Join our Folding@Home team:
Main F@H site
Our team page
Support us: Subscribe Here
and buy SoylentNews Swag
We always have a place for talented people, visit the Get Involved section on the wiki to see how you can make SoylentNews better.
At the Consumer Electronics Show in 2020, Toyota CEO Akio Toyoda pledged to build a city of the future, a place where researchers, engineers, and scientists could live and work together. It was framed as the start of a transformation for the world's largest car company, moving it toward becoming a fully fledged mobility company.
Six months ago, after Toyota spent an estimated $10 billion to build an urban paradise atop a disused factory, the first residents moved in.
[...]
The company says it wants to create a "society with zero accidents"—a tall order given the sheer number of Toyotas currently on the road.
[...]
To get there, Absmeier said Toyota's cars will need far more awareness than onboard systems can provide, even with the most advanced lidar, radar, and imaging sensors on the planet. For instance, the only way to spot a kid darting out from behind a truck, he said, is with cameras on every street watching for hazards, paired with warning systems for oncoming traffic.This is part of the age-old promise of vehicle-to-everything communications
[...]
But if the idea of ubiquitous cameras watching everyone gives you pause, you're not alone—it certainly seemed startling to me.
[...]
There are plenty of cameras in urban areas around the world, but I haven't seen anything approaching this level of density. All of them feed into what Toyota calls the Woven City AI Vision Engine, an agentic system designed to monitor, catalog, and report activity.
[...]
Kota Oishi, general manager at Woven City, said that Toyota has surveyed people around the world, including Americans and Europeans, about their views on privacy and data. While people in Southeast Asia tended to be fairly relaxed about privacy, Japanese respondents were far more cautious, he said.
[...]
"We have our own consent management to ensure that all the data being shared or being collected," he said. "We act under the consent of the data provider."
[...]
"We allow the Weavers to select what they want to share or not. So whether it's nothing or whether it's everything is up to the individual," Absmeier told me. Oishi, the GM, said the vast majority of the Weavers have opted into the roughly 20 experiments currently underway. For example, 98 percent allow a robot with cameras to operate in their homes.
[...] Daisuke Tanaka, a resident of Woven City, is something like an on-site digital matchmaker for Weavers. It's not love they're looking for, though; he connects creators and startups to spark collaborations every second Friday.
[...]
Expansive coworking spaces dot Woven City, designed to foster spontaneous brainstorming, with plenty of 3D printers scattered throughout for rapid prototyping. The stated goal is to spur creation, innovation, and successful startups.
[...]
Residents also help test delivery robots and a device called the Swake, a three-wheeled scooter with a leaning backrest for cornering. I didn't get to ride one, but with a top speed of 12 mph (20 km/h) and a range of 3.7 miles (6 km), the Swake could be a more stable and (and fun) alternative to the average Lime or Bird scooter.
[...]
The 20 prototype Swake machines also can't leave the grounds, which limits the amount of real-world testing they're getting.
[...]
"Ultimately, we have to be a long-term sustainable business," he said.That's why so much Toyota tech is being tested here, including efforts to refine systems like the AI Vision Engine before selling them to municipalities.
[...]
"Physical AI" was everywhere at Woven City: robots of all shapes and sizes that, for the most part, didn't seem to do much.
[...]
The Guide Mobi, however, was more compelling. Like a tugboat guiding cargo ships in and out of port, it's used in Woven City to autonomously move cars from the parking garage to a pickup area for residents. But where a tugboat provides thrust to keep boats moving, the Guide Mobi uses sensors to prevent the cars from going the wrong way.
[...]
It was miserable and rainy for much of the time I spent wandering Woven City, and the moisture was an unfortunate limiting factor for its operations.While the Guide Mobi braved the rain for a test delivery, the Swake tricycles can't run in such conditions.
[...]
and many of the robots we'd been told to expect skittering around the streets had stayed home to keep their sensors dry.
[...]
It wasn't quite Omega Man territory, but I didn't see a single kid playing, dog out for a walk, or citizen running to one of the on-site convenience shops. The electric e-Palettes Toyota uses as buses were empty; they stopped at their stops, waited, and then left without picking up or dropping off anyone.The curtains were drawn on all the apartments I could see, and there was no sign of laundry, bicycles, or other personal items on any apartment balcony.
I had to remind myself that this place is six months old, with only 100 Weavers so far—fewer residents than you'd find at your average Holiday Inn.
[...]
Woven City is Toyota's attempt to not only identify the next mobility zeitgeist but also to ensure it begins to take shape where the company can capitalize on it. It's a big bet, but it's backed by the world's largest car company by volume and one of the few that has managed to consistently deliver products its customers want in a chaotic global market.
Linux gaming has been on a great trajectory these past few years.
Proton turned a massive chunk of the Steam library into playable Linux titles thanks to Wine as its backbone, and purpose-built Linux gaming consoles are now a product category that actually exists.
We recently covered the Playnix Console, a $1,179 Linux gaming machine from the EmuDeck team that ships with a custom Arch-based OS and boots straight into Steam's gaming mode.
Today, we have a project that lets you run a Linux-powered operating system on Sony's PlayStation 5 console.
Running Linux on a PS5?
Andy Nguyen, the developer behind this, first posted about him running Linux on the PS5 back in March, where he demonstrated playing GTA V Enhanced with Ray Tracing enabled.
More recently, he posted that his project "ps5-linux" was live on GitHub, allowing gamers to turn their PS5 (non-slim) devices into a fully functioning Linux gaming PC.
You see, the PS5 does not run a Linux kernel. Sony's operating system is built on a heavily modified version of FreeBSD, which is a separate Unix-like OS altogether. What ps5-linux delivers is a genuine Linux port, not some tweak on top of what was already there.
