Python

Tim Peters, Python User #2 and Prolific Contributor, Dies At 74 (adafruit.com) 7

Tim Peters, one of Python's earliest and most influential contributors, died on July 15 at age 74. Known as Python's second real user, Peters created the Zen of Python and Timsort sorting algorithm while contributing to numerous core components. He also served as a Python Software Foundation director from 2001 to 2014. Adafruit remembers Peters in a blog post: He's best known for the Zen of Python, PEP 20, still printed by typing import this. In 2002, he gave Python Timsort, the sorting algorithm he designed for lists, later adopted by Java and Android. He also polished the cyclic garbage collector and the pymalloc allocator, worked on the dict implementation, the float object, the math module and Karatsuba multiplication in longobject, and wrote the first version of doctest, plus difflib, pickletools and tabnanny.

He was a director of the Python Software Foundation from 2001 to 2014. Before Python, he wrote compilers at Cray Research and speech-to-text software at Dragon Systems. The thread is full of recollections from core developers about his patient, detailed answers on the mailing lists, signed with his trademark .
Python creator Guido van Rossum also paid tribute to Peters in a post on discuss.python.org, writing: "It's hard to overestimate Tim's influence on Python. He's probably best known for writing the Zen of Python (PEP 20), but to me he was a mentor and language co-designer long before that..."

Further discussions can be found on Hacker News and Reddit.
Google

Google Fi Brings Back Network Switching With 'Secondary' Partner 19

Google Fi is bringing back network switching through an unnamed "secondary" 5G carrier. "Most users will be on the 'Primary network,' but Google Fi will automatically switch users to the 'Secondary network' if it meaningfully improves performance with so-called 'smart thresholds' for doing so," reports 9to5Google. "At launch, there is no manual switching." When Project Fi first launched the service included support with both Sprint and T-Mobile. That went away when T-Mobile acquired Sprint in 2020. 9to5Google reports: Google is not naming the second network today, but did share that Ultra Wideband is supported. Officially, you are switching between "two of America's fastest 5G networks."

Fi Wireless does note that users have top priority, so data is never deprioritized on the Primary network. Meanwhile, there's "highest QCI priority" on the backup network that means subscribers are among the last to be slowed down when there's congestion. This is also available internationally when local partner networks are available with the Flexible and Unlimited Premium plans.

Network switching will first be supported on Pixel 9 and newer devices that have a Google Fi eSIM (and no other SIM active). It makes use of Android's Multiple Enabled Profiles (MEP) eSIM technology that allows for two carrier profiles on a single chip. [...] These Google Fi updates start rolling out today, with network switching seeing gradual availability.
Social Networks

Reddit Is Turning User Conversations Into AI-Powered Product Reviews 39

Reddit is rolling out an AI-powered shopping feature called "Reddit Reviews" that summarizes user conversations about products and turns them into dedicated reviews. TechCrunch reports: Reddit's announcement points to its rules and its latest measures to combat automated abuse and spam, as well as its practice involving community moderators, as tools it will use to keep the reviews on the site legit. The Reddit Reviews feature itself taps into AI to organize the conversations people are having where they describe their product experiences. These posts will often see users discussing how a product works for them, or why it fails, or what the trade-offs are that someone should consider before buying.

The company has been testing the product reviews feature since February, initially with U.S. users in areas like Electronics, Video Games, and Health & Beauty products. In September, Reddit expanded the test to include the Home & Garden and Fashion & Apparel categories as well. Now, the company says Reddit Reviews is rolling out to all U.S. users on iOS, Android, and web, with an initial selection focused on around 10,000 products. Over time, it will roll out to more categories and expand beyond the U.S.

