The Courts

News Orgs Say AI Firm Stole Articles, Spit Out 'Hallucinations' (arstechnica.com) 20

An anonymous reader quotes a report from Ars Technica: Conde Nast and several other media companies sued the AI startup Cohere today, alleging that it engaged in "systematic copyright and trademark infringement" by using news articles to train its large language model. "Without permission or compensation, Cohere uses scraped copies of our articles, through training, real-time use, and in outputs, to power its artificial intelligence ('AI') service, which in turn competes with Publisher offerings and the emerging market for AI licensing," said the lawsuit (PDF) filed in US District Court for the Southern District of New York. "Not content with just stealing our works, Cohere also blatantly manufactures fake pieces and attributes them to us, misleading the public and tarnishing our brands."

Conde Nast, which owns Ars Technica and other publications such as Wired and The New Yorker, was joined in the lawsuit by The Atlantic, Forbes, The Guardian, Insider, the Los Angeles Times, McClatchy, Newsday, The Plain Dealer, Politico, The Republican, the Toronto Star, and Vox Media. The complaint seeks statutory damages of up to $150,000 under the Copyright Act for each infringed work, or an amount based on actual damages and Cohere's profits. It also seeks "actual damages, Cohere's profits, and statutory damages up to the maximum provided by law" for infringement of trademarks and "false designations of origin."

In Exhibit A (PDF), the plaintiffs identified over 4,000 articles in what they called an "illustrative and non-exhaustive list of works that Cohere has infringed." Additional exhibits provide responses to queries (PDF) and "hallucinations" (PDF) that the publishers say infringe upon their copyrights and trademarks. The lawsuit said Cohere "passes off its own hallucinated articles as articles from Publishers."
Cohere said in a statement to Ars: "Cohere strongly stands by its practices for responsibly training its enterprise AI. We have long prioritized controls that mitigate the risk of IP infringement and respect the rights of holders. We would have welcomed a conversation about their specific concerns -- and the opportunity to explain our enterprise-focused approach -- rather than learning about them in a filing. We believe this lawsuit is misguided and frivolous, and expect this matter to be resolved in our favor."

Further reading: Thomson Reuters Wins First Major AI Copyright Case In the US
United States

UK Demand For a Back Door To Apple Data Threatens Americans, Lawmakers Say (msn.com) 94

Members of key congressional oversight committees wrote to the United States' new top intelligence official Thursday to warn that a British order demanding government access to Apple users' encrypted data imperils Americans. From a report: Ron Wyden, a Democrat on the Senate Intelligence Committee, and Andy Biggs, a Republican on the House Judiciary committee, wrote to just-sworn-in National Intelligence Director Tulsi Gabbard and asked her to demand the United Kingdom retract its order.

If the top U.S. ally does not back off, they said, Gabbard should consider limiting the deep intelligence sharing and cooperation on cybersecurity between the countries. The Post first reported the existence of the confidential British order last week. It directs Apple to create a back door into its Advanced Data Protection offering, which allows users to fully encrypt data from iPhones and Mac computers when putting it in Apple's iCloud storage. Apple cannot retrieve such content even when served with a court order, frustrating authorities looking for evidence of terrorism, child abuse and other serious crimes.

The order was issued under the Investigatory Powers Act, which allows the British Home Office to require technical cooperation from companies and forbids those companies from disclosing anything about the demands. It would apply globally, though the U.K. authorities would have to ask Apple for information stored by specific customers.

AI

Thomson Reuters Wins First Major AI Copyright Case In the US 54

An anonymous reader quotes a report from Wired: Thomson Reuters has won the first major AI copyright case in the United States. In 2020, the media and technology conglomerate filed an unprecedentedAI copyright lawsuit against the legal AI startup Ross Intelligence. In the complaint, Thomson Reuters claimed the AI firm reproduced materials from its legal research firm Westlaw. Today, a judge ruled (PDF) in Thomson Reuters' favor, finding that the company's copyright was indeed infringed by Ross Intelligence's actions. "None of Ross's possible defenses holds water. I reject them all," wrote US District Court of Delaware judge Stephanos Bibas, in a summary judgement. [...] Notably, Judge Bibas ruled in Thomson Reuters' favor on the question of fair use.

