❌

Normal view

Received — 11 August 2026 ⏭ Ars Technica - All

New Pass-ta-key attack reveals all the things we didn't know about passkeys

11 August 2026 at 12:30

Last week a researcher outlined what he said was a “novel attack surface” in passkeys, the new authentication paradigm that offers a more secure alternative over password-based methods. In fact, the attacks demonstrated in the post are neither novel nor unique to passkeys. This distinction is important because the research has generated confusion among end users and security professionals as they assess whether this new mechanism is truly safe to use.

The attack is called Pass-ta-key—a blending of the word passkey with the phrase “pass the key” and a nod to a plate of pasta. Arie Olshtein, a researcher at security firm Palo Alto Networks, described in a post last week how Pass-ta-key could obtain all passkeys stored in the Google Password Manager app (GPM) for Windows when it’s running on a machine infected with malware.

This came as a surprise to many people because they believed passkeys are stored exclusively in the trusted platform manager (TPM), the locked-down enclave in a hardened silicon chip that’s reserved for storing cryptographic keys and other highly sensitive information on Windows machines. If passkeys are stored in the TPM, then how was Pass-ta-key able to extract the entire set of passkeys stored by the app, they wanted to know?

Read full article

Comments

© Aurich Lawson | Getty Images

Ars Live: Ross Scott discusses the Stop Killing Games movement

10 August 2026 at 23:23

By now, any serious gamer is familiar with a favorite title becoming unplayable after a centralized online server gets shut down, or being unable to purchase and download a digitally delisted, critically acclaimed title from yesteryear. Can anything be done about this video game preservation problem?

To help answer that question, we'll be hosting a live conversation with Ross Scott, the founder of the Stop Killing Games campaign, on August 11 at 2:30 pm ET as part of the Ars Live series. As Ars' Senior Gaming Editor, I've documented countless examples of once vibrant games being left for dead by their creators.

You can watch the discussion live on YouTube when the time comes.

Read full article

Comments

© Stop Killing Games

With new open models, Meta pitches another reboot of its struggling AI strategy

10 August 2026 at 23:13

Meta has announced its intention to focus on open-weight large language models. Additionally, the company announced the release of an open model called Muse Glimmer and a promise to open the weights for Muse Spark 1.2, its more powerful model, in the next few weeks.

Alongside these announcements, Meta CEO Mark Zuckerberg published a more than 6,000-word essay outlining the company's philosophy about AI systems and governance moving forward. The essay aims to differentiate Meta from companies like OpenAI and Anthropic, which develop proprietary models and have lobbied the US government for help competing against large-scale distillation—which involves using an existing model to train a new one—or open-weight models by Chinese labs.

Read full article

Comments

© Bloomberg / Contributor | Bloomberg

Trump signs bonkers order that cuts vaccines, promotes ones that don't exist

10 August 2026 at 22:42

President Trump signed an executive order Monday that makes sweeping, unilateral changes to federal vaccine recommendations. The order aims to reduce the number of lifesaving vaccines all children are recommended to get—from 18 to 11—while also splitting them up and spacing them out over more time and more medical visits.

The vaccine changes are not backed by evidence or spurred by new findings. Rather, they are based on false anti-vaccine fearmongering about harms, including the debunked claim that they cause autism, and misinformation that multiple vaccinations can "overwhelm" children's immune systems. This false claim has also been repeatedly debunked and explained.

During a signing event at the White House on Monday afternoon, Trump falsely claimed that pediatricians "have a vaccination that looks like the size of a bottle of soda," that is "poured into a little child's body, and bad things happen in too many cases. This is an explosion; this is an epidemic," Trump said.

Read full article

Comments

© Getty | Bonnie Cash

Developer Cold Iron Studios shuts down cloud version of $60 game with no refunds

10 August 2026 at 22:26

Following its announcement in March, game developer Cold Iron Studios has shut down the servers for the cloud version of Aliens: Fireteam Elite on the Nintendo Switch. The game originally cost $30 (or $60 for an “Ultimate” version with additional content).