To use the feature, Reddit users can search for a product or category in the app's search bar or click on a highlighted product name they see in someone's comment. From there, the user is taken to a screen where important conversations are summarized under a "what people are saying" heading. This will also include a visual breakdown that shows how many of those comments are positive, negative, or mixed, and what sort of things people said they liked or disliked about the item.
Graphics

Developer Pulls Roku's Popular Fish Tank Screensaver Following Fox Sale (arstechnica.com) 65

Roku is removing its popular Aquatic Life fish tank screensaver on December 1 and automatically switching affected users to Roku City. According to Cord Cutters News, the creator pulled the license after Roku's sale to FOX was announced. Ars Technica reports: The screensaver has been an option for Roku OS users for 10 years. Roku has been licensing the animation, which is called the Marine Aquarium, from artist Jim Sachs through Prolific Publishing. Sachs is the creator and copyright holder of the Marine Aquarium. He developed the screensaver through his company SereneScreen. He tells Ars Technica that the licensing agreement with Roku is up for renewal every October and can be canceled by either party for any reason. A day after learning that Fox was planning to buy Roku, a deal that closed today, Sachs told Prolific that he wouldn't be renewing Roku's license. "I can't be part of the Fox world," he tells Ars, pointing to Fox News' controversial style of news and entertainment.

Roku will automatically switch the Aquatic Life screensaver on affected devices to the Roku City screensaver, another popular animation that includes subtle advertisements, according to the user notice. The Aquatic Life screensaver provided an ad-free, relaxing display for years for some Roku users. Numerous people online have lamented the impending loss of the screensaver for Roku OS. [...] The decision to not renew the licensing contract has "major financial consequences," Sachs said. "Our needs are very small, with a high property tax bill being the only significant expense," he said. "We'll be okay but can't start any of the projects I had planned."

According to Sachs, the licensing "agreement was $80,000 per year for exclusive rights to all set-top devices, or $60,000 per year for non-exclusive. They have always opted for exclusive." Ars asked Roku to confirm the details of the licensing agreement but didn't hear back ahead of publication. The licensing deal with Roku was Sachs' primary form of income, he told Ars, noting low sales of the version of the screensaver for computers. Marine Aquarium fans can still buy the screensaver for Windows, macOS, iOS, and Android, but it seems unlikely that it will return to the Roku platform.

Botnet

Cops Bust Botnet of 1.3 Million Android TV Boxes (theregister.com) 46

A coalition of security firms working with Japan's National Police Agency has disrupted a botnet of more than 1.3 million Android devices across 200+ countries. "We assess with high confidence that the backdoor and botnet were intentionally developed, deployed, and operated for financial gain by Videostrong Technology," the Google Threat Intelligence Group (GTIG) said in a blog post. The Register reports: Videostrong Technology is a hardware manufacturer based in Shenzhen, China. It builds Android devices, including home TV boxes and projectors. According to Google, Videostrong deliberately embedded the XCPE backdoor in device firmware and sold access to criminal affiliates, allowing them to install additional malware modules on devices shipped to unsuspecting customers. When buyers connected these devices to their home networks, the preinstalled backdoor allowed operators to create proxy networks and hide malicious traffic using the customers' internet connections without their knowledge.

The firmware's pre-installed management agent purported to be a standard remote-management client, according to TrendAI. It pulled updates from a GitHub page, and connected to a Message Queuing Telemetry Transport (MQTT) server that gave the operator full remote control of each box, allowing them to install and remove apps, change settings, and push updates to the infected devices. Between June 3 and October 1, TrendAI documented more than 3.8 million distinct home and mobile IP addresses connected to the operation.

The coalition also disrupted the command-and-control domains used to manage the affiliate modules. "Because these affiliates each have diversified distribution channels for their modules beyond XCPE, we assess that taking down their C2 domains will sever access to at least 10 million additional compromised devices," according to GTIG. Google said it had since cut ties with Videostrong, and banned the OEM from making devices with preloaded Google apps.

Google

First Wired XR Glasses Powered By Android XR (techpowerup.com) 21

XREAL has launched the AURA, its first wired augmented reality glasses powered by Google's Android XR platform. They feature transparent Micro-OLED displays, a 70-degree field of view, Gemini AI integration, and a Snapdragon Reality Elite processor. TechPowerUp reports: The device is built around a simple idea: your apps, screens, entertainment, and AI assistant should be able to come with you wherever you go. On day-one, users have access to millions of familiar mobile apps and games from Google Play, alongside many experiences specifically for XR. Android XR brings familiar hand and voice inputs to AURA, while Gemini makes the experiences more natural and intuitive by working across what users see and do.

