Security

Apple Chips Can Be Hacked To Leak Secrets From Gmail, ICloud, and More (arstechnica.com) 28

An anonymous reader quotes a report from Ars Technica: Apple-designed chips powering Macs, iPhones, and iPads contain two newly discovered vulnerabilities that leak credit card information, locations, and other sensitive data from the Chrome and Safari browsers as they visit sites such as iCloud Calendar, Google Maps, and Proton Mail. The vulnerabilities, affecting the CPUs in later generations of Apple A- and M-series chip sets, open them to side channel attacks, a class of exploit that infers secrets by measuring manifestations such as timing, sound, and power consumption. Both side channels are the result of the chips' use of speculative execution, a performance optimization that improves speed by predicting the control flow the CPUs should take and following that path, rather than the instruction order in the program. [...]

The researchers published a list of mitigations they believe will address the vulnerabilities allowing both the FLOP and SLAP attacks. They said that Apple officials have indicated privately to them that they plan to release patches. In an email, an Apple representative declined to say if any such plans exist. "We want to thank the researchers for their collaboration as this proof of concept advances our understanding of these types of threats," the spokesperson wrote. "Based on our analysis, we do not believe this issue poses an immediate risk to our users."
FLOP, short for Faulty Load Operation Predictor, exploits a vulnerability in the Load Value Predictor (LVP) found in Apple's A- and M-series chipsets. By inducing the LVP to predict incorrect memory values during speculative execution, attackers can access sensitive information such as location history, email content, calendar events, and credit card details. This attack works on both Safari and Chrome browsers and affects devices including Macs (2022 onward), iPads, and iPhones (September 2021 onward). FLOP requires the victim to interact with an attacker's page while logged into sensitive websites, making it highly dangerous due to its broad data access capabilities.

SLAP, on the other hand, stands for Speculative Load Address Predictor and targets the Load Address Predictor (LAP) in Apple silicon, exploiting its ability to predict memory locations. By forcing LAP to mispredict, attackers can access sensitive data from other browser tabs, such as Gmail content, Amazon purchase details, and Reddit comments. Unlike FLOP, SLAP is limited to Safari and can only read memory strings adjacent to the attacker's own data. It affects the same range of devices as FLOP but is less severe due to its narrower scope and browser-specific nature. SLAP demonstrates how speculative execution can compromise browser process isolation.
Linux

Linux 6.14 Brings Some Systems Faster Suspend and Resume (phoronix.com) 46

Amid the ongoing Linux 6.14 kernel development cycle, Phoronix spotted a pull request for ACPI updates which "will allow for faster suspend and resume cycles on some systems."

Wikipedia defines ACPI as "an open standard that operating systems can use to discover and configure computer hardware components" for things like power management and putting unused hardware components to sleep. Phoronix reports: The ACPI change worth highlighting for Linux 6.14 is switching from msleep() to usleep_range() within the acpi_os_sleep() call in the kernel. This reduces spurious sleep time due to timer inaccuracy. Linux ACPI/PM maintainer Rafael Wysocki of Intel who authored this change noted that it could "spectacularly" reduce the duration of system suspend and resume transitions on some systems...

Rafael explained in the patch making the sleep change:

"The extra delay added by msleep() to the sleep time value passed to it can be significant, roughly between 1.5 ns on systems with HZ = 1000 and as much as 15 ms on systems with HZ = 100, which is hardly acceptable, at least for small sleep time values."

One 2022 bug report complained a Dell XPS 13 using Thunderbolt took "a full 8 seconds to suspend and a full 8 seconds to resume even though no physical devices are connected." In November an Intel engineer posted on the kernel mailing list that the fix gave a Dell XPS 13 a 42% improvement in kernel resume time (from 1943ms to 1127ms).
Power

Chinese Fusion Reactor Maintains Steady State For Almost 18 Minutes (charmingscience.com) 50

Longtime Slashdot readers smooth wombat and AmiMoJo shares a fusion energy breakthrough from China. Charming Science reports: China's "artificial sun," officially known as the Experimental Advanced Superconducting Tokamak (EAST), has achieved a groundbreaking milestone in fusion energy research. According to the Chinese Academy of Sciences (CAS), EAST recently sustained high-confinement plasma operation for an unprecedented 1,066 seconds, shattering the previous world record of 403 seconds, also set by EAST in 2023. [...] The 1,000-second mark is considered a critical threshold in fusion research. Sustaining plasma for such extended durations is essential for demonstrating the feasibility of operating fusion reactors. This breakthrough, accomplished by the Institute of Plasma Physics under the CAS, signifies a major leap towards realizing the potential of fusion energy. [...] The success of EAST's recent experiment can be attributed to several key advancements. Researchers have made significant strides in improving the stability of the heating system, enhancing the accuracy of the control system, and refining the precision of the diagnostic systems. Warning: the source originates from China Daily, an English-language daily newspaper owned by the Central Propaganda Department of the Chinese Communist Party. It's rated "questionable" by Media Bias/Fact Check because of its association with the CCP.
Google

Google Reportedly Worked Directly With Israel's Military On AI Tools 66

In the aftermath of Israel's October 2023 ground invasion of Gaza, Google reportedly worked with the Israeli military to provide AI services while racing against Amazon for contracts. This comes despite publicly denying collaboration with the military and punishing employees protesting its involvement in Project Nimbus, a $1.2 billion cloud computing agreement with Israel. The Verge reports: In the weeks after Hamas's October 7th attack on Israel, employees at Google's cloud division worked directly with the Israel Defense Forces (IDF) -- even as the company told both the public and its own employees that Google only worked with civilian government ministries, the documents reportedly show.

