TheGeeks.Net Logo

26 years, 11 months, and 11 days of TheGeeks.Net and still going strong!

Slashdot (Last Update: 2026-11-07 11:00:00GMT)

Cryosphere Faces Permanent Damage When World Overshoots 1.5C, Scientists Warn

A UN-backed report warns that even temporarily overshooting the Paris agreement's 1.5C warming target could cause permanent and widespread losses of glaciers, snow and polar ice sheets. With Greenland and Antarctic ice sheets already melting about six times faster than in the 1990s, the report argues that global temperatures should ultimately be brought back below 1C. The Guardian reports: The report, which comes as world leaders and diplomats converge on Turkey for the 31st annual Cop climate conference, documented rapid and accelerating melting of the cryosphere and polar oceans, with damages that range from the loss of the Greenland and Antarctic ice sheets, driving sea level rises that threaten hundreds of millions of people, to thawing permafrost, which releases more planet-heating gas. Glaciers, which are still responding to historical warming, would only preserve about 70% of their current volume over a timescale of centuries if long-term heating were brought back down to 0.8C, the report found. Meanwhile, the ice sheets covering Greenland and Antarctica, which are melting about six times faster today than in the 1990s, would continue to lose ice even in scenarios where overshoot is brief and temperature rise returns to 1.5C, the report found. The scientists said a safe, long-term temperature limit for polar ice sheets lies much closer to 1.0C of global heating, and possibly even lower. "Snow and ice respond rapidly to every fraction of a degree of warming," said [James Kirkham, a glaciologist at ICCI and the lead author of the report. "But most of these systems will take centuries or millennia to recover after overshoot, especially if tipping points are crossed that cause changes to become essentially irreversible." Last month, a UNEP report found the world must cut emissions by 18% by 2030 and by 45% by 2035 to have a good chance of keeping temperatures from rising 1.7C above preindustrial levels. It found there were "no good outcomes" of remaining above 1.5C. The cryosphere report found that current policies, which will result in 2.8C of global heating, would reduce the mass of glacier ice to below 10% in the Rockies, Alps, Iceland and Scandinavia. If warming was limited to 1.5C, about 20-35% of the mass would remain. In the Hindu Kush Himalayas, where glaciers are a source of water for nearly a quarter of humanity, current policies will leave just 41% of the ice mass. If warming was limited to 1.5C, 83% would remain.

Read more of this story at Slashdot.

Vibrating Mattress Helps Clear Alzheimer's Protein From the Brain

A vibrating mattress combined with two pills that release nitric oxide enhanced the brain's ability to clear an Alzheimer's-related protein. According to New Scientist, the experiment "caused the brain's blood vessels to swell and constrict more strongly, which enhanced the glymphatic system's clearance of [the protein]." From the report: [Kesa Kiviniemi at the University of Oulu in Finland] and his colleagues recruited 29 adults who hadn't been diagnosed with Alzheimer's disease or any other cognitive issues. The participants took a pill that dissolves when under the tongue, releasing nitric oxide. They then lay on a mattress that caused their bodies to gently vibrate for 40 minutes, taking another pill halfway through. Blood samples revealed that their levels of a type of protein called beta-amyloid 42 increased by 35 per cent, on average, after the intervention. This protein, which usually helps neurons signal and connect to each other, misfolds and form clumps in Alzheimer's disease. "The treatment seemed to enhance the glymphatic system's ability to clear beta-amyloid from the brain to the blood," says Kiviniemi. "A 35 per cent increase in circulating beta-amyloid 42 is a substantial and very interesting acute effect," says Tuomas Lilius at the University of Helsinki, who wasn't involved in the work. "It is certainly possible it could become biologically, and eventually clinically, relevant." Side effects were mild and minimal, with six of the participants experiencing issues such as nausea and headache. However, this could partly be due to the expectation of an effect from the nitric oxide pills. The researchers hope to overcome this in future work by including placebo pills. Brain scans suggest the treatment enhanced the flow of fluid along glymphatic channels, probably by widening the brain's blood vessels and making them pump more strongly, says Kiviniemi. But other mechanisms could also be at play, says Brown. For instance, this intervention may slow the breakdown of beta-amyloid 42 by the liver, leading to higher amounts in the bloodstream, he says. Future studies could get around this by injecting markers into cerebrospinal fluid, which moves through the glymphatic system, to more directly measure its flow, says Brown. Additional experiments by Kiviniemi and his colleagues tested either only the mattress vibrations or only the nitric oxide pills on the same participants, at least a week before or after they underwent the combined approach. Based on brain scans, these solo interventions seemed to have less than half the effect on the glymphatic system than when they were combined. The findings have been published in the journal Nature Communications.

