Normal view

Received — 12 August 2026 Ars Technica - All content

Terabytes of credentials leaked in massive supply-chain attack

12 August 2026 at 21:43

Terabytes worth of credentials, many belonging to the world’s biggest and most sensitive organizations, have been exposed in a supply-chain attack on LiteLLM, an open source tool that streamlines AI-driven software development. Microsoft, Amazon, Cisco, Samsung, and Salesforce are only a handful of the entities whose access secrets were exposed.

The revelation was posted on Tuesday and Wednesday by security firms CloudSEK and Hudson Rock. CloudSEK said it found cloud keys, repository tokens, SSH keys, Kubernetes secrets, package publishing credentials, environment variables, and AI provider keys that could allow attackers to gain access to more than 2,500 organizations.

40 minutes is all it takes

The credentials were extracted during a 40-minute window in March while the victims used compromised versions of LiteLLM downloaded from the package’s official location in the Python Package Index repository. Hudson Rock said it made the discovery after analyzing a 195TB file that it obtained. Neither firm identified the source of the information.

Read full article

Comments

© Getty Images

Have physicists finally discovered glueballs? New evidence points to yes.

12 August 2026 at 21:13

Physicists with the Beijing Spectrometer III (BES III) experiment have uncovered convincing new evidence of the existence of so-called glueballs, an elusive composite particle made entirely of gluons predicted by quantum theory. The results appeared in a preprint posted to arXiv last month and were also presented last week at the International Conference on High Energy Physics (ICHEP).

All the stuff we see around us is made up of quarks held together by gluons (carriers of the nuclear strong force) to form protons and neutrons, which comprise the core of every single atom. The Higgs boson, discovered in 2012 after decades of searching, was widely touted as the final missing piece of the Standard Model of Particle Physics. But there are still plenty of unanswered questions, including whether or not glueballs really exist. They should, if the Standard Model is correct; they're a direct prediction of quantum chromodynamics, i.e., the theory of the strong nuclear force. There should even be several kinds of glueballs.

As Matthew Francis wrote for Ars in 2015:

Read full article

Comments

© BES III Collaboration

Twitch content has trained Amazon AI for years, but users can opt out now

12 August 2026 at 21:00

Twitch now lets users opt out of Amazon's use of content from their channels to train Amazon's "generative AI content models." The change, announced today, comes more than two years after a company executive confirmed that Amazon was using Twitch content for AI training.

In an updated support page, Twitch confirms that users must opt out if they don’t want their “streams, VODs, clips, stream chats, and pictures and text on your channel [to] be used in future training of a model developed by Amazon whose purpose is to generate or synthesize text, audio, images, or video.”

To opt out, users must go to the proper settings at www.twitch.tv/settings/security.

Read full article

Comments

© Omar Marques/SOPA Images/LightRocket via Getty Images

Trump sued over "brazen" scheme to sell Truth Social API access for $100K a month

12 August 2026 at 20:20

President Trump was sued by nonprofit news groups today over Truth Social's "Truth API" that sells real-time access to posts from Trump and other top users of the social network. Trump is profiting from selling preferential access to government information, the lawsuit said.

Trump's social media company this month started charging customers up to $100,000 per month for the earliest access to posts that can have immediate impacts on financial markets. The first customers are mostly high-frequency trading firms that could benefit financially from getting official government news milliseconds before others.

"This scheme is profoundly corrupt. The President stands to gain financially by giving 'market-moving' government information to those who are willing and able to pay his personal company," the lawsuit said.

Read full article

Comments

© Getty Images | Kevin Dietsch

US boosts drone surveillance as flesh-eating screwworms spread in Texas

12 August 2026 at 19:40

Hundreds of US government drones have switched from border surveillance to a different surveillance mission this summer—looking for signs of screwworm infestations in wild animals and livestock herds.

The flesh-eating New World Screwworm is the parasitic larva that emerges from eggs laid by flies in the open wounds or body openings of warm-blooded animals and humans, with untreated cases potentially leading to severe injury or death. Since the first screwworm cases were detected in South Texas in June, the US Department of Agriculture and US Customs and Border Protection have been conducting “one of the most extensive animal-health surveillance operations in the country,” the USDA said on August 10 in social media posts on platforms like X and Facebook.

The effort involves at least 200 drones owned by the Department of Homeland Security, which includes the Customs and Border Protection (CBP) agency. But the actual number in use "varies depending on availability and need," a USDA spokesperson told Ars.

Read full article

Comments

© US Department of Agriculture

Two hydrogen-burning engines powered this car to a new land speed record

12 August 2026 at 17:01

It's been far too long since I've been able to report a new land speed record. For a while, it looked like Bloodhound might have been able to make good on its 1,000 mph (1,609 km/h) attempt, but then the money ran out. As a result, Thrust SSC's two-way average of 763.6 mph (1,229 km/h), set in 1997, remains the fastest anyone has ever driven a wheeled vehicle over a timed mile. But yesterday, on the Bonneville Salt Flats in Utah, a new record was set by the JCB Hydromax for hydrogen-powered cars.

JCB is a UK-based manufacturer of heavy industrial and agricultural equipment—think diggers, loaders, backhoes, tractors, and so on. And as JCB is based in the UK, it doesn't have the luxury of being able to ignore carbon emissions targets; it has to have alternatives to diesel engines. For some products, that means switching to batteries, but the company has also been working with hydrogen. At first, that meant fuel cells, but after developing prototypes, JCB concluded the tech was too expensive and too fragile for life on the farm or the construction site. Instead, in 2020, the company started developing its own hydrogen combustion engine.

The idea of burning hydrogen in an internal combustion engine has been tried before with little success. For example, in 2006, BMW modified a naturally aspirated V12 engine in a 7 Series to run on hydrogen, which it did, but with 60 percent of the power and five times the fuel consumption compared to gasoline. More recently, Toyota's president Akio Toyoda has been among the drivers of an experimental hydrogen-burning Toyota Corolla in some Japanese endurance races. In this case, Toyota started with the GR Corolla's turbocharged three-cylinder engine; the forced induction from the turbocharger made up somewhat for the reduced energy density of hydrogen.

Read full article

Comments

© JCB

US tries to override New York gambling laws, orders Kalshi to keep operating

12 August 2026 at 16:33

The Trump administration is trying to stop New York from enforcing its gambling laws against Kalshi, and yesterday said it ordered the prediction market to continue operating in the state.

