iPhone Exploit DarkSword Steals Data In Minutes With No Trace

BrianFagioli writes: A new iOS exploit chain called DarkSword shows how attackers can break into certain iPhones, grab sensitive data like messages, credentials, and even crypto wallets, and then disappear without leaving obvious traces. It targets older iOS 18 builds using Safari and WebGPU flaws to escape Apple’s sandbox, which is pretty wild on its own, but what really stands out is how fast it works and how financially motivated these attacks have become. The takeaway is simple but important, update your iPhone ASAP and don’t assume mobile devices are somehow safer than desktops anymore.


Read more of this story at Slashdot.

Btrfs Performance From Linux 6.12 To Linux 7.0 Shows Regressions

Last week I provided a look at the EXT4 and XFS performance from Linux 6.12 LTS through Linux 7.0 in its current development form. As mentioned in that article and as requested by many Phoronix readers, benchmarks have since wrapped up looking at how the Btrfs copy-on-write file-system performance has evolved since that late 2024 period and all major Linux kernel releases past that Long Term Support version.

Pardoned Nikola Fraudster Is Raising Funds For AI-Powered Planes He Claims Will Reshape Aviation

Trevor Milton, the pardoned founder of Nikola, is seeking $1 billion for AI-powered autonomous planes through a new venture called SyberJet. The Tech Buzz reports: “Autonomous planes will be 10 times harder than Nikola ever was,” Milton told the Wall Street Journal in a rare interview. It’s a remarkable admission from someone whose last venture collapsed under the weight of securities fraud charges after he overstated the capabilities of Nikola’s electric and hydrogen-powered trucks. Milton was convicted in 2022 on three counts of fraud for misleading investors about Nikola’s technology, including staging a video that made it appear a truck prototype was driving under its own power when it was actually rolling downhill. The conviction sent him to prison and turned Nikola into a cautionary tale about startup hype culture. His pardon, which came earlier this year, sparked immediate controversy in venture capital and legal circles.

Now he’s betting that AI and autonomous aviation represent a clean slate. SyberJet appears focused on developing artificial intelligence systems capable of piloting aircraft without human intervention – a technical challenge that’s stumped even well-funded players like Boeing and Airbus. […] Milton hasn’t detailed SyberJet’s technical approach or revealed who’s backing the venture. The company’s website remains sparse, and aviation industry sources say they haven’t seen concrete demonstrations of the technology. That opacity echoes the early days of Nikola, when Milton made sweeping claims about revolutionary trucks that existed mostly in renderings and promotional videos. If you need a quick refresher on the Nikola saga, here’s a timeline of key events:

June, 2016: Nikola Motor Receives Over 7,000 Preorders Worth Over $2.3 Billion For Its Electric Truck
December, 2016: Nikola Motor Company Reveals Hydrogen Fuel Cell Truck With Range of 1,200 Miles
February, 2020: Nikola Motors Unveils Hybrid Fuel-Cell Concept Truck With 600-Mile Range
June, 2020: Nikola Founder Exaggerated the Capability of His Debut Truck
September, 2020: Nikola Motors Accused of Massive Fraud, Ocean of Lies
September, 2020: Nikola Admits Prototype Was Rolling Downhill In Promo Video
September, 2020: Nikola Founder Trevor Milton Steps Down as Chairman in Battle With Short Seller
October, 2020: Nikola Stock Falls 14 Percent After CEO Downplays Badger Truck Plans
November, 2020: Nikola Stock Plunges As Company Cancels Badger Pickup Truck
July, 2021: Nikola Founder Trevor Milton Indicted on Three Counts of Fraud
December, 2021: EV Startup Nikola Agrees To $125 Million Settlement
September, 2022: Nikola Founder Lied To Investors About Tech, Prosecutor Says in Fraud Trial


Read more of this story at Slashdot.

FBI Is Buying Location Data To Track US Citizens, Director Confirms

An anonymous reader quotes a report from TechCrunch: The FBI has resumed purchasing reams of Americans’ data and location histories to aid federal investigations, the agency’s director, Kash Patel, testified to lawmakers on Wednesday. This is the first time since 2023 that the FBI has confirmed it was buying access to people’s data collected from data brokers, who source much of their information — including location data — from ordinary consumer phone apps and games, per Politico. At the time, then-FBI director Christopher Wray told senators that the agency had bought access to people’s location data in the past but that it was not actively purchasing it.

When asked by U.S. Senator Ron Wyden, Democrat of Oregon, if the FBI would commit to not buying Americans’ location data, Patel said that the agency “uses all tools … to do our mission.” “We do purchase commercially available information that is consistent with the Constitution and the laws under the Electronic Communications Privacy Act — and it has led to some valuable intelligence for us,” Patel testified Wednesday. Wyden said buying information on Americans without obtaining a warrant was an “outrageous end-run around the Fourth Amendment,” referring to the constitutional law that protects people in America from device searches and data seizures.


