❌

Vue normale

Reçu aujourd’hui — 16 décembre 2025Actualités numériques

☕️ Google arrête les rapports personnalisés des fuites de vos données sur le dark web

✇Next - Articles gratuits
Par :Sébastien Gavois
16 décembre 2025 à 08:04

Depuis des années (les premiers signalements sur notre compte remontent étonnamment à 2016) Google pouvait surveiller le Dark Web pour récupérer des informations « sur les violations de données ayant divulgué vos informations ».

Cette fonctionnalité, Google en a officiellement parlé pour les abonnés One en 2023, avant de l’ouvrir à tous fin 2024. Un an plus tard, Google annonce mettre « fin au rapport sur le dark Web ». Un message est envoyé aux utilisateurs concernés et une page support a été mise en ligne.

Dès le 15 janvier 2026, la recherche de nouvelles violations sur le dark Web sera arrêtée. Un mois plus tard, le 16 février 2026, « l’outil de rapport sur le dark Web ne sera plus disponible ». Toutes les données liées seront alors supprimées.

« Bien que le rapport fournisse des informations générales, les retours ont montré qu’il ne proposait pas d’étapes concrètes à suivre. Nous apportons ce changement pour nous concentrer sur des outils qui vous fournissent des procédures plus claires et concrètes afin de protéger vos informations en ligne. Nous continuerons à surveiller les menaces en ligne et à vous défendre contre elles, y compris sur le dark Web. Nous développerons également des outils pour vous aider à vous protéger ainsi que vos informations personnelles », avance Google comme justification.

Il n’en reste pas moins que c’était une fonctionnalité pratique. Rien qu’en 2025, nous avons eu une dizaine de notifications de la part de Google. Il fallait créer un profil de surveillance avec les nom, date de naissance, adresse email et numéro de téléphone que l’on souhaitait surveiller.

Le rapport n’indiquait évidemment pas le mot de passe en entier, mais seulement les premiers caractères, permettant de savoir s’il avait fuité en clair ou non. Dans les rapports que nous avons reçus, plusieurs fois des mots de passe en clair apparaissaient. Un service ne doit pour rappel jamais stocker un mot de passe en clair en théorie.

☕️ Google arrête les rapports personnalisés des fuites de vos données sur le dark web

✇Next.ink
Par :Sébastien Gavois
16 décembre 2025 à 08:04

Depuis des années (les premiers signalements sur notre compte remontent étonnamment à 2016) Google pouvait surveiller le Dark Web pour récupérer des informations « sur les violations de données ayant divulgué vos informations ».

Cette fonctionnalité, Google en a officiellement parlé pour les abonnés One en 2023, avant de l’ouvrir à tous fin 2024. Un an plus tard, Google annonce mettre « fin au rapport sur le dark Web ». Un message est envoyé aux utilisateurs concernés et une page support a été mise en ligne.

Dès le 15 janvier 2026, la recherche de nouvelles violations sur le dark Web sera arrêtée. Un mois plus tard, le 16 février 2026, « l’outil de rapport sur le dark Web ne sera plus disponible ». Toutes les données liées seront alors supprimées.

« Bien que le rapport fournisse des informations générales, les retours ont montré qu’il ne proposait pas d’étapes concrètes à suivre. Nous apportons ce changement pour nous concentrer sur des outils qui vous fournissent des procédures plus claires et concrètes afin de protéger vos informations en ligne. Nous continuerons à surveiller les menaces en ligne et à vous défendre contre elles, y compris sur le dark Web. Nous développerons également des outils pour vous aider à vous protéger ainsi que vos informations personnelles », avance Google comme justification.

Il n’en reste pas moins que c’était une fonctionnalité pratique. Rien qu’en 2025, nous avons eu une dizaine de notifications de la part de Google. Il fallait créer un profil de surveillance avec les nom, date de naissance, adresse email et numéro de téléphone que l’on souhaitait surveiller.

Le rapport n’indiquait évidemment pas le mot de passe en entier, mais seulement les premiers caractères, permettant de savoir s’il avait fuité en clair ou non. Dans les rapports que nous avons reçus, plusieurs fois des mots de passe en clair apparaissaient. Un service ne doit pour rappel jamais stocker un mot de passe en clair en théorie.

