eMudhra, the certificate authority that issued eight intermediate TLS credentials so weak that anyone could mint certificates for any website or mail server—one had a private encryption key of just 4—said it’s getting out of the business.

V. Srinivasan, chairman of India-based eMudhra Limited, cited increasing costs and complexities of compliance requirements—paired with the business generating just 1 percent of its revenue. He also said that the emergence of organizations providing TLS certificates free of charge further reduced returns on investment when compared to other products and services the company offers.

Don't let the door hit you on the butt

“However, the level of social media amplification around this incident has brought scrutiny that is out of proportion to SSL/TLS’s place in our business,” the company continued in a Thursday post. “In view of this, after detailed deliberations our board has concluded that withdrawing from global SSL/TLS is the right decision for eMudhra and its shareholders.”

Read full article

Comments

© Getty Images

Those mourning yesterday's shuttering of highly praised and influential developer BioWare also had to deal with the cancellation of the next Mass Effect game, which was first teased back in 2020. Today, we got our best look at what that game could have been with a short, leaked trailer for Mass Effect: Universe.

In the roughly two-minute montage—which describes itself as "in-engine footage from our small team" that "uses our pre-production assets"—an ex-military officer wearing an N7 trenchcoat (similar to the one seen in that 2020 teaser) encounters an Asari at a bar. He talks of his frustration with military life—"by the time you put out one fire, another had already started"—before discussing his new line of work "stopping [the fires] before they start" and "making the choices no one else is willing to make. Going where others are afraid to go."

Mass Effect: Universe Trailer
by
u/Random_Hyabusa_Ninja in
masseffect

Read full article

Comments

© Reddit

A 25-year-old German experimental photographer has won the 2026 Nikon Small World photomicrography competition with a striking image of droplets of ink being deposited on paper by an inkjet printer. Ole Bielfeldt beat out 1,802 other entries hailing from 69 different countries.

Bielfeldt became interested in photomicrography during the COVID-19 lockdown after discovering an old microscope in his parents' attic. He figured out how to build an adaptor out of a tube and some wood to connect the microscope to his father's camera and taught himself the art through trial and error, building custom tools as needed. He documents how he captures transformative images of everyday objects with behind-the-scenes videos posted to macrofying, his photography and videography brand.

It was Bielfeldt's curiosity about the inner workings of inkjet printers that inspired his winning entry, but capturing the action of ink drops being deposited on paper was a challenge, given that the process happens so quickly. The droplets, for instance, moved faster than the camera's shutter speed. Bielfeldt's solution was to deconstruct the printer so that the paper moved under a stationary (rather than moving) printhead, and then take the image in a dark room, using a flash to serve as the shutter, thereby freezing the ink drops mid-air. There was no need for pricey equipment. Bielfeldt does not use AI in his images, preferring to rely on traditional techniques.

Read full article

Comments

© Ole Bielfeldt

Calley Means—a top ally to anti-vaccine Health Secretary Robert F. Kennedy Jr. and a co-author of the so-called "MAHA bible"—resigned from his role in the Trump administration Thursday, reportedly in frustration over delays to food policy changes sought by the Make America Healthy Again movement.

"I am resigning from the White House with tremendous respect for President Trump and Bobby Kennedy," Means wrote in a social media post this afternoon. "It was an honor to advocate for MAHA moms in the administration and steer policies like Dietary Guidelines reform, psychedelic reform, removing soda from SNAP, removing food dyes, GRAS reform, and overhauling government food procurement."

His post did not provide a reason for his departure. Means served as a senior advisor to Kennedy.

Read full article

Comments

© Getty | Andrew Harnik

When we first drove BMW’s first Neue Klasse model, the iX3, it quickly revealed that BMW knows how to make a good electric vehicle. A clean-sheet design, it featured the automaker’s sixth-generation electric powertrain, a completely reimagined dashboard, and powerful computers to run the whole show. Now, much of that technology is being ported over to the larger X5 line.

But BMW knows not all its customers are ready to go electric, especially in the US, so it’s sticking with its powertrain-agnostic CLAR platform, as used in cars as diverse as the large 7 Series and the new gasoline 3 Series. Which means in addition to the all-electric iX5, there are also mild hybrid and plug-in hybrid X5s available, and in time, even a hydrogen-powered option. For now, as I’ll explain, I think the EV is the pick of the bunch.

Pick your power

The most conventional option is the X5 40 xDrive, powered by a 3.0 L turbocharged inline six-cylinder engine that generates 394 hp (294 kW) and 428 lb-ft (580 Nm). The 48 V mild hybrid system can contribute a decent slug of torque (148 lb-ft/200 Nm) if necessary, and the engine operates under the Miller cycle for better efficiency, as well as featuring the usual BMW engine technology, like variable valve timing. Expect around 26 mpg (9 L/100 km) from this powertrain and a full-to-empty range of 569 miles (915 km).

Read full article

Comments

© BMW

Android-powered foldable phones have been available for years, but most people never paid attention to them. As predicted, that could be changing now that Apple has entered the folding phone market with the iPhone Duo. Analysts have speculated that Samsung's Z8 foldables were seeing a boost from the iPhone announcement, and now Samsung has seemingly confirmed that.

In a new blog post, Samsung UK crows that the company's 2026 foldable lineup is moving much faster than last year's models. Compared to the Galaxy Z Fold 7, combined European sales for the Galaxy Z Fold 8 and Galaxy Z Fold 8 Ultra are up 45 percent. Samsung isn't talking about Z Flip 8 sales, but it previously noted that its larger foldables made up about 80 percent of foldable purchases. We can assume any increase there is not impressive enough to mention.

