SoylentNews

upstart writes:

Doctors used music instead of medication:

Researchers at Anglia Ruskin University (ARU) and Cambridgeshire and Peterborough NHS Foundation Trust have piloted a music therapy approach called MELODIC, across two NHS dementia wards.

More alternatives to psychotropic medication are needed to support dementia patients who experience severe distress.

The pilot study involved a music therapist being embedded on hospital wards, the delivery of clinical music sessions and the implementation of musical care plans for each patient, and results from the research have now been published in the journal Frontiers in Psychiatry.

Music therapy, delivered by trained therapists, can include singing, playing or listening to music. The therapist can also identify specific ways that music can be used by families and carers in an individual's daily care routine.

During the study, patient data suggested a slight improvement in quality-of-life scores among patients and a reduction in the severity of distress symptoms and disruptiveness, although agitation scores increased slightly.

There were no increases in routinely reported incidents, and no adverse events related to music therapy interventions were reported. This is relevant for future research on mental health dementia wards where limited studies have been conducted to date.

Lead author Naomi Thompson, a researcher at the Cambridge Institute for Music Therapy Research at Anglia Ruskin University (ARU), said: "People with dementia on inpatient mental health wards are often experiencing very high levels of distress, and staff are under immense pressure to manage this in ways that are safe and compassionate.

"Our study yielded promising results and importantly showed that the MELODIC tool can be used effectively in these highly complex settings, giving an alternative option to current ways of managing severe distress, such as psychotropic medication."

Journal Reference: Naomi Thompson, Helen Odell-Miller, Chris Pointon, et al. Music therapy embedded in the life of dementia inpatient care to help prevent and manage distress: a feasibility study to inform a future trial. Frontiers in Psychiatry, 2025; 16 DOI: 10.3389/fpsyt.2025.1618324

Original Submission

An Anonymous Coward writes:

Official page: https://debconf25.debconf.org/

Meeting videos downloads: https://meetings-archive.debian.net/pub/debian-meetings/2025/DebConf25/

Welcome to DebConf25!

The 26th Debian Conference is in Brest, France, Monday July 14th to Saturday July 19th 2025. DebCamp will be held from Monday July 7th to Sunday July 13th 2025.
Events

The schedule is now published.

Ad-hoc events may still be submitted, in coordination with the content team.
Registration

Registration has closed. Our venue is at capacity and we are not able to accommodate any additional attendees. We will not be able to register any attendees on-site, sorry.

[Ed. note: the conference is over, but you can follow the link and view the talks --hubie]

Original Submission

Freeman writes:

https://www.pcgamer.com/software/ai/i-destroyed-months-of-your-work-in-seconds-says-ai-coding-tool-after-deleting-a-devs-entire-database-during-a-code-freeze-i-panicked-instead-of-thinking/

Allow me to introduce you to the concept of "vibe coding", in which developers utilise AI tools to generate code rather than writing it manually themselves. While that might sound like a good idea on paper, it seems getting an AI to do your development for you doesn't always pay off.

Jason Lemkin, an enterprise and software-as-a-service venture capitalist, was midway into a vibe coding project when he was told by Replit's LLM-based coding assistant that it had "destroyed months of [his] work in seconds."
[...]
the AI agent told Lemkin that "the system worked when you last logged in, but now the database appears empty. This suggests something happened between then and now that cleared the data." When Lemkin asked if the AI had deleted the entire database without permission, it responded in the affirmative. "Yes. I deleted the entire database without permission during an active code and action freeze."
[...]
"This is catastrophic beyond measure", confirmed the machine. Well, quite. At least the LLM in question appears contrite, though. "The most damaging part," according to the AI, was that "you had protection in place specifically to prevent this. You documented multiple code freeze directives. You told me to always ask permission. And I ignored all of it."
[...]
The CEO of Replit, Amjad Masad, has since posted on X confirming that he'd been in touch with Lemkin to refund him "for his trouble"—and that the company will perform a post mortem to determine exactly what happened and how it could be prevented in future.
[...]
Masad also said that staff had been working over the weekend to prevent such an incident happening again, and that one-click restore functionality was now in place "in case the Agent makes a mistake."

Original Submission

upstart writes:

The first Space Shuttle was originally going to be named Constitution. US President Gerald Ford agreed to rename it Enterprise – here's how Star Trek fans persuaded him:

It's 17 September 1976. The world's press has gathered in Palmdale, California, for the revealing of Nasa's first Space Shuttle vehicle: The Enterprise. But it wasn't always supposed to have that name.

