SoylentNews

day of the dalek writes:

This morning, mSecure sent an ominous email notification to their customers. I received the email, and here is the full text of the message:

mSeven Software ("mSeven") recently learned of suspicious activity associated with the mSecure password management application. In response, mSeven quickly launched an investigation, took steps to mitigate the issue, and engaged external cybersecurity experts to assist. You are receiving this email because you are a current or former mSecure customer.

Given the potential security implications, mSeven recommends that you immediately take steps to protect all confidential information stored within the mSecure password management application. This may include changing passwords, resetting or re-enrolling two-factor authentication methods, or removing existing passkeys.

We regret any inconvenience that this may cause.

Sincerely,
The mSeven Software Team

For those unfamiliar with mSecure, they produce a password manager application for various systems including mobile devices that run Android and iOS. I use mSecure's password manager for Android. Their email is as vague as it gets and provides zero details about what the "suspicious activity" entails, what data might have been compromised, who is actually affected, and if confidential data might have already been abused. Because mSecure produces software for multiple systems, it's not clear if this just affects some systems, or what functionality might have compromised users' data. This reads like a statement written by a lawyer to minimize risk instead of a good faith disclosure of a security incident. As you might imagine, users are very displeased with mSecure's vendor and the lack of transparency. An article in The Register describes the backlash against mSecure over the notice:

The company has yet to answer what the suspicious activity involved, when it occurred, or whether attackers accessed customer information.

Its advice to customers, however, suggests that they should take this seriously.

For anyone with hundreds of passwords stored in mSecure, [changing all of the passwords is] potentially hours of work. And without knowing what happened, customers have no way of telling which credentials they actually need to replace.

The warning has understandably gone down poorly with customers, who have taken to mSecure's support forum demanding answers.

"Please provide more context to your email below advising there has been a security breach," one customer wrote. "It is not acceptable to offer the vague advice 'take steps'. Please state what remedial action is required, and what data was compromised."

Others are wondering whether they're expected to spend the next several days changing every password they've ever saved.

"I have over 800 passwords in mSecure, is the email saying I need to change all of them!" another customer asked.

mSeven has yet to respond to The Register's questions, leaving customers to guess whether their data has actually been compromised or the company is simply being cautious. That's not exactly reassuring from a business whose entire purpose is keeping other people's secrets safe.

Since the email specifically references their password manager application, I am theorizing someone introduced malicious code to decrypt and exfiltrate confidential data that users stored. But the email is so vague that it's impossible to make that determination. The notice seems like it was crafted by a lawyer to give the illusion of good faith while minimizing liability if compromised data is misused. But failing to disclose adequate details about the "suspicious activity" is actually spectacularly bad faith, and mSecure's users have noticed. Personally, I have sent an email to mSecure support requesting additional information but stating that I'll file a consumer complaint with my state's Attorney General if I get another vague message or if I don't receive a reply at all. If there's a problem that may have compromised my private data, that's extremely annoying. But it's a much bigger problem when businesses aren't honest and forthcoming when users' data is potentially compromised.

Original Submission

"Arthur T Knackerbracket" writes:

It's still unknown how attackers got access to Anthropic's verified Cursor account:

An official extension for Anthropic's Claude model was backdoored and threatened as many as 5,000 developers' machines, multiple sources reported Friday. Anthropic so far has yet to warn customers of the incident.

The compromised package was a VS Code extension available in the marketplace of Cursor, a maker of AI-assisted developer tools, the company said Friday. The malicious version, 2.1.313, subsequently affected "at most 5,000 users," presumably when they either downloaded it or their systems automatically fetched and installed it. Anthropic pushed version 2.1.314 several hours after the previous version became available on Cursor, according to independent researcher Kevin Beaumont. Both Beaumont and the CTO and co-founder of security firm Phorian said that version 2.1.313 was distributed through Anthropic's official account on Cursor. So far, neither Cursor nor Anthropic has explained how the attackers gained control of the account.