Mettre deux ventirads CPU double tour sur un GPU ça donne quoi ? Eh bien ça donne ça !

✇Hardware & Co - Actualités
Par :contact@hardwareand.co (David Sergent)
16 décembre 2025 à 07:55

Encore une vidéo "WTF" mêlant amateurisme qui fait sourire quand on voit les tartinages de pâtes thermiques et autres radiateurs tenus avec des élastiques, mais qui peut aussi vous déclencher un petit "enfin, quelqu'un a essayé !" si vous êtes du genre curieux de tous les essais les plus capilotract...

☕️ Galileo : suivez en direct le 5ᵉ lancement lancement d’Ariane 6 demain matin

✇Next - Articles gratuits
Par :Sébastien Gavois
16 décembre 2025 à 07:00

Demain, à 6h01, Ariane 6 devrait décoller si tout se passe comme prévu pour sa mission VA266. Ce sera le « cinquième vol du lanceur lourd européen Ariane 6, dans sa configuration à deux boosters (Ariane 62) ». C’est la première fois que Galileo volera sur Ariane 6. Galileo est, pour rappel, le système de positionnement par satellite, concurrent du GPS américain.

À bord de cette mission, le 14ᵉ lancement opérationnel pour la constellation Galileo, les satellites « SAT 33 et SAT 34 seront placés sur une orbite moyenne (MEO) à environ 22 922 km d’altitude. Leur séparation interviendra 3 heures et 55 minutes après le décollage. Tous deux rejoindront ensuite progressivement leur orbite opérationnelle finale à 23 222 km d’altitude », explique Arianespace.

Ce sera donc le 5ᵉ lancement pour Ariane 6 et son 4ᵉ vol commercial (358ᵉ lancement opéré par Arianespace). En 2025, Arianespace aura donc réalisé sept lancements : quatre avec Ariane 6 et trois avec Vega C. Cette mission VA266 sera retransmise en direct sur ESA WebTV et la chaine ESA sur YouTube (à partir de 5h35). 

Pour rappel, SpaceX est à une centaine de lancements rien que pour Starlink cette année (c‘est plus que les années précédentes), avec plus de 2 300 satellites déployés en 2025, plus de 10 000 depuis le début.

☕️ Galileo : suivez en direct le 5ᵉ lancement lancement d’Ariane 6 demain matin

✇Next.ink
Par :Sébastien Gavois
16 décembre 2025 à 07:00

Demain, à 6h01, Ariane 6 devrait décoller si tout se passe comme prévu pour sa mission VA266. Ce sera le « cinquième vol du lanceur lourd européen Ariane 6, dans sa configuration à deux boosters (Ariane 62) ». C’est la première fois que Galileo volera sur Ariane 6. Galileo est, pour rappel, le système de positionnement par satellite, concurrent du GPS américain.

À bord de cette mission, le 14ᵉ lancement opérationnel pour la constellation Galileo, les satellites « SAT 33 et SAT 34 seront placés sur une orbite moyenne (MEO) à environ 22 922 km d’altitude. Leur séparation interviendra 3 heures et 55 minutes après le décollage. Tous deux rejoindront ensuite progressivement leur orbite opérationnelle finale à 23 222 km d’altitude », explique Arianespace.

Ce sera donc le 5ᵉ lancement pour Ariane 6 et son 4ᵉ vol commercial (358ᵉ lancement opéré par Arianespace). En 2025, Arianespace aura donc réalisé sept lancements : quatre avec Ariane 6 et trois avec Vega C. Cette mission VA266 sera retransmise en direct sur ESA WebTV et la chaine ESA sur YouTube (à partir de 5h35). 

Pour rappel, SpaceX est à une centaine de lancements rien que pour Starlink cette année (c‘est plus que les années précédentes), avec plus de 2 300 satellites déployés en 2025, plus de 10 000 depuis le début.

