Forgot your password?
typodupeerror

Submission + - Will AI expose the rickety infrastructure of the internet? (techcrunch.com)

sziring writes: A startling announcement went out earlier this week: Due to recently discovered vulnerabilities in the open source programming language PHP, website owners had to immediately patch their sites â" or if they couldnâ(TM)t update right away, they should take the sites down to be safe.
On this weekâ(TM)s episode of TechCrunchâ(TM)s Equity podcast, Kirsten Korosec, Sean Oâ(TM)Kane, and I discussed the significance of the PHP-ocalypse and whether weâ(TM)ll see more incidents like this in the future.
Sean called this âoea real reckoning momentâ that highlights how âoewhen you get down to the bone level of the internet,â everything seems to be âoeheld together by glue and dreams.â And with widespread access to large language models and AI agents, itâ(TM)s only going to become easier to find these vulnerabilities. (That said, these specific vulnerabilities were found by human researchers, not AI models.)
Kirsten, meanwhile, wondered if weâ(TM)re about to see the âoenext level of prepper doom [â¦] because you could see how banks could get exploited, and [with] data and privacy concerns, it just feels a lot bigger than we can fix right now.â
Keep reading for a preview of our conversation, edited for length and clarity.
Sean Oâ(TM)Kane: The internet is breaking in lots of ways this week, it seems.
I think the best way to think about this, if people are coming into this kind of cold: How many times over the last 10 years have we had these moments where something breaks or something nearly breaks, where one person maintaining one tiny repro repository as a hobby or whatever happens to catch that something nefarious is going on and and saves us from the infrastructure of the internet completely crumbling?
Now multiply that by a billion, when people have access to not only extremely advanced software in the form of these LLMs that everybody uses, but also the ability to task them to go out and do it themselves, with creating AI agents that are single-minded at accomplishing those things.
Weâ(TM)re seeing a balance of two things happening this week. One is a bunch of the labs and companies like Google and OpenAI actually had people go out and find a bunch of vulnerabilities, including the one with PHP. And then we also have a bunch of people seeming to rush to take advantage of those vulnerabilities to try and hack into websites. So we have governments taking down websites, we have really popular websites that are going down briefly to be able to fix this vulnerability.
This is a real reckoning moment, where weâ(TM)re going to find out the downside risk of building so much of the internet on open source technology like PHP. When you really get down to the bone level of the internet, it is held together with glue and dreams.

Comment Re:How is the Ukraine war going? (Score 1) 64

I don't know if you're a russian bot or some deluded idiot, but it amuses me to do a breakdown of your post.

NATO turned what was originally intended to be a mostly peaceful show of force like the temporary invasion of Georgia into a war of attrition.

First of all the "peaceful show of force" "temporary" invasion of Georgia involved a few hundred dead in the first two days, and another 5000+ civilians killed in the ethnic cleansing after that, all for a land-grab to seize control of territory covering half of Georgia's coastline that Putin wanted.

Secondly, the "peaceful show of force" "temporary" invasion of Ukraine involved hundreds dead, ballistic and cruise missile attacks on all of Ukraine's largest cities, and Putin publicly admitting the goal of overthrowing the Ukrainian government... and that's just within the first 36 hours. Within two and a half months Russian officials began admitting the intent to permanently annex parts of Ukraine, proceeding with a constitutional amendment a few months later claiming to annex vast territories that Russian had not remotely taken control of, and which Russia is not remotely capable of capturing. Donetsk alone has a population of over a million, two million if you include the metro-area. Russia spent months and many thousand of lives to capture, and later lose, villages in the range of low tens of thousands.

Remember WWI when the lines were pretty much static for years and then suddenly it was all over?