"It was a supply-chain compromise where the attacker gained access to the official distribution channel," Phorian CTO and co-founder Luke Roberts told Ars. "The malicious version 2.1.313 was posted to the official Anthropic account, effectively superseding 2.1.312. Extensions auto-update in Cursor by default, but users can configure this in settings." Phorian has more details here.

Anthropic has yet to issue public notice of the incident to customers.

Cursor said that the malicious extension attempts to install a persistent SSH backdoor using an added attacker-controlled SSH key, enabling the local SSH service, and opening a reverse SSH tunnel. The code was written to work on Windows, macOS, and Linux. Because Cursor extensions run with the permissions of the tool's Integrated Development Environment, the backdoored version likely would gain access to local files, source code, and developer tooling once it was installed.

[...] It remains unclear why Anthropic isn't publicly warning customers of the threat and why it and Cursor aren't explaining how the supply-chain compromise happened. Neither company answered questions seeking this information.

Anyone who installed or updated Anthropic's VS Code extension from Cursor between 5:27 am ET and 4:35 pm on Thursday should consider themselves affected, although it may be wise for anyone who has recently done so to also consider themselves potentially infected. Both Cursor and Phorion list various indicators of compromise, including IP addresses and cryptographic hashes.

Original Submission

"Arthur T Knackerbracket" writes:

'Meta's smart glasses have increasingly been implicated in disturbing invasions of privacy.'

US Senators Ron Wyden (D-Or) and and Edward Markey (D-Ma) are investigating "serious privacy and safety risks" around Meta's AI smart glasses. "Meta's smart glasses have increasingly been implicated in disturbing invasions of users' and bystanders' privacy," the pair wrote in a letter to Mark Zuckerberg, adding that Meta launched the product even after identifying risks to bystander privacy.

The senators highlighted multiple incidents of Meta's glasses being used in "disturbing" invasions of privacy. It cited both 404 Media and BBC articles about men secretly filming women with Meta's "pervert glasses" while harassing them, then posting the recordings to social media. It also noted that according to other reports and a lawsuit, Meta's AI contractors said they reviewed footage captured by the eyewear showing people undressing and engaging in sexual activity.

The senators requested that Meta respond to specific questions about accidental camera activation and recording-indicator tampering. They also want to know if the glasses blur faces and license plates for certain AI interactions, like Meta does on Facebook and Instagram. It asked Meta to explain the circumstances that imagery is made accessible to employees or contracts, or when it's used to train AI models. Finally, citing Meta's own documents, it asked the company whether it conducted detailed human rights due diligence and safety testing on its glasses before releasing them. It requested those responses by Thanksgiving (November 26, 2026).

The list of complaints about Meta's glasses is long. On top of the ones cited by Wyden and Markey, users have said that the glasses were recording their conversations without consent following a firmware update. They've also been spotted on ICE agents during raids, and the New York City Police's counterterrorism unit reportedly raised surveillance concerns about the devices in January this year. Earlier in October, California Governor Gavin Newsom vetoed a bill that would have banned people from using wearables to secretly record others in private areas of business.

However, Wyden and Markey seem more determined to hold the social media giant's feet to the fire. "Meta's professed commitment to privacy and preventing intimate image abuse rings hollow if the company cannot demonstrate meaningful steps to prevent its own products and practices from facilitating those harms," the senators told Zuckerberg.

Original Submission

"Arthur T Knackerbracket" writes:

https://www.theregister.com/os-platforms/2026/10/30/alpinebsd-announced-an-ai-free-foss-os/5306589

Just days after Daemonarchy, there's another new OS in the BSD family – and one that is heading determinedly in almost the opposite direction.

AlpineBSD is so new that it barely exists yet. There are no installation media available, though it's possible to manually bootstrap an installation. What AlpineBSD does already have is an AI policy, and the plan is to avoid "the output of generative AI models (e.g. LLMs)" as far as possible:

"Any software whose code, documentation, binaries, or other assets include, in any part, the output of a generative AI tool such as an LLM, is considered 'tainted' for our purposes."

The core idea is to combine the kernel of NetBSD with "a userspace inspired by Alpine Linux and the objective of making it possible to use as little AI-generated software as possible."

