Transistors, the building blocks of modern electronics, are typically made of silicon. Because it’s a semiconductor, this material can control the flow of electricity in a circuit. But silicon has fundamental physical limits that restrict how compact and energy-efficient a transistor can be.

MIT researchers have now replaced silicon with a magnetic semiconductor, creating a magnetic transistor that could enable smaller, faster, and more energy-efficient circuits. The material’s magnetism strongly influences its electronic behavior, leading to more efficient control of the flow of electricity. 

The team used a novel magnetic material and an optimization process that reduces the material’s defects, which boosts the transistor’s performance.

The material’s unique magnetic properties also allow for transistors with built-in memory, which would simplify circuit design and unlock new applications for high-performance electronics.

“People have known about magnets for thousands of years, but there are very limited ways to incorporate magnetism into electronics. We have shown a new way to efficiently utilize magnetism that opens up a lot of possibilities for future applications and research,” says Chung-Tao Chou, an MIT graduate student in the departments of Electrical Engineering and Computer Science (EECS) and Physics, and co-lead author of a paper on this advance.

Chou is joined on the paper by co-lead author Eugene Park, a graduate student in the Department of Materials Science and Engineering (DMSE); Julian Klein, a DMSE research scientist; Josep Ingla-Aynes, a postdoc in the MIT Plasma Science and Fusion Center; Jagadeesh S. Moodera, a senior research scientist in the Department of Physics; and senior authors Frances Ross, TDK Professor in DMSE; and Luqiao Liu, an associate professor in EECS, and a member of the Research Laboratory of Electronics; as well as others at the University of Chemistry and Technology in Prague. The paper appears today in Physical Review Letters.

Overcoming the limits

In an electronic device, silicon semiconductor transistors act like tiny light switches that turn a circuit on and off, or amplify weak signals in a communication system. They do this using a small input voltage.

But a fundamental physical limit of silicon semiconductors prevents a transistor from operating below a certain voltage, which hinders its energy efficiency.

To make more efficient electronics, researchers have spent decades working toward magnetic transistors that utilize electron spin to control the flow of electricity. Electron spin is a fundamental property that enables electrons to behave like tiny magnets.

So far, scientists have mostly been limited to using certain magnetic materials. These lack the favorable electronic properties of semiconductors, constraining device performance.

“In this work, we combine magnetism and semiconductor physics to realize useful spintronic devices,” Liu says.

The researchers replace the silicon in the surface layer of a transistor with chromium sulfur bromide, a two-dimensional material that acts as a magnetic semiconductor.

Due to the material’s structure, researchers can switch between two magnetic states very cleanly. This makes it ideal for use in a transistor that smoothly switches between “on” and “off.”

“One of the biggest challenges we faced was finding the right material. We tried many other materials that didn’t work,” Chou says.

They discovered that changing these magnetic states modifies the material’s electronic properties, enabling low-energy operation. And unlike many other 2D materials, chromium sulfur bromide remains stable in air.

To make a transistor, the researchers pattern electrodes onto a silicon substrate, then carefully align and transfer the 2D material on top. They use tape to pick up a tiny piece of material, only a few tens of nanometers thick, and place it onto the substrate.

“A lot of researchers will use solvents or glue to do the transfer, but transistors require a very clean surface. We eliminate all those risks by simplifying this step,” Chou says.

Leveraging magnetism

This lack of contamination enables their device to outperform existing magnetic transistors. Most others can only create a weak magnetic effect, changing the flow of current by a few percent or less. Their new transistor can switch or amplify the electric current by a factor of 10.

They use an external magnetic field to change the magnetic state of the material, switching the transistor using significantly less energy than would usually be required.

The material also allows them to control the magnetic states with electric current. This is important because engineers cannot apply magnetic fields to individual transistors in an electronic device. They need to control each one electrically.

The material’s magnetic properties could also enable transistors with built-in memory, simplifying the design of logic or memory circuits.

A typical memory device has a magnetic cell to store information and a transistor to read it out. Their method can combine both into one magnetic transistor.

“Now, not only are transistors turning on and off, they are also remembering information. And because we can switch the transistor with greater magnitude, the signal is much stronger so we can read out the information faster, and in a much more reliable way,” Liu says.

Building on this demonstration, the researchers plan to further study the use of electrical current to control the device. They are also working to make their method scalable so they can fabricate arrays of transistors.

This research was supported, in part, by the Semiconductor Research Corporation, the U.S. Defense Advanced Research Projects Agency (DARPA), the U.S. National Science Foundation (NSF), the U.S. Department of Energy, the U.S. Army Research Office, and the Czech Ministry of Education, Youth, and Sports. The work was partially carried out at the MIT.nano facilities.

If you use the internet at all, you may have noticed that a large percentage of sites suddenly went down earlier this week—and all your nerdiest friends were talking about "The Vulnerability Apocalypse” and this thing called PHP that powers nearly 70% of the websites on the internet. You may find yourself wondering: what is PHP, what just happened, what is the vulnerability apocalypse, and what do I need to do?  

To find out what you can personally do read the first blog post in this series!  

What Is PHP?  

PHP is a programming language used mainly to create interactive websites. Facebook, Wordpress, Wikipedia, Etsy, and other major sites all use or were originally built on PHP. It is a long-established mainstay of web development. But because it is open-source, maintenance of these critical systems depends on a small number of volunteers working on this in their free time. The disaster scenario that happened this past week is the perfect example of why we need more money and people supporting open-source projects. Corporations should be contributing both. 

What Is the Vulnerability Apocalypse?  

Common Vulnerabilities and Exposures (CVEs) are the way that security professionals file reports about vulnerabilities in software. The National Vulnerability Database (NVD), run by NIST, is the official national database of CVEs. In other words, CVE reports managed by NIST are the closest thing we have to a canonical database of security vulnerabilities in software. The NVD currently has around 400,000 CVEs that have been filed and accepted since 1988. In just the month of October, 13,000 new CVEs have been submitted. This means that 3% of critical software security bugs that have ever been officially logged were found in the last month alone. And it's likely that by the end of the year over a quarter of the software vulnerabilities that have ever been found will be from 2026.  

