Republicans

Trump Wins US Presidency For Second Time (decisiondeskhq.com) 1605

Major media outlets are beginning to declare former President Trump the winner of the 2024 presidential election, having secured 270 electoral votes. "He becomes the first president in more than 120 years to lose the White House, and then to come back and win it again, after President Grover Cleveland in 1892," notes The Hill. As with previous election announcements on Slashdot, this is your chance to talk about it and what it means for the future of our nation.

In a victory speech, Trump said that he was the leader of "the greatest political movement of all time." He said: "We overcame obstacles that nobody thought possible," adding that he would take office with an "unprecedented and powerful mandate." President Trump has vowed a radical reshaping of American government, tasking SpaceX and Tesla chief executive Elon Musk "with conducting a complete financial and performance audit of the entire federal government and making recommendations for drastic reforms."

UPDATE 12:30 PM PST: Vice President Kamala Harris has officially conceded the 2024 presidential election, calling former President Trump to offer her congratulations. She's expected to make a concession speech at Howard University at 4:00 PM EST. You can stream the speech here.
Space

World's First Wood-Paneled Satellite Launched Into Space (bbc.com) 47

SpaceX has launched the world's first wood-paneled satellite into space "to test the suitability of timber as a renewable building material in future exploration of destinations like the Moon and Mars," reports the BBC. From the report: Made by researchers in Japan, the tiny satellite weighing just 900g is heading for the International Space Station on a SpaceX mission. It will then be released into orbit above the Earth. Named LignoSat, after the Latin word for wood, its panels have been built from a type of magnolia tree, using a traditional technique without screws or glue. Researchers at Kyoto University who developed it hope it may be possible in the future to replace some metals used in space exploration with wood.

"Wood is more durable in space than on Earth because there's no water or oxygen that would rot or inflame it," Kyoto University forest science professor Koji Murata told Reuters news agency. "Early 1900s airplanes were made of wood," Prof Murata said. "A wooden satellite should be feasible, too." If trees could one day be planted on the Moon or Mars, wood might also provide material for colonies in space in the future, the researchers hope. Along with its wood panels, LignoSat also incorporates traditional aluminium structures and electronic components. It has sensors on board to monitor how its wood reacts to the extreme environment of space during the six months it will orbit the Earth.
You can watch the launch on YouTube.
Nintendo

Newest Device To Run Doom: Nintendo's Alarm Clock 9

A hardware hacker has successfully modified Nintendo's $100 Alarmo device to run the classic video game Doom, marking another milestone in the gaming community's tradition of porting the 1993 shooter to unconventional devices.

YouTuber GaryOderNichts demonstrated the 2.8-inch circular alarm clock running Chocolate Doom natively, using the device's wheel for movement and side buttons for weapons. The hack requires no hardware modifications and works on the current 2.0 software version. The hack came after researchers discovered vulnerabilities in the Alarmo's STM32H7 microcontroller, enabling custom firmware installation through its USB-C port. The trick omits audio due to memory restrictions, GaryOderNichts notes, but it allows for custom animations and displays.
Google

Google, Apple Drive 'Black Box' IP Policing with App Store Rules (bloomberglaw.com) 15

App developers Musi and Sarafan Mobile have sued Apple and Google in California federal court over app removals they claim were unjustified, highlighting tensions over the tech giants' intellectual property enforcement policies. Musi's music-streaming app was removed after YouTube complained about interface infringement, while Sarafan's "Reely" app was taken down following Instagram's claims about logo similarity.

Both developers say the platforms breached their agreements by removing apps without sufficient evidence. The lawsuits underscore broader concerns about Apple and Google's dominance in app distribution. Their private IP dispute systems operate outside traditional legal frameworks, with platforms making unilateral decisions that can effectively shut down businesses, according to University of New Hampshire law professor Peter Karol. [...]