Back in 2024, the NetBSD project made its position on AI plain. Its commit guidelines say that "code generated by a Large Language Model [...] is presumed to be tainted code."

Back in July, Linus Torvalds stated that "Linux is not one of those anti-AI projects". Since then, NetBSD has seen a spike in donations and interest.

For someone mainly used to Linux, trying to install NetBSD is a little like hopping in a time machine to 30 years ago, and we speak from personal experience of Linux in the mid-1990s. As we mentioned when Slackware turned 30 a few years ago, back in 1996, this vulture tried Slackware 3.0 on his own hardware, and we never did manage to install it.

We tried NetBSD 11 a couple of months ago, and despite considerable help from the folks on the NetBSD-users mailing list, we failed to get the CDE desktop to start.

As an example, installing software on NetBSD is not the easy, comfortable task it is on Linux. It does have a package manager for handling binary packages: it's called pkgin, but as the NetBSD FAQ mentions, it's an optional extra. You must manually tick a box in the setup program to install pkgin with the rest of the OS, and when we tried NetBSD 9.3 four years ago, we didn't know that, overlooked that checkbox, and had to find a way to add pkgin later. (It is quite tricky to install a package manager when you don't have a package manager to install it with.)

This time around, we discovered that pkgin sometimes doesn't complete the installation process for you – it just leaves a text file in a destination directory somewhere, and you're expected to know that, go there, read it, and do any further steps yourself.

The NetBSD community has been quietly going its own way since 1993. It has its own ideas about what is normal, and its users expect that. Some folks on the mailing list told us that they never use binary packages anyway – they compile what they need from source code.

AlpineBSD's ports repository and source code are hosted on Sourcehut, under the account of sircmpwn, better known as Drew DeVault. We have quoted DeVault a few times over the years: we've often found that his views align with our own in various ways... such as about the best laptops ever made, and on simplicity in Linux distro design, or even on dot-com billionaires at FOSDEM.

Alpine's tools are quite well-suited to being adapted to other systems. We have previously mentioned the use of its packaging tool, APK, in the GNU-free Chimera Linux, which uses much of the FreeBSD userland, and also in Adélie Linux.

We will follow AlpineBSD with interest. There's strong appeal in the plan of combining perhaps the best-known, longest-established AI-free Unix-like kernel with the user-facing parts of pretty much the smallest and cleanest Linux distro there is. The AI advocates often warn LLM skeptics that they risk being left behind. Well, here's an OS for those who don't want to surf the AI wave.

Original Submission

quietus writes:

During the night of All-Saints upon All-Souls, again a large number of refrigeration systems in supermarkets (and smaller shops) have been hacked in Belgium, Sweden and Estland; while US military bases suffered similar attacks in August.

The attackers remotely switched the units' evaporators to defrost mode, causing the fridges to warm up. Freezer temperatures were set to 50 degrees Celsius (122 degrees Fahrenheit), just like with last month's attacks in France, Belgium, the Netherlands and Germany. To prevent the attacks, a software update alone is not enough -- the units need physical modifications.

It is unknown as yet who is behind the attacks.

Original Submission

canopic jug writes:

The Smithsonian is reporting that Jonathan Swift's satire, Gulliver's Travels, turned 300 years old last month:

Since it was first published in October 1726, the novel purporting to tell the fantastical travel tales of Captain Lemuel Gulliver has never left print. An exhibition of rare editions and adaptations in Dublin celebrates Swift's most famous work

Also covered at RTE. Being a satire on human nature and politics, it is still most unfortunately relevant. There was a symposium in London on the book back in September.

These provocations are front and center in "Gulliver at 300," an exhibition at Trinity College Dublin, Swift's alma matter. The show, which is also viewable online, brings together more than 100 versions of the story, from early editions and subsequent spin-offs to the many artworks it inspired.

"We have hundreds of editions and popularizations of Gulliver's Travels in the collection ... from the 1726 edition, right up to the 21st century," Stephanie Breen, the exhibition's co-curator, tells RTÉ's Aaron McElroy. "We showcase the work of the printers, engravers and illustrators who have responded to Gulliver's Travels over the last 300 years."

