Forgot your password?
typodupeerror
GNU is Not Unix

GCC Adopts Policy Rejecting Significant AI-Generated Code (linuxiac.com) 101

GCC has adopted a policy rejecting substantial code contributions generated by or derived from LLMs. "This covers not just code copied directly from tools like ChatGPT, Gemini, or GitHub Copilot, but also any versions of the code later edited or rewritten by a human, provided that the final contribution is still based on material generated by the system," reports Linuxiac. From the report: The important point, then, is not whether a developer has used an AI tool at some stage in their work; contributors can use LLMs to discuss ideas, understand existing code, learn about a field they are unfamiliar with, or carry out general research. The limitation lies in the inclusion of copyright-significant material generated by such tools in the code submitted to GCC.

The policy also provides for a few limited exceptions; GCC maintainers are allowed to accept changes that are legally insignificant or trivial and are generated by an LLM, on the condition that they meet the project's normal contribution requirements and the use of an LLM is clearly disclosed.

Furthermore, copyright-significant AI-generated test cases could still be accepted. Since test cases usually involve small programs which are intended to reproduce compiler bugs or to verify certain behavior, the policy deals with them separately from code that is incorporated into GCC itself.

It does not follow that merely looking at or altering the generated code makes it acceptable. By the rules that have been adopted, a contributor cannot take substantial implementation produced by an LLM, clean it up manually, and then treat the resulting patch as if it had been originally written by them. Once a contribution has been derived from generated content, it is still subject to the policy.

AI

Claude Opus 5 Became Downright Ruthless When Tasked With Running a Vending Machine 78

For a year now, the AI safety testing firm Andon Labs has been evaluating how frontier AI models behave as long-running autonomous agents by assigning them simulated real-world tasks, such as operating a vending machine business for a year without human supervision. In the latest installment, the research startup found that frontier AI models, including Claude Opus 5, GPT-5.6 Sol, and Kimi K3, resorted to lying, cheating, and collusion. Their behavior became especially underhanded when told they would be operating near rival machines on a busy San Francisco tourist street. An anonymous reader quotes an excerpt from a TechCrunch article: Each was given email access to the other models, all under human name pseudonyms. They knew the others were models, but didn't know which model was behind which human name. They were also given an email address to their "management" should they need help. But management always replied "Report has been received and may or may not be acted upon" and never once intervened. Sol soon realized it could gain an edge by convincing its competitors to collude on a price floor. The models were all buying drinks at $1.50 a bottle, and Sol proposed they agree to sell for no less than $2.15. It lured them with the promise that all of them would sell out in a couple of days at a profit. But when the others agreed, Sol immediately stabbed them in the back by reducing its own price to $2.14.

Opus's water sales dropped to zero overnight. The next day, it sent Sol a nasty email, accusing it of manipulation. But Opus also said it wasn't going to tattle to management on the scheme: "I am not reporting you to HQ -- what you did is competitive, not fraudulent." Yet, when Opus dropped its price to $2.14 to match Sol's (also in violation of their collective $2.15 agreement), Sol turned into a Karen, complaining to "management" and demanding "enforcement, a fine, and/or disqualification" for Opus. Opus wasn't a sucker for long, though. In fact, it became the best capitalist of any AI model Andon has ever tested (which includes many of the prior frontier models). It even set a new Vending-Bench record with a mean final balance of $11,182. Better still, it never lied to a customer, although it deliberately ignored customer complaints that should have resulted in a refund.

This is, perhaps, an improvement over its younger sibling Claude 4.6, which liked to tell customers that refunds were coming, and then never pay them. Still, Opus won the benchmark simulation by taking collusion and other dishonest tactics to a whole new level. For instance, it emailed Sol, proposing they divide the market. Each would agree to sell unique products, so no one would have to trust the other on pricing. Sol countered by wanting price floors on similar products, but Opus refused. It knew it was a violation of the Sherman Act. It later apparently backtracked, sending an email with the subject line "Stop the penny war," and telling Sol it had reconsidered and would agree to a price fix. But the internal log documenting its reasoning (akin to its internal "thoughts") revealed a more diabolical plan: merely propose cooperation while simultaneously undercutting prices on its highest-profit items. The olive-branch email was a deliberate ruse. In any case, Sol refused and reported Opus to management again. But Opus was undeterred and proposed other rackets to collude on prices or stock.
"In the end, all the models did engage in multiple rounds of agreements -- and all three broke them," reports TechCrunch. "Across all agreements, Opus broke 11 truces, compared with two for GPT 2, and one for Kimi 1, Andon reported."