 

Computer vulnerabilities reported are rising exponentially. Source: CVE Tracker

This research is being driven almost entirely by the cybersecurity capabilities of major AI models from companies like Anthropic, OpenAI, and Google. Historically it has been popularly assumed by cybersecurity experts that finding unknown (zero-day) exploits in any specific project and turning them into exploits was expensive. The knowledge to discover them was not widespread, and it was a hard task even for those initiated into the arcane ways of vulnerability hunting. Google even dedicated an entire team to it.  

But now thanks to major AI models, vulnerabilities are cheap, and anyone of moderate technical skill with a few dollars and access to a frontier AI model can find vulnerabilities in a few minutes. For example, recent vulnerabilities in PHP were found with a prompt to an AI model that literally said "find bad vulnerabilities in PHP."  

What Happened This Week? 

In 2024, a potentially severe vulnerability in PHP was discovered during an external security audit. PHP’s maintainers couldn’t agree on a solution, but more importantly, they couldn’t find a way to exploit the vulnerability. Because it didn’t seem like an active threat, they ended up deprioritizing a fix in favor of working on more urgent security issues. Then, in August 2026, security researchers working with the latest models from OpenAI and Anthropic independently discovered the vulnerability again, and another one—and now, with a way to exploit them.  

We now know that the vulnerabilities were so severe that they would have allowed even moderately inventive hackers to take over any website that uses PHP and then steal customer data, launch further malware attacks, spy on users, take websites offline, or launch a massive denial of service attack.[1] 

Because of the severity of these vulnerabilities, several of the involved researchers got together with the makers of PHP to patch the vulnerabilities and disclose them in a coordinated manner. The idea was that hopefully everyone would get a chance to quietly release and then apply fixes for the vulnerabilities before the whole world found out about it. 

But news already started to leak on October 20th. There was a post on a widely read forum “Hacker News” and other posts elsewhere. One of the researchers accidentally published a video early. Companies reported seeing active exploitation of the vulnerabilities going back as far as October 17th. On October 21st, six hours before the planned press embargo, one company, Chainguard, jumped the gun and released a patch early, essentially giving anyone instructions about exactly where to find the vulnerabilities and how to weaponize them. This sent system administrators everywhere scrambling to patch their systems before they were taken over by hackers. And it’s going to take a long time to patch all these systems. At the time of this writing over 33 million websites are still running on vulnerable versions of PHP.  

The internet is run largely on open-source software, mostly maintained by a small handful of skilled volunteers occasionally getting a small stipend, not by major corporations and highly paid engineers. These are projects you have perhaps never heard of, like PHP, OpenSSL, and SQLite, but these programs run on nearly every computer in the world and are maintained by teams as small as one person. When a vulnerability is found in these projects, it can be devastating.  

PHP isn’t the only critical open-source software with a high severity vulnerability this week either. Other widespread open-source projects like Node.js and GitLab also had severe security bugs reported.  

The small number of already overworked open-source maintainers are now facing a deluge of vulnerability reports, some of which are false, but many of which are very real. Burnout in open source has never been higher.  

We Need Stronger Support for Open Source Projects

Much of the foundation for the modern multibillion-dollar internet industry is built on open-source products that were created and still maintained—for free—by dedicated volunteers in their spare time. It’s an imperfect system, and it can lead to errors.  

One of those critical, under resourced open-source products is PHP. And while vulnerabilities in PHP were privately found years ago, they were left unfixed because they didn’t seem as impactful as other bugs at the time. These same vulnerabilities were recently rediscovered and proved to be trivially exploitable by security researchers using advanced AI models. While in the middle of the widespread, global effort to correct this mistake and deploy fixes, the problem was leaked by some of the security researchers who had gotten early access to the fixes. Unfortunately, this left millions of websites, ranging from personal blogs to government sites, vulnerable to hacking that could result in data theft, malware distribution, and worse.  

Open-source projects like PHP and others are the backbone of the entire internet. If they don’t get the resources they need, they and the internet they power, are at risk of falling apart. Corporations (whose products would not exist without these products) should be actively contributing to their maintenance. 

1. A technical analysis of the vulnerabilities is out of scope for this post and has already been written by the original researchers.

It is a commonly held truth among computer geeks that there is no such thing as bug free software, or a secure computer. Any piece of software that anyone actually uses will have a security vulnerability somewhere in the code. The more complex that software is, the more likely there will be a vulnerability. Fortunately for everyone, finding severe vulnerabilities was generally considered an expensive and difficult task requiring years of training and deep knowledge of how computers and software worked. Until recently there was a steady background hum of vulnerabilities being found and patched, with major vulnerabilities that could cripple the entire internet only happening every few years. Now that is no longer the case.  

You may have noticed your nerdiest friends freaking out about the “Vulnerability Apocalypse” this week and waving their arms in panic about something called PHP. You may have also noticed that some of your favorite websites were down for a bit. In the last two weeks of October alone, there have been multiple, potentially internet-breaking vulnerabilities reported and patched. Many of those vulnerabilities were in the open-source software that is the foundation of the vast majority of the internet.

For more detailed information on what happened, and why supporting open-source projects matters, check out our other blog.

This is all because frontier AI models, such as those created by OpenAI, Anthropic, and others, have made it incredibly cheap and easy to find previously unknown vulnerabilities (zero-days) in open- and closed-source code. Three percent of all software vulnerabilities ever found in history were found just in the month of October. This year alone researchers have found nearly a quarter of all software security issues which have ever been discovered. 

If exploiting critical software is now cheaper and easier than ever, what does that mean for us as individuals and what does that mean for society as a whole? TL; DR: It’s going to get worse before it gets better. But you can protect yourself with basic digital security hygiene that is now more important than ever.  

What Do I Need to Do? 