"In a court proceeding, you can see here's a complaint with the allegations, and then we have the defendant respond, and then we have a judge come out with an opinion saying, 'Is the mark valid? Is the mark infringed?'" said Lisa Ramsey, law professor at University of San Diego. Google and Apple's systems, meanwhile, are "a black box."
Movies

ASWF: the Open Source Foundation Run By the Folks Who Give Out Oscars (theregister.com) 18

This week's Ubuntu Summit 2024 was attended by Lproven (Slashdot reader #6,030). He's also a FOSS correspondent for the Register, where he's filed this report: One of the first full-length sessions was presented by David Morin, executive director of the Academy Software Foundation, introducing his organization in a talk about Open Source Software for Motion Pictures. Morin linked to the Visual Effects Society's VFX/Animation Studio Workstation Linux Report, highlighting the market share pie-chart, showing Rocky Linux 9 with at some 58 percent and the RHELatives in general at 90 percent of the market. Ubuntu 22 and 24 — the report's nomenclature, not this vulture's — got just 10.5 percent. We certainly didn't expect to see that at an Ubuntu event, with the latest two versions of Rocky Linux taking 80 percent of the studio workstation market...

What also struck us over the next three quarters of an hour is that Linux and open source in general seem to be huge components of the movie special effects industry — to an extent that we had not previously realized.

There's a "sizzle reel" showing examples of how major motion pictures used OpenColorIO, an open-source production tool for syncing color representations originally developed by Sony Pictures Imageworks. That tool is hosted by a collaboration between the Linux Foundation with the Science and Technology Council of the Academy of Motion Picture Arts and Sciences (the "Academy" of the Academy Awards). The collaboration — which goes by the name of the Academy Software Foundation — hosts 14 different projects The ASWF hasn't been around all that long — it was only founded in 2018. Despite the impact of the COVID pandemic, by 2022 it had achieved enough to fill a 45-page history called Open Source in Entertainment [PDF]. Morin told the crowd that it runs events, provides project marketing and infrastructure, as well as funding, training and education, and legal assistance. It tries to facilitate industry standards and does open source evangelism in the industry. An impressive list of members — with 17 Premier companies, 16 General ones, and another half a dozen Associate members — shows where some of the money comes from. It's a big list of big names. [Adobe, AMD, AWS, Autodesk...]
The presentation started with OpenVBD, a C++ library developed and donated by Dreamworks for working with three-dimensional voxel-based shapes. (In 2020 they created this sizzle reel, but this year they've unveiled a theme song.) Also featured was OpenEXR, originally developed at Industrial Light and Magic and sourced in 1999. (The article calls it "a specification and reference implementation of the EXR file format — a losslessly compressed image storage format for moving images at the highest possible dynamic range.")

"For an organization that is not one of the better-known ones in the FOSS space, we came away with the impression that the ASWF is busy," the article concludes. (Besides running Open Source Days and ASWF Dev Days, it also hosts several working groups like the Language Interop Project works on Rust bindings and the Continuous Integration Working Group on CI tools, There's generally very little of the old razzle-dazzle in the Linux world, but with the demise of SGI as the primary maker of graphics workstations — its brand now absorbed by Hewlett Packard Enterprise — the visual effects industry moved to Linux and it's doing amazing things with it. And Kubernetes wasn't even mentioned once.
Earth

Inventory Counts Air Pollution Cost of Space Launches and Re-Entries 66

An anonymous reader quotes a report from The Guardian: A new global inventory has catalogued air pollution from space activities from 2020 to 2022. The inventory includes time, position and pollution from 446 launchers as they ascended and the tracks of re-entries as objects are heated to extreme temperatures and break up or burn up in the upper atmosphere. It catalogues the pollution from 63,000 tons of rocket propellants used in 2022 and from 3,622 objects, including rocket parts and satellites, that re-entered the atmosphere between 2020 and 2023, amounting to about 12,000 tons. [...]

