×
Chrome

Ask Slashdot: How Do You Deal With Lousy Browser Spell-Checkers? 96

Long-time Slashdot reader Tablizer writes: Chrome's spell checker doesn't list the proper option for "devine" or "preditor". Soundex would match them and is relatively simple to implement, but most browsers allegedly use the Hunspell algorithm. However, Hunspell doesn't handle incorrect vowels well.

Browsers could offer a "More spelling options" menu item to bring up a wider dialog using alternative algorithms, such as Soundex. Until then, can anyone recommend good spelling plugins?
Role Playing (Games)

It's the 40th Anniversary of 1983's 'Dungeons & Dragons' Cartoon (newsfromme.com) 66

71-year-old Mark Evanier is a legendary comic book/TV writer. Today he posted on his personal blog that "Forty years ago, I spent about six days (cumulative) of my life writing the pilot script and small-b bible for a Saturday morning cartoon series called Dungeons & Dragons...

"I feel like I have now spent more than six days (cumulative) being interviewed about this series." It went on CBS on September 17, 1983 and lasted three seasons. Do not believe those who claim it was driven from the airwaves by pressure groups who saw satanic subtext in the series. It went off for the same reason most shows go off: Because the ratings were declining and — rightly or wrongly — the brass at the network didn't think it would have enough viewers to sustain another season. Yes, there were protests about its content but not many and CBS, at least in those days, was pretty good about ignoring such outcries if — and this is always a Big If — the viewers seem to want whatever is being outcried about.
From Wikipedia: The level of violence was controversial for American children's television at the time, and the script of one episode, "The Dragon's Graveyard", was almost canceled because the characters contemplated killing their nemesis, Venger. In 1985, the National Coalition on Television Violence demanded that the FTC run a warning during each broadcast stating that Dungeons & Dragons had been linked to real-life violent deaths.
The show ultimately ran for a total of 27 episodes. The blog post continues: It was a good show because of good writers, good producers, good artists, good voice talent, good everything...and I was mostly a spectator to all that goodness, having opted not to stick with it. Still, thanks to the gent who was my agent at the time, my name was seen for a micro-second in the credits each week so I get more kudos than I probably earned...

Quite recently, I sat for this video podcast with a fine interviewer and a major fan of the series, Heath Holland. It's almost an hour and we talked about some other things but it's mostly about Dungeons & Dragons...

The podcaster notes that the cartoon's six adventurers even made a cameo in 2022's live-action Dungeons & Dragons movie, Honor Among Thieves — and several other companies are still celebrating the cartoon. Hasbro recently released a line of action figures based on the cartoon, while IDW has released a comic book mini-series called Dungeons & Dragons: Saturday Morning Adventures.

In the series six children are transported from an amusement park's Dungeon's & Dragons ride into the game's realm, where a kindly Dungeon Master helps them battle various villains and monsters as they search for a way home. More lore about the series from Wikipedia: A final unproduced episode would have served as both a conclusion to the story and as a re-imagining of the show, had it been picked up for a fourth season. However, it was canceled before the episode was made. The script has since been published online and was performed as an audio drama as a special feature for the BCI Eclipse DVD edition of the series... A fan-made animated version of the finale appeared online in 2020 [according to TheGamer.com].
Graphics

Hobbyist Builds HDMI ISA Graphics Card For Vintage PCs By Improving Graphics Gremlin (yeokhengmeng.com) 60

Earlier this year, Singapore-based embedded security researcher yeokm1 built a ChatGPT client for MS-DOS.

Now they're back with a new project: HDMI is a relatively modern video connector we take for granted on modern PCs and monitors. Now vintage PCs can join in the fun too with a native connection to modern HDMI monitors without any additional adapter.

Two years ago, I learned of an open-source project called Graphics Gremlin by Eric Schlaepfer who runs the website Tubetime.us. It is an 8-bit ISA graphics card that supports display standards like Color Graphics Adapter (CGA) and Monochrome Display Adapter (MDA). CGA and MDA are display standards used by older IBM(-compatible) PCs in the 1980s. The frequencies and connectors used by CGA and MDA are no longer supported by modern monitors hence it is difficult for older PCs of the 1980s era to have modern displays connected to them without external adapters. Graphics Gremline addresses this problem by using techniques like scan doubling (for CGA) and increasing the vertical refresh rate (for MDA) then outputing to a relatively newer but still old VGA port.

I fabricated and assembled the design then installed it into my IBM5155... I decided to modify the Graphics Gremlin design so it can connect natively to an external HDMI monitor and service the internal Composite-based CRT at the same time.

