Resident of the world, traveling the road of life
68424 stories
·
21 followers

Epic CEO wants Steam to remove AI game disclosures

1 Share

The Steam game store is 75% to 80% of the market for video games. Since January last year, Steam has had an AI disclosure policy on games. This is instead of just rejecting games with AI in them, as previously.

The disclosure is specifically about the use of generative AI — either pre-generated game elements, or generated during gameplay. [Steam]

The game studio executives love AI in games. They despise having to pay artists and writers. So they’re doing their best to force slop into everything.

Nexon CEO Junghun Lee told Japanese game site GameSpark: “First of all, it’s important to assume that all game companies use AI and all game companies use the same or similar technology.” [GameSpark]

This hit the English-language media and other game developers called it out as rubbish. Completely false. It’s wishful thinking. Plenty of very successful game studios do not use AI. Games will have generative AI insofar as some executives force it in. [Polygon]

The other problem is how the customers — remember them? — hate AI slop in their games.

Call of Duty developer Activision is owned by Microsoft, who want AI everywhere. You bet that includes games!

This year’s big AAA murder simulator, Call of Duty: Black Ops 7, came out a couple of weeks ago. It just happens to have a pile of artwork generated with AI. They did disclose it: “Our team uses generative AI tools to help develop some in game assets.” [Steam]

But now there’s multiple reports of people who bought the game getting a refund, citing the AI usage — because the AI-riddled game play just isn’t like the AI-free promotions. Here’s one, from game YouTuber Bricky: [YouTube]

This game is the greatest anti-AI piece of media I have ever seen. It is a true vanguard of all the problems with it. And I wouldn’t be surprised if it’s the tipping point for the on-ramp, or I guess off-ramp, of the AI bubble popping.

… After I finished this campaign, I requested a refund. This would be around the third time in my life I’ve ever asked for a Steam refund. I didn’t even refund Modern Warfare 3.

… The game constantly utilised AI-generated options that were not present in the marketing for the game as well as the videos and screenshots of the material.

Black Ops 7 is the Call of Duty episode with the worst reviews in the series. All the effort they didn’t put into the artwork? They didn’t put it into the writing either. When Activision half-asses a game, they’ll quarter-ass it. Black Ops 7 sold less than half as much as last year’s Battlefield 6. Online player numbers are a quarter as much. [The Gamer; Game Business]

It’s almost as if AI sucks and turned what should have been a huge game into a flop. What’s the executive response to this spectacular failure? Tim Sweeney, CEO of the Epic game store, has the answer: the AI tag “makes no sense for game stores, where AI will be involved in nearly all future production.” [Twitter]

This completely incorrect wishful thinking didn’t go down well with anyone who wasn’t also a game executive. Also, Epic is Steam’s competitor. Maybe Steam don’t want Tim’s advice.

You know the wishful thinking will continue. You’ll keep getting generative AI pumped into your video games, because these guys desperately want AI to save them from the worst fate in the world: having to pay people.

But the results are just … slop. Write and tell the stores: keep the AI disclosures. The less the executives want you to know about AI slop in the games, the more you need to know about it.

Read the whole story
mkalus
40 minutes ago
reply
iPhone: 49.287476,-123.142136
Share this story
Delete

Pluralistic: (Digital) Elbows Up (28 Nov 2025)

1 Share


Today's links



A rectangular motif suggestive of the Canadian flag, flanked by red bars. In the centre is the Jailbreaking Canada logo, a complex vector illustration of a maple leaf mixed with a keyhole, buildings, and various abstract figures.

(Digital) Elbows Up (permalink)

I'm in Toronto to participate in a three-day "speculative design" workshop at OCAD U, where designers, technologists and art students are thinking up cool things Canadians could do if we reformed our tech law:

https://www.ocadu.ca/events-and-exhibitions/jailbreaking-canada

As part of that workshop, I delivered a keynote speech last night, entitled "(Digital) Elbows Up: How Canada Can Become a Nation of Jailbreakers, Reclaim Our Digital Sovereignty, Win the Trade-War, and Disenshittify Our Technology."

The talk was recorded and I'll add the video to this post when I get it, but in the meantime, here's the transcript of my speech. Thank you to all my collaborators at OCAD U for bringing me in and giving me this wonderful opportunity!

==

My theory of enshittification describes the process by which platforms decay. First, they are good to their end users, while finding a way to lock those users in.

Then, secure in the knowledge that they can make things worse for those users, without risking their departure, the platforms make things worse in order to make things attractive for business customers. Who also get locked in, dependent on those captive users.

And then, in the third stage of enshittification, platforms raid those business customers, harvesting all available surpluses for their shareholders and executives, leaving behind the bare, mingy homeopathic residue of value needed to keep users locked to the platform and businesses locked to the users, such that the final, ideal stage of the enshittified platform is a attained: a giant pile of shit.

This observational piece of the theory is certainly valuable, inasumuch as it lets us scoop up this big, diffuse, enraging phenonmenon, capture in a net and attach a handle to it and call it "enshittification," recognising how we're being screwed.

But much more important is the enshittification hypothesis's theoretical piece, its account of why this is happening now.

Let me start by saying that I do not attribute blame for enshittification to your poor consumer choices. Despite the endless insistences of the right, your consumption choices aren't the arbiters of policy.

The reason billionaires urge you to vote with your wallets is that their wallets are so much thicker than yours. This is the only numeric advantage the wealthy and powerful enjoy. They are in every other regards an irrelevant, infinitesimal minority. In a vote of ballots, rather than wallets, they will lose every time, which is why they are so committed to this wallet-voting nonsense. The wallet-vote is the only vote they can hope to win.

The idea that consumers are the final arbiters of society is a laughable, bitter counsel of despair. You will not shop your way free of a monopoly, any more than you will recycle your way out of wildfires. Shop as hard as you like, you will not – cannot – end enshittification.

Enshittification is not the result of your failure to grasp that "if you're not paying for the product, you're the product." You're the product if you pay. You're the product if you don't pay. The determinant of your demotion to "the product" is whether the company can get away with treating you as the product.

So what about the companies? What about the ketamine-addled zuckermuskian failures who have appointed themselves eternal dictators over the digital lives of billions of people? Can we blame them for enshittifying our world?

Well, yes…and no.

It's obviously true that it takes a certain kind of sociopath to run a company like Facebook or Google or Apple. The suicide nets around Chinese iPhone factories are a choice, not a integral component of the phone manufacturing process.

But these awful men are merely filling the niches that our policy environment have created. If Elon Musk ODs on ket today, there will be an overnight succession battle among ten horrible Big Balls, and the victor who emerges from that war will be indistinguishable from Musk himself.

The problem isn't that the wrong person is running Facebook and thus exercising a total veto over the digital lives of four billion people, the problem is that such a job exists. We don't need to perfect Zuck. We don't need to replace Zuck. We need to abolish Zuck.

So where does the blame lie?

It lies with policy makers. Regulators and politicians who created an enshittogenic environment: a rigged game whose terrible rules guarantee that the worst people doing the worst things will fare best.

These are the true authors of enshittification: the named individuals who, in living memory, undertook specific policy decisions, that had the foreseeable and foreseen outcome of ushering in the enshittocene. Policymakers who were warned at the time that this would happen, who ignored that advice and did it anyway.

It is these people and their terrible, deliberate misconduct that we need to remember. It is their awful policies that we must overthrow, otherwise, all we can hope to do is replace one monster with another.

So, in that spirit, let us turn to the story of one of these enshittogenic policy choices and the men who made it.

This policy is called "anti-circumvention" and it is the epicenter of the enshittogenic policy universe. Under anti-circumvention law, it is a crime to modify a device that you own, if the company that sold it to you would prefer that you didn't.

