SoylentNews

"mrpg" writes:

The crew's observations highlight what human eyes can add to lunar exploration:

Six months after the Artemis II mission sent four astronauts around the moon, the value of their closeup view is coming into focus. The first science results, released on October 7, reveal details of the moon's array of colors, how often it gets hit by tiny rocks and lessons for squeezing as much science as possible out of future human lunar missions.

"We worked extremely hard to make sure we were able to maximize lunar science return from wherever we could in this mission," said Artemis II flight science operations lead Kelsey Young at a virtual Lunar Surface Science Workshop meeting on October 7. "This is creating yet another tool in our toolbox as planetary scientists to understand our moon, our solar system, even our own planet."

[...] With three days to spare, the team released three reports and a massive data archive on October 7, the 67th anniversary of when the Soviet Luna 3 spacecraft took the first photograph of the farside of the moon. The results offer a rare test of what trained human observers can add to lunar research and what NASA can learn for future missions to the lunar surface.

"We're really excited to release all of this data," earth scientist Sara Schmidt of NASA Johnson Space flight Center in Houston said during the meeting. After six months of hard work, "this is enabling science to happen for the next, I don't know, 60 years, if not more."

Surprisingly, the most valuable data from the mission were not the mind-blowingly gorgeous photos, but the astronauts' verbal and written descriptions of what they were seeing.

[...] During the flyby, the astronauts worked in pairs. Two of them spoke to mission control on the ground, giving periodic updates to the science team on what they were seeing. The other two recorded themselves describing their observations and reactions and used a stylus to annotate specially made maps of the moon that had been uploaded to their tablets during flight. Those notes, doodles and recordings were not made public until now.

The idea was to give the crew high tech field notebooks, Young says.

"If you have any field experience, you know your field notebook is your best friend," she said in the meeting. On Earth, geologists capture nuance and context in written and spoken words, as well as sketches, she said. "We wanted to provide the ability to capture that nuanced information from the crew."

"Arthur T Knackerbracket" writes:

It was identified in Euclid telescope imagery using software designed to detect moving objects:

Approximately 40 to 70 new comets are discovered every year, most of which are found by astronomers actively looking for comets or at least new celestial bodies in general. But at least one comet discovered in 2026 doesn’t have that distinction. It was discovered entirely by accident by a telescope that was not actively looking for comets.

Say hello to C/2026 S1 (Euclid), a brand new comet that was just discovered by the European Space Agency's Euclid space telescope. The comet is located about 1.3 billion kilometers away from Earth, which is roughly the distance between the sun and the orbits of Jupiter and Saturn. It was discovered by Mikko Pöntinen of the University of Helsinki, together with the Solar System Objects Science Working Group, who were using the Euclid telescope at the time of discovery. 

What makes this one weird, among the thousands of other comets humans have named, is how they found it. The group was intentionally pointing the telescope away from the elliptical plane, a band in the sky where the solar system's planets, most of its asteroids and a significant number of its comets reside. The idea was to avoid the cosmic dust and debris left behind by those celestial bodies, allowing the group to take clearer pictures of distant galaxies in deep space.

While doing this, a comet zipped through. It could have gone entirely unnoticed, but Pöntinen had written software to identify moving objects, which flagged images where the comet appeared. Pöntinen was then able to use its speed and trajectory to find it in other images and report it as a new comet. 

"I was excited to see my software flag a 'streak' smeared across several images," Pöntinen said in a statement. "Further inspection revealed that it had a fuzzy cloud around it, indicative of an active object like a comet that is shedding dust and gas."

The unexpected comet was reported to the International Astronomical Union's Minor Planet Center, where ground-based astronomers confirmed its existence and gave it a name. 

"Arthur T Knackerbracket" writes:

Years of promises, but officials unable to put a figure on investment:

The UK government says its finance systems cannot produce consistent annual figures showing how much departments and public bodies spend on digital transformation.

The Science and Technology Committee's June report warned that spending was fragmented and the government lacked a clear plan for a digital state. The UK public sector spends more than £26 billion annually on digital technology, but that broad estimate does not provide a comparable departmental breakdown.

