Boeing is conducting more surprise inspections at its factories as part of a broader plan to prevent manufacturing snafus like the one that led to a jet-panel blowout on an Alaska Air flight a year ago. From a report: The jet maker outlined on Friday more than a dozen steps it has taken in recent months to tackle a manufacturing quality crisis that has forced Boeing to slow production and has put it under the microscope of federal regulators. Some of the steps have been previously reported. Boeing restarted production at its 737 factory in December after a machinists strike stopped work for several months. The company is still producing far fewer 737 MAXs per month than it was in the months before the Alaska Airlines accident. Among the new procedures are another layer of random quality checks where plane parts are commonly removed and then put back. In the case of the MAX involved in last January's incident, workers failed to replace bolts needed to hold a door-plug in place. The plug had been opened to repair faulty rivets.

Read more of this story at Slashdot.

Researchers from Inria and Microsoft have developed a system to automatically convert specific types of C programming code into memory-safe Rust code, addressing growing cybersecurity concerns about memory vulnerabilities in software systems. The technique, detailed in a new paper, requires programmers to use a restricted version of C called "Mini-C" that excludes features like pointer arithmetic. The researchers successfully tested their conversion system on two major code libraries, including the 80,000-line HACL* cryptographic library. Parts of the converted code have already been integrated into Mozilla's NSS and OpenSSH security systems, according to the researchers. Memory safety errors account for 76% of Android vulnerabilities in 2019.

Read more of this story at Slashdot.

China will expand consumption subsidies to cover smartphones and other electronics, in a step to promote domestic spending as external headwinds pick up. From a report: A national trade-in program that currently applies to home appliances and cars will broaden this year to include personal devices like phones, tablets and smartwatches, officials from the nation's top economic planning agency said in a briefing Friday. Chinese consumers in the post-Covid era have begun holding onto their smartphones longer, given a lack of exciting new features and general belt-tightening. As with cars and washing machines, investors hope incentives will revive the world's largest smartphone market and drive sales for not just brands such as Huawei and Xiaomi, but also galvanize business on platforms popular with device fans like Alibaba Group and JD.com.

Read more of this story at Slashdot.

China's sulfur dioxide emissions have fallen by more than two-thirds over the past 15 years through strict coal plant regulations and desulfurization technology, according to Community Emissions Data System data. Emissions peaked in mid-2000s after steep rises in the 1980s-90s, with the reduction significantly improving air quality in major cities.

Read more of this story at Slashdot.

An anonymous reader quotes a report from the Hollywood Reporter: A trio of major music publishers suing Anthropic over the use of lyrics to train its AI system have reached a deal with the Amazon-backed company to resolve some parts of a pending preliminary injunction. U.S. District Judge Eumi Lee on Thursday signed off on an agreement between the two sides mandating Anthropic to maintain existing guardrails that prevent its Claude AI chatbot from providing lyrics to songs owned by the publishers or create new song lyrics based on the copyrighted material. In a statement, Anthropic said Claude "isn't designed to be used for copyright infringement, and we have numerous processes in place designed to prevent such infringement." It added, "Our decision to enter into this stipulation is consistent with those priorities. We continue to look forward to showing that, consistent with existing copyright law, using potentially copyrighted material in the training of generative AI models is a quintessential fair use." [...] Under the agreement, Anthropic will apply already-implemented guardrails in the training of new AI systems. The deal also provides an avenue for music publishers to intervene if the guardrails aren't working as intended. "Publishers may notify Anthropic in writing that its Guardrails are not effectively preventing output that reproduces, distributes, or displays, in whole or in part, the lyrics to compositions owned or controlled by Publishers, or creates derivative works based on those compositions," the filing states. "Anthropic will respond to Publishers expeditiously and undertake an investigation into those allegations, with which Publishers will cooperate in good faith." Anthropic has maintained in court filings that existing guardrails make it unlikely that any future user could prompt Claude to produce any material portion of the works-in-suit. They consist of a "range of technical and other measures -- at all levels in the development lifecycle -- that aim to prevent users from simply prompting Claude to regurgitate training data," said a company spokesperson. The court is expected to issue a ruling in the coming months on whether to issue preliminary injunction that would bar Anthropic from training future models on lyrics owned by the publishers.

Read more of this story at Slashdot.

