The Asahi Linux project has published
its progress report following the release of Linux 6.18. This time
around the project reports progress on many fronts, including
microphone support for M2 Pro/Max MacBooks, work queued for Linux 6.19
to support USB3 via the USB-C ports, and work to improve the Asahi
Linux installation experience. The project is also enabling as
additional System Management Controller (SMC) drivers, which means
that “the myriad voltage, current, temperature and power sensors
“.
controlled by the SMC will be readable using the standard hwmon
interfaces
Category Archives: Unfiltered RSS
Google releases Gemini 3 Flash, promising improved intelligence and efficiency
Google began its transition to Gemini 3 a few weeks ago with the launch of the Pro model, and the arrival of Gemini 3 Flash kicks it into high gear. The new, faster Gemini 3 model is coming to the Gemini app and search, and developers will be able to access it immediately via the Gemini API, Vertex AI, AI Studio, and Antigravity. Google’s bigger gen AI model is also picking up steam, with both Gemini 3 Pro and its image component (Nano Banana Pro) expanding in search.
This may come as a shock, but Google says Gemini 3 Flash is faster and more capable than its previous base model. As usual, Google has a raft of benchmark numbers that show modest improvements for the new model. It bests the old 2.5 Flash in basic academic and reasoning tests like GPQA Diamond and MMMU Pro (where it even beats 3 Pro). It gets a larger boost in Humanity’s Last Exam (HLE), which tests advanced domain-specific knowledge. Gemini 3 Flash has tripled the old models’ score in HLE, landing at 33.7 percent without tool use. That’s just a few points behind the Gemini 3 Pro model.
Google’s Gemini 3 Flash model outperforms GPT-5.2 in some benchmarks
Almost exactly a month after the debut of Gemini 3 Pro in November, Google has begun rolling out the more efficient Flash version of its latest AI model. According to the company, the new system offers similar “pro-grade” reasoning performance as its flagship model at a fraction of the cost, making it ideal for everyday use.
In benchmarks, the new system performed significantly better than Google’s previous generation models, including Gemini 2.5 Pro. More notably, in Google’s testing it managed to trade blows with GPT-5.2, the model OpenAI rushed out to counter Gemini 3 Pro.

For example, in the tough Humanity’s Last Exam suite, Gemini 3 Flash scored less than a percentage point worse than GPT-5.2 when neither model had access to tools like web search. In a handful of other benchmarks, Google’s more efficient system even managed to outperform OpenAI’s latest. For instance, in MMMU-Pro, a benchmark designed to test a model’s multimodal understanding and reasoning, it edged out GPT-5.2 with a result of 81.2 percent compared to 79.5 percent. Of course, benchmarks only tell a partial story; we’ll have to see what people think once both systems are broadly available. Still, the fact Gemini 3 Flash is even close to GPT-5.2, and the “Extra High” reasoning mode at that, is a worrying sign for OpenAI.
As with Gemini 3 Pro, Google is rolling out the new model to both the Gemini App and AI Mode in Search where it will be the default model for both services. “That means all of our Gemini users globally will get access to the Gemini 3 experience at no cost, giving their everyday tasks a major upgrade,” Google explains. While on the subject of AI Mode, it’s now possible to access Nano Banana Pro, Google’s latest image generator, directly from the chatbot. Provided you live in the US, select “Thinking with 3 Pro,” followed by “Create Images Pro” from the model picker.
This article originally appeared on Engadget at https://www.engadget.com/ai/googles-gemini-3-flash-model-outperforms-gpt-52-in-some-benchmarks-160000000.html?src=rss
Intel Xeon 6980P vs. AMD EPYC 9755 128-Core Showdown With The Latest Linux Software For EOY2025
Since receiving the Gigabyte R284-A92-AAL1 a while back as a Xeon 6900 series 2U server platform to replace the failed Intel AvenueCity reference server, I have been getting caught-up in fresh Xeon 6980P Granite Rapids benchmarks with the latest software updates over the past year. I’ve provided fresh looks at the DDR5-6400 vs. MRDIMM-8800 performance, the AMX benefits for AI, SNC3 vs. HEX mode, Latency Optimized Mode, Cache Aware Scheduling, and more with the fresh Linux software stack and this production Gigabyte server platform. One of the areas I have been meaning to re-visit is a fresh head-to-head benchmark battle between 5th Gen AMD EPYC “Turin” and Intel Xeon 6 “Granite Rapids”. In this article is a 128-core showdown between the Xeon 6980P and EPYC 9755 128-core processors with the latest open-source Linux software as of the end of 2025.
Dangerholm cut up an XC frame to build this extreme gravel bike and the end result is incredible
Dangerholm’s latest creation combines a highly modified Scott Spark RC XC MTB frame with a forward-thinking dreamy wishlist of money-no-object components to create a gravel bike that almost defies belief.
With a frame that has been cut apart, super-wide prototype aero wheels, a custom 46T chainring, a modified rear shock, and a one-of-a-kind carbon bar and stem, it’s a classic Dangerholm bike in every sense.
We’ve taken a closer look at this dream Scott Spark RC HMX Gravel Project build, which fuses XC tech with gravel functionality.
Gravel or XC?

