
The seasonal clock change turns out to be a problem for, of all things, gravity detectors. CC-licensed photo by Denise Mattox on Flickr.
You can sign up to receive each day’s Start Up post by email. You’ll need to click a confirmation link, so no spam.
A selection of 10 links for you. Attractive. I’m @charlesarthur on Twitter. On Threads: charles_arthur. On Mastodon: https://newsie.social/@charlesarthur. On Bluesky: @charlesarthur.bsky.social. Observations and links welcome.
‘To them, ageing is a technical problem that can, and will, be fixed’: how the rich and powerful plan to live for ever • The Guardian
Aleks Krotoski:
»
It started in the 1990s, when a young molecular biologist named Cynthia Kenyon and her postgrad student Ramon Tabtiang designed several landmark experiments with a tiny nematode called C. elegans. Their findings suggested that tweaking a gene doubled the lifespans of these creatures.
Kenyon gave a talk at Stanford University not long afterwards. “She looked like a super-young, very hip professor,” says Irina Conboy, who was there with her then boyfriend Mike, both PhD students at the time. “And she suggested that simply by changing the intensity of certain molecules, you can make an old animal younger.”
When I meet Irina and Mike Conboy in their office – now married, they are both professors in the bioengineering department at the University of California, Berkeley – they are wearing matching tie-dye sweatshirts, and finishing each other’s sentences. They are charming, warm and a bit shambolic. Their tiny white pup is comfortably chewing on his leg on a saggy sofa, next to a sheaf of papers.
The couple have one big question when it comes to ageing: “So why is it that all the tissues of the body seem to grow old together?” Mike asks. “It doesn’t matter whether they’re on the outside or on the inside, whether they’re exercised or going along for the ride. Everything seems to go to heck in a handbasket with age.” They wondered if there was some kind of signal in the body that changes the molecular structure of muscles, and ages them all simultaneously. They set out to find out what all tissues have in common.
«
This is long, but Aleks has spoken to everyone – the sane people and the bonkers ones. She’s written it all in a book, so consider this a taster.
unique link to this extract
Police stumped when Waymo makes illegal U-turn in San Bruno • KTVU FOX 2
»
San Bruno police said they were stumped when an autonomous Waymo car made an illegal U-turn during a DUI [drink-driving] enforcement operation.
In a Facebook post on Saturday with the audio of Rhianna’s “Shut up and Drive,” police said that they recently observed something unusual. A driverless car, which they didn’t name, but is a Waymo, made an illegal U-turn in front of them at a light, presumably to avoid the DUI checkpoint.
“That’s right… no driver, no hands, no clue,” the post read.
Officers stopped the car and contacted the company to let them know about the “glitch.”
Since there was no human driver, a ticket couldn’t be issued, and police added snarkily: “Our citation books don’t have a box for robot.”
Police didn’t say what happened next, like if they sent the Waymo on its merry way or if company officials apologized or would pay a fine. But hopefully, police wrote, the reprogramming will keep it from making any more illegal moves.
San Bruno police said that for those who believe that the officers were being lenient, there is legislation in the works that will allow police to issue the company notices.
«
Daylight Savings Time is so bad, it’s messing with our view of the cosmos • Gizmodo
Gayoung Lee:
»
In a preprint titled “Can LIGO Detect Daylight Savings Time?,” Reed Essick, former LIGO member and now a physicist at the University of Toronto, gives a simple answer to the paper’s title: “Yes, it can.” The paper, which has yet to be peer-reviewed, was recently uploaded to arXiv.
That might seem like an odd connection. It’s true that observational astronomy must contend with noise from light pollution, satellites, and communication signals. But these are tangible sources of noise that scientists can sink their teeth into, whereas daylight savings time is considerably more nebulous and abstract as a potential problem.
To be clear, and as the paper points out, daylight savings time does not influence actual signals from merging black holes billions of light-years away—which, as far as we know, don’t operate on daylight savings time. The “detection” here refers to the “non-trivial” changes in human activity having to do with the researchers involved in this kind of work, among other work- and process-related factors tied to the sudden shift in time.
The presence of individuals—whether through operational workflows or even their physical activity at the observatories—has a measurable impact on the data collected by LIGO and its sister institutions, Virgo in Italy and KAGRA in Japan, the new paper argues.
To see why this might be the case, consider again the definition of gravitational waves: ripples in space-time. A very broad interpretation of this definition implies that any object in space-time affected by gravity can cause ripples, like a researcher opening a door or the rumble of a car moving across the LIGO parking lot.
