Torizon and Texas Instruments have announced a collaboration aimed at simplifying cybersecurity compliance and development for industrial and medical embedded systems. The partnership integrates Torizon’s software platform with TI’s Arm-based, Linux-capable processors, addressing increasing security requirements such as those outlined in the EU Cyber Resilience Act.
Category Archives: Unfiltered RSS
Zen and the Art of Microcode Hacking (Google Bug Hunters)
The Google Bug Hunters blog has a
detailed description of how a vulnerability in AMD’s microcode-patching
functionality was discovered and exploited; the authors have also released
a set of tools to assist with this kind of research in the future.
detailed description of how a vulnerability in AMD’s microcode-patching
functionality was discovered and exploited; the authors have also released
a set of tools to assist with this kind of research in the future.
Secure hash functions are designed in such a way that there is no
secret key, and there is no way to use knowledge of the
intermediate state in order to generate a collision. However, CMAC
was not designed as a hash function, and therefore it is a weak
hash function against an adversary who has the key. Remember that
every AMD Zen CPU has to have the same AES-CMAC key in order to
successfully calculate the hash of the AMD public key and the
microcode patch contents. Therefore, the key only needs to be
revealed from a single CPU in order to compromise all other CPUs
using the same key. This opens up the potential for hardware
attacks (e.g., reading the key from ROM with a scanning electron
microscope), side-channel attacks (e.g., using Correlation Power
Analysis to leak the key during validation), or other software or
hardware attacks that can somehow reveal the key. In summary, it is
a safe assumption that such a key will not remain secret forever.
Europe on Alert Over Suspected Sabotage of Undersea Cables
European nations have heightened security after a series of suspected sabotage attacks on submarine infrastructure in the Baltic Sea, with officials increasingly pointing to Russia as the likely culprit.
Finnish authorities detained the tanker Eagle S in December after it allegedly damaged three undersea fiber-optic connections with Estonia and one with Germany. The vessel, carrying Russian oil as part of a “shadow fleet” evading sanctions, made suspicious course changes while crossing cable routes.
In November, two more submarine cables in the Baltic were damaged, with investigations focusing on Chinese-owned cargo ship Yi Peng 3, which reduced speed near the cables and turned off its transponder. NATO launched Baltic Sentry in January to enhance surveillance, deploying ships and naval drones off Estonia’s coast. The alliance also established a coordination cell following the 2022 Nord Stream pipeline sabotage.
Russia has denied involvement, accusing NATO of using “myths” to increase its Baltic presence.
Read more of this story at Slashdot.
More AI Is Coming to Your Google Search Results
When Google rolled out AI Overviews for Search last year, it didn’t go over so well. The company’s AI made some pretty massive mistakes with its results, many of which went viral. In response, Google pulled back the feature, reworked it, and slowly reintroduced it to the masses. You’ve probably noticed.
This month, Google is continuing its work of adding AI to Search—whether you want it or not. First, it’s rolling out a new version of AI Overviews that’s powered by Gemini 2.0, the company’s latest AI model. Google says this update will help with “harder questions,” like coding, math, and multimodal (prompts using different types of media) requests. In addition, teens can now see AI Overviews, as can users without a Google Account. Yippee.
Introducing AI Mode
But the larger AI announcement from Google is something the company is currently testing: AI Mode. See, Google says that they’ve heard from “power users” that they are looking for AI responses from more of their Google searches. In response, AI Mode lets you ask the AI multi-part questions, that offers more advanced reasoning, thinking, and multimodal functions.
On paper, it sounds like a more complex AI Overview, but it’s a bit more nuanced than that. AI Mode is its own tab in Search, that turns the UI into more of what you’d expect from ChatGPT or Gemini. Google says this experience is supposed to combine what would’ve taken multiple searches into one: You ask the AI something complicated, it reasons through it (showing its thinking along the way) and delivers a full answer with multiple results, claims, and summaries—citing its sources for each of its generations.
Credit: Google
Google says AI Mode uses a “query fan-out” technique to generate its results. Essentially, it searches for multiple related things at the same time, combining those results together into the response you see at the end. AI Mode pulls from many different data points for its results, including web results, Google’s Knowledge Graph, and shopping data.
Google uses the following query to demonstrate this approach: “What’s the difference in sleep tracking features between a smart ring, smartwatch and tracking mat?” AI Mode supposedly takes that multi-part question, develops a multistep “plan” to conduct a number of searches to find the information, and changes that plan according to the results it returns.
This is still obviously a work in progress (as AI search is across the board) so Google says AI Mode won’t get it right all the time. In fact, you may simply see a result of just web links, if the program thinks the AI result isn’t good enough.
I’m not sure how useful AI Mode actually is, especially when compared to either searching with Gemini, or a traditional Google Search (especially one without the AI). I’ll need to wait until Google lets me try the feature out for myself before making any judgement calls. My guess, though, based on my current experience with AI, is that I’ll prefer the usual Search method.
