HNHacker News
TopNewBestAskShowJobs

BeauNer

4 karma · joined June 29, 2025

submissionscomments
BeauNer··on [dead]
IBM, Red Hat, and Palo Alto Networks announced a collaboration around Project Lightwell and virtual patching. The interesting part isn’t the partnership itself but the argument that AI is dramatically reducing the time between vulnerability discovery and exploitation, making traditional patch cycles harder to keep up with.
BeauNer··on [dead]
PorteuX 2.7 has been released with a new NTFS-Plus driver, GCC 16.1.0, Linux kernel 7.1.1, GNOME 50.2, KDE Plasma 6.7.0, and numerous performance-focused build optimizations. The developer has also published updated Geekbench 6 results claiming PorteuX now outperforms CachyOS, a distro often cited for its performance tuning.
BeauNer··on [dead]
ChromeOS desktops have become surprisingly rare, but CTL has an interesting new take on the category.

Instead of replacing an entire all-in-one PC when it’s time to upgrade, this design uses a removable computer module that slides into the monitor. Swap the module, keep the display.

I’m curious whether this approach could help schools, libraries, healthcare facilities, and other organizations reduce costs and e-waste.

BeauNer··on [dead]
Interesting data point, although it’s worth noting this comes from applicants to Alibaba’s startup competition rather than a broad survey of entrepreneurs.

The statistic that stood out to me was that solo founders accounted for 71 percent of applicants, up from 40 percent last year. Alibaba argues AI tools are allowing founders to handle tasks that previously required designers, developers, marketers, and other specialists.

Whether this is a temporary trend or the beginning of a real shift toward one-person companies is an open question, but it’s a topic I expect we’ll hear much more about over the next few years.

BeauNer··on [dead]
Sundar Pichai delivered Stanford University’s 2026 commencement address, but despite leading one of the companies at the center of the AI boom, he spent very little time discussing artificial intelligence. Instead, the speech focused on optimism, working on hard things, and following your interests. I found the omission noteworthy given how many graduates are entering a job market being reshaped by AI.
BeauNer··on [dead]
Anthropic’s recent shutdown of access to some of its newest models got me thinking about a larger issue.

Many businesses are building critical workflows around a single AI provider. Whether the risk comes from government action, outages, pricing changes, policy changes, or model deprecations, the result is the same: a dependency that the customer doesn’t control.

AI can be incredibly useful, but relying on a single provider, or worse, becoming unable to operate without AI at all, seems like a business continuity risk that doesn’t get discussed enough.

Curious how others are thinking about this.

BeauNer··on [dead]
KKR is making a massive bet on the future of artificial intelligence. The investment giant has launched Helix Digital Infrastructure with more than $10 billion in committed capital, backed by NVIDIA, Vistra, and the Kuwait Investment Authority. Led by former AWS CEO Adam Selipsky, the new company aims to build the data centers, power infrastructure, and connectivity needed to fuel the next phase of AI expansion.
BeauNer··on Plex keeps turning into social media and users are getting fed up
Plex used to be the app self hosting nerds loved because it stayed focused on organizing and streaming personal media libraries. Now the company is adding discussions, emoji reactions, compatibility scores, social following features, and community conversations tied to movies and TV shows. Coming right after the controversial Plex Pass price increase, many longtime users are questioning whether Plex still understands why people liked the platform in the first place.

Some of the new tools could be useful, especially shared watchlists across streaming services, but a growing number of users seem far more interested in reliability, playback improvements, and core media server features than turning Plex into another engagement driven social platform. The bigger Plex gets, the more it risks becoming exactly the kind of bloated streaming ecosystem many users were trying to escape.

BeauNer··on [dead]
New York City’s mayoral inauguration included an unusual security restriction: Raspberry Pi single-board computers and Flipper Zero devices were explicitly listed as prohibited items, alongside weapons, drones, and explosives. The rest of the list looks familiar for large public events, banning large bags, coolers, umbrellas, and bicycles, but the inclusion of hobbyist hardware stood out immediately to developers and makers.

