A Tanzanian entrepreneur is transforming cement bags into solar-powered backpacks, helping students study after dark in areas without electricity. Innocent James's company, Soma Bags, sold 36,000 solar backpacks across Africa last year, with prices ranging from 12,000 to 22,500 Tanzanian shillings ($4-8), according to CNN. The innovation comes as 600 million Africans lack electricity access. In Tanzania, fewer than half of mainland households have power, forcing families to rely on expensive kerosene lamps.

The backpacks, manufactured in James's Bulale factory employing 65 staff, feature flexible solar panels that charge during students' walks to school. One day of sunlight provides six to eight hours of reading light, making them more cost-effective than kerosene lamps commonly used in Tanzania, where fewer than half of mainland households have electricity access.

At Galaxy Unpacked today in San Jose, California, Samsung unveiled the new Galaxy S25 series of flagship smartphones loaded with AI capabilities and LLMs. "Currently, the Galaxy S25 range is comprised of the Galaxy S25 ($800), Galaxy S25+ ($1,000), and Galaxy S25 Ultra ($1,300)," reports Wired. "The phones are available for preorder today and will officially go on sale February 7." Since the hardware is relatively unchanged from last year's Galaxy S24 series, here's what Wired has to say about the new AI smarts: The Galaxy S25 is a tale of two AIs: Gemini and Bixby. Yes, while Google's Gemini AI assistant sits at the forefront -- it can finally be triggered through a long press of the power button-- Samsung is bringing its original Bixby voice assistant out from the shadows. Bixby has been enhanced with large language models but is still designed to handle phone functions, like changing device settings. Gemini is meant to be used for general web queries and more complex actions. You can even have two hot words, one for each assistant. I foresee all of this being confusing [...].

The highlight AI feature debuting on the Galaxy S25 series is "cross-app experiences." These are tasks you can ask Gemini to perform, even if the task requires multiple apps. For example, you can ask for the schedule of this season's Arsenal matches and then add it to your calendar; Gemini will then search and add every Arsenal FC game in the season to your schedule. Or you can ask it to find pet-friendly vegan restaurants nearby and text the list to a friend. It even works with images too -- snap a pic of your fridge and ask Gemini to find you a recipe based on the available ingredients. These cross-app experiences work with Google apps, Samsung's Galaxy apps, and select third-party apps, like WhatsApp and Spotify.

All these AI features have culminated in a new app: Now Brief. Samsung calls this proactive assistance (remember Google's Now on Tap?) where a morning brief arrives with the weather, upcoming calendar events, stock details, news articles, and suggestions to trigger routines. There's also an evening brief with a summary of the day's events with photos. Since the feature can plug into email, it'll send reminders about expiring coupons and upcoming travel tickets. Samsung claims it can even suggest changing an 8:45 am alarm even earlier if it sees a 9 am meeting on the schedule. On the lock screen, a "Now Bar" widget persists at the bottom, much like Apple's Live Activities. It'll offer quick access to the Now Brief app, but it will also show updates for favorite sports teams, along with glanceable directions from Google Maps.

The rest of the AI features are playing a bit of catch-up to Apple and Google's Pixel phones. There's Drawing Assist, a generative AI tool to craft new images in different art styles based on sketches or text prompts. AI Select works with the S Pen stylus on the S25 Ultra and understands what is selected -- for example, if a video is selected, it will suggest turning it into a GIF. Audio Eraser is an editing tool to cut out background noise in videos post-capture, canceling out the sound of a crowd's chatter or an ambulance's siren. Finally, Samsung's Generative Edit feature, which lets you erase unwanted objects in images, now works locally on the device and is much more accurate and faster. A full list of specs can be found here. You can watch a recording of the event on YouTube.

Search in Premiere Pro has been updated with AI-powered visual recognition, allowing users to find videos by describing the contents of the footage. From a report: It's just one of several quality-of-life features Adobe is adding to Premiere Pro, After Effects, and Frame.io that aim to save video editors time on their projects. Users can enter search terms like "a person skating with a lens flare" to find corresponding clips within their media library.