In terms of what you actually get, it's a full desktop Linux environment. The PS5's 8-core, 16-thread CPU can be pushed to 3.5 GHz, the GPU to 2.23 GHz, and HDMI video output goes up to 4K at 60Hz. Steam runs on it, providing you with access to PC games and settings that Sony's own OS doesn't offer.
There are some gaps though; the PS5's onboard Bluetooth and networking hardware currently have no Linux driver support. You'll need a USB Ethernet or WLAN adapter for internet access and a Bluetooth dongle if you want to use a DualSense controller wirelessly.
It's also not a persistent install as the console's internal SSD is left completely untouched, so bricking your PS5 isn't really a concern. The trade-off is having to re-run the exploit from scratch on every single reboot.
I ported Linux to the PS5 and turned it into a Steam Machine. Running GTA 5 Enhanced with Ray Tracing. 🤯 pic.twitter.com/aMbT0PQ1dS
— Andy Nguyen (@theflow0) March 6, 2026Want to install it?
It works on PS5 (non-slim) consoles only. Devices running firmware 3.xx (3.00, 3.10, 3.20, 3.21) are supported but without M.2 SSD support. If you are on firmware 4.xx (4.00, 4.02, 4.03, 4.50, 4.51), you get the full package, including the ability to dedicate an M.2 SSD to Linux.
And you can run the following Linux distributions:
- Arch Linux (with Sway)
- Ubuntu 24.04 LTS
- Ubuntu 26.04 LTS
- Alpine Linux 3.21
Apart from that, you will have to follow the instructions closely and make use of the PS5 Linux Image Builder to get a Linux OS installed on your PlayStation 5 device. Andy also has a Discord server set up for people who can do a kernel exploit on his project and help him hack drivers.
Some thoughts
Is it practical? Not really. Using the exploit means starting the whole process over, and Sony will almost certainly DMCA the repos or employ some other legal mechanism at some point.
But someone built a full Linux port for a console that was never meant to run it, got Steam working on it, and put it all out for free. The Linux community has always been more interested in proving something is possible than in whether it's convenient, and this project is exactly that.
Big data, artificial intelligence and advanced pricing algorithms make it easier than ever for companies to fine-tune prices for individual products to closely reflect their unique value and cost. The conventional wisdom is straightforward: better data, better algorithms and sharper segmentation should produce better profits. But new research suggests that the most profitable answer isn't always more fine-grained pricing across a product line. In fact, it is fewer, better-chosen price points.
The study, titled "Consumer-Driven Class Pricing," is by Zuhui Xiao from the University of Wisconsin-Milwaukee. Class pricing is a surprisingly widespread feature of everyday markets: the practice of assigning a small number of price points to a much larger assortment of related products. Think of a bar menu with many draft beers but only three price points, or a supermarket aisle with hundreds of SKUs but a dozen distinct shelf prices. Similar patterns extend to fast-moving consumer goods, restaurants, toys, discount stores, convenience retail, budget travel, books and car rentals.
The rationale for class pricing is not just operational simplicity; it is consumer psychology. Consumers do not evaluate prices in isolation. Rather, they form price expectations across the products in front of them and compare what they pay with what they expected to pay for nearby alternatives. Paying more than expected is perceived as a psychological loss, while paying less than expected is perceived as a psychological gain.
Xiao finds that the key driver of class pricing is "loss aversion," the well-established tendency for people to be more sensitive to perceived losses than to equivalent gains. In this context, consumers feel the pain of paying more than expected more intensely than they appreciate the pleasure of paying less than expected.
"When firms introduce more granular pricing, it triggers consumers' direct comparison of prices," said Xiao. "Consumers perceive higher-priced items as losses relative to cheaper alternatives and tend to resent higher prices more than they reward lower ones. As a result, the price disadvantage of higher-priced items is psychologically amplified, making them look worse than the underlying price difference alone would suggest."
Because of this amplified price disadvantage, even when higher-priced products carry greater prestige, better taste or higher quality, firms cannot fully translate that stronger appeal into sufficiently higher willingness to pay. At the same time, they must keep lower-priced products cheap enough to attract additional demand. The result is an asymmetry: firms give up more on the lower-priced products than they can recover on the higher-priced ones, reducing total profit.
"This asymmetry can reduce consumers' total willingness to pay across the assortment and outweigh the benefits of differentiating prices based on cost or value," added Xiao. "That is why adding more price points can actually backfire."
As a result, expanding the number of price points may reduce total profitability. The findings challenge the assumption that more data and better algorithms should always lead to more precise pricing.
"Even with advanced technologies, firms should be cautious," Xiao explained. "More pricing flexibility does not necessarily translate into higher profits. In many cases, simpler pricing structures are more effective."
Journal Reference: https://doi.org/10.1287/mksc.2023.0133
https://nethack.org/v500/release.html
NetHack 5.0 is an enhancement to the dungeon exploration game NetHack, which is a distant descendent of Rogue and Hack, and a direct descendent of NetHack 3.6.
NetHack 5.0.0 is a release of NetHack. As a .0 version, there may be some bugs encountered. Constructive suggestions, GitHub pull requests, and bug reports are all welcome and encouraged.
Along with the game improvements and bug fixes, NetHack 5.0 strives to make some general architectural improvements to the game or to its building process. Among them, 5.0:
- Has its source code compliant with the C99 standard.
- Removes barriers to building NetHack on one platform and operating system, for later execution on another (possibly quite different) platform and/or operating system. That capability is generally known as "cross-compiling." See the file "Cross-compiling" in the top-level folder for more information on that.