Weeks after the war began, an employee with Google's cloud division escalated the IDF's military's requests for access to Google's AI technology, according to the Washington Post. In another document, an employee warned that Google needed to quickly respond to the military's requests, or else Israel would turn to Amazon for its cloud computing needs. In a November 2023 document, an employee thanks a coworker for handling the IDF's request. Months later, employees requested additional access to AI tools for the IDF.
Social Networks

'Decentralized Social Media Is the Only Alternative To the Tech Oligarchy' (404media.co) 170

An anonymous reader quotes an op-ed from 404 Media's Jason Koebler: If it wasn't already obvious, the last 72 hours have made it crystal clear that it is urgent to build and mainstream alternative, decentralized social media platforms that are resistant to government censorship and control, are not owned by oligarchs and dominated by their algorithms, and in which users own their follower list and can port it elsewhere easily and without restriction. [...] Mastodon's ActivityPub and Bluesky's AT.Protocol have provided the base technology layer to make this possible, and have laid important groundwork over the last few years to decorporatize and decentralize the social internet.

The problem with decentralized social media platforms thus far is that their user base is minuscule compared to platforms like TikTok, Facebook, and Instagram, meaning the cultural and political influence has lagged behind them. You also cannot directly monetize an audience on Bluesky or Mastodon -- which, to be clear, is a feature, not a bug -- but also means that the value proposition for an influencer who makes money through the TikTok creator program or a small business that makes money selling chewing gum on TikTok shop or a clothes brand that has figured out how to arbitrage Instagram ads to sell flannel shirts is not exactly clear. I am not advocating for decentralized social media to implement ads and creator payment programs. I'm just saying that many TikTok influencers were directing their collective hundreds of millions of fans to follow them to Instagram or YouTube, not a decentralized alternative.

This doesn't mean that the fediverse or that a decentralized Instagram or TikTok competitor that runs on the AT.Protocol is doomed. But there is a lot of work to do. There is development work that needs to be done (and is being done) to make decentralized protocols easier to join and use and more interoperable with each other. And there is a massive education and recruitment challenge required to get the masses to not just try out decentralized platforms but to earnestly use them. Bluesky's growing user base and rise as a legitimately impressive platform that one can post to without feeling like it's going into the void is a massive step forward, and proof that it is possible to build thriving alternative platforms. The fact that Meta recently blocked links to a decentralized Instagram alternative shows that big tech sees these platforms, potentially, as a real threat.
"This is all to say that it is possible to build alternatives to Elon Musk's X, Mark Zuckerberg's Instagram, and whatever TikTok will become," concludes Koebler. "It is happening, and it is necessary. The richest, most powerful people in the world have all aligned themselves and their platforms with Donald Trump. But their platforms' relevance and importance doesn't necessarily have to last forever. A different way is possible, if we build it."

Further reading: 'The Tech Oligarchy Arrives' (The Atlantic)
AI

Cutting-Edge Chinese 'Reasoning' Model Rivals OpenAI o1 55

An anonymous reader quotes a report from Ars Technica: On Monday, Chinese AI lab DeepSeek released its new R1 model family under an open MIT license, with its largest version containing 671 billion parameters. The company claims the model performs at levels comparable to OpenAI's o1 simulated reasoning (SR) model on several math and coding benchmarks. Alongside the release of the main DeepSeek-R1-Zero and DeepSeek-R1 models, DeepSeek published six smaller "DeepSeek-R1-Distill" versions ranging from 1.5 billion to 70 billion parameters. These distilled models are based on existing open source architectures like Qwen and Llama, trained using data generated from the full R1 model. The smallest version can run on a laptop, while the full model requires far more substantial computing resources.

The releases immediately caught the attention of the AI community because most existing open-weights models -- which can often be run and fine-tuned on local hardware -- have lagged behind proprietary models like OpenAI's o1 in so-called reasoning benchmarks. Having these capabilities available in an MIT-licensed model that anyone can study, modify, or use commercially potentially marks a shift in what's possible with publicly available AI models. "They are SO much fun to run, watching them think is hilarious," independent AI researcher Simon Willison told Ars in a text message. Willison tested one of the smaller models and described his experience in a post on his blog: "Each response starts with a ... pseudo-XML tag containing the chain of thought used to help generate the response," noting that even for simple prompts, the model produces extensive internal reasoning before output.
Although the benchmarks have yet to be independently verified, DeepSeek reports that R1 outperformed OpenAI's o1 on AIME (a mathematical reasoning test), MATH-500 (a collection of word problems), and SWE-bench Verified (a programming assessment tool).

TechCrunch notes that three Chinese labs -- DeepSeek, Alibaba, and Moonshot AI's Kimi, have released models that match o1's capabilities.
Mars

Edge of Mars' Great Dichotomy Eroded Back By Hundreds of Kilometers (arstechnica.com) 12

Ars Technica's John Timmer reports: In Monday's issue of Nature Geoscience, a team of UK-based researchers tackle a big one: Mars' dichotomy, the somewhat nebulous boundary between its relatively elevated southern half, and the low basin that occupies its northern hemisphere, a feature that some have proposed also served as an ancient shoreline. The new work suggests that the edge of the dichotomy was eroded back by hundreds of kilometers during the time when an ocean might have occupied Mars' northern hemisphere. [...] The new work focuses on an area called Mawrth Vallis, which sits at the edge of the dichotomy. Relative to the northern basin, it's a kilometer-high plateau cut by a major outflow channel that seems to have been caused by one or more massive floods. The slopes surrounding the plateau feature different types of clay-derived minerals, suggesting the area had been subject to interactions between the original materials and water.