Types of launch pollutants depend on the propellent but can include particles of soot and aluminum oxides as well as nitrogen oxides, chlorine and water vapour and carbon dioxide. Extreme heat on re-entry causes atmospheric oxygen and nitrogen to combine to form more nitrogen oxides and also produces tiny metal-oxide particles as the objects break and burn up. Soot emitted high in the atmosphere can persist for several years, with a resulting climate warming impact that is up to 500 times greater than the same amount of soot from aviation or ground-level sources. Aluminum oxide particles, nitrogen oxides and chloride can consume the ozone in the stratosphere that protects us from the sun's ultraviolet radiation. These can remain in the atmosphere for decades.
Dr Connor Barker, of the UCL team, said: "Many rocket manufacturers and space agencies keep this information tightly controlled. We had to be creative about the different sources we consulted, from launch live streams on YouTube to online databases maintained by space enthusiasts in their spare time."
News

Kremlin Says It Hopes $20.6 Decillion Fine Got Google's Attention (yahoo.com) 85

An enormous fine levied by a Russian court on Google caught the attention of the Kremlin -- which hopes Google will notice in turn. From a report: President Vladimir Putin's spokesman, Dmitri Peskov, commented on the sum on Thursday. It came after a court demanded payment equivalent of $20.6 decillion -- an almost incomprehensible figure that exceeds the world's GDP. The sum came from a penalty for suspending the YouTube accounts of various Russian outlets. It has been regularly doubling for years, with no limit, leading it into realms of the absurd, which Peskov seemed to acknowledge. "Although it is a specific amount, I cannot even pronounce this number, it is rather filled with symbolism," said Peskov in response to a question from NBC News.
Robotics

Boston Dynamics' Atlas Robot Executes Autonomous Automotive Parts Picking (techcrunch.com) 67

In a new video published today, Boston Dynamics' humanoid robot Atlas is shown moving engine parts between bins without any human assistance. TechCrunch reports: Boston Dynamics is quick to note that the actions are being performed autonomously, without "prescribed or teleoperated movements." [...] Boston Dynamics notes, "The robot is able to detect and react to changes in the environment (e.g., moving fixtures) and action failures (e.g., failure to insert the cover, tripping, environment collision) using a combination of vision, force, and proprioceptive sensors."

In addition to the autonomously executed tasks, the video showcases impressive adaptive -- and strong -- actuators, as the robot pivots at its waist. The action minimizes movements, saving precious seconds in the process.

The Courts

Russian Court Fines Google $20 Decillion For Blocking Media Content (theregister.com) 263

A Russian court has fined Google an astronomical sum of around $20 decillion for YouTube's blocking of Russian media channels tied to sanctioned entities. The amount compounds weekly as Google continues to disregard the ruling. The Register reports: To put that into perspective, the World Bank estimates global GDP as around $100 trillion, which is peanuts compared to the prospective fine. Google might be one of the most valuable businesses on the planet, but even if Sundar Pichai rummages around the back of the sofa he won't be able to raise the funds to pay the penalty. The bizarre amount has been calculated after a four-year court case that started after YouTube banned the ultra-nationalist Russian channel Tsargrad in 2020 in response to the US sanctions imposed against its owner. Following Putin's illegal invasion of Ukraine in 2022 more channels were added to the banned list and 17 stations are now suing the Chocolate Factory, including Zvezda (a TV channel owned by Putin's Ministry of Defence), according to local media.

"Google was called by a Russian court to administrative liability under Art. 13.41 of the Administrative Offenses Code for removing channels on the YouTube platform. The court ordered the company to restore these channels," lawyer Ivan Morozov told state media outlet TASS. The court imposed a fine of 100 thousand rubles ($1,025) per day, with the total fine doubling every week. Owing to compound interest (Einstein's eighth wonder of the world), Google is now on the hook for an insane amount of money, or what the judge on Monday called "a case in which there are many, many zeros."

