Crime

193 Cybercrims Arrested, Accused of Plotting 'Violence-As-a-Service' 19

Europol's GRIMM taskforce has arrested nearly 200 people accused of running or participating in "violence-as-a-service" schemes where cybercrime groups recruit youth online for real-world attacks. "These individuals are groomed or coerced into committing a range of violent crimes, from acts of intimidation and torture to murder," the European police said on Monday. The Register reports: GRIMM began in April, and includes investigators from Belgium, Denmark, Finland, France, Germany, Iceland, the Netherlands, Norway, Spain, Sweden, the UK, plus Europol experts and online service providers. During its first six months, police involved in this operation arrested 63 people directly involved in carrying out or planning violent crimes, 40 "enablers" accused of facilitating violence-for-hire services, 84 recruiters, and six "instigators," five of whom the cops labeled "high-value targets." [...]

Many of the criminals involved in recruiting and carrying out these violence-for-hire services are also members of The Com. This is a loosely knit gang, primarily English speakers, involved in several interconnected networks of hackers, SIM swappers, and extortionists. Their reach has spread across the Atlantic, and over the summer, the FBI warned that a subset of this cybercrime group, called In Real Life (IRL) Com, poses a growing threat to youth. The FBI's security bulletin specifically called out IRL Com subgroups that offer swat-for-hire services, in which hoaxers falsely report shootings at someone's residence or call in bomb threats to trigger massive armed police responses at the victims' homes.
Power

Can This Simple Invention Convert Waste Heat Into Electricity? (ajc.com) 48

Nuclear engineer Lonnie Johnson worked on NASA's Galileo mission, has more than 140 patents, and invented the Super Soaker water gun. But now he's working on "a potential key to unlock a huge power source that's rarely utilized today," reports the Atlanta Journal-Constitution. [Alternate URL here.]

Waste heat... The Johnson Thermo-Electrochemical Converter, or JTEC, has few moving parts, no combustion and no exhaust. All the work to generate electricity is done by hydrogen, the most abundant element in the universe. Inside the device, pressurized hydrogen gas is separated by a thin, filmlike membrane, with low pressure gas on one side and high pressure gas on the other. The difference in pressure in this "stack" is what drives the hydrogen to compress and expand, creating electricity as it circulates. And unlike a fuel cell, it does not need to be refueled with more hydrogen. All that's needed to keep the process going and electricity flowing is a heat source.

As it turns out, there are enormous amounts of energy vented or otherwise lost from industrial facilities like power plants, factories, breweries and more. Between 20% and 50% of all energy used for industrial processes is dumped into the atmosphere and lost as waste heat, according to the U.S. Department of Energy. The JTEC works with high temperatures, but the device's ability to generate electricity efficiently from low-grade heat sources is what company executives are most excited about. Inside JTEC's headquarters, engineers show off a demonstration unit that can power lights and a sound system with water that's roughly 200 degrees Fahrenheit — below the boiling point and barely warm enough to brew a cup of tea, said Julian Bell, JTEC's vice president of engineering. Comas Haynes, a research engineer at the Georgia Tech Research Institute specializing in thermal and hydrogen system designs, agrees the company could "hit a sweet spot" if it can capitalize on lower temperature heat...

For Johnson, the potential application he's most excited about lies beneath our feet. Geothermal energy exists naturally in rocks and water beneath the Earth's surface at various depths. Tapping into that resource through abandoned oil and gas wells — a well-known access point for underground heat — offers another opportunity. "You don't need batteries and you can draw power when you need it from just about anywhere," Johnson said. Right now, the company is building its first commercial JTEC unit, which is set to be deployed early next year. Mike McQuary, JTEC's CEO and the former president of the pioneering internet service provider MindSpring, said he couldn't reveal the customer, but said it's a "major Southeast utility company." "Crossing that bridge where you have commercial customers that believe in it and will pay for it is important," McQuary said...

On top of some initial seed money, the company brought in $30 million in a Series A funding in 2022 — money that allowed the company to move to its Lee + White headquarters and hire more than 30 engineers. McQuary said it expects to begin another round of fundraising soon.

