Intel Unveils 14th-gen 'Raptor Lake Refresh' CPUs With Speeds Up To 6GHz

Intel’s latest 14th-gen Core desktop processors, “Raptor Lake Refresh,” do away with the AI NPU and complex tiling system inside the recent 14th-gen “Meteor Lake” mobile chips. But AI is being used here, specifically to assist what gamers care about: improving game performance and CPU clock speeds. From a report: As expected, Intel’s “refreshed” Raptor Lake chips offer modest performance improvements over their predecessors, while ushering in eventual platform upgrades like Thunderbolt 5. But there are boosts, such as a tweaked Intel 7 process that pushes turbo clock speeds up to 6GHz with the new Core i9-14900K and a new “Application Performance Optimization (APO)” feature that appears to optimize the CPU for a particular game.

But — and this is important, given inflation — Intel is holding pricing (almost) steady. Prices in Intel’s 14th-gen Core desktop S-series line will range from $589 for the 24-core, 32-thread Core i9-14900K down to the $294 14-core, 20-thread Core i5-1400KF, for a total of six new processors. This is the third straight generation in which Intel has left its processor prices virtually unchanged, including the 13th-gen Raptor Lake and the 12th-gen Alder Lake chip, whose slowest chip was priced at $264. Perhaps not surprisingly, Intel’s not offering many direct generation-over-generation comparisons with its own processors, though it selected a few content-creation benchmarks to highlight with its Core i7-14700K. There, performance improvements range from 3 percent (Adobe Lightroom) to 18 percent (Autodesk). According to Roger Chandler, vice president and general manager of Intel’s enthusiast PC and workstation business, the Core i7 features the best multithreaded performance on a Core i7 ever. Intel executives said the chipmaker had about 130 partners and customers for the 13th-gen launch, and expect the same for the debut of the 14th-gen Raptor Lake Refresh chips.

Read more of this story at Slashdot.



Source: Slashdot – Intel Unveils 14th-gen ‘Raptor Lake Refresh’ CPUs With Speeds Up To 6GHz

LinkedIn To Lay Off Hundreds of People Amid Broader Restructuring

LinkedIn plans to lay off more than 660 people across its engineering, product, talent and finance teams, it announced Monday — representing more than 3% of the company’s global workforce. From a report: LinkedIn has now seen two major rounds of layoffs this year following its cutting in May of 716 jobs and shuttering of its Chinese app InCareer. Those cuts were announced alongside a broader restructuring of the firm’s Global Business Organization. The job positions are being eliminated as part of broader efforts at the company to optimize around artificial intelligence. LinkedIn released a slew of new AI product features earlier this month, including an AI-assisted candidate discovery for recruiters, and AI-powered coaching for LinkedIn’s premium subscribers.

Read more of this story at Slashdot.



Source: Slashdot – LinkedIn To Lay Off Hundreds of People Amid Broader Restructuring

Minecraft Has Sold Over 300 Million Copies

Minecraft already has the distinction of being the bestselling video game of all time. Today, it adds more down to that particular feather in its cap with the announcement that it has sold a staggering 300 million copies. From a report: “As we approach the 15th anniversary, Minecraft remains one of the best-selling games of all time, with over 300 million copies sold, a milestone no one could have dreamed of when we were all placing our first blocks,” Helen Chiang, head of Mojang Studios, said in a statement. Even the second bestselling video game of all time, Grand Theft Auto V, doesn’t even come close to Minecraft’s numbers, topping out at 185 million reported sales.

Read more of this story at Slashdot.



Source: Slashdot – Minecraft Has Sold Over 300 Million Copies

Why the US Government Has $5 Billion in Bitcoin

The U.S. government is one of the world’s biggest holders of bitcoin, but unlike other crypto whales, it doesn’t care if the digital currency goes up or down in value. From a report: That is because Uncle Sam’s stash of some 200,000 bitcoin was seized from cybercriminals and darknet markets. It is primarily offline in encrypted, password-protected storage devices known as hardware wallets that are controlled by the Justice Department, the Internal Revenue Service or another agency. What the federal government does with its bitcoin has long been a topic of interest among crypto traders because any sale could potentially swing prices or cause other ripple effects in the $1 trillion digital-asset market.

