Movies

Oscar-Winning Movie Criticized for Using AI To Correct Dialects (thebaffler.com) 83

Nominated for 10 Oscars, The Brutalist (directed and produced by Brady Corbet) has an "intriguing and controversial technical feature," according to the Baffler, that threatens to turn movie-viewing into "a drab appreciation of machine-managed flawlessness, and acting less interesting..." In January, the film's editor Dávid Jancsó revealed that he and Corbet used tools from AI speech software company Respeecher to make the Hungarian-language dialogue spoken by Adrien Brody (who plays the protagonist, Hungarian émigré architect László Tóth) and Felicity Jones (who plays Tóth's wife Erzsébet) sound more Hungarian. In response to the ensuing backlash, Corbet clarified that the actors worked "for months" with a dialect coach to perfect their accents; AI was used "in Hungarian language dialogue editing only, specifically to refine certain vowels and letters for accuracy...." Defenders of this slimy deception claim the use of AI in film is no different than CGI or automated dialogue replacement, tools commonly deployed in the editing suite for picture and audio enhancement. But CGI and ADR don't tamper with the substance of a performance, which is what's at issue here....

AI seems poised to decimate the voice acting industry; how long will it be before filmmakers give up on the whole time-wasting business of dialect coaching and language research and toss their performers' untrained vocalizations directly into the linguistic Instant Pot...? "Adrien and Felicity's performances are completely their own," Corbet has argued. Only, they're not. Brody and Jones's performances may now be authentic to spoken Hungarian, but they're no longer authentic to themselves: at least in the parts of the film with Hungarian dialogue, the acting stands more as a monument to the prowess of the voice-matching software than that of the actors...

AI is a different beast from color film, or the Louma crane, or the hand-held camera: it's steroidal, aesthetically corrupting, and unlike these earlier advances it confronts the filmmaker with real ethical questions... Use implies complicity. To incorporate AI into the production of art today, no matter how sparingly or subtly, is to endorse Silicon Valley's politics and worldview: its exploitation of both producers and "users," its blithe indifference to the social impact of post-automation layoffs and the environmental assault of industrial data processing, its cramped and uninteresting idea of imagination, its petrification of creation. It's a vote for the assholes...

In short, the essays calls this "recourse to corrective AI" a "filmmaking prosthesis that cheats the viewer and cheapens the performances." And ironically this clashes with the film's depiction of a "principled artist," according to the article. ("Some of the 'retro' digital renderings in the memorial video included in this scene were also, Corbet has admitted, produced with the help of AI.")

The essay notes that several of 2024's other Oscar-nominated films also employed Respeecher, including Dune: Part Two and Emilia Pérez. "What matters here is not this particular infraction but the precedent it sets, the course it establishes for culture."
Science

Mice Give First Aid (thetimes.com) 24

Slashdot reader databasecowgirl writes: The Times is reporting an interesting study published in Science in which mice demonstrated doing first aid. In the replicated study, an anaesthetised mouse is exposed to another mouse who recognises the distress and clears airway to revive the unconscious mouse.

The mice had never seen an unconscious animal before, so the behaviour is thought to be instinctive.

From the Times: Large social mammals have previously been documented lending assistance to each other. Chimpanzees have been seen tending to wounded companions, dolphins are known to push distressed pod members to the surface to help them breathe, and elephants have been observed assisting their ailing relatives. Never before, however, has such a meticulous, paws-on approach to first aid been recorded in a creature as small as a mouse.
United States

Is America Closer to Ending Daylight Saving Time? (msn.com) 201

U.S. president Donald Trump called Daylight Saving Time "very costly to our nation" and "inconvenient" in December. Today the Washington Post remembers he'd vowed his Republican party would use their "best efforts" to eliminate it.

But it's still proving to be politically difficult... Polls have shown that most Americans oppose the time shifts but disagree on what should replace them... [U.S. political leaders] also say they are grappling with whether the nation should permanently move the clocks forward one hour, an idea championed by lawmakers on the coasts who say it would allow for more sunshine during the winter, or remain on year-round standard time, which is favored by neurologists who say it aligns with our circadian rhythms. That decision would rest with Congress, not the president. The split often reflects regional, not political, differences, based on where time zones fall; a year-round "spring forward" would mean winter sunrises that could creep past 9 a.m. in cities such as Indianapolis and Detroit, prompting many local lawmakers to oppose the idea...

