Apple has reached an agreement to acquire Pixelmator, the maker of popular photo and image editing apps Pixelmator Pro, Pixelmator for iOS, and Photomator. Financial terms of the deal wasn't disclosed.

Read more of this story at Slashdot.

British cybersecurity firm Sophos revealed this week that it waged a five-year battle against Chinese hackers who repeatedly targeted its firewall products to breach organizations worldwide, including nuclear facilities, military sites and critical infrastructure. The company told Wired that it traced the attacks to researchers in Chengdu, China, linked to Sichuan Silence Information Technology and the University of Electronic Science and Technology. Sophos planted surveillance code on its own devices used by the hackers, allowing it to monitor their development of sophisticated intrusion tools, including previously unseen "bootkit" malware designed to hide in the firewalls' boot code. The hackers' campaigns evolved from mass exploitation in 2020 to precise attacks on government agencies and infrastructure across Asia, Europe and the United States. Wired story adds: Sophos' report also warns, however, that in the most recent phase of its long-running conflict with the Chinese hackers, they appear more than ever before to have shifted from finding new vulnerabilities in firewalls to exploiting outdated, years-old installations of its products that are no longer receiving updates. That means, company CEO Joe Levy writes in an accompanying document, that device owners need to get rid of unsupported "end-of-life" devices, and security vendors need to be clear with customers about the end-of-life dates of those machines to avoid letting them become unpatched points of entry onto their network. Sophos says it's seen more than a thousand end-of-life devices targeted in just the past 18 months. "The only problem now isn't the zero-day vulnerability," says Levy, using the term "zero-day" to mean a newly discovered hackable flaw in software that has no patch. "The problem is the 365-day vulnerability, or the 1,500-day vulnerability, where you've got devices that are on the internet that have lapsed into a state of neglect."

Read more of this story at Slashdot.

Indonesia has banned sales of Google Pixel smartphones for failing to meet a 40% local content requirement, days after blocking Apple's iPhone 16 in Southeast Asia's biggest phone market. Google must obtain local content certification before resuming sales in Indonesia, Industry Ministry spokesman Febri Hendri Antoni Arief said. The move follows last week's iPhone 16 ban after Apple failed to fulfill a $95 million investment pledge.

Read more of this story at Slashdot.

Australian mathematicians have proven the famous "infinite monkey theorem" impossible within the universe's lifespan. The theorem suggests monkeys typing randomly would eventually produce Shakespeare's complete works. Scientists Stephen Woodcock and Jay Falletta calculated that even 200,000 chimpanzees typing one character per second until the universe's heat death would fail to reproduce Shakespeare's writings. A single chimp has only a 5% chance of typing "bananas" in its lifetime, with more complex phrases facing astronomically lower odds. "This finding places the theorem among other probability puzzles and paradoxes... where using the idea of infinite resources gives results that don't match up with what we get when we consider the constraints of our universe," Associate Prof Woodcock was quoted as saying by BBC.

Read more of this story at Slashdot.

An anonymous reader quotes a report from The Guardian: Complaints about the brightness of modern headlights have become commonplace. On X, thousands of users have tweeted about headlights being too bright. The subreddit r/fuckyourheadlights has over 35,000 members who post blurry photos of offending high beams and LED headlights. Outlets like the New York Times and NBC News have written about the risks of headlight glare. Advocacy groups have called for bans on LED headlights. And the UK government launched a review into the dangers of headlight glare earlier this year, after many driver complaints. And yet, according to many experts, the problem with headlights is not that they're too bright -- it's that they're not bright enough. "We actually need more light on the road than what we have," says Greg Bannon, director of automotive engineering at the American Automobile Association (AAA). Only a minority of US roadways have overhead street lighting, as one 2019 AAA report noted. As a result, in many areas, headlights are the sole method of illumination when driving at night. But which is the safety bigger risk: inadequate illumination, or headlights that impair the vision of other drivers? The report notes that the U.S. standards set by the National Highway Traffic Safety Administration (NHTSA) haven't changed in decades and are much weaker than Europe's. Adaptive headlights, which automatically adjust brightness to avoid blinding other drivers, have been approved by NHTSA since 2022 but are still relatively rare due to differing standards and costs.

