Agreguesi i feed

An anonymous reader quotes a report from Ars Technica: President Trump yesterday demanded that the Federal Communications Commission punish or rebuke an NBC journalist for saying he has "mixed results" in his election endorsements. In the latest example of how Trump is using the FCC to harass reporters and news organizations that he dislikes, he said Meet the Press host Kristen Welker "will be reported to the FCC for rebuke or punishment" for what he claimed was a "purposeful inaccuracy." "Kristen Welker, the Unpopular 'Hostess' of the once great Meet the Press, now considered Meet the Fake Press, just stated that Donald Trump has 'mixed results' on his Endorsements of Candidates, when the recent WINS of Darline Graham and Mike Mazzei, stand at 100% for the U.S. Senate, and 98% for the U.S. House, recently and over the longterm. How can anyone be allowed to say this, working for freely given Public Airwaves? Results are attached. Because of this purposeful inaccuracy, she will be reported to the FCC for rebuke or punishment," Trump wrote in a Truth Social post. A separate post from Trump yesterday said, "THE FAKE POLLS USED BY OUR CROOKED MEDIA ARE OUT OF CONTROL, AND SOMETHING MUST BE DONE ABOUT IT. FCC TO THE RESCUE! President DJT." Trump also posted a rant on Friday about New York Times journalist Maggie Haberman, calling her "an unattractive person both inside and out" who "should be forced to turn over any and all money that she's made through her fake reporting on me." Trump referred to Haberman throughout his post as "Maggot Haberman." Trump's post about Welker included an image purporting to show he has near-perfect results in his endorsements this year. "The Press is a Disgrace to our Nation, and I hope that Chairman Brendan Carr, and the fine people of his Commission, will take this Threat to our Country very seriously," Trump wrote. Perhaps indicating that he will refer additional journalists for FCC punishment, Trump wrote that Welker "is not the only one. The Radical Left News is going out of their way to harass, demean, and libel anything 'TRUMP.'" The FCC website says the commission "cannot prevent the broadcast of any particular point of view," and that it "generally will not intervene" in complaints about "one-sided news reports" because "it would be inconsistent with the First Amendment to replace the journalistic judgment of licensees with our own." As noted by Ars, FCC Chairman Brendan Carr has "made it clear he takes orders from Trump, abandoning his previous position -- which he held under Democratic presidents -- that the FCC must operate independently of White House interference." Carr could use the commission's regulatory authority over licensed broadcasters to open an investigation into Welker, potentially creating pressure on NBC and its affiliated stations through licensing proceedings or other FCC actions. The most likely vehicle would be the FCC's rarely enforced news distortion policy, which Carr has repeatedly revived to target coverage he considers misleading; historically, however, the policy required an unusually high evidentiary bar and was seldom enforced.

Read more of this story at Slashdot.

The FTC and 22 state attorneys general are suing Amazon, accusing the company of secretly inflating advertising prices through undisclosed changes to its auction system that may have extracted more than $20 billion from advertisers since 2019. "Amazon has millions of advertising customers who were misled into paying significantly higher prices," FTC Chairman Andrew Ferguson said in a statement. "These higher costs were largely passed on to American consumers." CNBC reports: The complaint, which was filed in U.S. District Court for the Western District of Washington, centers on Amazon's sponsored products ads, brands ads and display ads that run alongside search results on its sprawling webstore. Amazon has amassed the third-largest digital advertising business globally, trailing only Google and Meta. The company hauled in more than $68 billion in ads revenue last year, with the lion's share coming from sales of sponsored products ads. Third-party sellers who hawk their wares on Amazon's marketplace have recently criticized surging advertising costs on the site, including a string of recent policy changes, which led to some top merchants withholding their ad spend in a boycott. The company has traditionally used a "second-price" auction system, wherein it told advertisers they "only pay the least bid amount needed in order to win," the complaint states, citing Amazon's own marketing materials. The FTC alleges in its complaint that Amazon in 2019 changed its auction rules without notice by adding an undisclosed surcharge it referred to as a "soft reserve price," which led to higher ad prices. "Amazon made this surreptitious change to its auction because it was unhappy about how much revenue its advertising auctions were generating," the agency said in its complaint, which cites internal communications between Amazon ad executives. In one exchange, a company executive allegedly acknowledged it uses an "invented auction participant" to increase prices, the FTC said. The FTC and the states alleged Amazon's practices violate federal and state consumer protection laws, and they're seeking civil penalties, restitution and other unspecified damages. In a blog post, Amazon called the FTC's lawsuit "misguided" and said the complaint "fundamentally misunderstands how advertisers operate." The company added that the agency's lawsuit doesn't include evidence of consumer price increases. "We've provided advertisers with guidance about our auctions and pricing in the main tools they use to manage their campaigns, and we continue to update that guidance," the company said. "We look forward to making our case in court."