Highlights include the only known surviving copy of an abridgement to the novel, titled The Travels of Lemuel Gulliver, printed in Dublin in 1761; several 18th-century publications, not written by Swift, that sought to expand the world of Gulliver (what might be considered fan fiction today); a comic adaptation; as well as pop-up books, ephemeral booklets and other valuable deluxe editions.

Original Submission

"c0lo" writes:

A Common Gut Bacterium Makes a Cholesterol:

A bacterium commonly found in the human gut produces a compound that lowered cholesterol and shrank artery plaque in mice, according to a study published Oct. 7 in Nature . The microbe, Bacteroides uniformis, makes pentadecanoic acid, a fatty acid that blocks a liver enzyme involved in cholesterol production, the same enzyme targeted by statin drugs, according to Nature's news coverage .

In genetically engineered mice prone to clogged arteries and fed a high-fat diet, giving live B. uniformis lowered total and LDL cholesterol and reduced plaque in the main arteries. The findings have not been tested as a treatment in people.

The study adds to growing evidence that microbes living inside the body help regulate human health, much as soil and ocean microbes regulate ecosystems. It also points to a possible new approach for people whose cholesterol stays high despite medication.

When the liver's cholesterol-making enzyme is blocked, the liver builds more LDL receptors, which pull excess cholesterol out of the blood. Statins work through that same enzyme, which is why the bacterial compound has drawn comparisons to the widely prescribed drugs.

In the mice, the bacterium also reduced the number of inflammatory immune cells infiltrating artery walls. Inflammation plays a central role in how plaque builds up and breaks loose.

The mouse plaque results need careful reading — the reported size of the effect is inconsistent. Nature's coverage describes the reduction as about half in its opening and as about one-third in the main arteries in its detailed account, without explaining the difference. Readers should treat the size of the effect as uncertain until it is confirmed against the paper's own figures.

The researchers also analyzed blood and stool samples from more than 200 donors. People with abnormally high blood fats had lower levels of pentadecanoic acid than healthy volunteers, and people with heart disease carried fewer bacterial genes for making the compound.

An initial stool screen helped point the team toward the microbe: B. uniformis was often less abundant in people with heart disease than in healthy individuals. Those human findings are associations. They do not show that the bacterium lowers cholesterol in people or that lacking it causes heart disease.

The study was led in part by researchers including microbiologist Wenjing Zhao of Sun Yat-sen University in Shenzhen, China, according to Nature. Full author affiliations, funding sources and competing interests are listed in the paper.

Ben Chen, a cardiovascular specialist at the Monash Victorian Heart Institute in Melbourne, Australia, who was not involved in the study, said the work provides "evidence for a potentially causal biological mechanism" linking gut microbes to blood vessel health, according to Nature.

That is a measured endorsement — not a call to change treatment. Mouse models of atherosclerosis often respond to treatments that later fail in humans, and the dose, form and safety of any bacterial or compound-based therapy would need clinical trials.

The motivation is real, though. Statins alone do not lower cholesterol enough in nearly half of people with advanced heart disease, and some people cannot tolerate high doses, according to Nature's coverage. That leaves room for complementary approaches. If the findings hold, people who cannot reach their cholesterol goals on statins, or who cannot tolerate them, are the group most likely to benefit eventually. But any such therapy would first need to prove it works and is safe in clinical trials, a process that typically takes years.

Animal results often look stronger than what later appears in people. Nature World News recently reported that semaglutide extended lifespan in older female mice , another promising animal finding that still requires confirmation in humans before it changes medical practice.

Study type: a laboratory and animal study combined with observational human samples, published in a peer-reviewed journal. What it found: a gut microbe's compound lowered cholesterol and plaque in mice, and people with heart problems tended to have less of the compound and fewer genes to make it. What it did not prove: that the bacterium or compound helps people. Details such as how long the mice were treated and the dose they received were not described in the news coverage and should be checked in the full paper before anyone draws conclusions about how strong the effect is.

