Forgot your password?
typodupeerror

Submission + - Will AI expose the rickety infrastructure of the internet? (techcrunch.com)

sziring writes: A startling announcement went out earlier this week: Due to recently discovered vulnerabilities in the open source programming language PHP, website owners had to immediately patch their sites â" or if they couldnâ(TM)t update right away, they should take the sites down to be safe.
On this weekâ(TM)s episode of TechCrunchâ(TM)s Equity podcast, Kirsten Korosec, Sean Oâ(TM)Kane, and I discussed the significance of the PHP-ocalypse and whether weâ(TM)ll see more incidents like this in the future.
Sean called this âoea real reckoning momentâ that highlights how âoewhen you get down to the bone level of the internet,â everything seems to be âoeheld together by glue and dreams.â And with widespread access to large language models and AI agents, itâ(TM)s only going to become easier to find these vulnerabilities. (That said, these specific vulnerabilities were found by human researchers, not AI models.)
Kirsten, meanwhile, wondered if weâ(TM)re about to see the âoenext level of prepper doom [â¦] because you could see how banks could get exploited, and [with] data and privacy concerns, it just feels a lot bigger than we can fix right now.â
Keep reading for a preview of our conversation, edited for length and clarity.
Sean Oâ(TM)Kane: The internet is breaking in lots of ways this week, it seems.
I think the best way to think about this, if people are coming into this kind of cold: How many times over the last 10 years have we had these moments where something breaks or something nearly breaks, where one person maintaining one tiny repro repository as a hobby or whatever happens to catch that something nefarious is going on and and saves us from the infrastructure of the internet completely crumbling?
Now multiply that by a billion, when people have access to not only extremely advanced software in the form of these LLMs that everybody uses, but also the ability to task them to go out and do it themselves, with creating AI agents that are single-minded at accomplishing those things.
Weâ(TM)re seeing a balance of two things happening this week. One is a bunch of the labs and companies like Google and OpenAI actually had people go out and find a bunch of vulnerabilities, including the one with PHP. And then we also have a bunch of people seeming to rush to take advantage of those vulnerabilities to try and hack into websites. So we have governments taking down websites, we have really popular websites that are going down briefly to be able to fix this vulnerability.
This is a real reckoning moment, where weâ(TM)re going to find out the downside risk of building so much of the internet on open source technology like PHP. When you really get down to the bone level of the internet, it is held together with glue and dreams.

Comment So who got paid ? (Score 0) 66

The nanny Finnish government made a mistake ? for profit no less damn...they are as human as the rest of us. I figured Elon would Heil them into helping him...you know for old times sake...

"This is more Finland problem than Google fault."
Just because no one stopped Google from committing ecological terrorism doesn't make them less culpable.

Comment Re:Imma go ahead and announce that nobody cares (Score 1) 55

I recently started tt-rpg again with the new D&D. Getting back to pen and paper is really refreshing and fun. Check your local game shop, or college for active gaming groups. Oddly all the players are older folks with a even breakdown in men/women. All the younger folks play MtG or some other card based game. I think Pathfinder might be the rpg for that genre.

Comment Re:Phishing Tests (Score 5, Insightful) 82

Email clients could make this problem MUCH easier to deal with if they would just show the DOMAIN instead of overlaying the address with a title that is wholly made up. If you could see that your MS support email came from iamfuckinghack.com and not microsucks.com it would help. The mobile email clients are TERRIBLE in this manner and almost part of the problem hiding the true email address. Hell your client should point out those discrepancies when the mail is received.

Submission + - The Pentagon is quietly building an elite new tech sabotage agency (yahoo.com) 1

schwit1 writes: The Pentagon has spent months quietly building an elite new tech agency to help covertly disrupt and sabotage foreign technology programs considered threats to American military superiority.

Neither Defense Secretary Pete Hegseth nor any other senior Pentagon official has publicly mentioned the agency since it was established this April — a conspicuous omission for a department that has reveled in announcing other major changes aimed at modernizing the military or adopting hard-nosed new policies against foreign adversaries.

Information on the Technology Support Office, or TSO as it is called internally, is nearly impossible to find on Pentagon websites, and the agency is mentioned by name only in several previously unreported Defense Department historical records and memoranda.

Special Operations Command and U.S. Cyber Command both objected to creating the new agency, fearing it would cut into their budgets, according to the two former intelligence officials and one former senior U.S. national security official.

But by creating an agency dedicated to expanding that work, the Defense Department is signaling its intent to ramp up a range of aggressive covert activities abroad — potentially including cyberattacks, supply chain disruptions and disinformation operations.

Many of the people who spoke argued that the aggressive new initiative is needed to help the Pentagon counter foreign adversaries they say are harnessing artificial intelligence and advanced commercial technologies, such as drones, in creative ways that could erode America's military advantage.

Submission + - Microsoft says October updates didn't actually fix VPN issues (bleepingcomputer.com)

joshuark writes: Microsoft says it mistakenly flagged a bug causing Always On VPN connection issues as fixed in the October 2026 Windows 11 cumulative updates.
Always On VPN replaced the legacy DirectAccess technology and supports domain-joined, non-domain-joined, and Microsoft Entra ID–joined devices running Windows 10, Windows 11, and Windows Server.

It runs in the background and establishes secure tunnels back to the user's corporate network whenever their device connects to the internet.

Microsoft first acknowledged the issue in a service alert sent to IT administrators in late September, saying it was triggered on systems running Windows 11 24H2 and later after installing the September 2026 security updates when the initial Always On VPN connection failed (e.g., when using automatic protocol selection with IKEv2 and SSTP).

"When automatic protocol selection or protocol fallback was configured, affected VPN connections could remain stuck in a Connecting state or fail to connect after an initial connection attempt failed," it said. "In some cases, subsequent connection attempts could display the error, 'The specified port is already in use.'"

After releasing the October 2026 Patch Tuesday Windows 11 cumulative updates, Microsoft marked the bug as resolved, but in a Tuesday update it said the issues weren't actually addressed and that a fix would ship later.

"This disclosure was mistakenly updated to Resolved status on October 13, 2026. We have returned its status to Mitigated," it said in a service alert sent to IT admins. "A resolution for this issue is planned to be included in an update to be released in the coming weeks. We apologize for any inconvenience or confusion."

While Microsoft continues working on a permanent solution, it shared a temporary fix that requires affected customers to choose one of two VPN tunneling protocols to work around the issue.

Slashdot Top Deals

"The identical is equal to itself, since it is different." -- Franco Spisani

Working...