The Supreme Court decided to press pause on the Environmental Protection Agency's plan to prevent smog-forming pollutants from drifting across state borders. From a report: Ohio, Indiana, West Virginia, and various trade organizations including fossil fuel industry groups asked the Supreme Court to issue a stay on the plan while they contest the EPA's actions in lower courts. SCOTUS agreed to put the plan on hold today in its opinion on Ohio v. Environmental Protection Agency. Five justices voted in favor of halting implementation for now, while the remaining justices dissented. "If anything, we see one reason for caution after another," Justice Neil Gorsuch writes in his opinion. While the stay is temporary, the decision signals that the conservative-leaning Supreme Court is likely to rule in favor of states opposing the EPA's plan if the issue makes it to the nation's highest court again for a final decision on the plan's legal merit. That could make it harder to improve air quality across the nation since air pollutants typically don't stay in one place.

Read more of this story at Slashdot.

Publicly traded crypto exchange Coinbase, in connection with History Associates Incorporated, has filed two civil lawsuits against the Securities and Exchange Commission and Federal Deposit Insurance Corporation for their failure to comply with FOIA requests. From a report: The Freedom of Information Act, or FOIA, grants the full or partial disclosure of previously unreleased information that's controlled by the U.S. government. Generally speaking, agencies have 20 days to respond -- not necessarily satisfy -- these requests. And even when government agencies do furnish documents, they can redact anything that falls under certain exemptions: Information related to national security, internal personnel, trade secrets, law enforcement, or financial institution records. Late last year, Coinbase hired History Associates Incorporated, a private historical research firm, to submit a FOIA request on its behalf. The San Francisco crypto exchange was seeking copies of "Pause Letters" sent to financial institutions asking them to indefinitely cease all "crypto-related activities," according to the complaint. The letters were described in a report from the FDIC's Office of Inspector General (OIG), but never shared publicly. The OIG said the letters presented a "risk that the FDIC would inadvertently limit financial institution innovation and growth in the crypto space." The FDIC refused to provide History Associates or Coinbase with the letters.

Read more of this story at Slashdot.

An anonymous reader quotes a report from Reuters: Seven content-licensing sellers of music, image, video and other datasets for use in training artificial intelligence systems have formed the sector's first trade group, they said on Wednesday. The Dataset Providers Alliance (DPA) will advocate for 'ethical data sourcing' in the training of AI systems, including rights for people depicted in datasets and the protection of content owners' intellectual property rights, the companies said in a statement. Founding members include U.S. music dataset company Rightsify, image licensing service vAIsual, Japanese stock photo provider Pixta and Germany-based data marketplace Datarade.

Read more of this story at Slashdot.

Early analysis of the near-Earth asteroid Bennu has revealed unexpected evidence of magnesium-sodium phosphate, suggesting Bennu might have originated from a primitive ocean world. Space.com reports: On Earth, magnesium-sodium phosphate can be found in certain minerals and geological formations, as well as within living organisms where it is present in various biochemical processes and is a component of bone and teeth. According to a NASA press release, however, its presence on Bennu surprised the research team because it wasn't seen in the OSIRIS-REx probe's remote sensing data prior to sample collection. The team says its presence "hints that the asteroid could have splintered off from a long-gone, tiny, primitive ocean world." "The presence and state of phosphates, along with other elements and compounds on Bennu, suggest a watery past for the asteroid," said Lauretta. "Bennu potentially could have once been part of a wetter world. Although, this hypothesis requires further investigation." The OSIRIS-REx spacecraft obtained a sample of Bennu's regolith on October 20, 2020 using its Touch-and-Go Sample Acquisition Mechanism (TAGSAM), which comprises a specialized sampler head situated on an articulated arm. Bennu is a small B-type asteroid, which are relatively uncommon carbonaceous asteroids. "[Bennu] was selected as the mission target in part because telescopic observations indicated a primitive, carbonaceous composition and water-bearing minerals," stated the team in their paper. [...] Further analysis on the samples revealed the prevailing component of the regolith sample is magnesium-bearing phyllosilicates, primarily serpentine and smectite -- types of rock typically found at mid-ocean ridges on Earth. A comparison of these serpentinites with their terrestrial counterparts provides possible insights into Bennu's geological past. "Offering clues about the aqueous environment in which they originated," wrote the team. While Bennu's surface may have been altered by water over time, it still preserves some of the ancient characteristics scientists believe were present during the early solar system's days. Bennu's surface materials still contain some original features from the cloud of gas and dust from which our solar system's planets formed -- known as the protoplanetary disk. The team's study also confirmed the asteroid is rich in carbon, nitrogen and some organic compounds -- all of which, in addition to the magnesium phosphate, are essential components for life as we know it on Earth.