"Johnson, meanwhile, hasn't stopped working on new inventions," the article points out. "He continues to refine the design for his solid-state battery..."
Microsoft

Linus Torvalds Defends Windows' Blue Screen of Death (itsfoss.com) 82

Linus Torvalds recently defended Windows' infamous Blue Screen of Death during a video with Linus Sebastian of Linus Tech Tips, where the two built a PC together. It's FOSS reports: In that video, Sebastian discussed Torvalds' fondness for ECC (Error Correction Code). I am using their last name because Linus will be confused with Linus. This is where Torvalds says this: "I am convinced that all the jokes about how unstable Windows is and blue screening, I guess it's not a blue screen anymore, a big percentage of those were not actually software bugs. A big percentage of those are hardware being not reliable."

Torvalds further mentioned that gamers who overclock get extra unreliability. Essentially, Torvalds believes that having ECC on the machine makes them more reliable, makes you trust your machine. Without ECC, the memory will go bad, sooner or later. He thinks that more than software bugs, often it is hardware behind Microsoft's blue screen of death.
You can watch the video on YouTube (the BSOD comments occur at ~9:37).
Encryption

Cryptologist DJB Criticizes Push to Finalize Non-Hybrid Security for Post-Quantum Cryptography (cr.yp.to) 21

In October cryptologist/CS professor Daniel J. Bernstein alleged that America's National Security Agency (and its UK counterpart GCHQ) were attempting to influence NIST to adopt weaker post-quantum cryptography standards without a "hybrid" approach that would've also included pre-quantum ECC.

Bernstein is of the opinion that "Given how many post-quantum proposals have been broken and the continuing flood of side-channel attacks, any competent engineering evaluation will conclude that the best way to deploy post-quantum [PQ] encryption for TLS, and for the Internet more broadly, is as double encryption: post-quantum cryptography on top of ECC." But he says he's seen it playing out differently: By 2013, NSA had a quarter-billion-dollar-a-year budget to "covertly influence and/or overtly leverage" systems to "make the systems in question exploitable"; in particular, to "influence policies, standards and specification for commercial public key technologies". NSA is quietly using stronger cryptography for the data it cares about, but meanwhile is spending money to promote a market for weakened cryptography, the same way that it successfully created decades of security failures by building up the market for, e.g., 40-bit RC4 and 512-bit RSA and Dual EC. I looked concretely at what was happening in IETF's TLS working group, compared to the consensus requirements for standards-development organizations. I reviewed how a call for "adoption" of an NSA-driven specification produced a variety of objections that weren't handled properly. ("Adoption" is a preliminary step before IETF standardization....) On 5 November 2025, the chairs issued "last call" for objections to publication of the document. The deadline for input is "2025-11-26", this coming Wednesday.
Bernstein also shares concerns about how the Internet Engineering Task Force is handling the discussion, and argues that the document is even "out of scope" for the IETF TLS working group This document doesn't serve any of the official goals in the TLS working group charter. Most importantly, this document is directly contrary to the "improve security" goal, so it would violate the charter even if it contributed to another goal... Half of the PQ proposals submitted to NIST in 2017 have been broken already... often with attacks having sufficiently low cost to demonstrate on readily available computer equipment. Further PQ software has been broken by implementation issues such as side-channel attacks.
He's also concerned about how that discussion is being handled: On 17 October 2025, they posted a "Notice of Moderation for Postings by D. J. Bernstein" saying that they would "moderate the postings of D. J. Bernstein for 30 days due to disruptive behavior effective immediately" and specifically that my postings "will be held for moderation and after confirmation by the TLS Chairs of being on topic and not disruptive, will be released to the list"...

I didn't send anything to the IETF TLS mailing list for 30 days after that. Yesterday [November 22nd] I finished writing up my new objection and sent that in. And, gee, after more than 24 hours it still hasn't appeared... Presumably the chairs "forgot" to flip the censorship button off after 30 days.

Thanks to alanw (Slashdot reader #1,822) for spotting the blog posts.
HP

HP and Dell Disable HEVC Support Built Into Their Laptops' CPUs (arstechnica.com) 105

An anonymous reader quotes a report from Ars Technica: Some Dell and HP laptop owners have been befuddled by their machines' inability to play HEVC/H.265 content in web browsers, despite their machines' processors having integrated decoding support. Laptops with sixth-generation Intel Core and later processors have built-in hardware support for HEVC decoding and encoding. AMD has made laptop chips supporting the codec since 2015. However, both Dell and HP have disabled this feature on some of their popular business notebooks.

