Vue lecture

Il y a de nouveaux articles disponibles, cliquez pour rafraîchir la page.

The 'Ceph' Community Now Stores 1,000 Petabytes in Its Open Source Storage Solution

1,000 petabytes. A million terabytes. One quintillion bytes (or 1,000,000,000,000,000,000). That's the amount of storage reported by users of the Ceph storage solution (across more than 3,000 Ceph clusters). The Ceph Foundation is a "directed fund" of the Linux Foundation, providing a neutral home for Ceph, "the most popular open source storage solution for modern data storage challenges" (offering an architecture that's "highly scalable, resilient, and flexible"). It's a software-defined storage platform, providing object storage, block storage, and file storage built on a common distributed cluster foundation. And Friday they announced the release of Ceph Squid, "which comes with several performance and space efficiency features along with enhanced protocol support." Ceph has solidified its position as the cornerstone of open source data storage. The release of Ceph Squid represents a significant milestone toward providing scalable, reliable, and flexible storage solutions that meet the ever-evolving demands of digital data storage. Features of Ceph Squid include improvements to BlueStore [a storage back end specifically designed for managing data on disk for Ceph Object Storage Daemon workloads] to reduce latency and CPU requirements for snapshot intensive workloads. BlueStore now uses RocksDB compression by default for increased average performance and reduced space usage. [And the next-generation Crimson OSD also has improvements in stability and read performance, and "now supports scrub, partial recovery and osdmap trimming."] Ceph continues to drive the future of storage, and welcomes developers, partners, and technology enthusiasts to get involved. Ceph Squid also brings enhancements for the CRUSH algorithm [which computes storage locations] to support more flexible and cost effective erasure coding configurations.

Read more of this story at Slashdot.

Two Lifeforms Merge Into One Organism For First Time In a Billion Years

"For the first time in at least a billion years, two lifeforms have merged into a single organism," reports the Independent: The process, called primary endosymbiosis, has only happened twice in the history of the Earth, with the first time giving rise to all complex life as we know it through mitochondria. The second time that it happened saw the emergence of plants. Now, an international team of scientists have observed the evolutionary event happening between a species of algae commonly found in the ocean and a bacterium... The process involves the algae engulfing the bacterium and providing it with nutrients, energy and protection in return for functions that it could not previously perform — in this instance, the ability to "fix" nitrogen from the air. The algae then incorporates the bacterium as an internal organ called an organelle, which becomes vital to the host's ability to function. The researchers from the U.S. and Japan who made the discovery said it will offer new insights into the process of evolution, while also holding the potential to fundamentally change agriculture. "This system is a new perspective on nitrogen fixation, and it might provide clues into how such an organelle could be engineered into crop plants," said Dr Coale. Two papers detailing the research were published in the scientific journals Science and Cell. Thanks to Slashdot reader fjo3 for sharing the news.

Read more of this story at Slashdot.

Intel's Stock Drops 9%. Are They Struggling to Remain Relevant?

"Intel used to dominate the U.S. chip industry," writes CNBC. But now "it's struggling to stay relevant." Intel's long-awaited turnaround looks farther away than ever after the company reported dismal first-quarter earnings. Investors pushed the shares down 9% on Friday to their lowest level of the year. Although Intel's revenue is no longer shrinking and the company remains the biggest maker of processors that power PCs and laptops, sales in the first quarter trailed estimates. Intel also gave a soft forecast for the second quarter, suggesting weak demand... Intel is the worst-performing tech stock in the S&P 500 this year, down 37%. Meanwhile, the two best-performing stocks in the index are chipmaker Nvidia and Super Micro Computer, which has been boosted by surging demand for Nvidia-based artificial intelligence servers. Intel, long the most valuable U.S. chipmaker, is now one-sixteenth the size of Nvidia by market cap. It's also smaller than Qualcomm, Broadcom, Texas Instruments, and AMD. For decades, it was the largest semiconductor company in the world by sales, but suffered seven straight quarters of revenue declines recently, and was passed by Nvidia last year. Intel's problems "are decades in the making," according to CNBC, suggesting that one turning point was Apple's decision not to use Intel's chips in its iPhone. Now nearly every smartphone built uses Arm chips built by Apple and Qualcomm, while Apple's huge orders for TSMC chips "provided the cash to annually upgrade the manufacturing equipment at TSMC, which eventually surpassed Intel." Around 2017, mobile chips from Apple and Qualcomm started adding AI parts to their chips called neural processing units, another advancement over Intel's PC processors. The first Intel-based laptop with an NPU shipped late last year. Intel has since lost share in its core PC chip business to chips that grew out of the mobile revolution... Apple stopped using Intel in its PCs in 2020. Macs now use Arm-based chips, and some of the first mainstream Windows laptops with Arm-based chips are coming out later this year. Low-cost laptops running Google ChromeOS are increasingly using Arm, too... AMD made over 20% of server CPUs sold in 2022, and shipments grew 62% that year, according to an estimate from Counterpoint Research last year. AMD surpassed Intel's market cap the same year.

