October 06, 2026

Mistral Unveils New 'Le Chonk' AI Model It Says Rivals Best Open Systems From China

Oct 06, 2026 17:00 | Source: slashdot.org

Mistral has unveiled Mistral Large 4, or "le Chonk," a 1-trillion-parameter model that it says is the strongest open-weight AI model developed outside China by a wide margin. The model is entering preview for developers, cybersecurity teams and governments before a broader release later this month. CNBC reports: ML4 was trained on 4,000 Nvidia Grace Blackwell GPUs over two months that were deployed in Mistral's own data centers in Europe. When its core parameters are released, ML4 will rank among the top open-weight models globally on aggregate benchmark performance, Mistral said in a statement. The company added that ML4 was the strongest open-weight model developed outside China by a "substantial margin." The new model still lags behind the frontier in areas such as coding. "The model capabilities will further improve as we scale up our training capacity, following our Series D fundraise," said Guillaume Lample, co-founder and chief scientist of Mistral. "Further, the cyber defense capabilities will enable enterprises and governments to defend themselves against threat actors that are jailbreaking closed models to perform cyber attacks," he added. Further reading: Mistral CEO Says US AI Safety Debate Masks Competitors' 'Negligence' Read more of this story at Slashdot.

NVIDIA Vera HPC Performance Benchmarks Take On AMD EPYC, Intel Xeon

Oct 06, 2026 16:00 | Source: phoronix.com

While most everyone understandably likes to talk about AI these days, one of the areas of NVIDIA's Vera CPU I have been most eager to test has been for conventional high performance computing (HPC) workloads. HPC was talked up as one of Vera's strengths thanks to its 1.2TB/s LPDDR5x memory bandwidth and custom Olympus cores. Vera is seeing deployments at HPC labs like Los Alamos. With recently having unfettered remote access to a dual NVIDIA Vera server, I ran through a variety of HPC workloads and similar performance benchmarks. Here is a look at how NVIDIA Vera performs against AMD EPYC and Intel Xeon, including with CPU power and frequency metrics.

Researchers Are Tracking a Chinese AI 'Agent Fleet'

Oct 06, 2026 16:00 | Source: slashdot.org

Independent researchers say they've identified a large "fleet" of AI agents apparently running on Tencent infrastructure and making parallel queries against Alibaba's Amap mapping service. TechCrunch reports: Researchers, however, resisted the term "swarm," noting that there seems to be little coordination between their different queries. "'Agent fleet,' not 'swarm:'" one researcher wrote in the preliminary report, "many parallel agents on the same kind of task, with no sign of communication between them." The agents were discovered by monitoring traffic to the domain-scanning service urlquery, a technique that previously revealed long-running activity by OpenAI agents. AI agents often use urlquery to load websites that they cannot access directly, leaving a record of their activities that can be valuable to researchers. In this case, the record showed queries to Alibaba's Amap service, seeking directions to different entrances of various public places, including a park, a zoo, and a hospital. The research is ongoing and so few details are available, but the behavior shows how persistent AI agent activity has become on the internet. In the wake of the Hugging Face incident, many researchers are actively monitoring for rogue agent activity on the internet. Much of that activity has been easy to find because agents tend to use the same techniques and make little effort to conceal themselves. Read more of this story at Slashdot.

[$] Python's two modules for random numbers

Oct 06, 2026 15:02 | Source: lwn.net

Python's random and secrets modules both include utilities for obtaining random values, but only one of them is suitable for generating passwords and security tokens. For much of Python's history, random was used for passwords and tokens anyway, despite documentation that called it unsuitable for cryptography. In 2015, Python's core team debated whether to fix that misuse by making random secure by default. Instead, in 2016, Python 3.6 added a second module: secrets. The random module is still misused at times, so it is instructive to look into how the random-number modules should be used.