Dangerholm has modified whatever he needed to in the process of creating the bike. He has worked around the MTB origins of the Spark RC, keeping the frame, MTB hubs and a 110mm-travel fork, while adding a gravel-oriented drop handlebar, deep-section aero wheels and a large chainring.
Scott Spark RC full-suspension frame

The frame started as a standard Scott Spark RC in HMX carbon fibre.
At 183cm, Dangerholm usually rides a size Large, but sized down to a Medium for this gravel build to shorten the reach and wheelbase for more gravel-oriented handling. For the same reason, the angle-adjustable headset is set in its steepest position.
Where an XC bike might have a 40-50mm stem, in this guise, the shorter reach enabled Dangerholm to run an 80mm stem and preserve a similar riding position to his regular gravel bike, a Scott Addict Gravel.

To maintain a sensible cadence at the high speeds gravel bikes can run at, Dangerholm wanted to use a 46T chainring. However, the Spark RC frame is only compatible with a 38T ring.
To accommodate the bigger chainring, the chainstay had to be heavily modified, necessitating cutting open the frame to create the required clearance. It was then wrapped up and reinforced to preserve strength.
Custom shock and 110mm fork

The Spark RC comes with 120mm travel front and rear, and three rear-suspension positions (Lock, Climb and Open). However, on this bike, the RockShox SIDLuxe Flight Attendant rear shock is modified, shortening the stroke from 45mm to 40mm.
The rear suspension now delivers a reduced 0, 71 or 107mm of travel depending on the mode.
Up front, the stock 35mm-stanchion Rockshox SID, with 120mm travel, has been replaced by a 110mm RockShox SID SL Flight Attendant. Its smaller 32mm stanchions save weight and lower the front of the bike, also steepening the head angle for more gravel-oriented handling.
SRAM Flight Attendant and AXS combo

Dangerholm explained that the RockShox Flight Attendant suspension system and its compatibility with the SRAM AXS shifters opened the door to this build. He wanted the efficiency of Flight Attendant and worked out a way of retaining full functionality of the AI-driven suspension system without adding any switches that would clutter up the handlebar.
To do this, Dangerholm reprogrammed the drop-bar gravel shifters to lock and unlock the suspension. Double-tapping the shifters, which would normally shift a front derailleur, cycles through the suspension modes, while a single tap of the shifter changes gear as normal.
He adds that if you run a SRAM power meter, the fully automatic suspension mode senses the condition of the riding surface, incline angle and your power output to adjust the suspension accordingly – no buttons needed.
Super-wide prototype aero wheels

The ultra-wide aero rims are prototypes, and measure a whopping 52mm wide and 70mm deep.
Developed for this bike and the forthcoming Scott Scale RC Aero, only four rims were created.
They’re a fully rideable concept brought to life by carbon specialist Faction Bike Studio and LX Sim. Dangerholm explained his ideal dimensions, and they added a carbon aero fairing moulded on top of a 29in enduro MTB rim.
This means the prototype wheelset is very heavy, at 2,270g, but with a theoretical rim weight of 590g each for the final versions, a wheelset could come in at around 1,650g.

Dangerholm says the extreme dimensions optimise aerodynamics with wide tyres, and improve tyre stability at low pressures. More volume increases comfort and grip, and enables lower pressures to be run for less rolling resistance over rough terrain.
MTB hubs are needed for the 148mm Boost spacing of the Spark RC. Dangerholm says the Extralite HyperSmart 3 hubs were chosen because they’re light and solve a compatibility issue – the 13-speed SRAM RED XPLR gravel cassette requires a SRAM XDR-compatible freehub body, which is difficult to find on MTB hubs.
The 46T chainring was custom-made by Garbaruk. Based on its standard aero chainring, these feature a custom offset.
Custom-made handlebar

Dangerholm’s desire to run a one-piece aero cockpit, but combine it with MTB geometry, presented a challenge because the frame’s slack head angle necessitated a steeper stem angle to compensate.
He needed an 80mm-long, 12-degree stem to get the riding position he wanted, so carbon specialist Darimo created a custom 380mm-wide bar and stem with the required dimensions.
Brake adaptors and big rotors