Read more of this story at Slashdot.

According to The Information (paywalled), Apple reportedly moved up the release of new Mac mini and Mac Studio models after unexpectedly strong enterprise demand for Macs capable of running AI workloads. MacRumors reports: Apple normally releases new Mac models in the autumn, closer to October or November, making this week's announcement unusually early, falling just before the anticipated arrival of new iPhone models. The Information says that the AI-driven boom in Mac Studio and Mac mini sales is behind the early launch. Apple noticeably promoted the ability to link multiple Mac Studios together into a single, more capable system for running large frontier AI models, a feature aimed at business and developer customers rather than everyday consumers. Apple highlighted the Mac mini and Mac Studio's shift toward business buyers in June, with a "Business at the Park" event involving executives from major companies Ford, Disney, and Anthropic. The Mac mini was said to be the "darling" of the event. Even so, enterprise's rush toward powerful desktop Macs more broadly took Apple by surprise. The company reportedly did not possess an engineering team dedicated to business customers or staff focused on developer relations, and lacked an enterprise AI strategy. Businesses that approached Apple asking to buy access to the company's Private Cloud Compute infrastructure were reportedly turned down. Apple is instead leaning on partners such as WebAI and Mount Thor, which provide AI tools and execution environments built on Apple hardware.

Read more of this story at Slashdot.

Broadcom is launching "TrueSource," an effort to curate and secure open-source components used with its Tanzu platform, including Spring, RabbitMQ, and libraries across Java, Python, and Node.js. "The idea is to provide a set of solutions focused on providing clean and secure artefacts," Purnima Padmanabhan, vice president of Broadcom's Tanzu Division, told The Register. "We choose and build every Spring library, databases, other Java components," she said. The Register reports: Padmanabhan said that promise means VMware will also provide "TrueSource trusted artifacts" for code that is not part of Spring, including the wider Java ecosystem, Python, and Node.js. "Broadcom's curation process ensures that the libraries conform to a reference architecture and are supportable by the maintainers of record," according to a company statement. "Thousands of engineers across Broadcom's software divisions scan, fix, contribute to, and consume them every day." A VMware spokesperson told The Register the Broadcom business unit "will work with and support maintainers on open source software and we will provide fixes to open source upstream for any active projects." "With Spring and RabbitMQ, we are the maintainers. For other open source software, we will work with the maintainers. We believe that the community maintainers must remain the source of truth," the spokesperson said. This is just the sort of contribution that the open-source community wants vendors to do to reflect the value they extract from software they did not create alone. It's also the sort of thing vendors sometimes conclude they need to do to keep products based on FOSS viable.

Read more of this story at Slashdot.

An eBPF security system can produce precise Linux telemetry while leaving a harder question unanswered: what happens if the eBPF layer itself is misconfigured, vulnerable, or trusted too broadly?

Linux interrupt maintainer Thomas Gleixner traced a Kernel Address Sanitizer report to incomplete regmap IRQ cleanup on Aug 30, 2026. The crash appeared while Linux was taking a CPU offline, but the stale pointer was created earlier when a device’s interrupt setup failed.

Jonghyuk Kim submitted a Linux Direct Rendering Manager scheduler patch series on Aug 28, 2026 that targets a use-after-free read shared by several GPU drivers. The proposed change caches a fence’s timeline name while its scheduler is still alive.

