Samsung has largely defined the foldable phone category, but it's no longer alone in releasing flexible devices. Google, Motorola, and a raft of Chinese OEMs have their own take on this form factor. Is the new Galaxy Z Fold 8 Ultra really "ultra" enough to remain on top?

This phone doesn't have the wide frame of the new Z Fold 8, instead matching the approximate size and shape of the company’s last few tablet-style foldables. The Z Fold 8 Ultra is not a big leap, but it continues Samsung's pattern of iterative foldable improvements. At this point, there's very little left to improve. The compromises of going with a foldable over a regular flat phone have largely been erased with the Z Fold 8 Ultra. Well, except for the price.

Flatter and a little better

Foldables used to be real pocket-busters, almost like carrying two phones glued together. Samsung has successively shaved a few millimeters off every year, taking a leap last year with the Z Fold 7. The Z Fold 8 Ultra is even a bit slimmer than that phone, but the difference is basically imperceptible. It still has the same buttons in the same places, including a fingerprint sensor in the power button.

Read full article

Comments

Terabytes worth of credentials, many belonging to the world’s biggest and most sensitive organizations, have been exposed in a supply-chain attack on LiteLLM, an open source tool that streamlines AI-driven software development. Microsoft, Amazon, Cisco, Samsung, and Salesforce are only a handful of the entities whose access secrets were exposed.

The revelation was posted on Tuesday and Wednesday by security firms CloudSEK and Hudson Rock. CloudSEK said it found cloud keys, repository tokens, SSH keys, Kubernetes secrets, package publishing credentials, environment variables, and AI provider keys that could allow attackers to gain access to more than 2,500 organizations.

40 minutes is all it takes

The credentials were extracted during a 40-minute window in March while the victims used compromised versions of LiteLLM downloaded from the package’s official location in the Python Package Index repository. Hudson Rock said it made the discovery after analyzing a 195TB file that it obtained. Neither firm identified the source of the information.

Read full article

Comments

If you can truly appreciate an old book—and maybe even marvel at how its fragile, yellowing pages contain some of the earliest ways that people tried to make sense of the world around them—then headlines about tech companies that are destroying books to train AI likely torture a tender part of your soul.

It’s indeed depressing to imagine piles of book spines waiting to be fed into wood chippers while torn-out pages are cropped, scanned, and trashed. But that’s the cheapest and easiest way to scan books as fast as possible, and AI companies are in a race to advance their models by training on the kind of engaging, high-quality long-form texts that can only be found in books. So book lovers fear it’s likely that the practice is happening on a grander scale than is currently being reported and that some physical copies of books will be lost forever.

What makes this destruction extra painful, though, is that it doesn’t have to be this way.

Read full article

Comments

Last week, a researcher outlined what he said was a “novel attack surface” in passkeys, the new authentication paradigm that offers a more secure alternative to password-based methods. In fact, the attacks demonstrated in the post are neither novel nor unique to passkeys. This distinction is important because the research has generated confusion among end users and security professionals as they assess whether this new mechanism is truly safe to use.

The attack is called Pass-ta-key—a blending of the word passkey with the phrase “pass the key” and a nod to a plate of pasta. Arie Olshtein, a researcher at security firm Palo Alto Networks, described in a post last week how Pass-ta-key could obtain all passkeys stored in the Google Password Manager app (GPM) for Windows when it’s running on a machine infected with malware.

This came as a surprise to many people because they believed passkeys are stored exclusively in the trusted platform manager (TPM), the locked-down enclave in a hardened silicon chip that’s reserved for storing cryptographic keys and other highly sensitive information on Windows machines. If passkeys are stored in the TPM, then how was Pass-ta-key able to extract the entire set of passkeys stored by the app, they wanted to know.

