Vue normale

Il y a de nouveaux articles disponibles, cliquez pour rafraîchir la page.
Aujourd’hui — 9 juin 2024Slashdot

Is the Uranium Fuel Proposed For Small Modular Nuclear Reactors a Weapons Risk?

Par : EditorDavid
9 juin 2024 à 16:34
Reuters reports: A special uranium fuel planned for next-generation U.S. nuclear reactors poses security risks because it could be used without further enrichment as fissile material in nuclear weapons, scientists said in an article published on Thursday. The fuel, called high-assay low-enriched uranium, or HALEU, is enriched to levels of up to 20%, compared with about 5% for the fuel that powers most existing reactors. Until recently it was made in commercial amounts only in Russia, but the United States wants to produce it to fuel a new wave of reactors... "This material is directly usable for making nuclear weapons without any further enrichment or reprocessing," said Scott Kemp, one of five authors of the peer-reviewed article in the journal Science. "In other words, the new reactors pose an unprecedented nuclear-security risk," said Kemp, a professor at the Massachusetts Institute of Technology and a former science adviser on arms control at the State Department. A bomb similar in power to the one the U.S. dropped on Hiroshima, Japan in 1945 could be made from 2,200 pounds (1,000 kg) or less of 19.75% enriched HALEU, the article said. "Designing such a weapon would not be without its challenges, but there do not appear to be any convincing reasons why it could not be done," it said. The authors said if enrichment is limited to 10% to 12%, the supply chain would be far safer with only modest costs... TerraPower, a company backed by Bill Gates that has received funding from the [U.S.] Energy Department, hopes to build its Natrium nuclear plant in Wyoming by 2030 to run on HALEU. TerraPower in late 2022 delayed Natrium's launch date by at least two years to 2030 due to a lack of HALEU. A TerraPower spokesperson said Natrium will use HALEU as it allows more efficient energy production and reduces nuclear waste volumes. "TerraPower has made reduction of weapons risks a foundational principle" the spokesperson said, adding that its fuel cycle eliminates the risk of proliferation. Reuters notes that America's 2022 climate legislation "included $700 million for a HALEU availability program including purchasing the fuel to create a supply chain for planned high-tech reactors." But the study's authors argue that if it becomes a standard reactor fuel, it could eliminate the distinction between peaceful and nonpeaceful nuclear programs — in countries around the world. Thanks to Slashdot reader locater16 for sharing the article.

Read more of this story at Slashdot.

How Google Will Distribute $100 Million to Canada's News Companies

Par : EditorDavid
9 juin 2024 à 15:34
In November Google agreed to pay Canadian news publishers $100 million annually "in order to be exempt from the Online News Act, which compels tech companies to enter into agreements with news publishers," writes the Canadian Press. On Friday Google "named the organization it has selected to distribute the $100 million..." The Canadian Journalism Collective will be responsible for ensuring eligible news organizations get their share of the money. The collective is a federally incorporated non-profit organization that was created for this purpose. It was founded in May by a group of independent publishers and broadcasters... "We hope these next steps will be completed as quickly as possible, so Canadian publishers and journalists can soon begin to receive the proceeds of this new contribution model," Google said in a blog entry posted on their website Friday... The money will be distributed proportionately based on how many full time-journalists the companies employ. Small print and digital outlets can expect to receive about $17,000 per journalist that they employ, an official with the Canadian Heritage Department has said. Google's money will go to 1,520 news organizations, according to Google's blog post — which describes the arrangement as "addressing our concerns with the Online News Act" and "a viable path to an exemption at a clear and commercially acceptable commitment level..." As part of this transition, we have advised partners in our Google News Showcase program (our online news experience and licensing program for news organizations) will cease to operate in Canada later this year as we transition to this new contribution model. We will be maintaining some Google News Initiative programming in Canada. This includes a range of collaborative tools and resources that can support the advancement of quality journalism. However, with our monetary contribution in Canada now streamlined into the new single collective model, these investments will be non-monetary in nature.

Read more of this story at Slashdot.

Jury Finds Autonomy Founder Mike Lynch Not Guilty of Defrauding HP

Par : EditorDavid
9 juin 2024 à 14:34
The BBC reports that British tech tycoon Mike Lynch "has been cleared of fraud charges he faced in the U.S. over the $11bn (£8.6bn) sale of his software firm to Hewlett-Packard in 2011." A jury in San Francisco found him not guilty on all counts in a stunning victory for Mr Lynch, who had been accused of inflating the value of Autonomy, his company, ahead of its sale. Mr Lynch, who faced more than 20 years in prison if convicted, had denied the charges and took the stand to defend himself. In his testimony, he maintained he had focused on technology not accounting, distancing himself from other executives, including the company's former chief financial officer who was already successfully prosecuted for fraud... Mr Lynch made £500m from the sale. Just a year later, HP wrote down the value of Autonomy by $8.8bn. Years of legal battles followed. The company's chief financial officer, Sushovan Hussain, was found guilty of fraud in 2018 and later sentenced to five years in prison... Mr Lynch's team pushed the argument that HP had failed to properly vet the deal and mismanaged the takeover, while he testified he was uninvolved with the transactions being described. Lynch's lawyers said the verdict "closes the book on a relentless 13-year effort to pin HP's well-documented ineptitude on Dr Lynch. Thankfully, the truth has finally prevailed." Thanks to Slashdot reader Bruce66423 for sharing the news.

