A CBC investigation found that more than 1.5 million Canadian Crime Stoppers tips spanning 25 years were exposed in a breach of the P3 Global Intel tip-management platform. About 850,000 records contained personally identifiable information, including addresses, phone numbers, emails, license plates and some banking details. Longtime Slashdot reader doconnor shares the report: The data was stolen last March by hacktivist collective Internet Yiff Machine. In a manifesto, the group said it wanted to disprove the claim by P3 Global Intel -- the company hired by Crime Stoppers to manage its tips -- that the platform was "anonymous" and "secure." A copy of the hacked data was made available to researchers and journalists, including CBC, by Distributed Denial of Secrets, a U.S. non-profit that archives and publishes hacked and leaked documents it deems to be in the public interest. The report found that more than 4,300 Crime Stoppers tipsters identified themselves by their full name, with hundreds of records containing staff warnings that individuals had "self-identified" or been "exposed," yet their information remained unredacted.

The leaked data included sensitive allegations involving murder, terrorism, drug trafficking and organized crime, with nearly 49,000 tips linked to cases cleared through arrests or criminal charges. Cybersecurity experts criticized the retention of decades-old records... "If a tip is closed, does that need to stay online?" asked cybersecurity expert Ben Coon. "The answer to that, to me, is no."

The RCMP was initially told Canadian data was unaffected, then assured that exposed Canadian records contained no personally identifiable information. This appears to contradict the CBC's findings. Furthermore, affected individuals have not been systematically notified because contacting them could further jeopardize their anonymity.

"For a system that has been designed to promise anonymity to the users, that has failed categorically," said Prof. Ali Dehghantanha, the Canada Research Chair in Cybersecurity and Threat Intelligence at the University of Guelph.

An anonymous reader quotes a report from Ars Technica: We haven't heard many details about Microsoft's upcoming "Project Helix" gaming hardware since the company announced it in March as a device that will "play your Xbox and PC games." In a new wide-ranging profile of Xbox CEO Asha Sharma, though, Fortune alludes to a dual release strategy for upcoming Microsoft gaming hardware, with "a next-generation handheld device" planned by the end of next year and a 2028 holiday season console release that could cost between $1,200 and $1,800.

That future console price range is based on what has "internally been projected" at the company, according to Fortune. But the price for consumers could come down if "Microsoft decides to subsidize the cost," the outlet says, as many console makers have done in the past. While a $1,200 starting price would be historically high for the game console market, even accounting for inflation, it also reflects a new normal: The slowdown in Moore's Law and AI-driven component shortages mean cutting-edge gaming hardware just isn't as cheap as it used to be. This year, the Steam Machine broke the $1,000 starting price, while the 2-year-old technology in the PlayStation 5 Pro is now going for $900, and the 6-year-old Xbox Series X now starts at $750.

A New Mexico judge has ordered Meta to pay $25 billion after a jury found Facebook liable for deceiving users about privacy during the Cambridge Analytica scandal. State Attorney General Raul Torrez called it "one of the largest, if not the single largest state verdict against a company in American history." While Meta plans to appeal the ruling, the funds that are to be collected will go toward state education spending. The Associated Press reports: Jurors in September found Meta liable for over 43 million violations of New Mexico consumer protection laws when a political consulting firm, Cambridge Analytica, harvested Facebook user data to generate targeted political ads for the 2016 election. Forty-eight other states settled with Facebook in a nationwide case, but New Mexico chose to take the social media company to court on its own. [...] During the trial, jurors assessed whether Facebook misled users about privacy and content moderation 34 separate times. State prosecutors, though, argued Facebook's statements deceived the entire population of New Mexico and extended beyond social media users.

In the end, jurors agreed with this premise and found Facebook liable for 2.1 million violations on certain counts, bringing the total number of violations to over 43 million. Facebook's attorneys have argued in subsequent court filings that the state's consumer protection laws don't apply to people in New Mexico who weren't using the platform at the time. [...] In one of the few wins for the defense, jurors found the state didn't prove that Facebook made false claims about removing harmful content, including misinformation about the COVID-19 pandemic.

