the supervision of U.S. "digital escorts" hired through subcontractors who have security clearances but often lacked the technical skills to assess whether the work of the Chinese engineers posed a cybersecurity threat. [Microsoft] told ProPublica it disclosed its practices to the U.S. government during an authorization process. On Friday, Microsoft spokesperson Frank Shaw said on social media website X the company changed how it supports U.S. government customers "in response to concerns raised earlier this week ... to assure that no China-based engineering teams are providing technical assistance" for services used by the Pentagon.

Read more of this story at Slashdot.

At Sotheby's Geek Week auction, the largest known Martian meteorite on Earth sold for a record-breaking $5.3 million. The Associated Press reports: The 54-pound (25-kilogram) rock named NWA 16788 was discovered in the Sahara Desert in Niger by a meteorite hunter in November 2023, after having been blown off the surface of Mars by a massive asteroid strike and traveling 140 million miles (225 million kilometers) to Earth, according to Sotheby's. The estimated sale price before the auction was $2 million to $4 million. The identity of the buyer was not immediately disclosed. The final bid was $4.3 million. Adding various fees and costs, the official sale price was about $5.3 million, making it the most valuable meteorite ever sold at auction, Sotheby's said. The live bidding was slow, with the auctioneer trying to coax more offers and decreasing the minimum bid increases. [...] The bidding for the Mars meteorite began with two advance offers of $1.9 million and $2 million. The live bidding slowly proceeded with increases of $200,000 and $300,000 until $4 million, then continued with $100,000 increases until reaching $4.3 million. The red, brown and gray meteorite is about 70% larger than the next largest piece of Mars found on Earth and represents nearly 7% of all the Martian material currently on this planet, Sotheby's says. It measures nearly 15 inches by 11 inches by 6 inches (375 millimeters by 279 millimeters by 152 millimeters). It was also a rare find. There are only 400 Martian meteorites out of the more than 77,000 officially recognized meteorites found on Earth, the auction house says.

Read more of this story at Slashdot.

An anonymous reader quotes a report from Live Science: In a world first, scientists have demonstrated an enigmatic phenomenon in quantum computing that could pave the way for fault-tolerant machines that are far more powerful than any supercomputer. The process, called "magic state distillation," was first proposed 20 years ago, but its use in logical qubits has eluded scientists ever since. It has long been considered crucial for producing the high-quality resources, known as "magic states," needed to fulfill the full potential of quantum computers. [...] Now, however, scientists with QuEra say they have demonstrated magic state distillation in practice for the first time on logical qubits. They outlined their findings in a new study published July 14 in the journal Nature. In the study, using the Gemini neutral-atom quantum computer, the scientists distilled five imperfect magic states into a single, cleaner magic state. They performed this separately on a Distance-3 and a Distance-5 logical qubit, demonstrating that it scales with the quality of the logical qubit. "A greater distance means better logical qubits. A Distance-2, for instance, means that you can detect an error but not correct it. Distance-3 means that you can detect and correct a single error. Distance-5 would mean that you can detect and correct up to two errors, and so on, and so on," [explained Yuval Boger, chief commercial officer at QuEra who was not personally involved in the research]. "So the greater the distance, the higher fidelity of the qubit is -- and we liken it to distilling crude oil into a jet fuel." As a result of the distillation process, the fidelity of the final magic state exceeded that of any input. This proved that fault-tolerant magic state distillation worked in practice, the scientists said. This means that a quantum computer that uses both logical qubits and high-quality magic states to run non-Clifford gates is now possible. "We're seeing sort of a shift from a few years ago," Boger said. "The challenge was: can quantum computers be built at all? Then it was: can errors be detected and corrected? Us and Google and others have shown that, yes, that can be done. Now it's about: can we make these computers truly useful? And to make one computer truly useful, other than making them larger, you want them to be able to run programs that cannot be simulated on classical computers."

Read more of this story at Slashdot.

