Formula One cars, the world's fastest racecars, need to grip the track for speed and safety on the curves — leading engineers to design cars that create downforce. And racing fans are even told that "a Formula 1 racecar generates enough downforce above a certain speed that it could theoretically drive upside down," writes the automotive site Jalopnik. "McMurtry Automotive turned this theory into reality after having its Spéirling hypercar complete the impressive feat..." Admittedly, the Spéirling's success can be solely attributed to its proprietary 'Downforce-on-Demand' fan system that produces 4,400 pounds of downforce at the push of a button... For those looking to do the math, Spéirling weighs 2,200 pounds. With the stopped car's fan whirling at 23,000 rpm, the rig was rotated to invert the road deck... Then, the hypercar rolled forward a few feet before stopping while inverted. The rig rotated the road deck back down, and the Spéirling drove off like nothing happened. The McMurtry Spéirling, as a 1,000-hp twin-motor electric hypercar, didn't have to clear the other hurdles that an F1 car would have clear to drive upside down. Dry-sump combustion engines aren't designed to run inverted and would eventually fail catastrophically. Oil wouldn't be able to cycle through and keep the engine lubricated. The car is "an electric monster purpose-built to destroy track records," Jalopnik wrote in 2022 when the car shaved more than two seconds off a long-standing record. The "Downforce-on-Demand" feature gives it tremendous acceleration — in nine seconds it can go from 0 to 186.4 mph (300 km/h), according to Jalopnik. "McMurtry is working towards finalizing a production version of its hypercar, called the Spéirling PURE. Only 100 will be produced."

Read more of this story at Slashdot.

We talked about singletons a bit last week. That reminded John of a story from the long ago dark ages where we didn't have always accessible mobile Internet access.

At the time, John worked for a bank. The bank, as all banks do, wanted to sell mortgages. This often meant sending an agent out to meet with customers face to face, and those agents needed to show the customer what their future would look like with that mortgage- payment calculations, and pretty little graphs about equity and interest.

Today, this would be a simple website, but again, reliable Internet access wasn't a thing. So they built a client side application. They tested the heck out of it, and it worked well. Sales agents were happy. Customers were happy. The bank itself was happy.

Time passed, as it has a way of doing, and the agents started clamoring for a mobile web version, that they could use on their phones. Now, the first thought was, "Wire it up to the backend!" but the backend they had was a mainframe, and there was a dearth of mainframe developers. And while the mainframe was the source of truth, and the one place where mortgages actually lived, building a mortgage calculator that could do pretty visualizations was far easier- and they already had one.

The client app was in .NET, and it was easy enough to wrap the mortgage calculation objects up in a web service. A quick round of testing of the service proved that it worked just as well as the old client app, and everyone was happy - for awhile.

Sometimes, agents would run a calculation and get absolute absurd results. Developers, putting in exactly the same values into their test environment wouldn't see the bad output. Testing the errors in production didn't help either- it usually worked just fine. There was a Heisenbug, but how could a simple math calculation that had already been tested and used for years have a Heisenbug?

Well, the calculation ran by simulation- it simply iteratively applied payments and interest to generate the entire history of the loan. And as it turns out, because the client application which started this whole thing only ever needed one instance of the calculator, someone had made it a singleton. And in their web environment, this singleton wasn't scoped to a single request, it was a true global object, which meant when simultaneous requests were getting processed, they'd step on each other and throw off the iteration. And testing didn't find it right away, because none of their tests were simulating the effect of multiple simultaneous users.

The fix was simple- stop being a singleton, and ensure every request got its own instance. But it's also a good example of misapplication of patterns- there was no need in the client app to enforce uniqueness via the singleton pattern. A calculator that holds state probably shouldn't be a singleton in the first place.

[Advertisement] Utilize BuildMaster to release your software with confidence, at the pace your business demands. Download today!

