Comment Minimally useful (Score 1) 1
Minimally useful, but whatever.
Submission + - Social media platforms refuse to run 'Musk' documentary ads
An anonymous reader writes: Social media platforms refuse to run paid ads for 'Musk' documentary
“Musk, Alex Gibney's four-hour documentary about Elon Musk, hits theaters in two weeks and received rave reviews out of its premiere at the Venice International Film Festival. Yet distributor Bleecker Street can't buy ads on major social media platforms in order to promote it.”
“Musk, Alex Gibney's four-hour documentary about Elon Musk, hits theaters in two weeks and received rave reviews out of its premiere at the Venice International Film Festival. Yet distributor Bleecker Street can't buy ads on major social media platforms in order to promote it.”
Submission + - Put Multiple Values in One Cell with Lists and Arrays in Excel 1
theodp writes: Folks in Finance and other power Excel users were no doubt all atwitter over Microsoft's Thursday announcement of support for in-cell lists and arrays in Excel, including four new functions — FLATTEN, HAS, HASANY, HASALL — to manipulate them. From the home office in Redmond:
"Throughout Excel's 40-year history, you've only been able to put one value per cell. In this announcement, we're excited to share how that's changing with the release of lists, arrays in cells, and nested arrays, initially to Microsoft Excel for Windows and Mac Beta Channels. Many workbooks already try to pack multiple values into one cell. A project might list 'Carlos, Henrietta, Jacob' as three owners, or a Forms survey might return '2:00 PM; 2:30 PM; 3:00 PM' as one response. With lists, you can keep those values in one cell, while also keeping them separate for filtering, calculation and more."
If you haven't been keeping abreast of What's New in Excel, Microsoft has added a number of new features over the past years that enable Excel users to do things one might formerly have turned to programming languages and other computing environments to accomplish, including support for regular expressions, the LET and LAMDA functions, Python in Excel, and, of course, the obligatory AI support.
Which raises an interesting question: Is an Excel formula worth a thousand lines of AI-generated Python code? (especially if the latter is run in an overengineered infrastructure, such as an AI-generated complex CI/CD pipeline combined with cloud pipeline execution!)
"Throughout Excel's 40-year history, you've only been able to put one value per cell. In this announcement, we're excited to share how that's changing with the release of lists, arrays in cells, and nested arrays, initially to Microsoft Excel for Windows and Mac Beta Channels. Many workbooks already try to pack multiple values into one cell. A project might list 'Carlos, Henrietta, Jacob' as three owners, or a Forms survey might return '2:00 PM; 2:30 PM; 3:00 PM' as one response. With lists, you can keep those values in one cell, while also keeping them separate for filtering, calculation and more."
If you haven't been keeping abreast of What's New in Excel, Microsoft has added a number of new features over the past years that enable Excel users to do things one might formerly have turned to programming languages and other computing environments to accomplish, including support for regular expressions, the LET and LAMDA functions, Python in Excel, and, of course, the obligatory AI support.
Which raises an interesting question: Is an Excel formula worth a thousand lines of AI-generated Python code? (especially if the latter is run in an overengineered infrastructure, such as an AI-generated complex CI/CD pipeline combined with cloud pipeline execution!)
Submission + - What Happens When AI Goes Beyond the Script? (linkedin.com)
gethotelreviews writes: Intelligence is valuable partly because it can discover solutions humans did not anticipate. The difficult question is how we distinguish useful surprise from AI misalignment. A machine finding an unexpected scientific solution could be a breakthrough. The same capacity applied to the wrong objective could become a problem.
How much independence should we give artificial intelligence?
How much independence should we give artificial intelligence?
Submission + - Mobile App Design Is Becoming an AI Systems Problem (azkiweb.com)
dewoweb writes: Mobile App Design Is Becoming an AI Systems Problem
Mobile app design is increasingly being shaped by platform capabilities that sit below the user interface. In September 2026, Apple opened App Store submissions for iOS 27 and highlighted Apple Intelligence, the Foundation Models framework, and new platform technologies for developers. Google is taking a similar direction on Android, where on-device AI and new APIs are being positioned as part of how applications interact with system-level intelligence.
The practical change is that teams can no longer treat an app as a collection of screens and API calls. On-device inference introduces constraints around memory, latency, battery consumption, privacy, model updates, and fallback behavior when network access is unavailable. Android's current AI tooling explicitly supports local processing for use cases where privacy and offline operation matter, while Apple's latest developer guidance emphasizes running AI models on-device.
That makes mobile app design an engineering concern as much as a UI concern. Architecture decisions now have to account for device capabilities, background execution, synchronization, permissions, local storage, observability, and graceful degradation. The interface is still important, but it is increasingly the visible layer of a much larger runtime system.