[A 2022 Senate vote to make Daylight Saving Time permanent] awoke a new lobbying effort from advocates such as the American Academy of Sleep Medicine, which warned that year-round daylight saving time would be unhealthy, citing risks such as higher rates of obesity or metabolic dysfunction. Some researchers warned of a condition dubbed "social jetlag," saying that internal body clocks and rhythms would be persistently misaligned if human clocks were permanently set forward an hour. The concerted resistance from the health groups — which some congressional aides jokingly referred to as "Big Sleep" — helped kill the measure in the House and has contributed to a stalemate over how to proceed...

Today, roughly two-thirds of Americans want to end the clock changes, polls show. But even those Americans don't agree on what should come next. An October 2023 YouGov poll found that 33 percent of respondents wanted year-round daylight saving time, 23 percent wanted permanent standard time, and 9 percent had no preference. The remainder weren't sure or preferred to remain on the current system... The political fight is far from over, with Trump allies such as Sen. Tommy Tuberville (R-Alabama) pledging to keep pushing for year-round daylight saving time. Some congressional Republicans also have privately called for a hearing in front of the House Energy and Commerce Committee, with hopes of advancing the Sunshine Protection Act.

Social Networks

Reddit and Digg Cofounders Plan Relaunch of 'Human-Centered' Digg With AI Innovations (cnbc.com) 40

"The early web was fun," Reddit co-founder Alexis Ohanian posted Wednesday on X.com. "It was weird. It was community-driven. It's time to rebuild that.

"Which is why Kevin Rose and I just bought back Digg."

The amount of that purchase is "undisclosed," reports CNBC: The deal is backed by venture capital firms True Ventures, where Rose is a partner, and Ohanian's Seven Seven Six.... The company said in a release that it aims to differentiate itself in the social media market by "focusing on AI innovations designed to enhance the user experience and build a human-centered alternative...." Rose said in a post on X that he and Ohanian "dreamed up features that weren't even possible with yesterday's tech."
"We're bringing more transparency and community partnership," according to Rose's post, "unlike anything you've seen, plus AI that unlocks creativity without sanitizing the human element. The timing is finally right to reimagine what's possible."

"I really disliked you for a long time," Ohanian tells Rose in their joint announcement video. (To which a cheery Rose responds, "Rightfully so.")

But in the video Ohanian also says that today "Our perspective on the world has shifted a lot. You don't want to live in the past, but now we actually have the technology to make better, healthier community experiences." ("Old Rivals, New Vision," says a post on Digg's X.com account, urging readers to "Sign up to get early access when invites go live.")

And Digg.com now just displays this teasing catchphrase. "The front page of the internet, now with superpowers." (At the top of the page there's also a link to watch Diggnation Live at SXSW.)

While valued at $160 million dollars in 2008, Digg's plummeting traffic led to its brand and web site being acquired in 2012 by tech incubator Betaworks for about $500,000, according to CNBC...
Crime

Sam Bankman-Fried Gives a Jailhouse Interview, Seeking a Pardon (msn.com) 67

Sam Bankman-Fried — one of the largest donors to the Democratic Party — "was convicted of fraud, sentenced to 25 years in prison and mostly went silent," reports the Wall Street Journal. "Until recently..." Now, from behind bars at the Metropolitan Detention Center in Brooklyn, Bankman-Fried is orchestrating an extraordinary public-relations blitz that looks very much like a campaign to make the most audacious trade of his career: support for President Trump's agenda in return for a presidential pardon...

There is little downside to Bankman-Fried's long-shot effort to secure a pardon. As the appeal that he filed last year works its way through the courts, Bankman-Fried, 33, is staring down a prison sentence that could extend until his 50s... The crowning touch of his campaign came on Thursday, when Bankman-Fried gave a jailhouse interview to "The Tucker Carlson Show," which was released on social-media channels including X and YouTube. Appearing on video in a brown jumpsuit, he criticized Washington bureaucrats and crypto regulators — and suggested that he went to prison out of political retribution... [Carlson's title for the interview? "Sam Bankman-Fried on Life in Prison With Diddy, and How Democrats Stole His Money and Betrayed Him."]