10 years ago "certificate authorities normally issued certificate lifetimes lasting a year or more," remembers a new blog post Thursday by the EFF's engineering director. So in 2015 when the free cert authority Let's Encrypt first started issuing 90-day TLS certificates for websites, "it was considered a bold move, that helped push the ecosystem towards shorter certificate life times." And then this January Let's Encrypt announced new six-day certificates... This week saw a related announcement from the EFF engineering director. More than 31 million web sites maintain their HTTPS certificates using the EFF's Certbot tool (which automatically fetches free HTTPS certificates forever) — and Certbot is now supporting Let's Encrypt's six-day certificates. (It's accomplished through ACME profiles with dynamic renewal at 1/3rd of lifetime left or 1/2 of lifetime left, if the lifetime is shorter than 10 days): There is debate on how short these lifetimes should be, but with ACME profiles you can have the default or "classic" Let's Encrypt experience (90 days) or start actively using other profile types through Certbot with the --preferred-profile and --required-profile flags. For six day certificates, you can choose the "shortlived" profile. Why shorter lifetimes are better (according to the EFF's engineering director): If a certificate's private key is compromised, that compromise can't last as long. With shorter life spans for the certificates, automation is encouraged. Which facilitates robust security of web servers. Certificate revocation is historically flaky. Lifetimes 10 days and under prevent the need to invoke the revocation process and deal with continued usage of a compromised key.

Read more of this story at Slashdot.

Late Friday news broke that U.S. President Trump's new tariffs included exemptions for smartphones, computer monitors, semiconductors, and other electronics. But Sunday morning America's commerce secretary insisted "a special-focus type of tariff" was coming for those products, reports ABC News. President Trump "is saying they're exempt from the reciprocal tariffs," the commerce secretary told an interviewer, "but they're included in the semiconductor tariffs, which are coming in probably a month or two.... This is not like a permanent sort of exemption." The Wall Street Journal notes that Sunday the president himself posted on social media that "NOBODY is getting 'off the hook' for the unfair Trade Balances, and Non Monetary Tariff Barriers... There was no Tariff 'exception' announced on Friday. These products are subject to the existing 20% Fentanyl Tariffs, and they are just moving to a different Tariff 'bucket.'" "The administration is expected to take the first step toward enacting the new tariffs as soon as next week," reports the New York Times, "opening an investigation to determine the effects of semiconductor imports on national security." More from ABC News: Commerce Secretary Howard Lutnick said Sunday that the administration's decision Friday night to exempt a range of electronic devices from tariffs implemented earlier this month was only a temporary reprieve.. Lutnick said on "This Week" that the White House will implement "a tariff model in order to encourage" the semiconductor industry, as well as the pharmaceutical industry, to move its business to the United States. "We can't be beholden and rely upon foreign countries for fundamental things that we need," he said.... "These are things that are national security that we need to be made in America."

Read more of this story at Slashdot.

Stanford law school graduate Peter Thiel later co-founded Facebook, PayPal, and Palantir. But in 2010 Thiel also created the Thiel Fellowship, which annually gives 20 to 30 people under the age of 23 $100,000 "to encourage students to not stick around college." (College students must drop out in order to accept the fellowship.) And now Palantir "is taking a similar approach as it maneuvers to attract new talent," reports financial news site The Street: The company has launched what it refers to as the "Meritocracy Fellowship," a four-month internship program for recent high school graduates who have not enrolled in college. The position pays roughly $5,400 per month, more than plenty of post-college internship programs. Palantir's job posting suggests that the company is especially interested in candidates with experience in programming and statistical analysis. Palantir's job listing specifically says they launched their four-month fellowship "in response to the shortcomings of university admissions," promising it would be based "solely on merit and academic excellence" (requiring an SAT score over 1459 or an ACT score above 32.) "Opaque admissions standards at many American universities have displaced meritocracy and excellence..." As a result, qualified students are being denied an education based on subjective and shallow criteria. Absent meritocracy, campuses have become breeding grounds for extremism and chaos... Skip the debt. Skip the indoctrination. Get the Palantir Degree... Upon successful completion of the Meritocracy Fellowship, fellows that have excelled during their time at Palantir will be given the opportunity to interview for full-time employment at Palantir.

Read more of this story at Slashdot.