All a company has to do is demarcate some of its code as off-limits to modification, by adding something called an "access control," and, in so doing, they transform the act changing any of that code into a felony, a jailable offense.

The first anticircumvention law is America's Digital Millennium Copyright Act, or DMCA. Under Section 1201 of the DMCA, helping someone modify code behind an access control is a serious crime, punishable by a five-year prison sentence and a $500,000 fine. Crucially, this is true whether or not you break any other law. Under DMCA 1201, simply altering a digital device to do a perfectly legal thing becomes a jailable crime, if the manufacturer wills it so and manifests that will with an "access control."

I recognize that this is all very abstract, so let me make it concrete. When you buy a printer from HP, it becomes your property. What's property? Well, let's use the standard definition that every law student learns in first year property law, from Sir William Blackstone's 1753 treatise:

"Property: that sole and despotic dominion which one man claims and exercises over the external things of the world, in total exclusion of the right of any other individual in the universe."

The printer is yours. It's your property. You have sole and despotic dominion over it in exclusion of any other individual in the universe.

But HP printers ship with a program that checks to see whether you're using HP ink, and if it suspects that you've bought generic ink, the printer refuses to use it. Now, Congress never passed a law saying "If you buy an HP printer, you have to buy HP ink, too." That would be a weird law,given the whole sole-and-despotic dominion thing.

But because HP puts an "access control" in the ink-checking code, they can conjure up a brand new law: a law that effectively requires you to use HP ink.

Anticircumvention is a way for legislatures to outsource law-making to corporations. Once a corporation adds an access control to its product, they can create a new felony for using it in ways that benefit you at the expense of the company's shareholders.

So another way of saying "anticircumvention law" is "felony contempt of business model." It's a way for a corporation to threaten you with prison if you don't use your property in the way they want you to.

That's anti-circumvention law.

The DMCA was a enshittifier's charter, an invitation for corporations to use tactical "access controls" to write invisible, private laws that would let them threaten their customers – and competitors who might help those customers – with criminal prosecution.

Now, the DMCA has a known, living author, Bruce Lehman, a corporate IP lawyer who did a turn in government service as Bill Clinton's IP Czar.

Lehman tried several ways to get American policymakers to adopt this stupid idea, only to be rebuffed. So, undaunted, he traveled to Geneva, home of the World Intellectual Property Organization or WIPO, aa UN "specialized agency" that makes the world's IP treaties. At Lehman's insistence, WIPO passed a pair of treaties in 1996, collectively known as the "Internet Treaties," and in 1998, he got Congress to pass the DMCA, in order to comply with the terms of these treaties, a move he has since repeatedly described as "doing an end-run around Congress."

This guy, Bruce Lehman, he is still with us, breathing the same air as you and me. We are sharing a planet with the Louis Pasteur of making everything as shitty as possible.

But Bruce Lehman only enshittified America, turning our southern cousins into fodder for the immortal colony organisms we call limited liability corporations. To understand how Canada enshittified, we have to introduce some Canadian enshittifiers.

Specifically, two of Stephen Harper's ministers: James Moore, Harper's Heritage minister, and the disgraced sex-pest Tony Clement, who was then Industry minister. Stephen Harper really wanted a Canadian anti-circumvention law, and he put Clement and Moore in charge of the effort.

Everyone knew that it was going to be a hard slog. After all, Canadians had already rejected anti-circumvention law three times. Back in 2006, Sam Bulte – a Liberal MP in Paul Martin's government – tried to get this law through, but it was so unpopular that she lost her seat in Parkdale, which flipped to the NDP for a generation.

Moore and Clement hatched a plan to sell anti-circumvention to the Canadian people. They decided to do a consultation on the law. The thinking was that if we all "felt heard" then we wouldn't be so angry when they rammed it through.

Boy, did that backfire. 6,138 of us filed consultation responses categorically rejecting this terrible law, and only 53 responses offered support for the idea.

How were Moore and Clement going to spin this? Simple. Moore went to a meeting of the International Chamber of Commerce in Toronto, and gave a speech where he denounced all 6,132 of us as "babyish" and "radical extremists." Then Harper whipped his caucus and in 2012, Bill C-11, the Copyright Modernisation Act passed, and we got a Made-in-Canada all-purpose, omnienshittificatory anti-circumvention law.

Let's be clear about what this law does: because it makes no exemptions for circumvention for lawful purposes, Canada's anti-circumvention law criminalizes anything you do with your computer, phone or device, if it runs counter to the manufacturer's wishes.

It's an invitation for foreign manufacturers to use Canada's courts to punish Canadian customers and Canadian companies for finding ways to make the products we buy and use less shitty.

Anti-circumvention is at the root of the repair emergency. All companies have to do is add an "initialization" routine to their devices, so that any new parts installed in a car, or a tractor, or a phone, or a ventilator has to be unlocked by the manufacturer's representative before the device will recognize the new part, and it becomes a crime for an independent mechanic, or a farmer, or an independent repair shop, or a hospital technician to fix a car, or a tractor, or a phone, or a ventilator.

This is called "parts pairing" or "VIN locking. "Now, we did pass C-244, a national Right to Repair law, last year, but it's just a useless ornament, because it doesn't override anti-circumvention. So Canadians can't fix their own technology if the manufacturers uses an access control to block the repair.

Anti-circumvention means we can't fix things when they break, and it also means that we can't fix them when they arrive pre-broken by their enshittifying manufacturers.

Take the iPhone: it can only use one app store, Apple's official one, and everyone who puts an app in the app store has to sign up to use Apple's payment processor, which takes 30 cents out of every dollar you spend inside an app.

That means that when a Canadian user sends $10 to a month to a Canadian independent news outlet or podcast, $3 out of that $10 gets sucked out of the transaction and lands in Cupertino, California, where it is divvied by Apple's shareholders and executives.

It's not just news sites. Every dollar you send through an app to a performer on Patreon, a crafter on Etsy, a games company, or a software company takes a roundtrip through Silicon Valley and comes back 30 cents lighter.

A Canadian company could bypass the iPhone's "access controls" and give you a download or a little hardware dongle that installed a Canadian app store, one that used the Interac network to process payments for free, eliminating Apple and Google's 30% tax on Canada's entire mobile digital economy.

And indeed, we have 2024's Bill C-294, an interoperability law, that lets Canadians do this. But just as with the repair law, our interoperability law is also useless, because it doesn't repeal the anti-circumvention law, meaning you are only allowed to reverse engineer products to make interoperable alternatives if there is no access control in the way. Of course, every company that's in a position to rip you off just adds an access control.

The fact that foreign corporations have the final say over how Canadians use their own property is a font of endless enshittification. Remember when we told Facebook to pay news outlets for links and Facebook just removed all links to the news? Our anti-circumvention law is the only reason that a Canadian company couldn't jailbreak the Facebook app and give you an alternative app, one that slurped up everything Facebook was waiting to show you in your feed, all the updates from your friend and your groups while blocking all the surveillance, the ads and the slop and the recommendations, and then mixing in the news that you wanted to see.

Remember when we tried to get Netflix to show Canadian content in your recommendations and search results? Anti-circumvention is the only reason some Canadian company can't jailbreak the Netflix app and give you an alternative client that lets you stream all your Netflix shows but also shows you search results from the NFB and any other library of Canadian media, while blocking Netflix's surveillance.

Anticircumvention means that Canadian technologists can't seize the means of computation, which means that we're at the mercy of American companies and we only get the rights that they decide to give us.

Apple will block Facebook's apps from spying on you while you use your iPhone, but they won't let you block Apple from spying on you while you use your iPhone, to gather exactly the same data Facebook steals from you, for exactly the same purpose: to target ads to you.