The state said the company favored certain accounts and allowed for violent or inaccurate content to proliferate. Attorney Randi McGinn said in her closing argument for the state that Facebook profited off harmful content, which CEO Mark Zuckerberg denied during his video deposition. Zuckerberg said the company has to carefully balance freedom of speech with content moderation. Attorneys for Facebook said the company has adapted its policies since the state's lawsuit was filed in 2021 and that it removes 99% of content that violates standards.

Microsoft has reportedly abandoned plans to serve as the anchor customer for Britain's largest proposed AI supercomputer after learning that the project's Essex data center might not receive sufficient grid power until the early to mid-2030s. "Its departure leaves Nscale without a publicly announced customer for the site, although the neocloud insists the project is still going ahead," reports The Register. From the report: When the deal was announced in September 2025, the plan was to pack 23,040 Nvidia GB300 GPUs into a 50MW facility, with room to expand to 90MW. Microsoft would use the computing power for its Azure cloud services, with the first chips expected in early 2027. One important detail remained: how to power it.

As The Guardian reported last month, UK Power Networks warned Nscale that the grid capacity needed might not be available until the 2030s. A UK Power Networks spokesperson told The Register it could not discuss individual connections due to obligations under Section 105 of the Utilities Act. "However, in general, many datacenters, whilst they can connect to our distribution network, are awaiting works on the national transmission network which we do not own," the spokesperson said.

Nscale, meanwhile, isn't letting the small matter of losing its biggest customer dampen its enthusiasm. "We remain committed to both the Loughton project and the UK and we are exploring alternative power sources for the site, in addition to other expansion sites in the UK. Our relationship with Microsoft remains strong and long-term, and this unfortunate London-wide grid issue has no impact on our other contracts," Nscale told The Register.

joshuark writes: Professor Christopher Marquis makes a provocative argument about business schools: "We need to abolish them." A 20-year business educator at Harvard, Cornell and Cambridge, Marquis argues in The New York Times and on LinkedIn that MBA programs sanctify profit-driven dealmaking at the expense of public life. "That's not the institution failing," he writes. "Sadly, it's the institution working." "Business school doesn't just hand out skills and a network," argues Marquis, "it quietly reshapes how people see the world, rewarding dealmaking, simplification, and optimization for financial metrics, while workers and communities become afterthoughts."

Marquis points to research suggesting that business-school-trained CEOs often benefit shareholders at the expense of workers, without delivering measurable improvements in company performance... "[W]hen a business-school-trained CEO takes over a firm, wages fall and labor's share of income drops, with no gain in productivity," writes Marquis. "In both the U.S. and Denmark, what passes for the 'managerial skill' of business-school graduates turns out to be a transfer of wealth away from workers and toward shareholders. Students deserve better than a machine that narrows their sense of what's possible."

TP-Link plans to begin assembling routers in Mississippi as early as 2027 after the FCC banned imports of new foreign-made consumer routers over security concerns. Engadget reports: The company has signed a letter of intent with manufacturer Key Tronic and, pending approval from regulators, TP-Link says stateside assembly of its routers could start at a Mississippi production line as soon as early 2027.

Once things are up and running, Wi-Fi 8 routers are expected to be among the first TP-Link products that Key Tronic assembles. TP-Link claims that the agreement is part of its "long-term effort to accelerate US investment in high-tech manufacturing and job creation, designing and assembling next-generation products for American consumers here on American soil."

The company said it will still have to source components from outside the US. "Many [components] are just not available from a domestic source, and this is not a TP-Link issue," TP-Link's corporate affairs officer Steve Kovsky told PC Mag. "This is an issue for all manufacturers that are trying to onshore manufacturing."

An anonymous reader quotes a report from CNN: Elon Musk has said he will give every child in America a stake in SpaceX, his $2 trillion aerospace and artificial intelligence company, as tech firms face intensifying scrutiny over their impact on society. "Next year, I will give one of my SpaceX shares to every kid in America," he wrote on X on Monday. "This will be the first of many."

