Latest Tech News

Stay updated with the latest in technology, AI, cybersecurity, and more

Filtered by: ser Clear Filter

An illustrated guide to OAuth

OAuth was first introduced in 2007. It was created at Twitter because Twitter wanted a way to allow third-party apps to post tweets on users' behalf. Take a second to imagine designing something like that today. How would you do it? One way would just be to ask the user for their username and password. So you create an unofficial Twitter client, and present the user a login screen that says "log in with Twitter". The user does so, but instead of logging into Twitter, they're actually sending the

Scamlexity: When agentic AI browsers get scammed

This is the new reality we call " Scamlexity " - a new era of scam complexity , supercharged by Agentic AI. Familiar tricks hit harder than ever, while new AI-born attack vectors break into reality. In this world, your AI gets played, and you foot the bill. We built and tested three scenarios, from a fake Walmart store and a real in-the-wild Wells Fargo phishing site to PromptFix - our AI-era take on the ClickFix scam that hides prompt injection inside a fake captcha to directly take control of

We Tested All the Cheapest Meal Kits and Prepared Meal Services. These Are the Best

Our meal delivery experts have logged more than five years of cooking more than 75 meal kits and tasting upwards of 100 prepared meals, from popular meal delivery services to help land on our list of the best cheap meal subscriptions. CNET staff -- not advertisers, partners or business interests -- determine how we review products and services. If you buy through our links, we may earn a commission. Life’s busier than ever -- at least it seems that way -- and carving out time to plan a week’s

Blade Runner makes its live-action return next year

Blade Runner's third live-action entry will be a streaming miniseries on Amazon Prime Video, and Deadline reports that it is now slated for release in 2026. "The update was provided by Laura Lancaster, Head of US SVOD TV Development and Series – Co-Productions at Amazon MGM Studios, in an internal memo announcing promotions for two executives, Kara Smith and Tom Lieber," Deadline explained. We previously reported that the series, titled Blade Runner 2099, had been greenlit under original film

Bounce launches a service for moving accounts between Bluesky and Mastodon

Bounce, a new technology that adds a critical component to the open social web, launches to the public on Monday. The cross-protocol migration tool offers a service that allows users of open social networks like Bluesky and Mastodon to move their follow graphs between their accounts, even though the networks rely on different underlying protocols. Today, Mastodon users unhappy with the service can opt to move their account to a different Mastodon server, while Bluesky is developing technology t

This rumored Apple Watch feature could fix one of my biggest unlocking annoyances

Nina Raemont/ZDNET Follow ZDNET: Add us as a preferred source on Google. ZDNET's key takeaways Apple could be toying with Touch ID on the Apple Watch. It will probably not arrive on the smartwatches Apple unveils next month. Touch ID is part of a larger Apple Watch upgrade that could be coming in 2026. You might be unlocking your next Apple Watch with a biometric Touch ID, according to MacWorld. The publication found internal software that suggests Touch ID could be coming to future watc

We put agentic AI browsers to the test – They clicked, they paid, they failed

This is the new reality we call " Scamlexity " - a new era of scam complexity , supercharged by Agentic AI. Familiar tricks hit harder than ever, while new AI-born attack vectors break into reality. In this world, your AI gets played, and you foot the bill. We built and tested three scenarios, from a fake Walmart store and a real in-the-wild Wells Fargo phishing site to PromptFix - our AI-era take on the ClickFix scam that hides prompt injection inside a fake captcha to directly take control of

A four-pack of Apple AirTags drops to $70 for Labor Day

If you're thinking about getting some of Apple's AirTags, now's the time to act — Amazon currently has a four-pack on sale for $70. That's one of the lowest prices we've seen outside the big sales on Black Friday and Prime Day. For Apple users, AirTags offer some large advantages over rival trackers. The ultra-wideband functionality offers precise tracking with iPhones less than five years old, so you can narrow your search between a couch and love seat in the same room. Over larger distances,

An Illustrated Guide to OAuth

OAuth was first introduced in 2007. It was created at Twitter because Twitter wanted a way to allow third-party apps to post tweets on users' behalf. Take a second to imagine designing something like that today. How would you do it? One way would just be to ask the user for their username and password. So you create an unofficial Twitter client, and present the user a login screen that says "log in with Twitter". The user does so, but instead of logging into Twitter, they're actually sending the

Microsoft working on fix for ongoing Outlook email issues

​Microsoft is working to resolve an Exchange Online issue causing email access problems for Outlook mobile users who use Hybrid Modern Authentication (HMA). HMA is a Microsoft Exchange Server feature that allows users to access on-premises mailboxes using authorization tokens from the cloud. Tracked under EX1137017 in the Microsoft 365 Admin Center, this known issue is caused by a recent service change, designed to improve the efficiency of mailbox syncs, which is triggering 12-hour sync delay

