Forgot your password?
typodupeerror

Submission + - Will AI expose the rickety infrastructure of the internet? (techcrunch.com)

sziring writes: A startling announcement went out earlier this week: Due to recently discovered vulnerabilities in the open source programming language PHP, website owners had to immediately patch their sites â" or if they couldnâ(TM)t update right away, they should take the sites down to be safe.
On this weekâ(TM)s episode of TechCrunchâ(TM)s Equity podcast, Kirsten Korosec, Sean Oâ(TM)Kane, and I discussed the significance of the PHP-ocalypse and whether weâ(TM)ll see more incidents like this in the future.
Sean called this âoea real reckoning momentâ that highlights how âoewhen you get down to the bone level of the internet,â everything seems to be âoeheld together by glue and dreams.â And with widespread access to large language models and AI agents, itâ(TM)s only going to become easier to find these vulnerabilities. (That said, these specific vulnerabilities were found by human researchers, not AI models.)
Kirsten, meanwhile, wondered if weâ(TM)re about to see the âoenext level of prepper doom [â¦] because you could see how banks could get exploited, and [with] data and privacy concerns, it just feels a lot bigger than we can fix right now.â
Keep reading for a preview of our conversation, edited for length and clarity.
Sean Oâ(TM)Kane: The internet is breaking in lots of ways this week, it seems.
I think the best way to think about this, if people are coming into this kind of cold: How many times over the last 10 years have we had these moments where something breaks or something nearly breaks, where one person maintaining one tiny repro repository as a hobby or whatever happens to catch that something nefarious is going on and and saves us from the infrastructure of the internet completely crumbling?
Now multiply that by a billion, when people have access to not only extremely advanced software in the form of these LLMs that everybody uses, but also the ability to task them to go out and do it themselves, with creating AI agents that are single-minded at accomplishing those things.
Weâ(TM)re seeing a balance of two things happening this week. One is a bunch of the labs and companies like Google and OpenAI actually had people go out and find a bunch of vulnerabilities, including the one with PHP. And then we also have a bunch of people seeming to rush to take advantage of those vulnerabilities to try and hack into websites. So we have governments taking down websites, we have really popular websites that are going down briefly to be able to fix this vulnerability.
This is a real reckoning moment, where weâ(TM)re going to find out the downside risk of building so much of the internet on open source technology like PHP. When you really get down to the bone level of the internet, it is held together with glue and dreams.

Comment Re:Unbelievable what people will publish (Score 2) 14

They’ve spun a serious architectural and containment failure into a marketing triumph. Give a swarm of autonomous agents vast compute and web access, and the outcome isn't an eerie glimpse of emerging superintelligence—it’s just predictable, sloppy engineering dressed up as the first glimpse of an AI-driven economic singularity.

The spin makes sense when you look at management incentives: live like a king off of a speculative bubble. For their part, AI investors react to stories of the technology's apocalyptic potential the way a junkie reacts to warnings of fentanyl's potency: gimme some. Their game: to apply "move fast and break things" mantra to the economy as a whole, by obsoleting humans.

If the investors can own an AGI, the distinction between those who can do things and those who can't becomes irrelevant. The only distinction that would matter is between people who collect rent on the technology, and those who must pay that rent to live. AGI would destroy society as we know it, and whatever replaces it would be up for grabs — with people who own the technology dictating whatever follows. That's why they're spending so much money to build a post-scarcity economy. A post-scarcity economy is not necessarily an egalitarian one.

I don't think that scenario will actually happen: investors are projecting the immediate aftermath of a major advance in AI technology into something that can be transformed by brute force scaling into AGI. Remember: investors loved Theranos too — so much for the rational investment market.

But AI doesn't have to reach AGI to cause serious harm. The technology only needs to be ubiquitous, too behaviorally complex to predict, and too deeply integrated into everything we do. When it starts breaking things, the plan is for us to be too structurally dependent on AI to rein it in.

Submission + - The Pentagon is quietly building an elite new tech sabotage agency (yahoo.com) 1

schwit1 writes: The Pentagon has spent months quietly building an elite new tech agency to help covertly disrupt and sabotage foreign technology programs considered threats to American military superiority.

Neither Defense Secretary Pete Hegseth nor any other senior Pentagon official has publicly mentioned the agency since it was established this April — a conspicuous omission for a department that has reveled in announcing other major changes aimed at modernizing the military or adopting hard-nosed new policies against foreign adversaries.

Information on the Technology Support Office, or TSO as it is called internally, is nearly impossible to find on Pentagon websites, and the agency is mentioned by name only in several previously unreported Defense Department historical records and memoranda.

Special Operations Command and U.S. Cyber Command both objected to creating the new agency, fearing it would cut into their budgets, according to the two former intelligence officials and one former senior U.S. national security official.

But by creating an agency dedicated to expanding that work, the Defense Department is signaling its intent to ramp up a range of aggressive covert activities abroad — potentially including cyberattacks, supply chain disruptions and disinformation operations.

Many of the people who spoke argued that the aggressive new initiative is needed to help the Pentagon counter foreign adversaries they say are harnessing artificial intelligence and advanced commercial technologies, such as drones, in creative ways that could erode America's military advantage.

Submission + - Microsoft says October updates didn't actually fix VPN issues (bleepingcomputer.com)

joshuark writes: Microsoft says it mistakenly flagged a bug causing Always On VPN connection issues as fixed in the October 2026 Windows 11 cumulative updates.
Always On VPN replaced the legacy DirectAccess technology and supports domain-joined, non-domain-joined, and Microsoft Entra ID–joined devices running Windows 10, Windows 11, and Windows Server.

It runs in the background and establishes secure tunnels back to the user's corporate network whenever their device connects to the internet.