HP discloses this in the data sheets for its affected laptops, which include the HP ProBook 460 G11 [PDF], ProBook 465 G11 [PDF], and EliteBook 665 G11 [PDF]. "Hardware acceleration for CODEC H.265/HEVC (High Efficiency Video Coding) is disabled on this platform," the note reads. Despite this notice, it can still be jarring to see a modern laptop's web browser eternally load videos that play easily in media players.
HP and Dell didn't explain why the companies disabled HEVC hardware decoding on their laptops' processors.

A statement from an HP spokesperson said: "In 2024, HP disabled the HEVC (H.265) codec hardware on select devices, including the 600 Series G11, 400 Series G11, and 200 Series G9 products. Customers requiring the ability to encode or decode HEVC content on one of the impacted models can utilize licensed third-party software solutions that include HEVC support. Check with your preferred video player for HEVC software support."

Dell's media relations team shared a similar statement: "HEVC video playback is available on Dell's premium systems and in select standard models equipped with hardware or software, such as integrated 4K displays, discrete graphics cards, Dolby Vision, or Cyberlink BluRay software. On other standard and base systems, HEVC playback is not included, but users can access HEVC content by purchasing an affordable third-party app from the Microsoft Store. For the best experience with high-resolution content, customers are encouraged to select systems designed for 4K or high-performance needs."
Bitcoin

How To Not Get Kidnapped For Your Bitcoin (nytimes.com) 85

schwit1 shares a report from the New York Times: Pete Kayll, a musclebound veteran of Britain's Royal Marines, had an unusual instruction for the Bitcoin investors gathered in Switzerland in late October. "Just bite your way out," he told them. It was the final day of a weekend-long cryptocurrency convention on the shore of Lake Lugano, near the Italian border. A small group of investors had lined up in a conference room to have their hands bound with plastic zipties. Now they were learning how to get them off. "Your teeth will get through anything," Mr. Kayll advised. "But it will bloody well hurt."

Most people don't go to an international crypto conference expecting to learn how to gnaw through plastic. But after hours of panels devoted to topics like Bitcoin-collateralized loans, these investors were looking for something more practical. They wanted to know what to do if they were grabbed on the street and thrown into the back of a van. Already paranoid about scams, hacks and market turmoil, wealthy crypto investors have lately become terrified about a much graver threat: torture and kidnapping.
These threats are known as "wrench attacks," which is a reference to a popular XKCD cartoon where a thief skips the hacking and just uses a wrench to force out the password.

According to the NYT, the best way to stay protected is staying low-profile, minimizing visible signs of wealth, using basic physical security tools, and preparing for self-defense. The report specifically recommends avoiding flashy displays of wealth like luxury watches and cars, watching for honey-traps, using hotel door stoppers, practicing escape techniques such as breaking zip-ties, hiring discreet bodyguards, and relying on panic-button apps like Glok to summon help quickly.
The Internet

The Internet Archive Now Captures AI-Generated Content (Including Google's AI Overviews) (cnn.com) 4

CNN profiled the non-profit Internet Archive today — and included this tidbit about how they archive parts of the internet that are now "tucked in conversations with AI chatbots." The rise of artificial intelligence and AI chatbots means the Internet Archive is changing how it records the history of the internet. In addition to web pages, the Internet Archive now captures AI-generated content, like ChatGPT answers and those summaries that appear at the top of Google search results. The Internet Archive team, which is made up of librarians and software engineers, are experimenting with ways to preserve how people get their news from chatbots by coming up with hundreds of questions and prompts each day based on the news, and recording both the queries and outputs, [says Wayback Machine Director Mark Graham].
It sounds like a fun place to work... Archivists use bespoke machines to digitize books page by page, livestreaming their work on YouTube for all to see (alongside some lo-fi music). Record players churn out vintage tunes from 1920s and 1940s, and the building houses every type of media console for any type of content imaginable, from microfilm, to CDs and satellite television. (The Internet Archive preserves music, television, books and video games, too)... "There are a lot of people that are just passionate about the cause. There's a cyberpunk atmosphere," Annie Rauwerda, a Wikipedia editor and social media influencer, said at a party thrown at the Internet Archive's headquarters to celebrate reaching a trillion pages "The internet (feels) quite corporate when I use it a lot these days, but you wouldn't know from the people here."
Wikipedia

Wikipedia Urges AI Companies To Use Its Paid API, and Stop Scraping (techcrunch.com) 51

Wikipedia on Monday laid out a simple plan to ensure its website continues to be supported in the AI era, despite its declining traffic. From a report: In a blog post, the Wikimedia Foundation, the organization that runs the popular online encyclopedia, called on AI developers to use its content "responsibly" by ensuring its contributions are properly attributed and that content is accessed through its paid product, the Wikimedia Enterprise platform.