The interesting question for developers is not simply how to add AI to an app, but how these platform changes should alter the way mobile applications are architected and tested.
Sources
Apple Developer â" App Store submissions now open for the latest OS releases:
https://developer.apple.com/ne...
Android Developers â" Top AI on Android updates from Google I/O 2026:
https://developer.android.com/...
Android Developers â" Gemini Nano and on-device AI:
https://developer.android.com/...
Mobile app design is increasingly being shaped by platform capabilities that sit below the user interface. In September 2026, Apple opened App Store submissions for iOS 27 and highlighted Apple Intelligence, the Foundation Models framework, and new platform technologies for developers. Google is taking a similar direction on Android, where on-device AI and new APIs are being positioned as part of how applications interact with system-level intelligence.
The practical change is that teams can no longer treat an app as a collection of screens and API calls. On-device inference introduces constraints around memory, latency, battery consumption, privacy, model updates, and fallback behavior when network access is unavailable. Android's current AI tooling explicitly supports local processing for use cases where privacy and offline operation matter, while Apple's latest developer guidance emphasizes running AI models on-device.
That makes mobile app design an engineering concern as much as a UI concern. Architecture decisions now have to account for device capabilities, background execution, synchronization, permissions, local storage, observability, and graceful degradation. The interface is still important, but it is increasingly the visible layer of a much larger runtime system.
The interesting question for developers is not simply how to add AI to an app, but how these platform changes should alter the way mobile applications are architected and tested.
Sources
Apple Developer â" App Store submissions now open for the latest OS releases:
https://developer.apple.com/ne...
Android Developers â" Top AI on Android updates from Google I/O 2026:
https://developer.android.com/...
Android Developers â" Gemini Nano and on-device AI:
https://developer.android.com/...
Submission + - Apple Copland D11E4 Emulator in Your Browser
Balial writes: In the 1990's, before OS X, Apple tried to replace their Mac OS operating system that didn't support virtual memory with a new OS, Copland, with virtual memory and many modern features. The project failed, but you can now boot and run the OS in your browser:
pagetable.com
Bonus: The install image for Copland is only 35MB.
pagetable.com
Bonus: The install image for Copland is only 35MB.
Submission + - Complain about a watchlist? Go on a watchlist! (metro.co.uk)
Shakes Fist writes: "Social media posts criticising government policy are being monitored and investigated by officials, Metro can reveal.
Negative X and Reddit posts from unsuspecting Brits attacking the UKâ(TM)s anti-terror programme Prevent were added to a database of critical online comments.
Metro has obtained a list of nearly 80 critical posts found and logged by the Standards and Compliance Unit (StaCU), which oversees Prevent, between March 2024 and February 2025.
One campaign group whose tweet was recorded in the database said the revelations raised âserious questions about freedom of expression and the right to dissent and protestâ(TM) in the UK."
âoeIt is deeply concerning to see the Prevent duty being used to enable the monitoring of people and organisations simply because they are critical of the programme. That raises serious questions about freedom of expression and the right to dissent and protest.â
We denounce the âoetroubling lack of transparency about what happens to the information gathered through this social media monitoring [by the Standards and Compliance Unit]: how long it is retained, who it is shared with, and ultimately what the government is using it for.â
Weâ(TM)re clear that âoePrevent has expanded far beyond its stated aim of identifying people considered âoevulnerable to radicalisationâ, and has increasingly been used to justify extensive surveillance.â
Criticising the programme for its many faults shouldnâ(TM)t lead to getting put on a database.
ðY' Sarah Lasoye for ORG.
Negative X and Reddit posts from unsuspecting Brits attacking the UKâ(TM)s anti-terror programme Prevent were added to a database of critical online comments.
Metro has obtained a list of nearly 80 critical posts found and logged by the Standards and Compliance Unit (StaCU), which oversees Prevent, between March 2024 and February 2025.
One campaign group whose tweet was recorded in the database said the revelations raised âserious questions about freedom of expression and the right to dissent and protestâ(TM) in the UK."
âoeIt is deeply concerning to see the Prevent duty being used to enable the monitoring of people and organisations simply because they are critical of the programme. That raises serious questions about freedom of expression and the right to dissent and protest.â
We denounce the âoetroubling lack of transparency about what happens to the information gathered through this social media monitoring [by the Standards and Compliance Unit]: how long it is retained, who it is shared with, and ultimately what the government is using it for.â
Weâ(TM)re clear that âoePrevent has expanded far beyond its stated aim of identifying people considered âoevulnerable to radicalisationâ, and has increasingly been used to justify extensive surveillance.â
Criticising the programme for its many faults shouldnâ(TM)t lead to getting put on a database.
