Cache poisoning vulnerabilities found in 2 DNS resolving apps

At least one CVE could weaken defenses put in place following 2008 disclosure.

The makers of BIND, the Internet’s most widely used software for resolving domain names, are warning of two vulnerabilities that allow attackers to poison entire caches of results and send users to malicious destinations that are indistinguishable from the real ones.

The vulnerabilities, tracked as CVE-2025-40778 and CVE-2025-40780, stem from a logic error and a weakness in generating pseudo-random numbers, respectively. They each carry a severity rating of 8.6. Separately, makers of the Domain Name System resolver software Unbound warned of similar vulnerabilities that were reported by the same researchers. The unbound vulnerability severity score is 5.6

Revisiting Kaminsky’s cache poisoning attack

The vulnerabilities can be exploited to cause DNS resolvers located inside thousands of organizations to replace valid results for domain lookups with corrupted ones. The corrupted results would replace the IP addresses controlled by the domain name operator (for instance, 3.15.119.63 for arstechnica.com) with malicious ones controlled by the attacker. Patches for all three vulnerabilities became available on Wednesday.

Read full article

Comments

Tesla profits fall 37% in Q3 despite healthy sales

A loss of regulatory credits and increased expenses didn’t help.

Tesla reported its financial results for the third quarter of 2025 this afternoon. Earlier this month, we learned that the electric vehicle manufacturer had a pretty good Q3 in terms of sales, which grew by 7.3 percent year over year and cleared out tens of thousands of cars from inventory in the process. However, that hasn’t translated into greater profitability.

Even though revenues grew by 12 percent to $28 billion compared to the same period last year, Tesla’s operating expenses grew by 50 percent. As a result, its operating margin halved to just 5.8 percent. And so its profit for the quarter fell by 37 percent to $1.4 billion.

Some growth in revenue came from its battery and solar division; this increased by 44 percent to $3.4 billion compared to Q3 2024. Services—including the Supercharger network, which is now open to an increasing number of other makes of EV—also grew, increasing by 25 percent to $3.4 billion. EV deliveries increased by 7 percent to 497,099, most of which were the Model 3 sedan and Model Y crossover. Automotive revenues grew slightly less, increasing 6 percent year over year to $21.2 billion.

Read full article

Comments

This may be the most bonkers tech job listing I’ve ever seen

Don’t even apply if you’re not a Tier 1 “A-player.”

Here’s a job pitch you don’t see often.

What if, instead of “work-life balance,” you had no balance at all—your life was your work… and work happened seven days a week?

Did I say days? I actually meant days and nights, because the job I’m talking about wants you to know that you will also work weekends and evenings, and that “it’s ok to send messages at 3am.”

Read full article

Comments

General Motors will integrate AI into its cars, plus new hands-free assist

Do we want LLMs in our cars? GM thinks we do.

General Motors held a preview event today to show the world what it’s working on. We’ve already seen some projects, like the further development of lithium manganese-rich battery technology or backup power for EVs that can power a home or support the power grid.

The most significant new announcement is that Cadillac will offer an Escalade IQ with a so-called “Level 3” conditional automated driving system in 2028. GM is referring to it as a “hands off, eyes off” system and says it will integrate advanced digital mapping, use of lidar and other systems, and advanced machine learning to handle the driving duties in a controlled environment up to 80 mph (129 km/h).

This means you can theoretically watch a movie from the driver’s seat while your car takes you down the highway to the airport. Over time, the system’s operation areas will expand to cover even more roads, making driving unnecessary in many situations—unless, of course, you like to drive.

Read full article

Comments

Health plan enrollment period is set to be horrifying for everyone this year

Some marketplace premiums could more than double. Employer-based plans are soaring.

Shock and dismay have already begun as Americans face next year’s health insurance costs—and it looks like everyone will be in for some grim numbers.

So far, much of the attention has been on the stratospheric prices that Americans might see on plans they buy from Affordable Care Act marketplaces. Critical tax credits for those plans are set to expire at the end of the year, and, on top of that, insurers have proposed a median 18 percent price increase for 2026. With the higher prices and a loss of credits, some Americans could see their monthly premiums more than double.

In an analysis last month, nonpartisan health policy group KFF estimated that, on average, ACA marketplace premiums would rise 114 percent, going from $888 in 2025 to $1,904 in 2026.

Read full article

Comments

This Ryzen 7 8745HS mini PC looks like a Bluetooth speaker

The EX1 is a small desktop computer with an AMD Ryzen Hawk Point processor and a decent range of I/O and connectivity features including a USB4, HDMI 2.1, DisplayPort 2.0, and 2.5 Gigabit Ethernet ports. It’s available from AliExpress under a cou…

The EX1 is a small desktop computer with an AMD Ryzen Hawk Point processor and a decent range of I/O and connectivity features including a USB4, HDMI 2.1, DisplayPort 2.0, and 2.5 Gigabit Ethernet ports. It’s available from AliExpress under a couple of different brand names, with prices ranging from around $480 to $950 (the […]

The post This Ryzen 7 8745HS mini PC looks like a Bluetooth speaker appeared first on Liliputing.

When sycophancy and bias meet medicine

Biased, eager-to-please models threaten health research replicability and trust.

Once upon a time, two villagers visited the fabled Mullah Nasreddin. They hoped that the Sufi philosopher, famed for his acerbic wisdom, could mediate a dispute that had driven a wedge between them. Nasreddin listened patiently to the first villager’s version of the story and, upon its conclusion, exclaimed, “You are absolutely right!” The second villager then presented his case. After hearing him out, Nasreddin again responded, “You are absolutely right!” An observant bystander, confused by Nasreddin’s proclamations, interjected, “But Mullah, they can’t both be right.” Nasreddin paused, regarding the bystander for a moment before replying, “You are absolutely right, too!”

In late May, the White House’s first “Make America Healthy Again” (MAHA) report was criticized for citing multiple research studies that did not exist. Fabricated citations like these are common in the outputs of generative artificial intelligence based on large language models, or LLMs. LLMs have presented plausible-sounding sources, catchy titles, or even false data to craft their conclusions. Here, the White House pushed back on the journalists who first broke the story before admitting to “minor citation errors.”

It is ironic that fake citations were used to support a principal recommendation of the MAHA report: addressing the health research sector’s “replication crisis,” wherein scientists’ findings often cannot be reproduced by other independent teams.

Read full article

Comments

Lenovo ThinkCentre neo 55q Gen 6 is a mini PC with Ryzen AI 200 or 300 inside

The Lenovo ThinkCentre neo 55q Gen 6 is a desktop computer small enough to be mounted to the back of a display or under a desk, measuring just 183 x 179 x 37mm (7.2″ x 7.1″ x 1.4″). As the smallest member of the new ThinkCentre neo 55…

The Lenovo ThinkCentre neo 55q Gen 6 is a desktop computer small enough to be mounted to the back of a display or under a desk, measuring just 183 x 179 x 37mm (7.2″ x 7.1″ x 1.4″). As the smallest member of the new ThinkCentre neo 55 family, it lacks some of the features found […]

The post Lenovo ThinkCentre neo 55q Gen 6 is a mini PC with Ryzen AI 200 or 300 inside appeared first on Liliputing.