The fair use doctrine is a key component of how AI companies are seeking to defend themselves against claims that they used copyrighted materials illegally. The idea underpinning fair use is that sometimes it's legally permissible to use copyrighted works without permission -- for example, to create parody works, or in noncommercial research or news production. When determining whether fair use applies, courts use a four-factor test, looking at the reason behind the work, the nature of the work (whether it's poetry, nonfiction, private letters, et cetera), the amount of copyrighted work used, and how the use impacts the market value of the original. Thomson Reuters prevailed on two of the four factors, but Bibas described the fourth as the most important, and ruled that Ross "meant to compete with Westlaw by developing a market substitute."
"If this decision is followed elsewhere, it's really bad for the generative AI companies," says James Grimmelmann, Cornell University professor of digital and internet law.

Chris Mammen, a partner at Womble Bond Dickinson who focuses on intellectual property law, adds: "It puts a finger on the scale towards holding that fair use doesn't apply."
Encryption

UK Orders Apple To Let It Spy on Users' Encrypted Accounts (msn.com) 96

The UK government has ordered Apple to create a backdoor allowing access to encrypted cloud backups of users worldwide, Washington Post reported Friday, citing multiple sources familiar with the matter. The unprecedented demand, issued last month through a technical capability notice under the UK Investigatory Powers Act, requires Apple to provide blanket access to fully encrypted material rather than assistance with specific accounts.

Apple is likely to discontinue its encrypted storage service in the UK rather than compromise user security globally, the report said. The company would still face pressure to provide backdoor access for users in other countries, including the United States. The order was issued under Britain's 2016 Investigatory Powers Act, which makes it illegal to disclose such government demands, according to the report. While Apple can appeal to a secret technical panel and judge, the law requires compliance during any appeal process. The company told Parliament in March that the UK government should not have authority to decide whether global users can access end-to-end encryption.
Science

The Long Quest for Artificial Blood (newyorker.com) 25

Scientists are making significant advances in developing artificial blood substitutes, with two promising approaches emerging in 2025, the New Yorker reports. At the University of Maryland School of Medicine's Center for Blood Oxygen Transport and Hemostasis, researchers are testing ErythroMer, a synthetic nanoparticle that mimics red blood cells' oxygen-carrying capabilities. Simultaneously, the UK's National Health Service is conducting the first human trials of lab-grown blood cells.

These developments address critical blood shortages - of the 38% of Americans eligible to donate, less than 3% do so regularly. Traditional donated blood also has significant limitations: platelets last only 5 days, red blood cells 42 days, and all require careful refrigeration and blood-type matching. DARPA awarded $46 million in early 2023 to develop ErythroMer, seeing potential for battlefield medicine where traditional blood storage isn't feasible.

The synthetic blood can be stored as a powder and reconstituted when needed. There are still a lot of challenges, the report adds. The lab-grown blood currently costs about $75,000 per syringe compared to around $200 for a pint of donated blood, and production is limited to small quantities.
Open Source

RISC-V Mainboard For the Framework Laptop 13 Is Now Available (liliputing.com) 16

The DeepComputing RISC-V Mainboard that Framework announced last year for its 13-inch laptops is now available for $199. Liliputing reports: If you already have a Framework Laptop 13 with an Intel or AMD motherboard, the new board is a drop-in replacement. But if you don't have a Framework Laptop you can also use the mainboard as a standalone computer: Framework sells a $39 Cooler Master case that effectively turns its mainboards into mini desktop computers. The RISC-V Mainboard comes from a partnership between Framework and DeepComputing, the Chinese company behind the DC-ROMA laptops, which were some of the first notebook computers to ship with RISC-V processors.

The board features a StarFive JH7110 processor, which is a 1.5 GHz quad-core chip featuring SiFive U74 RISC-V CPU cores and Imagination BXE-4-32 graphics, 8GB of onboard RAM, and a a 64GB SD card for storage (there's also support for an optional eMMC module, but you'll need to bring your own). Since the board is designed to fit in existing laptop frames, it's the same size and shape as AMD or Intel models and has four USB ports in the same locations. But these ports are a little less versatile than the ones you might find on other Framework Laptop 13 Mainboards [...]. There's also a 3.5mm audio jack.
You can check out the new board via the Framework Marketplace.