The Commodity Futures Trading Commission (CFTC) announced that it exercised its emergency authority in response to a "market emergency." The CFTC said it acted "to ensure market stability" and "ordered the exchange to continue to operate in accordance with the Commodity Exchange Act’s Core Principles." The Trump administration took the action after a request from Kalshi.

The market emergency alleged by the CFTC is that New York Attorney General Letitia James sued Kalshi on July 31. James' lawsuit seeks a court order to permanently enjoin Kalshi "from operating an unlawful gambling business" in the state. The lawsuit also demands that Kalshi "make full restitution to customers who have engaged in betting" and pay financial penalties.

Read full article

Comments

© Getty Images | Bloomberg

Booksellers suspect AI firms are buying and then destroying rare books

12 August 2026 at 15:19

If you can truly appreciate an old book—and maybe even marvel at how its fragile, yellowing pages contain some of the earliest ways that people tried to make sense of the world around them—then headlines about tech companies that are destroying books to train AI likely torture a tender part of your soul.

It’s indeed depressing to imagine piles of book spines waiting to be fed into wood chippers while torn-out pages are cropped, scanned, and trashed. But that’s the cheapest and easiest way to scan books as fast as possible, and AI companies are in a race to advance their models by training on the kind of engaging, high-quality long-form texts that can only be found in books. So book lovers fear it’s likely that the practice is happening on a grander scale than is currently being reported and that some physical copies of books will be lost forever.

What makes this destruction extra painful, though, is that it doesn’t have to be this way.

Read full article

Comments

© hexvivo | iStock / Getty Images Plus

Google reveals 2026 hardware lineup: Pixel 11, Pixel Watch 5, and Pixel Tag

12 August 2026 at 14:00

Google has revealed its Pixel phone hardware for 2026, and you won't be surprised. The Pixel 11 series looks a lot like last year's lineup, featuring an evolution of the design Google adopted with the Pixel 9. There are some minor tweaks, a few new hardware goodies, and yes, even more Gemini-powered AI. The new phones are joined by an updated Pixel Watch 5 with much the same story, as well as Google's first in-house tracker device, the Pixel Tag. And you can place orders for all of Google's new hardware today.

The Pixel 11 series is clearly the star of the show. You might even call it the highlight—or HiLight. Just as the leaks predicted, Google's most notable hardware innovation for the 2026 Pixel phones is the return of the notification LED (sort of).

The new HiLight feature is available on the Pro phones, so the base model Pixel will remain unilluminated. HiLight consists of a ring of RGB LEDs inside the flash assembly on the back of the phone. It lights up when you're talking to Gemini, so you don't have to look at the screen of your phone to know you've been heard or that the AI is working. Thus, it makes the most sense when the phone is lying face down.

Read full article

Comments

© Google

Researchers found a way to hijack devices through Zoom screen sharing

12 August 2026 at 13:37

As AI models gain advanced capabilities to find vulnerabilities in software, develop ways to exploit them, and even carry out autonomous hacking sprees, researchers offered a sobering new example on Tuesday, disclosing vulnerabilities in the video conferencing platform Zoom that could have been exploited to take over targets’ devices. Anyone on a call that involved screen sharing, whether participants or the host, would have been vulnerable to a silent attack that could be carried out with no indication and no interaction from the victim.

Researchers from the digital defense firm A Security say the bug was discovered in early June using publicly available AI models, and that it took fewer than 20 prompts to uncover the vulnerabilities and create a working attack. Zoom issued a security advisory on Tuesday, including details about fixes the company has already begun rolling out to address the flaws, which affected devices running all operating systems that Zoom supports—Windows, macOS, Linux, iOS, and Android.

“What is interesting for us and what we believe is dangerous is the democratization of these capabilities—the barrier to entry is dropping rapidly,” A Security cofounder Omer Gull told WIRED ahead of the disclosure. “Before it would have taken a team of five people maybe six months with a lot of refining and iteration to find this. Now people can reach the same results with under 20 prompts. And Zoom is an important type of target because people assume trust when using it. They don’t see it as a threat.”

Read full article

Comments

© Getty Images

Formula E finds a new home on Disney+, ESPN+

12 August 2026 at 13:35

Formula E is set to make a big change in terms of visibility when season 12 gets underway this December. It has signed a new multiyear deal to broadcast the sport on Disney+ and ESPN+ in 144 countries, with live coverage of each entire ePrix, from practice through qualifying to the race. The new media deal means that here in the US, Formula E will be shown on the streaming networks from next season; since 2023, the sport has been shown live on Roku.

"This is a landmark moment for Formula E and reflects the incredible momentum behind our Championship," said Formula E's CEO Jeff Dodds. "Disney’s unrivaled global reach and storytelling will introduce Formula E to millions of new fans while bringing them closer than ever to the drama, innovation, and excitement of electric racing. As we enter the GEN4 era, this provides an exceptional platform to accelerate our global growth and continue building one of the world’s most exciting sports properties."

As we've previously covered here at Ars, next season was already shaping up to be a massive one for the electric racing series. It debuts the new GEN4 car in December as well. The new car has double the power of the current racer, with a nominal 603 hp (450 kW) from a twin-motor, all-wheel drive powertrain that goes up to 804 hp (600 kW) in Attack Mode. Which means that for much of a lap, a Formula E GEN4 car will generate as much power as a 2027-spec Formula 1 car; the F1 car is also stuck with just 602 hp from its V6 engine when the battery has no charge.

Read full article

Comments

© Simon Galloway/LAT Images

Did poop enable the evolution of complex animals?

12 August 2026 at 12:34

The Cambrian explosion may have been fueled by poop.

The first animals on Earth emerged about 600 million years ago, and 60 million years later, those simple early animals evolved in wildly different directions, branching out into a diverse menagerie of complicated new forms and conquering new ecological niches. Known as the Cambrian Explosion, this flurry of rapid evolution produced most of the animal phyla and ecosystems we see around us today.

And it may have taken off because some of those early animals evolved a bizarre new ability: pooping. According to a recent study, the first poo pellets helped spread nutrients to deeper parts of the ocean, fueling the evolution of bigger animals in more diverse ecosystems.