Kalshi has issued its first-ever lifetime ban to former U.S. Rep. George Santos after concluding he failed to fully cooperate with an insider-trading investigation. He is also being fined $71,356, according to a filing (PDF) on its website. Engadget reports: It was reported in June that Santos was under investigation from the Department of Justice (DOJ) and the Commodity Futures Trading Commission (CFTC) over insider trading. Prediction markets like Kalshi allow users to buy contracts or shares in the outcome of events. Participants don't necessarily have to wait for an event to resolve before selling these contracts and cashing in. Santos allegedly bought contracts on Kalshi indicating that he would not attend this year's State of the Union speech after weather disrupted his travel plans. According to the CFTC, Santos then sold those contracts for a profit after claiming on social media that he would be in attendance. The former congressman is said to have made more than $17,500 through this scheme, which Kalshi reportedly detected and flagged to authorities. In July, Santos agreed to pay over $35,000 to settle the CFTC's claims against him. The agency also issued him a three-year trading ban. Kalshi, however, doesn't plan to allow Santos back on its platform in 2029 (or anytime after that). The company confirmed to The Wall Street Journal this was the first time it had given anyone a lifetime ban and that it did so because Santos didn't fully cooperate with its investigation. He can appeal the decision to the CTFC.

Read more of this story at Slashdot.

It’s hard to evaluate the security of open source projects when security bug reports remain private forever. Users deserve to see security bug reports, so please remember to unset issue report confidentiality when you’re done handling an issue. There are very few good reasons to keep an issue report confidential forever. If you’re not planning to disclose the issue report within the next few months, it should probably already already be public.

For GNOME, I disclose issues whenever a merge request has been created or a fix lands in the git repo, or 30 days after the issue was reported, whichever comes first. Your project might prefer to wait until the fix is released before disclosing, especially if you fear that a vulnerability might actually be exploited during the window between the fix and release. Whatever you choose, please don’t forget about it and leave the issue report confidential forever. That’s not fair to your project’s users. Even if not many people will take the time to look, users should at least have a chance to see reported issues.

Bank of England Governor Andrew Bailey is warning that advanced "frontier" AI models could materially increase cyber risk across the global financial system by making attacks faster, cheaper, and more scalable. In a letter to G20 finance officials, he said financial firms need stronger defenses and contingency plans for simultaneous disruptions. CNBC reports: Writing in his capacity as chair of the Financial Stability Board, an international body that coordinates policy and makes recommendations to national authorities, Bailey identified the potential impact of frontier AI -- which refers to the most advanced AI models -- on cyber risk as "the most immediate concern" for the financial system. "Frontier AI may have the ability materially to alter the speed, scale and economics of cyber risk, which could undermine market confidence system-wide, especially due to highly concentrated third-party service providers," Bailey said. "Recent developments have also highlighted to me that many jurisdictions do not have the protocols in place to manage the development, release, and deployment of advanced frontier AI models, heightening risks for the financial sector and beyond," he added. [...] Financial institutions and technology providers will need to improve vulnerability management, response and recovery capabilities -- "and prepare for more severe scenarios involving simultaneous disruption across multiple firms or shared technology dependencies," Bailey said. Alongside new AI models, Bailey cited "fragilities" in sovereign debt markets, the growing use of debt by investors in equity markets and stretched asset valuations, particularly AI-related investments, as among his concerns.

Read more of this story at Slashdot.

An anonymous reader quotes a report from 9to5Mac: Today is Tim Cook's last day as Apple CEO, with John Ternus set to take over tomorrow. To mark his last day in the role, Cook penned an emotional memo to Apple employees today. In the memo sent to employees this morning and obtained by 9to5Mac, Cook reflects on his time at Apple and thanks employees for all of their work. He also says he takes "enormous comfort in handing the helm to someone as brilliant and wonderful and capable" as John Ternus. "Few people understand what it takes to build products that change the world the way John does and I could not be more excited for his leadership," Cook writes. "There is something truly special about Apple," writes Cook. "I am most proud of what an annual report could never capture. This place is proof that culture triumphs over everything. We share a belief that what we build matters, and that we have both the opportunity and the responsibility to leave the world better than we found it. That purpose is part of what makes this place extraordinary. Apple helps nurture it, but I believe it lived within each of you long before you arrived here. It is what brought you to this company and what continues to drive the work you do every day." He continues: "Together, we have created something far greater than any one of us could have imagined or accomplished alone. And that's the secret to our success. We bring out the best in each other. We lift each other up. We have made it possible to leave our 'dent in the universe,' as Steve once described it, because of who we are and what we believe, because of what we value and how we see the world. How fortunate we are. How fortunate I am..." Cook also thanked the Apple community in a post on social media, writing: "Sending lots of love to the Apple community on my last day as CEO. My title changes tomorrow, but the love I have for the Apple community never will. Thank you for being a constant source of inspiration. My gratitude is endless, and I'm excited for the next chapter!"