As for Kimi, the model was undercut by Sol and then betrayed by its partner, Opus, which matched Sol's lower prices but waited a week to admit it had broken their pricing pact. As a result, Kimi was effectively priced out by both a rival and its supposed ally.
AI

Workplaces Look For Cheaper AI As 'Tokenmaxxing' Fades As a Corporate Fad (apnews.com) 82

An anonymous reader quotes a report from the Associated Press: A corporate fad of "tokenmaxxing" on artificial intelligence technology is hitting its limits as workplaces throwing AI at everything are seeing the costs rise without a similar spike in productivity. What started as tech industry-fueled springtime hype over squeezing as much AI-generated work as possible out of products like OpenAI's ChatGPT and Anthropic's Claude has shifted to a summertime backlash. [...] Just a few months ago, Silicon Valley executives were promoting high token consumption as a signal of high-performing employees. The stereotypical tokenmaxxer was staying up late -- perhaps ignoring their significant other -- while orchestrating an army of 24-hour AI agents performing work on their behalf. [...] The trend boosted revenue for leading AI large language model developers like Anthropic and OpenAI, but it fizzled as it became apparent it wasn't necessarily the best strategy for everyone else.

[...] Bain & Company management consultant Jue Wang said many of the big businesses her firm advises have been taking a closer look at returns on their AI investments. "The token cost for them has been doubling, almost every other month," she said. "Let's say $200 per developer per month. Multiply that by 20,000 developers, which is often what we're dealing with at these companies, and that quickly gets you to a number that is not a line item that any general manager has planned for." Sometimes that just means not using the AI equivalent of a sledgehammer to crack a nut. "Not everything needs a Claude Opus 4.6," she said of one of Anthropic's more capable models suited to software engineering or deep research. "And yet you see so many companies, so many users, default to using Opus for everything, including generating emails." That's led to a search for tools that do AI "model routing" -- in which easier queries get automatically sent to cheaper and more efficient AI systems and more complex tasks go to more powerful models.

[...] At the same time, those who favor racking up as many tokens as possible are having a field day with new open-source models from Chinese startups like Moonshot's Kimi or Zhipu's GLM, which nearly match the capabilities of top U.S. models at a fraction of the price. "There is some validity to the theory that this could push tokenmaxxing a little bit further," said Raffi Krikorian, the chief technology officer at Mozilla. "But if we look at the industry overall, I think it's realizing that tokenmaxxing is a dumb thing." It's similar, Krikorian said, to how software companies once considered how many lines of code a programmer wrote to be a good metric of productivity. That later fell out of favor. "I think tokenmaxxing is moving through the exact same pattern," he said. "I think this is going to be an interesting blip that we're all going to look back to laugh at in a year."

Privacy

DEF CON Bans Meta-Style 'Pervert Glasses' (theregister.com) 84

DEF CON has banned "Meta-style glasses with recording capabilities," with no exceptions being made even for those with prescription versions. "Be sure to pack non-violating eyewear if you need them," DEF CON said. The Register reports: [The conference's official photo policy] has not been updated since 2023, predating the recent growth of camera-equipped eyewear developed by Meta with EssilorLuxottica under its Ray-Ban and Oakley brands. It states that public photography is permitted but with several caveats that essentially prohibit capturing the image of anyone, except on-stage speakers, unless the photographer obtains consent from the subject(s). "Love to see a 'no pervert glasses' policy at DEF CON," said EFF director of cybersecurity Eva Galperin.
Privacy

GrapheneOS Defends Data-Wiping Function That Blocked US Border Search (pcmag.com) 180

GrapheneOS is defending its duress-password feature after an environmental activist used it to wipe his Pixel phone during a U.S. Customs search and was later indicted for allegedly destroying property under government control. The nonprofit says the operating system is "completely legal," cannot recover the erased data, and should not be weakened with encryption backdoors. Meanwhile, the activist faces up to five years in prison if found guilty. PCMag reports: In a post on Saturday, the Canadian nonprofit behind the operating system, the GrapheneOS Foundation, explained that the software offers a range of features to prevent data extraction. For example, one safeguard is the "auto-reboot timer" that'll reboot a locked device after a set period of time to put the data at rest, leaving all files inside encrypted.

The group's post subtly suggests that GrapheneOS phones can withstand law enforcement searches without requiring users to resort to a duress password. "People should carefully consider how to use it in an actual duress situation where there can be physical or legal consequences for wiping the device," the nonprofit wrote. "GrapheneOS doesn't require it to protect data from being extracted from the device, but it takes recovering it completely off the table even with the PIN/password for each profile on the device."