Read more of this story at Slashdot.

Should Police Departments Use Drones?

Par : EditorDavid
9 juin 2024 à 11:34
Wired visits Chula Vista, California (population: 275,487) — where since 2018 drones have been dispatched by police "teleoperators" monitoring 911 calls. ("Noise complaints, car accidents, overdoses, domestic disputes...") After nearly 20,000 drone flights, it's become the envy of other police departments, according to Wired's article, as other police departments "look to expand their use of unmanned aerial aircraft." The [Chula Vista] department says that its drones provide officers with critical intelligence about incidents they are responding to ahead of initiating in-person contact — which the CVPD says has reduced unnecessary police contacts, decreased response times, and saved lives. But a WIRED investigation paints a complicated picture of the trade-offs between public safety and privacy. In Chula Vista, drone flight paths trace a map of the city's inequality, with poorer residents experiencing far more exposure to the drones' cameras and rotors than their wealthier counterparts, a WIRED analysis of nearly 10,000 drone flight records from July 2021 to September 2023 found. The drones, often dispatched for serious incidents like reports of armed individuals, are also routinely deployed for minor issues such as shoplifting, vandalism, and loud music. [Drones are sent in response to about 1 in every 14 calls.] Early in the Covid-19 pandemic, the city even used drones to broadcast public service announcements to homeless encampments. Despite the police promoting the benefits of the "Drone as First Responder" program, residents who encounter the technology day-to-day report feeling constantly watched. Some say they are afraid to spend time in their backyards; they fear that the machines are following them down the street, spying on them while they use the public pool or change their clothes. One resident says that he was so worried that the drones were harassing him that he went to the emergency room for severe depression and exhaustion. [A 60-year-old professor told Wired that the sound of drones kept them awake at night.] The police drones, equipped with cameras and zoom lenses powerful enough to capture faces clearly and constantly recording while in flight, have amassed hundreds of hours of video footage of the city's residents. Their flight paths routinely take them over backyards and above public pools, high schools, hospitals, churches, mosques, immigration law firms, and even the city's Planned Parenthood facility. Privacy advocates argue that the extensive footage captured by the drones makes it difficult to distinguish between flights responding to specific incidents and mass surveillance from the sky. Department secrecy around the recordings remains the subject of ongoing litigation... At the time of our analysis, approximately one in 10 drone flights listed on the department's transparency portal lacked a stated purpose and could not be connected to any relevant 911 call.

Read more of this story at Slashdot.

Dutch Police Test AI-Powered Robot Dog to Raid Drug Labs

Par : EditorDavid
9 juin 2024 à 07:34
"Police and search and rescue forces worldwide are increasingly using robots to assist in carrying out their operations," writes Interesting Engineering. "Now, the Dutch police are looking at employing AI-powered autonomous robot dogs in drug lab raids to protect officers from criminal risks, hazardous chemicals, and explosions." New Scientist's Matthew Sparkes (also a long-time Slashdot reader) shares this report: Dutch police are planning to use an autonomous robotic dog in drug lab raids to avoid placing officers at risk from criminals, dangerous chemicals and explosions. If tests in mocked-up scenarios go well, the artificial intelligence-powered robot will be deployed in real raids, say police. Simon Prins at Politie Nederland, the Dutch police force, has been testing and using robots in criminal investigations for more than two decades, but says they are only now growing capable enough to be practical for more... Some context from Interesting Engineering: The police force in the Netherlands carries out such raids at least three to four times a week... Since 2021, the force has already been using a Spot quadruped, fitted with a robotic arm, from Boston Dynamics to carry out drug raids and surveillance. However, the Spot is remotely controlled by a handler... [Significant technological advancements] have prompted the Dutch force to explore fully autonomous operations with Spot. Reportedly, such AI-enabled autonomous robots are expected to inspect drug labs, ensure no criminals are present, map the area, and identify dangerous chemicals... Initial tests by force suggest that Spot could explore and map a mock drug lab measuring 15 meters by 20 meters. It was able to find hazardous chemicals and put them away into a designated storage container. Their article notes that Spot "can do laser scans and visual, thermal, radiation, and acoustic inspections using add-on payloads and onboard cameras." (A video from Boston Dynamics — the company behind Spot — also seems to show the robot dog spraying something on a fire.) The video seems aimed at police departments, touting the robot dog's advantages for "safety and incident response": Enables safer investigation of suspicious packages Detection of hazardous chemicals De-escalation of tense or dangerous situations Get eyes on dangerous situations It also notes the robot "can be operated from a safe distance," suggesting customers "Use Spot(R) to place cameras, radios, and more for tactical reconnaissance."