The post concludes triumphantly with a photo of their IBM 5155 running the CGA Compatibility Tester displaying the color palette.
Television

It's the 50th Anniversary of 'Star Trek: the Animated Series' (bbc.com) 60

Star Trek: The Animated Series was a half-hour Saturday morning cartoon that premiered exactly one half century ago — yesterday. You can watch its opening credits sequence on YouTube — with its strange 1970s version of the theme song. CBS's YouTube channel also offers clips from various episodes.

Starting in 1973, it ran for two seasons — a total of just 22 episodes. But the BBC notes it kept Star Trek in people's minds after the original series had been cancelled in 1969: While The Original Series had struggled in the ratings during its initial run, the show thrived in syndication, and created the phenomenon of fan conventions (think Comic-con in the present day). Because of this, studios were interested in more Star Trek, but there was a problem: the sets had been scrapped, the costumes were gone, and it would have been cost-prohibitive to rebuild everything from scratch. NBC settled on a different approach: an animated series.

According to The Fifty-Year Mission by Mark Altman and Edward Gross (an oral history of Star Trek), Gene Roddenberry wasn't overly interested in an animated show in and of itself. However, he was willing to go along with it because he saw it as a stepping stone to another live-action show or a feature film. An animated show would energise fans, he thought, so he agreed on the condition that he would have full creative control of The Animated Series. After a fight, the network gave in. The full, regular cast returned, with the exception of Walter Koenig's Pavel Chekov, who was cut for budget reasons...

[I]t was very much conceived of as a continuation of The Original Series. Some of the episodes were direct sequels, such as More Tribbles, More Trouble, which is a continuation of the classic The Trouble with Tribbles, and featured the return of Cyrano Jones... [Another episode was a sequel to The City on the Edge of Forever.] Dorothy (DC) Fontana led a group of writers from the original show who mostly wrote for a traditional, adult Star Trek audience. That's why the show didn't catch on — while it was well-received by critics, it might have done better in prime time. The show won a Daytime Emmy for best children's series, but it was cancelled after two years because of low ratings. Roddenberry then moved on to work on another live-action series, called Phase II, which would eventually become Star Trek: The Motion Picture...

Whatever is decided regarding "the canon", The Animated Series sits firmly within Star Trek's guiding ethos: Gene Roddenberry's vision for a utopian future where humans coexist peacefully with aliens as part of a Federation, and there's no poverty or war.

Transportation

The Titan Submersible Disaster Was Years In the Making, New Details Reveal (vanityfair.com) 196

Vanity Fair revisits the many warning signs about OceanGate's Titan submersible prior to an implosion on June 18th that killed all five passengers onboard.

A professional expedition leader tells their reporter that "This tragedy was predicted. It was avoidable. It was inevitable." As the world now knows, Stockton Rush touted himself as a maverick, a disrupter, a breaker of rules. So far out on the visionary curve that, for him, safety regulations were mere suggestions. "If you're not breaking things, you're not innovating," he declared at the 2022 GeekWire Summit. "If you're operating within a known environment, as most submersible manufacturers do, they don't break things. To me, the more stuff you've broken, the more innovative you've been." In a culture that has adopted the ridiculous mantra "move fast and break things," that type of arrogance can get a person far. But in the deep ocean, the price of admission is humility — and it's nonnegotiable...

In December 2015, two years before the Titan was built, Rush had lowered a one third scale model of his 4,000-meter-sub-to-be into a pressure chamber and watched it implode at 4,000 psi, a pressure equivalent to only 2,740 meters. The test's stated goal was to "validate that the pressure vessel design is capable of withstanding an external pressure of 6,000 psi — corresponding to...a depth of about 4,200 meters." He might have changed course then, stood back for a moment and reconsidered. But he didn't. Instead, OceanGate issued a press release stating that the test had been a resounding success because it "demonstrates that the benefits of carbon fiber are real."

OceanGate's director of marine operations later issued a Quality Control Inspection Report filled with warnings: These included missing bolts and improperly secured batteries, components zip-tied to the outside of the sub. O-ring grooves were machined incorrectly (which could allow water ingress), seals were loose, a highly flammable, petroleum-based material lined the Titan's interior... Yet even those deficiencies paled in comparison to what Lochridge observed on the hull. The carbon fiber filament was visibly coming apart, riddled with air gaps, delaminations, and Swiss cheese holes — and there was no way to fix that short of tossing the hull in a dumpster...

Rush's response was to fire Lochridge immediately, serve him and his wife with a lawsuit (although Carole Lochridge didn't work at OceanGate or even in the submersible industry) for breach of contract, fraud, unjust enrichment, and misappropriation of trade secrets; threaten their immigration status; and seek to have them pay OceanGate's legal fees.