Responding to the committee, the government agreed with the "intent to publish annual data on digital and data-driven spending" but said it did not "believe this is currently practicable." Existing finance systems could not "provide consistent, reliable and comparable data across departments."

"The government is open to this as a direction of travel and will work with HM Treasury to consider how this could be developed over time," the response said.

Committee chair Dame Chi Onwurah, who is due to address Parliament on Thirsday, said: "There's no shortage of hype about how technology can improve public services and reduce costs. Yet, frustratingly, the government cannot provide a clear picture of how much is being spent on digital transformation across departments and public bodies.

"At a time when ministers are asking taxpayers to fund significant investment in technology, it's concerning that they cannot show where the money is going or how value for money is being measured. This must be addressed as a matter of urgency."

fliptop writes:

The internet is a vast and confusing place no matter your age. Trying to help youth engage with it safely and privately is a complicated topic that touches on many different skillsets and ideas. But just because it's complicated doesn't mean it's impossible. We've launched our Online Privacy for Parents and Youth Surveillance Self-Defense guide in hopes to provide a framework for finding solutions that work for you:

EFF rolls out this crucial resource as state and local governments consider ill-advised laws that cut young people off from essential information and experiences. This particularly harms vulnerable youth and marginalized groups who often find safety in supportive online communities they can't access offline. Such laws also entail age gating, which compromises the privacy of all internet users and stifles young users' ability to learn, grow, and express themselves.

[...] We used a security plan as our foundation for this guide because deciding what is and isn't important is the first step we should all take when assessing our privacy risks. But this isn't a place for quick fixes, and every young person has their unique needs and considerations. There is no single tool or technology fix that can substitute for spending time learning, and then teaching a young person, how the internet works, how to use it, what sorts of harms exist, and how to navigate those harms.

Original Submission

"fab23" writes:

This is not just a rant, this is a serious call and warning to every company or project developing software:

While we could discuss the obvious moral and ethical problems regarding the usage of Big Tech "AI" (see the recommended reading section), this post is not about that.

With the recent improvements in "AI" technology and the following inhumane and greedy push by software companies forcing software developers to use Big Tech "AI" products for development, a new and very serious problem is beginning to surface.

Previously, before the "AI" chaos arose, the modern software industry was already in pretty bad shape. Due to the almost frantic usage of too many levels of abstractions , and due to the incomprehensible lack of courage to think independently and the lack of push back against the blind following of hype and trends, many developers only had a superficial understanding of the technology they were working on.

With "AI" this problem is now getting much worse.

Everywhere many software developers are in distress. And I am not talking about psychological distress, even though that is definitely also a problem. No, I am talking about the problems that developers are facing with the new way of producing and shipping code with "AI". The developers are not producing the code, the "AI" is. And even when it's the developer who is telling the "AI" how to design the system, much of the code is not understood.

Just reading lines of lines of code you have not yourself produced or participated in producing (by actually doing coding and not just prompting an "AI"), is meaningless to a software engineer. Rather, it is impossible to review thousands of new or changed lines of code each week. As this becomes the "new standard" eventually nobody will understand anything and nobody will care.

I thought that when we got to GPT 4, which was back in 2023 I think, that very quickly after that, that there was going to be much more disruption in software business being up for graps, right away than turned out to be. — Sam Altman

The whole point with Big Tech "AI" is to disrupt not only the software industry, but as many industries as possible, and then make everyone completely and heavily dependent upon Big Tech "AI".

Original Submission

"Arthur T Knackerbracket" writes:

https://arstechnica.com/tech-policy/2026/10/tp-link-tries-to-appease-trump-admin-with-pledge-to-assemble-routers-in-us/

TP-Link yesterday announced plans to assemble Wi-Fi routers in the US, as the company attempts to get the Trump administration's approval to sell its newest routers to American consumers.

The timing is uncertain, as TP-Link's press release said it expects US-based assembly to begin "as early as" 2027. TP-Link's application to sell new routers in the US could be rejected by the Trump administration or remain pending long enough to push the US-based assembly to 2028.

"Pending US regulatory approval, TP-Link expects domestic assembly of its groundbreaking Wi-Fi 8 home networking product line to begin as early as next year," the company said. TP-Link said it signed a Letter of Intent with US company Keytronic, which agreed "to become a primary domestic manufacturing partner for TP-Link, supporting assembly of the company's advanced networking portfolio in Corinth, Mississippi."