Further reading: Late last year, Framework CEO Nirav Patel delivered one of the best live demos we've ever seen at a tech conference -- modifying a Framework Laptop from x86 to RISC-V live on stage.
Power

California Built the World's Largest Solar Power Tower Plant. Now It May Close (latimes.com) 88

"Sometimes, government makes a bad bet..." writes the Los Angeles Times. Opening in 2014, the Ivanpah concentrated solar plant "quickly became known as an expensive, bird-killing eyesore." Assuming that state officials sign off — which they most likely will, because the deal will lead to lower bills for PG&E customers — two of the three towers will shut down come 2026. Ivanpah's owners haven't paid off the project's $1.6-billion federal loan, and it's unclear whether they'll be able to do so. Houston-based NRG Energy, which operates Ivanpah and is a co-owner with Kelvin Energy and Google, said that federal officials took part in the negotiations to close PG&E's towers and that the closure agreement will allow the federal government "to maximize the recovery of its loans." It's possible Ivanpah's third and final tower will close, too. An Edison spokesperson told me the utility is in "ongoing discussions" with the project's owners and the federal government over ending the utility's contract.

It might be tempting to conclude government should stop placing bets and just let the market decide. But if it weren't for taxpayers dollars, large-scale solar farms, which in 2023 produced 17% of California's power, might never have matured into low-cost, reliable electricity sources capable of displacing planet-warming fossil fuels. More than a decade ago, federal loans helped finance some of the nation's first big solar-panel farms.

Not every government investment will be a winner. Renewable energy critics still raise the specter of Solyndra, a solar panel manufacturer that filed for bankruptcy in 2011 after receiving a $535-million federal loan. But on the whole, clean power investments have worked out. The U.S. Department of Energy reported that as of Dec. 31, it had disbursed $40.5 billion in loans. Of that amount, $15.2 billion had already been repaid. The federal government was on the hook for $1.03 billion in estimated losses but had reaped $5.6 billion in interest.

The article notes recent U.S. energy-related loans to a lithium mine in Nevada (close to $1 billion) and $15 billion to expand hydropower, upgrade power lines, and add batteries. Some of the loans won't get paid back "If federal officials are doing their jobs well," the article adds. "That's the risk inherent to betting on early-stage technologies." About the Ivanpah solar towers, they write "Maybe they never should have been built. They're too expensive, they don't work right, they kill too many birds... It's good that their time is coming to an end. But we should take inspiration from them, too: Don't get complacent. Keep trying new things."

PG&E says their objective at the time was partly to "support new technologies," with one senior director of commercial procurement noting "It's not clear in the early stages what technologies will work best and be most affordable for customers. Solar photovoltaic panels and battery energy storage were once unaffordable at large scale." But today they've calculated that ending their power agreements with Ivanpah would cost customers "substantially less." And once deactivated, Ivanpah's units "will be decommissioned, providing an opportunity for the site to potentially be repurposed for renewable PV energy production," NRG said in a statement.

The Las Vegas Review-Journal notes that instead the 3,500-acre, 386-megawatt concentrated thermal power plant used a much older technology, "a system of mirrors to reflect sunlight and generate thermal energy, which is then concentrated to power a steam engine." Throughout the day, 350,000 computer-controlled mirrors track the sunlight and reflect it onto boilers atop 459-foot towers to generate AC. Nowadays, photovoltaic solar has surpassed concentrated solar power and become the dominant choice for renewable, clean energy, being more cost effective and flexible... So many birds have been victims of the plant's concentrated sun rays that workers referred to them as "streamers," for the smoke plume that comes from birds that ignite in midair. When federal wildlife investigators visited the plant around 10 years ago, they reported an average of one "streamer" every two minutes.
"Meanwhile, environmentalists continue to blame the Mojave Desert plant for killing thousands of birds and tortoises," reports the Associated Press. And a Sierra Club campaign organizer also says several rare plant species were destroyed during the plant's construction. "While the Sierra Club strongly supports innovative clean energy solutions and recognizes the urgent need to transition away from fossil fuels, Ivanpah demonstrated that not all renewable technologies are created equal."
Google

Apple Battles For Role in Google Antitrust Trial, Warning of Serious Risks (courtlistener.com) 23

Apple has filed an emergency motion [PDF] for a stay in the Google antitrust trial, warning that it faces "clear and substantial irreparable harm" if barred from participating in the case's remedies phase. The motion, filed on January 30, 2025, comes after Judge Amit Mehta denied Apple's request for limited intervention earlier in the week.

Apple -- which makes more than $20 billion a year from Google to use the Android-maker's search engine on Safari -- argues that the U.S. Department of Justice's (DOJ) proposed remedy -- which includes a prohibition on "any contract between Google and Apple in which there would be anything exchanged of value" --would prevent it from negotiating agreements that benefit millions of users. Without the ability to fully participate, Apple contends it will be left as a "mere spectator" while the government pursues restrictions that directly impact its business interests.