Read more of this story at Slashdot.

In a contract worth as much as $843 million, NASA announced today SpaceX has been selected to develop a vehicle that will de-orbit the International Space Station in 2030. "As the agency transitions to commercially owned space destinations closer to home, it is crucial to prepare for the safe and responsible deorbit of the International Space Station in a controlled manner after the end of its operational life in 2030," the U.S. space agency said in a statement. TechCrunch reports: Few details about the U.S. Deorbit Vehicle, as NASA calls the craft, have been released so far. However, NASA clarified that the vehicle will be different from SpaceX's Dragon capsule, which delivers cargo and crew to the station, and other vehicles that perform services for the agency. Unlike these vehicles, which are built and operated by SpaceX, NASA will take ownership of the U.S. Deorbit Vehicle post-development and operate it throughout its mission. Both the vehicle and the ISS will destructively break up as they reenter the atmosphere, and one of the big tasks ahead for SpaceX is to ensure that the station reenters in a way that endangers no populated areas. The launch contract for the U.S. Deorbit Vehicle will be announced separately. NASA and its partners had been evaluating using a Russian Roscosmos Progress spacecraft to conduct the de-orbit mission, but studies indicated that a new spacecraft was needed for the de-orbit maneuver. The station's safe demise is a responsibility shared by the five space agencies that operate on the ISS -- NASA, the Canadian Space Agency, European Space Agency, Japan Aerospace Exploration Agency, and State Space Corporation Roscosmos -- but it is unclear whether this contract amount is being paid out by all countries.

Read more of this story at Slashdot.

Alice works with an XML-based RPC system. They send requests, it does a thing, and returns back a response, all surrounded in XML. The service sending the requests, however, doesn't use a well-established parsing library. The result is that, well, the code ends up here.

First, though, a bit about the data they expect to parse. It's verbose, but fairly straightforward:

<methodResponse> <params> <param> <value> <struct> <member> <name>foo</name> <value> <string>abcde</string> </value> </member> <member> <name>bar</name> <value> <int>12345</int> </value> </member> </struct> </value> </param> </params> </methodResponse>

The tree is awkward, but the response contains params, where each param may contain a struct, the struct may contain members, which have a name and a value, where the value contains the actual data, wrapped in a type.

But there's one thing missing here: the service which sends this response recently changed its API, and for some fields, includes an empty <data/> tag, instead of a value. This particular client doesn't care about data fields, and should be able to safely ignore them if they exist.

Now, you might think, "well, that should be easy then," and you'd be right if you were just using a generic XML parser. They didn't do that. They hand-rolled a parser that is specific to this data format. So let's see what happened:

void XmlRpcResponseParser::OnStartElement(const XML_Char *pszName, const XML_Char **papszAttrs) { const string element = pszName; // Sanity if (_states.empty()) { if (element != "methodResponse" && !_get_method_response) { throw "Invalid top-level element <" + element + "> expecting <methodResponse>"; } _got_method_response = true; _states.push(&response); } if (element == "fault") { // response is faulty: just extract error's code and description is_fault = true; } else if (!is_fault && element == "struct") { top()->type = XML_RPC_STRUCT; } else if (!is_fault && element == "array") { top()->type = XML_RPC_ARRAY; } else if (!is_fault && (element == "data" || element == "value")) { if (top()->type == XML_RPC_ARRAY) { top()->xml_array.push_back(Entry()); _states.push(&top()->xml_array.back()); // <------------ #1 } } _cdata.clear(); }

Here, they track a stack, so they can keep track of where they are in parsing. Oh, except they don't. They only push onto the stack when they encounter a data or a value element. When the response only contained values, this worked fine. So for years, it sat like this.