Read more of this story at Slashdot.

Google is rolling out a dedicated weather app on Pixel phones (model 6 and newer with Android 15) that integrates AI-generated summaries and customizable widgets. Ars Technica reports: There's a prominent "AI generated weather report" on top of the weather stack, which is a combination of summary and familiarity. "Cold and rainy day, bring your umbrella and hold onto your hat!" is Google's example; I can't provide another one, because an update to "Gemini Nano" is pending. You can see weather radar for your location, along with forecasted precipitation movement. The app offers "Nowcasting" precipitation guesses, like "Rain continuing for 2 hours" or "Light rain in 10 minutes." The best feature, one seen on the version of Weather that shipped to the Pixel Tablet and Fold, is that you can rearrange the order of data shown on your weather screen. I moved the UV index, humidity, sunrise/sunset, and wind conditions as high as they could go on my setup. It's a trade-off, because the Weather app's data widgets are so big as to require scrolling to get the full picture of a day, and you can't move the AI summary or 10-day forecast off the top. But if you only need a few numbers and like a verbal summary, it's handy. Sadly, if you're an allergy sufferer and you're not in the UK, Germany, France, or Italy, Google can't offer you any pollen data or forecasts. There is also, I am sad to say, no frog. You can download the app here.

Read more of this story at Slashdot.

A new study suggests Uranus' moon Miranda may harbor a vast subsurface ocean, challenging previous assumptions about its frozen state and positioning it as a potential ocean world alongside other icy moons. Phys.Org reports: Among the moons in the solar system, Miranda stands out. The few images Voyager 2 captured in 1986 show Miranda's southern hemisphere (the only part we've seen) is a Frankenstein-like hodgepodge of grooved terrain quartered off by rough scarps and cratered areas, like squares on a quilt. Most researchers suspect these bizarre structures are the result of tidal forces and heating within the moon. Caleb Strom, a graduate student at the University of North Dakota who worked with Nordheim and Alex Patthoff of the Planetary Science Institute in Arizona, revisited the Voyager 2 images. The team set out to explain Miranda's enigmatic geology by reverse engineering the surface features, working backward to uncover what the moon's interior structure must have been to shape the moon's geology in response to tidal forcing. After first mapping the various surface features like cracks, ridges and Miranda's unique trapezoidal coronae, the team developed a computer model to test several possible structures of the moon's interior, matching the predicted stress patterns to the actual surface geology. The setup that produced the best match between predicted stress patterns and observed surface features required the existence of vast ocean beneath Miranda's icy surface some 100-500 million years ago. This subsurface ocean was at least 62 miles (100 kilometers) deep, according to the study, and hidden beneath an icy crust no more than 19 miles (30 kilometers) thick. Given Miranda has a radius of just 146 miles (235 kilometers), the ocean would have filled almost half of the moon's body. "That result was a big surprise to the team," Strom said. Key to creating that ocean, the researchers believe, were tidal forces between Miranda and nearby moons. These regular gravitational tugs can be amplified by orbital resonances -- a configuration where each moon's period around a planet is an exact integer of the others' periods. Jupiter's moons Io and Europa, for example, have a 2:1 resonance: For every two orbits Io makes around Jupiter, Europa makes exactly one, leading to tidal forces that are known to sustain an ocean beneath Europa's surface. These orbital configurations and the resulting tidal forces deform the moons like rubber balls, leading to friction and heat that keeps interiors warm. This also creates stresses that crack the surface, creating a rich tapestry of geologic features. Numerical simulations have suggested that Miranda and its neighboring moons likely had such a resonance in the past, offering a potential mechanism that could have warmed Miranda's interior to produce and maintain a subsurface ocean. At some point, the moons' orbital ballet desynchronized, slowing the heating process so that the moon's insides started to cool and solidify. But the team doesn't think Miranda's interior has fully frozen yet. If the ocean had completely frozen, Nordheim explained, it would have expanded and caused certain telltale cracks on the surface, which aren't there. This suggests that Miranda is still cooling -- and may have an ocean beneath its surface even now. Miranda's modern-day ocean is probably relatively thin, Strom noted. "But the suggestion of an ocean inside one of the most distant moons in the solar system is remarkable," he said. Miranda wasn't predicted to have an ocean. With its small size and old age, scientists thought it would likely be a frozen ball of ice. Any leftover heat from its formation was assumed to have dissipated long ago. But as Patthoff pointed out, predictions about ice moons can be wrong, as evidenced by Saturn's moon Enceladus. The study has been published in The Planetary Science Journal.