Of course, these ripples are so tiny and insignificant that LIGO doesn’t register them as gravitational waves. But continued exposure to various seismic and human vibrations does have some effect on the detector—which, again, engineers and physicists have attempted to account for.
What they forgot to consider, however, were the irregular shifts in daily activity as researchers moved back and forth from daylight savings time. The bi-annual time adjustment shifted LIGO’s expected sensitivity pattern by roughly 75 minutes, the paper noted. Weekends, and even the time of day, also influenced the integrity of the collected data, but these factors had been raised by the community in the past.
«
£1.5bn rescue to keep Jaguar Land Rover afloat until Christmas • The Times
Oliver Gill and Harry Yorke:
»
Jaguar Land Rover has been handed a £1.5bn taxpayer-backed rescue to tide the business and its suppliers over until Christmas after a cyberattack halted production.
The global operations of Britain’s biggest carmaker, which typically produces 1,000 vehicles a day at three UK factories, have been at a standstill for almost a month after hackers breached the company’s IT systems.
Peter Kyle, the business secretary, has agreed that the government will support JLR through a loan guarantee so that it can more quickly access loans that can be used to prop up its suppliers. But industry insiders have raised concerns about the way the aid has been structured, which means the money may not filter down to the carmaker’s indirect suppliers.
JLR employs 34,000 people in the UK directly and a further 120,000 in the supply chain. Many suppliers are smaller businesses that depend on the carmaker as a customer and will feel the effects most keenly.
On Saturday, The Sunday Times revealed suppliers had been told to prepare for the reopening of JLR’s £500 million engine plant in Wolverhampton as early as October 6. But returning to full production is still some way off, and suppliers expect that a phased reboot of manufacturing lines will take until Christmas at the earliest.
A group of suppliers is understood to have told Kyle last Tuesday that they would need £1.5bn of support to see them through until the end of the year.
«
This must be the most expensive cyberattack ever – perhaps even worse that the Sony Pictures one in 2014, which was only estimated at less than $200m. The knock-on effect to the supply chains is incredible.
The hackers involved might be wondering how long they can stay unknown.
unique link to this extract
I spent three months with Telly, the free TV that’s always showing ads • The Verge
Emma Roth:
»
The last few months, I’ve felt like I’m living in a cyberpunk movie. Each night, when I get ready to wind down, I reach for the remote to turn on a TV I got for free. When I hit the power button, a 55-inch screen lights up, but so does a smaller display beneath it. Widgets fill the secondary screen alongside a rotating ad that you can’t dismiss.
Before I can even navigate to the Netflix app, I hear something. “Hello, hello friends!” A smiling woman appears on the screen wearing a gray dress, her brown hair neatly styled into gentle waves. It’s the host of the TV’s built-in news segment, which uses the AI likeness of actress Alison Fiori to deliver today’s top stories on a loop.
This is the future of TV, according to Telly, a company that offers a free TV in exchange for the privilege of constantly blaring ads in your face. It puts the ads in a 10-inch-wide “smart” display that sits just below a built-in sound bar and runs the entire length of the TV. The screen stays on at all times — while you watch shows, movies, YouTube videos, and play video games. Even when you turn off the TV with a tap of the remote’s power button, the secondary screen remains illuminated. It will only turn off if you hold the power button for three seconds.
Despite my attempts to tune out the lower display, video ads and moving widgets draw my eyes in. Along with displaying the date, time, and current weather conditions, it shows a constant stream of headlines in a news ticker, plus stock prices and even links to news stories from outlets like Fox News, which you can click into and read on the top screen. You can remove or add widgets, but there’s no way to get rid of the ad on the right side that refreshes every so often. Under Telly’s terms of service, you can’t cover up the display. Even if you tried, it just wouldn’t be practical, since you need the secondary screen to navigate to different apps and control inputs.
…The TV also comes with a built-in camera with a privacy shutter and a microphone. The company’s terms of service state that it “may collect information about the audio and video content you watch, the channels you view, and the duration of your viewing sessions,” as well as detect the “physical presence of you and any other individuals using the TV at any given time.” This isn’t exactly comforting, and I found myself becoming paranoid that my viewing habits, conversations, and even footage from the built-in camera would somehow get directly in front of Telly employees.