Remember how last weekend Meta claimed its "Maverick" AI model (in the newly-released Llama-4 series) beat GPT-4o and Gemini Flash 2 "on all benchmarks... This thing is a beast." And then how within a day several AI researchers pointed out that even Meta's own announcement admitted the Maverick tested on LM Arena was an "experimental chat version," as TechCrunch pointed out. ("As we've written about before, for various reasons, LM Arena has never been the most reliable measure of an AI model's performance. But AI companies generally haven't customized or otherwise fine-tuned their models to score better on LM Arena — or haven't admitted to doing so, at least.") Friday TechCrunch on what happened when LMArena tested the unmodified release version of Maverick (Llama-4-Maverick-17B-128E-Instruct). It ranked 32nd. "For the record, older models like Claude 3.5 Sonnet, released last June, and Gemini-1.5-Pro-002, released last September, rank higher," notes the tech site Neowin.

Read more of this story at Slashdot.

"More than three million children around the world are thought to have died in 2022 as a result of infections that are resistant to antibiotics," reports the BBC, citing a study by two leading experts in child health that used data from sources including the World Health Organization and the World Bank: Experts say this new study highlights a more than tenfold increase in AMR-related infections in children in just three years. The number could have been made worse by the impact of the Covid pandemic... The report's lead authors, Doctor Yanhong Jessika Hu of Murdoch Children's Research Institute in Australia and Professor Herb Harwell of the Clinton Health Access Initiative, point to a significant growth in the use of antibiotics that are meant to only be held back for the most serious infections. Between 2019 and 2021 the use of "watch antibiotics", drugs with a high risk of resistance, increased by 160% in South East Asia and 126% in Africa. Over the same period, "reserve antibiotics" — last-resort treatments for severe, multidrug-resistant infections — rose by 45% in South East Asia and 125% in Africa. The authors warn that if bacteria develop resistance to these antibiotics, there will be few, if any, alternatives for treating multidrug-resistant infections. "Antibiotics are ubiquitous around us," Professor Harwell warns in the article. "They end up in our food and the environment and so coming up with a single solution is not easy." The article also quotes a senior lecturer in microbiology at King's College London, who says the new study "marks a significant and alarming increase compared to previous data". "These findings should serve as a wake-up call for global health leaders. Without decisive action, AMR could undermine decades of progress in child health, particularly in the world's most vulnerable regions." Thanks to Slashdot reader Bruce66423 for sharing the article.

Read more of this story at Slashdot.

"It is somewhat remarkable that work on AmigaOS 3.X continues in 2025," notes Tom's Hardware, "given that Commodore International released AmigaOS 3.0 in 1992..." AmigaOS 3.1 came in 1993. And now... Work continues on AmigaOS 3.2 with the stewards of this classic Motorola 680x0 friendly operating system, Hyperion Entertainment, releasing version 3.2.3 a few days ago. In a news bulletin on the official site, Hyperion highlighted that the third update for AmigaOS 3.2 includes two years of (more than 50) fixes and enhancements... Hyperion began its quest to modernize and improve this classic version of AmigaOS for Motorola 680x0 platforms in 2018 when it released version 3.1.4. The AmigaOS 3.2 lineage began in 2021... This release is provided as a free update to owners of AmigaOS 3.2. If you don't already have this OS, you can get it now at official resellers like RetroPassion UK... Nowadays, Arm-based accelerators seem to be the path forward for modern Amiga, as opposed to retro Amiga, enthusiasts. AmigaOS 3.2.3 has a feather in its cap as it also supports classic 68K Amigas boosted by Arm accelerators such as the PiStorm.

Read more of this story at Slashdot.