The company asserts that intervention is necessary to develop evidence, participate in discovery, and cross-examine witnesses regarding its market role and incentives. Apple also seeks access to trial records while its appeal is pending, including witness lists, depositions, and discovery materials, to ensure it can respond effectively if granted party status.
Microsoft

Microsoft Slaps $400 Premium on Intel-powered Surface Lineup (theregister.com) 60

Microsoft is charging business customers a $400 premium for Surface devices equipped with Intel's latest Core Ultra processors compared to models using Qualcomm's Arm-based chips, the company has disclosed. The Intel-powered Surface Pro tablet and Surface Laptop, starting at $1,499, come with a second-generation Core Ultra 5 processor featuring eight cores, 16GB of memory and 256GB storage.

Comparable Qualcomm-based models begin at $1,099. The new Intel devices will be available to business customers from February 18, though versions with cellular connectivity will launch later. Consumer Surface devices will only be offered with Qualcomm processors. Microsoft also unveiled a USB 4 Dock supporting dual 4K displays and the Surface Hub 3, a conference room computer available in 50-inch or 85-inch touchscreen versions.
Data Storage

Archivists Work To Identify and Save the Thousands of Datasets Disappearing From Data.gov (404media.co) 70

An anonymous reader quotes a report from 404 Media: Datasets aggregated on data.gov, the largest repository of U.S. government open data on the internet, are being deleted, according to the website's own information. Since Donald Trump was inaugurated as president, more than 2,000 datasets have disappeared from the database. As people in the Data Hoarding and archiving communities have pointed out, on January 21, there were 307,854 datasets on data.gov. As of Thursday, there are 305,564 datasets. Many of the deletions happened immediately after Trump was inaugurated, according to snapshots of the website saved on the Internet Archive's Wayback Machine. Harvard University researcher Jack Cushman has been taking snapshots of Data.gov's datasets both before and after the inauguration, and has worked to create a full archive of the data.

"Some of [the entries link to] actual data," Cushman told 404 Media. "And some of them link to a landing page [where the data is hosted]. And the question is -- when things are disappearing, is it the data it points to that is gone? Or is it just the index to it that's gone?" For example, "National Coral Reef Monitoring Program: Water Temperature Data from Subsurface Temperature Recorders (STRs) deployed at coral reef sites in the Hawaiian Archipelago from 2005 to 2019," a NOAA dataset, can no longer be found on data.gov but can be found on one of NOAA's websites by Googling the title. "Stetson Flower Garden Banks Benthic_Covage Monitoring 1993-2018 -- OBIS Event," another NOAA dataset, can no longer be found on data.gov and also appears to have been deleted from the internet. "Three Dimensional Thermal Model of Newberry Volcano, Oregon," a Department of Energy resource, is no longer available via the Department of Energy but can be found backed up on third-party websites. [...]

Data.gov serves as an aggregator of datasets and research across the entire government, meaning it isn't a single database. This makes it slightly harder to archive than any individual database, according to Mark Phillips, a University of Northern Texas researcher who works on the End of Term Web Archive, a project that archives as much as possible from government websites before a new administration takes over. "Some of this falls into the 'We don't know what we don't know,'" Phillips told 404 Media. "It is very challenging to know exactly what, where, how often it changes, and what is new, gone, or going to move. Saving content from an aggregator like data.gov is a bit more challenging for the End of Term work because often the data is only identified and registered as a metadata record with data.gov but the actual data could live on another website, a state .gov, a university website, cloud provider like Amazon or Microsoft or any other location. This makes the crawling even more difficult."

Phillips said that, for this round of archiving (which the team does every administration change), the project has been crawling government websites since January 2024, and that they have been doing "large-scale crawls with help from our partners at the Internet Archive, Common Crawl, and the University of North Texas. We've worked to collect 100s of terabytes of web content, which includes datasets from domains like data.gov." [...] It is absolutely true that the Trump administration is deleting government data and research and is making it harder to access. But determining what is gone, where it went, whether it's been preserved somewhere, and why it was taken down is a process that is time intensive and going to take a while. "One thing that is clear to me about datasets coming down from data.gov is that when we rely on one place for collecting, hosting, and making available these datasets, we will always have an issue with data disappearing," Phillips said. "Historically the federal government would distribute information to libraries across the country to provide greater access and also a safeguard against loss. That isn't done in the same way for this government data."