SpaceX only began trading publicly in June (and after the biggest initial public offering in history). The company's shares were trading for about $146 when the market closed on Friday. Musk's proposal was thin on detail. It is not clear how those shares would be distributed to the tens of millions of American children or whether all of them would even be eligible. According to the United States Census Bureau, there are roughly 73 million people under the age of 18, making Musk's potential giveaway worth about $10.7 billion at SpaceX's current share price. The move came in response to Anthropic's announcement on Sunday that it will commit at least 5% of its shares to a "Public Benefit Fund" that will donate money to social causes. "I recommend giving the shares directly to the public," Musk said in a reply to Anthropic's announcement. "This is what I will be doing."

America is "making an unprecedented attempt to revive three shuttered nuclear plants to meet rising energy demand," reports the Los Angeles Times,

"Two of the plants have contracts with Big Tech companies that will pay a premium to get large amounts of carbon-free energy for data centers..." No commercial nuclear reactor is known to have resumed generating electricity after beginning the decommissioning process that takes one out of service, though some reactors have restarted after long outages. The Department of Energy is lending as much as $4.4 billion to restart the Palisades Power Plant in Michigan, the Crane Clean Energy Center on Pennsylvania's Three Mile Island and the Duane Arnold Energy Center in Iowa to restore a combined 2.25 gigawatts of electricity, which can power roughly 2 million homes and businesses. All three of the plants closed before their licenses expired, largely because the electricity they produced was considered too expensive... Restarting a reactor is a fairly quick way to get a lot of electricity, and it's cheaper than building a new, large reactor, said nuclear engineering expert Todd Allen...

Edwin Lyman, at the Union of Concerned Scientists, said the taxpayer money being used should go toward addressing safety risks. For example, most U.S. plants were built between 1970 and 1990 and were designed to withstand natural disasters of that era, said Lyman, director of nuclear power safety at UCS. But climate change is making extreme weather events more frequent and severe. "It's possible, if they set the right level of safety and spend the necessary funds to meet that, they could restore these plants to operable condition," he said. "That's not happening at this point...."

NextEra Energy and Google are collaborating to restart Duane Arnold by early 2029... Microsoft has a contract with the Crane Clean Energy Center on Three Mile Island just outside Harrisburg. The plant was the site of the nation's worst commercial nuclear power accident in 1979. The accident destroyed one reactor, leaving the plant with one functioning. In 2019, Constellation Energy's then-parent company Exelon shut down the functioning reactor, saying it was losing money and that Pennsylvania lawmakers had refused to subsidize it. Constellation Energy announced in 2024 that it would spend $1.6 billion to restart the reactor under a 20-year agreement with Microsoft. It hopes to bring the plant back online in 2027...

Palisades is expected to be the first nuclear plant in the world to resume generating power after beginning the decommissioning process.

"When you pay for a game, you should own it," says U.S. Representative Ritchie Torres (D-NY), introducing a new bill to fight the practice of "a rental disguised as a sale".

Kotaku reports: The fifth best-selling game of 2024 in the U.S. was NBA 2K25. Every year, fans dump hundreds of hours and hundreds of dollars into the grindy NBA basketball sim. But just a little over two years after its release, 2K Games confirmed it's already pulling the plug on it. The game will be delisted from digital storefronts on October 30. By January 1, 2027, online servers will go offline as well, making it impossible to play the most popular modes. A game millions paid $70 for will become mostly useless. Democratic Congressman Ritchie Torres wants to change that.

"I think there should be a simple rule: if you pay for it, you own it," Torres told Kotaku in a phone interview this week. To make that the law of the land, the U.S. representative for New York's 15th congressional district since 2021 plans to introduce legislation in Congress called the Power To The Players Act. The bill would direct the Federal Trade Commission to create regulations protecting ownership rights for video games. Companies selling digital games would need to grant players more than just a license that can expire at any time, and games with online features would need to provide offline modes that still work even when servers eventually shut down...

The Power To The Players Act noticeably leaves out other types of digital media like movies and music, though Terminator 2 and a bunch of other movie purchases were ripped from people's digital libraries earlier this year.
Representative Torres "did not confirm if the bill will have any cosponsors," the article acknowledges, "or whether any of his Republican colleagues will sign on to support it."