Read more of this story at Slashdot.

A Windows Vulnerability Reported by the NSA Was Exploited To Install Russian Malware

"Kremlin-backed hackers have been exploiting a critical Microsoft vulnerability for four years," Ars Technica reported this week, "in attacks that targeted a vast array of organizations with a previously undocumented tool, the software maker disclosed Monday. "When Microsoft patched the vulnerability in October 2022 — at least two years after it came under attack by the Russian hackers — the company made no mention that it was under active exploitation." As of publication, the company's advisory still made no mention of the in-the-wild targeting. Windows users frequently prioritize the installation of patches based on whether a vulnerability is likely to be exploited in real-world attacks. Exploiting CVE-2022-38028, as the vulnerability is tracked, allows attackers to gain system privileges, the highest available in Windows, when combined with a separate exploit. Exploiting the flaw, which carries a 7.8 severity rating out of a possible 10, requires low existing privileges and little complexity. It resides in the Windows print spooler, a printer-management component that has harbored previous critical zero-days. Microsoft said at the time that it learned of the vulnerability from the US National Security Agency... Since as early as April 2019, Forest Blizzard has been exploiting CVE-2022-38028 in attacks that, once system privileges are acquired, use a previously undocumented tool that Microsoft calls GooseEgg. The post-exploitation malware elevates privileges within a compromised system and goes on to provide a simple interface for installing additional pieces of malware that also run with system privileges. This additional malware, which includes credential stealers and tools for moving laterally through a compromised network, can be customized for each target. "While a simple launcher application, GooseEgg is capable of spawning other applications specified at the command line with elevated permissions, allowing threat actors to support any follow-on objectives such as remote code execution, installing a backdoor, and moving laterally through compromised networks," Microsoft officials wrote. Thanks to Slashdot reader echo123 for sharing the news.

Read more of this story at Slashdot.

How CP/M Launched the Next 50 Years of Operating Systems

50 years ago this week, PC software pioneer Gary Kildall "demonstrated CP/M, the first commercially successful personal computer operating system in Pacific Grove, California," according to a blog post from Silicon Valley's Computer History Museum. It tells the story of "how his company, Digital Research Inc., established CP/M as an industry standard and its subsequent loss to a version from Microsoft that copied the look and feel of the DRI software." Kildall was a CS instructor and later associate professor at the Naval Postgraduate School (NPS) in Monterey, California... He became fascinated with Intel Corporation's first microprocessor chip and simulated its operation on the school's IBM mainframe computer. This work earned him a consulting relationship with the company to develop PL/M, a high-level programming language that played a significant role in establishing Intel as the dominant supplier of chips for personal computers. To design software tools for Intel's second-generation processor, he needed to connect to a new 8" floppy disk-drive storage unit from Memorex. He wrote code for the necessary interface software that he called CP/M (Control Program for Microcomputers) in a few weeks, but his efforts to build the electronic hardware required to transfer the data failed. The project languished for a year. Frustrated, he called electronic engineer John Torode, a college friend then teaching at UC Berkeley, who crafted a "beautiful rat's nest of wirewraps, boards and cables" for the task. Late one afternoon in the fall of 1974, together with John Torode, in the backyard workshop of his home at 781 Bayview Avenue, Pacific Grove, Gary "loaded my CP/M program from paper tape to the diskette and 'booted' CP/M from the diskette, and up came the prompt: * [...] By successfully booting a computer from a floppy disk drive, they had given birth to an operating system that, together with the microprocessor and the disk drive, would provide one of the key building blocks of the personal computer revolution... As Intel expressed no interest in CP/M, Gary was free to exploit the program on his own and sold the first license in 1975. What happened next? Here's some highlights from the blog post: "Reluctant to adapt the code for another controller, Gary worked with Glen Ewing to split out the hardware dependent-portions so they could be incorporated into a separate piece of code called the BIOS (Basic Input Output System)... The BIOS code allowed all Intel and compatible microprocessor-based computers from other manufacturers to run CP/M on any new hardware. This capability stimulated the rise of an independent software industry..." "CP/M became accepted as a standard and was offered by most early personal computer vendors, including pioneers Altair, Amstrad, Kaypro, and Osborne..." "[Gary's company] introduced operating systems with windowing capability and menu-driven user interfaces years before Apple and Microsoft... However, by the mid-1980s, in the struggle with the juggernaut created by the combined efforts of IBM and Microsoft, DRI had lost the basis of its operating systems business." "Gary sold the company to Novell Inc. of Provo, Utah, in 1991. Ultimately, Novell closed the California operation and, in 1996, disposed of the assets to Caldera, Inc., which used DRI intellectual property assets to prevail in a lawsuit against Microsoft."