Read more of this story at Slashdot.

Mexico's Senate Approves ISP Rules To Disconnect Persistent Online Pirates

An anonymous reader quotes a report from TorrentFreak: On Tuesday, Mexico's Senate approved (PDF) a reform of the Federal Copyright Law that ties ISP liability to having a policy to terminate repeat infringers. [This policy has to be published permanently on their website and in their terms of service, and it must include a basic way to notify users. In other words, what can be terminated is the Internet connection itself, not just an account. According to Mexican business outlet EL CEO, this means that access providers such as Telmex and Izzi will need such a policy.] The Senate approved the amendments with roughly two-thirds of the vote, as the opposition voted against. The Chamber of Deputies already approved the same text in October, so the decree now goes to President Claudia Sheinbaum. Her government proposed the changes in May to bring the law in line with the USMCA trade agreement between Mexico, the United States and Canada. [...] Providers that don't comply risk facing liability. Under the new rules, any ISP that fails to meet its safe harbor conditions becomes liable for its users' infringements if it knowingly contributes to, induces, or causes the infringement. The same goes for an ISP that can control the infringing user and profits directly from the infringement. In both cases, the Mexican Institute of Industrial Property (IMPI) can fine the provider up to roughly 4.7 million pesos (~$250,000), depending on the infringement. The law doesn't explicitly define the term repeat infringer, nor does it say how many piracy accusations it takes before a subscriber can be cut off. According to Aurora Lopez-Portillo, director of legal services at IP firm ClarkeModet, each provider has to decide its own threshold. She told EL CEO that ISPs should also check whether the accusations actually hold up, while giving users a chance to respond, even though the law doesn't require that. During Tuesday's Senate debate, some lawmakers in the opposition raised similar concerns. Senator Gabriel Elizondo warned that families can share a single connection, so the pirating activities of one person could leave an entire household offline. Previously, opposition lawmakers proposed requiring a court order before Internet service could be suspended, but that proposal was not adopted. [...] There, failing to meet the safe harbor conditions, including the repeat infringer policy, is the first requirement for liability. If an ISP also contributes to infringement with knowledge of it, or can control the infringer and directly profits from it, it can be held responsible. The new repeat infringer rules will take effect 180 days after their publication in Mexico's official gazette, which hasn't happened yet as far as we can see. How Mexican ISPs will define a repeat infringer, and how many accusations it takes, has yet to be seen.

Read more of this story at Slashdot.

EU Says TikTok's 'Rabbit Hole' Effect Must Stop

The European Commission has preliminarily found that TikTok violates the Digital Services Act because its For You recommendation algorithm can create a "rabbit hole effect," repeatedly exposing users to potentially harmful content involving topics such as sadness, isolation and body image. TikTok must change the feed's design or potentially face fines of up to 6% of its global annual revenue. The Verge reports: The findings come months after the EU Commission declared that TikTok's design is too "addictive." While TikTok has implemented controls to mitigate the algorithm's "rabbit hole effect," the Commission says its preliminary findings suggest that they're not effective. TikTok must now change the design of its For You feed, or else face fines of up to 6 percent of its global annual turnover. The platform is also facing pressure in the US, with lawmakers and a wave of lawsuits raising concerns about child safety. "Every time a user scrolls or likes a video on TikTok, the algorithm serves more of the same leading users down rabbit holes they cannot easily escape from," Henna Virkkunen, the EU Commission's executive vice president of tech sovereignty, security, and democracy, says in the press release. "Today's preliminary findings show again that TikTok needs to step up its efforts to protect users' well-being, including those of minors."