Read full article

Comments

Jason Semprini was excited about his research on policies mandating that elementary school students receive the human papillomavirus vaccine. HPV causes most cases of cervical cancer, but counterintuitively, Semprini found that mandates don’t do that much to reduce the overall rate of cervical cancer in a population. That’s odd, but it's also not completely surprising—we know that mandating a vaccine can motivate some people to find ways to avoid it.

Semprini wrote up the study and submitted the manuscript to a journal, where it was sent out for peer review, a long-standing process through which other researchers in the field assess the validity of research and make a recommendation on whether or not it should be published. This is usually done anonymously and on a volunteer basis.

In this case, the reviewer did not share Semprini’s excitement. That may have stemmed from a misunderstanding of the study’s central message: The reviewer mistakenly thought Semprini was questioning whether the HPV vaccine itself prevents cervical cancer rather than studying the effectiveness of a policy meant to increase vaccination rates. “There’s a very big difference there,” said Semprini, who is a health economist at Des Moines University.

Read full article

Comments

In the mid-'90s, the web was exploding, but finding anything of actual value on it felt like an elaborate negotiation with whatever proto-search engine happened to be standing closest to the door. Unlike now, when Google is widely seen as both portal and gatekeeper, sites like AltaVista, Lycos, Excite, HotBot, and Ask Jeeves promised to tame the chaos, each with its own suite of quirks, charms, and flaws.

The real story of pre-Google search is not that early engines were inferior. It's that they reflected a different Internet entirely, one where directories mattered, crawling was still an art, ranking was fragile, and the idea of “search” had not yet hardened into a single dominant interface.

A different kind of web

The first thing to remember about the pre-Google Internet is that there was no built-in assumption that you could search for everything. Many users found pages through Yahoo-style directories, bookmarks, newsgroups, email signatures, and links from site to site because the web was still small enough that human organization could compete with machine indexing. It was an era of Wild West-style discoverability. Search engines existed, but they were only one part of a larger ecosystem that blended curation and accident.

Read full article

Comments

The Infinite Machine Olto is a great electric scooter, one with an overall layout that echoes the classic Vespa. It's comfortable, and it accelerates well, handles nicely, and has a capacious battery. It has a rugged design that seems capable of handling a lot of abuse, but it also comes with thoughtful touches and security features that mean you can park it anywhere with confidence. And it provides all that at less than half the cost of its full-featured stablemate, the P1 scooter.

The reason is that the Olto is also a bicycle. Sort of.

This may technically be a bicycle, but it's not one you'd ever want to pedal. While you can set it to operate as either a Class 2 or Class 3 e-bike, it works best when the pedals are both locked in a forward position, acting as footrests. The Olto was designed to provide riders with the experience of a scooter while still allowing them to take advantage of the growing bike lane networks in many urban areas across the country.

Read full article

Comments

Every so often, I’ll be piloting some sensor-laden, software-defined press car down a dark stretch of highway when an oncoming driver’s high beams arrive like a targeted retinal strike, an involuntary reminder that modern automotive lighting has entered its own lumen arms race.

Anyone who has driven at night in the last few years knows what I'm talking about: A modern crossover crests a hill in the opposite lane, and the cabin briefly fills with enough cold-white light to suggest a police helicopter has joined traffic. The obvious assumption is that drivers are simply leaving their high beams on more often, but the reality is more complicated.

An old problem

Before cars became the modern mode of transportation, horse-drawn carriages used oil lanterns to light the way, as roads were largely unlit outside of towns and cities. These lanterns weren’t particularly bright, though, meaning that after-dark collisions and near-misses were common.

Read full article

Comments

Thierry Rignol is furious at Yale.

Rignol paid Yale $208,500 in tuition for its Executive MBA program. But after he was accused of cheating, the school suspended him for a year and gave him an F in the course Sourcing and Managing Funds.

This happened despite the fact that Rignol was a "top student, on track to graduate first in his class," he says. As a result, Rignol missed out on being named class valedictorian, an honor he claims to have earned "under Yale's own stated criterion."

Read full article

Comments