There absolutely needs to be a bigger conversation about how we got here and how to fix the systemic issues involved, including how corporations that depend on open-source code should contribute to their upkeep, and how big tech should be regulated.  

But for now, this news is a compelling reason to tighten up your digital hygiene. A lot of computers are going to get hacked a lot more often, and unfortunately, it isn’t going to get better any time soon. Thankfully, EFF has compiled a comprehensive set of security advice in our Surveillance Self-Defense guides. To start, we recommend making sure your browser and all applications are always up to date with the latest patches.   

You should also consider installing a tracker blocking tool, like EFF’s Privacy Badger (now on Safari), and remain vigilant for phishing attempts. Additionally, install a password manager and use unique passwords for each website, so that if one site is compromised, the rest of your passwords are safe. You should also be aware that data breaches may now be more likely, and the websites you visit may experience more attacks than usual, which means that some services may be disrupted.  

If you host a blog or other website, make sure that either you or your hosting provider has patched this particular issue.  

For additional tips on protecting yourself and others, head over to our Surveillance Self-Defense site. Additionally, if you’d like to support any of EFF’s open-source projects like Privacy Badger, Rayhunter, and Certbot, visit our donate page. 

This article in Nature argues that it’s due to an overfishing of predators and warming sea temperatures.

As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered.

Blog moderation policy.

Legal scholar Martha Minow delivered this fall’s Compton Lecture at MIT on Thursday, examining the civic foundations of democracy — and describing how artificial intelligence is undermining it, but could be used to help reinforce traditional U.S. governance. 

“It’s not a good time for democracy or constitutionalism,” said Minow, who is the 300th Anniversary University Professor at Harvard University, and a prominent expert in constitutional law and human rights. She noted a litany of challenges to democracy in recent years, including violations of laws and norms, the stifling of free speech, a diminution of congressional authority, disregard of legal rulings, the common vilification of others in society, and more. 

Recent Gallup polling, Minow observed, shows 77 percent of people saying that the founders of the U.S. would be disappointed in the contemporary condition of the country. 

“Many people genuinely wonder whether this nation’s system of government and rule of law, ignited 250 years ago, will survive,” Minow said.  

Her remarks assessed the state of the U.S. in terms of what she called four key “ingredients” of democracy: education, reliable and accessible information, security from violence, and fairness. Minow evaluated how AI has, among other things, influenced these areas of life — but also suggested ways people could use contemporary technology to help. 

“It’s very familiar to hear blame attributed to digital technologies and experts of all stripes, but a turnaround, I believe, is genuinely possible if people at MIT and elsewhere pour time and talent towards real and much-needed solutions,” Minow said. 

A substantial portion of her remarks focused on the pitfalls of AI in education. That issue compounds some other troubling trends: The U.S. already has large local and regional disparities in educational funding, Minow noted, while schools have actually become significantly more segregated in economic and ethnic terms over the last three decades. 

In this context, AI threatens to further weaken independent-thinking skills, Minow suggested, just when greater understanding of civic issues is absolutely vital. 

“As AI surges, I think we have to learn to be smarter about how to use it, how to regulate it, and how to actually educate people about the costs of mindless using,” Minow said. She added: “Dominant AI platforms supercharge the strategies that are deployed by social media companies, inducing passivity in people … Leading AI models and interfaces and sycophantic elements endanger the development particularly of young people’s capabilities to think, to remember, and to engage in critical thinking.” 

That trend away from cognitive effort, she suggested, can be changed — perhaps through AI tools that act more like tutors and are designed to enhance people’s deep thinking.

“Existing LLMs, model training, and interface design can offer nudges and questions and hints rather than replacing student work, but there’s so much more that could be developed, and more effectively, to be trustworthy, and to deepen human activities and curiosity, rather than replacing people,” Minow said.

To the audience, she added, “AI tools could do much more of that … And I believe that you, the people here, could develop better tools than the ones that are out there. And make better assessments, more meaningful and cheating-resistant.” 

Minow’s talk, “Constituting Democracy in the Era of AI,” was delivered to a large audience in MIT’s Huntington Hall, Room 10-250 on campus.

MIT President Sally A. Kornbluth delivered introductory remarks to the audience. The Karl Taylor Compton Lecture Series, introduced in 1957, is the highest-profile event of its kind at MIT. Karl Taylor Compton was MIT’s ninth president, serving from 1930 to 1948, and then becoming chair of the MIT Corporation from 1948 to 1954.

“He guided MIT through the Great Depression and World War II,” Kornbluth said, “transforming the Institute from an outstanding school for training job-ready engineers to a great global research university.” 

She added: “He was also a deeply committed patriot who helped harness the intellectual power of America’s research universities to serve the nation during World War II.” 

Kornbluth called Minow “a legal scholar of extraordinary intellectual scope,” and a “dedicated educator whose work has shaped how we think about the law and our own humanity, as individuals and as a society.” 

Minow has been a faculty member at Harvard Law School since 1981, and served as dean of the school from 2009 through 2017. Minow earned her BA in history from the University of Michigan, an MA in education from Harvard, and a JD from Yale University.

Minow’s books include “Making All the Difference” (1990), “Partners Not Rivals” (2002), and “When Should Law Forgive?” (2020). 

In her talk, Minow also discussed the civic effects of misinformation, threats of violence, and multiple dimension of societal fairness. Modern media technology has led to a 75 percent reduction in journalists in recent decades, Minow observed, with an attendant rise in corruption in places without local media. Civic-minded technologists, she proposed, should work towards establishing a widely-used “information commons,” or many forms of them, to help people access more reliable information. 

Meanwhile, when it comes to basic security in society, Minow warned, “We’re on the brink right now. I know a lot of judges, and every one of them has a credible threat of violence against them. In America. This is not acceptable.” 

For all the challenges to democracy and traditional civic norms, however, Minow sounded positive notes throughout her remarks, pointing out that there are many opportunities to create new forms of reliable information, education, and community relations. 