TP-Link can't sell its Wi-Fi 8 routers in the US because of the Federal Communications Commission ban on consumer-grade routers produced wholly or partly in other countries. Previous TP-Link routers that were already approved for import and sale are still available.

The FCC has given exemptions to a number of prominent router makers, but TP-Link's history as a Chinese company is making it difficult to obtain FCC clearance. Founded in China in 1996, TP-Link moved its headquarters to California in October 2024. It says that "TP-Link Systems devices sold in the US are manufactured in Vietnam and TP-Link Systems is an independent, US company that is not owned or controlled by any foreign government."

While TP-Link assembles routers in Vietnam, most of the components are reportedly imported from China. TP-Link's plan to assemble routers in the US will still require it to import components, but the company hopes investment in the US will help it gain the Trump administration's favor.

While the FCC is urging router makers to move more of their operations to the US, a TP-Link official said the government has provided no clear guidance on how much US manufacturing is enough to obtain an exemption from the foreign router ban.

"There are no published guidelines that say, 'Well, it could be 25 percent US, or it could be 15 percent US,'" TP-Link corporate affairs officer Steve Kovsky told PCMag. Kovsky said that many components "are just not available from a domestic source, and this is not a TP-Link issue. This is an issue for all manufacturers that are trying to onshore manufacturing."

In a letter to FCC Chairman Brendan Carr and the agency's commissioners last week, Kovsky said TP-Link is proposing "a nearly $1 billion investment in America that would result in equipping existing US factories, and ultimately building new, highly automated manufacturing facilities, to start assembling next-generation Wi-Fi 8 routers in the United States as soon as next year, creating hundreds of new jobs."

TP-Link's letter said it will make the proposed investment if it receives approval to sell Wi-Fi 8 routers in the US. "This investment would build upon TP-Link's existing US footprint, which includes a global headquarters in Irvine, Calif., and more than 700 US employees," TP-Link told the FCC. "As part of this investment, TP-Link would begin assembling these Wi-Fi 8 devices in the United States by next year, and the devices will incorporate software and firmware developed, written, and stored in the United States by TP-Link's US engineering organization."

shrewdsheep writes:

theglobeandmail

Canada's official maple syrup reserve is sitting near empty, the result of a strong surge in demand that has drained supply to levels not seen in more than a decade.

The Quebec industry, worth about $1.2-billion a year to the province's GDP, produces most of the world's maple syrup. And its stockpile is maintained by a government-sanctioned cartel called the Federation of Quebec Maple Syrup Producers, known by its French acronym PPAQ.

"At the end of next February, all the remaining syrup sold under contract will be gone," said Simon Doré-Ouellet, deputy director-general at PPAQ. "Our warehouses will be at zero."

The PPAQ sets minimum prices for bulk shipments, regulates production volumes through quotas, and monitors safety and quality standards.

Maple syrup that's not sold goes to three warehouses in Quebec with a combined capacity of 133 million pounds (218,000 barrels worth $400-million if the space is all full) that can be drawn on when weather conditions yield a lower crop. The aim is to have a greater stability in supply and pricing from season to season.

At the moment, demand from consumers is simply outstripping supply. Bulk buyers and processors, such as Rogers Sugar Inc. and Les Industries Bernard & Fils, are snapping up higher volumes of syrup to meet that demand and sell to retail customers. Increasing their stocks also gives them more operational flexibility in the context of trade tension with the U.S., when they might need to make quick shipments on a timely basis.

"This is the first time we're seeing a situation like this. There's much more inventory in the hands of our big buyers than in the past," Mr. Doré-Ouellet said.

Original Submission

"mrpg" writes:

Japan's sample return mission to Phobos may also collect some Mars dust:

For decades, scientists have dreamed of getting Martian rocks into Earth's laboratories — a Herculean feat that would revolutionize our knowledge of the Red Planet. An audacious mission from the Japanese space agency might offer the next best thing: rocks from Mars' larger moon, Phobos.