Glaciers To Reach Peak Rate of Extinction In the Alps In Eight Years

✇Slashdot
Par :BeauHD
16 décembre 2025 à 07:00
A new study warns that glaciers in the European Alps will hit their peak extinction rate within eight years, with global glacier loss accelerating toward thousands per year unless emissions are rapidly cut. "Glaciers in the western US and Canada are forecast to reach their peak year of loss less than a decade later, with more than 800 disappearing each year by then," adds the Guardian. From the report: About 200,000 glaciers remain worldwide, with about 750 disappearing each year. However, the research indicates this pace will accelerate rapidly as emissions from burning fossil fuels continue to be released into the atmosphere. Current climate action plans from governments are forecast to push global temperatures to about 2.7C above preindustrial levels, supercharging extreme weather. Under this scenario, glacier losses would peak at about 3,000 a year in 2040 and plateau at that rate until 2060. By the end of the century, 80% of today's glaciers will have gone. By contrast, rapid cuts to carbon emissions to keep global temperature rise to 1.5C would cap annual losses at about 2,000 a year in 2040, after which the rate would decline. [...] The new study, published in Nature Climate Change, analyzed more than 200,000 glaciers from a database of outlines derived from satellite images. The researchers used three global glacier models to assess their fate under different heating scenarios. Regions with the smallest and fastest-melting glaciers were found to be the most vulnerable. The study estimates the 3,200 glaciers in central Europe would shrink by 87% by 2100 -- even if global temperature rise is limited to 1.5C, rising to 97% under 2.7C of heating. In the western US and Canada, including Alaska, about 70% of today's 45,000 glaciers are projected to vanish under 1.5C of heating, and more than 90% under 2.7C. The Caucasus and southern Andes are also expected to face devastating losses. Larger glaciers take longer to melt, with those in Greenland reaching their peak extinction rate in about 2063 -- losing 40% by 2100 under 1.5C of heating and 59% under 2.7C. However, the melting is forecast to continue beyond 2100. The researchers said the peak loss dates represent more than a numerical milestone. "They mark turning points with profound implications for ecosystems, water resources and cultural heritage," they wrote. "[It is] a human story of vanishing landscapes, fading traditions and disrupted daily routines."

Read more of this story at Slashdot.

Une update de Borderlands 4 promet de meilleures performances !

✇CowcotLand news
16 décembre 2025 à 06:30

Une major update vient d'être déployée pour le jeu Borderlands 4, elle corrige logiquement divers bugs recensés, mais promet, surtout, de meilleures performances ! Une note de l'équipe de développement : Au cours des derniers mois, l'équipe a cherché à optimiser les performances d'exécution de Borderlands 4. Depuis le lancement, nous avons découvert plusieurs correctifs qui améliorent considérablement la fréquence d'images et réduisent les saccades sans sacrifier la qualité visuelle. Certains correctifs consistent en des améliorations de notre code ou de notre contenu, tandis que d'autres proviennent des versions plus récentes du moteur Unreal Engine d'Epic. Vous trouverez plus de détails ci-dessous. Cependant, il nous reste encore beaucoup à faire dans ce domaine. Nous sommes engagés dans une démarche à long terme et, au cours des prochains mois, nous déploierons encore plus d'améliorations en termes de performances. Nous apprécions les commentaires de la communauté et votre patience ! L'intégralité des corrections est consultable ici, nous nous attachons aux progrès dans le domaine des performances. […]