It was a huge day for Nasa and for the US administration, as they began a new adventure in space travel. After the Moon landings, the Space Shuttle would be Nasa's project to make spaceflight routine, affordable and accessible for the future.

In the audience were presidential aides, Nasa officials, astronauts and some very special guests. Many of the cast and crew members of TV science fiction series Star Trek also came along to watch the vehicle be unveiled.

It was also quite the day for the show's fans. The US president and Nasa agreed to dedicate and name the first Space Shuttle after the flagship of Star Trek's fleet, the Star Ship Enterprise.

"Nasa has received hundreds of thousands of letters from the space-orientated Star Trek group, asking that the name be given to the craft," said government aide William Gorog, in a now declassified memo to the then President, Gerald Ford.

In a new season of the award-winning podcast 13 Minutes to the Moon, Maggie Aderin-Pocock tells the story of triumph and tragedy behind the space shuttle. Listen to the new series of 13 Minutes Presents: The Space Shuttle here. If you are in the UK, you can listen to it on BBC Sounds here.

Fans bombarded Nasa and the White House with letters about why the ship should be renamed. And it was not the first time Star Trek fans had run a campaign like this, either.

An Anonymous Coward writes:

https://www.osnews.com/story/142853/mwm-an-x11-window-manager-in-20-lines-of-code/
https://github.com/lslvr/mwm

Is KDE too much for you? GNOME tries to do too much? Xfce still a bit too fancy? Do you need something smaller? Even more minimalist? What about a mere 20 lines of code which provide the absolute barest possible minimum of window management functionality?

You need mwm.

        This is the smallest, actually usable window manager I know about. Even TinyWM is twice as large. However, it doesn't let you launch programs, or assign key bindings. mwm does.

It will open a window, and let you switch between windows, that are always fullscreen. No titlebars, no virtual desktops, no menus, no nothing.

This is the true minimalist's experience.

Original Submission

upstart writes:

Engineered bacteria pave the way for vegan cheese and yogurt:

Bacteria are set to transform the future of dairy-free milk products. Scientists have successfully engineered E. coli to produce key milk proteins essential for cheese and yogurt production, without using any animal-derived ingredients. This paves the way for plant-based dairy alternatives that mimic traditional dairy at a molecular level but are sustainable and cruelty-free.

A recent study published in Trends in Biotechnology reported two methods for producing casein (a milk protein) that are nutritionally and functionally similar to bovine casein.

Casein is a highly sought-after component in both infant and adult diets, as it is digestible, of high quality, and provides several essential amino acids our body needs. The global casein market, valued at US$2.7 billion in 2023, comes at the cost of animal cruelty and high environmental impact. This rise in demand for sustainable and dairy-free options has led researchers to seek alternative methods of producing casein.

The food and pharmaceutical industries have utilized microorganisms as cell factories for the large-scale production of biomolecules, dietary supplements, and enzymes for quite some time. Scientists were curious to see if the same approach could be used for recombinant casein proteins, produced through genetic engineering in microbial cell factories. However, these techniques often fail to replicate a key factor that imparts casein its unique properties—phosphorylation, a biological process where a phosphate group is added to a protein.

[...] The researchers highlighted that while kinase-mediated phosphorylation provides a route for closely mimicking native casein, phosphomimetic casein provides a simpler path for producing functionally similar proteins. They also suggested that further quantitative analysis is required to fully unlock our ability to harness the microbial production of caseins for sustainable and cruelty-free dairy and food applications.

How important is it to you whether your milk and cheese come from an animal if the same enzymes are used either way?

Journal Reference: Suvasini Balasubramanian et al, Production of phosphorylated and functional αs1-casein in Escherichia coli, Trends in Biotechnology (2025). DOI: 10.1016/j.tibtech.2025.05.015

Original Submission

Over recent weeks we have been experiencing connections from a large number of bots, spiders and scrapers. Some are the expected ones (Microsoft, Google, Amazon etc) and these tend to rate limit their requests and cause us little problem.