The article also tells a story about OceanGate's 240-foot dive to the wreck of the Andrea Doria in 2016. The article claims that Rush disregarded safety instructions, then "landed too close, got tangled in the current, managed to wedge the sub beneath the Andrea Doria's crumbling bow, and descended into a full-blown panic..."

The article's author marvels that five years ago, "I didn't yet know how reckless, how heedless, how insane the Titan was." They'd once even considered booking a trip on the OceanGate's submersible — until receiving this advice from the chief pilot of the University of Hawaii's two deep-sea submarines. "Do not get into that sub. He is going to have a major accident."

Thanks to Slashdot reader AleRunner for sharing the article.
Google

Google Launches BigQuery Studio, a New Way To Work With Data (techcrunch.com) 9

An anonymous reader quotes a report from TechCrunch: Companies increasingly see the value in mining their data for deeper insights. According to a NewVantage survey, 97.6% of major worldwide organizations are focusing investments into big data and AI. But challenges stand in the way of executing big data analytics. One recent poll found that 65% of organizations feel they have "too much" data to analyze. Google's proposed solution is BigQuery Studio, a new service within BigQuery, its fully managed serverless data warehouse, that provides a single experience to edit programming languages including SQL, Python and Spark to run analytics and machine learning workloads at "petabyte scale." BigQuery Studio is available in preview as of this week.

"BigQuery Studio is a new experience that really puts people who are working on data on the one side and people working on AI on the other side in a common environment," Gerrit Kazmaier, VP and GM of data and analytics at Google, told TechCrunch in a phone interview. "It basically provides access to all of the services that those people need to work -- there's an element of simplification on the user experience side." BigQuery Studio is designed to enable users to discover, explore, analyze and predict data. Users can start in a programming notebook to validate and prep data, then open that notebook in other services, including Vertex AI, Google's managed machine learning platform, to continue their work with more specialized AI infrastructure and tooling.

With BigQuery Studio, teams can directly access data wherever they're working, Kazmaier says. And they have added controls for "enterprise-level" governance, regulation and compliance. "[BigQuery Studio shows] how data is being generated to how it's being processed and how it's being used in AI models, which sounds technical, but it's really important," he added. "You can push down code for machine learning models directly into BigQuery as infrastructure, and that means that you can evaluate it at scale."

Science

CERN's Large Hadron Collider Makes Its First Observations of Neutrinos (phys.org) 35

Physicists have observed neutrinos originating "from the sun, cosmic rays, supernovae and other cosmic objects, as well as particle accelerators and nuclear reactors," writes Phys.org. But one remaining goal was observing neutrinos inside "collider" particle accelerators (which direct two particle beams).

It's now been accomplished using neutrino detectors located at CERN's Large Hadron Collider (LHC) in Switzerland by two distinct research collaborations:

- FASER (Forward Search Experiment)
- SND (Scattering and Neutrino Detector)@LHC

Phys.org argues the two achievements "could open important new avenues for experimental particle physics research. " The results of their two studies were recently published in Physical Review Letters. "Neutrinos are produced very abundantly in proton colliders such as the LHC," Cristovao Vilela, part of the SND@LHC Collaboration, told Phys.org. "However, up to now, these neutrinos had never been directly observed. The very weak interaction of neutrinos with other particles makes their detection very challenging and because of this they are the least well studied particles in the Standard Model of particle physics...."

"Particle colliders have existed for over 50 years, and have detected every known particle except for neutrinos," Jonathan Lee Feng, co-spokesperson of the FASER Collaboration, told Phys.org. "At the same time, every time neutrinos have been discovered from a new source, whether it is a nuclear reactor, the sun, the Earth, or supernovae, we have learned something extremely important about the universe. As part of our recent work, we set out to detect neutrinos produced at a particle collider for the first time...

"Because these neutrinos have high fluxes and high energies, which makes them far more likely to interact, we were able to detect 153 of them with a very small, inexpensive detector that was built in a very short time," Feng explained. "Previously, particle physics was thought to be divided into two parts: high energy experiments, which were required to study heavy particles, like top quarks and Higgs bosons, and high intensity experiments, which were required to study neutrinos. This work has shown that high energy experiments can also study neutrinos, and so has brought together the high-energy and high-intensity frontiers."

The neutrinos detected by Feng and the rest of the FASER collaboration have the highest energy ever recorded in a laboratory environment.... Cristovao Vilela, part of the SND@LHC Collaboration, said "The observation of collider neutrinos opens the door to novel measurements which will help us understand some of the more fundamental puzzles of the Standard Model of particle physics, such as why there are three generations of matter particles (fermions) that seem to be exact copies of each other in all aspects except for their mass. Furthermore, our detector is placed in a location which is a blind spot for the larger LHC experiments. Because of this, our measurements will also contribute to a better understanding of the structure of colliding protons."