More than half-a-dozen VPN apps, including Cloudflare's widely-used 1.1.1.1, have been pulled from India's Apple App Store and Google Play Store following intervention from government authorities, TechCrunch reported Friday. From the report: The Indian Ministry of Home Affairs issued removal orders for the apps, according to a document reviewed by TechCrunch and a disclosure made by Google to Lumen, Harvard University's database that tracks government takedown requests globally.

Read more of this story at Slashdot.

Xiaomi has further restricted bootloader unlocking to just one device per user per year, significantly hindering custom ROM development and reinforcing user dependence on its proprietary HyperOS ecosystem. Android Police reports: Roughly a year ago, Xiaomi introduced a policy limiting users to three unlocked devices per account, providing only a limited time window for unlocking, and demanding waiting periods before doing so. It's now gone even further, limiting users to unlocking the bootloader of just a single device throughout the year. Unlocking the bootloader changes the way a phone works by preventing automated software updates, among other things, and isn't a good idea for most users. Power users love it for complete customization of their devices, and unlocked bootloaders are critical to the creation and installation of privately developed operating systems, or custom ROMs. Custom ROMs usually (but not always) derive from pre-existing OSs like Android or Xiaomi's HyperOS. To write operating software that works on a certain device, you need to develop it on that specific device. Consequently, individuals and teams throughout the enthusiast phone sphere constantly add to their collections of bootloader-unlocked phones. The new unlocking restrictions could place undue hardship on resource-limited development teams, reducing the number of custom ROMs produced moving forward. Xiaomi first tightened restrictions roughly a year ago, following the enforcement of a Chinese law requiring certain pre-installed software behaviors. But Xiaomi's business plan and sales models indicate a couple of other motivations for insisting users stick with its first-party HyperOS. Some of the motives include preventing scalping, avoiding accidental bricking, and preserving advertising-driven revenue. However, these measures come at the cost of user freedom and may stifle innovation within the enthusiast developer community.

Read more of this story at Slashdot.

ZipNada shares a report from Phys.org: In a paper published today in Nature, a team led by Columbia Engineering researchers and collaborators report that they have invented new nanoscale sensors of force. They are luminescent nanocrystals that can change intensity and/or color when you push or pull on them. These "all-optical" nanosensors are probed with light only and therefore allow for fully remote read-outs -- no wires or connections are needed. They have 100 times better force sensitivity than the existing nanoparticles that utilize rare-earth ions for their optical response, and an operational range that spans more than four orders of magnitude in force, a much larger range -- 10-100 times larger -- than any previous optical nanosensor. "We expect our discovery will revolutionize the sensitivities and dynamic range achievable with optical force sensors, and will immediately disrupt technologies in areas from robotics to cellular biophysics and medicine to space travel," said Jim Schuck, associate professor of mechanical engineering. "The importance of developing new force sensors was recently underscored by Ardem Patapoutian, the 2021 Nobel Laureate who emphasized the difficulty in probing environmentally sensitive processes within multiscale systems -- that is to say, in most physical and biological processes," Schuck notes. "We are excited to be part of these discoveries that transform the paradigm of sensing, allowing one to sensitively and dynamically map critical changes in forces and pressures in real-world environments that are currently unreachable with today's technologies."

Read more of this story at Slashdot.

Happy 2025 to all our readers. I can already tell this year's columns are going to be filled with my (least) favorite form of WTF, the impossible endless gauntlet of flaming password hurdles to jump over or crawl under. Please comment if you know why this week's column has this title and why it doesn't have the title Swordfish.

Peter G. starts off our new year of password maladies with a complaint that is almost poetic.
"Between desire and reality.
Between fact and breakfast.
Between 8 and -6:00.
Madness lies, lies, lies..."

 

Rick P. keeps it going. "Must begin with a capital letter!!!" he exclaims with three (3!) exclamation points. I think it deserved four.

 

Mark Whybird justifiably grumbled "If I knew what the policy was, maybe then I could come up with a password to satisfy it!"

 

R3D3-1 who swears he is NOT a bot, found a kind of interestingly complicated error challenge, opining "Password requirements can be annoying. Especially when they don't tell you what the requirements are, only that you failed. But here they send me a confirmation Email, and only when clicking the confirmation Email did they even tell me! That's kind of a new low there... "

 

And finally ending this beginning, faithful Pascal remarks only: "WTF". Well said.