Yes, I remember. As I recall it wasn't exactly "sudden". As I recall... Russian casualties were around five million killed, wounded, or captured, the Russian economy was collapsing, Russia was running out of food, and Russian literally lost it's own capital to civilian rebellion. A few months later the Russian government collapsed and surrendered vast territories including Finland, Estonia, Latvia, Lithuania, parts of Poland and Ukraine to Germany and its allies (known as the Central Powers). Right about that point the U.S. joined the war reinvigorating the Allied Powers. Germany&friends knew they couldn't win a protracted war. They attempted a quick win, and, in short, they failed. The Allied powers steadily beat them down, with the allies eventually breaking through the lines and progressively liberating territory. With the Allies steadily advancing and the war obviously lost, German forces began rebelling and Germany surrendered.

That's what's happening here. Russia has most of Donbas plus a buffer zone in some other regions that directly border Russia. Ukraine is throwing men at the front lines for Russia to kill but is running out. Territory held is largely irrelevant compared to the number of men killed and weapons destroyed.

So much to unpack there, but it's amusing how you cite "territory held is largely irrelevant" given that the tide has turned and Ukrainians are now the ones breaking through lines and liberating territory from Russian occupation. It's not much yet, but all the map trackers show the reversal. Russia is now officially loosing more territory than they gain. Russia WAS slowly gaining small bits of land, largely through sending meat waves of untrained ill equipped soldiers at Ukrainian lines until the Ukrainians ran out of ammo and had to fall back. However now 7 out of 10 Russians killed are killed by drones. The "no man's land" between the two sides is now many kilometers wide. Any Russian trying to advance gets hit by a drone. Russia has also losing on average 1 air defense system every day, and rapidly depleting. Russian supply lines are getting pummeled by drones. Russian refineries are getting pummeled by drones, with progressively worsening fuel shortages for both the military and for the increasingly rebellious population. Cheap advanced Ukrainian drones are taking out expensive crappy Russian drones, including Russian's new jet-drones. Practically every country on earth is asking Ukraine for their military drone tech, the Russians can't remotely match it. Russian's economy is also fucked, but that topic pretty needs a separate book to cover.

Interesting side notes on weapons destroyed. Russia is destroying it's aircraft almost as fast as Ukraine is, between incompetence and maintenance failures and friendly fire shooting down their own aircraft. Also the nation that is the biggest donor of tanks to Ukraine is... Russia. Ukraine captured countless Russian tanks intact because the Russian military is so abysmal incompetent and corrupt. And as I mentioned, Russian air defense units are depleting. The war is now approaching 5 years, longer than the entirety of WW1. Ukraine is a small fraction of Russia's size, and Russian is literally losing and headed towards another soviet-union-style collapse. The biggest shock to the world of this entire war is just how worthless Putin has made Russian military, through systemic corruption and systemic incompetence.

Polls show the Ukrainian population isn't interested in surrendering. They are defending their homes. It's simple, the war will end when all the soldiers go home. When Russian soldiers go back to their homes in Russia, and when Ukrainian soldiers go back to their homes in the currently occupied parts of Ukraine. Although that's not likely to happen until Putin either expires or is overthrown. Not only is he fanatical enough to drive his country to collapse in the attempt, he knows if he did end the war in failure he'd get killed or overthrown for it.

Anyway, pointless reply to a bot or a useful idiot. But maybe some random passer-by will find some bits interesting. I don't know about the rest of the world, but mainstream US news rarely mentions the Ukraine war anymore, and certainly not in any detail.

-

Submission + - The Pentagon is quietly building an elite new tech sabotage agency (yahoo.com) 1

schwit1 writes: The Pentagon has spent months quietly building an elite new tech agency to help covertly disrupt and sabotage foreign technology programs considered threats to American military superiority.

Neither Defense Secretary Pete Hegseth nor any other senior Pentagon official has publicly mentioned the agency since it was established this April — a conspicuous omission for a department that has reveled in announcing other major changes aimed at modernizing the military or adopting hard-nosed new policies against foreign adversaries.

Information on the Technology Support Office, or TSO as it is called internally, is nearly impossible to find on Pentagon websites, and the agency is mentioned by name only in several previously unreported Defense Department historical records and memoranda.

Special Operations Command and U.S. Cyber Command both objected to creating the new agency, fearing it would cut into their budgets, according to the two former intelligence officials and one former senior U.S. national security official.

