The Prossimo project (funded by the nonprofit Internet Security Research Group) seeks to “move the Internet’s security-sensitive software infrastructure to memory safe code.” Two years ago the Prossimo project made an announcement: they’d begun work on rav1d, a safer high performance AV1 decoder written in Rust, according to a new update:

We partnered with Immunant to do the engineering work. By September of 2024 rav1d was basically complete and we learned a lot during the process. Today rav1d works well — it passes all the same tests as the dav1d decoder it is based on, which is written in C. It’s possible to build and run Chromium with it.
There’s just one problem — it’s not quite as fast as the C version…

Our Rust-based rav1d decoder is currently about 5% slower than the C-based dav1d decoder (the exact amount differs a bit depending on the benchmark, input, and platform). This is enough of a difference to be a problem for potential adopters, and, frankly, it just bothers us. The development team worked hard to get it to performance parity. We brought in a couple of other contractors who have experience with optimizing things like this. We wrote about the optimization work we did. However, we were still unable to get to performance parity and, to be frank again, we aren’t really sure what to do next.

After racking our brains for options, we decided to offer a bounty pool of $20,000 for getting rav1d to performance parity with dav1d. Hopefully folks out there can help get rav1d performance advanced to where it needs to be, and ideally we and the Rust community will also learn something about how Rust performance stacks up against C.

This drew a snarky response from FFmpeg, the framework that powers audio and video processing for everyone from VLC to Twitch. “Rust is so good you can get paid $20k to make it as fast as C,” they posted to their 68,300 followers on X.com.

Thanks to the It’s FOSS blog for spotting the announcement.

Read more of this story at Slashdot.

The only nuclear power plant still operating in Taiwan was shut down on Saturday, reports Japan’s public media organization NHK:

People in Taiwan have grown increasingly concerned about nuclear safety in recent years, especially after the 2011 nuclear disaster in Fukushima, northeastern Japan… Taiwan’s energy authorities plan to focus more on thermoelectricity fueled by liquefied natural gas. They aim to source 20 percent of all electricity from renewables such as wind and solar power next year.
AFP notes that nuclear power once provided more than half of Taiwan’s energy, with three plants operating six reactors across an island that’s 394 km (245 mi) long and 144 km (89 mi) wide.

So the new move to close Taiwan’s last reactor is “fuelling concerns over the self-ruled island’s reliance on imported energy and vulnerability to a Chinese blockade,” — though Taiwan’s president insists the missing nucelar energy can be replace by new units in LNG and coal-fired plants:

The island, which targets net-zero emissions by 2050, depends almost entirely on imported fossil fuel to power its homes, factories and critical semiconductor chip industry. President Lai Ching-te’s Democratic Progressive Party has long vowed to phase out nuclear power, while the main opposition Kuomintang (KMT) party says continued supply is needed for energy security… [The Ma’anshan Nuclear Power Plant] has operated for 40 years in a region popular with tourists and which is now dotted with wind turbines and solar panels. More renewable energy is planned at the site, where state-owned Taipower plans to build a solar power station capable of supplying an estimated 15,000 households annually. But while nuclear only accounted for 4.2 percent of Taiwan’s power supply last year, some fear Ma’anshan’s closure risks an energy crunch….

Most of Taiwan’s power is fossil fuel-based, with liquefied natural gas (LNG) accounting for 42.4 percent and coal 39.3 percent last year. Renewable energy made up 11.6 percent, well short of the government’s target of 20 percent by 2025. Solar has faced opposition from communities worried about panels occupying valuable land, while rules requiring locally made parts in wind turbines have slowed their deployment.

Taiwan’s break-up with nuclear is at odds with global and regional trends. Even Japan aims for nuclear to account for 20-22 percent of its electricity by 2030, up from well under 10 percent now. And nuclear power became South Korea’s largest source of electricity in 2024, accounting for 31.7 percent of the country’s total power generation, and reaching its highest level in 18 years, according to government data…. And Lai acknowledged recently he would not rule out a return to nuclear one day. “Whether or not we will use nuclear power in the future depends on three foundations which include nuclear safety, a solution to nuclear waste, and successful social dialogue,” he said.