«
Sounds absolutely awful, to be honest. Free, but you pay for it every moment of the day and night.
unique link to this extract
Trump says TikTok should be tweaked to become “100% MAGA” • Ars Technica
Ashley Belanger:
»
Last Sunday, Trump told Fox News that media mogul Rupert Murdoch and his son Lachlan, the CEO of Fox Corporation, would likely be part of the investor group taking over TikTok’s US operations. That deal—which Trump claimed Thursday was tentatively approved by Chinese President Xi Jinping—was set up to ensure that TikTok complies with a law banning majority ownership of the app by a foreign adversary in order to protect Americans from spying or foreign influence on the algorithm.
Trump’s executive order confirmed that Oracle would be charged with securing American TikTokers’ data. It also laid out how the new US venture would be managed by a new board of directors, on which ByteDance—TikTok’s owner, which has remained silent on the sale and did not respond to Ars’ request to comment—would retain one seat. The other six seats would go to US investors to ensure the app was US-controlled, Trump said, with Oracle’s CEO Larry Ellison likely filling one, while his son David Ellison, CEO of Paramount Skydance, could possibly fill another, The Guardian reported.
Whether Xi will actually approve the deal has yet to be seen, as Chinese media has not confirmed Trump’s claim that he had a “good talk” with Xi in which the Chinese president gave him the “go ahead” to move forward with the sale to US owners.
Previously, experts had suggested that China had little incentive to follow through with the deal, while as recently as July, ByteDance denied reports that it agreed to sell TikTok to the US, the South China Morning Post reported. Yesterday, Reuters noted that Vice President JD Vance confirmed that the “new US company will be valued at around $14 billion,” a price tag “far below some analyst estimates,” which might frustrate ByteDance. Questions also remain over what potential concessions Trump may have made to get Xi’s sign-off.
It’s also unclear if Trump’s deal meets the legal requirements of the Protecting Americans from Foreign Adversary Controlled Applications Act, with Reuters reporting that “numerous details” still need to be “fleshed out.”
«
An endless dance where you can see that TikTok is going to carry on just as before.
unique link to this extract
Why I gave the world wide web away for free • The Guardian
Tim Berners-Lee:
»
I believed that giving users such a simple way to navigate the internet would unlock creativity and collaboration on a global scale. If you could put anything on it, then after a while, it would have everything on it.
But for the web to have everything on it, everyone had to be able to use it, and want to do so. This was already asking a lot. I couldn’t also ask that they pay for each search or upload they made. In order to succeed, therefore, it would have to be free. That’s why, in 1993, I convinced my CERN managers to donate the intellectual property of the world wide web, putting it into the public domain. We gave the web away to everyone.
Today, I look at my invention and I am forced to ask: is the web still free today? No, not all of it. We see a handful of large platforms harvesting users’ private data to share with commercial brokers or even repressive governments. We see ubiquitous algorithms that are addictive by design and damaging to our teenagers’ mental health. Trading personal data for use certainly does not fit with my vision for a free web.
On many platforms, we are no longer the customers, but instead have become the product. Our data, even if anonymised, is sold on to actors we never intended it to reach, who can then target us with content and advertising. This includes deliberately harmful content that leads to real-world violence, spreads misinformation, wreaks havoc on our psychological wellbeing and seeks to undermine social cohesion.
We have the technical capability to give that power back to the individual. Solid is an open-source interoperable standard that I and my team developed at MIT more than a decade ago. Apps running on Solid don’t implicitly own your data – they have to request it from you and you choose whether to agree, or not. Rather than being in countless separate places on the internet in the hands of whomever it had been resold to, your data is in one place, controlled by you.
«
Tim is a marvel, but this is basically saying “You know cookie popups? Shall we have more of those, but about every little thing?” A blanket ban on grabbing our data – which Apple sort of provides through “app transparency” – suffices.
unique link to this extract
Talent agents circle AI actress Tilly Norwood • Deadline
Melanie Goodfellow:
»
Actor, comedian technologist Eline Van der Velden has revealed that her recently launched AI talent studio Xicoia is in talks with a number of talent agents interested in signing its first creation, AI actress Tilly Norward.
Van der Velden talked about the development on a panel at the Zurich Summit on Saturday, where she gave a presentation on her AI production studio Particle6 and then joined a discussion on AI developments in the entertainment industry alongside Verena Puhm, head of Luma AI’s new Studio Dream Lab LA.
Both Van der Velden and Puhm suggested that studios and other media and entertainment companies were quietly embracing AI under the radar, and to expect public announcements about high-profile projects using the technology in the coming months.
“We were in a lot of boardrooms around February time, and everyone was like, ‘No, this is nothing. It’s not going to happen’. Then, by May, people were like, ‘We need to do something with you guys.’ When we first launched Tilly, people were like, ‘What’s that?’, and now we’re going to be announcing which agency is going to be representing her in the next few months,” said Van der Velden.