Programming

More Than a Quarter of New Code At Google Is Generated By AI 92

Google has integrated AI deeply across its operations, with over 25% of its new code generated by AI. CEO Sundar Pichai announced the milestone during the company's third quarter 2024 earnings call. The Verge reports: AI is helping Google make money as well. Alphabet reported $88.3 billion in revenue for the quarter, with Google Services (which includes Search) revenue of $76.5 billion, up 13 percent year-over-year, and Google Cloud (which includes its AI infrastructure products for other companies) revenue of $11.4 billion, up 35 percent year-over-year. Operating incomes were also strong. Google Services hit $30.9 billion, up from $23.9 billion last year, and Google Cloud hit $1.95 billion, significantly up from last year's $270 million. "In Search, our new AI features are expanding what people can search for and how they search for it," CEO Sundar Pichai says in a statement. "In Cloud, our AI solutions are helping drive deeper product adoption with existing customers, attract new customers and win larger deals. And YouTube's total ads and subscription revenues surpassed $50 billion over the past four quarters for the first time."
AI

Linus Torvalds Dismisses AI Industry as '90% Marketing' (tomshardware.com) 103

Linux creator Linus Torvalds has blasted the AI industry as "90% marketing and 10% reality" even as he acknowledged AI's transformative potential. Speaking to TFiR, Torvalds said he would "basically ignore" AI until the hype subsides, predicting meaningful applications would emerge in five years.

The Finnish software pioneer singled out ChatGPT and graphic design as current practical use cases. His criticism follows Baidu CEO's recent warning of an impending AI bubble burst, claiming only 1% of companies would survive the fallout. "I think AI is really interesting, and I think it is going to change the world. And, at the same time, I hate the hype cycle so much that I really don't want to go there," Torvalds said.
The Military

The Tech Secrets Behind Disneyland's 'Enchanted Tiki Room' (sfgate.com) 76

SFGate spills the secrets of Disneyland's "Enchanted Tiki Room" and its lifelike animatronic singing birds — Jose, Fritz, Michael and Pierre — "whose movements were perfectly synced with the audio track." "Beneath the room, the heartbeat of the attraction is a $1 million installation of electronics equipment, operated by a roll of 14-channel magnetic tape," the Orange County Register wrote upon its opening. "It is the same system which programs the U.S. military's polaris missile." That system also ran very hot. To keep guests from overheating, air conditioning was installed throughout the building, making the Tiki Room Disneyland's first attraction to be fully air conditioned...
Or, as another article puts it, "While Disney did not delve into the speculative science of cryogenics to preserve his life, he did borrow the mechanical brain of a nuclear missile to simulate life, creating a new type of entertainment in the process."

The article remembers how Wernher Von Braun became a technical advisor (and on-camera presenter) for three Disney-produced TV episodes about space travel — at the same time Von Braun was working as technical director for the U.S. Army rocket program that produced the world's first long-range guided ballistic missile, plus the first submarine-launched ballistic missile with its ground-breaking launch control mechanism: An important aspect of the Polaris launch system hinged on the fact that the conditions under which the missiles might be launched were constantly changing. Different underwater currents, temperatures, and flexing of the metal hull all contributed to the difficulty of a successful launch. In order to minimize human errors and to automate the sequence as much as possible, scientists developed an audio control system. A magnetic audio tape with a series of prerecorded cues precisely timed to account for the submarine's movement, controlled the launch machinery.

This new technology, invented to deliver nuclear destruction, proved exactly what Disney needed for his wonderland developed for children.

The article concludes that Disneyland engineering "transformed Von Braun's military technology" to the point today where "what was once controlled by the artificial brain of a nuclear missile is now run by the equivalent of a MacBook."

SFGate delves deeper into the attraction's strange origins — and how it all came full circle 63 years later... At the intersection of Main Street and Adventureland, a restaurant called the Pavillion — now the Jolly Holiday — bridged the gap. Under one roof, it served food to Main Street guests on one side and Adventureland diners on the other. The inelegant transition created an eyesore that Walt despised... The need for the Tiki Cafe "appeared to be less about food and more about aesthetics," Ken Bruce writes in Before the Birds Sang Words , a comprehensive history of the attraction.

In 1961, Walt gathered with park designers about the concept. The sketch made by legendary theme park designer John Hench was remarkably thorough, with much of its design incorporated into the final product... When Walt saw a plethora of birds in the sketch, he famously exclaimed, "We can't have birds in there ... because they'll poop in the food." Hench hurriedly ad-libbed that the birds would be mechanical, a concept that Walt adored...