Read more of this story at Slashdot.

First Detection of Negative Ions on the Moon, Far-Side Soil Samples Headed to Earth

Par : EditorDavid
9 juin 2024 à 04:34
"The first European Space Agency instrument to land on the Moon has detected the presence of negative ions on the lunar surface produced through interactions with the solar wind," according to a statement from the agency, collecting over three hours of data, "three times more than what the science teams needed for mission success..." The solar wind is a constant flow of radiation and particles from the Sun. Earth's magnetic field acts as a shield. In contrast, the Moon has no magnetic field and a very tenuous atmosphere, called the exosphere. When the solar wind hits the Moon,âthe surface reacts, kicking up secondary particles... While the positively charged particles have been measured from orbit before, measuring negative particles was a challenge. Negative ions are short-lived and cannot make it to orbit. The instrument was dropped off by China's Chang'e-6 lunar lander, and Europe's ground stations are also providing support for that mission. Futurism reports: Within just over 48 hours, China's Chang'e-6 lunar touched down on the far side of the Moon, successfully scooped up samples, and kicked off once again. It was an extraordinary feat, representing the first-ever samples ever collected from the side of the Moon that permanently faces away from us. During its brief visit, the lander also dropped off several scientific payloads on the lunar service, including the European Space Agency's Negative Ions at the Lunar Surface instrument. The lander also unfurled China's red and gold flag for the first time on the far side of the moon, according to the Associated Press. And then... Its ascender lifted off Tuesday morning at 7:38 a.m. Beijing time, with its engine burning for about six minutes as it entered a preset orbit around the moon, the China National Space Administration said. The agency said the spacecraft withstood a high temperature test on the lunar surface, and acquired the samples using both drilling and surface collection before stowing them in a container inside the ascender of the probe as planned. The container will be transferred to a reentry capsule that is due to return to Earth in the deserts of China's Inner Mongolia region about June 25. The samples "could help researchers figure out why the moon's two sides are so starkly different," writes Science News: Spacecraft observations of the farside show very little volcanic activity. Some scientists suspect that this is because the nearside crust is much thinner, which would have allowed more magma to come up from below the surface, says Kerri Donaldson Hanna, a planetary geologist at the University of Central Florida in Orlando. There is evidence that some volcanism occurred in the South Pole-Aitken basin and in Apollo crater, though it appears this activity happened roughly 3.5 billion years ago. It's possible the impact that created both Aiken and Apollo weakened the lunar crust, forming fractures and allowing magma to flow. The samples onboard Chang'e-6 could contain clues as to whether or not this happened. Both Chinese and international researchers will be able to study the material. Donaldson Hanna is looking forward to seeing what insights will be gleaned from Chang'e-6 as well as future landers, such as those in NASA's Commercial Lunar Payload Services program. Thanks to Slashdot reader cusco for sharing the news.

Read more of this story at Slashdot.

US Justice Department Indicts Creators of Bitcoin-Anonymizing 'Samouri' Wallet

Par : EditorDavid
9 juin 2024 à 01:35
America's Justice Department "indicted the creators of an application that helps people spend their bitcoins anonymously," writes Reason.com: They're accused of "conspiracy to commit money laundering." Why "conspiracy to commit" as opposed to just "money laundering"? Because they didn't hold anyone else's money or do anything illegal with it. They provided a privacy tool that may have enabled other people to do illegal things with their bitcoin... What this tool does is offer what's known as a "coinjoin," a method for anonymizing bitcoin transactions by mixing them with other transactions, as the project's founder, Keonne Rodriguez, explained to Reason in 2022: "I think the best analogy for it is like smelting gold," he said. "You take your Bitcoin, you add it into [the conjoin protocol] Whirlpool, and Whirlpool smelts it into new pieces that are not associated to the original piece." Reason argues that providing the tool isn't a crime, just like selling someone a kitchen knife isn't a crime: The government's decision to indict Rodriguez and his partner William Lonergan Hill is also an attack on free speech because all they did was write open-source code and make it widely available. "It is an issue of a chilling effect on free speech," attorney Jerry Brito, who heads up the cryptocurrency nonprofit Coin Center, told Reason after the U.S. Treasury went after the creators of another piece of anonymizing software... The most important thing about bitcoin, and money like it, isn't its price. It's the check it places on the government's ability to devalue, censor, and surviel our money. Creators of open-source tools like Samourai Wallet should be celebrated, not threatened with a quarter-century in a federal prison. Long-time Slashdot reader SonicSpike shared the article...