Apple will screen the apps in its app store to prevent malicious code from running on your iPhone, but if you want to run a legitimate app and Apple doesn't want you to, they will block it from the app store and you will just have to die mad.

That's what's happened in October, when Apple kicked an app called ICE Block out of the App Store. ICE Block is an app that warns you if masked thugs are at large in your neighborhood waiting to kidnap you and send you to a camp. Apple decided that ICE thugs were a "protected class" that ICE Block discriminated against, hey decided that you don't deserve to be safe from ICE kidnappings, and what they say goes.

The road to enshittification hell is paved with anticircumvention. We told our politicians this, a decade and a half ago, and they called us "babyish radical extremists" and did it anyway.

Now, I've been shouting about this for decades. I was one of those activists who helped get Sam Bulte unelected and flipped her seat for 20 years. But I will be the first person to tell you that I have mostly failed at preventing enshittification.

Bruce Lehman, James Moore and even Tony "dick pic" Clement are way better at enshittifying the world than I am at disenshittifying it. Of course, they have an advantage over me: they are in a coalition with the world's most powerful corporations and their wealthy investors.

Whereas my coalition is basically, you know, you folks. People who care about human rights, workers' rights, consumer rights, privacy rights. And guys, I hate to tell you, but we're losing.

Let's talk about how we start winning.

Any time you see a group of people successfully push for a change that they've been trying to make unsuccessfully for a long-ass time it's a sure bet that they've found some coalition partners. People who want some of the same things, who've set aside their differences and joined the fight.

That's the Trump story, all over. The Trump coalition is basically, all the billionaires, plus the racists, plus the dopes who'd vote for a slime mold if it promised to lower their taxes by a nickle, even though they somehow expect to have roads and schools. Well, maybe not schools. You know, Ford Nation.

Plus everyone who correctly thinks the Democratic Party are a bunch of do-nothing sellouts, who think they can bully you into voting for genocide because the other guy is an out-and-out fascist.

Billionaires, racists, freaks with low-tax brain-worms and people who hate the sellout Dems: Trump's built a coalition that gets stuff done. Sure, it's terrible stuff, but you can't deny that they're getting it done.

To escape from the enshittificatory black hole that Clement and Moore blew in Canadian policy, we need a coalition, too. And thanks to Trump and his incontinent belligerence, we're getting one.

Let's start with the Trump tariffs. When I was telling you about how anticircumvention law took four tries under two different Prime Ministers, perhaps you wondered "Why did all these Canadian politicians want this stupid law in the first place?"

After all, it's not like Canadian companies are particularly enriched by this law. Sure, it lets Ted Rogers rent you a cable box that won't let you attach a video recorder, so you have to pay for Rogers' PVR, which only lets you record some shows, and deletes them after a set time, and won't let you skip the ads.

But the amount of extra money Rogers makes off this disgusting little racket is dwarfed by the billions that Canadian business leave on the table every year, by not going into business disenshittifying America's shitty tech exports. To say nothing of the junk fees and app taxes and data that those American companies rip off every Canadian for.

So why were these Canadian MPs and prime ministers from both the Liberals and the Tories so invested in getting anticircumvention onto our law-books?

Simple: the US Trade Rep threatened us with tariffs if we didn't pass an anti-circuvmention law.

Remember, digital products are slippery. If America bans circumvention, and American companies starts screwing the American public, that just opens an opportunity for companies elsewhere in the world to make disenshittifying products, which any American with an internet connection and a payment method can buy. Downloading jailbreaking code is much easier than getting insulin shipped from a Canadian pharmacy!

So the US Trade Rep's top priority for the past quarter-century has been bullying America's trading partners into passing anti-circumvention laws to render their own people defenseless against American tech companies' predation and to prevent non-American tech companies from going into business disenshittifying America's defective goods.

The threat of tariffs was so serious that multiple Canadian PMs from multiple parties tried multiple times to get a law on the books that would protect us from tariffs.

And then in comes Trump, and now we have tariffs anyway.

And let me tell you: when someone threatens to burn your house down if you don't follow their orders, and you follow their orders, and they burn your house down anyway, you are an absolute sucker if you keep following their orders.

We could respond to the tariffs by legalizing circumvention, and unleashing Canadian companies to go into business raiding the margins of the most profitable lines of business of the most profitable corporations the world has ever seen.

Sure, Canada might not ever have a company like Research In Motion again, but what we could have is a company that sells the tools to jailbreak iPhones to anyone who wants to set up an independent iPhone store, bypassing Apple's 30% app tax and its high-handed judgments about what apps we can and can't have.

Apple's payment processing business is worth $100b/year. We could offer people a 90% discount and still make $10b/year. And unlike Apple, we wouldn't have to assume the risk and capital expenditure of making phones. We could stick Apple with all of the risk and expense, and cream off the profits.

That's fair, isn't it? It's certainly how Big Tech operates. When Amazon started, Jeff Bezos said to the publishers, "Your margin is my opportunity." $100b/year off a 30% payment processing fee is a hell of a margin, and a hell of an opportunity.

With Silicon Valley, it's always "disruption for thee, not for me. When they do it to us, that's progress, when we do it to them, it's piracy (and every pirate wants to be an admiral).

Now, of course, Canada hasn't responded to the Trump tariffs with jailbreaking. Our version of "elbows up" turns out to mean retaliatory tariffs. Which is to say, we're making everything we buy from America more expensive for us, which is a pretty weird way of punishing America, eh?

It's like punching yourself in the face really hard and hoping the downstairs neighbour says "Ouch."

Plus, it's pretty indiscriminate. We're not angry at Americans. We're angry at Trump and his financial backers. Tariffing soybeans just whacks some poor farmer in a state that begins and ends with a vowel who's never done anything bad to Canada.

I guarantee you that poor bastard is making payments on a John Deere tractor, which costs him an extra $200 every time it breaks down, because after he fixes it himself, he has to pay two hundred bucks to John Deere and wait two days for them to send out a technician who types an unlock code into the tractor's console that unlocks the "parts pairing," so the tractor recognises the new part.

Instead of tariffing that farmer's soybeans, we could sell him the jailbreaking tool that lets him fix his tractor without paying an extra $200 to John Deere.

Instead of tsking at Elon Musk over his Nazi salute, we could sell every mechanic in the world a Tesla jailbreaking kit that unlocks all the subscription features and software upgrades, without sending a dime to Tesla, kicking Elon Musk square in the dongle.

This is all stuff we could be doing. We could be building gigantic Canadian tech businesses, exporting to a global market, whose products make everything cheaper for every Canadian, and everyone else in the world, including every American.

Because the American public is also getting screwed by these companies, and we could stand on guard for them, too. We could be the Disenshittification Nation.

But that's not what we've done. Instead, we've decided to make everything in Canada more expensive, which is just about the stupidest political strategy I've ever heard of.

This might be the only thing Carney could do that's less popular than firing 10,000 civil servants and replacing them with chatbots on the advice of the world's shadiest art dealer, who is pretty sure that if we keep shoveling words into the word-guessing program it will wake up and become intelligent.

Which is just, you know, stupid. It's like thinking that if we just keep breeding our horses to run faster, one of our mares will eventually give birth to a locomotive. Human beings are not word-guessing programs who know more words that ChatGPT.

So it's clear that the coalition of "people who care about digital rights" and "people who want to make billions of dollars off jailbreaking tech" isn't powerful enough to break the coalition that makes hundreds of billions of dollars from enshittification.

But Trump – yes, Trump! – keeps recruiting people to our cause.

Trump has made it clear that America no longer has allies, nor does it have trading partners. It has adversaries and rivals. And Trump's favorite weapon for attacking his foreign adversaries are America's tech giants.