The opt-in, paid product allows companies to use Wikipedia's content at scale without "severely taxing Wikipedia's servers," the Wikimedia Foundation blog post explains. In addition, the product's paid nature allows AI companies to support the organization's nonprofit mission. While the post doesn't go so far as to threaten penalties or any sort of legal action for use of its material through scraping, Wikipedia recently noted that AI bots had been scraping its website while trying to appear human.

PlayStation (Games)

Hilarious Unused Audio From 2003 Baseball Game Rediscovered by Video Game History Foundation (aftermath.site) 6

After popular arcade games like Mortal Kombat and Spy Hunter, Midway Games jumped into the home console market, and in 2003 launched their baseball game franchise "MLB Slugfest" for Xbox, PS2, and GameCube. But at times it was almost a parody of baseball, including announcers filling the long hours of airtime with bizarre, rambling conversations. ("I read today that kitchen utensils are gonna hurt more people tonight than lifting heavy objects during the day...")

Now former Midway Games producer Mark Flitman has revealed the even weirder conversations rejected by Major League Baseball. ("Ah, baseball on a sunny afternoon. Is there anything better? We've been talking about breaking pop bottles with rocks. I guess that is...") The nonprofit Video Game History Foundation published the text in their digital archive — and shared 79 seconds of sound clips that were actually recorded but never used in the final game. ("Enjoying some smoked whale meat up here in the booth today...")

Their BlueSky post with the audio drew over 5,500 likes and 2,400 reposts, with one commenter wondering if the bizarre (and unapproved) conversations were "part of the tactic where you include overtly inappropriate content to make the stuff you actually want to keep seem more appropriate." But the Foundation's library director thinks the voice actors were just going wild. "We talked with Mark on our podcast and it sounds like they just did a lot of improv and got carried away." He added later that the game's producer "would give them prompts and they'd run with it. The voice actors (Kevin Matthews and Tim Kitzrow) have backgrounds in sports radio and comedy, so they came up with wild nonsense like this."

The gaming site Aftermath notes the Foundation also has an archive page for all the other sound files on the CD. Maybe it's the ultimate tribute to the craziness that was MLB Slugfest. Years ago some fans of the game shared their memories on Reddit...
  • "The first time my friend tried to bean me and my hitter caught the ball was so hype, we were freaking out. Every game quickly evolved into trying to get our hitters to charge the mound."
  • "I just remembered you could also kick the shit out of the fielder near your base if he got too close. Man that game was awesome."
  • "Every time someone got on base we would run the ball over to them and beat their asses for 30 seconds. Good times."

Six years after the launch of the franchise, Midway Games declared bankruptcy.


Science

James D. Watson, Co-Discoverer of the Structure of DNA, Is Dead At 97 (nytimes.com) 65

ole_timer shares a report from the New York Times: James D. Watson, who entered the pantheon of science at age 25 when he joined in the discovery of the structure of DNA, one of the most momentous breakthroughs in the history of science, died on Thursday in East Northport, N.Y., on Long Island. He was 97. His death, in a hospice, was confirmed on Friday by his son Duncan, who said Dr. Watson was transferred to the hospice from a hospital this week after being treated there for an infection.

Dr. Watson's role in decoding DNA, the genetic blueprint for life, would have been enough to establish him as one of the most important scientists of the 20th century. But he cemented that fame by leading the ambitious Human Genome Project and writing perhaps the most celebrated memoir in science.

The Internet

Internet Archive's Legal Fights Are Over, But Its Founder Mourns What Was Lost (arstechnica.com) 39

The Internet Archive celebrated archiving its trillionth webpage last month and received congratulations from San Francisco, which declared October 22 "Internet Archive Day." Senator Alex Padilla designated the nonprofit a federal depository library. The organization currently faces no major lawsuits and no active threats to its collections. But these victories arrived after years of bruising copyright battles that forced the removal of more than 500,000 books from the Archive's Open Library. "We survived, but it wiped out the Library," founder Brewster Kahle told ArsTechnica.