The U.S. has been notoriously slow to convert its stash of bitcoin into dollars. It isn’t HODLing, crypto parlance for “holding on for dear life” and never intending to sell. Nor is it waiting for bitcoin to go “to the moon” so it can sell its holdings for a hefty profit. Rather, that big pile of bitcoin is more a byproduct of a lengthy legal process than strategic planning. “We don’t play the market. We basically are set by the timing in our process,” said Jarod Koopman, executive director of the IRS’s cyber and forensics services section, which oversees all activities focused on cybercrimes.

Read more of this story at Slashdot.



Source: Slashdot – Why the US Government Has Billion in Bitcoin

Have Economists Contributed to Inequality?

A new book by Nobel prize-winning economist Angus Deaton”feels like an existential crisis,” writes Fast Company, “as he questions his own legacy — and wonders whether policies prescribed by economists over the years have unintentionally contributed to inequality” in America.

Angus Deaton: People who have a four-year college degree are doing pretty well. But if you go to the people who don’t have a college degree, horrible things are happening to them… The opportunities are getting bigger and bigger, but the safety net’s falling further and further away. . . I think of it as much broader than income inequality: People without a BA are like an underclass. They’re dispensable…

Fast Company: Why has Europe been able to avoid so many of these rises in inequality and “deaths of despair” and the U.S. hasn’t?

Deaton: Anne [Case, my wife] and I wrestled with that in our book Deaths of Despair. One reason is that we don’t have any safety net here… The other story is we’ve got this hideous healthcare system… we’re spending [almost] 20% of GDP. There’s no other country that spends anything like that. That money comes out of other things we could have, like a safety net and a better education system. And it’s not delivering much, except the healthcare providers are doing really quite well: the hospitals, the doctors, the pharma companies, the device manufacturers. Not only does it cost a lot, but we fund it in this really bizarre way, which is that for most people who are not old enough to qualify for Medicare, they get their health insurance through their employer…

Fast Company : The theme of your new book seems to be something of an existential crisis for you as an economist. How much are economists to blame for some of these issues?

Deaton: […] I think there are some broad things that we didn’t do very well. We bent the knee a little too much to the Chicago libertarian view, that markets could do everything. I’m not trying to say that I was right and everybody else was wrong. I was with the mob. I think we thought that financial markets were much safer than they’d been in the past, and we didn’t have to worry about them as much. That was dead wrong. I think we were way overenthusiastic about hyperglobalization. We had this belief that people would lose their jobs but they’d find other, better jobs, and that really didn’t happen. So there are a lot of things that I think are going to be seriously reconsidered over the next years.

But he admits economists are short on solutions for economic inequality. “When they say, ‘Well, what would work'” there’s this uncomfortable silence where you feel foolish. Everybody’s quoting [former Italian philosopher and politician Antonio] Gramsci [saying that] the old system is broken but the new system is struggling to be born. No one really knows what it’s going to look like.”

The book is titled Economics in America: An Immigrant Economist Explores the Land of Inequality. But in the interview Deaton still remains hopeful about America, calling it “a very inventive place,” and noting that in the field of economics “there’s always hope and there’s always change; economics is a very open profession, and it changes very quickly.”

Read more of this story at Slashdot.



Source: Slashdot – Have Economists Contributed to Inequality?

Caltech Ends Its Wi-Fi Lawsuit Against Apple and Broadcom

An anonymous reader shared this report from the Verge:

Caltech has had some ups (winning $1.1 billion) and some downs (losing the $1.1 billion award and being ordered to a trial on damages) since suing Apple and Broadcom in 2016 over Wi-Fi patents. Reuters reported this week that Caltech is dropping its yearslong lawsuit against Apple and Broadcom, about two months after the companies came to a “potential settlement.”

Caltech wrote in a filing with a US District Court in California that it would drop its claims “with prejudice,” meaning it can’t refile its case, and asked that Broadcom do so as well, stating later that Broadcom “does not oppose this request.” Caltech also writes that it will dismiss its claims against Apple — again, “with prejudice.”

The filing then says that Caltech “respectfully requests that all counterclaims asserted by Apple also be dismissed.”

Read more of this story at Slashdot.



