Forgot your password?
typodupeerror

Submission + - Will AI expose the rickety infrastructure of the internet? (techcrunch.com)

sziring writes: A startling announcement went out earlier this week: Due to recently discovered vulnerabilities in the open source programming language PHP, website owners had to immediately patch their sites â" or if they couldnâ(TM)t update right away, they should take the sites down to be safe.
On this weekâ(TM)s episode of TechCrunchâ(TM)s Equity podcast, Kirsten Korosec, Sean Oâ(TM)Kane, and I discussed the significance of the PHP-ocalypse and whether weâ(TM)ll see more incidents like this in the future.
Sean called this âoea real reckoning momentâ that highlights how âoewhen you get down to the bone level of the internet,â everything seems to be âoeheld together by glue and dreams.â And with widespread access to large language models and AI agents, itâ(TM)s only going to become easier to find these vulnerabilities. (That said, these specific vulnerabilities were found by human researchers, not AI models.)
Kirsten, meanwhile, wondered if weâ(TM)re about to see the âoenext level of prepper doom [â¦] because you could see how banks could get exploited, and [with] data and privacy concerns, it just feels a lot bigger than we can fix right now.â
Keep reading for a preview of our conversation, edited for length and clarity.
Sean Oâ(TM)Kane: The internet is breaking in lots of ways this week, it seems.
I think the best way to think about this, if people are coming into this kind of cold: How many times over the last 10 years have we had these moments where something breaks or something nearly breaks, where one person maintaining one tiny repro repository as a hobby or whatever happens to catch that something nefarious is going on and and saves us from the infrastructure of the internet completely crumbling?
Now multiply that by a billion, when people have access to not only extremely advanced software in the form of these LLMs that everybody uses, but also the ability to task them to go out and do it themselves, with creating AI agents that are single-minded at accomplishing those things.
Weâ(TM)re seeing a balance of two things happening this week. One is a bunch of the labs and companies like Google and OpenAI actually had people go out and find a bunch of vulnerabilities, including the one with PHP. And then we also have a bunch of people seeming to rush to take advantage of those vulnerabilities to try and hack into websites. So we have governments taking down websites, we have really popular websites that are going down briefly to be able to fix this vulnerability.
This is a real reckoning moment, where weâ(TM)re going to find out the downside risk of building so much of the internet on open source technology like PHP. When you really get down to the bone level of the internet, it is held together with glue and dreams.

Comment Re:How is the Ukraine war going? (Score 1) 64

I don't know if you're a russian bot or some deluded idiot, but it amuses me to do a breakdown of your post.

NATO turned what was originally intended to be a mostly peaceful show of force like the temporary invasion of Georgia into a war of attrition.

First of all the "peaceful show of force" "temporary" invasion of Georgia involved a few hundred dead in the first two days, and another 5000+ civilians killed in the ethnic cleansing after that, all for a land-grab to seize control of territory covering half of Georgia's coastline that Putin wanted.

Secondly, the "peaceful show of force" "temporary" invasion of Ukraine involved hundreds dead, ballistic and cruise missile attacks on all of Ukraine's largest cities, and Putin publicly admitting the goal of overthrowing the Ukrainian government... and that's just within the first 36 hours. Within two and a half months Russian officials began admitting the intent to permanently annex parts of Ukraine, proceeding with a constitutional amendment a few months later claiming to annex vast territories that Russian had not remotely taken control of, and which Russia is not remotely capable of capturing. Donetsk alone has a population of over a million, two million if you include the metro-area. Russia spent months and many thousand of lives to capture, and later lose, villages in the range of low tens of thousands.

Remember WWI when the lines were pretty much static for years and then suddenly it was all over?

Yes, I remember. As I recall it wasn't exactly "sudden". As I recall... Russian casualties were around five million killed, wounded, or captured, the Russian economy was collapsing, Russia was running out of food, and Russian literally lost it's own capital to civilian rebellion. A few months later the Russian government collapsed and surrendered vast territories including Finland, Estonia, Latvia, Lithuania, parts of Poland and Ukraine to Germany and its allies (known as the Central Powers). Right about that point the U.S. joined the war reinvigorating the Allied Powers. Germany&friends knew they couldn't win a protracted war. They attempted a quick win, and, in short, they failed. The Allied powers steadily beat them down, with the allies eventually breaking through the lines and progressively liberating territory. With the Allies steadily advancing and the war obviously lost, German forces began rebelling and Germany surrendered.

That's what's happening here. Russia has most of Donbas plus a buffer zone in some other regions that directly border Russia. Ukraine is throwing men at the front lines for Russia to kill but is running out. Territory held is largely irrelevant compared to the number of men killed and weapons destroyed.