The reason for flat Z Flip sales may simply be that Apple didn't release a flip phone. Unsurprisingly, Samsung doesn't mention Apple or the iPhone Duo in its press release. However, it does say that search volume for the Z8 series across Europe spiked 460 percent the week of September 6 to 12. And guess what was announced on September 9? Yep, the iPhone Duo. Z Fold 8 search volume across the entire month of September (when the phones launched) was up 260 percent.

Read full article

Comments

© Ryan Whitwam

Four years ago, a senior official in Russia's foreign ministry painted a bullseye on commercial satellite networks that assist Ukraine in its fight against invading Russian military forces.

On Wednesday, several days after a Russian military spacecraft moved within striking distance of one of those commercial satellites, the same Russian diplomat assured the world there's no reason to worry.

There's a sharp incongruity in those statements from Konstantin Vorontsov, deputy head of Russia's delegation to the United Nations. Vorontsov's comments Wednesday in the UN General Assembly's First Committee came moments after a US official called attention to recent maneuvers by Kosmos 2612, a Russian military craft that approached a US-registered commercial satellite some 340 miles (550 kilometers) above Earth.

Read full article

Comments

© UN General Assembly

Meta must pay $25 billion to New Mexico after a jury found the tech giant guilty of nearly 44 million violations of state consumer protection laws.

The largest fine to ever hit Meta came after New Mexico Attorney General Raúl Torrez declined to join an $18 billion settlement Meta reached earlier this year with attorneys general in nearly all states.

In his opinion Wednesday, US district court judge Francis J. Mathew said there was no “bright line rule” for determining the appropriate penalty for Meta's repeated and willful deception of users since 2010 about their “control of data, third-party data misuse, misinformation, hate speech, and equal enforcement.”

Read full article

Comments

© ANDREW CABALLERO-REYNOLDS / Contributor | AFP

Government officials in Guinea-Bissau have formally rejected a clinical trial that would be run by Danish researchers and funded by the US to look for alleged nonspecific harms from the newborn dose of the hepatitis B vaccine. The vaccine dose is currently recommended globally for all newborns and has been used safely and effectively for decades.

In an email to Ars Technica, one of the trial's lead researchers, Christine Stabell Benn of Bandim Health Project and the University of Southern Denmark, said that Guinea-Bissau's Council of Ministers "formally reaffirmed its non-acceptance of the study on 16 October."

The revelation that the study was formally rejected last week comes after news on Monday that judicial police in Guinea-Bissau raided Bandim Health's offices and seized vaccines. Stabell Benn highlighted that the police search came after the trial was rejected.

Read full article

Comments

© Getty | BSIP

Last year, we reported on Red Viper, a Virtual Boy emulator that added a splash of Super Game Boy-style color to Nintendo's famously failed red-on-black "portable" 3D headset from the '90s. Now, a new emulation experiment, VBoy Color, has taken the concept to a higher level, using a tile-based palette system that allows for many more distinct colors in each individual Virtual Boy frame.

Rather than simply replacing the Virtual Boy's four shades of red with four different colors, VBoy Color's readme files explain how the emulator's game-specific Color Packs can assign a distinct four-color palette to each 8x8 tile in a Virtual Boy scene. That means the emulator can differentiate between green pipes, grey platforms, and red brick wall in Mario Clash, for instance, even though all those in-game objects share the same overlapping red hues in the original game.

The Game Boy Color-esque results feel like being transported into an alternate history where Nintendo invested in a full-color display rather than cheaper red LEDs for the Virtual Boy hardware. The increased contrast between differently colored elements is particularly welcome in games like Jack Bros. or Vertical Force, where the original red-on-red display often makes it hard to differentiate the player-character from busy red background elements.

Read full article

Comments

© VBoy Color

Amazon has warned that vulnerabilities in a programming language that underpins much of the Internet, discovered using AI tools, are being “broadly exploited” as governments and companies rush to secure their systems.

The world’s largest cloud computing provider on Wednesday said it had identified an attempt by hackers to exploit the bug four days before the weakness was disclosed to the public.

Amazon added the flaws were “now being broadly exploited in the wild.”

Read full article

Comments

© Getty Images

Lord of the Rings: The Rings of Power returns next month for its third season. Prime Video unveiled a teaser earlier this year at San Diego Comic-Con, but we haven't heard much about the new season otherwise. We now have the official full trailer, and it's jam-packed with a rising Sauron, who is intent on conquering Middle-Earth with his army of Orcs—with the fractured opposition of elves, dwarves, and men scrambling to figure out how best to stop him. We also meet the human men who will become the Ringwraiths; the showrunners have dubbed them the Nazgnagol ("Rings-servant").

(Some spoilers for the first two seasons below.)

Prime Video made a major investment in The Rings of Power when it acquired the rights to the source material from the Tolkien estate, even committing to multiple seasons upfront. S3 is set seven years after the events of S2 and opens when the war between the elves and Sauron is at its height. Per the official synopsis:

Read full article

Comments

© Prime Video

It’s easy to criticize US automakers and their tepid approach to electric vehicles under the current administration and the expiration of the EV tax credit. It’s also easy to look at the rest of the world's embrace of EVs and wonder if the US is entering a “Malaise 2.0” era. Which is why GM wants the world to know that it is still focused on its end goals of electrification, autonomy, and improving vehicle quality while reducing development time.

At this year’s GM Forward event, company executives announced that its hands-off, eyes-off Super Cruise technology will expand across the lineup and be available on nearly every vehicle. This will include the pickup trucks and the crossovers, and not just the Escalade IQ that it was announced for last year.

Sterling Anderson, GM’s head of product, said the company is testing this technology to the tune of 1 million miles (1.6 million km) a month in both the virtual and real world. The goal is that not only would the vehicle be able to take you places, but it could go and do things for you.