The bike uses Flat Mount Force gravel calipers from SRAM, which needed adaptors to fit the post-mount MTB frame and fork.
The brakes run large 180mm Jagwire Pro LR2 brake rotors for extra power and heat dissipation when slowing the 10.33kg bike down.
Dangerholm Scott Spark RC HMX Gravel Project specifications

- Frame: Scott Spark RC (HMX, size M)
- Rear shock: RockShox SIDLuxe Flight Attendant (custom 40mm stroke)
- Fork: RockShox SID SL Ultimate Flight Attendant 110mm
- Headset: Syncros
- Spacers: Darimo custom
- Handlebar: Darimo Nexum Drag 80x380mm -12º
- Top cap: Darimo carbon with Extralite bolt
- Bar tape: Syncros
- Saddle: MCFK
- Seatpost: Darimo T1 Loop
- Seatpost clamp: Darimo Sub4
- Cranks: SRAM XX SL 170mm, 168mm Q-factor
- Chainring: Garbaruk DM Aero custom (42T and 46T options)
- Bottom bracket: CeramicSpeed BB Alpha
- Pedals: Look X-Track Power Dual (+404g)
- Chain: SRAM RED
- Cassette: SRAM RED XPLR 13-speed 10-46t
- Weight: 10.33kg / 22.77lb (without pedals)
Important note: SRAM XPLR AXS is not intended to be used on MTB frames, and especially not full-suspension frames. The maximum chainring size for the standard Scott Spark RC is 38T. The bike shown here is a custom one-off, not meant to be replicated.
Pixel 10 Pro Deal Hits Hard At 25% Off For An All-Time Low Price
In case you missed our review of the Pixel 10 series, we’re seriously impressed with Google’s latest-generation Android phones, and many of them are currently offered at seriously big discounts. That includes the Pixel 10 Pro that, with the current limited time deal on Amazon, is marked down to its lowest price ever.
Google Pixel 10 Pro Is
JWST Sees Mysterious Exoplanet With Atmosphere That Breaks All Predictions