Source: Slashdot – Caltech Ends Its Wi-Fi Lawsuit Against Apple and Broadcom

California Begins World's Largest Dam Removal/River Restoration Projects

Four California dams are now being dismantled, reports the Arizona Republic:
Sometime in January, work crews will start drilling a tunnel at the base of a concrete dam on the Klamath River, near the California-Oregon border. The tunnel will begin the process of drawing down the reservoir behind the dam, known as Copco-1, and prepare the site to remove the dam fro the river. Time was, removing a dam in the West was unheard of. Dams were built to store water, generate electricity, manage the use of rivers for growers. But environmental activists started telling the story of how dams damage a river and its ecosystem, and Indigenous communities have told their stories of how dams took away traditional resources and food sources. And so, in recent years, we’ve seen more dams removed. In Arizona, the removal of a hydroelectric dam on Fossil Creek led to the restoration of a sparkling waterway and a habitat for fish, birds and other wildlife.

California’s dam-removal project began in June, reports the Los Angeles Time, when the smallest of the four dams was torn down by crews using heavy machinery. “The other three dams are set to be dismantled next year, starting with a drawdown of the reservoirs in January.”

“The scale of this is enormous,” said Mark Bransom, CEO of the nonprofit Klamath River Renewal Corp., which is overseeing dam removal and river restoration efforts. “This is the largest dam removal project ever undertaken in the United States, and perhaps even the world.” The $450-million budget includes about $200 million from ratepayers of PacifiCorp, who have been paying a surcharge for the project. The Portland-based utility — part of billionaire Warren Buffett’s conglomerate Berkshire Hathaway — agreed to remove the aging dams after determining it would be less expensive than trying to bring them up to current environmental standards.
The dams were used purely for power generation, not to store water for cities or farms. “The reason that these dams are coming down is that they’ve reached the end of their useful life,” Bransom said. “The power generated from these dams is really a trivial amount of power, something on the order of 2% of the electric utility that previously owned the dams.” An additional $250 million came through Proposition 1, a bond measure passed by California voters in 2014 that included money for removing barriers blocking fish on rivers.
Crews hired by the contractor Kiewet Corp. have been working on roads and bridges to prepare for the army of excavators and dump trucks. “We have thousands of tons of concrete and steel that make up these dams that we have to remove,” Bransom said. “We’ll probably end up with 400 to 500 workers at the peak of the work…”

In addition to tearing down the dams, the project involves restoring about 2,200 acres of reservoir bottom to a natural state.

Read more of this story at Slashdot.



Source: Slashdot – California Begins World’s Largest Dam Removal/River Restoration Projects

How Two Florida Men Scammed 'Uber Eats' Out of $1 Million

An anonymous Slashdot reader shared this report from Business Insider:
Two men from the Fort Lauderdale, Florida area scammed Uber Eats out of more than $1 million over 19 months, local police say.

The suspects carried out the scheme — which began in January 2022 — by creating fake accounts on the Uber Eats app to act as both the customer and courier when placing grocery orders, the Broward County Sheriff’s Office said in a statement. This worked because Uber Eats provides couriers with prepaid cards they can use to purchase up to $700 to complete customers’ orders.
Police claim the suspects would show up as couriers for their fake grocery orders before canceling them and using the prepaid cards to purchase gift cards at the stores.

According to the sheriff’s office, “On January 24, 2023, detectives conducted a surveillance operation and observed Morgan and Blackwood travel to 27 different Walgreens committing fraud that totaled a $5,013.28 loss for Uber that day. “

Read more of this story at Slashdot.



Source: Slashdot – How Two Florida Men Scammed ‘Uber Eats’ Out of Million

Google's AI-Powered 'Project Green Light' Speeds Traffic, Reduces Fuel Consumption and Carbon Emissions

Google’s “Project Green Light” uses machine learning on Maps data to optimize the length of green lights, reports Engadget, “reducing idle times as well as the amount of braking and accelerating vehicles have to do there.”

When the program was first announced in 2021, it had only been pilot tested in four intersections in Israel in partnership with the Israel National Roads Company but Google had reportedly observed a “10 to 20% reduction in fuel and intersection delay time” during those tests. The pilot program has grown since then, spreading to a dozen partner cities around the world, including Rio de Janeiro, Brazil; Manchester, England and Jakarta, Indonesia. “Today we’re happy to share that… we plan to scale to more cities in 2024,” Yael Maguire, Google VP of Geo Sustainability, told reporters during a pre-brief event last week. “Early numbers indicate a potential for us to see a 30% reduction in stops….”