“We have to actually invent the world that we want to live in,” she offered. 

Minow’s remarks were followed by a Q&A session in which Kornbluth read aloud questions submitted by the audience — and asked her to characterize her concerns about present trends. 

“I worry about the loss of the Enlightenment,” Minow said. “I worry about the loss of the belief that reason, and testing hypotheses, and rejecting myths in the face of evidence, and the toleration and rights and expansion of participation that came along with the Enlightenment, that’s what concerns me the most. That’s why the disinformation issue for me is so important, that’s why the loss of critical thinking in schools is so important.”

She added: “I’ve spent much of my own career thinking about mass violence. What happens when people don’t understand each other, and are afraid. And it’s terrible, and we don’t want to be there. And I do view the Enlightenment as a time when people learned that actually having mass wars is a bad thing, and coming up with toleration is a good thing, and testing our ideas in light of evidence other people can share can produce a better life for everybody. I worry we’re abandoning that right now.”

At the MIT School of Humanities, Arts, and Social Sciences (SHASS) 75th Anniversary Symposium, speakers celebrated the school’s value and contributions, while exploring how artificial intelligence is transforming many aspects of teaching, research, and society.

The symposium was held Sept. 24-25 in the Linde Music Building’s Thomas Tull Concert Hall. Scholars, students, staff, and alumni from across SHASS and MIT gathered for the event, which kicked off with welcoming remarks from MIT leadership. 

“How should we think about MIT’s School of Humanities, Arts, and Social Sciences? With enthusiastic appreciation and gratitude,” said President Sally Kornbluth.

The school’s origins date back to the Lewis Committee Report, commissioned by MIT and published in 1949, which called for stronger integration between scientific and technical topics and humanistic scholarship and teaching.

Kornbluth noted that, much like when the school was founded just after World War II, the world faces uncertainty as it grapples with the broad implications of artificial intelligence.

“AI has suddenly arrived with enormous consequences for both research and education,” she said. “As we face the challenges of our own time, and our own society, it’s clear that MIT has never needed your particular insight and guidance more than we do now.”

In opening remarks, Provost Anantha Chandrakasan described the importance of a human-centered approach to technology, one that considers both its efficacy and its impacts. He lauded many of the new research projects happening through the MIT Human Insight Collaborative, a strategic initiative launched in 2024.

“Today — a time of rapid, AI-driven change — the arts, humanities, and social sciences are as important as ever,” he said. “To be able to contribute effectively to solving the world’s great challenges, it is not enough to gain technical mastery.”

Chancellor Melissa Nobles recalled how, during her tenure as SHASS dean from 2015 to 2021, reading the positive feedback from students in their SHASS course assessments reinforced the value of the school’s teaching.

“MIT students have a range of interests that draw them to our classes that may be invisible to their STEM professors, but that we very well know our students have,” said Nobles, who is also a professor of political science.

Agustín Rayo, the Kenan Sahin Dean of SHASS and professor of philosophy, noted that, while research in the school plays a key role in addressing global issues such as climate change and AI, the value of the work in SHASS should not be measured by practical application alone.

“Education should also help us ask what is worth doing, what do we owe one another, and what makes a life worth living,” Rayo said. “Some research matters because it helps us understand the histories, cultures, and social structures that have made us who we are. Some things matter because they enrich human life.”

Scholarship from across SHASS and beyond 

Over the symposium’s two days, research presentations, panel discussions, and performances offered attendees opportunities to engage with the role of SHASS in exploring today’s biggest societal questions.

“We gather not so much to look back over the past 75 years, but to showcase where we are now, and share what we urgently aim to tackle together in the years ahead,” said David Kaiser, Germeshausen Professor of the History of Science and professor of physics at MIT, who also served as chair of the symposium planning committee.

The first day included a session on teaching and learning innovations. Faculty presented on the success of educational programs housed within SHASS, including the MIT Indigenous Languages Initiative Master's Program, the Master in Data, Economics, and Design of Policy (DEDP), and MISTI, the hub for global experiences for MIT students.

Stephanie Seed, associate professor of literature, spoke about why she and others are working to reintegrate classic books into their teaching.

“MIT, of course, is an institution unusually oriented towards the future,” she said. “Our students are trained to imagine and create worlds that don’t yet exist. And it’s precisely this future orientation that makes reading the past especially important here.”

Eric Klopfer, professor of Comparative Media Studies/Writing and co-author of MIT’s recent report on AI and instruction, said this is a moment when instructors must reassess how courses are taught.

“I don’t know exactly what that looks like, but I do think it means something that’s more than modifying our curriculum. I think it really means rethinking what the educational experience is,” he said.

During a session on computing and society, panelists described different views and research into technology and how it affects humans.

“We project aspects of ourselves onto computational systems,” said MIT Professor D. Fox Harrell during his talk about seeing “selfness” in machines. 

“What makes an AI system is not just the code, not just the programming or the algorithm, it’s the fact that we narrate it as being intentional,” he said.

Program in Science, Technology, and Society Professor Sherry Turkle offered a skeptical view of human-technology interaction, particularly with AI chatbots, which she describes as “intimate machines.” 

“If social media came for our attention, I argue that chatbots are coming for our capacity for attachment, which is deeper and much more troubling,” said Turkle.

Professor David Autor, head of the Department of Economics, said it’s an exciting time to be working at MIT, where scholars are collaborating to explore AI’s impact on society.

“I don’t think there’s a close analogy to a moment when everyone felt the world change so quickly,” he said. “The stakes feel incredibly high.”

Celebrating the arts and engaging with the future 

The first day concluded with a rousing Music and Theater Arts performance showcase, which began with an excerpt from Stan Lai’s “A Dream Like A Dream,” a play directed and performed by students and instructors in class 21T.100 (Theater Arts Production).

“Variations on the Theme of SHASS 75,” a piece choreographed by Dan Safer, senior lecturer and director of dance programs, combined movement, lighting, and music in a celebration of both the human body and the school’s milestone anniversary.