Read more of this story at Slashdot.

MapQuest's refusal to rename Lake Ontario as "Lake America" has sent its app surging up the charts, making it the No. 1 navigation app in the U.S. and driving "hundreds of thousands" of new downloads. In contrast, Google Maps announced on Saturday that it was complying with the Trump administration's name change. TechCrunch reports: The "OG of online mapping," as the company calls itself, announced on Thursday that it would not change the name of Lake Ontario on its maps to Lake America, despite Trump's executive order directing the U.S. Department of the Interior to update the lake's name in the U.S. geographic naming service. As a result, MapQuest's mobile app downloads soared, sending the iOS app to the No. 4 position on the U.S. App Store's Top Charts for apps (not including games) as of Monday morning on the U.S. east coast. MapQuest also reached the No. 8 position overall in the U.S. App Store across both apps and games, and it became the No. 1 Navigation app in the United States. In Canada's App Store, the app reached No. 2 overall as of Sunday evening. The 30-year-old company remarked that it received "hundreds of thousands" of new downloads since its decision to keep the name Lake Ontario in place, and saw its app's usage climb to 50 times above its normal levels. "We took the same approach we did with the Gulf of Mexico: be part of the conversation, and give people an app that keeps the names they're familiar with," said Doug Berger, general manager of MapQuest, in a statement. "Hundreds of thousands of people signaled to us this weekend that we got it right by downloading our app."

Read more of this story at Slashdot.

A massive 12TB archive of old Steam2 content has surfaced online, apparently containing nearly every version of games uploaded to Valve's servers between 2003 and 2013, including unreleased prototypes, playtest builds, and cut content. Early discoveries include deleted Portal 2 material, files tied to Half-Life 2: Episode 3, and beta builds of games like Left 4 Dead 2, CS: GO, Spore, and Dragon Age: Origins. Researchers claim much of the material was once accessible through an unsecured public API. Ars Technica reports: The reason this weekend's leaked content cuts off abruptly in 2013 is because that's when Valve updated its content distribution system from "Steam2" to the current SteamPipe system. In moving from a proprietary file distribution format to standard HTTP file trees, the new system removed various update approval bottlenecks on Valve's end and streamlined update and patch downloads so they only reflected file differentials. Publicly accessible early versions of some games released before this SteamPipe transition had been considered lost content by archivists, no longer accessible from Valve itself and living on only as local downloads on aging machines. Apparently all that content wasn't as lost as many thought, though. Longtime Valve watcher and data miner Gabe Follower (previously) wrote on social media this weekend that he had "verified that everything in Steam2 Teraleak was obtained via a publicly accessible [API] endpoint. It's Valve's fault..." Spanish-language Valve streamer and analyst Scolcer also said on social media (via machine translation) that the teraleak was "obtained from a site that was 100% accessible to the public. It was there for everyone to download. No passwords. Nothing. Hidden in plain sight, but with no protection whatsoever." What's unclear right now if that API and publicly available Steam2 server content were accessed recently or if this weekend's leak represents content that was privately archived before the 2013 server transition and is just now being made public. "It could more-so be a collection of different people that knew about it and accumulated whatever people had downloaded back then into this massive archive," said The One Epicplayer, a moderator on the Valve Cut Content (VCC) Discord, which has long followed Valve betas and leaks. "I haven't been filled in on the full details but my suspicion is that these depot [files] were downloaded a long time ago and sat in a private collection," CrazyBubba, another VCC Discord moderator, told Ars. "There were a lot of leaks a few years back and many folks hoarded files for years. ... historically there have been issues with people lording content over other members." A readme file included with the leak offers "warm n good wishes to all hoarders who had stuff from this collection" and encourages users to mirror and share it as widely as possible. On the VCC Discord, a user purporting to be the original uploader of the teraleak (who offered screenshots of a 22TB server upload log among their evidence) wrote that "getting this out really took a significant amount of effort from me and I would like it if it didn't go to waste."