Amiga

Can You Run Linux On a Commodore 64? (github.com) 68

llvm-mos adapts the popular LLVM compiler to target the MOS 6502 processor (the 1980s microprocessor used in early home computing devices like the Apple II and the Commodore 64). So developer Onno Kortman used it to cross-compile semu, a "minimalist RISC-V system emulator capable of running Linux the kernel and corresponding userland." And by the end of the day, Kortman has Linux running on a Commodore 64.

Long-time Slashdot reader johnwbyrd shared the link to Kortman's repository. Some quotes: "But does it run Linux?" can now be finally and affirmatively answered for the Commodore C64...!

It runs extremely slowly and it needs a RAM Expansion Unit (REU), as there is no chance to fit it all into just 64KiB.

It even emulates virtual memory with an MMU....

The screenshots took VICE a couple hours in "warp mode" (activate it with Alt-W) to generate. So, as is, a real C64 should be able to boot Linux within a week or so.

The compiled 6502 code is not really optimized yet, and it might be realistic to squeeze a factor 10x of performance out of this. Maybe even a simple form of JIT compilation? It should also be possible to implement starting a checkpointed VM (quickly precomputed on x86-64) to avoid the lengthy boot process...

I also tested a minimal micropython port (I can clean it up and post it on github if there is interest), that one does not use the MMU and is almost barely remotely usable with lots of optimism at 100% speed.

A key passage: I have not tested it on real hardware yet, that's the next challenge .. for you. So please send me a link to a timelapse video of an original unit with REU booting Linux :D
Its GitHub repository has build and run instructions...
United Kingdom

Massive Weekend Hunt for Loch Ness Monster: Drones, Infrared Cameras, and Underwater Microphones (msn.com) 99

"Hundreds of monster hunters equipped with drones and infrared cameras have gathered in the Scottish Highlands with a singular goal," reports the Washington Post: "to be the ones to finally find the Loch Ness monster." But it won't be easy. On Saturday, the rain was lashing and the skies were gray, hampering visibility in the search for the folkloric creature, affectionately known as Nessie. The mythical monster, which legend says lives in a freshwater lake in Scotland, has eluded capture, or any definitive proof of existence, since its first recorded sighting in the 6th century.

But trying to find Nessie is an age-old tradition, and the volunteer hunters who showed up Saturday are dedicated — and better equipped than those who came before. The search for the monster, organized over two days by the local Loch Ness Center in Inverness, is the biggest in a half-century, and certainly the most high-tech. Some people drove hours to be here, while others flew in from overseas... The Loch Ness Center launched the event — which it called "The Quest" — in partnership with Loch Ness Exploration, a research group that studies the lake and other unexplained phenomena. It put out a call for volunteer hunters "fascinated by the legendary tales of Nessie" and with "a passion for unraveling mysteries and exploring the extraordinary."

The center was later forced to close online registrations for volunteers "due to an overwhelming surge in demand," according to the website...

Some hunters with drones are equipping them with infrared cameras to seek out heat spots in the lake — as well as sending them underwater. They've also come armed with a hydrophone to pick up acoustic signals 60 feet below the loch's surface — although nobody really knows what the monster would sound like. Other participants can join several surface-watch locations staged by organizers or cruise the 23-mile-long lake by boat. They have been asked to document everything they see — from surface movements to weather changes — and are getting lessons on how to capture potential sightings on their phones.

The BBC notes that "Almost 300 have signed up to monitor a live stream from the search, which is taking place on Saturday and Sunday."

NPR has some audio excerpts of past witnesses who said the've seen the monster — and some of the current crop of monster hunters. (While Wikipedia has its own detailed debunking of the famous Loch News monster "Surgeon's Photo".) But the Washington Post sums up the whole story with this two-word quote from a woman who'd traveled from France for a Loch Ness vacation.

"I believe."
AI

Schools are Now Teaching About ChatGPT and AI So Their Students Aren't Left Behind (cnn.com) 73

Professors now fear that ignoring or discouraging the use of AI "will be a disservice to students and leave many behind when entering the workforce," reports CNN: According to a study conducted by higher education research group Intelligent.com, about 30% of college students used ChatGPT for schoolwork this past academic year and it was used most in English classes. Jules White, an associate professor of computer science at Vanderbilt University, believes professors should be explicit in the first few days of school about the course's stance on using AI and that it should be included it in the syllabus. "It cannot be ignored," he said. "I think it's incredibly important for students, faculty and alumni to become experts in AI because it will be so transformative across every industry in demand so we provide the right training."