Read more of this story at Slashdot.

Hier — 8 juin 2024Slashdot

Is Nuclear Power in America Reviving - or Flailing?

Par : EditorDavid
8 juin 2024 à 22:34
Last week America's energy secretary cheered the startup of a fourth nuclear reactor at a Georgia power plant, calling it "the largest producer of clean energy, and the largest producer of electricity in the United States" after a third reactor was started up there in December. From the U.S. Energy Department's transcript of the speech: Each year, Units 3 and 4 are going to produce enough clean power to power 1 million homes and businesses, enough energy to power roughly 1 in 4 homes in Georgia. Preventing 10 million metric tons of carbon dioxide pollution annually. That, by the way, is like planting more than 165 million trees every year! And that's not to mention the historic investments that [electric utility] Southern has made on the safety front, to ensure this facility meets — and exceeds — the highest operating standards in the world.... To reach our goal of net zero by 2050, we have to at least triple our current nuclear capacity in this country. That means we've got to add 200 more gigawatts by 2050. Okay, two down, 198 to go! In building [Unit] 4, we've solved our greatest design challenges. We've stood up entire supply chains.... And so it's time to cash in on our investments by building more. More of these facilities. The Department of Energy's Loan Programs Office stands ready to help, with hundreds of billions of dollars in what we call Title 17 loans... Since the President signed the Inflation Reduction Act and the Bipartisan Infrastructure Law, companies across the nation have announced 29 new or expanded nuclear facilities — across 16 states — representing about 1,600 potential new jobs. And the majority of those projects will expand the domestic uranium production and fuel fabrication, strengthening these critical supply chains... Bottom line is, in short, we are determined to build a world-class nuclear industry in the United States, and we're putting our money where our mouth is. America's Energy Secretary told the Washington Post that "Whether it happens through small modular reactors, or AP1000s, or maybe another design out there worthy of consideration, we want to see nuclear built." The Post notes the Energy department gave a $1.5 billion loan to restart a Michigan power plant which was decommissioned in 2022. "It would mark the first time a shuttered U.S. nuclear plant has been reactivated." "But in this country with 54 nuclear plants across 28 states, restarting existing reactors and delaying their closure is a lot less complicated than building new ones." When the final [Georgia] reactor went online at the end of April, the expansion was seven years behind schedule and nearly $20 billion over budget. It ultimately cost more than twice as much as promised, with ratepayers footing much of the bill through surcharges and rate hikes... Administration officials say the country has no choice but to make nuclear power a workable option again. The country is fast running short on electricity, demand for power is surging amid a boom in construction of data centers and manufacturing plants, and a neglected power grid is struggling to accommodate enough new wind and solar power to meet the nation's needs... As the administration frames the narrative of the plant as one of perseverance and innovation that clears a path for restoring U.S. nuclear energy dominance, even some longtime boosters of the industry question whether this country will ever again have a vibrant nuclear energy sector. "It is hard for me to envision state energy regulators signing off on another one of these, given how badly the last ones went," said Matt Bowen, a nuclear scholar at the Center on Global Energy Policy at Columbia University, who was an adviser on nuclear energy issues in the Obama administration. The article notes there are 19 AP1000 reactors (the design used at the Georgia plant) in development around the world. "None of them are being built in the United States."

Read more of this story at Slashdot.

New Linux Version of Ransomware Targets VMware ESXi

Par : EditorDavid
8 juin 2024 à 21:34
"Researchers observed a new Linux variant of the TargetCompany ransomware family that targets VMware ESXi environments," reports BleepingComputer: In a report Wednesday, cybersecurity company Trend Micro says that the new Linux variant for TargetCompany ransomware makes sure that it has administrative privileges before continuing the malicious routine... Once on the target system, the payload checks if it runs in a VMware ESXi environment by executing the 'uname' command and looking for 'vmkernel.' Next, a "TargetInfo.txt" file is created and sent to the command and control (C2) server. It contains victim information such as hostname, IP address, OS details, logged-in users and privileges, unique identifiers, and details about the encrypted files and directories. The ransomware will encrypt files that have VM-related extensions (vmdk, vmem, vswp, vmx, vmsn, nvram), appending the ".locked" extension to the resulting files. Finally, a ransom note named "HOW TO DECRYPT.txt" is dropped, containing instructions for the victim on how to pay the ransom and retrieve a valid decryption key. "After all tasks have been completed, the shell script deletes the payload using the 'rm -f x' command so all traces that can be used in post-incident investigations are wiped from impacted machines." Thanks to long-time Slashdot reader joshuark for sharing the article.

Read more of this story at Slashdot.