But when they added data tags, it stopped working, specifically because of how they handle closing tags:

void XmlRpcResponseParser::OnEndElement(const XML_Char *pszName) { const string element = pszName; if (element == "int" || element == "i4") { top()->integer = atoi(chomp(_cdata).c_str()); top()->type = XML_RPC_INTEGER; } else if (element == "string") { top()->str = _cdata; top()->type = XML_RPC_STRING; } else if (element == "boolean") { const string value = chomp(_cdata); top()->boolean = (value == "1" || value == "true"); top()->type = XML_RPC_BOOLEAN; } else if (!is_fault && element == "name") { _states.push(&top()->xml_struct[_cdata]); } else if (!is_fault && element == "value") { if (!_states.empty()) { _states.pop(); // <------------- #2 } } _cdata.clear(); }

Note here that they only pop when they encounter a value element. Which means when they encounter a data element, they push the stack, but never pop it, which gets the whole tree desynced and breaks parsing.

Since this was discovered, most of the service calls have been migrated to use JSON instead of XML. That "solves" the problem, given that the XML parser is broken. But the XML parser is still used for some calls, and the result is that the service being invoked is constrained in how it's allowed to change its API- it can't add data fields to certain responses, because this client will break. Everyone hates this, and someday, the XML endpoints will go away. Someday.

.comment { border: none; } [Advertisement] BuildMaster allows you to create a self-service release management platform that allows different teams to manage their applications. Explore how!

An anonymous reader quotes a report from CNN: Dairy farmers in Denmark face having to pay an annual tax of 672 krone ($96) per cow for the planet-heating emissions they generate. The country's coalition government agreed this week to introduce the world's first carbon emissions tax on agriculture. It will mean new levies on livestock starting in 2030. Denmark is a major dairy and pork exporter, and agriculture is the country's biggest source of emissions. The coalition agreement -- which also entails investing 40 billion krone ($3.7 billion) in measures such as reforestation and establishing wetlands -- is aimed at helping the country meet its climate goals. "With today's agreement, we are investing billions in the biggest transformation of the Danish landscape in recent times," Foreign Minister Lars Lokke Rasmussen said in a statement Tuesday. "At the same time, we will be the first country in the world with a (carbon) tax on agriculture." The Danish dairy industry broadly welcomed the agreement and its goals, but it has angered some farmers. [...] The tax, expected to be approved by Denmark's parliament later this year, will amount to 300 krone ($43) per tonne (1.1 ton) of CO2-equivalent emissions from livestock from 2030, rising to 750 krone ($107) in 2035. A 60% tax break will apply, meaning that farmers will effectively be charged 120 krone ($17) per tonne of livestock emissions per year from 2030, rising to 300 krone ($43) in 2035. On average, Danish dairy cows, which account for much of the cattle population, emit 5.6 tons of CO2-equivalent per year, according to Concito, a green think tank in Denmark. Using the lower tax rate of 120 krone results in a charge of 672 krone per cow, or $96. With the tax break in place, that levy will rise to 1,680 krone per cow in 2035 ($241). In the first two years, the proceeds from the tax will be used to support the agricultural industry's green transition and then reassessed. "The whole purpose of the tax is to get the sector to look for solutions to reduce emissions," Concito's chief economist Torsten Hasforth told CNN. For example, farmers could change the feed they use.

Read more of this story at Slashdot.

Brandon Vigliarolo reports via The Register: American healthcare provider Geisinger fears highly personal data on more than a million of its patients has been stolen -- and claimed a former employee at a Microsoft subsidiary is the likely culprit. Geisinger on Monday announced the results of a probe into a November computer security breach, placing the blame on Microsoft-owned Nuance Communications for not cutting off one of its employees' access to corporate files after that person was fired. The Pennsylvania-based healthcare giant uses Nuance as an IT provider. We're told that after the Microsoft-owned entity terminated one of its workers, that staffer two days later may have accessed and taken copies of sensitive records on a huge number of Geisinger patients -- for reasons as yet unknown. Geisinger -- which says it operates 13 hospitals and has more than 600,000 members -- said it discovered the improper access on November 29, informed Nuance, and the IT supplier immediately cut off the former employee from the healthcare group's data before involving police. "Because it could have impeded their investigation, law enforcement investigators asked Nuance to delay notifying patients of this incident until now," Geisinger claimed, explaining why only now this is coming to light. "The former Nuance employee has been arrested and is facing federal charges." It's not immediately clear if or what charges have been laid -- we've asked Geisinger for details. Speech recognition firm Nuance performed its own probe, according to Geisinger, and determined that the former employee may have stolen information on a million-plus people. That info would include birth dates, addresses, hospital admission and discharge records, demographic information, and other medical data. The ex-employee didn't swipe insurance or other financial information, the multi-billion-dollar healthcare group stated. "We continue to work closely with the authorities on this investigation, and while I am grateful that the perpetrator was caught and is now facing federal charges," Geisinger chief privacy officer Jonathan Friesen alleged, adding: "I am sorry that this happened."