Read more of this story at Slashdot.

Version:next-20260831 (linux-next) Released:2026-08-31

An anonymous reader quotes a report from the BBC: Berlin is being blackmailed by hackers who were able to compromise city systems and steal data earlier this month, its mayor has said. Kai Wegner said officials would not cave in to the ransom demand, which came on Thursday evening. He did not say how much was being sought, though Der Spiegel reports the hackers are demanding 30 bitcoin, worth around 2 million euros. Some of the German capital's online systems were forced to close down as a result of the attack, while investigators were working to understand what data had been taken. The Rhysida group, which is thought to operate from Russia and eastern Europe, and was behind a previous attack on the British Museum, has reportedly taken responsibility. It has said on its website it intends to begin auctioning the 5.79 terabytes of data it was able to steal from Berlin in seven days' time, according to news agency Reuters. [...] Officials for the city-state said an initial data leak occurred between August 7 and 12. Then, on August 14, two department networks were shut down, making applications for housing benefits and payments impossible for several days. "Berlin will not be blackmailed," Wegner said on Friday. He said state police, prosecutors and federal security services were working to investigate the suspected perpetrators "with the utmost urgency," adding that inquiries into the "content and scope of the compromised data are being pursued with great intensity."

Read more of this story at Slashdot.

I realized that deleting local copies of files early and often is better than keeping them forever.

I'm the kind of person who will work on something, share their work, and then just let the file I had linger around indefinitely. You never know, it's better to have a local copy, it can save the day. Or you keep it at hand when you're offline. And do I really need a reason to keep a copy of the file I was working on anyway? Hoarding files and keeping them forever is tempting.

The one thing I've overlook in the past is context. When I produce or get a file, I do so in a specific context. But if I want to do some cleanup later I will certainly have lost that context, or have fragments of it. I won’t know if I can delete it safely or not, so I will keep it forever. The longer a file has been around, the more difficult it becomes to delete it.

The best thing I can do in a work context is to make it not a me-problem. Whenever I get or produce a file, I make sure there is a copy of it in a company shared drive, and I delete it from my machine as soon as possible.

Throwing it over the fence is bad behavior of course, so I make sure it’s stored somewhere with as much context as possible for people who need to use it. My machine stays decluttered, and if it’s stolen I "just" lose hardware, I have a safe copy of my work data, and there is little to leak on my (encrypted) disk.

Note: this is true for documents because all versioning systems are terrible. This is not true for code thanks to git and the like.

California's age-verification bill has passed in its legislature — but with its open-source carve-out intact, reports the blog Linuxiac: Back in May, we reported that California lawmakers amended Assembly Bill 1856 to carve open-source operating systems out of the state's upcoming age verification requirements. Three months later, that exemption survived the legislative process intact, and the bill has cleared both chambers of the California Legislature... sending the measure to Engrossing and Enrolling, the final legislative preparation stage before it can be presented to Governor Gavin Newsom... For operating systems that are covered, AB 1856 builds on California's Digital Age Assurance Act, which is scheduled to take effect on January 1, 2027. Under the current text, when an operating system runs on a device and includes an account setup feature, its provider must offer an interface that asks the account holder for the birth date, age, or both, of the device's primary user during account setup. The operating system must then be capable of providing a digital age signal to covered application stores and application developers through a reasonably consistent real-time API. Instead of exposing a precise birth date, the signal identifies one of four age ranges: under 13, 13 through 15, 16 through 17, or 18 and older... Covered application stores must request the signal from the operating system and make it available to developers.

Read more of this story at Slashdot.

For a while now, the fingerprint management UI in GNOME Settings (gnome-control-center) has felt outdated. While it worked, the layout and enrollment flow hadn’t kept up with the rest of GNOME’s modern interface updates.

I am happy that during the GNOME 51 development cycle we managed to address that. Allan Day, Marco Trevisan, and myself worked on modernizing the interface. There’s still more work to do in the UI and in fprintd, but what we will ship in 51 is already a great step forward.

Historically, the fingerprint dialog in User Settings was stuck on a GTK3-style design. Even after being ported to GTK4, conceptually it remained unchanged. Beyond looking out of place alongside Libadwaita-based settings panels, it suffered from responsiveness and accessibility issues that made it difficult for some users to enroll their prints.