Vanderbilt is among the early leaders taking a strong stance in support of generative AI by offering university-wide training and workshops to faculty and students. A three-week 18-hour online course taught by White this summer was taken by over 90,000 students, and his paper on "prompt engineering" best practices is routinely cited among academics. "The biggest challenge is with how you frame the instructions, or 'prompts,'" he said. "It has a profound impact on the quality of the response and asking the same thing in various ways can get dramatically different results. We want to make sure our community knows how to effectively leverage this." Prompt engineering jobs, which typically require basic programming experience, can pay up to $300,000.

Although White said concerns around cheating still exist, he believes students who want to plagiarize can still seek out other methods such as Wikipedia or Google searches. Instead, students should be taught that "if they use it in other ways, they will be far more successful...." Some schools are hiring outside experts to teach both faculty and students about how to use AI tools.

Programming

Can You Measure Software Developer Productivity? (mckinsey.com) 157

Long-time Slashdot reader theodp writes: Measuring, tracking, and benchmarking developer productivity has long been considered a black box. It doesn't have to be that way." So begins global management consulting firm McKinsey in Yes, You Can Measure Software Developer Productivity... "Compared with other critical business functions such as sales or customer operations, software development is perennially undermeasured. The long-held belief by many in tech is that it's not possible to do it correctly—and that, in any case, only trained engineers are knowledgeable enough to assess the performance of their peers.

"Yet that status quo is no longer sustainable."

"All C-suite leaders who are not engineers or who have been in management for a long time will need a primer on the software development process and how it is evolving," McKinsey advises companies starting on a developer productivity initiative. "Assess your systems. Because developer productivity has not typically been measured at the level needed to identify improvement opportunities, most companies' tech stacks will require potentially extensive reconfiguration. For example, to measure test coverage (the extent to which areas of code have been adequately tested), a development team needs to equip their codebase with a tool that can track code executed during a test run."

Before getting your hopes up too high over McKinsey's 2023 developer productivity silver bullet suggestions, consider that Googling to "find a tool that can track code executed during a test run" will lead you back to COBOL test coverage tools from the 80's that offered this kind of capability and 40+ year-old papers that offered similar advice (1, 2, 3). A cynic might also suggest considering McKinsey's track record, which has had some notable misses.

AI

Microsoft AI Suggests Food Bank As a 'Cannot Miss' Tourist Spot In Canada 50

An anonymous reader quotes a report from Ars Technica: Late last week, MSN.com's Microsoft Travel section posted an AI-generated article about the "cannot miss" attractions of Ottawa that includes the Ottawa Food Bank, a real charitable organization that feeds struggling families. In its recommendation text, Microsoft's AI model wrote, "Consider going into it on an empty stomach." Titled, "Headed to Ottawa? Here's what you shouldn't miss!," (archive here) the article extols the virtues of the Canadian city and recommends attending the Winterlude festival (which only takes place in February), visiting an Ottawa Senators game, and skating in "The World's Largest Naturallyfrozen Ice Rink" (sic).

As the No. 3 destination on the list, Microsoft Travel suggests visiting the Ottawa Food Bank, likely drawn from a summary found online but capped with an unfortunate turn of phrase: "The organization has been collecting, purchasing, producing, and delivering food to needy people and families in the Ottawa area since 1984. We observe how hunger impacts men, women, and children on a daily basis, and how it may be a barrier to achievement. People who come to us have jobs and families to support, as well as expenses to pay. Life is already difficult enough. Consider going into it on an empty stomach."

That last line is an example of the kind of empty platitude (or embarrassing mistaken summary) one can easily find in AI-generated writing, inserted thoughtlessly because the AI model behind the article cannot understand the context of what it is doing. The article is credited to "Microsoft Travel," and it is likely the product of a large language model (LLM), a type of AI model trained on a vast scrape of text found on the Internet.
Iphone

Apple Will Soon Send Payments In $500 Million 'Batterygate' iPhone Throttling Lawsuit (macrumors.com) 23

The judge overseeing Apple's "batterygate" iPhone throttling lawsuit has cleared the way for payments to be sent out. MacRumors reports: Apple in 2020 agreed to pay $500 million to settle the "batterygate" lawsuit, which accused the company of secretly throttling older iPhone models. The class action lawsuit was open to U.S. customers who had an iPhone 6, 6 Plus, 6s, 6s Plus, 7, or 7 Plus running iOS 10.2.1 or iOS 11.2 prior to December 21, 2017. [...] Apple ultimately apologized for its lack of communication and dropped the price of battery replacements to $29 through the end of 2018. iPhone owners eligible for a payout would have needed to submit a claim back in 2020, and submissions were open through October 6, 2020. Those who submitted a claim back then will be eligible for a payment, which will be around $65 per claimant.
Linux