Government

OPM Sued Over Privacy Concerns With New Government-Wide Email System (thehill.com) 44

An anonymous reader quotes a report from the Hill: Two federal employees are suing the Office of Personnel Management (OPM) to block the agency from creating a new email distribution system -- an action that comes as the information will reportedly be directed to a former staffer to Elon Musk now at the agency. The suit (PDF), launched by two anonymous federal employees, ties together two events that have alarmed members of the federal workforce and prompted privacy concerns. That includes an unusual email from OPM last Thursday reviewed by The Hill said the agency was testing "a new capability" to reach all federal employees -- a departure from staffers typically being contacted directly by their agency's human resources department.

Also cited in the suit is an anonymous Reddit post Monday from someone purporting to be an OPM employee, saying a new server was installed at their office after a career employee refused to set up a direct line of communication to all federal employees. According to the post, instructions have been given to share responses to the email to OPM chief of staff Amanda Scales, a former employee at Musk's AI company. Federal agencies have separately been directed to send Scales a list of all employees still on their one-year probationary status, and therefore easier to remove from government. The suit says the actions violate the E-Government Act of 2002, which requires a Privacy Impact Assessment before pushing ahead with creation of databases that store personally identifiable information.

Kel McClanahan, executive director of National Security Counselors, a non-profit law firm, noted that OPM has been hacked before and has a duty to protect employees' information. "Because they did that without any indications to the public of how this thing was being managed -- they can't do that for security reasons. They can't do that because they have not given anybody any reason to believe that this server is secure.that this server is storing this information in the proper format that would prevent it from being hacked," he said. McClanahan noted that the emails appear to be an effort to create a master list of federal government employees, as "System of Records Notices" are typically managed by each department. "I think part of the reason -- and this is just my own speculation -- that they're doing this is to try and create that database. And they're trying to sort of create it by smushing together all these other databases and telling everyone who receives the email to respond," he said.

Power

California's Battery Plant Fire Sparks Call for Investigation, New Regulations (yahoo.com) 60

Earlier this month a major fire erupted at a California battery plant. But several factors contributed to its rapid spread, the fire district's chief told the Los Angeles Times: A fire suppression system that is part of every battery rack at the plant failed and led to a chain reaction of batteries catching on fire, he said at a news conference last week. Then, a broken camera system in the plant and superheated gases made it challenging for firefighters to intervene. Once the fire began spreading, firefighters were not able to use water, because doing so can trigger a violent chemical reaction in lithium-ion batteries, potentially causing more to ignite or explode.
The county's Board of Supervisors has now requested that the plant remain offline until an investigation is completed. A county supervisor told the newspaper "What we're doing with this technology is way ahead of government regulations and ahead of the industry's ability to control it."

And plans for a new battery storage site nearby are now being questioned, with an online petition to halt all new battery-storage facilities in the county drawing over 3,200 signatures. The fire earlier this month was the fourth at Moss Landing since 2019, and the third at buildings owned by Texas-based Vistra Energy... Already, the fire has prompted calls for additional safety regulations around battery storage, and more local control over where storage sites are located...

California Assemblymember Dawn Addis (D-Morro Bay) has introduced Assembly Bill 303 — the Battery Energy Safety & Accountability Act — which would require local engagement in the permitting process for battery or energy storage facilities, and establish a buffer to keep such sites a set distance away from sensitive areas like schools, hospitals and natural habitats... Gov. Gavin Newsom, a fierce advocate of clean energy, agrees an investigation is needed to determine the fire's cause and supports taking steps to make Moss Landing and similar facilities safer, his spokesperson Daniel Villaseñor said in a statement. Addis and two other state legislators sent a letter to the California Public Utilities Commission Thursday requesting an investigation.

"The Moss Landing facility has represented a pivotal piece of our state's energy future, however this disastrous fire has undermined the public's trust in utility scale lithium-ion battery energy storage systems," states the letter. "If we are to ensure California moves its climate and energy goals forward, we must demonstrate a steadfast commitment to safety..."

initial testing from the U.S. Environmental Protection Agency ruled that the levels of toxic gases released by the batteries, including hydrogen fluoride, did not pose a threat to public health during the fire. [The EPA says their monitoring "showed concentrations of particulate matter to be consistent with the air quality index throughout the Monterey Bay and San Francisco Bay regions, with no measurements exceeding the moderate air quality level... In addition to EPA's monitoring, Vistra Energy brought in a third-party environmental consultant with air monitoring expertise, right after the fire started"]

Still, many residents remain on edge about potential long-term impacts on the nearby communities of Watsonville, Castroville, Salinas and the ecologically sensitive Elkhorn Slough estuary.