In 2024, the Archive lost its final appeal in a lawsuit brought by book publishers over its e-book lending model. Damages could have topped $400 million before publishers announced a confidential settlement. Last month, the organization settled another suit over its Great 78 Project after music publishers sought damages of up to $700 million. That settlement was also confidential. In both cases, the Archive's experts challenged publishers' estimates as massively inflated.

Kahle had envisioned the Open Library as a way for Wikipedia to link to book scans and help researchers reference e-books. The Archive wanted to deepen Wikipedia's authority as a research tool by surfacing information often buried in books. "That's what they really succeeded at -- to make sure that Wikipedia readers don't get access to books," Kahle said of the publishers. He thinks "the world became stupider" when the Open Library was gutted. The Archive is now expanding Democracy's Library, a free online compendium of government research and publications that will be linked in Wikipedia articles.
Media

Sound Blaster Crowdfunds Linux-Powered Audio Hub 'Re:Imagine' For Creators and Gamers (nerds.xyz) 49

Slashdot reader BrianFagioli summarizes some news from Nerds.xyz: Creative Technology has launched Sound Blaster Re:Imagine, a modular, Linux-powered audio hub that reimagines the classic PC sound card for the modern age. The device acts as both a high-end digital-to-analog converter (DAC) and a customizable control deck that connects PCs, consoles, phones, and tablets in one setup.

Users can instantly switch inputs and outputs, while developers get full hardware access through an SDK for creating their own apps. It even supports AI-driven features like an on-device DJ, a revived "Dr. Sbaitso" speech synthesizer, and a built-in DOS emulator for retro gaming.

The Kickstarter campaign has already raised more than $150,000, far surpassing its initial goal of $15,000 with over 50 days remaining. Each unit ships with a modular "Horizon" base and swappable knobs, sliders, and buttons, while a larger "Vertex" version will unlock at a higher funding milestone.

Running an unspecified Linux build, Re:Imagine positions itself as both a nostalgic nod to Sound Blaster's roots and a new open platform for creators, gamers, and tinkerers.

IT

'ChatGPT's Atlas: The Browser That's Anti-Web' (anildash.com) 36

Blogger and technologist Anil Dash, writing about OpenAI's recently launched browser, Atlas: When I first got Atlas up and running, I tried giving it the easiest and most obvious tasks I could possibly give it. I looked up "Taylor Swift showgirl" to see if it would give me links to videos or playlists to watch or listen to the most popular music on the charts right now; this has to be just about the easiest possible prompt.

The results that came back looked like a web page, but they weren't. Instead, what I got was something closer to a last-minute book report written by a kid who had mostly plagiarized Wikipedia. The response mentioned some basic biographical information and had a few photos. Now we know that AI tools are prone to this kind of confabulation, but this is new, because it felt like I was in a web browser, typing into a search box on the Internet. And here's what was most notable: there was no link to her website.

I had typed "Taylor Swift" in a browser, and the response had literally zero links to Taylor Swift's actual website. If you stayed within what Atlas generated, you would have no way of knowing that Taylor Swift has a website at all.

Unless you were an expert, you would almost certainly think I had typed in a search box and gotten back a web page with search results. But in reality, I had typed in a prompt box and gotten back a synthesized response that superficially resembles a web page, and it uses some web technologies to display its output. Instead of a list of links to websites that had information about the topic, it had bullet points describing things it thought I should know. There were a few footnotes buried within some of those response, but the clear intent was that I was meant to stay within the AI-generated results, trapped in that walled garden.

During its first run, there's a brief warning buried amidst all the other messages that says, "ChatGPT may give you inaccurate information", but nobody is going to think that means "sometimes this tool completely fabricates content, gives me a box that looks like a search box, and shows me the fabricated content in a display that looks like a web page when I type in the fake search box."

And it's not like the generated response is even that satisfying.

PlayStation (Games)

25 Years Ago Today: A PlayStation Shopping Frenzy - But Would Microsoft's Xbox Make It Obsolete? (slashdot.org) 25

25 years ago today on Slashdot...

