Source: NYT > World
Brazil’s Supreme Court convicted the former president of trying to cling to power after losing the 2022 election, including a plan to assassinate his opponent.
Source: Ars Technica
Hackers planted malicious code in open source software packages with more than 2 billion weekly updates in what is likely to be the world’s biggest supply-chain attack ever.
The attack, which compromised nearly two dozen packages hosted on the npm repository, came to public notice on Monday in social media posts. Around the same time, Josh Junon, a maintainer or co-maintainer of the affected packages, said he had been “pwned” after falling for an email that claimed his account on the platform would be closed unless he logged into a site and updated his two-factor authentication credentials.
“Sorry everyone, I should have paid more attention,” Junon, who uses the moniker Qix, wrote. “Not like me; have had a stressful week. Will work to get this cleaned up.”
Source: Ars Technica
Source: Hacker News
Source: Slashdot
An anonymous reader shares a report: The total number of GPUs sold for the second quarter of 2025 hit 11.6 million units, while desktop PC CPUs went up to 21.7 million units, according to a Jon Peddie Research report. This is a 27% increase in graphics card shipments and a 21.6% jump in CPU shipments from the last quarter, which is a change from the usual drop in deliveries we've seen in recent years. "AIB prices dropped for midrange and entry-level, while high-end AIB prices increased, and most retail suppliers ran out of stock. This is very unusual for the second quarter," said Jon Peddie Research president Dr. Jon Peddie. "We think it is a continuation of higher prices expected due to the tariffs and buyers trying to get ahead of that." As for the three major GPU manufacturers, Nvidia still has the lead, taking in 94% of the market -- an increase of 2.1% over the previous quarter -- while AMD is at a distant second place with 6%. This is still a much better position than Intel, though, whose market share is so small it did not even register on the chart.
Read more of this story at Slashdot.
Source: Hacker News
Source: Ars Technica
People in Internet security circles are sounding the alarm over the issuance of three TLS certificates for 1.1.1.1, a widely used DNS service from content delivery network Cloudflare and the Asia Pacific Network Information Centre (APNIC) Internet registry.
The certificates, issued in May, can be used to decrypt domain lookup queries encrypted through DNS over HTTPS, a protocol that provides end-to-end encryption when end-user devices seek the IP address of a particular domain they want to access. Some security experts are also concerned that the certificates may underpin other sensitive services, such as WARP, a VPN offered by Cloudflare. The certificates remained valid at the time this post went live on Ars.
Although the certificates were issued four months ago, their existence came to public notice only on Wednesday in a post to an online discussion forum. They were issued by Fina RDC 2020, a certificate authority that’s subordinate to the root certificate holder Fina Root CA. The Fina Root CA, in turn, is trusted by the Microsoft Root Certificate Program, which governs which certificates are trusted by the Windows operating system. Microsoft Edge accounts for approximately 5 percent of the browsers actively used on the Internet.
Source: Ars Technica
Google has avoided the worst-case scenario in the pivotal search antitrust case brought by the US Department of Justice. More than a year ago, the Department of Justice (DOJ) secured a major victory when Google was found to have violated the Sherman Antitrust Act. The remedy phase took place earlier this year, with the DOJ calling for Google to divest the market-leading Chrome browser, release data to competitors, and end many of its search distribution deals.
The government is getting almost none of that. DC District Court Judge Amit Mehta has ruled that Google doesn't have to give up the Chrome browser to mitigate its illegal monopoly in online search. The court will only require a handful of modest data and behavioral remedies, forcing Google to release some search data to competitors and limit its ability to make exclusive distribution deals.
This case drew many comparisons to the decades-old antitrust case against Microsoft, which nearly saw the company split in two. The company narrowly avoided that fate, and it seems Google will as well—the DOJ came up short on the so-called structural remedies. While there will be some changes to search distribution, the court didn't believe that a breakup was fair in this situation.
Source: Ars Technica
Here in the year 2025, it's not every day that a classic gaming console from the 20th century becomes playable via emulation for the first time. But that's just what happened last week with the release of Ares v146 and its first-of-its-kind support for Mega LD titles designed for the Pioneer LaserActive.
Even retro console superfans would be forgiven for not knowing about the LaserActive, a pricey LaserDisc player released in 1994 alongside swappable hardware modules that could add support for Sega Genesis and NEC TurboGrafx-16 games and controllers. Using those add-ons, you could also play a handful of games specifically designed for the LaserActive format, which combined game data and graphics with up to 60 minutes of full-screen, standard-definition analog video per side.
Mega-LD games (as the Genesis-compatible LaserActive titles were called) were, for the most part, super-sized versions of the types of games you'd find on early CD-ROM console of the era. That means a lot of edutainment titles, branching dungeon crawlers, Dragon's Lair-style animated quick-time event challenges, and rail shooters that overlayed standard Genesis or TG-16 graphics on top of elaborate animated video backgrounds (sometimes complete with filmed actors).
Source: Hacker News