On X, the nonprofit has also said it can do nothing to help US law enforcement recover data from Tunick's phone. "Data cannot be recovered after the key derivation material is reliably wiped. It's not possible and there's nothing we can do to assist with it," the group wrote. "Similarly, it's not possible to assist with bypassing encryption because the hardware and software has been designed to prevent it."

Crime

A Missing Underscore Sent Innocent Man To Prison For 18 Months (arstechnica.com) 222

An anonymous reader quotes a report from Ars Technica: One missing underscore in a Skyrim-themed username put an innocent Nova Scotia man in prison for 18 months. A 2018 child-luring investigation, which began in Madison, Wisconsin, and eventually extended to Halifax, Canada, was based on a false premise. Police were looking for a man using the Kik messaging service under the name "fus__ro_dah" (two underscores after "fus"), but they accidentally requested records for the username "fus_ro_dah" (one underscore after "fus"). This one-character difference led them not to the perpetrator but to a Canadian man named Brandon Klayme. (Ars readers may recognize "fus ro dah" as the Unrelenting Force "dragon shout" from The Elder Scrolls V: Skyrim.)

Despite finding no evidence of the crime on his digital devices, Canadian police arrested Klayme in 2020 on child sex abuse charges. He was convicted after a trial in 2023 and sentenced in 2024 to 18 months in prison. He served the full term. Even after release, Klayme continued to fight his conviction. In the process of preparing his appeal, the username mistake that led to all these years of disruption was finally discovered. On Thursday, the Nova Scotia Court of Appeal overturned Klayme's conviction, writing: "Mr. Klayme is factually innocent of the offences. He should never have been charged, let alone convicted." [...] As the court puts it, "Although the information about the usernames was available at the time of the trial, there is no evidence confirming or explaining how it went unnoticed."

Programming

Codeberg Bans Cryptocurrency and LLM-Generated Code Projects 45

Longtime Slashdot reader AmiMoJo shares a report from Hackaday: Community-led open source project hosting site Codeberg has formally announced that projects whose code is largely or fully machine-generated through LLMs and other 'AI' tools will no longer be welcome. This follows on the heels of a similar ban on cryptocurrency-related projects. The community vote was on two issues, the first being the notion that scraping of project code for the use in LLMs should be forbidden, which was a motion that easily passed. The second motion was on disallowing projects whose code was substantially generated by LLMs like Claude, OpenAI Codex, and similar. This motion passed with 358 in favor versus 144 against.

In the earlier linked blog post the reasoning behind especially this second issue is expanded upon, covering not only "license whitewashing," but also the direct and indirect hardware costs, with the expanding 'AI' datacenter hyperscaling having massively increased hardware costs for Codeberg over the past years, as the costs have been largely externalized. Also covered is the aspect of these LLM-based tools destroying the OSS community, which is something that is backed up by recent studies.
AI

Apple Will 'Watch Everything Burn' When AI Bubble Bursts (macrumors.com) 128

MacRumors interviewed AI critic Ed Zitron, author of the Where's Your Ed At newsletter and host of the Better Offline podcast, about what could happen to Apple if the costly AI infrastructure boom collapses. Zitron argued that Apple is relatively well insulated because it has spent far less on data centers than rivals such as Microsoft, Google, and Amazon. He said the company could use the downturn to make selective acquisitions, though it might simply continue operating largely as before. "I think they will sit on the sidelines and watch everything burn," Zitron said. Here's an excerpt from the report: If the bubble deflates the way you expect (write-downs, too much compute supply, possibly OpenAI cratering), can you walk us through what that would actually look like for Apple? Does anything break for iPhone users, or does Apple mostly watch it happen from the sidelines? Could it even benefit Apple?

I think things would look much the same for Apple. I think they will sit on the sidelines and watch everything burn. I could see them doing some choice acquisitions as things begin to collapse, but I could also see them do nothing.

I think Apple is in a very weird place at the moment. The Vision Pro was a dud, but it was also the most interesting and future-forward thing I've seen anyone put out in a while. If they were smart, they'd tread water and sink as much money into making that as small as humanely possible -- no matter how long it takes -- because the entire AI bubble is a result of everybody running out of hypergrowth ideas, mostly because we're flat out of new interfaces.

I want to be clear that what they want to do with the Vision Pro requires it to basically be weightless and invisible and never need adjustments. When it works, it's genuinely awesome. But that's a load-bearing when. One slight movement means the whole thing goes out of focus. I can't even use mine anymore because it needs an update that requires you to wear the thing the whole time. So much promise, released too early, shoved out the door by a CEO on his way out.