Read more of this story at Slashdot.

Chainalysis Says Breach Exposed Credentials For All Customers

Chainalysis says attackers exposed usernames, password hashes and live tokens for all of its customers. "While the company locked Chainalysis accounts as a precaution after discovering that some customers' passwords had been exposed and asked users to reset their passwords before signing in again, it has now taken the login portal offline, together with Reactor and Data Solutions, the Know-Your-Transaction (KYT) user interface and API, and address screening products, after discovering further abnormal activity," reports BleepingComputer. The company says it has no evidence that investigative data or blockchain attribution records were accessed or altered, but all users will be required to reset passwords and rotate API keys before regaining access. BleepingComputer reports: Chainalysis provides blockchain analysis tools to trace cryptocurrency transactions and investigate crimes such as fraud, ransomware, and money laundering. Its customer list includes law enforcement, government agencies, financial institutions, insurance companies, and cryptocurrency businesses worldwide. This follows the company's disclosure last Friday that attackers using AI tools accessed customers' names, email addresses, user IDs, and organizational role labels using what it described as "offensive agentic techniques." While it initially said the impact was limited and the breach affected only non-sensitive identity metadata, later updates revealed that usernames and password hashes for all customers were exposed in an "on-path attack" (more commonly known as a Man-in-the-Middle or MITM attack). However, the company found no evidence that the attackers accessed investigative graph data or altered its blockchain attribution repositories. [...] To ensure threat actors don't access affected accounts, Chainalysis asked customers to provide trusted IP addresses so they can regain access to the login portal once it is brought back online and reset their credentials.

Read more of this story at Slashdot.

Activists Breach Microsoft Data Center Construction Site As Protests Spread In Europe

More than 100 activists breached a Microsoft AI data center construction site in Amsterdam as part of coordinated protests against the rapid expansion of AI infrastructure. "These data centres are destroying our world. It's becoming uninhabitable because of all the resources they consume. That's why we're here today," protester Sam van der Beek said. Reuters reports: Activist groups have announced actions in 16 countries on Friday and Saturday, according to the "Stop Dirty Data Centers" coalition, which is rallying environmental groups and digital rights campaigns behind calls to pause large-scale construction. In Amsterdam on Friday, more than 100 activists gathered at the construction site of a Microsoft AI data centre, marching arm in arm before breaking into the site, climbing cranes, hanging balloons and dancing while police stood by. Some carried placards with messages reading: "Screw your datacenter." Site owner Pure Data Centers, which plans to invest more than $1 billion and is backed by Brookfield-owned Oaktree, said it was committed to engagement with local stakeholders. "We respectfully ask those on site to leave safely and engage with us in dialogue about the development and any concerns they may have," it said. Other planned actions include a march in Dublin, a protest outside the parliament building in Warsaw, and a demonstration against a different Microsoft data centre in Denmark. [...] Stop Dirty Data Centers says it is not anti-progress or calling for existing data centers to be closed but that major construction should be halted until governments establish clearer rules.

Read more of this story at Slashdot.