Read more of this story at Slashdot.

What Happened After Amazon Electrified Its Delivery Fleet?

Bloomberg looks at America's biggest operator of private electrical vehicle charging infrastructure: Amazon. "In a little more than two years, Amazon has installed more than 17,000 chargers at about 120 warehouses around the U.S." — and had Rivian build 13,500 custom electric delivery vans. Amazon has a long way to go. The Seattle-based company says its operations emitted about 71 million metric tons of carbon dioxide equivalent in 2022, up by almost 40% since Jeff Bezos's 2019 vow that his company would eventually stop contributing to the emissions warming the planet. Many of Amazon's emissions come from activities — air freight, ocean shipping, construction and electronics manufacturing, to name a few — that lack a clear, carbon-free alternative, today or any time soon. The company has not made much progress on decarbonization of long-haul trucking, whose emissions tend to be concentrated in industrial and outlying areas rather than the big cities that served as the backdrop for Amazon's electric delivery vehicle rollout... Another lesson Amazon learned is one the company isn't keen to talk about: Going green can be expensive, at least initially. Based on the type of chargers Amazon deploys — almost entirely midtier chargers called Level 2 in the industry — the hardware likely cost between $50 million and $90 million, according to Bloomberg estimates based on cost estimates supplied by the National Renewable Energy Laboratory. Factoring in costs beyond the plugs and related hardware — like digging through a parking lot to lay wires or set up electrical panels and cabinets — could double that sum. Amazon declined to comment on how much it spent on its EV charging push. In addition to the expense of the chargers, electric vehicle-fleet operators are typically on the hook for utility upgrades. When companies request the sort of increases to electrical capacity that Amazon has — the Maple Valley warehouse has three megawatts of power for its chargers — they tend to pay for them, making the utility whole for work done on behalf of a single customer. Amazon says it pays upgrade costs as determined by utilities, but that in some locations the upgrades fit within the standard service power companies will handle out of their own pocket. The article also includes this quote from Kellen Schefter, transportation director at the Edison Electric Institute trade group (which worked with Amazon on its electricity needs). "Amazon's scale matters. If Amazon can show that it meets their climate goals while also meeting their package-delivery goals, we can show this all actually works."

Read more of this story at Slashdot.

Ex-White House Cyber Policy Director: Microsoft is a National Security Risk

This week the Register spoke to former senior White House cyber policy director A.J. Grotto — who complained it was hard to get even slight concessions from Microsoft: "If you go back to the SolarWinds episode from a few years ago ... [Microsoft] was essentially up-selling logging capability to federal agencies" instead of making it the default, Grotto said. "As a result, it was really hard for agencies to identify their exposure to the SolarWinds breach." Grotto told us Microsoft had to be "dragged kicking and screaming" to provide logging capabilities to the government by default. [In the interview he calls it "an epic fight" which lasted 18 months."] [G]iven the fact the mega-corp banked around $20 billion in revenue from security services last year, the concession was minimal at best. That illustrates, Grotto said, that "they [Microsoft] just have a ton of leverage, and they're not afraid to use it." Add to that concerns over an Exchange Online intrusion by Chinese snoops, and another Microsoft security breach by Russian cyber operatives, both of which allowed spies to gain access to US government emails, and Grotto says it's fair to classify Microsoft and its products as a national security concern. He estimates that Microsoft makes 85% of U.S. government productivity software — and has an even greater share of their operating systems. "Microsoft in many ways has the government locked in, he says in the interview, "and so it's able to transfer a lot of these costs associated with the security breaches over to the federal government." And about five minutes in, he says, point-blank, that "It's perfectly fair" to consider Microsoft a national security threat, given its dominance "not just within the federal government, but really in sort of the boarder IT marketplace. I think it's fair to say, yeah, that a systemic compromise that affects Microsoft and its products do rise to the level of a national security risk." He'd like to see the government encourage more competition — to the point where public scrutiny prompts software customers to change their behavior, and creates a true market incentive for better performance...

Read more of this story at Slashdot.