Read full article

Comments

DEF CON crowd suspected in fake-hotspot attack on Delta flight

12 August 2026 at 00:08

On Monday, passengers aboard Delta flight 591 going from Las Vegas to Atlanta allegedly spoofed the onboard Wi-Fi, raising the attention of federal law enforcement.

The incident came one day after the DEF CON security conference concluded in Las Vegas and was first described on social media accounts that follow publicly available air-to-ground messages, known as ACARS.

According to the “ACARS Drama” account, a message sent by pilots from the plane stated: “NO INFO AS OF NOW WE HAVE A BUNCH OF PAX THAT WERE AT A CYBER CONFERENCE IN LAS THEY WERE ABLE TO JAM OUR WIFI AND BROADCAST THEIR SIGNAL.”

Read full article

Comments

© Igor Golovniov/SOPA Images/LightRocket

Trump wants Big Pharma to split MMR vaccine; Big Pharma thinks it's idiotic

11 August 2026 at 22:31

Backlash to Trump's vaccine order on Monday has been swift and sharp, with various public health and medical organizations and independent experts calling it "dangerous," "unscientific," "false and misleading," "so wrong," and saying it is "putting children's health at risk."

The responses are unsurprising; the medical and health communities have consistently fought against the anti-vaccine, anti-science agendas pushed by Trump and his health secretary, Robert F. Kennedy Jr., who has no background in science, medicine, or public health. The American Academy of Pediatrics—which called the order "not only disheartening but dangerous"—is leading a lawsuit against previous changes to federal childhood vaccine recommendations under Trump and Kennedy. In March, the organization, along with other medical groups, won a temporary injunction reversing most of the changes.

However, less expected among the scorn for Trump's order is the immediate pushback from the pharmaceutical industry.

Read full article

Comments

© Getty | Francis Chung

Received — 11 August 2026 Ars Technica - All content

Russian drones found near vital European offshore gas site, get blown up

11 August 2026 at 21:20

Romanian army divers used explosives to destroy two Russian-made drones found floating in the Black Sea near Romania’s largest natural gas project, according to the NATO member country’s defense minister.

Defense Minister Radu Miruță posted a Facebook video supposedly showing one of the drones being blown up in the water by explosive ordnance disposal divers of the Romanian army on August 11, as reported by Reuters and other news outlets. The drones were first spotted in the water by a ship working in the vicinity of the Neptun Deep—an offshore gas project under development in the Black Sea that will make Romania the largest gas producer in the European Union.

A Romanian Coast Guard ship that responded with army soldiers aboard found two drifting Gerbera-type drones of Russian design along with other debris. Miruță also disclosed that Romania had reached out to “Ukrainian partners who confirmed that the systems do not belong to them.”

Read full article

Comments

© Romanian Ministry of Defense

Chrome adopts what may be the best protection yet against account takeovers

11 August 2026 at 20:59

Google’s Chrome browser has added a new feature that could go a long way in preventing a form of account takeover that’s grown increasingly common as users adopt two-factor authentication, passkeys, and similar protections.

The new Chrome protection is known as device-bound session credentials (DBSCs). The measure stores a unique encryption key in a silicon-resident fortress that’s built into the device running the browser. On Windows machines, this fortress is called a TPM, short for Trusted Platform Module. On macOS and iOS, it’s known as a secure enclave. Other platforms have differing names. Recently released versions of Chrome for Windows and macOS generate a key that’s stored in this fortress.

An antidote to session cookie theft

DBSCs protect against the theft of session cookies, the unique strings of characters that websites store on browsers. Session cookies greatly speed up browsing on sensitive sites that require user authentication. Instead of requiring the exchange of credentials each time a user opens a new site page, the server sets a session cookie that effectively proves the user has already successfully logged in.

Read full article

Comments

© Getty Images

Meta can't stop states' $1.4 trillion lawsuit from going to trial

11 August 2026 at 20:27

Meta and TikTok tried to defeat thousands of social media addiction lawsuits in one fell swoop, but an appeals court rejected the attempt in a ruling issued yesterday.

First up among the lawsuits is a case brought against Meta by the California attorney general and other state AGs. Meta said in a July court filing that the state AGs' demands for damages would amount to more than $1.4 trillion. A trial in district court is scheduled to start on August 19, with jury selection beginning August 12.

In a 3-0 ruling yesterday, a judges' panel from the US Court of Appeals for the 9th Circuit rejected the Meta and TikTok claims that they have legal immunity to the lawsuits under Section 230 of the Communications Decency Act.

Read full article

Comments

© Getty Images | NurPhoto

Gemini becomes Google's fastest-growing product ever as it hits 1B users

11 August 2026 at 19:48

Google has been all-in with Gemini for the last several years, and despite some animosity online, the bet is paying off. CEO Sundar Pichai announced today that Gemini has reached 1 billion monthly active users (MAUs), an important milestone for any Google product. While 13 other Google products have managed that feat, Gemini has done it faster than any other.

Gemini has wormed its way into virtually every Google product and service, powering email organization in Gmail, document summary in Drive, and much more. Gemini is also core to Google's flagship search experience, with AI Mode and AI Overviews becoming increasingly hard to avoid. The 1 billion-user metric has nothing to do with any of that, though.

These 1 billion users may also be encountering Gemini in all those places, but that's not the MAU metric. Pichai is talking only about people who are opening the Gemini app or visiting the Gemini web interface to enter a prompt or access Gemini Live. If you used Gemini only once in the past month, you are part of this cohort.

Read full article

Comments

© Aurich Lawson

Used EV buying guide: The $30,000 edition

11 August 2026 at 18:31

A strange thing is happening in the used EV market. Supply is up thanks to an ever-increasing stream of ex-lease cars reaching the market, and yet prices have been going up as well. As a result of America's latest war in the Middle East, used EVs have appreciated by just over 5 percent since February. Despite the stronger pricing, used EV sales have been strong this year—up 25 percent year over year by May, although a weaker June has brought overall sales up just over 20 percent year over year, according to the analysts at Cox Automotive.

Used EVs also hang around on dealer lots a lot less than new ones—the same analysts at Cox found just 38 days' supply of used EVs in June, but 81 days for new EVs. And much of the demand is at the cheaper end of the spectrum, say the analysts at Recurrent. In previous installments of our used EV buyers' guide, we've already looked at the most affordable used EVs, ending last time at $25,000—EVs that may now qualify for a $1,750 rebate if you're in California. Today we're looking at used EVs that cost between $25,000 and $30,000, and according to Autotrader's search, there are more than 9,000 used EVs for sale in that price range.