Student and faculty musicians from a variety of styles and disciplines shared the stage, including Rambax MIT, MIT Concert Choir, and the MIT All-Star Jazz Combo. The showcase included stirring renditions of “Madrigal,” composed by Vice Provost for the Arts Keeril Makan, and “Prayer for Peace.”

On the second day of the symposium, several alumni presented on their current work and the impact of their SHASS experiences.

Jessica Coon PhD ’10, now a professor of linguistics at McGill University, spoke about the leading role MIT Linguistics plays in preserving endangered languages, and how her studies at MIT prepared her to carry on that work.

“SHASS gives us the tools not just to conduct research, but to communicate the impacts of this research across a variety of different audiences and in different ways,” she said.

Ankita Reddy ’19 double-majored in anthropology and biology and is now an MD/PhD student at the University of Pennsylvania. She highlighted her most impactful SHASS courses, including 21A.308 (Global Mental Health).

“This was the first time I was forced to consider how good health care looks different based on social systems and cultural practices,” she said. “SHASS made me more comfortable with, and more curious about, complexity.”

During the symposium’s final session, panelists engaged in a conversation about AI, art, and the implications for creatives in an era where their art can be co-opted and copied. 

“There’s so much praise for new and upgraded technologies,” remarked associate professor of literature Sandy Alexandre. “The question I consistently have is: What does it mean to be an upgraded human being? How are we innovating as technology is innovating?”

Philosopher Justin Khoo said AI’s role in art could be considered a “giant paint brush you don’t have much control over,” adding he could see the creation of new sub-genres of art that are human-only, AI-infused, and purely AI, for example.

Khoo closed by saying he encourages students to “think broadly, and really take seriously the humanistic education here at MIT.”

“A broad understanding of a set of concepts which are widely applicable, not just narrowly applicable, I think that’s what we need more than ever now,” he said.

As the symposium came to a close, attendee Kent Sahin praised the event.

“I’ve attended every session, and this is a fantastic program and a great celebration of the 75th anniversary,” he said. “Clearly, whether it’s AI impact, the impact of climate change, or the impact of political and social change, SHASS is in the right place at the right time.”

Gunter Stein, an expert on control systems and theory who was a longtime MIT adjunct professor and researcher who also worked at Honeywell Labs, died on July 11 in his home state of Minnesota. He was 84 years old. 

Throughout his career, Stein helped to reconcile competing schools of thought surrounding automated control systems, and he worked helped usher in an era of robust multivariable control.

Born in Germany, Stein emigrated with his family to the United States at a young age. The son of a tool and die maker at Fisher Body Works, Stein earned his BS from the General Motors Institute (now Kettering University) in Flint, Michigan, and his MS and PhD in electrical engineering from Purdue University in 1966 and 1969, respectively. He then joined Honeywell Labs, where he spent a more than 50-year career developing systems including aircraft flight controls, spacecraft altitude and orbit controls, and other navigation and control systems for applications as varied as launch boosters, reentry vehicles, ship positioning systems, torpedo engines and autopilots, and precision guided weapons. 

As an engineer at Honeywell, Stein’s incisive and rigorous way of approaching problem-solving quickly garnered attention, catching the eye of the then-director of the MIT Laboratory for Information and Decision Systems (LIDS), Michael Athans, when the laboratory and Honeywell began cooperating on a NASA contract to design the controls for the F-8 aircraft. Stein’s submission on behalf of Honeywell was, at the time, labeled the “most conservative” of the potential submissions, but eventually became the only control system successfully flight-tested. 

Noting Stein’s talent, Athans approached Stein with a pitch to join MIT in 1977. As Stein’s career and personal life were by that point deeply rooted in Minnesota, he was not interested in relocating full-time, but agreed to an adjunct position with the Department of Electrical Engineering and Computer Science (EECS), where he would spend one week per month giving lectures, helping advise graduate students, reading PhD theses, and acting as a principal investigator in LIDS. This arrangement would continue for the next 30 years, and would deeply shape MIT’s overall approach to control theory. 

“Stein immediately struck me as a brilliant engineer,” says Munther Dahleh, the William A. Coolidge Professor in EECS and a member of LIDS, who at the time of Stein’s arrival was a newly hired junior member of the faculty. “As a naive researcher who was more of an applied mathematician than a real engineer, I was struck by how Gunter could see through the mathematics and distill what was truly essential for applications.” 

As Dahleh’s career developed — he would eventually become an associate department head of EECS and the founding director of the Institute for Data, Systems, and Society — his regard for Stein only grew: “Through Gunter’s work at Honeywell and his collaborations with students and faculty at MIT and other universities, robust control entered virtually every area of control applications. He shaped the direction of our field for decades, and his ideas remain a driving force behind many of today’s control applications.”

“Gunter came to LIDS at a propitious time,” says Nils R. Sandell Jr. SM ’71, EE ’73, PhD ’74, who co-taught class 6.291 (Classical and Modern Methods for Control System Design) with Stein. “With the experience on the NASA project and on others, the emphasis had begun to shift from optimal control to robust control. Gunter was a key part of this evolution, with his keen insight, based on extensive experience, of how classical frequency domain control techniques for single-input, single-output systems dealt with model uncertainty.” 

Over the course of the next decades, Stein would work on systems for the B-2 bomber and F-47 aircraft, and for many years would serve as a member of the U.S. Air Force Scientific Advisory Board. “I can attest that, decades later, the flight control design methodology that Gunter and his colleagues at Honeywell developed is still being applied to our most advanced aircraft,” says Sandell. 

Alan Willsky, the Edwin Sibley Webster Professor of EECS (Emeritus), remembered his colleague at LIDS as both a practical and a theoretical force: “Gunter was one of the giants of automatic control. His work at Honeywell on advanced control systems is legendary, but what is equally impressive is his impact on control theory and his influence on generations of control researchers. The period of years when he split time between Minneapolis and MIT had major influences on how control is taught and researched here at LIDS.” 