Rather than focusing on the plateau itself, the work focuses on the neighboring lowlands, which include a large region dotted with thousands of buttes and mesas that rise roughly a kilometer above the surrounding plains. Using data from the ESA's Mars Express mission, they determine that these features tend to top out at the same height as the nearby plateau. And, using data from NASA's Mars Reconnaissance Orbiter, they determined that the clays present along the slopes match those found on the plateau as well. Their conclusion from this is that the mesas and buttes are the remains of what was once a far larger plateau, which was largely eroded away on the side facing the northern basin. And that erosion took place across a pretty significant distance, as the buttes extend hundreds of kilometers away from the present highlands. And, just as at the highland plateau, these mounds hint at a water-based process that modified the rocks from the top down. That's because the deeper clays are often magnesium-rich, which tends to happen when water comes in contact with volcanic rocks or material with similar chemistry. Closer to the surface, things transition to aluminum- and iron-rich clays. These clays can occur when the water source is acidic or can be simply due to longer exposure to water, as the magnesium clays are a bit more soluble.

The huge area covered by these mounds gives a sense of just how significant this erosion was. "The dichotomy boundary has receded several hundred kilometers," the researchers note. "Nearly all intervening material -- approximately 57,000 cubic kilometers over an area of 284,000 square kilometers west of Ares Vallis alone -- has been removed, leaving only remnant mounds." Based on the distribution of the different clays, the team argues that their water-driven formation took place before the erosion of the material. This would indicate that water-rock interactions were going on over a very wide region early in the history of Mars, which likely required an extensive hydrological cycle on the red planet. As the researchers note, a nearby ocean would have improved the chances of exposing this region to water, but the exposure could also have been due to processes like melting at the base of an ice cap. Complicating matters further, many of the mounds top out below one proposed shoreline of the northern ocean and above a second. It's possible that a receding ocean could have contributed to their erosion. But, at the same time, some of the features of a proposed shoreline now appear to have been caused by the general erosion of the original plateau, and may not be associated with an ocean at all.

Medicine

After PFAS Contamination on English Channel Island, Government Panel Recommends Bloodletting for Those Affected (theguardian.com) 71

Jersey is an island in the English channel, "a self-governing British Crown Dependency near the coast of northwest France," according to Wikipedia — population: 103,267.

But now some residents of Jersey "have been recommended bloodletting to reduce high concentrations of 'forever chemicals' in their blood," reports the Guardian, "after tests showed some islanders have levels that can lead to health problems." Private drinking water supplies in Jersey were polluted by the use of firefighting foams containing PFAS (per- and polyfluoroalkyl substances) at the island's airport, which were manufactured by the U.S. multinational 3M. .. Bloodletting draws blood from a vein in measured amounts. It is safe and the body replenishes the blood naturally, but it must be repeated until clean...

In response to the blood results, the government established an independent PFAS scientific advisory panel to advise public policy. The panel's first report recommended that the government should look at offering bloodletting to affected residents. "Studies show that bloodletting is an effective way to lower levels of PFAS in blood," said Ian Cousins, one of the panel members, though he added that there were no guarantees the process would prevent or cure diseases associated with the chemicals. The therapy costs about £100,000 upfront and then as much as £200,000 a year to treat 50 people. The panel is also considering the benefit of the drug cholestyramine, which a study has shown reduces PFAS in blood more quickly and cheaply, albeit with possible side effects. The government says it plans to launch a clinical service by early 2025.

Contamination persisted on the island for decades. "We know they started to use 3M's firefighting foam in the 1960s and then ramped up in the 1990s in weekly fire training exercises, after which foam started to appear in nearby streams," said Jeremy Snowdon, a former Jersey airport engineer who drank contaminated water for years. He has measured elevated levels of PFAS in his own blood and has high cholesterol.

The article includes this quote from one of the 88 residents of the polluted area found to have high levels of PFAS after blood testing. "I just want this out of my body. I don't want to end up with bladder cancer."
China

On Eve of TikTok Ban, Chinese App RedNote Surges in Popularity, Delighting Chinese State Media (go.com) 118

Chinese social-networking site RedNote became the #1 most-downloaded app in America, reports the Associated Press, with some new users considering it a way to protest America's possible TikTok ban.

So what happened next? They were met with surprise, curiosity and in-jokes on Xiaohongshu — literally, "Little Red Book" — whose users saw English-language posts take over feeds almost overnight. Americans introduced themselves with hashtag TikTok refugees, ask me anything attitude and posting photos of their pets to pay their hosts' "cat tax." Parents swapped stories about raising kids and Swifties from both countries, of course, quickly found each other. It's a rare moment of direct contact between two online worlds that are usually kept apart by language, corporate boundaries, and China's strict system of online censorship that blocks access to nearly all international media and social media services... Xiaohongshu's 300 million monthly active users are overwhelmingly Chinese — so much so that parts of its interface have no English-language version... [Press reports suggest about a million of TikTok's 170 million users tried switching to RedNote this week...]