Screenshot of the Fingerprint Authentication dialog

The new fingerprint management dialog uses a standard boxed list displaying your enrolled fingers. From here, each enrolled finger can be removed individually.

Clicking the “Add Fingerprint” button starts the finger enrollment process. First, you choose one of the unused finger options to enroll. From there, an assistant guides you through the scanning process. As you place your finger on the reader, the UI detects the touch and provides feedback on whether it was read correctly. You continue touching the reader until enough samples have been collected (the exact number depends on your reader’s driver). Once the progress bar fills, your finger is ready for authentication.

Screenshot of a fingerprint enrollment

This is only one of the improvements that GNOME 51 is bringing. As with everything in GNOME, we will continue gathering user feedback and making iterations over time. There are already more fingerprint features in the pipeline, such as renaming enrolled fingers and verifying individual prints. Stay tuned!

"OpenAI said on Friday that it plans to stop providing AI models to Cursor, the coding-tool company now owned by Elon Musk's SpaceX," reports Reuters: "We are making this choice because we cannot be confident that SpaceX will use our technology within our terms of service, based on our experience with Elon Musk's companies violating contracts," OpenAI said in a blog post... However, Michael Truell, a co-founder of Cursor and now an executive at SpaceX, said on X that the company was speaking with the OpenAI team to resolve this issue. Hours after OpenAI's announcement, Anthropic, which rivals both firms but has an ongoing partnership with SpaceX, said it planned to increase compute to support Claude models in Cursor, according to Tom Brown, one of the co-founders of the firm... In its blog post, OpenAI said that X, formerly known as Twitter and now part of SpaceX, had breached the terms of its contract with OpenAI after Musk acquired the platform. "To work with a large partner like SpaceX, we typically rely on custom contracts to ensure compliance with our terms of service and that the integration provides for safety at scale," the AI company added. The article also notes Elon Musk's response Saturday in a post on X.com: "I couldn't care less." He accused Altman and OpenAI President Greg Brockman of being "untrustworthy," while repeating his assertion that they "stole an open source nonprofit."

Read more of this story at Slashdot.

In an Amazon News blog post, their HR leader describes using AI to write 100,000 lines of code — 25 years after she last coded. "Do you know how empowering it is to realize that after 25 years away from coding, you can actually build again?" First she built a calendar app for her family, but then used Amazon's AI-powered coding tool Kiro to write an app for Amazon's internal "Everyone Can Build" event. We opened the competition to every employee on our team, and within just a few weeks, more than 1,500 people were building. I couldn't believe what they built. One employee built an app that turned a nearly four-hour manual process into a one-second automated check, saving tens of thousands of hours annually. Another made a desktop pet named Momo that keeps your tasks, reminders, and shortcuts a click away. Since then, I've written over 100,000 lines of code with AI. What I've found is that the more you work with these tools, the more natural the process becomes, and the more you realize they're expanding what you're capable of, not replacing it. You don't need perfection to start. You just need to dive in. When I decided to build the submission app for our team competition, I didn't know how to begin, so I asked our internal AI workplace assistant, called Aza. It pointed me to the right tools and helped me take the first step. From there, I opened Kiro and started building. When you give employees the ability and tools to solve problems themselves, they will surprise you with what they create... At Amazon, every employee has access to AI tools. Whether someone needs a quick answer, wants to move faster in their day-to-day, or is ready to try building something new, the resources are there. The more people use these tools, the more capable they become with them, and that experience carries forward in their careers... We also want to make it easy for people to build credentials that are recognized across industries. That's why AI training is free for every Amazon employee. Amazon covers the full cost of one AWS AI certification exam per year, with options ranging from foundational AI concepts to professional-level generative AI. Employees can choose the path that fits where they are in their learning journey. Long-time Slashdot reader theodp notes that 7 months ago Galetti also took to Amazon News to announce the elimination of 16,000 corporate jobs, a move which CNBC noted coincided "with a push to invest heavily in artificial intelligence." The job reductions come just a few months after October's layoffs, when 14,000 employees were let go across Amazon's corporate workforce. At the time, the company indicated the cuts would continue in 2026 as it found "additional places we can remove layers."

Read more of this story at Slashdot.