Read more of this story at Slashdot.

In 2021, Apple announced plans for a new $1 billion campus in North Carolina, set to include a new engineering and research center and support up to 3,000 employees. According to Lauren Ohnesorge of Triangle Business Journal (paywalled), Apple remains committed to the project, but the timeline has been delayed by four years. MacRumors reports: A limited amount of progress on the campus has been made since the announcement, and Apple has not provided updates on construction until now. Apple told Triangle Business Journal that it has paused work on the campus, and it is working with North Carolina Governor Roy Cooper and the North Carolina Department of Commerce to extend the project's timeline by four years. Apple last year filed development plans for the first phase of construction, but the specific timeline for the project has never been clear. Apple's plans for Research Triangle Park include six buildings and a parking garage totaling 700,000 square feet of office space, 190,000 square feet of accessory space, and close to 3,000 parking spaces spanning 41 acres. Apple owns 281 acres of land in the area where it plans to build its campus, so there could ultimately be several phases of construction. As it prepares to build the NC research center, Apple is leasing more than 200,000 square feet of office space in Cary, North Carolina. In a statement, Apple said it is still committed to the project: "Apple has been operating in North Carolina for over two decades. And we're deeply committed to growing our teams here. In the last three years, we've added more than 600 people to our team in Raleigh, and we're looking forward to developing our new campus in the coming years."

Read more of this story at Slashdot.

A super PAC called Fairshake, funded primarily by top cryptocurrency companies, achieved several wins in congressional primaries and plans to spend over $100 million to support pro-crypto candidates in the general elections. CNBC reports: Fairshake and its two affiliated political action committees, one for Republicans, one for Democrats, quietly racked up half a dozen other wins Tuesday as the candidates they backed glided to victory, although none of the races were competitive. They included Rep. John Curtis, who won the Republican nomination for Utah's open Senate seat. Created last year as part of a joint effort between more than a dozen crypto firms, Fairshake PAC has emerged as one of the top-spending PACs in the 2024 election cycle. Fairshake and its two affiliated PACs have put more than $37 million so far into advertisements in primary races, according to AdImpact. Despite a broad mission to defend the entire $2.2 trillion crypto market, Fairshake is funded by a very small set of donors. Of the $160 million in total contributions Fairshake has raised since it was founded, around $155 million -- or 94% -- can be traced back to just four companies: Ripple, Andreesen Horowitz, Coinbase and Jump Crypto. But it's not just money that the crypto industry plans to deploy this fall. The nonprofit Stand With Crypto says it has collected more than 1.1 million email addresses of crypto "advocates" it hopes to engage all the way to the ballot box. The strength of the crypto groups is getting noticed on Capitol Hill, especially among lawmakers who are facing tough elections in 2025, where a few thousand voters, or a hefty donation, could make a difference in not only a race but in which party controls each chamber. [...] In the coming months, the group doesn't plan to spend on the presidential race, but rather the House and Senate, according to a Fairshake spokesperson. Both of those chambers are in play for 2025. Fairshake has yet to start spending in the general election cycle, but several officials in the industry said they are keeping an eye on states such as Ohio and Montana, where Democratic incumbents who are bearish on crypto face challengers who have embraced the technology. [...] Ads funded by Fairshake deliver messages that are typically less about a candidates' support for or opposition to crypto, and more about broader issues that resound with voters, such as fairness and integrity.

Read more of this story at Slashdot.