Lire la suite

Microsoft Will Finally Kill Obsolete Cipher That Has Wrecked Decades of Havoc

✇Slashdot
Par :BeauHD
16 décembre 2025 à 03:30
An anonymous reader quotes a report from Ars Technica: Microsoft is killing off an obsolete and vulnerable encryption cipher that Windows has supported by default for 26 years following more than a decade of devastating hacks that exploited it and recently faced blistering criticism from a prominent US senator. When the software maker rolled out Active Directory in 2000, it made RC4 a sole means of securing the Windows component, which administrators use to configure and provision fellow administrator and user accounts inside large organizations. RC4, short for Rivist Cipher 4, is a nod to mathematician and cryptographer Ron Rivest of RSA Security, who developed the stream cipher in 1987. Within days of the trade-secret-protected algorithm being leaked in 1994, a researcher demonstrated a cryptographic attack that significantly weakened the security it had been believed to provide. Despite the known susceptibility, RC4 remained a staple in encryption protocols, including SSL and its successor TLS, until about a decade ago. [...] Last week, Microsoft said it was finally deprecating RC4 and cited its susceptibility to Kerberoasting, the form of attack, known since 2014, that was the root cause of the initial intrusion into Ascension's network. "By mid-2026, we will be updating domain controller defaults for the Kerberos Key Distribution Center (KDC) on Windows Server 2008 and later to only allow AES-SHA1 encryption," Matthew Palko, a Microsoft principal program manager, wrote. "RC4 will be disabled by default and only used if a domain administrator explicitly configures an account or the KDC to use it." [...] Following next year's change, RC4 authentication will no longer function unless administrators perform the extra work to allow it. In the meantime, Palko said, it's crucial that admins identify any systems inside their networks that rely on the cipher. Despite the known vulnerabilities, RC4 remains the sole means of some third-party legacy systems for authenticating to Windows networks. These systems can often go overlooked in networks even though they are required for crucial functions. To streamline the identification of such systems, Microsoft is making several tools available. One is an update to KDC logs that will track both requests and responses that systems make using RC4 when performing requests through Kerberos. Kerberos is an industry-wide authentication protocol for verifying the identities of users and services over a non-secure network. It's the sole means for mutual authentication to Active Directory, which hackers attacking Windows networks widely consider a Holy Grail because of the control they gain once it has been compromised. Microsoft is also introducing new PowerShell scripts to sift through security event logs to more easily pinpoint problematic RC4 usage. Microsoft said it has steadily worked over the past decade to deprecate RC4, but that the task wasn't easy. "The problem though is that it's hard to kill off a cryptographic algorithm that is present in every OS that's shipped for the last 25 years and was the default algorithm for so long, Steve Syfuhs, who runs Microsoft's Windows Authentication team, wrote on Bluesky. "See," he continued, "the problem is not that the algorithm exists. The problem is how the algorithm is chosen, and the rules governing that spanned 20 years of code changes."

Read more of this story at Slashdot.

Lidar-Maker Luminar Files For Bankruptcy

✇Slashdot
Par :BeauHD
16 décembre 2025 à 01:25
Once a star of the self-driving hype cycle, lidar maker Luminar has filed for bankruptcy amid legal turmoil, layoffs, and a cooling autonomous-vehicle market. It plans to sell off its assets before shutting down entirely. The Verge reports: As part of its bankruptcy, Luminar is seeking permission to sell both its lidar and semiconductor businesses, the latter of which it has already agreed to sell to Quantum Computing for $110 million. The company plans to continue to operate during the bankruptcy proceedings "to minimize disruptions and maintain delivery of its LiDAR hardware and software." That said, Luminar will cease to exist once the process is complete. "As we navigate this process, our top priority is to continue delivering the same quality, reliability and service our customers have come to expect from us," CEO Paul Ricci said in a statement. After launching in 2017, Luminar muscled its way to the front of the autonomous vehicle industry as a top maker of lidar systems, a key technology that driverless cars use to sense the shapes and distances of objects around them. Luminar has sold sensors to Mercedes-Benz, Volvo, Audi, Toyota Research Institute, Caterpillar, and even Tesla, which has dismissed lidar sensors in favor of traditional cameras. The company was valued at nearly $3 billion when it went public through a reverse merger with a SPAC in 2020.

Read more of this story at Slashdot.

Fedora Games Lab Looks To Be Revitalized As Modern Linux Gaming Showcase

✇Phoronix
Par :Michael Larabel
16 décembre 2025 à 01:36
One of the lesser known Fedora spins under the "Fedora Labs" initiative is the Fedora Games Lab that showcases some open-source games and can serve as an easy demonstrator for Linux gaming. Looking forward to 2026 with Fedora 44, there is a proposal to revitalize Fedora Games Lab to become a better showcase for the modern potential of Linux gaming...