With Wired Mirroring, users can plug a computer or handheld gaming console directly into XREAL AURA via USB-C and instantly turn it into a massive private spatial window. That means a laptop, handheld gaming device, or other compatible USB-C device can sit alongside native Android XR apps in a user's spatial workspace. Whether turning a plane seat into a private multi-monitor setup, watching a movie on a large virtual screen, or playing Android and console games in an immersive spatial environment, XREAL AURA is designed to make spatial computing practical, portable, and useful.

[...] For work, AURA creates a portable multi-window workspace without requiring a physical monitor. Users can open Android XR apps, mirror a laptop, place windows in virtual space, and use Gemini to help understand or act on what is on screen. For entertainment, AURA becomes a private theater on demand. Users can access familiar streaming apps, expand content into a large virtual display, and use electrochromic dimming to create a more immersive viewing experience while remaining aware of their surroundings when needed. For play, AURA supports Android games and compatible mirrored gaming devices, enabling users to play on a large and immersive private display.
The glasses are available to order today, with limited-time pricing starting at $1,099 for the 12GB RAM and 256GB storage model. Devices are expected to begin shipping in mid-November.
Android

Google Begins Certifying Registered App Stores For Android (arstechnica.com) 25

An anonymous reader quotes a report from Ars Technica: Running an app ecosystem has gotten a lot more complex for Google after its loss in the Epic Games antitrust case. While U.S. users can access app stores in Google Play by court order, international users will use Google's voluntary Registered App Stores program. Google has announced that stores wishing to be part of that program are now free to apply, and support will roll out to some Android devices later this year. App stores accepted into the program will enjoy preferential treatment on the Android platform. Users of approved stores will be able to install apps with a single click, similar to the experience in the Play Store. These stores will also be allowed to update apps silently in the background like Google's store does.

[...] Registered App Stores are still happening on Android, but they won't be supported in the U.S. -- you can go to Google Play for alternative stores stateside, but so far, Aptoide remains the only one listed. Those operating Android app storefronts who want to be included in the international program can now review the program and begin the enrollment process. Any store hoping to get approval will have to adhere to a number of requirements, including protecting intellectual property, removing illegal content, and publishing a privacy policy for both users and developers. Google also requires several ongoing security measures to ensure the stores do not give malware easier access to Android devices. As part of the application process, store operators must provide documentation for all these points (in English) and upload copies of all their apps.

It costs $10,000 per year to participate in the Android Registered App Stores program, and that fee must be paid before Google will review the application. Google says this fee covers the additional support necessary to run the program. There may also be additional review fees if Google detects a store has a problem with malware. Google plans to roll out support in dozens of nations, which includes most of the world outside of the U.S. and Europe. The program goes live on December 1, but it will only work on Android devices running the latest builds of Android 17. Google says support will start with Android 17 QPR2, which is expected to arrive on Pixel phones in the coming weeks.

Advertising

Google Says Gmail and Photos Data Shared with AI Search Could Be Used for Targeted Ads (thehackernews.com) 21

The blog Android Authority offers this TLDR: Google updated its privacy policy to clarify that it could use information shared through Personal Intelligence to personalize ads. Gmail, Drive, and Photos content isn't used for targeted ads by default, but connecting them to eligible Google services could change that.
Digital Trends explains: Google has long promised that your Gmail, Drive, and Google Photos content never helps it personalize ads. However, since October 16, 2026, its privacy policy adds a catch. The promise lapses if you let other ad-showing Google services use that content. That means using Personal Intelligence, an opt-in tool that lets Google's AI search read your connected apps, does exactly that (via Google).

If you ask Google's AI Mode where to eat near your hotel, and it can identify your hotel from the booking confirmation in Gmail, find the location in Maps, and then suggest a few places you might like. That's the helpful half. The twist, however, is that AI Mode can also show sponsored results. Google mentions that the personalized ads follow what the question and answer are about. So, while your inbox never goes to an advertiser, it can quietly shape the answer, which, in turn, shapes the ads.

Google's defense is elaborate. First, it says connecting the apps is optional. Second, advertisers can't see the information or content Google accesses in your Workspace apps (including your inbox and photos). Finally, sensitive topics like health are off-limits.

