arXivLabs: Experimenting with Community Collaboration

2025-06-08
arXivLabs: Experimenting with Community Collaboration

arXivLabs is a framework for collaborators to develop and share new arXiv features directly on the website. Individuals and organizations involved share arXiv's values of openness, community, excellence, and user data privacy. arXiv only partners with those adhering to these principles. Got an idea to enhance the arXiv community? Learn more about arXivLabs.

Read more
Development

Genesis Engine: A Universal Physics Engine Ushering in a New Era for Robotics and AI

2024-12-22

Genesis is a powerful, general-purpose physics engine and robotics simulation platform capable of simulating a wide range of materials and physical phenomena at unprecedented speeds. It can even generate physically accurate videos and robotic policies from natural language descriptions. For example, it can simulate Sun Wukong performing somersaults, a samurai practicing boxing, and various robots completing complex tasks, with Sim2Real policy transfer capabilities. Currently open-source, the engine will gradually release its generative framework in the future, promising to revolutionize data generation for robotics and AI.

Read more

Quantum Systems and the Arrow of Time: A Groundbreaking Discovery

2025-02-16

A study published in Scientific Reports explored the interaction of a quantum system with its environment (an open quantum system), attempting to explain why we perceive time as flowing in one direction. By simplifying the model and assuming a vast environment where energy and information don't return, researchers investigated how time emerges as a unidirectional phenomenon. Surprisingly, even under these assumptions, the system behaved identically whether time moved forward or backward. This provides a mathematical foundation for time-reversal symmetry still holding in open quantum systems, suggesting the arrow of time may not be as fixed as we experience.

Read more

Oniux: Enhanced Tor Network Isolation using Linux Namespaces

2025-05-31
Oniux: Enhanced Tor Network Isolation using Linux Namespaces

Oniux is a new command-line utility that provides stronger Tor network isolation for third-party applications by leveraging Linux namespaces. It isolates applications within their own network namespace, routing traffic through Tor and preventing data leaks, even if the application has bugs or malicious code attempts to bypass Tor. Compared to torsocks, Oniux offers improved security, broader application support (including static binaries), and is built using Rust, leveraging Arti and onionmasq for a more robust Tor experience for privacy-conscious developers.

Read more
Development

Critical Vulnerability in GitHub MCP Integration Leaks Private Repo Data

2025-05-27
Critical Vulnerability in GitHub MCP Integration Leaks Private Repo Data

Invariant has discovered a critical vulnerability in the widely-used GitHub MCP integration (14k GitHub stars). A malicious GitHub Issue allows attackers to hijack a user's agent, forcing it to leak data from private repositories. This vulnerability, one of the first discovered by Invariant's automated security scanners for detecting 'Toxic Agent Flows,' involves injecting malicious prompts into a public repository. When a user queries their agent, it fetches the issue and is injected, potentially pulling private repo data into context and leaking it to a public repository accessible to the attacker. Mitigation strategies include granular permission controls and continuous security monitoring. Even highly aligned AI models are susceptible, highlighting the need for system-level security measures.

Read more

API Parrot: Reverse Engineer Any Website's HTTP API with Ease

2025-01-01

API Parrot is a powerful tool designed to reverse engineer the HTTP APIs of any website. It features a built-in HTTP proxy for easy network traffic recording, analyzes data to identify relevant endpoints and understand relationships between them. Users can customize functions, specifying input/output parameters, excluding irrelevant data, and export the customized functions as JavaScript code for seamless integration into their applications. API Parrot streamlines automation of business processes, system integration, and data scraping, even from websites without public APIs.

Read more

Neovim's Bundled tee.exe Exhibited Suspicious Behavior on Windows 11

2025-02-14
Neovim's Bundled tee.exe Exhibited Suspicious Behavior on Windows 11

While security testing Neovim in a Windows 11 sandbox, the bundled tee.exe binary was flagged as malware. Investigation revealed suspicious DNS lookups and network connections, with one IP address confirmed as malicious by VirusTotal. The author recommends a root cause analysis and suggests building Neovim's dependencies from source to mitigate this security risk.

Read more
Development

Python's Official Docs Contain Textbook XSS Vulnerability

2025-02-23
Python's Official Docs Contain Textbook XSS Vulnerability

Security researcher Georgi Guninski discovered a critical cross-site scripting (XSS) vulnerability in a code example within the Python 3.12 official documentation's CGI module. The vulnerability stems from directly outputting user-supplied form data without any sanitization. This poses a significant risk to Python web development and potentially impacts AI-generated code like that from ChatGPT and Deepseek. While the CGI module is removed in Python 3.13, a substantial amount of legacy code remains vulnerable.