Maguire also noted that the Manchester test reportedly saw improvements to emission levels and air quality rise by as much as 18%. The company also touted the efficacy of its Maps routing in reducing emissions, with Maguire pointing out at it had “helped prevent more than 2.4 million metric tons of carbon emissions — the equivalent of taking about 500,000 fuel-based cars off the road for an entire year.”

Read more of this story at Slashdot.



Source: Slashdot – Google’s AI-Powered ‘Project Green Light’ Speeds Traffic, Reduces Fuel Consumption and Carbon Emissions

Long-Dormant Viruses Are Now Waking Up After 50,000 Years as Planet Warms

This week Bloomberg explored so-called “zombie viruses” — that is, long-dormant microbes which they call “yet another risk that climate change poses to public health” as ground that’s been frozen for “milleniums” suddenly starts thawing — for example, in the Arctic, which they write is warming “faster than any other area on earth.”

With the planet already 1.2C warmer than pre-industrial times, scientists are predicting the Arctic could be ice-free in summers by 2030s. Concerns that the hotter climate will release trapped greenhouse gases like methane into the atmosphere as the region’s permafrost melts have been well-documented, but dormant pathogens are a lesser explored danger. Last year, virologist Jean-Michel Claverie’s team published research showing they’d extracted multiple ancient viruses from the Siberian permafrost, all of which remained infectious…

Ways in which this could present a threat are still emerging. A heat wave in Siberia in the summer of 2016 activated anthrax spores, leading to dozens of infections, killing a child and thousands of reindeer. In July this year, a separate team of scientists published findings showing that even multicellular organisms could survive permafrost conditions in an inactive metabolic state, called cryptobiosis. They successfully reanimated a 46,000-year-old roundworm from the Siberian permafrost, just by re-hydrating it…

Claverie first showed “live” viruses could be extracted from the Siberian permafrost and successfully revived in 2014. For safety reasons his research focused only on viruses capable of infecting amoebas, which are far enough removed from the human species to avoid any risk of inadvertent contamination. But he felt the scale of the public health threat the findings indicated had been under-appreciated or mistakenly considered a rarity. So, in 2019, his team proceeded to isolate 13 new viruses, including one frozen under a lake more than 48,500 years ago, from seven different ancient Siberian permafrost samples — evidence to their ubiquity. Publishing the findings in a 2022 study, he emphasized that a viral infection from an unknown, ancient pathogen in humans, animals or plants could have potentially “disastrous” effects.
“50,000 years back in time takes us to when Neanderthal disappeared from the region,” he says. “If Neanderthals died of an unknown viral disease and this virus resurfaces, it could be a danger to us.”

Read more of this story at Slashdot.



Source: Slashdot – Long-Dormant Viruses Are Now Waking Up After 50,000 Years as Planet Warms

Rust-Based 'Resources' is a New, Modern System Monitor for Linux

An anonymous reader shared this article from the Linux blog OMG! Ubuntu:

The System Monitor app Ubuntu comes with does an okay job of letting you monitor system resources and oversee running processes — but it does look dated… [T]he app’s graphs and charts are tiny, compact, and lack the glanceability and granular-detail that similar tools on other systems offer.

Thankfully, there are plenty of ace System Monitor alternatives available on Linux, with the Rust-based Resources being the latest tool to the join the club. And it’s a real looker… Resources shows real-time graphs showing the utilisation of core system components… You can also see a [sortable and searchable] list of running apps and processes, which are separated in this app.

It’s also possible to select a refresh interval “from very slow/slow/normal/fast/very fast (though tempting to select, ‘very fast’ can increase CPU usage).” And selecting an app or process “activates a big red button you can click to ‘end’ the app/process (a submenu has options to kill, halt, or continue the app/process instead)…”

“If you don’t like the ‘Windows-iness’ of Mission Center — which you may have briefly spotted it in my Ubuntu 23.10 release video — then Resources is a solid alternative.”

Read more of this story at Slashdot.



Source: Slashdot – Rust-Based ‘Resources’ is a New, Modern System Monitor for Linux

Dropbox CEO Defends 90% Remote-Work Model, Says 'Future of Work' is Here

An anonymous Slashdot reader shared this report from Fortune:
What would Drew Houston, CEO of Silicon Valley software giant Dropbox, say to fellow CEOs — like Google’s Sundar Pichai or Meta’s Mark Zuckerberg — who seem to believe that three days a week in-person is crucial for company culture?

“I’d say, ‘your employees have options,'” Houston told Fortune this past week. “They’re not resources to control.”