An anonymous reader quotes a report from Wired: In recent weeks, as so-called cheap fake video clips suggesting President Joe Biden is unfit for office have gone viral on social media, a Kremlin-affiliated disinformation network has been promoting a parody music video featuring Biden wearing a diaper and being pushed around in a wheelchair. The video is called "Bye, Bye Biden" and has been viewed more than 5 million times on X since it was first promoted in the middle of May. It depicts Biden as senile, wearing a hearing aid, and taking a lot of medication. It also shows him giving money to a character who seems to represent illegal migrants while denying money to US citizens until they change their costume to mimic the Ukrainian flag. Another scene shows Biden opening the front door of a family home that features a Confederate flag on the wall and allowing migrants to come in and take over. Finally, the video contains references to stolen election conspiracies pushed by former president Donald Trump. The video was created by Little Bug, a group that mimics the style of Little Big, a real Russian band that fled the country in 2022 following Russia's invasion of Ukraine. The video features several Moscow-based actors -- who spoke with Russian media outlet Agency.Media -- but also appears to use artificial intelligence technology to make the actors resemble Biden and Trump, as well as Ilya Prusikin, the lead singer of Little Big. "Biden and Trump appear to be the same actor, with deepfake video-editing changing his facial features until he resembles Biden in one case and Trump in the other case," says Alex Fink, an AI and machine-vision expert who analyzed the video for WIRED. "The editing is inconsistent, so you can see that in some cases he resembles Biden more and in others less. The facial features keep changing." An analysis by True Media, a nonprofit that was founded to tackle the spread of election-related deepfakes, found with 100 percent confidence that there was AI-generated audio used in the video. It also assessed with 78 percent confidence that some AI technology was used to manipulate the faces of the actors. Fink says the obvious nature of the deepfake technology on display here suggests that the video was created in a rush, using a small number of iterations of a generative adversarial network in order to create the characters of Biden and Trump. It is unclear who is behind the video, but "Bye, Bye Biden" has been promoted by the Kremlin-aligned network known as Doppelganger. The campaign posted tens of thousands of times on X and was uncovered by Antibot4Navalny, an anonymous collective of Russian researchers who have been tracking Doppelganger's activity for the past six months. The campaign first began on May 21, and there have been almost 4,000 posts on X promoting the video in 13 languages that were promoted by a network of almost 25,000 accounts. The Antibot4Navalny researchers concluded that the posts were written with the help of generative AI technology. The video has been shared 6.5 million times on X and has been viewed almost 5 million times.

Read more of this story at Slashdot.

Microsoft's canceled Xbox cloud console, codenamed Keystone, has been detailed in a new patent spotted by Windows Central's Zac Bowden. From the report: Back in 2021, Microsoft announced that it was working on a dedicated streaming device for Xbox Game Pass. That device was later revealed to be codenamed Keystone, which took the form of a streaming box that would sit under your TV, cost a fraction of the price of a normal Xbox, and enable the ability to play Xbox games via the cloud. Unfortunately, it appears Microsoft has since scrapped plans to ship Xbox Keystone due to an inability to bring the price down to a level where it made sense for customers. Xbox CEO Phil Spencer is on record saying the device should have costed around $99 or $129, but the company was unable to achieve this. Thanks to a patent discovered by Windows Central, we can finally take a closer look at the box Microsoft had conjured up internally. First up, the patent reveals that the console took the form of an even square with a circle shape on top, similar to the black circular vent on an Xbox Series S. The front of the box had the Xbox power button, and a USB-A port. Around the back, there were three additional ports; HDMI, ethernet, and power. On the right side of the console there was appears to be an Xbox controller pairing button, and the underside featured a circular "Hello from Seattle" plate that the console sat on, similar to the Xbox Series X. This patent was filed in June 2022, which was around the time when the first details of Xbox Keystone were being revealed.

Read more of this story at Slashdot.

National Australia Bank seems to think that monitoring the angle customers hold their phones will offer extra protection against scammers. "Speaking during the Australian Banking Association Conference in Melbourne Wednesday (June 26), CEO Andrew Irvine said the lender introduced more 'friction' to payments processes and new predictive protection tools to spot scammers," reports PYMNTS.com, citing a (paywalled) Bloomberg report. From the report: "We've added tooling that looks at biometrics and the way you actually interact with your devices and how you think about keystrokes," said Irvine, per the report. "If these things are different to how you've used your phone in the past, our intelligence will kick in." Irvine, who called fraudsters the "scourge of our times," also noted that Australia is one of the few countries where bank fraud has declined, the report said. Still, he said that as scammers have embraced new technology like artificial intelligence, banks have had to shift from making payments fast and simple to adding more steps to protect against fraudulent transactions, per the report. "These threat actors go where the money is," Irvine said, according to the report. "You want to be the best alarm system in the street and right now Australia's leading the way."