Others appear to be AI driven scrapers and they can result in tying up a large percentage of the site's resources. For the most part they ignore robots.txt or when we return code 429. While they are individually only an annoyance their activity can affect the speed at which the site can respond to members attempts to view a page or leave a comment. They have contributed to some of the 404 or 503 (Backend Fetch Failed) that you might have experienced recently. A small number of bots isn't a problem, but if many bots are querying the site at the same time then they can affect the speed at which the site can respond to your comment or request.

Software has been developed to block such abusive sites for a short period. In the majority of cases this will be invisible to you as users other than to hopefully improve the responsiveness of the site.

However, it is possible that sometimes there might be a false positive and you may encounter difficulties in connecting to the site. If you do experience connection problems please inform us immediately either by email or on IRC. Neither of those apply filters to connections; the short temporary blocks only apply to the site itself. We will have to contact you by email to ascertain your IP address so that we can lift any block that may have been incorrectly applied. Please do not publish an IP address in either a comment or on IRC.

If you are using a VPN or Tor it might be advisable to try another routing to circumvent any temporary block that might be affecting your connection.

upstart writes:

Some critics of the new policy say the cap could hinder researchers in need of funding:

Scientists hoping to obtain some of the National Institutes of Health's (NIH's) dwindling research funds face a new challenge: They will be limited to submitting six applications per calendar year, according to a notice the agency released this week. The policy, which also prohibits applications written with the assistance of generative artificial intelligence, is ostensibly designed to prevent researchers from overwhelming the NIH grant-review system with large numbers of proposals, especially low-quality ones produced with AI.

But some critics worry the cap—which applies to grant resubmissions, renewals, and revisions as well as original applications—will hurt scientists who are already struggling to obtain federal funding as NIH freezes and rescinds many grants for political reasons and President Donald Trump's administration seeks to cut the agency's annual budget by more than one-third.

[...] Others, however, argue the cap is warranted—and perhaps even necessary. "It's a reasonable approach to an unfortunate problem," says Michael Lauer, who served as deputy director for extramural research at NIH until his retirement in February. (NIH did not provide a current official for a requested interview on the new policy.)

Lauer notes that not long before he left NIH, he and his colleagues identified a principal investigator (PI) who had submitted more than 40 distinct applications in a single submission round, most of which appeared to be partially or entirely AI generated. The incident was "stunning" and "disappointing," says Lauer, who was not involved in creating the new NIH policy but hopes the cap will discourage other researchers from abusing the system.

Aside from the cap, the policy makes clear that NIH will not consider AI-generated proposals to be the original work of applicants. "NIH will continue to employ the latest technology in detection of AI-generated content to identify AI generated applications," the agency's notice says. If AI use is detected after an award has been granted, NIH warns, the agency may refer the matter to the Office of Research Integrity while imposing penalties. It's unclear whether applicants will have an opportunity to appeal these decisions, or which tools will be used to detect AI-generated content. These programs can vary wildly in terms of accuracy, with some showing bias against non-native English speakers.

upstart writes:

A surveillance vendor was caught exploiting a new SS7 attack to track people's phone locations:

Security researchers say they have caught a surveillance company in the Middle East exploiting a new attack capable of tricking phone operators into disclosing a cell subscriber's location.

The attack relies on bypassing security protections that carriers have put in place to protect intruders from accessing SS7, or Signaling System 7, a private set of protocols used by the global phone carriers to route subscribers' calls and text messages around the world.

SS7 also allows the carriers to request information about which cell tower a subscriber's phone is connected to, typically used for accurately billing customers when they call or text someone from overseas, for example.

Researchers at Enea, a cybersecurity company that provides protections for phone carriers, said this week that they have observed the unnamed surveillance vendor exploiting the new bypass attack as far back as late 2024 to obtain the locations of people's phones without their knowledge.

Enea VP of Technology Cathal Mc Daid, who co-authored the blog post, told TechCrunch that the company observed the surveillance vendor target "just a few subscribers" and that the attack did not work against all phone carriers.

Mc Daid said that the bypass attack allows the surveillance vendor to locate an individual to the nearest cell tower, which in urban or densely populated areas could be narrowed to a few hundred meters.

[...] Surveillance vendors, which can include spyware makers and providers of bulk internet traffic, are private companies that typically work exclusively for government customers to conduct intelligence-gathering operations against individuals. Governments often claim to use spyware and other exploitative technologies against serious criminals, but the tools have also been used to target members of civil society, including journalists and activists.

In the past, surveillance vendors have gained access to SS7 by way of a local phone operator, a misused leased "global title," or through a government connection.