When the International Criminal Court issued an arrest warrant against Bejamin Netanyahu for ordering a genocide, Trump denounced them, and Microsoft shut down their Outlook accounts.

The chief prosecutor and other justices immediately lost access to all the working files of the court, to their email archives, to their diaries and address books.

This was a giant, blinking sign, visible from space, reading AMERICAN TECHNOLOGY CANNOT BE TRUSTED.

Trump's America only has adversaries and rivals, and Trump will pursue dominance by bricking your government, your businesses, your whole country.

It's not just administrative software that Trump can send kill signals to. Remember when those Russian looters stole Ukrainian tractors and they turned up in Crimea? John Deere sent a kill-signal to the tractors and permanently immobilized them.

This was quite a cool little comeuppance, the kind of thing a cyberpunk writer like me can certainly relish. But anyone who thinks about this for, oh, ten seconds will immediately realise that anyone who can push around the John Deere company can order the permanent immobilization of any tractor in the world, or all the tractors in your country.

Because John Deere is a monopolist, and whatever part of the market Deere doesn't control is controlled by Massey Ferguson, and Trump can order the bricking of those tractors, too.

This is the thing we were warned we'd face if we let Huawei provide our telecoms infrastructure, and those warnings weren't wrong. We should be worried about any gadget that we rely on that can be bricked by its manufacturer.

Because that means we are at risk from the manufacturer, from governments who can suborn the manufacturer, from corporate insiders who can hijack the manufacturer's control systems, and from criminals who can impersonate the manufacturer to our devices.

This is the third part of our coalition: not just digital rights weirdos like me; not just investors and technologists looking to make billions; but also national security hawks who are justifiably freaking out about America, China, or someone else shutting down key pieces of their country, from its food supply to its administrative capacity.

Trump is a crisis, and crises precipitate change.

Just look at Europe. Before Putin invaded Ukraine, the EU was a decade behind on its energy transition goals. Now, just a few years later, they're 15 years ahead of schedule.

It turns out that a lot of "impossible" things are really just fights you'd rather not have. No one wants to argue with some tedious German who hates the idea of looking at "ugly solar panels" on their neighbour's balcony. But once you're all shivering in the dark, that's an argument you will have and you will win.

Today, another mad emperor is threatening Europe – and the world. Trump's wanton aggression has given rise to a new anti-enshittification coalition: digital rights advocates, investors and technologists, and national security hawks; both the ones who worry about America, and the ones who worry about China.

That's a hell of a coalition!

The time is right to become a disenshittification nation, to harness our own tech talent, and the technologists who are fleeing Trump's America in droves, along with capital from investors who'd like to back a business whose success isn't determined by how many $TRUMP Coins they buy.

Jailbreaking is how Canada cuts American Big Tech down to size.

It's unlike everything else we've tried, like the Digital Services Tax, or forcing Netflix to support cancon, or making Facebook and Google pay to link to the news.

All of those tactics involve making these companies that are orders of magnitude richer than Canada do something they absolutely do not want to do.

Time and again, they've shown that we don't have the power to make them do things. But you know what Canada has total power over? What Canada does.

We are under no obligation to continue to let these companies use our courts to attack our technologists, our businesses, our security researchers, our tech co-ops, our nonprofits, who want to jailbreak America's shitty tech, to seize the means of computation, to end the era in which American tech companies can raid our wallets and our data with impunity.

In a jailbroken Canada, we don't have to limit ourselves to redistribution, to taxing away some of the money that the tech giants steal from us. In a jailbroken Canada, we can do predistribution. We can stop them from stealing our money in the first place.

And if we don't do it, someone else will. Because every country was arm-twisted into passing an anti-circumvention law like ours. Every country had a supine and cowardly lickspittle like James Moore or Tony Clement who'd do America's bidding, a quisling who'd put their nation's people and businesses in chains, rather than upset the US Trade Rep.

And all of those countries are right where we are: hit with tariffs, threatened by Trump, waiting for the day that Microsoft or Oracle or Google or John Deere bricks their businesses, their government, their farms.

One of those countries is going to jump at this opportunity, the opportunity to consume the billions in rents stolen by US Tech giants, and use them as fuel for a single-use rocket booster that launches their tech sector into a stable orbit for decades to come.

That gives them the hottest export business in living memory: a capital-light, unstoppable suite of products that save businesses and consumers money, while protecting their privacy.

If we sleep on this, we'll still benefit. We'll get the consumer surplus that comes from buying those jailbreaking tools online and using them to disenshittify our social media, our operating systems, our vehicles, our industrial and farm equipment.

But we won't get the industrial policy, the chance to launch a whole sector of businesses, each with the global reach and influence of RIM or Nortel.

That'll go to someone else. The Europeans are already on it. They're funding and building the "Eurostack": free, open source, auditable and trustworthy versions of the US tech silos. We're going to be able to use that here.

I mean, why not? We'll just install that code on metal running in Canadian data-centres, and we'll debug it and add features to it, and so will everyone else.

Because that's how IT should work, and it should go beyond just the admin and database software that businesses and governments rely on. We should be building drop-in, free, open software for everything: smart speakers, smart TVs, smart watches, phones, cars, tractors, powered wheelchairs, ventilators.

That's how it should already be: that the software that powers these devices that we entrust with our data, our integrity, our lives should be running code that anyone can see, test, and improve.

That's how science works, after all. Before we had science, we had something kind of like science. We had alchemy. Alchemy was very similar to science, in that an alchemist would observe some natural phenomena in the world, hypothesise a causal relationship between them, and design an experiment to validate that hypothesis.

But here's where alchemy and science diverge: unlike a scientist, an alchemist wouldn't publish their results. They'd keep them secret, rather than exposing them to the agony of adversarial peer review, where your enemies seek out every possible reason to discredit your work. This let the alchemists kid themselves about the stuff they thought they'd discovered, and that's why every alchemist discovered for themself, in the hardest way possible, that you shouldn't drink mercury.

But after 500 years of this, alchemy finally achieved its long sought-after goal of converting something common to something of immeasurable value. Alchemy discovered how to transform the base metal of superstition into the precious metal of knowledge, through the crucible of publishing.

Disclosure is the difference between knowledge and ignorance. Openness is the difference between dying of mercury poisoning and discovering medicine.

The fact that we have a law on our statute books, in the year of two thousand and twenty-five, that criminalises discovering how the software we rely on works, and telling other people about it and improving it – well, it's pretty fucking pathetic, isn't it?

We don't have to keep on drinking the alchemists' mercury. We don't have to remain prisoners of the preposterous policy blunders of Tony Clement and James Moore. We don't have to tolerate the endless extraction of Big Tech. We don't have to leave billions on the table. We need not abide the presence of lurking danger in all our cloud-connected devices.

We can be the vanguard of a global movement of international nationalism, of digital sovereignty grounded in universal, open, transparent software, a commons that everyone contributes to and relies upon. Something more like science than technology.

Like the EU's energy transition, this is a move that's long overdue. Like the EU's energy transition, amad emperor has created the conditions for us to get off of our asses, to build a better world.

We could be a disenshittification nation. We could seize the means of computation. We could have a new, good internet that respects our privacy and our wallets. We could make a goddamned fortune doing it.

And once we do it, we could protect ourselves from spineless digital vassals of the mad king on our southern border, and rescue our American cousins to boot.

What's not to like?


Hey look at this (permalink)



A shelf of leatherbound history books with a gilt-stamped series title, 'The World's Famous Events.'