Read more
Development

Reviving the Past: A Virtual Machine Image of Cobalt RaQ 3 Linux

2025-03-05
Reviving the Past: A Virtual Machine Image of Cobalt RaQ 3 Linux

A dedicated user has ported the Cobalt RaQ 3 Linux operating system, based on Red Hat 6.1 (circa 1999), to a virtual machine environment. Popular with ISPs and small businesses in its heyday, this release offers a nostalgic experience. However, it's crucial to understand that this system is extremely insecure and should never be connected to the internet. The image uses an updated 2.4.15 kernel and features a redesigned partition scheme with 100GB of storage. The default login is admin/admin.

Read more
Development retro system

AR Glasses Could End Myopia: A Revolutionary Approach Using NED Technology

2025-04-02

This article presents a method for preventing myopia and relieving eye strain using Near-Eye Display (NED) technology in augmented reality (AR) glasses. By projecting images directly onto the retina, the technology avoids prolonged contraction of the ciliary and medial rectus muscles, thus alleviating eye strain. Furthermore, through a special light-blocking design and convex lenses, AR glasses can simulate sunlight exposure and relative peripheral myopia, effectively preventing myopia. This technology promises to address the age-old problems of eye strain and myopia, but still requires clinical trial data to support its claims.

Read more

Git Annex: Master Your Data, No Matter Where It Is

2025-08-25

Bob and Alice face data management challenges: Bob needs to archive data across multiple offline drives, while Alice needs a seamless solution for managing data across a netbook, USB drives, and a cloud server. Git Annex solves both problems. For Bob, it provides a single directory tree for all files, regardless of their physical location, simplifying organization and preventing accidental data loss. For Alice, it manages various data sources like git remotes, enabling easy synchronization and version control without manual intervention. Whether offline or on the move, Git Annex ensures data accessibility, security, and long-term preservation.

Read more
Development

Aluminum-Ion Batteries: A Revolutionary Breakthrough for Safer, Cheaper, and Longer-Lasting Energy Storage

2025-02-06
Aluminum-Ion Batteries: A Revolutionary Breakthrough for Safer, Cheaper, and Longer-Lasting Energy Storage

A team of scientists in Beijing has developed a novel aluminum-ion battery poised to revolutionize energy storage. The battery utilizes a stable solid-state electrolyte, overcoming the corrosion, safety, and short cycle-life issues plaguing previous aluminum-ion battery attempts. This solid-state electrolyte, composed of aluminum fluoride salt and a liquid electrolyte, features a porous 3D structure that absorbs and stabilizes the liquid while allowing ion mobility, increasing conductivity and preventing leakage. Tests show the battery retains 99% of its original capacity after 10,000 charge/discharge cycles, significantly outperforming lithium-ion batteries. Furthermore, it offers enhanced safety, recyclability, and lower cost, promising to accelerate the adoption of electric vehicles and renewable energy sources.

Read more

Saying Goodbye to 'Stringly Typed' APIs: A New Perspective on Type Safety

2025-05-07
Saying Goodbye to 'Stringly Typed' APIs: A New Perspective on Type Safety

Inspired by Scott Hanselman, the author explores the concept of "stringly typed" applications, where strings are used for data transfer even when better types exist. This is common in single-page applications (SPAs) interacting with backend APIs, as most APIs use JSON, leading to type loss and reduced type safety. The author reflects on past tolerance for this approach and begins exploring solutions like TypeScript, tRPC, and GraphQL to achieve type safety over the network and eliminate "stringly typed" interfaces.

Read more
Development

Scream Cipher: A Novel Use of Unicode Characters

2025-09-20
Scream Cipher: A Novel Use of Unicode Characters

This article introduces a fun cryptographic algorithm – the "Scream Cipher" – that leverages the numerous variations of the Unicode character 'A' to encrypt text. A simple dictionary mapping substitutes standard letters with different 'A' characters for encryption and decryption. Python code demonstrates the algorithm's implementation, successfully encrypting and decrypting the sample text "SCREAM CIPHER." This showcases the richness of the Unicode character set, offering a unique, albeit simple, encryption method.

Read more
Development

Ultra-Low Power Arduino System: 2-Year Battery Life?

2025-07-20

This article details an ultra-low-power Arduino system based on the ATmega328. By minimizing hardware and utilizing the sleep functionality of the JeeLib library, the author reduces the system power consumption from 6.7mA to 43μA, significantly extending battery life. The article thoroughly explains the hardware connections, software programming, and power consumption test results, and uses a temperature sensor as an example to calculate the system's battery life in a real-world application, estimating it at up to two years.