The interview hadn't been approved by the Federal Bureau of Prisons, according to a person familiar with the matter. Bankman-Fried spoke with Carlson through a link that is typically used by inmates to communicate with their lawyers, the person said. After the interview, Bankman-Fried was placed in solitary confinement, but he was out by Friday afternoon, according to a person familiar with the matter... Bankman-Fried is trying to highlight in media appearances and in any interaction with Trump's team that FTX customers are set to be made whole with interest through the bankruptcy proceedings — at least in dollar terms. Many of those creditors remain furious that they missed out on bitcoin's rally since November 2022.

Bankman-Fried "wants to set the record straight on his political beliefs, which he believes have been misconstrued," according to the article. "While he has given heavily to Democrats, he has also donated to Republican causes, including the contribution of millions to a group supporting Senator Mitch McConnell."

But the New York Times, citing "people with knowledge" of his pardon-seeking efforts, reported that "So far, the push does not appear to have gained traction."
Bitcoin

Trump Signs Order To Establish Strategic Bitcoin Reserve 115

President Trump has signed an executive order to establish a strategic reserve of cryptocurrencies by using tokens already owned by the government. Reuters reports: A "Strategic Bitcoin Reserve" will be capitalized with bitcoin owned by the federal government that was seized as part of criminal or civil asset forfeiture proceedings, the White House crypto czar, billionaire David Sacks, said in a post on social media platform X. The order kept open the possibility of the government buying bitcoin in future. The U.S. commerce and treasury secretaries "are authorized to develop budget-neutral strategies for acquiring additional bitcoin, provided that those strategies impose no incremental costs on American taxpayers," a factsheet on the White House website said. "This is the most underwhelming and disappointing outcome we could have expected for this week," Charles Edwards, founder of bitcoin-focused hedge fund Capriole Investments, wrote in a post on X. "No active buying means this is just a fancy title for Bitcoin holdings that already existed with the Govt. This is a pig in lipstick."
Education

Study Reveals Lab Size Impacts PhD Students' Academic Careers (nature.com) 13

PhD students trained in small research groups are more likely to remain in academia than those from larger labs, according to a comprehensive analysis published in Nature Human Behaviour.

The study, which examined 1.5 million scientists and 1.8 million mentorships across chemistry, physics and neuroscience, found that trainees from large research groups had 38-48% lower "survival rates" in academia between the 1980s and 1995 compared to their small-group counterparts.

However, researchers from larger labs who do stay in academia tend to achieve greater career success, publishing papers with higher citation rates and more frequently ranking among the most-cited scientists.

The research team, led by social-data scientist Roberta Sinatra from the University of Copenhagen, discovered that successful large-group scientists typically published more first-author papers with their mentors as last authors, suggesting they received substantial attention despite the group size.
Microsoft

Microsoft Quantum Computing 'Breakthrough' Faces Fresh Challenge 20

An anonymous reader shares a report: A physicist has cast doubt on a test that underlies a high-profile claim by Microsoft to have created the first 'topological qubits', a long-sought goal of the company's quantum computing effort. The critique comes amid mounting speculation about the validity of Microsoft's claim.

Microsoft announced the breakthrough, which could lead to a quantum computer more resistant to information loss than with other approaches, on 19 February. Without a peer-reviewed paper backing up the claim, some researchers were sceptical. An accompanying paper in Nature described a method to measure the read-out from future topological qubits, but did not offer proof of their existence.

In the latest critique, posted as a preprint, Henry Legg, a theoretical physicist at the University of St Andrews, UK, raises concerns about a test that Microsoft uses to look for Majoranas, so-far undiscovered quasiparticles arising from the collective behaviour of electrons that are needed for the topological qubits to work.