Louisiana Becomes 10th US State to Make CS a High School Graduation Requirement

Par : EditorDavid
8 juin 2024 à 20:34
Long-time Slashdot reader theodp writes: "Great news, Louisiana!" tech-backed Code.org exclaimed Wednesday in celebratory LinkedIn, Facebook, and Twitter posts. Louisiana is "officially the 10th state to make computer science a [high school] graduation requirement. Huge thanks to Governor Jeff Landry for signing the bill and to our legislative champions, Rep. Jason Hughes and Sen. Thomas Pressly, for making it happen! This means every Louisiana student gets a chance to learn coding and other tech skills that are super important these days. These skills can help them solve problems, think critically, and open doors to awesome careers!" Representative Hughes, the sponsor of HB264 — which calls for each public high school student to successfully complete a one credit CS course as a requirement for graduation and also permits students to take two units of CS instead of studying a Foreign Language — tweeted back: "HUGE thanks @codeorg for their partnership in this effort every step of the way! Couldn't have done it without [Code.org Senior Director of State Government Affairs] Anthony [Owen] and the Code.org team!" Code.org also on Wednesday announced the release of its 2023 Impact Report, which touted its efforts "to include a requirement for every student to take computer science to receive a high school diploma." Since its 2013 launch, Code.org reports it's spent $219.8 million to push coding into K-12 classrooms, including $19 million on Government Affairs (Achievements: "Policies changed in 50 states. More than $343M in state budgets allocated to computer science."). In Code.org by the Numbers, the nonprofit boasts that 254,683 students started Code.org's AP CS Principles course in the academic year (2025 Goal: 400K), while 21,425 have started Code.org's new Amazon-bankrolled AP CS A course. Estimates peg U.S. public high school enrollment at 15.5M students, annual K-12 public school spending at $16,080 per pupil, and an annual high school student course load at 6-8 credits...

Read more of this story at Slashdot.

Rust Growing Fastest, But JavaScript Reigns Supreme

Par : EditorDavid
8 juin 2024 à 19:34
"Rust is the fastest-growing programming language, with its developer community doubling in size over the past two years," writes The New Stack, "yet JavaScript remains the most popular language with 25.2 million active developers, according to the results of a recent survey." The 26th edition of SlashData's Developer Nation survey showed that the Rust community doubled its number of users over the past two years — from two million in the first quarter of 2022 to four million in the first quarter of 2024 — and by 33% in the last 12 months alone. The SlashData report covers the first quarter of 2024. "Rust has developed a passionate community that advocates for it as a memory-safe language which can provide great performance, but cybersecurity concerns may lead to an even greater increase," the report said. "The USA and its international partners have made the case in the last six months for adopting memory-safe languages...." "JavaScript's dominant position is unlikely to change anytime soon, with its developer population increasing by 4M developers over the last 12 months, with a growth rate in line with the global developer population growth," the report said. The strength of the JavaScript community is fueled by the widespread use of the language across all types of development projects, with at least 25% of developers in every project type using it, the report said. "Even in development areas not commonly associated with the language, such as on-device coding for IoT projects, JavaScript still sees considerable adoption," SlashData said. Also, coming in strong, Python has overtaken Java as the second most popular language, driven by the interest in machine learning and AI. The battle between Python and Java shows Python with 18.2 million developers in Q1 2024 compared to Java's 17.7 million. This comes about after Python added more than 2.1 million net new developers to its community over the last 12 months, compared to Java which only increased by 1.2 million developers... Following behind Java there is a six-million-developer gap to the next largest community, which is C++ with 11.4 million developers, closely trailed by C# with 10.2 million and PHP with 9.8 million. Languages with the smallest communities include Objective-C with 2.7 million developers, Ruby with 2.5 million, and Lua with 1.8 million. Meanwhile, the Go language saw its developer population grow by 10% over the last year. It had previously outpaced the global developer population growth, growing by 5Y% over the past two years, from three million in Q1 2022 to 4.7 million in Q1 2024. "TNS analyst Lawrence Hecht has a few different takeaways. He notes that with the exceptions of Rust, Go and JavaScript, the other major programming languages all grew slower than the total developer population, which SlashData says increased 39% over the last two years alone."

Read more of this story at Slashdot.