Adobe says the media intelligence AI can automatically recognize "objects, locations, camera angles, and more," alongside spoken words -- providing there's a transcript attached to the video. The feature doesn't detect audio or identify specific people, but it can scrub through any metadata attached to video files, which allows it to fetch clips based on shoot dates, locations, and camera types. The media analysis runs on-device, so doesn't require an internet connection, and Adobe reiterates that users' video content isn't used to train any AI models.

OpenAI will release "Operator" this week, letting ChatGPT users automate web tasks through a built-in browser, The Information reported Wednesday. The feature handles restaurant bookings, travel planning, shopping and deliveries, asking follow-up questions like party size for reservations. Users can watch Operator work, take control mid-task, and share workflows with others.

An anonymous reader quotes an op-ed from 404 Media's Jason Koebler: If it wasn't already obvious, the last 72 hours have made it crystal clear that it is urgent to build and mainstream alternative, decentralized social media platforms that are resistant to government censorship and control, are not owned by oligarchs and dominated by their algorithms, and in which users own their follower list and can port it elsewhere easily and without restriction. [...] Mastodon's ActivityPub and Bluesky's AT.Protocol have provided the base technology layer to make this possible, and have laid important groundwork over the last few years to decorporatize and decentralize the social internet.

The problem with decentralized social media platforms thus far is that their user base is minuscule compared to platforms like TikTok, Facebook, and Instagram, meaning the cultural and political influence has lagged behind them. You also cannot directly monetize an audience on Bluesky or Mastodon -- which, to be clear, is a feature, not a bug -- but also means that the value proposition for an influencer who makes money through the TikTok creator program or a small business that makes money selling chewing gum on TikTok shop or a clothes brand that has figured out how to arbitrage Instagram ads to sell flannel shirts is not exactly clear. I am not advocating for decentralized social media to implement ads and creator payment programs. I'm just saying that many TikTok influencers were directing their collective hundreds of millions of fans to follow them to Instagram or YouTube, not a decentralized alternative.

This doesn't mean that the fediverse or that a decentralized Instagram or TikTok competitor that runs on the AT.Protocol is doomed. But there is a lot of work to do. There is development work that needs to be done (and is being done) to make decentralized protocols easier to join and use and more interoperable with each other. And there is a massive education and recruitment challenge required to get the masses to not just try out decentralized platforms but to earnestly use them. Bluesky's growing user base and rise as a legitimately impressive platform that one can post to without feeling like it's going into the void is a massive step forward, and proof that it is possible to build thriving alternative platforms. The fact that Meta recently blocked links to a decentralized Instagram alternative shows that big tech sees these platforms, potentially, as a real threat. "This is all to say that it is possible to build alternatives to Elon Musk's X, Mark Zuckerberg's Instagram, and whatever TikTok will become," concludes Koebler. "It is happening, and it is necessary. The richest, most powerful people in the world have all aligned themselves and their platforms with Donald Trump. But their platforms' relevance and importance doesn't necessarily have to last forever. A different way is possible, if we build it."

Further reading: 'The Tech Oligarchy Arrives' (The Atlantic)

Apple's upcoming updates -- macOS Sequoia 15.3, iOS 18.3, and iPadOS 18.3 -- will enable Apple Intelligence by default on compatible devices, requiring users to manually disable it if undesired. From Apple's developer release notes: "For users new or upgrading to iOS 18.3, Apple Intelligence will be enabled automatically during iPhone onboarding. Users will have access to Apple Intelligence features after setting up their devices. To disable Apple Intelligence, users will need to navigate to the Apple Intelligence & Siri Settings pane and turn off the Apple Intelligence toggle. This will disable Apple Intelligence features on their device." MacRumors reports: With macOS Sequoia 15.1, macOS Sequoia 15.2, iOS 18.1, and iOS 18.2, Apple Intelligence was opt-in rather than opt-out, and users who wanted the feature needed to turn it on in the Settings app. Going forward, it will be enabled by default, and Mac, iPhone, and iPad users who do not want to use the feature will need to turn it off. The report notes that macOS Sequoia 15.3 introduces Genmoji, allowing Mac users to create custom emoji characters, and enhances Notification summaries with clearer indicators for AI-generated information.

Public releases of this and other software updates are expected next week, following today's release candidate versions.