Hemos linked to a site called Joystick101 describing the crowd camping out to buy the limited number of just-released PlayStation 2 consoles (and games). "500,000 lucky members of the American gaming public are sneaking a few minutes of playing Madden 2001, Tekken, or Ridge Racer V before school or work..." wrote Joystick101. That same day CmdrTaco posted reports PS2s were selling for over $1,000 on eBay. And then Timothy updated that post to note someone saw one selling for $5,000.

But there was a third PS2 link posted on October 26, 2000... Hemos wrote a post titled "The PS2 — A Betamax In the Making?" — linking to an article by Mark Pesce (co-inventor of VRML and, in 1993, an Apple consulting engineer). "Microsoft promises Xbox will deliver ten times the performance of the PS2," Pesce wrote, noting Microsoft had partnered with Intel and "upstart video-chip developer Nvidia": The strangest thing about this battle of giants is that Microsoft has become a champion of open standards, encouraging developers to write Xbox titles without requiring them to pay any licensing fees. In comparison, Sony charges a minimum of $25,000 for access to the documentation and technology of the PlayStation2, plus a hefty license fee on every game sold. In the video-game industry, the Big Three — Sony, Nintendo, and Sega — sell the hardware at a loss (the PS2 costs nearly the $300 it will retail for) and recover their investment in the stiff licensing fees paid by game developers for the "key" that allows their software to work on Sony's platform...

Having committed an astounding $500 million to market the Xbox next Christmas, it's clear that Microsoft doesn't mind taking a short-term loss to ensure an eventual win. If Sony's not careful, this could turn into "Betamax, the Sequel." Twenty years ago, Sony tightly controlled the titles made available for its technically superior videocassette player — specifically, no adult content — and found themselves quickly locked out of an incredibly lucrative market for adult and family content. If Sony keeps a tight grip on the PS2, they may actually help Microsoft create the new VHS. But even if Sony loses this round (and no one wants to wager which way this battle will turn), they've already set their sights on the PlayStation3, to be released five years from now. Sony promises it will be a thousand times faster than the PS2.

Ironically, Pesce's warning about possible threats to the PS2's longevity was published by online magazine Feed-- which seven months later went out of business.

And this week it was announced that even Microsoft's Halo Campaign Evolved will now be coming to PlayStation 5, with Slashdot publishing six PlayStation-related stories in just the last three months in 2025.

Thanks to long-time Slashdot reader crunchy_one for suggesting a "25 Years Ago" Slashdot post.
Wikipedia

Wikipedia Drama Goes Mainstream (msn.com) 237

Larry Sanger, who helped launch Wikipedia in 2001 before being ousted by co-founder Jimmy Wales a year later, has spent years arguing the online encyclopedia has abandoned its commitment to neutrality. Leading conservatives in the second Trump administration are now amplifying his critique. Elon Musk announced plans to launch an AI-powered alternative called Grokipedia this week, calling Wikipedia "hopelessly biased." Senator Ted Cruz sent a letter to the Wikimedia Foundation demanding answers about what he termed "ideological bias." House Republicans opened an investigation into possible platform manipulation.

Sanger published "Nine Theses" on reforming Wikipedia and appeared on Tucker Carlson's show. His arguments circulated widely among conservatives, including Trump's AI czar David Sacks. Sanger recently converted to Christianity and voted for Trump in 2024. He is working to recruit hundreds of conservatives to become active Wikipedia editors. Wikipedia co-founder Jimmy Wales maintains that neutrality remains the site's core policy.
Programming

A Plan for Improving JavaScript's Trustworthiness on the Web (cloudflare.com) 48

On Cloudflare's blog, a senior research engineer shares a plan for "improving the trustworthiness of JavaScript on the web."

"It is as true today as it was in 2011 that Javascript cryptography is Considered Harmful." The main problem is code distribution. Consider an end-to-end-encrypted messaging web application. The application generates cryptographic keys in the client's browser that lets users view and send end-to-end encrypted messages to each other. If the application is compromised, what would stop the malicious actor from simply modifying their Javascript to exfiltrate messages? It is interesting to note that smartphone apps don't have this issue. This is because app stores do a lot of heavy lifting to provide security for the app ecosystem. Specifically, they provide integrity, ensuring that apps being delivered are not tampered with, consistency, ensuring all users get the same app, and transparency, ensuring that the record of versions of an app is truthful and publicly visible.