Ukrainian hacker group BO Team, with help from the Ukrainian Cyber Alliance and possibly Ukraine's military, claims to have wiped out one of Russia's largest military drone manufacturers, destroying 47TB of production data and even disabling the doors in the facility. "Or, as described by the hacking collective (per Google translate), they 'deeply penetrated' the drone manufacturer 'to the very tonsils of demilitarization and denazification,'" reports The Register. From the report: BO Team (also known as Black Owl) announced the breach on its Telegram channel, and claimed to have carried out the operation alongside fellow hackers the Ukrainian Cyber Alliance "and one very well-known organization, the mention of which makes Vanya's bottle receivers explode," according to a Google translation of the Russian text. While the "very well-known organization" isn't named, BO Team included a link to Ukraine's Ministry of Defence. The military intelligence agency, working alongside the attackers, "carried out large-scale work to capture the entire network and server infrastructure of Gaskar Group, collect valuable information about the UAVs being produced and prospective, and then destroy the information and disable this infrastructure," the Telegram post continued. This reportedly included 47TB of technical information about the production of Russian drones, and BO Team claims to have destroyed all of the information on Gaskar's servers, including 10TB of backup files. "By the way, from the information we received, China is providing assistance in the production and training of specialists of Gaskar Group," the hackers added via Telegram. BO Team also posted what they claim to be confidential employee questionnaires [PDF]. On their own Telegram channel, the Ukrainian Cyber Alliance said they also stole "all the source code" before destroying everything. "The network went down so thoroughly that the doors in the building were blocked," the pro-Ukraine crew wrote, per Google translate. "To open them, the administration had to turn on the fire alarm. Most likely, the defense order is on the verge of failure, and thousands of drones will not get to the front in the near future."

Read more of this story at Slashdot.

Dictionary.com abruptly deleted all user accounts and saved word lists from its premium apps without notice or refunds, leaving long-time logophiles "devastated." "The company deleted all accounts, as well as the only ways to use Dictionary.com without seeing ads -- even if you previously paid for an ad-free experience," reports Ars Technica. From the report: Dictionary.com offers a free dictionary through its website and free Android and iOS apps. It used to offer paid-for mobile apps, called Dictionary.com Pro, that let users set up accounts, use the app without ads, and enabled other features (like grammar tips and science and rhyming dictionaries) that are gone now. Dictionary.com's premium apps also let people download an offline dictionary (its free apps used to let you buy a downloadable dictionary as a one-time purchase), but offline the dictionaries aren't available anymore. About a year ago, claims of Dictionary.com's apps being buggy surfaced online. We also found at least one person claiming that they were unable to buy an ad-free upgrade at that time. Reports of Dictionary.com accounts being deleted and the apps not working as expected, and with much of its content removed, started appearing online about two months ago. Users reported being unable to log in and access premium features, like saved words. Soon after, Dictionary.com's premium apps were removed from Google Play and Apple's App Store. The premium version was available for download for $6 as recently as March 23, per the Internet Archive's Wayback Machine.

Read more of this story at Slashdot.

The House passed a bipartisan bill regulating stablecoins which now heads to President Trump's desk as part of his push to make the U.S. the "crypto capital of the world." Two other crypto-related bills -- one defining digital asset market structure and another banning a U.S. central bank digital currency -- were also approved by the House but face uncertain futures in the Senate amid partisan tensions and concerns over Trump's personal financial ties to crypto ventures. CNBC reports: The stablecoin bill, passed on a 308-122 vote, sets initial guardrails and consumer protections for the cryptocurrency, which is tied to a stable asset, often the U.S. dollar, to reduce price volatility. It passed the Senate with bipartisan support in June. "Around the world, payment systems are undergoing a revolution," said House Financial Services Chair French Hill of Arkansas as lawmakers debated the stablecoin legislation Thursday morning. Hill said the bill will "ensure American competitiveness and strong guardrails for our consumers." After Trump declared it "crypto week," the bills were stalled for more than a day amid disagreements among House Republicans about how to combine the legislation. In the end, GOP leaders put the three bills for a separate votes, leaving the fate of the other two bills unclear in the Senate. The internal dissent could foreshadow challenges ahead for the more sweeping crypto legislation that Trump has demanded and the industry has poured millions into advancing. The stablecoin measure is seen by lawmakers and the industry as a step toward adding legitimacy and consumer trust to a rapidly growing sector. Treasury Secretary Scott Bessent said in June that the legislation could help that currency "grow into a $3.7 trillion market by the end of the decade." The bill outlines requirements for stablecoin issuers, including compliance with U.S. anti-money laundering and sanctions laws, and mandates that issuers hold reserves backing the cryptocurrency. Without such a framework, Republicans on the Senate Banking Committee in a statement warned, "consumers face risks like unstable reserves or unclear operations from stablecoin issuers." After the votes, House Republicans strongly urged the Senate to take up the second bill, which would create a new market structure for cryptocurrency.