That's the task confronting the Martian Moons eXploration (MMX) spacecraft. The mission, which launched October 19, aims to crack the long-standing mystery of how Mars got its two odd moons by delivering a sample of Phobos to Earth in 2031. These rocks are no substitute for true Martian material — but given that NASA's plans to fetch the Perseverance rover's prized samples are in limbo, scientists are eager for even an indirect glimpse of Mars.

"It's a chance to get a totally different sample and view of Martian materials," says planetary scientist Briony Horgan of Purdue University in West Lafayette, Ind., who is not involved in the MMX mission. "It'll be a great contribution to our sample collection back here on Earth."

If it's successful, MMX will be the first mission to reach Phobos. Three previous spacecraft from Russia failed.

The MMX itinerary is action-packed: The spacecraft will spend about one year cruising out to Mars, then slip into orbit around Mars alongside Phobos for about three years. During its stay, the spacecraft will deploy a small rover named Idefix to scout the moon for good sampling sites. The main spacecraft will then make two landings to grab 10 grams of sample, about the weight of four U.S. pennies. It will use two different devices to snag the sample: One will drill two centimeters down into the rock, while the other will blow pressurized gas at the surface to collect loose material.

Once loaded up, MMX will zip past the smaller moon Deimos before making the one-year trek home to drop its cargo in Australia's outback, just as Japan's two previous asteroid sample-return missions have done. After the Japanese space agency JAXA sorts and catalogs the samples, it will share portions of them with other institutions.

Such a small handful of rock may not sound impressive, but it's enough to thrill researchers. "A few grams of sample are going to be a real bonanza for scientists," says planetary scientist Michael Zolensky of NASA's Johnson Space Center in Houston, where 15 percent of the sample will eventually end up.

MMX is designed to reveal the enigmatic origins of Phobos and Deimos — the only moons in the inner solar system besides our own. "The Martian moons are so different from [the] terrestrial moon: They are two, very small [and] very dark," says planetary scientist Tomoki Nakamura of Tohoku University in Sendai, Japan.

The strange objects look like rocks that wandered in from the outer asteroid belt and got trapped around Mars. But their tidy circular orbits suggest they coalesced after a massive collision tore material off the Red Planet. Or perhaps they came about some other way that scientists simply haven't imagined, says planetary scientist Kiyoshi Kuramoto of Hokkaido University in Sapporo, Japan. "The natural world often reveals aspects that exceed our expectations," he says.

Studying the features and composition of Phobos' surface could solve the mystery. But although MMX carries sophisticated instruments to explore Phobos, those observations may not suffice. Hence bringing rock back to Earth's labs, where scientists can enlist equipment far too large or delicate to ever send to space.

Although sample analysis will focus on understanding Phobos, researchers will also be able to use the rocks to fine-tune our understanding of Mars. For example, pinpointing the material's age will allow scientists to calibrate the chronology of cosmic collisions in the neighborhood of Mars. Currently, scientists estimate ages on Mars based on a timeline based on our moon, which may not apply at the Red Planet.

Scientists even have reason to hope that stray grains from Mars will be hidden amid the MMX treasure. This material could be ancient relics of the two bodies mixing during a moon-forming process, potentially including grains that hail from deeper in the Martian crust than scientists have seen so far in rare meteorites the cosmos has delivered us. No matter how Phobos formed, the material could also include fresher debris flung off the Red Planet by cosmic collisions.

The biggest challenge may be positively identifying which grains came from Mars. Such lucky samples would lack valuable geologic context and be far from pristine. "They're material that's been blasted off Mars from some unknown location, micron-sized things, sitting on the airless body Phobos, getting irradiated by space," says planetary scientist Nancy Chabot of the Johns Hopkins University Applied Physics Laboratory in Laurel, Md. Nonetheless, scientists are prepared to get creative and use the latest technology to tease out every secret they can manage in any sample they can snag.

MMX offers a very different type of sample return than what NASA has initiated with the Perseverance rover, which has spent years squirreling away fresh material drilled from the most interesting outcrops it can find. That's all in hopes of a future mission ferrying the rock to Earth for scientists to hunt for signs of ancient microbes. But the U.S. Congress has axed funding for that successor due to spiraling costs and concerns about feasibility — particularly of accomplishing the first ever launch from Mars.

