Forgot your password?
Close
typodupeerror

Submission + - China's CXMT Claims DRAM Breakthrough (startupfortune.com)

Submitted by hackingbear
hackingbear writes: China's ChangXin Memory Technologies (CXMT) announced key progress in a DRAM architecture that rivals had pursued for years, plunging shares of memory chip makers including Samsung Electronics, SK Hynix, and Micron. The technology is called 4F^2, shorthand for a memory cell design where each cell occupies an area of four square F, with F representing the minimum line width a chipmaker can etch. Smaller area per cell means more cells per chip, which means more storage density without shrinking the wafer. CXMT said the breakthrough rests on something it calls a Vertical Surrounding Gate transistor, a vertical gate structure meant to fix current leakage while cutting the unit area each cell needs. CXMT plans to ship a DDR5 RDIMM product built on this architecture before the end of 2026. Shim Dae-yong, a former SK Hynix vice president, told The Korea Herald earlier this year that extreme ultraviolet (EUV) lithography, which has been banned from China by US-led export control, is effectively unavoidable at advanced DRAM nodes, and that a realistic alternative path is to go vertical and “narrow part of the gap by pushing vertical integration without EUV.” He meant stacking chips, but a vertical transistor applies the same idea inside every cell. Chinese technology giant Huawei is also applying the similar approach, known as LogicFolding, to its latest CPU and GPU chips and license its patents to Qualcomm. Citrini projects China's combined DRAM capacity could approach 1.41 million wafer starts per month by 2030, enough to make China the world's second-largest DRAM production base, trailing only South Korea.

Comment Re:Did new features always take this long? (Score 3, Informative) 50

by Asteconn (#66373642) Attached to: Firefox 158 Now Available With JPEG-XL Support By Default

The OG internet images were:

- GIF, where people could afford the software that paid Compuserve's patents or needed something that would somewhat reliably animate.
- PNG, officially after 1997, and only really in bulk once Internet Explorer 7 supported them properly in 2006.
- JPG, for almost all other usecases.
- very, very rarely, I did encounter a few 1-bit and 2-bit BMP images. I do remember one website used a b/w bitmap as a bullet point for some reason.

Submission + - Reddit Is Killing RSS Feeds, Ending Public API Access (techcrunch.com)

Submitted by Anonymous Coward
An anonymous reader writes: Amid a number of updates for moderators and developers announced Wednesday comes bad news for supporters of a more open web: Reddit is ending support for RSS feeds. Reddit says RSS has now become a “common surface for large-scale scraping and automated abuse,” which is why it’s made the decision to wind down RSS feeds on its platform. “We know RSS has been a beloved part of the open web for a long time, and we’re grateful to everyone who used it to stay connected to Reddit,” the company noted in its announcement, where it also shared a March 2027 shutdown date for its public API. Reddit said RSS support will cease on November 13.

[...] The RSS change was one of several updates issued on Wednesday by the company. Another big change will be the end of its public API. Public API access will also end by March 2027, which will impact any tools that used it for programmatic access to Reddit conversations, including social listening products, those used by researchers, and AI products, such as AI assistants. Today, those assistants can use Reddit to answer questions, but after closing public API access, they will need to forgo commercial deals with Reddit for its data.

In addition, Reddit provided an update on its Rules Hub progress and auto-mod changes, and said it was “adding safeguards” to its classic, text-heavy version of its site known as Old Reddit. The latter will include limiting access to logged-in moderators and recent users — changes Reddit also said were required because of “abusive scraping and automated traffic.” Reddit said in the next few months it will limit access for logged-in users to those who have used Old Reddit in the last 90 days. The company also reminded developers building approved third-party apps and bots to register them with the company before January 12, 2027, to avoid disruption. After that date, Reddit will remove API access for any developer that hasn’t registered.

Submission + - Unfair Parking Ticket UK: Steps to Consider Before Paying (blogspot.com)

Submitted by legateca
legateca writes: If you believe a parking ticket was issued unfairly, you may want to understand the available challenge process before making a decision. The appropriate route depends on whether the notice came from a council, another authority or a private parking operator. This guide explains what to consider when you challenge a parking ticket UK, including reviewing signage, checking evidence, observing deadlines and keeping copies of your correspondence. Understanding the process can help you respond appropriately.

