BrianFagioli writes: ARMO, the company behind Kubescape, has uncovered what could be one of the biggest blind spots in Linux security today. The company has released a working rootkit called "Curing" that uses io_uring, a feature built into the Linux kernel, to stealthily perform malicious activities without being caught by many of the detection solutions currently on the market. At the heart of the issue is the heavy reliance on monitoring system calls, which has become the go-to method for many cybersecurity vendors. The problem? Attackers can completely sidestep these monitored calls by leaning on io_uring instead. This clever method could let bad actors quietly make network connections or tamper with files without triggering the usual alarms.

Read more of this story at Slashdot.

An anonymous reader quotes a report from the Washington Post: Oil and gas companies are facing hundreds of lawsuits around the world testing whether they can be held responsible for their role in causing climate change. Now, two scientists say they've built a tool that can calculate how much damage each company's planet-warming pollution has caused -- and how much money they could be forced to pay if they're successfully sued. Collectively, greenhouse emissions from 111 fossil fuel companies caused the world $28 trillion in damage from extreme heat from 1991 to 2020, according to a paper published Wednesday in Nature. The new analysis could fuel an emerging legal fight.The authors, Dartmouth associate professor Justin Mankin and Chris Callahan, a postdoctoral researcher at Stanford University, say their model can determine a specific company's share of responsibility over any time period. [...] Callahan and Mankin's work combines all of these steps -- estimating a company's historical emissions, figuring out how much those emissions contributed to climate change and calculating how much economic damage climate change has caused -- into one "end-to-end" model that links one polluter's emissions to a dollar amount of economic damage from extreme heat. By their calculation, Saudi Aramco is on the hook for $2.05 trillion in economic losses from extreme heat from 1991 to 2020. Russia's Gazprom is responsible for $2 trillion, Chevron for $1.98 trillion, ExxonMobil for $1.91 trillion and BP for $1.45 trillion. Industry groups and companies tend to object to the methodologies of attribution science. They could seek to contest the assumptions that went into each step of Mankin and Callahan's model. Indeed, every step in that process introduces some room for error, and stringing together all of those steps compounds the uncertainty in the model, according to Delta Merner, lead scientist at theScience Hub for Climate Litigation, which connects scientists and lawyers bringing climate lawsuits. She also mentioned that the researchers relied on a commonly used but simplified climate model known as the Finite Amplitude Impulse Response (FAIR) model. "It is robust for the purpose of what the study is doing," Merner said, "but these models do make assumptions about climate sensitivity, about carbon cycle behavior, energy balance, and all of the simplifications in there do introduce some uncertainty." The exact dollar figures in the paper aren't intended as gospel. But outside scientists said Mankin and Callahan use well-established, peer-reviewed datasets and climate models for every step in their process, and they are transparent about the uncertainty in the numbers.

Read more of this story at Slashdot.

To celebrate the Hubble Space Telescope's 35th anniversary in orbit, NASA and ESA released a series of new, out-out-of-this-world images spanning planets, nebulae, and galaxies. From a press release: Hubble today is at the peak of its scientific return thanks to the dedication, perseverance and skills of engineers, scientists and mission operators. Astronaut shuttle crews gallantly chased and rendezvoused with Hubble on five servicing missions from 1993 to 2009. The astronauts, including ESA astronauts on two of the servicing missions, upgraded Hubble's cameras, computers and other support systems. By extending Hubble's operational life the telescope has made nearly 1.7 million observations, looking at approximately 55,000 astronomical targets. Hubble discoveries have resulted in over 22,000 papers and over 1.3 million citations as of February 2025. All the data collected by Hubble is archived and currently adds up to over 400 terabytes. The demand for observing time remains very high with 6:1 oversubscriptions, making it one of the most in-demand observatories today. Hubble's long operational life has allowed astronomers to see astronomical changes spanning over three decades: seasonal variability on the planets in our solar system, black hole jets traveling at nearly the speed of light, stellar convulsions, asteroid collisions, expanding supernova bubbles, and much more.

Read more of this story at Slashdot.

Researchers in Germany successfully demonstrated coherent quantum communications over 254 km of existing commercial telecom fiber, marking the first real-world deployment of such a system without cryogenic cooling. Phys.Org reports: Their system uses a coherence-based twin-field quantum key distribution, which facilitates the distribution of secure information over long distances. The quantum communications network was deployed over three telecommunication data centers in Germany (Frankfurt, Kehl and Kirchfeld), connected by 254 km of commercial optical fiber -- a new record distance for real-world and practical quantum key distribution, according to the authors. This demonstration indicates that advanced quantum communications protocols that exploit the coherence of light can be made to work over existing telecom infrastructure. The research has been published in the journal Nature.