Read more of this story at Slashdot.

An anonymous reader quotes a report from The Guardian: The cost of cleaning up Sellafield is expected to spiral to 136 billion pounds ($175 billion USD) and Europe's biggest nuclear waste dump cannot show how it offers taxpayers value for money, the public spending watchdog has said. Projects to fix buildings containing hazardous and radioactive material at the state-owned site on the Cumbrian coast are running years late and over budget. Sellafield's spending is so vast -- with costs of more than 2.7 billion pounds a year -- that it is causing tension with the Treasury, the report from the National Audit Office (NAO) suggests. Officials from finance ministry told the NAO it was "not always clear" how Sellafield made decisions, the report reveals. Criticisms of its costs and processes come as the chancellor, Rachel Reeves, prepares to plug a hole of about 40 billion pounds in her maiden budget. Gareth Davies, the head of the NAO, said: "Despite progress achieved since the NAO last reported, I cannot conclude Sellafield is achieving value for money yet, as large projects are being delivered later than planned and at higher cost, alongside slower progress in reducing multiple risks." He added: "Continued underperformance will mean the cost of decommissioning will increase considerably, and 'intolerable risks' will persist for longer." David Peattie, the NDA's chief executive, said: "Sellafield is one of the most complex environmental programs in the world. We're proud of our workforce and achievements being made, including the unprecedented retrieval of legacy waste from all four highest hazard facilities. But as the NAO rightly points out there is still more to be done. This includes better demonstrating we are delivering value for money and the wider significant societal and economic benefits through jobs, the supply chain and community investments."

Read more of this story at Slashdot.

Former Google chief Eric Schmidt thinks the US Army should expunge "useless" tanks and replace them with AI-powered drones instead. From a report: Speaking at the Future Investment Initiative in Saudi Arabia this week, he said: "I read somewhere that the US had thousands and thousands of tanks stored somewhere," adding, "Give them away. Buy a drone instead." The former Google supremo's argument is that recent conflicts, such as the war in Ukraine, have demonstrated how "a $5,000 drone can destroy a $5 million tank." In fact, even cheaper drones, similar to those commercially available for consumers, have been shown in footage on social media dropping grenades through the open turret hatch of tanks. Schmidt, who was CEO of Google from 2001 to 2011, then executive chairman to 2015, and executive chairman of Alphabet to 2018, founded White Stork with the aim of supporting Ukraine's war effort. It hopes to achieve this by developing a low-cost drone that can use AI to acquire its target rather than being guided by an operator and can function in environments where GPS jamming is in operation. Notably, Schmidt also served as chair of the US government's National Security Commission on Artificial Intelligence (NSCAI), which advised the President and Congress about national security and defense issues with regard to AI. "The cost of autonomy is falling so quickly that the drone war, which is the future of conflict, will get rid of eventually tanks, artillery, mortars," Schmidt predicted.

Read more of this story at Slashdot.

AzWa Snowbird writes: Burning Man is urgently calling for millions more in donations amid faltering ticket sales and staff layoffs. The nonprofit's CEO, Marian Goodell, primarily blamed flagging higher-priced ticket sales and increased operating costs since the pandemic. The festival has sold a tier of higher-priced tickets since at least 2016. In 2023, a limited number of more expensive advance tickets were available between Feb. 1 and Feb. 3, with 1,000 tickets costing $2,750 each and 3,000 costing $1,500, according to an archived version of Burning Man's 2023 ticket page. Ticket sales for the annual bacchanal in Black Rock City flopped this year after a rain-plagued 2022, and scores of burners later resold their tickets, eating huge losses.

Read more of this story at Slashdot.