Apple Watch Leads to Luggage Stolen By an Airport Store Worker

Par : EditorDavid
8 juin 2024 à 18:34
A worker at a retail store in an airport has been charged with stealing thousands of dollars in electronics and clothing, reports the Washington Post. But what's more interesting is what led to his arrest... A woman showed up at his home looking for the missing luggage that she'd tracked with her Apple Watch. CNN reports: Paola Garcia told CNN affiliate WPLG in Miami that she usually takes her suitcase onboard, but this time, she was told she had to check it. Garcia waited at least two hours for her pink roller bag, which contained an Apple MacBook, Apple iPad, Apple Watch, jewelry, high-end woman's clothing and toiletries. It never came out on the luggage belt. In her WPLG interview, Garcia said that Spirit Airlines told her that her luggage had been sent to her house. The luggage never came. But Garcia explored another avenue with her own electronic tracker. Garcia, not named in the affidavit, later pinged the electronic items inside the bag to try and locate them, and the ping showed them at an address in Fort Lauderdale, the affidavit said... While at the house, she took video and still pictures, where she saw "several pieces of luggage in the front of the home," none of which were her own, the affidavit said. Garcia told WPLG that she dialed 911. "The first thing I remember the police told me is: 'What are you doing here? This is so dangerous for you to be here.' " When a detective with the Broward County Sheriff's Office searched the address within the airport's employee databases, he found that Bazile reportedly lived at the address. Bazile was listed as working at a Paradies Lagardère Travel Retail store at the airport and was working on the day of the theft, according to the affidavit. So apparently when the airline said the luggage had been sent to her house — they were wrong. In fact when police contacted a store manager, "he provided the detective with internal CCTV footage from the day of the incident," CNN reports, "which allegedly showed Bazile entering the store's storage room with a pink shell roller bag, matching the description of the stolen bag, and rummaging through the luggage, the affidavit said. "He then appeared to take the MacBook and other smaller items out of the luggage and put them in other bags."

Read more of this story at Slashdot.

Lansweeper Finds 26% of Its Users On CentOS, Facing May 1st End-of-life

Par : EditorDavid
8 juin 2024 à 17:34
"Lansweeper's scans of its customers' networks found an awful lot of Linux boxes facing imminent end of life," reports the Register, "with no direct upgrade path." Belgian corporate network scanner vendor Lansweeper periodically collates some of the statistics collected by its users and publishes the results... This year's report says that while a third of its users' Linux machines run Ubuntu, second place goes to CentOS Linux [with 26.05%]. Back in 2020, Red Hat brought CentOS Linux 8's end of life forward from 2029 to the end of 2021. CentOS Linux 9 was canceled, CentOS Linux 8 is dead and gone, leaving only CentOS Linux 7. As we reported in May, CentOS 7's end of life is very close now — the end of June. After this month, no more updates. Of course, Red Hat will be happy to help you migrate to RHEL. It offers a free tool to switch boxes' package source, but RHEL 7 hits what Red Hat terms "the end of its maintenance support 2 phase" on the same day. RHEL 7 isn't EOL, but you'll need to pay extra for "Extended Lifecycle Support (ELS)" to keep security fixes coming. Lansweeper seems confident this will happen: "Assuming most of the CentOS devices will migrate over to RHEL, we can expect RHEL to comfortably take over first place from Ubuntu soon." RHEL was already on 20% of the machines scanned by Lansweeper (with Rocky Linux at 1.5%). But the Register argues that instead of switching to RHEL, "the freeloaders running CentOS Linux might well migrate to one of the RHELatives instead. CIQ publishes guidance on how to migrate to Rocky Linux, and will help if you buy its CIQ Bridge service. AlmaLinux has more than that with its ELevate tool to perform in-place version upgrades, as we described back in 2022. "Or, of course, you could just reinstall with Debian, and run anything you can't immediately reprovision in a free RHEL container image."

Read more of this story at Slashdot.

Artificial Sweetener Xylitol May Also Be Linked To Heart Attack and Stroke, Study Finds

Par : EditorDavid
8 juin 2024 à 16:34
CNN reports that the low-calorie sweetener xylitol used "may be linked to nearly twice the risk of heart attacks, stroke and death in people who consume the highest levels of the sweetener, a new study found..." In 2023, the same researchers found similar results for another low-calorie sweetener called erythritol, which is used as a bulking sugar in stevia, monkfruit and keto reduced-sugar products. Additional lab and animal research presented in both papers revealed erythritol and xylitol may cause blood platelets to clot more readily. Clots can break off and travel to the heart, triggering a heart attack, or to the brain, triggering a stroke. In the new study on xylitol, "differences in platelet behavior were seen even after a person consumed a modest quantity of xylitol in a drink typical of a portion consumed in real life," said Dr. Matthew Tomey, a cardiologist at Mount Sinai Fuster Heart Hospital in New York City, who was not involved in the study... "Through their work, the investigators have shined a light on the safety of sugar substitutes. There is more to learn," Mount Sinai's Tomey said. "In the meantime, it is worth remembering that sugar substitutes are no substitute for a sincere commitment to the several elements of a healthy diet and lifestyle." Tomey added that the experiments "are interesting but alone do not prove that platelet abnormalities are to account for a linkage between xylitol and clinical events." But CNN notes that the researchers began by analyzing over 3,200 blood samples — and then also gave volunteers a typical xylitol-sweetened drink to see how much in increased their glucose levels. "They went up 1,000-fold," senior study author Dr. Stanley Hazen told CNN. His study adds that the World Health Organization warned consumers in 2023 to avoid artificial sweeteners for weight loss and called for additional research on the long-term toxicity of low- and no-calorie sweeteners.

