Anzeige: Penetration Testing – so geht Schwachstellenaufdeckung

Der zweitägige Workshop der Golem Karrierewelt bietet eine praxisnahe Einführung in die Grundlagen des Penetration Testings, ideal für Systemadmins und Sicherheitsbeauftragte. (Golem Karrierewelt, Sicherheitslücke)

Der zweitägige Workshop der Golem Karrierewelt bietet eine praxisnahe Einführung in die Grundlagen des Penetration Testings, ideal für Systemadmins und Sicherheitsbeauftragte. (Golem Karrierewelt, Sicherheitslücke)

Despite everything, US EV sales are up 28% this year

In US, customers are buying while there are still incentives, no extra tariffs.

With all the announcements from automakers planning for more gasoline and hybrid cars in their future lineups, you'd think that electric vehicles had stopped selling. While that might be increasingly true for Tesla, everyone else is more than picking up the slack. According to analysts at Rho Motion, global EV sales are up 30 percent this year already. Even here in the US, EV sales were still up 28 percent compared to 2024, despite particularly EV-unfriendly headwinds.

Getting ahead of those unfriendly winds may actually be driving the sales bump in the US, where EV sales only grew by less than 8 percent last year, for contrast. "American drivers bought 30 percent more electric vehicles than they had by this time last year, making use of the final months of IRA tax breaks before the incentives are expected to be pulled later this year," said Charles Lester, Rho Motion data manager.

With the expected loss of government incentives and the prospect of new tariffs that will add tens of thousands of dollars to new car prices, now is probably a good time to buy an EV if you think you're going to want or need one.

Read full article

Comments

Lilbits: Google Pixel 10 could be a triple-camera phone

The folks at Android Headlines have published a series of articles showing the anticipated design of the upcoming Google Pixel 10, Pixel 10 Pro, and Pixel 10 Pro XL. For the most part the Pro phones look nearly identical to their Pixel 9 counterparts. …

The folks at Android Headlines have published a series of articles showing the anticipated design of the upcoming Google Pixel 10, Pixel 10 Pro, and Pixel 10 Pro XL. For the most part the Pro phones look nearly identical to their Pixel 9 counterparts. But there’s something different about the entry-level Pixel 10: instead of two […]

The post Lilbits: Google Pixel 10 could be a triple-camera phone appeared first on Liliputing.

Pocket Casts makes its web player free, takes shots at Spotify and AI

Cross-platform client says podcasts “belong to the people, not corporations.”

"The future of podcasting shouldn't be locked behind walled gardens," writes the team at Pocket Casts. To push that point forward, Pocket Casts, owned by the company behind WordPress, Automattic Inc., has made its web player free to everyone.

Previously available only to logged-in Pocket Casts users paying $4 per month, Pocket Casts now offers nearly any public-facing podcast feed for streaming, along with controls like playback speed and playlist queueing. If you create an account, you can also sync your playback progress, manage your queue, bookmark episode moments, and save your subscription list and listening preferences. The free access also applies to its clients for Windows and Mac.

"Podcasting is one of the last open corners of the internet, and we’re here to keep it that way," Pocket Cast's blog post reads. For those not fully tuned into the podcasting market, this and other statements in the post—like sharing "without needing a specific platform's approval" and that "podcasts belong to the people, not corporations"—are largely shots at Spotify, and to a much lesser extent other streaming services, that have sought to wrap podcasting's originally open and RSS-based nature inside proprietary markets and formats.

Read full article

Comments

X’s globe-trotting defense of ads on Nazi posts violates TOS, Media Matters says

X allegedly ignored the chosen venues in the TOS when filing “thermonuclear” lawsuits.

Media Matters for America (MMFA) has a plan to potentially defuse Elon Musk's "thermonuclear" lawsuits filed so far in three cities around the world, which accuse the nonprofit media watchdog organization of orchestrating a very costly X ad boycott.

On Monday, MMFA filed a complaint in a US district court in San Francisco, alleging that X violated its own terms of service by suing MMFA in Texas, Dublin, and Singapore. According to the TOS, MMFA alleged, X requires any litigation over use of its services to be "brought solely in the federal or state courts located in San Francisco County, California, United States."