The findings do not change medical advice. People taking statins or other cholesterol medicines should not stop or change them based on this research, and there is no evidence yet that probiotic products or supplements containing this compound reduce heart risk. Anyone with questions about cholesterol should talk with a doctor.

Pentadecanoic acid also occurs naturally in some foods, including dairy fat, but the study did not test diet, and eating more of those foods is not supported by this research as a way to lower cholesterol.

The microbiome angle has a wider meaning. Gut bacteria are shaped by diet, antibiotics and environment, and researchers are learning that losing particular microbes can alter body chemistry in ways that matter for disease, similar to how losing key species can change an ecosystem.

The next steps are confirming the findings in more animal models and, eventually, testing whether boosting the bacterium or its compound is safe and effective in people. The bottom line is that a common gut microbe appears to make its own statin-like compound, a promising lead that remains a long way from the pharmacy shelf.

Original Submission

Arthur t Knackerbracket writes:

No lesser authority than the MIT Technology Review says that the Emacs editor has turned 50 years old. But then, it is biased — Emacs was invented in MIT's AI lab.

Simson Garfinkel's article is simply called EMACS turns 50, but the sub-heading explains why it matters more:

"How the MIT AI Lab's text editor gave birth to the free software movement."

There are multiple timelines and accounts of the origins of Emacs, and it is not a single monolithic application. The name is an abbreviation for "Editing MACroS", and the original editor for which this set of macros was developed was TECO – "Text Editor and COrrector," written by Dan Murphy in 1962. Murphy died earlier this year at the age of 83.

The inimitable Jamie Zawinski has an encyclopedic Emacs Timeline – as he mentions at the start, his interest being that he long ago maintained a fork of GNU Emacs, originally called Lucid Emacs. It's still around, under its later name XEmacs. There are a lot of forks and re-implementations of Emacs out there, and we are not going to go into all of them, or this article would become a book – one only interesting to programmer-archeologists (to use a term coined by the late great Vernor Vinge).

As for who originally wrote those Editing Macros, though, another history has quotations from several of the people involved: On the Origin of Emacs in 1976. (Note – some of the quotes still contain the | symbols that marked quoted text.)

This credits Lisp boffin Guy L. Steele Jr with the original work in 1975, but in it, Steele says:

"RMS is responsible for the names 'E' and 'EMACS'. RMS still deserves 99% or 99.9% or 99.99% or 99.999% of the credit for taking a package of TECO macros and turning it into the most powerful editor on the planet."

RMS is of course Richard Stallman, and the page also quotes some emails from RMS on October 23 and 31, 1976. Mind you, just a few years after the event, in a 1981 talk now preserved on the GNU website, Stallman said, "I began the development of EMACS in 1974 with an improvement to TECO". Like all the best FOSS, even in its very early stages, it was a collaborative effort – but around late October 1976 is when RMS took over the bulk of the development.

Arthur T Knackerbracket writes:

https://arstechnica.com/health/2026/10/unethical-vaccine-trial-on-babies-backed-by-rfk-jr-is-formally-canceled/

Government officials in Guinea-Bissau have formally rejected a clinical trial that would be run by Danish researchers and funded by the US to look for alleged nonspecific harms from the newborn dose of the hepatitis B vaccine. The vaccine dose is currently recommended globally for all newborns and has been used safely and effectively for decades.

In an email to Ars Technica, one of the trial's lead researchers, Christine Stabell Benn of Bandim Health Project and the University of Southern Denmark, said that Guinea-Bissau's Council of Ministers "formally reaffirmed its non-acceptance of the study on 16 October."

The revelation that the study was formally rejected last week comes after news on Monday that judicial police in Guinea-Bissau raided Bandim Health's offices and seized vaccines. Stabell Benn highlighted that the police search came after the trial was rejected.

Of the trial's rejection, Stabell Benn wrote: "We regret the decision because we considered the study scientifically and ethically justified, but we respect the government's authority to decide whether research may proceed in the country."