Even if MMX can't give scientists the satisfaction of an ultimate Mars sample return, there's still plenty to learn, says planetary scientist Vicky Hamilton of the Southwest Research Institute in Boulder, Colo., who is not involved in the mission. "It's always a happy day when we're getting a sample from another object in space and bringing it back to Earth to study," she says.

Original Submission

Rich writes:

Youtuber Patrick Craenen, on his Happy Little Diodes channel (https://www.youtube.com/watch?v=jiW3P1rJRMc), has announced that he was able to obtain a stash of development documents from former UK electronics company Ferranti. These documents contain a vast treasure of information about the custom ULA (Uncommited Logic Array) chips used in the ZX81 and Spectrum computers that defined much of the 1980's UK computing scene. Starting with the ZX81, a ULA replaced great numbers of individual logic ICs, reducing the chip count to a fraction and enabling a two-figure price for the machine. On the Spectrum, they enabled colour graphics with the lower development effort for a gate array, where US competitors Commodore and Atari were using full custom layout ICs, and Apple was using none, relying on NTSC artifacts until the Mac II.

The Ferranti Files contain detailed schematics for many of the ULA revisions, which will be of great interest to computer historians. As Ferranti is no longer existent, and the Sinclair rights have, via Amstrad, gone to Sky, Craenen cleared the release with their lawyers, who agreed under the condition that personal information is redacted.

https://en.wikipedia.org/wiki/Ferranti

Original Submission

"Arthur T Knackerbracket" writes:

Commission opens DSA probe into fake listings and phishing on the platform, says its fraud defenses 'absolutely substandard'>/a>:

The European Commission has opened an investigation under the Digital Services Act into whether Booking.com is doing enough to stop fraudsters running scams, phishing and smishing on its platform.

Officials told The Register the probe, which opened Wednesday, covers a very large online platform (one with more than 45 million EU users) and has three strands.

The first is whether Booking.com is failing to prevent fraudulent and non-compliant listings. "This is very much about people portraying themselves as the owner of premises and putting it up for rent while they are not the real owner,"  an EC spokesperson said.

The second is whether it does enough to counter phishing and smishing (SMS phishing), and social engineering. "Scammers take over the account of a property owner and... portray themselves as the property owner, but also take over the contact details," she said. "So they start sending messages that people need to pay additional amounts."

The Commission also suspects Booking.com is not sufficiently protecting the data of its consumers and business users.

The third strand is advertising transparency: whether the platform clearly distinguishes ads from organic results, and whether it is clear about boosted listings, where property owners pay for higher ranking.

Officials cited Booking.com's own admission in June 2024 of a 500-900 percent jump in travel scams over the previous 18 months. "What made us concerned is the very high figures," an official said.

In the Netherlands alone, more than 1,000 fraud notifications were made in the first part of 2026, causing damage of €82,000, a tenfold increase on the previous year. "This is a real problem, and this is only the Dutch element," the official said. "We have reports like that almost from all member states... So, we have clear elements where we find that the risk assessment was not sufficient, and as you know, the risk assessment is a key tool for us."

"Arthur T Knackerbracket" writes:

https://www.engadget.com/2292027/google-brings-gemini-personal-intelligence-to-android-auto/

At the start of the year, Google debuted Personal Intelligence, a Gemini feature that allows the chatbot to pull information from your other Google apps to generate more personalized responses. An expansion in March brought Personal Intelligence to free accounts after it was previously only available to Google AI Pro and Ultra subscribers. And now Google has begun rolling out the feature to Android Auto users.

In practice, the company says today's update will improve Gemini's reasoning capabilities in cars. It will also make the assistant capable of delivering more specific details as they relate to your questions and prompts. For example, if you're driving to the airport, Google suggests Gemini with Personal Intelligence will be able to answer questions like "what's my flight gate?" and "is my flight on time?" Provided you've linked your Gmail account, it can do all this without you needing to pull over to find a confirmation email.

More broadly, Google says Personal Intelligence makes it easier to interact with Gemini more naturally. For instance, if you need directions to your doctor's office, you can just say "take me to my doctor's appointment," instead of speaking a specific address. Recommendations are also improved. If you're in a new city, Google suggests you can ask for dinner spots along your driving route and Gemini will generate suggestions while factoring in preferences and restrictions, like if you're a vegetarian.