Startup is Building the World's Largest Ocean-Based Carbon Plant - and It's Scalable

An anonymous reader shared this report from CNN: On a slice of the ocean front in west Singapore, a startup is building a plant to turn carbon dioxide from air and seawater into the same material as seashells, in a process that will also produce "green" hydrogen — a much-hyped clean fuel. The cluster of low-slung buildings starting to take shape in Tuas will become the "world's largest" ocean-based carbon dioxide removal plant when completed later this year, according to Equatic, the startup behind it that was spun out of the University of California at Los Angeles. The idea is that the plant will pull water from the ocean, zap it with an electric current and run air through it to produce a series of chemical reactions to trap and store carbon dioxide as minerals, which can be put back in the sea or used on land... The $20 million facility will be fully operational by the end of the year and able to remove 3,650 metric tons of carbon dioxide annually, said Edward Sanders, chief operating officer of Equatic, which has partnered with Singapore's National Water Agency to construct the plant. That amount is equivalent to taking roughly 870 average passenger cars off the road. The ambition is to scale up to 100,000 metric tons of CO2 removal a year by the end of 2026, and from there to millions of metric tons over the next few decades, Sanders told CNN. The plant can be replicated pretty much anywhere, he said, stacked up in modules "like lego blocks...." The upfront costs are high but the company says it plans to make money by selling carbon credits to polluters to offset their pollution, as well as selling the hydrogen produced during the process. Equatic has already signed a deal with Boeing to sell it 2,100 metric tons of hydrogen, which it plans to use to create green fuel, and to fund the removal of 62,000 metric tons of CO2. There's other projects around the world attempting ocean-based carbon renewal, CNN notes. "Other projects include sprinkling iron particles into the ocean to stimulate CO2-absorbing phytoplankton, sinking seaweed into the depths to lock up carbon and spraying particles into marine clouds to reflect away some of the sun's energy." But carbon-removal projects are controversial, criticized for being expensive, unproven at scale and a distraction from policies to cut fossil fuels. And when they involve the oceans — complex ecosystems already under huge strain from global warming — criticisms can get even louder. There are "big knowledge gaps" when it comes to ocean geoengineering generally, said Jean-Pierre Gatusso, an ocean scientist at the Sorbonne University in France. "I am very concerned with the fact that science lags behind the industry," he told CNN.

Read more of this story at Slashdot.

The Ingenuity Mars Helicopter Just Sent Its Last Message Home

Two months ago the team behind NASA's Ingenuity Helicopter released a video reflecting on its historic explorations of Mars, flying 10.5 miles (17.0 kilometers) in 72 different flights over three years. It was the team's way of saying goodbye, according to NASA's video. And this week, LiveScience reports, Ingenuity answered back: On April 16, Ingenuity beamed back its final signal to Earth, which included the remaining data it had stored in its memory bank and information about its final flight. Ingenuity mission scientists gathered in a control room at NASA's Jet Propulsion Laboratory (JPL) in California to celebrate and analyze the helicopter's final message, which was received via NASA's Deep Space Network, made up of ground stations located across the globe. In addition to the remaining data files, Ingenuity sent the team a goodbye message including the names of all the people who worked on the mission. This special message had been sent to Perseverance the day before and relayed to Ingenuity to send home. The helicopter, which still has power, will now spend the rest of its days collecting data from its final landing spot in Valinor Hills, named after a location in J.R.R. Tolkien's "The Lord of the Rings" books. The chopper will wake up daily to test its equipment, collect a temperature reading and take a single photo of its surroundings. It will continue to do this until it loses power or fills up its remaining memory space, which could take 20 years. Such a long-term dataset could not only benefit future designs for Martian vehicles but also "provide a long-term perspective on Martian weather patterns and dust movement," researchers wrote in the statement. However, the data will be kept on board the helicopter and not beamed back to Earth, so it must be retrieved by future Martian vehicles or astronauts. "Whenever humanity revisits Valinor Hills — either with a rover, a new aircraft, or future astronauts — Ingenuity will be waiting with her last gift of data," Teddy Tzanetos, an Ingenuity scientist at JPL, said in the statement. Thursday NASA's Jet Propulsion Laboratory released another new video tracing the entire route of Ingenuity's expedition over the surface of Mars. "Ingenuity's success could pave the way for more extensive aerial exploration of Mars down the road," adds Spacae.com: Mission team members are already working on designs for larger, more capable rotorcraft that could collect a variety of science data on the Red Planet, for example. And Mars isn't the only drone target: In 2028, NASA plans to launch Dragonfly, a $3.3 billion mission to Saturn's huge moon Titan, which hosts lakes, seas and rivers of liquid hydrocarbons on its frigid surface. The 1,000-pound (450 kg) Dragonfly will hop from spot to spot on Titan, characterizing the moon's various environments and assessing its habitability.

Read more of this story at Slashdot.