Security teams appear to be treating general-purpose, programmable devices as inherently suspicious due to their flexibility rather than any specific threat. Critics point out that smartphones and laptops, which are far more powerful and network-capable, were not mentioned. The move raises questions about whether public-event security policies are starting to regulate tools instead of behavior, and where that line ultimately gets drawn.

BeauNer··on [dead]
As the United States sprints headlong into an AI-dependent future, we’re ignoring a fundamental vulnerability: we are training an entire generation to lean on machines to think, decide, and act for us. Kids growing up with AI as default cognition are losing basic skills of reasoning, memory, and problem solving because they assume the answers are always a chat away. Meanwhile, critical infrastructure — data centers, power grids, communication networks — is increasingly intertwined with complex AI systems that most Americans don’t understand and can’t operate without.

That dependency isn’t just a technical risk — it’s a national security threat. If hostile actors like China, Russia, or even sophisticated independent hackers were to knock out key data centers or cripple the electrical grid, the AI lifelines the country depends on could vanish overnight. What happens when we’ve forgotten how to think for ourselves and the machines go dark? This isn’t speculation — it’s a warning we need to take seriously.

BeauNer··on Norad Santa tracker now asks parents to upload children's faces thanks to OpenAI
OpenAI has partnered with NORAD for this year’s NORAD Tracks Santa event, introducing a set of holiday-themed ChatGPT tools. One of them, “Elf Enrollment,” invites parents to upload a child’s photo to generate an “official Santa’s helper” portrait. The feature is marketed as a harmless seasonal novelty, but it immediately raises questions about how children’s facial data is handled, retained, or used. OpenAI has faced repeated scrutiny over training data, image ingestion, and model improvement through user submissions. The idea of a government-linked Christmas program steering families toward uploading minors’ faces into a commercial AI system is triggering a wave of concern.

The other tools in the collaboration avoid biometric data, but Elf Enrollment highlights the broader issue: kids cannot consent, and parents are often unaware of how AI firms store or process uploaded images. Even if OpenAI promises limited use or deletion, the lack of transparent, verifiable guarantees remains a sticking point for many. Users on privacy-focused forums are questioning whether a decades-old holiday tradition should be repackaged into an image-upload funnel, especially at a time when regulators and security researchers are already warning about the long-term risks of building datasets involving children’s biometrics.

BeauNer··on [dead]
Rocky Linux is now the first Linux distribution authorized to ship with the complete NVIDIA AI software stack out of the box, including CUDA Toolkit and DOCA OFED. CIQ, the company backing Rocky Linux, says this eliminates the usual configuration work needed to get GPU clusters running, allowing organizations to go from installation to inference far faster. The move is aimed directly at HPC and large-scale AI deployments where scaling from a few development nodes to thousands of production nodes is often held back by networking configuration and driver validation problems.

The partnership also strengthens Rocky Linux’s position as the post-CentOS enterprise platform for compute workloads. It suggests that NVIDIA wants AI infrastructure to function more like pre-validated appliances rather than DIY Linux stacks. Supporters say this will reduce deployment costs and headaches. Critics are already calling it another step toward deeper NVIDIA lock-in, as the distribution increasingly becomes tuned around proprietary GPU tooling.

BeauNer··on [dead]
Netflix and YouTube streaming produce far more CO₂ than asking ChatGPT a question, according to a new analysis of digital energy use. An hour of HD video streaming generates about 42 grams of CO₂, while a chatbot prompt is around 0.1 grams. Even AI image generation (about 1 gram per image) comes in well below binge-watching. The study also found that Zoom calls and text-to-video AI generation sit in the middle, but streaming is still the standout energy hog because it requires continuous data transfer and processing.

Researchers say the bigger problem isn’t individual behavior but the energy sources that power data centers. The tech sector produced an estimated 900 million tons of CO₂ last year, with only about 30 percent powered by renewables. If that shifted to 80 or 90 percent, emissions from all digital activities would drop significantly without people changing their habits at all.

BeauNer··on [dead]
Firefox has introduced Kit, a new mascot meant to give the browser a friendlier, more personal identity. Mozilla is framing Kit as a companion for a web that’s “private, open and actually yours.” It’s a branding refresh rather than a technical change, and it leans into warmth and approachability at a time when browsers are starting to feel interchangeable.