While Dropbox used to work near-entirely at its Bay Area headquarters, Houston has completely warmed to a distributed model since the pandemic — and is mystified as to why other leaders haven’t joined him. (Houston founded Dropbox in 2007, the year after he graduated from MIT, and has been its CEO ever since.) “From a product design perspective, customers are our employees. We’ve stitched together this working model based on primary research,” he told Fortune at Dropbox’s WIP Conference — its first in-person event since 2019 — in New York on Tuesday. “We’ve just been handed the keys that unlock this whole future of work, which is actually here.”

In April 2021, right when most of the country became eligible for vaccines and people began reconvening again across the globe, Dropbox encouraged the opposite. It officially announced its intent to go Virtual First, which meant employees were free to work remotely 90% of the time, only commuting in for the occasional meeting or happy hour… Granted, not everyone got to appreciate the perks. In April, Dropbox laid off 500 employees — 16% of its staff — due to “slowing growth” and “the A.I. era” requiring a reallocation of resources….

Houston and his team have found, in practice, a handful of two- or three-day offsites per quarter — 10% of the year — works best for their people. Crucially, it provides that oft-referenced cultural connect and brainstorming time that pro-office zealots insist upon, without exhausting workers out with a commute grind or needless hours in drab conference rooms.

Read more of this story at Slashdot.



Source: Slashdot – Dropbox CEO Defends 90% Remote-Work Model, Says ‘Future of Work’ is Here

Two 'Godzilla' Scifi Novellas Finally Get English Translations, Capturing 1950s Horror at Nuclear Weapons

Godzilla and Godzilla Raids Again — two novellas based on Toho’s first two Godzilla movies — were finally published in an English translation this month.

Both were written by science fiction author Shigeru Kayama, “who also penned the original scenarios from which the films in question were based,” according to Our Culture magazine. And the book’s translator calls Kayama both “a figure who is a little bit like Philip K. Dick in this country” and “the key person who developed the contours of the Godzilla story. I think it is no exaggeration to say that he perhaps the closest to being Godzilla’s real father than anyone else. Without him, the monster we have today wouldn’t exist.”

The original Godzilla film is a deeply powerful, mournful film that isn’t just about a big monster stomping on buildings. It is a serious reflection on Japan’s nuclear fears during the Cold War, which left it caught between heavily armed superpowers. Japan recognized that radioactive weapons of mass destruction being developed by the U.S. and U.S.S.R were threats that had the power to suddenly emerge and destroy its citizens and cities at any moment — like Godzilla. We should remember that in the film, it was hydrogen bomb testing in the Pacific that disturbed Godzilla, who then took revenge for his destroyed habitat by trampling Tokyo and blasting it with atomic rays…

Interestingly, in the novellas that I’ve translated, Kayama sometimes restored elements that the director and his assistants removed in the moviemaking process. Perhaps the most noticeable one is that in the scenario, Kayama wanted to begin with a long voice-over that talks directly about the horrors of atomic and hydrogen bombs. He envisioned that as the voice was speaking, the screen would show images from historical footage of Hiroshima and Nagasaki, as well as images of the tremendously unlucky (and ironically named) fishing vessel Lucky Dragon No. 5, which accidentally found itself in the path of an H-bomb test in the South Pacific in early 1954. (The horrific fate of this boat directly inspired the producer at Toho Studios to make the film.)

However, the director of the film, IshirÅ Honda, and his assistant who helped with the screenplay both felt that this kind of direct commentary was too direct for a popular film, and so they toned down the “protest” element in the story. It’s clear that they, like Kayama, wanted Godzilla to serve as a monstrous embodiment of radiation and all of the destruction that it could bring, but they also didn’t point fingers at the U.S. military which had dropped the atomic bombs on Hiroshima and Nagasaki and was busily developing even more horrifying weapons. After all, the U.S.S.R. had built its own arsenal, and so nuclear weapons no longer belonged to a single country — the threat was broader than that. Plus, protest films rarely attracted a big, popular following. So, Honda and his crew toned down the outspoken language and imagery, but there was still imagery left enough for viewers in 1954 to recall Hiroshima, Nagasaki, and the Lucky Dragon. Interestingly, when Kayama published the novellas, he included an author preface that talks about the anti-nuclear movement and encourages readers to read Godzilla and Godzilla Raids Again as his contribution to that movement.