Read more of this story at Slashdot.

The FBI confirms it’s buying Americans’ location data

During a Senate hearing, FBI Director Kash Patel confirmed that his agency has bought information that could be used to track individuals’ movement and location. “We do purchase commercially available information that’s consistent with the Constitution and the laws under the Electronic Communications Privacy Act, and it has led to some valuable intelligence for us,” he said. 

Law enforcement is required to obtain a warrant in order to get location data from cell service providers following the Carpenter v United States ruling from 2018. But why bother with all that hassle when they can just buy the information from the open market?

“Doing that without a warrant is an outrageous end run around the Fourth Amendment, it’s particularly dangerous given the use of artificial intelligence to comb through massive amounts of private information,” Sen. Ron Wyden, (D-Ore.) said during the Intelligence Committee hearing. Wyden is one of several lawmakers pushing for an overhaul of when and how the government can obtain citizens’ personal information. 

It’s an overhaul that’s badly needed. Patel already has a history of dubious use of government resources, such as ordering SWAT protections for his girlfriend and somehow horning in on men’s hockey victory celebrations at the recent winter Olympics, so one would hope he’s not also stretching the limits of the few privacy protections that do exist. Then outside the FBI, we have the Department of Homeland Security being sued for illegally tracking immigration raid protestors and the Pentagon’s labeling of Anthropic as a supply-chain risk after the AI company refused to let its products be used for mass surveillance of Americans.

This article originally appeared on Engadget at https://www.engadget.com/big-tech/the-fbi-confirms-its-buying-americans-location-data-230835196.html?src=rss

A Meta agentic AI sparked a security incident by acting without permission

The Information reported that an AI agent within Meta took unauthorized action that led to an employee creating a security breach at the social company last week. According to the publication, an employee used an in-house agentic AI to analyze a query from a second employee on an internal forum. The AI agent posted a response to the second employee with advice even though the first person did not direct it to do so. 

The second employee took the agent’s recommended action, sparking a domino effect that led to some engineers having access to Meta systems that they shouldn’t have permission to see. A representative from the company confirmed the incident to The Information and said that “no user data was mishandled.” Meta’s internal report indicated that there were unspecified additional issues that led to the breach. A source said that there was no evidence that anyone took advantage of the sudden access or that the data was made public during the two hours when the security breach was active. However, that may be the result of dumb luck more than anything else. 

Many tech leaders and companies have touted the benefits of artificial intelligence, this is just the latest incident where human employees have lost control over an AI agent. Amazon Web Services experienced a 13-hour outage earlier this year that also (apparently coincidentally) involved its Kiro agentic AI coding tool. Moltbook, the social network for AI agents recently acquired by Meta, had a security flaw that exposed user information thanks to an oversight in the vibe-coded platform.

This article originally appeared on Engadget at https://www.engadget.com/ai/a-meta-agentic-ai-sparked-a-security-incident-by-acting-without-permission-224013384.html?src=rss

Kagi Translate’s AI answers the question “What would horny Margaret Thatcher say?”

If you’ve been using the Internet for any length of time, you’ve probably used a tool like Google Translate to convert webpages or snippets of text to and from languages ranging from Uzbek to Esperanto. But what if you want to translate into more esoteric “languages” like “LinkedIn Speak,” “Gen Z slang,” or “horny Margaret Thatcher”?

This week, many people across the Internet have been bemused to find that the AI-powered Kagi Translate can perform these and countless other unlikely “translation” tasks. And while the collective discovery highlights the playful, creative side of large language models, it also exposes the risks of letting users play with generalized LLM tools.

What is a “language,” really?

While you might know Kagi best as the paid competitor to Google’s ever-worsening search product, the company launched its Kagi Translate tool back in 2024, saying at the time that it was a “simply better” competitor to tools like Google Translate and DeepL. At launch, the company said Kagi Translate “uses a combination of LLMs, selecting and optimizing the best output for each task,” a fact that “can occasionally lead to quirks that we’re actively working to resolve.”

Read full article

Comments

Google Is Trying To Make ‘Vibe Design’ Happen

With today’s latest Stitch updates, Google is trying to make “vibe design” happen, reports The Verge’s Jay Peters. The AI-native design platform encourages users to describe goals, feelings, or inspiration in “natural language,” rather than starting with traditional blueprints.

In a blog post, Google Labs Product Manager Rustin Banks says that Stitch can turn those inputs into interactive prototypes, automatically map user flows, and support real-time iteration. It introduces voice capabilities that allow users to “speak directly to [the] canvas” for feedback or changes. Tools like DESIGN.md also help users create reusable design systems across various projects.