But players will see the bill's importance next month, the article points out, "when Grand Theft Auto 6 releases as just a download code in a box, giving fans no control over a purchase that starts at $80.

July: Nvidia-backed Nscale is building a £2bn data centre at Loughton in Essex, with Microsoft signed up as its anchor tenant. But it can't get the electricity to switch on, reported The Next Web: Nscale's problem is not really Nscale's. It is Britain's. Grid-connection times have become the single biggest brake on new data centres. Some UK projects face waits stretching close to a decade for enough power. One estimate found more than a quarter of data-centre capacity slipped in 2025 alone.
"The data centre was due to receive its power supply at the end of the year," reports the BBC. "But as first reported by the Telegraph on Sunday, Nscale has been told this will not happen until the 2030s." (Though Nscale and Microsoft are still working together on other projects in Norway, Portugal and America.)

But now anchor-tenant Microsoft has pulled out of the Essex deal, reports the Telegraph, adding that Microsoft's move "leaves the site in apparent limbo. The company was its only announced customer, having agreed to rent 23,000 Nvidia AI chips at the facility..." Microsoft's decision threatens to undermine Nscale's attempts to push ahead with a Wall Street flotation worth up to $35bn (£26bn), despite a brutal sell-off in AI computing stocks. Rival data centre developers have seen their share prices plunge over the last week on concerns that they will struggle to repay their debts as interest rates and inflation continue to rise.... Tech analyst Gartner said last week that $3.5 trillion could be written off by 2030 if the AI boom fails to deliver on its promises.
And "our research indicates that enterprise and consumer AI revenue will be insufficient to support profitable returns on all planned AI capital expenditures during this period," Gartner wrote: "In 2026, AI providers are expected to spend nearly $1 trillion on AI infrastructure, and are forecast to invest an additional $6 trillion between 2027 and 2030," said Will Sommer, Sr Director Analyst at Gartner.... Failure to achieve sustainable return on investment capital (ROIC) on rapidly depreciating assets would almost certainly necessitate write-downs. Based on Gartner projections, a continued AI infrastructure investment trajectory could leave more than $4 trillion in asset value exposed to write-down risk through 2032. In this scenario, Gartner does not expect the 12% ROIC to be achieved until the end of 2032 at earliest...

Gartner estimates AI-optimized IaaS spending will grow from $66 billion in 2027 to $174 billion in 2030. "The growth in spending on AI-optimized IaaS will be too low for most AI compute providers to recover their AI investments before the current generation of AI semiconductors is replaced," said Sommer. By 2030, Gartner predicts that cost pressure and a lack of a differentiating business model will force over 80% of neocloud [AI-specialized infrastructure] providers to cease independent operations.

Gizmodo reports: Roughly 84.4% of the world's coral reefs suffered bleaching-levels of heat stress during the last major marine heat wave from January 2023 to September 2025, with over half already lost compared to coral coverage in the 1950s... But there's some good news, thanks to a new study published this Wednesday in the journal Science Advances: Marine ecologists at Stanford have discovered that bleached corals can be revived via contact with a healthy coral neighbor, who (like a good neighbor) shares their photosynthetic, symbiotic algae (Symbiodiniaceae) with their peers.

"This incredible new result — that fast and full recovery is possible in bleached coral — can inspire solutions that eventually may be scalable," [Fiorenza Micheli, a marine ecologist with Stanford's Center for Ocean Solutions and study co-author, told the journal Nature]... Unlike their controls, bleached coral in contact with healthy coral recovered in just eight weeks... [T]he surprise discovery of this method alongside the other techniques that marine conservationists are now actively pursuing — including the successful deep-freezing and revival of at-risk coral sampled from Hawaii — could offer threatened reefs the lifeline they need. Coral contact could super-charge other efforts, like the selective breeding of heat-tolerant corals and the cultivation of protected coral nurseries

The Free Software Foundation "has never supported Raspberry Pi," writes their deputy directory Sean O'Brien, "as it depends on nonfree software for the boot process, leaving an important part of the computer outside the user's control."