Scientists are scratching their heads over a recent James Webb Space Telescope (JWST) discovery that looks more like a piece of fruit than your typical celestial sphere.
The planet, designated PSR J2322-2650b, has simply been described by astronomers to look like a lemon. This bizarre world, located 750 light years from us, is not only
Browser extensions with 8 million users collect extended AI conversations
Browser extensions with more than 8 million installs are harvesting complete and extended conversations from users’ AI conversations and selling them for marketing purposes, according to data collected from the Google and Microsoft pages hosting them.
Security firm Koi discovered the eight extensions, which as of late Tuesday night remained available in both Google’s and Microsoft’s extension stores. Seven of them carry “Featured” badges, which are endorsements meant to signal that the companies have determined the extensions meet their quality standards. The free extensions provide functions such as VPN routing to safeguard online privacy and ad blocking for ad-free browsing. All provide assurances that user data remains anonymous and isn’t shared for purposes other than their described use.
A gold mine for marketers and data brokers
An examination of the extensions’ underlying code tells a much more complicated story. Each contains eight of what Koi calls “executor” scripts, with each being unique for ChatGPT, Claude, Gemini, and five other leading AI chat platforms. The scripts are injected into webpages anytime the user visits one of these platforms. From there, the scripts override browsers’ built-in functions for making network requests and receiving responses.
Rad Power Bikes files for bankruptcy protection
Rad Power Bikes, which once claimed to be the most funded electric bike company in the world, filed for Chapter 11 bankruptcy protection on Monday as it seeks to sell off the company.
The bankruptcy, first reported by Bicycle Retailer, was filed in the US Bankruptcy Court for the Eastern District of Washington, and lists estimated assets at $32.1m and estimated liabilities at $72.8m. The inventory of electric bike spares, parts and accessories is listed at $14,226,874.73, according to Bicycle Retailer.
It’s been a dramatic few years for the electric bike brand. Founded by Mike Radenbaugh in 2007, Rad Power raised $154m through a financing round in 2021 that brought the total investment amount to $329m.
But in 2023, it pulled out of the European market in order to try to sustain its business and success in the USA, where the company began. The company has also dealt with personal liability lawsuits, layoffs and management changes.
The filing comes less than a month after Rad Power said it could not afford to recall its older ebike batteries, deemed a fire risk by the US Consumer Product Safety Commission. Rad Power disputed the CPSC’s warning, stating its batteries are safe.
In early November, Rad Power told Washington state officials that it would possibly lay off 64 employees in January and could shut down if additional funding is not secured.
A Rad Power spokesperson told Bicycle Retailer: “Rad Power Bikes has navigated an extraordinary period of challenge and change, even as our riders and community have continued to show up for us in powerful ways.
“As we work to secure a sustainable future for the Rad brand, Rad has filed for Chapter 11 protection as part of a process to complete a sale of the company within the next 45-60 days.
“This step allows us to keep operating in the ordinary course of business while we pursue the best possible outcome for the people who rely on Rad every day. Our goal is to keep the company intact and preserve the relationships we have built with riders, vendors, suppliers, and partners.
“We are not giving up. We remain deeply committed to our customers and community, and we are focused on doing everything we can to strengthen the future of the Rad brand. We are grateful for the continued support of our riders, vendors, and retail partners as we work through this moment and toward what comes next.”
Meta Is Considering Charging Business Pages To Post Links
Meta is informing some users that they will soon be restricted in how many link posts they can share each month, unless they pay for its Meta Verified subscription service. As per the notification message: “Starting December 16, certain Facebook profiles without Meta Verified, including yours, will be limited to sharing links in 2 organic posts per month. Subscribe to Meta Verified to share more links on Facebook, plus get a verified badge and additional benefits to help protect your brand.”
To be clear, right now this is a limited test, so relatively few Pages are impacted. But understandably, a lot of users are also seeking more information on the change, and whether it could be expanded to all Pages. So, Meta’s seeking to boost take-up of Meta Verified, in order to make more money out of its subscription option, which, for business users, costs between $14.99 and $499 per month, depending on which package you choose.
Read more of this story at Slashdot.
Electric vehicles cause tension in the automotive aftermarket
After federal clean vehicle tax credits ended in September, the electric vehicle industry reached a crossroads. Well, technically, it has been there since Trump took office. This is a weird period in automotive history; A chunk of the industry is full-steam ahead with EV development, another is cutting back, and the consumer is left wondering what the electrification landscape will look like next year, let alone in three, during the next administration.
But what about the automotive aftermarket? Typically, this corner benefits from whatever progress is made on the OEM front—have Trump’s policies expanded or contracted its EV technological development? I recently spent some time chatting with personnel of the Specialty Equipment Market Association (SEMA) at its yearly tradeshow in Las Vegas to find out. I also hit the bricks (or, rather, bright carpeting) of the massive show itself, seeking out some new, unique developments in the space that behoove EV tech’s inherent benefits.
Above one of the show’s several sprawling halls, I met with Mike Spagnola, SEMA’s CEO, and Karen Bailey-Chapman, senior vice president, public and government affairs, to learn what the organization’s official stance is. First and foremost: It doesn’t want to be told what to do.
Apple Could Bring Back iMac Pro In 2026 With New M5 Max Power

The last time Apple released an iMac Pro was back in 2017. That could change next year, however, with the Pro designation for Apple’s all-in-one PC making a comeback with a custom M5 Max chip in tow. Alternatively, Apple could be prepping a higher-end model of the iMac without the Pro moniker, while still having it aimed at power users.
Nothing
OnePlus 15R Review: Affordable Midrange Phone With Big Battery Life

The OnePlus 15R delivers strong Snapdragon 8 Gen 5 performance and spectacular battery life at the expense of some camera versatility. OnePlus 15R – Starting At $699 Quality materials and build Beautiful 165Hz display Solid performance Outstanding battery life Fast wired charging, charger in the box Clean and responsive software IP69K ingress…
Lawsuit Accuses LG, Samsung, Sony, Hisense & TCL TVs Of Spying On Users

Texas has declared war on your smart TV’s data collection, alleging that certain screens at the center of American homes are actually sophisticated surveillance tools designed to monitor the viewing habits of every user.
As such, Texas Attorney General Ken Paxton initiated a series of lawsuits against five of the world’s most prominent
OnePlus 15R review: A 165Hz display and big battery for $700
I know what you’re thinking, didn’t OnePlus release a new phone just last month? It did. A little over five weeks after the announcement of the OP15, the company is back with the OnePlus 15R, a more affordable version of its new flagship that starts at $700 (or $200 less than its sibling). Off the top, this will be a shorter review because most of what I said about the OnePlus 15 also applies to the OP15R. It’s a great phone that asks you to make one pretty significant compromise.
Design and display