Google is advancing the release timeline for Android 16, shifting it to the second quarter of 2025 to better align with new device launches and accelerate access to its latest AI and machine learning resources. It should also "enable app creators and phone companies to prepare their products for the new software more quickly," reports CNET. From the report: [I]n a big-picture sense, the change could help facilitate a new wave of apps with more AI integration, considering developers will get access to Google's latest machine learning and AI resources even sooner. "We're in a once-in-a-generation moment to completely reimagine what our smartphones can do and how we interact with them," Google's Seang Chau, who took on the role of vice president and general manager of the Android Platform earlier this year, said in an interview with CNET. "It's a really exciting time for smartphones, and we've been putting a lot of thought into what we want to do next with them." In addition to moving up the major release, Google will roll out a minor update in the fourth quarter of 2025 with feature updates, optimizations and bug fixes. It's a notable switch from Google's usual release timeline, but it's just one of several changes the company has made to the way it distributes Android updates in an effort to add features more frequently. [...] "Things are moving quite fast in the AI world right now," Chau said. "So we want to make sure that we get those developer [application programming interfaces], especially around machine learning and AI, available to our developers so they can build these capabilities faster and get them out to our users faster."

Read more of this story at Slashdot.

With Windows 10 support set to expire on October 14, 2025, Microsoft is offering a one-time, one-year Extended Security Updates plan for consumers. "For $30, you'll receive 'critical' and 'important' security updates -- basically security patches that will continue to protect your Windows 10 PC from any vulnerabilities," reports PCWorld. "That $30 is for one year's worth of updates, and that's the only option at this time." From the report: Microsoft has been warning users for years that Windows 10 support will expire in 2025, specifically October 14, 2025. At that point, Windows 10 will officially fall out of support: there will be no more feature updates or security patches. On paper, that would mean that any Windows 10 PC will be at risk of any new vulnerabilities that researchers uncover. Previously, Microsoft had quietly hinted that consumers would be offered the same ESU protections offered to businesses and enterprises, as it did in December 2023 and again in an "editor's note" shared in an April 2024 support post, in which the company said that "details will be shared at a later date for consumers." That time is now, apparently. Back in December 2023, Microsoft offered the ESU on an annual basis to businesses for three years, one year at a time. The fees would double each year, charging businesses hundreds of dollars for the privilege. Consumers won't be offered the same deal, as a Microsoft representative said via email that it'll be a "one-time, one-year option for $30."

Read more of this story at Slashdot.

An anonymous reader quotes a report from SFGATE: If you've recently been laid off and have started the arduous process of looking for a new job, you've probably seen them on networking platforms like LinkedIn: postings for roles that are 30 days old, maybe more, with suspiciously wide salary ranges. They usually have hundreds, or even thousands, of hopeful applicants vying for the same position, but if you do a quick cross-check and notice that the role isn't posted on the company's actual website -- or any of their social media pages -- you should probably stop drafting that cover letter, because it's possible they're not hiring at all. "Ghost jobs," or ads for positions that aren't actually open, are a common phenomenon in the tech industry, which has been plagued by layoffs and budget cuts over recent years. As unemployed workers struggle to regain their footing, recruiters and career coaches who spoke with SFGATE warned that these fake jobs posted by real companies serve multiple, sometimes insidious purposes. According to a 2024 survey from MyPerfectResume, 81% of recruiters admitted to posting ads for positions that were fake or already filled. While some respondents said employers did it to maintain a presence on job boards and build a talent pool, it's also used to commit psychological warfare: 25% said ghost jobs helped companies gauge how replaceable their employees were, while 23% said it helped make the company appear more stable during a hiring freeze. Another damning 2024 report from Resume Builder said that 62% companies posted them specifically to make their employees feel replaceable. They also made ads to "trick overworked employees" into believing that more people would be brought on to alleviate their overwhelming workload. After interviewing 1,641 hiring managers, Resume Builder researchers found that 40% of employers posted fake job listings in 2024, and that three in 10 currently had ghost jobs listed. The idea to post them mostly trickled down from HR, followed by senior management and executives, their June 2024 article continued. Though the listings were posted on multiple hiring platforms, the majority of them appeared on LinkedIn and the companies' websites. Evidence suggests this trend is taking hold throughout the Bay Area, too. A collaborative document circulating online reveals a growing list of employers accused of posting ghost jobs. Many of them, it turns out, are tech companies with offices based in California.