Cold Iron Studios hasn't offered customers refunds.

TheGamer reported that affected players are entitled to a discount for the Nintendo Switch 2 version of the game, which is a 2021 co-op, third-person shooter based on the Alien film franchise. However, that would mean paying money for a game that you have already paid money for once.

Read full article

Comments

© Cold Iron Studios/Steam

Amazon backs power plant that may become top source of US climate pollution

10 August 2026 at 21:45

Amazon’s artificial intelligence ambitions will soon be partly fueled by a natural gas-burning power plant in Texas that “could become the largest single source of climate pollution in the United States,” The New York Times reported.

These gas-burning plants are increasingly lumped into data center projects. They produce harmful pollutants, which can accelerate climate change impacts and harm public health—contributing to conditions like asthma, heart disease, lung cancer, and strokes. Some communities are demanding more stringent environmental reviews, but the Trump administration favors fast-tracking that can include skipping the permitting process entirely.

Since Elon Musk’s xAI controversially began relying on gas turbines last spring to power its biggest AI data center, Colossus, there has been public backlash to off-the-grid data centers like the one Amazon is building.

Read full article

Comments

© eric1513 | iStock / Getty Images Plus

Zuckerberg’s superyacht ignored emergency channel, failed to aid stranded boat

10 August 2026 at 21:01

Social media scuttlebutt about Mark Zuckerberg’s $300 million superyacht failing to assist stranded boaters off the coast of Alaska was partly corroborated by ship-tracking data—and eventually prompted responses from both the US Coast Guard and a spokesperson for Zuckerberg.

The incident was made public when Michael Love, a passenger aboard the replica steamship Wilderness Legacy during an Alaska cruise, posted about it on the social media platform Bluesky. The ship detoured to rescue a stranded 21-foot skiff with two women, a child and a dog, after the US Coast Guard had supposedly first radioed Zuckerberg’s superyacht, Launchpad, for help without success.

“There was near unanimous booing when the captain announced this,” Love wrote in describing the Alaska cruise passengers’ response to the lack of help from Zuckerberg’s ship.

Read full article

Comments

© Sylvain Lefevre/Getty Images

Has Ford got cheap car fever? A $25K crossover is supposedly on the way.

10 August 2026 at 18:07

Talk of the affordability crisis may be penetrating corporate boardrooms. Hot on the heels of the name and starting price for Ford's new affordable electric truck, news leaked today that the sub-$30,000 Fathom isn't the only cheap Ford in the works. According to a report at Automotive News, the automaker is working on a new entry-level crossover that will start at around $25,000, although don't expect it in showrooms until 2029.

The leak is courtesy of an unnamed Ford dealer, which, together with its peers, was shown an early prototype described as resembling a first-gen Ford Escape. The crossover is said to have both hybrid and unelectrified powertrain options, and Automotive News notes that several sources have told it that Ford will assemble a hybrid crossover at its Hermosillo plant in Mexico in 2029, alongside the Bronco Sport and Maverick.

Additionally, Ford apparently showed off a four-door Mustang, which Automotive News compares to the Porsche Panamera in terms of size and styling, albeit with a sub-$40,000 price tag (making it almost a third the price of the cheapest Panamera). And a third nugget of news—the universal electric vehicle platform that will build the Fathom will result in four other electric Ford models as well.

Read full article

Comments

© Aurich Lawson

Taylor Farms recalls jalapeño products for Salmonella amid Cyclospora outbreak

10 August 2026 at 17:37

Amid a massive Cyclospora outbreak linked to its iceberg lettuce, Taylor Farms is now recalling products containing jalapeños, which were linked last week to a large, multi-state Salmonella outbreak.

On Sunday, August 9, Taylor Farms recalled jalapeño-containing products, including diced jalapeños, dips, salsas, pico de gallo, guacamole, and pre-made salads, burritos, and sandwiches. The foods, which include both branded and unbranded products, were sold across 26 states at major retailers, including Hannaford, Kroger, Target, Trader Joe's, Walmart, and Whole Foods.