Social Networks

Pixelfed Creator Crowdfunds More Capacity, Plus Open Source Alternatives to TikTok and WhatsApp (techcrunch.com) 11

An anonymous reader shared this report from TechCrunch: The developer behind Pixelfed, Loops, and Sup, open source alternatives to Instagram, TikTok, and WhatsApp, respectively, is now raising funds on Kickstarter to fuel the apps' further development. The trio is part of the growing open social web, also known as the fediverse, powered by the same ActivityPub protocol used by X alternative Mastodon... [and] challenge Meta's social media empire... "Help us put control back into the hands of the people!" [Daniel Supernault, the Canadian-based developer behind the federated apps] said in a post on Mastodon where he announced the Kickstarter's Thursday launch.

As of the time of writing, the campaign has raised $58,383 so far. While the goal on the Kickstarter site has been surpassed, Supernault said that he hopes to raise $1 million or more so he can hire a small team... A fourth project, PubKit, is also a part of these efforts, offering a toolset to support developers building in the fediverse... The stretch goal of the Kickstarter campaign is to register the Pixelfed Foundation as a not-for-profit and grow its team beyond volunteers. This could help address the issue with Supernault being a single point of failure for the project... Mastodon CEO Eugen Rochko made a similar decision earlier this month to transition to a nonprofit structure. If successful, the campaign would also fund a blogging app as an alternative to Tumblr or LiveJournal at some point in the future.

The funds will also help the apps manage the influx of new users. On Pixelfed.social, the main Pixelfed instance, (like Mastodon, anyone can run a Pixelfed server), there are now more than 200,000 users, thanks in part to the mobile app's launch, according to the campaign details shared with TechCrunch. The server is also now the second-largest in the fediverse, behind only Mastodon.social, according to network statistics from FediDB. New funds will help expand the storage, CDNs, and compute power needed for the growing user base and accelerate development. In addition, they'll help Supernault dedicate more of his time to the apps and the fediverse as a whole while also expanding the moderation, security, privacy, and safety programs that social apps need.

As a part of its efforts, Supernault also wants to introduce E2E encryption to the fediverse.

The Kickstarter campaign promises "authentic sharing reimagined," calling the apps "Beautiful sharing platforms that puts you first. No ads, no algorithms, no tracking — just pure photography and authentic connections... More Privacy, More Safety. More Variety. " Pixelfed/Loops/Sup/Pubkit isn't a ambitious dream or vaporware — they're here today — and we need your support to continue our mission and shoot for the moon to be the best social communication platform in the world.... We're following the both the Digital Platform Charter of Rights & Ethical Web Principles of the W3C for all of our projects as guidelines to building platforms that help people and provide a positive social benefit.
The campaign's page says they're building "a future where social networking respects your privacy, values your freedom, and prioritizes your safety."
Sony

Sony To End Blu-ray Media Production After 18 Years (tomshardware.com) 40

Sony will cease production of recordable Blu-ray discs at its last factory in February, ending an 18-year manufacturing run amid declining demand for physical media. The Japanese electronics giant will also halt production of MiniDiscs and MiniDV cassettes. The company had already stopped making consumer recordable Blu-ray and optical disks in mid-2024, maintaining production only for business clients.
Intel

Intel Pitches Modular PC Designs To Make Repairs Less Painful (theregister.com) 62

Intel is advocating for modular PC designs to improve repairability, reduce e-waste, and align with the right-to-repair movement. A trio of executives makes their case for such designs in a recent blog post. The Register reports: Intel's approach to the problem is to draft three proposals targeting different market segments, saying that a one-size-fits-all approach would not be able to address the nuanced demands of these varied segments. Those three segments comprise "Premium Modular PC" (actually a laptop design); "Entry/Mainstream Modular PC" (another laptop); and "Desktop Modular PC."

The first envisages a three-board system, comprising a core motherboard plus universal left and right I/O boards, the latter engineered to be common across fan-less Thin & Light designs with a 10W power envelope, and premium fanned designs for up to 20W or 30W. The Entry/Mainstream Modular PC is similar, with a core motherboard and left and right I/O boards, although in this segment, Intel says these can be redesigned to allow multiple SKUs of the design. The circuit boards are also cost-optimized here to cater to the mainstream segment, it says.