Next the translator hopes to create an English translation of the novel The Luminous Fairies and Mothra.

But for this book, he struggled with how to assign a gender to Godzilla. “Some people feel very viscerally, like the people at Toho studios feel very strongly that Godzilla is an ‘it’ and not a ‘he’ or ‘she’ or ‘they,'” he told MovieWeb. “I kind of give my rationale for that choice in the afterward — Kayama thought about Godzilla as a stand-in for the nuclear bomb, and it was men in America who were developing the hydrogen bombs that frightened Japan so much in 1954. So maybe it’s perhaps not inappropriate to call Godzilla ‘he.'”

Read more of this story at Slashdot.



Source: Slashdot – Two ‘Godzilla’ Scifi Novellas Finally Get English Translations, Capturing 1950s Horror at Nuclear Weapons

'OK, So ChatGPT Just Debugged My Code. For Real'

ZDNet’s senior contributing editor also maintains software, and recently tested ChatGPT on two fixes for bugs reported by users, and a new piece of code to add a new feature, It’s a “real-world” coding test, “about pulling another customer support ticket off the stack and working through what made the user’s experience go south.” First…

please rewrite the following code to change it from allowing only integers to allowing dollars and cents (in other words, a decimal point and up to two digits after the decimal point).

ChatGPT responded by explaining a two-step fix, posting the modified code, and then explaining the changes. “I dropped ChatGPT’s code into my function, and it worked. Instead of about two-to-four hours of hair-pulling, it took about five minutes to come up with the prompt and get an answer from ChatGPT.”
Next up was reformatting an array. I like doing array code, but it’s also tedious. So, I once again tried ChatGPT. This time the result was a total failure. By the time I was done, I probably fed it 10 different prompts. Some responses looked promising, but when I tried to run the code, it errored out. Some code crashed; some code generated error codes. And some code ran, but didn’t do what I wanted. After about an hour, I gave up and went back to my normal technique of digging through GitHub and StackExchange to see if there were any examples of what I was trying to do, and then writing my own code.

Then he posted the code for a function handling a WordPress filter, along with the question: “I get the following error. Why?”
Within seconds, ChatGPT responded… Just as it suggested, I updated the fourth parameter of the add_filter() function to 2, and it worked!

ChatGPT took segments of code, analyzed those segments, and provided me with a diagnosis. To be clear, in order for it to make its recommendation, it needed to understand the internals of how WordPress handles hooks (that’s what the add_filter function does), and how that functionality translates to the behavior of the calling and the execution of lines of code. I have to mark that achievement as incredible — undeniably ‘living in the future’ incredible…

As a test, I also tried asking ChatGPT to diagnose my problem in a prompt where I didn’t include the handler line, and it wasn’t able to help. So, there are very definite limitations to what ChatGPT can do for debugging right now, in 2023…

Could I have fixed the bug on my own? Of course. I’ve never had a bug I couldn’t fix. But whether it would have taken two hours or two days (plus pizza, profanity, and lots of caffeine), while enduring many interruptions, that’s something I don’t know. I can tell you ChatGPT fixed it in minutes, saving me untold time and frustration.

The article does include a warning. “AI is essentially a black box, you’re not able to see what process the AI undertakes to come to its conclusions. As such, you’re not really able to check its work… If it turns out there is a problem in the AI-generated code, the cost and time it takes to fix may prove to be far greater than if a human coder had done the full task by hand.”

But it also ends with this prediction. “I see a very interesting future, where it will be possible to feed ChatGPT all 153,000 lines of code and ask it to tell you what to fix… I can definitely see a future where programmers can simply ask ChatGPT (or a Microsoft-branded equivalent) to find and fix bugs in entire projects.”

Read more of this story at Slashdot.



Source: Slashdot – ‘OK, So ChatGPT Just Debugged My Code. For Real’

Report Finds Few Open Source Projects are Actively Maintained

“A recent analysis accounting for nearly 1.2 million open source software projects primarily across four major ecosystems found that only about 11% of projects were actively maintained,” reports InfoWorld:

In its 9th Annual State of the Software Supply Chain report, published October 3, software supply chain management company Sonatype assessed 1,176,407 projects and reported an 18% decline this year in actively maintained projects. Just 11% of projects — 118,028 — were receiving active maintenance.

The report also found some new projects, unmaintained in 2022, now being maintained.