Google Search Homepage Adds a 'Plus' Menu

✇Slashdot
Par :BeauHD
16 décembre 2025 à 00:45
After introducing an AI Mode shortcut earlier this year, Google has now added a new "plus" menu to its Search homepage, highlighting options for image and file uploads. 9to5Google reports: On google.com, the Search bar now has a plus icon at the far left that replaces the magnifying glass. Clicking lets you "Upload image" or "Upload file." It very much matches the AI Mode experience. Those two capabilities aren't new, but this plus menu does help emphasize that you can use Google to accomplish tasks, and not just find information. Additionally, it helps indicate that they can be used with AI Mode and AI Overviews. This is just available on desktop web (not mobile) and is live on all the devices we checked today, including across signed-out Incognito sessions.

Read more of this story at Slashdot.

China, Iran Are Having a Field Day With React2Shell, Google Warns

✇Slashdot
Par :BeauHD
16 décembre 2025 à 00:02
A critical React vulnerability (CVE-2025-55182) is being actively exploited at scale by Chinese, Iranian, North Korean, and criminal groups to gain remote code execution, deploy backdoors, and mine crypto. The Register reports: React maintainers disclosed the critical bug on December 3, and exploitation began almost immediately. According to Amazon's threat intel team, Chinese government crews, including Earth Lamia and Jackpot Panda, started battering the security hole within hours of its disclosure. Palo Alto Networks' Unit 42 responders have put the victim count at more than 50 organizations across multiple sectors, with attackers from North Korea also abusing the flaw. Google, in a late Friday report, said at least five other suspected PRC spy groups also exploited React2Shell, along with criminals who deployed XMRig for illicit cryptocurrency mining, and "Iran-nexus actors," although the report doesn't provide any additional details about who the Iran-linked groups are and what they are doing after exploitation. "GTIG has also observed numerous discussions regarding CVE-2025-55182 in underground forums, including threads in which threat actors have shared links to scanning tools, proof-of-concept (PoC) code, and their experiences using these tools," the researchers wrote.

Read more of this story at Slashdot.

JPMorgan Steps Further Into Crypto With Tokenized Money Fund

✇Slashdot
Par :BeauHD
15 décembre 2025 à 23:20
An anonymous reader quotes a report from the Wall Street Journal: JPMorgan Chase is joining the list of traditional financial firms seeking to bring blockchain technology to an investing staple: the money-market fund. The banking giant's $4 trillion asset-management arm is rolling out its first tokenized money-market fund on the Ethereum blockchain. JPMorgan will seed the fund with $100 million of its own capital, and then open it to outside investors on Tuesday. Called My OnChain Net Yield Fund, or "MONY," the private fund is supported by JPMorgan's tokenization platform, Kinexys Digital Assets, and will be open to qualified investors, or individuals with at least $5 million in investments and institutions with a minimum of $25 million. The fund has a $1 million investment minimum. Wall Street has waded deeper into tokenization since the passage of the Genius Act earlier this year. The landmark measure, which establishes a regulatory framework for tokenized dollars known as stablecoins, has unleashed a wave of efforts to tokenize everything from stocks and bonds to funds and real assets. "There is a massive amount of interest from clients around tokenization," said John Donohue, head of global liquidity at J.P. Morgan Asset Management. "And we expect to be a leader in this space and work with clients to make sure that we have a product lineup that allows them to have the choices that we have in traditional money-market funds on blockchain."

Read more of this story at Slashdot.

Reçu hier — 15 décembre 2025Actualités numériques

Merriam-Webster's 2025 Word of the Year Is 'Slop'

✇Slashdot
Par :BeauHD
15 décembre 2025 à 22:40
Merriam-Webster crowned "slop" its 2025 Word of the Year, reflecting growing public awareness and and fatigue around low-quality, AI-generated content flooding the internet. "It's such an illustrative word," said Greg Barlow, Merriam-Webster's president. "It's part of a transformative technology, AI, and it's something that people have found fascinating, annoying and a little bit ridiculous." The Associated Press reports: "Slop" was first used in the 1700s to mean soft mud, but it evolved more generally to mean something of little value. The definition has since expanded to mean "digital content of low quality that is produced usually in quantity by means of artificial intelligence." In other words, "you know, absurd videos, weird advertising images, cheesy propaganda, fake news that looks real, junky AI-written digital books," Barlow said. "Words like 'ubiquitous,' 'paradigm,' 'albeit,' 'irregardless,' these are always top lookups because they're words that are on the edge of our lexicon," Barlow said. "'Irregardless' is a word in the dictionary for one reason: It's used. It's been used for decades to mean 'regardless.'" The announcement can be found here.

