Join our Folding@Home team:
Main F@H site
Our team page
Support us: Subscribe Here
and buy SoylentNews Swag
We always have a place for talented people, visit the Get Involved section on the wiki to see how you can make SoylentNews better.
From late May to early June of this year, wildfires raged in Canada: the plumes crossed the Atlantic and were observed in Europe.
In the night of 12-13 August, the first of a next generation of weather satellites for EUMETSAT was launched aboard an Ariane 6 missile.
The satellite, named METOP-SGA1, carries a total of six atmospheric sounding and imaging instrument missions. The payload includes the Infrared Atmospheric Sounding Interferometer – New Generation (IASI-NG), METimage (a visual and infrared imager), the Microwave Sounder (MWS), a Radio Occultation sounder, and the Multi-Viewing, Multi-Channel, Multi-Polarisation Imager (3MI) – the latter being an entirely new instrument designed to enhance the monitoring of aerosols -- as e.g. created by the Canadian wildfires -- and cloud properties.
Metop-SGA1 also carries the European Union's Copernicus Sentinel-5 mission, which will supply detailed data on atmospheric composition and trace gases that affect air quality, helping health authorities to monitor air pollution.
One aim of the satellite is to improve weather forecasts from 6 hours before (now-casting) to up to 10 days ahead. Another aim is to further improve climate models. A crucial instrument here is the Microwave Sounder, which will create temperature and humidity profiles across the atmosphere by measuring microwave brightness temperatures at different altitudes, in all weather.
"Instruments on board Metop-SG satellites and other exciting new European missions span a much broader frequency range than we have had so far. By bridging gaps between the microwave and infrared parts of the electromagnetic spectrum, we can build a more complete picture of the Earth's atmosphere, land, water, and ice – data that are essential for enhancing the numerical prediction models behind weather forecasts.
"Lower microwave frequencies penetrate clouds to reveal surface conditions like soil moisture, snow cover, and sea ice – data often inaccessible to infrared and optical sensors, as we live on a very cloudy planet! Higher frequencies can be used to detect tiny ice particles in high-altitude clouds, helping refine how these clouds are represented in weather and climate models. And combined with infrared sounder data, microwave observations can also offer very detailed insights into atmospheric humidity and temperature, the two most important variables in weather forecasts."
The spacecraft's counterpart, Metop-SGB1, will be launched next year with a complementary payload that (amongst others) includes a Microwave Imager that will deliver data relevant for monitoring precipitation, clouds, and surface conditions; an Ice Cloud Imager to observe high-altitude cirrus clouds; and a Scatterometer to gauge ocean surface roughness and estimate wind speed, direction, and soil moisture.
Data generated by the METOP-SGA series of weather satellites will be shared with NOAA, as part of the Joint Polar System.
"AOL, now a Yahoo! property, will end its dial-up internet service, the Public Switched Telephone Network (PSTN)-based internet connectivity service, on September 30, 2025. Its dial-up service has been publicly available for 34 years, and has provided many an internet surfer's first taste of the WWW. AOL will also end its AOL Dialer software and AOL Shield browser."
"In large countries, with regions where traditional PSTN phone lines are still available, but newer internet connectivity options may not be, some might argue that dial-up is still viable. Also, sometimes it is advertised as a backup connectivity option. In the U.S., for instance, the latest government census data indicates approximately a quarter of a million remaining dial-up holdouts."
"Internet old timers might feel some slight pangs of PSTN-based nostalgia. However, the move to always-on, fast, and responsive connectivity - at a fixed price - from ADSL onwards, came with few or no drawbacks compared to dial-up service."
"On performance, remember that the best hobbyist modems would only deliver up to 0.056 Mbps data speeds. ADSL services comfortably moved the performance needle to around 25 Mbps for many users (depending on line quality). In 2025, anyone who wants the best internet performance will usually prefer fiber connectivity, with a fairly typical service offering 500 Mbps data speeds.
Taking the above figures as reasonable averages of the respective eras, we've definitely come a long way since the heydays of dial-up. However, there remain some niche providers in the U.S. and elsewhere, if you don't have any other connection options."