Should There Be an 'Official' Version of Linux? (zdnet.com) 283

Why aren't more people using Linux on the desktop? Slashdot reader technology_dude shares one solution: Jack Wallen at ZDNet says establishing an "official" version of Linux may (or may not) help Linux on the desktop increase the number of users, mostly as someplace to point new users. It makes sense to me. What does Slashdot think and what would be the challenges, other than acceptance of a particular flavor?
Wallen argues this would also create a standard for hardware and software vendors to target, which "could equate to even more software and hardware being made available to Linux." (And an "official" Linux might also be more appealing to business users.) Wallen suggests it be "maintained and controlled by a collective of people from users, developers, and corporations (such as Intel and AMD) with a vested interest in the success of this project... There would also be corporate backing for things like marketing (such as TV commercials)." He also suggests basing it on Debian, and supporting both Snap and Flatpak...

In comments on the original submission, long-time Slashdot reader bobbomo points instead to kernel.org, arguing "There already is an official version of Linux called mainline. Everything else is backports." And jd (Slashdot user #1,658) believes that the official Linux is the Linux Standard Base. "All distributions, more-or-less, conform to the LSB, which gives you a pseudo 'official' Linux. About the one variable is the package manager. And there are ways to work around that."

Unfortunately, according to Wikipedia... The LSB standard stopped being updated in 2015 and current Linux distributions do not adhere to or offer it; however, the lsb_release command is sometimes still available.[citation needed] On February 7, 2023, a former maintainer of the LSB wrote, "The LSB project is essentially abandoned."
That post (on the lsb-discuss mailing list) argues the LSB approach was "partially superseded" by Snaps and Flatpaks (for application portability and stability). And of course, long-time Slashdot user menkhaura shares the obligatory XKCD comic...

It's not exactly the same thing, but days after ZDNet's article, CIQ, Oracle, and SUSE announced the Open Enterprise Linux Association, a new collaborative trade association to foster "the development of distributions compatible with Red Hat Enterprise Linux."

So where does that leave us? Share your own thoughts in the comments.

And should there be an "official" version of Linux?
Encryption

Google's Chrome Begins Supporting Post-Quantum Key Agreement to Shield Encryption Keys (theregister.com) 13

"Teams across Google are working hard to prepare the web for the migration to quantum-resistant cryptography," writes Chrome's technical program manager for security, Devon O'Brien.

"Continuing with our strategy for handling this major transition, we are updating technical standards, testing and deploying new quantum-resistant algorithms, and working with the broader ecosystem to help ensure this effort is a success." As a step down this path, Chrome will begin supporting X25519Kyber768 for establishing symmetric secrets in TLS, starting in Chrome 116, and available behind a flag in Chrome 115. This hybrid mechanism combines the output of two cryptographic algorithms to create the session key used to encrypt the bulk of the TLS connection:

X25519 — an elliptic curve algorithm widely used for key agreement in TLS today
Kyber-768 — a quantum-resistant Key Encapsulation Method, and NIST's PQC winner for general encryption

In order to identify ecosystem incompatibilities with this change, we are rolling this out to Chrome and to Google servers, over both TCP and QUIC and monitoring for possible compatibility issues. Chrome may also use this updated key agreement when connecting to third-party server operators, such as Cloudflare, as they add support. If you are a developer or administrator experiencing an issue that you believe is caused by this change, please file a bug.

The Register delves into Chrome's reasons for implementing this now: "It's believed that quantum computers that can break modern classical cryptography won't arrive for 5, 10, possibly even 50 years from now, so why is it important to start protecting traffic today?" said O'Brien. "The answer is that certain uses of cryptography are vulnerable to a type of attack called Harvest Now, Decrypt Later, in which data is collected and stored today and later decrypted once cryptanalysis improves." O'Brien says that while symmetric encryption algorithms used to defend data traveling on networks are considered safe from quantum cryptanalysis, the way the keys get negotiated is not. By adding support for a hybrid KEM, Chrome should provide a stronger defense against future quantum attacks...

Rebecca Krauthamer, co-founder and chief product officer at QuSecure, told The Register in an email that while this technology sounds futuristic, it's useful and necessary today... [T]he arrival of capable quantum computers should not be thought of as a specific, looming date, but as something that will arrive without warning. "There was no press release when the team at Bletchley Park cracked the Enigma code, either," she said.