"Can you help me take down the Texas lottery?" That's what a London banker-turned-bookmaker asked "acquaintances" in 2023, reports the Wall Street Journal. The plan was to buy "nearly every possible number in a coming drawing" — purchasing $1 tickets for 25.8 million possible combinations, since "The jackpot was heading to $95 million. If nobody else also picked the winning numbers, the profit would be nearly $60 million." Marantelli flew to the U.S. with a few trusted lieutenants. They set up shop in a defunct dentist's office, a warehouse and two other spots in Texas. The crew worked out a way to get official ticket-printing terminals. Trucks hauled in dozens of them and reams of paper... [Then Texas announced no winner in an earlier lottery, rolling its jackpot into another drawing three days later.] The machines — manned by a disparate bunch of associates and some of their children — screeched away nearly around the clock, spitting out 100 or more tickets every second. Texas politicians later likened the operation to a sweatshop. Trying to pull off the gambit required deep pockets and a knack for staying under the radar — both hallmarks of the secretive Tasmanian gambler who bankrolled the operation. Born Zeljko Ranogajec, he was nicknamed "the Joker" for his ability to pull off capers at far-flung casinos and racetracks. Adding to his mystique, he changed his name to John Wilson several decades ago. Among some associates, though, he still goes by Zeljko, or Z. Over the years, Ranogajec and his partners have won hundreds of millions of dollars by applying Wall Street-style analytics to betting opportunities around the world. Like card counters at a blackjack table, they use data and math to hunt for situations ripe for flipping the house edge in their favor. Then they throw piles of money at it, betting an estimated $10 billion annually. The Texas lottery play, one of their most ambitious operations ever, paid off spectacularly with a $57.8 million jackpot win. That, in turn, spilled their activities into public view and sparked a Texas-size uproar about whether other lotto players — and indeed the entire state — had been hoodwinked. Early this month, the state's lieutenant governor, Dan Patrick, called the crew's win "the biggest theft from the people of Texas in the history of Texas." In response to written questions addressed to Marantelli and Ranogajec, Glenn Gelband, a New Jersey lawyer who represents the limited partnership that claimed the Texas prize, said "all applicable laws, rules and regulations were followed...." Lottery officials and state lawmakers have taken steps to prevent a repeat. The article also looks at a group of Princeton University graduates calling themselves Black Swan Capital that's "won millions in recent years" by targetting state lottery drawings with unusually favorable odds. "State lottery directors say they are seeing more organized efforts to buy lottery tickets in bulk," according to the article, "but that the groups are largely operating legally and transparently..."

Read more of this story at Slashdot.

Somewhere in Montana sits the only coal-fired power plant in America that hasn't installed modern pollution controls to limit particulate matter, according to the Environmental Protecction Agency. Mining.com notes that it has the highest emission rate of fine particulate matter out of any U.S. coal-burning power plant. When inhaled, the finest particles are able to penetrate deep into the lungs and even potentially the bloodstream, exacerbating heart and lung disease, causing asthma attacks and even sometimes leading to premature death. Yet America's dirtiest coal-fired power plant — and dozens of others — "are being exempted from stringent air pollution mandates," reports Bloomberg, "as part of US. President Donald Trump's bid to revitalize the industry: Talen Energy Corp.'s Colstrip in Montana is among 47 plants receiving two-year waivers from rules to control mercury and other pollutants as part of a White House effort to ease regulation on coal-fired sites, according to a list seen by Bloomberg News. The exemptions were among a slew of actions announced by the White House Tuesday to expand the mining and use of coal. The Trump administration has argued coal is a vital part of the mix to ensure sufficient energy supply to meet booming demand for AI data centers. The carve-out, which begins in July 2027, lasts until July 2029, according to the proclamation. In an email to Bloomberg, a White House spokesperson said the move meant that America "will produce beautiful, clean coal" while addressing "necessary electrical demand from emerging technologies such as AI."

Read more of this story at Slashdot.

Linux Mint Debian Edition 7 "will come with full support for OEM installations," according to their monthly newsletter, so Linux Mint "can be pre-installed on computers which are sold throughout the World. It's a very important feature and it's one of the very few remaining things which wasn't supported by Linux Mint Debian Edition." Slashdot reader BrianFagioli speculates that "this could be a sign of something much bigger." OEM installs are typically reserved for operating systems meant to ship on hardware. It's how companies preload Linux on laptops without setting a username, password, or timezone... Mint has supported this for years — but only in its Ubuntu-based version. So why is this feature suddenly coming to Linux Mint Debian Edition, which the team has repeatedly described as a contingency? In other words, if the Debian variant is merely a plan B, why make it ready for OEMs? Their blog post goes on to speculate about possible explanations (like the hypothetical possibility of dissatisfaction with Snap packages or Canonical's decisions around telemetry and packaging).