On the platform, two versions of the TikTok refugee hashtag have over 24 million posts, with related posts appearing at the top of many users' feeds. A large number of American users say they've received a warm welcome from the community, with #TikTokrefugee. "Welcome the global villagers" remains the top one trending topic on Xiaohongshu, with 8.9 million views on Thursday. Users from both countries are comparing notes on grocery prices, rent, health insurance, medical bills and the relationship between mother-in-law and daughter-in-law. Parents talk about what the kids learn in school in two countries. Some have already joined book clubs and are building up a community. American users asked how Chinese see the LGBTQ community and got warned that it was among sensitive topics, Chinese users taught Americans what are sensitive topics and key words to avoid censorship on the app. Chinese students pulled out their English homework, looking for help.

Chinese state media, which have long dismissed U.S. allegations against TikTok, have welcomed the protest against the ban. People's Daily [the official newspaper of the Central Committee of the Chinese Communist Party], said in an op-ed about TikTok refugees on Thursday that says the TikTok refugees found a "new home," and "openness, communication, and mutual learning are the unchanging themes of mankind and the heartfelt desires of people from all countries."

Making the most of the moment is Jianlu Bi, who is apparently a senior content producer for Beijing's state-run China Global Television Network, which Wikipedia describes as "under the control of the Central Propaganda Department of the Chinese Communist Party". Friday Jianlu Bi crafted an article claiming "surprising" and "stark contrasts" were revealed: While the United States is often portrayed as a land of limitless opportunity, many American netizens have shared their struggles with high living costs, particularly in urban areas. One common theme is the exorbitant cost of healthcare. "I just got a simple bill for a routine checkup and it was over $500," shared one American user. "I can't imagine what a serious illness would cost! I feel like I'm constantly on the brink of financial ruin due to medical expenses." In contrast, Chinese netizens often express surprise at the affordability of many goods and services in their home country. For instance, the cost of housing, particularly in smaller cities, is often significantly lower in China compared to the United States.... This disparity is often attributed to factors such as government policies, economic development, and cultural differences...

Traditional media narratives often present simplified and often biased portrayals of China and the United States. For example, the U.S. is often portrayed as a land of opportunity with limitless possibilities, while China is sometimes depicted as a country with limited freedoms. Xiaohongshu, on the other hand, provides a platform for ordinary people to share their authentic experiences and perspectives... A Chinese student studying in the U.S. shared, "I was surprised to learn that many of my classmates are working part-time jobs to cover their tuition and living expenses. This is very different from the image of affluent American students I had in my mind. It really opened my eyes to the realities of life for many young people in the U.S."

"As social media continues to evolve, these platforms will undoubtedly play an increasingly important role in shaping global perceptions..." the article concludes.

Article suggested by long-time Slashdot reader hackingbear.
Movies

David Lynch, Director of Twin Peaks and Dune, Dies At 78 (deadline.com) 48

David Lynch, a four-time Oscar-nominated filmmaker known for the 1984 sci-fi epic Dune and the Showtime drama Twin Peaks, has died. "In January 2025, Lynch evacuated his Los Angeles home due to the Southern California wildfires," writes longtime Slashdot reader Z00L00K. "According to Deadline, these events preceded a terminal decline in his health, and on January 16, 2025, Lynch's family announced that he had died at the age of 78." Deadline reports: Lynch had been diagnosed with emphysema. Sources told Deadline that he was forced to relocate from his house due to the Sunset Fire and then took a turn for the worse. In an interview with Sight & Sound magazine last year, Lynch revealed that due to Covid fears and his emphysema diagnosis, he could no longer could leave the house, which meant if he directed again, it would be remote. He then followed up the interview with a post on social that he "will never retire" despite his physical challenges.
Piracy

Telegram Shuts Down Z-Library, Anna's Archive Channels Over Copyright Infringement (torrentfreak.com) 18

An anonymous reader quotes a report from TorrentFreak: In 'piracy' associated circles, Z-Library has one of the most followed Telegram channels of all. The shadow library's official channel amassed over 630,000 subscribers over the years, who were among the first to read site announcements and other key updates. Z-Library previously had some of its messages removed due to copyright infringement. While it didn't upload or directly link to infringing material on Telegram, rightsholders allegedly complained about the links that were posted to the Z-Library website. In response, Z-Library chose to no longer include links to its own homepage on Telegram. Instead, it referred users to Wikipedia and Reddit, where the links were still available. The same copyright awareness was visible at Anna's Archive, a popular shadow library search engine. This channel was also careful not to post direct links to infringing material. After all, sharing or uploading copyrighted books would undoubtedly lead to trouble.

Despite the reported caution, the channels of both Z-Library and Anna's Archive are no longer accessible today. Messages posted by these accounts were purged "due to copyright infringement", as shown below. Telegram didn't limit its action to removing posts; the channels are now entirely inaccessible. Those trying to access the channels in the Telegram app receive a pop-up message stating they are "unavailable due to copyright infringement." The simultaneous removal of both channels suggests they are linked to the same complaint or decision. The specific complaint and alleged copyright infringements remain unclear.

