The Zig Software Foundation has quit GitHub after years of unresolved GitHub Actions bugs — including a “safe_sleep” script that could spin forever and cripple CI runners. Zig leadership puts the blame on Microsoft’s growing AI-first priorities and declining engineering quality. Other open-source developers are voicing similar frustrations. The Register reports: The drama began in April 2025 when GitHub user AlekseiNikiforovIBM started a thread titled “safe_sleep.sh rarely hangs indefinitely.” GitHub addressed the problem in August, but didn’t reveal that in the thread, which remained open until Monday. That timing appears notable. Last week, Andrew Kelly, president and lead developer of the Zig Software Foundation, announced that the Zig project is moving to Codeberg, a non-profit git hosting service, because GitHub no longer demonstrates commitment to engineering excellence.
One piece of evidence he offered for that assessment was the “safe_sleep.sh rarely hangs indefinitely” thread. “Most importantly, Actions has inexcusable bugs while being completely neglected,” Kelly wrote. “After the CEO of GitHub said to ’embrace AI or get out’, it seems the lackeys at Microsoft took the hint, because GitHub Actions started ‘vibe-scheduling’ — choosing jobs to run seemingly at random. Combined with other bugs and inability to manually intervene, this causes our CI system to get so backed up that not even master branch commits get checked.”
Superhuman, the AI-powered mail app, is heading in a more agentic direction with its latest update. Its “write with AI” feature, which you could previously activate when drafting an email, now works across your inbox, calendar, and the web. This means it can now pull in information from other emails or research a topic online. The AI will think for as long as it needs before responding to a prompt and will open its Ask AI tool if it needs clarification.
Ask AI now lives in a left sidebar when you’re on desktop, so it’s always accessible should you need to draft a note, ask a question or quickly schedule a meeting without digging around in your emails. You can also now check your Ask AI history on iOS and desktop for previous conversations. Write with AI is also now available on Android, which will soon gain the other new features too.
Superhuman
Superhuman was acquired by Grammarly earlier this year, with the latter recently rebranding so all of its AI apps now sit under the Superhuman umbrella. The mail service is seemingly primarily targeted at business rather than consumers, with its most advanced version of Write with AI and Ask AI being included in Business and Enterprise plans. The more basic standard version of Write with AI is rolled into the Starter plan for desktop and mobile.
Superman is promising further agentic updates in the near future.
This article originally appeared on Engadget at https://www.engadget.com/ai/superhuman-formerly-grammarly-has-some-ai-updates-for-its-superhuman-mail-app-140017716.html?src=rss
The FBI’s Internet Crime Complaint Center (IC3) is warning consumers about a type of fraud in which threat actors pretend to be from trusted financial institutions in order to obtain login credentials and gain access to financial and personal data.
The consequences are high: With stolen credentials, scammers can gain full control of your accounts and your money. According to the FBI advisory, criminals will quickly wire funds from your bank to cryptocurrency wallets, making the money nearly impossible to trace and recover, and lock you out of your account in the process.
Here’s how account takeover scams work—and how to avoid becoming a victim.
Account takeover scams may impersonate your bank
Most account takeover scams use social engineering: a series of tactics designed to manipulate you into giving up personal information, downloading malware, or paying money to bad actors. Scammers impersonate financial institution employees as well as customer support and technical support staff and reach out to targets via text, call, or email to say that their account has been compromised in some way.
They may tell you that there have been fraudulent charges on your account and send you a link to report the fraud—but this is actually a phishing site designed to harvest your login credentials. They may ask directly for your username, password, or multi-factor authentication (MFA) code over the phone. In some cases, they may even claim that your information was used to buy firearms and pass you off to a second scammer impersonating law enforcement. They’re counting on you to feel fear and confusion and act quickly to “resolve” the issue by handing over your information.
The FBI has also identified a version of account takeover using search engine optimization (SEO) poisoning, in which scammers buy ads that appear to be for legitimate businesses but actually allow them to place malicious links to spoofed bank websites higher in search results.
How to avoid falling for account takeover scams
While being targeted for an account takeover may be unavoidable, there are a few red flags that can help you identify the fraud before it goes south.
First, you should always be wary of calls, texts, emails, and other communication (such as social media messages) from someone claiming to be from your bank or creditor, especially if they ask for personal information like your username, password, or time-based one-time password (TOTP). Reputable institutions will not contact you to request your credentials or other sensitive data—so these are almost certainly phishing attempts.