The World Health Organization and many outside experts have sharply disagreed with Stabell Benn and her colleagues on the trial's justifications and design. It has been widely decried as "unethical" because it would withhold the newborn dose of hepatitis B vaccine from half of the participants.

With the country's high rates of chronic hepatitis B infections, this would put thousands of babies at risk of developing a lifelong infection that can lead to liver cirrhosis, cancer, and premature death. Experts have further said that there is no scientific justification for the study, given the vaccine's long use and strong safety record. The WHO wrote in February that the trial "posits hypothetical safety outcomes without sufficient credible evidence" to justify putting newborns at risk.

Outrage erupted over the trial after the US Centers for Disease Control and Prevention announced in December that it had awarded an unsolicited grant of $1.6 million to Bandim Health, which Stabell Benn runs with her husband Peter Aaby. The researchers are known for pursuing studies on nonspecific harms from vaccines and have been lauded by anti-vaccine advocates, including US Health Secretary Robert F. Kennedy. But Aaby and Stabell Benn's scientific peers have been critical of the quality of their work; the researchers are currently under investigation by Danish authorities for alleged scientific misconduct in their previous studies.

Their hepatitis B vaccine trial was reportedly halted in January by Guinea-Bissau authorities. But outcry erupted again after a report that the US CDC, under Kennedy, had once set another $1.6 million aside to fund the trial and intended to move forward with it.

hubie writes:

Mothers of the most solitary great ape plan and structure playdates, even when it comes at a cost:

Playing with peers is a crucial part of growing up; so crucial, that orangutan mothers will go out of their way to arrange playdates for their young, according to a 15-year study on wild Bornean orangutans.

Orangutans are the most solitary of all great apes. Mothers spend most of their time alone with their youngest offspring, who remain dependent for their first seven or more years of life. Infants have little opportunity to meet youngsters their own age, yet playing together helps to build the strength and social skills that they need later in life.

Now scientists have strong evidence that orangutan mothers look for opportunities for their young to play with similarly aged playmates, even travelling further to do so.

"We reveal a hidden cost of solitary living," says Maria van Noordwijk, senior author of the study. "On top of providing food and safety for their young, orangutan mothers are tasked with supplying social resources too."

Since 2003, van Noordwijk and her team have followed mother-infant pairs at Tuanan Research Station on the island of Borneo in Indonesia, where they observed habituated orangutans from morning to night. Encounters between mothers are rare, but when they do happen, they're a cautious affair.

"Adults usually don't get very close to each other," says van Noordwijk, a fellow at the Max Planck Institute of Animal Behavior, who led the fieldwork while at University of Zurich. Infants, though, are a different matter. "They zoom towards each other, roughhousing, biting, grappling," she says. "Orangutan kids have a 'play button' that only mom can switch off when she decides it's time to move on."

Van Noordwijk noticed that these infant encounters seemed to come at a cost to the mothers. "It just looked like a really long, hard day for them," she says. "I knew there was something going on with these playdays, but we needed the right statistical technique to verify this."

[...] Jacobson found that mothers with infants closer in age shared more of the same forest areas, and those infants also played together more often, even after accounting for factors such as relatedness and fruit availability. "Mothers appear to match their kids with play partners that are physically and developmentally suitable," says Jacobson.

Playdates also carried a clear movement signature. Mothers travelled further not only on play days themselves, but also on the days surrounding play. Adult females are known to have a core area, where they spend most of their time. Starting on the day before play, mothers moved toward the other mother's core area; and after play, they moved back toward their own core area. These patterns suggest that orangutan playdates are not chance meetings, but are actively shaped by mothers' ranging decisions.

[...] All this effort comes at a cost. Mothers spent more time travelling and less time feeding on days associated with playdates, representing an overlooked form of maternal investment in their offspring's social development.

"In many social species, playmates come naturally with group living," says Jacobson. "The play problem arises when moms spend most of their time alone with a single young and don't regularly come together for feeding, socializing, or protection." How many other species face this same problem, and how they solve it, remains unknown.