Read full article

Comments

© GM

Unknown hackers hijacked more than 300 Tor exit nodes and reconfigured them to favor unencrypted email traffic and redirect SSH connections through servers they controlled, a researcher reported Tuesday.

The hijacking began in late August, when, according to Tor volunteers, the attacker used a valid password that had been reused to gain access to a Tor management server. The attacker then installed Ebury, a backdoor written for Linux that was discovered 12 years ago.

Mysteries remain

Then the attacker connected from the management server to a second Tor server, called Switzerland2, through SSH, using an RSA key that, for unknown reasons, investigators couldn’t find among Switzerland2’s authorized keys. With administrative control of Switzerland2, the attackers installed Ebury there as well. Finally, the attacker reconfigured settings on two exit nodes that Switzerland2 hosted.

Read full article

Comments

© Photo Illustration by Pavlo Gonchar/SOPA Images/LightRocket via Getty Images

In 2015, all but two countries agreed to make an effort to keep global temperatures from reaching 1.5° C above pre-industrial readings. Since then, most of the world has largely treated what they signed on to as aspirational, and one of the largest emitters (the US) has alternately withdrawn and recommitted to the agreement. Meanwhile, the planet has responded as expected to steadily rising carbon emissions and appears to be practically at the 1.5° limit.

On Wednesday, for the first time, the United Nations Environmental Programme (UNEP) acknowledged that reality and conceded that the goal of keeping warming below 1.5° was no longer a viable one. Instead, its new goalposts focus on keeping both how long we exceed that limit and how much we exceed it by, at a minimum. Doing that will require both dramatic emissions cuts now and the removal of hundreds of gigatonnes of carbon dioxide from the atmosphere before the century is out.

Bowing to the inevitable

Depending on which baseline you use to establish pre-industrial temperatures, as well as which reconstruction of global temperatures you rely on, the world has either gotten very close to, or already exceeded, the 1.5° milestone. The current El Niño event, which appears exceptionally strong, will almost certainly mean that we've gone over it no matter which records you choose.

Read full article

Comments

© Abstract Aerial Art

Federal Communications Commission Chairman Brendan Carr today warned broadcasters about airing "fake polls," amplifying one of the many complaints that President Trump has regularly made about the news media.

Carr's post on X said, "Many journalists and broadcasters have been amplifying or airing these Polls without regard to basic journalistic ethics and without informing the public that those Polls lack a scientific, accurate, or even real basis... Broadcasters are advised to avoid engaging in News Distortions or running Broadcast Hoaxes by airing Polls that would violate their regulatory obligations."

Carr urged broadcasters to "provide their viewers with additional context and information about Polls they have covered." In fact, one small polling outfit was exposed as a hoax this week, and a similar incident occurred in August. News outlets have reported on these hoaxes, providing the very "context" that Carr said is needed.

Read full article

Comments

© Getty Images | Brandon Bell

In September, when Microsoft severely limited the game-streaming buffet available to Game Pass subscribers, the company said non-subscribers would soon be able to "purchase cloud playtime hours through the Xbox Store and stream eligible games they own on supported devices." Today, Microsoft rolled out those a la carte Cloud Playtime purchases to Xbox Insiders, with prices that might be a bit galling for players who have already purchased these streamable games.

The "introductory launch pricing" for Xbox's Cloud Playtime purchases is as follows:

• 10 hours for $4 (~$0.40/hour)
• 25 hours for $8 (~$0.32/hour)
• 50 hours for $12 (~$0.24/hour)

Purchased playtime "remains available until it’s used," Microsoft writes, so you don't have to worry about your 50-hour purchase expiring before you can use it fully.

Read full article

Comments

© Microsoft

Enterprise-sized businesses spend, on average, 28 percent of their software budgets on unwanted upgrades, migrations, and licensing changes. Often, those firms' IT heads think those changes are detrimental.

Those results are according to a survey of 2,018 chief information officers and senior IT decision-makers at companies with at least 10,000 employees that Origina commissioned for its report, “The Software Tax.” About half of the respondents (1,011) are from the US, and the rest are from the United Kingdom. All respondents worked at companies with at least $1 billion in annual revenue.

Keep in mind that Origina provides maintenance for various enterprise software. Its report points to independent software maintenance as a way for IT leaders to regain control over software budgets, illustrating its potential bias. A third-party research consultancy, Censuswide, conducted the survey.

Read full article

Comments

© Clara Molden/PA Images via Getty Images

Tesla published its third-quarter 2026 financial results this afternoon. Earlier in October, it reported its sales and deliveries for the three-month period, selling fewer cars than in the same quarter in 2025, yet it still beat analyst projections. Now we can see how those sales translate to the bottom line. Tesla brought in $28 billion in revenue in Q3, almost the same as in 2025.

Automotive revenues were $20.6 billion, a 3 percent decrease year over year. Perhaps more troubling is the decline in revenue from solar panels and storage batteries—this line of business had been growing, but for Q3 revenue fell 16 percent year over year to $2.9 billion. Services and other revenues, though, which include parts and Supercharger use, grew by a third to $4.6 billion.

But the company—like the rest of us—has seen its expenses go up. Operating expenses rose by 39 percent to $4.8 billion, dropping the company’s operating margin to just 2.6 percent; in Q3 2025, Tesla’s margin was 5.8 percent. Net profit fell to $787 million, down 43 percent year over year. What’s more, capital expenditures were up by 110 percent to $4.7 billion, and free cash flow was down 62 percent to $1.5 billion.

Read full article

Comments

© JIM WATSON/AFP/Getty Images/Aurich Lawson

• Milestone

This is a fourth security release in the continuation of 1.30.x, mostly to address some severe PHP vulnerabilities and update our official alternative Docker images (Alpine) (our default Docker images based on Debian were already fixed).