DW notes there’s over 100,000 barrels of nuclear waste on Taiwan’s easternmost island “despite multiple attempts to remove them… At one point, Taiwan signed a deal with North Korea so they could send barrels of nuclear waste to store there, but it did not work out due to a lack of storage facilities in the North and strong opposition from South Korea…

“Many countries across the world have similar problems and are scrambling to identify sites for a permanent underground repository for nuclear fuel. Finland has become the world’s first nation to build one.”

Thanks to long-time Slashdot reader AmiMoJo for sharing the news.

Read more of this story at Slashdot.

Activision announced on the official X account of its Call of Duty: Warzone Mobile title that it would sunset updates and delist it from the Google Play store and the App Store. Activision is giving players a last chance to download the departing game, which will be removed by the end of today.

According to Activision, Call of Duty: Warzone Mobile “has not met our expectations with mobile first players like it has with PC and console audiences.” Considering the game’s troubled launch, this discontinuation doesn’t come as a surprise to its player base. Activision’s mobile adaptation of its battle royale title launched in March 2024, which was two years after it was first announced. Looking at the overall timeline of Call of Duty: Warzone Mobile, fans spent more than two years waiting for its release, only to get roughly a year’s worth of gameplay that had poor optimization and serious battery life demands.

If you install Call of Duty: Warzone Mobile before May 19, 2025, you’ll still have access to the game with “continued cross-progression of shared inventories using existing content,” Activision wrote on the X post. The publisher added that servers will stay online and that it’d notify players of any changes. For diehard fans, that’s not much of a guarantee that the Warzone Mobile servers will remain active in perpetuity.

To incentivize existing players to migrate to its other titles, Activision said that you can log into Call of Duty: Mobile with your Activision account to claim two times amount of COD points you had in your Warzone Mobile account, along with “other awesome rewards.” However, Activision added that any unused COD points and whatever you have already purchased in Call of Duty: Warzone Mobile can’t be refunded.

This article originally appeared on Engadget at https://www.engadget.com/gaming/activision-is-abandoning-call-of-duty-warzone-mobile-161023019.html?src=rss

During this year’s annual Pwn2Own contest, two researchers from Palo Alto Networks demonstrated an out-of-bounds write vulnerability in Mozilla Firefox, reports Cyber Security News, “earning $50,000 and 5 Master of Pwn points.” And the next day another participant used an integer overflow to exploit Mozilla Firefox (renderer only).

But Mozilla’s security blog reminds users that a sandbox escape would be required to break out from a tab to gain wider system access “due to Firefox’s robust security architecture” — and that “neither participating group was able to escape our sandbox…”

We have verbal confirmation that this is attributed to the recent architectural improvements to our Firefox sandbox which have neutered a wide range of such attacks. This continues to build confidence in Firefox’s strong security posture.

Even though neither attack could escape their sandbox, “Out of abundance of caution, we just released new Firefox versions… all within the same day of the second exploit announcement.” (Last year Mozilla responded to an exploitable security bug within 21 hours, they point out, even winning an award as the fastest to patch.)

The new updated versions are Firefox 138.0.4, Firefox ESR 128.10.1, Firefox ESR 115.23.1 and Firefox for Android. “Despite the limited impact of these attacks, all users and administrators are advised to update Firefox as soon as possible….”

To review and fix the reported exploits a diverse team of people from all across the world and in various roles (engineering, QA, release management, security and many more) rushed to work. We tested and released a new version of Firefox for all of our supported platforms, operating systems, and configurations with rapid speed….
Our work does not end here. We continue to use opportunities like this to improve our incident response. We will also continue to study the reports to identify new hardening features and security improvements to keep all of our Firefox users across the globe protected.

Read more of this story at Slashdot.

It’s a nonprofit that’s provide hosting for the Linux Foundation, the Apache Software Foundation, Drupal, Firefox, and 160 other projects — delivering nearly 430 terabytes of information every month. (It’s currently hosting Debian, Fedora, and Gentoo Linux.) But hosting only provides about 20% of its income, with the rest coming from individual and corporate donors (including Google and IBM). “Over the past several years, we have been operating at a deficit due to a decline in corporate donations,” the Open Source Lab’s director announced in late April.

It’s part of the CS/electrical engineering department at Oregon State University, and while the department “has generously filled this gap, recent changes in university funding makes our current funding model no longer sustainable. Unless we secure $250,000 in committed funds, the OSL will shut down later this year.”