Like the OnePlus 15, the 15R looks like the OnePlus 13s and 13T, a pair of smaller, 6.32-inch phones the company released in India and China this past spring. I said the design of the OP15 was boring and derivative of the iPhone 16 Pro. The 15R has done nothing to change that opinion. With one fewer camera, the OP15R doesn’t look much different from the iPhone 12 I’ve been hanging on to since 2020.
That said, I’m more fond of the 15R’s mint breeze color (the phone is also available in charcoal black) than the sand storm shade of my OP15. We’re big fans of minty phones here at Engadget, and OnePlus has gone with a particularly pleasing hue of the color with its new phone. With the redesign, OnePlus has also improved the phone’s waterproofing, bringing it in line with the OP15. The new handset is IP69K-certified against moisture and dust, meaning it can withstand heated water shot at it at pressure. Like the OP15, the 15R trades OnePlus’ old Alert Slider for a new Plus Key. It functions like the iPhone’s Action button, allowing you to add a shortcut for a favorite feature. For example, you can configure it to open the camera app or act as a do not disturb toggle, among a few other options.
One departure from the OP15 is that the 15R has a larger 6.83-inch display, making it slightly taller than its sibling. OnePlus is marketing this as one reason buyers might pick the 15R over the OP15, but holding the phones side by side, there’s not much difference between the two. They’re both big, and you’ll either like that or won’t.
On top of being big, the 15R’s screen can refresh at a fast 165Hz in games. The two displays are also comparable in terms of resolution and brightness; both can push 1,800 nits of brightness. One difference I noticed is the OnePlus 15 has a warmer panel, even when the two phones are set to the same colorspace. I’ve reached out to OnePlus to find what might be causing the disparity, but for now it may be due to a quality control issue or oversight in the company’s software.
One last thing, OnePlus has upgraded the 15R to add an ultrasonic fingerprint sensor beneath the screen. This is placed in a nice spot toward the bottom third of the display, and it’s fast and accurate.
Performance and battery

The OnePlus 15R is the first phone in North America to arrive with Qualcomm’s latest Snapdragon 8 Gen 5 chipset. Not to be confused with the Snapdragon Gen 5 Elite in the OP15, this new chipset is similar to Qualcomm’s flagship system-on-a-chip but has a weaker CPU and GPU. This is reflected in benchmarks like Geekbench 6 where the OP15 handily outperforms the OP15R. It’s not even close, either, with the OP15 delivering standout single- and multi-core scores of 3,773 and 11,293, while the 15R put up more modest results of 2,857 and 9,512.
From that perspective, you’re losing a fair amount of performance, but real-world use tells a different story. Outside of the handful of games such as Call of Duty: Mobile and PUBG that support the OP15 and 15R’s 165Hz displays, the Snapdragon 8 Gen 5 offers more than enough muscle for the majority of applications. Even for most games (like the ones I like to play, including Diablo Immortal and League of Legends: Wild Rift), the Snapdragon 8 Gen 5 is a great match.
OnePlus also hasn’t skimped on the 15R’s other internal components. You’re still getting 12GB of LPDDR5X Ultra RAM and 256GB of UFS 4.1 storage. That’s the same configuration as the base model of the OP15. This translates to a phone that doesn’t miss a beat when switching between apps and loading files like images and videos.
The 15R has a slightly bigger battery, coming in at 7,400mAh, up from 7,300mAh on the OP15. In practice, the two phones offer the same amount of battery life. Putting them through both Engadget’s video rundown test, they both ran for 38 hours before their batteries died (which makes sense given the OP15R has a bigger screen). Like the OP15, the 15R comes with the OnePlus 55W SUPERVOOC charger in the box. The adapter can get the 15R from dead to 100 percent in less than an hour. If you hate charging your phone, the 15R makes that process as painless as possible, with a battery that both lasts long and won’t be at the outlet for hours.
Cameras

By this point you’re probably wondering what OnePlus cut from the OP15 to make the 15R more affordable. The answer — quite literally — is an entire camera. The new phone is missing a telephoto camera, something you could find on its predecessor, the OnePlus 13R. And as far as I can tell, the two remaining cameras use the same 50-megapixel and 8MP sensors OnePlus shipped on last year’s model. The company also hasn’t upgraded the glass on either camera. That leaves the selfie camera as the only area to see some change in the form of a sharper 32MP sensor and the addition of autofocus.
Unfortunately, none of the 15R’s cameras stand out. As a whole, they suffer from the same set of problems that plague the OnePlus 15’s cameras. They’re fine out on a sunny day, but as soon as the light becomes a bit challenging, the 15R struggles with shadow details, resulting in muddy pictures. The more I’ve used both the OP15 and 15R, the more I’ve come to the conclusion that OnePlus needs to go back to the drawing board with its new Detail Max Engine. It feels like it’s holding back what should, at least on paper, be solid hardware.
Software