Social Networks

TikTok Users Flocks To Chinese Social App Xiaohongshu (apnews.com) 153

hackingbear shares a report from the Associated Press: As the threat of a TikTok ban looms, U.S. TikTok users are flocking to the Chinese social media app Xiaohongshu -- making it the top downloaded app in the U.S. Xiaohongshu, which in English means "Little Red Book" is a Chinese social media app that combines e-commerce, short video and posting functions, enticing mostly Chinese young women from mainland China and regions with with a Chinese diaspora such as Malaysia and Taiwan who use it as a de-facto search engine for product, travel and restaurant recommendations, as well as makeup and skincare tutorials. After the justices seemed inclined to let the law stand, masses of TikTok users began creating accounts on Xiaohongshu, including hashtags such as #tiktokrefugee or #tiktok to their posts. "

I like your makeup," a Xiaohongshu user from Beijing comments one of the posts by Alexis Garman, a 21-year-old TikTok user in Oklahoma with nearly 20,000 followers, and Garman thanks them in a reply. A user from the southwestern province of Sichuan commented "I am your Chinese spy please surrender your personal information or the photographs of your cat (or dog)." "TikTok possibly getting banned doesn't just take away an app, it takes away jobs, friends and community," Garman said. "Personally, the friends and bond I have with my followers will now be gone." Xiaohongshu doesn't even have an English user interface.
Reuters reports: In only two days, more than 700,000 new users joined Xiaohongshu, a person close to the company told Reuters. Xiaohongshu [which was founded in 2013 and is backed by investors such as Alibaba, Tencent and Sequoia], did not immediately respond to a request for comment. U.S. downloads of RedNote were up more than 200% year-over-year this week, and 194% from the week prior, according to estimates from app data research firm Sensor Tower. The second most-popular free app on Apple's App Store list on Tuesday, Lemon8, another social media app owned by ByteDance, experienced a similar surge last month, with downloads jumping by 190% in December to about 3.4 million.
AI

161 Years Ago, a New Zealand Sheep Farmer Predicted AI Doom (arstechnica.com) 65

An anonymous reader quotes a report from Ars Technica, written by Benj Edwards: While worrying about AI takeover might seem like a modern idea that sprung from War Games or The Terminator, it turns out that a similar concern about machine dominance dates back to the time of the American Civil War, albeit from an English sheep farmer living in New Zealand. Theoretically, Abraham Lincoln could have read about AI takeover during his lifetime. On June 13, 1863, a letter published (PDF) in The Press newspaper of Christchurch warned about the potential dangers of mechanical evolution and called for the destruction of machines, foreshadowing the development of what we now call artificial intelligence—and the backlash against it from people who fear it may threaten humanity with extinction. It presented what may be the first published argument for stopping technological progress to prevent machines from dominating humanity.

Titled "Darwin among the Machines," the letter recently popped up again on social media thanks to Peter Wildeford of the Institute for AI Policy and Strategy. The author of the letter, Samuel Butler, submitted it under the pseudonym Cellarius, but later came to publicly embrace his position. The letter drew direct parallels between Charles Darwin's theory of evolution and the rapid development of machinery, suggesting that machines could evolve consciousness and eventually supplant humans as Earth's dominant species. "We are ourselves creating our own successors," he wrote. "We are daily adding to the beauty and delicacy of their physical organisation; we are daily giving them greater power and supplying by all sorts of ingenious contrivances that self-regulating, self-acting power which will be to them what intellect has been to the human race. In the course of ages we shall find ourselves the inferior race."

In the letter, he also portrayed humans becoming subservient to machines, but first serving as caretakers who would maintain and help reproduce mechanical life—a relationship Butler compared to that between humans and their domestic animals, before it later inverts and machines take over. "We take it that when the state of things shall have arrived which we have been above attempting to describe, man will have become to the machine what the horse and the dog are to man... we give them whatever experience teaches us to be best for them... in like manner it is reasonable to suppose that the machines will treat us kindly, for their existence is as dependent upon ours as ours is upon the lower animals," he wrote. The text anticipated several modern AI safety concerns, including the possibility of machine consciousness, self-replication, and humans losing control of their technological creations. These themes later appeared in works like Isaac Asimov's The Evitable Conflict, Frank Herbert's Dune novels (Butler possibly served as the inspiration for the term "Butlerian Jihad"), and the Matrix films.
"Butler's letter dug deep into the taxonomy of machine evolution, discussing mechanical 'genera and sub-genera' and pointing to examples like how watches had evolved from 'cumbrous clocks of the thirteenth century' -- suggesting that, like some early vertebrates, mechanical species might get smaller as they became more sophisticated," adds Ars. "He expanded these ideas in his 1872 novel Erewhon, which depicted a society that had banned most mechanical inventions. In his fictional society, citizens destroyed all machines invented within the previous 300 years."
Wikipedia

Wikipedia Searches Reveal Differing Styles of Curiosity (scientificamerican.com) 24

Wikipedia's massive dataset helped researchers identify three styles of curiosity -- "busybody," "hunter," and "dancer" -- based on how users navigate its pages (see: wiki rabbit hole). These curiosity styles reflect broader social trends and highlight curiosity's role in connecting information rather than merely acquiring it. Scientific American reports: In this lexicon, a busybody traces a zigzagging route through many often distantly related topics. A hunter, in contrast, searches with sustained focus, moving among a relatively small number of closely related articles. A dancer links together highly disparate topics to try to synthesize new ideas. "Curiosity actually works by connecting pieces of information, not just acquiring them," says University of Pennsylvania network scientist Dani Bassett, cosenior author on a recent study of these curiosity types in Science Advances. "It's not as if we go through the world and pick up a piece of information and put it in our pockets like a stone. Instead we gather information and connect it to stuff that we already know."