Ars Technica's John Timmer reports: In Monday's issue of Nature Geoscience, a team of UK-based researchers tackle a big one: Mars' dichotomy, the somewhat nebulous boundary between its relatively elevated southern half, and the low basin that occupies its northern hemisphere, a feature that some have proposed also served as an ancient shoreline. The new work suggests that the edge of the dichotomy was eroded back by hundreds of kilometers during the time when an ocean might have occupied Mars' northern hemisphere. [...] The new work focuses on an area called Mawrth Vallis, which sits at the edge of the dichotomy. Relative to the northern basin, it's a kilometer-high plateau cut by a major outflow channel that seems to have been caused by one or more massive floods. The slopes surrounding the plateau feature different types of clay-derived minerals, suggesting the area had been subject to interactions between the original materials and water.

Rather than focusing on the plateau itself, the work focuses on the neighboring lowlands, which include a large region dotted with thousands of buttes and mesas that rise roughly a kilometer above the surrounding plains. Using data from the ESA's Mars Express mission, they determine that these features tend to top out at the same height as the nearby plateau. And, using data from NASA's Mars Reconnaissance Orbiter, they determined that the clays present along the slopes match those found on the plateau as well. Their conclusion from this is that the mesas and buttes are the remains of what was once a far larger plateau, which was largely eroded away on the side facing the northern basin. And that erosion took place across a pretty significant distance, as the buttes extend hundreds of kilometers away from the present highlands. And, just as at the highland plateau, these mounds hint at a water-based process that modified the rocks from the top down. That's because the deeper clays are often magnesium-rich, which tends to happen when water comes in contact with volcanic rocks or material with similar chemistry. Closer to the surface, things transition to aluminum- and iron-rich clays. These clays can occur when the water source is acidic or can be simply due to longer exposure to water, as the magnesium clays are a bit more soluble.

The huge area covered by these mounds gives a sense of just how significant this erosion was. "The dichotomy boundary has receded several hundred kilometers," the researchers note. "Nearly all intervening material -- approximately 57,000 cubic kilometers over an area of 284,000 square kilometers west of Ares Vallis alone -- has been removed, leaving only remnant mounds." Based on the distribution of the different clays, the team argues that their water-driven formation took place before the erosion of the material. This would indicate that water-rock interactions were going on over a very wide region early in the history of Mars, which likely required an extensive hydrological cycle on the red planet. As the researchers note, a nearby ocean would have improved the chances of exposing this region to water, but the exposure could also have been due to processes like melting at the base of an ice cap. Complicating matters further, many of the mounds top out below one proposed shoreline of the northern ocean and above a second. It's possible that a receding ocean could have contributed to their erosion. But, at the same time, some of the features of a proposed shoreline now appear to have been caused by the general erosion of the original plateau, and may not be associated with an ocean at all.

An anonymous reader quotes a report from IEEE Spectrum: The surge of interest in AI is creating a massive demand for computing power. Around the world, companies are trying to keep up with the vast amount of GPUs needed to power more and more advanced AI models. While GPUs are not the only option for running an AI model, they have become the hardware of choice due to their ability to efficiently handle multiple operations simultaneously -- a critical feature when developing deep learning models. But not every AI startup has the capital to invest in the huge numbers of GPUs now required to run a cutting-edge model. For some, it's a better deal to outsource it. This has led to the rise of a new business: GPU-as-a-Service (GPUaaS). In recent years, companies like Hyperbolic, Kinesis, Runpod, and Vast.ai have sprouted up to remotely offer their clients the needed processing power.

[...] Studies have shown that more than half of the existing GPUs are not in use at any given time. Whether we're talking personal computers or colossal server farms, a lot of processing capacity is under-utilized. What Kinesis does is identify idle compute -- both for GPUs and CPUs -- in servers worldwide and compile them into a single computing source for companies to use. Kinesis partners with universities, data centers, companies, and individuals who are willing to sell their unused computing power. Through a special software installed on their servers, Kinesis detects idle processing units, preps them, and offers them to their clients for temporary use. [...] The biggest advantage of GPUaaS is economical. By removing the need to purchase and maintain the physical infrastructure, it allows companies to avoid investing in servers and IT management, and to instead put their resources toward improving their own deep learning, large language, and large vision models. It also lets customers pay for the exact amount of GPUs they use, saving the costs of the inevitable idle compute that would come with their own servers. The report notes that GPUaaS is growing in profitability. "In 2023, the industry's market size was valued at US $3.23 billion; in 2024, it grew to $4.31 billion," reports IEEE. "It's expected to rise to $49.84 billion by 2032."