There’s not much to say here other than the 15R ships with OxygenOS 16, just like the OP15. OnePlus has also promised to support the 15R for the same amount of time as the OP15: four years with software updates and six years with security patches. That’s a shorter window than Google and Samsung, both of which promise seven years on all their latest phones. It’s hopefully something that OnePlus decides to change starting with the OnePlus 16. The reason I bring that up is that the company’s version of Android is one I like a lot. OxygenOS is slick, with animations that highlight the speed of the 15R’s processor and display. The fact the phone comes with the latest version of OxygenOS means you also get access to all of the company’s newest AI features, including its Mind Space hub where you can save screenshots and notes for an on-device model to transcribe and summarize.
Wrap-up

In short, the OnePlus 15R is the phone for people who don’t care about photos and videos. That’s the same conclusion I came to with the OP15. If you’re a OnePlus fan, the 15R excels in all the areas you would expect the company’s devices to make a good showing: performance, battery life and display responsiveness. Given I wasn’t too impressed with the OP15’s camera, I would actually recommend the 15R over that model. For $200 off the starting price of the OP15, you’re getting a device that has almost all of the same strengths of its more expensive sibling.
Compared to other phones in its price range, such as the Pixel 10 and Galaxy S25 FE, the 15R is not as well-rounded, and can’t compete with those devices in camera quality, but you’re getting much better performance, battery life and a display they can’t match.
This article originally appeared on Engadget at https://www.engadget.com/mobile/smartphones/oneplus-15r-review-a-165hz-display-and-big-battery-for-700-150000340.html?src=rss
[$] The Civil Infrastructure Platform after (nearly) ten years
The Civil Infrastructure Platform
(CIP) first launched in that form in April 2016, so it has a
tenth-anniversary celebration in its near future. At the 2025 Open
Source Summit Japan, Yoshitake Kobayashi talked about the goals of this
project and where it is headed in the future. Supporting a Linux system
for even one year is a challenging task; maintaining that support for a
decade or more is rather more so, and a changing regulatory environment
complicates the task further.
The Surprising Way Hurricanes Pump Carbon Into the Air—and Life Into the Ocean
New research shows that tropical cyclones leave behind more than death and destruction.
Warner Bros Discovery Board Rejects Rival Bid From Paramount
Warner Bros Discovery’s board spurned Paramount Skydance’s $108.4 billion hostile takeover bid on Wednesday, calling the offer “illusory” as it accused the studio giant of misleading shareholders about its financing. From a report: Paramount has been in a race with Netflix to win control of Warner Bros, and with it, its prized film and television studios, HBO Max streaming service and franchises like “Harry Potter.” After Warner Bros accepted the streaming giant’s offer, Paramount launched a hostile offer to outdo that bid.
In a letter to shareholders on Wednesday, the Warner Bros board wrote that Paramount had “consistently misled” Warner Bros shareholders that its $30-per-share cash offer was fully guaranteed, or “backstopped,” by the Ellison family, led by billionaire and Oracle co-founder Larry Ellison.
Read more of this story at Slashdot.
Twitter comeback bid draws lawsuit from Elon Musk’s X Corp
On Tuesday, X Corporation, formerly known as Twitter, sued “Operation Bluebird,” the new startup that is seeking to reclaim the allegedly abandoned Twitter trademark and relaunch a new social media network under that name.
In its 43-page lawsuit, which was filed in federal court in Delaware, X Corporation alleges trademark infringement, adding that despite Bluebird’s “purported plan, it cannot bring Twitter ‘back’—Twitter never left and continues to be exclusively owned by X Corp.”
One of Bluebird’s leaders, Michael Peroff, told Ars in an email that Operation Bluebird was “fully expecting” a lawsuit from X Corporation and that “we planned for it.”
How a VPN works (and why you should care)
The best VPNs can make your online life more private with software that’s convenient and cheap — sometimes even free. While keeping your IP address invisible, you can use your VPN to explore streaming content from all over the world or (virtually) sneak into a sports event that’s not available in your area.
However, while VPNs are widely available, there’s a strange dearth of information on what they actually do behind the scenes. You may know that a VPN masks your device with a proxy server to make it look like you’re somewhere else, and maybe even that encryption is involved. But finding any more details can mean running a gauntlet of misinformation.
That’s a shame, because the inner workings of a VPN aren’t all that difficult to understand. You may not be able to build one yourself without a degree in computer science, but with a little work, you can understand exactly what it’s doing on your computer. That’s information you can use to select the right VPN for you, and make the most of it once you’ve got it.
What is a VPN?
To make sure nobody gets left behind, I’ll start from the beginning. A VPN (virtual private network) is a method of securely accessing a network, either a closed network (like you might have at the office) or the internet as a whole. Initially, organizations set up VPNs so remote workers can work with secure files. While this still happens, the last 15 years have seen VPNs increasingly marketed to individuals, with Proton VPN, ExpressVPN and others seeing massive user growth.