Ars Technica shares the response they got from a Google spokesperson: that Google isn't scanning your entire inbox to feed their advertising profiles, but if you choose to pipe your personal data into an AI search tool — then the ads Google shows you could be based on that information. If you want to ensure ads never use your personal data in this way, you'll need to make sure Personal Intelligence is turned off. The easiest way is to access the Gemini settings for Personal Intelligence and disable the connected apps. These settings are also a few levels deep in your main Google account settings under Data & privacy > Personalization settings > Manage Personalized Recommendations in Search Services > Connected Content Apps. From there, you can disable connections to Workspace and Google Photos.
Television

People Are Vibe Coding Their Way to Better TVs (theverge.com) 101

Frustrated by intrusive ads, sluggish interfaces, and data tracking, smart TV owners are using AI coding tools and open-source projects to strip unwanted software from their televisions and build customized home screens. The Verge reports: Several vibe-coded TV-debloating projects exploded in popularity over the weekend. Cleanyourtv (known as tv-vibehack until the 19th), tv-detox, and dumbtv all claim to accomplish similar things -- remove sponsored ads, debloat the TV so it runs faster, and block unwanted data collection that tracks what you're watching -- without hacking, or rooting, the TV. By default, they all also replace the TV's built-in app launcher with simpler ones. Many users are going a step further and vibe-coding their own replacement launchers, like the Pokemon one below.

Most of the projects we've seen so far focus on TVs that run on Android and Google TV operating systems (such as TCL, Hisense, Sony, and older Amazon Fire products), using existing developer modes and the Android Debug Bridge (ADB) to tweak settings and apply (and remove) packages. According to the GitHub pages, they can also work with some Fire TV products that use a custom fork of Android (although likely not on the new Vega-based Fire TV Sticks). Because they use built-in developer tools, they don't require root access or firmware hacking, and they're reversible. Even projects that totally change the look of the interface just use Android's ability to install custom launchers -- in many cases with an assist from Claude Code or a similar tool to create the new launcher, too.

The Internet

The Browser Company Retires Its Arc Browser, Pushes Users to Dia 21

The Browser Company is shutting down its Arc browser on December 22 and encouraging users to migrate to Dia, its newer AI-powered browser for Apple Silicon Macs and Windows 11 PCs. Thurrott reports: In the message explaining why it was sunsetting Arc, The Browser Company explained that maintaining two separate browsers was difficult to justify, especially from a security perspective. "Dia was built from the ground up to meet today's security standards, so that's where our engineering and security teams will focus moving forward," the company wrote.

The retirement of Arc will be gradual: While nothing changes for existing Arc users, it's no longer possible to create new Arc accounts as of today. On November 23, tab sync, Browse for Me, and other AI features will be disabled on the iOS and Android versions of Arc. Lastly, the desktop version of Arc will stop working on December 22, and Arc accounts will be deactivated.
Music

Sony Updates the Walkman As a $5,900 Gold-Plated MP3 Player (theregister.com) 64

Sony has revived its Walkman lineup with three Android 16-powered high-end music players ranging from $1,900 to $5,900, topped by the gold-plated NW-WM1ZM3 with 256GB of storage. The Register reports: The Japanese giant named the new models the NW-WM1ZM3, NW-WM1AM3 and NW-ZX900. All can store and play many codecs, including MP3s, WMA, and FLAC files, plus others like Direct Stream Digital (DSD) and Apple Lossless, which use various tricks to avoid nasty artefacts accruing during the digitization process. Sony also says it has used "key components made from oxygen-free copper" because that apparently delivers "uncompromising sound quality."

The machines also include "screws featuring a low-resistance gold-plated treatment ... providing a stable ground connection that delivers powerful bass, an expansive soundstage and smooth, extended high frequencies." Sony claims even the cabling it's used in the devices "further reduces noise and preserves signal integrity for rich, detailed sound." They're also housed in carefully-milled slabs of copper -- gold-plated in the case of the NW-WM1ZM3 -- because that apparently improves sound, too.