Read more of this story at Slashdot.

An anonymous reader quotes a report from Ars Technica: On Monday, Toys "R" Us announced that it had partnered with an ad agency called Native Foreign to create what it calls "the first-ever brand film using OpenAI's new text-to-video tool, Sora." OpenAI debuted Sora in February, but the video synthesis tool has not yet become available to the public. The brand film tells the story of Toys "R" Us founder Charles Lazarus using AI-generated video clips. "We are thrilled to partner with Native Foreign to push the boundaries of Sora, a groundbreaking new technology from OpenAI that's gaining global attention," wrote Toys "R" Us on its website. "Sora can create up to one-minute-long videos featuring realistic scenes and multiple characters, all generated from text instruction. Imagine the excitement of creating a young Charles Lazarus, the founder of Toys "R" Us, and envisioning his dreams for our iconic brand and beloved mascot Geoffrey the Giraffe in the early 1930s." The company says that The Origin of Toys "R" Us commercial was co-produced by Toys "R" Us Studios President Kim Miller Olko as executive producer and Native Foreign's Nik Kleverov as director. "Charles Lazarus was a visionary ahead of his time, and we wanted to honor his legacy with a spot using the most cutting-edge technology available," Miller Olko said in a statement. In the video, we see a child version of Lazarus, presumably generated using Sora, falling asleep and having a dream that he is flying through a land of toys. Along the way, he meets Geoffery, the store's mascot, who hands the child a small red car. Many of the scenes retain obvious hallmarks of AI-generated imagery, such as unnatural movement, strange visual artifacts, and the irregular shape of eyeglasses. [...] Although the Toys "R" Us video uses key visual elements from Sora, it still required quite a bit of human post-production work to put it together. Sora eliminated the need for actors and cameras, but creating successful generations and piecing together the rest still took human scriptwriters and VFX artists to fill in the AI model's shortcomings. "The brand film was almost entirely created with Sora, with some corrective VFX and an original music score composed by Aaron Marsh of famed indie rock band Copeland," wrote Toys "R" Us in a press release. Comedy writer Mike Drucker wrapped up several of these criticisms into one post, writing: "Love this commercial is like, 'Toys R Us started with the dream of a little boy who wanted to share his imagination with the world. And to show how, we fired our artists and dried Lake Superior using a server farm to generate what that would look like in Stephen King's nightmares.'" Other critical comments were more frank. Filmmaker Joe Russo posted: "TOYS 'R US released an AI commercial and it fucking sucks."

Read more of this story at Slashdot.

Exam submissions generated by AI can not only evade detection but also earn higher grades than those submitted by university students, a real-world test has shown. From a report: The findings come as concerns mount about students submitting AI-generated work as their own, with questions being raised about the academic integrity of universities and other higher education institutions. It also shows even experienced markers could struggle to spot answers generated by AI, the University of Reading academics said. Peter Scarfe, an associate professor at Reading's School of Psychology and Clinical Language Sciences said the findings should serve as a "wake-up call" for educational institutions as AI tools such as ChatGPT become more advanced and widespread. He said: "The data in our study shows it is very difficult to detect AI-generated answers. There has been quite a lot of talk about the use of so-called AI detectors, which are also another form of AI but (the scope here) is limited." For the study, published in the journal Plos One, Prof Scarfe and his team generated answers to exam questions using GPT-4 and submitted these on behalf of 33 fake students. Exam markers at Reading's School of Psychology and Clinical Language Sciences were unaware of the study. Answers submitted for many undergraduate psychology modules went undetected in 94% of cases and, on average, got higher grades than real student submissions, Prof Scarfe said.

Read more of this story at Slashdot.

Air freight operators have increased their greenhouse gas emissions by 25% compared to 2019, according to a report [PDF] by campaign group Stand.earth. The analysis found that operators ran about 300,000 more flights in 2023 than in 2019, a 30% increase in volume. The United States accounted for over 40% of global air freight emissions. The Guardian adds: FedEx and UPS were responsible for 24.7% of the industry's carbon emissions in 2023. It is estimated that 99.8% of aviation fuel is produced from fossil fuels, with the scaling of low carbon replacements a distant prospect. Research published last year forecast that global annual parcel volume could increase to 800bn parcels a year by 2030 [PDF], compared with 315bn in 2022.

Read more of this story at Slashdot.