Earthlink discontinued their dial-up service at the beginning of 2024. Dial up services still out there include NetZero, MSN, and Juno.
New tests reveal Microsoft Recall still screenshots sensitive data:
Microsoft Recall launched in 2024 as an AI-powered screenshot tool for Copilot+ PCs. The feature captures everything users do on their computers for later searching.
A security researcher quickly found serious vulnerabilities in the original version, where the database stored sensitive information in plain text. Microsoft had to pull Recall from the preview builds of Windows after that.
The company reintroduced Recall a few months down the line with assurances of better security measures, including encryption, virtualization-based security enclaves, and mandatory Windows Hello authentication for access.
However, recent testing by The Register has revealed deeply troubling findings.
During testing, it was found out that Recall still captures sensitive data even when filters are enabled. Credit card numbers, passwords, and Social Security details were all recorded in plain view.
Despite Microsoft's assurances, banking information remains vulnerable. Recall screenshots included bank homepages and account balances while correctly blocking routing and account numbers.
Similarly, password protection proved inconsistent across scenarios. Chrome's password manager remained protected, and Recall skipped files explicitly labeled with "username" or "password". Plain text files that listed credentials without those words were captured instead.
Social Security numbers (SSNs) received partial filtering at best. The system blocked digits when prefixed with "My SS#" but captured everything when labeled "Soc:".
Remote access makes the situation worse. Using TeamViewer, the tester was able to view the complete Recall history from another computer with only a Windows Hello PIN; biometric authentication was bypassed entirely.
And guess what? Microsoft promotes Recall as if it were a fully stable feature that needs no second look, while the feature itself is still creepy and Orwellian at its best.
I still think this feature has no place on a computer. But that is how it goes with Big Tech. They shove these kinds of offerings down people's throats whether they want them or not.
Also at: https://archive.ph/PWlUK
The communication platform cited suspicions that AI companies were using the archiving site for AI training:
Reddit has announced that it will be severely limiting the Internet Archive's Wayback Machine's access to the communication platform following its accusation that AI companies have been scraping the website for Reddit data. The platform will only be allowing the Internet Archive to save the home page of its website.
The limits on the Internet Archive's access was set to start "ramping up" on Monday, according to the Verge. Reddit did not apparently name any of the AI companies involved in these website data scrapes.
[...] Some Reddit users pointed out that this move is a far cry from Reddit co-founder Aaron Swartz's philosophy. Swartz committed suicide in the weeks before he was set to stand trial for allegedly breaking into an MIT closet to download the paid JSTOR archive, which hosts thousands of academic journals. He was committed to making online content free for the public.
[...] [Reddit spokesman Tim] Rathschmidt emphasized that the change was made in order to protect users: "Until they're able to defend their site and comply with platform policies (e.g., respecting user privacy, re: deleting removed content), we're limiting some of their access to Reddit data to protect redditors," he told Return.
However, it has been speculated that this more aggressive move was financially motivated, given the fact that the platform has struck deals in the past with some AI companies but sued others for not paying its fees. Reddit announced a partnership with OpenAI in May 2024 but sued Anthropic in June of this year for not complying with its demands.
Related: Americans, Be Warned: Lessons From Reddit's Chaotic UK Age Verification Rollout
Debian -- News -- Debian 13 "trixie" released:
Debian 13 trixie released
August 9th, 2025
After 2 years, 1 month, and 30 days of development, the Debian project is proud to present its new stable version 13 (code name trixie).
trixie will be supported for the next 5 years thanks to the combined work of the Debian Security team and the Debian Long Term Support team.
Debian 13 trixie ships with several desktop environments, such as:
- Gnome 48,
- KDE Plasma 6.3,
- LXDE 13,
- LXQt 2.1.0,
- Xfce 4.20
This release contains over 14,100 new packages for a total count of 69,830 packages, while over 8,840 packages have been removed as obsolete. 44,326 packages were updated in this release. The overall disk usage for trixie is 403,854,660 kB (403 GB), and is made up of 1,463,291,186 lines of code.
Thanks to our translators who have made the man-pages for trixie available in multiple languages.
