Researchers have found malicious software that received more than 6,000 downloads from the NPM repository over a two-year span, in yet another discovery showing the hidden threats users of such open source archives face.

Eight packages using names that closely mimicked those of widely used legitimate packages contained destructive payloads designed to corrupt or delete important data and crash systems, Kush Pandya, a researcher at security firm Socket, reported Thursday . The packages have been available for download for more than two years and accrued roughly 6,200 downloads over that time.

A diversity of attack vectors

“What makes this campaign particularly concerning is the diversity of attack vectors—from subtle data corruption to aggressive system shutdowns and file deletion,” Pandya wrote. “The packages were designed to target different parts of the JavaScript ecosystem with varied tactics.”

Read full article

Comments

When web services shut down and have time to put up a blog post about it, there's typically some real understatement in their explanation of "why." Bookmarking service Pocket's goodbye post truly delivers on this front, noting almost off-handedly that "the way people use the web has evolved." Yes, you might just say that.

Both Pocket and another browser add-on, Fakespot, are being shut down by Firefox maker Mozilla in early July. In a post about the closures , Mozilla cites the need to "invest our time and resources so we can make the biggest impact." Pocket's saving and curation powers will be implemented into Firefox, while Fakespot's analysis of online shopping reviews "didn't fit a model we could sustain."

Pocket started in 2007 as Read It Later, a way to bookmark web articles for later reading. It's not just the focus on published text articles that now seems quaint but also the idea that there was a finite amount of web material you would get back to and would have the time to do so. Those who do want that nice-sounding media experience can cobble it together in most modern browsers, which have built-in tools for managing bookmarks, distinct "reading lists," and even creating stripped-down "readable" versions of articles.

Read full article

Comments

The Federal Aviation Administration gave the green light Thursday for SpaceX to launch the next test flight of its Starship mega-rocket as soon as next week, following two consecutive failures earlier this year.

The failures set back SpaceX's Starship program by several months. The company aims to get the rocket's development back on track with the upcoming launch, Starship's ninth full-scale test flight since its debut in April 2023. Starship is central to SpaceX's long-held ambition to send humans to Mars and is the vehicle NASA has selected to land astronauts on the Moon under the umbrella of the government's Artemis program.

In a statement Thursday, the FAA said SpaceX is authorized to launch the next Starship test flight, known as Flight 9, after finding the company "meets all of the rigorous safety, environmental and other licensing requirements."

Read full article

Comments

While our Sun prefers to go solo, many other stars are parts of binary systems, with a pair of stars gravitationally bound to each other. In some cases, the stars are far enough apart that planets can form around each of them. But there are also plenty of tight binary systems, where the stars orbit each other at a radius that would place them both comfortably inside our Solar System. In these systems, exoplanets tend to be found at greater distances, in orbits that have them circling both stars .

On Wednesday, scientists described a system that seems to be neither of the above. It is a tight binary system, with a heavy central star that's orbited by a white dwarf at a distance two to three times larger than Earth's orbit. The lone planet confirmed to be in the system is squeezed in between the two, orbiting at a distance similar to Earth's distance from the Sun. And, as an added bonus, the planet is orbiting backward relative to the white dwarf.

Orbiting ν Octantis

The exosolar system is termed ν Octantis (or Nu Octantis), and its primary star is just a bit heavier than our Sun (1.6 solar masses). It's orbited by a far dimmer companion that's roughly half of our Sun's mass, but which hasn't been characterized in detail until now. The companion's orbit relative to the central star is a bit lopsided, ranging from about two astronomical units (AU, the typical Earth-Sun distance) at its closest approach to roughly three AU at its farthest. And, until yesterday, the exact nature of the companion star was not clear.

Read full article

Comments

AT&T has struck a deal to buy CenturyLink's consumer fiber broadband division for $5.75 billion, giving the Internet provider another 1.1 million fiber customers in 11 states.

The all-cash deal is expected to close during the first half of 2026 assuming the companies obtain regulatory approval. AT&T will gain new customers in Arizona, Colorado, Florida, Idaho, Iowa, Minnesota, Nebraska, Nevada, Oregon, Utah, and Washington.