An anonymous reader quotes a report from TorrentFreak: Meta is among a long list of companies being sued for allegedly using pirated material to train its AI models. Meta has never denied using copyrighted works but stressed that it would rely on a fair use defense. However, with rightsholders in one case asking for torrent client data and 'seeding lists' for millions of books allegedly shared in public, the case now takes a geeky turn. [...] A few weeks ago, the plaintiffs asked for permission to submit a third amended complaint (PDF). After uncovering Meta's use of BitTorrent to source copyright-infringing training data from pirate shadow library, LibGen, the request was justified, they argued. Specifically, the authors say that Meta willingly used BitTorrent to download pirated books from LibGen, knowing that was legally problematic. As a result, Meta allegedly shared copies of these books with other people, as is common with the use of BitTorrent.

"By downloading through the bit torrent protocol, Meta knew it was facilitating further copyright infringement by acting as a distribution point for other users of pirated books," the amended complaint notes. "Put another way, by opting to use a bit torrent system to download LibGen's voluminous collection of pirated books, Meta 'seeded' pirated books to other users worldwide." Meta believed that the allegations weren't sufficiently new to warrant an update to the complaint. The company argued that it was already a well-known fact that it used books from these third-party sources, including LibGen. However, the authors maintained that the 'torrent' angle is novel and important enough to warrant an update. Last week, United States District Judge Vince Chhabria agreed, allowing the introduction of these new allegations. In addition to greenlighting the amended complaint, the Judge also allowed the authors to conduct further testimony on the "seeding" angle. "[E]vidence about seeding is relevant to the existing claim because it is potentially relevant to the plaintiffs' assertion of willful infringement or to Meta's fair use defense," Judge Chhabria wrote last week.

With the court recognizing the relevance of Meta's torrenting activity, the plaintiffs requested reconsideration of an earlier order, where discovery on BitTorrent-related matters was denied. Through a filing submitted last Wednesday, the plaintiffs hope to compel Meta to produce its BitTorrent logs and settings, including peer lists and seeding data. "The Order denied Plaintiffs' motion to compel production of torrenting data, including Meta's BitTorrent client, application logs, and peer lists. This data will evidence how much content Meta torrented from shadow libraries and how much it seeded to third parties as a host of this stolen IP," they write. While archiving lists of seeders is not a typical feature for a torrent client, the authors are requesting Meta to disclose any relevant data. In addition, they also want the court to reconsider its ruling regarding the crime-fraud exception. That's important, they suggest, as Meta's legal counsel was allegedly involved in matters related to torrenting. "Meta, with the involvement of in-house counsel, decided to obtain copyrighted works without permission from online databases of copyrighted works that 'we know to be pirated, such as LibGen," they write. The authors allege that this involved "seeding" files and that Meta attempted to "conceal its actions" by limiting the amount of data shared with the public. One Meta employee also asked for guidance, as "torrenting from a corporate laptop doesn't feel right."

The JavaScript runtime Node.js can execute TypeScript (Microsoft's JavaScript-derived language with static typing).

But now it can do it even better, explains Marco Ippolito of the Node.js steering committee: In August 2024 Node.js introduced a new experimental feature, Type Stripping, aimed at addressing a longstanding challenge in the Node.js ecosystem: running TypeScript with no configuration. Enabled by default in Node.js v23.6.0, this feature is on its way to becoming stable.

TypeScript has reached incredible levels of popularity and has been the most requested feature in all the latest Node.js surveys. Unlike other alternatives such as CoffeeScript or Flow, which never gained similar traction, TypeScript has become a cornerstone of modern development. While it has been supported in Node.js for some time through loaders, they relied heavily on configuration and user libraries. This reliance led to inconsistencies between different loaders, making them difficult to use interchangeably. The developer experience suffered due to these inconsistencies and the extra setup required... The goal is to make development faster and simpler, eliminating the overhead of configuration while maintaining the flexibility that developers expect...