Developer Pulls Roku's Popular Fish Tank Screensaver Following Fox Sale

Roku is removing its popular Aquatic Life fish tank screensaver on December 1 and automatically switching affected users to Roku City. According to Cord Cutters News, the creator pulled the license after Roku's sale to FOX was announced. Ars Technica reports: The screensaver has been an option for Roku OS users for 10 years. Roku has been licensing the animation, which is called the Marine Aquarium, from artist Jim Sachs through Prolific Publishing. Sachs is the creator and copyright holder of the Marine Aquarium. He developed the screensaver through his company SereneScreen. He tells Ars Technica that the licensing agreement with Roku is up for renewal every October and can be canceled by either party for any reason. A day after learning that Fox was planning to buy Roku, a deal that closed today, Sachs told Prolific that he wouldn't be renewing Roku's license. "I can't be part of the Fox world," he tells Ars, pointing to Fox News' controversial style of news and entertainment. Roku will automatically switch the Aquatic Life screensaver on affected devices to the Roku City screensaver, another popular animation that includes subtle advertisements, according to the user notice. The Aquatic Life screensaver provided an ad-free, relaxing display for years for some Roku users. Numerous people online have lamented the impending loss of the screensaver for Roku OS. [...] The decision to not renew the licensing contract has "major financial consequences," Sachs said. "Our needs are very small, with a high property tax bill being the only significant expense," he said. "We'll be okay but can't start any of the projects I had planned." According to Sachs, the licensing "agreement was $80,000 per year for exclusive rights to all set-top devices, or $60,000 per year for non-exclusive. They have always opted for exclusive." Ars asked Roku to confirm the details of the licensing agreement but didn't hear back ahead of publication. The licensing deal with Roku was Sachs' primary form of income, he told Ars, noting low sales of the version of the screensaver for computers. Marine Aquarium fans can still buy the screensaver for Windows, macOS, iOS, and Android, but it seems unlikely that it will return to the Roku platform.

Read more of this story at Slashdot.

OpenAI's New Cyber Model Found Ways to Attack Nearly 1,000 Linux Flaws

OpenAI says its new GPT-6 Cyber model helped an automated system identify 1,724 security flaws in the Linux kernel and exploit 948 of them to gain administrator-level access during testing, including at least 10 previously unknown techniques. Axios reports: During testing, the system identified 1,724 security flaws and found ways to use 948 of them to gain administrator-level access to Linux systems for about $1.2 million in API credits. At least 10 of the techniques the model used were previously unknown, according to OpenAI. Human researchers reviewed the Linux findings before reporting vulnerabilities and proposed fixes to maintainers. The model also uncovered 81 previously unknown, high-severity flaws in Mozilla's Firefox browser.

Read more of this story at Slashdot.

Phoronix (Last Update: 2026-11-07 12:45:00GMT)

HyprBSD Provides Wayland-Based Desktop Built Atop FreeBSD, Complete With Steam Gaming

While FreeBSD has been working to improve its desktop and laptop experience, that work isn't yet shipping in released form for the OS installer and other ongoing efforts. Now there's a new desktop FreeBSD distribution on the scene with HyprBSD providing a Wayland-based desktop experience and with the Linux binary compatibility layer even an easy route to gaming with Steam...

Microsoft's Azure Linux 3.0.2022 Ships With More Than 470 Security Fixes

Microsoft released Azure Linux 3.0.2022 on Friday night as the newest version of their in-house Linux distribution. Given the rampant AI/LLM-fueled bug reporting and security research, Azure Linux 3.0.2022 ends up incorporating more than 470 security fixes for different CVEs across the many open-source projects making up Azure Linux...

ReactOS Lands Initial USB3 Driver Support

After years of work, ReactOS as the "open-source Windows" operating system striving for Windows program and driver compatibility now has an initial USB 3.0 driver stack in place...

Undeadly.org (Last Update: 2026-11-06 10:49:57GMT)

OpenBSD top(1) adds flag to show chroot, pledge and unveil status

With one recent commit, the top(1) command on OpenBSD became quite a bit more useful. The commit adds a new -Q flag to show each process' use of the chroot(2), pledge(2) and unveil(2) facilities.

The commit message reads,

List:       openbsd-cvs
Subject:    CVS: cvs.openbsd.org: src
From:       Klemens Nanni <kn () cvs ! openbsd ! org>
Date:       2026-11-05 17:54:16

CVSROOT:	/cvs
Module name:	src
Changes by:	kn@cvs.openbsd.org	2026/11/05 11:54:16

Modified files:
	usr.bin/top    : display.c machine.c machine.h top.1 top.c 

Log message:
add Q flag/key to show pledge/chroot/unveil usage

Read more…

OpenSSH 10.6p2 released

In an announcement posted on social media, Damien Miller (djm@) writes,
OpenSSH 10.6p2 has been released with a workaround for a critical vulnerability.

If you operate a Linux system that uses musl libc without PAM (Alpine Linux is one example) then stop reading and set PasswordAuthentication=no or disable SSH for these systems IMMEDIATELY.