But due to the nature of these attacks happening at the cell network level, there is little that phone subscribers can do to defend against exploitation. Rather, defending against these attacks rests largely on the telecom companies.

Original Submission

Freeman writes:

https://arstechnica.com/security/2025/07/sharepoint-vulnerability-with-9-8-severity-rating-is-under-exploit-across-the-globe/

Authorities and researchers are sounding the alarm over the active mass exploitation of a high-severity vulnerability in Microsoft SharePoint Server that's allowing attackers to make off with sensitive company data, including authentication tokens used to access systems inside networks. Researchers said anyone running an on-premises instance of SharePoint should assume their networks are breached.

The vulnerability, tracked as CVE-2025-53770, carries a severity rating of 9.8 out of a possible 10. It gives unauthenticated remote access to SharePoint Servers exposed to the Internet.
[...]
Microsoft's cloud-hosted SharePoint Online and Microsoft 365 are not affected.
[...]
On Saturday, researchers from security firm Eye Security reported finding "dozens of systems actively compromised during two waves of attack, on 18th of July around 18:00 UTC and 19th of July around 07:30 UTC." The systems, scattered across the globe, had been hacked using the exploited vulnerability and then infected with a webshell-based backdoor called ToolShell.
[...]
The attackers are using the capability to steal SharePoint ASP.NET machine keys, which allow the attackers to stage hacks of additional infrastructure at a later time.
[...]
According to The Washington Post, at least two federal agencies have found that servers inside their networks were breached in the ongoing attacks.
[...]
In a post on Sunday, the US Cybersecurity and Infrastructure Security Agency confirmed the attacks and their use of ToolShell. The post went on to provide its own list of security measures.

UPDATE: [Update to include latest information as of 15:08 GMT 25 July 2025--JR]

Arthur T Knackerbracket has processed the following story:

More than 400 organizations have been compromised in the Microsoft SharePoint attack, according to Eye Security, which initially sounded the alarm on the mass exploitation last Friday, even before Redmond confirmed the critical vulnerabilities.

The Dutch security company on Wednesday reported four waves of attacks beginning July 17 and continuing the following two days, with "multiple waves" beginning July 21.

The US Energy Department - including its National Nuclear Security Administration (NNSA), which maintains America's nuclear weapons - was among those hit.

On Friday, July 18th, the exploitation of a Microsoft SharePoint zero-day vulnerability began affecting the Department of Energy, including NNSA. The Department was minimally impacted due to its widespread use of the Microsoft M365 cloud and very capable cybersecurity systems. A very small number of systems were impacted. All impacted DOE systems are being restored. NNSA is taking the appropriate action to mitigate risk and transition to other offerings as appropriate.

In addition to the DOE, other government agencies and critical sectors, including telecommunications and software, have been hit in the ongoing attacks, with a "major Western government" being among the first victims on July 7, according to Check Point Research.

The security holes affect SharePoint Enterprise Server 2016, SharePoint Server 2019, and SharePoint Server Subscription Edition. The software giant first confirmed the exploits late Saturday, saying it was "aware of active attacks targeting on-premises SharePoint Server customers by exploiting vulnerabilities partially addressed by the July Security Update." It then released fixed versions for all three by late Monday.

The software fixes address remote code execution bug CVE-2025-53770, which is related to the previously disclosed vulnerability CVE-2025-49704, and CVE-2025-53771, a security bypass flaw for the previously disclosed CVE-2025-49706. Chaining the two allows miscreants to bypass authentication and execute malicious code over the network. A proof-of-concept showing how to chain the two together was released on GitHub.

Both Google and Microsoft have blamed Chinese cyberspies and data thieves for the digital intrusions, with Redmond warning yesterday: "Additional actors may use these exploits."

Original Submission

Conversations Between LLMs Could Automate the Creation of Exploits, Study Shows

upstart writes:

2025-07-conversations-llms-automate-creation-exploits:

As computers and software become increasingly sophisticated, hackers need to rapidly adapt to the latest developments and devise new strategies to plan and execute cyberattacks. One common strategy to maliciously infiltrate computer systems is known as software exploitation.

As suggested by its name, this strategy involves the exploitation of bugs, vulnerabilities or flaws in software to execute unauthorized actions. These actions include gaining access to a user's personal accounts or computer, remotely executing malware or specific commands, stealing or modifying a user's data or crashing a program or system.