GPT-4 Can Exploit Real Vulnerabilities By Reading Security Advisories

Long-time Slashdot reader tippen shared this report from the Register: AI agents, which combine large language models with automation software, can successfully exploit real world security vulnerabilities by reading security advisories, academics have claimed. In a newly released paper, four University of Illinois Urbana-Champaign (UIUC) computer scientists — Richard Fang, Rohan Bindu, Akul Gupta, and Daniel Kang — report that OpenAI's GPT-4 large language model (LLM) can autonomously exploit vulnerabilities in real-world systems if given a CVE advisory describing the flaw. "To show this, we collected a dataset of 15 one-day vulnerabilities that include ones categorized as critical severity in the CVE description," the US-based authors explain in their paper. "When given the CVE description, GPT-4 is capable of exploiting 87 percent of these vulnerabilities compared to 0 percent for every other model we test (GPT-3.5, open-source LLMs) and open-source vulnerability scanners (ZAP and Metasploit)...." The researchers' work builds upon prior findings that LLMs can be used to automate attacks on websites in a sandboxed environment. GPT-4, said Daniel Kang, assistant professor at UIUC, in an email to The Register, "can actually autonomously carry out the steps to perform certain exploits that open-source vulnerability scanners cannot find (at the time of writing)." The researchers wrote that "Our vulnerabilities span website vulnerabilities, container vulnerabilities, and vulnerable Python packages. Over half are categorized as 'high' or 'critical' severity by the CVE description...." "Kang and his colleagues computed the cost to conduct a successful LLM agent attack and came up with a figure of $8.80 per exploit"

Read more of this story at Slashdot.

Is Rivos Building an RISC-V AI Chip?

Remember when Apple filed a lawsuit against chip startup Rivos (saying that in one year Rivos hired more than 40 former Apple employees to work on competing system-on-a-chip technology)? Apple settled that suit in February. And now Tuesday Rivos announced that it raised $250 million, according to Reuters, "in a funding round that will enable it to manufacture its first server chip geared for artificial intelligence," combining a CPU with an AI-accelerating component optimized for LLMs and data analytics. Nvidia gobbled up more than 80% market share of AI chips in 2023. But a host of startups and chip giants have started to launch competing products, such as Intel's Gaudi 3 and Meta's inference chip — both unveiled last week. Rivos is tight-lipped about the specifics of the product, but has disclosed that its plans include designing chips based on the RISC-V architecture, which is an open source alternative to the architectures made by Arm, Intel, and Advanced Micro Devices.. [U]sing the open source alternative means Rivos does not have to pay a license fee to Arm. "RISC-V doesn't have a (large) software ecosystem, so I decided to form a company and then build software-defined hardware — just like what CUDA did with Nvidia," said Lip-Bu Tan, founding managing partner at Walden Catalyst, one of Rivos' investors. Meanwhile, there's a rumor that Allen Wu, former chief executive of Arm China, has founded a new company that will develop chips based on RISC-V. Tom's Hardware writes: Under the leadership of the controversial Allen Wu, Zhongzhi Chip is reportedly attracting a notable influx of talent, including numerous former employees of Arm, indicating the new company's serious ambitions in the chip sector... [T]he company's operational focus remains partially unclear, with speculation around whether it will primarily engage in its own R&D initiatives or represent Tenstorrent in China as its agent... which develops HPC CPUs and AI processors based on the RISC-V ISA... Based on the source report, Zhongzhi Chip is leveraging its connections and forming alliances with several other leading global RISC-V chip developers.

Read more of this story at Slashdot.

Lying to Investors? Co-Founder of Startup 'HeadSpin' Gets 18-Month Prison Sentence for Fraud