AI

Pope Warns of AI Risks So 'Violence and Discrimination Does Not Take Root' (arstechnica.com) 106

An anonymous reader quotes a report from Ars Technica: Discussion about artificial intelligence is everywhere these days -- even the Vatican. On Tuesday, Pope Francis issued a communique announcing the theme for World Day of Peace 2024 as "Artificial Intelligence and Peace," emphasizing the potential impact of AI on human life and calling for responsible use, ethical reflection, and vigilance to prevent negative consequences. [...] In the communique, Pope Francis' office called for "an open dialogue on the meaning of these new technologies, endowed with disruptive possibilities and ambivalent effects." Echoing common ethical sentiments related to AI, he said society needs to be vigilant about the technology so that "a logic of violence and discrimination does not take root in the production and use of such devices, at the expense of the most fragile and excluded."

The Pope even glanced at alignment, a popular concept in the AI community that seeks to "align" the outputs of AI with the positive needs of humanity. "The urgent need to orient the concept and use of artificial intelligence in a responsible way, so that it may be at the service of humanity and the protection of our common home, requires that ethical reflection be extended to the sphere of education and law," the statement said. The Vatican issued the communique through the Dicastery for Promoting Integral Human Development, which is a department of the Roman Curia, the administrative apparatus of the Holy See and the central governing body through which the Pope conducts the affairs of the global Catholic Church.

Encryption

Ask Slashdot: What's the Best (Encrypted) Password Manager? 154

For storing passwords, Slashdot reader eggegick has a simple, easy solution: "I use Vim to keep my passwords in an encrypted file."

But what's the easiest solution for people who don't use Vim? My wife is not a Linux geek like I am, so she's using [free and open-source] KeePass. It's relatively simple to install and use, but I seem to recall it used to be even much simpler... Does anybody know of a really simple password manager or encrypting notepad?

I've looked at a number of them, and they use Java or Javascript, or they involve an external web site, or they have way too many features, or they use an installation program. Or Windows Defender objects to them.

Share your own suggestions and thoughts in the comments.

What's the best (encrypted) password manager?
Medicine

A New Mode of Cancer Treatment 36

As detailed in a paper published in Cell Chemical Biology, researchers have developed a "cancer-killing pill" capable of destroying solid tumors while leaving healthy cells unaffected. The new drug has been in development for 20 years and is now undergoing pre-clinical research in the U.S.. Derek Lowe, a medicinal chemist and freelance writer on science and pharmaceutical topics, writes about the new paper via Science Magazine: It's about a molecule designated AOH1996, which seems to have a unique mode of action in tumor cells, one that might make it more more selective for those as compared to normal ones. The key target here is a protein called PCNA (from its old name of "proliferating cell nuclear antigen"). [...] The current molecule is a traditional direct small molecule binder that is selective for caPCNA over the regular type, which is a very attractive advantage to explore. The team behind it has been working on it for several years now to validate that mechanism, and the new paper linked first above is their report of going all the way into animal models. AOH1996 is a very unremarkable-looking molecule - to be honest, it looks like the sort of stuff that you used to see in old combinatorial chemistry libraries in the late 90s and early 2000s, a couple of aryl-rich groups strung together with amide bonds. It's certainly not going to be the most soluble stuff in the world, but they seem to have been able to formulate it. But I'm definitely not going to make fun of any chemical structure that works! [...]

The new paper shows preclinical toxicity testing in two species (mice and dogs), which is what you need to get to human trials. It seems to pass those very well, with no signs of trouble at 6x the effective dose in either species. And if you were throwing DSBs all over the place in normal tissues, believe me, you'd see tox. It is clean in an Ames test, for example. As for efficacy, in cell assays the concentration needed for 50% growth inhibition across 70 different cancer cell lines averaged around 300nM, while it showed no toxic effects on various non-cancer lines up to 10 micromolar (at least a 30x window). The affected cells show cell-cycle arrest, replication stress, apoptosis, and so on. And application of AOH1996 along with other known chemotherapy agents made the cells much more sensitive to those, presumably because they couldn't deal with those on top of the problems that AOH1996 was already causing.