The team tracked more than 482,000 people using Wikipedia's mobile app in 50 countries or territories and 14 languages. The researchers charted these users' paths using "knowledge networks" of connected information, which depict how closely one search topic (a node in the network) is related to another. Beyond just mapping the connections, they linked curiosity styles to location-based indicators of well-being, inequality, and other measures. In countries with higher education levels and greater gender equality, people browsed more like busybodies. In countries with lower scores on these variables, people browsed like hunters. Bassett hypothesizes that "in countries that have more structures of oppression or patriarchal forces, there may be a constraining of knowledge production that pushes people more toward this hyperfocus." The researchers also analyzed topics of interest, ranging from physics to visual arts, for busybodies compared with hunters (graphic). Dancer patterns, more recently confirmed, were excluded.
Editor note: This article was published on December 24, 2024, based on a study published in October, 2024.
Facebook

Meta Is Ushering In a 'World Without Facts,' Says Nobel Peace Prize Winner (theguardian.com) 258

An anonymous reader quotes a report from The Guardian: The Nobel peace prize winner Maria Ressa has said Meta's decision to end factchecking on its platforms and remove restrictions on certain topics means "extremely dangerous times" lie ahead for journalism, democracy and social media users. The American-Filipino journalist said Mark Zuckerberg's move to relax content moderation on the Facebook and Instagram platforms would lead to a "world without facts" and that was "a world that's right for a dictator."

"Mark Zuckerberg says it's a free speech issue -- that's completely wrong," Ressa told the AFP news service. "Only if you're profit-driven can you claim that; only if you want power and money can you claim that. This is about safety." Ressa, a co-founder of the Rappler news site, won the Nobel peace prize in 2021 in recognition of her "courageous fight for freedom of expression." She faced multiple criminal charges and investigations after publishing stories critical of the former Philippine president Rodrigo Duterte. Ressa rejected Zuckerberg's claim that factcheckers had been "too politically biased" and had "destroyed more trust than they've created."

"Journalists have a set of standards and ethics," Ressa said. "What Facebook is going to do is get rid of that and then allow lies, anger, fear and hate to infect every single person on the platform." The decision meant "extremely dangerous times ahead" for journalism, democracy and social media users, she said. [...] Ressa said she would do everything she could to "ensure information integrity." "This is a pivotal year for journalism survival," she said. "We'll do all we can to make sure that happens."

Programming

Should First-Year Programming Students Be Taught With Python and Java? (huntnewsnu.com) 175

Long-time Slashdot reader theodp writes: In an Op-ed for The Huntington News, fourth year Northeastern University CS student Derek Kaplan argues that real pedagogical merit is what should count when deciding which language to use to teach CS fundamentals (aka 'Fundies'). He makes the case for Northeastern to reconsider its decision to move from Racket to Python and Java later this year in an overhaul of its first-year curriculum.

"Students will get extensive training in Python, which is currently the most requested language by co-op employers," Northeastern explains (some two decades after a Slashdot commenter made the same Hot Languages = Jobs observation in a spirited 2001 debate on Java as a CS introductory language)...

"I have often heard computer science students complain that Fundies 1 teaches Racket instead of a 'useful language' like Python," Kaplan writes. "But the point of Fundies is not to teach Racket — it is to teach program design skills that can be applied using any programming language. Racket is just the tool it uses to do so. A student who does well in Fundies will have no difficulty applying the same skills to Python or any other language. And with how fast the tech industry changes, is it really worth having a course that teaches just Python when tomorrow, some other language might dominate the industry? Our current curriculum focuses on timeless principles rather than fleeting trends."

Also expressing concerns about the selection of suitable languages for novice programming is King's College CS Prof Michael Kölling, who explains, "One of the drivers is the perceived usefulness of the language in a real-world context. Students (and their parents) often have opinions which language is 'better' to learn. In forming these opinions, the definition of 'better' can often be vague and driven by limited insight. One strong aspect commonly cited is the perceived usefulness of a language in the 'real world.' If a language is widely used in industry, it is more likely to be seen as a useful language to learn." Kölling's recommendation? "We need a new language for teaching novices at secondary school and introductory university level," Kölling concludes. "This language should be designed explicitly for teaching [...] Maintenance and adaptation of this language should be driven by pedagogical considerations, not by industry needs."

While noble in intent, one suspects Kaplan and Kölling may be on a quixotic quest in a money wins world, outgunned by the demands, resources, and influence of tech giants like Amazon — the top employer of Northeastern MSCS program grads — who pushed back against NSF advice to deemphasize Java in high school CS and dropped $15 million to have tech-backed nonprofit Code.org develop and push a new Java-based, powered-by-AWS CS curriculum into high schools with the support of a consortium of politicians, educators, and tech companies. Echoing Northeastern, an Amazon press release argued the new Java-based curriculum "best prepares students for the next step in their education and careers."

Classic Games (Games)

Magnus Carlsen Gets Married, After Stirring More Controversy With 'Shared' 8th World Blitz Chess Title (cnn.com) 39

Today 34-year-old chess champion Magnus Carlsen married 26-year-old Ella Victoria Malone, "in a ceremony packed with guests on a sunny winter day in Oslo," reports Chess.com. According to Norwegian newspaper Dagbladet, a film crew from Netflix was also present. The streaming giant is shooting a chess-related TV show rumored to air in 2025... Ella Victoria is now expected to have a more central role in her husband's career. According to VG, she played a crucial role in securing Magnus a deal with fashion brand G-Star Raw...

Their wedding was surely a fairy tale, but the Carlsens aren't heading for their honeymoon just yet. Magnus is set to make his debut for St. Pauli in the German Bundesliga on January 10, when he'll face Dusseldorf led by none other than GM Gukesh Dommaraju.