The move also quietly pushes aside the old “Firefox is a red panda” trivia angle, sticking with a fox-like character that’s easier to recognize. Whether this helps Firefox regain relevance in a Chrome-dominated world is unclear, but it does signal that Mozilla still wants Firefox to feel like a browser with a personality and values, not just another commodity UI.

BeauNer··on [dead]
TP-Link says it has made history by completing the first Wi-Fi 8 data transmission with a prototype device. The test validated both beacon and throughput functionality, signaling that the next generation of wireless tech is already taking shape.

The milestone comes even as most consumers haven’t yet upgraded to Wi-Fi 7, which already delivers extremely high speeds and reliability. Some argue the industry is pushing new standards too quickly, leaving real-world adoption lagging far behind.

BeauNer··on [dead]
Electronic Arts has agreed to a $55 billion buyout by Saudi Arabia's Public Investment Fund (PIF), private equity firm Silver Lake, and Jared Kushner's Affinity Partners, marking the largest all-cash sponsor take-private deal ever. Shareholders will receive $210 per share, a 25 percent premium over EA's unaffected price, and once the transaction closes the company will be delisted from public markets. EA CEO Andrew Wilson will remain in charge, with the group arguing that private ownership will allow the publisher to innovate faster and expand its global footprint.

The deal, however, is already sparking controversy. PIF, a sovereign wealth fund controlled by the Saudi government, will effectively gain control of one of the most influential names in gaming. While investors stand to profit, many gamers and industry watchers are concerned about how Saudi ownership could shape EA's creative direction, monetization strategies, and role in esports. With regulatory approvals still pending, the takeover raises difficult questions about the intersection of gaming, politics, and global soft power.

BeauNer··on [dead]
Buying a car is one of the biggest financial moves most people make, and it rarely feels simple. Prices are high nowadays, financing is confusing, and every website claims to have the right answer. When it came time to replace my 2020 Nissan Rogue Sport with 45,000 miles, I wanted a smarter way to cut through the noise. So I leaned on ChatGPT 5, the newest generation of AI, to see if it could help me make a clearer decision.

This was not an experiment for fun. It was a real purchase that mattered to my family. With a toddler and more road trips ahead of us, the Rogue Sport just was not cutting it anymore. It was starting to feel cramped, and I knew it would not hold up trouble free forever (its CVT is notoriously problematic). Trading it in before it hit 50,000 miles made sense, but deciding what to buy next was the real challenge.

Narrowing down the choices

At first my list was long. The Subaru Outback, Forester, and Ascent were on my radar because of their reputation for safety and reliability. The Nissan Pathfinder looked appealing as a step up in size. The Acura MDX offered more luxury. The Mazda CX-9 had great handling reviews. And then there was the Honda Pilot, a steady family hauler with a strong reputation.

Normally I would spend hours bouncing between forums, YouTube videos, and car sites. This time, I asked ChatGPT 5 to compare models directly. I typed in questions like, “Which lasts longer, a Pathfinder or a Pilot?” or “Does a Forester really have less cargo space than a Pilot?” Within seconds, I had clear breakdowns that summarized reliability, maintenance costs, and practicality.

In the end, AI did not replace common sense, test drives, or gut feelings. What it did do, however, was make me sharper and more organized. Instead of drowning in conflicting opinions and messy math, I had clarity at every stage. For me, that was the difference between feeling pressured and feeling prepared.

So yes, I used ChatGPT 5 to buy a car. And I would do it again.

BeauNer··on [dead]
Influencers are everywhere. A study from Casino.org estimates there are between 30 and 50 million of them worldwide, with that number growing by as much as 20 percent each year. For many, the lifestyle looks glamorous. But behind the brand trips and photo shoots is a grind that can have real consequences.

Ava is a glimpse into what an influencer of the future might look like by 2050. She is not just a thought experiment but a warning about what years of chasing trends, filters, and cosmetic fixes can do to a body.