Read more of this story at Slashdot.

For Video of Helicopter Shooting Fireworks at Lamborghini, YouTube Influencer Faces 10 Years in Prison

Par : EditorDavid
8 juin 2024 à 15:34
An anonymous reader shared this report from the Washington Post: A YouTuber who posted a Fourth of July video in which passengers on a low-flying helicopter shot fireworks at a speeding Lamborghini is facing a federal charge tied to the stunt. Suk Min Choi, 24, who runs a YouTube channel under the name Alex Choi, was charged Thursday with causing the placement of an explosive or incendiary device on an aircraft, the Justice Department announced. He arranged to have the helicopter fly over the El Mirage Dry Lakebed near Los Angeles in June 2023 for a video titled "Destroying a Lamborghini With Fireworks," according to a complaint filed in the Central District Court of California. The video, released on July 4, shows scenes akin to an action film as Choi laughs while driving the Lamborghini and helicopter-launched fireworks ricochet off the car, enveloping it in sparks... Choi faces up to 10 years in prison if convicted, according to the Justice Department. More details from NBC Los Angeles: Federal authorities said radar data from the day of the video shoot showed that the helicopter left an airport in Pacoima, California, around 1:53 p.m. and turned toward El Mirage Lake, a dry lake in California, where the video was filmed. The helicopter's transponder was then turned off, according to the affidavit. The helicopter reappeared on the radar and flew back to the airport just before 9 p.m., the document says. The pilot initially told an FAA inspector that he did not know anything about the El Mirage video, according to the affidavit. In a follow-up call, he told inspectors that he did not want Choi to know he was speaking with them and said "Choi was doing unsafe activities involving cars and aircraft." In January, the FAA issued an emergency order revoking the pilot's private pilot certification, the affidavit says.

Read more of this story at Slashdot.

As America's Solar Power Surges, Wind Power is Struggling

Par : EditorDavid
8 juin 2024 à 14:34
America "is now adding less wind capacity each year" than it was before the passage of a climate-protecting bill in 2022, according to the New York Times. Since then "solar panel installations are indeed soaring to record highs in the U.S., as are batteries that can store energy for later. But wind power has struggled, both on land and in the ocean." Some factors behind the wind industry's recent slowdown may be temporary, such as snarled supply chains. But wind power is also more vulnerable than solar power to many of the biggest logistical hurdles that hinder energy projects today: a lack of transmission lines, a lengthy permitting process and a growing backlash against new projects in many communities... [M]any areas are now crowded with turbines and existing electric grids are clogged, making it difficult to add more projects. Energy companies want to expand the grid's capacity to transport even more wind power to population centers, but getting permits for transmission lines and building them has become a brutal slog that can take more than a decade... Because they can reach the height of skyscrapers, wind turbines are more noticeable than solar farms and often attract more intense opposition from local communities. The wind industry has also been hampered by soaring equipment costs after the pandemic wrecked supply chains and inflation spiked. While those factors initially hurt solar, too, the solar industry has adjusted much faster, with China nearly doubling its manufacturing capacity for panels over the past two years. Wind supply chains, which are dominated by a few manufacturers in China, Europe and the United States, have yet to fully recover. The cost increases have been devastating for offshore wind projects in the Northeast, where developers have canceled more than half the projects they planned to build this decade. Wind isn't languishing only in the United States. While a record 117 gigawatts of new wind capacity came online last year globally, virtually all of that growth was in China. In the rest of the world, developers weren't installing wind turbines any faster than they were in 2020... It's still possible that wind power could rebound. In fact, some experts argue that the recent slowdown is only a temporary artifact of tax policy... [John Hensley, vice president for markets and policy analysis at the American Clean Power Association, a renewable industry trade group] said that U.S. wind manufacturing was beginning to ramp up thanks to new tax incentives, while costs were starting to come down. Last year, orders for new turbines increased by 130%, although many of them won't be delivered until 2025 or later. Some states are now trying to make it easier to build renewable energy: Illinois, Michigan and Minnesota have all passed laws making it harder for local governments to restrict wind and solar. The federal government has issued new rules to accelerate the planning of transmission lines. Demand for wind could also rise as a growing number of states, tech companies and hydrogen producers are trying to secure clean electricity around the clock, rather than just a burst of solar power in the daytime. Many plans for moving America off fossil fuels "envision a large expansion of both solar and wind," the article points out, "because the two sources generate electricity at different hours and can complement each other. A boom in solar power alone, which runs only in daytime, isn't enough."

Read more of this story at Slashdot.