Broadly, you can split the results into three buckets: Cars where you'll find plenty to choose from; ones where there might be a couple of hundred for sale nationwide; and then the oddities where there might just be a handful to pick from.

Read full article

Comments

© Aurich Lawson | Getty Images

Less than 2.5% of Taylor Farms' recalled lettuce went to Taco Bells

11 August 2026 at 18:00

Although shredded iceberg lettuce at Taco Bell restaurants has been a prime suspect in an explosive outbreak of the diarrheal parasite Cyclospora, a new report from the Food and Drug Administration finally reveals where all the contaminated lettuce was sold—and only a sliver of it went to Taco Bell locations.

The feces-tainted lettuce was sourced from Mexico and sold by Taylor Farms, a mammoth produce provider based in California. Taylor Farms has drawn scrutiny for its ties to the Trump administration and reluctance to provide information amid the outbreak, which has now sickened over 23,000 people across 47 states, killing two and sending over 500 others to the hospital. Taylor Farms reportedly attempted to delay issuing a recall amid the illnesses and, since then, has refused to clearly report how much tainted lettuce it recalled and where all of it had been shipped.

The FDA's Enforcement Report finally provides some answers: Taylor Farms recalled 236,192 cases of lettuce due to potential Cyclospora contamination. Of those, only 5,900—just shy of 2.5 percent—were sold to Yum, the parent company of Taco Bell, Pizza Hut, and KFC. The other 97.5 percent of the lettuce that potentially sickened Americans was distributed elsewhere.

Read full article

Comments

© Getty | Kevin Carter

Tracking extreme heat by the hour makes climate change seem even worse

11 August 2026 at 16:26

Global warming is leading to more extremely hot weather. There is perhaps no more obvious consequence of climate change. But changing how we analyze this problem can still help scientists think about it in a different way that may yield surprises.

Generally, studies on heat extremes work with some combination of daily minimum, maximum, and mean temperatures. Sometimes they focus on multi-day heatwaves using those metrics, since the discomfort and health impacts increase for longer events. There are different thresholds you can use to define extreme heat in these analyses, either based on past statistics or on the human body’s physiological limits.

A new study led by Weilin Liao and Xuanzong Zhang at Sun Yat-sen University tried breaking down heat extremes to the hourly level instead, which reveals some interesting nuances.

Read full article

Comments

© invizbk/Getty Images

A Google insider spills the tea on how the company forsook its founding ideals

11 August 2026 at 16:07

In 2018, 20,000 Google employees worldwide made headlines when they staged a walkout to protest how the company had handled sexual misconduct allegations against key corporate executives, among other grievances. One of the organizers was Claire Stapleton, a communications specialist whose distinctive voice and ability to channel the corporate ethos had once earned her the internal moniker "Bard of Google."

Six months later, a disillusioned Stapleton resigned, claiming she had been demoted during the most recent restructuring as retaliation for helping to spearhead the walkout. The story of how she went from enthusiastic cheerleader to proactive dissident, and the many lessons she learned along the way, are featured in her new book, Don't Be Evil: Bad Bosses, Fake Promises, and My Escape from Big Tech—A Biting Memoir of Twelve Years Inside Google.

Stapleton didn't set out to be a rabble-rouser. When she joined Google out of college in 2007, it was like "getting the golden ticket in Willy Wonka," she told Ars. Awareness of her good fortune offset any initial uneasiness or skepticism, although Stapleton was sufficiently independent-minded not to move into what was then Google's new corporate housing development in Mountain View, California. Stapleton was very good at her job, and she quickly moved up the ranks, playing a key role in shaping the company's public image.

Read full article

Comments

© Alex Tai | SOPA Images | LightRocket | Getty Images

Trump to give Republicans a 3-1 FCC majority, isn't filling empty Democratic seat

11 August 2026 at 15:28

The Federal Communications Commission has been shorthanded throughout President Trump's second term, but it's about to get a new commissioner. Unsurprisingly, Trump is breaking a historical norm with a nomination that would give Republicans a 3-1 advantage on the FCC.

Historically, the president and Senate worked together to ensure that the president's party maintained only a one-vote majority. Normally, the president's party has three FCC members while the minority party has two.

Instead of the typical 3-2 split, the FCC has operated with a 2-1 Republican majority during Trump's second term. On Friday, Trump nominated Republican Danielle Thumann Severs to take one of the empty spots. Thumann Severs, a lawyer, has been working as FCC Chairman Brendan Carr's senior counsel. She must be confirmed by the Republican-controlled Senate before being sworn in as a commissioner.

Read full article

Comments

© Getty Images | Anna Moneymaker

New surveillance tech links your phone to your license plate

Imagine that you share a ride to work with the same colleague most mornings. As it passes by a license plate reader, the camera records the car, which can be linked through vehicle records to its registered owner. Beside it, another sensor detects signals broadcast by devices traveling nearby, such as your phone and your colleague’s smartwatch.

After enough trips, software may treat some of those devices as a recurring electronic signature associated with the vehicle. Weeks later, one of the same device signals appears alongside a different car connected to an investigation. The signal itself may not contain its owner’s name, but its previous association with a known vehicle gives investigators another clue they can use to work out who was carrying the device.

SignalTrace, a system marketed by the security company Leonardo, is designed to work alongside automatic license plate readers. The company says it can recognize groups of consumer devices that regularly move together, then associate them with license plate records and time-stamped locations. The pattern can then be searched even when a police investigator does not know the plate number.

Read full article

Comments

© Getty Images | Smith Collection/Gado

New Pass-ta-key attack reveals all the things we didn't know about passkeys

11 August 2026 at 11:30

Last week, a researcher outlined what he said was a “novel attack surface” in passkeys, the new authentication paradigm that offers a more secure alternative to password-based methods. In fact, the attacks demonstrated in the post are neither novel nor unique to passkeys. This distinction is important because the research has generated confusion among end users and security professionals as they assess whether this new mechanism is truly safe to use.

The attack is called Pass-ta-key—a blending of the word passkey with the phrase “pass the key” and a nod to a plate of pasta. Arie Olshtein, a researcher at security firm Palo Alto Networks, described in a post last week how Pass-ta-key could obtain all passkeys stored in the Google Password Manager app (GPM) for Windows when it’s running on a machine infected with malware.