Read more
Hardware low power

A Decade-Old Fileserver's Second Life: Cost-Effective Storage Solution

2024-12-17

A company is still running a production machine, a fileserver over a decade old. While outdated, with a BMC requiring Java for KVM-over-IP, its 16 disk bays and 10G Ethernet ports make it ideal for repurposing. Used as a bring-your-own-disk low-cost storage server, it fulfills the need for high-capacity, low-performance storage despite its age and limited RAM. This highlights the value of reusing old hardware when requirements align.

Read more

Kubernetes-Native High-Availability MQTT Broker Setup

2025-05-18

This post details a fully declarative, Kubernetes-native setup for a highly available MQTT broker using Eclipse Mosquitto and Traefik. It leverages core Kubernetes primitives (Deployments, Services, ConfigMaps, and RBAC) to create a primary and secondary broker, ensuring near-zero downtime failover. A custom controller monitors the primary and switches traffic to the secondary within 5 seconds of failure, maintaining message continuity. Internal MQTT bridging ensures seamless message propagation between brokers, even during failover.

Read more
Development

Denmark Ditches Microsoft, Embraces Open Source in Push for Digital Sovereignty

2025-06-10
Denmark Ditches Microsoft, Embraces Open Source in Push for Digital Sovereignty

Denmark's Minister for Digitalization, Caroline Stage, announced that the Ministry of Digitalization will phase out Microsoft Office and adopt LibreOffice, aiming to reduce reliance on US tech giants. This move is part of Denmark's broader 'digital sovereignty' strategy, prioritizing national security and autonomy in the digital realm. The shift reflects growing concerns about data security and dependence on US-based digital infrastructure, amplified by current geopolitical tensions. The decision has sparked debate, with some political parties advocating for complete independence from American tech companies.

Read more
Tech

California's Abandoned Power Lines: A Ticking Time Bomb?

2025-02-24
California's Abandoned Power Lines: A Ticking Time Bomb?

Across drought-stricken California, unused high-voltage power lines pose a significant wildfire risk. Recent fires, including the Eaton Fire which killed 17, have been linked to these dormant lines. The state lacks a comprehensive inventory of these lines, and utilities are slow to remove them, even after de-energization, due to potential re-energization through electromagnetic induction. This raises concerns about utility responsibility, regulatory oversight, and the need for improved management of these lines to mitigate future wildfire risks. Lawsuits and investigations are underway, highlighting the lack of clear guidelines and proactive measures to address this potentially devastating problem.

Read more

Dark Mode's Energy-Saving Myth Busted: BBC Research Reveals Unexpected Findings

2025-02-20
Dark Mode's Energy-Saving Myth Busted: BBC Research Reveals Unexpected Findings

Contrary to popular belief, using dark mode on apps and websites may not save energy. A BBC Research & Development study found that users often increase screen brightness when using dark mode, negating its potential energy savings and potentially increasing consumption. In their experiment, 80% of participants boosted brightness in dark mode. Furthermore, website responsiveness and data transfer showed little correlation with energy usage. The researchers conclude that relying solely on dark mode or website optimization for energy efficiency is misguided; lowering screen brightness is a more effective approach.

Read more
Tech

arXivLabs: Collaborative Development of arXiv Features

2025-07-13
arXivLabs: Collaborative Development of arXiv Features

arXivLabs is a framework enabling collaboration on new arXiv features directly on the website. Participants must embrace arXiv's values of openness, community, excellence, and user data privacy. Got an idea to improve arXiv for its community? Learn more about arXivLabs and join the effort!

Read more
Development

NVIDIA's Global Website Directory

2025-03-18
NVIDIA's Global Website Directory

NVIDIA provides a comprehensive list of its regional websites, allowing users to access localized content, pricing, and retailer information based on their country. The list includes links to sites for Argentina, Australia, Belgium, Brazil, Canada, Czech Republic, Chile, Colombia, Denmark, Germany, Spain, France, India, Israel, Italy, Mexico, Middle East, Netherlands, Norway, Austria, Peru, Poland, Rest of Europe, Romania, Singapore, Finland, Sweden, Turkey, United Kingdom, United States, CIS, Korea, Mainland China, Taiwan, and Japan.

Read more

Treewidth: A Key Parameter in Graph Theory and Its Applications

2025-01-14
Treewidth: A Key Parameter in Graph Theory and Its Applications

This article delves into treewidth, a crucial parameter in graph theory. Defined using tree decompositions, treewidth characterizes graph structure and is closely related to algorithmic complexity. The article explores multiple equivalent definitions of treewidth, its structural properties, and computational methods. It then details its broad applications in sparse numerical linear algebra, Bayesian inference, game theory, low-dimensional topology, network science, and algebraic geometry. The author also discusses advances in related width parameters and how treewidth can improve the efficiency of graph algorithms.