Read more of this story at Slashdot.

DZ's tech lead is a doctor of computer science, and that doctor loves to write code. But you already know that "PhD" stands for "Piled high and deep", and that's true of the tech lead's clue.

For example, in C#:

private List<Foo> ExtractListForId(string id) { List<Foo> list = new List<Foo>(); lock (this) { var items = _foos.Where(f => f.Id == id).ToList(); foreach (var item in items) { list.Add(item); } } return list; }

The purpose of this function is to find all the elements in a list where they have a matching ID. That's accomplished in one line: _foo.Where(f => f.Id == id). For some reason, the function goes through the extra step of iterating across the returned list and constructing a new one. There's no real good reason for this, though it does force LINQ to be eager- by default, the Where expression won't be evaluated until you check the results.

The lock is in there for thread safety, which hey- the enumerator returned by Where is not threadsafe, so that's not a useless thing to do there. But it's that lock which hints at the deeper WTF here: our PhD-having-tech-lead knows that adding threads ensures you're using more of the CPU, and they've thrown threads all over the place without any real sense to it. There's no clear data ownership of any given thread, which means everything is locked to hell and back, the whole thing frequently deadlocks, and it's impossible to debug.

It's taken days for DZ to get this much of a picture of what's going on in the code, and further untangling of this multithreaded pile of spaghetti is going to take many, many more days- and much, much more of DZ's sanity.

[Advertisement] Picking up NuGet is easy. Getting good at it takes time. Download our guide to learn the best practice of NuGet for the Enterprise.

An anonymous reader quotes a report from Business Insider: There is some microplastics in normal, healthy arteries," Dr. Ross Clark, a University of New Mexico medical researcher who led the study, told Business Insider before he presented his findings at the meeting of the American Heart Association in Baltimore on Tuesday. "But the amount that's there when they become diseased -- and become diseased with symptoms -- is really, really different," Clark said. Clark and his team measured microplastics and nanoplastics in the dangerous, fatty plaque that can build up in arteries, block blood flow, and cause strokes or heart attacks. Compared to the walls of healthy plaque-free arteries, plaque buildup had 16 times more plastic -- just in the people who didn't have symptoms. In people who had experienced stroke, mini-stroke, or vision loss, the plaque had 51 times more plastic. [...] To investigate why, Clark studied samples from 48 people's carotid arteries -- the pair of superhighways in your neck that channel blood to your brain. The difference in plastic quantities surprised him, but his team found another concerning trend, too. Cells in the plaque with lots of plastic showed different gene activity than those with low plastic. In the high-plastic environment, one group of immune cells had switched off a gene that's associated with turning off inflammation. Clark's team also found genetic differences in a group of stem cells thought to help prevent heart attacks and strokes by reducing inflammation and stabilizing plaque. "Could it be that microplastics are somehow altering their gene expression?" Clark said. He added that there's "lots more research needed to fully establish that, but at least it gives us a hint as to where to look." Ross, who specializes in the genetic mechanisms behind disease, agreed that more research is needed, but added that she thinks "these plastics are doing something with these plaques." Tracking microplastics in the human body is a new scientific endeavor as of the last couple years. It's not perfect. Clark's team heated the plaque samples to more than 1,000 degrees Fahrenheit to vaporize plastic polymers and break them down into smaller organic molecules, which can be identified and measured by their mass and other properties. Unfortunately, the lipids in plaque can break down into chemicals that look very similar to polyethylene, the most common plastic found in everything from plastic bags to car parts. "Because we know about this problem, we've taken a lot of steps to remove those lipids and confirm their removal, so that we're sure we're measuring polyethylene," Clark said. Still, he added, "it's a big limitation, and it should be acknowledged that these types of methodologies are continuously improving." "Almost all of what we know about microplastics in the human body, no matter where you look, can be summed up as: It's there, and we need to study further as to what it's doing, if anything," Clark said.

Read more of this story at Slashdot.

Five years removed from the onset of the Covid pandemic, Google is demanding that some remote employees return to the office if they want to keep their jobs and avoid being part of broader cost cuts at the company. CNBC reports: Several units within Google have told remote staffers that their roles may be at risk if they don't start showing up at the closest office for a hybrid work schedule, according to internal documents viewed by CNBC. Some of those employees were previously approved for remote work.