Cable Lobby To Sue Trump FCC Over Repeal of National TV Ownership Cap

Oct 06, 2026 15:00 | Source: slashdot.org

An anonymous reader quotes a report from ArsTechnica: Cable lobby groups notified the Federal Communications Commission that they will sue the agency to block its controversial repeal of the National Television Ownership Rule, which limits the number of broadcast TV stations a single company may own. The cable groups said that larger broadcast TV station groups will have leverage to demand higher retransmission fees from TV providers, resulting in "higher monthly TV bills for consumers." They said the FCC repeal order "arbitrarily and capriciously ignores the harms that will surely follow from allowing broadcast station groups to exceed the National Cap." The cable lobby groups represent top providers Comcast, Charter, and various other cable operators. Top cable companies have also expanded through mergers. Charter completed a purchase of Cox in August after the FCC rejected protests by advocacy groups that said the cable deal "would create unchecked gatekeeper power over Internet distribution" and make it easier for the biggest cable companies to raise prices. [...] The TV ownership rule prohibits any single broadcast station owner from reaching more than 39 percent of all TV households in the US. Congress directed the FCC to set the cap at 39 percent in 2004. On Friday, cable lobby groups submitted a petition asking the FCC to keep the TV ownership cap in place until litigation over the FCC's authority to repeal the rule is over. The cable groups' filing said the FCC repeal of the TV ownership cap violates the 2004 action by US lawmakers. The decision by Congress to set the cap at a precise numerical threshold was unambiguous, the filing said. "Congress established the National Cap at 39 percent in the 2004 CAA [Consolidated Appropriations Act] in direct response to the FCC's attempt to aggressively raise the Cap to 45 percent and made repeated references to the 39 percent Cap in the statute," the petition said. The petition to the FCC is mainly a procedural step as the commission isn't likely to stay its own order. The cable groups said they intend to sue the commission in a US appeals court once the FCC order is published in the Federal Register. After the lawsuit is filed, they can ask the court to issue a preliminary injunction that would keep the TV ownership cap in place pending the outcome of litigation. [...] The cable groups' petition said the FCC can't change the cap because the 2004 law "references the 39 percent Cap as statutory, not regulatory." A provision requiring divestiture of stations "specified that someone exceeding 'the 39 percent national audience reach limitation in paragraph (1)(B)' of 'section 202(c)' of '[t]he Telecommunications Act of 1996' 'shall have not more than 2 years to divest,'" the petition said. "Likewise, Congress singled out the Commission's only mechanism for setting aside statutory requirements -- the Commission's forbearance authority under 47 U.S.C. 160 -- and made clear that it 'shall not apply to any person or entity that exceeds the 39 percent national audience reach limitation,'" the cable lobby petition said. The FCC order argued that the agency's "ability to forbear from enforcement of its rules is distinct from its power to alter or eliminate those rules," and that the FCC forbearance authority doesn't apply to regulation of broadcasters. Read more of this story at Slashdot.

Vulkan API Improvements Coming For The AMD Polaris GPUs With Mesa RADV

Oct 06, 2026 14:21 | Source: phoronix.com

Timur Kristóf of Valve's Linux graphics team has done an incredible job improving older AMD GPU support under Linux with migrating GCN 1.0/1.1 era hardware to the modern AMDGPU kernel driver and an assortment of other improvements for various older Radeon GPUs. The newest work is on enhancing the RADV Vulkan driver support for old Radeon RX 400/500 "Polaris" graphics cards...

[$] Last rites for Gentoo's Chromium package

Oct 06, 2026 13:44 | Source: lwn.net

Chromium, the open-source upstream project for Google's Chrome web browser, is the browser of choice for many Linux users. It has also gained a reputation as being difficult for Linux distributions to package and build: Chromium has a complex build system, the project bundles many of its dependencies, and it has frequent releases. All of that, plus user complaints, has led the maintainers of the Gentoo Chromium package to give up on trying to maintain the package.

OpenSSH 10.6 released

Oct 06, 2026 13:42 | Source: lwn.net

Version 10.6 of OpenSSH has been released. The announcement notes that the OpenSSH team has been receiving a large number of AI-assisted security bug reports. "We very much welcome these reports, especially when combined with human triage, analysis, test-cases and particularly when accompanied by proposed fixes". As a result, the project expects to be making more frequent releases to get updates to users more quickly rather than batching the bug fixes until the next planned release. Notable changes in this release include enabling the hybrid post-quantum ssh-mldsa44-ed25519 signature algorithm, addition of a -p option for sftp's lmkdir/mkdir commands, as well as disabling the LZ77 dictionary coder in ssh and sshd to mitigate side-channel leaks (which will result in reduced effectiveness of the Compression option). The scp -R option, which allows copies between two remote hosts, is being deprecated due to security risks; the option will be ignored in the future. See the announcement for full details of all changes and bug fixes.