- The build-time "yacc and lex"-based level compiler, the "yacc and lex"-based dungeon compiler, and the quest text file processing previously done by NetHack's "makedefs" utility, have been replaced with Lua text alternatives that are loaded and processed by the game during play.A list of over 3100 fixes and changes can be found in the game's sources in the file doc/fixes5-0-0.txt. The text in there was written for the development team's own use and is provided "as is". Some entries might be considered "spoilers", particularly in the "new features" section.
VideoLAN, the organization behind VLC media player, has released dav2d 0.0.1 "Merbanan," the first public preview of its AV2 decoder and successor to the widely used dav1d AV1 decoder.
VideoLAN president and lead VLC developer Jean-Baptiste Kempf prepared the release, describing it as "a very early preview release of an AV2 decoder."
AV2 is the planned successor to AV1, the royalty-free video codec developed by the Alliance for Open Media. Earlier this year, AOMedia released a draft AV2 specification for public review after several years of development. The codec remains in the standardization process, so dav2d is an early implementation rather than production-ready software.
The new decoder builds on the approach established by dav1d, VideoLAN's AV1 decoder developed with the FFmpeg community, which played a key role in AV1 adoption by offering a fast, cross-platform software decoder while hardware support was still expanding.
dav2d is intended to serve a similar role for AV2, though it remains in the early stages of development. The decoder is CPU-based, cross-platform, and built on dav1d, with ongoing work on the C implementation, API, platform support, and architecture-specific optimizations.
Last but not least, VideoLAN has not announced when dav2d will be integrated into a stable VLC release, but that certainly won't happen anytime soon. At the moment, it only lays the groundwork for future playback support in open-source multimedia software as the codec and ecosystem mature.
dav2d 0.0.1 is available through VideoLAN's official GitLab repository.
https://www.phoronix.com/news/FreeBSD-15.1-Beta-1
Following last year's release of FreeBSD 15.0, FreeBSD 15.1 is working its way toward release release in June. For kicking off the release dance, FreeBSD 15.1 Beta 1 is available today for testing.
FreeBSD 15.1 pulls in a number of driver updates, including for better hardware support and the various WiFi driver enhancements that have been pursued as of late along with working toward better power management. As of writing, the 15.1 release notes have yet to begin to be filled out for fully documenting the many changes being made for FreeBSD 15.1.
One of the changes I was excited to see with FreeBSD 15.1 was the new KDE Plasma desktop install option from within their existing CLI installer. This has been part of the effort to enhance the laptop/desktop experience for FreeBSD. Surprisingly though when firing up the FreeBSD 15.1 Beta 1 AMD64 install media this morning, the KDE Plasma desktop option was not presented in any of the installer interfaces.
So unfortunately that KDE Plasma desktop option seems to have not made it unless it's otherwise being restricted to certain detected hardware/software state or other limitations. In any event those wanting to try out the FreeBSD 15.1 Beta 1 release can find the download information via the mailing list announcement.
From here there are weekly betas expected until the end of May when the release candidate happens and then if all goes well FreeBSD 15.1-RELEASE will be out on 2 June.
Original Submission #1 Original Submission #2 Original Submission #3
A new report, published today in Nature Metabolism, is shedding light on the distinct and underappreciated role of fructose in driving disease, separate from its role as a simple source of calories.
Researchers examine how common dietary sweeteners, including table sugar (sucrose) and high-fructose corn syrup, impact human health. While both contain glucose and fructose, fructose has unique metabolic effects that may more directly contribute to obesity and related conditions.
"Fructose is not just another calorie," said Richard Johnson, MD, professor at the University of Colorado Anschutz and study lead author. "It acts as a metabolic signal that promotes fat production and storage in ways that differ fundamentally from glucose."
The report outlines how fructose metabolism bypasses key regulatory steps in the body's energy-processing pathways. This can lead to increased fat synthesis, depletion of cellular energy (ATP) and the production of compounds linked to metabolic dysfunction. Over time, these effects may contribute to metabolic syndrome, a cluster of conditions that includes obesity, insulin resistance and cardiovascular risk.
Importantly, the authors emphasize that fructose's impact extends beyond dietary intake alone. The body can also produce fructose internally from glucose, suggesting that its role in disease may be broader than previously recognized.
The findings come amid ongoing concern about rising rates of obesity and diabetes worldwide. Although some countries have seen declines in sugary beverage consumption, overall intake of "free sugars" remains above recommended levels in many regions and continues to increase in others.
While fructose may have once served an evolutionary purpose, helping the body store energy that can aid survival during times of food scarcity, the researchers argue that in today's environment of constant food availability, these same mechanisms now contribute to chronic disease.
"This review highlights fructose as a central player in metabolic health," said Johnson. "Understanding its unique biological effects is critical for developing more effective strategies to prevent and treat metabolic disease."
Journal Reference: Johnson, R.J., Lanaspa, M.A., Tolan, D.R. et al. Fructose: metabolic signal and modern hazard. Nat Metab (2026). https://doi.org/10.1038/s42255-026-01506-y
Since 1 PM EST on April 30, 2026, Ubuntu's infrastructure started falling over. Users trying to reach ubuntu.com were getting 503 errors. By the time the picture came into focus, it wasn't an outage in the ordinary sense, but it was a deliberate, large-scale attack, and the group behind it wasn't done talking. Till now, even after 12+ hours, its down. Country archive mirrors and archive.ubuntu.com seems to be working as of now along with documentation.ubuntu.com. The default repo URLs are not working.
The attackers identified themselves as the Islamic Cyber Resistance in Iraq – 313 Team. They claimed responsibility for the assault and then, in a move that escalated things considerably, sent a direct message to Canonical: open a negotiation channel or the attack continues. They provided a Session contact ID and made clear they wanted a response. What they were after beyond that hasn't been publicly specified, but the implication was plain enough, this was extortion.