Although its powerful air conditioning may be its biggest draw today, many attractions you love owe their existence to the flock of singing birds. Disney engineers' work on the talking flora and fauna laid the foundation for much more complex Audio-Animatronics (a word that Walt Disney coined). Without Jose, Fritz, Michael and Pierre, there would be no Haunted Mansion, no Pirates of the Caribbean, no Rise of the Resistance. Next year, in celebration of Disneyland's 70th anniversary, the park will unveil one of its most sophisticated animatronics yet: Walt Disney himself. It will be the first time Walt appears in a Disney attraction anywhere in the world, completing a journey that started with a mechanical bird and ends with an immortal homage.

Their article also reveals that a year after the Tiki Room opened, one of the birds was programmed to say "Come, there's an island there for you in Hawaii. Soaring birds of United Airlines fly there too!" Because Disneyland had signed a sponsorship deal with United Airlines...
The Internet

The Company Behind Arc Is Now Building a Second, Much Simpler Browser (theverge.com) 30

The Browser Company is developing a new, much simpler browser distinct from Arc, which has proven too complex for mainstream adoption despite a strong following among power users. The Verge's David Pierce reports: Arc is not dying, [says CEO Josh Miller]. He says that over and over, in fact, even after I tell him the YouTube video the company just released sounds like the thing companies say right before they kill a product. It's just that Arc won't change much anymore. It'll get stability updates and bug fixes, and there's a team at The Browser Company dedicated to those. "In that sense," Miller says, "it feels like a complete-ish product." Most of the team's energy and time will now be dedicated to starting from scratch. "Arc was basically this front-end, tab management innovation," Miller says. "People loved it. It grew like a weed. Then it started getting slow and started crashing a lot, and we felt bad, and we had to learn how to make it fast. And we kind of lost sight, in some ways, of the fact that we've got to do the operating system part."

The plan this time is to build not just a different interface for a browser, but a different kind of browser entirely -- one that is much more proactive, more powerful, more AI-centric, more in line with that original vision. Call it the iPhone of web browsers, or the "internet computer," or whatever other metaphor you like. The idea is to turn the browser into an app platform. Miller still wants to do it, and he wants to do it for everyone. What does that look like? Miller is a bit vague on the details. The new browser, which Miller intimates could launch as soon as the beginning of next year, is designed to come with no switching costs, which means among other things that it will have horizontal tabs and fewer ideas about organization. The idea is to "make the first 90 seconds effortless" in order to get more people to switch. And then, slowly, to reveal what this new browser can do.

Open Source

Google Offers Its AI Watermarking Tech As Free Open Source Toolkit (arstechnica.com) 13

An anonymous reader quotes a report from Ars Technica: Back in May, Google augmented its Gemini AI model with SynthID, a toolkit that embeds AI-generated content with watermarks it says are "imperceptible to humans" but can be easily and reliably detected via an algorithm. Today, Google took that SynthID system open source, offering the same basic watermarking toolkit for free to developers and businesses. The move gives the entire AI industry an easy, seemingly robust way to silently mark content as artificially generated, which could be useful for detecting deepfakes and other damaging AI content before it goes out in the wild. But there are still some important limitations that may prevent AI watermarking from becoming a de facto standard across the AI industry any time soon.

Google uses a version of SynthID to watermark audio, video, and images generated by its multimodal AI systems, with differing techniques that are explained briefly in this video. But in a new paper published in Nature, Google researchers go into detail on how the SynthID process embeds an unseen watermark in the text-based output of its Gemini model. The core of the text watermarking process is a sampling algorithm inserted into an LLM's usual token-generation loop (the loop picks the next word in a sequence based on the model's complex set of weighted links to the words that came before it). Using a random seed generated from a key provided by Google, that sampling algorithm increases the correlational likelihood that certain tokens will be chosen in the generative process. A scoring function can then measure that average correlation across any text to determine the likelihood that the text was generated by the watermarked LLM (a threshold value can be used to give a binary yes/no answer).