Read more of this story at Slashdot.

When Microsoft announced it would stop developing MS-DOS after 1995, college student Jim Hall "packaged my own extended DOS utilities, as did others," according to the web site for the resulting "FreeDOS" project. Jim Hall is also Slashdot reader #2,985, and more than 30 years later he's "keeping the dream of the command prompt alive," writes Ars Technica. In a new article they note that last week the FreeDOS team released version 1.4, the first new stable update since 2022: The release has "a focus on stability" and includes an updated installer, new versions of common tools like fdisk, and format and the edlin text editor. The release also includes updated HTML Help files... As with older versions, the FreeDOS installer is available in multiple formats based on the kind of system you're installing it on. For any "modern" PC (where "modern" covers anything that's shipped since the turn of the millennium), ISO and USB installers are available for creating bootable CDs, DVDs, or USB drives. FreeDOS is also available for vintage systems as a completely separate "Floppy-Only Edition" that fits on 720KB, 1.44MB, or 1.2MB 5.25 and 3.5-inch floppy disks. Jim Hall composed a detailed introduction to FreeDOS 1.4 here. He also answered questions from Slashdot's readers back in 2000 and again in 2019.

Read more of this story at Slashdot.

"AMD processors were instrumental in achieving a new world record," reports Tom's Hardware, "during a recent Ansys Fluent computational fluid dynamics simulation run on the Frontier supercomputer at the Oak Ridge National Laboratory." The article points out that Frontier was the fastest supercomputer in the world until it was beaten by Lawrence Livermore Lab's El Capitan — with both computers powered by AMD GPUs: According to a press release by Ansys, it ran a 2.2-billion-cell axial turbine simulation for Baker Hughes, an energy technology company, testing its next-generation gas turbines aimed at increasing efficiency. The simulation previously took 38.5 hours to complete on 3,700 CPU cores. By using 1,024 AMD Instinct MI250X accelerators paired with AMD EPYC CPUs in Frontier, the simulation time was slashed to 1.5 hours. This is more than 25 times faster, allowing the company to see the impact of the changes it makes on designs much more quickly... Given those numbers, the Ansys Fluent CFD simulator apparently only used a fraction of the power available on Frontier. That means it has the potential to run even faster if it can utilize all the available accelerators on the supercomputer. It also shows that, despite Nvidia's market dominance in AI GPUs, AMD remains a formidable competitor, with its CPUs and GPUs serving as the brains of some of the fastest supercomputers on Earth.

Read more of this story at Slashdot.

"Researchers say that a person's intelligence plays a bigger role in their computer proficiency than previously believed," writes SciTechDaily, "so much so that practice alone may not be enough to ensure ease of use." A new study has found that general cognitive abilities, such as perception, reasoning, and memory, are more important than previously believed in determining a person's ability to perform everyday tasks on a computer... "It is clear that differences between individuals cannot be eliminated simply by means of training," says Antti Oulasvirta [a professor at Finland's Aalto University who conducted extensive human-computer interaction research with his team and the University of Helsinki Department of Psychology]. "In the future, user interfaces need to be streamlined for simpler use. This age-old goal has been forgotten at some point, and awkwardly designed interfaces have become a driver for the digital divide. "We cannot promote a deeper and more equal use of computers in society unless we solve this basic problem," Oulasvirta says... This is the first-ever study to measure users' actual ability to perform daily tasks on a PC, as previous studies have relied on participants self-assessing their abilities via questionnaires... "The study revealed that, in particular, working memory, attention, and executive functions stand out as the key abilities. When using a computer, you must determine the order in which things are done and keep in mind what has already been done. A purely mathematical or logical ability does not help in the same way," says university lecturer Viljami Salmela [from the University of Helsinki]. "Our results suggest that contemporary user interfaces are getting so complex that their design is starting to affect inclusivity," their paper concludes, saying that it ultimately raises a question. "How can we design user interfaces to decrease the role of cognitive abilities."