But “Thankfully, the call for support worked, paving the way for the OSU Open Source Lab to look ahead, into what the future holds for them,” reports the blog It’s FOSS.

“Following our OSL Future post, the community response has been incredible!” posted director Lance Albertson. “Thanks to your amazing support, our team is funded for the next year. This is a huge relief and lets us focus on building a truly self-sustaining OSL.”

To get there, we’re tackling two big interconnected goals:

1. Finding a new, cost-effective physical home for our core infrastructure, ideally with more modern hardware.
2. Securing multi-year funding commitments to cover all our operations, including potential new infrastructure costs and hardware refreshes.

Our current data center is over 20 years old and needs to be replaced soon. With Oregon State University evaluating the future of this facility, it’s very likely we’ll need to relocate in the near future. While migrating to the State of Oregon’s data center is one option, it comes with significant new costs. This makes finding free or very low-cost hosting (ideally between Eugene and Portland for ~13-20 racks) a huge opportunity for our long-term sustainability. More power-efficient hardware would also help us shrink our footprint.

Speaking of hardware, refreshing some of our older gear during a move would be a game-changer. We don’t need brand new, but even a few-generations-old refurbished systems would boost performance and efficiency. (Huge thanks to the Yocto Project and Intel for a recent hardware donation that showed just how impactful this is!) The dream? A data center partner donating space and cycled-out hardware. Our overall infrastructure strategy is flexible. We’re enhancing our OpenStack/Ceph platforms and exploring public cloud credits and other donated compute capacity. But whatever the resource, it needs to fit our goals and come with multi-year commitments for stability. And, a physical space still offers unique value, especially the invaluable hands-on data center experience for our students….
[O]ur big focus this next year is locking in ongoing support — think annualized pledges, different kinds of regular income, and other recurring help. This is vital, especially with potential new data center costs and hardware needs. Getting this right means we can stop worrying about short-term funding and plan for the future: investing in our tech and people, growing our awesome student programs, and serving the FOSS community. We’re looking for partners, big and small, who get why foundational open source infrastructure matters and want to help us build this sustainable future together.

The It’s FOSS blog adds that “With these prerequisites in place, the OSUOSL intends to expand their student program, strengthen their managed services portfolio for open source projects, introduce modern tooling like Kubernetes and Terraform, and encourage more community volunteers to actively contribute.”

Thanks to long-time Slashdot reader I’m just joshin for suggesting the story.

Read more of this story at Slashdot.

A new YouTube tool will let advertisers use Google’s Gemini AI model to target ads to viewers when they’re most engaged, reports CNBC:

Peak Points has the potential to enable more impressions and a higher click-through rate on YouTube, a primary metric that determines how creators earn money on the video platform… Peak Points is currently in a pilot program and will be rolling out over the rest of the year.

The product “aims to benefit advertisers by using a tactic that aims to grab users’ attention right when they’re most invested in the content,” reports TechCrunch:

This approach appears to be similar to a strategy called emotion-based targeting, where advertisers place ads that align with the emotions evoked by the video. It’s believed that when viewers experience heightened emotional states, it leads to better recall of the ads. However, viewers may find these interruptions frustrating, especially when they’re deeply engaged in the emotional arc of a video and want the ad to be over quickly to resume watching.

In related news, YouTube announced another ad format that may be more appealing to users. The platform debuted a shoppable product feed where users can browse and purchase items during an ad.

Read more of this story at Slashdot.

Last August a Microsoft security update broke dual-booting Windows 11 and Linux systems, remembers the blog Neowin. Distros like Debian, Ubuntu, Linux Mint, Zorin OS, and Puppy Linux were all affected, and “a couple of days later, Microsoft provided a slightly lengthy workaround that involved tweaking around with policies and the Registry in order to fix the problem.”

The update “was meant to address a GRUB bootloader vulnerability that allowed malicious actors to bypass Secure Boot’s safety mechanisms,” notes the It’s FOSS blog. “Luckily, there’s now a proper fix for this, as Microsoft has quietly released a new patch on May 13, 2025, addressing the issue nine months after it was first reported… Meanwhile, many dual-boot users were left with borked setups, having to use workarounds or disable Secure Boot altogether.”

Read more of this story at Slashdot.