You should also be wary of trusting websites that look like they belong to your financial institution, especially if you click to them from a browser search. Cybercriminals can easily build convincing (but spoofed) websites and place the malicious links at the top of search results. Bookmark the trusted link rather than going through a search engine, or use the verified app on your mobile device. Always avoid clicking directly from unsolicited communication, and check URLs and email addresses carefully, as scammers can also use homographs to hide malicious links.
Finally, protect your personal information. Use complex, unique passwords stored securely (such as in a password manager), enable a stronger form of MFA (and never give away codes), and limit what you share online. Scammers may use what you’ve posted—like your date of birth, pet’s name, or information about family members—to get past your security questions, guess your password, or make an impersonation attempt sound more convincing.
The IC3 also recommends monitoring your financial accounts for irregularities, such as unauthorized withdrawals or transfers, which may be a sign of an account takeover. Consider setting up transaction alerts with your financial institutions to be notified immediately of any suspicious activity.
For those in the market for a premium Android tablet that leans into both productivity and entertainment, this might be one to consider. It has the same polished design and high-quality build Samsung brings to its flagship phones, with a sturdy Armor Aluminum frame, water and dust resistance (IP68), and a bright 11-inch Dynamic AMOLED display that’s crisp, color-rich, and plenty bright even outdoors. It also comes with the redesigned S Pen included at no extra charge, unlike the Apple Pencil.
In terms of performance, the Tab S11 holds its own. It’s powered by MediaTek’s 9400+ chip with 12GB RAM and Android 16, which keeps things snappy across multitasking and Samsung’s DeX mode (basically a desktop experience on a tablet). You get 256GB of onboard storage, expandable up to 2TB with a microSD card, which is handy for offline media or large files. Battery life clocked in around 9.5 hours in PCMag’s rundown test, which means real-world use lands somewhere in the all-day range unless you keep brightness maxed out. As for the audio, the stereo speakers are loud and clear enough for small rooms, but the bass is underwhelming—if audio quality matters to you, a solid pair of wireless headphones or earbuds might be a better bet.
Camera-wise, the 13MP rear camera and 12MP front cam handle video calls and quick snapshots fine, but don’t expect smartphone-level sharpness or dynamic range. The real edge lies in the software: Samsung’s One UI 8.0 and Galaxy AI tools like Notes Assist, Transcript Assist, and Circle to Search help streamline everyday use. Add seven years of promised updates, and you’ve got long-term support locked in.
An anonymous reader quotes a report from GamesIndustry.biz: Japanese game makers are struggling to locate affordable commercial fonts after one of the country’s leading font licensing services raised the cost of its annual plan from around $380 to $20,500 (USD). As reported by Gamemakers and GameSpark and translated by Automaton, Fontworks LETS discontinued its game license plan at the end of November. The expensive replacement plan — offered through Fontwork’s parent company, Monotype — doesn’t even provide local pricing for Japanese developers, and comes with a 25,000 user-cap, which is likely not workable for Japan’s bigger studios.
The problem is further compounded by the difficulties and complexities of securing fonts that can accurately transcribe Kanji and Katakana characters. UI/UX designer Yamanaka stressed that this would be particularly problematic for live service games; even if studios moved quickly and switched to fonts available through an alternate licensee, they will have to re-test, re-validate, and re-QA check content already live and in active use. The crisis could even eventually force some Japanese studios to rebrand entirely if their corporate identity is tied to a commercial font they can no longer afford to license.
It’s that time of year again, when all of our favorite streaming platforms start dropping personalized lists of what we’ve been consuming. Spotify Wrapped is perhaps the biggest of the bunch and it’s available for perusal right now.
As always, users can access Wrapped to find their most listened-to genres, artists, songs, albums and podcasts from the past year. This information is shareable via social media if you want random bald eagle avatars to comment on your music taste, but there’s a new interactive feature called Wrapped Party.
Spotify
This is a game of a sort. Spotify says it “turns your listening data into a live competition.” Wrapped Party hands out awards for stuff like listening to smaller artists and obsession with a particular artist, in addition to total minutes streamed. Finally, friends can settle the age-old debate of “who listens to music more.”
Spotify Wrapped is also about the platform itself, so we have plenty of little tidbits from the global user base. Bad Bunny was named the most streamed artist in the world, just ahead of his Super Bowl performance that internet bozos have turned into a controversy for some reason. This is the fourth time he’s come out on top in the past five years. He also had the most popular album of the year.