And then Sony's gone and spoiled it all by offering Bluetooth connectivity, a notorious music-mangler, in addition to wired headphone ports. Sony's US site lists all three devices, which run Android 16 and include Wi-Fi so they can access streaming music services. All are USB-chargeable and Sony claims their batteries allow 30-odd hours of music playback.

Privacy

MapQuest Shows Location of Flock (and Other ALPR) Cameras (gizmodo.com) 6

MapQuest creates a new layer (that can be toggled on and off), Gizmodo reports: After promising not to comply with the Trump administration's "Lake America" gimmick, the platform announced a new "Surveillance Layer" that displays the locations of automated license plate readers (ALPRs), including those from Flock Safety. Per MapQuest, its new tool will identify the locations of known outdoor surveillance cameras and plate readers from Motorola Solutions (Vigilant), Genetec, Axis Communications, Axon, Leonardo (ELSAG), Neology, Rekor, PlateSmart, Ubicquia, Verkada, and others.

While the company didn't specify how it sources its data, it appears to be similar to the data amassed by DeFlock, which maintains a user-submitted map of ALPR camera locations. MapQuest may be sourcing the information from DeFlock and the OpenStreetMap project.

Engadget notes that MapQuest also recently added "useful, long-overdue features like Android Auto support and public transit directions."
Earth

Google Updates Android Earthquake Alerts With 200+ Regions 21

Google is expanding its Android Earthquake Alerts System from 98 to more than 200 regions worldwide, using smartphone sensors to detect early earthquake activity and warn users before potentially dangerous shaking begins. The update also enhances the system's "Be Ready" alerts with estimated earthquake magnitudes, epicenter information, maps showing affected areas, and additional safety guidance. From a Google blog post: Be Aware: A straightforward alert for estimated light shaking, letting you know an earthquake has been detected nearby.
Be Ready: A detailed alert for stronger shaking, alerting you to prepare to take action.
Take Action: A full-screen alert for moderate to heavy shaking, giving you immediate advice on how to stay safe.

We've built-out our Be Ready alert with new helpful guidance. In the coming months, you'll see a map with a radius of where we've detected shaking, estimated earthquake magnitude, action you can take, and a button to learn more about the earthquake as information comes in.
Google

Google Is Silently Linking Your Phone Number Across All Signed-In Accounts (androidauthority.com) 34

Google has made Android's phone-number verification opt-out, automatically verifying and associating a device's phone number with every Google account signed in on that phone, including secondary and work accounts. Android Authority reports: As spotted in a recent Reddit thread, users report receiving confirmation emails out of the blue from "noreply-phone-verification@google.com" stating that their phone number has been verified. The feature, known in Google settings as "Phone number verification," links your active phone number across all Google accounts signed in on the same phone, including secondary profiles, work accounts, and throwaway handles.

Google's support documentation has long noted that it periodically re-verifies your device's phone number to keep communication and recovery features up to date. However, this support page was updated sometime between August and October 2025 to add this rather aggressive behavior of turning on phone number verification by default, as well as adding all phone numbers to all Google accounts signed in on the device.
To disable automatic phone number verification on Android, open your phone's Settings app, tap Google, and select the All Services tab. Under Privacy & Security, find Phone number verification and turn off Verify phone numbers automatically.

"[T]urning off the phone number verification toggle only prevents future linking," notes the report. "If Google has already attached your number across secondary accounts, you will need to open your Google Account Personal Info page, head to Contact info > Phone, and manually remove the number from each profile where it doesn't belong." Is this conversation helpful so far?
Security

Anthropic Warns Small AI Models Could Self-Replicate Through IoT Devices 84

An anonymous reader quotes a report from Ars Technica: AI company Anthropic is warning that advances in small AI models could soon usher in a new era of self-replicating malware that's capable of infecting smart fridges, vacuum cleaners, and a wide range of other Internet-of-things devices and is more resistant to takedown. By next year, smaller AI models may be able to autonomously self-replicate on all kinds of IoT devices, the company said. Eventually, the capability could enable computer worms, which propagate without requiring human interaction and are capable of infecting unfamiliar IoT devices. An experiment the company performed recently revealed significant challenges in bringing such an AI malware replicator to fruition, so the finding is necessarily tempered. Still, the results do raise concerns about the possibility of new forms of computer worms.