Read more of this story at Slashdot.

Celebrating Git's 20th anniversary, GitHub hosted a Q&A with Linus Torvalds, writes Its FOSS News. Among the other revelations: He says his college-age daughter sent a texting saying he's better known at her CS lab for Git than for Linux, "because they actually use Git for everything there." Which he describes as "ridiculous" because he maintained it for just four months before handing it off to Junio Hamano who's been heading up development for more than 19 years now. "When it did what I needed," Torvalds says, "I lost interest." Linus then goes on to share how Git was never a big thing for him, but a means to an end that prevented the Linux kernel from descending into chaos over the absence of a version control system. You see, before Git, Linux used BitKeeper for version control, but its proprietary licensing didn't sit too well with other Linux contributors, and Linus Torvalds had to look for alternatives. As it turned out, existing tools like CVS and Subversion were too slow for the job at hand, prompting him to build a new tool from scratch, with the coding part just taking 10 days for an early self-hostable version of Git. In its initial days, there were some teething issues, where users would complain about Git to Linus, even finding it too difficult to use, but things got calmer as the tool developed further. Torvalds thinks some early adopters had trouble because they were coming from a background that was more like CVS. "The Git mindset, I came at it from a file system person's standpoint, where I had this disdain and almost hatred of most source control management projects, so I was not at all interested in maintaining the status quo."

Read more of this story at Slashdot.

Here's an update from the Wall Street Journal about a "widespread series of alarming cyberattacks on U.S. infrastructure." China was behind it, "Chinese officials acknowledged in a secret December meeting... according to people familiar with the matter..." The Chinese delegation linked years of intrusions into computer networks at U.S. ports, water utilities, airports and other targets, to increasing U.S. policy support for Taiwan, the people, who declined to be named, said... U.S. officials went public last year with unusually dire warnings about the uncovered Volt Typhoon effort. They publicly attributed it to Beijing trying to get a foothold in U.S. computer networks so its army could quickly detonate damaging cyberattacks during a future conflict. [American officials at the meeting perceived the remarks as "intended to scare the U.S. from involving itself if a conflict erupts in the Taiwan Strait."] The Chinese official's remarks at the December meeting were indirect and somewhat ambiguous, but most of the American delegation in the room interpreted it as a tacit admission and a warning to the U.S. about Taiwan, a former U.S. official familiar with the meeting said... In a statement, the State Department didn't comment on the meeting but said the U.S. had made clear to Beijing it will "take actions in response to Chinese malicious cyber activity," describing the hacking as "some of the gravest and most persistent threats to U.S. national security...." A Chinese official would likely only acknowledge the intrusions even in a private setting if instructed to do so by the top levels of Xi's government, said Dakota Cary, a China expert at the cybersecurity firm SentinelOne. The tacit admission is significant, he said, because it may reflect a view in Beijing that the likeliest military conflict with the U.S. would be over Taiwan and that a more direct signal about the stakes of involvement needed to be sent to the Trump administration. "China wants U.S. officials to know that, yes, they do have this capability, and they are willing to use it," Cary said. The article notes that top U.S. officials have said America's Defense Department "will pursue more offensive cyber strikes against China." But it adds that the administration "also plans to dismiss hundreds of cybersecurity workers in sweeping job cuts and last week fired the director of the National Security Agency and his deputy, fanning concerns from some intelligence officials and lawmakers that the government would be weakened in defending against the attacks."

Read more of this story at Slashdot.