The manpages-l10n project has contributed many improved and new translations for manual pages. Especially Romanian and Polish translations are greatly enhanced since bookworm. All architectures other than i386 now use a 64-bit time_t ABI, supporting dates beyond 2038. Debian contributors have made significant progress towards ensuring package builds produce byte-for-byte reproducible results. You can check the status for packages installed on your system using the new package debian-repro-status, or visit reproduce.debian.net for Debian's overall statistics for trixie and newer.
Debian 13 trixie includes numerous updated software packages (over 63% of all packages from the previous release), such as:
- Apache 2.4.64
- Bash 5.2.37
- BIND DNS Server 9.20
- Cryptsetup 2.7
- curl/libcurl 8.14.1
- Emacs 30.1
- Exim (default email server) 4.98
- GNUcash 5.10
- GNU Compiler Collection 14.2
- GIMP 3.0.4
- GnuPG 2.4.7
- Inkscape 1.4
- the GNU C Library 2.41
- LibreOffice 25.2
- Linux kernel 6.12 LTS series
- LLVM/Clang toolchain 19 (default), 17 and 18 available
- MariaDB 11.8
- Nginx 1.26
- OpenJDK 21
- OpenLDAP 2.6.10
- OpenSSH 10.0p1
- OpenSSL 3.5
- Perl 5.40
- PHP 8.4
- Postfix 3.10
- PostgreSQL 17
- Python 3, 3.13
- Rustc 1.85
- Samba 4.22
- Systemd 257
- Vim 9.1
- trixie
- 64-bit PC (amd64),
- 64-bit ARM (arm64),
- ARM EABI (armel),
- ARMv7 (EABI hard-float ABI, armhf),
- 64-bit little-endian PowerPC (ppc64el),
- 64-bit little-endian RISC-V (riscv64),
- IBM System z (s390x)
i386 is no longer supported as a regular architecture: there is no official kernel and no Debian installer for i386 systems. The i386 architecture is now only intended to be used on a 64-bit (amd64) CPU. Users running i386 systems should not upgrade to trixie. Instead, Debian recommends either reinstalling them as amd64, where possible, or retiring the hardware.
trixie will be the last release for the armel architecture. See 5.1.3. Last release for armel in the release notes for more information on our ARM EABI support.
As a separate item of news submitted by Anonymous Coward, Debian Hurd 2025 has also been released.
https://distrowatch.com/dwres.php?resource=showheadline&story=20043
While the Debian project is best known for its Linux distribution, branches of Debian also experiment with alternative kernels. There is a port of Debian which runs on the GNU Hurd kernel and it supports approximately 72% of the same software as Debian's Linux distribution. The Debian GNU/Hurd team have released a new snapshot which is built with mostly the same source software as Debian 13. "Debian GNU/Hurd is currently available for the i386 and amd64 architectures with about 72% of the Debian archive, and more to come! 64-bit support is now complete, with the same archive coverage as i386 (actually a bit more since some packages are 64-bit-only).
This 64=bit support is completely using userland disk drivers from NetBSD thanks to the Rump layer. We now use xattr by default for recording translators, allowing to bootstrap seamlessly from other OSes, with mmdebstrap for instance. Rust was ported to GNU/Hurd. Support for USB disk and CD-ROM was added through Rump. Packages are now available for SMP support, which is quite working. The console is now using xkb for keyboard layouts, and supports multiboot-provided framebuffer. Various other support were added (acpi, rtc, apic, hpet, ...)" Download options and documentation can be found through the team's mailing list post.
The plaintiff says that Microsoft's tactic of "forced obsolescence" is an "attempt to monopolize the generative AI market."
https://www.courthousenews.com/microsoft-sued-for-discontinuing-windows-10-support/
https://archive.ph/evqhf
A Southern California man sued Microsoft on Thursday over the software giant's plan to discontinue support for the old version of its widely used operating system Windows.
Though Windows 11 was launched nearly four years ago, many of its billion or so worldwide users are clinging to the decade-old Windows 10.
In fact, the newer Windows only just recently overtook its predecessor, in July.