As before, enabling Personal Intelligence is optional, and you can turn it off at any point if you don't want Gemini pulling your data. You can also control what apps Gemini can access. Google is starting to roll out Personal Intelligence to Android Auto users globally starting today (with the exception of those living in Switzerland, the European Economic Area, UK and Nigeria). In the coming months, the company plans to bring the feature to cars with Google built-in too.

Original Submission

"mrpg" writes:

Senedd member says smart glasses help with speeches in the Senedd:

A Reform politician has said he was using smart glasses with an in-built autocue feature to help him make speeches in the Welsh Parliament.

Jason O'Connell said the technology had helped boost his confidence when speaking in the Senedd, and denied it risked misleading people into thinking he was speaking without notes.

"I'm delivering my words in the manner that I see fit," he told the BBC's Politics Wales programme .

But the Welsh Liberal Democrat leader called for the glasses to be banned from use in the Senedd, while a parliament spokesperson said a review was under way.

[...] The smart glasses have allowed O'Connell to make speeches by reading a digital script that appears on the lenses of his glasses.

The text scrolls as he speaks, and it can also be controlled via a ring on his finger.

The Member of the Senedd (MS) for the Pontypridd Cynon Merthyr constituency said he had been looking at ways to improve his oratory skills since being elected to the parliament in May.

He said: "One of the things I identified as a weakness of mine was that my head was down looking at my notes a lot, and I wanted to get away from that and these glasses enable me to do that."

"Arthur T Knackerbracket" writes:

https://arstechnica.com/space/2026/10/spacex-and-tesla-into-a-single-company-has-a-lot-of-merit-musk-says/

Elon Musk said Tuesday that he would like to see the consolidation of his business empire by formally merging his two largest companies, SpaceX and Tesla.

"Do I think it would be a good idea? Yes," Musk said of a potential merger. He was speaking during a question-and-answer period as part of SpaceX's third-quarter earnings call. Musk said, ultimately, it not his decision. "But at the end of the day the shareholders have to be supportive of this."

Musk's talk of a merger comes after a busy year in which SpaceX already acquired Musk's artificial intelligence firm, xAI, in February. In June, SpaceX went public with the largest initial public offering on record.

At the request of shareholders of each company, Musk said both SpaceX and Tesla have formed special committees of "independent directors" to discuss the idea of a merger. "I'm a conflicted party; I can't actually be in the discussions of the special committees," Musk said. Those committees have not reached an agreement on the terms of a merger transaction, Musk said.

"Obviously there's no guarantee that they will, but I do think there's a lot of merit to combining the companies as we are pretty much in the superintelligence singularity," Musk said. "There's lots to be gained from cooperating on developing superintelligence software, chip design, the Terafab, obviously robotics, mass to orbit with the Starmind constellation, and connectivity. So I think it would be a good idea."

It might seem like madness to merge a space business with an automotive business, but both SpaceX and Tesla are rapidly transitioning from their original markets into artificial intelligence.

In its public financial documents, SpaceX has indicated that the bulk of its future revenues are likely to come from orbital data centers that will provide the backbone of computing for artificial intelligence on Earth. Tesla sees its future in sophisticated self-driving cars, robots, and industrial hardware. Both enterprises would require advanced computer chips and energy. SpaceX could provide the connectivity for Tesla hardware.

Beyond these synergies, the merger would be attractive to Musk—already the world's richest person and first trillionaire—because it would give him more control.

Based on SpaceX documents filed as part of its IPO, Musk holds more than 82 percent of voting power in SpaceX. In contrast, Musk holds about 20 percent of voting power at Tesla. By merging SpaceX with Tesla, where he has less direct control, Musk could acquire a majority of shares eligible for voting at the combined company. This would depend on the nature of valuations and negotiated agreements at the time of the merger. At the time of Musk's announcement, SpaceX and Tesla had market valuations of about $2 trillion and $1.5 trillion, respectively.

The merger will face scrutiny by US regulators. Additionally, Morningstar reported earlier this year that valuation disagreements will likely be significant, especially among Tesla shareholders. Musk said Tuesday that 50 percent of all Tesla shareholders, not just those with voting shares, would have to approve of the merger. Such a vote would only come if the two special committees reached an agreement on merger terms.