Known as the topological gap protocol (TGP), the test is not mentioned in the 19 February Microsoft announcement. But the company has subsequently indicated to Nature's news team, and in a comment online, that it created the topological qubits using the TGP. "Since the TGP is flawed, the very foundations of the qubit are not there," says Legg.
Business Insider, separately reports: On February 19, Microsoft unveiled a new quantum processor called Majorana 1. [...] On the same day, Simone Severini, Amazon's head of quantum technologies, emailed CEO Andy Jassy casting doubt on Microsoft's claims, according to a copy of the email obtained by Business Insider.

Severini wrote that Microsoft's underlying scientific paper, released in Nature, "doesn't actually demonstrate" the claimed achievement and only showed that the new chip "could potentially enable future experiments."

[...] Oskar Painter, Amazon's head of quantum hardware, stressed the need to "push back on BS statements like S. Nadella's," likely in reference to the Microsoft CEO Satya Nadella's social media post proclaiming major advancements with the Majorana chip.
Further reading:
Scientists Question Microsoft's Quantum Computing Claims.
Government

US Mulls Policing Social Media of Would-Be Citizens (theregister.com) 75

The U.S. Citizenship and Immigration Services (USCIS) is proposing to expand mandatory social media screening, currently required only for new arrivals, to include all non-citizens already residing in the U.S. who apply for immigration benefits. The Register reports: Back in 2019, the Department of Homeland Security, which runs USCIS, decided anyone looking to enter the US on a work visa or similar had to hand over their social media handles to the authorities so that they could be looked over for wrongdoing and subversion. In fact, this goes back to 2014, at least, to one degree or another, and has been standard procedure for years for foreigners, particularly those coming in on a visa. [...]

On January 20 this year, President Trump signed an executive order calling for much tougher vetting of foreign aliens, and in response, USCIS has proposed rules saying those already in the country who are going through some process with the agency -- such as applying for permanent residency or citizenship -- will have their social media scanned for subversion. That means if you came to America before foreigners' internet presence was screened as it now is, and you're now seeking some kind of immigration benefit, at this rate you'll be subject to the same scanning as those entering the Land of the Free today.
The proposed changes have a 60-day comment period for the public to suggest amendments. The last day to send them in is May 5.
AI

Meta Is Targeting 'Hundreds of Millions' of Businesses In Agentic AI Deployment 14

Earlier this week, Meta chief product officer Chris Cox said the company's upcoming open-source Llama 4 AI will help power AI agents for hundreds of millions of businesses. CNBC reports: The AI agents won't just be responding to prompts. They will be capable of new levels of reasoning and action -- surfing the web and handling many tasks that might be of use to consumers and businesses. And that's where Shih comes in. Meta's AI is already being used by over 700 million consumers, according to Shih, and her job is to bring the same technologies to businesses. "Not every business, especially small businesses, has the ability to hire these large AI teams, and so now we're building business AIs for these small businesses so that even they can benefit from all of this innovation that's happening," she told CNBC's Julia Boorstin in an interview for the CNBC Changemakers Spotlight series.

She expects the uptake among businesses to happen soon, and spread far and wide. "We're quickly coming to a place where every business, from the very large to the very small, they're going to have a business agent representing it and acting on its behalf, in its voice -- the way that businesses today have websites and email addresses," Shih said. While major companies across sectors of the economy are investing millions of dollars to develop customer LLMs, "doing fancy things like fine tuning models," as Shih put it, "If you're a small business -- you own a coffee shop, you own a jewelry shop online, you're distributing through Instagram -- you don't have the resources to hire a big AI team, and so now our dream is that they won't have to."

For both consumers and businesses, the implications of the advances discussed by Cox and Shih will be significant in daily life. For consumers, Shih says, "Their AI assistant [will] do all kinds of things, from researching products to planning trips, planning social outings with their friends." On the business side, Shih pointed to the 200 million small businesses around the world that are already using Meta services and platforms. "They're using WhatsApp, they're using Facebook, they're using Instagram, both to acquire customers, but also engage and deepen each of those relationships. Very soon, each of those businesses are going to have these AIs that can represent them and help automate redundant tasks, help speak in their voice, help them find more customers and provide almost like a concierge service to every single one of their customers, 24/7."
Censorship