According to StatCounter, nearly 43% of Windows users still use the old version on their desktop computers. The bad news for them is that Microsoft is discontinuing its routine support for Windows 10 in nearly two months on Oct. 14.
Not that computers running Windows 10 will completely stop working on that day. But they will no longer receive new features or security updates.
The plaintiff, Lawrence Klein, says in his complaint filed in San Diego Superior Court, that he owns two laptops, both of which run Windows 10. Both laptops, he says in his complaint, will become obsolete in October, when Microsoft ends support for Window. [...] Klein says that the end of Windows 10 is part of Microsoft's strategy to force customers to purchase new devices and to "monopolize the generative AI market."
Windows 11 comes with Microsoft's suite of generative artificial intelligence software, including the chatbot Copilot. To run optimally, Microsoft's AI needs a piece of hardware called a neural processing unit, which newer tablets, laptops and desktop computers have — and which the older devices do not.
"With only three months until support ends for Windows 10, it is likely that many millions of users will not buy new devices or pay for extended support," Klein writes in his complaint. "These users — some of whom are businesses storing sensitive consumer data — will be at a heightened risk of a cyberattack or other data security incident, a reality of which Microsoft is well aware."
"In other words, Microsoft's long-term business strategy to secure market dominance will have the effect of jeopardizing data security not only of Microsoft's customers but also of persons who may not use Microsoft's products at all," he adds.
Although the Windows 11 upgrade is free, an estimated 240 million personal computers don't have the right hardware to run the new operating system. And without security updates, they will be increasingly vulnerable to malware and viruses. Those customers will have the option of extended security, which will last until 2028, but at a price: $30 for individuals and $61 per device for businesses, increasing to $244 by the third year.According to one market analyst writing in 2023, Microsoft's shift away from Windows 10 will lead millions of customers to buy new devices and thrown out their old ones, consigning as many as 240 million PCs to the landfill.
"If these were all folded laptops, stacked one on top of another, they would make a pile 600km taller than the moon," the analyst wrote.
Klein is asking a judge to order Microsoft to continue supporting Windows 10 without additional charge, until the number of devices running the older operating system falls bellow 10% of total Windows users. He says nothing about any money he seeking for himself, though it does ask for attorneys' fees.
Java-like move could land those expecting free trial with a new bill:
Oracle has introduced new licensing terms that some users may see as hidden within the terms for VirtualBox, the general-purpose virtualization software for x86_64 hardware.
An eagle-eyed licensing consultant in Germany has spotted that licensing terms for downloads from the VirtualBox website have changed, effectively ending the opportunity for a free three-month trial once the user downloads the software.
Bernhard Halbetel, who works for advisory firm DBConcepts, has pointed out that anyone who has VirtualBox 7.1 or later might be liable for a licensing charge under the updated terms and conditions, even if they are not using the software.
"Before the change, Oracle would email those who downloaded the VirtualBox Extension Pack and say, 'Thank you for downloading, this is a commercial license, and now we have to talk about your license fees.' And the user could just say, 'We downloaded only for evaluation, and we de-installed it a couple of months ago, and therefore we don't need to pay your fee.' And Oracle has to go away," he told The Register.
"Now they changed in the licensing that the evaluation is not part of the Personal Use and Evaluation License (PUEL) anymore... so if you download it, then you are trapped, because then you have to pay the fee," Halbetel said. He warned users who have downloaded VirtualBox version 7.1 or later not to ignore such emails from Oracle.
However, users can still get a free evaluation if they get the download from elsewhere. Those who check the Licensing FAQ will find the free evaluation version is available from Oracle Software Delivery Cloud, which requires a login, so users need to sign up.
Eric Guyer, founding partner at Oracle and SAP advisory and consultancy Remend, said there is no difference in the Extension Pack code and no requirement for license keys in the new download. "This is surely bad for customers as there is less contractual ambiguity when Oracle pursues companies based on the download activity it tracks."
Craig Guarente, founder and CEO of Palisade Compliance, said it was a sign that Oracle had started soft auditing its customers in a similar fashion to its Java playbook.