This vulnerability does not exist on non-Linux systems, Linux/glibc systems and Linux systems that use PAM for password authentication.

We consider the root cause of this bug to be outside OpenSSH itself, but we're in a good position to deliver a mitigation quickly.

Read more…

Work on GEFS (the Good Enough File System) for OpenBSD progresses

As previously reported, Ori Bernstein is working on GEFS, the "Good Enough File System" imported to OpenBSD, and his EuroBSDCon 2026 presentation was very well received. In fact, the video is among the most frequently played from the conference.

Now Ori has followed up with more evolved code that includes several important steps towards makin the new file system fit for general use. In a message to tech@, Ori writes:

List:       openbsd-tech
Subject:    Re: GEFS on OpenBSD: A very early preview
From:       ori () eigenstate ! org
Date:       2026-10-31 17:08:42

So, it's probably time for a few updates. First
off, thanks to Martijn, and everyone else who
tried it out and sent patches.

Everything is updated and rebased, and the diff
has been regenerated with all of the lastest.

Read more…

emulators/wine (re)entering OpenBSD ports

In his message to the ports@ mailing list, Thomas Frohwein (thfr@) leads in,
In what might the most surprising port proposal of the year, I'm proud
to present a new port for wine.

talking not about the beverage, but the Windows Emulator that enables running binaries for that operating system on other systems.

Among the editors there is no one with enough recent Windows exposure to comment seriously on this, but we do vaguely remember that a port of this software existed back in the day.

So if this falls within the things you are interested in or actually need, we would encourage you to read the entire emulators/wine thread and the later supplement on new port: emulators/wine-extras: scripts for winetricks and wine-steam to keep up to date on developments.

Then, if you are able, please help the effort by testing the ports and reporting back.

dbupdate(8) added to -current

Theo de Raadt (deraadt@) has committed to -current a (WIP) new utility for updating system databases:

CVSROOT:	/cvs
Module name:	src
Changes by:	deraadt@cvs.openbsd.org	2026/10/20 19:08:58

Added files:
	usr.sbin/dbupdate: Makefile dbupdate.8 dbupdate.sh 

Log message:
initial draft of dbupdate(8) for updating (signed) zoneinfo and cert.pem
from a new cdn.openbsd.org/pub/OpenBSD/dbupdates/ directory.  We can't
do this nicely with syspatch(8) because it requires patches in sequence
so a new tool had to be written.  It is intentionally kept very simple
so that it can be studied because we intend to run this in root cron,
(the non-simple parts figure out quickly when not to update).
looked at by sthen beck lucas dgl

Read more…

OpenBSD 8.0 Released

The OpenBSD project has announced OpenBSD 8.0, its 61st release.

The new release contains a number of significant improvements, including but certainly not limited to:

  • OpenBSD/amd64 kernel virtual address space is now 512GB [See earlier report]
  • Mitigation for AMD Zen-2 operation cache corruption added [See commit]
  • OpenBSD now uses AES instructions (on amd64 and arm64 when available) to increase speed of swap encryption/decryption [See commit]
  • The OpenBSD/loongson hardware platform has been retired [See earlier report]
  • getexecpath(3) added [See commit]
  • drm(4) has been updated to Linux 6.18.53
  • vmm(4)/vmd(8) improvements:
    • files are now used to manage VM ownership [See earlier report]
    • multi-processor VMs are now supported [See earlier report]
  • WPA3 support introduced [See earlier report]
  • syslogd(8) privileged and non-privileged parts now separate binaries [See earlier report]
  • qwz(4) driver for Qualcomm Technologies WCN7850 wireless network devices added [See commit]
  • PF queues break the 4 Gbps barrier [See earlier report]
  • httpd(8) and smtpd(8) are now randomly relinked at boot [See earlier report]
  • httpd(8) has seen many improvements:
    • support for custom HTTP headers [See earlier reports]
    • header block/drop rules for request filtering [See earlier report]
    • improved default crypto methods for HTTPS [See earlier report]
    • cache control for static files [See commit]
  • relayd(8) has received several improvements:
    • improved default crypto methods for HTTPS [See earlier report]
    • support for ECDSA keys and certificates was added [See earlier report]
    • filter rules gained support for Lua patterns(7) [See earlier report]
    • support for multiple resolvable addresses [See commit]
  • rtrd(8), a RTR-To-Router protocol daemon, and its control program, rtrctl(8), were imported [See earlier report]
  • acme-client(1) gained support for external account binding [See commit]
  • Several improvements in OpenBGPD [See earlier reports]
  • A number of incremental improvements in rpki-client(8) [See earlier reports]
  • tmux(1) gained support for floating panes [See commit]
  • LibreSSL 4.4.0 [See earlier reports]
  • OpenSSH 10.6 [See earlier reports]
  • llvm/clang(1)/lld(1) updated to version 22.1.6 [See earlier report]
  • LLVM toolchain added to OpenBSD/sparc64 [See earlier report]
  • compiler-rt, libunwind, libcxxabi, libcxx updated to version 22.1.8