Anthropic further warned not only about the new potential malware, but also that it could be difficult to stop. In its blog post, it wrote that "a replicator like this would be challenging to shut down, since there's no centralized point to shut off -- though it may be slow (with a doubling time of days). Unlike non-AI malware, it could also figure out unfamiliar devices on its own." Smaller AI models require much less powerful hardware to run than do frontier models. Anthropic ran small open-weight models on real or simulated low-cost, off-brand Android TV boxes and other types of IoT hardware. Company researchers found that by using quantization to represent the models using fewer bits and splitting the workloads into "shards" running on each device, the models were able to establish inference, meaning that the model weights loaded and could generate output.

[...] This finding was the starting point for further research that asked: Would it be possible for small models to create self-replicating infections that run themselves on IoT devices the way traditional IoT worms, like Mirai, install DDoS code and other payloads? Unlike Mirai, these AI worms could pose a much higher threat, since the models could tailor exploits and payloads dynamically, depending on the target. Once such an infection chain began, it might also be harder for defenders to stop it. "Such an 'AI worm' could carry its model weights with it as it reproduces (or re-download them from a public hub), and then run inference directly on compromised hardware," Anthropic said. "Effectively, the weights would become part of the malware payload."
Further reading: Anthropic Bans Cruelty Toward Claude
Android

Google Play Now Lets Anyone Build Private, Vibe-Coded Apps That Run On Android (techcrunch.com) 32

Google Play is adding support for private personal Android apps, allowing users to build an app with tools like Google AI Studio and run it on their own devices without publishing it publicly to the Play Store. "These personal apps won't show up in Google Play's search or listing pages, and won't be shared with anyone except for the app's creator," reports TechCrunch. From the report: The idea comes as more people are experimenting with building their own applications via AI for specific, personal needs. However, being able to use that app on their own Android device has meant publishing to Google Play, making it accessible to the Play Store's some 3 billion users. That led many to limit their vibe-coding efforts to web apps that could run on any device instead of something built natively for Android.

Now, Google says Android device owners can vibe-code an app using Google AI Studio, then launch it for their own use. These apps are still required to comply with Google Play's existing policies but allow users to experiment more directly with building apps for Android. Initially, the feature will be available to users in the U.S., age 18 and up.

[...] In the months ahead, the company said that users will be able to share their vibe-coded creations with a network of trusted friends. That means the apps you built for family or friends, or maybe your child's T-ball league, could be used with a small group of people, without having to go public on the Play Store. And if the app ever really becomes popular, there will be a way to shift the personal app to one that's published on the Google Play Store for everyone to try, after completing the trust and safety reviews.

Google

Google's Fitbit Edge Debuts a Replaceable Battery, Brings Back the Screen (wired.com) 18

Google has introduced the $179 Fitbit Edge, a new fitness tracker with a 1.34-inch OLED display, built-in GPS, ECG support, week-long battery life, and Fitbit's first user-replaceable battery. "And unlike the Pixel Watch, it's compatible with Android and iPhones via the Google Health app," reports Wired. From the report: The Edge has a user-replaceable battery, a Fitbit first, aligning with Google's efforts to make its Pixel Watch more repairable. (Likely also due to new battery regulations set to take effect next year in the European Union.) Repair options will vary by region and availability. If you find the Pixel Watch's round face too bulky, the Edge's capsule-shaped alternative might suit smaller wrists better. If the Charge 6's 1.04-inch display was too small, the Edge upgrades it to a larger 1.34-inch screen. The difference is noticeable, and that extra real estate could make a real impact when glancing at your metrics mid-workout.

The Edge borrows a few more attributes from the Pixel Watch, including an altimeter that uses atmospheric pressure to measure elevation changes. That means it can record elevation gain and loss during outdoor activities, track floors climbed, and add more context to your outdoor stats. It also has a far-field skin temperature sensor, replacing the standard device temperature sensor found in other Fitbits. By bringing some of the Pixel Watch's more advanced hardware to a fitness-first wearable, Google is giving the Edge a compelling middle-ground position in its lineup at a Fitbit-friendly price.