The US Conference of Mayors, which speaks for the administrations of more than 1,400 cities with a population of at least 30,000 people, adopted a resolution over the weekend at its annual meeting that voiced an objection to HR 3557, a draft law known as the American Broadband Deployment Act of 2023. From a report: The bill, which was introduced by House Rep Earl Carter (R-GA) last May and is awaiting further consideration by Congress, is ostensibly designed to make it easier for telcos to build infrastructure and run additional cables on state and locally managed land, ideally allowing fast broadband connectivity to reach more and more folks. Rep Carter went as far as saying his proposals will ensure "more Americans have access to internet and the United States can maintain its competitive edge against China." Meanwhile, the mayors say HR 3557 strips local governments of authority to oppose bad projects. What raises particular ire are provisions in the draft law that would provide a very short window for opposition. What we have here, basically, is a classic example of one side trying to strip away what is perceived to be bureaucracy and red tape, and the other side insisting that checks and balances are sorely needed.

Read more of this story at Slashdot.

An anonymous reader shares a report: Since the James Webb Space Telescope began operating two years ago, astronomers have been using it to leapfrog one another millions of years into the past, back toward the moment they call cosmic dawn, when the first stars and galaxies were formed. Last month, an international team doing research as the JWST Advanced Deep Extragalactic Survey, or JADES, said it had identified the earliest, most distant galaxy yet found -- a banana-shaped blob of color measuring 1,600 light-years across. It was already shining with intense starlight when the universe was in its relative infancy, at only 290 million years old, the astronomers said. The new galaxy, known as JADES-GS-z14-0, is one of a string of Webb discoveries, including early galaxies and black holes, that challenge conventional models of how the first stars and galaxies formed. "This discovery proves that luminous galaxies were already in place 300 million years after the Big Bang and are more common than what was expected," the researchers wrote in a paper posted to an online physics archive. "Galaxy formation models will need to address the existence of such large and luminous galaxies so early in cosmic history," said the authors, who were led by Stefano Carniani, a professor at the university Scuola Normale Superiore in Pisa, Italy. The galaxy was first spotted during a deep space survey with the Webb's Near Infrared Camera, one of the telescope's workhorse instruments. Within a patch of southern sky known as the Jades Origin Field, which is about a quarter of the size of a full moon, scientists found 11 galaxies that seemed to date from when the universe was less than 400 million years old -- far more than they had expected. Subsequent studies by Dr. Carniani and his colleagues with the telescope's infrared spectrograph revealed that the wavelength of light from JADES-GS-z14-0 had been stretched more than 15-fold by the expansion of the universe (a redshift of 14 to use astronomical jargon), similar to the way a siren's pitch becomes lower as it speeds away. That means light has been coming toward us for 13.5 billion years, since shortly after the universe began. (The universe is about 13.8 billion years old, according to cosmological calculations.) The light from the galaxy is spread over a diffuse region, which indicates that the glow was coming from stars, not the gullet of a black hole. Its brightness corresponded to the output of hundreds of millions of suns, an astonishing number to have formed and assembled in only 290 million years.

Read more of this story at Slashdot.

Security researchers claim to have discovered exposed API keys in the code of Rabbit's R1 AI device, potentially allowing access to all user responses and company services. The group, known as Rabbitude, says they could send emails from internal Rabbit addresses to demonstrate the vulnerability. 404 Media adds: In a statement, Rabbit said, "Today we were made aware of an alleged data breach. Our security team immediately began investigating it. As of right now, we are not aware of any customer data being leaked or any compromise to our systems. If we learn of any other relevant information, we will provide an update once we have more details."

Read more of this story at Slashdot.

An anonymous reader shares a report: If you've been mindlessly scrolling through streaming services and have been feeling even less enthused than usual, you may not be entirely to blame: almost all major US streamers have been cutting their original TV output this year, according to new analysis (paywalled) from Variety. From content monolith Netflix, which released 203 original shows in the first half of 2023 compared with 174 in H1 '24, to Disney+, which has halved its already-slim original TV library as it continues an apparent shift to quality over quantity, shrinkage has hit the streaming world hard. Indeed, of the 8 major streamers Variety studied from Luminate data, only Max and Peacock maintained their output level year over year. All told, the number of original seasons fell 19% at the 8 streamers tracked.

Read more of this story at Slashdot.