The images of Ava were created by Casino.org as concept art, informed by medical research, to visualize how influencer habits might shape a person’s health and appearance over decades. Put simply, this is what someone like iJustine (one of the internet’s most enduring influencers) could look like if she kept living the lifestyle far into the future.

BeauNer··on [dead]
Brave researchers have revealed a troubling vulnerability in Perplexity’s Comet that shows just how risky AI-powered browsers can be. The flaw, known as an indirect prompt injection, allowed attackers to trick the browser into carrying out hidden commands.

The research was led by Brave engineer Artem Chaikin and detailed with VP of Privacy and Security Shivan Kaul Sahib. They found that Comet could not tell the difference between a user’s instructions and malicious text hidden inside a webpage. That oversight opened the door to serious account takeovers and data theft.

In their demonstration, a Reddit comment with invisible text instructed Comet to visit Perplexity’s account page, grab the user’s email, intercept a one-time password from Gmail, and then send the stolen data back to the attacker. Once the victim clicked “summarize page,” the AI did the rest automatically. No additional input was required from the user.

This kind of attack bypasses traditional web safeguards such as same-origin policy and CORS. Those protections normally prevent websites from stealing data across different domains, but when an AI assistant has full control of the browser, the rules break down. Because the AI operates with the full privileges of a logged-in user, it can move freely between services and access sensitive accounts without the user realizing what is happening.

BeauNer··on [dead]
OpenAI is making a play for affordability in India with the launch of a new subscription plan called ChatGPT Go. Announced by Nick Turley on X, the tier is priced at ₹399 and delivers a big boost over the free version.

Subscribers get ten times the message limit, ten times the image generations, and ten times the file uploads. Memory is also doubled compared to the free plan. Payments can now be made through UPI, and all subscriptions are displayed in Indian Rupees for easier checkout.

India is the first country to see ChatGPT Go, with OpenAI saying it will learn from feedback before expanding the option elsewhere. The move reflects the demand from users who have been asking for a more affordable way to use ChatGPT’s most popular features.

BeauNer··on [dead]
If you run Plex Media Server, it’s time to drop everything and update. The company has quietly patched a security issue that affects recent versions of its software, and users are being told to upgrade as soon as possible.

According to an email Plex sent to affected customers, versions 1.41.7.x through 1.42.0.x are vulnerable. The newly released build, 1.42.1.10060 or later, contains the fix. Plex says the flaw was found through its bug bounty program, but sadly, it has not publicly shared details about how severe the issue is or whether it could be exploited remotely.

Plex isn’t saying whether this vulnerability could be used to run code on a server or gain unauthorized access, but its urgency in contacting users directly suggests it’s not something to ignore. If your Plex instance is exposed to the internet for remote streaming, the risk could be even greater.

Updating is straightforward: you can do it through the server’s management page or by downloading the installer from Plex’s official site. If you self-host, it’s also a good moment to review your setup, disable outside access if you don’t need it, and check your logs for anything suspicious.

Plex has had its share of security incidents in the past, including a 2022 breach that forced a password reset for all users. While there’s no evidence this latest issue has been exploited in the wild, the best move is to patch now and ask questions later.

The update is available today, and if you haven’t installed it yet, you should make it your next click.

BeauNer··on [dead]
Fantasy football is no longer just a casual pastime. It is becoming a real-world experiment in how people adopt and trust artificial intelligence. A new survey from Qlik shows that more than two-thirds of U.S. fantasy football fans already use AI to make decisions for their teams, and nearly a third would hand over complete control. Among 35 to 44-year-olds, that number rises to almost half.

I absolutely love fantasy football. But I cannot imagine letting AI run my team. I understand wanting to gain an advantage, but part of the excitement is proving you personally know the sport. If a computer is making every decision, winning would feel empty.

Surprisingly, cheating is not what concerns most fans. In fact, only 13 percent think using AI is dishonest. Instead, 44 percent worry it will create too much parity and remove skill advantages. This is similar to the workplace, where simply having AI is not enough. The real advantage comes from feeding it quality data and making smarter, faster decisions than your competitors.