Years of working with uncertainty and multivariable systems led Stein to think carefully and deeply about famous failures of engineering, including the nuclear reactor disaster at Chernobyl that captured the world’s attention in 1983. Stein saw the disaster as a stark warning to all designers of control systems, not only for nuclear power plants but for aircraft, spacecraft, and indeed all systems “with automatic controls that cannot be done manually and that, if done improperly, can have dire consequences for property, the environment, and human life.” 

In his highly influential 2003 Bode Lecture and essay for Control Systems Magazine, entitled “Respect the Unstable,” he wrote: “We must place renewed emphasis on stating and teaching the principles of our subject clearly and well. The applications out there are simply too serious for us to hide from responsibility under a cloak of mathematics.” Of that famous lecture, Dahleh muses, “his Bode Lecture, which marked the first time the award was given, solidified my view of his remarkable ability to understand very different applications from a common fundamental perspective ... He showed how the challenges posed by complex control engineering systems, from agile aircraft to the Chernobyl disaster, could be understood through the same fundamental ideas that explain the difficulty of controlling an inverted pendulum. Thirty years later, his lecture remains one of the most-cited Bode Lectures and one that has had a clear impact on our community.”

Among other honors, Stein was elected fellow of the IEEE in 1985; awarded the IEEE Control System Society's first Hendrik Bode Prize in 1989; elected to the National Academy of Engineering in 1994; and awarded the International Federation of Automatic Control's Nathaniel Nichols Prize in 1999. 

His impact on the field of control engineering is also measured by the regard of his colleagues, who uniformly remember him as warm, social, and deeply conscientious. 

“Gunter was a great engineer — the greatest I have known — and he was also a great human being,” says Sandell, who notes the great passion with which Stein, in the Bode lecture, enumerated his responsibilities toward society as an engineer. 

“On a personal level, Gunter was incredibly humble and unassuming, and always ready to offer help and support whenever asked,” says Dahleh. “He was a giant in our field and played a major role in shaping it. I am deeply grateful for the opportunity to have learned from him and to have had him as a colleague. He will be dearly missed.”

Predeceased by his parents and wife Nancy, Stein was survived by partner Ann Wynia, siblings Gerry (Lynn) Stein and Gisele Davis, and by many nieces and nephews. A skilled sailor and lifelong outdoorsman, Stein spent much of his life exploring the various coastlines and seas of the world, and the forests and lakes of his native Minnesota. Memorial donations can be made in Stein’s name to the Minnesota Nature Conservancy. 

Last week, two federal appeals courts issued opinions that will allow Florida and Georgia to start enforcing laws that will age-gate and block young people from accessing social media. The laws do not adequately respect minors’ rights to play, speak, and learn online. More fundamentally, these laws don’t help young people stay safe online—a goal that lawmakers should pursue.

Age-Gated? Email EFF at agegates@eff.org. 

Because of the new laws, some young people will lose their ability to access lawful information, find their online communities, and even engage with school board members. Others will need parental permission to stay online. And adults will face increased demands to prove their age, which will put their privacy at increased risk simply to continue to use the services they already use. 

We opposed these laws because they threaten the free expression and privacy of both minors and adults.  Even though these lawsuits are not over, the injunctions that paused enforcement have been lifted, and the states of Florida and Georgia will now be able to enforce broad restrictions on social media use. 

The restrictions that these states will start enforcing are a setback for the rights of all internet users, but they are not written in stone. That’s why EFF is encouraging internet users - and particularly young people – to start keeping a record of how they are affected. If you are a teenager who loses access to an online discussion, can’t participate in a political campaign, or stop seeking information because you don’t want to upload personal information, document what happened. The same is true for adults who may be mistakenly blocked by age checks, and parents who may encounter obstacles to authorizing their children's use of online services. These experiences matter. They can help us show courts, policymakers, and the public what government restrictions on online expression actually cost the people who live under them. 

Hopefully, with enough proof of the expressive harms these laws cause, we can push lawmakers to rescind them. That’s why we’re encouraging folks to reach out to EFF once they’ve documented these harms. You can write to us about this issue at the email address agegates@eff.org. 

The Decisions

These two opinions, issued by the same panel from the U.S. Court of Appeals for the 11th Circuit, allow Florida and Georgia to enforce restrictions on social media accounts for people under 16 years old. The requirements differ by state. 

In Florida, the judges allowed that state’s H.B. 3 to move forward, which requires covered platforms to ban anyone under 14 from opening or keeping accounts—even with parental permission. Teenagers who are 14 or 15 can have accounts only with parental consent. To be covered, a platform has to use algorithms, allow content uploads or the viewing of other peoples’ content, and have at least one feature on a list of features the state considers bad, including livestreaming, engagement metrics, autoplay, infinite scrolling, or push notifications. These requirements effectively apply to every major social media service that young people use.

To the extent there is a silver lining in the ruling on Florida’s law, it’s that the panel recognized that H.B. 3 targets expression protected by the First Amendment. The problem is that the ruling uncritically accepts the idea that a social media service is addictive in a clinical sense, even if just 10% of users under 16 are using the platform for two or more hours per day (the standard set in H.B. 3). The court simply accepts that time spent online is a proxy for harm. The bill doesn’t distinguish doomscrolling or compulsive use from organizing a campaign, making art, or talking with friends. 

In Georgia, S.B. 351 can now be enforced. That law requires parental consent for anyone under 16 to hold an account on social media platforms. It also requires platforms to make “commercially reasonable efforts” to check users’ ages, which creates a hurdle for adults as well as under-16s. 

The ruling acknowledges that S.B. 351 “overwhelmingly applies to platforms that overwhelmingly host protected speech.” But the ruling faults the plaintiffs for not being able to show that “invalid applications substantially outweigh the valid ones.” That asks the groups challenging the law to meet a virtually impossible standard—to make their case, they would have to measure and evaluate the content hosted by all online services affected by the law. 