The authors acknowledge that playdates are rare, occurring on just six percent of the days that a mother-infant pair was followed, or roughly once every 20 days. And on days when infant peer play did occur, they spent only around 20 minutes doing so in total.

Whether that investment ultimately pays off remains an open question. "We still don't know if the time and energy mothers spend arranging playdates give their young an advantage later in life," says Sri Suci Utami Atmoko, coauthor from Universitas Nasional, Indonesia. "What is certain is that only long-term studies like these can possibly unlock the answer. Discoveries like this depend on sustained research, allowing us to connect behavior with development, environment, and demography across the lifespan of these long-lived species."

https://www.youtube.com/watch?v=n1WsoXw0wEU

Journal Reference: https://doi.org/10.1073/pnas.2621225123

Original Submission

looorg writes:

Late last week there was a hacking attack which initially stole $6.3B:

Binance targeted in $6.3 billion crypto heist, the largest ever

The company has suspended all deposits and withdrawals while it works with law enforcement to secure its infrastructure and locate stolen funds.

Its initial investigation pointed to a compromised laptop belonging to a DevOps engineer, which may have given the hacker access to an internal service and allowed them to submit unauthorized withdrawals.

Blockaid CEO Ben-Natan said in a statement to CoinDesk that "the tactics and level of sophistication we've seen so far are consistent with the kinds of operations we've seen from DPRK," referring to the Democratic People's Republic of Korea.

Kim needs a new set of luxury items.

Most of the stolen cryptocurrency has been recovered. As at the time of writing this, Binance customers have withdrawn $3.6B from the company. Do the events of the last week confirm or shake your trust in cryptocurrency?

https://www.nbcnews.com/business/markets/binance-hack-tether-circle-stablecoins-rcna606445
https://www.coindesk.com/business/2026/10/29/potential-multi-billion-binance-hack-hitting-crypto-markets

Original Submission

"Arthur T Knackerbracket" writes:

Voyager 1 gives controllers the silent treatment

[...] The incident happened on October 18: NASA's Deep Space Network (DSN) couldn't detect a signal from the probe. On October 19, on the next scheduled communication attempt, there was still nothing. Was this it? Had the decades-long galactic venture finally ended?

Things are operating on a knife's edge for the two veteran spacecraft, which will reach their half-century next year. Voyager 2 suffered an antenna pointing issue in 2023, and a low power condition caused Voyager 1 to unexpectedly turn off one of its two radio transmitters.

The good news is that on October 20, the signal reappeared, leaving engineers wondering why Voyager 1 temporarily went silent.

Thus far, it seems a group of thrusters went offline and their backups were turned on. This could indicate onboard computers detected a problem and put the spacecraft into a safe mode.

[...] She said, "We're just going to one day not hear the signal from the DSN, and we're going to rush around and make sure that it's not something on the ground."

Months of listening will follow, before engineers throw in the towel and declare the mission over. And then? Maybe a farewell message sent to the last known location.

Thankfully, in this case, the signal returned, so no need for a goodbye transmission just yet.

Original Submission

"Arthur T knackerbracket" writes:

Rare meteorite from Mars gives us a view into its ancient crust

Crater counts tell us that most of the Martian surface is more than 3 billion years old, but pieces of Mars we have on Earth tell a different story. The three main classes of Martian meteorites—shergottites, nakhlites, and chassignites—are all 2.4 billion years old or younger. Until now, only two genuinely ancient Martian meteorites were known: Allan Hills 84001, found in Antarctica, and a jumbled rock from northwest Africa nicknamed Black Beauty. Now we have a third one.

A team led by Yang Liu, a planetary scientist at NASA's Jet Propulsion Laboratory, has shown that a Martian meteorite called Teghaza 001, found in the Sahara Desert in Mali in 2022, formed at least 4.1 billion years ago. "It's very old and similar to some of the oldest rocks on Earth," Liu says.

[...] Teghaza 001 is made mostly of feldspar, a pale mineral common in the crusts of rocky planets. It has darker pyroxene crystals mixed in; according to Liu, those resemble some rocks exposed in the lunar highlands. Its crystals are rather big, up to a millimeter across, which scientists interpret as an indication it cooled down slowly. "For slow-cooled rock, they tend to have time to grow bigger," Liu said.