TypeScript is not just a language, it also relies on a toolchain to implement its features. The primary tool for this purpose is tsc, the TypeScript compiler CLI... Type checking is tightly coupled to the implementation of tsc, as there is no formal specification for how the language's type system should behave. This lack of a specification means that the behavior of tsc is effectively the definition of TypeScript's type system. tsc does not follow semantic versioning, so even minor updates can introduce changes to type checking that may break existing code. Transpilation, on the other hand, is a more stable process. It involves converting TypeScript code into JavaScript by removing types, transforming certain syntax constructs, and optionally "downleveling" the JavaScript to allow modern syntax to execute on older JavaScript engines. Unlike type checking, transpilation is less likely to change in breaking ways across versions of tsc. The likelihood of breaking changes is further reduced when we only consider the minimum transpilation needed to make the TypeScript code executable — and exclude downleveling of new JavaScript features not yet available in the JavaScript engine but available in TypeScript...

Node.js, before enabling it by default, introduced --experimental-strip-types. This mode allows running TypeScript files by simply stripping inline types without performing type checking or any other code transformation. This minimal technique is known as Type Stripping. By excluding type checking and traditional transpilation, the more unstable aspects of TypeScript, Node.js reduces the risk of instability and mostly sidesteps the need to track minor TypeScript updates. Moreover, this solution does not require any configuration in order to execute code... Node.js eliminates the need for source maps by replacing the removed syntax with blank spaces, ensuring that the original locations of the code and structure remain intact. It is transparent — the code that runs is the code the author wrote, minus the types...
"As this experimental feature evolves, the Node.js team will continue collaborating with the TypeScript team and the community to refine its behavior and reduce friction. You can check the roadmap for practical next steps..."

An anonymous reader quotes a report from The Verge: Bumble founder and executive chair Whitney Wolfe Herd, who stepped down as CEO at the beginning of 2024, is returning to the post in mid-March. Former Slack CEO Lidiane Jones, who succeeded Herd, has resigned for "personal reasons" and will remain in the role until Wolfe Herd takes over. "As I step into the role of CEO, I'm energized and fully committed to Bumble's success, our mission of creating meaningful, equitable relationships, and our opportunity ahead," Wolfe Herd says in a statement. "We have exciting innovation ahead for Bumble in this bold new chapter." Bumble's share price has dropped by half since the app introduced a redesign and feature in April that let men send the first message in response to prewritten questions. "Bumble gained popularity in part because it was set up for women to message their matches first," notes The Verge.

"In Bumble's most recent earnings report, it said that the number of paying users had increased from 3.8 million to 4.3 million over the last year, however, average revenue per paying user dropped from $23.42 to $21.17, and its total revenue dropped slightly."

The FTC announced Thursday that it's banned General Motors and its subsidiary OnStar from selling customer geolocation and driving behavior data for five years. The Verge reports: The settlement comes after a New York Times investigation found that GM had been collecting micro-details about its customers' driving habits, including acceleration, braking, and trip length -- and then selling it to insurance companies and third-party data brokers like LexisNexis and Verisk. Clueless vehicle owners were then left wondering why their insurance premiums were going up.

FTC accused GM of using a "misleading enrollment process" to get vehicle owners to sign up for its OnStar connected vehicle service and Smart Driver feature. The automaker failed to disclose to customers that it was collecting their data, nor did GM seek out their consent to sell it to third parties. After the Times exposed the practice, GM said it was discontinuing its OnStar Smart Driver program. The settlement also requires GM to obtain consent from customers before collecting their driving behavior data, and allow them to request and delete their data if they choose.

According to Axios, Google has told the EU it will not add fact checks to search results and YouTube videos or use them in ranking or removing content, despite the requirements of a new EU law. From the report: In a letter written to Renate Nikolay, the deputy director general under the content and technology arm at the European Commission, Google's global affairs president Kent Walker said the fact-checking integration required by the Commission's new Disinformation Code of Practice "simply isn't appropriate or effective for our services" and said Google won't commit to it. The code would require Google to incorporate fact-check results alongside Google's search results and YouTube videos. It would also force Google to build fact-checking into its ranking systems and algorithms.