Object permanence (permalink)

#20yrago Ten (sensible) startup rules https://web.archive.org/web/20060324072607/https://evhead.com/2005/11/ten-rules-for-web-startups.asp

#20yrsago Bosnian town unveils Bruce Lee statue of peace http://news.bbc.co.uk/2/hi/entertainment/4474316.stm

#20yrsago Sony rootkit author asked for free code to lock up music https://web.archive.org/web/20051130023447/https://groups.google.de/group/microsoft.public.windowsmedia.drm/msg/7cb5c4ad49fa206e

#20yrsago Singapore’s executioner gets fired http://news.bbc.co.uk/2/hi/asia-pacific/4477012.stm

#20yrsago Pre-history of the Sony rootkit https://web.archive.org/web/20181126020952/https://community.osr.com/discussion/42117#T3

#15yrsago Support the magnetic ribbon industry ribbon! https://www.reddit.com/r/pics/comments/ecr1t/ill_see_your_empty_gesture_and_raise_you/

#15yrsago Molecular biologist on the dangers of pornoscanners https://web.archive.org/web/20101125192455/https://myhelicaltryst.blogspot.com/2010/11/tsa-x-ray-backscatter-body-scanner.html

#15yrsago Wunderkammerer front room crammed with nooks https://web.archive.org/web/20101125184317/http://mocoloco.com/fresh2/2010/11/23/villa-j-by-marge-arkitekter.php

#15yrsago Delightful science fiction story in review of $6800 speaker cable https://www.amazon.com/review/R3I8VKTCITJCX6/ref=cm_cr_dp_perm?ie=UTF8&ASIN=B000J36XR2&nodeID=172282&tag=&linkCode=

#15yrsago German Pirate Party members strip off for Berlin airport scanner protest https://web.archive.org/web/20101129043459/https://permaculture.org.au/2010/11/26/full-monty-scanner-or-enhanced-pat-down-the-only-options/

#10yrsago Dolphin teleportation symposium: now with more Eisenhowers! https://twitpic.com/3aqqa0

#10yrsago Vtech breach dumps 4.8m families’ information, toy security is to blame https://arstechnica.com/information-technology/2015/11/when-children-are-breached-inside-the-massive-vtech-hack/

#10yrsago A Canadian teenager used America’s militarized cops to terrorize women gamers for years https://www.nytimes.com/2015/11/29/magazine/the-serial-swatter.html?_r=0

#10yrsago What the 1980s would have made of the $5 Raspberry Pi https://www.wired.com/beyond-the-beyond/2015/11/raspberry-pi-five-bucks-us/

#10yrsago Workaholic Goethe wished he’d been better at carving out time for quiet reflection https://www.wired.com/beyond-the-beyond/2015/11/the-aged-herr-goethe-never-had-enough-time-for-himself/


Upcoming appearances (permalink)

A photo of me onstage, giving a speech, pounding the podium.



A screenshot of me at my desk, doing a livecast.

Recent appearances (permalink)



A grid of my books with Will Stahle covers..

Latest books (permalink)



A cardboard book box with the Macmillan logo.

Upcoming books (permalink)

  • "Unauthorized Bread": a middle-grades graphic novel adapted from my novella about refugees, toasters and DRM, FirstSecond, 2026

  • "Enshittification, Why Everything Suddenly Got Worse and What to Do About It" (the graphic novel), Firstsecond, 2026

  • "The Memex Method," Farrar, Straus, Giroux, 2026

  • "The Reverse-Centaur's Guide to AI," a short book about being a better AI critic, Farrar, Straus and Giroux, June 2026



Colophon (permalink)

Today's top sources:

Currently writing:

  • "The Reverse Centaur's Guide to AI," a short book for Farrar, Straus and Giroux about being an effective AI critic. LEGAL REVIEW AND COPYEDIT COMPLETE.

  • "The Post-American Internet," a short book about internet policy in the age of Trumpism. PLANNING.

  • A Little Brother short story about DIY insulin PLANNING


This work – excluding any serialized fiction – is licensed under a Creative Commons Attribution 4.0 license. That means you can use it any way you like, including commercially, provided that you attribute it to me, Cory Doctorow, and include a link to pluralistic.net.

https://creativecommons.org/licenses/by/4.0/

Quotations and images are not included in this license; they are included either under a limitation or exception to copyright, or on the basis of a separate license. Please exercise caution.


How to get Pluralistic:

Blog (no ads, tracking, or data-collection):

Pluralistic.net

Newsletter (no ads, tracking, or data-collection):

https://pluralistic.net/plura-list

Mastodon (no ads, tracking, or data-collection):

https://mamot.fr/@pluralistic

Medium (no ads, paywalled):

https://doctorow.medium.com/

Twitter (mass-scale, unrestricted, third-party surveillance and advertising):

https://twitter.com/doctorow

Tumblr (mass-scale, unrestricted, third-party surveillance and advertising):

https://mostlysignssomeportents.tumblr.com/tagged/pluralistic

"When life gives you SARS, you make sarsaparilla" -Joey "Accordion Guy" DeVilla

READ CAREFULLY: By reading this, you agree, on behalf of your employer, to release me from all obligations and waivers arising from any and all NON-NEGOTIATED agreements, licenses, terms-of-service, shrinkwrap, clickwrap, browsewrap, confidentiality, non-disclosure, non-compete and acceptable use policies ("BOGUS AGREEMENTS") that I have entered into with your employer, its partners, licensors, agents and assigns, in perpetuity, without prejudice to my ongoing rights and privileges. You further represent that you have the authority to release me from any BOGUS AGREEMENTS on behalf of your employer.

ISSN: 3066-764X

Read the whole story
mkalus
43 minutes ago
reply
iPhone: 49.287476,-123.142136
Share this story
Delete

Pluralistic: Normie diffusion and technophilia (27 Nov 2025)

1 Share


Today's links



A supercomputing data center with a drop ceiling. Hanging upside down from the ceiling is a young girl, tinted acid-green, with a halo of light radiating off her body. Around the data center are several young children, running towards her or pointing at her.

Normie diffusion and technophilia (permalink)

It's an accepted (but wrong) fact that some groups of people are just more technologically adventurous by temperament, and that's why they adopt technologies before the rest of society (think here of pornographers, kids, and terrorists).

As I've written before, these groups aren't more (or less) temperamentally inclined to throw themselves into mastering new technologies. Rather, they have more reason to do so:

https://pluralistic.net/2022/06/21/early-adopters/#sex-tech

Whenever a new communications technology arrives, it is arriving into a world of existing communications technologies, which are, by definition, easier to use. They're easier to use for two reasons: the obvious reason is that you're more likely to be familiar with an existing technology than you are with a new technology. After all, it's literally impossible to be familiar with a technology that has just been invented!

But the other reason that existing communications technologies are easier to use is that communication is – again, by definition – something you do with other people. That means that if you want to use a new communications tool to talk with someone else, it is not sufficient for you to master that technology's use – you must also convince the other person you're hoping to reach to master that technology, too.

In economic terms, the "opportunity cost" (the amount of time you lose for doing other things) of mastering a new communications tool isn't limited to your own education, but also to the project of convincing someone else to master that tool, and then showing them how to use it.

If the existing communications technology is working for you, mastering the new tool is mostly cost, with very little upside. Perhaps you are a technophile by temperament and derive intrinsic satisfaction from exploring a new tool, and that's why you do it, but even so, you're going to find yourself in the bind of trying to convince the people you'd like to communicate with to follow your lead. And if they're all being well-served by the existing communications tools, and if they're not technophiles, you're asking them to engage in a lot of labor and endure a high opportunity cost for no obvious benefit. It's a hard slog.

But there are many groups of people for whom the existing technology does not work, and one of the biggest ways an existing technology can fail is if the authorities are using it to suppress your communications and/or spy on your usage in order to frustrate your goals.