Note that our rolling-release channel (edge) is recommended for faster security patches.

Bug fixes highlights 🐛:

• PHP CVE-2026-109618, CVE-2026-109619 php#2026-10-21-5

This release has been made by @Alkarex, @Frenzie and newcomer @icco

Full changelog:

• Security
  • Docker alternative image (Alpine 3.24) updated with PHP 8.5.12 and Apache 2.4.69 #9475
  • Docker: disable PHP session.upload_progress.enabled for additional security #9476
• I18n
  • Improve Dutch #9479

Apple just revealed a new brand identity for Apple Music, with the expected turn to Liquid Glass. I’m not much of a fan of their new design language in general; this is where I admit that I’m still running MacOS Sequoia and have grumpy things to say about rounded corner radii and text legibility.

It’s just a trend, it will pass, and at some point I’ll probably cave and upgrade when it starts actually affecting my ability to get work done, or more importantly get security updates. Once I adjust, I’ll stop noticing it, and life will go on.

As such, I wouldn’t normally find an obvious rebrand like this notable, much less feel like I had much to say about it. But then I happened to catch Apple’s behind-the-scenes video in my YouTube recommendations, and I realized I did have thoughts.

Read full article

Comments

© Apple

The legendary studio behind series like Mass Effect, Dragon Age, Neverwinter Nights, and Star Wars: Knights of the Old Republic is no more. BioWare announced via social media Wednesday afternoon that "after more than three decades of shared adventures, BioWare is closing and early development on the next Mass Effect project is ending."

The official announcement was posted mere minutes after a Bloomberg report detailed 400 job cuts across BioWare parent company Electronic Arts, including 50 at BioWare, based on reports from "a person familiar with the company's plans."

"Across our portfolio, we’re making deliberate choices to align talent and investments where we see the greatest opportunities for players and long-term growth," EA executives wrote in a message to staff, according to Bloomberg.

Read full article

Comments

© BioWare

Google would certainly prefer that everyone used its Gemini models with Google Cloud services, but soon, you'll have more options. OpenAI and Google have come to an arrangement that will see the former's frontier models arrive in Google Cloud services. Perhaps more importantly, GPT models will soon appear in Antigravity, Google's agent-powered coding tool.

For enterprise customers and AI enthusiasts, OpenAI's latest model will appear in Google's "Model Garden" in the coming weeks, adding to its 200-plus options. The garden already offers access to Google's Gemini models, as well as an assortment of open models like Mistral, Llama, and Gemma. Anthropic's Claude AI has also been available for some time. Google says it's now the only large cloud provider offering access to all three leading closed LLMs.

While OpenAI notes that Microsoft continues to be its primary cloud partner, the full suite of current GPT 6 and 6.1 models—Astra, Sol, and Luna—will launch on Google Cloud. Astra will naturally cost the most to run, but Google's system supports dynamically moving workloads between LLMs based on performance, latency, and efficiency.

Read full article

Comments

© Ryan Whitwam

A Wall Street Journal report said SpaceX CEO Elon Musk ordered the Starlink throttling that blindsided Ukraine's air assault forces last week, despite Musk's claim that all decisions on the military version of Starlink are made by the US military and President Trump.

Trump denied ordering the restrictions. While Musk may have spoken to Trump and administration officials before the decision, The Wall Street Journal reported yesterday that Musk made the final call. The decision came after both Musk and Trump criticized Ukraine for attacking Russian diesel refineries.

"Elon Musk ordered the slowdown of a military-grade version of Starlink relied on by Ukraine, a decision that sparked panic in Kyiv and confusion inside the Trump administration," the WSJ wrote, citing unnamed US officials and people familiar with the matter. The report said that "Musk capped the speeds at which Ukrainian hardware could stay connected to the satellite-based network... rendering some offensive drones and interceptor drones virtually useless."

Read full article

Comments

© Getty Images | Bloomberg

Elon Musk’s SpaceXAI is stuck facing a lawsuit over alleged data center pollution after Donald Trump failed to convince a judge that his Environmental Protection Agency (EPA) has complete control over all Clean Air Act lawsuits and can dismiss any suit at whim.

Soon after unpermitted gas turbines were discovered powering Musk’s giant Colossus data center in Memphis, Tennessee, the NAACP sued. Its lawsuit sought an injunction requiring xAI (which, following a merger, is known now as SpaceXAI) to use the best available pollution control technology when operating the turbines and ordering penalties up to $124,426 per day per violation. Without such remedies, the turbines risked drastically spiking pollution in already vulnerable neighborhoods housing predominantly Black communities nearby, the NAACP argued.

To block the lawsuit, Trump tried to intervene, arguing that the EPA had the power to unilaterally dismiss lawsuits any time the president decides against enforcing the Clean Air Act. According to Trump, it would supposedly “not serve the public interest” if citizens were allowed to seek massive civil penalties to punish polluting AI firms that were trying to get data centers operational as fast as possible to support Trump’s AI Action Plan.

Read full article

Comments

© ©Steve Jones, Flight by Southwings for SELC

Smart TVs running operating systems from Samsung, Vizio, and Roku continue sending data to automatic content recognition (ACR) endpoints after users opt out of tracking in the devices’ settings, according to research published on Monday. The paper from Northeastern University researchers points to potential privacy violations from some of the biggest TV brands.

ACR captures video screenshots or audio clips from smart TVs and sends the data to remote servers, where it's used for things like measuring content viewership and serving targeted ads.

The paper, "Watching the Watchers: Privacy Analysis of US Smart TV Automatic Content Recognition," examined eight smart TV OSes across 12 smart TVs from 10 manufacturers (Amazon, Hisense, LG, Roku, Samsung, Sony, Supersonic, TCL, Vizio, and Westinghouse) to examine when smart TVs use ACR and how effective opting out of user tracking is.