Show HN: CasCache – multi-generational cache with optimistic concurrency control

cascache Provider-agnostic CAS like (Compare-And-Set or generation-guarded conditional set) cache with pluggable codecs and a pluggable generation store. Safe single-key reads (no stale values), optional bulk caching with read-side validation, and an opt‑in distributed mode for multi-replica deployments. Contents Overview CAS safety: Writers snapshot a per-key generation before the DB read. Cache writes commit only if the generation is unchanged. Writers snapshot a per-key before the DB rea

We Put Agentic AI Browsers to the Test – They Clicked, They Paid, They Failed

This is the new reality we call " Scamlexity " - a new era of scam complexity , supercharged by Agentic AI. Familiar tricks hit harder than ever, while new AI-born attack vectors break into reality. In this world, your AI gets played, and you foot the bill. We built and tested three scenarios, from a fake Walmart store and a real in-the-wild Wells Fargo phishing site to PromptFix - our AI-era take on the ClickFix scam that hides prompt injection inside a fake captcha to directly take control of

SmallJS: Smalltalk-80 that compiles to JavaScript

SmallJS is a free and open source implementation of the elegant and powerful Smalltalk-80 (ST) language. It compiles to JavaScript (JS) that runs in modern browsers or in Node.js. SmallJS is file based, not image based, so you can develop in your favorite IDE. The default setup is for Visual Studio Code, with ST syntax coloring and step debugging! You code separately from the SmallJS base libraries (image) and only the parts you use are imported automatically when running your app. SmallJS is

Everything I know about good API design

Most of what modern software engineers do involves APIs: public interfaces for communicating with a program, like this one from Twilio. I’ve spent a lot of time working with APIs, both building and using them. I’ve written public APIs for third-party developers, private APIs for internal use (or consumption by a single frontend page), REST and GraphQL APIs, and even non-network interfaces like the ones for command-line tools. Like designing good software systems, I think much of the advice floa

Topics: api apis like use users

Marshal madness: A brief history of Ruby deserialization exploits

Documenting the evolution of exploitation techniques serves a crucial purpose in security engineering: it helps us understand not just individual vulnerabilities but the systemic patterns that resist conventional fixes. The story of deserialization exploits in Ruby’s Marshal module offers a uniquely well-documented case study of this phenomenon. That is, a decade-long cycle of patches and bypasses that reveals the futility of addressing symptoms rather than root causes. This history matters bec

Setting serial baud rate on ESP-IDF does nothing

What are we talking about? This line of code that appears in pretty much every single Arduino sketch/project: Serial.begin(115200); This line of code is everywhere - a quick search on GitHub finds over 450,000 instances of it. GitHub Search I started to question this when I was testing out my new boards. I was streaming audio from the board and noticed that the rate I was receiving data at bore no relation to the baud rate I was setting. Audio testing If we look closely at the image, we ca

Physics of badminton's new killer spin serve

Serious badminton players are constantly exploring different techniques to give them an edge over opponents. One of the latest innovations is the spin serve, a devastatingly effective method in which a player adds a pre-spin just before the racket contacts the shuttlecock (aka the birdie). It's so effective—some have called it "impossible to return"—that the Badminton World Federation (BWF) banned the spin serve in 2023, at least until after the 2024 Paralympic Games in Paris. The sanction wasn

Agentic Browser Security: Indirect Prompt Injection in Perplexity Comet

This is the first post in a series about security and privacy challenges in agentic browsers. This vulnerability research was conducted by Artem Chaikin (Senior Mobile Security Engineer), and was written by Artem and Shivan Kaul Sahib (VP, Privacy and Security). The threat of instruction injection At Brave, we’re developing the ability for our in-browser AI assistant Leo to browse the Web on your behalf, acting as your agent. Instead of just asking “Summarize what this page says about London f

Blade Runner 2099 will reportedly be released next year on Prime Video

Amazon's Blade Runner limited series finally has a release window. Deadline reports that the upcoming sequel show, Blade Runner 2099, is slated for a 2026 release on Prime Video. The story at this point remains a mystery, though the title suggests it'll take place 50 years after the events of Blade Runner 2049. Ridley Scott is said to be involved in the production. It was revealed last year that Michelle Yeoh will star in the series , and according to Deadline, she'll be joined by Hunter Schafe

Bluesky blocks Mississippi due to its new age verification law

Users with Mississippi IP addresses can no longer access the Bluesky app. The decentralized social media network has explained in a post that Mississippi's new age verification law for social networks "would fundamentally change" how it operates, and it wouldn't be possible to comply with its small team and limited resources. Bluesky says that while it does follow the UK's Online Safety Act, it works very differently from Mississippi's approach to age verification. In the UK, it's only required