The four ecosystems included JavaScript, via NPM; Java, via the Maven project management tool; Python, via the PyPI package index; and .NET, through the NuGet gallery. Some Go projects also were included. According to the report, 18.6% of Java and JavaScript projects that were being maintained in 2022 are no longer being maintained today.
Other interesting findings:

Nearly 10% reported security breaches due to open source vulnerabilities in the past 12 months.
Use of AI and machine learning software components within corporate environments surged 135% over the last year.

Read more of this story at Slashdot.



Source: Slashdot – Report Finds Few Open Source Projects are Actively Maintained

T2 Linux Discovers (Now Patched) AMD Zen 4 Invalid Opcode Speculation Bug

T2 SDE is not just a Linux distribution, but “a flexible Open Source System Development Environment or Distribution Build Kit,” according to a 2022 announcement of its support for 25 CPU architectures, variants, and C libraries. (“Others might even name it Meta Distribution. T2 allows the creation of custom distributions with state of the art technology, up-to-date packages and integrated support for cross compilation.”)

And while working on it, Berlin-based T2 Linux developer René Rebe (long-time Slashdot reader ReneR) discovered random illegal instruction speculation on AMD Ryzen 7000-Series and Epyc Zen 4 CPU.

ReneR writes:

Merged to Linux 6.6 Git is a fix for the bug now known at AMD as Erratum 1485.

The discovery was possible through continued high CPU load cross-compiling the T2 Linux distribution with support for all CPU architectures from ARM, MIPS, PowerPC, RISC-V to x86 (and more) for 33 build variants. With sustained high CPU load and various instruction sequences being compiled, pseudo random illegal instruction errors were observed and subsequently analyzed.

ExactCODE Research GmbH CTO René Rebe is thrilled that working with AMD engineers lead to a timely mitigation to increase system stability of the still new and highest performance Zen4 platform.

“I found real-world code that might be similar or actually trigger the same bugs in the CPU that are also used for all the Spectre Meltdown and other side-channel security vulnerability mitigations,” Rebe says in a video announcement on YouTube.

It took Rebe a tremendous amount of research, and he says now that “all the excessive work changed my mind. Mitigations equals considered harmful… If you want stable, reliable computational results — no, you can’t do this. Because as Spectre Meltdown and all the other security issues have proven, the CPUs are nowadays as complex as complex software systems…”

Read more of this story at Slashdot.



Source: Slashdot – T2 Linux Discovers (Now Patched) AMD Zen 4 Invalid Opcode Speculation Bug

To 'Evolve' Windows Authentication, Microsoft Wants to Eventually Disable NTLM in Windows 11

An anonymous reader shared this report from Neowin:

The various versions of Windows have used Kerberos as its main authentication protocol for over 20 years. However, in certain circumstances, the OS has to use another method, NTLM (NT LAN Manager). Today, Microsoft announced that it is expanding the use of Kerberos, with the plan to eventually ditch the use of NTLM altogether.

In a blog post, Microsoft stated that NTLM continues to be used by some businesses and organizations for Windows authentication because it “doesn’t require local network connection to a Domain Controller.” It also is “the only protocol supported when using local accounts” and it “works when you don’t know who the target server is.” Microsoft states:
These benefits have led to some applications and services hardcoding the use of NTLM instead of trying to use other, more modern authentication protocols like Kerberos. Kerberos provides better security guarantees and is more extensible than NTLM, which is why it is now a preferred default protocol in Windows.
The problem is that while businesses can turn off NTLM for authentication, those hardwired apps and services could experience issues. That’s why Microsoft has added two new authentication features to Kerberos.

Microsoft’s blog post calls it “the evolution of Windows authentication,” arguing that “As Windows evolves to meet the needs of our ever-changing world, the way we protect users must also evolve to address modern security challenges…” So, “our team is building new features for Windows 11.”

Initial and Pass Through Authentication Using Kerberos, or IAKerb, “a public extension to the industry standard Kerberos protocol that allows a client without line-of-sight to a Domain Controller to authenticate through a server that does have line-of-sight.”
A local Key Distribution Center (KDC) for Kerberos, “built on top of the local machine’s Security Account Manager so remote authentication of local user accounts can be done using Kerberos.”
“We are also fixing hard-coded instances of NTLM built into existing Windows components… shifting these components to use the Negotiate protocol so that Kerberos can be used instead of NTLM… NTLM will continue to be available as a fallback to maintain existing compatibility.”
“We are also introducing improved NTLM auditing and management functionality to give your organization more insight into your NTLM usage and better control for removing it.”
“Reducing the use of NTLM will ultimately culminate in it being disabled in Windows 11. We are taking a data-driven approach and monitoring reductions in NTLM usage to determine when it will be safe to disable.”