The Desktop Modular PC design appears from Intel's diagram to use a midplane that has the Platform Controller Hub (PCH) silicon, with other modules connecting to this. These include CPU, memory, and GPU modules, removable using slide rails, along with hot-swappable storage, all designed to fit inside a 5 liter desktop chassis. Intel also said it is introducing subsystem-level replaceable modules. In practice, this means something like a Type-C connector on a flexible printed circuit (FPC) or an M.2 circuit board. The idea is that the module can easily be swapped out if the port or connector is damaged.

Power

Fire Erupts At Huge Battery Plant In California (gpb.org) 113

Longtime Slashdot reader sfcat shares a report from the Associated Press: Hundreds of people were ordered to evacuate and part of Highway 1 in Northern California was closed when a major fire erupted Thursday afternoon at one of the world's largest battery storage plants. As the fire sent up towering flames and black smoke and showed no sign of easing by Thursday night, about 1,500 people were instructed to leave Moss Landing and the Elkhorn Slough area, The Mercury News reported.

The Moss Landing Power Plant, located about 77 miles (about 124 kilometers) south of San Francisco, is owned by Texas-company Vistra Energy and contains tens of thousands of lithium batteries. The batteries are important for storing electricity from such renewable energy sources as solar energy, but if they go up in flames the blazes can be extremely difficult to put out. "There's no way to sugar coat it. This is a disaster, is what it is," Monterey County Supervisor Glenn Church told KSBW-TV. But he said he did not expect the fire to spread beyond the concrete building it was enclosed in.
According to reports, the fire originated in the 300-megawatt Phase I section of the 750-megawatt facility, located on the site of a retired PG&E natural gas plant.

It's unclear what caused the fire, but officials said a full investigation will begin after it's out. Thankfully, everyone at the site was evacuated safely. Videos and images of the fire can be found here.
Earth

Sweden Starts Building 100,000 Year Storage Site For Spent Nuclear Fuel 85

Sweden has begun constructing a long-term storage facility for spent nuclear fuel in Forsmark, making it only the second country after Finland to build such a site. It is not expected to be completed until the 2080s, but once finished, it will securely house radioactive waste for up to 100,000 years. Reuters reports: The Forsmark final repository, about 150 kilometers north of Stockholm on Sweden's east coast, will consist of 60 km of tunnels buried 500 meters down in 1.9 billion year old bedrock. It will be the final home for 12,000 tons of spent nuclear fuel, encased in 5 meter long, corrosion-resistent copper capsules that will be packed in clay and buried. The facility will take its first waste in the late 2030s but will not be completed until around 2080 when the tunnels will be backfilled and closed, Sweden's Nuclear Fuel and Waste Management Company (SKB) said. [...]

The Forsmark repository will cost around 12 billion crowns($1.08 billion) and be paid for by the nuclear industry, SKB said. It will have room to hold all the waste produced by Sweden's nuclear power plants. However, it will not hold fuel from future reactors. Sweden plans to build 10 more reactors by 2045.
Encryption

Ransomware Crew Abuses AWS Native Encryption, Sets Data-Destruct Timer for 7 Days (theregister.com) 18

A new ransomware group called Codefinger targets AWS S3 buckets by exploiting compromised or publicly exposed AWS keys to encrypt victims' data using AWS's own SSE-C encryption, rendering it inaccessible without the attacker-generated AES-256 keys. While other security researchers have documented techniques for encrypting S3 buckets, "this is the first instance we know of leveraging AWS's native secure encryption infrastructure via SSE-C in the wild," Tim West, VP of services with the Halcyon RISE Team, told The Register. "Historically AWS Identity IAM keys are leaked and used for data theft but if this approach gains widespread adoption, it could represent a significant systemic risk to organizations relying on AWS S3 for the storage of critical data," he warned. From the report: ... in addition to encrypting the data, Codefinder marks the compromised files for deletion within seven days using the S3 Object Lifecycle Management API â" the criminals themselves do not threaten to leak or sell the data, we're told. "This is unique in that most ransomware operators and affiliate attackers do not engage in straight up data destruction as part of a double extortion scheme or to otherwise put pressure on the victim to pay the ransom demand," West said. "Data destruction represents an additional risk to targeted organizations."

Codefinger also leaves a ransom note in each affected directory that includes the attacker's Bitcoin address and a client ID associated with the encrypted data. "The note warns that changes to account permissions or files will end negotiations," the Halcyon researchers said in a report about S3 bucket attacks shared with The Register. While West declined to name or provide any additional details about the two Codefinger victims -- including if they paid the ransom demands -- he suggests that AWS customers restrict the use of SSE-C.