But by creating an agency dedicated to expanding that work, the Defense Department is signaling its intent to ramp up a range of aggressive covert activities abroad — potentially including cyberattacks, supply chain disruptions and disinformation operations.

Many of the people who spoke argued that the aggressive new initiative is needed to help the Pentagon counter foreign adversaries they say are harnessing artificial intelligence and advanced commercial technologies, such as drones, in creative ways that could erode America's military advantage.

Submission + - Microsoft says October updates didn't actually fix VPN issues (bleepingcomputer.com)

joshuark writes: Microsoft says it mistakenly flagged a bug causing Always On VPN connection issues as fixed in the October 2026 Windows 11 cumulative updates.
Always On VPN replaced the legacy DirectAccess technology and supports domain-joined, non-domain-joined, and Microsoft Entra ID–joined devices running Windows 10, Windows 11, and Windows Server.

It runs in the background and establishes secure tunnels back to the user's corporate network whenever their device connects to the internet.

Microsoft first acknowledged the issue in a service alert sent to IT administrators in late September, saying it was triggered on systems running Windows 11 24H2 and later after installing the September 2026 security updates when the initial Always On VPN connection failed (e.g., when using automatic protocol selection with IKEv2 and SSTP).

"When automatic protocol selection or protocol fallback was configured, affected VPN connections could remain stuck in a Connecting state or fail to connect after an initial connection attempt failed," it said. "In some cases, subsequent connection attempts could display the error, 'The specified port is already in use.'"

After releasing the October 2026 Patch Tuesday Windows 11 cumulative updates, Microsoft marked the bug as resolved, but in a Tuesday update it said the issues weren't actually addressed and that a fix would ship later.

"This disclosure was mistakenly updated to Resolved status on October 13, 2026. We have returned its status to Mitigated," it said in a service alert sent to IT admins. "A resolution for this issue is planned to be included in an update to be released in the coming weeks. We apologize for any inconvenience or confusion."

While Microsoft continues working on a permanent solution, it shared a temporary fix that requires affected customers to choose one of two VPN tunneling protocols to work around the issue.

Comment Re: VRBO (Score 2) 132

I use AirBNBs as locations to produce adult content. I'm not joking.

An AirBNB is perfect for my needs; it's a literal godsend. I want a clean home-like setting that is relatively generic and free from personal items, that also doesn't look like a hotel and can be unique for the amount of content being produced there. I believe this is a relatively common practice.

That being said, I bring my own bedding, towels, pillows, cleaning products and tools and I take my trash with me when I leave and dispose of it elsewhere. I am conscientious that I'm staying at another individual's property.

In one case, I found out the property owner was still home, in his basement, while I was working with performers upstairs. He wanted to know what we were doing and didn't actually have a problem with it, but talking with him informed what I should do going forward. Even if I wasn't responsible for messy human activities, I'd still choose to leave as little work as I can for service staff.

I realize that many AirBNBs are owned by property management services and in some cases even hotel groups, but what I'm paying for is exactly the thing I want: clean and not-a-hotel.

Comment This has been around a while (Score 4, Interesting) 139

The DOD/DOW have been working on this for a while. They discovered, early on, that the device had a propensity to cause permanent nerve damage.

It's very unlikely the US have fixed that, as they'd largely sidelined the work as a failure. However, at 36%, Trump needs something he can call a win, no matter what the long-term consequences.

Comment Re:Not just the browser (Score 1) 87

You know you don't have to install Adobe Reader, right?

FWIW, I had an interaction with the person responsible for PDFGear online somewhere and I've been using it since I found out about it. It's a free (gratis) PDF viewer and editor. Maybe the full, paid Acrobat product can do more things, but if so I haven't noticed.

Submission + - Old Blood Cells Have Been Transformed Into Brain Stem Cells That Get Younger (sciencealert.com)

alternative_right writes: Now, scientists have transformed old blood cells into young brain stem cells, which continued to grow younger as they grew older.