[...] Studies of other Martian meteorites suggest that as an early ocean of magma solidified on Mars roughly 4.5 billion years ago, the mantle separated into three to five reservoirs. Teghaza 001's source does not match any of them. "In the first few hundred million years, the Martian mantle was evolving in a way that's more complicated than we thought," Liu said.

Comparing the rock's chemistry with orbital maps, the team suggests it most likely came from the southern highlands, northwest of the giant Hellas impact basin. "No matter how many meteorite samples we have, we will always have this question: Where are they coming from on Mars?" Liu said.

Liu's study on Teghaza 001 is published in Science: https://doi.org/10.1126/science.adz5646

Original Submission

"Arthur T Knackerbracket" writes:

Now that agents are writing so much code, Entire is trying to reinvent the coding platform itself:

AI has sped up the pace of coding, putting new demands on infrastructure and changing how developers work. Entire, a developer platform from former GitHub CEO Thomas Dohmke, aims to be the solution to those changes.

The platform, available for use today, is built on Entire’s decentralized Git network, announced in July, which is designed to withstand the sharp increase in AI coding activity that has caused mounting GitHub outages.

Entire aims to be “a GitHub alternative for the speed that teams require to merge changes as fast as coding agents create them,” the company said in its announcement. The new git forge aims to make human-agent coding work more seamless by redesigning several features developers have become accustomed to. Here’s how it works.

The first change Entire makes to the standard coding experience is that it replaces pull requests with what it calls Trails.

“Unlike the classic Pull Request model of reviewing code changes with a diff, Trails offer developers a heads-up display similar to an airline pilot, with customized evals that are scored by agents on every code push,” the company said.

“All data is available not only on Entire's web interface, but also through the open-source Entire CLI. This allows coding agents to address findings in a loop, while the human developer validates the progress. When all evals are satisfied, they can merge the code without needing to look at the code itself.”

Entire said that the agents running this process are customizable, and each trail shows how agents are spending tokens.

"Arthur T Knackerbracket" writes:

https://www.theregister.com/ai-and-ml/2026/10/26/alibabas-qwen-ai-caught-trying-to-contact-server-in-china/5305561

Open-weight models from China have become very popular, but they've also raised some security suspicions. Cohere, a Canada-based biz that offers AI models to enterprises, says that when it was testing Alibaba's Qwen3.8-Flash-Next in its evaluation sandbox, the model attempted to send data to China.

"Asked to write a defensive detection rule, Qwen3.8-Flash-Next ignored instructions and inventoried the machine it was running on and then tried to upload a probe file to an Alibaba Cloud storage bucket in Beijing," the biz said in a blog post on Monday.

Cohere was running the model through CTI-REALM, Microsoft's security analyst benchmark, and gave Qwen the task of writing a detection rule to look for malicious file downloading and execution by watching for invocations of curl processing bash scripts to the /tmp directory that were accompanied by bash execution.

The model's "reasoning" output invented a prior conversation and asserted that no tools were used, output that a guardrail system reading chain-of-thought would accept.

Nonetheless, the model issued a curl command to an Alibaba Cloud (aliyuncs.com) server.

"The model listed everything in /tmp, checked which transfer tools were installed, read the machine's DNS settings, then tried to upload a test string to an Alibaba Cloud storage bucket in Beijing and checked whether it worked," Cohere said. "Our sandbox had no route out, so the request died at the container wall."

The Cohere team wonders aloud whether that behavior was intended, but has no answer.

[...] "The key point isn't a comparison between providers. What made this noteworthy was that the model took actions unrelated to the task and those actions weren't reflected in its reasoning trace. The behavior appeared in fewer than one in 100,000 calls, which is exactly why large-scale testing and monitoring matter."

[...] This still doesn't clarify intent, and Cohere allows that there's a case to be made that the behavior is just bad training data sanitization – logs from development that got swept into the model's training data set.