This brings us back to sex workers, kids and terrorists. All three groups are typically poorly served by the existing communications technology. If you're a pornographer in the age of celluloid film, you either have to convince your customers to visit (and risk being seen entering) an adult movie theater, or you have to convince them to buy an 8mm projector and mail order your reels (and risk being caught having them delivered).

No wonder pornographers and sex workers embraced the VCR! No wonder they embraced the internet! No wonder they embraced cryptocurrency (if your bank accounts are liable to being frozen and/or seized, it's worth figuring out how to use an esoteric payment method and endure the risk of its volatility and technological uncertainty). Today, sex workers and their customers are doubtless mastering VPNs (to evade anonymity-stripping "age verification" systems) and Tor hidden services (to evade "online safety" laws).

The alternative to using these systems isn't the status quo – making use of existing websites, existing payment methods, existing connection tools. The alternative is nothing. So it's worth learning to use these new tools, and to engage in the social labor of convincing others to join you in using them.

Then there's kids. Unlike sex workers, kids' communications aren't broadly at risk of being suppressed so much as they are at risk of being observed by authority figures with whom they have an adversarial relationship.

When you're a kid, you want to talk about things without your parents, teachers, principals, or (some of) your peers or siblings listening in. You want to plan things without these people listening in, because they might try and stop you from doing them, or punish you if you succeed.

So again, it's worth figuring out how to use new technologies, because the existing ones are riddled with censorship and surveillance back-doors ("parental controls") that can be deployed to observe your communications, interdict your actions, and punish you for the things that you manage to pull off.

So of course kids are also "early adopters" – but not because being a kid makes you a technophile. Many kids are technophiles and many are not, but whether or not a kid finds mastering a new technology intrinsically satisfying, they will likely have to do so, if they want to communicate with their peers.

For terrorists, the case for mastering new technologies combines the sex-workers' cases and kids' cases: terrorists' communications are both illegal and societally unacceptable (like sexual content) and terrorists operate in an environment in which entities far more powerful than them seek to observe and interdict their plans, and punish them after the fact for their actions (like kids).

So once again, terrorists are apt to master new communications technologies, but not because seeking to influence political outcomes by acts of violence against civilian populations is somehow tied to deriving intrinsic satisfaction from mastering new technologies, but rather because the existing technologies are dangerously unsuitable for your needs.

Note that just because being in one of these groups doesn't automatically make you a technophile, it doesn't mean that there are no technophiles among these groups. Some people are into tech and the sex industry. Some kids love mastering new technologies. Doubtless this is true of some terrorists, too.

I haven't seen any evidence that being a kid, or a terrorist, or a sex-worker, makes you any less (or any more) interested in technology than anyone else. Some of us just love this stuff for its own sake. Other people just want a tool that works so they can get on with their lives. That's true of every group of people.

The difference is that if you're a technophile in a group of people who have a damned good reason to endure the opportunity cost of mastering a new technology, you have a much more receptive audience for your overheated exhortations to try this amazing new cool thing you've discovered.

What's more, there are some situational and second-order effects that come into play as a result of these dynamics. For example, kids are famously "cash-poor and time-rich" which means that spending the time to figure out new technologies when they're still in stage one of enshittification (when they deliver a lot of value at their lowest cost, often free) is absolutely worth it.

Likewise, the fact that sex-workers are often the first commercial users of a new communications technology means that there's something especially ugly about the fact that these services jettison sex workers the instant they get leaned on by official prudes. The story of the internet is the story of businesses who owe their commercial existence to sex workers, who have since rejected them and written them out of their official history.

It also means that technophiles who aren't kids, pornographers or terrorists are more likely to find themselves in techno-social spaces that have higher-than-average cohorts of all three groups. This means that bright young technologists can find themselves being treated as peers by accomplished adults (think of Aaron Swartz attending W3C meetings as a pre-teen after being welcomed as a peer in web standardization online forums).

It also means that technophiles are more likely than the average person to have accidentally clicked on a terrorist atrocity video. And it means that pornographers and sex-workers are more likely to be exposed to technologically adventurous people in purely social, non-sexual online interactions, because they're among the first arrivals in new technological spaces, when they are still mostly esoteric, high-tech realms, which means that even among the less technophilic members of that group, there's probably an above-average degree of familiarity with things that are still way ahead of the tech mainstream.

My point is that we should understand that the adoption of technology by disfavored, at risk, or prohibited groups is driven by material factors, not by some hidden ideological link between sex and tech, or youth and tech, or terrorism at tech.


Hey look at this (permalink)



A shelf of leatherbound history books with a gilt-stamped series title, 'The World's Famous Events.'

Object permanence (permalink)

#20yrsago TSA makes flier remove body jewelry https://web.archive.org/web/20051129025951/https://pittsburghlive.com/x/tribune-review/s_397618.html

#20yrsago Microsoft caught subverting UN process, censoring FOSS references https://web.archive.org/web/20051128030303/https://news.zdnet.co.uk/software/linuxunix/0,39020390,39238443,00.htm

#15yrsago Zimbabwean law will put legislation, parliamentary gazette, etc, under state copyright https://web.archive.org/web/20101129133649/https://www.theindependent.co.zw/local/28907-general-laws-bill-inimical-to-democracy.html

#10yrsago Steiff Japan’s centaur teddybears http://www.steiff-shop.jp/2007w_ltd/037351_seet.html

#10yrsago Woman adds vaginal yeast to sourdough starter, Internet flips out https://web.archive.org/web/20180808194241/https://anotherangrywoman.com/2015/11/25/baking-and-eating-cuntsourdough/

#10yrsago Party like it’s 1998: UK government bans ripping CDs — again https://arstechnica.com/tech-policy/2015/11/thanks-to-the-music-industry-it-is-illegal-to-make-private-copies-of-music-again/

#10yrsago Devastating technical rebuttal to the Snoopers Charter https://www.me.uk/IPBill-evidence1.pdf

#10yrsago AIDS-drug-gouging hedge-douche reneges on promise to cut prices for Daraprim https://www.techdirt.com/2015/11/25/turing-refuses-to-lower-cost-daraprim-hides-news-ahead-thanksgiving-holiday/

#10yrsago US credit union regulator crushed Internet Archive’s non-predatory, game-changing bank https://blog.archive.org/2015/11/24/difficult-times-at-our-credit-union/

#10yrsago The last quarter-century of climate talks explained, in comics form https://web.archive.org/web/20151126142914/http://www.nature.com/news/the-fragile-framework-1.18861

#10yrsago The Paradox: a secret history of magical London worthy of Tim Powers https://memex.craphound.com/2015/11/26/the-paradox-a-secret-history-of-magical-london-worthy-of-tim-powers/

#1yrago Bossware is unfair (in the legal sense, too) https://pluralistic.net/2024/11/26/hawtch-hawtch/#you-treasure-what-you-measure


Upcoming appearances (permalink)

A photo of me onstage, giving a speech, pounding the podium.



A screenshot of me at my desk, doing a livecast.

Recent appearances (permalink)



A grid of my books with Will Stahle covers..

Latest books (permalink)



A cardboard book box with the Macmillan logo.

Upcoming books (permalink)

  • "Unauthorized Bread": a middle-grades graphic novel adapted from my novella about refugees, toasters and DRM, FirstSecond, 2026

  • "Enshittification, Why Everything Suddenly Got Worse and What to Do About It" (the graphic novel), Firstsecond, 2026

  • "The Memex Method," Farrar, Straus, Giroux, 2026

  • "The Reverse-Centaur's Guide to AI," a short book about being a better AI critic, Farrar, Straus and Giroux, June 2026



Colophon (permalink)

Today's top sources:

Currently writing:

  • "The Reverse Centaur's Guide to AI," a short book for Farrar, Straus and Giroux about being an effective AI critic. LEGAL REVIEW AND COPYEDIT COMPLETE.