How to try Google’s AI Mode
If you have any interest in trying Google’s new AI Mode, there are a couple ways to get in. First, if you are a Google One AI Premium subscriber, you’ll be among the first to be invited to try out AI Mode in Labs.
If you aren’t a subscriber, however, you’ll need to jump on the waitlist. Sign into your Google Account, then head to Google Labs. Under “Introducing the AI Mode Experiment,” choose “Join waitlist.” Google will then bring you to a page advertising the feature, where you can confirm you are on the waitlist.
Trump Backtracks on Tariffs, Exempts Automakers for Another Month
This all seems extremely well thought out and planned.
The Films of the Russo Brothers, Ranked
Electric State, the latest from the past and future Avengers directors, is out next week.
Trump Slams ‘Horrible’ US CHIPS Act And Makes A Case For Getting Rid Of It
Yesterday, during his address to the US Congress, President Trump called for the revocation of the CHIPS Act, arguing that it is a waste of money and not an effective way of securing investment into the country.
The CHIPS Act sought to promote domestic research and semiconductor manufacturing through a program that gave subsidies of $52
These Shokz Bone Conduction Headphones Are $60 Off Right Now
We may earn a commission from links on this page. Deal pricing and availability subject to change after time of publication.
Bone conduction headphones are ideal for activities where it is vital to your safety to hear your surroundings. That’s because they use a technology that sends audio vibrations through to the inner ear while leaving your ear canals open. Shokz is one of, if not the best, brand making bone conduction headphones right now; at the high end of Shokz’s offerings is the OpenRun Pro 2, which I got to review and put to the test. But the OpenRun Pro are also quality headphones and are currently discounted on Best Buy for $99.99 (originally $179.95), the lowest price they’ve been, according to price-tracking tools.
If you’ve never used bone conduction headphones, they’re worth a try, and the Shokz OpenPro are a great introduction. The technology has come a long way since their early days. The major downside of the way they work has been that the bass doesn’t sound as good as their in-ear counterparts. The OpenRun Pro is designed to compensate for some of that—you won’t get the same thumpy bass you’d get from regular headphones, but it’ll be the best you can get from any other bone conduction headphones.
As the name implies, these are meant to be used on runs outdoors. They have an IP55 rating for dust- and water-resistance, are lightweight and comfortable, and, because of their design, can be worn with bicycle helmets and sunglasses.
You can use these as everyday headphones around the house as well since they can take calls; just be mindful that they don’t block any sound. If you plan to use these in a location with a loud music or has a lot of ambient noise, you’ll hear everything, so you might prefer taking regular headphones—but that will defeat the purpose of the “open ear” headphones.
NASA Orbiter Captures Stunning View of Blue Ghost Lander on the Moon
The lunar lander is a pinprick in this sweeping image taken from lunar orbit.
This 55” Hisense Smart TV Just Dropped to an All-Time Low and Comes With Built-In Fire TV
Save yourself 26% on the Hisense 55″ Class A7 Series 4K UHD Smart Fire TV for a limited time.
Linux Mint Is Refreshing Looks and Warning You to Update
The team behind Linux Mint has made several interesting announcements about the popular Linux distribution and what’s going on behind the scenes. Aside from previewing a fresh coat of paint, they’re also warning you to update Firefox.
Google Is Bringing Gemini to Android Auto, and It Sounds So Annoying
It’s bad enough we don’t have buttons in the car anymore. Now we have to deal with talkative chat bots?
You knew it was coming: Google begins testing AI-only search results
Google has become so integral to online navigation that its name became a verb, meaning “to find things on the Internet.” Soon, Google might just tell you what’s on the Internet instead of showing you. The company has announced an expansion of its AI search features, powered by Gemini 2.0. Everyone will soon see more AI Overviews at the top of the results page, but Google is also testing a more substantial change in the form of AI Mode. This version of Google won’t show you the 10 blue links at all—Gemini completely takes over the results in AI Mode.
This marks the debut of Gemini 2.0 in Google search. Google announced the first Gemini 2.0 models in December 2024, beginning with the streamlined Gemini 2.0 Flash. The heavier versions of Gemini 2.0 are still in testing, but Google says it has tuned AI Overviews with this model to offer help with harder questions in the areas of math, coding, and multimodal queries.
With this update, you will begin seeing AI Overviews on more results pages, and minors with Google accounts will see AI results for the first time. In fact, even logged out users will see AI Overviews soon. This is a big change, but it’s only the start of Google’s plans for AI search.
Disneyland’s New Star Wars Popcorn Buckets Probably Smell Great on the Inside, Actually
Disneyland’s ‘Season of the Force’ reminds us all that theme parks will forever be the leaders in the popcorn bucket arms race.
My Favorite Amazon Deal of the Day: The Ikarao Shell S1 Portable Karaoke Speaker
We may earn a commission from links on this page. Deal pricing and availability subject to change after time of publication.
Testing the Ikarao Shell S1 karaoke speaker during my review has been one of the highlights of my job as tech reviewer. Now that it’s $100 off, reaching the price of $249.99 (originally $349.99) after the on-page coupon, it’s at its lowest price ever, according to price-tracking tools. While you might’ve never heard of the brand before, I can attest that this speaker is quality, and now, it’s a bargain for its price.