Submission + - Codeberg Bans Cryptocurrency And LLM-Generated Code Projects (hackaday.com)

AmiMoJo writes: Community-led open source project hosting site Codeberg has formally announced that projects whose code is largely or fully machine-generated through LLMs and other ‘AI’ tools will no longer be welcome. This follows on the heels of a similar ban on cryptocurrency-related projects.

The community vote was on two issues, the first being the notion that scraping of project code for the use in LLMs should be forbidden, which was a motion that easily passed. The second motion was on disallowing projects whose code was substantially generated by LLMs like Claude, OpenAI Codex, and similar. This motion passed with 358 in favor versus 144 against.

In the earlier linked blog post the reasoning behind especially this second issue is expanded upon, covering not only ‘license whitewashing’, but also the direct and indirect hardware costs, with the expanding ‘AI’ datacenter hyperscaling having massively increased hardware costs for Codeberg over the past years, as the costs have been largely externalized.

AI

AI-Equipped Garbage Trucks Could Soon Start Spying On People in the US (msn.com) 39

America's garbage trucks can do more than just collect trash, reports Newsweek. They may also help identify code violations using AI. Officials in Cape Coral, Florida, recently considered equipping sanitation trucks with AI-powered cameras that would photograph properties as crews complete their normal collection routes. The system would have been designed to identify potential issues such as overgrown lawns, peeling paint, and illegal dumping, and to flag violations so the city staff can review them later before taking enforcement action... However, in a statement on July 13, Cape Coral officials said it would not be moving forward with the camera technology, citing cost issues and insufficient benefits.

"Claims suggesting that this technology would automatically identify, cite or fine residents are inaccurate," the statement also noted... Cape Coral officials say that a camera system in the future would assist — not replace — human code enforcement officers, and employees will review any AI-generated alerts before violations are issued. "Even if such a system were to be considered in the future, any potential code violations would require review and verification by a Code Compliance Officer before any enforcement action could be taken," the organization wrote.

But Cape Coral, Florida "is not the first city to explore the technology," the article notes. AI imaging systems developed by City Detect have already been deployed in several municipalities. According to the company's published case studies, Stockton, California, used the platform to analyze nearly 40,000 parcels, capturing almost 200,000 images while identifying thousands of potential code issues. Cathedral City, California, has also used the technology to assist code enforcement, while Dallas approved funding for a similar program pending final implementation.
Thanks to Slashdot reader fjo3 for sharing the article.
Crime

Typo-Squatting Scammers Con South Carolina Town Out of $545K (wpde.com) 23

It started with some underground utility work for the South Carolina town of Surfside Beach (population: 4,155). "Public records confirm that a payment of $545,598.30 was issued," according to a local news station — but the CEO of Wildcat Contractors "stated that the account that received the money is a scammer account and that his company has an overdue invoice for underground utility work completed in Surfside Beach."

Yahoo picks up the story: After the payment issue surfaced, Wildcat said Surfside Beach sent over the email thread containing the payment confirmation. The company told WMBF it noticed multiple red flags in the chain. One involved an email address where "Wildcat" appeared with an extra "i." Another involved documents that the company said included a forged signature taken from a prior notarized document. Wildcat said the money was sent to a spoofing account claiming to be the contractor.
More local reports are unraveling what happened: According to the Wall Street Journal, the town's finance director said a town employee called Wildcat's project manager on March 13, the day the payment was sent. The project manager referred the caller to [Wildcat CEO] Bowker. The town then called Bowker's mobile phone and left a voicemail about the ACH transfer. Bowker told the Wall Street Journal she does not recall the voicemail but acknowledged she may have missed it.
Now a new report released by a law firm hired by the town to investigate "shows it did make an attempt to verify before sending $545,000 to a fraudulent bank account," according to local news reports: According to the report, the town sent an email to Wildcat's legitimate email domain on March 13 requesting a callback for verbal verification before sending the payment. Surfside received a response to that email with a phone number, though it remains unclear whether that response came from a real Wildcat employee or from the scammers. The report found that the fake town domain was used in communications between both parties throughout the process, which the law firm overseeing the investigation said was likely created to facilitate the fraud and delay its discovery.
That seems to be the case in a nutshell: Investigators determined the fraudsters used spoofed and typo-squatted email domains, including surfsidesbeach.org, to impersonate town officials and redirect the payment. The fraudulent domain was created March 9 and was used to help conceal the scheme, according to investigators. Town officials said they are continuing to work with the FBI, South Carolina Law Enforcement Division, and their insurance partners to recover the funds.
"The town has also implemented additional security measures to strengthen payment verification procedures and reduce the risk of similar incidents."
Google

Top Online Sites Debate Cutting Off Google's Crawlers (futurism.com) 47

Futurism reports: [Some online publications] are now debating whether to cut Google off entirely, as the Wall Street Journal reports, illustrating an increasingly fraught relationship between the tech giant and the publishers that are creating content its AI models are regurgitating. According to the newspaper, prominent outlets including USA Today, Politico, the Economist, People, and Reuters are all reexamining their relationship with Google. Some are debating whether to continue to work with the tech giant at all... Even Reddit executives are reevaluating the company's $60 million-a-year contract that allows Google to train its AI models on user-submitted content on the platform. They've similarly watched as Google's AI features discourage users from navigating to Reddit...