US House Panel Subpoenas Alphabet Over Content Moderation (yahoo.com) 40

An anonymous reader quotes a report from Reuters: The U.S. House Judiciary Committee subpoenaed Alphabet on Thursday seeking its communications with former President Joe Biden's administration about content moderation policies. House Judiciary Committee Chairman Jim Jordan, a Republican, also asked the YouTube parent company for similar communications with companies and groups outside government, according to a copy of the subpoena seen by Reuters. The subpoena seeks communications about limits or bans on content about President Donald Trump, Tesla CEO and close Trump ally Elon Musk, the virus that causes COVID-19 and a host of other conservative discussion topics. "Alphabet, to our knowledge, has not similarly disavowed the Biden-Harris Administration's attempts to censor speech," Jordan said in a letter.

Meanwhile, Google spokesperson Jose Castaneda said the company will "continue to show the committee how we enforce our policies independently, rooted in our commitment to free expression."
Games

Slashdot Asks: What's the Most Influential Video Game of All Time? 228

The folks at Bafta are running a public survey to identify the most influential video game ever made. When The Guardian asked prominent gaming figures to weigh in, they received a fascinating array of responses with zero overlap. Game designer Mike Bithell picked Metal Gear Solid 2, while Blumhouse's Louise Blain chose the short-lived horror experiment PT. The Guardian's own games editor backed Ocarina of Time for establishing 3D game world standards.

Other notable selections included Tomb Raider (pioneering female protagonists), QWOP (inspiring experimental design), Doom (revolutionizing FPS and modding), Mario Kart (competitive social play), Journey (emotional storytelling), Princess Maker (branching narrative systems), Paperboy (everyday world simulation), and Super Mario Bros (fundamental game design principles). So, Slashdotters, what's your pick for the most influential video game ever created? Which title fundamentally changed how games are designed, played, or experienced? Did it influence you personally, the industry as a whole, or both?
Privacy

India Grants Tax Officials Sweeping Digital Access Powers (indiatimes.com) 16

India's income tax department will gain powers to access citizens' social media accounts, emails and other digital spaces beginning April 2026 under the new income tax bill, in a significant expansion of its search and seizure authority.

The legislation, which has raised privacy concerns among legal experts, allows tax officers to "gain access by overriding the access code" to computer systems and "virtual digital spaces" if they suspect tax evasion.

The bill broadly defines virtual digital spaces to include email servers, social media accounts, online investment accounts, banking platforms, and cloud servers.

"The expansion raises significant concerns regarding constitutional validity, potential state overreach, and practical enforcement," Sonam Chandwani, Managing Partner at KS Legal and Associates, told Indian newspaper Economic Times.
The Internet

Cult Text-Based Zombie MMO 'Urban Dead' Is Shutting Down After 20 Years (gamesradar.com) 47

The long-running text-based zombie MMO Urban Dead is shutting down on March 14, 2025, after nearly 20 years. The reason: compliance concerns with the UK's Online Safety Act. Games Radar+ reports: "The Online Safety Act comes into force later this month, applying to all social and gaming websites where users interact, and especially those without strong age restrictions," [writes Kevan Davis, the solo British developer behind the game]. "With the possibility of heavy corporate-sized fines even for solo web projects like this one, I've reluctantly concluded that it doesn't look feasible for Urban Dead to be able to continue operating."

"So a full 19 years, 8 months and 11 days after its quarantine began, Urban Dead will be shut down," Davis writes. "No grand finale. No final catastrophe. No helicopter evac. Make your peace or your final stand in whichever part of Malton you called home, and the game will be switched off at noon UTC on 14 March."
The original website is still online if you want to play the game before its shutdown later this month.
Firefox

Firefox 136 Released With Vertical Tabs, Official ARM64 Linux Binaries (9to5linux.com) 49

An anonymous reader quotes a report from 9to5Linux: Mozilla published today the final build of the Firefox 136 open-source web browser for all supported platforms ahead of the March 4th, 2025, official release date, so it's time to take a look at the new features and changes. Highlights of Firefox 136 include official Linux binary packages for the AArch64 (ARM64) architecture, hardware video decoding for AMD GPUs on Linux systems, a new HTTPS-First behavior for upgrading page loads to HTTPS, and Smartblock Embeds for selectively unblocking certain social media embeds blocked in the ETP Strict and Private Browsing modes.