Read more of this story at Slashdot.

An anonymous reader quotes a report from The Record: Threat actors are stealing sensitive data from organizations by breaching end-of-life appliances made by cybersecurity company SonicWall. Incident responders from Google Threat Intelligence Group (GTIG) and Mandiant said on Wednesday that they have uncovered an ongoing campaign by an unidentified threat group that leverages credentials and one-time password (OTP) seeds stolen during previous intrusions -- allowing the hackers to regain access to organizations even after security updates are installed. [...] The campaign is targeting fully patched end-of-life SonicWall Secure Mobile Access (SMA) 100 series appliances. Google explained that the malware the hackers are using removes log entries, making it difficult to figure out how they initially gained access to a system. Google said the campaign extends beyond the incidents they investigated directly and added that SonicWall has "confirmed reports of other impacted organizations." The company noted that SonicWall updated an advisory for a bug tracked as CVE-2024-38475 in light of Google's findings. "As an added security measure, we strongly advise customers to reset the OTP (One-Time Password) binding for all users. This step ensures that any potentially compromised or stale OTP secrets are invalidated, thereby mitigating unauthorized access risks," SonicWall said in the update to the advisory.. One novel aspect of the campaign is the use of a backdoor called OVERSTEP, which modifies the SonicWall appliance's boot process to maintain persistent access, steal sensitive credentials and conceal the malware's own components. Incident responders struggled to track other activities by the hackers because OVERSTEP allowed them to delete logs and largely cover their tracks. OVERSTEP is specifically designed for SonicWall SMA 100 series appliances, according to Google. In addition to CVE-2024-38475, Google and Mandiant experts floated several potential vulnerabilities the hackers may have used to gain initial access, including CVE-2021-20038, CVE-2024-38475, CVE-2021-20035, CVE-2021-20039 and, CVE-2025-32819. Beyond those, Google theorized that the hackers may have used an unknown zero-day vulnerability to deploy the malware on targeted SonicWall SMA appliances.

Read more of this story at Slashdot.

Russian lawmakers passed sweeping new legislation allowing authorities to fine individuals simply for searching and accessing content labeled "extremist" via VPNs. The Washington Post reports: Russia defines "extremist materials" as content officially added by a court to a government-maintained registry, a running list of about 5,500 entries, or content produced by "extremist organizations" ranging from "the LGBT movement" to al-Qaeda. The new law also covers materials that promote alleged Nazi ideology or incite extremist actions. Until now, Russian law stopped short of punishing individuals for seeking information online; only creating or sharing such content is prohibited. The new amendments follow remarks by high-ranking officials that censorship is justified in wartime. Adoption of the measures would mark a significant tightening of Russia's already restrictive digital laws. The fine for searching for banned content in Russia would be about a $65, while the penalty for advertising circumvention tools such as VPN services would be steeper -- $2,500 for individuals and up to $12,800 for companies. Previously, the most significant expansion of Russia's restrictions on internet use and freedom of speech occurred shortly after the February 2022 full-scale invasion of Ukraine, when sweeping laws criminalized the spread of "fake news" and "discrediting" the Russian military. The new amendment was introduced Tuesday and attached to a mundane bill on regulating freight companies, according to documents published by Russia's lower house of parliament, the State Duma.

Read more of this story at Slashdot.