Broadly, a VPN consists of two parts: the server, which forwards requests to your chosen destination, and the client, a piece of software that lets you interact with the server. You can find a longer explanation here, but I’ll use the two sections below to tell you what you need to know right now.
One more note before that — there are multiple kinds of VPNs, including the remote-access VPNs and site-to-site VPNs commonly used by workplaces. However, for this article, I’ll be talking mainly about the commercial VPN services sold to individuals for general security needs. Instead of a specific network, these VPNs are designed to handle all of a user’s traffic to any point on the internet.
What happens when you use a VPN?
First, you use the client to connect to a server — either the fastest one available or a particular location you need. Once you’ve connected, every request you send to the internet goes through the VPN server first. This communication between your device and the web is encrypted so it can’t be traced back to you.
The VPN server decrypts your requests and sends them on. The destination then communicates with the VPN server, which relays the information back to you — after re-encrypting it so nobody follows it home.
Since the VPN does everything on your behalf, it’s your “mask” online. Your internet service provider (ISP) and third parties can see what’s being done, but — so long as you’re not otherwise logged in or identifying yourself — nobody knows that it’s you doing it. It’s like having a friend order pizza for you so the pizzeria doesn’t hear you calling for the third time this week (not that I speak from experience).
What’s the point of using a VPN?
Why add an extra step to the already complex process of getting online? The two biggest reasons are maintaining anonymity and changing your virtual location. I’ve already explained how a VPN keeps you anonymous. Among other things, this prevents your ISP from selling your browsing history to advertisers and protects activists who face government repercussions for what they do online.
Changing your virtual location is part of masking, but it can also be used to see the internet as it’s visible in other countries. Streaming services are frequently limited to certain places, and almost all of them change the available content based on their licenses in each nation. You can also use a VPN in a country with a nationwide firewall, like China, to see forbidden outside information sources.
How does a VPN work? The full technical explanation
Most online explanations stop after defining a VPN as an anonymous agent between you and the internet — but I wrote this article to go a little bit deeper. To understand what a VPN is doing on a technical level, we’ll need to cover how the internet works, how the VPN knows where to send encrypted information and just what “encryption” actually is.
How the internet transmits data
When you’re not using a VPN, internet traffic goes directly from your modem to your ISP, then on to your chosen destination. The key technologies here are IP, which stands for Internet Protocol, and TCP, which stands for Transmission Control Protocol. They’re usually combined as TCP/IP.
You may have heard that every online device has an IP address that identifies it to every other device. TCP/IP governs not just those names but how data moves between them. Here’s how it works, step-by-step.
-
You click a link or enter a URL into your web browser.
-
Your computer sends a request to your modem, asking to see the page associated with the URL. Your modem forwards the request to your ISP.
-
Your ISP finds a domain name server (DNS) that tells it which IP address is connected to the URL you asked to see. It then sends the request to that IP address along the fastest available route, which will involve being relayed between several nodes.
-
That IP address is connected with a server that holds the content you’re looking for. Once it receives the request, it breaks the data down into small packets of about 1 to 1.5 kilobytes.
-
These packets separate to find their own fastest routes back to your ISP, your modem and finally your web browser, which reassembles them.
-
You see a web page, likely no more than a second after you asked for it.
The outgoing requests and inbound packets are key to understanding VPN function. A VPN intervenes during step 2 (when your modem contacts your ISP) and step 5 (when your ISP sends the packets back to you). In the next section, I’ll explain exactly what it does during those steps.
How VPN tunneling protects data
You might have heard a VPN’s activities described as “tunneling.” That term refers to a figurative tunnel being created between your device and the VPN. Data enters the tunnel when it’s encrypted by the VPN client and exits when it’s decrypted by the VPN server. Between those two points, encryption means nobody can see the true data. It’s as though it’s traveling through an opaque tunnel.
While the tunnel is a useful metaphor, it may be better to think of VPN encryption as an encapsulation. Each packet of data sent via VPN is “wrapped” in a second packet, which both encrypts the original packet and contains information for reaching the VPN server. However, none of these outer layers have the complete path — each just knows enough to reach the next relay. In this way, the origin point (that’s you) remains invisible.
The same thing happens when the internet returns content to show you. Your ISP sends the data to the VPN server, because, as far as it knows, that’s where the request came from. The VPN then encrypts each packet and sends them back to you for decryption and reassembly. It takes a little longer with the extra steps; that’s why VPNs always slightly slow down your browsing speed, though the best ones don’t do that by much (Surfshark is currently the fastest).