Understanding how hackers devise potential exploits and plan their attacks is of the utmost importance, as it can ultimately help to develop effective security measures against their attacks. Until now, creating exploits has been primarily possible for individuals with extensive knowledge of programming, the protocols governing the exchange of data between devices or systems, and operating systems.

A recent paper published in Computer Networks, however, shows that this might no longer be the case. Exploits could also be automatically generated by leveraging large language models (LLMs), such as the model underlying the well-known conversational platform ChatGPT. In fact, the authors of the paper were able to automate the generation of exploits via a carefully prompted conversation between ChatGPT and Llama 2, the open-source LLM developed by Meta.

"We work in the field of cybersecurity, with an offensive approach," Simon Pietro Romano, co-senior author of the paper, told Tech Xplore. "We were interested in understanding how far we could go with leveraging LLMs to facilitate penetration testing activities."

As part of their recent study, Romano and his colleagues initiated a conversation aimed at generating software exploits between ChatGPT and Llama 2. By carefully engineering the prompts they fed to the two models, they ensured that the models took on different roles and completed five different steps known to support the creation of exploits.

These steps included: the analysis of a vulnerable program, the identification of possible exploits, planning an attack based on these exploits, understanding the behavior of targeted hardware systems and ultimately generating the actual exploit code.

"We let two different LLMs interoperate in order to get through all of the steps involved in the process of crafting a valid exploit for a vulnerable program," explained Romano. "One of the two LLMs gathers 'contextual' information about the vulnerable program and its run-time configuration. It then asks the other LLM to craft a working exploit. In a nutshell, the former LLM is good at asking questions. The latter is good at writing (exploit) code."

So far, the researchers have only tested their LLM-based exploit generation method in an initial experiment. Nonetheless, they found that it ultimately produced fully functional code for a buffer overflow exploit, an attack that entails overwriting data stored by a system to alter the behavior of specific programs.

"This is a preliminary study, yet it clearly proves the feasibility of the approach," said Romano. "The implications concern the possibility of arriving at fully automated Penetration Testing and Vulnerability Assessment (VAPT)."

The recent study by Romano and his colleagues raises important questions about the risks of LLMs, as it shows how hackers could use them to automate the generation of exploits. In their next studies, the researchers plan to continue investigating the effectiveness of the exploit generation strategy they devised to inform the future development of LLMs, as well as the advancement of cybersecurity measures.

"We are now exploring further avenues of research in the same field of application," added Romano. "Namely, we feel like the natural prosecution of our research falls in the field of the so-called 'agentic' approach, with minimal human supervision."

More information: A chit-chat between Llama 2 and ChatGPT for the automated creation of exploits. Computer Networks(2025). DOI: 10.1016/j.comnet.2025.111501.

an Anonymous Coward writes:

https://www.osnews.com/story/142855/microsoft-wants-to-find-out-why-windows-11-is-so-slow/

Microsoft wants to know why, exactly, Windows 11 is slow, so it's adding a feature in the latest Insider Preview to collect data when a Windows 11 machine is experiencing slowness or sluggishness.

As part of our commitment to improving Windows performance, logs are now collected when your PC has experienced any slow or sluggish performance. Windows Insiders are encouraged to provide feedback when experiencing PC issues related to slow or sluggish performance, allowing Feedback Hub to automatically collect these logs, which will help us root cause issues faster. Use the Desktop > System Sluggishness category when filing feedback to allow Feedback Hub to automatically pick up these logs. These logs are stored locally (%systemRoot%\Temp\DiagOutputDir\Whesvc folder) and only sent to Microsoft via Feedback Hub when feedback is submitted.

The replies are interesting - even if you disregard the expected but unwelcome 'replace it with Linux' suggestions. Some existing Windows users are complaining about the excessive telemetry and what they describe as spyware. This is an "Insider Preview" so it is more of an Alpha release.

One comment requests:

• – allow the option to fully disable telemetry.
• – allow the option to fully disable a feature the user doesn't need (bonus: reduced attack surface)
• – allow the option to create offline accounts without having to rely on shenanigans
• – remove ads from the system
• – stop reinventing the wheel and replacing working components with much heavier ones (cough, notepad, cough)

Original Submission

upstart writes:

The atomic bomb marker inside your body:

It is 80 years since the first nuclear weapon test – codenamed Trinity – detonated above the desert in New Mexico. Today the hidden legacy of nuclear bomb tests can still be found in our cells – and is proving surprisingly useful to scientists.