The survey also found that 52 percent of fans admit to managing their teams during work hours, while 42 percent say they are more comfortable using AI at work than in their fantasy leagues. When fans do use AI, it is mostly for practical and repeatable tasks such as weekly start or sit decisions, draft picks, prep work, and trade evaluations. Only 9 percent use it for creative elements such as trash talk or naming their teams.

Generational differences are clear. Younger and mid-career players are more open to letting AI take control, while older fans are far more cautious. Just 12 percent of those aged 55 and older would allow AI to run their teams.

“Fantasy football may be a game, but it is also a low-risk, high-interest environment where people reveal how they will engage with AI in more serious contexts,” said Mike Capone, CEO of Qlik. “When you see people trusting AI with their lineups, worrying about parity over cheating, and using it for the same kinds of repeatable decisions that drive value in business, you understand how closely the lessons carry over to the workplace. In both arenas, the winners aren’t defined by access to AI, but by the ability to feed it the right data, interpret the insights, and act faster and smarter than the competition.”

BeauNer··on [dead]
The United States is still king of the AI hill in 2025. New numbers from TRG Datacenters show the country has 39.7 million NVIDIA H100 equivalent processors and a massive 19,800 megawatts of power capacity. No other nation even comes close.

China, on the other hand, has a different bragging right. It runs more AI data center clusters than anyone else, with 230 in total. But the raw computing output is much lower at just 400,000 H100 equivalents. It is a reminder that more buildings do not always mean more muscle.

France is an interesting case. It ranks fifth in total computing power but has the second largest stockpile of AI chips, more than 989,000. That is more than China, India, and South Korea. Clearly, owning a lot of chips is only part of the story.

TRG data chart The United Arab Emirates holds the number two spot overall with 23.1 million H100 equivalents and 6,400 megawatts of capacity. Saudi Arabia follows in third with 7.2 million. South Korea is fourth at 5.1 million but leads everyone in workforce adoption, with half of the nation’s workers using AI in some way.

Interestingly, this seems to indicate the UAE’s clusters are enormous. They pack over 13 times more compute per cluster than the U.S. and an eye-popping 637 times more than China. Essentially, they’ve skipped the “many small sites” approach and gone straight for ultra-dense, mega-scale AI hubs.

This is all happening against a backdrop of record AI infrastructure spending. Global investment hit $200 billion this year, and each country seems to be taking its own path. Some are building the biggest clusters they can. Others are focused on specialized chips. A few are banking on government policy to attract research and development from around the world.

BeauNer··on [dead]
It is the end of an era, folks. You see, AOL has announced that its dial-up Internet service will officially shut down on September 30, 2025. The change also means the retirement of the AOL Dialer software and the AOL Shield browser, both designed for older operating systems and slow connections that relied on the familiar screech of a modem handshake.

While this move will probably surprise no one, it still marks the closing of a chapter in online history. Dial-up Internet was once the gateway to the web for millions of households, back when speeds were measured in kilobits and waiting for a picture to load could feel like an eternity.

According to AOL, the decision came after a routine evaluation of its products and services. The company says this will not affect any other benefits in existing AOL plans. Customers can continue to access the rest of their plan features through the AOL dashboard.

For anyone still using AOL dial-up in 2025, this change means finding an alternative Internet connection. That might be a challenge in rural areas where broadband options remain limited. It also raises the question of how many people are still paying for a service that has long been considered obsolete in the broadband era.

If you have questions or want to manage your account, AOL has set up customer support lines for both the U.S. (1-888-265-5555) and Canada (1-888-265-4357).

Honestly, I am more surprised that AOL dial-up still exists in 2025 than I am about it shutting down. For me, this one hits a little closer to home, because AOL was my very first ISP back in the 1990s. I can still remember the sound of the modem connecting and the thrill of hearing “You’ve got mail.” It was slow, clunky, and sometimes dropped the connection for no reason, but it was my first real taste of the Internet… and I’ll never forget it.

BeauNer··on GPT-5 critics are dead wrong
Well, folks, I finally got access to GPT-5, and let me tell you, I am seriously impressed. For months, I have been reading speculation, leaks, and hot takes about what it would be like. Now that I have actually used it, I think a lot of the negativity swirling online is missing the bigger picture.