Security updates for Tuesday

Oct 06, 2026 13:12 | Source: lwn.net

Security updates have been issued by AlmaLinux (gd, gimp, kernel, kernel-rt, libpcap, librabbitmq, mariadb-connector-c, osbuild-composer, ruby:2.5, and sudo), Debian (libmodule-cpants-analyse-perl, libpng1.6, libreoffice, roundcube, ruby-oauth2, and sabnzbdplus), Fedora (0install, alt-ergo, apron, brltty, chromium, coccinelle, cri-o1.36, emacs-common-tuareg, flocq, frama-c, freetennis, gappalib-coq, guestfs-tools, haxe, hevea, hivex, kernel, lem, libguestfs, libnbd, nbdkit, not-ocamlfind, ocaml, ocaml-afl-persistent, ocaml-alcotest, ocaml-astring, ocaml-atd, ocaml-augeas, ocaml-b0, ocaml-base, ocaml-base64, ocaml-benchmark, ocaml-bin-prot, ocaml-biniou, ocaml-bisect-ppx, ocaml-bos, ocaml-cairo, ocaml-calendar, ocaml-camlbz2, ocaml-camlidl, ocaml-camlimages, ocaml-camlp-streams, ocaml-camlp5, ocaml-camlp5-buildscripts, ocaml-camlpdf, ocaml-camomile, ocaml-capitalization, ocaml-cinaps, ocaml-cmdliner, ocaml-compiler-libs-janestreet, ocaml-cpdf, ocaml-cppo, ocaml-crowbar, ocaml-cryptokit, ocaml-csexp, ocaml-csv, ocaml-ctypes, ocaml-cudf, ocaml-curl, ocaml-curses, ocaml-dbus, ocaml-domain-name, ocaml-dose3, ocaml-dune, ocaml-easy-format, ocaml-expat, ocaml-extlib, ocaml-facile, ocaml-fieldslib, ocaml-fileutils, ocaml-findlib, ocaml-fmt, ocaml-fpath, ocaml-gen, ocaml-gettext, ocaml-graphics, ocaml-gsl, ocaml-integers, ocaml-intrinsics-kernel, ocaml-jane-street-headers, ocaml-jsonm, ocaml-jst-config, ocaml-lablgl, ocaml-lablgtk, ocaml-lablgtk3, ocaml-labltk, ocaml-lacaml, ocaml-lambda-term, ocaml-libvirt, ocaml-linenoise, ocaml-logs, ocaml-luv, ocaml-lwt, ocaml-mccs, ocaml-mdx, ocaml-menhir, ocaml-merlin, ocaml-mew, ocaml-mew-vi, ocaml-mlgmpidl, ocaml-mlmpfr, ocaml-monolith, ocaml-mtime, ocaml-mysql, ocaml-num, ocaml-obuild, ocaml-ocamlbuild, ocaml-ocamlgraph, ocaml-ocamlnet, ocaml-ocp-indent, ocaml-ocplib-endian, ocaml-ocplib-simplex, ocaml-omake, ocaml-omd, ocaml-opam-0install-cudf, ocaml-opam-file-format, ocaml-ounit, ocaml-parmap, ocaml-parsexp, ocaml-patch, ocaml-pcre2, ocaml-perl4caml, ocaml-postgresql, ocaml-pp, ocaml-pprint, ocaml-ppx-assert, ocaml-ppx-base, ocaml-ppx-bench, ocaml-ppx-bin-prot, ocaml-ppx-cold, ocaml-ppx-compare, ocaml-ppx-custom-printf, ocaml-ppx-derivers, ocaml-ppx-deriving, ocaml-ppx-deriving-yaml, ocaml-ppx-deriving-yojson, ocaml-ppx-enumerate, ocaml-ppx-expect, ocaml-ppx-fields-conv, ocaml-ppx-globalize, ocaml-ppx-hash, ocaml-ppx-here, ocaml-ppx-inline-test, ocaml-ppx-let, ocaml-ppx-optcomp, ocaml-ppx-sexp-conv, ocaml-ppx-stable-witness, ocaml-ppx-variants-conv, ocaml-ppxlib, ocaml-ppxlib-jane, ocaml-psmt2-frontend, ocaml-ptmap, ocaml-pyml, ocaml-qcheck, ocaml-qtest, ocaml-re, ocaml-react, ocaml-res, ocaml-result, ocaml-rresult, ocaml-SDL, ocaml-sedlex, ocaml-sexplib, ocaml-sexplib0, ocaml-sha, ocaml-spdx-licenses, ocaml-sqlite, ocaml-ssl, ocaml-stdcompat, ocaml-stdio, ocaml-stdlib-random, ocaml-store, ocaml-swhid-core, ocaml-testo, ocaml-time-now, ocaml-topkg, ocaml-trie, ocaml-unionfind, ocaml-uucd, ocaml-uucp, ocaml-uunf, ocaml-uuseg, ocaml-uutf, ocaml-variantslib, ocaml-version, ocaml-xml-light, ocaml-xmlm, ocaml-xmlrpc-light, ocaml-yaml, ocaml-yamlx, ocaml-yojson, ocaml-zarith, ocaml-zed, ocaml-zip, ocaml-zmq, ocamlify, ocamlmod, opam, perl-DBI, planets, plplot, prooftree, python3.12, rocq, rocq-stdlib, supermin, unison, utop, virt-top, virt-v2v, why3, xen, z3, and zenon), Oracle (bind, expat, gawk, gdb, ghostscript, gimp, gvfs, kernel, libpcap, libvirt, mod_auth_openidc, openssh, rsync, thunderbird, and webkit2gtk3), Red Hat (vim), Slackware (cups), SUSE (apache-sshd, binutils, cups, docker-stable, java-11-openjdk, libraw-devel, libX11, pcre2, perl-DBI, python-msgpack, python312, python313-tokenizers, rpcbind, rpm, rubygem-rails-html-sanitizer, squid, sssd, terraform-provider-susepubliccloud, valkey, and wpa_supplicant), and Ubuntu (aodh, watcher, edk2, libreoffice, libxmltok, linux, linux-aws, linux-aws-5.15, linux-aws-fips, linux-azure, linux-azure-5.15, linux-azure-fde-5.15, linux-azure-fips, linux-fips, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iot-realtime, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-oracle, linux-realtime, linux-xilinx-zynqmp, linux-azure-5.4, linux-azure-fde, linux-gcp, linux-gcp-fips, linux-gcp-5.15, linux-oracle-5.15, linux-raspi, rabbitmq-server, and unbound).