"They track downloads, make accusations, get people worried, try to force them to prove a negative, and drive sales through fear. Having said that, Palisade clients are in compliance and haven't paid a penny to Oracle. It is not a big money maker for Oracle. Just another example of how they treat customers," he said.
They are supposed to monitor you throughout the working day and help make sure that life is not getting on top of you.
But a study has concluded that smartwatches cannot accurately measure your stress levels – and may think you are overworked when really you are just excited.
Researchers found almost no relationship between the stress levels reported by the smartwatch and the levels that participants said they experienced. However, recorded fatigue levels had a very slight association with the smartwatch data, while sleep had a stronger correlation.
Eiko Fried, an author of the study, said the correlation between the smartwatch and self-reported stress scores was "basically zero".
He added: "This is no surprise to us given that the watch measures heart rate and heart rate doesn't have that much to do with the emotion you're experiencing – it also goes up for sexual arousal or joyful experiences."
[...] Fried said although there was a lot of academic work looking for physiological signals that can act as proxies for emotional states, most were not precise enough. This is because there is an overlap between positive and negative feelings – for example, hair standing on end can signal anxiety as well as excitement.
Fried, an associate professor in the department of clinical psychology at Leiden University in the Netherlands, and his team tracked stress, fatigue and sleep for three months on 800 young adults wearing Garmin vivosmart 4 watches. They asked them to report four times a day on how stressed, fatigued or sleepy users were feeling before cross-referencing the data.
And the results, published in the Journal of Psychopathology and Clinical Science, found that none of the participants saw the stress scores on their watches meet the baseline for significant change when they recorded feeling stressed. And for a quarter of participants, their smartwatch told them they were stressed or unstressed when they self-reported feeling the opposite.
[...] The research is intended to feed into an early warning system for depression, in which wearable tech users receive data that will help them receive preventive treatments before an episode begins.
So far, there are promising signs that lower activity levels could be a predictor, though Fried has been unable to identify whether this is because of exercise's protective effect against depression or because people feel less energetic as their mental state deteriorates. "Wearable data can offer valuable insights into people's emotions and experiences, but it's crucial to understand its potential and limitations," said Margarita Panayiotou, a researcher at the University of Manchester, after reading the study.
"This research helps clarify what such data can reliably reveal and makes an important contribution to ongoing discussions about the role of technology in understanding wellbeing. It's important to remember that wearable data does not necessarily represent objective truth and should be interpreted alongside broader context, including individuals' perceptions and lived experiences."
Journal Reference: Siepe, B. S., Tutunji, R., Rieble, C. L., et al. (2025). Associations between ecological momentary assessment and passive sensor data in a large student sample. Journal of Psychopathology and Clinical Science. Advance online publication. https://doi.org/10.1037/abn0001013
Small clouds out as VMware again changes partner program:
VMware has advised partners its current channel program will end, and it seems that smaller players won't be invited back.
[...] This is the second major shakeup for VMware partners in eighteen months, after the Broadcom business unit's January 2024 decision to terminate members that operated VMware-powered clouds that ran on fewer than 3,500 processor cores.
That change caused great unease. Axed service providers could not secure licenses to run VMware-powered clouds, leaving them with hardware they could not legally use for its intended purpose. Customers of axed partners faced forced migrations.
VMware responded to community concerns by creating a "white label program" that allowed small cloud operators – now known as "secondary partners" – to acquire licenses from the "primary partner" that remained in its channel.
The white label program will soon be history, meaning many VMware users will need to find a new home.
[...] The VMware ecosystem now has good reason to fear Broadcom is capricious, because just last March the company hailed its revised partner program as ideal for customers and partners alike.
By changing its partner program twice within 18 months, Broadcom will therefore anger and disappoint many customers by forcing them to make a costly and complex cloud migration.
Partners that made the cut a year ago and have now been ejected will likely be furious – and with good cause because they will have invested in VMware practices that may soon be dust.
[...] Broadcom points to growing VMware revenue as evidence its approach is working.
Acquisitions are seldom quick or clean. While Broadcom can point to improved software and product development prowess, this one has been painful for VMware customers who surely now deserve a period of calm and predictability, even if that's not the best outcome for Broadcom shareholders.