Robotics

Humanoid Robot Is the 'Fastest In the World' Thanks To Pair of Sneakers (livescience.com) 33

AmiMoJo shares a report from Live Science: Scientists have demonstrated a new humanoid robot that can run at a top speed of just over 8 miles per hour (mph) -- or 3.6 meters per second (m/s) to be exact. This makes it the speediest machine of its kind built so far, albeit these speeds were only achieved with the help of added footwear. STAR1 is a bipedal robot built by the Chinese company Robot Era that's 5 feet 7 inches (171 centimeters) tall and weighs 143 pounds (65 kilograms).

Powered by high-torque motors and artificial intelligence (AI) algorithms, the footwear-donning STAR1 navigated different types of terrain, including grassland and gravel, while jogging on paved roads and earth, and sustained its top speed for 34 minutes. A top speed of 8 mph means it beat Unitree's H1 robot -- which set the previous speed record for a bipedal robot at 7.4 mph (3.3 m/s) in March 2024. Although STAR1 had the help of footwear, H1 was not technically jogging or running as its feet did not both leave the ground at once during transit.
You can watch STAR1 racing through the Gobi Desert here.
Hardware

iFixit's Meta Quest 3S Teardown Reveals a Quest 2 'Hiding Inside' (theverge.com) 12

In a new teardown video published last week, iFixit reveals a Quest 2 headset "hiding inside" the cheaper yet enhanced Quest 3S. The Verge reports: The first hint of that is the headset's Fresnel lenses, which iFixit's Shahram Mokhtari writes in a blog post are "100% compatible" with those used by the Quest 2. The headset has the older headset's IPD adjustment mechanism, as well; and it shares the same single LCD panel, rather than using one panel per eye, like the Meta Quest 3.

Legacy parts aside, iFixit found that the 3S uses two IR sensors for depth mapping instead of a single depth sensor. That "rare iterative improvement over the Quest 3" performed "exceptionally well in unlit spaces," Mokhtari writes in the blog. And of course, it uses the same Qualcomm Snapdragon XR2 SoC as the Quest 3, and works with Meta's newer Touch Plus controllers, which are sold separately.
The Quest 3S "costs $299.99, while the Quest 3 is $499.99," notes The Verge. So, not only is the 3S cheaper but replacement parts should be easier to find since the Quest 2 "has already been around for four years."
Security

Microsoft's Honeypots Lure Phishers at Scale - to Spy on Them and Waste Their Time (bleepingcomputer.com) 21

A principal security software engineer at Microsoft described how they use their Azure cloud platform "to hunt phishers at scale," in a talk at the information security conference BSides Exeter.

Calling himself Microsoft's "Head of Deception." Ross Bevington described how they'd created a "hybrid high interaction honeypot" on the now retired code.microsoft.com "to collect threat intelligence on actors ranging from both less skilled cybercriminals to nation state groups targeting Microsoft infrastructure," according to a report by BleepingComputer: With the collected data, Microsoft can map malicious infrastructure, gain a deeper understanding of sophisticated phishing operations, disrupt campaigns at scale, identify cybercriminals, and significantly slow down their activity... Bevington and his team fight phishing by leveraging deception techniques using entire Microsoft tenant environments as honeypots with custom domain names, thousands of user accounts, and activity like internal communications and file-sharing...

In his BSides Exeter presentation, the researcher says that the active approach consists in visiting active phishing sites identified by Defender and typing in the credentials from the honeypot tenants. Since the credentials are not protected by two-factor authentication and the tenants are populated with realistic-looking information, attackers have an easy way in and start wasting time looking for signs of a trap. Microsoft says it monitors roughly 25,000 phishing sites every day, feeding about 20% of them with the honeypot credentials; the rest are blocked by CAPTCHA or other anti-bot mechanisms.

Once the attackers log into the fake tenants, which happens in 5% of the cases, it turns on detailed logging to track every action they take, thus learning the threat actors' tactics, techniques, and procedures. Intelligence collected includes IP addresses, browsers, location, behavioral patterns, whether they use VPNs or VPSs, and what phishing kits they rely on... The deception technology currently wastes an attacker 30 days before they realize they breached a fake environment. All along, Microsoft collects actionable data that can be used by other security teams to create more complex profiles and better defenses.