Read full article

Comments

© https://www.gettyimages.com/detail/photo/modern-living-room-with-smart-tv-and-remote-control-royalty-free-image/2226225055

In its current iteration, SpaceX is largely a data company seeking to provide enormous amounts of compute for artificial intelligence. During an earnings call on Tuesday afternoon, company officials spent much of their time discussing ambitious plans to roll out up to 10 GW of compute in 2027—on the ground.

Gone are the days of aspirational talk about sending humans to Mars and settling the red planet. Now it is almost all about artificial intelligence and the data needed to support its expansion. However, the company's long-term ambitions to provide data services from space, initially with the Starlink Internet constellation and eventually through the "Starmind" data center constellation, still rely on an actual rocket.

That would be the Starship vehicle, and during the earnings call, SpaceX founder Elon Musk and the company's president and chief operating officer, Gwynne Shotwell, provided new performance targets for the vehicle.

Read full article

Comments

© SpaceX

Nearly two-thirds of US doctors are turning to an AI-powered search engine to make patient decisions, propelling a little-known tech startup to a $15 billion valuation while prompting a debate over the future of patient care.

Miami-based OpenEvidence, founded by serial entrepreneur Daniel Nadler in 2022, said that many of America’s 1 million physicians processed more than 42 million prompts last month. Doctors are using the company’s chatbot to scour medical journals and clinical guidelines to help diagnose and treat patients.

The ads-powered platform has grown largely by word of mouth, penetrating a sector where few tools have seen similar traction. “We’re the first viral consumer internet app in healthcare,” Nadler told the FT in an interview.

Read full article

Comments

© OpenEvidence

Carrie White, the telekinetic prom queen from hell, is one of the most beloved horror icons in popular culture. First introduced in Stephen King's 1974 novel, Carrie, the character was immortalized in director Brian De Palma's 1976 adaptation, widely regarded as one of the best horror films of all time. It's certainly one of the best King adaptations. So Mike Flanagan faced a massive challenge when he signed on to create an eight-episode miniseries for Prime Video based on the book, released just in time to mark the 50th anniversary of de Palma's film.

I was among the skeptics who questioned why a Carrie miniseries was even necessary, although as a diehard Flanagan fan ("Flana-fan"?), I was willing to give him the benefit of the doubt. If anyone has an affinity for smartly adapting horror in general, and King's work in particular, it's Flanagan. And you know what? With one (very big) exception, Flanagan pulls it off, giving us a richly textured version of the story that is as much about kindness and lost innocence as bloody, vengeful rage—although we get plenty of the latter, too.

(Many spoilers below for the novel and the 1976 film, but there are no major reveals for the new series until after the second gallery. We'll give you a heads-up when we get there.)

Read full article

Comments

© Prime VIdeo

It's October in the Midwest, which means it's time for the pinball world to descend on a convention center in Chicagoland for the annual Pinball Expo. Once thought to be an entertainment sector slowly bleeding out, pinball has come back in a big way in recent years. I visited one of Chicago's last old-school manufacturers before heading down the road to see what's new in the silver-ball universe.

Behind the silver ball

Hundreds gathered on a brisk fall Friday morning outside Stern Pinball's headquarters in Elk Grove, Illinois, waiting to enter a Wonka-like wonder factory where piles of raw parts become licensed creations from Jaws to the brand-new Fallout. Stern invited me to tour its offices and factory floor before heading off to the convention in nearby Schaumburg, Illinois.

An early-morning line begins to form outside of Stern HQ as buses of Pinball Expo attendees arrive for tours.

As I stood with my tour group in Stern Pinball's HQ lobby, mouth agape at the dozens of machines lining the walls, we were greeted by the man himself, Gary Stern, who gave us some background on the company's 40-year history. After a stop at Gary's podium, we were ushered to the factory floor entrance, where Stern employee and legendary game designer George Gomez briefed us on the tour rules and answered questions. According to Gomez, "at any given time, Stern controls 90 percent of the current pinball market, and everybody else splits the rest."

Read full article

Comments

• Milestone

This is a third security release in the continuation of 1.30.x, mostly to address some severe PHP vulnerabilities and update our official default Docker images (Debian) (but not our alternative Alpine images yet, which are delayed).

Note that our rolling-release channel (edge) is recommended for faster security patches.

Bug fixes highlights 🐛:

• PHP CVE-2026-109618, CVE-2026-109619 php#2026-10-21-5

This release has been made by @Alkarex, @Inverle and newcomer @Ricardo-Simoes

Full changelog:

• Deployment
  • Docker default image updated to Debian 13 Trixie with PHP 8.4.27-1~deb13u1 and Apache 2.4.69
• Extensions
  • New hook: Minz_HookType::AutofillField for auth views #9362
• I18n
  • Improve Brazilian Portuguese #9473
• Misc.
  • Translate non-English code comments and identifiers #9383

Website admins, brace yourselves. Fixes for what are believed to be uncommonly severe vulnerabilities are scheduled to drop in a little more than 12 hours for PHP, a programming language that powers websites and Web applications everywhere.

PHP maintainers said Monday that they planned to release patches for two vulnerabilities, both with severity ratings of 9.2 out of a possible 10.

Waiting for PHP2Shell

“All PHP users are encouraged to prepare now so they can upgrade as soon as the release is available,” the advisory stated. “We reserve the right to release earlier should details of either vulnerability become public, or should evidence of active exploitation appear in the wild.”

Read full article

Comments

© Getty Images

Elon Musk said Tuesday that he would like to see the consolidation of his business empire by formally merging his two largest companies, SpaceX and Tesla.