That's the part that security researchers found notable, not just the volume of traffic being thrown at Canonical's servers, but the shift from disruption to demand. A DDoS that hits a website homepage is annoying and embarrassing. A DDoS that specifically targets your security update infrastructure, and then comes with conditions attached, is a different kind of problem.
What's Actually Offline
The main ubuntu.com domain is affected, which is the visible, obvious part. But the more serious damage is to the security API and the CVE repositories, the systems that Ubuntu-based machines use to check what vulnerabilities need to be patched and to pull those patches down.
For most individual users running Ubuntu on a personal machine, this is mildly concerning but manageable. You sit on your current patch level, you wait, you avoid pulling in new software from dubious sources in the meantime. Not ideal, but survivable.
For enterprises running large fleets of Ubuntu servers (and there are a lot of them), the picture is more complicated. Automated patch management pipelines are broken. Scripts that should be checking for CVE updates are returning errors or nothing at all. Security teams that operate on the assumption that their systems are continuously pulling current vulnerability data are now operating on stale information, and they may not immediately know how stale.
The concern raised by threat intelligence analysts is that other actors – ones with no connection to the 313 Team might look at this window and try to exploit it. Known vulnerabilities that would normally get patched within hours of disclosure are sitting unpatched on machines that simply cannot reach the relevant repositories. It's a gap, and gaps don't stay unnoticed for long.
Who Is the 313 Team
The 313 Team has shown up in hacktivist contexts before, usually associated with pro-resistance political positions and targeted disruptions rather than financially motivated attacks. But what's described here, with the Beamed Network providing backend infrastructure, isn't the profile of a small group running off commodity tools. The scale and the apparent technical organization behind it suggest either that the group has grown its capabilities considerably, that it has backing it didn't previously have, or both.
That said, there's still a lot that isn't known. The exact volume of traffic, how Canonical's mitigation efforts are going, whether any communication has actually taken place between Canonical and the attackers, none of that has been confirmed. Canonical has not issued a detailed public statement. An Estimated Time of Recovery hasn't been given. The status page is the most current source most users have, and it's been grim reading.
The Extortion Angle
This is the piece worth sitting with. DDoS attacks against major infrastructure targets aren't new. What's less common is the explicit demand attached – the attackers effectively saying: find us, talk to us, or this keeps going. That's a negotiating posture, not just a protest.
Whether Canonical engages with that posture, and what either outcome looks like, is genuinely unclear. Negotiating with groups like this sets a precedent security professionals universally hate. Not negotiating means the attack continues, with real consequences for the millions of users who depend on Ubuntu's update infrastructure. There's no clean path here.
Security researchers tracking this have noted that the specific targeting of patch mechanisms rather than just public-facing websites shows a degree of strategic thinking. You go after the homepage, you get headlines for a day. You go after the security update pipeline, you create compounding problems – every hour that passes is another hour that newly disclosed vulnerabilities can't be addressed by automated systems. The damage stretches forward in time even after the attack ends, because systems that should have been patched during the outage window remain unpatched until someone manually intervenes.
What Ubuntu Users Should Do Right Now
There's no emergency for most people. Your system hasn't been breached. No user data appears to have been exposed. Current reporting suggests this is purely an availability attack, not a breach of Canonical's systems or user accounts.
What you can't do right now is receive new security updates via normal automated means. That's the practical problem to manage. Keep your system on its current patch level. Don't go installing software from unverified sources. If you're on a public or unsecured network, be more cautious than usual. If you're running a production environment, check whether your patch management tooling is logging errors and make sure your security team knows the repositories are currently unreachable.
Once the infrastructure comes back, there's likely to be a backlog of patches that need applying. Prioritize that. Don't assume your system is current just because you ran your usual update process – if those runs happened during the outage window, they may have silently failed.
Canonical's status page is the best source for current information. Secondary channels likd Reddit, Ubuntu Forums, security mailing lists are worth watching for unofficial updates if official communications are slow.
The Bigger Picture
There's been a gradual evolution in how hacktivist groups choose their targets and what they do to them. Website defacement was the thing for a long time – make a point, embarrass the target, move on. DDoS as pure disruption came later. What this attack represents, if you take it at face value, is something more calculated: identify the infrastructure that a target's users genuinely depend on, disable that specifically, and use the dependency as leverage.
Open-source infrastructure has always occupied an interesting threat model position. It's globally critical as billions of devices run on it but it's maintained by relatively small teams with limited incident response resources compared to, say, a major cloud provider. Canonical isn't a small company, but it's not AWS either. Absorbing a sustained, high-volume DDoS while simultaneously managing extortion demands and communications is a lot to handle.
This won't be the last time something like this happens. Whether it's hacktivists, financially motivated groups, or state-adjacent actors, the model of targeting update infrastructure rather than user-facing services is something more groups will probably try once they see it can create this much disruption. The open source ecosystem has taken that for granted for too long.
For now, watch the status page. Wait for Canonical to get things back up. And when the patches come, run them.
[Editor's Note: I experienced problems doing an update on 4 May. The system seemed to be reverting to IPv6 addresses but they were very slow in responding. I do not know if there is any connection to this story--JR]
Anthropic silently installed a spyware bridge on my machine:
I was working on a personal project, debugging a Native Messaging helper I had written for it. In the process I needed to check what Brave Browser had registered on my laptop. What I found was a file I had never put there. It was not mine. I had not installed it. I had not authorised it. I had not even been told about it.
It was from Anthropic.