The Verge's Emma Roth reports: The News/Media Alliance, a trade association behind major news publishers, announced that it has "successfully secured" the removal of 12ft.io, a website that helped users bypass paywalls online. The trade association says 12ft.io's webhost took down the site on July 14th "following the News/Media Alliance's efforts." 12ft.io -- or 12 Foot Ladder -- also allowed users to view webpages without ads, trackers, or pop-ups by disguising a user's browser as a web crawler, giving them unfettered access to a webpage's contents. Software engineer Thomas Millar says he created the site when he realized "8 of the top 10 links on Google were paywalled" when doing research during the pandemic. [...] In its announcement, News/Media Alliance says 12ft.io "offered illegal circumvention technology" that allowed users to access copyrighted content without paying for it. The organization adds that it will take "similar actions" against other sites that let users get around paywalls. The News Media Alliance recently called Google's AI Mode "theft." (Like many chatbots, Google's AI Mode eliminates the need to visit a website, starving publishers of the pageviews they need to be compensated for their work.) "Publishers commit significant resources to creating the best and most informative content for consumers, and illegal tools like 12ft.io undermine their ability to financially support that work through subscriptions and ad revenue," News/Media Alliance president and CEO Danielle Coffey said in the press release. "Taking down paywall bypassers is an essential part of ensuring we have a healthy and sustainable information ecosystem."

Read more of this story at Slashdot.

An anonymous reader quotes a report from NBC News: Mark Zuckerberg and current and former directors and officers of Meta Platforms agreed on Thursday to settle claims seeking $8 billion for the damage they allegedly caused the company by allowing repeated violations of Facebook users' privacy, a lawyer for the shareholders told a Delaware judge on Thursday. The parties did not disclose details of the settlement and defense lawyers did not address the judge, Kathaleen McCormick of the Delaware Court of Chancery. McCormick adjourned the trial just as it was to enter its second day and she congratulated the parties. The plaintiffs' lawyer, Sam Closic, said the agreement just came together quickly. Billionaire venture capitalist Marc Andreessen, who is a defendant in the trial and a Meta director, was scheduled to testify on Thursday. Shareholders of Meta sued Zuckerberg, Andreessen and other former company officials including former Chief Operating Officer Sheryl Sandberg in hopes of holding them liable for billions of dollars in fines and legal costs the company paid in recent years. The Federal Trade Commission fined Facebook $5 billion in 2019 after finding that it failed to comply with a 2012 agreement with the regulator to protect users' data. The shareholders wanted the 11 defendants to use their personal wealth to reimburse the company. The defendants denied the allegations, which they called "extreme claims." "This settlement may bring relief to the parties involved, but it's a missed opportunity for public accountability," said Jason Kint, the head of Digital Content Next, a trade group for content providers. "Facebook has successfully remade the 'Cambridge Analytica' scandal about a few bad actors rather than an unraveling of its entire business model of surveillance capitalism and the reciprocal, unbridled sharing of personal data. That reckoning is now left unresolved."

Read more of this story at Slashdot.

Robinhood CEO Vlad Tenev has said that the majority of his company's new code is written by AI, with "close to 100%" of engineers using AI code editors. Speaking on the 20VC podcast, Tenev estimated around 50% of new code at the trading platform is AI-generated. Tenev said the 50% figure is imprecise due to advanced "agentic" code editors that have made it difficult to distinguish human-written from AI-generated code. The company has progressed from GitHub Copilot to Cursor and now Windsurf, where "nearly all of the code is written by AI," he said. Tenev estimated only a "minority" of new code at Robinhood is written by humans.

Read more of this story at Slashdot.

Mozilla will ship WebGPU support in Firefox 141 when the browser launches July 22, bringing graphics processing capabilities that Chrome users have had since 2023. The initial release supports Windows only, with Mac, Linux, and Android planned for the coming months. WebGPU provides web content direct access to graphics processors for high-performance computation and rendering in games and complex 3D applications. Chrome gained WebGPU support with version 113 in 2023, while Safari 26 is expected to add the feature this fall. Firefox's implementation uses the WGPU Rust crate, which translates web requests into native commands for Direct3D 12, Metal, or Vulkan.

Read more of this story at Slashdot.

British universities face mounting financial pressures with four in ten institutions running deficits, according to the Office for Students regulator. Half have closed courses to save money, while Durham and Newcastle each shed 200 staff members. Lancaster's cost-saving plan could eliminate one in five academic positions. The crisis, writes Economist, stems from frozen tuition fees for English students, which will rise by only a few percent in August for the first time in eight years.

Read more of this story at Slashdot.