You learned in that last section that two protocols, IP and TCP (usually combined as TCP/IP), are responsible for letting online devices talk to each other, even if they’ve never connected before. In the same way, a VPN protocol is like a shared language that lets VPNs encrypt, move and decrypt information. See the next section to learn how a VPN protocol works in detail.
How VPN protocols encrypt data
VPN protocols are the technology behind VPNs; every other feature of your VPN is just a method of interacting with them. All protocols are designed to encrypt data packets and wrap them in a second layer that includes information on where to send them. The main differences are the shape of that second layer, the types of encryption used and how the client establishes its initial secure connection with the server.
It’s extremely common for VPNs to advertise protocols with “bank-grade” or “military-grade” encryption. This is talking about the 256-bit Advanced Encryption Standard (AES-256), a symmetric encryption algorithm, which is used by financial institutions and the US government and military. AES-256 is indeed some of the strongest available encryption, but it’s only part of the story. As a symmetric algorithm, it’s not fully secure on its own, because the same keys are used to encrypt and decrypt it — and those keys can be stolen.
For that reason, most VPN protocols use AES-256 (or a similarly strong cipher like ChaCha20) to encrypt the data packets themselves, then combine it with a larger suite of multiple encryption algorithms. One of the most reliable and popular protocols, OpenVPN, uses the asymmetric TLS protocol to establish a secure relationship between client and server, then transmits packets encrypted with AES-256 across that channel, knowing the keys will be safe.
Explaining this could easily reach the length of a book, but the basic principle isn’t complicated. In asymmetric encryption, a sender encodes data with a unique key, then a recipient decodes it with a different paired key. The keys are provided by a trusted third party. In a maneuver called a TLS handshake, the server and client send each other encrypted data. If each can decode the other’s test data, they know they have a matched pair of keys, which proves that both are the same client and server that got the keys from the trusted authority.
Why not just use asymmetric encryption for the data itself, if it’s more secure? Mainly, protocols don’t do this because it’s a lot slower. Asymmetric encryption requires a lot of resource-heavy math that makes connections drag. That’s why OpenVPN and others use the asymmetric-to-symmetric two-step instead.
To summarize, a VPN protocol is a complex set of instructions and tools that control encryption and routing via VPN servers. Protocols still in use include OpenVPN, WireGuard, IKEv2, SSTP and L2TP. PPTP, one of the oldest protocols, is no longer considered secure. On top of these, VPNs often build their own proprietary protocols, such as ExpressVPN’s Lightway.
Putting it all together
Now that we’ve hit all the relevant information, let’s revisit that step-by-step from earlier, this time with a VPN in the mix. Here are the steps, starting with establishing the VPN connection and ending with anonymously viewing a website.
-
You open your VPN client, choose a server location and connect. The VPN client and server authenticate each other with a TLS handshake.
-
The client and server exchange the symmetric keys they’ll use to encrypt and decrypt packets for the duration of this session (i.e. until you disconnect). Your VPN client tells you that it’s established a secure tunnel.
-
You open your web browser and enter a URL. Your browser sends a request to view the content at that address.
-
The request goes to your VPN client, which encrypts it and adds an outer layer of information with directions to the VPN server.
-
The encrypted request reaches the VPN server, which decrypts it and forwards it to your ISP.
-
As normal, your ISP finds the IP address associated with the URL you entered and forwards your request along.
-
The destination server receives the request and sends all the necessary packets of information back to your ISP, which forwards it to the VPN server.
-
The VPN server encrypts each packet and adds a header directing it to the VPN client.
-
The client decrypts the packets and forwards them to your web browser.
-
You see the web page you opened.
Because of the encrypted tunnel, the request arrives at the VPN server without any information on where it came from. Thus, the VPN doesn’t actually encrypt your activity on the websites themselves — for the most part, the HTTPS protocol does that. Instead, a VPN gives you a false name to put in the register, with no information that could be traced back to your real identity.
How to use this information
Now that you know how a VPN works on a technical level, you’re better equipped to choose one for yourself. You can cut through marketing hype statements like:
-
“Military-grade encryption!” (It’s the same algorithm everybody uses)
-
“Stay completely anonymous online!” (Plaintext you post on social media is not encrypted)
-
“Dodge ISP throttling!” (If your ISP is throttling you based on your IP address, this works — but if you’re being slowed down because of your moment-to-moment activity, your identity doesn’t matter)
A VPN is just one important part of a complete cybersecurity breakfast. While hiding your IP address, make sure to also use strong passwords, download updates immediately and remain alert for social engineering tactics.
This article originally appeared on Engadget at https://www.engadget.com/cybersecurity/vpn/how-a-vpn-works-and-why-you-should-care-143000250.html?src=rss