"This can be achieved by leveraging the Condition element in IAM policies to prevent unauthorized applications of SSE-C on S3 buckets, ensuring that only approved data and users can utilize this feature," he explained. Plus, it's important to monitor and regularly audit AWS keys, as these make very attractive targets for all types of criminals looking to break into companies' cloud environments and steal data. "Permissions should be reviewed frequently to confirm they align with the principle of least privilege, while unused keys should be disabled, and active ones rotated regularly to minimize exposure," West said.
An AWS spokesperson said it notifies affected customers of exposed keys and "quickly takes any necessary actions, such as applying quarantine policies to minimize risks for customers without disrupting their IT environment."

They also directed users to this post about what to do upon noticing unauthorized activity.
EU

Germany Hits 62.7% Renewables in 2024 Electricity Mix, with Solar Contributing 14% (pv-magazine.com) 175

Due to a "rapid expansion of solar capacity," Germany generated 72.2 TWh of solar power in 2024, reports PV magazine, "accounting for 14% of its total electricity output, according to Germany's Fraunhofer Institute for Solar Energy Systems.

"Wind power remained Germany's largest source of electricity in 2024, generating 136.4 TWh..." Hydropower also saw a slight increase, contributing 21.7 TWh in 2024. Total renewable energy generation reached 275.2 TWh, up 4.4% from 2023. Biomass plants, with an installed capacity of 9.1 GW, generated 36 TWh of electricity.

Generation from coal-fired power plants declined sharply in Germany in 2024, with lignite production dropping 8.4% and hard coal falling 27.6%, according to Energy Charts. Lignite-fired plants produced 71.1 TWh, roughly matching the total output from photovoltaic systems, while hard coal plants generated 24.2 TWh... Germany's CO2 emissions continued their downward trend, falling to 152 million tons in 2024, a 58% reduction from 1990 levels and more than half of 2014 levels...

Battery storage capacity saw substantial growth, with installed capacity rising from 8.6 GW to 12.1 GW and associated energy storage increasing from 12.7 GWh to 17.7 GWh. Germany's battery storage capacity now surpasses pumped storage by approximately 10 GW, underscoring the shift toward renewable energy integration.

Thanks to long-time Slashdot reader AmiMoJo for sharing the article.
AI

Foreign Cybercriminals Bypassed Microsoft's AI Guardrails, Lawsuit Alleges (arstechnica.com) 3

"Microsoft's Digital Crimes Unit is taking legal action to ensure the safety and integrity of our AI services," according to a Friday blog post by the unit's assistant general counsel. Microsoft blames "a foreign-based threat-actor group" for "tools specifically designed to bypass the safety guardrails of generative AI services, including Microsoft's, to create offensive and harmful content.

Microsoft "is accusing three individuals of running a 'hacking-as-a-service' scheme," reports Ars Technica, "that was designed to allow the creation of harmful and illicit content using the company's platform for AI-generated content" after bypassing Microsoft's AI guardrails: They then compromised the legitimate accounts of paying customers. They combined those two things to create a fee-based platform people could use. Microsoft is also suing seven individuals it says were customers of the service. All 10 defendants were named John Doe because Microsoft doesn't know their identity.... The three people who ran the service allegedly compromised the accounts of legitimate Microsoft customers and sold access to the accounts through a now-shuttered site... The service, which ran from last July to September when Microsoft took action to shut it down, included "detailed instructions on how to use these custom tools to generate harmful and illicit content."

The service contained a proxy server that relayed traffic between its customers and the servers providing Microsoft's AI services, the suit alleged. Among other things, the proxy service used undocumented Microsoft network application programming interfaces (APIs) to communicate with the company's Azure computers. The resulting requests were designed to mimic legitimate Azure OpenAPI Service API requests and used compromised API keys to authenticate them. Microsoft didn't say how the legitimate customer accounts were compromised but said hackers have been known to create tools to search code repositories for API keys developers inadvertently included in the apps they create. Microsoft and others have long counseled developers to remove credentials and other sensitive data from code they publish, but the practice is regularly ignored. The company also raised the possibility that the credentials were stolen by people who gained unauthorized access to the networks where they were stored...

The lawsuit alleges the defendants' service violated the Computer Fraud and Abuse Act, the Digital Millennium Copyright Act, the Lanham Act, and the Racketeer Influenced and Corrupt Organizations Act and constitutes wire fraud, access device fraud, common law trespass, and tortious interference.

Slashdot Top Deals