Spotify
The global top song is something of a surprise, as it’s not Bad Bunny or even Taylor Swift. It’s the Lady Gaga and Bruno Mars duet “Die With a Smile.” The top podcast is, as always, The Joe Rogan Experience. At least Spotify is getting what it paid for with Rogan.
This article originally appeared on Engadget at https://www.engadget.com/entertainment/music/spotify-wrapped-2025-is-here-and-now-its-a-competition-130052418.html?src=rss
The sixth and final race of Zwift Racing League 2025/26 Round 2 happens Tuesday, December 9, and we’re back in NYC for a scratch race on the Empire Elevation course. This new route has some sneaky climbs, escalator intrigue, and a very spicy finish.
There’s much to discuss, including crucial course segments, powerups, bike decisions, and strategic options. Let’s dive in!
Looking at the Route
Empire Elevation is a 26km long point-to-point route with 266m of elevation gain from start to finish. This is a new, event-only route created just for ZRL, which means many riders haven’t yet completed it, although most will be familiar with the New York roads it covers. All categories will be racing the whole route:
Clearly, the finishing climb up the NY KOM is the big feature of this route. But there are a few slight warmup climbs before we get there:
Climb up from Peristyle Sprint @ 3.8km (900 meters at 2.4%): the first climb on the day, even if it’s a small one.
The Hill KOM @ 5.9km (500 meters at 3.7%): another short one, but a bit steeper than the first.
Manhattan Bridge @ 10.8km (1km at 2.6%): a draggy but draftable climb up to the mid-bridge Sprint banner.
Let’s Talk Escalators
Riders will take three downramps into subways during the course of the race… and also three escalators up and out of the subways. The downramps will certainly speed things up, but it’s the escalators that may make things truly interesting, if lighter riders choose to take advantage of what they offer.
You may recall, in preparing week 4’s race guide, I did some bot testing on the new NYC escalators. I ran bots of various weights up one of the longer escalators on the route (the final escalator you’ll hit, in fact). Each bot’s power was set so they would all have approximately the same escalator entry speed (~46 kph), and that power remained steady as they went up and over the top of the escalator. Here’s how much each bot slowed between entering and exiting the escalator:
50kg bot @261W: slowed 3.2 kph
75kg bot @339W: slowed 11 kph
100kg bot @390W: slowed 16.1 kph
It appears as if Zwift is adding a flat power boost to all riders on the escalators. (In the comments section of the week 4 post, astute ZI readers Carl and Tom used some climbing speed calculators to estimate it at 1200-1400W.) If instead Zwift had given the same w/kg boost for all riders, the speed gap would be minimal. But 1200W is a huge number for a lightweight rider (20 W/kg for a 60kg rider) while being comparatively tame for a larger rider (12 W/kg for a 100kg rider), which is why the bot tests show what they show.
Zwift has acknowledged this is a problem, and they’ll roll out a fix soon. But it won’t be out before Tuesday’s race, as far as I know.
If I were a light rider, I might take advantage of this and attack on the escalators to soften the legs of heavier rivals. I could also just soft pedal up the escalator to conserve my energy! Think about it: assuming Zwift is indeed adding 1200W, a 60kg rider could coast up the escalator while a 100kg rider puts in a solid 8 W/kg dig, and both would have the same effective W/kg:
60kg at 1200W=20 W/kg
100kg at 800W+1200W=20 W/kg
Watch for escalators at 10km, 15.8km, and 21.7km.
NY KOM Finish @ 24km
The official KOM segment (shown above) is 1.4km, averaging 6.3%. But the actual climb is 1.8km long, averaging 6.2%. This will be a legit VO2 max effort: expect the full climb to take just under 4 minutes for top riders, almost 5 minutes for B category, and 5-6 minutes for C category and below.
This is a fairly steep climb, so drafting will offer a minimal advantage, except on the three short flat bits. And the final 200 meters are the steepest part, so it’ll be a fiery finish for Round 2!
Powerups will be awarded at each segment arch, including Power Segment arches in the subways, which means we’ll have 10 powerup opportunities on this route. You have an equal chance of getting a feather, van, or helmet powerup at each arch.
Lightweight (feather): reduces your weight by 10% for 30 seconds. Save one for the final climb, since it’s the most important section. You may also want to use them on the escalators if you’re a heavier rider.
Draft Boost (van): increases the draft effect you are experiencing for 40 seconds. Use at higher speeds (flats and descents) when you are already drafting off another rider (since this powerup only helps when you are drafting.)