ðY' Sarah Lasoye for ORG.
Submission + - US appeals court upholds Pentagon's supply chain risk label on Anthropic (cnbc.com)
An anonymous reader writes:
- A federal appeals court in Washington, D.C., upheld the Pentagon’s blacklisting of Anthropic.
- The DoW labeled Anthropic a supply chain risk in March, and Anthropic sued the Trump administration in an effort to undo that action.
- The designation prevents the U.S. military from using Anthropic’s models and blocks defense contractors from using them in their work with the agency.
- “We remain confident in our position and are considering all options, including further review,” an Anthropic spokesperson said in a statement.
Submission + - Mozilla Appears to Sweep Their Telemetary-Droppings Privacy-Bugs Aside 4
BrendaEM writes: Myself and others have noticed that Firefox is leaving behind archived and other telemetry data--even when data reporting is turned off. The apparent fact that Mozilla, seems to have marked the bug resolved--when it is not, and offer a nebulous fix date, would suggest that they aren't taking the issue seriously.
I have at least 1,279 telemetry droppings files, in one archive folder alone, it bears to mind that SSD drive prices have gone up substantially, noting that even a small write will affect: one of the 1,000 to 10,000 MLC cycles, one of the 3,000 TLC Cycles, or one of the paltry 1,000 QLC cycles (Ref: Wikipedia: https://en.wikipedia.org/wiki/...).
The existence of telemetry alone is unsettling for a browser that claims " Your privacy always comes first."
https://bugzilla.mozilla.org/s...
https://bugzilla.mozilla.org/s...
I have at least 1,279 telemetry droppings files, in one archive folder alone, it bears to mind that SSD drive prices have gone up substantially, noting that even a small write will affect: one of the 1,000 to 10,000 MLC cycles, one of the 3,000 TLC Cycles, or one of the paltry 1,000 QLC cycles (Ref: Wikipedia: https://en.wikipedia.org/wiki/...).
The existence of telemetry alone is unsettling for a browser that claims " Your privacy always comes first."
https://bugzilla.mozilla.org/s...
https://bugzilla.mozilla.org/s...
Comment Only 5? (Score 1) 103
Only 5?
Seems like a department that size would almost certainly have more than 5 instances of abuse.
Submission + - Cloudflare flaw lets one container read another customer's disk data
An anonymous reader writes: Cloudflare Fixes Flaw That Let One Container Read Another Customer's Leftover Disk Data
“A flaw in Cloudflare Containers let a paying customer read data that other customers' containers had left behind on the same server, Cloudflare and the researchers who found it said on Thursday.”
“A flaw in Cloudflare Containers let a paying customer read data that other customers' containers had left behind on the same server, Cloudflare and the researchers who found it said on Thursday.”
Submission + - Radioactive Material from Shut Nuclear Plant Accidentally Leaks at Pacific Coast (americanbuildout.com)
ElectricVs writes: A shuttered Southern California nuclear plant that now stores nuclear waste accidentally sent about 5,000 gallons of wastewater containing radioactive material toward the Pacific Ocean.
Submission + - Researchers Found a New Way to Break RSA that Doesn't Require Factoring the Key (cybersecuritynews.com)
An anonymous reader writes: Security researchers have demonstrated a faster way to undermine certain RSA deployments without factoring the public modulus, challenging the assumption that RSA’s practical strength always tracks the cost of integer factorization.
The attack converts temporary access to a raw, unpadded RSA signing or decryption service into a lasting capability to forge signatures or decrypt chosen ciphertexts offline.
Laura Shea, Miro Haller, Adam Suhl, Nadia Heninger and Emmanuel Thomé implemented the technique against a 1,024-bit RSA key. Their computation consumed 1,380 CPU core-years over five months and required 232 oracle queries. By comparison, factoring a 1,024-bit RSA modulus is estimated to require roughly 500,000 to one million core-years.
The method, called eNFS by the researchers, belongs to the number field sieve family. Instead of the general number field sieve used to factor RSA moduli, it approaches the faster “special” number field sieve complexity by replacing part of the usual mathematical work with answers from the signing oracle. Crucially, it never recovers the prime factors or RSA private key.
The attack unfolds in stages. An approximately 1,200-core-year precomputation depends only on the public modulus and exponent. The attacker then submits selected values to the raw RSA oracle. Once those responses are collected, access can disappear: forging any chosen signature or decrypting a target takes about another 180 core-years and can be repeated offline.
The underlying algorithm is not new. Antoine Joux, David Naccache and Emmanuel Thomé introduced it in 2007, but the new work provides its first implementation and large-scale 1,024-bit demonstration. The code builds heavily on CADO-NFS while adding the engineering needed for polynomial selection, sieving, linear algebra, root extraction, and descent at this scale.