In mid-2023, if a user asked OpenAI's ChatGPT for a recipe for artichoke pasta or instructions on how to make a ritual offering to the ancient Canaanite deity Moloch, its response might have taken – very roughly – 2 watt-hours, or about as much electricity as an incandescent bulb consumes in 2 minutes.
OpenAI released a model on Thursday that will underpin the popular chatbot – GPT-5. Ask that version of the AI for an artichoke recipe, and the same amount of pasta-related text could take several times – even 20 times – that amount of energy, experts say.
As it rolled out GPT-5, the company highlighted the model's breakthrough capabilities: its ability to create websites, answer PhD-level science questions, and reason through difficult problems.
But experts who have spent the past years working to benchmark the energy and resource usage of AI models say those new powers come at a cost: a response from GPT-5 may take a significantly larger amount of energy than a response from previous versions of ChatGPT.
OpenAI, like most of its competitors, has released no official information on the power usage of its models since GPT-3, which came out in 2020. Sam Altman, its CEO, tossed out some numbers on ChatGPT's resource consumption on his blog this June. However, these figures, 0.34 watt-hours and 0.000085 gallons of water per query, do not refer to a specific model and have no supporting documentation.
"A more complex model like GPT-5 consumes more power both during training and during inference. It's also targeted at long thinking ... I can safely say that it's going to consume a lot more power than GPT-4," said Rakesh Kumar, a professor at the University of Illinois, currently working on the energy consumption of computation and AI models.
The day GPT-5 was released, researchers at the University of Rhode Island's AI lab found that the model can use up to 40 watt-hours of electricity to generate a medium-length response of about 1,000 tokens, which are the building blocks of text for an AI model and are approximately equivalent to words.
[...] As large as these numbers are, researchers in the field say they align with their broad expectations for GPT-5's energy consumption, given that GPT-5 is believed to be several times larger than OpenAI's previous models. OpenAI has not released the parameter counts – which determine a model's size – for any of its models since GPT-3, which had 175bnparameters.
[...] In order to calculate an AI model's resource consumption, the group at the University of Rhode Island multiplied the average time that model takes to respond to a query – be it for a pasta recipe or an offering to Moloch – by the model's average power draw during its operation.
Estimating a model's power draw was "a lot of work", said Abdeltawab Hendawi, a professor of data science at the University of Rhode Island. The group struggled to find information on how different models are deployed within data centers. Their final paper contains estimates for which chips are used for a given model, and how different queries are parceled out between different chips in a datacenter.
Altman's June blog post confirmed their findings. The figure he gave for ChatGPT's energy consumption per query, 0.34 watt-hours per query, closely matches what the group found for GPT-4o.
Hendawi, Jegham and others in their group said that their findings underscored the need for more transparency from AI companies as they release ever-larger models.
"It's more critical than ever to address AI's true environmental cost," said Marwan Abdelatti, a professor at URI. "We call on OpenAI and other developers to use this moment to commit to full transparency by publicly disclosing GPT-5's environmental impact."
Using a fan can make older adults hotter in a dry heat:
Montreal Heart Institute-led research has found that older adults using an electric fan at 38 °C and 60% relative humidity experienced a modest fall in core temperature and greater comfort. Fan use at 45 °C and 15% relative humidity raised core temperature and increased discomfort.
CDC guidance warns against fan use above 32 °C because of concerns that added airflow could speed heat gain in vulnerable groups. Modeling studies and small laboratory trials have hinted that airflow may help when humidity is high, but effects at very high temperatures in older adults have remained uncertain. Older individuals face elevated heat-related morbidity, creating an urgent need for practical, low-cost cooling ideas.
In the study, "Thermal and Perceptual Responses of Older Adults With Fan Use in Heat Extremes," published in JAMA Network Open, researchers performed a secondary analysis of a randomized crossover clinical trial to test how fan use and skin wetting influence core temperature, sweating, and thermal perception during extreme-heat exposures.