"X Corp.’s decision to file in multiple jurisdictions across the globe is intended to chill Media Matters’ reporting and drive up costs—both of which it has achieved—and it is directly foreclosed by X’s own Terms of Service," MMFA's complaint said.

Read full article

Comments

Authors Put a Spotlight on Meta’s BitTorrent Leeching Activity

Meta’s legal battle over its alleged use of pirated books as AI training data continues to deliver new twists. Fresh allegations that Meta may have shared data with third parties while “leeching” from torrents have added a critical layer to the legal dispute. The book authors obtained permission to put a spotlight on Meta’s “leeching” activity and, in addition, requested summary judgment on copyright infringement.

From: TF, for the latest news on copyright battles, piracy and more.

meta logoIn the race to build the most capable LLM models, several tech companies sourced copyrighted content for use as training data, without obtaining permission from content owners.

Meta is among a long list of companies now being sued for this allegedly infringing activity, including a class action lawsuit filed by authors including Richard Kadrey, Sarah Silverman, and Christopher Golden. This case has a clear piracy angle, as Meta used libraries of pirated books as training material.

Meta admitted the use of these unofficial sources early on. At the same time, however, the company denied the copyright infringement allegations, noting that it would rely on a fair use defense, at least in part.

Lawsuit Takes Shape

Earlier this year, Meta tried to reduce the scope of the legal battle, requesting the court to dismiss two of the three main claims.

Meta argued that the alleged violations under the California Comprehensive Computer Data Access and Fraud Act (CDAFA) didn’t hold up. The same applied to the claim that Meta removed copyright management information (CMI), which would violate the DMCA. CMI is information that is included in a copyrighted work, which among other things can identify the copyright owner.

Notably, Meta did not request dismissal of the core copyright infringement complaint. Instead, it said it was confident that it can “debunk this meritless allegation” on summary judgment.

For reference:
Claim 1: Direct Copyright Infringement (no dismissal requested)
Claim 2: Removal of Copyright Management Information
Claim 3: Violation of CDAFA

Late last week, Federal Court Judge Vince Chhabria dismissed the CDAFA claim, as Meta requested. However, the CMI removal claim survived the motion to dismiss. While the Judge doesn’t believe that stripping copyrighted data would improve the training material, Meta may have removed it to conceal its alleged infringement.

“[P]laintiffs have adequately alleged that Meta intentionally removed CMI to conceal copyright infringement. The plaintiffs allege that Meta ‘knew that Llama was especially ‘prone’ to memorizing and generating outputs of CMI’ unless CMI was removed from its training data,” Judge Chhabria wrote.

As a result, the case continues with the CMI removal claim. In the grander scheme, however, the main copyright infringement claim is likely to be the hottest contended issue. This increasingly shifts the focus from Meta’s use of books as training data, to the alleged sharing of these books with third parties via BitTorrent.

Authors Request Partial Summary Judgment

In a heavily redacted filing, on Monday the authors moved for summary judgment. they ask the court to rule and Meta is liable for direct copyright infringement by obtaining pirated books from pirate libraries via BitTorrent.

The authors argue that the available evidence, including statements from Meta employees, makes it clear that the company pirated millions of copyrighted works.

Fair use is no defense here, the plaintiffs state, pointing out that courts have previously ruled that this type of ‘unmitigated piracy of copyrighted works’ does not quality for a fair use defense.

summarymeta

Meta could argue that the use of the pirated books as AI training data qualifies as fair use. However, the authors point out that the tech company’s alleged sharing of pirated books with other BitTorrent users, which is typical for torrent transfers, is clearly infringing.

“Even if the Court decides that the fair use analysis applies to Meta’s unmitigated piracy and use of torrenting to obtain pirated copies of Plaintiffs’ Copyrighted Books, it should nevertheless grant summary judgment to Plaintiffs under the four fair use factors regarding Meta’s decision to make available to other P2P pirates millions of copyrighted books in exchange for faster download speeds,” the authors write.

This ‘sharing with others’ element is at the center of the author’s evidence gathering process, where the alleged uploading of pirated books via BitTorrent is getting considerable attention.