It would be nice if we could get these properties for our end-to-end encrypted web application, and the web as a whole, without requiring a single central authority like an app store. Further, such a system would benefit all in-browser uses of cryptography, not just end-to-end-encrypted apps. For example, many web-based confidential LLMs, cryptocurrency wallets, and voting systems use in-browser Javascript cryptography for the last step of their verification chains. In this post, we will provide an early look at such a system, called Web Application Integrity, Consistency, and Transparency (WAICT) that we have helped author. WAICT is a W3C-backed effort among browser vendors, cloud providers, and encrypted communication developers to bring stronger security guarantees to the entire web... We hope to build even wider consensus on the solution design in the near future....

We would like to have a way of enforcing integrity on an entire site, i.e., every asset under a domain. For this, WAICT defines an integrity manifest, a configuration file that websites can provide to clients. One important item in the manifest is the asset hashes dictionary, mapping a hash belonging to an asset that the browser might load from that domain, to the path of that asset.

The blog post points out that the WEBCAT protocol (created by the Freedom of Press Foundation) "allows site owners to announce the identities of the developers that have signed the site's integrity manifest, i.e., have signed all the code and other assets that the site is serving to the user... We've made WAICT extensible enough to fit WEBCAT inside and benefit from the transparency components." The proposal also envisions a service storing metadata for transparency-enabled sites on the web (along with "witnesses" who verify the prefix tree holding the hashes for domain manifests).

"We are still very early in the standardization process," with hopes to soon "begin standardizing the integrity manifest format. And then after that we can start standardizing all the other features. We intend to work on this specification hand-in-hand with browsers and the IETF, and we hope to have some exciting betas soon. In the meantime, you can follow along with our transparency specification draft,/A>, check out the open problems, and share your ideas."
Space

'How We Sharpened the James Webb Telescope's Vision From a Million Kilometers Away' (theconversation.com) 18

The James Webb Space Telescope gets its highest resolution with the aperture masking interferometer (or AMI), "a tiny piece of precisely machined metal that slots into one of the telescope's cameras," according to a new article by Benjamin Pope, an associated math professor at Macquarie University.

"We can finally present its first successful observations of stars, planets, moons and even black hole jets." [AMI] was put on Webb to diagnose and measure any blur in its images. Even nanometres of distortion in Webb's 18 hexagonal primary mirrors and many internal surfaces will blur the images enough to hinder the study of planets or black holes, where sensitivity and resolution are key. AMI filters the light with a carefully structured pattern of holes in a simple metal plate, to make it much easier to tell if there are any optical misalignments. We wanted to use this mode to observe the birth places of planets, as well as material being sucked into black holes. But before any of this, AMI showed Webb wasn't working entirely as hoped.

At very fine resolution — at the level of individual pixels — all the images were slightly blurry due to an electronic effect: brighter pixels leaking into their darker neighbours. This is not a mistake or flaw, but a fundamental feature of infrared cameras that turned out to be unexpectedly serious for Webb. This was a dealbreaker for seeing distant planets many thousands of times fainter than their stars a few pixels away: my colleagues quickly showed that its limits were more than ten times worse than hoped. So, we set out to correct it...

We built a computer model to simulate AMI's optical physics, with flexibility about the shapes of the mirrors and apertures and about the colours of the stars. We connected this to a machine learning model to represent the electronics with an "effective detector model" — where we only care about how well it can reproduce the data, not about why. After training and validation on some test stars, this setup allowed us to calculate and undo the blur in other data, restoring AMI to full function. It doesn't change what Webb does in space, but rather corrects the data during processing. It worked beautifully — the star HD 206893 hosts a faint planet and the reddest-known brown dwarf (an object between a star and a planet). They were known but out of reach with Webb before applying this correction. Now, both little dots popped out clearly in our new maps of the system... With the new correction, we brought Jupiter's moon Io into focus, clearly tracking its volcanoes as it rotates over an hour-long timelapse.

"This correction has opened the door to using AMI to prospect for unknown planets at previously impossible resolutions and sensitivities..." the article points out.

"Our results on painstakingly testing and enhancing AMI are now released on the open-access archive arXiv in a pair of papers."