So much to unpack there, but it's amusing how you cite "territory held is largely irrelevant" given that the tide has turned and Ukrainians are now the ones breaking through lines and liberating territory from Russian occupation. It's not much yet, but all the map trackers show the reversal. Russia is now officially loosing more territory than they gain. Russia WAS slowly gaining small bits of land, largely through sending meat waves of untrained ill equipped soldiers at Ukrainian lines until the Ukrainians ran out of ammo and had to fall back. However now 7 out of 10 Russians killed are killed by drones. The "no man's land" between the two sides is now many kilometers wide. Any Russian trying to advance gets hit by a drone. Russia has also losing on average 1 air defense system every day, and rapidly depleting. Russian supply lines are getting pummeled by drones. Russian refineries are getting pummeled by drones, with progressively worsening fuel shortages for both the military and for the increasingly rebellious population. Cheap advanced Ukrainian drones are taking out expensive crappy Russian drones, including Russian's new jet-drones. Practically every country on earth is asking Ukraine for their military drone tech, the Russians can't remotely match it. Russian's economy is also fucked, but that topic pretty needs a separate book to cover.

Interesting side notes on weapons destroyed. Russia is destroying it's aircraft almost as fast as Ukraine is, between incompetence and maintenance failures and friendly fire shooting down their own aircraft. Also the nation that is the biggest donor of tanks to Ukraine is... Russia. Ukraine captured countless Russian tanks intact because the Russian military is so abysmal incompetent and corrupt. And as I mentioned, Russian air defense units are depleting. The war is now approaching 5 years, longer than the entirety of WW1. Ukraine is a small fraction of Russia's size, and Russian is literally losing and headed towards another soviet-union-style collapse. The biggest shock to the world of this entire war is just how worthless Putin has made Russian military, through systemic corruption and systemic incompetence.

Polls show the Ukrainian population isn't interested in surrendering. They are defending their homes. It's simple, the war will end when all the soldiers go home. When Russian soldiers go back to their homes in Russia, and when Ukrainian soldiers go back to their homes in the currently occupied parts of Ukraine. Although that's not likely to happen until Putin either expires or is overthrown. Not only is he fanatical enough to drive his country to collapse in the attempt, he knows if he did end the war in failure he'd get killed or overthrown for it.

Anyway, pointless reply to a bot or a useful idiot. But maybe some random passer-by will find some bits interesting. I don't know about the rest of the world, but mainstream US news rarely mentions the Ukraine war anymore, and certainly not in any detail.

-

Submission + - The Pentagon is quietly building an elite new tech sabotage agency (yahoo.com) 1

schwit1 writes: The Pentagon has spent months quietly building an elite new tech agency to help covertly disrupt and sabotage foreign technology programs considered threats to American military superiority.

Neither Defense Secretary Pete Hegseth nor any other senior Pentagon official has publicly mentioned the agency since it was established this April — a conspicuous omission for a department that has reveled in announcing other major changes aimed at modernizing the military or adopting hard-nosed new policies against foreign adversaries.

Information on the Technology Support Office, or TSO as it is called internally, is nearly impossible to find on Pentagon websites, and the agency is mentioned by name only in several previously unreported Defense Department historical records and memoranda.

Special Operations Command and U.S. Cyber Command both objected to creating the new agency, fearing it would cut into their budgets, according to the two former intelligence officials and one former senior U.S. national security official.

But by creating an agency dedicated to expanding that work, the Defense Department is signaling its intent to ramp up a range of aggressive covert activities abroad — potentially including cyberattacks, supply chain disruptions and disinformation operations.

Many of the people who spoke argued that the aggressive new initiative is needed to help the Pentagon counter foreign adversaries they say are harnessing artificial intelligence and advanced commercial technologies, such as drones, in creative ways that could erode America's military advantage.

Submission + - Microsoft says October updates didn't actually fix VPN issues (bleepingcomputer.com)

joshuark writes: Microsoft says it mistakenly flagged a bug causing Always On VPN connection issues as fixed in the October 2026 Windows 11 cumulative updates.
Always On VPN replaced the legacy DirectAccess technology and supports domain-joined, non-domain-joined, and Microsoft Entra ID–joined devices running Windows 10, Windows 11, and Windows Server.

It runs in the background and establishes secure tunnels back to the user's corporate network whenever their device connects to the internet.

Microsoft first acknowledged the issue in a service alert sent to IT administrators in late September, saying it was triggered on systems running Windows 11 24H2 and later after installing the September 2026 security updates when the initial Always On VPN connection failed (e.g., when using automatic protocol selection with IKEv2 and SSTP).

"When automatic protocol selection or protocol fallback was configured, affected VPN connections could remain stuck in a Connecting state or fail to connect after an initial connection attempt failed," it said. "In some cases, subsequent connection attempts could display the error, 'The specified port is already in use.'"

After releasing the October 2026 Patch Tuesday Windows 11 cumulative updates, Microsoft marked the bug as resolved, but in a Tuesday update it said the issues weren't actually addressed and that a fix would ship later.

"This disclosure was mistakenly updated to Resolved status on October 13, 2026. We have returned its status to Mitigated," it said in a service alert sent to IT admins. "A resolution for this issue is planned to be included in an update to be released in the coming weeks. We apologize for any inconvenience or confusion."