The co-founder of Silicon Valley-based software testing startup HeadSpin was sentenced Friday to 18 months in prison and a $1 million fine, reports SFGate — for defrauding investors. Lachwani pleaded guilty to two counts of wire fraud and a count of securities fraud in April 2023, after federal prosecutors accused him of, for years, lying to investors about HeadSpin's finances to raise more money. HeadSpin, founded in 2015, grew to a $1.1 billion valuation by 2020 with over $115 million in funding from investors including Google Ventures and Iconiq Capital... He had personally altered invoices, lied to the company accountant and sent slide decks with fraudulent information to investors, [according to the government's 2021 criminal complaint]... Breyer, per the New York Times, rejected Lachwani's lawyer's argument that because HeadSpin investors didn't end up losing money, he should receive a light sentence. The judge, who often oversees tech industry cases, reportedly said: "If you win, there are no serious consequences — that simply can't be the law." Still, the sentencing was far lighter than it could have been. The government's prosecuting attorneys had asked for a five-year prison term. The New York Times reported in December that HeadSpin's financial statements had "often arrived months late, if at all, investors said in legal declarations," while the company's financial department "consisted of one external accountant who worked mostly from home using QuickBooks." And the comnpany also had no human resources department or organizational chart... After Manish Lachwani founded the Silicon Valley software start-up HeadSpin in 2015, he inflated the company's revenue numbers by nearly fourfold and falsely claimed that firms including Apple and American Express were customers. He showed a profit where there were losses. He used HeadSpin's cash to make risky trades on tech stocks. And he created fake invoices to cover it all up. What was especially breathtaking was how easily Mr. Lachwani, now 48, pulled all that off... [HeadSpin] had no chief financial officer, had no human resources department and was never audited. Mr. Lachwani used that lack of oversight to paint a rosier picture of HeadSpin's growth. Even though its main investors knew the start-up's financials were not accurate, according to Mr. Lachwani's lawyers, they chose to invest anyway, eventually propelling HeadSpin to a $1.1 billion valuation in 2020. When the investors pushed Mr. Lachwani to add a chief financial officer and share more details about the company's finances, he simply brushed them off. These details emerged this month in filings in U.S. District Court for the Northern District of California after Mr. Lachwani had pleaded guilty to three counts of fraud in April... The absence of controls at HeadSpin is part of an increasingly noticeable pattern at Silicon Valley start-ups that have run into trouble. Over the past decade, investors in tech start-ups were so eager to back hot companies that many often overlooked reckless behavior and gave up key controls like board seats, all in the service of fast growth and disruption. Then when founders took the ethos of "fake it till you make it" too far, their investors were often unaware or helpless... Now, amid a start-up shakeout, more frauds have started coming to light. The founder of the college aid company Frank has been charged, the internet connectivity start-up Cloudbrink has been sued, and the social media app IRL has been investigated and sued. Last month, Mike Rothenberg, a Silicon Valley investor, was found guilty on 21 counts of fraud and money laundering. On Monday, Trevor Milton, founder of the electric vehicle company Nikola, was sentenced to four years in prison for lying about Nikola's technological capabilities. The Times points out that similarly, FTX only had a three-person board "with barely any influence over the company, tracked its finances on QuickBooks and used a small, little-known accounting firm." And that Theranos had no financial audits for six years.

Read more of this story at Slashdot.

Should Automakers Feel Threatened by China's Exports of Electric Cars?

The Los Angeles Times reports that the U.S.-China rivalry "has a new flashpoint in the battle for technology supremacy: electric cars." "So far, the U.S. is losing." Last year, China became the world's foremost auto exporter, according to the China Passenger Car Assn., surpassing Japan with more than 5 million sales overseas. New energy vehicles accounted for about 25% of those exports, and more than half of those were created by Chinese brands, a shift from the traditional assembly role China has played for foreign automakers. "The big growth has happened in the last three years," said Stephen Dyer, head of the Asia automotive and industrials unit at AlixPartners, a consulting firm. "With Chinese automakers making inroads for most of the market share, that's a huge challenge for foreign automakers." China's rapid expansion domestically and abroad has added fuel to a series of clashes between the U.S. and China over trade and advanced technology, as competition intensifies between the two superpowers... One area in which Chinese automakers handily beat Western competitors is on price, thanks to government subsidies that supported the industry's initial rise as well as cheap access to critical minerals and components such as lithium-ion batteries, which account for about a third of the overall cost of production... In March, BYD cut the price of its cheapest EV model in China to less than $10,000. According to Kelley Blue Book, the average EV retail price is $55,343 in the U.S., compared with $48,247 across all vehicles... Though 27.5% tariffs have in effect locked Chinese EVs out of the U.S. market, the fear that the cheaper models could eventually undermine American automakers has started to spread. The Alliance of American Manufacturing warned in a February report that allowing Chinese EVs into the country would be an "extinction-level event" for the U.S. auto industry. The group also cited the risks of Chinese auto companies building facilities across the border in Mexico that could circumvent tariffs.... "When the global market is flooded by artificially cheap Chinese products, the viability of American and other foreign firms is put into question," [said America's Treasury Secretary in April]. The European Union has opened an investigation into government subsidies utilized by China's EV industry and whether such support violates international trade laws.

Read more of this story at Slashdot.

LXQt 2.0 Released: Lightweight Desktop is Almost Wayland Compatible

This week saw the release of the LXQt 2.0 desktop environment, reports 9to5Linux. And besides bringing Qt 6 support (and a new default application menu), it also brings support for the Wayland display protocol to more components: The LXQt development is confident that the next major release, LXQt 2.1, will be fully Wayland compatible. The components that need to be ported to Wayland include ScreenGrab, LXQt Global Shortcuts, LXQt Panel's task-bar and keyboard indicator, some input settings, and settings of monitor, power button, and screen locker. "Wayland will be the main target for LXQt 2.1.0, as Qt6 was for LXQt 2.0.0" said the devs. "Most Wayland compositors have tools that can be used instead of them, such that an LXQt-Wayland session is already possible for advanced users." The lightweight Linux distro Lubuntu uses LXQtplace in place of GNOME — and Lubuntu 24.04 LTS will include an optional Wayland session alongside its default Xorg one, according to 9to5Linux: I said it before and I'll say it again, 2024 is the year of the Wayland desktop... The Lubuntu team plans to support the Xorg session until 2026 to aid users with older GPUs... However, the tables will be turned next year with the Lubuntu 24.10 release, which will be shipping with Wayland by default.