Long-time Slashdot reader sandbagger brings news that in June "a rare screening of the original 1977 Star Wars movie — complete with Han shooting first — will be shown at a theater in London..." Petapixel reports: Subsequent alterations made to the film are well-documented: Han Solo being shot at by the bounty hunter Greedo first, rather than the original in which anti-hero Han killed Greedo without being shot at. Then there is the addition of a CGI Jabba the Hutt who was only mentioned by name in the 1977 release. Fans have also complained about the color grading painted on re-releases. But for those attending the British Film Institute (BFI)'s Film on Film festival in London, they are in for a treat. Star Wars will play not once but twice on the opening night on June 12... BFI says the print is "unfaded" and "ready to transport us to a long time ago, and a galaxy far, far away, back to the moment in 1977 when George Lucas's vision cast a spell on cinema audiences." Lucas has little sympathy for those who want to see his first version of the film, telling the Associated Press in 2004, "I'm sorry you saw half a completed film and fell in love with it. But I want it to be the way I want it to be." The film festival promises "a glorious dye-transfer" of Star Wars — and will also show "a pristine 35mm print of the original US pilot episode of Twin Peaks, screening for the first time ever in the UK" — followed by a Q&A with the 1990 show's original star Kyle MacLachlan. On display to coincide with the opening night screening there is also a rare opportunity to view material from the original continuity script for Star Wars, which includes rare on-set Polaroids, annotations and deleted scenes. The script is from the collection of Ann Skinner, script editor on the original film, and is now cared for by the BFI National Archive.

Read more of this story at Slashdot.

Slashdot reader king*jojo shared this article from The Register: A 23-year-old side-channel attack for spying on people's web browsing histories will get shut down in the forthcoming Chrome 136, released last Thursday to the Chrome beta channel. At least that's the hope. The privacy attack, referred to as browser history sniffing, involves reading the color values of web links on a page to see if the linked pages have been visited previously... Web publishers and third parties capable of running scripts, have used this technique to present links on a web page to a visitor and then check how the visitor's browser set the color for those links on the rendered web page... The attack was mitigated about 15 years ago, though not effectively. Other ways to check link color information beyond the getComputedStyle method were developed... Chrome 136, due to see stable channel release on April 23, 2025, "is the first major browser to render these attacks obsolete," explained Kyra Seevers, Google software engineer in a blog post. This is something of a turnabout for the Chrome team, which twice marked Chromium bug reports for the issue as "won't fix." David Baron, presently a Google software engineer who worked for Mozilla at the time, filed a Firefox bug report about the issue back on May 28, 2002... On March 9, 2010, Baron published a blog post outlining the issue and proposing some mitigations...

Read more of this story at Slashdot.

America's Justice Department "has shut down its unit that investigates cryptocurrency fraud," reports USA Today. A Monday night memo from U.S. Deputy Attorney General Todd Blanche said the shut down was "effective immediately." Blanche directed the closure of the National Cryptocurrency Enforcement Team and ordered prosecutors to pivot to investigating transnational criminal organizations and terrorist groups that use crypto to engage in illicit transactions... In his four-page memo, Blanche said the new order was meant to bring the Justice Department in line with Trump's own Executive Order 14178, which decreed that clarity and certainty regarding enforcement policy "are essential to supporting a vibrant and inclusive digital economy and innovation in digital assets." Blanche, one of several Trump criminal defense lawyers at the top ranks of DOJ, said the president "has also made clear that '[w]e are going to end the regulatory weaponization against digital assets'..." Consistent with that narrowing of its cryptocurrency enforcement policy, the DOJ Market Integrity and Major Frauds Unit will also cease cryptocurrency enforcement to focus on other administration priorities, including immigration and procurement fraud, Blanche said. The Washington Post got this assessment from Yesha Yadav, a Vanderbilt University law professor who closely follows cryptocurrency and financial markets. "It's hard to underestimate the importance this task force has had ... in pursuing some really huge crypto hacks and cases." More from USA Today: Public corruption and transnational crime experts warned that shutting down the unit could divert critical resources from efforts to stop criminals and corrupt regimes from using cryptocurrency for illicit gain, even as Trump claims he wants to crack down on them. "Dangerous US adversaries rely on cryptocurrencies to launder money and evade sanctions," said Nate Sibley, an anti-corruption expert and director of the Kleptocracy Initiative at the conservative Hudson Institute think tank in Washington, D.C., in a post on X. "If this is accurate, hard to see how it squares with — for example-cracking down on cartel finances or maximum pressure sanctions on Iran...." Trump's so-called "memecoin" surged from less than $10 on the Saturday before his inauguration to as high as $74.59 before eventually giving up some of its gains. The token, branded $TRUMP, has been criticized by ethics experts as a conflict of interest for the president since the company could likely benefit from his pro-crypto policies... Last month, Trump signed an order to create a federal Strategic Bitcoin Reserve, signaling new federal support for cryptocurrency in general and Bitcoin in particular. Since the first-ever White House crypto summit in March, America's Securities and Exchange Commission "has dropped more than a dozen cases against crypto firms," notes the Washington Post: Last month, both the Federal Deposit Insurance Corp. and the Office of the Comptroller of the Currency pledged to stop evaluating banks based on "reputational risk" — a practice that some venture capitalists have claimed unfairly "de-banked" founders of cryptocurrency start-ups. In other news, executives from cryptocurrency exchange Binance "met with Treasury Department officials last month," reports the Wall Street Journal, asking them to remove a U.S. monitor overseeing their compliance with anti-money-laundering laws, according to people familiar with the talks. The article adds that Binance is also concurrently "exploring" a deal with the Trump family to list its new dollar-pegged stablecoin which "could catapult it into a huge market and potentially bring in billions in profit for the family. "