Read more of this story at Slashdot.

Ford Ends F-150 Lightning Production, Starts Battery Storage Business

✇Slashdot
Par :BeauHD
15 décembre 2025 à 22:00
Ford has effectively pulled the plug on the all-electric F-150 Lightning, pivoting away from full-size BEV pickups toward hybrids, range-extended EVs (EREVs), and even data-center battery storage. Ars Technica reports: Ford's announcements today can't be said to have come out of the blue. Rumors of the F-150's demise have been circulating for more than a month, and last week SK On ended its joint venture with Ford that was building a pair of EV battery plants in Kentucky and Tennessee. We learned then that Ford would keep the Kentucky plant and SK On gets the one in Tennessee, which would focus on the energy storage business instead. Now, we know that something similar will happen at the Kentucky plant -- Ford says it's spending $2 billion to convert the factory to make prismatic lithium iron phosphate (LFP) cells. Those aren't destined for EVs, but they are the preferred cell format for data centers, Ford says. The company says that it will bring the factory online in the next 18 months, reaching an annual output of 20 GWh. Other Ford plants are also being repurposed. With no full-size BEV pickup in the product plans, the assembly plant in Tennessee that was to produce it -- the one near the battery factory that SK On is keeping -- will instead build new gas-powered trucks, although not for another four years. Around that same time, its Ohio assembly plant will begin building new commercial vehicles. All of this will impact Ford's bottom line, to the tune of $19.5 billion over the next few years, $5.5 billion of which will be in cash. Most of that will hit in the final quarter of 2025, but will extend until 2027, Ford said.

Read more of this story at Slashdot.

Russian Ban On Roblox Gaming Platform Sparks Rare Protest

✇Slashdot
Par :BeauHD
15 décembre 2025 à 21:23
An anonymous reader quotes a report from Reuters: Several dozen people protested on Sunday in the Siberian city of Tomsk against Russia's ban on U.S. children's gaming platform Roblox, a rare show of public dissent as popular irritation over the ban gains some momentum. In wartime Russia, censorship is extensive: Moscow blocks or restricts social media platforms such as Snapchat, Facebook, Instagram, WhatsApp and YouTube while distributing its own narrative through a network of social media and Russian media. Russia's communications watchdog Roskomnadzor said on December 3 it had blocked Roblox because it was "rife with inappropriate content that can negatively impact the spiritual and moral development of children." In Tomsk, 2,900 km (1,800 miles) east of Moscow, several dozen people braved the snow to hold up hand-drawn placards reading "Hands off Roblox" and "Roblox is the victim of the digital Iron Curtain" in Vladimir Vysotsky Park, according to photographs provided by an organizer of the protest. "Bans and blocks are all you are able to do," read one placard. The photographs showed about 25 people standing in a circle in the snow, holding up placards. In Russia, the ban on Roblox has triggered a debate over censorship, child safety in relation to technology and even the effectiveness of censorship in a digitalized world where children can bypass many bans in a few clicks.

Read more of this story at Slashdot.

Torvalds On Linux Security Modules: "I Already Think We Have Too Many Of Those Pointless Things"

✇Phoronix
Par :Michael Larabel
15 décembre 2025 à 21:34
Stemming from a security researcher and his team proposing a new Linux Security Module (LSM) three years ago and it not being accepted to the mainline kernel, he raised issue over the lack of review/action to Linus Torvalds and the mailing lists. In particular, seeking more guidance for how new LSMs should be introduced and raised the possibility of taking the issue to the Linux Foundation Technical Advisory Board (TAB)...
❌