 

[Advertisement] Keep all your packages and Docker containers in one place, scan for vulnerabilities, and control who can access different feeds. ProGet installs in minutes and has a powerful free version with a lot of great features that you can upgrade when ready.Learn more.

An anonymous reader quotes a report from Reuters: Constellation Energy has been awarded a record $1 billion in contracts to supply nuclear power to the U.S. government over the next decade, the company said on Thursday. Constellation, the country's largest operator of nuclear power plants, will deliver electricity to more than 13 federal agencies as part of the agreements with the U.S. General Services Administration. The deal is the biggest energy purchase in the history of the GSA, which constructs and manages federal buildings, and is among the first major climate-focused energy agreement by the U.S. government to include electricity generated from existing nuclear reactors. The GSA estimated that the contracts, set to begin on April 25, will comprise over 10 million megawatt-hours over 10 years and provide electricity equivalent to powering more than 1 million homes annually. The procurement will deliver electricity to 80 federal facilities located throughout the PJM Interconnection, a regional transmission operator with service covering more than 65 million people. The U.S. Department of Transportation, the Federal Reserve Board of Governors and the Army Corps of Engineers are some of the facilities that will receive the power. [...] Constellation said the deal will enable it to extend the licenses of existing nuclear plants and invest in new equipment and technology that will increase output by about 135 megawatts. "The investments we make as a result of this contract will keep these plants operating reliably for decades to come and put new, clean nuclear energy on the grid while making the best use of taxpayer dollars," Constellation CEO Joe Dominguez said in a release.

Read more of this story at Slashdot.

Despite Microsoft's push for Windows 11, Windows 10 continues to dominate the desktop OS market, rising to 62.7% market share in December 2024. The Register reports: Figures for December 2024 from Statcounter -- used because Microsoft rarely shares usage data unless it has something to boast about -- confirm Windows 10's market share has inched up to 62.7 percent compared to the previous month while Windows 11's share fell back to 34.12 percent (from 34.94 percent in November 2024). Even though Windows 11's percentage of the pie is still bigger than it was this time last year (when Statcounter pegged it at 26.54 percent), the fact the new OS is still nowhere near to overtaking Windows 10 may alarm some Microsoft executives. [...] Canalys analyst, Kieren Jessop, noted that when looking at the more than 230 countries and regions tracked by Statcounter, Windows 10 share had actually only increased in just under a quarter of them, but that increase made an outsized impacted. Jessop cited the example of the US, where Windows 10 market share had gone from 58 percent in October 2024 to 67 percent in December. [...] Many editions of Windows 10 are due to drop out of free support on October 14, 2025. Affected users will then have the option to purchase Extended Security Updates (ESU) to keep the lights on a little longer or keep using the operating system and risk falling foul of unpatched vulnerabilities. Further reading: Ex-Microsoft Designer Reveals Windows 11's Dynamic Wallpapers That May Have Been Shelved

Read more of this story at Slashdot.

Samsung is set to debut its new Odyssey 3D monitor at CES 2025, reviving the glasses-free 3D experience that manufacturers pushed on consumers over a decade ago. While details remain limited, the monitor reportedly utilizes a lenticular lens, stereo cameras, and AI to convert 2D content into lifelike 3D visuals, with a focus on appealing to gamers for broader adoption. Ars Technica reports: According to the South Korean company's announcement, the monitor's use of a lenticular lens that is "attached to the front of the panel and its front stereo camera" means that you don't have to wear glasses to access the monitor's "customizable 3D experience." Lenticular lenses direct different images to each eye to make images look three-dimensional. This is a notable advancement from the first 3D monitor that Samsung released in 2009. That display used Nvidia software and Nvidia shutter glasses to allow users to toggle between a 2D view and a 3D view through a few button presses and supported content. Another advancement is the Odyssey 3D's claimed ability to use artificial intelligence "to analyze and convert 2D video into 3D." We've recently seen similar technology from brands like Acer, which announced portable monitors in 2022 and then announced laptops that could convert 2D content into stereoscopic 3D in 2023. Those displays also relied on AI, as well as a specialized optical lens and a pair of eye-tracking cameras, to create the effect. But unlike Acer's portable monitors, Samsung claims that its monitor can make 2D content look like 3D even if that content doesn't officially support 3D. [...] Interestingly, Samsung's announcement today only mentioned the release of a 27-inch, 4K resolution 3D monitor, despite Samsung teasing a 37-inch version in August. It's possible that the larger version didn't work as well and/or that demand for the larger size would be too small, considering the high price and limited demand implications of a glasses-free 3D monitor aimed at gamers. Further reading: Samsung, Asus, MSI Unveil First 27-inch 4K OLED 240Hz Gaming Monitors

Read more of this story at Slashdot.