But they're now decrying "an even more intrusive restriction on user freedom" — the binary-blob bootloader changes that limit your ability to upgrade RAM: The restriction is not new: the relevant checks were introduced in the device firmware around 2024. However, these hardware handcuffs have only recently received wider attention. Though a user can desolder the original memory and install electrically compatible RAM, the nonfree firmware may refuse to recognize the additional memory, or simply decide not to boot the computer at all. Even replacement RAM of the same capacity can be rejected.

This is worse than Raspberry Pi's longstanding dependence on nonfree firmware in an important way. It is not only nonfree software, but it is Digital Restrictions Management (DRM), used in this case to prevent the owner of the computer from making a modification that the hardware is otherwise capable of supporting. That distinction matters. Soldered RAM is difficult for most people to replace since it is a physical characteristic of the hardware. In the case of Raspberry Pi boards, users have demonstrated that the hardware itself can be modified successfully....

Raspberry Pi justifies the use of DRM on the basis of being able to identify altered computers. There may be legitimate reasons for wanting to identify such altered computers. Unscrupulous sellers have reportedly replaced memory on lower-capacity boards and resold them as more expensive models, sometimes using unreliable or defective components. But preventing fraud and maintaining quality does not require taking control away from users. A Raspberry Pi could record its original factory configuration in a cryptographically verifiable form. Raspberry Pi could use free software that warns the user when the installed RAM differs from original factory configuration. Raspberry Pi could provide tools allowing buyers to verify what hardware originally shipped with a board. None of those measures requires a software-enforced limit on what an owner may do with the computer...

If compatible hardware can be installed successfully, the manufacturer should not create restrictions to prevent the owner from using it. Restrictions on hardware upgrades are deeply troubling from an organization like Raspberry Pi that has stated their commitment to longevity as a guiding principle. Free software is ultimately about who controls the computer. The user should control it, not the manufacturer that sold it....

The people who own these computers must also have the freedom to modify, repair, and upgrade them, without restrictions imposed by nonfree software limiting their potential.
Hackaday recently argued the restriction was "no big deal." noting there's ways to bypass the restriction" The bootloader is stored in the SPI flash chip, which can be reflashed using the built-in mask ROM over USB and rpiboot, and you are not prevented from flashing older versions of the bootloader, so far... If you have the skills to upgrade your RAM, you most certainly have the skills to downgrade the Raspberry Pi bootloader...

My advice: don't lament Raspberry Pi RAM upgrades, especially given they're only slightly harder to perform now. Very few hackers ever performed them, the main audience for them turned out to be dodgy hardware resellers online... Think of the users that will no longer be fooled by a shady seller on Amazon, especially now that the perverse incentives for board mods and reusing harvested RAM chips are at their highest.

BoingBoing reports: Mark Stephens, better known under the pen name Robert X. Cringely, died last week at 73. Stephens chronicled the tech industry of the late 1980s and early 1990s — the age of Bill Gates' rise, Steve Jobs' repose, the dawn of the world wide web — and produced the famed documetary Triumph of the Nerds, based on his own bestselling Accidental Empires: How the Boys of Silicon Valley Make Their Millions, Battle Foreign Competition, and Still Can't Get a Date.

Though not the first InfoWorld columnist to write under the Cringely name, he was responsible for its persona and fought successfully to keep it after he left the magazine in 1995.
"I loved the man," writes Darth Technoid (Slashdot reader #83,199): I first met him in the 1990s, while he was still working at InfoWorld, and we became friends immediately. He helped me get a job or two, and he was always filled with crazy (meaning really good) ideas.

I'll miss him and his creativity greatly.
Cringely answered questions from Slashdot's readers in 2000. And Cringely led an interesting life, as you can tell from Slashdot's January, 2020 story Robert Cringely Attempts an Air-Launching Space Startup: "How does a 67-year-old hack with three minor children recover from going blind, losing his home and business in a horrible fire (like 2,000 others, we are still fighting with insurance companies), while appeasing an angry crowd of Kickstarter supporters armed with pitchforks and shovels?"