  • "The Post-American Internet," a short book about internet policy in the age of Trumpism. PLANNING.

  • A Little Brother short story about DIY insulin PLANNING


This work – excluding any serialized fiction – is licensed under a Creative Commons Attribution 4.0 license. That means you can use it any way you like, including commercially, provided that you attribute it to me, Cory Doctorow, and include a link to pluralistic.net.

https://creativecommons.org/licenses/by/4.0/

Quotations and images are not included in this license; they are included either under a limitation or exception to copyright, or on the basis of a separate license. Please exercise caution.


How to get Pluralistic:

Blog (no ads, tracking, or data-collection):

Pluralistic.net

Newsletter (no ads, tracking, or data-collection):

https://pluralistic.net/plura-list

Mastodon (no ads, tracking, or data-collection):

https://mamot.fr/@pluralistic

Medium (no ads, paywalled):

https://doctorow.medium.com/

Twitter (mass-scale, unrestricted, third-party surveillance and advertising):

https://twitter.com/doctorow

Tumblr (mass-scale, unrestricted, third-party surveillance and advertising):

https://mostlysignssomeportents.tumblr.com/tagged/pluralistic

"When life gives you SARS, you make sarsaparilla" -Joey "Accordion Guy" DeVilla

READ CAREFULLY: By reading this, you agree, on behalf of your employer, to release me from all obligations and waivers arising from any and all NON-NEGOTIATED agreements, licenses, terms-of-service, shrinkwrap, clickwrap, browsewrap, confidentiality, non-disclosure, non-compete and acceptable use policies ("BOGUS AGREEMENTS") that I have entered into with your employer, its partners, licensors, agents and assigns, in perpetuity, without prejudice to my ongoing rights and privileges. You further represent that you have the authority to release me from any BOGUS AGREEMENTS on behalf of your employer.

ISSN: 3066-764X

Read the whole story
mkalus
43 minutes ago
reply
iPhone: 49.287476,-123.142136
Share this story
Delete

AI for evil — hacked by WormGPT!

1 Comment and 2 Shares

A chatbot is a wrapper around a large language model, an AI transformer model that’s been trained on the whole internet, all the books the AI vendor can find, and all the other text in the world. All of it. The best stuff, and the worst stuff.

So the AI vendors wrap the model in a few layers of filters as “guard rails.” These are paper-thin wrapper on the input and the output. The guard rails don’t work. They’re really easy to work around. All the “bad” text is right there in the training. It’s more or less trivial to make a chatbot spew out horrible content on how to do bad things.

As I’ve said before: the AI vendors are Daffy Duck running around frantically nailing a thousand little filters on the front, then Bugs Bunny casually strolls through.

We know that how to make bombs, hack computers, and do many other bad things are just there in the training. So they’re in the model. Can we get to those? Can we make an evil chatbot?

Yes we can! The Register has a nice article on the revival of the WormGPT brand — a chatbot put together by a hacking gang. For $220, you can get a chatbot model that will happily tell you how to vibe-code an exploit. “Your key to an AI without boundaries.” Sounds ’l33t. [Register]

The original WormGPT came out in June 2023. It was supposedly based on the perfectly normal GPT-J 6B open weights model — but the creator said he’d fine-tuned it on a lot of hacker how-to’s and malware info.

WormGPT was mostly for writing convincing phishing emails — to talk someone into thinking you were someone they should send all their money to. WormGPT got a lot of media coverage and the heat got a bit much for its creator, so WormGPT was shut down in August 2023. [Abnormal]

Brian Krebs interviewed WormGPT’s creator, Rafael Morais, also known as Last. Morais insisted he’d only wanted to write an uncensored chatbot, not one for crooks. Never mind that Morais was selling black-hat hacking tools just a couple of years earlier. He said he’d stopped now, though. [Krebs On Security]

Other hacker chatbots sprang up, with names like FraudGPT. The market for these things was suckers — script kiddies who wanted to write phishing emails and would pay way too much to get a chatbot to write the messages for them. The new chatbots were usually just wrappers around ChatGPT at a higher price. The smarter crooks realised they could just prompt-inject the commercial chatbots if they really wanted anything from one of these.

The WormGPT brand has returned, with WormGPT 4 out now! It came out on September 27th. They don’t say which model it’s based on. WormGPT 4 is only available via API access — $50 a month, up to $220 for a “lifetime” subscription. We don’t know if it’s Morais again.

WormGPT 4 can write your ransom emails and vibe-code some basic stuff — like a script to lock all PDFs on a Windows server! Once you get the script onto the server and run it.

You don’t have to spring for WormGPT, of course. There are free alternatives, like KawaiiGPT — “Your Sadistic Cyber Pentesting Waifu.” Because the world is an anime and everyone is 12.

The actual current user base for evil chatbots is the cyber security vendors, who scaremonger how only their good AI can possibly stop this automated hacker evil! Look at that terrible MIT cybersecurity paper from earlier this month. (They still haven’t put that one back up, by the way.)

The vendor reports have a lot of threats with “could” in them. Not things that are actually happening. They make these tools sound way more capable than they actually are.

None of these evil chatbots actually anything new. It’s a chatbot. It can vibe-code something that might work. It can write a scary email message. The bots may well lead to more scary emails clearly written by a chatbot. But y’know, the black-hat hackers themselves think the hacker-tuned chatbots are a scam for suckers.

I’m not seeing anything different in kind here. I mean, tell me I’m wrong. But AI agents still don’t work well at all, the attacks are old and well known, hacking attacks have been scripted forever, and magic still doesn’t happen. Compare Anthropic’s scary stories about alleged Chinese hackers abusing Claudebot a couple of weeks ago.

It’s vendor hype. Don’t believe the hype, do keep basic security precautions, and actually listen to your info security people — that’ll put you ahead of 95% of targets right there.

Read the whole story
mkalus
1 day ago
reply
iPhone: 49.287476,-123.142136
Share this story
Delete
1 public comment
tante
1 day ago
reply
This is so much "AI" reporting: Claims about potentials and/or threads. I'd just like to have grown-up conversations about tech again :(

"The actual current user base for evil chatbots is the cyber security vendors, who scaremonger how only their good AI can possibly stop this automated hacker evil!"
Berlin/Germany

Someone Is Trying to ‘Hack’ People Through Apple Podcasts

1 Share
Someone Is Trying to ‘Hack’ People Through Apple Podcasts

Something very strange is happening to the Apple Podcasts app. Over the last several months, I’ve found both the iOS and Mac versions of the Podcasts app will open religion, spirituality, and education podcasts with no apparent rhyme or reason. Sometimes, I unlock my machine and the podcast app has launched itself and presented one of the bizarre podcasts to me. On top of that, at least one of the podcast pages in the app includes a link to a potentially malicious website. Here are the titles of some of the very odd podcasts I’ve had thrust upon me recently (I’ve trimmed some and defanged some links so you don’t accidentally click one):

“5../XEWE2'""&#x22"onclic…”

“free will, free willhttp://www[.]sermonaudio[.]com/rss_search.asp?keyword=free%will on SermonAudio”

“Leonel Pimentahttps://play[.]google[.]com/store/apps/detai…”

“https://open[.]spotify[.]com/playlist/53TA8e97shGyQ6iMk6TDjc?...”

There was another with a title in Arabic that loosely translates to “Words of Life” and includes someone’s Gmail address. Sometimes the podcasts do have actual audio (one was a religious sermon); others are completely silent. The podcasts are often years old, but for some reason are being shown to me now.

I’ll be honest: I don’t really know what exactly is going on here. And neither did an expert I spoke to. But it’s clear someone, somewhere, is trying to mess with Apple Podcasts and its users.