[...] In the humid chamber, fan use lowered rectal temperature by −0.1 °C, raised sweat rate by 57 mL/h, and improved thermal sensation by −0.6 AU (arbitrary units using an ASHRAE 7-point scale) and comfort by −0.6 AU. Skin wetting cut sweat loss by 67 mL/h and eased perceptions, and combining both strategies produced the largest perceptual gains: thermal sensation −1.1 AU, comfort −0.7 AU, without altering core temperature.
In the dry chamber, fan use raised core temperature by 0.3 °C, boosted sweating by 270 mL/h, and worsened sensation and comfort by 0.5 AU each. Skin wetting alone lowered sweating by 121 mL/h and improved sensation by −0.4 AU, with comfort unchanged.
Study investigators conclude that electric fans can serve as a safe, low-cost cooling option for older adults during hot, humid weather at 38 °C, but should be avoided in very hot, dry conditions. Simple skin wetting offers an additional means to manage heat stress while limiting dehydration. Public health agencies may use these findings to refine summer heat-safety messages for seniors.
Journal Reference: Georgia K. Chaseling et al, Thermal and Perceptual Responses of Older Adults With Fan Use in Heat Extremes, JAMA Network Open (2025). DOI: 10.1001/jamanetworkopen.2025.23810
Damien Miller (djm@) just published a Post-Quantum Cryptography FAQ page to the OpenSSH web site. It describes OpenSSH's use of and approach to post-quantum cryptography. A big goal is to minimize the risk from hostiles saving SSH traffic now to then crack the encryption later as new technology allows.
Fortunately, quantum computers of sufficient power to break cryptography have not been invented yet. Estimates for when a cryptographically-relevant quantum computer will arrive, based on the rate of progress in the field, range from 5-20 years, with many observers expecting them to arrive in the mid-2030s.
The entire privacy of an SSH connection depends on cryptographic key agreement. If an attacker can break the key agreement then they are able to decrypt and view the entire session. The attacker need not perform this attack in real time; they may collect encrypted SSH sessions now and then decrypt them later once they have access to a quantum computer. This is referred to as a "store now, decrypt later" attack (also as "harvest now, decrypt later").
OpenSSH supports post-quantum cryptography to protect user traffic against this attack.
Previously:
(2025) New OpenSSH Flaws Enable Man-in-the-Middle and DoS Attacks
(2024) Timeline to Remove DSA Support from OpenSSH
(2021) scp Will Be Replaced With sftp Soon
(2020) SHA-1 to be Disabled in OpenSSH and libssh
(2016) Upgrade Your SSH Keys
(2015) OpenSSH 6.8 Will Feature Key Discovery and Rotation for Easier Switching to DJB's Ed25519
(2014) OpenSSH No Longer has to Depend on OpenSSL
The Library of Congress today said a coding error resulted in the deletion of parts of the US Constitution from Congress' website and promised a fix after many Internet users pointed out the missing sections this morning.
"It has been brought to our attention that some sections of Article 1 are missing from the Constitution Annotated (constitution.congress.gov) website," the Library of Congress said today. "We've learned that this is due to a coding error. We have been working to correct this and expect it to be resolved soon."
[...] "Upkeep of Constitution Annotated and other digital resources is a critical part of the Library's mission, and we appreciate the feedback that alerted us to the error and allowed us to fix it," the Library of Congress said.
[...] The temporarily deleted sections of Article 1 consist of about 650 words, as can be seen in an Internet Archive version comparison. This included part of Section 8 and all of Sections 9 and 10. One deleted bit contains authorization for Congress to provide and maintain a Navy, and to call forth a "Militia to execute the Laws of the Union, suppress Insurrections and repel Invasions."
Another victim of the temporary deletion was the section on habeas corpus.
[...] Of course, the Constitution can't be changed by simply deleting passages from a government website, but the error temporarily made it more difficult for people to look up parts of the founding document.
Extra-Strong Bacterial Cellulose Sheets as a Biodegradable Alternative to Plastic:
A team led by researchers from the University of Houston and Rice University has demonstrated a method for producing stronger, multifunctional bacterial cellulose sheets that could support the development of biodegradable alternatives to plastic.
The work, published in Nature Communications, outlines a scalable, single-step biosynthesis approach to produce sheets of plastic-like bacterial cellulose material.