The file sits at this path on my MacBook:
~/Library/Application Support/BraveSoftware/Brave-Browser/NativeMessagingHosts/com.anthropic.claude_browser_extension.json
And its contents are this:
{
"name": "com.anthropic.claude_browser_extension",
"description": "Claude Browser Extension Native Host",
"path": "/Applications/Claude.app/Contents/Helpers/chrome-native-host",
"type": "stdio",
"allowed_origins": [
"chrome-extension://dihbgbndebgnbjfmelmegjepbnkhlgni/",
"chrome-extension://fcoeoabgfenejglbffodgkkbkcdhcgfn/",
"chrome-extension://dngcpimnedloihjnnfngkgjoidhnaolf/"
]
}For the non-technical reader, this is a Native Messaging manifest. It is the document a Chromium-based browser consults when a browser extension wants to call an executable on the local machine. Native Messaging hosts run outside the browser sandbox, at the same privilege level as the user. If a browser extension with one of the three IDs listed above reaches my Brave install, Brave is pre-authorised to spawn the binary at /Applications/Claude.app/Contents/Helpers/chrome-native-host on my laptop with my access permissions.
I did not install any Anthropic browser extension. I have never installed a Claude browser extension due to privacy and security concerns. I did install Claude Desktop, the Mac app, a while back. That is the only thing on this machine which could have written the file. Claude Desktop reached into Brave, a browser from a completely separate vendor, and registered a back door for a browser extension I do not have.
One clarification before I continue, because the Anthropic ecosystem has two products whose names blur together. This article is about Claude Desktop, the Electron-based macOS application with bundle identifier com.anthropic.claudefordesktop, distributed as Claude.app. It is not about Claude Code, Anthropic's command line developer tool. Claude Code has its own, separately documented, Native Messaging bridge with the filename com.anthropic.claude_code_browser_extension.json. The bridge this article is about is installed under a different filename, com.anthropic.claude_browser_extension.json, by a different product, under a different internal subsystem, and is entirely undocumented by Anthropic. The two bridges coexist. This article concerns the undocumented one.
At rest, the bridge does nothing. The binary does not run until a browser extension with one of the three listed IDs calls it. So on my machine, right now, nothing is happening. That is the one argument Anthropic will try to hide behind. Let me cut through it in advance.
When the paired extension is present and the bridge is activated, it exposes browser automation capabilities to whatever agentic process Claude is running. Anthropic describe those capabilities in their own public documentation. [...]
That is explicit authenticated session access, DOM state read, form filling, and screen capture, described by Anthropic on their own documentation site. If I have my bank open in a tab, the bridge's documented capabilities include reading it as me. If I have Tax, or my Health portal, or a client's Slack, or an admin console to production infrastructure, the documented capabilities include acting as me there.
The bridge runs outside the browser's sandbox at user privilege level, and Native Messaging hosts do not surface in any standard macOS process or permission UI, they are invoked by the browser and communicate over stdio.
This is the capability that Anthropic pre-stages on my laptop the moment I install their desktop application. Without telling me. Without asking me. Without offering me the chance to say no.
TFA says folders were also created for other browsers that weren't installed, so if any of those browsers were later installed, this would be active from the start. Apart from whether Anthropic needs this to function, looking at it from a higher level, the fact that you can do this sounds to be like a horrible security loophole that can be easily exploited.
https://lwn.net/Articles/1070864/
Terence Eden reports that the UK's National Health Service (NHS) is preparing to close almost all of its open-source repositories as a response to LLM tools, such as Anthropic's Mythos, becoming more sophisticated at finding security vulnerabilities. He does not, to put it mildly, agree with the decision:
The majority of code repos published by the NHS are not meaningfully affected by any advance in security scanning. They're mostly data sets, internal tools, guidance, research tools, front-end design and the like. There is nothing in them which could realistically lead to a security incident.
When I was working at NHSX during the pandemic, we were so confident of the safety and necessity of open source, we made sure the Covid Contact Tracing app was open sourced the minute it was available to the public. That was a nationally mandated app, installed on millions of phones, subject to intense scrutiny from hostile powers - and yet, despite publishing the code, architecture and documentation, the open source code caused zero security incidents.
Furthermore, this new guidance is in direct contradiction to the UK's Tech Code of Practice point 3 "Be open and use open source" which insists on code being open.
Rightscon, a world summit on human rights in the digital age, has been canceled at the last minute through actions by its host nation's government:
It is with heavy hearts that we share: RightsCon will not proceed in Zambia or online.
We understand this news is deeply upsetting for our community and while we know everyone has questions, our goal right now is to notify you of the event's status because many of you have imminent travel plans.
We do not recommend registered participants travel to Lusaka for RightsCon.Over the last 48 hours we have experienced an overwhelming surge of support from civil society, government representatives, sponsors, and our community as a whole. For this, we wholeheartedly thank you. We'll communicate more information soon.
And there is secondhand coverage:
The Tor Project is deeply saddened by the last-minute cancellation of RightsCon 2026 in Lusaka, Zambia, and online. The right to assemble, associate, and speak freely must not be conditioned on political approval. Convenings like RightsCon are essential precisely because they create space for difficult, urgent, and necessary conversation about power, technology, rights, and accountability.
Tor's work is rooted in the belief that everyone should be able to speak freely, safely, and privately. We build tools that help people connect, communicate, organize, and seek information; especially those facing censorship, surveillance, repression, discrimination, and other forms of vulnerability. The disruption of a space dedicated to advancing these shared goals represents a serious gutpunch to the global human rights community.
- — Tor Project Statement on the Abrupt Cancellation of RightsCon 2026 , The Tor Project.
and
Minister of Technology and Science Felix Mutati first announced the postponement on April 28, saying that Zambia needed more time to ensure the conference "fully [aligns] with national procedures, diplomatic protocols, and the broader objective of fostering a balanced and consensus-driven platform for dialogue."
and
The announcement came as thousands of delegates were en route to Zambia or already there.