In addition, this release offers a number of bug fixes and as well as numerous improvements in hardware support.

See the full changelog for more details of the changes made over this latest six month development cycle.

The Installation Guide details how to get the system up and running with a fresh install, while those who already run earlier releases should follow the Upgrade Guide, in most cases using sysupgrade(8).

Readers are encouraged to celebrate the new release by donating to the project to support further development of our favourite OS!

Schneier (Last Update: 2026-11-06 22:05:12GMT)

Friday Squid Blogging: New Jurassic Squid Predecessors

News story: “Scientists discover a bizarre Jurassic ‘squid’ unlike anything ever seen.”

Scientists have identified the “fattest” belemnite ever discovered, a bizarre, barrel-shaped squid relative that lived in Wyoming’s ancient seas 160 million years ago. The exceptionally rare fossils reveal a creature unlike anything previously known, potentially a predator of smaller squid-like animals and a surprising survivor of a supposedly vanished family.

As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered.

Blog moderation policy.

Pinpointing Location of Videos from Background Airplane Sounds

This is fascinating:

The video describes a technique that can reveal where an otherwise unidentifiable recording was made by analyzing its audio for the faint sounds of passing aircraft. The technique is both fascinating and frightening.

It works by looking at Doppler curves, which plot the way a plane’s sound changes as it passes overhead because of the Doppler effect. This is the same familiar Doppler effect that causes the frequency of a siren to rise as it approaches and then fall as it passes by and moves away. More generally, it’s the phenomenon whereby the frequency of a wave perceived by an observer changes when the observer and the source of the wave are moving in relation to one another.

[…]

It’s sound that’s relevant here, though, and specifically the sound of aeroplanes. Early in his video, Colsto brings up a map of the flights that were in the air at the time the video he’s tracing was recorded. Much of this information is publicly available. Aircraft equipped with Automatic Dependent Surveillance–Broadcast (ADS-B) transmit data about their position, velocity, and altitude, which flight-tracking services collect and make available to the public. While not every plane is tracked, the system provides an enormous amount of information about aircraft movements.

AIs Hacking the Law

In both a 2021 essay and my 2022 book, A Hacker’s Mind, I talk about AIs finding vulnerabilities and exploits—hacking—the legal system.

Here’s some demonstrations of this from Germany:

Legal systems encode the foundations of social order in natural language. Similar to computer systems, the written law can contain vulnerabilities that invite exploitation.1 Courts absorb most exploits through interpretation, and such vulnerabilities rarely surface in the first place. With highly capable AI systems enabling the discovery of vulnerabilities at unprecedented scale, we believe the latter could change.

In testing this hypothesis, we have identified a substantial number of vulnerabilities in the German legal system using LLMs. To our knowledge, none of these have been previously recorded. We share a selection of vulnerabilities below, and present potential exploits for each. We share only those vulnerabilities whose exploitation we believe would not cause serious harm.

We believe that with cheap legal reasoning proliferating, AI systems could jeopardize the functioning of today’s legal systems. In such a world, lawmakers would need to significantly harden the process of legislation, for example by leveraging advanced AI themselves.

Still in its early stages, but definitely something that’s coming.