The deal will give AT&T room to grow its user base by more than the 1.1 million existing CenturyLink customers, as AT&T said the network areas being sold include over 4 million fiber-enabled locations. "The transaction will enable AT&T to significantly expand access to AT&T Fiber in major metro areas like Denver, Las Vegas, Minneapolis-St. Paul, Orlando, Phoenix, Portland, Salt Lake City and Seattle, as well as additional geographies," AT&T said .

Read full article

Comments

Ever since a mourning mother, Megan Garcia, filed a lawsuit alleging that Character.AI's dangerous chatbots caused her son's suicide , Google has maintained that—so it could dodge claims that it had contributed to the platform's design and was unjustly enriched—it had nothing to do with C.AI's development.

But Google lost its motion to dismiss the lawsuit on Wednesday after a US district judge, Anne Conway, found that Garcia had plausibly alleged that Google played a part in C.AI's design by providing a component part and "substantially" participating "in integrating its models" into C.AI. Garcia also plausibly alleged that Google aided and abetted C.AI in harming her son, 14-year-old Sewell Setzer III.

Google similarly failed to toss claims of unjust enrichment, as Conway suggested that Garcia plausibly alleged that Google benefited from access to Setzer's user data. The only win for Google was a dropped claim that C.AI makers were guilty of intentional infliction of emotional distress, with Conway agreeing that Garcia didn't meet the requirements, as she wasn't "present to witness the outrageous conduct directed at her child."

Read full article

Comments

Do you miss the feel of tactile buttons on your kitchen appliances or lament car manufacturers' insistence on touchscreens? Have you ever found yourself clumsily fumbling with the door handles of a vehicle or distracted by the bright blue light beaming from your vacuum or Wi-Fi router?

If so, you're not alone. The way technology gadgets are designed largely relies on things like blue, often LED, lights, flat resistive or capacitive touch input, and software. Some, like Amber Case, founder of the Calm Tech Institute , believe that these design choices distract from devices' purpose and functionality and are calling for a new approach to product design.

"Calm Tech Institute is kind of a consumer advocacy body that's collecting stories and research from neuroscientists that says, look at how the mind wants texture, and look at how it wants physical buttons, and there's a part of your mind that needs [those]," Case told Ars Technica. "When we don't have it and we replace it with glass, we're not only losing something about human experience, but we're actually causing the mind stress.”

Read full article

Comments

Three-dimensional printing is transforming medical care, letting the health care field shift from mass-produced solutions to customized treatments tailored to each patient’s needs. For instance, researchers are developing 3D-printed prosthetic hands specifically designed for children, made with lightweight materials and adaptable control systems.

These continuing advancements in 3D-printed prosthetics demonstrate their increasing affordability and accessibility. Success stories like this one in personalized prosthetics highlight the benefits of 3D printing, in which a model of an object produced with computer-aided design software is transferred to a 3D printer and constructed layer by layer.

We are a biomedical engineer and a chemist who work with 3D printing. We study how this rapidly evolving technology provides new options not just for prosthetics but for implants, surgical planning, drug manufacturing, and other health care needs. The ability of 3D printing to make precisely shaped objects in a wide range of materials has led to, for example, custom replacement joints and custom-dosage, multidrug pills.

Read full article

Comments

Self-hosting is having a moment, even if it's hard to define exactly what it is.

It's a niche that goes beyond regular computing devices and networks but falls short of a full-on home lab . (Most home labs involve self-hosting, but not all self-hosting makes for a home lab.) It adds privacy, provides DRM-free alternatives , and reduces advertising. It's often touted as a way to get more out of your network-attached storage (NAS), but it's much more than just backup and media streaming.

Is self-hosting just running services on your network for which most people rely on cloud companies? Broadly, yes. But take a look at the selfh.st site/podcast/newsletter, the r/selfhosted subreddit , and all the GitHub project pages that link to one another, and you'll also find things that no cloud provider offers.

Read full article

Comments