This is not a universal RSA break. The attacker needs temporary access to a raw exponentiation oracle, a capability that conventional RSA signatures using PKCS#1 v1.5 or RSA-PSS padding normally do not expose. More plausible targets include HSM interfaces permitting raw PKCS#11 RSA operations and blind-signature protocols such as Privacy Pass, where blinded requests can provide the required oracle behavior.
The researchers estimate 2^{90} work and 2^{43} oracle queries against 2,048-bit RSA in this model, versus the commonly assigned 112-bit factoring strength. They project roughly 2^{119} work for 4,096-bit RSA, leaving it short of a modern 128-bit security target. Those costs remain beyond attackers, but could matter to well-resourced adversaries and protocols with long-lived public keys.
Organizations do not need to abandon correctly padded RSA immediately. Operators should disable unnecessary raw RSA mechanisms, audit HSM policies, limit oracle exposure, and rotate vulnerable blind-signature keys more frequently.
Protocol designers can investigate zero-knowledge proofs of well-formed requests, while longer-term migration should favor modern signature schemes and post-quantum cryptography rather than treating larger RSA keys as a permanent solution.
The attack converts temporary access to a raw, unpadded RSA signing or decryption service into a lasting capability to forge signatures or decrypt chosen ciphertexts offline.
Laura Shea, Miro Haller, Adam Suhl, Nadia Heninger and Emmanuel Thomé implemented the technique against a 1,024-bit RSA key. Their computation consumed 1,380 CPU core-years over five months and required 232 oracle queries. By comparison, factoring a 1,024-bit RSA modulus is estimated to require roughly 500,000 to one million core-years.
The method, called eNFS by the researchers, belongs to the number field sieve family. Instead of the general number field sieve used to factor RSA moduli, it approaches the faster “special” number field sieve complexity by replacing part of the usual mathematical work with answers from the signing oracle. Crucially, it never recovers the prime factors or RSA private key.
The attack unfolds in stages. An approximately 1,200-core-year precomputation depends only on the public modulus and exponent. The attacker then submits selected values to the raw RSA oracle. Once those responses are collected, access can disappear: forging any chosen signature or decrypting a target takes about another 180 core-years and can be repeated offline.
The underlying algorithm is not new. Antoine Joux, David Naccache and Emmanuel Thomé introduced it in 2007, but the new work provides its first implementation and large-scale 1,024-bit demonstration. The code builds heavily on CADO-NFS while adding the engineering needed for polynomial selection, sieving, linear algebra, root extraction, and descent at this scale.
This is not a universal RSA break. The attacker needs temporary access to a raw exponentiation oracle, a capability that conventional RSA signatures using PKCS#1 v1.5 or RSA-PSS padding normally do not expose. More plausible targets include HSM interfaces permitting raw PKCS#11 RSA operations and blind-signature protocols such as Privacy Pass, where blinded requests can provide the required oracle behavior.
The researchers estimate 2^{90} work and 2^{43} oracle queries against 2,048-bit RSA in this model, versus the commonly assigned 112-bit factoring strength. They project roughly 2^{119} work for 4,096-bit RSA, leaving it short of a modern 128-bit security target. Those costs remain beyond attackers, but could matter to well-resourced adversaries and protocols with long-lived public keys.
Organizations do not need to abandon correctly padded RSA immediately. Operators should disable unnecessary raw RSA mechanisms, audit HSM policies, limit oracle exposure, and rotate vulnerable blind-signature keys more frequently.
Protocol designers can investigate zero-knowledge proofs of well-formed requests, while longer-term migration should favor modern signature schemes and post-quantum cryptography rather than treating larger RSA keys as a permanent solution.
Submission + - Ruby on Rails Creator Abandons Ruby During Keynote Speech (youtube.com) 1
Grady Martin writes: David Heinemeier Hansson, creator of Ruby on Rails, announced during a keynote speech at Rails World 2026 on Wednesday that his current project, HEY, has begun migrating from Ruby to a vibe-coded rewrite in Rust. His speech also touched on human productivity and the importance of optimization, noting that agentic developers can “do whatever the fuck [they] want” to achieve the latter. He closed the hour with a Malcom in the Middle meme and commanded the audience: “Don't be a loser”.
Submission + - Law firm paid £200m to support Post Office
An anonymous reader writes: Law firm paid £200m to support Post Office, while police investigating scandal are forced to beg
“There are concerns that a lack of funds for the police investigation could prevent the full Post Office scandal truth getting out”
“There are concerns that a lack of funds for the police investigation could prevent the full Post Office scandal truth getting out”