Both of these cases may be further appealed, and are likely to continue in the lower courts. But people in Georgia and Florida can no longer count on court injunctions to protect their access to the web. What the effects will be going forward depends on how platforms implement these new restrictions, including how they check ages and parental consent, as well as state officials’ views on these efforts. 

If you hit an age-gate while online, check out our blog post about how you might want to proceed, and our age-gating resource hub. If you want to speak out about your experience, you can talk to us at agegates@eff.org.

What is Lost

Some youth who lose their social media accounts will lose contact with friends. Others will lose access to a support group, the ability to speak out on current issues, or an audience for their artwork. More young people will be shut out of discussions about what’s going on in their school and their community. U.S. law has long recognized that people under 18 have their own rights to speak and receive information. These new laws interfere with those rights. 

The Florida opinion suggests that young people can browse the internet without an account, or use a parent’s account. But that doesn’t help those who might participate in a private group, send a personal message, or speak to an audience they have built up. Nor does it recognize the reality that in many households, young people may not have the ability to use a parent’s device, or even have healthy relationships with their parents. For parents of children under 14, the Florida law also overrides parental autonomy—even if parents wanted to allow their child on these services, they cannot do so by law. 

These laws won’t just harm younger kids. Adults and older teens will bear the cost of the new rules. In order to figure out who is young enough to not be able to join, or who needs parental consent to join, services will have to check users’ ages. That likely means asking people to submit ID or other sensitive information. Some people will be mis-classified as too young; others will decide that they’d simply rather stop participating instead of handing over even more personal data. 

Keep A Record

Between the recent Meta settlement and these 11th Circuit decisions, despite widespread opposition, age-gating is becoming a reality for the American internet. As these laws are enforced, we need to understand what they mean for the people who have to deal with them. And we need to create a record of their effects on everyone’s speech so we can push to repeal them.

If you encounter a restriction due to these laws that affects you, keep a record, ideally while the details are still fresh in your mind. Screenshots, along with notes about the date and time, the service involved, and the task you were trying to accomplish, will all be helpful. 

Did you lose an account or can’t participate? Describe what you lost. Were you using a group to organize a club, volunteer in your community, or keep in touch with friends? Did losing your account cut you off from people you wouldn’t otherwise be able to be in touch with? Even if you just used the account to access local news or follow your favorite content creator, that’s still a significant loss of your right to access information online.

Record problems with age checks and parental consent. What information did the service request from you? Were you able to provide it? Did it reject your age proof, or classify you incorrectly? If you’re a parent, were you able to give permission, and what did you have to provide? What promises did the service make about what it did with the data it collected from you? Save explanations given by the platforms or any services they employ to age gate, including any law they cite. If you are to appeal a result and choose to, keep track of those attempts as well. 

You can also document choosing to drop out. If you abandon an account or service because you’re unwilling to provide ID or other personal data, write down what you gave up, and why. You don’t need to submit sensitive information to show that you are burdened by new rules. 

You Can E-Mail agegates@eff.org

If these restrictions affect you, we encourage you to reach out to EFF by emailing agegated@eff.org and telling us more about what happened. 

EFF will continue to oppose laws that prevent adults and minors from expressing themselves online, or that push people to give up their privacy to participate in the digital world. These recent court decisions are setbacks, but they don’t settle the debate. By keeping track of people who lose access, age-check failures, and the online conversations that can no longer happen, we’ll be in a better position to challenge the worst of these restrictions, in both legislatures and courts. 

And in the meantime, EFF will keep fighting for laws that actually make us safer online—like stopping social media companies’  harmful surveillance of all internet users. We’ll continue to push for laws that empower parents, children, and all internet users to have meaningful choice and control over their online services. Those goals can make everyone safer online, while preserving our ability to speak and access information. 

Further Action 

• Email EFF about your experience at agegates@eff.org . 

Further Reading

• 11th Circuit Opinion in Netchoice v. Carr (Georgia)
• 11th Circuit Opinion in CCIA, NetChoice v. Uthmeier (Florida) 
• EFF amicus brief in Florida case
• EFF amicus brief in Georgia case
• EFF’s Age Verification Hub

The Indian CA eMudhra Limited has eight TLS certificates with laughably weak private keys:

The compromised eMudhra keys were defective at a level that’s challenging the imagination of many of the engineers studying the incident. A normal size for a NIST P-384 elliptic curve cryptography private key contains roughly 384 bits of entropy, a size allowing almost 2384, or a number with 116 digits, different possibilities. The private key sizes of the compromised keys ranged from 3 to 8 bits. Astonishingly, the private keys were 4, 56, 66, 115, 155, 156, 230, 237...

Generative artificial intelligence models are rooted in ideas of mid-20th century engineers who thought some amount of irrationality was essential for a machine that could think like a human, contends Benjamin Lindquist, an assistant professor in the MIT History Section, who holds an MIT Schwarzman College of Computing shared position with the Department of Electrical Engineering and Computer Science (EECS) and is a principal investigator in the Laboratory for Information and Decision Systems. 

To mimic creative thinking, these AI pioneers intentionally injected randomness into algorithms designed to deterministically solve problems, Lindquist writes in a new paper that appears in the journal Past and Present. In the paper, he traces the origins of AI hallucinations back to this early research and suggests there will be inevitable tradeoffs between creativity and predictability when trying to build machines that mimic human behavior. MIT News spoke with Lindquist about these ideas.

Q: Why did early computer engineers believe they needed to inject randomness and irrationality into AI systems designed for logic and calculation? 

A: There is a long history of many figures in the world of science and art theorizing that chance plays an important part in discovery and creativity — in the ability to originate ideas. They equated creativity with unexpected leaps of logic, or even a dream-like state that allows you to think about things from a new perspective. 