Aero Boost (helmet): makes you more aerodynamic (reduces your CdA by 25%) for 15 seconds. Use at higher speeds (flats and descents), especially when no draft is available (although it is still useful when drafting.)
Bike Recommendations
This race’s steep finishing climb definitely makes me steer away from pure aero setups and look at climbing bikes and all-arounders instead. While a more aero setup would have a time advantage on a solo effort of the whole course, what you’re really looking for is maximum advantage on the finishing climb.
My recommendation, then, is to use the new ENVE SES 4.5 PRO wheels paired with one of these bikes:
Of course, your frame’s upgrade status should impact your decision. A fully upgraded Aethos will outclimb the other four frames, but that’s not the case when comparing un-upgraded versions.
Lots of recon events are scheduled on upcoming ZRL routes, led by various teams. This is a new route on fresh roads, so many riders will find recons particularly helpful this week. See upcoming ZRL recons for this race at zwift.com/events/tag/zrlrecon.
Additionally, riders in the Zwift community do a great job every week creating recon videos that preview the courses and offer tips to help you perform your best on the day. Here are the recons I’ve found (comment if you find another!)
John Rice
J Dirom
Strategic Options
How will the race unfold, and what strategies will riders employ to bring home a team win on Empire Elevation? Here’s what I predict:
Escalator pandemonium: Expect some lighter riders to attack on the escalators, as explained above. This becomes more likely as the race progresses.
Escalator and chill: Expect some lighter riders to simply coast on the escalators, as explained above.
Going long: Teams with pure-power riders who don’t fancy their chances in a W/kg slugfest may attack on the flats to get up the road and boost their chance at a high finishing position.
Save it for the climb: Most riders will do this. Simple conserve, conserve, conserve for the first 24km, then “give it the beans” for the final 4-6 minutes and hope for the best.
Your Thoughts
Any insights or further thoughts on this race? Share below!
Rocky Linux 9.7 introduces post-quantum cryptography policies, toolchain updates, a refreshed Cockpit UI, and expanded image creation options for developers.
It’s an incredible time to be a guitarist who doesn’t want to own a bunch of $2,000 amps and an expensive pedalboard of gear. Amp and pedal simulators, which have been around for decades, have in the last few years finally come into their own as nearly indistinguishable sonic replacements. Even John Mayer is now willing to ditch his beloved tube amps for digital models.
I certainly don’t have Mayer’s chops or gear budget, but I do love messing with this sort of tech and have purchased everything from NeuralDSP‘s Archetypes series to Amplitube and Guitar Rig. Last week, as part of an early Black Friday sale, I picked up two amp/effects suites from British developer Polychrome DSP—Nunchuck (Marshall amps) and Lumos (clean through mid-gain tones). They are both excellent.
Any reasonable person should be satisfied with this tech stack, which models gear that collectively costs as much as my house. After my Polychrome DSP purchases, I reminded myself that I am a reasonable person, and that I could therefore ignore any further amp sims that might tempt my wandering eye.
Uber has made a big push to offer robotaxis as an option for its rideshare services in more markets this year. Starting today, the company is offering autonomous vehicles as an option for customers in Dallas. The move is in partnership with Avride.
At the start, the AVs providing rides will have a person in the front seat, but Uber plans to have fully driverless operation “in the future.” The company will have a small fleet of Avride’s Hyundai Ioniq 5 vehicles to start, but it plans to eventually have hundreds of these AVs working in Dallas. Riders can set their preferences to increase their chances of being paired with a robotaxi in the Uber app. If someone is assigned an AV for their ride, they will have the option to switch to a traditional rideshare driver.
Uber started a partnership with Avride in October 2024, but the rideshare company has cast a wide net for collaborators. It has also worked to bring robotaxis to markets with Waymo in Austin and Atlanta, with Lucid in the Bay Area, with WeRide in Abu Dhabi, and with Momenta in Europe.
This article originally appeared on Engadget at https://www.engadget.com/transportation/uber-is-launching-robotaxis-in-dallas-120000411.html?src=rss
Sound Open Firmware is one of the projects started originally by Intel but has grown into a multi-vendor initiative for open-source audio digital signal processing (DSP) firmware and development tooling for a variety of platforms under the Linux Foundation umbrella…
Merged yesterday to the Linux 6.19 Git codebase was the “core/uaccess” pull that introduces new scoped user-mode access with auto-cleanup functionality. This can reduce the number of speculation barriers encountered when needing to access user-mode memory and thereby avoiding some of the performance penalties incurred by speculation barriers…
It’s time for the annual Rockefeller Christmas tree lighting! The Christmas in Rockefeller Center tree lighting special will air tonight, Dec. 3 from 8-10 PM ET — though coverage of the tree lighting will start an hour prior, at 7 PM ET. The Voice and Happy’s Place star Reba McEntire will host and perform at the Rockefeller Tree lighting, which will also feature performances from Halle Bailey, Michael Bublé, Kristin Chenoweth, Laufey, the Radio City Rockettes and more. Here’s how to tune into the 2025 Rockefeller Tree lighting.