The research addresses growing interest in sustainable materials that reduce environmental reliance on petroleum-based polymers.
Using fluid dynamics to guide bacterial cellulose synthesis
Bacterial cellulose, a naturally derived biopolymer produced by certain strains of bacteria, is known for being biodegradable and biocompatible. However, its mechanical properties have traditionally limited its use as a structural substitute for plastic.
The team used a custom-designed culture system featuring a rotating, oxygen-permeable cylindrical chamber. This setup generates directional fluid flow, which encourages cellulose-producing bacteria to move consistently in a single direction during biosynthesis. As a result, the bacteria produce cellulose nanofibrils that are aligned within the sheet, yielding a material with improved tensile strength, flexibility, foldability, optical transparency and long-term mechanical stability.
"We're essentially guiding the bacteria to behave with purpose. Rather than moving randomly, we direct their motion, so they produce cellulose in an organized way," said study author Maksud Rahman, an assistant professor of mechanical and aerospace engineering at the University of Houston.
These enhancements are a result of what the authors describe as a bottom-up strategy in which the physical environment directly shapes the biosynthetic behavior of the bacteria.
"We envision these strong, multifunctional and eco-friendly bacterial cellulose sheets becoming ubiquitous, replacing plastics in various industries and helping mitigate environmental damage," said Rahman.
To further improve the material's performance, the researchers incorporated boron nitride nanosheets into the bacterial growth medium. The resulting hybrid cellulose-nanomaterial sheets demonstrated tensile strengths of up to approximately 553 MPa and vastly improved thermal properties, exhibiting a heat dissipation rate three times higher than cellulose-only sheets.
This integration of boron nitride was achieved without disrupting the alignment of cellulose nanofibrils, indicating compatibility between the nanomaterials and the biosynthetic process.
"This controlled behavior, combined with our flexible biosynthesis method with various nanomaterials, enables us to achieve both structural alignment and multifunctional properties in the material at the same time," Rahman said.
The hybrid material retained transparency and mechanical flexibility, making it suitable for applications requiring both strength and pliability.
The combination of scalability, material robustness and biodegradability positions the new bacterial cellulose composites as promising candidates for replacing plastic in certain applications.
While the work does not claim immediate readiness for commercial implementation, it offers a biologically-derived alternative that could be developed further for use in everyday applications.
"This scalable, single step bio-fabrication approach yielding aligned, strong and multifunctional bacterial cellulose sheets would pave the way towards applications in structural materials, thermal management, packaging, textiles, green electronics and energy storage," Rahman said.
Journal Reference:
Saadi, M.A.S.R., Cui, Yufei, Bhakta, Shyam P., et al. Flow-induced 2D nanomaterials intercalated aligned bacterial cellulose [open], Nature Communications (DOI: 10.1038/s41467-025-60242-1)
By now, you've likely heard of fraudulent calls that use AI to clone the voices of people the call recipient knows. Often, the result is what sounds like a grandchild, CEO, or work colleague you've known for years reporting an urgent matter requiring immediate action, saying to wire money, divulge login credentials, or visit a malicious website.
Researchers and government officials [PDF] have been warning of the threat for years, with the Cybersecurity and Infrastructure Security Agency saying in 2023 that threats from deepfakes and other forms of synthetic media have increased "exponentially." Last year, Google's Mandiant security division reported that such attacks are being executed with "uncanny precision, creating for more realistic phishing schemes."
[...]
The Mandiant post showed the relative ease with which members of its security team executed such a scam in a simulated red team exercise, designed to test defenses and train personnel. The red teamers collected publicly available voice samples of someone inside the targeted organization who had employees report to them. The red teamers then used publicly available information to identify employees most likely to work under the person being faked and called them. To make the call more convincing, it used a real outage of a VPN service as a pretense for the employee to take immediate action.
[...]
Precautions for preventing such scams from succeeding can be as simple as parties agreeing to a randomly chosen word or phrase that the caller must provide before the recipient complies with a request. Recipients can also end the call and call the person back at a number known to belong to the caller. But it's best to follow both steps.