Thanks to long-time Slashdot reader schwit1 for sharing the article.
Wikipedia

Wikipedia Volunteers Avert Tragedy by Taking Down Gunman at Conference (nbcnews.com) 79

A potential tragedy was narrowly averted at a Wikipedia conference in Manhattan when two volunteer editors tackled an armed man who stormed the stage and threatened to kill himself during a keynote speech (source paywalled; alternative source). The gunman, who claimed he was protesting Wikipedia's policy banning self-identified pedophiles, was disarmed and taken into custody after community members swiftly intervened. The New York Times reports: The armed man came striding up the aisle at a conference for Wikipedia editors Friday morning in Manhattan, several witnesses said. The man, draped in a multicolored flag, walked onto the stage and stood next to Maryana Iskander, the chief of the nonprofit group that runs Wikipedia, interrupting her speech. He announced that he was going to kill himself. He held a gun near his head and pointed it toward the ceiling. The audience of well over a hundred people panicked.

"People started yelling, 'Get down, get down!' and people started ducking behind their chairs," said Bill Adair, a journalism professor who was there and is writing a book on Wikipedia. A man in an orange sweatshirt rushed the stage. He was not in law enforcement, but a Wikipedia contributor on the conference's "trust and safety team": Richard Knipel, the City University of New York's "Wikimedian-in-residence." He grabbed the gunman from behind. Another Wikipedian on the trust and safety team, Andrew Lih, had been standing watch in the aisle and charged forward, too.

"I saw the gun he's holding go from pointing up at the ceiling to sweeping down toward the room, and as it swept across me I said 'Oh, my god,' and I ducked down, but I still kept moving" said Mr. Lih, a digital strategist who works with museums and libraries. "I grabbed his arm," he continued. "He was still clutching his gun pretty hard. I pried his fingers away from it, removed it from his hands and put it down." The gun was loaded, according to a senior law enforcement official who spoke on the condition of anonymity to discuss a pending investigation. In seconds, a potential scene of bloodshed had been averted, a life may have been saved, and two volunteer editors of an online encyclopedia had become unlikely heroes.

Wikipedia

Wikipedia Says AI Is Causing a Dangerous Decline in Human Visitors (404media.co) 92

The Wikimedia Foundation, the nonprofit organization that hosts Wikipedia, says that it's seeing a significant decline in human traffic to the online encyclopedia because more people are getting the information that's on Wikipedia via generative AI chatbots that were trained on its articles and search engines that summarize them without actually clicking through to the site. 404 Media: The Wikimedia Foundation said that this poses a risk to the long term sustainability of Wikipedia. "We welcome new ways for people to gain knowledge. However, AI chatbots, search engines, and social platforms that use Wikipedia content must encourage more visitors to Wikipedia, so that the free knowledge that so many people and platforms depend on can continue to flow Sustainably," the Foundation's Senior Director of Product Marshall Miller said in a blog post. "With fewer visits to Wikipedia, fewer volunteers may grow and enrich the content, and fewer individual donors may support this work."
Science

Physicists Inadvertently Generated the Shortest X-Ray Pulses Ever Observed (theconversation.com) 18

Physicists using SLAC's X-ray free-electron laser discovered two new laser phenomena that allowed them to generate the shortest, highest-energy X-ray pulses ever recorded (60-100 attoseconds). These breakthroughs could let scientists observe electron motion and chemical bond formation in real time. Physicists Uwe Bergmann and Thomas Linker write in an article for The Conversation: In this new study we used X-rays, which have 100 million times shorter wavelengths than microwaves and 100 million times more energy. This meant the resulting new X-ray laser pulses were split into different X-ray wavelengths corresponding to Rabi frequencies in the extreme ultraviolet region. Ultraviolet light has a frequency 100 million times higher than radio waves. This Rabi cycling effect allowed us to generate the shortest high-energy X-ray pulses to date, clocking in at 60-100 attoseconds.

While the pulses that X-ray free-electron lasers currently generate allow researchers to observe atomic bonds forming, rearranging and breaking, they are not fast enough to look inside the electron cloud that generates such bonds. Using these new attosecond X-ray laser pulses could allow scientists to study the fastest processes in materials at the atomic-length scale and to discern different elements.

In the future, we also hope to use much shorter X-ray free-electron laser pulses to better generate these attosecond X-ray pulses. We are even hoping to generate pulses below 60 attoseconds by using heavier materials with shorter lifespans, such as tungsten or hafnium. These new X-ray pulses are fast enough to eventually enable scientists to answer questions such as how exactly an electron cloud moves around and what a chemical bond actually is.
The findings have been published in the journal Nature.

Slashdot Top Deals