This came as a surprise to many people because they believed passkeys are stored exclusively in the trusted platform manager (TPM), the locked-down enclave in a hardened silicon chip that’s reserved for storing cryptographic keys and other highly sensitive information on Windows machines. If passkeys are stored in the TPM, then how was Pass-ta-key able to extract the entire set of passkeys stored by the app, they wanted to know.

Read full article

Comments

© Aurich Lawson | Getty Images

Live now: Ross Scott discusses the Stop Killing Games movement

10 August 2026 at 22:23

By now, any serious gamer is familiar with a favorite title becoming unplayable after a centralized online server gets shut down, or being unable to purchase and download a digitally delisted, critically acclaimed title from yesteryear. Can anything be done about this video game preservation problem?

To help answer that question, we'll be hosting a live conversation with Ross Scott, the founder of the Stop Killing Games campaign, on August 11 at 2:30 pm ET as part of the Ars Live series. As Ars' Senior Gaming Editor, I've documented countless examples of once vibrant games being left for dead by their creators.

Our live discussion with Ross and Kyle.

Scott founded the Stop Killing Games movement in 2024 after Ubisoft decided to shut down the servers for The Crew. Since then, he's helped gather millions of gamers' signatures on government petitions demanding legislative action to provide some form of perpetual access for games people purchase—either via continuing centralized server support or an option for players to maintain their own servers. The movement has already led to an official parliamentary debate and response from the European Commission and proposed legislation that is working its way through the California legislature.

Read full article

Comments

© Stop Killing Games

With new open models, Meta pitches another reboot of its struggling AI strategy

10 August 2026 at 22:13

Meta has announced its intention to focus on open-weight large language models. Additionally, the company announced the release of an open model called Muse Glimmer and a promise to open the weights for Muse Spark 1.2, its more powerful model, in the next few weeks.

Alongside these announcements, Meta CEO Mark Zuckerberg published a more than 6,000-word essay outlining the company's philosophy about AI systems and governance moving forward. The essay aims to differentiate Meta from companies like OpenAI and Anthropic, which develop proprietary models and have lobbied the US government for help competing against large-scale distillation—which involves using an existing model to train a new one—or open-weight models by Chinese labs.

Read full article

Comments

© Bloomberg / Contributor | Bloomberg

Trump signs bonkers order that cuts vaccines, promotes ones that don't exist

10 August 2026 at 21:42

President Trump signed an executive order Monday that makes sweeping, unilateral changes to federal vaccine recommendations. The order aims to reduce the number of lifesaving vaccines all children are recommended to get—from 18 to 11—while also splitting them up and spacing them out over more time and more medical visits.

The vaccine changes are not backed by evidence or spurred by new findings. Rather, they are based on false anti-vaccine fearmongering about harms, including the debunked claim that they cause autism, and misinformation that multiple vaccinations can "overwhelm" children's immune systems. This false claim has also been repeatedly debunked and explained.

During a signing event at the White House on Monday afternoon, Trump falsely claimed that pediatricians "have a vaccination that looks like the size of a bottle of soda," that is "poured into a little child's body, and bad things happen in too many cases. This is an explosion; this is an epidemic," Trump said.

Read full article

Comments

© Getty | Bonnie Cash

Developer Cold Iron Studios shuts down cloud version of $60 game with no refunds

10 August 2026 at 21:26

Following its announcement in March, game developer Cold Iron Studios has shut down the servers for the cloud version of Aliens: Fireteam Elite on the Nintendo Switch. The game originally cost $30 (or $60 for an “Ultimate” version with additional content).

Cold Iron Studios hasn't offered customers refunds.

TheGamer reported that affected players are entitled to a discount for the Nintendo Switch 2 version of the game, which is a 2021 co-op, third-person shooter based on the Alien film franchise. However, that would mean paying money for a game that you have already paid money for once.

Read full article

Comments

© Cold Iron Studios/Steam

Amazon backs power plant that may become top source of US climate pollution

10 August 2026 at 20:45

Amazon’s artificial intelligence ambitions will soon be partly fueled by a natural gas-burning power plant in Texas that “could become the largest single source of climate pollution in the United States,” The New York Times reported.

These gas-burning plants are increasingly lumped into data center projects. They produce harmful pollutants, which can accelerate climate change impacts and harm public health—contributing to conditions like asthma, heart disease, lung cancer, and strokes. Some communities are demanding more stringent environmental reviews, but the Trump administration favors fast-tracking that can include skipping the permitting process entirely.

Since Elon Musk’s xAI controversially began relying on gas turbines last spring to power its biggest AI data center, Colossus, there has been public backlash to off-the-grid data centers like the one Amazon is building.

Read full article

Comments

© eric1513 | iStock / Getty Images Plus

Zuckerberg’s superyacht ignored emergency channel, failed to aid stranded boat

10 August 2026 at 20:01

Social media scuttlebutt about Mark Zuckerberg’s $300 million superyacht failing to assist stranded boaters off the coast of Alaska was partly corroborated by ship-tracking data—and eventually prompted responses from both the US Coast Guard and a spokesperson for Zuckerberg.

The incident was made public when Michael Love, a passenger aboard the replica steamship Wilderness Legacy during an Alaska cruise, posted about it on the social media platform Bluesky. The ship detoured to rescue a stranded 21-foot skiff with two women, a child and a dog, after the US Coast Guard had supposedly first radioed Zuckerberg’s superyacht, Launchpad, for help without success.

“There was near unanimous booing when the captain announced this,” Love wrote in describing the Alaska cruise passengers’ response to the lack of help from Zuckerberg’s ship.

Read full article

Comments

© Sylvain Lefevre/Getty Images

Received — 10 August 2026 Ars Technica - All content

Has Ford got cheap car fever? A $25K crossover is supposedly on the way.

10 August 2026 at 17:07

Talk of the affordability crisis may be penetrating corporate boardrooms. Hot on the heels of the name and starting price for Ford's new affordable electric truck, news leaked today that the sub-$30,000 Fathom isn't the only cheap Ford in the works. According to a report at Automotive News, the automaker is working on a new entry-level crossover that will start at around $25,000, although don't expect it in showrooms until 2029.