"Do I think it would be a good idea? Yes," Musk said of a potential merger. He was speaking during a question-and-answer period as part of SpaceX's third-quarter earnings call. Musk said, ultimately, it not his decision. "But at the end of the day the shareholders have to be supportive of this."

Musk's talk of a merger comes after a busy year in which SpaceX already acquired Musk's artificial intelligence firm, xAI, in February. In June, SpaceX went public with the largest initial public offering on record.

Read full article

Comments

© SpaceX

Police in Guinea-Bissau raided the offices of Danish researchers on Monday, seizing doses of hepatitis B vaccine intended for a vaccine trial for newborns. International health experts have called the trial "unethical," but anti-vaccine Health Secretary Robert F. Kennedy Jr. has attempted to fund it with US taxpayer dollars.

Under Kennedy, the US Centers for Disease Control and Prevention announced in December that it had awarded the Danish researchers—led by married couple Peter Aaby and Christine Stabell Benn of Bandim Health Project—an unsolicited $1.6 million grant to run the trial. Aaby and Stabell Benn are controversial vaccine researchers who claim vaccines cause overlooked harms. They have been repeatedly praised by Kennedy but are currently under investigation by Danish authorities for alleged scientific misconduct.

Plans for the trial were halted in January as widespread condemnation erupted over the trial's design, which would potentially expose thousands of newborns in the country to hepatitis B, risking a lifelong infection that can lead to liver cirrhosis, cancer, and premature death. Outrage flared again after a Rolling Stone story earlier this month claimed the CDC set aside another $1.6 million in funding in late September and planned to move forward with the trial.

Read full article

Comments

© Getty | Nicholas Kajoba

We haven't heard many details about Microsoft's upcoming "Project Helix" gaming hardware since the company announced it in March as a device that will "play your Xbox and PC games." In a new wide-ranging profile of Xbox CEO Asha Sharma, though, Fortune alludes to a dual release strategy for upcoming Microsoft gaming hardware, with "a next-generation handheld device" planned by the end of next year and a 2028 holiday season console release that could cost between $1,200 and $1,800.

That future console price range is based on what has "internally been projected" at the company, according to Fortune. But the price for consumers could come down if "Microsoft decides to subsidize the cost," the outlet says, as many console makers have done in the past.

While a $1,200 starting price would be historically high for the game console market, even accounting for inflation, it also reflects a new normal: The slowdown in Moore's Law and AI-driven component shortages means cutting-edge gaming hardware just isn't as cheap as it used to be. This year, the Steam Machine broke the $1,000 starting price, while the 2-year-old technology in the PlayStation 5 Pro is now going for $900, and the 6-year-old Xbox Series X now starts at $750.

Read full article

Comments

Since launching in 2015, JustWatch has helped people navigate the growing number of streaming services by providing a guide on where to find movies they want to stream. Now JustWatch has its own streaming service and wants people to subscribe.

Launched today, JustWatch TV offers some movies available for free with ads that aren’t free on any other streaming service, including Green Room (2015), Locke (2013), and Sing Sing (2023). Other free movies include Fiddlin’ (2018), Friday the 13th (1980), and Hotel Mumbai (2018). I could play movies available for free on JustWatch TV without creating an account.

JustWatch TV also has movies you can rent.

Read full article

Comments

© JustWatch

Hoping to quell criticism, Meta has dropped the word “train” from its “streamlined” commercial terms of service that kick in on October 30.

Last week, Meta faced backlash after legal experts warned that the tech giant’s sweeping new commercial terms of service seemed to give Meta permission to endlessly scrape websites linked on business pages. Talking to Nieman Lab, experts suggested that Meta could possibly use the policy to avoid millions in licensing fees from news organizations by requiring all business users to share a wealth of AI training data simply for running a business page.

A Meta spokesperson confirmed that Meta did not alert users to the changed language following backlash. This potentially only adds to confusion ahead of the policy rollout. In response to backlash, Meta's spokesperson provided a statement to Ars, acknowledging Nieman Lab's initial report but not its follow-up report reiterating experts' concerns:

Read full article

Comments

© filo | DigitalVision Vectors

Google kicked off 2026 with the addition of Personal Intelligence to Gemini, allowing its AI to pull in more of your data to formulate answers. It started as a paid feature but eventually came to all Gemini users. However, this feature wasn't available in the car until now. Google is rolling out Personal Intelligence to Android Auto and Google Built-in, and it is still, thankfully, an optional feature.

As Google points out, a generative AI's outputs are better "when it knows the world and knows you," which is correct in an uncomfortable sort of way. The more context you can provide to a model, the better the output will be at the end of the token shuffle. Since Google has so much of your data already, it sees Personal Intelligence as a differentiator versus other AI systems. You don't have to provide the AI context because it already has it from apps like Gmail and Calendar.

Personal Intelligence is beginning its rollout in Android Auto today, and it will come to vehicles with Google built-in in the next few months. As an aside, "Google built-in" is questionable branding, but it refers to cars that run Google software in the infotainment system rather than projecting an interface from your phone. Very few vehicles have Google built-in, but Google often releases new car features on them first. This time, it's the other way around.

Read full article

Comments

© Google

OpenBSD 8.0 is here, marking the project's 61st release and continuing its schedule of semiannual releases dating back to 1996. What started more than 30 years ago as a fork of NetBSD has grown into one of the most security-conscious operating systems in active development. In a post to the project's announcements mailing list, OpenBSD founder Theo de Raadt highlights a host of improvements included with the latest version and writes that the project remains "proud of OpenBSD's record of more than thirty years with only two remote holes in the default install."