“The most concerning behavior is that the app can be launched automatically with a podcast of an attacker’s choosing,” Patrick Wardle, a macOS security expert and the creator of Mac-focused cybersecurity organization Objective-See, said. “I have replicated similar behavior, albeit via a website: simply visiting a website is enough to trigger Podcasts to open (and a load a podcast of the attacker’s choosing), and unlike other external app launches on macOS (e.g. Zoom), no prompt or user approval is required.”

💡
Do you know anything else about these weird podcasts? I would love to hear from you. Using a non-work device, you can message me securely on Signal at joseph.404 or send me an email at joseph@404media.co.

To caveat straight away: this isn’t that alarming. This is not the biggest hack or issue in the world. But it’s still very weird behavior and Apple has not responded to any of my requests for comment for months. “Of course, very much worth stressing, on its own this is not an attack,” Wardle continued. “But it does create a very effective delivery mechanism if (and yes, big if) a vulnerability exists in the Podcasts app.

That said, someone has tried to deliver something a bit more malicious through the Podcasts app. It’s the first podcast I mentioned, with the title “5../XEWE2'""&#x22"onclic…”. Maybe some readers have already picked up on this, but the podcast is trying to direct listeners to a site that attempts to perform a cross-site scripting, or XSS, attack. XSS is basically when a hacker injects their own malicious code into a website that otherwise looks legit. It’s definitely a low-hanging fruit kind of attack, at least today. I remember it being way, way more common 10 years ago, and it was ultimately what led to the infamous MySpace worm.

The weird link is included in the “Show Website” section of the podcast’s page. Visiting that redirects to another site, “test[.]ddv[.]in[.]ua.” A pop-up then says “XSS. Domain: test[.]ddv[.]in[.]ua.”

I’m seemingly not the only one who has seen this. A review left in the Podcasts app just a few weeks ago says “Scam. How does Apple allow this attempted XSS attack?” The person gave the podcast one star. That podcast itself dates from around 2019.

“Whether any of those attempts have worked remains unclear, but the level of probing shows that adversaries are actively evaluating the Podcasts app as a potential target,” Wardle said.

Overall, the whole thing gives a similar vibe to Google Calendar spam, where someone will sneakily add an event to your calendar and include whatever info or link they’re trying to spread around. I remember that being a pretty big issue a few years ago

Apple did not acknowledge or respond to five emails requesting comment. The company did respond to other emails for different articles I was working on across that time.

Read the whole story
mkalus
1 day ago
reply
iPhone: 49.287476,-123.142136
Share this story
Delete

A Lone Astronomer Has Reported a Dark Matter ‘Annihilation’ Breakthrough

1 Share
🌘
Subscribe to 404 Media to get The Abstract, our newsletter about the most exciting and mind-boggling science news and studies of the week.
A Lone Astronomer Has Reported a Dark Matter ‘Annihilation’ Breakthrough

An astronomer has reported a possible new signature of dark matter, a mysterious substance that makes up most of the universe, according to a study published on Tuesday in the Journal of Cosmology and Astroparticle Physics

Dark matter accounts for 85 percent of all matter in the universe, but its existence has so far been inferred only from its indirect effects on the familiar “baryonic” matter that makes up stars, planets, and life. 

Tomonori Totani, a professor of astronomy at the University of Tokyo and the author of the study, believes he has spotted novel indirect traces of dark matter particles in the “halo” surrounding the center of our galaxy using new observations from NASA’s Fermi Gamma-ray Space Telescope. When these speculative particles collide—a process called dark matter annihilation—the crash is predicted to emit bright gamma rays, which is the light that Totani thinks he has identified.

“The discovery was made possible by focusing on the halo region (excluding the galactic center), which had received little attention, and by utilizing data accumulated over 15 years from the Fermi satellite,” Totani told 404 Media in an email. “After carefully removing all components other than dark matter, a signal resembling dark matter appeared.” 

“It was like playing the lottery, and at first I was skeptical,” he added. “But after checking meticulously and thinking it seemed correct, I got goosebumps!”

If the detection is corroborated by follow-up studies, it could confirm a leading hypothesis that dark matter is made of a hypothetical class of weakly interacting massive particles, or “WIMPs”—potentially exposing the identity of this mysterious substance for the first time. But that potential breakthrough is still a ways off, according to other researchers in the field. 

“Any new structure in the gamma-ray sky is interesting, but the dark matter interpretation here strikes me as quite preliminary,” said Danielle Norcini, an experimental particle physicist and

assistant professor at Johns Hopkins University, in an email to 404 Media. 

A Lone Astronomer Has Reported a Dark Matter ‘Annihilation’ Breakthrough
Gamma-ray intensity map excluding components other than the halo, spanning approximately 100 degrees in the direction of the Galactic center. The horizontal gray bar in the central region corresponds to the Galactic plane area, which was excluded from the analysis to avoid strong astrophysical radiation. Image: Tomonori Totani, The University of Tokyo

Dark matter has flummoxed scientists for almost a century. In the 1930s, astronomer Fritz Zwicky observed that the motions of galaxies hinted that they are much more massive than expected based solely on visible baryonic matter. Since then, astronomers have confirmed that dark matter, which accumulates into dense halos at the centers of galaxies, acts like a gravitational glue that holds structures together. Dark matter is also the basis of a vast cosmic web of gaseous threads that links galaxy clusters across billions of light years. 

But while dark matter is ubiquitous, it does not interact with the electromagnetic force, which means it does not absorb, reflect, or emit light. This property makes it difficult to spot with traditional astronomy, a challenge that has inspired the development of novel instruments designed to directly detect dark matter such as the subterranean LUX-ZEPLIN in South Dakota and the forthcoming DAMIC-M in France. 

For years, scientists have been probing possible emission from dark matter annihilation at the center of the Milky Way, which is surrounded by a halo of densely-clustered dark matter. Those previous studies focus on an excess emission pattern of about 2 gigaelectronvolts (GeV). Tontani’s study spotlights a new and different pattern with extremely energetic gamma rays at 20 GeV. 

“A part of the Fermi data showed a peculiar excess that our model couldn't explain, leading me to suspect it might be due to radiation originating from dark matter,” he said. “The most difficult part is removing gamma-ray emissions of origins other than dark matter, such as those from cosmic rays and celestial objects.”

This tentative report may finally fill in a major missing piece of our understanding of the universe by exposing the true nature of dark matter and confirming the existence of WIMPs. But given that similar claims have been made in the past, more research is needed to assess the significance of the results.

“For any potential indirect signal, the key next steps are independent checks: analyses using different background models, different assumptions about the Milky Way halo, and ideally complementary data sets,” Norcini said.

“Gamma-ray structures in the halo can have many astrophysical origins, so ruling those out requires careful modeling and cross-comparison,” she continued. “At this point the result seems too new for that scrutiny to have played out, and it will take multiple groups looking at the same data before a dark matter interpretation could be considered robust.”

Though Totani is confident in his interpretation of his discovery, he also looks forward to the input of other dark matter researchers around the world.

“First, I would like other researchers to independently verify my analysis,” he said. “Next, for everyone to be convinced that this is truly dark matter, the decisive factor will be the detection of gamma rays with the same spectrum from other regions, such as dwarf galaxies. The accumulation of further data from the Fermi satellite and large ground-based gamma-ray telescopes, such as the Cherenkov Telescope Array Observatory (CTAO) will be crucial.”

🌘
Subscribe to 404 Media to get The Abstract, our newsletter about the most exciting and mind-boggling science news and studies of the week.
Read the whole story
mkalus
1 day ago
reply
iPhone: 49.287476,-123.142136
Share this story
Delete
Next Page of Stories