If you spend any time on Reddit, Twitter, or YouTube, you will see the same complaints repeated. Some people say GPT-5 is no different from GPT-4. Others claim it has lost its personality. Some insist it is too safe and refuses to answer too many questions. The internet has been quick to declare it a disappointment. The truth is, much of that does not seem based on actual use.

Let us start with what is actually better. GPT-5 handles coding, math, and reasoning more effectively than any version before it. The difference is clear if you give it complex instructions or ask it to work through problems step-by-step. It is more willing to think before answering, which means fewer mistakes and more complete solutions. For developers, students, and anyone working on detailed projects, this is a real improvement.

The too safe criticism is a different story. Yes, GPT-5 will shut down certain topics more quickly than older models. OpenAI has tuned it to be more cautious. This bothers some people who want a totally unfiltered AI. But that is not a sign of lower intelligence. If anything, the answers it does give are more precise, and it avoids wandering into random tangents or made-up facts as often.

Then there is the personality complaint. I get where this comes from. Out of the box, GPT-5 does seem more neutral. If you are used to the chatty, quirky tone that earlier models sometimes had, you might think something is missing. But after spending a bit of time prompting it and shaping responses, I can still get the same casual and conversational tone I enjoy. It just takes a nudge.

I think a lot of the frustration comes from unrealistic expectations. People saw GPT-5 and assumed it would be a massive leap toward science fiction-level AI. That was never realistic. GPT-5 is not an artificial general intelligence. It is still a language model. The fact that it did not instantly transform into a digital superhuman does not mean it is a failure. Calling it no better because it did not meet fantasy-level expectations is like saying a new smartphone is bad because it does not teleport you to work.

The other thing worth noting is how much online opinion is shaped by AI fatigue. Over the last two years, AI has dominated tech news. We have had constant product launches, updates, and press releases. By the time GPT-5 came out, some people were ready to dislike it before even trying it. Negativity often gets more clicks than praise, so criticism spreads faster.

BeauNer··on [dead]
Microsoft just released an update to the Windows Subsystem for Linux, bringing it to version 2.5.10. That might seem routine, but the real story is buried in the changelog. You see, the company patched a security vulnerability labeled CVE-2025-53788, yet they are keeping the details under wraps until August 12.

All the release notes say is this:

“Fixed CVE-2025-53788 (Details to be published on Aug 12th)” That’s it. No severity score. No explanation. Just a patch and a promise to explain later.

When a company fixes a CVE before publishing details, it usually means one of two things. Either the flaw is serious enough that Microsoft wants systems patched before attackers figure it out, or it is tied to a planned disclosure timeline. Regardless, users are left in the dark for now.

WSL is popular among developers, sysadmins, and data scientists. It runs a full Linux user space inside Windows, making it a go-to for cross-platform workflows. If the vulnerability impacts that bridge between Linux and Windows, it could be serious. Especially if it involves privilege escalation or access to system resources.

Right now, we do not know the scope of the issue. But the vague timing is enough to make people uneasy. WSL is often trusted for secure tasks, including container builds and AI model training. Any vulnerability in that setup deserves attention.

The 2.5.10 installers are available on GitHub. Microsoft published .msi versions for x64 and ARM64, along with a .msixbundle. All are signed and hosted under the official release account. If you use WSL, you should probably update today instead of waiting for August 12.

As someone who loves Linux and uses WSL often, I am glad the patch is out. But I also think Microsoft should be more transparent with users. If this is minor, just say so. If it is serious, people deserve to know what was fixed and why it matters.

The full details will arrive on August 12. Until then, the safest move is to install the update and stay alert.

WSL 2.5.10 is available now on GitHub.

BeauNer··on [dead]
PCI-SIG says PCI Express 8.0 will hit a raw bit rate of 256.0 GT/s, doubling what PCIe 7.0 offers. The spec is expected to be ready by 2028, and the goal is to support massive data loads from AI, machine learning, edge computing, and even quantum systems.