The latest OpenBSD version brings new features and improvements across the board. These changes, particularly the new Intel Arc support and expanded virtual address space, should improve compatibility with modern graphics cards and allow the system to map more than 4GB of VRAM. Some of the major updates noted in the release newsletter are as follows:

• Added support for Intel Arc A-Series (DG2/Alchemist) graphics cards.
• 512GB kernel virtual address space on AMD64, up from 4GB, allowing VRAM mapping above 4GB.
• Added hibernation support for ARM64 systems.
• A new RPKI-to-router daemon: rtrd(8).
• RISC-V improvements including kernel support for the 'V' vector extension and support for Advanced Interrupt Architecture.
• Wireless network driver additions and improvements, including 802.11n and 40 MHz channels for the qwx(4) wireless driver.
• Added support for up to 64 virtual CPUs per guest virtual machine.
• Security and internal improvements for LibreSSL 4.4.0 and OpenSSH 10.6.
• Improvements to the vmm/vmd virtualization stack.

The new OpenBSD also retires support for Loongson architecture after the port stopped working with the Clang 22 compiler. If you're interested in reading over all the changes that come with the new OpenBSD 8.0, you can take a look at the release announcement.

Read full article

Comments

© OpenBSD

Security personnel around the world are on high alert Tuesday following the discovery of eight TLS certificates with private keys so weak they could allow anyone to mint trusted browser and app credentials for any site on the Internet.

As of late morning Tuesday, browser makers and some major apps and programming languages had blocked all eight of the intermediate certificates. There are no reports of certificate transparency logs, which track the issuance of all browser-trusted certificates, showing the compromised keys being used maliciously. The threat remains far from over, however, because it will be hard and time-consuming to update other key parts of the Internet, such as Linux distributions and embedded and Internet of Things devices.

One word: bonkers

The eight intermediate certificates belong to India-based certificate authority eMudhra Limited. An informal advisory published to emudhra.we-have-a-problem.com over on Tuesday posted the message “We have a problem here - Wayne.” The words were digitally signed using the private key of one of the eMudhra certificates. With proof that the reporting party had control of the key, defenders scrambled because the same key could be used to sign unauthorized certificates that would be trusted by millions of servers worldwide.

Read full article

Comments

© Getty Images

TP-Link yesterday announced plans to assemble Wi-Fi routers in the US, as the company attempts to get the Trump administration's approval to sell its newest routers to American consumers.

The timing is uncertain, as TP-Link's press release said it expects US-based assembly to begin "as early as" 2027. TP-Link's application to sell new routers in the US could be rejected by the Trump administration or remain pending long enough to push the US-based assembly to 2028.

"Pending US regulatory approval, TP-Link expects domestic assembly of its groundbreaking Wi-Fi 8 home networking product line to begin as early as next year," the company said. TP-Link said it signed a Letter of Intent with US company Keytronic, which agreed "to become a primary domestic manufacturing partner for TP-Link, supporting assembly of the company’s advanced networking portfolio in Corinth, Mississippi."

Read full article

Comments

© TP-Link

It has been 13 years since the debut of a new medium-lift rocket in the United States, the Antares vehicle developed by Orbital Sciences Corporation.

The initial 100-series variant of the Antares rocket was kind of a hot mess. The rocket used old Soviet engines built during the era when Apollo astronauts were landing on the Moon. Decades later, in the 1990s, Aerojet acquired the engines and refurbished them for a rocket that would launch in the 2010s. Predictably, on the fifth launch of an Antares rocket in 2014, it exploded.

The Antares vehicle is the last of a dying breed of medium-lift rockets—defined as having a lift capacity of 2 to 20 metric tons—in the United States. Nearly a decade and a half later there is a new generation of medium-lift vehicles coming online, and they are starkly different from Antares, which had not just Russian engines but a core stage manufactured in Ukraine.

Read full article

Comments

© Stoke Space

Ukraine’s unprecedented drone rescue of a wounded soldier from the battlefield has shown once again how battlefield necessity can spur innovation. The operation was revealed just days after separate Ukrainian drones designed for casualty evacuation were deployed for frontline testing—taking a step beyond the US military’s decades of experimentation with similar concepts.

The drone evacuation of the injured soldier took place at an undisclosed time and place on the frontline where the presence of Russian drones and landmines made it impractical to send in a wheeled ground robot, according to The Kyiv Independent. On October 19, Ukraine’s Army shared a video of the drone evacuation, showing the wounded soldier securing himself in a harness suspended beneath a heavy hexacopter drone with six rotors before being flown to safety.

“This is a historic event, the next stage of evacuating the wounded, which we will all come to,” said Napalm, a programmer of the 92nd separate assault brigade's unmanned ground systems company, who went by his callsign per Ukrainian military practice, in a statement. “Now the serious systematic work begins, so that such missions are carried out constantly.”

Read full article

Comments

© 92nd Separate Assault Brigade of the Ukrainian Ground Forces

Running complicated algorithms on quantum computing hardware is going to require the use of logical qubits, where collections of hardware qubits are linked together in ways that allow errors to be detected and corrected. In general, the more hardware qubits you dedicate to each logical qubit, the better the chances are of identifying errors. But, given that the hardware qubits are prone to errors, adding more of them also increases the probability that errors will occur. If the hardware error rate is too high, then growing the logical qubit will only make matters worse.

Fortunately, several companies have demonstrated hardware where the error rate is not too high. Several demonstrations show logical qubits are beyond the breakeven point, where adding more qubits improves performance. The problem is that the improvement isn't very dramatic. To lower error rates to levels we'll need to run complex algorithms, we'd have to add a completely impractical number of qubits to each logical qubit.

On Monday, Quantinuum announced that its current generation of hardware is capable of scaling well beyond the breakeven point. Each step up in the size of logical qubits improved some measures of their performance by a factor of over 10.