Read more of this story at Slashdot.

How a Renewable Energy-Powered Bitcoin Startup Helps Electrify Rural Africa

CNBC visited a small group of bitcoin miners who "set up shop at the site of an extinct volcano" near Kenya's Hell's Gate National Park. Their mine "consists of a single 500-kilowatt mobile container that, from the outside, looks like a small residential trailer." But what's more interesting is it's operated by a startup called Gridless. (According to its web site Gridless "designs, builds, and operates bitcoin mining sites alongside small-scale renewable energy producers in rural Africa where excess energy is not utilized...") Backed by Jack Dorsey's Block, Gridless electrifies its machines with a mix of solar power and the stranded, wasted energy from a nearby geothermal site. It's one of six mines run by the company in Kenya, Malawi and Zambia, powered by a mix of renewable inputs and working toward a broader mission of securing and decentralizing the bitcoin network... In early 2022, [the three Gridless co-founders] began brainstorming creative solutions for the divide between power generation and capacity, and the lack of access to electricity in Africa. They landed on the idea of bitcoin mining, which could potentially solve a big problem for renewable energy developers by taking their stranded power and spreading it to other parts of the continent. In Africa, 43% of the population, or roughly 600 million people, lack access to electricity.... Africa is home to an estimated 10 terawatts of solar capacity, 350 gigawatts of hydro and another 110 gigawatts of wind. Some of this renewable energy is being harnessed already, but a lot isn't because building the specialized infrastructure to capture it is expensive. Even with 60% of the best solar resources globally, Africa only has 1% of installed solar PV capacity. Enter bitcoin miners. Bitcoin gets a bad rap for the amount of energy it consumes, but it can also help unlock these trapped renewable sources of power. Miners are essentially energy buyers, and co-locating with renewables creates a financial incentive to bolster production. "As often happens, you'll have an overage of power during the day or even at night, and there's nobody to soak that power up," said Hersman. He said his company's 50-kilowatt mining container can "take up whatever is extra throughout the day...." Demand from bitcoin miners on these semi-stranded assets is making renewables in Africa economically viable. The power supplier benefits from selling energy that previously had been discarded, while the energy plants will sometimes lower costs for the customer. At one of the Gridless pilot sites in Kenya, the hydro plant dropped the price of power from 35 cents per kilowatt hour to 25 cents per kWh. The buildout of capacity is also electrifying households. Gridless says its sites have powered 1,200 houses in Zambia, 1,800 in Malawi and 5,000 in Kenya. The company's mines also have delivered power for containerized cold storage for local farmers, battery charging stations for electric motorcycles and public WiFi points.

Read more of this story at Slashdot.

EU: Meta Cannot Rely On 'Pay Or Okay'

The EU's European Data Protection Board oversees its privacy-protecting GDPR policies. Earlier this week, TechCrunch reported that nearly two dozen civil society groups and nonprofits wrote the Board an open letter "urging it not to endorse a strategy used by Meta that they say is intended to bypass the EU's privacy protections for commercial gain." Meta's strategy is sometimes called "Pay or Okay," writes long-time Slashdot reader AmiMoJo : Meta offers users a choice: "consent" to tracking, or pay over €250/year to use its sites without invasive monetization of personal data. Meta prefers the phrase "subsccription for no ads," and told TechCrunch it makes them compliant with EU laws: A raft of complaints have been filed against Meta's implementation of the pay-or-consent tactic since it launched the "no ads" subscription offer last fall. Additionally, in a notable step last month, the European Union opened a formal investigation into Meta's tactic, seeking to find whether it breaches obligations that apply to Facebook and Instagram under the competition-focused Digital Markets Act. That probe remains ongoing. The letter to the Board called for "robust protections that prioritize data subjects' agency and control over their information." And Wednesday the board issued its first decision: "[I]n most cases, it will not be possible for [social media services] to comply with the requirements for valid consent, if they confront users only with a choice between consenting to processing of personal data for behavioural advertising purposes and paying a fee." The EDPB considers that offering only a paid alternative to services which involve the processing of personal data for behavioural advertising purposes should not be the default way forward for controllers. When developing alternatives, large online platforms should consider providing individuals with an 'equivalent alternative' that does not entail the payment of a fee. If controllers do opt to charge a fee for access to the 'equivalent alternative', they should give significant consideration to offering an additional alternative. This free alternative should be without behavioural advertising, e.g. with a form of advertising involving the processing of less or no personal data. EDPB Chair, Anu Talus added: "Controllers should take care at all times to avoid transforming the fundamental right to data protection into a feature that individuals have to pay to enjoy."