The recalled products contain recalled jalapeños from Coast Citrus Distributors, which was linked last week to a Salmonella outbreak that has infected at least 345 people across 27 states, sending at least 36 people to the hospital. No deaths have been reported.

Read full article

Comments

© Getty | Olga Yastremska

Valve slowly expands SteamOS support on non-Valve hardware

10 August 2026 at 17:01

SteamOS is continuing its slow march to fuller support on a wider variety of non-Valve hardware. This weekend's release of the SteamOS 3.8.25 Beta includes "initial gamepad support" for a few recent gaming handhelds and improved support for a few others.

Those newly supported handhelds include MSI's Claw 8 EX AI+, the extremely expensive, extremely powerful handheld built around Intel's Arc G3 processor that launched this summer. While SteamOS has long included beta support for "other AMD powered handhelds," Valve has only recently been working on offering compatibility with Intel-based handhelds like the MSI Claw line. This weekend's update suggests the company hasn't abandoned those efforts and that Intel chips aren't being left out of the SteamOS conversation.

SteamOS 3.8.25 also newly supports the controllers built into Ayaneo's Android-focused Pocket S2 and the more recently released Windows-based Konkr Fit. Valve also says the new OS offers "improved support" for older MSI Claw devices and the OneXPlayer line of portable gaming PCs.

Read full article

Comments

© Aurich Lawson | Steam

Following Epic loss, Google has started hosting rival app stores in the Play Store

10 August 2026 at 16:44

A new day has dawned in the Play Store, and it's one that Google tried very hard to avoid. The first third-party app store has arrived in Google Play as a result of the long-running antitrust lawsuit with Epic. Those in the US can now head into Google Play and download Aptoide, a game-focused store that has been available as a sideloaded client since the early days of Android.

Forcing Google to distribute third-party app stores in Google Play was one of several remedies imposed by Judge James Donato after Epic emerged victorious in 2023. The remedies also included lowering developer fees, mirroring Google Play apps in other app stores, and allowing developers to use alternative payment systems. But it was the app store stipulation that seemed to irk Google the most.

Google almost avoided this outcome when it agreed to a settlement with Epic, which was announced early this year. Under the terms, Google would certify third-party app stores to allow users to install and use them with less friction, but it would not host them in Google Play. However, Google and Epic withdrew the settlement when it appeared the court would not approve it. This Registered App Store program is still slated to launch internationally, but in the US, Google is only doing what it must to comply with the judge's orders.

Read full article

Comments

© Mateusz Slodkowski/SOPA Images/LightRocket via Getty Images

One of China's workhorse rockets just exploded in flight

10 August 2026 at 16:05

One of China's most used rockets, the Long March 7A, exploded a little more than a minute after lifting off on Monday evening, local time.

The medium-lift rocket's payload was classified, but it was believed to be a military communications satellite. The rocket's liftoff from Wenchang Space Launch Site appeared to be nominal, but publicly captured videos (such as this one) showed that the rocket's first stage exploded about 1 minute and 20 seconds into flight.

The Long March 7A rocket was developed by the China Aerospace Science and Technology Corporation and is operated by the state's space agency. As of Monday night in China, state officials have not commented on the explosion.

Read full article

Comments

© Li Zhenzhou/VCG via Getty Images

Dogs can tell if you're scared or sad

10 August 2026 at 16:00

Any dog owner would tell you that their canine companions are attuned to their humans' emotional state and respond accordingly. Scientists have performed fMRI scans on dogs and identified a specific brain region that processes happy human facial expresses, like a smile, according to a new paper published in the journal iScience. They also found that dogs can tell the difference between negative facial expressions, specifically anger, sadness, and fear.

“Humans are really good at picking up small details on the face, and so are dogs,” said co-author Raúl Hernández-Pérez of the University of Vienna. “This makes dogs very interesting. By studying their brains, we can understand what adaptations have developed to support their remarkable social and emotional understanding of humans.”