Read more of this story at Slashdot.

New Jersey sued the property management software company RealPage, accusing it and 10 of the state's largest landlords of conspiring to drive up residential rents, violating federal and state antitrust laws and New Jersey consumer fraud laws. From a report: The complaint filed on Wednesday by state Attorney General Matthew Platkin said the defendants, including AvalonBay Communities illegally used RealPage's revenue management software and algorithms to inflate rents for apartments in multifamily properties. New Jersey said the defendants also quietly exchanged non-public data such as lease prices, amenities, concessions offered, property values and housing inventory, in order to align pricing and avoid competition to lower rents. The state said the collusion has inflated rents for hundreds of thousands of residents, with half of low-income renters paying more than 30% of their gross incomes toward rent. Many real estate and financial experts recommend a 30% limit.

Read more of this story at Slashdot.

A draft executive order from the Trump administration proposes integrating AI into K-12 education by directing federal agencies to promote AI literacy, train teachers, and establish public-private partnerships. "The draft is marked 'predecisional' and could be subject to change before it is signed, or it could be abandoned," notes the Washington Post. From the report: Titled "Advancing artificial intelligence education for American youth," the draft order would establish a White House task force on AI education that would be chaired by Michael Kratsios, director of the Office of Science and Technology Policy, and would include the secretaries of education, agriculture, labor and energy, as well as Trump's special adviser for AI and cryptocurrency, David Sacks. The draft order would instruct federal agencies to seek public-private partnerships with industry, academia and nonprofit groups in efforts to teach students "foundational AI literacy and critical thinking skills." The task force should look for existing federal funding such as grants that could be used for AI programs, and agencies should prioritize spending on AI education, according to the draft order. It would also instruct Education Secretary Linda McMahon to prioritize federal grant funding for training teachers on how to use AI, including for administrative tasks and teacher training and evaluation. All educators should undergo professional development to integrate AI into all subject areas, the draft order says. It would also establish a "Presidential AI Challenge" -- a competition for students and educators to demonstrate their AI skills -- and instruct Labor Secretary Lori Chavez-DeRemer to develop registered apprenticeships in AI-related occupations. The focus is on K-12 education, but the draft order says, "Our Nation must also make resources available for lifelong learners to develop new skills for a changing workforce."

Read more of this story at Slashdot.

Google revealed in court that its Gemini AI chatbot reached 350 million monthly active users worldwide as of March 2025 -- up from 9 million daily users in October 2024. TechCrunch reports: Usage of Google's AI offerings has exploded in the last year. Gemini had just 9 million daily active users in October 2024, but last month, the company reportedly logged 35 million daily active users, according to its data. Gemini still lags behind the industry's most popular AI tools, however. Google estimates that ChatGPT had roughly 600 million monthly active users in March, according to the company's data shown in court. That puts ChatGPT on a similar user base to Meta AI, which CEO Mark Zuckerberg said in September was nearing 500 million monthly users.

Read more of this story at Slashdot.

WhatsApp is rolling out a new "Advanced Chat Privacy" feature that blocks others from exporting chat histories or automatically downloading media. While it doesn't stop screenshots or manual downloads, it marks the first step in WhatsApp's plan to enhance in-chat privacy protections. The Verge reports: By default, WhatsApp saves photos and videos in a chat to your phone's local storage. It also lets you and your recipients export chats (with or without media) to your messages, email, or notes app. The Advanced Chat Privacy setting will prevent this in group and individual chats. [...] WhatsApp says this is its "first version" of the feature, and that it plans to add more protections down the line. "We think this feature is best used when talking with groups where you may not know everyone closely but are nevertheless sensitive in nature," WhatsApp says in its announcement. WABetaInfo first spotted this feature earlier this month, and now it's rolling out to the latest version of the app. You can turn on the setting by tapping the name of your chat and selecting Advanced Chat Privacy.

Read more of this story at Slashdot.