Read more of this story at Slashdot.

Canada's Communications Security Establishment (CSE) revealed a sustained cyber campaign by the People's Republic of China, targeting Canadian government and private sector networks over the past five years. The report also flagged India, alongside Russia and Iran, as emerging cyber threats. The Register reports: The biennial National Cyber Threat Assessment described the People's Republic of China's (PRC) cyber operations against Canada as "second to none." Their purpose is to "serve high-level political and commercial objectives, including espionage, intellectual property (IP) theft, malign influence, and transnational repression." Over the past four years, at least 20 networks within Canadian government agencies and departments were compromised by PRC cyber threat actors. The CSE assured citizens that all known federal government compromises have been resolved, but warned that "the actors responsible for these intrusions dedicated significant time and resources to learn about the target networks." The report also alleges that government officials -- particularly those perceived as being critical of the Chinese Communist Party (CCP) -- were attacked. One of those attacks includes an email operation against members of Interparliamentary Alliance on China. The purpose of the cyber attacks is mainly to gain information that would lead to strategic, economic, and diplomatic advantages. The activity appears to have intensified following incidents of bilateral tension between Canada and the PRC, after which Beijing apparently wanted to gather timely intelligence on official reactions and unfolding developments, according to the report. Canada's private sector is also in the firing line, with the CSE suggesting "PRC cyber threat actors have very likely stolen commercially sensitive data from Canadian firms and institutions." Operations that collect information that could support the PRC's economic and military interests are priority targets.

Read more of this story at Slashdot.

Zoox, an Amazon-owned autonomous vehicle company, is set to roll out dozens of its purpose-built robotaxis in San Francisco and Las Vegas, starting with employee rides in San Francisco's SoMa neighborhood and the Las Vegas Strip. "We have achieved that internal safety readiness" required to launch the service, said co-founder and CTO Jesse Levinson on the TechCrunch Disrupt 2024 stage. TechCrunch reports: The announcement comes a decade after Zoox was founded and four years since it was acquired by Amazon and unveiled its purpose-built robotaxi. In that time, the nascent autonomous vehicle industry has gone through the full hype cycle that led to multi-billion-dollar valuations and later a wave of shutdowns and consolidation. "We still exist," Levinson said, in a nod to the tumult the industry has gone through in recent years. Levinson said Zoox is going to take a "measured approach" to rolling out its robotaxi service, and noted that his company has been working closely with local and federal safety regulators. "I can say that in the next few weeks, we're actually going to have a couple dozen Zoox robotaxis across our Foster City, San Francisco and Las Vegas, geofences that will expand several fold over the next year," he said. "And then, you know, 2026 is when we're going to really start cranking out production vehicles at very large scale." He also said Zoox will launch an "explorer" program of early riders who will be able to use the robotaxis for free before opening the service up to paying customers. (Rival Waymo operated a similar invite-only early rider program before opening its service to the paying public.) These early riders, or explorers, will gain access to the Zoox vehicles early next year starting with Las Vegas, Levinson said. The Zoox AVs will operate throughout the "most busy 16 hours" of the day, Levinson said, noting that it's "so boring at four in the morning, we don't think we would learn very much."

Read more of this story at Slashdot.