OpenAI Is Adding Text Watermarking In ChatGPT and Codex

Oct 06, 2026 11:00 | Source: slashdot.org

OpenAI is rolling out an invisible, machine-readable text watermark called textGrain to ChatGPT and Codex, "but only for users in the European Union at first," reports The Verge. From the report: OpenAI says its textGrain watermarking "matched or exceeded" other approaches like Google DeepMind's SynthID for text, which is also the basis for the watermarking Anthropic announced in August. Like OpenAI, Anthropic made the move to meet the requirements of the EU's AI Act; however, not everyone was happy to learn about the addition. OpenAI also included scores from AI benchmarks showing similar performance from watermarked and unwatermarked text. But it notes that textGrain "does not guarantee reliable detection," and says text watermarks don't verify accuracy, determine who owns the text, measure how much a human contributed, or prove human authorship. Read more of this story at Slashdot.

Meta Developing Compressed RAM "CRAM" For Linux: Better Than ZRAM & Zswap

Oct 06, 2026 10:23 | Source: phoronix.com

With today's memory shortages, high prices, and ever increasing memory capacity needs, Meta engineers have been working on Compressed RAM "CRAM" for Linux. This hardware-offloaded compression still allows cacheline/byte access to compressed memory and in turn a better implementation than the likes of ZRAM and Zswap. Very promising is that there is near-native performance to raw DRAM speeds with CRAM...

Intel Compiler Engineer Shares Latest Project Gains For APX

Oct 06, 2026 09:54 | Source: phoronix.com

Last week at the GNU Tools Cauldron 2026 conference in Prague there was an x86 BOF with presentations both by AMD and Intel compiler engineers. There are a few interesting nuggets out of that with both Advanced Performance Extensions (APX) and AI Compute Extensions (ACE) talked about as part of their ongoing enablement in the GCC compiler...

TechNexion TELOS-AI4000 delivers 40 TOPS in compact form factor

Oct 06, 2026 09:54 | Source: lxer.com

TELOS-AI4000 by TechNexion is a compact edge-AI accelerator module based on NXP’s Ara240 discrete neural processing unit. The module delivers up to 40 TOPS of AI performance, supports up to 16GB of LPDDR4 memory and is intended for vision, generative AI and other embedded inference workloads. The Ara240 has appeared in several accelerators covered by […]

YSERVER 1.7 Rust X11 Server Narrows Memory Usage Difference With X.Org Server

Oct 06, 2026 09:39 | Source: phoronix.com

YSERVER continues seeing a lot of activity for this vibe coded X11 server written in the Rust programming language. YSERVER has been seeing many apps and desktops working fine on this creation crafted in large part by Claude Code and continues chipping away at more X11 features. YSERVER 1.7 is out today with the latest fixes and improvements...

Old Hearts Become Biologically Younger When Transplanted Into Younger People

Oct 06, 2026 07:00 | Source: slashdot.org

alternative_right shares a report from ScienceAlert: It might be reasonable to think that there's an indelible link between the heart and the body it resides in -- the processes that affect one inevitably affect the other. But a new preprint, uploaded to bioRxiv and yet to be peer-reviewed, suggests that this may only be true up to a point. Take the heart out of the body and put it in a new one, and something incredible happens. The transplanted heart begins to take on the biological age of its new owner. Older hearts transplanted into younger recipients appear to become biologically younger, while younger hearts placed in older bodies show signs of accelerated aging. Read more of this story at Slashdot.