An anonymous reader quotes a report from The Record: Cybersecurity researchers have uncovered dozens of attacks that involve malicious updates for Chrome browser extensions, one week after a security firm was compromised in a similar incident. As of Wednesday, a total of 36 Chrome extensions injected with data-stealing code have been detected, mostly related to artificial intelligence (AI) tools and virtual private networks (VPNs), according to a report by ExtensionTotal, a platform that analyzes extensions listed on various marketplaces and public registries. These extensions, collectively used by roughly 2.6 million people, include third-party tools such as ChatGPT for Google Meet, Bard AI Chat, YesCaptcha Assistant, VPNCity and Internxt VPN. Some of the affected companies have already addressed the issue by removing the compromised extensions from the store or updating them, according to ExtensionTotal's analysis. [...] It remains unclear whether all the compromised extensions are linked to the same threat actor. Security researchers warn that browser extensions "shouldn't be treated lightly," as they have deep access to browser data, including authenticated sessions and sensitive information. Extensions are also easy to update and often not subjected to the same scrutiny as traditional software. ExtensionTotal recommends that organizations use only pre-approved versions of extensions and ensure they remain unchanged and protected from malicious automatic updates. "Even when we trust the developer of an extension, it's crucial to remember that every version could be entirely different from the previous one," researchers said. "If the extension developer is compromised, the users are effectively compromised as well -- almost instantly."

Read more of this story at Slashdot.

Britain recorded its cleanest electricity generation in 2024, with carbon dioxide emissions falling to 124g per kilowatt hour, down from 419g in 2014, according to analysis by Carbon Brief released Thursday. Renewables, including wind, solar and biomass, provided 45% of the country's power, while total low-carbon sources reached 58%. Gas remained the largest single source at 28% of generation, slightly ahead of wind at 26%.

Read more of this story at Slashdot.

Former Microsoft designer Sergey Kisselev has shared previously unseen concepts for Windows 11 dynamic wallpapers, intended for educational devices. The animated backgrounds were designed to complement Windows 11's centered interface but never shipped with the operating system's 23H2 update as initially planned.

Read more of this story at Slashdot.

Nick Clegg, former British Deputy Prime Minister and Meta's President of Global Affairs, is stepping down after seven years, with longtime policy executive Joel Kaplan set to replace him. Engadget reports: Clegg will be replaced by Joel Kaplan, a longtime policy executive and former White House aide to George W. Bush known for his deep ties to Republican circles in Washington. As Chief Global Affairs Officer, Kaplan -- as Semafor notes -- will be well-positioned to run interference for Meta as Donald Trump takes control of the White House. In a post on Threads, Clegg said that "this is the right time for me to move on from my role as President, Global Affairs at Meta." "My time at the company coincided with a significant resetting of the relationship between 'big tech' and the societal pressures manifested in new laws, institutions and norms affecting the sector. I hope I have played some role in seeking to bridge the very different worlds of tech and politics -- worlds that will continue to interact in unpredictable ways across the globe." He said that he will spend the next "few months" working with Kaplan and "representing the company at a number of international gatherings in Q1 of this year" before he formally steps away from the company. Further reading: Meta Says It's Mistakenly Moderating Too Much

Read more of this story at Slashdot.

President Vladimir Putin has directed Russia's government and the country's biggest bank, Sberbank, to strengthen AI cooperation with China, aiming to overcome Western sanctions and challenge U.S. dominance in AI innovation. Reuters reports: Putin's instructions were published on the Kremlin's website on Wednesday, three weeks after he announced that Russia would team up with BRICS partners and other countries to develop AI. He told the government and Sberbank, which is spearheading Russia's AI efforts, to "ensure further co-operation with the People's Republic of China in technological research and development in the field of artificial intelligence." Western sanctions intended to restrict Moscow's access to the technologies it needs to sustain its war against Ukraine have resulted in the world's major producers of microchips halting exports to Russia, severely limiting its AI ambitions. Sberbank CEO German Gref acknowledged in 2023 that graphics processing units (GPUs), the microchips that underpin AI development, were the trickiest hardware for Russia to replace. By partnering with non-Western countries, Russia is seeking to challenge the dominance of the United States in one of the most promising and crucial technologies of the 21st century. Putin said on Dec. 11 that a new AI Alliance Network would bring together specialists from BRICS countries and other interested states.