Comment Thankfully it can all be disabled in the browser (Score 1) 163

by Asteconn (#66356552) Attached to: Firefox Redesign Brings Round Tabs, New Themes, and Compact Mode

For those on Firefox that aren't keen on the new Nova redesign, it can be disabled:

In your address bar, type `about:config`, acknowledge the warning, search for `browser.nova.enabled`, and then set it to false.

IMO, Nova is far too loud; I need my browser UI to be background noise.

Submission + - Researchers Found a New Way to Break RSA that Doesn't Require Factoring the Key (cybersecuritynews.com)

Submitted by Anonymous Coward
An anonymous reader writes: Security researchers have demonstrated a faster way to undermine certain RSA deployments without factoring the public modulus, challenging the assumption that RSA’s practical strength always tracks the cost of integer factorization.

The attack converts temporary access to a raw, unpadded RSA signing or decryption service into a lasting capability to forge signatures or decrypt chosen ciphertexts offline.

Laura Shea, Miro Haller, Adam Suhl, Nadia Heninger and Emmanuel Thomé implemented the technique against a 1,024-bit RSA key. Their computation consumed 1,380 CPU core-years over five months and required 232 oracle queries. By comparison, factoring a 1,024-bit RSA modulus is estimated to require roughly 500,000 to one million core-years.

The method, called eNFS by the researchers, belongs to the number field sieve family. Instead of the general number field sieve used to factor RSA moduli, it approaches the faster “special” number field sieve complexity by replacing part of the usual mathematical work with answers from the signing oracle. Crucially, it never recovers the prime factors or RSA private key.

The attack unfolds in stages. An approximately 1,200-core-year precomputation depends only on the public modulus and exponent. The attacker then submits selected values to the raw RSA oracle. Once those responses are collected, access can disappear: forging any chosen signature or decrypting a target takes about another 180 core-years and can be repeated offline.

The underlying algorithm is not new. Antoine Joux, David Naccache and Emmanuel Thomé introduced it in 2007, but the new work provides its first implementation and large-scale 1,024-bit demonstration. The code builds heavily on CADO-NFS while adding the engineering needed for polynomial selection, sieving, linear algebra, root extraction, and descent at this scale.

This is not a universal RSA break. The attacker needs temporary access to a raw exponentiation oracle, a capability that conventional RSA signatures using PKCS#1 v1.5 or RSA-PSS padding normally do not expose. More plausible targets include HSM interfaces permitting raw PKCS#11 RSA operations and blind-signature protocols such as Privacy Pass, where blinded requests can provide the required oracle behavior.

The researchers estimate 2^{90} work and 2^{43} oracle queries against 2,048-bit RSA in this model, versus the commonly assigned 112-bit factoring strength. They project roughly 2^{119} work for 4,096-bit RSA, leaving it short of a modern 128-bit security target. Those costs remain beyond attackers, but could matter to well-resourced adversaries and protocols with long-lived public keys.

Organizations do not need to abandon correctly padded RSA immediately. Operators should disable unnecessary raw RSA mechanisms, audit HSM policies, limit oracle exposure, and rotate vulnerable blind-signature keys more frequently.

Protocol designers can investigate zero-knowledge proofs of well-formed requests, while longer-term migration should favor modern signature schemes and post-quantum cryptography rather than treating larger RSA keys as a permanent solution.

Submission + - SourceHut changes terms of service limiting LLM use (sourcehut.org)

Submitted by bjoast
bjoast writes: The SourceHut Git hosting provider recently changed its terms of service to limit how users may make of use of LLMs in their work, citing resource constraints and ethical concerns. From the the new terms of service:

The new terms of service, which will go into effect for new projects after the usual two week notice period (i.e. September 10th), will now include the following under the list of prohibited content:

  • original content written with or which facilitates the use of LLMs (large language models) or other generative AI technologies

The use of LLMs or other generative AI tools to produce or assist with the production of source code, assets, tickets, emails, and so on, will no longer be permitted on SourceHut once these terms take effect. As with our other policy changes, the intention is to roll this out slowly and thoughtfully. Each possible violation will be evaluated on a case-by-case basis and we are open to making exceptions.

Slashdot Top Deals

If you're not careful, you're going to catch something.

Close