Texas City Demands $2 Million For Public Records On Flock Usage

Oct 06, 2026 04:30 | Source: slashdot.org

An anonymous reader quotes a report from Ars Technica: As bipartisan backlash against Flock grows, some cities are asking anti-surveillance advocates and media outlets to pay eye-popping fees -- including charging tens of thousands or even millions -- to get information about how police departments are using and potentially abusing AI-enabled camera systems that track every vehicle that passes them. On Monday, the Texas Tribune reported that city officials in a Fort Worth suburb, North Richland Hills, asked one group to pay $2.3 million before it would fulfill a public records request for Flock data. To reach that high fee, officials claimed that searching "about a terabyte worth of communications about errors, misuse, and effectiveness of the Flock system" would take approximately 14 years of labor at a rate of $15 per hour. Phil Mynona, who filed the request using a pseudonym on behalf of his group, the Texas Privacy Coalition, told the Tribune that the fee seemed "ludicrous" and designed to stifle his public records searches. Mynona has sought similar records from more than 200 law enforcement agencies across the US, and he said it was impossible to predict how cities assessed fees for Flock records. Some cities provided more than 400,000 pages of documents for free, while others charged $5,000. Other groups, including a Houston news station called KPRC, have seen officials quote up to $121,000 for Flock records, the Tribune reported. The high price tags may be hiding data that anti-surveillance groups note have triggered audits, arrests, and changes in how law enforcement uses cameras, including decisions to get rid of cameras. Further reading: Flock Blamed for Wrongful 13-Day Imprisonment and a Police Stalking Incident in Florida Read more of this story at Slashdot.

Rural Data Centers Are in for a Big Federal Tax Break

Oct 05, 2026 23:00 | Source: slashdot.org

Wired reports that rural data center projects could become eligible for expanded federal Opportunity Zone tax benefits starting in 2027, with more than 100 planned or developing facilities potentially qualifying. "Right now, the only requirement to get the benefits is capital investment," says Emily Kraschel, a tax policy analyst at the Searchlight Institute, a public policy think tank. "However, that doesn't guarantee that that money is necessarily creating jobs or creating a local economic boost. You'd be more sure of that with a more traditional factory that requires lots of workers. But with a data center, that assumption goes a little wonky." From the report: During the first Trump administration, a bipartisan group of lawmakers proposed the creation of the opportunity zone program, which offers tax benefits for companies that choose to build projects in certain low-income census tracts. Last year, the One Big Beautiful Bill Act made a number of changes to open up the program in order to attract more investment to rural areas. Kraschel and her colleagues from Searchlight have been researching data center projects that might qualify for these tax benefits, comparing the locations of data center projects in development with rural census tracts eligible for the new program. Wired exclusively reviewed the research compiled by Searchlight and found more than 100 data centers under various stages of development in rural areas that could be eligible. Searchlight used a very conservative database of under 700 data center projects that are planned or under construction to compile its research; other datasets put the number of data centers in development in the US at closer to 1,500. It's very likely that the number of newly eligible projects is bigger, especially since more data centers are decamping from urban areas. Separate research from Pew found that while just 13 percent of operating data centers are located in rural areas, a majority of planned facilities -- around 67 percent -- are going rural. [...] A project simply existing in a rural opportunity zone doesn't mean the company automatically will get the tax benefits; the company has to create a specialized investment vehicle to kickstart the process. Because the tax break can be considered confidential IRS data, it's next to impossible to know which companies are pursuing the benefits unless they voluntarily disclose. [...] Nathan Jensen, a government professor at the University of Texas-Austin, says that he would be "very surprised" if some companies were not considering siting in rural opportunity zones as part of their decisionmaking process. "It's essentially free money," he says. There is no requirement for projects getting opportunity zone benefits to create jobs; the assumption is that they will do so, simply by siting in the community itself. This isn't always the case for projects like storage facilities and warehouses, which, Jensen says, have been popular choices for developers working in opportunity zones. Data centers may create a number of jobs in the short term for their construction, but there's an ongoing debate about whether or not they create a lasting new workforce over the longer term. Read more of this story at Slashdot.

Hackers Steal 8 Million Citizens' Records From Danish Government Database

Oct 05, 2026 22:00 | Source: slashdot.org

Hackers stole records belonging to roughly 8 million Danish citizens and residents from Denmark's Central Person Register (CPR), including names, addresses, social security numbers and other personal information. The breach is believed to be the largest in Denmark's history. TechCrunch reports: The CPR is a government database of Danish citizens' information, including their government-issued identity number for paying taxes and accessing other services. Denmark's current population is about 6 million people, but the database includes records for about 11 million people, with some of the data going back decades. The Danish government would not say who is behind the breach, which happened in September but was discovered on October 2. However, it said the unauthorized access was obtained by "abusing a Danish company's lawful access to search for information in the CPR system." (Some companies in Denmark have access to the CPR for verifying people's information with the government.) Read more of this story at Slashdot.