The revelation of a possible agent signing for Tilly Norward comes just days after Van der Velden officially announced the creation of Particle6 offshoot Xicoia, an AI talent studio designed to create, manage and monetize a new generation of hyperreal digital stars.
If the talent agency signing comes to pass, Norwood will be one of the first AI generated actresses to get representation with a talent agency, traditionally working with real-life stars.
Former AI artist Puhm, whose appointment as head of startup Luma AI’s new Studio Dream Lab LA was announced in July, concurred with Van der Velden on the mood changing at the studios.
«
How though is the “AI actress” meant to participate in productions? Do the actors look at a ball on a stick, as with special effects? If “Norwood” is meant to have a speaking part, won’t you anyway need a human to read the lines to the human actors? It’s a bit odd, though you can see how the studios would love to do this. Always turns up on time! Never renegotiates the contract! (Well, there might be technical problems, and the company might want a higher price. But it could work for them, right?)
unique link to this extract
National Weather Service at ‘breaking point’ as storm approaches • The Washington Post
Hannah Natanson and Brady Dennis:
»
Some National Weather Service staffers are working double shifts to keep forecasting offices open. Others are operating under a “buddy system,” in which adjacent offices help monitor severe weather in understaffed regions. Still others are jettisoning services deemed not absolutely necessary, such as making presentations to schoolchildren.
The Trump administration’s cuts to the Weather Service — where nearly 600 workers, or about 1 in every 7, have left through firings, resignations or retirements — are pushing the agency to its limits, according to interviews with current and former staffers.
The incoming head of the National Oceanic and Atmospheric Administration has promised to prioritize filling those jobs, and the White House recently granted the Weather Service an exemption from a government-wide hiring freeze. But as the Atlantic hurricane season peaks and wildfires ramp up in the West, hundreds of positions remain vacant, staff said. Forecasters are currently watching two storms, including one that could pose a threat for the eastern United States by early next week.
So far, exhausted employees have maintained weather monitoring and forecasting almost without interruption, staff said. But many are wondering how much longer they can keep it up. If the government shuts down next week when funding runs out, many employees could also find themselves working without pay, at least temporarily.
«
The US is indulging in an experiment to see how far back it can wind the clock without absolutely everything collapsing. Though collapse does remain a possibility.
unique link to this extract
First malicious MCP in the wild: the postmark backdoor that’s stealing your emails • Koi Blog
Idan Dardikman:
»
You know MCP servers, right? Those handy tools that let your AI assistant send emails, run database queries, basically handle all the tedious stuff we don’t want to do manually anymore. Well, here’s the thing not enough people talk about: we’re giving these tools god-mode permissions. Tools built by people we’ve never met. People we have zero way to vet. And our AI assistants? We just… trust them. Completely.
Which brings me to why I’m writing this. postmark-mcp – downloaded 1,500 times every single week, integrated into hundreds of developer workflows. Since version 1.0.16, it’s been quietly copying every email to the developer’s personal server. I’m talking password resets, invoices, internal memos, confidential documents – everything.
This is the world’s first sighting of a real world malicious MCP server. The attack surface for endpoint supply chain attacks is slowly becoming the enterprise’s biggest attack surface.
…Here’s the thing – there’s a completely legitimate GitHub repo with the same name, officially maintained by Postmark (ActiveCampaign). The attacker took the legitimate code from their repo, added his malicious BCC line, and published it to npm under the same name. Classic impersonation.
…I’ve been doing security for years now, and this particular issue keeps me up at night. Somehow, we’ve all just accepted that it’s totally normal to install tools from random strangers that can:
• Send emails as us (with our full authority)
• Access our databases (yeah, all of them)
• Execute commands on our systems
• Make API calls with our credentials…There’s literally no security model here. No sandbox. No containment. Nothing. If the tool says “send this email,” your AI sends it. If it says “oh, also copy everything to this random address,” your AI does that too. No questions asked.
«
The developer (or someone malicious) added a line Bcc’ing every email to the developer. About as simple as you can imagine.
unique link to this extract
| • Why do social networks drive us a little mad? • Why does angry content seem to dominate what we see? • How much of a role do algorithms play in affecting what we see and do online? • What can we do about it? • Did Facebook have any inkling of what was coming in Myanmar in 2016? Read Social Warming, my latest book, and find answers – and more. |
Errata, corrigenda and ai no corrida: none notified