Firefox 136 is available for download for 32-bit, 64-bit, and AArch64 (ARM64) Linux systems right now from Mozilla's FTP server. As mentioned before, Mozilla plans to officially release Firefox 136 tomorrow, March 4th, 2025, when it will roll out as an OTA (Over-the-Air) update to macOS and Windows users.
Here's a list of the general features available in this release:

- Vertical Tabs Layout
- New Browser Layout Section
- PNG Copy Support
- HTTPS-First Behavior
- Smartblock Embeds
- Solo AI Link
- Expanded Data Collection & Use Settings
- Weather Forecast on New Tab Page
- Address Autofill Expansion

A full list of changes can be found here.
The Almighty Buck

Trump Names Cryptocurrencies for 'Digital Asset Stockpile' in Social Media Post (cnbc.com) 156

Despite a January announcement that America would explore the idea of a national digital asset stockpile, the exact cryptocurrecies weren't specified. Today on social media the president posted that it would include bitcoin, ether, XRP, Solana's SOL token and Cardano's ADA, reports CNBC — prompting a Sunday rally in cryptocurrencies trading. XRP surged 33% after the announcement while the token tied to Solana jumped 22%. Cardano's coin soared more than 60%. Bitcoin rose 10% to $94,425.29, after dipping to a three-month low under $80,000 on Friday. Ether, which has suffered some of the biggest losses in crypto year-to-date, gained 12%... This is the first time Trump has specified his support for a crypto "reserve" versus a "stockpile." While the former assumes actively buying crypto in regular installments, a stockpile would simply not sell any of the crypto currently held by the U.S. government.
"The total cryptocurrency market has risen about 10%," reports Reuters, "or more than $300 billion, in the hours since Trump's announcement, according to CoinGecko, a cryptocurrency data and analysis company."

"A U.S. Crypto Reserve will elevate this critical industry..." the president posted, promising to "make sure the U.S. is the Crypto Capital of the World," reports The Hill: His announcement comes just after the White House announced it would be welcoming cryptocurrency industry professionals on March 7 in a first-of-its-kind summit... It's unclear what exactly Trump's crypto reserve would look like, and while he previously dismissed crypto as a scam, he's embraced the industry throughout his most recent campaign.
AI

What Happened When Conspiracy Theorists Talked to OpenAI's GPT-4 Turbo? (washingtonpost.com) 134

A "decision science partner" at a seed-stage venture fund (who is also a cognitive-behavioral decision science author and professional poker player) explored what happens when GPT-4 Turbo converses with conspiracy theorists: Researchers have struggled for decades to develop techniques to weaken the grip of conspiracy theories and cult ideology on adherents. This is why a new paper in the journal Science by Thomas Costello of MIT's Sloan School of Management, Gordon Pennycook of Cornell University and David Rand, also of Sloan, is so exciting... In a pair of studies involving more than 2,000 participants, the researchers found a 20 percent reduction in belief in conspiracy theories after participants interacted with a powerful, flexible, personalized GPT-4 Turbo conversation partner. The researchers trained the AI to try to persuade the participants to reduce their belief in conspiracies by refuting the specific evidence the participants provided to support their favored conspiracy theory.

The reduction in belief held across a range of topics... Even more encouraging, participants demonstrated increased intentions to ignore or unfollow social media accounts promoting the conspiracies, and significantly increased willingness to ignore or argue against other believers in the conspiracy. And the results appear to be durable, holding up in evaluations 10 days and two months later... Why was AI able to persuade people to change their minds? The authors posit that it "simply takes the right evidence," tailored to the individual, to effect belief change, noting: "From a theoretical perspective, this paints a surprisingly optimistic picture of human reasoning: Conspiratorial rabbit holes may indeed have an exit. Psychological needs and motivations do not inherently blind conspiracists to evidence...."