An anonymous reader quotes a report from Ars Technica: Wizards of the Coast has released the System Reference Document, the heart of the three core rule books that constitute Dungeons & Dragons' 2024 gameplay, under a Creative Commons license. This means the company cannot alter the deal further, like it almost did in early 2023, leading to considerable pushback and, eventually, a retreat. It was a long quest, but the lawful good party has earned some long-term rewards, including a new, similarly licensed reference book. [...] Version 5.2 of the SRD, all 360-plus pages of it, has now been released under the same Creative Commons license. The major change is that it includes more 2024 5th edition (i.e., D&D One) rules and content, while version 5.1 focused on 2014 rules. Legally, you can now design and publish campaigns under the 2024 5th edition rule set. More importantly, more aspects of the newest D&D rule books are available under a free license: - "Rhythm of Play" and "Exploration" documentation - More character origins and backgrounds, including criminal, sage, soldier, and the goliath and orc species. - 16 feats, including archery, great weapon fighting, and seven boons - Five bits of equipment, 20 spells, 15 magic items, and 17 monsters, including the hippopotamus There are some aspects of D&D you still can't really touch without bumping up against copyrights. Certain monsters from the Monster Manual, like the Kraken, are in the public domain, but their specific stats in the D&D rulebook are copyrighted. Iconic creatures and species like the Beholder, Displacer Beast, Illithid, Githyanki, Yuan-Ti, and others remain the property of WotC (and thereby Hasbro). As a creator, you'll still need to do some History (or is it Arcana?) checks before you publish and sell.

Read more of this story at Slashdot.

Discord CEO and co-founder Jason Citron is stepping down from his leadership role at the company and being replaced by Humam Sakhnini, a former executive from Activision Blizzard. "Citron will remain on Discord's board of directors, and fellow co-founder Stanislav Vishnevskiy will continue acting as the company's chief technology officer," notes Engadget. From the report: There's an important financial context to Citron's move. The New York Times reported in March that Discord was meeting with investors to take the company public. Sakhnini has experience acting as a leader of a public company. He was also the President of King Digital -- the creator of Candy Crush and other popular mobile games -- after the company was acquired by Activision Blizzard. A veteran executive could be a natural fit to usher Discord to an IPO. Citron didn't deny the plan when VentureBeat asked if the company would go public: "As you can imagine, hiring someone like Humam is a step in that direction." "From the very beginning, our mission has been about bringing people together around games," Citron said in a statement. "It's a mission I've dedicated my career to, and I'm confident that passing the torch to Humam is the right evolution for Discord's future." While initially pitched as a way to talk to friend's before, during and after playing games, Discord has morphed into a much larger and more general social platform, serving "more than 200 million monthly active users worldwide," the company says.

Read more of this story at Slashdot.

Meta has expanded both the feature set and availability of its Ray-Ban smart glasses. Notable updates include live translation with offline support through downloadable language packs, the ability to send messages and make calls via Instagram, and conversations with Meta AI based on real-time visual context. The Verge reports: Live translation was first teased at Meta Connect 2024 last October, and saw a limited rollout through Meta's Early Access Program in select countries last December. Starting today it's getting a wider rollout to all the markets where the Ray-Ban Meta smart glasses are available. You can hold a conversation with someone who speaks English, French, Italian, or Spanish, and hear a real-time translation through the smart glasses in your preferred language. If you download a language pack in advance, you can use the live translations feature without Wi-Fi or access to a cellular network, making it more convenient to use while traveling abroad. Meta also highlighted a few other features that are still enroute or getting an expanded release. Live AI, which allows the Meta AI smart assistant to continuously see what you do for more natural conversations is now "coming soon to general availability in the US and Canada." The ability to "send and receive direct messages, photos, audio calls, and video calls from Instagram on your glasses," similar to functionality already available through WhatsApp, Messenger, and iOS and Android's native messaging apps, is coming soon as well. Access to music apps like Spotify, Amazon Music, Shazam, and Apple Music is starting to expand beyond the US and Canada, Meta says. However, asking Meta AI to play music, or for more information about what you're listening to, will still only be available to those with their "default language is set to English."

Read more of this story at Slashdot.

An anonymous reader quotes a report from Ars Technica: On Monday, the State Bar of California revealed that it used AI to develop a portion of multiple-choice questions on its February 2025 bar exam, causing outrage among law school faculty and test takers. The admission comes after weeks of complaints about technical problems and irregularities during the exam administration, reports the Los Angeles Times. The State Bar disclosed that its psychometrician (a person skilled in administrating psychological tests), ACS Ventures, created 23 of the 171 scored multiple-choice questions with AI assistance. Another 48 questions came from a first-year law student exam, while Kaplan Exam Services developed the remaining 100 questions. The State Bar defended its practices, telling the LA Times that all questions underwent review by content validation panels and subject matter experts before the exam. "The ACS questions were developed with the assistance of AI and subsequently reviewed by content validation panels and a subject matter expert in advance of the exam," wrote State Bar Executive Director Leah Wilson in a press release. According to the LA Times, the revelation has drawn strong criticism from several legal education experts. "The debacle that was the February 2025 bar exam is worse than we imagined," said Mary Basick, assistant dean of academic skills at the University of California, Irvine School of Law. "I'm almost speechless. Having the questions drafted by non-lawyers using artificial intelligence is just unbelievable." Katie Moran, an associate professor at the University of San Francisco School of Law who specializes in bar exam preparation, called it "a staggering admission." She pointed out that the same company that drafted AI-generated questions also evaluated and approved them for use on the exam. The report notes that the AI disclosure follows technical glitches with the February exam (like login issues, screen lag, and confusing questions), which led to a federal lawsuit against Meazure Learning and calls for a State Bar audit.