That crowd still wants long-time tech pundit Robert X. Cringely to deliver on his Kickstarter-funded project to create custom Minecraft servers. So in a new blog post this week, Cringely writes that "I went looking for venture money to recapitalize MineServer and I simultaneously started a satellite launch company to fund my eventual retirement. I am not making this up..."

He's now found a Beverly Hills patron who wants to be a co-investor in the Minecraft servers, but "I will have to earn the matching money on my own, which is what I have been trying to do with my other startup, Eldorado Space."
Slashdot has often linked to Cringely's commentary over the years, as far back as 1998 and as recently as this summer. ("Tech Pundit Cringely Co-Founds Startup '2Brains Inc' to Solve LLM Hallucinations.")

• July, 1999: Cringely's take on "Pirates of Silicon Valley"
• April, 2009: Three Mile Island Memories
• June, 2011: IBM Did Not Invent the Personal Computer
• March, 2019: Cringely's Final Predictions: Apple Becomes a Financial Service and Hedge Fund
• June, 2019: Cringely Predicts The End Of Broadcast TV Within A Decade
• April, 2020: Not Just 'The Death of IT'. Cringely Also Predicts Layoffs For Many IT Contractors
• January, 2021: Robert Cringley Predicted 'The Death of IT' in 2020. Was He Right?
• June, 2023: Cringely Predicts Moore's Law Will Continue — Because of AI

But my favorite Cringely memory is Steve Jobs: The Lost Interview, the full 70-minute interview from 1995 that a 40-year-old Jobs gave to Cringely during filming for Triumph of the Nerds. ("And they actually sent someone to wake up the Pope....") There's various pirated copies on YouTube and an online transcript, but only 10 minutes made the broadcast — at the time Jobs was still at NeXT after his departure from Apple. But when Cringely rediscovered the videotape, the entirety of the interview was released to theaters in 2012 six months after Steve Jobs' death.

Share your own memories of Robert Cringely in the comments...

"Cloudflare has acquired Deno, the company behind the [server-side] JavaScript and TypeScript runtime created by Ryan Dahl, the inventor of Node.js," Forbes reported last week.

But Deno "has no future at Cloudflare, which will maintain the runtime for another year before ending its development," writes The Register. "That's OK with Dahl. 'I am now of the opinion that if you're choosing Node.js for building servers, you're doing it wrong,' Dahl told The Register."

It all started with his team's work on the platform Deno Deploy, "We wanted to make running applications as straightforward as possible," Dahl wrote on the official Deno blog. "But building and operating Deploy also showed us how much complexity remained underneath that developer experience. I wanted to simplify that layer, too." This led to celld. Building on the Cloudflare Workers programming model, celld lets developers build distributed applications from the start while making the system simple to operate. What excites me greatly is that the scaling is built into the programming model, rather than infrastructure each app has to assemble itself.... We want to make this programming model the default way to build servers, whether you run on Cloudflare's network or your own infrastructure.

Joining also means choosing where to focus our effort... Deno will remain open source, and we welcome others who want to continue its development. Deno Deploy will continue operating for six months before shutting down. We will provide migration support for paying customers moving to Cloudflare Workers. [Deno's JSR package registry for JavaScript and TypeScript] will continue operating, with its infrastructure moving to Cloudflare.
Forbes argues that this acquisition of Deno "turns a long-standing objection to Cloudflare Workers, the claim that applications built on it cannot easily leave, into a selling point." For CIOs evaluating serverless and edge platforms, portability now has a concrete answer... Released in August, [celld] is a single Rust binary that runs Workers and Durable Objects across many machines, with object storage as its only external dependency. Operators run multiple celld instances against one storage bucket, and the software handles placement, routing and persistence. Dahl and Belder will now lead an effort to merge celld into workerd and make self-hosting a supported way to run Workers applications. With this, customers can build an application on Cloudflare's network and move it to a private data center without rewriting it.
"With Deno, we improved the experience of writing JavaScript," Dahl argues on the Cloudflare blog, "but we didn't fundamentally change what developers had to assemble around the runtime. The bigger problems are around networked applications: distributing computation, coordinating state, data storage in general, and autoscaling to meet demand..." Could the programming model make partitioning across machines part of the design from the start? The solution clicked into focus when I read about Cloudflare's Durable Objects. It provided a very powerful abstraction: the distributed singleton with a SQLite database. Each Durable Object is like a small, individually addressable server with its own relational database. Its JavaScript execution is single-threaded (which is easy to reason about), it handles WebSockets, and its local SQLite database can be accessed synchronously. By building a chat application using one Durable Object per channel, you have sharded your data and WebSocket connections, and thus made your application scalable... What excites me is the leverage this model gives developers: compute, relational databases, queues, and real-time communication primitives designed for applications distributed across machines.
Now Dahl and 12 of his Deno colleagues "will work to build out Cloudflare's Workers platform," explains The Register, "expanding it for potential open-source use. He feels this approach is the way to go." "Right now, every other server is really operating at the Linux VM layer. That is not what Cloudflare Workers are," he said...