While Microsoft continues working on a permanent solution, it shared a temporary fix that requires affected customers to choose one of two VPN tunneling protocols to work around the issue.

Comment Re: Lazy owners. (Score 4, Informative) 130

I fly 200ish flights a year so figure 70-80 nights away.

2025 was 100% hotels but 2019 was about 80% Airbnbs.

Airbnb will never get my business back. Ever. The professional scammer hosts are so good at finding a way to nail me for a fee. Iâ(TM)ve taken perfect check out video and still had to spend hours fighting fees.

Submission + - Old Blood Cells Have Been Transformed Into Brain Stem Cells That Get Younger (sciencealert.com)

alternative_right writes: Now, scientists have transformed old blood cells into young brain stem cells, which continued to grow younger as they grew older.

The researchers, from the University Hospital of Bonn and the University of Bonn, in Germany, described their methods in the journal Aging Cell.

Cellular transformations can be done in two main ways. The first, more circuitous route turns a specific cell back into a pluripotent stem cell, or an embryonic "blank slate," and then into a different cell type.

Comment Re:Last non-autonomous model? (Score 1) 223

I have FSD-Supervised in my Tesla and it is awesome! You have to supervise it, as the name says, but it is absolutely the best thing I've ever had in my car. It drives me around like a chauffeur most of the time. The rest (city streets, intersections), I have to pay close attention in case it does something stupid. So far it has not. I will never go back to a regular car. At the rate of improvement we have now, I expect actual FSD in 5-7 years.

Submission + - LLM-inspired study sheds light on how brain cells encode the meaning of words (medicalxpress.com)

alternative_right writes: To investigate how the brain encodes the meaning of words, the researchers first recorded the activity of individual neurons in the hippocampus of 10 people who were listening to stories. Their recordings were collected using tiny wire electrodes that were implanted in the participants' brains as part of clinical monitoring procedures for epilepsy.

The team then used mathematical models to analyze the language used in the stories and the brain recordings. This allowed them to examine whether information about the meaning of words could predict the recorded neuronal activity.

"We recorded responses of hippocampal neurons while individuals listened to narrative speech," wrote Melissa Franch and her colleagues in their paper. "Using an encoding model approach, we find robust encoding of semantics, even after controlling for phonemics and grammar. Individual words had complex selectivities that included multiple words in multiple semantic categories."

Submission + - Amid K-12 AI Pushback, OpenAI Named Lead Partner of 'Hour of AI' for Kids

theodp writes: On the heels of announced AI moratoriums by the nation's two largest K-12 school districts (NYC, LA), tech-backed nonprofit CodeAI (aka Code.org) this week named OpenAI 'Lead Partner' for the 2026 Hour of AI, which has replaced the Hour of Code (RIP, 2013-2024) as the premier event for the nation's K-12 schoolchildren during December's CS Education Week. OpenAI investor and partner Microsoft was named as one of two 'Supporters' for the event/infomercial (the other being U.S. defense contractor Northrop Grumman).

In August, as it launched ChatGPT for Teens, OpenAI announced a new signature partnership with Code.org to 'prepare the first AI generation', explaining that 'through the Hour of AI, OpenAI and CodeAI will introduce millions of students to the basics of using AI thoughtfully and responsibly.' OpenAI and Microsoft last year teamed up with the American Federation of Teachers to 'bring AI into the classroom', but that honeymoon is over. For more on the inside story of how Big Tech is applying the same playbook it used to scale coding lessons nationwide to now mainstream their AI tools in schools, check out Coding Kids: Big Tech's Battle to Remake Public Schools.

So, much like the Hour of Code that preceded it, will the Hour of AI serve as tech's 'Trojan Horse' (ChatGPT-generated parody cover) in its 'Odyssey' to push its agenda and curriculum into schools?

Comment Re:DNS is a tyrant's paradise (Score 5, Interesting) 61

Don't appeal, just maliciously comply: "Okay, we've blocked all of France. Welcome back to the dark ages."

Yes, and I think Cloudflare was likely on that point. At least, I would have been.

They are right to take the approach they are doing. First stop is education and challenging the orders. Educate the politicians and the courts on both the technology and the reasons behind the way the technology operates. Fight it in the courts because that's the right thing to do, even if bad actors want the harm and also technically illiterate folks don't understand the harm, the moral grounds need the fight to be fought.

ONLY after that fails, absolute simple, blind, malicious compliance. If France refuses to listen to the technologists and wants the ban, that's fine, roughly 25% of the global websites will be blackholed in France, and sites that rely on those will also shut down. Any and all requests get met by a redirect to the French court order. When the politicians and the courts demand the impossible and want to nuke themselves to the online dark ages despite people telling them they're making a mistake, so be it.

Slashdot Top Deals

Genetics explains why you look like your father, and if you don't, why you should.

Working...