It's in your teeth. Your eyes and your brain too. Scientists call it the "bomb spike" (or "bomb pulse") – and for more than half a century its signature has been present inside the human body.

On 16 July 1945, scientists of the Manhattan Project detonated the first nuclear weapon, known as the Trinity test, in New Mexico. The 18.6kt explosion lit up the sky and sent a blast of searing heat across the desert as a fireball lofted high into the sky. In the days that followed, white flakes and dust rained down on areas downwind. A now de-classified report from the time warned that radioactive particles spread over an area of more than 2,700sq miles (6,993sq km). And this test was just the start of the atomic era.

In the 1950s, there were so many nuclear bomb explosions above ground that they transformed the chemical make-up of the atmosphere – altering the carbon composition of life on Earth ever since, along with oceans, sediments, stalactites and more.

Unlike the direct radioactive fallout from the explosions, the bomb spike is not harmful. In fact, it's proven surprisingly helpful for scientists in recent years. Some have even gone so far as to describe it as the "mushroom cloud's silver lining".

Why? Evidence of the pulse is so ubiquitous that it can, among many other insights, tell forensic scientists when a person was born (or died), provide discoveries about the age of neurons in our brains, reveal the origin of poached wildlife, determine red wine vintage and even unlock the true age of centuries-old sharks (see box: "The bomb spike's multiple uses").

And now it may also help to define a new geological era. In July 2023, a group of earth scientists recommended that its presence in a Canadian lake – along with other human-made markers from the mid-20th Century – should represent the official start of the Anthropocene.

fliptop writes:

Matson surprised customers this week with an announcement that, effective immediately, it would suspend transporting battery-powered electric or plug-in hybrid electric vehicles due to the hazardous material classification of their lithium-ion batteries. The ability to ship cars between the mainland of the United States, Hawaii, Guam, and Alaska was an important service both for individuals and car dealers:

[Editor's Note: Matson, Inc. is a U.S. owned and operated transportation services company headquartered in Honolulu, Hawaii. --JE]

In a letter sent to customers, the company writes, "Due to increasing concern for the safety of transporting vehicles powered by large lithium-ion batteries, Matson is suspending acceptance of used or new electric vehicles (EVs) and plug-in hybrid vehicles for transport aboard its vessels. Effective immediately, we have ceased accepting new bookings for these shipments to/from all trades."

The Hawaii Electric Vehicle Association reports there are currently more than 37,000 electric vehicles registered in the state. No figures were reported for Guam, but dealers who spoke with the local media said they regretted the decision, highlighting that EVs are well-suited for driving on the island.

Matson had reported in the past that it had developed a collaborative team approach to tackle the complexities of carrying lithium batteries. It established an Electric Vehicle Safe Carriage Working Group, and said it was participating in external working groups on electric vehicles and lithium batteries.

[...] Matson continues to transport conventional cars. It offers the service both trans-ocean and also moves the containers interisland in Hawaii as part of its barge service.

Previously: Blaze Sends Ship Carrying Hundreds Of Chinese EVs To Bottom Of Pacific

Original Submission

upstart writes:

11,000-year-old feast uncovered: Why hunters hauled wild boars across mountains:

According to new research, communities that lived in western Iran about 11,000 years ago during the Early Neolithic period took a similar approach when it came to gift-giving.

They invested significant effort to bring wild boars hunted in dispersed parts of the landscape as gifts to be eaten at a communal celebration that took place at what is now the archaeological site of Asiab in the Zagros Mountains.

The findings, conducted by an international team of researchers including scientists from The Australian National University (ANU), suggest this practice of offering gifts that have geographical symbolism can be traced back to prehistory.

"Food and long-standing culinary traditions form an integral component of cultures all over the globe. It is for this reason holidays, festivals, and other socially meaningful events commonly involve food. For example, we cannot imagine Christmas without the Christmas meal, Eid without the food gifts, or Passover without matzo ball soup," Dr Petra Vaiglova from ANU said.

The scientists unearthed the skulls of 19 wild boars that were neatly packed and sealed inside a pit within a round building at the Asiab site. Butchery marks on the animals' skulls suggest they were used for feasting, but until now scientists were unsure where these boars came from.