The ever-fickle Dahl first debuted Deno in 2018 as a rewrite of Node. The name 'Deno' is an anagram of Node, and it was Dahl's attempt to fix everything he felt he got wrong with Node — built-in fetch, a permission model, native TypeScript support et al. Sequoia backed Dahl's company for $21 million in 2022, and as of August, Deno amassed 400,000 monthly users. Nonetheless, Node's gravity proved too heavy for Deno to achieve escape velocity.

"What we found over years of working on Deno is that you can't really deviate from Node.js very much," Dahl told The Register. "As we continued to try to get adoption for Deno, we found we had to essentially backpedal on some of the original promises and become more Node compatible over time, and that left us as a kind of an alternative Node.js implementation." Going forward, Cloudflare will supply Deno with bug fixes and security patches for the next year, while Dahl looks for a new home for the MIT-licensed open source project.
Dahl's worked could bring "yet another revolutionary turn for server-side JavaScript," the article argues, "offering a runtime that would require only 300 KB of memory per instance, rather than the hundreds of megabytes now required for Node/Deno. Such savings could quickly add up for a cloud provider, especially one serving the voracious agentic market."

And as Dahl wrote on the Deno blog, "The need for better abstractions is especially acute with AI. Durable Objects bring together capabilities that are particularly useful for agent harnesses: inexpensive, serverless execution, persistent state, WebSockets, and a high-level JavaScript interface. This is what I'm most excited to explore and why celld focuses on Durable Objects."

Millions of current and former students at California's public school have had their data stolen — including names, date of birth, and addresses — stolen in a breach, reports the Los Angeles Times.

The breach affects students "who took the state's mandated standardized tests that annually assess their academic proficiency, education officials announced Friday." The compromised information affects many more than the state's current 5.7 million public-school students as the breach dates back to 2023 enrollments. Students who left California but did not confirm their transfer to another school also were affected, dating back to 2006.

The data breach involved [nonprofit] Educational Testing Service or ETS, which provides extensive services to California [including test participation and assessment data]... Affected former students, including those who are now adults, are eligible for 24 months of free identity-protection services and identity-restoration help if there is identity theft. Officials said that parents and guardians may want to consider requesting a free credit freeze for their children who are under 16 to help prevent unauthorized accounts from being opened in the names of their children.
The breach involved a compromised login credential, according to a web page about the incident from California's Department of Education. The compromised credential was then used to copy files with student information at "various" times between May 22 and September 18, 2026, which drew concern from a cybersecurity expert interviewed by the Los Angeles Times: "A stolen login credential should not become a months-long passport to millions of students' personal records," said Anton Dahbura, executive director of the Johns Hopkins University Information Security Institute. "If that is what happened here, the critical question is why authentication safeguards, access restrictions, and monitoring systems failed to detect and stop the unauthorized activity."

He added: "Incidents like this expose a fundamental weakness in how we manage student data: School systems may outsource the storage and processing of sensitive information, but they cannot outsource the consequences of a breach. When millions of student records are concentrated with a single vendor, one security failure can become a statewide problem with consequences that follow children for years."
A spokesperson for ETS told the Times that they've now implemented additional safeguards, including strengthened access controls, enhanced monitoring, and more third-party review of their security practices.