The Edge inherits the Fitbit Air's improvements while restoring several Charge 6 features the screenless tracker lacks, including built-in GPS and electrical sensors that work with the electrocardiogram (ECG) app. You can also control music playback on a connected Bluetooth device, as you could with the Charge 6, and Google Maps turn-by-turn directions will arrive later this year. [...] With a Google Health Premium subscription, the Edge can track blood pressure trends without manual calibration and insulin resistance trends without requiring a blood draw. Google first announced these capabilities alongside the Pixel Watch 5's debut, but they only became available at the end of September. They're also available on the Air, keeping Google's screenless tracker up to date as its lineup expands.

AI

OpenAI Disrupts Two AI-Enabled 'False Front' Influence Operations That Included Seven Fake Journalists (openai.com) 22

OpenAI announced it's recently banned two "influence operations" — one from Russia and one from Iran — that were using its models "to launder geopolitical, conflict-related messaging" in sophisticated "false front" propaganda campaigns: The Iranian operation included a stable of seven "journalist" personas which it used to pitch long-form articles to small and medium online outlets around the world... As well as long-form articles, the Iranian operation generated batches of social media comments, generally on topics related to the US-Iran war... [The Russian operation "appears to have co-opted unwitting people in Latin America to run a 'think tank'.... Since we do not allow access to our models from Russia, they used VPNs to connect to our services."] The Russian operation created fake "leaked" documents and audio scripts, some of which we identified being spread online... Both managed to land their content (not all of which was generated from our models) in mainstream media outlets, rather than simply posting it on social media.
OpenAI says they've exposed 30 covert influence operations using its tools over the last two and a half years. But ironically, in this case both operations "also made heavy use of AI to draft internal reports (the Russian operation did this more than anything else)." And "in both cases, the actors used questionable or outright deceitful methodologies to exaggerate the operators' effectiveness." [The Russian operators] claimed that in May 2026, they created a fake email address purporting to come from the Regional Directorate of Education in Lima, Peru. They used this to instruct schools in the district to hold events dedicated to Ukraine on the national Day of Cultural and Linguistic Diversity (May 21)... According to the operators, some schools replied to the fake email address, confirming that they had held such events and even providing pictures. The operators then claimed to have planted stories about the events in the media in both Peru and Poland, alongside allegations that Ukraine was "exporting" ultra-nationalist ideologies, triggering outrage. Open-source searches identified stories that matched this claim in the Peruvianâ andâ Polish pressâ, and an English-language publication in Hungary (some of the articles have since been deleted)...

Similarly, in June, the operators claimed they used a different fake email address to trick schools in Ecuador into holding a ceremony pledging allegiance to President Daniel Noboa and to Erik Prince, former head of private military contractor Blackwater. The operators claimed that the incident provoked outrage in Ecuador and put pressure on the government to deny the fake, thus amplifying it to a nationwide audience. Again, open-source research identified mediaâ coverageâ in the Ecuadorianâ pressâ that closely resembled this claim, and even a detailed rebuttalâ by Ecuador's Minister for Education.

The operators used a range of techniques to underpin their false stories. According to their internal reporting, they spread two different fakes targeting Ecuador in March. One used fake audio attributed to Ukraine's consul in Ecuador, in which he was alleged to have made disparaging comments about Ecuadorians.

OpenAI's report "is the latest illustration of how state actors can easily exploit widely available AI tools to peddle sophisticated propaganda against adversaries on a mass scale," argues the Economic Times: "We identified almost 100 articles published or syndicated under the [Iranian] operation's bylines across roughly a dozen online outlets around the world," OpenAI said. "These were small to medium outlets, generally focused on international affairs, geopolitics, and events in the Middle East." The earliest article identified by OpenAI was published in July 2025, and the latest in October 2026, with the frequency of reports increasing after the US-Iran war broke out earlier this year. The operation also generated social media comments on topics related to the US-Iran war, it added.

One of the personas named Ervin B. Hoskins, whose bio claimed to be "an American freelance writer," had social media accounts across tech platforms including Elon Musk's X and Meta-owned Instagram. X's transparency information showed the account was connected via a "West Asia android app" and Instagram's transparency information showed the account was based in Iran, according to screenshots provided by OpenAI. Both accounts appeared to be suspended.