Read more of this story at Slashdot.

An anonymous reader quotes a report from Ars Technica: Apple has agreed (PDF) to pay $95 million to settle a lawsuit alleging that its voice assistant Siri routinely recorded private conversations that were then sold to third parties for targeted ads. In the proposed class-action settlement (PDF) -- which comes after five years of litigation -- Apple admitted to no wrongdoing. Instead, the settlement refers to "unintentional" Siri activations that occurred after the "Hey, Siri" feature was introduced in 2014, where recordings were apparently prompted without users ever saying the trigger words, "Hey, Siri." Sometimes Siri would be inadvertently activated, a whistleblower told The Guardian, when an Apple Watch was raised and speech was detected. The only clue that users seemingly had of Siri's alleged spying was eerily accurate targeted ads that appeared after they had just been talking about specific items like Air Jordans or brands like Olive Garden, Reuters noted. It's currently unknown how many customers were affected, but if the settlement is approved, the tech giant has offered up to $20 per Siri-enabled device for any customers who made purchases between September 17, 2014, and December 31, 2024. That includes iPhones, iPads, Apple Watches, MacBooks, HomePods, iPod touches, and Apple TVs, the settlement agreement noted. Each customer can submit claims for up to five devices. A hearing when the settlement could be approved is currently scheduled for February 14. If the settlement is certified, Apple will send notices to all affected customers. Through the settlement, customers can not only get monetary relief but also ensure that their private phone calls are permanently deleted. While the settlement appears to be a victory for Apple users after months of mediation, it potentially lets Apple off the hook pretty cheaply. If the court had certified the class action and Apple users had won, Apple could've been fined more than $1.5 billion under the Wiretap Act alone, court filings showed. But lawyers representing Apple users decided to settle, partly because data privacy law is still a "developing area of law imposing inherent risks that a new decision could shift the legal landscape as to the certifiability of a class, liability, and damages," the motion to approve the settlement agreement said. It was also possible that the class size could be significantly narrowed through ongoing litigation, if the court determined that Apple users had to prove their calls had been recorded through an incidental Siri activation -- potentially reducing recoverable damages for everyone.

Read more of this story at Slashdot.

A U.S. appeals court ruled on Thursday the Federal Communications Commission did not have legal authority to reinstate landmark net neutrality rules. From a report: The decision is a blow to the outgoing Biden administration that had made restoring the open internet rules a priority. President Joe Biden signed a 2021 executive order encouraging the FCC to reinstate the rules. A three-judge panel of the Cincinnati-based 6th U.S. Circuit Court of Appeals said the FCC lacked authority to reinstate the rules initially implemented in 2015 by the agency under Democratic former President Barack Obama, but then repealed by the commission in 2017 under Republican former President Donald Trump. The rules also forbid special arrangements in which ISPs give improved network speeds or access to favored users. The court cited the Supreme Court's June decision in a case known as Loper Bright to overturn a 1984 precedent that had given deference to government agencies in interpreting laws they administer, in the latest decision to curb the authority of federal agencies. "Applying Loper Bright means we can end the FCC's vacillations," the court ruled.

Read more of this story at Slashdot.

Morgan Stanley withdrew from the UN-backed Net-Zero Banking Alliance on Thursday, becoming the fifth major U.S. bank to abandon the climate coalition in recent weeks. The departure follows similar moves by Citigroup, Bank of America, Goldman Sachs and Wells Fargo. While maintaining its commitment to net-zero goals and 2030 emissions targets, Morgan Stanley joins a broader retreat from environmental initiatives by financial institutions. The bank's exit from the alliance, established in 2021 to reduce lending-related emissions, comes amid mounting Republican scrutiny of Wall Street's climate policies and legal challenges from state attorneys general targeting financial firms' environmental stances.

Read more of this story at Slashdot.