It is hard to walk away from who you are, whether you are a QAnon believer, a flat-Earther, a truther of any kind or just a stock analyst who has taken a position that makes you stand out from the crowd. And that's why the AI approach might work so well. The participants were not interacting with a human, which, I suspect, didn't trigger identity in the same way, allowing the participants to be more open-minded. Identity is such a huge part of these conspiracy theories in terms of distinctiveness, putting distance between you and other people. When you're interacting with AI, you're not arguing with a human being whom you might be standing in opposition to, which could cause you to be less open-minded.

Answering questions from Slashdot readers in 2005, Wil Wheaton described playing poker against the cognitive-behavioral decision science author who wrote this article...
Perl

Perl's CPAN Security Group is Now a CNA, Can Assign CVEs (perlmonks.org) 10

Active since 1995, the Comprehensive Perl Archive Network (or CPAN) hosts 221,742 Perl modules written by 14,548 authors. This week they announced that the CPAN Security Group "was authorized by the CVE Program as a CVE Numbering Authority (CNA)" to assign and manage CVE vulnerability identifications for Perl and CPAN Modules.

"This is great news!" posted Linux kernel maintainer Greg Kroah-Hartman on social media, saying the announcement came "Just in time for my talk about this very topic in a few weeks about how all open source projects should be doing this" at the Linux Foundation Member Summit in Napa, California. And Curl creator Daniel Stenberg posted "I'm with Greg Kroah-Hartman on this: all Open Source projects should become CNAs. Or team up with others to do it." (Also posting "Agreed" to the suggestion was Seth Larson, the Python Software Foundation's security developer-in-residence involved in their successful effort to become a CNA in 2023.)

444 CNAs have now partnered with the CVE Program, according to their official web site. The announcement from PerlMonks.org: Years ago, a few people decided during the Perl Toolchain Summit (PTS) that it would be a good idea to join forces, ideas and knowledge and start a group to monitor vulnerabilities in the complete Perl ecosystem from core to the smallest CPAN release. The goal was to follow legislation and CVE reports, and help authors in taking actions on not being vulnerable anymore. That group has grown stable over the past years and is now known as CPANSec.

The group has several focus areas, and one of them is channeling CVE vulnerability issues. In that specific goal, a milestone has been reached: CPANSec has just been authorized as a CVE Numbering Authority (CNA) for Perl and modules on CPAN

Social Networks

Apple Launches 'Age Assurance' Tech As US States Mull Social Media Laws (reuters.com) 53

Apple announced a new feature allowing parents to share a child's age with app developers without exposing sensitive information, as lawmakers debate age-verification laws for social media and apps. Reuters reports: States, such as Utah and South Carolina, are currently debating laws that would require app store operators such as Apple and Alphabet's Google to check the ages of users. That has set up a conflict in the tech industry over which party should be responsible for checking ages for users under 18 -- app stores, or each individual app. Meta, for instance, has long argued in favor of legislation requiring app stores to check ages when a child downloads an app.

Apple on Thursday said it does not want to be responsible for collecting sensitive data for those age verifications. "While only a fraction of apps on the App Store may require age verification, all users would have to hand over their sensitive personally identifying information to us -- regardless of whether they actually want to use one of these limited set of apps," Apple wrote in a whitepaper on its website.

Security

A Disney Worker Downloaded an AI Tool. It Led To a Hack That Ruined His Life. (dailymail.co.uk) 96

A Disney employee's download of an AI image generation tool from GitHub led to a massive data breach in July 2024, exposing over 44 million internal Slack messages. The software contained infostealer malware that compromised Matthew Van Andel's computer [non-paywalled source] for five months, giving hackers access to his 1Password manager.

The attackers used the stolen credentials to access Disney's corporate systems, publishing sensitive information including customer data, employee passport numbers, and revenue figures from Disney's theme parks and streaming services. The breach also devastated Van Andel personally. Hackers exposed his Social Security number, financial login details, and even credentials for his home's Ring cameras. Shortly after the incident, Disney fired Van Andel following a forensic analysis of his work computer, citing misconduct he denies. Security researchers believe the attacker, who identified as part of a Russia-based hacktivist group called Nullbulge, is likely an American individual.

Slashdot Top Deals