The leak is courtesy of an unnamed Ford dealer, which, together with its peers, was shown an early prototype described as resembling a first-gen Ford Escape. The crossover is said to have both hybrid and unelectrified powertrain options, and Automotive News notes that several sources have told it that Ford will assemble a hybrid crossover at its Hermosillo plant in Mexico in 2029, alongside the Bronco Sport and Maverick.

Additionally, Ford apparently showed off a four-door Mustang, which Automotive News compares to the Porsche Panamera in terms of size and styling, albeit with a sub-$40,000 price tag (making it almost a third the price of the cheapest Panamera). And a third nugget of news—the universal electric vehicle platform that will build the Fathom will result in four other electric Ford models as well.

Read full article

Comments

© Aurich Lawson

Taylor Farms recalls jalapeño products for Salmonella amid Cyclospora outbreak

10 August 2026 at 16:37

Amid a massive Cyclospora outbreak linked to its iceberg lettuce, Taylor Farms is now recalling products containing jalapeños, which were linked last week to a large, multi-state Salmonella outbreak.

On Sunday, August 9, Taylor Farms recalled jalapeño-containing products, including diced jalapeños, dips, salsas, pico de gallo, guacamole, and pre-made salads, burritos, and sandwiches. The foods, which include both branded and unbranded products, were sold across 26 states at major retailers, including Hannaford, Kroger, Target, Trader Joe's, Walmart, and Whole Foods.

The recalled products contain recalled jalapeños from Coast Citrus Distributors, which was linked last week to a Salmonella outbreak that has infected at least 345 people across 27 states, sending at least 36 people to the hospital. No deaths have been reported.

Read full article

Comments

© Getty | Olga Yastremska

Valve slowly expands SteamOS support on non-Valve hardware

10 August 2026 at 16:01

SteamOS is continuing its slow march to fuller support on a wider variety of non-Valve hardware. This weekend's release of the SteamOS 3.8.25 Beta includes "initial gamepad support" for a few recent gaming handhelds and improved support for a few others.

Those newly supported handhelds include MSI's Claw 8 EX AI+, the extremely expensive, extremely powerful handheld built around Intel's Arc G3 processor that launched this summer. While SteamOS has long included beta support for "other AMD powered handhelds," Valve has only recently been working on offering compatibility with Intel-based handhelds like the MSI Claw line. This weekend's update suggests the company hasn't abandoned those efforts and that Intel chips aren't being left out of the SteamOS conversation.

SteamOS 3.8.25 also newly supports the controllers built into Ayaneo's Android-focused Pocket S2 and the more recently released Windows-based Konkr Fit. Valve also says the new OS offers "improved support" for older MSI Claw devices and the OneXPlayer line of portable gaming PCs.

Read full article

Comments

© Aurich Lawson | Steam

Following Epic loss, Google has started hosting rival app stores in the Play Store

10 August 2026 at 15:44

A new day has dawned in the Play Store, and it's one that Google tried very hard to avoid. The first third-party app store has arrived in Google Play as a result of the long-running antitrust lawsuit with Epic. Those in the US can now head into Google Play and download Aptoide, a game-focused store that has been available as a sideloaded client since the early days of Android.

Forcing Google to distribute third-party app stores in Google Play was one of several remedies imposed by Judge James Donato after Epic emerged victorious in 2023. The remedies also included lowering developer fees, mirroring Google Play apps in other app stores, and allowing developers to use alternative payment systems. But it was the app store stipulation that seemed to irk Google the most.

Google almost avoided this outcome when it agreed to a settlement with Epic, which was announced early this year. Under the terms, Google would certify third-party app stores to allow users to install and use them with less friction, but it would not host them in Google Play. However, Google and Epic withdrew the settlement when it appeared the court would not approve it. This Registered App Store program is still slated to launch internationally, but in the US, Google is only doing what it must to comply with the judge's orders.

Read full article

Comments

© Mateusz Slodkowski/SOPA Images/LightRocket via Getty Images

One of China's workhorse rockets just exploded in flight

10 August 2026 at 15:05

One of China's most used rockets, the Long March 7A, exploded a little more than a minute after lifting off on Monday evening, local time.

The medium-lift rocket's payload was classified, but it was believed to be a military communications satellite. The rocket's liftoff from Wenchang Space Launch Site appeared to be nominal, but publicly captured videos (such as this one) showed that the rocket's first stage exploded about 1 minute and 20 seconds into flight.

The Long March 7A rocket was developed by the China Aerospace Science and Technology Corporation and is operated by the state's space agency. As of Monday night in China, state officials have not commented on the explosion.

Read full article

Comments

© Li Zhenzhou/VCG via Getty Images

Dogs can tell if you're scared or sad

10 August 2026 at 15:00

Any dog owner would tell you that their canine companions are attuned to their humans' emotional state and respond accordingly. Scientists have performed fMRI scans on dogs and identified a specific brain region that processes happy human facial expresses, like a smile, according to a new paper published in the journal iScience. They also found that dogs can tell the difference between negative facial expressions, specifically anger, sadness, and fear.

“Humans are really good at picking up small details on the face, and so are dogs,” said co-author Raúl Hernández-Pérez of the University of Vienna. “This makes dogs very interesting. By studying their brains, we can understand what adaptations have developed to support their remarkable social and emotional understanding of humans.”

Prior behavioral studies have shown that dogs are sensitive to emotion in human faces. Dogs will, for example, choose a box their human has identified with a happy expression over one the human treats with fear or disgust. Past fMRI studies found that an area in the canine left temporal cortex showed a stronger response to human faces compared to dog faces, as well as a greater response in the caudate, hippocampus, and amygdala to human faces showing emotion versus neutral faces.

Read full article

Comments

© Laura V. Cuaya/CC BY-SA

2026 Subaru Outback review: Great interior, refined drive, divisive looks

10 August 2026 at 14:49

When station wagons headed for the same retirement home as the vinyl roof and the opera window, Subaru looked at its sensible Legacy wagon and had a different idea. Raise it a few inches, wrap the lower body in plastic cladding, name it for the Australian bush, and suburban families would drive to soccer practice while imagining themselves fording streams and climbing sand dunes.

In giving birth to the Legacy Outback in 1995, Subaru more or less created the template for the modern, adventure-minded, off-road-themed crossover. By the 2000 model year, the Outback had graduated from trim level to standalone model, and it has been paying the bulk of Subaru's bills ever since.