An anonymous reader quotes a report from Ars Technica: More than 500 Amazon workers reportedly signed a letter to Amazon Web Services' (AWS) CEO this week, sharing their outrage over Amazon's upcoming return-to-office (RTO) policy that will force workers into offices five days per week. In September, Amazon announced that starting in 2025, workers will no longer be allowed to work remotely twice a week. At the time, Amazon CEO Andy Jassy said the move would make it easier for workers "to learn, model, practice, and strengthen our culture." Reuters reported today that it viewed a letter from a swath of workers sent to AWS chief Matt Garman on Wednesday regarding claims he reportedly made during an all-hands meeting this month. Garman reportedly told attendees that 9 out of 10 employees he spoke with support the five-day in-office work policy. The letter called the statements "inconsistent with the experiences of many employees" and "misrepresenting the realities of working at Amazon," Reuters reported. "We were appalled to hear the non-data-driven explanation you gave for Amazon imposing a five-day in-office mandate,'" the letter reportedly stated. [...] In the letter, hundreds of Amazon workers reportedly lamented what they believe was a lack of third-party data shared in making the RTO policy. It said that Garman's statements "break the trust of your employees who have not only personal experience that shows the benefits of remote work but have seen the extensive data which supports that experience." The letter included stories from 12 anonymous employees about medical, familial, and other challenges that the new RTO policy could create. The letter also reportedly pointed out the obstacles that a five-day in-office work policy has on groups of protected workers, like those providing childcare. The new policy will not align with Amazon's "'Strive to be Earth's Best Employer' leadership principle,'" the letter said. In a statement, an Amazon spokesperson told Reuters that Amazon's benefits include commuter benefits, elder care, and subsidized parking fees.

Read more of this story at Slashdot.

Microsoft is once again delaying the roll out of its controversial Recall feature for Copilot Plus PCs. From a report: The software giant had planned to start testing Recall, which creates screenshots of mostly everything you see or do on a Copilot Plus PC, with Windows Insiders in October. Now, Microsoft says it needs more time to get the feature ready. "We are committed to delivering a secure and trusted experience with Recall. To ensure we deliver on these important updates, we're taking additional time to refine the experience before previewing it with Windows Insiders," says Brandon LeBlanc, senior product manager of Windows, in a statement to The Verge. "Originally planned for October, Recall will now be available for preview with Windows Insiders on Copilot Plus PCs by December."

Read more of this story at Slashdot.

OpenAI on Thursday launched a search feature within ChatGPT, its viral chatbot, that positions the high-powered AI startup to better compete with search engines like Google, Microsoft's Bing and Perplexity. From a report: ChatGPT search offers up-to-the-minute sports scores, stock quotes, news, weather and more, powered by real-time web search and partnerships with news and data providers, according to the company. It began beta-testing the search engine, called SearchGPT, in July. The release could have implications for Google as the dominant search engine. Since the launch of ChatGPT in November 2022, Alphabet investors have been concerned that OpenAI could take market share from Google in search by giving consumers new ways to seek information online.

Read more of this story at Slashdot.

Amazon, in what it described as a "difficult decision," is winding down Kindle Vella and shutting it down completely in February 2025. From a report: When the company launched the serialized story platform in 2021, it said Vella was a way for readers to discover new fictional stories and a new way for authors to earn from the Kindle Direct Publishing service. But it hasn't caught on as it had hoped, Amazon explains on its website, and it has decided to throw in the towel three years after Vella's debut. Authors can only publish stories on Vella until December 4, which is also the last day readers can purchase tokens. While readers will no longer be able to purchase tokens after that, they can continue using those tokens to unlock episodes until the program closes in February. The good news for those who've been following specific authors or stories on Vella is that they won't lose their access to whatever episodes they've already unlocked even after the platform shuts down.

Read more of this story at Slashdot.

Meta CEO Mark Zuckerberg laid down the newest marker in generative AI training on Wednesday, saying that the next major release of the company's Llama model is being trained on a cluster of GPUs that's "bigger than anything" else that's been reported. From a report: Llama 4 development is well underway, Zuckerberg told investors and analysts on an earnings call, with an initial launch expected early next year. "We're training the Llama 4 models on a cluster that is bigger than 100,000 H100s, or bigger than anything that I've seen reported for what others are doing," Zuckerberg said, referring to the Nvidia chips popular for training AI systems. "I expect that the smaller Llama 4 models will be ready first." Increasing the scale of AI training with more computing power and data is widely believed to be key to developing significantly more capable AI models. While Meta appears to have the lead now, most of the big players in the field are likely working toward using compute clusters with more than 100,000 advanced chips. In March, Meta and Nvidia shared details about clusters of about 25,000 H100s that were used to develop Llama 3.

Read more of this story at Slashdot.