Read more of this story at Slashdot.

Meta Has Announced the End of the Metaverse, and I’m a Little Sad

In a post on its community blog today, Meta announced the timeline for the shutdown of Horizon Worlds for VR users. The Horizon Worlds app and related Events will disappear from Quest headsets by March 31, and VR users will no longer be able to use the social hub at all after June 15, 2026. Horizon Worlds will continue, Meta says, but only for mobile users.

“We are separating the two platforms so each can grow with greater focus, and the Horizon Worlds platform will become a mobile-only experience,” the company explained in the post. “This separation will extend across our ecosystem, including our mobile app.”

Horizon Worlds launched in 2021 as a VR-only platform where users could interact in a virtual space, but it was beset by early tech and design limitations (most famously, that user’s Metaverse avatars didn’t have legs). Still, at the time, the company hoped the Metaverse would ultimately attract over a billion users, and Horizon Worlds was seen as an integral part of it. Obviously, that didn’t happen—at its peak, Horizon Worlds‘ monthly user count was only around 200,000.

What happens to users’ digital purchases and creations?

Long-time Horizon Worlds users are surely asking what will happen to their in-world digital items. The good news is that your Worlds-specific purchases and creations won’t instantly be wiped; Meta says your digital items or currency will remain tied to your account. The bad news is you’ll only be able to access them through the mobile app in “mobile-optimized” worlds, so if a creator hasn’t updated their world for mobile, your items there may effectively become inaccessible.

After June 15, you will no longer be able to build or edit worlds in VR. Meta is encouraging the use of their web-based tools, but the immersive building experience that defined the platform is officially ending.

Meta is shifting focus from VR to AI

The change is part of an overall strategy shift from Meta, which will be funneling more resources into AI and smart glasses. In January, Meta shuttered its AAA VR game development companies, stopped updating its first-party subscription-based fitness app Supernatural, and laid off 1,500 people from its VR-division Reality Labs.

Even given all that, though, Meta says it’s not pulling out of the VR game altogether. In a blog post on Feb. 19, Samantha Ryan, the vice president of content for Reality Labs, promised Meta was “doubling down on VR,” but is nevertheless moving away from first-party development to focus on hardware, supporting third-party developers, and adding features to the Quest itself. “It’s no secret that we’re still in the hardware game,” Ryan wrote. “We have a robust roadmap of future VR headsets that will be tailored to different audience segments as the market grows and matures.”

The kinda sad end of Horizon Worlds

I poked around Horizon Worlds for when I got my Quest 3 headset a few years ago. “Oh, I can decorate a little house or meet people” I thought; then I logged out and never went back—I have a real house I can decorate, and I use VR because I don’t like people. But a few months ago, when it became clear that Meta was pulling away from the VR space it created, I got curious, strapped on the face computer, dusted off the old avatar, and went on a Horizon Worlds safari. I’m glad I did.

Going to Horizon Worlds feels eerie. It’s like visiting someone else’s dreams—specifically Mark Zuckerberg’s dream and the sub-dreams of Worlds’ volunteer creators. “The defining quality of the metaverse will be a feeling of presence…Feeling truly present with another person is the ultimate dream of social technology. That is why we are focused on building this,” Mark Zuckerberg said at Connect 2021, and he believed it enough to spend billions (maybe as much $25 billion) on his dream word, where nothing ever gets dusty and everyone is an endlessly smiling cartoon ready to funnel actual money to The Overseer for the latest digital sneakers.

Then there are the thousands of creators who spent countless hours building more than 10,000 worlds you can visit—nightclubs, basketball stadiums, restaurants, etc., though they’re almost all empty. As flashy as it looks, no one is lined up at the digital nightclub’s velvet rope. Horizon Worlds is a gigantic dead mall, a capitalist cathedral with no congregation, the ultimate liminal space.

A vibe that strange is enough reason to visit, but there’s a genuine side to Worlds too. I eventually found a world where people conquered the unsettling nature of VR and created a real community. The Soapstone Comedy club is not huge, but it’s thriving, and it’s one of many spots where small groups have gathered in Horizon Worlds. There are conversation pits people use to meet up, nightly planned comedy shows, and a collection of friendly regulars to chat with. It grew from the ground up, too, just as Zuck predicted. Okay, the comedy is rarely funny. But the people are good.

Some Soapstoners are housebound and handicapped, and VR gives them opportunities the real world denies them. Some seem like weirdos who probably have trouble finding real life friends who can’t mute them at will. And some are regular people blowing off some steam after work. I’m sad for all of them—a comedy club on a phone screen just isn’t the same. So before the digital wrecking ball takes down the hang-out spots of all Horizon Worlds‘ remaining residents, you should stop in and say hi. There’s not much time left.