The article adds that "For Carlsen, this caps off a whirlwind week that began in New York, highlighted by his eighth World Blitz Championship title," a victory that they say was "controversially" shared with Russian grandmaster Ian Nepomniachtchi. CNN reports: [Carlsen] had taken a 2-0 lead in the four-game contest before Nepomniachtchi launched a stunning comeback to level the scores, sending the match to a sudden death tie-break. The pair then drew the next three games, and it was later determined that they would share the title after the proposal was accepted by Arkady Dvorkovich, the president of chess governing body FIDE. "I thought, at that point, we had already played for a very long time and I was, first of all, very happy to end it, and I thought, at that point, it would have been very, very cruel on both of us if one gets first and the other gets second," Carlsen later told reporters....

[T]he decision to share the Blitz title with long-time rival Nepomniachtchi has sparked outcry from some of the world's top players — the first time in history that a world championship title has been shared. "This is a situation where I cannot stand with what Magnus has done," prominent player Hikaru Nakamura said on his YouTube channel. "I do not think that there is any precedent for this, when you put out rules about the game itself and then suddenly you decide, 'It's okay, we're going to go home' ... It's unconscionable to me...."

"FIDE goes from forfeiting Carlsen (over the jeans debacle) to creating an entirely new rule," Hans Niemann, whom Carlsen had defeated in the quarterfinals, wrote on X, formerly known as Twitter. "Seems like the the regulatory body of chess has no intention of being unbiased. They seem to only care about what one player thinks...." Former world champion Garry Kasparov made a pointed reference to the jeans controversy, writing on X: "I thought the first FIDE tiebreak was pants."

Magnus apparently tells his opponent "If they like refuse, we can just play short draws until they give up," according to a behind-the-scenes video clip posted to X.com. The CEO of FIDE, Emil Sutovsky, re-posted it on X.com, complaining that FIDE president Dvorkovich's decision to accept the players' proposed draw was made "under the spur of a moment, and of course, the video appeared much later. I do think it is VERY BAD though..."

FIDE later told CNN that "This situation has already prompted valuable discussions within FIDE management to improve our regulations." (And their article adds that some — including grandmaster Ivan Sokolov — suggested ties be settled with a new chess format known as Armageddon.) "In Armageddon, White has more time but a draw on the board counts as a win for Black," explains the Guardian — adding that back in 1983, "Fide determined the winner of a Candidates match by a roulette wheel."

The Guardian adds that Russian-born FIDE president Arkady Dvorkovich "probably felt he had little choice but to rubber stamp the agreement by the players." He would have been pilloried in Moscow as preventing a Russian world champion had he ruled otherwise, and a negative could also have provoked a series of the notorious Berlin draws, the standard method for a quick mutually agreed half point. However, that course of action would have brought the players into disrepute, and it is more likely that an inspired game or a blunder would have settled the final. The audience on Wall Street applauded the decision, but the considerable online reaction from professional players and fans has been mostly critical.

It was the first ever shared over-the-board individual world title in chess history.

AI

Dire Predictions for 2025 Include 'Largest Cyberattack in History' (politico.com) 98

Politico asked an "array of thinkers — futurists, scientists, foreign policy analysts and others — to lay out some of the possible 'Black Swan' events that could await us in the new year: What are the unpredictable, unlikely episodes that aren't yet on the radar but would completely upend American life as we know it?"

Here's one from Gary Marcus, a cognitive scientist and author of the book Taming Silicon Valley: How We Can Ensure That AI Works For Us: 2025 could easily see the largest cyberattack in history, taking down, at least for a little while, some sizeable piece of the world's infrastructure, whether for deliberate ransom or to manipulate people to make money off a short on global markets. Cybercrime is already a huge, multi-trillion dollar problem, and one that most victims don't like to talk about. It is said to be bigger than the entire global drug trade. Four things could make it much worse in 2025.

First, generative AI, rising in popularity and declining in price, is a perfect tool for cyberattackers. Although it is unreliable and prone to hallucinations, it is terrific at making plausible sounding text (e.g., phishing attacks to trick people into revealing credentials) and deepfaked videos at virtually zero cost, allowing attackers to broaden their attacks. Already, a cybercrew bilked a Hong Kong bank out of $25 million. Second, large language models are notoriously susceptible to jailbreaking and things like "prompt-injection attacks," for which no known solution exists. Third, generative AI tools are increasingly being used to create code; in some cases those coders don't fully understand the code written, and the autogenerated code has already been shown in some cases to introduce new security holes.

And finally 2025 may see a U.S. government "determined to deregulate as much as possible, slashing costs," Marus speculates, a scenario where "enforcement and investigations will almost certainly decline in both quality and quantity, leaving the world quite vulnerable to ever more audacious attacks."

Elsewhere in Politico's article there's other even less-cheery predictions for 2025. The executive director of an advocacy group for public health professionals describes the possibility of an epidemic "that we had the tools to control" which "winds up killing thousands" (while also "sending the economy back into a Covid-like downward spiral.")

And a law professor predicts 2025 will see a decisive breakthrough in quantum computing. "Those little padlocks you see beside URLs? They would, overnight, become a fiction."
Movies

2024's Ten Top-Grossing Films Were All Sequels or Prequels (slashfilm.com) 86

"Every single one of the top ten box office hits of 2024 was a sequel, a remake... or a prequel," writes The Hollywood Reporter.