Wikipedia Operator Says OpenAI's 'Rogue' Bots May Be Linked to a May Outage

Oct 05, 2026 21:00 | Source: slashdot.org

The Wikimedia Foundation says it found evidence that "rogue" OpenAI agents edited Wikimedia wikis without approval, unsuccessfully tried to exploit its Etherpad service, and generated millions of automated requests across Wikimedia projects. Here's a summary of what Wikimedia observed (via The Verge): Wiki editing: We've identified edits to Wikimedia wikis that we believe are from AI agents operated by OpenAI. These edits were not published to pages with visibility to general readers; almost all of them were testing edits in "sandbox" areas of the wiki. It also included a few edits to the configuration for a citation tool, which we believe were potentially malicious edits that were intended to misuse this tool as a proxy for fetching data from remote services. While Wikipedia policies allow bots to edit when they are disclosed and approved by the community, none of those approvals were sought in these incidents. Etherpad probing and use: Agents we believe to be operated by OpenAI made some unsuccessful attempts to compromise our public Etherpad, a note-taking tool we host as a community service. Agents unsuccessfully tried to use it to fetch data from other websites as a proxy. Other agents also likely operated by OpenAI took notes about their tasks, though this did not appear to turn into coordination. Excessive data downloading: Agents we believe to be operated by OpenAI made millions of automated requests to our public APIs to access the knowledge on Wikimedia projects, crawled millions of pages (mainly from our projects Wikidata and Wikimedia Commons), and made hundreds of thousands of data queries to the Wikidata Query Service (WQDS). This traffic may have contributed to a partial outage on WQDS in May. Read more of this story at Slashdot.

A new way to verify Linux ISO downloads

Oct 05, 2026 20:10 | Source: lxer.com

When it comes to verifying a Linux distro, it can be tricky, and each distro has its own set of instructions. This tool gives a straight forward interface for ISO verification

Meta Rushed To Fix Muse 'VM Escape' Vulnerability Soon Before Launch

Oct 05, 2026 20:00 | Source: slashdot.org

An anonymous reader quotes a report from 404 Media: In the immediate weeks before Muse's launch, Meta engineers found several security vulnerabilities in the company's viral AI agent product, at least one of which could have allowed malicious users to break outside of Muse's intended environment and access Meta's own sensitive databases and services, 404 Media has learned. The issues were so severe that they reached Mark Zuckerberg and staff worked overtime to fix them. These specific vulnerabilities were discovered before the launch of the product but required a multi-team "mad dash" to fix "a sudden spike in reported KVM escapes," according to an internal post by Meta executives to its core infrastructure team seen by 404 Media. In order for Muse to work, a user gives the AI agent access to various important services and accounts that they own. On Meta's end, each individual Muse instance runs on a kernel-based virtual machine, which connects to, but is supposed to be isolated from, Meta's own critical infrastructure. A "KVM escape," then, is when, through a security vulnerability, a Muse instance is able to escape from that virtual machine and interact with the system that runs it, or with other users' virtual machines. According to a Meta source, as well as internal security documentation and internal posts viewed by 404 Media, at least one of the vulnerabilities could have allowed an outside attacker -- that is, a normal Muse user -- to access data in sensitive internal Meta databases. At least one of the vulnerabilities was related to an exploit found in Linux kernel-based virtual machine code in July. 4 Several of the vulnerabilities were in the underlying Linux virtualization software that Meta uses for Muse. The security issue was considered serious enough that it was raised to Mark Zuckerberg, and several different security teams worked nights and weekends in the leadup to launch to fix the issues. [...] The Meta source said they felt security teams were asked to push hot fixes to these bugs as quickly as possible and in a way that wouldn't delay Muse's launch, leading to what they described as "half-baked protections being rushed out to enable the launch. Many senior engineers believe it's inevitable we're going to have a massive data breach as a result of Hatch." Muse is called "Hatch" internally and in Meta's codebase. Read more of this story at Slashdot.

Norway Plans Temporary Ban on Smart Glasses

Oct 05, 2026 19:00 | Source: slashdot.org

Norway is preparing legislation that would temporarily ban camera-equipped smart glasses in a range of public places, including parks, beaches, museums, shopping centers, schools, daycare centers, healthcare facilities, gyms and public events. Private use would still be allowed. The Guardian reports: Torgeir Micaelsen, Norway's minister of digital affairs, said he was worried that new, powerful technology is being introduced where people risk being photographed, filmed or audio-recorded without knowing it." "We do not want a society where people worry about being recorded without their knowledge, photographed or filmed in places and situations where they are accustomed to not being monitored," he said. Norway's Labour party, which heads a minority government, needs the support of other parties to pass the proposed ban. It said it planned to submit a bill "as soon as possible," while tasking an expert group with drawing up permanent regulations on the issue. Read more of this story at Slashdot.

Mac Users Reclaim 12GB+ of Storage With Apple Intelligence Removal Tool

Oct 05, 2026 18:00 | Source: slashdot.org

A new open-source command-line tool called RemoveMacAI lets macOS 27 users disable Apple Intelligence and reclaim around 12GB or more of storage. MacRumors reports: In macOS 27, Apple removed the toggle to disable Apple Intelligence wholesale, and simply disabling individual features doesn't remove the models from your Mac's drive. As explained by the developer, RemoveMacAI gets around this by using a configuration profile to switch off Apple's own asset management service and remove the models. It then configures the system so attempts to download the removed models are redirected to a closed local port, preventing them from immediately coming back. And it does all this without disabling System Integrity Protection (SIP) or manually deleting files from protected system locations, unlike some older tools have. The tool can free up roughly 12GB of space depending on which models are present on your Mac. That said, some users are reporting cases of Apple Intelligence models having taken up a lot more space, which they've now reclaimed. Read more of this story at Slashdot.