Some political leaders, already wary of Musk's outsized power and influence and willingness to use both freely, may also object to a single Musk mega-corporation.

It's not definitive what the merger's implications are for SpaceX's traditional space business and its longtime goal of settling Mars, or for Tesla's one-time aspirations to bring electric vehicles to the global market. Most probably, however, a combined Musk-universe would focus on artificial intelligence and the computing power needed to back those ambitions. Less Mars and cars—and more silicon.

Original Submission

"Arthur T Knackerbracket" writes:

https://www.theregister.com/security/2026/10/20/indian-certification-authority-emudhras-private-keys-compromised-one-of-them-was-the-number-4/5304312

Tragically simple private keys used by a certification authority based in India have been compromised, meaning the 60-million-plus certs it has issued can't be trusted and necessitating a massive clean-up job.

The CA of concern in this case is called eMudhra, which boasts of having issued over 60 million digital certificates to help usher in a world of digital trust.

The company has instead panicked the world.

News of the company's errors appeared on Tuesday in a post by Dennis Jackson, a member of Mozilla's cryptography engineering team.

"On Saturday, October 17, at 20:06 UTC, Mozilla received a report from a community member that private keys associated with eight eMudhra intermediate certificates had been compromised," he wrote. "These keys could allow attackers to issue fraudulent HTTPS certificates for websites they do not control."

Or as Cloudflare put it, "an attacker can create a forged certificate for any domain and use it to impersonate servers to intercept or modify traffic."

Jackson has since elaborated on the incident and the response, which has thankfully seen Mozilla, Chrome, and Apple remediate the issue so their browsers won't rely on the certificates – at least after users install an update. He also reports that eMudhra has revoked the certs, and lists many FOSS projects that have issued updates that mean they won't recognize certs from eMudhra.

That's welcome, but sadly certs signed with these private keys are still out there and many services rely on them. Browser makers are set up to detect and reject bad certs. Others who relied on them may not be, and will likely need to dig into their environments to see if they rely on certs signed by eMudhra. Developer Geoffrey Huntley has offered some advice on automating that process.

At the time of writing, eMudhra has not responded to The Register's inquiries about the incident and its security practices.

The latter question is of great interest because security researcher Scott Helmeanalyzed eMudhra's certs and found one the private keys it used "is the number 4."

"Not a number that starts with 4, or the number 4 followed by a few hundred random digits, just, 4... Another one is 56, and another is 115. I know, because I recovered all of them from their public certificates on my laptop just now, and it took less than a second," Helme wrote.

Other researchers have found private keys including the numbers 66, 155, 156, 230 and 237.

Those are vastly inadequate keys, because they're easy to guess, making all certs issued by eMudhra susceptible to brute force attacks.

As Helme put it: "A P-384 private key should be a random 384-bit number, which gives you 2³⁸⁴ possibilities (or roughly 10¹¹⁵), so nobody is ever going to search that."

Original Submission

owl writes:

https://www.techdirt.com/2026/10/20/accident-or-not-the-no-kings-takedown-is-why-you-shouldnt-rent-your-megaphone-from-zuck/

This past weekend was the latest in an ongoing series of (massive) "No Kings" protests held around the country (and in some cases around the globe). The latest one was part of a "get out the (early) vote" campaign to make sure people are voting in the upcoming midterm elections. And, in the middle of it, suddenly it was reported that the No Kings Instagram account was suspended for about an hour, with admin access locked out for a few more hours. Many supporters of the protests immediately suspected foul play, highlighting that Mark Zuckerberg has gone in hard in supporting Trump over the past couple of years. So, the implication was that Zuck must be fiddling the dials to help the guy he supports in the White House. For a variety of reasons, this is unlikely to be true.

I'll explain some of those reasons towards the end of this article just to be thorough, but the point of this article is to highlight the argument that Will Robinson and Tim Chambers recently made in response to this, which is that it doesn't even matter if it was done on purpose or not. Even if you believe that Zuckerberg and Trump were laughing their heads off and jointly pressing the button to silence the No Kings account, the real problem was that this was possible in the first place.

Our response should be the same either way.

Original Submission