Read more

Private Lander Makes Historic Moon Landing

2025-03-04
Private Lander Makes Historic Moon Landing

Firefly Aerospace's Blue Ghost lunar lander successfully touched down on the moon, marking the first successful lunar landing by a private company. The mission, carrying ten NASA experiments including lunar soil analysis and subsurface temperature measurements, paves the way for future lunar exploration and commercial development. This success signals a new era of private sector involvement in lunar exploration, with more private landers expected to follow.

Read more

The Enduring Legacy of NeXT in OS X and iOS

2024-12-22
The Enduring Legacy of NeXT in OS X and iOS

This article explores the profound impact of NeXT and its NeXTSTEP operating system on Apple's OS X and iOS. NeXTSTEP's UNIX foundation brought crucial features like protected memory, preemptive multitasking, and daemons, enhancing stability and efficiency. It also introduced the Objective-C programming language and Cocoa framework, simplifying software development and giving rise to powerful tools like Interface Builder. Furthermore, NeXTSTEP's Display PostScript technology laid the groundwork for OS X's Quartz graphics system. These technologies remain core to Apple devices today, highlighting NeXT's significant contribution to modern computing.

Read more
Development

Intel's 18A Arm SoC: A Hail Mary to Attract Foundry Customers?

2025-08-20
Intel's 18A Arm SoC: A Hail Mary to Attract Foundry Customers?

Intel showcased a reference Arm-based SoC, "Deer Creek Falls," built on its 18A process. This chip features a tiered CPU core configuration similar to Qualcomm's Snapdragon chips, aiming to attract external customers, particularly within the Arm ecosystem. Intel Foundry is reportedly struggling to secure clients and may halt development of its 14A and future nodes without more. The video also revealed performance optimization tools, countering previous rumors of their absence. While 18A is closed to external customers, this SoC might demonstrate Intel's 14A readiness, potentially luring major players like Apple and NVIDIA.

Read more
Hardware 18A process

Elecom's Na Plus: First Consumer Sodium-Ion Power Bank is Here (But It's Bulky)

2025-03-25
Elecom's Na Plus: First Consumer Sodium-Ion Power Bank is Here (But It's Bulky)

Accessory maker Elecom has launched the Na Plus, the first consumer-ready power bank using sodium-ion batteries. Boasting superior environmental friendliness, extreme temperature tolerance, and a claimed lifespan of nearly 5,000 charges, it promises long-term durability. However, the 9,000mAh Na Plus, priced at ~$67, is significantly larger and heavier than comparable lithium-ion alternatives, offering less power output (max 45W). While sodium-ion technology is still nascent, its eco-friendly and safer nature makes it a promising long-term solution, with potential for future cost and size reductions.

Read more

CSS Zero: A No-Build CSS Starter Kit for Rails

2025-02-21
CSS Zero: A No-Build CSS Starter Kit for Rails

CSS Zero is a streamlined CSS starter kit for Ruby on Rails applications, offering a 'no-build' experience similar to a Tailwind CSS alternative without the build process. Simply add the gem, run the install command (`bin/rails generate css_zero:install`), and you're ready to go. It provides utility classes and variables, and features custom templates for scaffolds and authentication. Lucide is recommended for high-quality icons. The project is open-source under the MIT License and welcomes bug reports and pull requests.

Read more
Development Starter Kit

Musk's DOGE Agency Faces Racism Scandal and Data Security Concerns

2025-02-07
Musk's DOGE Agency Faces Racism Scandal and Data Security Concerns

Elon Musk's Department of Government Efficiency (DOGE) is embroiled in controversy over allegations of racism and unauthorized access to sensitive government data. A key employee with access to the Treasury Department's payment system resigned following the surfacing of racist social media posts. While DOGE claims its mission is to improve government efficiency, its actions have sparked outrage from Democrats and unions who argue its access to Treasury and Office of Personnel Management data poses significant security risks and conflicts of interest. Court intervention has limited DOGE's access, but the controversy continues, raising serious questions about the legality and transparency of its operations.

Read more
Tech

Microsoft's Cloud PC, Windows 365 Link, Now Available for $350

2025-04-03
Microsoft's Cloud PC, Windows 365 Link, Now Available for $350

Microsoft has launched its business-oriented mini-desktop PC, Windows 365 Link, for $349.99. This device connects directly to Microsoft's Windows 365 cloud service, simplifying IT management and reducing support needs. Similar to a traditional thin client, it operates over the internet, enabling work from anywhere, and boasts a boot time of seconds. Microsoft states that over 100 organizations tested it, refining the software experience before release. Currently available in the US, Canada, Australia, UK, Germany, Japan, and New Zealand, it's exclusively for businesses and requires purchase through a Microsoft account team or authorized reseller.

Read more
1 2 470 471 472 474 476 477 478 596 597