| How Python's Security Response Team Keeps Python Users Safe Feb 21st 2026, 15:34 by EditorDavid This week the Python Software Foundation explained how they keep Python secure. A new blog post recognizes the volunteers and paid Python Software Foundation staff on the Python Security Response Team (PSRT), who "triage and coordinate vulnerability reports and remediations keeping all Python users safe." Just last year the PSRT published 16 vulnerability advisories for CPython and pip, the most in a single year to date! And the PSRT usually can't do this work alone, PSRT coordinators are encouraged to involve maintainers and experts on the projects and submodules. By involving the experts directly in the remediation process ensures fixes adhere to existing API conventions and threat-models, are maintainable long-term, and have minimal impact on existing use-cases. Sometimes the PSRT even coordinates with other open source projects to avoid catching the Python ecosystem off-guard by publishing a vulnerability advisory that affects multiple other projects. The most recent example of this is PyPI's ZIP archive differential attack mitigation. This work deserves recognition and celebration just like contributions to source code and documentation. [Security Developer-in-Residence Seth Larson and PSF Infrastructure Engineer Jacob Coffee] are developing further improvements to workflows involving "GitHub Security Advisories" to record the reporter, coordinator, and remediation developers and reviewers to CVE and OSV records to properly thank everyone involved in the otherwise private contribution to open source projects.   Read more of this story at Slashdot. | | Hazardous Substances Found In All Headphones Tested By ToxFREE Project Feb 21st 2026, 13:00 by BeauHD An anonymous reader quotes a report from the Guardian: You wear them at work, you wear them at play, you wear them to relax. You may even get sweaty in them at the gym. But an investigation into headphones has found every single pair tested contained substances hazardous to human health, including chemicals that can cause cancer, neurodevelopmental problems and the feminization of males. [...] Researchers say that while individual doses from particular sources may be low, a "cocktail effect" of daily, multi-source exposure nevertheless poses potentially severe long-term risks to health. [...] Researchers bought 81 pairs of in-ear and over-ear headphones, either on the market in the Czech Republic, Slovakia, Hungary, Slovenia and Austria, or from the online marketplaces Shein and Temu, and took them for laboratory analysis, testing for a range of harmful chemicals. "Hazardous substances were detected in every product tested," they said. Bisphenol A (BPA) appeared in 98% of samples, and its substitute, bisphenol S (BPS), was found in more than three-quarters. Synthetic chemicals used to stiffen plastic, BPA and BPS mimic the action of oestrogen inside organisms, causing a range of adverse effects including the feminization of males, early onset puberty in girls, and cancer. Previous studies have shown that bisphenols can migrate from synthetic materials into sweat, and that they can be absorbed through the skin. "Given the prolonged skin contact associated with headphone use, dermal exposure represents a relevant pathway, and it is reasonable to assume that similar migration of BPA and its substitutes may occur from headphone components directly to the user's skin," the researchers said. Also found in the headphones tested were phthalates, potent reproductive toxins that can impair fertility; chlorinated paraffins, which have been linked to liver and kidney damage; and brominated and organophosphate flame retardants, which have similar endocrine disrupting properties to bisphenols. Most were, however, found in only trace quantities. Read more of this story at Slashdot. | | OpenAI's First ChatGPT Gadget Could Be a Smart Speaker With a Camera Feb 21st 2026, 10:00 by BeauHD OpenAI is reportedly developing its first consumer hardware product: a $200-$300 smart speaker with a built-in camera capable of recognizing "items on a nearby table or conversations people are having in the vicinity." It's also said to feature Face ID-style authentication for purchases. The Verge reports: In addition to the smart speaker, OpenAI is "possibly" working on smart glasses and a smart lamp, The Information reports. (Apple may also be working on a smart lamp.) But OpenAI's glasses might not hit mass production until 2028, and while OpenAI has made prototypes of gadgets like the smart lamp, The Information says it's "unclear" if they'll be released and that OpenAI's devices plans are in early stages. Read more of this story at Slashdot. | | US Particle Accelerators Turn Nuclear Waste Into Electricity, Cut Radioactive Life By 99.7% Feb 21st 2026, 07:00 by BeauHD Researchers at the Thomas Jefferson National Accelerator Facility are advancing Accelerator-Driven Systems (ADS) that use high-energy proton beams to transmute long-lived nuclear waste into shorter-lived isotopes. "The process also generates significant heat, which can be harnessed to produce additional electricity for the grid," reports Interesting Engineering. The projects are supported by $8.17 million in grants from the Department of Energy's NEWTON (Nuclear Energy Waste Transmutation Optimized Now) program. From the report: The researchers are developing ADS technology. This system uses a particle accelerator to fire high-energy protons at a target (such as liquid mercury), triggering a process called "spallation." This releases a flood of neutrons that interact with unwanted, long-lived isotopes in nuclear waste. The technology can effectively "burn" the most hazardous components of the waste by transmuting these elements. While unprocessed fuel remains dangerous for approximately 100,000 years, partitioning and recycling via ADS can reduce that window to just 300 years. [...] To make ADS economically viability, Jefferson Lab is tackling two primary technical hurdles: efficiency and power. Traditional particle accelerators require massive, expensive cryogenic cooling systems to reach superconducting temperatures. Jefferson Lab is pioneering a more cost-effective approach by coating the interior of pure niobium cavities with tin. These niobium-tin cavities can operate at higher temperatures, allowing for the use of standard commercial cooling units rather than custom, large-scale cryogenic plants. The team is also developing spoke cavities, which is a complex design intended to drive even higher efficiency in neutron spallation. The second project focuses on the power source behind the beam. Researchers are adapting the magnetron -- the same component that powers microwave ovens -- to provide the 10 megawatts of power required for ADS. The primary challenge is that the energy frequency must match the accelerator cavity precisely at 805 Megahertz. In collaboration with Stellant Systems, researchers are prototyping advanced magnetrons that can be combined to reach the necessary high-power thresholds with maximum efficiency. The NEWTON program aims to enable the recycling of the entire US commercial nuclear fuel stockpile within the next 30 years. Read more of this story at Slashdot. | |
Comments
Post a Comment