Read full article

Comments

© Quantinuum

In copyright lawsuits over AI training, Meta has spent weeks blaming staff for downloading torrents. The company has now been ordered to name executives who authorized decisions to pirate books from shadow libraries like Anna’s Archive and LibGen, TorrentFreak reported.

In a discovery order impacting a class action raised by book authors—including Richard Kadrey and Sarah Silverman—as well as a lawsuit from publisher Entrepreneur Media, Magistrate Judge Thomas Hixon largely agreed that Meta must clearly identify key decision-makers. Following testimony from Meta staff who downloaded torrents, the order could expose a wider range of supervisors, managers, and executives whom staffers said greenlit the piracy.

Meta had been hoping to avoid detailing the chain of command, particularly for leadership involved in early AI training. According to a Meta court filing, its initial efforts to compile massive AI datasets were managed through an “informal approach" where supposedly nobody with authority made any decisions. Instead, Meta insisted that a “decision” was “made only in the sense” that some staffers “technically” downloaded torrents.

Read full article

Comments

© JOAO LUIZ BULCAO / Contributor | AFP

The human desire to go fast is old, dating back at least as far as the first time some adventurous Yamnaya saw a horse on the Pontic-Caspian steppe and thought, “I bet if I jumped on that thing’s back, it would be faster than walking.”

A thousand years later, someone else invented the wheel—and the chariot—and humanity was ready to roll. Now, about five millennia since that first horseback ride, equestrianism is mostly a leisure activity, and we drive cars, propelled by motors with more power than an entire herd of beasts could muster.

Acceleration, top speed, and lap times are the usual ways we quantify that performance, and performance electric vehicles are currently in an arms race to see which one can hit 60 mph in the least amount of time. But measuring a car’s performance is easy—all you need is a stopwatch and a track. How about measuring the effect of car performance on the driver? That’s a question Polestar is trying to answer with researchers at the University of Oxford.

Read full article

Comments

© Polestar

Muse, the new general-purpose AI agent from Meta, can expose sensitive information when users share conversations through web links, researchers reported Monday. In response to questions from Ars about the behavior, Meta said it's suspending the sharing feature while the company reviews it and considers making changes.

Like many online services, Muse has allowed users to share searches, conversations, images, and similar content with other people. Such share features usually involve clicking an option to create a unique URL that anyone can use to load a page hosting the content. To keep potentially sensitive information from being accessible to unintended people, the URLs typically contain a long sequence of text that can’t be easily guessed.

A single query is all that's required

Muse, which Meta CEO Mark Zuckerberg said last month was “built from the ground up for privacy and security,” seems to take the same precautions. But a central design decision for constructing URLs has made the links easy to discover. As a result, researchers from security firm Claroc said they were able to enumerate 6,800 links Muse users created for sharing conversations with others. After opening a few hundred of them, the researchers found information that was clearly not intended to be publicly available, including:

Read full article

Comments

© Getty Images

As I sat in the cab of the pickup truck and manually rolled down the windows, I closed my eyes and, for the briefest moment, flashed back to opening the windows on a cold, winter day in my dad’s 1975 Ford Ranger to let more cigarette smoke escape. I opened my eyes and looked through the windshield at a wall in the Slate Customer Experience Center studded with bright color chips.

Last week, in a former Tesla store staffed by some former Tesla employees, Slate opened its first showroom. Located in the Fulton Market District just northwest of the Chicago Loop, the Slate Experience Center is a place for would-be buyers to poke around a prototype, check out customization options, buy some Slate merch, and even preorder a new Slate Truck with a $300 deposit.

Designed for the American obsession with pickup trucks, the Slate Truck is a bare-bones electric pickup truck retailing for $24,950. It sports plastic panels, a minimalist interior design sensibility, actual window winders, and a projected range of 205 miles. Ars went for a ride in a Slate Truck over the summer, but we haven't had a chance to shop for one. So I stopped by the Slate Experience Center so I could, er, experience the Slate.

Read full article

Comments

© Eric Bangeman/Ars Technica

Japan launched a $578 million mission Monday on a five-year expedition to land on the largest moon of Mars and retrieve samples for return to Earth, a daring international project that could yield new insights into the formation of the Solar System.

The robotic Martian Moons eXploration mission, known as MMX, lifted off at 3:41 pm EDT Monday (4:41 am Japan Standard Time Tuesday) from Tanegashima Space Center in southern Japan.

The MMX spacecraft rode into orbit atop a 207-foot-tall (63-meter) H3 rocket, Japan's flagship launch vehicle. The rocket assigned to MMX debuted a new souped-up configuration with four strap-on solid rocket boosters, full-throttle main engines, and an extended payload shroud to accommodate the demands of Japan's heaviest and most ambitious interplanetary mission to date.

Read full article

Comments

© ESA/DLR/FU Berlin/Andrea Luck

Pennsylvania's health department issued a health alert Monday as cases of measles in pregnancy and, in turn, cases of congenital measles have continued to increase. Before the current outbreak—which continues to rage across the state—congenital measles cases hadn't been seen in decades, the department noted in its advisory.

The alert included detailed clinical guidance for managing measles exposures and cases during pregnancy as well as cases in newborns. Many doctors have never seen such cases in their careers given the decades of successful use of the measles, mumps, and rubella (MMR) vaccine. But now, with vaccination rates slipping nationwide, the highly infectious virus is better able to get footholds in communities and spread rapidly through under-vaccinated pockets, as is happening in Pennsylvania.

As of October 19, Pennsylvania had reported 1,286 measles cases this year across 42 counties. Of those, 247 have been hospitalized, and six people have reportedly died (though the latest reported death is still pending an investigation by the state health department before it is added to the state tally).

Read full article

Comments

© South_agency