Read more of this story at Slashdot.

An anonymous reader shares a report: For two years, ChatGPT has been OpenAI's cash cow. But by the end of the decade, the company has told some potential and current investors it expects combined sales from agents and other new products to exceed its popular chatbot, lifting total sales to $125 billion in 2029 and $174 billion the next year, according to documents seen by The Information. The projections, which would propel the 10-year-old startup's sales toward the level of Nvidia or Meta Platforms today, reflect rapid revenue gains from agents, or AI software that can take actions on behalf of customers, as well as other new products. These include those tied to "free user monetization," likely meaning money made from OpenAI's nonpaying users.

Read more of this story at Slashdot.

Nintendo has filed a request for subpoena in California's Northern District Court to compel Discord to reveal the identity of user "GameFreakOUT," the alleged source of last year's extensive Pokemon leak. The company is demanding the name, address, phone number, and email of the individual behind the "Teraleak," which contained claimed source code for upcoming title Pokemon Legends: Z-A, next-generation Pokemon games, builds of older titles, and numerous concept art and lore documents. Court documents obtained by Polygon show Nintendo included a partially redacted Discord screenshot as evidence, where GameFreakOUT shared files in a server named "FreakLeak." The breach occurred around October 12, 2024, two days after Game Freak publicly acknowledged a hack affecting employee information without confirming game data theft.

Read more of this story at Slashdot.

Apple was fined 500 million euros ($570 million) on Wednesday and Meta 200 million euros, as European Union antitrust regulators handed out the first sanctions under landmark legislation aimed at curbing the power of Big Tech. From a report: The EU fines could stoke tensions with U.S. President Donald Trump who has threatened to levy tariffs against countries that penalise U.S. companies. WSJ adds more details: The commission also issued cease-and-desist orders that could have a bigger impact than the fines. One order targets Apple's App Store and the other takes aim at Meta's use of personalized ads -- important revenue streams for each company. [...] The EU's action against Meta focuses on the company's effort to get users to agree to seeing personalized ads on Instagram and Facebook -- its main source of revenue. The commission ordered Meta to stop requiring users to either agree to those ads or pay for a subscription. It said it was still evaluating whether a "less-personalized ads" option that Meta introduced last fall complies with that order, raising the specter of further changes. The Apple case deals with the company's App Store rules. The commission said Apple had failed to comply with an obligation to allow app developers to inform customers, free of charge, of alternative ways to purchase digital products.

Read more of this story at Slashdot.

The world's coral reefs have been pushed into "uncharted territory" by the worst global bleaching event on record that has now hit more than 80% of the planet's reefs, scientists have warned. From a report: Reefs in at least 82 countries and territories have been exposed to enough heat to turn corals white since the global event started in January 2023, the latest data from the US government's Coral Reef Watch shows. Coral reefs are known as the rainforests of the sea because of their high concentration of biodiversity that supports about a third of all marine species and a billion people. But record high ocean temperatures have spread like an underwater wildfire over corals across the Pacific, Atlantic and Indian oceans, damaging and killing countless corals.

Read more of this story at Slashdot.

Amazon's internet-from-space venture is struggling to ramp up production, jeopardizing its ability to meet a government deadline to have more than 1,600 satellites in orbit by next summer. From a report: Project Kuiper has completed just a few dozen satellites so far, more than a year into its manufacturing program, according to three people familiar with the situation. The slow pace, combined with rocket launch delays, means the company will probably have to seek an extension from the Federal Communications Commission, said the people, who requested anonymity to discuss confidential matters. The agency, which has oversight of transmissions from space, expects the company to have half its planned constellation of 3,236 satellites operating by the end of July 2026. To meet that requirement, Amazon would have to at least quadruple the current rate of production, which has yet to consistently reach one satellite a day, two of the people said.

Read more of this story at Slashdot.