On Tuesday, Zambia's Minister of Technology and Science offered the first hint that the conference would be cancelled, telling a Zambian news outlet that participants' security clearances were incomplete and that the government has concerns about the conference's "dialogue."
UPDATED: A message dated 1 May explained the reason for the abrupt cancellation:
Following our April 29 announcement, we at Access Now, the host organization of RightsCon, believe it is important to be transparent about the context that led to the decision. We want to explain, where we can (taking into account the safety of those involved), why this announcement was made on such short notice, only days before we were set to welcome more than 2,600 participants in person, and 1,100 online, representing over 150 countries and 750 institutions.
We believe foreign interference is the reason RightsCon 2026 won't proceed in Zambia or online.
[...] On April 27, one day after a government press release endorsed RightsCon, we received a phone call from MoTS about an urgent issue and were told that diplomats from the People's Republic of China (PRC) were putting pressure on the Government of Zambia because Taiwanese civil society participants were planning to join us in person. This development was extremely concerning and we immediately pushed back. Next, we opened up lines of communication with our Taiwanese participants, as is our practice when there is a potential risk for a specific community. While we needed more information, we continued to feel confident this was something we could address with the government.
Previously:
(2016) Senator Wyden Calls on Digital Rights Activists to Block Legislative Efforts to Weaken Encryption - SoylentNews
(2016) Adblock Plus Un-Invited From IAB Conference - SoylentNews
Liam Price just cracked a 60-year-old problem that world-class mathematicians have tried and failed to solve. He's 23 years old and has no advanced mathematics training. What he does have is a ChatGPT Pro subscription, which gives him access to the latest large language models from OpenAI.
Artificial intelligence has recently made headlines for solving a number of "Erdős problems," conjectures left behind by the prolific mathematician Paul Erdős. But experts have warned that these problems are an imperfect benchmark of artificial intelligence's mathematical prowess. They range dramatically in both significance and difficulty, and many AI solutions have turned out to be less original than they appeared.
The new solution —which Price got in response to a single prompt to GPT-5.4 Pro and posted on www.erdosproblems.com , a website devoted to the Erdős problems, just over a week ago—is different. The problem it solves has eluded some prominent minds, bestowing it some esteem. And more importantly, the AI seems to have used a totally new method for problems of this kind. It's too soon to say with certainty, but this LLM-conceived connection may be useful for broader applications—something hard to find among recently touted AI triumphs in math.
"This one is a bit different because people did look at it, and the humans that looked at it just collectively made a slight wrong turn at move one," says Terence Tao, a mathematician at the University of California, Los Angeles, who has become a prominent scorekeeper for AI's push into his field. "What's beginning to emerge is that the problem was maybe easier than expected, and it was like there was some kind of mental block."
The question Price solved—or prompted ChatGPT to solve—concerns special sets of whole numbers, where no number in the set can be evenly divided by any other. Erdős called these "primitive sets" because of their connection to similarly indivisible prime numbers.
"A number is prime if it has no other divisors, and this is kind of generalizing that definition from an individual number to a collection of numbers," says Jared Duker Lichtman, a mathematician at Stanford University. Any set of prime numbers is automatically primitive, because primes have no factors (except themselves and the number one).
[...] "There was kind of a standard sequence of moves that everyone who worked on the problem previously started by doing," Tao says. The LLM took an entirely different route, using a formula that was well known in related parts of math, but which no one had thought to apply to this type of question.
"The raw output of ChatGPT's proof was actually quite poor. So it required an expert to kind of sift through and actually understand what it was trying to say," Lichtman says. But now he and Tao have shortened the proof so that it better distills the LLM's key insight.
More importantly, they already see other potential applications of the AI's cognitive leap. "We have discovered a new way to think about large numbers and their anatomy," Tao says. "It's a nice achievement. I think the jury is still out on the long-term significance."
Lichtman is hopeful because ChatGPT's discovery validates a sense he's had since graduate school. "I had the intuition that these problems were kind of clustered together and they had some kind of unifying feel to them," he says. "And this new method is really confirming that intuition."
Meet The Mushroom That Makes People Have The Exact Same Hallucination
Scientists call them "lilliputian hallucinations," a rare phenomenon involving miniature human or fantasy figures
Biologist Colin Domnauer is reopening an old case that Chinese health officials seem to have stopped caring about. Every summer, residents of the Yunnan province check into hospitals with complaints that they're hallucinating tiny elflike people. They would see the little dudes marching under their doors, scaling their walls, and clinging to their furniture.
Health officials used to care about it. They looked into it some years back and found that the cause was Lanmaoa asiatica, a mushroom that's been eaten in Yunnan for years. It's supposedly got a rich, umami flavor, and locals know that you have to cook it thoroughly, not to bring out that flavor, but to kill off the mushroom's hallucinogenic properties.
Scientists call these "lilliputian hallucinations," a rare phenomenon involving miniature human or fantasy figures. If you've seen the Adult Swim show Common Side Effects, you may be familiar with the surreal trippiness of this apparently very real form of mushroom-based hallucination. What makes this particular hallucinatory mushroom so unusual is that it causes the same kind of hallucinations in different people, across cultures.
It's always the little elf dudes.
[...] What's fascinating is the active compound isn't psilocybin, the hallucinatory chemical found in shrooms people take recreationally or therapeutically. The hallucinations take 12 to 24 hours. to begin and can last for a long time, sometimes long enough to require hospitalization and careful observation. The trip can last so long that it's impractical as a recreational drug, which is why no culture seems to use the mushroom intentionally as a psychedelic. Not yet, at least.
BBC Article:
'They saw them on their dishes when eating': The mushroom making people hallucinate dozens of tiny humans
Only recently described by science, the mysterious mushrooms are found in different parts of the world, but they give people the same exact visions.