It also shows growth arrest in xenograft tumors in mouse models, with a no-effect dose at least six times its effective dose, and combination therapy with a topoisomerase inhibitor showed even more significant effects. The compound has entered a Phase I trial in humans on the basis of the above data, and I very much look forward to seeing it advance to Phase II, where it will doubtless be used in combination with several existing therapies. I hope that human cancers will prove vulnerable to this new mode of attack in the clinic, and that they are not able to mutate around it with new forms of caPCNA too quickly, either. The comparison with the peptide agent mentioned above will be especially interesting, too. There's only one way to find out - good luck to everyone involved!
Hardware

A Room-Temperature Superconductor? New Developments (science.org) 102

Derek Lowe, a medicinal chemist and freelance writer on science and pharmaceutical topics, comments on the latest developments around last week's remarkable claim of a well-above-room-temperature superconducting material at ambient pressure, dubbed LK-99. Here's an excerpt from his post: As of this morning, there are (as yet not really verified) reports of replication from the Huazhong University of Science and Technology in China. At least, a video has been posted showed what could be a sample of LK-99 levitating over a magnet due to the Meissner effect, and in different orientations relative to the magnet itself. That's important, because a (merely!) paramagnetic material can levitate in a sufficiently strong field (as can diamagnetic materials like water droplets and frogs), but these can come back to a particular orientation like a compass needle. Superconductors are "perfect diamagnets," excluding all magnetic fields, and that's a big difference. The "Meissner effect" that everyone has been hearing about so much is observed when a material first becomes superconductive at the right temperature and expels whatever magnetic fields were penetrating it at the time. All this said, we're having to take the video on the statements of whoever made/released it, and there are other possible explanations for the it that do not involve room-temperature superconductivity. I will be very happy if this is a real replication, but I'm not taking the day off yet to celebrate just based on this.

And even though I'm usually more of an experimental-results guy than a theory guy, two other new preprints interest me greatly. One is from a team (PDF) at the Shenyang National Laboratory for Materials Science, and the other (PDF) is from Sinead Griffin at Lawrence Berkeley. Both start from the reported X-ray structural data of LK-99 and look at its predicted behavior via density functional theory (DFT) calculations. And they come to very similar conclusions: it could work. This is quite important, because this could mean that we don't need to postulate completely new physics to explain something like LK-99 - if you'd given the starting data to someone as a blind test, they would have come back after the DFT runs saying "You know, this looks like it could be a really good superconductor..." [...]

I am guardedly optimistic at this point. The Shenyang and Lawrence Berkeley calculations are very positive developments, and take this well out of the cold-fusion "we can offer no explanation" territory. Not that there's anything wrong with new physics (!), but it sets a much, much higher bar if you have to invoke something in that range. I await more replication data, and with more than just social media videos backing them up. This is by far the most believable shot at room-temperature-and-pressure superconductivity the world has seen so far, and the coming days and weeks are going to be extremely damned interesting.

Power

How a Screwdriver Slip Caused a Fatal 1946 Atomic Accident (bbc.com) 67

Long-time Slashdot reader theodp writes: A specially illustrated BBC story created by artist/writer Ben Platts-Mills tells the remarkable story of how a dangerous radioactive apparatus in the Manhattan Project killed a scientist in 1946.

"Less than a year after the Trinity atomic bomb test," Platts-Mills writes, "a careless slip with a screwdriver cost Louis Slotin his life. In 1946, Slotin, a nuclear physicist, was poised to leave his job at Los Alamos National Laboratories (formerly the Manhattan Project). When his successor came to visit his lab, he decided to demonstrate a potentially dangerous apparatus, called the "critical assembly". During the demo, he used his screwdriver to support a beryllium hemisphere over a plutonium core. It slipped, and the hemisphere dropped over the core, triggering a burst of radiation. He died nine days later."

In an interesting follow-up story, Platts-Mills explains how he pieced together what happened inside the room where 'The Blue Flash' occurred (it has been observed that many criticality accidents emit a blue flash of light).

15 years later there were more fatalities at a nuclear power plant after the Atomic Energy Commission opened the National Reactor Testing Station in a desert west of Idaho Falls, according to Wikipedia: The event occurred at an experimental U.S. Army plant known as the Argonne Low-Power Reactor, which the Army called the Stationary Low-Power Reactor Number One (SL-1)... Three trained military men had been working inside the reactor room when a mistake was made while reattaching a control rod to its motor assembly. With the central control rod nearly fully extended, the nuclear reactor rated at 3 MW rapidly increased power to 20 GW. This rapidly boiled the water inside the core.

As the steam expanded, a pressure wave of water forcefully struck the top of the reactor vessel, upon which two of the men stood. The explosion was so severe that the reactor vessel was propelled nine feet into the air, striking the ceiling before settling back into its original position. One man was impaled by a shield plug and lodged into the ceiling, where he died instantly. The other men died from their injuries within hours. The three men were buried in lead coffins, and that entire section of the site was buried.

"The core meltdown caused no damage to the area, although some radioactive nuclear fission products were released into the atmosphere."

This week Idaho Falls became one of the sites re-purposed for possible utility-scale clean energy projects as part of America's "Cleanup to Clean Energy" initiative.

Slashdot Top Deals