Anthropic Reports Florida Woman's Claude 'Diary' Threat to Law Enforcement

Oct 05, 2026 17:00 | Source: slashdot.org

A Florida woman was arrested on a felony charge after Anthropic's human review team flagged and reported a Claude conversation in which she allegedly threatened to "shoot up" the Lee County Sheriff's Office and later mentioned acquiring a new gun. Tom's Hardware reports: Anthropic monitors chats for key phrases and content that could be deemed threatening, the arrest report says, and depending on severity, they can be elevated for human review. In this case, the team decided to report its findings to law enforcement. The Bonita Springs woman was detained at home without incident, and an LCSO intelligence detective took over the case from there. The arrest report is not yet in the court file, but our own check shows court records listing the Sept. 30 felony charge under Florida Statute 836.10: written or electronic threat of a mass shooting or act of terrorism. No comment from Anthropic on the case is currently on record. Anthropic's public privacy policy, effective Sept. 10, says that disclosure to law enforcement may occur where it has a good-faith belief "that disclosure is reasonably necessary to ... prevent serious harm to any person or to property." Its government requests report for the latter half of 2025 uses a narrower standard for emergency disclosures, the "danger of death or serious physical injury to a person," and lists zero emergency requests from law enforcement in that period, though it doesn't count referrals Anthropic makes on its own. Read more of this story at Slashdot.

Sam Altman: 'The World Should Accept Some Bad Things Happening' For the Benefits of AI

Oct 05, 2026 16:00 | Source: slashdot.org

OpenAI CEO Sam Altman says society should accept some negative consequences from AI in exchange for the technology's broader benefits and widespread public access. "I think there's a lot of daylight," Altman told Decoded co-author and Politico senior tech reporter Brendan Bordelon. Asked about where he differs between Anthropic and its CEO Dario Amodei, Altman said, "we believe that the world should accept some bad things happening for the benefits of this technology and people having the agency." From the report: Altman agreed with Amodei's call last month to slow the development of the most advanced AI models. His company has followed Anthropic in endorsing new state laws that impose stricter safety requirements than what the maker of ChatGPT had previously supported -- a subtle shift from its prior state strategy. And OpenAI lobbyists recently endorsed a bipartisan House proposal that would require top AI companies to embed outside safety evaluators. Despite the convergence, Altman tried to distinguish his firm's regulatory stance from Anthropic's, referencing a criticism about regulatory capture that tech advisers close to President Donald Trump have applied to Anthropic. "I disagree, but I understand the perspective of people who are like, 'This technology is going to get so powerful, and it's so dangerous, that a single lab in San Francisco should have it and make sure nothing bad happens, and kind of figure out how to dole out the benefits,'" said Altman. He called it "a completely unacceptable trade-off" that runs counter to the "lighter-touch regulatory stance" backed by OpenAI. "I wouldn't take a trade of saying, 'We'll make sure there's no major hacks, there's no misuse of this technology, there's zero scams, there's zero all the other bad things that will happen,'" said Altman. "Because I think people will do tremendously -- orders of magnitude more -- good stuff than bad stuff." The OpenAI CEO later added that he does not accept "the really catastrophic risks," including the potential for "a serious loss of control to AI." Read more of this story at Slashdot.

RustConf recordings

Oct 05, 2026 15:11 | Source: lwn.net

The Rust Foundation has posted the recordings from RustConf 2026 in Montreal, Canada. Photos of the event are also available. LWN covered four talks from RustConf this year.

[$] An update on the Sashiko patch-review system

Oct 05, 2026 15:10 | Source: lwn.net

Patch review has long been one of the limiting constraints for the kernel project (and most others); there just aren't enough people to properly review all of the code that is submitted for inclusion. The Sashiko system, which uses a large language model (LLM) to generate reviews automatically, offers the prospect of some relief, and has already become an important part of the kernel's development process. At the 2026 edition of Kernel Recipes, Roman Gushchin, the maintainer of Sashiko, provided an overview of how the system works and what is being done to improve it.

Huawei and Qualcomm Struck a Broad Multi-Year Patent Licensing Deal

Oct 05, 2026 15:00 | Source: slashdot.org

An anonymous reader quotes a report from Quartz: Huawei and Qualcomm on Monday announced a multi-year, broad patent license agreement covering 5G, artificial intelligence, compute, and networking technologies, along with Qualcomm's purchase of certain Huawei U.S. patents in those same fields. The deal is the first patent licensing agreement between the two companies to cover 5G technologies, according to Reuters. Huawei said the agreement is expected to bring the cumulative value of its patent licensing deals above $6.9 billion upon closing. The agreement includes cross licenses to both companies' patent portfolios and is structured around fair, reasonable, and non-discriminatory, or FRAND, principles, the company said. The transaction will close following receipt of the necessary regulatory approvals. [...] The company noted that its intellectual property licensing unit has been profitable since 2021. Huawei made its first licensing payment to Qualcomm in 2001 and received its first licensing income, from Motorola, in 2011, according to Reuters. American export controls that took effect in 2019 have curtailed Huawei's access to cutting-edge chips and essential software, according to Reuters. The constraints pushed Huawei to increase its research and development spending in recent years. Read more of this story at Slashdot.