The researchers, from the University Hospital of Bonn and the University of Bonn, in Germany, described their methods in the journal Aging Cell.

Cellular transformations can be done in two main ways. The first, more circuitous route turns a specific cell back into a pluripotent stem cell, or an embryonic "blank slate," and then into a different cell type.

Comment Re:Use Rufus (Score 4, Informative) 87

The thing you are looking for is the Group Policy Editor. There are Group Policies that can disable the prompts to use Microsoft accounts and the ability to use OneDrive or Windows AI features, the hook Bing has in Windows Search (i.e. no more searching in the start menu and having it list web sites before the file or application you wanted) and all the "consumer experience" features in non-Enterprise Windows. There are a few GPO settings that get ignored unless you're on Windows Enterprise or Education. Most of them related to Microsoft Datamining.

It is also possible to transition a Microsoft account back to a local one without losing your Profile. This is done in Settings > Accounts > Your Info in Windows 11.

gpedit.msc is normally only available to non-Home Windows SKUs, but it is unlockable with a tiny bit of Powershell:

Get-ChildItem @(
        "C:\Windows\servicing\Packages\Microsoft-Windows-GroupPolicy-ClientTools-Package*.mum",
        "C:\Windows\servicing\Packages\Microsoft-Windows-GroupPolicy-ClientExtensions-Package*.mum"
) | ForEach-Object { dism.exe /online /norestart /add-package:"$_" }

Open an Administror-elevated Powershell or Terminal session, paste that in and even your $200 Acer vomit-grade notebook can work the way you want it again.

The reason we need GPOs for this stuff is that Microsoft's software updates will occasionally re-set registry changes. If the changes are made with GPOs, the settings get reapplied and overwrite changes no matter what state Windows is in. This is particularly annoying for stuff like OneDrive, CoPilot and Edge preferences. You either have to regularly re-run scripts to alter the registry to the state you like it and hope nothing makes a structural change to where those settings live, or you set a GPO.

Comment Re:Widgets (Score 1) 91

I really do agree.
I maintain system images as part of my job, but it always made sense for me to extend that to individual devices since I am asked to help with them anyway. For me, this has been just adding a tweak here or there that grew over time. GPOs for Windows Home didn't become standard in my image management until Microsoft started inflicting Onedrive on everyone. Now I view it mandatory.

For what it's worth, I have a similarly long list of things I do when I configure a Linux system or MacOS. I definitely have to do the most arguing with MacOS since I hate some of the OS default software and Apple has a long history of breaking things that should be scriptable.

Comment Re:Widgets (Score 5, Informative) 91

You can exclude them from installing through an autounattend.xml (see Schneegans.de for help building one) and prevent them from display via a GPO. You really want to use a group policy object because otherwise a Windows Update might put them back; it'll override a plain old registry change or user preference any time it wants but GPO changes persist.

It is trivial to restore Local Group Policy editing on Windows Home SKUs with a little powershell.

Get-ChildItem @(
        "C:\Windows\servicing\Packages\Microsoft-Windows-GroupPolicy-ClientTools-Package*.mum",
        "C:\Windows\servicing\Packages\Microsoft-Windows-GroupPolicy-ClientExtensions-Package*.mum"
) | ForEach-Object { dism.exe /online /norestart /add-package:"$_" }

Some GPO settings are ignored outside the context of Windows Education or Enterprise SKUs, but most of those are related to user behavior data mining. I can verify that if you're just trying to supress OneDrive, Bing Search and Microsoft Account sign-ins, those are all maintained just fine even on Windows Home.

Comment Holy Shit! Really???? (Score 1) 89

This just in, a report published by a group of people who would be materially harmed by losing business to the EU building its own technical capacity declared it would be costly and unfeasible to ever abandon them.

Up next after the commercial break, we report on how water is wet and grass grows.

Slashdot Top Deals

"Why can't we ever attempt to solve a problem in this country without having a 'War' on it?" -- Rich Thomson, talk.politics.misc

Working...