Security

Asos Confirms Hackers Sent 'Unauthorized' Notification to App Users (bbc.com) 9

ASOS says hackers gained unauthorized access to third-party platforms it uses and sent an "ASOS HACKED" push notification directly to customers, apparently as part of an extortion attempt. The clothing and beauty store says some basic personal information may have been accessed but does not believe payment-card data or passwords were affected. The BBC reports: In an email to customers on Tuesday night, the company apologized and urged customers not to engage with the notification. And it said the website and app are "operating as usual" promising customers they can "shop with confidence" while it investigates the incident. The company has not as of yet informed the UK's data watchdog, the Information Commission's Office (ICO), about any breach.

Exactly how many Asos customers received the notification on Tuesday remains unclear, but Google's Play store says the ASOS app has been downloaded to android devices more than 10 million times. The British retailer has a substantial global footprint -- serving around 17 million customers each year across more than 150 markets. Some Asos app users in Australia, France, Sweden and the Republic of Ireland had also received the notification, according to local reports on Tuesday.

[...] Users of the Asos app appeared to have received the alarming notification at around 10:00 BST on Tuesday. Headlined "ASOS HACKED" and addressed to the company's data protection officer and IT teams, it said: "We have fully compromised the Snowflake instance." "Engage with us, or we will leak it," it added, before linking to a Telegram channel. The message left many ASOS customers confused. [...] Meanwhile Snowflake -- whose tools are used by dozens of firms to collect, analyze and store data -- told the BBC its investigation was ongoing, but it had so far found "no compromise" of its platform.

Python

How Python Will Test Adding Rust Into CPython (python.org) 30

Python's security developer-in-residence Seth Larson reports from this year's official core developer Python Language Summit: "No one said 'don't do this' last year". After testing the waters at PyCon US 2025, [software engineer] David Hewitt returned to the Python Language Summit asking what Python core developers want from Rust, along with proposed timelines, phases, and success criteria for how the Rust for CPython project might proceed and become a permanent fixture within the CPython project. David is acting as an "ambassador" for the Rust for CPython project team, which is currently led by core developers Kirill Podoprigora and Emma Smith as authors of the Rust for CPython PEP draft. Emma also spoke at PyCon US 2026 about the Rust for CPython project. The team itself is around 60 developers in a Discord channel, among them a "few [Python] core developers" and a "delegation from the Rust project".

The team has experience with previous projects integrating Rust into existing codebases, such as Android and the Linux kernel, and is "excited by the work and keen to support [the project] if we proceed". Showing how adopting Rust may specifically help CPython, David noted how the number of issues labeled with " type-crash" has been steadily rising over time... David explained that Jeff Vander Stoep described Rust in Android as "move fast and fix things", and that "fewer revisions for patches of the same size" was the experience Android has had since adopting Rust....

One of the biggest concerns from a year ago was Rust's lack of platform support compared to CPython, which at the time of writing officially supports 20 different architectures and platforms at either Tier 1, 2, or 3. David shared that Rust's support of different platforms has "widened since last year" and was becoming "less and less of a concern". The proposal would be to ask Python distributors to attempt using the optional Rust support in Python 3.16 (October 2027) and report platform-specific issues upstream in time to be resolved around the Python 3.17 timeline (October 2028)...

[T]he first Rust code to ship in Python would be in Python 3.16 [October 2027], where it would be completely optional, with the existing C code kept as a fallback. The earliest that Rust would become required to build CPython is Python 3.18 in 2029, at least three years away... The Rust for CPython team has selected the zlib module as the first module to be given an optional Rust implementation because they "wanted to achieve a significant improvement" with a "small scope". The proposed Rust implementation will use zlib-rs, which is "heavily tested and used by the Firefox, uv, and Cargo" projects and "faster than zlib and zlib-ng on many platforms".... This small change would have an impact: the zlib compression algorithm is "widely used by Python packaging", meaning that (almost) "every pip install in Python 3.16 will be sped up" if the proposal is accepted.

Thanks to long-time Slashdot reader RoccamOccam for sharing the article.

Slashdot Top Deals