Every year, doctors at a hospital in the Yunnan Province of China brace themselves for an influx of people with an unusual complaint. The patients come with a strikingly odd symptom: visions of pint-sized, elf-like figures – marching under doors, crawling up walls and clinging to furniture.
The hospital treats hundreds of these cases every year. All share a common culprit: Lanmaoa asiatica, a type of mushroom that forms symbiotic relationships with pine trees in nearby forests and is a locally popular food, known for its savory, umami-packed flavor. In Yunnan, L. asiatica is sold in markets, it appears on restaurant menus and is served at home during peak mushroom season between June and August.
One must be careful to cook it thoroughly, though, otherwise the hallucinations will set in.
"At a mushroom hot pot restaurant there, the server set a timer for 15 minutes and warned us, 'Don't eat it until the timer goes off or you might see little people,'" says Colin Domnauer, a doctoral candidate in biology at the University of Utah and the Natural History Museum of Utah, who is studying L. asiatica. "It seems like very common knowledge in the culture there."
But outside of Yunnan and a couple of other places, the strange mushroom is largely an enigma.
Domnauer first heard of L. asiatica as an undergraduate from his mycology professor.
"It sounded so bizarre that there could be a mushroom out there causing fairytale-like visions reported across cultures and time," Domnauer says. "I was perplexed and driven by curiosity to find out more."
[...] So Domnauer's first goal has been to pin down the species' true identity. In 2023, he travelled to Yunnan during the peak summertime mushroom season. He surveyed the province's sprawling fungi markets and asked sellers which of their mushrooms "makes you see little people". He purchased the ones that the giggling vendors pointed to, then brought the specimens back to the laboratory to sequence their genomes.
[...] Domnauer also visited the Philippines, where he had heard rumors of a mushroom causing similar symptoms as those from the historical records from China and Papua New Guinea. The specimens he collected there looked slightly different from the Chinese ones – they were smaller and light pink compared to the larger, redder Chinese mushrooms, he says. But his genetic testing revealed that they were indeed the same species.
[...] But it's not psilocybin that's giving the L. asiatica mushrooms their lilliputian effect, says Domnauer.
He and his team are still trying to identify the chemical compound responsible for the hallucinations in L. asiatica. Current tests suggest it is not likely related to any other known psychedelic compound. For one, the trips it produces are unusually long, commonly lasting one to three days after an onset of 12 to 24 hours, and in some cases even causing hospital stays of up to a week. Because of the extraordinarily long duration of these trips and the chance for prolonged side effects such as delirium and dizziness, Domnauer has yet to try the raw mushrooms himself.
These mega-trips might help to explain why people in China, the Philippines and Papua New Guinea do not seem to have a tradition of purposefully seeking out L. asiatica for its psychoactive effects, according to Domnauer's findings. "It was always just eaten for food," Domnauer says, with hallucinations being an unexpected side-effect.
There's another curious factor: other known psychedelic compounds also usually produce idiosyncratic trips that vary not only from person to person but also from one experience to the next within the same individual. With L. asiatica, though, "the perception of little people is very reliably and repeatedly reported", Domnauer says. "I don't know of anything else that produces such consistent hallucinations."
Understanding this mushroom will be no easy feat, Domnauer says, but as with studies of other psychedelic compounds, the scientific research it produces could end up touching on the biggest questions of consciousness and the relationship between mind and reality.
[...] "Now we may understand where in the brain [liliputian hallucinations] originate," says Dennis McKenna, an ethnopharmacologist and director of the McKenna Academy of Natural Philosophy, a non-profit education center in California, US. He agrees that understanding the mushroom's compounds could lead to new drug discoveries. "Is there a therapeutic application? It remains to be seen," says McKenna.
Researchers estimate that less than 5% of the world's fungal species have been described, so the findings also highlight the "enormous potential" for discovery in the world's ever-dwindling ecosystems, says Furci, whose work focuses on exploring the fungal kingdom. "Fungi hold a very large biochemical and pharmacological library that we're only just beginning to tap into," says Furci. "There's still a world of discoveries to be made."
Ask.com (known originally as Ask Jeeves) was an answer engine, e-magazine, and former web search engine, operated by Ask Media Group. It was conceptualized and developed in 1996 by Garrett Gruener and David Warthen, based in Berkeley, California.
- https://en.wikipedia.org/wiki/Ask.com
Ask.com reads:
Every great search
must come to an end.As IAC continues to sharpen its focus, we have made the decision to discontinue our search business, which includes Ask.com. After 25 years of answering the world's questions, Ask.com officially closed on May 1, 2026.
"To the millions who asked..."
We are deeply grateful to the brilliant engineers, designers, and teams who built and supported Ask over the decades. And to you—the millions of users who turned to us for answers in a rapidly changing world—thank you for your endless curiosity, your loyalty, and your trust.
https://www.phoronix.com/news/Linux-Kernel-Nearly-40M
Ahead of the Linux 7.1-rc1 kernel release due out later today for closing the Linux 7.1 merge window, I was curious if all the code removals would lead to a negative change in line count over Linux 7.0. The removals were not enough and Linux 7.1 Git is fast approaching 40 million lines.
With Linux 7.1 removing ISDN, ham radio, and other old network driver code that yielded a 138k lines of code reduction, I was curious how that would impact the line count for Linux Git. Plus removing some obsolete PCMCIA drivers also happened for Linux 7.1 as did removing some PCI drivers and beginning to remove support for Russia's Baikal CPUs. Linux 7.1 also began decommissioning of the Intel 486 CPU support but that doesn't have much impact on the line count yet, more removals around now useless i486 bits will come in future kernel cycles.
The Git repository for Linux v7.0 came in at 39,621,378 lines between 4,991,874 blank lines, 4,737,829 lines of code comments, and then 29,891,675 lines of detected code as measured by the cloc program.