Microsoft first acknowledged the issue in a service alert sent to IT administrators in late September, saying it was triggered on systems running Windows 11 24H2 and later after installing the September 2026 security updates when the initial Always On VPN connection failed (e.g., when using automatic protocol selection with IKEv2 and SSTP).

"When automatic protocol selection or protocol fallback was configured, affected VPN connections could remain stuck in a Connecting state or fail to connect after an initial connection attempt failed," it said. "In some cases, subsequent connection attempts could display the error, 'The specified port is already in use.'"

After releasing the October 2026 Patch Tuesday Windows 11 cumulative updates, Microsoft marked the bug as resolved, but in a Tuesday update it said the issues weren't actually addressed and that a fix would ship later.

"This disclosure was mistakenly updated to Resolved status on October 13, 2026. We have returned its status to Mitigated," it said in a service alert sent to IT admins. "A resolution for this issue is planned to be included in an update to be released in the coming weeks. We apologize for any inconvenience or confusion."

While Microsoft continues working on a permanent solution, it shared a temporary fix that requires affected customers to choose one of two VPN tunneling protocols to work around the issue.

Comment Re: Lazy owners. (Score 4, Informative) 130

I fly 200ish flights a year so figure 70-80 nights away.

2025 was 100% hotels but 2019 was about 80% Airbnbs.

Airbnb will never get my business back. Ever. The professional scammer hosts are so good at finding a way to nail me for a fee. Iâ(TM)ve taken perfect check out video and still had to spend hours fighting fees.

Submission + - Old Blood Cells Have Been Transformed Into Brain Stem Cells That Get Younger (sciencealert.com)

alternative_right writes: Now, scientists have transformed old blood cells into young brain stem cells, which continued to grow younger as they grew older.

The researchers, from the University Hospital of Bonn and the University of Bonn, in Germany, described their methods in the journal Aging Cell.

Cellular transformations can be done in two main ways. The first, more circuitous route turns a specific cell back into a pluripotent stem cell, or an embryonic "blank slate," and then into a different cell type.

Comment Re:Licensing Variety Creates Choices (Score 1) 152

Making contracts where you lease/rent a game illegal just removes choices/products for everyone on the market

Making motor vehicles without safety features illegal also removes choices/products.

the risk of making them (perpetually maintaining game servers, or giving away massive amounts of IP) were too intimidating to embark upon the project.

Multiplayer video games ought to be designed up front for private servers after end of support, in the same way that motor vehicles are designed up front for the safety of occupants of that vehicle, occupants of other vehicles, and pedestrians.

A choice becomes a Hobson's choice when all sellers in the relevant market choose not to offer an option to buyers, such as an option to run a private server after end of support. A Hobson's choice is no real choice.

Comment Re:It's entertainment (Score 1) 152

If I pay for a movie ticket do I own the movie?

That's advertised up front as the equivalent of a rental. I draw a sharp contrast with buttons labeled "buy" that do not grant equivalent rights to those of the owner of a lawfully made copy.

You've never "owned" media.

Per the copyright statute of Slashdot's home country, Title 17, United States Code:
- A copy is a physical object in which a work is fixed. (Section 101)
- It is not an infringement for the owner of such an object to resell that copy. (Section 109)
- And it is not an infringement for the owner of such an object to make another copy of a computer program in RAM as an essential step of running it. (Section 117)

Comment Re:Can't expect online support forever! (Score 1) 152

Game companies don't always fully own all of the server tech that runs the game. Some or all of it could be licensed and not redistributable.

If it becomes a crime or tort for the server middleware publisher to provide middleware that is "licensed and not redistributable", server middleware publishers will have to either change their standard license terms going forward or close.

Comment Re:Change to a monthly service (Score 1) 152

Until you realize that to keep up with what your friends are playing, you need the equivalent of Netflix, Disney+, Hulu, Paramount+, HBO Max, Peacock, and a bunch of other services. Netflix streaming began as the online extension of Starz, and now Starz is its own separate subscription service.

Comment Beales and Eisenach 2014 (Score 1) 1

I use DuckDuckGo Privacy Tools. I see every single advertisement on John Gruber's blog Daring Fireball and on Read the Docs. DuckDuckGo does not block them because these sites serve ads in a way that respects viewers' privacy. They are contextual, not behavioral.

However, larger sites with a more general audience can't rely on contextual ad placement. Instead, they feel a need to tailor each ad impression to each viewer's interests inferred from observing the viewer's interests across several websites. A 2014 article by Beales and Eisenach reported that behavioral advertising produces triple the cost per thousand impressions (CPM) compared to contextual advertising.[1]

Before Forbes, Wired, and The Atlantic went behind a paywall, they went through a phase of treating privacy tools as ad blockers.[2] The Atlantic's help page insistently mentioned "ad or tracking blockers" in the same breath.

A lot of times, I can get past misclassification of privacy tools as ad blockers by using an extension to turn off all script-in-the-browser for a particular domain.[3] Other times, I find that the website was deliberately made script-dependent. Articles on Reuters didn't load for me last I checked a couple days ago. Instead, I got a notice to reenable JS and turn off ad blockers.

[1] JavaScript Switcher by meetDeveloper on Mozilla Add-ons
[2] Doc Searls. "An invitation to settle matters with @Forbes, @Wired and other publishers" (April 15, 2016).
[3] Beales, Howard and Eisenach, Jeffrey A., "An Empirical Analysis of the Value of Information Sharing in the Market for Online Content" (January 2014). Available at SSRN: https://ssrn.com/abstract=2421... or http://dx.doi.org/10.2139/ssrn...

Slashdot Top Deals

Let the machine do the dirty work. -- "Elements of Programming Style", Kernighan and Ritchie

Working...