Today, the 2026 Outback marks a new era in the model's history. The wagon silhouette that defined six generations has given way to a sharpened two-box shape that's much more at home parked next to an upright Forester or Ascent. Tall, square, and profusely SUV-like, the new edition won't win any beauty contests, but form follows function more than ever in the Outback.

Read full article

Comments

© Jim Resnick

A researcher bought noreply.net. Companies started sending him secrets.

10 August 2026 at 14:25

Cory Solovewicz receives more unwanted emails than you. Seriously—it’s a lot more. Since December 2024, one of the domains at which the security researcher receives email has registered 401,796 messages—by his calculations that’s an average of 699.99 pings per day.

This deluge isn’t the regular flood of spam, newsletters, and unwanted deals that fill many people’s inboxes. Instead, companies and other organizations are inadvertently sending Solovewicz other people’s private information and company secrets. Over the last few years, he’s received injury reports from a city government, confirmation of people’s pizza orders, and account setup emails from a school platform. “I get service orders for people that need repairs. I get lots of test platform credentials,” says Solovewicz, a security researcher and consultant.

Solovewicz is receiving the avalanche of messages as he’s the owner of the domains noreply.us and noreply.net, which he purchased in 2020 and 2024, respectively. After originally planning to use the noreply.us domain as a catch-all email—which receives mail sent to any @ address on that domain—to filter messages and enhance his privacy, the researcher quickly noticed that other systems were sending mail to @noreply.us addresses. “I created an accidental honeypot,” Solovewicz tells WIRED. “I had no idea it was going to turn into this.”

Read full article

Comments

© Richard Drury via Getty

Peer review is overwhelmed—can it survive in the AI era?

10 August 2026 at 11:00

Jason Semprini was excited about his research on policies mandating that elementary school students receive the human papillomavirus vaccine. HPV causes most cases of cervical cancer, but counterintuitively, Semprini found that mandates don’t do that much to reduce the overall rate of cervical cancer in a population. That’s odd, but it's also not completely surprising—we know that mandating a vaccine can motivate some people to find ways to avoid it.

Semprini wrote up the study and submitted the manuscript to a journal, where it was sent out for peer review, a long-standing process through which other researchers in the field assess the validity of research and make a recommendation on whether or not it should be published. This is usually done anonymously and on a volunteer basis.

In this case, the reviewer did not share Semprini’s excitement. That may have stemmed from a misunderstanding of the study’s central message: The reviewer mistakenly thought Semprini was questioning whether the HPV vaccine itself prevents cervical cancer rather than studying the effectiveness of a policy meant to increase vaccination rates. “There’s a very big difference there,” said Semprini, who is a health economist at Des Moines University.

Read full article

Comments

© Aurich Lawson | Getty Images

Received — 9 August 2026 Ars Technica - All content

Mount Toba eruption doesn't seem like it could nearly kill our species

9 August 2026 at 11:00

Mount Toba was the biggest volcanic eruption in the last 2.6 million years, and some have suggested it nearly wiped out humanity. Around 74,000 years ago, a caldera on what is now Sumatra emptied thousands of cubic kilometers of magma in about two weeks, roughly a thousand times more than Mount Pinatubo spewed out in 1991. “People thought it might have caused massive cooling of the planet, and hence threatened the survival of our ancestors,” says Jinheum Park, a geoscientist at Johannes Gutenberg University in Mainz, Germany.

Park and his colleagues went looking for the records of that catastrophe in the mud taken from the bottom of a small crater lake on the Kenya-Tanzania border. They found instead that the effects of the Mount Toba eruption lasted under two years and amounted to perhaps half a degree of cooling.

Muddy calendars

Volcanic eruptions inject sulfur dioxide into the stratosphere, where it becomes a haze of tiny droplets that reflect sunlight back into space. Bigger eruptions eject more sulfur dioxide and, in principle, cause more cooling. But this trend stops working when the eruption exceeds a certain magnitude. “Bigger sulfate aerosols settle quickly, because they are heavier,” Park explains. This quick settling makes them less effective in scattering incoming solar radiation.

Read full article

Comments

© Wikimedia Commons

Received — 8 August 2026 Ars Technica - All content

The first self-driving vehicle on Mars has proven to be a smashing success

8 August 2026 at 11:30

Sometime next week, NASA's newest rover on Mars, Perseverance, will set a record for the most distance driven by any vehicle on another world.

The automobile-sized rover, which landed on Mars in February 2021, will traverse beyond 45.16 km (28.06 miles) across the Martian surface. In doing so it will break the previous distance record held by the long-lived Opportunity rover, which ceased communications with NASA in 2018.

So how did Perseverance reach this record-setting distance in just a third of the time?

Read full article

Comments

© NASA

DeepMind’s hurricane breakthrough has surprised weather scientists

8 August 2026 at 11:05

In October 2025, a storm brewed over the Caribbean Sea. Weather models differed on its trajectory. Would it remain weak and end up in Haiti, or would it intensify and head to Jamaica? Artificial intelligence model WeatherNext, developed by Google’s DeepMind and Google Research, went with the latter. Five days before landfall, it predicted with 80 percent confidence that the storm system would hit Jamaica as a Category 5 hurricane.

Hurricane Melissa was catastrophic, causing flooding and landslides across Jamaica. But the AI model helped forecasters give an earlier warning to communities in its path, so they could better prepare.

In a paper published on Thursday in Nature, researchers show that the WeatherNext AI model can predict cyclones with unprecedented accuracy. On average, it gives forecasters a day more lead time than existing models; this means its predictions three days out are as accurate as previous models’ predictions two days out. On the ground, that extra day can mean a lot.

Read full article

Comments

© J Marshall/NASA/ESA/T. Pesquet/Alamy

Received — 7 August 2026 Ars Technica - All content

Europe's free satellite service just made it easier to track wildfires

7 August 2026 at 21:48

The wildfires afflicting communities across the world can now be tracked more easily by anyone using Europe’s free and open satellite imagery service—all thanks to a wildfire visualization script originating from nearly a decade ago.