It bewilders me why no company before thought of doing what Ikarao has done with the Shell S1: Combine a touchscreen tablet, two Bluetooth microphones, and powerful sound to a small portable speaker. None of those things are new technologies, yet it took until Ikarao thought of it to make it happen.
The Shell S1 is their newest and most affordable karaoke speaker. And it’s loud enough to host a house party with its 104dB stereo speaker (it fills my whole 1,300 square foot home with sound loud enough to have a party). The two wireless microphones have a 20-hour rechargeable battery life while the speaker itself lasts about nine hours if you’re using the screen. The screen is a 10.1-inch touchscreen tablet that lets you control the music. It comes with an integrated Spotify app but unfortunately no YouTube app (it does have a direct link to it using a web browser).
You can hook up the speaker to a TV to have more people sing along with you, but you’ll need to hook up an HDMI cable. There is a casting option but it’s done through a third-party app that you need to download. It’s not as easy as AirPlay or connecting an HDMI cable.
If you’re looking for a reliable and compact karaoke machine that you can hook up to your TV and play for hours, the Shell S1 at $250 is the best you can get right now.
Nintendo Says Latest Legal Win Against Piracy ‘Significant’ For ‘Entire Games Industry’
Nintendo has trumpeted its latest legal success in the company’s ongoing fight against pirated games as “significant” not only for itself, “but for the entire games industry.” From a report: The Mario maker today confirmed it had won a final victory over French file-sharing company Dstorage, which operates the website 1fichier.com, following years of legal wrangling and repeated appeals. Nintendo’s victory means European file-sharing companies must now remove illegal copies of games when asked to do so, or be held accountable and cough up potentially sizable fines as punishment.
In 2021, the Judicial Court of Paris ordered Dstorage pay Nintendo $1 million in damages after it was found to be hosting pirate games. Dstorage launched an appeal, which then failed in 2023, and was ordered to pay Nintendo further costs. But the case didn’t end there. Dstorage finally took the matter to the highest French judiciary court, where it argued that a specific court order was required before it needed to remove content from its hosting services. This bid has also now failed, ending the long-running matter for good.
Read more of this story at Slashdot.
Mysterious Blocklist Prevents Former Meta Employees From Returning
Managers have hit walls trying to rehire former employees due to mysterious and unexplained blocks on their profiles.
New Tariffs Could Lead To Fewer Physical Games And Higher Digital Prices
President Donald Trump’s recently imposed tariffs on Mexico, China, and Canada could potentially lead to higher game and console prices, fewer physical releases, and supply shortages, according to some industry analysts.
Digg Is Coming Back (Sort Of)
Digg, the dominant link aggregator of the mid-2000s, is attempting yet another comeback. Kevin Rose, one of Digg’s original founders, has acquired the brand name for an undisclosed sum and is teaming up with Reddit founder Alexis Ohanian to build a new-ish social network. The plan was announced this morning in articles on Techcrunch and in the New York Times.
There aren’t many concrete details in these articles about what the site will look like, though they do note it will use AI as a key moderation tool. “Online communities thrive when there’s a balance between technology and human judgment,” Ohanian told Techcrunch, adding that, “AI should handle the grunt work in the background while humans focus on what they do best: building real connections.” Rose surveyed current Reddit moderators in an attempt to learn what improved moderation tools could look like.
That’s about it in terms of specifics—both pieces focus less on the tech and more on the founders themselves. But we do know the new Digg won’t look like an “old school forum” according to Rose. He said that, in a few years, it “will be an interface that is unlike any other that you’ve seen.” Whatever that means.
Digg was founded in 2004—more than two decades ago, an eternity in internet terms—by Rose and other collaborators. Reddit arrived on the scene around a year later, in 2005, founded by current CEO Steve Huffman, the late hacktivist Aaron Swartz, and Ohanian. The two websites fought to be the dominate link aggregator for a half-decade, a competition Reddit eventually won. One way of looking at this history is that Reddit ultimately won over users, though you could also argue that Digg destroyed itself: An extremely buggy and widely unpopular 2010 redesign, launched under Rose’s leadership, prioritized the posts of certain contributors and ultimately led to a mass exodus of users. The site never recovered and was soon more or less sold off piecemeal in 2012.
How to sign up for early access to the new Digg
Invitations to the new version of the site will be sent in the next few weeks—you can sign up here to try it if you’re curious. With any luck it won’t just be yet another place to yell about screenshots taken from other social networks; the internet sure could use something that’s actually new. Only time will tell, though.
Free Software Foundation rides to defend AGPLv3 against Neo4j license add-ons
FOSS bods file amicus brief in hope of preserving core GNU tenet of freedom forever. The Free Software Foundation (FSF) on Monday backed a lone developer’s brave effort to overturn a pivotal court ruling that threatens to undermine the AGPLv3 – the foundation’s GNU Affero General Public License, version 3.