The group says PCIe 8.0 will allow up to 1 terabyte per second of bidirectional throughput with a full x16 configuration. They’re also looking at new connector designs, improving protocol efficiency, reducing power use, and maintaining backward compatibility.

“Following this year’s release of the PCIe 7.0 specification,” said Al Yanes, PCI-SIG President and Chairperson, “PCI-SIG is excited to announce that the PCIe 8.0 specification will double the data rate to 256 GT/s.” He added that PCIe continues to meet the growing demand for high-performance I/O across emerging technologies.

Reece Hayden, a principal analyst at ABI Research, echoed that sentiment. He pointed out that PCIe’s mix of bandwidth and power efficiency is why it’s sticking around. “Data center networks are already preparing to implement PCIe 6.0,” Hayden said, adding that PCIe 7.0 is generating strong interest and the new 8.0 spec will help support long-term demand.

PCIe 8.0 isn’t just for AI. The spec is being built with markets like high-performance computing, hyperscale data centers, aerospace, and automotive in mind. If PCI-SIG stays on schedule, PCIe 8.0 hardware could start appearing before the end of the decade.

BeauNer··on [dead]
There’s a sneaky new threat targeting Linux systems and it’s called Plague. It’s not just another piece of malware. This thing is designed to live inside your authentication system and give hackers the keys to your server, all while staying hidden from antivirus tools.

Plague operates as a malicious PAM module. If you don’t already know, PAM is what Linux uses to handle authentication. By tapping directly into that layer, Plague can let attackers log in via SSH without ever entering a valid password. It’s silent. It’s persistent. And it’s extremely hard to detect.

The scariest part? Security researchers say not a single antivirus flagged it. Dozens of samples have been uploaded to VirusTotal over the past year, and none of them triggered a warning. That’s not just rare. That’s almost unheard of.

To stay under the radar, Plague wipes environment variables like SSH_CONNECTION and disables shell history logging. It literally scrubs any evidence of the attacker’s activity. Your logs will look clean even when your system is compromised.

It doesn’t stop there. The malware hides behind string obfuscation, antidebug tactics, and multiple encryption layers. The latest samples use a triple-decker encryption approach that includes XOR, a stream cipher, and a DRBG layer. Static analysis won’t help much. This thing is built to mess with analysts.

BeauNer··on [dead]
This is the kind of tech that gives me chills. Synchron has just released a public demo showing something that used to feel impossible. A man with ALS is now using his iPad with nothing but his brain. No hands. No voice. No eye-tracking. Just thought.

The man in the video is named Mark. He’s part of Synchron’s COMMAND clinical study and has an implant called the Stentrode. It sits inside his brain’s blood vessels and picks up his motor intention. Those signals get sent wirelessly to an external decoder, which then tells the iPad what to do. It’s all made possible by Apple’s new Brain-Computer Interface Human Interface Device protocol, which lets iPadOS treat brain activity like an actual input method.

Apple’s built-in Switch Control feature makes the whole thing work on the software side. The iPad even sends back screen context to the BCI decoder to make everything run more smoothly and accurately.

BeauNer··on [dead]
The open source community just got a fresh reminder that even trusted ecosystems like Mozilla’s are not immune to phishing attacks. According to a new alert, bad actors are actively targeting developer accounts on AMO (addons.mozilla.org), attempting to steal credentials by sending convincing but fake emails that impersonate official Mozilla communications.

The fraudulent emails follow a familiar pattern. They claim your developer account “requires an update to continue accessing features,” hoping to scare you into clicking a malicious link. But Mozilla is clear: do not click any links if you’re unsure of the source.

Instead, Mozilla recommends that developers take a few steps to protect themselves. First, check that any messages claiming to be from Mozilla are actually sent from a legitimate domain, such as mozilla.org, firefox.com, or mozilla.com. If an email appears suspicious, it’s smart to check whether it passes SPF, DKIM, and DMARC authentication protocols. Your email client might provide this info under headers or message details.

And even if a message passes those checks, developers are still urged to avoid clicking embedded links. It’s much safer to go directly to addons.mozilla.org by typing the address manually. Under no circumstance should you enter your credentials on any site other than an official Mozilla domain.

Page 1 of 2Next →