Read more of this story at Slashdot.

Black holes "often exhibit long periods of dormancy," writes Popular Science, adding that astronomers had never witnessed a black hole "wake up" in real time. "Until now..." In February of 2024 X-ray bursts were spotted coming out of a black hole named Ansky by Lorena Hernández-García at Chile's Valparaiso University, according to the article. And what astronomers have now seen "challenges prevailing theories about black hole lifecycles." Hernández-García and collaborators then determined the black hole was displaying a phenomenon known as a quasiperiodic eruption, or QPE [a short-lived flaring event...] While a black hole inevitably destroys everything it captures, objects behave differently during their impending demise. A star, for example, generally stretches apart into a bright, hot, fast-spinning disc known as an accretion disc. Most astronomers have theorized that black holes generate QPEs when a comparatively small object like a star or even a smaller black hole collides with an accretion disc. In the case of Ansky, however, there isn't any evidence linking it to the death of a star. "The bursts of X-rays from Ansky are ten times longer and ten times more luminous than what we see from a typical QPE," said MIT PhD student and study co-author Joheen Chakraborty. "Each of these eruptions is releasing a hundred times more energy than we have seen elsewhere. Ansky's eruptions also show the longest cadence ever observed, of about 4.5 days." Astronomers must now consider other explanations for Ansky's remarkable behavior. One theory posits that the accretion disc could come from nearby galactic gas pulled in by the black hole instead of a star. If true, then the X-rays may originate from high energy shocks to the disc caused by a small cosmic object repeatedly passing through and disrupting orbital matter. It's detailed in a study published on April 11 in Nature Astronomy.... Meanwhile, scientists "have uncovered the strongest evidence yet for the existence of elusive intermediate-mass black holes," reports SciTechDaily. And there's more black hole news from RockDoctor (Slashdot reader #15,477): Given the recent work on galaxy-centre Super-Massive Black Holes (SMBHs), you may be surprised to learn that the only Stellar-Mass Black Holes (SMBHs ... uh, "BHs") identified to-date have been by their gravitational waves, as they merge with another BH or a neutron star. But the long-running OGLE (Optical Gravitational Lensing Experiment) project (1992 — present) has recently confirmed that it has detected an isolated BH not orbiting another bright object, or "swallowing" much of anything... In this case, 16 other telescopes performed sensitive astrometry (position measurement) over 11 years including the Hubble Space Telescope (HST). These multiple measurements plot an ellipse on the sky, mirroring the movement of the Earth around it's orbit — parallax. Which means this is a relatively close object (1520 parsecs / ~5000 light years).... And there is no sign of a third light emitting body nearby, which means this is an isolated black hole, not orbiting any other body (or, indeed, with any other [small] star orbiting it).

Read more of this story at Slashdot.