Walker said Google's current approach to content moderation works and pointed to successful content moderation during last year's "unprecedented cycle of global elections" as proof. He said a new feature added to YouTube last year that enables some users to add contextual notes to videos "has significant potential." (That program is similar to X's Community Notes feature, as well as new program announced by Meta last week.)

The EU's Code of Practice on Disinformation, introduced in 2022, includes several voluntary commitments that tech firms and private companies, including fact-checking organizations, are expected to deliver on. The Code, originally created in 2018, predates the EU's new content moderation law, the Digital Services Act (DSA), which went into effect in 2022.

The Commission has held private discussions over the past year with tech companies, urging them to convert the voluntary measures into an official code of conduct under the DSA. Walker said in his letter Thursday that Google had already told the Commission that it didn't plan to comply. Google will "pull out of all fact-checking commitments in the Code before it becomes a DSA Code of Conduct," he wrote. He said Google will continue to invest in improvements to its current content moderation practices, which focus on providing people with more information about their search results through features like Synth ID watermarking and AI disclosures on YouTube.

An anonymous reader quotes a report from CNN: Apple is temporarily pulling its newly introduced artificial intelligence feature that summarizes news notifications after it repeatedly sent users error-filled headlines, sparking backlash from a news organization and press freedom groups. The rare reversal from the iPhone maker on its heavily marketed Apple Intelligence feature comes after the technology produced misleading or altogether false summaries of news headlines that appear almost identical to regular push notifications.

On Thursday, Apple deployed a beta software update to developers that disabled the AI feature for news and entertainment headlines, which it plans to later roll out to all users while it works to improve the AI feature. The company plans to re-enable the feature in a future update. As part of the update, the company said the Apple Intelligence summaries, which users must opt into, will more explicitly emphasize that the information has been produced by AI, signaling that it may sometimes produce inaccurate results.

LinkedIn has unveiled an AI-powered "Job Match" feature to discourage users from applying to positions they aren't qualified for, aiming to address recruitment inefficiencies in a tight job market. The tool, the Microsoft-owned firm said, analyzes users' experience against job requirements to provide detailed qualification summaries, going beyond basic keyword matching. Premium subscribers will receive more granular match data.

An anonymous reader quotes a report from CoinTelegraph: Social media platform Meta has confirmed that its fact-checking feature on Facebook, Instagram and Threads will only be removed in the US for now, according to a Jan. 13 letter sent to Brazil's government. "Meta has already clarified that, at this time, it is terminating its independent Fact-Checking Program only in the United States, where we will test and refine the community notes [feature] before expanding to other countries," Meta told Brazil's Attorney General of the Union (AGU) in a Portuguese-translated letter.

Meta's letter followed a 72-hour deadline Brazil's AGU set for Meta to clarify to whom the removal of the third-party fact verification feature would apply. [...] Brazil has expressed dissatisfaction with Meta's removal of its fact check feature, Brazil Attorney-General Jorge Messias said on Jan. 10. "Brazil has rigorous legislation to protect children and adolescents, vulnerable populations, and the business environment, and we will not allow these networks to transform the environment into digital carnage or barbarity." Last Tuesday, Meta CEO Mark Zuckerberg announced an end to fact-checking on Facebook and Instagram -- a move he described as an attempt to restore free expression on its platforms. He likened his company's fact-checking process to a George Orwell novel, saying it "something out of 1984" and let to a broad belief that Meta fact-checkers "were too biased."

Parallels Desktop now supports running 64-bit x86 operating systems on Apple Silicon Macs through its proprietary emulation engine, enabling users to run traditional Windows and Linux distributions. However, performance is said to be "really slow." How-To Geek reports: The latest Parallels Desktop 20.2 update adds early support for x86 emulation on Apple Silicon, allowing traditional x86 PC operating systems to work on newer Mac computers. There were already apps like UTM that could do it (most of them are based on QEMU), but this feature uses Parallels' "proprietary emulation engine" paired with Apple's built-in hypervisor. [...] Parallels on Apple Silicon can now "run existing x86_64 Windows 10, Windows 11*, Windows Server 2019/2022, and some Linux distributives with UEFI BIOS via Parallels Emulator." You can also create new Windows 10 21H2 and Windows Server 2022 virtual machines if needed.