Prior behavioral studies have shown that dogs are sensitive to emotion in human faces. Dogs will, for example, choose a box their human has identified with a happy expression over one the human treats with fear or disgust. Past fMRI studies found that an area in the canine left temporal cortex showed a stronger response to human faces compared to dog faces, as well as a greater response in the caudate, hippocampus, and amygdala to human faces showing emotion versus neutral faces.

Read full article

Comments

© Laura V. Cuaya/CC BY-SA

2026 Subaru Outback review: Great interior, refined drive, divisive looks

10 August 2026 at 15:49

When station wagons headed for the same retirement home as the vinyl roof and the opera window, Subaru looked at its sensible Legacy wagon and had a different idea. Raise it a few inches, wrap the lower body in plastic cladding, name it for the Australian bush, and suburban families would drive to soccer practice while imagining themselves fording streams and climbing sand dunes.

In giving birth to the Legacy Outback in 1995, Subaru more or less created the template for the modern, adventure-minded, off-road-themed crossover. By the 2000 model year, the Outback had graduated from trim level to standalone model, and it has been paying the bulk of Subaru's bills ever since.

Today, the 2026 Outback marks a new era in the model's history. The wagon silhouette that defined six generations has given way to a sharpened two-box shape that's much more at home parked next to an upright Forester or Ascent. Tall, square, and profusely SUV-like, the new edition won't win any beauty contests, but form follows function more than ever in the Outback.

Read full article

Comments

© Jim Resnick

A researcher bought noreply.net. Companies started sending him secrets.

10 August 2026 at 15:25

Cory Solovewicz receives more unwanted emails than you. Seriously—it’s a lot more. Since December 2024, one of the domains at which the security researcher receives email has registered 401,796 messages—by his calculations that’s an average of 699.99 pings per day.

This deluge isn’t the regular flood of spam, newsletters, and unwanted deals that fill many people’s inboxes. Instead, companies and other organizations are inadvertently sending Solovewicz other people’s private information and company secrets. Over the last few years, he’s received injury reports from a city government, confirmation of people’s pizza orders, and account setup emails from a school platform. “I get service orders for people that need repairs. I get lots of test platform credentials,” says Solovewicz, a security researcher and consultant.

Solovewicz is receiving the avalanche of messages as he’s the owner of the domains noreply.us and noreply.net, which he purchased in 2020 and 2024, respectively. After originally planning to use the noreply.us domain as a catch-all email—which receives mail sent to any @ address on that domain—to filter messages and enhance his privacy, the researcher quickly noticed that other systems were sending mail to @noreply.us addresses. “I created an accidental honeypot,” Solovewicz tells WIRED. “I had no idea it was going to turn into this.”

Read full article

Comments

© Richard Drury via Getty

Peer review is overwhelmed—can it survive in the AI era?

10 August 2026 at 12:00

Jason Semprini was excited about his research on policies mandating that elementary school students receive the human papillomavirus vaccine. HPV causes most cases of cervical cancer, but counterintuitively, Semprini found that mandates don’t do that much to reduce the overall rate of cervical cancer in a population. That’s odd, but it's also not completely surprising—we know that mandating a vaccine can motivate some people to find ways to avoid it.

Semprini wrote up the study and submitted the manuscript to a journal, where it was sent out for peer review, a long-standing process through which other researchers in the field assess the validity of research and make a recommendation on whether or not it should be published. This is usually done anonymously and on a volunteer basis.

In this case, the reviewer did not share Semprini’s excitement. That may have stemmed from a misunderstanding of the study’s central message: The reviewer mistakenly thought Semprini was questioning whether the HPV vaccine itself prevents cervical cancer rather than studying the effectiveness of a policy meant to increase vaccination rates. “There’s a very big difference there,” said Semprini, who is a health economist at Des Moines University.

Read full article

Comments

© Aurich Lawson | Getty Images

❌