The ‘Leeching’ Theory

On the same day last week that Judge Chhabria ruled on the partial motion to dismiss, he also ruled on the authors’ request to conduct additional discovery to support their core copyright infringement claims.

The authors previously alleged that Meta shared copies of pirated books with third-parties when it downloaded shadow library data via BitTorrent. Meta responded to this by stating that it avoided seeding any of the pirate library data, but that didn’t stop the authors from digging.

Because “seeding” typically refers to the state where a BitTorrent user has a complete copy of the downloaded files, the rightsholders became interested in Meta’s “leeching” activity.

Leeching refers to the state where a complete copy of a torrent is yet to be downloaded. However, due to the nature of the BitTorrent protocol, leechers may still upload bits and pieces of the files they already have to peers in the same swarm. The authors suspect that Meta may have done so.

The additional discovery includes the term “leeching” as well as many other torrent-related requests, among which the authors hope to find a smoking gun.

A New Playing Field?

While this case began with accusations that Meta used copyrighted books as training data, the torrenting activities continue to gain importance. This makes sense from the rightsholders’ perspective since it has the potential to identify direct infringement, which is less likely to be protected by fair use.

Meta, however, appears increasingly frustrated with the new developments in the case. In its response, it asked the court to limit discovery regarding the “brand new theory of ‘leeching’,” arguing that it had not been previously addressed.

“Among other things, Plaintiffs should not be permitted to introduce a brand new expert and report on a newly revealed topic of “leeching”—a term that is found nowhere in the February 2025 production or Plaintiffs’ Third Amended Complaint,” Meta wrote.

The expert Meta refers to is Dr. Choffnes who, in a sealed expert report, presumably lays out the nuances of BitTorrent and related terminology.

The authors also request additional documents and information from Meta. This includes installation, usage, and configuration logs of torrent clients. Notably, this request clearly distinguishes the seeding and leeching phases.

After hearing both parties, Judge Chhabria allowed the authors to conduct the additional discovery. Paired with yesterday’s motion for summary judgment, it’s clear that Meta’s leeching activity will stay under the spotlight as the case moves forward.

A copy of the orders and filings referenced in this article are available through Free.law’s Courtlistener.

From: TF, for the latest news on copyright battles, piracy and more.

OpenAI pushes AI agent capabilities with new developer API

New tools may help fulfill CEO’s claim that agents will “join the workforce” in 2025.

The AI industry is doing its best to will "agents"—pieces of AI-driven software that can perform multistep actions on your behalf—into reality. Several tech companies, including Google, have emphasized agentic features recently, and in January, OpenAI CEO Sam Altman wrote that 2025 would be the year AI agents "join the workforce."

OpenAI is working to make that promise into a reality. On Tuesday, OpenAI unveiled a new "Responses API" designed to help software developers create AI agents that can perform tasks independently using the company's AI models. The Responses API will eventually replace the current Assistants API, which OpenAI plans to retire in the first half of 2026.

With the new offering, users can develop custom AI agents that scan company files with a file search utility that rapidly checks company databases (with OpenAI promising not to train its models on these files) and navigate websites—similar to functions available through OpenAI's Operator agent, whose underlying Computer-Using Agent (CUA) model developers can also access to enable automation of tasks like data entry and other operations.

Read full article

Comments

Apple patches 0-day exploited in “extremely sophisticated attack”

0-day exploited by maliciously crafted Web content to break out of security sandbox.

Apple on Tuesday patched a critical zero-day vulnerability in virtually all iPhones and iPad models it supports and said it may have been exploited in “an extremely sophisticated attack against specific targeted individuals” using older versions of iOS.

The vulnerability, tracked as CVE-2025-24201, resides in Webkit, the browser engine driving Safari and all other browsers developed for iPhones and iPads. Devices affected include the iPhone XS and later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 7th generation and later, and iPad mini 5th generation and later. The vulnerability stems from a bug that wrote to out-of-bounds memory locations.

Supplementary fix

“Impact: Maliciously crafted web content may be able to break out of Web Content sandbox,” Apple wrote in a bare-bones advisory. “This is a supplementary fix for an attack that was blocked in iOS 17.2. (Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 17.2.)”

Read full article

Comments