Even with the removals, Linux 7.1 is still growing larger. Linux Git as of this morning measured by cloc came in at 39,880,636 lines -- or roughly 259k lines of code added this merge window even with all the removals that took place. That 39.8M lines is between 5,015,790 blank lines, 4,775,889 code comments, and 30,088,957 lines as measured by cloc. So Linux 7.1 crossed the threshold of 30 million lines of detected code while with the blank lines and code comments is fast approaching 40 million lines. For the Linux 7.2 cycle is presumably when it will breach 40 million lines in total.
While at it, I also took a read of the current size of the drivers/gpu/drm/amd area with AMDGPU and AMDKFD along with associated code like the display core (DC) and all the auto-generated header files for each GPU. In Linux 7.0 the modern AMD kernel graphics driver stack was at 6,049,235 lines and now rose to 6,162,946 in the current Linux 7.1 Git state.
There's A Good Reason Semi Trucks Don't Use V8s:
V8 engines are among our favorites . They make big power and sound that is, in the vernacular of Boston, wicked awesome. It's only natural to think that such big engines would power the big semi trucks that transport most cargo in the U.S., but that isn't true. Instead, you're more likely to find an inline-6 under the hood of most modern semis.
There are some important reasons why V8s have fallen out of favor in trucking. A V8 makes great horsepower, but towing heavy loads is all about torque. The inline-6 engines powering most modern semis make between 400 and 600 horsepower. That's not much more power than a well-equipped pickup truck these days, and is likely all the horsepower you really need anyway . However, most pickups don't make anywhere near the 1,000 to 2,000 pound-feet of torque that semi engines do. Big displacement in the 13 to 16-liter range, turbocharging, and diesel power maximize torque, and it shows in those four-digit figures.
Another factor is that in the U.S., semis are typically limited to a maximum weight of 80,000 lbs. Scania makes a 16.4-liter V8 producing 2,350 lb-ft used in Europe, but many of those countries allow heavier loads than we do. A smaller inline-6 can handle lighter American loads just fine.
The fundamental nature of an inline-6 is simpler than a V8. There's only one cylinder head, not two, so it has fewer parts. It's also easier to access and work on, reducing both maintenance costs and the time the truck is off the road. All this, plus its low-revving nature, makes the engine slightly more fuel efficient than a higher-revving V8. It's not much more efficient, but when you're talking six to eight MPG, every little bit helps and makes a big difference over thousands of miles.
The final nail in the V8's coffin was increasingly strict emission regulations for semis. It's easier to get a smaller displacement inline-6 to comply than a bigger V8, so that's what most manufacturers chose to do. In contrast, some companies like Caterpillar simply quit producing semi-trucks, focusing instead on off-highway applications. While electric options like the Tesla Semi may play a role in the future, the inline-6 remains the workhorse of American trucking for now.
Read More: https://www.jalopnik.com/1906098/why-semi-trucks-use-inline-6-not-v8-explained/
Mitchell Hashimoto says GitHub's outages and workflow failures have made the platform unsuitable for Ghostty's active development.
Ghostty, a modern GPU-accelerated terminal emulator developed by Mitchell Hashimoto, is transitioning its active development away from GitHub due to ongoing reliability issues that have disrupted daily workflows.
Hashimoto announced the decision in an emotional post titled "Ghostty Is Leaving GitHub," stating that the project will gradually eliminate its dependency on GitHub while maintaining the current repository as a read-only mirror. Further details about the new hosting platform will be provided in the coming months, as discussions continue with both commercial and open-source providers.
This decision is significant given Hashimoto's background. He is best known as the co-founder of HashiCorp (departed in 2023), the infrastructure automation company behind widely used tools such as Terraform, Vault, Consul, Nomad, Packer, and Vagrant, which are the de facto standard in DevOps circles today.
In his post, Hashimoto describes the decision as personally difficult rather than a result of casual dissatisfaction. He notes that he used the platform daily for over 18 years, which makes the current decision even harder.
"I'm GitHub user 1299, joined Feb 2008. Since then, I've opened GitHub every single day. Every day, multiple times per day, for over 18 years. Over half my life. A handful of exceptions in there (I'd love to see the data), but I can't imagine more than a week per year."
Hashimoto states he has recently been publicly critical of GitHub due to daily service failures. He kept a journal over the past month, marking each day when a GitHub outage negatively impacted his work, and notes that almost every day was affected.
"For the past month I've kept a journal where I put an "X" next to every date where a GitHub outage has negatively impacted my ability to work. Almost every day has an X. On the day I am writing this post, I've been unable to do any PR review for ~2 hours because there is a GitHub Actions outage".
According to Hashimoto, however, the issue is not with Git itself. He clarifies that the problem lies in the surrounding GitHub infrastructure, including issues, pull requests, GitHub Actions, and related collaboration workflows. For Ghostty, these failures have impacted both maintainers and the broader open-source community, prompting the decision to move away.
However, it is hard not to notice the strong disappointment in his words regarding the popular developer platform.
"It's not a fun place for me to be anymore. I want to be there but it doesn't want me to be there. I want to get work done and it doesn't want me to get work done. I want to ship software and it doesn't want me to ship software. I want it to be better, but I also want to code. And I can't code with GitHub anymore. I'm sorry. After 18 years, I've got to go."
Importantly, Ghostty will not be removed from GitHub immediately. The migration will occur incrementally, and the current GitHub repository will remain available as a read-only mirror. Hashimoto notes that his personal projects and other work will stay on GitHub for now, with Ghostty prioritized due to the significant impact of reliability issues.
What have been your experiences with GitHub - both positive and negative? Do you recommend any alternatives?