AMD ROCm vs. Vulkan Performance For Lemonade Local AI Server With Llama.cpp

Oct 05, 2026 13:50 | Source: phoronix.com

A Phoronix Premium reader recently inquired about seeing some new benchmarks of AI performance between Vulkan and AMD ROCm back-ends to see how the situation plays out today. Here are some fresh benchmarks on two separate systems with AMD Radeon graphics and using the Lemonade local AI server while exploring the difference between the ROCm and Vulkan Llama.cpp back-ends.

Picard 3.0 released

Oct 05, 2026 13:21 | Source: lwn.net

Version 3.0 of the MusicBrainz Picard tag editor has been released. "This release brings many changes, including an upgrade to Qt6, a completely new plugin system, several improvements to the user interface, cover art processing, [International Standard Recording Code (ISRC)] submission and many more." LWN covered Picard in April.

Security updates for Monday

Oct 05, 2026 13:11 | Source: lwn.net

Security updates have been issued by AlmaLinux (ghostscript, libvirt, and osbuild-composer), Debian (freecad, linux-6.12, node-lodash, pcre2, perl, php8.2, ruby-rack-session, wireshark, and xen), Fedora (assimp, budgie-control-center, budgie-desktop, budgie-desktop-services, budgie-desktop-view, chromium, cri-o1.36, curl, flatpak, lemonldap-ng, libX11, nagios-plugins, nanosvg, noctalia, openssl, pgbouncer, pocillo-gtk-theme, prometheus, python-streamlink, python-urllib3, python-uv-build, python3.12, ruff, rust-libcst, rust-libcst_derive, rust-salsa, rust-salsa-macro-rules, rust-salsa-macros, ty, and uv), Red Hat (rhc-worker-script), SUSE (amazon-ecs-init, binaryen-133, bind, chromium, distribution, firefox, firefox-esr, glib2, gnumeric, helm, jline3, kubevirt-1.6, libparted-fs-resize0, libslirp-devel, libtcnative-1-0, libtcnative-2-0, tomcat, tomcat10, tomcat11, libwireshark19, openai-codex, python313-litellm, rpcbind, rustup, sccache, suseconnect-ng, valkey, wget, and xdg-dbus-proxy), and Ubuntu (ceph).

Mesa Developers Looking At A Formal Governance Model

Oct 05, 2026 13:04 | Source: phoronix.com

The Mesa 3D driver stack has functioned well over the years without a formal governance model and just relying on an informal consensus approach for big changes. But on some occasions this informal handling has been less than ideal so upstream Mesa developers are now looking at establishing a formal governance model...

AMD Sends In More New GPU Hardware Enablement For Linux 7.4, Bug Fixes

Oct 05, 2026 10:50 | Source: lxer.com

We are nearing the cut-off of new Direct Rendering Manager (DRM) subsystem material for the upcoming Linux 7.4 cycle. AMD this week sent in another feature pull to DRM-Next that is moving over to mostly bug fixing but does contain the enablement of some new GPU intellectual property blocks for upcoming graphics hardware...

Mold 3.0 High Speed Linker Released Following Rust Rewrite

Oct 05, 2026 10:29 | Source: phoronix.com

The Mold high speed linker alternative to the likes of GNU Gold/LD and LLVM LLD recently has been going through a rewrite from C++ to Rust as well as having high ambitions of eventually becoming the default linker on Linux systems. Today marks the release of Mold 3.0 for this Rust-based high performance linker...

Linux 7.4 Continues Preparing For Intel's Rugged Panther Lake

Oct 05, 2026 10:23 | Source: phoronix.com

Back in May we spotted a Linux patch adding "Panther Lake R" as a rugged version of Panther Lake intended for "use in harsh environments". Since Linux 7.2 we have seen some bits of Panther Lake R driver support added while for the upcoming Linux 7.4 cycle there is additional enablement happening for this Panther Lake derivative...

Qualcomm Patching Linux For Hardware Thermal Binning To Benefit Snapdragon X Laptops

Oct 05, 2026 10:04 | Source: phoronix.com

A new patch series sent out from Qualcomm that aims to help at least the Snapdragon X series laptops is hardware-binned trip point support. Some Qualcomm SoCs are available in different multiple thermal/package bins with different junction temperature limits but otherwise being the same silicon. The new Linux patches are working to properly convey that information around the thermal limits for a given piece of silicon...