À partir d’avant-hierSlashdot

AMD Unveils Ryzen AI and 9000 Series Processors, Plus Radeon PRO W7900 Dual Slot

Par : EditorDavid
3 juin 2024 à 11:34
The highlight of AMD's presentation Sunday at Computex 2024 was "the introduction of AMD's Ryzen AI 300 Series processors for laptops and the Ryzen 9000 Series for desktops," writes Slashdot reader BrianFagioli (sharing his report at Beta News): AMD's Ryzen AI 300 Series processors, designed for next-generation AI laptops, come with AMD's latest XDNA 2 architecture. This includes a Neural Processing Unit (NPU) that delivers 50 TOPS of AI processing power, significantly enhancing the AI capabilities of laptops. Among the processors announced were the Ryzen AI 9 HX 370, which features 12 cores and 24 threads with a boost frequency of 5.1 GHz, and the Ryzen AI 9 365 with 10 cores and 20 threads, boosting up to 5.0 GHz... In the desktop segment, the Ryzen 9000 Series processors, based on the "Zen 5" architecture, demonstrated an average 16% improvement in IPC performance over their predecessors built on the "Zen 4" architecture. The Ryzen 9 9950X stands out with 16 cores and 32 threads, reaching up to 5.7 GHz boost frequency and equipped with 80MB of cache... AMD also reaffirmed its commitment to the AM4 platform by introducing the Ryzen 9 5900XT and Ryzen 7 5800XT processors. These models are compatible with existing AM4 motherboards, providing an economical upgrade path for users. The article adds that AMD also unveiled its Radeon PRO W7900 Dual Slot workstation graphics card — priced at $3,499 — "further broadening its impact on high-performance computing... "AMD also emphasized its strategic partnerships with leading OEMs such as Acer, ASUS, HP, Lenovo, and MSI, who are set to launch systems powered by these new AMD processors." And there's also a software collaboration with Microsoft, reportedly "to enhance the capabilities of AI PCs, thus underscoring AMD's holistic approach to integrating AI into everyday computing."

Read more of this story at Slashdot.

Cybercriminal Posed as 'Helpful' Stack Overflow User To Recommend Malware Hosted on PyPi

Par : EditorDavid
3 juin 2024 à 07:34
An anonytmous reader shared a recent report from BleepingComputer: Cybercriminals are abusing Stack Overflow in an interesting approach to spreading malware — answering users' questions by promoting a malicious PyPi package that installs Windows information-stealing malware... "We further noticed that a StackOverflow account 'EstAYA G' [was] exploiting the platform's community members seeking debugging help [1, 2, 3] by directing them to install this malicious package as a 'solution' to their issue even though the 'solution' is unrelated to the questions posted by developers," explained Sonatype researcher Ax Sharma in the Sonatype report. Sonatype's researcher "noticed that line 17 was laden with ...a bit too many whitespaces," according to the report, "in turn hiding code much further to the right which would be easy to miss, unless you notice the scroll bar. The command executes a base64-encoded payload..." And then, reports BleepingComputer... When deobfuscated, this command will download an executable named 'runtime.exe' from a remote site and execute it. This executable is actually a Python program converted into an .exe that acts as an information-stealing malware to harvest cookies, passwords, browser history, credit cards, and other data from web browsers. It also appears to search through documents for specific phrases and, if found, steal the data as well. All of this information is then sent back to the attacker, who can sell it on dark web markets or use it to breach further accounts owned by the victim.

Read more of this story at Slashdot.

Law Student Claims Unfair Discipline After He Reported a Data Breach

Par : EditorDavid
3 juin 2024 à 03:36
An anonymous Slashdot reader shared this report from Computer Weekly: A former student at the Inns of Court College of Advocacy (ICCA) says he was hauled over the coals by the college for having acted responsibly and "with integrity" in reporting a security blunder that left sensitive information about students exposed. Bartek Wytrzyszczewski faced misconduct proceedings after alerting the college to a data breach exposing sensitive information on hundreds of past and present ICCA students... The ICCA, which offers training to future barristers, informed data protection regulator the Information Commissioner's Office of a breach "experienced" in August 2023 after Wytrzyszczewski alerted the college that sensitive files on nearly 800 students were accessible to other college users via the ICCA's web portal. The breach saw personal data such as email addresses, phone numbers and academic information — including exam marks and previous institutions attended — accessible to students at the college. Students using the ICCA's web portal were also able to access ID photos, as well as student ID numbers and sensitive data, such as health records, visa status and information as to whether they were pregnant or had children... After the college secured a written undertaking from Wytrzyszczewski not to disclose any of the information he had discovered, it launched misconduct proceedings against him. He had stumbled across the files in error, he said, and viewed a significant number to ensure he could report their contents with accuracy. "The panel cleared Wytrzyszczewski and found it had no jurisdiction to hear the matter," according to the article. But he "said the experience caused him to unenroll from the ICCA's course and restart his training at another provider."

Read more of this story at Slashdot.

❌
❌