AMD

Spectre Flaws Still Haunt Intel, AMD as Researchers Found Fresh Attack Method (theregister.com) 33

"Six years after the Spectre transient execution processor design flaws were disclosed, efforts to patch the problem continue to fall short," writes the Register: Johannes Wikner and Kaveh Razavi of Swiss University ETH Zurich on Friday published details about a cross-process Spectre attack that derandomizes Address Space Layout Randomization and leaks the hash of the root password from the Set User ID (suid) process on recent Intel processors. The researchers claim they successfully conducted such an attack.... [Read their upcomong paper here.] The indirect branch predictor barrier (IBPB) was intended as a defense against Spectre v2 (CVE-2017-5715) attacks on x86 Intel and AMD chips. IBPB is designed to prevent forwarding of previously learned indirect branch target predictions for speculative execution. Evidently, the barrier wasn't implemented properly.

"We found a microcode bug in the recent Intel microarchitectures — like Golden Cove and Raptor Cove, found in the 12th, 13th and 14th generations of Intel Core processors, and the 5th and 6th generations of Xeon processors — which retains branch predictions such that they may still be used after IBPB should have invalidated them," explained Wikner. "Such post-barrier speculation allows an attacker to bypass security boundaries imposed by process contexts and virtual machines." Wikner and Razavi also managed to leak arbitrary kernel memory from an unprivileged process on AMD silicon built with its Zen 2 architecture.

Videos of the Intel and AMD attacks have been posted, with all the cinematic dynamism one might expect from command line interaction.

Intel chips — including Intel Core 12th, 13th, and 14th generation and Xeon 5th and 6th — may be vulnerable. On AMD Zen 1(+) and Zen 2 hardware, the issue potentially affects Linux users. The relevant details were disclosed in June 2024, but Intel and AMD found the problem independently. Intel fixed the issue in a microcode patch (INTEL-SA-00982) released in March, 2024. Nonetheless, some Intel hardware may not have received that microcode update. In their technical summary, Wikner and Razavi observe: "This microcode update was, however, not available in Ubuntu repositories at the time of writing this paper." It appears Ubuntu has subsequently dealt with the issue.

AMD issued its own advisory in November 2022, in security bulletin AMD-SB-1040. The firm notes that hypervisor and/or operating system vendors have work to do on their own mitigations. "Because AMD's issue was previously known and tracked under AMD-SB-1040, AMD considers the issue a software bug," the researchers explain. "We are currently working with the Linux kernel maintainers to merge our proposed software patch."

BleepingComputer adds that the ETH Zurich team "is working with Linux kernel maintainers to develop a patch for AMD processors, which will be available here when ready."
Bitcoin

Sam Altman's Worldcoin Rebrands As 'World,' Unveils Next Generation Orb (cointelegraph.com) 32

The blockchain-based identity verification company founded by Sam Altman is now called "World." It also unveiled a new version of the "Orb" biometric devices the company uses to scan users' eyes. CoinTelegraph reports: World, as it's now known, also revealed a slew of other updates including a new version of its Orb biometric scanning devices, new options for identity verification and partnership integrations with popular apps including FaceTime, WhatsApp, and Zoom. [...] The new Orb, powered by Nvidia hardware, will be more efficient and "five times" more powerful than its predecessor with a smaller footprint and fewer parts. The company also said the new Orb would eventually be available in self-service kiosks in some markets.

World also announced that users will soon be able to verify their identity through methods other than the firm's Orb hardware. Through a program called World ID Credentials, the company says users with NFC-enabled government issued passports will allow them to verify their identity on the World app. Another major announcement came in the form of World ID Deep Face, a service the company claims has "solved deepfakes." According to the company, its software can be implemented into just about any app where video can be uploaded or streamed to determine whether videos featuring verified persons are real or have been faked using AI. Finally, the company also announced that so far 15 million users have signed up for its World app service; among them, seven million are verified.

Slashdot Top Deals