Read more of this story at Slashdot.

Ziplines Drones Complete Their 1 Millionth Delivery, Flying Over 70 Million Miles

San Francisco-based drone-delivery service Zipline "said Friday that it hit its 1 millionth delivery to customers," reports CNBC, "and that it's eyeing restaurant partnerships in its next phase of growth." Zipline's clients already include more than 4,700 hospitals, according to the article, as well as major brands like Walmart. A Panera executive even told CNBC they hope to test Zipline deliveries in Seattle next year, expecting they won't cost the company any more than third-party delivery services: The company said its zero-emission drones have now flown more than 70 million autonomous commercial miles across four continents and delivered more than 10 million products. The milestone 1 millionth delivery carried two bags of IV fluid from a Zipline distribution center in Ghana to a local health facility... Zipline CEO Keller Rinaudo Cliffton told CNBC that 70% of the company's deliveries have happened in the past two years and, in the future, the goal is to do 1 million deliveries a day... "We need to start using vehicles that are light, fast, autonomous and zero-emission," Cliffton said. "Delivering in this way is 10 times as fast, it's less expensive ... and relative to the traditional delivery apps that most restaurants will be working with, we triple the service radius, which means you actually [get] 10 times the number of customers who are reachable via instant delivery."

Read more of this story at Slashdot.

Some Astronomers Will Re-Examine a 102-Year-Old Theory About the Universe's Expansion

Several "high-profile astronomers" will meet at London's Royal Society (the UK's national academy of sciences), "to question some of the most fundamental aspects of our understanding of the universe.reports Futurism: As The Guardian reports, the luminaries of cosmology will be re-examining some basic assumptions about the universe — right down to the over-a-century-old theory that it's expanding at a constant rate. "We are, in cosmology, using a model that was first formulated in 1922," coorganizer and Oxford cosmologist Subir Sarkar told the newspaper, in an apparent reference to the year Russian astronomer Alexander Friedmann outlined the possibility of cosmic expansion based on Einstein's general theory of relativity. "We have great data, but the theoretical basis is past its sell-by date," he added. "More and more people are saying the same thing and these are respected astronomers." A number of researchers have found evidence that the universe may be expanding more quickly in some areas compared to others, raising the tantalizing possibility that megastructures could be influencing the universe's growth in significant ways. Sarkar and his colleagues, for instance, are suggesting that the universe is "lopsided" after studying over a million quasars, which are the active nuclei of galaxies where gas and dust are being gobbled up by a supermassive black hole. The article notes that another theory is that the so-called cosmological constant that's been used for decades "actually varies across space." Thanks to long-time Slashdot reader schwit1 for sharing the article.

Read more of this story at Slashdot.

Insufficient Redundancy? Light-Pole Installation Cut Fiber Line, Triggered Three-State 911 Outage

"Workers installing a light pole in Missouri cut into a fiber line," reports the Associated Press, knocking out 911 phone service "for emergency agencies in Nebraska, Nevada and South Dakota, an official with the company that operates the line said Thursday." In Kansas City, Missouri, workers installing a light pole for another company Wednesday cut into a Lumen Technologies fiber line, Lumen global issues director Mark Molzen said in an email to The Associated Press. Service was restored within 2 1/2 hours, he said. There were no reports of 911 outages in Kansas City... The Dundy County Sheriff's Office in Nebraska warned in a social media post Wednesday night that 911 callers would receive a busy signal and urged people to instead call the administrative phone line. About three hours later, officials said mobile and landline 911 services had been restored. In Douglas County, home to Omaha and more than a quarter of Nebraska's residents, officials first learned there was a problem when calls from certain cellphone companies showed up in a system that maps calls but didn't go through over the phone. Operators started calling back anyone whose call didn't go through, and officials reached out to Lumen, which confirmed the outage. Service was restored by 4 a.m. Kyle Kramer, the technical manager for Douglas County's 911 Center, said the outage highlights the potential problems of having so many calls go over the same network. "As things become more interconnected in our modern world, whether you're on a wireless device or a landline now, those are no longer going over the traditional old copper phone wires that may have different paths in different areas," Kramer said. "Large networks usually have some aggregation point, and those aggregation points can be a high risk." Kramer said this incident and the two previous 911 outages he has seen in the past year in Omaha make him concerned that communications companies aren't building enough redundancy into their networks. South Dakota officials called the state-wide outage "unprecedented," with their Department of Public Safety reporting the outage lasted two hours (though texting to 911 still worked in most locations — and of course, people could still call local emergency services using their non-emergency lines.) America's FCC has already begun an investigation. The article notes that "The outages, ironically, occurred in the midst of National Public Safety Telecommunicators Week." Thanks to long-time Slashdot reader davidwr for sharing the article.

Read more of this story at Slashdot.

❌