There are some big limitations. You can only run 64-bit x86 operating systems -- sorry, FreeDOS fans -- but those 64-bit operating systems can run 32-bit applications. There's also no support for USB devices, nested virtualization (so WSL2 won't work), or the Parallels hypervisor. Performance will also be "really slow," since x86 instructions have to be translated to ARM. The company said, "Windows boot time is about 2-7 minutes, depending on your hardware. Windows operating system responsiveness is also low."

ChatGPT can now schedule reminders and recurring tasks -- but only if you're a ChatGPT Plus, Team, or Pro subscriber. TechCrunch reports: With tasks, users can set simple reminders with ChatGPT such as, "Remind me when my passport expires in six months," and the AI assistant will follow up with a push notification on whatever platform you have tasks enabled. Users can also now set recurring requests to ChatGPT, such as, "Every Friday, give me a weekend plan based on my location and the weather forecast," or "Give me a news briefing every day at 7 a.m." [...]

Users can access tasks by selecting "4o with scheduled tasks" from a dropdown menu in ChatGPT. From there, they can send ChatGPT a message telling the AI assistant what reminder or action they want to create. At times, OpenAI says ChatGPT may suggest certain tasks based on chats. Users can set and manage tasks by chatting with the AI assistant on any platform, or through a dedicated tasks manager tab that's only available on the web app.

Through the tasks feature, ChatGPT can now browse the web on a set schedule, but it will not run continuous searches in the background or make purchases. For example, you could instruct ChatGPT to check once a month for concert tickets to see your favorite artist in your area, but you can neither tell the AI assistant to alert you the moment the tickets go live, nor can ChatGPT buy tickets for you. That said, it's a step toward those [agentic] systems.

A new ransomware group called Codefinger targets AWS S3 buckets by exploiting compromised or publicly exposed AWS keys to encrypt victims' data using AWS's own SSE-C encryption, rendering it inaccessible without the attacker-generated AES-256 keys. While other security researchers have documented techniques for encrypting S3 buckets, "this is the first instance we know of leveraging AWS's native secure encryption infrastructure via SSE-C in the wild," Tim West, VP of services with the Halcyon RISE Team, told The Register. "Historically AWS Identity IAM keys are leaked and used for data theft but if this approach gains widespread adoption, it could represent a significant systemic risk to organizations relying on AWS S3 for the storage of critical data," he warned. From the report: ... in addition to encrypting the data, Codefinder marks the compromised files for deletion within seven days using the S3 Object Lifecycle Management API â" the criminals themselves do not threaten to leak or sell the data, we're told. "This is unique in that most ransomware operators and affiliate attackers do not engage in straight up data destruction as part of a double extortion scheme or to otherwise put pressure on the victim to pay the ransom demand," West said. "Data destruction represents an additional risk to targeted organizations."

Codefinger also leaves a ransom note in each affected directory that includes the attacker's Bitcoin address and a client ID associated with the encrypted data. "The note warns that changes to account permissions or files will end negotiations," the Halcyon researchers said in a report about S3 bucket attacks shared with The Register. While West declined to name or provide any additional details about the two Codefinger victims -- including if they paid the ransom demands -- he suggests that AWS customers restrict the use of SSE-C.

"This can be achieved by leveraging the Condition element in IAM policies to prevent unauthorized applications of SSE-C on S3 buckets, ensuring that only approved data and users can utilize this feature," he explained. Plus, it's important to monitor and regularly audit AWS keys, as these make very attractive targets for all types of criminals looking to break into companies' cloud environments and steal data. "Permissions should be reviewed frequently to confirm they align with the principle of least privilege, while unused keys should be disabled, and active ones rotated regularly to minimize exposure," West said. An AWS spokesperson said it notifies affected customers of exposed keys and "quickly takes any necessary actions, such as applying quarantine policies to minimize risks for customers without disrupting their IT environment."

They also directed users to this post about what to do upon noticing unauthorized activity.

VLC media player, the popular open-source software developed by nonprofit VideoLAN, has topped 6 billion downloads worldwide and teased an AI-powered subtitle system. From a report: The new feature automatically generates real-time subtitles -- which can then also be translated in many languages -- for any video using open-source AI models that run locally on users' devices, eliminating the need for internet connectivity or cloud services, VideoLAN demoed at CES.