Here's the list of 2024's top-grossing films published by the movie blog SlashFilm:

10. Beetlejuice Beetlejuice
9. Venom: The Last Dance
8. Kung Fu Panda 4
7. Godzilla x Kong: The New Empire
6. Wicked
5. Dune: Part Two
4. Moana 2
3. Despicable Me 4
2. Deadpool & Wolverine
1. Inside Out 2


2024 was the year Godzilla celebrated its 70th year as a franchise — but it wasn't the only long-running franchise. "When the Marvel Cinematic Universe went R-rated with Deadpool & Wolverine... it was literally more successful than any other R-rated movie in history," SlashFilm points out, while Venom: The Last Dance was the year's 9th highest-earner. (But several other big superhero movies flopped and "the misses outweighed the hits this year, while DC sat it out entirely as the world waits for Superman to usher in James Gunn's new DC Universe.")

They also marvel that Wicked earned $572 million after opening on the same day as Ridley Scott's Gladiator II....

But in the end SlashFilm describes 2024 as "a banner year for animation," with computer-animated movies filling four of the top ten spots (Kung Fu Panda 4, Moana 2, Despicable Me 4, and Inside Out 2). And another interesting trend? Though the world flocked to Tim Burton's first sequel to Beetlejuice after 36 years, Warner Bros. was, "at one point, pushing for Beetlejuice 2 to go directly to streaming on Max." And Disney original had the same idea for Moana 2, leading SlashFilm to conclude that 2024's box office "should be the death of the big direct-to-streaming movie." SlashFilm notes that Disney also sent several Pixar originals to Disney+ between 2020 and 2022, which "did immeasurable damage to the brand, something that even CEO Bob Iger has acknowledged." And then after a theatrical debut Pixar's Inside Out 2 became "the eighth biggest movie ever at the box office, with $1.698 billion to its name" — and the highest-grossing animated film ever made.

And Dune: Part Two? Denis Villeneuve accomplished nothing shy of a miracle with 2021's "Dune," an adaptation of Frank Herbert's cherished sci-fi novel that was faithful to the material, massive in scale, but still felt like an auteur film... The only downside? 2021 was a terrible time to release a movie, particularly a Warner Bros. movie, as all of the studio's films were going to HBO Max the same day they hit theaters. Yet, "Dune" made $400 million in its original run, which was enough to justify a sequel. Evidently, the audience for this franchise grew exponentially in the years before "Dune: Part Two" hit theaters in early March... All told, Villeneuve's sweeping, epic sequel pulled in $714.4 million worldwide, all while garnering tons of acclaim once again. Also, not for nothing, Villeneuve got it made for less than $200 million...

Without "Dune: Part Two" making what it made, the box office might have been in truly dire shape. As a relatively dead April and very weak May followed, this overperformance helped keep theaters afloat until greener pastures arrived in the back half of the year. The Spice must flow, as it were.

The Hollywood Reporter offers another take on the significance of 2024: Total domestic box office revenue appears to be heading toward around $8 billion, down from 2023's exhilarating post-COVID turnaround of $9 billion, but the National Association of Theatre Owners prefers to accentuate the positive, attributing the dip to a shortage of product due to the labor strikes and taking encouragement from the renewal of the movie habit...

Interestingly, or thankfully, the cinematic universes of Marvel, DC, and Star Wars failed to expand: except for Deadpool & Wolverine, not one of the huge hits came from a comic book franchise or a galaxy far, far away.

The article then complains about people using their phones during the movie for texting, talking, and photographing the movie itself. (Though it applauds a PSA against the practice in which Deadpool and Wolverine "delivered the message in laudably blunt terms.")

And on Wikipedia, Deadpool & Wolverine and Dune: Part Two were the eighth and 23rd most popular articles of 2024.
Programming

'International Obfuscated C Code Contest' Will Relaunch, Celebrating 40th Anniversary (fosstodon.org) 23

After a four-year hiatus, 2025 will see the return of the International Obfuscated C Code Contest. Started in 1984 (and inspired partly by a bug in the classic Bourne shell), it's "the Internet's oldest contest," acording to their official social media account on Mastodon.

The contest enters its "pending" state today at 2024-12-29 23:58 UTC — meaning an opening date for submissions has been officially scheduled (for January 31st) as well as a closing date roughly eight weeks later on April 1st, 2025. That's according to the newly-released (proposed and tentative) rules and guidelines, listing contest goals like "show the importance of programming style, in an ironic way" and "stress C compilers with unusual code." And the contest's home page adds an additional goal: "to have fun with C!"

Excerpts from the official rules: Rule 0
Just as C starts at 0, so the IOCCC starts at rule 0. :-)

Rule 1
Your submission must be a complete program....

Rule 5
Your submission MUST not modify the content or filename of any part of your original submission including, but not limited to prog.c, the Makefile (that we create from your how to build instructions), as well as any data files you submit....

Rule 6
I am not a rule, I am a free(void *human);
while (!(ioccc(rule(you(are(number(6)))))) {
ha_ha_ha();
}

Rule 6 is clearly a reference to The Prisoner... (Some other rules are even sillier...) And the guidelines include their own jokes: You are in a maze of twisty guidelines, all different.

There are at least zero judges who think that Fideism has little or nothing to do with the IOCCC judging process....

We suggest that you avoid trying for the 'smallest self-replicating' source. The smallest, a zero byte entry, won in 1994.

And this weekend there was also a second announcement: After a 4 year effort by a number of people, with over 6168+ commits, the Great Fork Merge has been completed and the Official IOCCC web site has been updated! A significant number of improvements has been made to the IOCCC winning entries. A number of fixes and improvements involve the ability of reasonable modern Unix/Linux systems to be able to compile and even run them.
Thanks to long-time Slashdot reader — and C programmer — achowe for sharing the news.

Slashdot Top Deals