AI Vulnerability Finding

A comment:

3% of ‘critical’ software security bugs, in all of recorded history, have been found in the last month. This is on pace to find another ~100,000 bugs this year alone, adding ~26% more vulnerabilities to the all time total Do you realize how fucking insane that is?

Yes. It is a new world out there.

Bloatware in Aftermarket Auto Parts

This story is interesting:

One Civic owner purchased a cheap aftermarket head unit off Amazon, and decided to have Claude work its magic on it, like it would a smart TV. What was reportedly discovered isn’t surprising, but is worth knowing about.

Among the pre-installed bloatware—­or spyware, if you’re being less charitable­—was a voice assistant equipped with WebView, an Android system component that lets apps display content off the web. This apparently always used about a third of processing power, even while idle, which isn’t great. There were also Baidu location services, a call recorder (!), a DAB radio client that is pretty much useless in the U.S., and Adobe Acrobat, presumably so your passenger can entertain themselves with PDFs on the go.

It’s interesting because it exposes all the insecurities in this piece of IoT software. But I think the real story is that a random person was able to do this reverse-engineering with the help of AI. Expect a lot more stories like this in the future.

Hiding Capabilities in AI Models

Interesting research: “AI Models Can Provably Hide Arbitrary Capabilities”

Abstract: Capability evaluations aim to surface dangerous model behaviors before deployment, but their reliability depends on the assumption that hidden capabilities can be elicited. We show this assumption does not hold under adversarial conditions by constructing backdoor attacks that embed encrypted neural networks within host model weights, decrypting and executing them only upon receiving a secret trigger. Using digital lockers, these hidden circuits remain provably hard to elicit and interpret under cryptographic assumptions, even given full access to model weights, extending prior work from hiding fixed strings to arbitrary computations. We implement our proof of concept constructions in PyTorch and evaluate elicitation through fine-tuning, weight noising, gradient-based trigger search, and latent adversarial training, using a small chemical reaction prediction task as a proxy for CBRN-relevant capabilities. Our results demonstrate resistance to these methods and, together with our cryptographic guarantees, reveal a limit of elicitation-based capability audits. We release our models to support the improvement of defenses.

LXer (Last Update: 2026-11-07 14:54:28GMT)

Ubuntu Summit 26.10: Less than a week away!

Ubuntu Summit 26.10: Less than a week away! Here in London, the long summer has stepped aside for cooler nights and damp, misty mornings. The trees are turning amber and the sunlight is low on the horizon, which can only mean one thing: the next Ubuntu Summit is just around the corner. In fact, it’s…

Online setup openSUSE Leap 16.1 on bare metal and tuning correct resolution for HDMI Monitor

What is Agama's SSH Injection Advantage: By injecting public key into Agama during the network deployment phase, the very first boot of the newly installed operating system will have the OpenSSH daemon (sshd) active and your authorized keys populated.This gives you a guaranteed SSH hook into the target host. You don't have to look at the unreadable HDMI screen to execute the configuration script below you can run it smoothly from a remote machine, cleanly stripping away the problematic SDDM prompt and tailoring the Wayland desktop profile securely.

A RISC-V Based TEE With AMD Zen 6 CPUs

An interesting technical detail I noticed today from the latest AMD Linux activity is that Zen 6 processors apparently are featuring a RISC-V based Trusted Execution Environment (TEE) where in the past it was an ARM-based core…

The missing piece: bringing up to 15 years of support to Zephyr for microcontroller-based ECUs

We recently announced the launch of Zephyr 26.04 LTS, bringing up to 15 years of security maintenance per LTS and enterprise lifecycle management to microcontroller-grade devices. While central high-performance computer ECUs capture most of the industry spotlight in software-defined vehicle (SDV) architectures, the operational reality of modern vehicles is far more distributed. Under the chassis…

Arch Linux vs. CachyOS vs. Omarchy 4.5 Performance Benchmarks

With CachyOS recently having rolled out its Linux 7.3 based kernel and various other improvements plus with Omarchy 4.5 having been released this week, this article provides a look at how CachyOS and Omarchy are competing on the performance front relative to upstream Arch Linux.