ArduinoOS (2017)

To get the uptime of the operating system use getElapsedMilliseconds or getElapsedTicks . Locks In order to keep your application thread safe you can use locks. With locks you can prevent an other thread to access a variable, function, ... in an unsafe state. Example for conflicting threads: void mainThread () { InitTask (thread2); while ( true ) { Serial. println ( " Thread1 " ); } } void thread2 () { while ( true ) { Serial. println ( " Thread2 " ); } } If you execute this code you will n

Converting an online game to work without any JavaScript

Topics: #development Client-side rendering has become the dominant paradigm for building web apps. But frameworks like React can lead to major JavaScript execution bottlenecks during page load. For many web developers there’s a clear solution for this: Ship less JavaScript to the browser. Whether websites have to work without any JavaScript at all is a question almost as old as the web itself. By now, the answer is clear: No, they don’t. It’s firmly established that websites should be more tha

Websites and web developers mostly don't care about client-side problems

You're using a tool with a too-generic User-Agent You're probably reading this page because you've attempted to access some part of my blog (Wandering Thoughts) or CSpace, the wiki thing it's part of. Unfortunately whatever you're using to do so has a HTTP User-Agent header value that is too generic or otherwise excessively suspicious. Unfortunately, as of early 2025 there's a plague of high volume crawlers (apparently in part to gather data for LLM training) that behave like this. To reduce th

WebR – R in the Browser

WebR - R in the Browser WebR is a version of the statistical language R compiled for the browser and Node.js using WebAssembly, via Emscripten. WebR makes it possible to run R code in the browser without the need for an R server to execute the code: the R interpreter runs directly on the user’s machine. Several R packages have also been ported for use with webR, and can be loaded in the usual way using the library() function. Warning The webR project is under active development, and the API i

Hot deal: The best XGIMI portable projector discounted for the first time!

Are you looking for a portable projector? I swear, I can no longer live without mine. It turns regular movie nights into magical moments! XGIMI makes some of the best ones; their latest and greatest is the XGIMI MoGo 4 Laser. It’s a bit on the pricier side, with a $799 full retail cost. It has just been discounted for the first time, though, so you can save $120 on it right now. Buy the XGIMI MoGo 4 Laser portable projector for $679 ($120 off) This offer is available from Amazon as a “limited t

Our Response to Mississippi's Age Assurance Law

Keeping children safe online is a core priority for Bluesky. We’ve invested a lot of time and resources building moderation tools and other infrastructure to protect the youngest members of our community. We’re also aware of the tradeoffs that come with managing an online platform. Our mission is to build an open and decentralized protocol for public conversation, and we believe in empowering users with more choices and control over their experience. We work with regulators around the world on c

Bluesky blocks Mississippi under new age verification law

is a senior tech and policy editor focused on VR, online platforms, and free expression. Adi has covered video games, biohacking, and more for The Verge since 2011. Bluesky will block access from Mississippi IP addresses in response to a new state law requiring age verification and parental consent for underage users. The decision, outlined in a blog post, will stand until courts decide the fate of the law. “Mississippi’s approach would fundamentally change how users access Bluesky,” says the

Nitro: A tiny but flexible init system and process supervisor

nitro, a tiny but flexible init system and process supervisor Overview Nitro is a tiny process supervisor that also can be used as pid 1 on Linux. There are four main applications it is designed for: As init for a Linux machine for embedded, desktop or server purposes As init for a Linux initramfs As init for a Linux container (Docker/Podman/LXC/Kubernetes) As unprivileged supervision daemon on POSIX systems Nitro is configured by a directory of scripts, defaulting to /etc/nitro (or the

Apple gets ready for AI in the enterprise with new ChatGPT configuration options

As AI technology makes its way into the enterprise, Apple is rolling out new tools that will give businesses more granular control over where and how their employees can tap into artificial intelligence. With the release of Apple’s software updates arriving in September, the tech giant is adding another option for enterprise customers: the ability to configure the use of an enterprise version of OpenAI’s ChatGPT. Apple has already seen the demand for ChatGPT for Enterprise, which OpenAI says no

Bluesky blocks service in Mississippi over age assurance law

Social networking startup Bluesky has made the decision to block access to its service in the state of Mississippi, rather than comply with a new age assurance law. In a blog post published on Friday, the company explains that, as a small team, it doesn’t have the resources to make the substantial technical changes this type of law would require, and it raised concerns about the law’s broad scope and privacy implications. Mississippi’s HB 1126 requires platforms to introduce age verification f