The Copernicus Browser provides free access to the latest satellite imagery taken by the European Space Agency’s Sentinel satellites for the European Union’s Earth observation program. The three satellites of the Sentinel-2 mission have proven especially useful for wildfire monitoring by providing multi-spectral imaging at resolutions as granular as 10 meters in visible light and near-infrared bands—and the Copernicus Browser previously offered 10 default visualization layers using different combinations of spectral bands.

Now Copernicus Browser has also added a straightforward “wildfires” visualization layer for Sentinel-2 imagery that went live on August 4. Anyone clicking on this layer while looking at a wildfire location can see active fires in white or yellow, burning vegetation in red, and burned landscapes in dark brown or black.

Read full article

Comments

© European Union | Copernicus Sentinel-2

Flesh-eating screwworms feast on humans in Mexico; human cases top 500

7 August 2026 at 21:09

Since the flesh-eating screwworm fly reinvaded Mexico in 2024, human cases of the voracious parasite have been mounting. According to a July surveillance report from Mexico's Ministry of Health, there have been over 500 human cases in 2025 and 2026. A study this week in the journal Emerging Infectious Diseases analyzed the information on over 200 confirmed cases reported between April 2025 and March 2026 and found that the infestation pace is increasing.

Among the 200 confirmed cases in the study, six deaths were reported. At least one of the deaths was directly caused by the fly's maggots, researchers in Mexico reported in the study.

The New World screwworm (NWS) fly was once endemic in Mexico—as well as the US. The flies lay hundreds of eggs in the wounds, inflamed tissue, mucous membranes, and orifices of warm-blooded creatures. The resulting maggots hatch within a day and begin ravenously feasting on the living flesh of their victims. While the fly's maggots generate ghastly, life-threatening wounds in a variety of warm-blooded species, including humans, they're particularly devastating to livestock.

Read full article

Comments

© CSIRO

Judge rules Meta caused "public nuisance" and must fund mental health treatment

7 August 2026 at 19:49

A New Mexico judge yesterday ordered Meta to pay $567 million for a fund that would alleviate the "public nuisance" created by its social media services. The order to pay for youth mental health care is in addition to $375 million in civil penalties that a jury ordered Meta to pay earlier in the same case.

New Mexico Attorney General Raul Torrez sued Meta in a Santa Fe County court in 2023. A jury found in March 2026 that Meta's social media platforms do not effectively protect kids from child exploitation and ordered the company to pay civil damages for violating state consumer protections and misleading parents about the safety of its apps.

The jury trial was just phase 1 of the case involving Meta, the owner of Facebook, Instagram, and WhatsApp. "The Phase 1 jury trial considered the State’s Unfair Practices Act claims and resulting civil penalties. The Phase 2 bench trial considered the State’s request for abatement based upon the State’s allegation that the Defendant, Meta, created a public nuisance," Judge Bryan Biedscheid wrote yesterday in the $567 million judgment. Meta reported $60.8 billion in revenue and $15.85 billion in net income in Q2 2026.

Read full article

Comments

© Getty Images | Cavan Images

The ultimate eclipse chase: A Concorde raced against the Moon's shadow

A walk down the tarmac at the National Air and Space Museum of France is guaranteed to thrill aviation enthusiasts. Several civilian and military aircraft of the past and the present are showcased in this museum, located at the Paris-Le Bourget airport. One of them is the legendary Concorde F-WTSS 001 prototype, the sight of which should give goosebumps to science enthusiasts as well.

That’s because right behind its long nose is a painted map that traces the path of a June 1973 total solar eclipse across Africa. It’s there on the Concorde 001 prototype because a group of eight scientists set a new world record of observing a total solar eclipse for 74 minutes by flying this aircraft at more than twice the speed of sound.

To put this figure into context, the maximum duration of totality on the ground is around 7.5 minutes when an eclipse is observed in the equatorial regions. For the upcoming solar eclipse of August 12, which can be seen from parts of Europe, the maximum duration of totality from the ground will be slightly more than two minutes.

Read full article

Comments

© F. Claudel

New official 30th anniversary Quake mission pack adds new maps and mechanics

7 August 2026 at 18:00

This year is the 30th anniversary of the launch of the original Quake by id Software, if you could believe it. To commemorate that, publisher Bethesda has released a new campaign chapter for the game, titled "Dawn of the Machine."

This is part of a series of new campaign chapters, all developed by MachineGames "in collaboration with id Software." MachineGames is best known for making the games in the relatively recent Wolfenstein reboot series, as well as Indiana Jones and the Great Circle. The Quake maps are made by a team dubbed "Quake Club," which includes several MachineGames employees who work on Quake maps in their spare time.

The ambition and scope of some of these maps is beyond what was typical for Quake maps back in the late '90s, thanks in part to the team's use of TrenchBroom, a newer map editor that works well on modern systems and is easier to work with and more capable than what folks were using in those days.

Read full article

Comments

© Bethesda

DOGE's wild, unverifiable savings claims discredited in US government report

7 August 2026 at 17:51

It won't come as a surprise that Trump's Department of Government Efficiency (DOGE) didn't save taxpayers nearly as much as it claimed. Analysis from outside the government showed savings claims were heavily inflated, and now the government's own watchdog has said it wasn't able to confirm savings claims made in DOGE's so-called "Wall of Receipts."

For example, DOGE reported savings of $49.2 billion from cutting grants, but almost none of it could be verified, the US Government Accountability Office (GAO) said in its report yesterday. The GAO is the auditing and investigating arm of Congress and issued the DOGE report in response to a June 2025 request from Sens. Gary Peters (D-Mich.) and Richard Blumenthal (D-Conn.).

"The Wall of Receipts did not provide sufficient information to verify the method DOGE used to calculate savings, or what the savings consisted of, for 13,553 of the 15,887 grants it reported as terminated. This corresponds to about 96 percent of the DOGE-reported grant savings," the GAO report said.

Read full article

Comments

© Getty Images | Samuel Corum

OpenAI’s expensive smart speaker will use moving parts to seem “more alive”

7 August 2026 at 17:36

OpenAI’s upcoming smart speaker will probably cost over $300, “people familiar with the matter” have told Bloomberg’s Mark Gurman.

The generative AI company has “discussed” charging up to $400, Bloomberg, which has been reporting on the yet-to-be-announced smart speaker since July, said today. The publication said that OpenAI is viewing the smart speaker as a smartphone replacement.

OpenAI has declined to comment on its product roadmap.

Read full article

Comments

© Getty Images | NurPhoto

❌