When is the 2025 Rockefeller Tree lighting?
The Rockefeller Center Christmas tree will be lit on Wednesday, Dec. 3, 2025.
2025 Rockefeller Tree lighting time:
Coverage of the 2025 Rockefeller Tree lighting will start at 7 p.m. ET. The official Christmas in Rockefeller Center tree lighting special will air from 8-10 p.m ET.
2025 Rockefeller Tree lighting channel:
The Christmas in Rockefeller Center special will air on NBC and stream on Peacock.
How to watch the 2025 Rockefeller Tree lighting without cable:
Who is hosting the 2025 Rockefeller Tree lighting?
Reba McEntire will host NBC’s annual holiday special, and perform throughout the evening.
2025 Rockefeller Tree Lighting performers:
Alongside Reba McEntire, the tree lighting ceremony special will feature performances from Marc Anthony, Halle Bailey, Michael Bublé, Kristin Chenoweth, Laufey, New Edition, Brad Paisley, Carly Pearce, Gwen Stefani and the Radio City Rockettes, who are celebrating their 100th anniversary this year.
Ways to watch the Rockefeller Tree lighting for free:
This article originally appeared on Engadget at https://www.engadget.com/entertainment/streaming/how-to-watch-the-christmas-in-rockefeller-center-tree-lighting-special-tonight-111504725.html?src=rss
Google engineer Eric Biggers who is known for his many Linux crypto subsystem performance optimizations has seen his latest pull requests land in Linux 6.19. Notable among them are some AES-GCM optimizations benefiting AMD Zen 3 processors and separately AVX-512 processors also benefit too from this latest round of optimization work…
Docker container images often contain security vulnerabilities inherited from their base operating system packages. Rather than rebuilding images from scratch, you can use Trivy to scan for vulnerabilities and Copa to patch them directly. This tutorial demonstrates how to identify and fix container vulnerabilities on Ubuntu, Debian, RHEL, CentOS, and Fedora systems using these two powerful open-source tools.
Red Hat’s Peter Hutterer announced the release today of xkbcomp 1.5, the CLI utility used for compiling X Keyboard Extension (XBD) keyboard descriptions for the X.Org Server. Driving this new xkbcomp release are fixes for four security issues…
China’s private launch firm LandSpace is preparing the debut flight of its Zhuque-3 rocket, aiming to become the country’s first to land a reusable orbital-class booster using a Falcon-9-style return profile. Ars Technica reports: Liftoff could happen around 11 pm EST tonight (04:00 UTC Wednesday), or noon local time at the Jiuquan Satellite Launch Center in northwestern China. Airspace warning notices advising pilots to steer clear of the rocket’s flight path suggest LandSpace has a launch window of about two hours. When it lifts off, the Zhuque-3 (Vermillion Bird-3) rocket will become the largest commercial launch vehicle ever flown in China. What’s more, LandSpace will become the first Chinese launch provider to attempt a landing of its first stage booster, using the same tried-and-true return method pioneered by SpaceX and, more recently, Blue Origin in the United States.
Construction crews recently finished a landing pad in the remote Gobi Desert, some 240 miles (390 kilometers) southeast of the launch site at Jiuquan. Unlike US spaceports, the Jiuquan launch base is located in China’s interior, with rockets flying over land as they climb into space. When the Zhuque-3 booster finishes its job of sending the rocket toward orbit, it will follow an arcing trajectory toward the recovery zone, firing its engines to slow for landing about eight-and-a-half minutes after liftoff. At least, that’s what is supposed to happen. LandSpace officials have not made any public statements about the odds of a successful landing — or, for that matter, a successful launch…
Via the openSUSE Innovator Initiative, packaging of the Intel Neural Processing Unit (NPU) driver for the openSUSE ecosystem has begun. This is helping to jump-start the Intel NPU support within the openSUSE space although user-space applications ready to leverage the Intel NPU still remains very limited…
Mission-Center offers a single interface for tracking resource usage and managing processes and services, making routine system checks easier from the desktop.