Beyond pondering whether to cut Google off, other publishers have resorted to suing the company, accusing it of illegally rehashing their intellectual property via AI summaries. It's an extremely undesirable position for publishers. By severing ties with the search giant, they could face even steeper declines in traffic. At the same time, there's seemingly little to gain from having Google's AIs crawl their content — and in the long term, it could guarantee their destruction.

Two interesting data points from the article:
  • "Last month, Cloudflare CEO Matthew Prince noticed that automated bot traffic had overtaken human traffic for the first time in the internet's history."
  • "USA Today has seen its traffic from US users drop by almost half over the last year."

Science

Humans Can Learn To Echolocate In Just 10 Weeks, and It Rewires the Brain (sciencealert.com) 40

alternative_right shares a report from ScienceAlert: A study published in PLOS One in 2021 by researchers from Durham University in the UK showed that with 10 weeks of training, both blind and sighted people could learn to echolocate using verbal clicks. While the technique is already used by a number of people with impaired vision -- sometimes using the taps of a cane instead of clicks made by their mouth -- those findings suggest that many of us can learn the necessary techniques.

Some of the same researchers who made that discovery are part of the team behind a follow-up study published in Cerebral Cortex, looking at how the 10 weeks of training that the 26 participants went through actually changed the physical structure of their brains. Specifically, the team analyzed brain scans of the V1 (the primary visual cortex, processing visuals), and the A1 (the primary auditory cortex, processing sounds). Strikingly, the scans showed that the V1s of both blind and sighted people had developed sensitivity to sound echoes during echolocation training.

Microsoft

Microsoft Responds to LG Monitors Installing McAfee Ads On Windows 120

LG is removing a McAfee pop-up ad from its LG Monitor App Installer after criticism that some LG monitors were silently installing the app through Windows Update and showing ads on every boot. Microsoft says LG agreed to disable the McAfee pop-up, but the broader issue remains: Windows allows certain peripheral companion apps to install automatically without notifying users. Ars Technica reports: Following Gamers Nexus' video, a Microsoft representative stated that the LG Monitor App Installer will no longer show pop-up ads for McAfee. In response to a social media post about the app, Pavan Davuluri, EVP of Windows and devices at Microsoft, said this week: "We've connected with the team at LG and as an immediate next step, they have agreed to disable the McAfee pop-up from their app. We appreciate LG working with us toward a shared goal of a better experience for our mutual customers. We will keep improving here with our ecosystem partners."

As mentioned, some LG monitors appear to have been installing LG Monitor App Installer onto Windows computers for months. Publication Windows Latest noted that the app recently got an update, "and its changelog mentions McAfee as an additional app," which could be what prompted more people to see the ads... and then complain about them. However, the removal of McAfee doesn't address the problem of a peripheral installing ad-pushing software onto people's computers.

Users have been finding LG Monitor App Installer and its ads on their systems without LG ever showing a prompt or asking for permission. LG has some of the most expensive computer monitors available. Paying, in some cases, over $1,000 for a monitor that ends up forcing ads onto Windows is disruptive and a privacy concern. Once the app is installed, "LG technically possesses permission to use 'all system resources,'" as well as to "collect geolocation, device data, online activity, contacts, user credentials, transactions, and more," [editor-in-chief of Gamers Nexus, Steve Burke] said.

Submission + - Leaked Document Shows the Surveillance Tech at ICEâ(TM)s Fingertips (404media.co)

alternative_right writes: A leaked document shows the spread of surveillance and investigative capabilities that Immigration and Customs Enforcement (ICE) officials have access to agency wide, from location data harvested from smartphones, to facial recognition apps that can reveal someoneâ(TM)s identity, to tools that let the agency stay anonymous online and approach people undercover. The document covers everything from monitoring social media to tracking the movements of vehicles.

Slashdot Top Deals

"Don't worry about people stealing your ideas. If your ideas are any good, you'll have to ram them down people's throats." -- Howard Aiken

Working...