Read more of this story at Slashdot.



Source: Slashdot – To ‘Evolve’ Windows Authentication, Microsoft Wants to Eventually Disable NTLM in Windows 11

GNU's 40th Anniversary: the FSF's Meeting with Old and New Friends

Devin Ulibarri, the Free Software Foundation’s outreach and communications coordinator, writes up an event he describes as meeting with some old and new friends:
On Sunday, October 1, the Free Software Foundation (FSF) hosted a hackday to celebrate the fortieth anniversary of the GNU Project. Folks came from both near and far to join in the festivities at FSF headquarters, Boston, MA… Sadi moma bela loza, the Bulgarian melody from which The Free Software Song is set, could be heard faintly playing in a nearby room, its distinctive odd-metered tune performed by a fully-liberated X200…

All in all, the event succeeded in our goal of welcoming both long-time members as well as introducing new people to free software and our cause. A few college students from local universities, for example, were able to ask questions seeking to better understand free software licenses and GNU Project history. We received multiple requests from attendees to host similar events again in the near future. And one parent, whose son played NetHack at the event, reported that, the following morning, his son asked to go to the FSF office after school to play it again. When playing he mastered the “vi” movement keys immediately. We hope they serve him well…!

Happy hacking and please stay tuned for more FSF-hosted events, including LibrePlanet 2024!

Read more of this story at Slashdot.



Source: Slashdot – GNU’s 40th Anniversary: the FSF’s Meeting with Old and New Friends

Climate-Driven Heat Extremes May Make Earth Too Hot for Billions of Humans

An anonymous reader shared this report from Phys.org:
If global temperatures increase by 1 degrees Celsius (C) or more than current levels, each year billions of people will be exposed to heat and humidity so extreme they will be unable to naturally cool themselves, according to interdisciplinary research from the Penn State College of Health and Human Development, Purdue University College of Sciences and Purdue Institute for a Sustainable Future… Humans can only withstand certain combinations of heat and humidity before their bodies begin to experience heat-related health problems, such as heat stroke or heart attack. As climate change pushes temperatures higher around the world, billions of people could be pushed beyond these limits…

Results of the study indicate that if global temperatures increase by 2 degreesC above pre-industrial levels, the 2.2 billion residents of Pakistan and India’s Indus River Valley, the one billion people living in eastern China and the 800 million residents of sub-Saharan Africa will annually experience many hours of heat that surpass human tolerance… Troublingly, researchers said, these regions are also in lower-to-middle income nations, so many of the affected people may not have access to air conditioning or any effective way to mitigate the negative health effects of the heat.

Read more of this story at Slashdot.



Source: Slashdot – Climate-Driven Heat Extremes May Make Earth Too Hot for Billions of Humans

Climate-Driven Heat Extremes May Make Earth to Hot for Billions of Humans

An anonymous reader shared this report from Phys.org:
If global temperatures increase by 1 degrees Celsius (C) or more than current levels, each year billions of people will be exposed to heat and humidity so extreme they will be unable to naturally cool themselves, according to interdisciplinary research from the Penn State College of Health and Human Development, Purdue University College of Sciences and Purdue Institute for a Sustainable Future… Humans can only withstand certain combinations of heat and humidity before their bodies begin to experience heat-related health problems, such as heat stroke or heart attack. As climate change pushes temperatures higher around the world, billions of people could be pushed beyond these limits…

Results of the study indicate that if global temperatures increase by 2 degreesC above pre-industrial levels, the 2.2 billion residents of Pakistan and India’s Indus River Valley, the one billion people living in eastern China and the 800 million residents of sub-Saharan Africa will annually experience many hours of heat that surpass human tolerance… Troublingly, researchers said, these regions are also in lower-to-middle income nations, so many of the affected people may not have access to air conditioning or any effective way to mitigate the negative health effects of the heat.

Read more of this story at Slashdot.



Source: Slashdot – Climate-Driven Heat Extremes May Make Earth to Hot for Billions of Humans