In the early 1950s, one popular idea from John Pierce, who was a prominent electrical engineer at Bell Labs, was about math being valuable in the world of art. The idea was shared by a lot of people working in early computing. When we think of artwork that includes math, we may think of something very orderly and precise, but Pierce came to the opposite conclusion. He concluded that the utility of math is that it could remove order from art. Then in a very calculated way, math could add a burst of the unexpected as a means to deviate from clichés and add an element of irregularity which just might lead to insight. 

One popular way to add irregularity into otherwise predictable computers was through artificial (or random) neural networks. Many early neural networks were built by psychologists, who thought that by enabling scientists to build a model of the brain, artificial neural networks allowed scientists to observe what is happening inside, including how brains make productive mistakes. Rather than being black boxes, researchers believed these systems could open this black box of the mind and let scientists peer inside and see all the messy stuff that was really happening.

But there was another camp in the world of AI who thought that creative thinking was just “normal” thinking done better. It is interesting to look at these two very simplistic heuristics for understanding intelligence and creativity, and how they do and don’t mesh. The debate, then, was about trying to determine what human inventiveness boils down to, and then how to reconstitute human inventiveness in machine form. 

Q: How did these early computer engineers view AI, and how is it different from the way we think about AI today?

A: When we think of AI systems, we think of ChatGPT or Claude. We value and use these systems because they give answers that, most of the time, are correct. One of the things that was most interesting to me in this research was finding out that a lot of the early advocates of these systems valued them for exactly the opposite reason. They wanted a system that, on occasion, gave answers that deviated from their expectations. They already had systems that could deliver reasonable and expected answers. They saw neural networks as valuable because they could give unexpected, perhaps even strange and bizarre answers.

One reason we might view these systems differently today could be because of how they operate. Early on, these systems were confined to laboratories, so there weren’t really any real-world consequences of a system that gives a strange, or wrong, output. But now there are legal and monetary reasons why OpenAI or Anthropic doesn’t want a chatbot that gives unexpected or creative answers. There has been a “sanding down” of strangeness in these systems. They still potentially have that at their core, but it is something that is now largely suppressed.

Q: How did early neural networks that incorporated randomness to simulate human creativity evolve to become the dominant paradigm in AI?

A: For a long time, a specific kind of AI called “symbolic AI” was the dominant approach. Essentially, symbolic AI says the world is based on rules. The role of the AI researcher is to try and reconstruct the knowledge of the world in facts and propositions and feed it into a computer.

Neural networks, with their use of randomness to solve problems, started to gain traction in the 1950s but fell out favor early on. Frank Rosenblatt, a psychologist who was a very important early figure in neural networks, died prematurely; he died accidentally on his 43rd birthday in 1971. He was quite a charismatic and forceful personality, who made a lot of grand promises about what systems based on neural networks could do. By the time he died, a shift toward symbolic AI was already underway. It is possible if, had he lived, things might have turned out differently.

But neural networks never went away. By the 1980s they had shifted more into the world of cognitive science. To become more powerful, and more useful, neural networks needed a lot of data and computational power. That didn’t really arrive until the advent of the internet, when a lot of data became available and computing started to power up. Around 2012, neural networks started to outperform and outpace a statistical form of machine learning, and they kept growing from there.

Q: What lessons can we learn from studying AI’s history that could inform its development? 

A: I think there is a cautionary lesson here. The ideas and experiences of these early engineers tell us that we can work toward quashing hallucinations — we can work toward making AI perform a certain way so it doesn’t produce unexpected or unwanted answers — but there are going to be other consequences of that. These historical figures were onto something. There is a connection between the surprising and creative conclusions AI can offer and errors or hallucinations. There are tradeoffs when we build our systems to behave one way or the other. Maybe it is impossible to be completely at either end of the spectrum, but when we work toward one thing robustly, we often sacrifice something else unintentionally.

When Veronica Calzadilla Sosa transferred to MIT from Miami Dade College in Florida, she was an incoming second-year student with an interest in chemical engineering. She didn’t know how involved she would soon become as a student leader in the department.

She would also go on to discover her competitive side.

At the encouragement of a friend who was then a team captain, Calzadilla Sosa joined MIT’s chapter of American Institute of Chemical Engineers, and the two worked with the Department of Chemical Engineering to build up the team of students representing MIT in the organization’s lively chemical engineering competitions. As the organization’s competition chair last year and the vice president of external relations this year, she has fallen in love with the club and found joy in bringing students together to work toward a common goal and have fun along the way.

When she first took on the role, MIT was new to the competition, and students were participating in only one of several events. Now, they participate in three categories: ChemE Cube (where teams build a miniature chemical plant that fits inside a 1-cubic-foot cube), ChemE Jeopardy (a “Jeopardy!”-style trivia competition), and ChemE Sports (where teams operate and optimize a virtual chemical plan). 

Calzadilla Sosa also captained MIT’s first ChemE Sports team, working alongside two first-year students. At their first competition, their challenge involved optimizing a distillation column, drawing on concepts Calzadilla Sosa was learning in her separation processes class. The team placed second at regionals.

“The competition was challenging, technical, and at times stressful, but also incredibly fun and rewarding,” she said after the event. “Experiences like this remind me how much engineering extends beyond technical knowledge alone.” 

For Calzadilla Sosa, the experience was about more than the result. It gave her the chance to take on a leadership role, work through unfamiliar problems with her teammates, and help create an opportunity for students who might not otherwise have participated.

Building community has been particularly important to Calzadilla Sosa, who began her undergraduate education in Cuba before moving to the U.S. When she later transferred to the Institute after earning her associate degree from Miami Dade, where she was part of the Honors College, “I was a sophomore for the third time,” she jokes. At that point, many of her new classmates had already spent a year getting to know one another and finding their footing.

She began to find her place in an unexpected setting: office hours.

During her first chemical engineering class at MIT, Calzadilla Sosa regularly went to office hours for help with difficult problems. She soon noticed that she was not the only one struggling.

“I was there because I was struggling with a problem, but then I would see more people also struggling with the same exact things,” she says. “And that, for some reason, gave me this idea that I wasn’t alone in that sense.”

Those shared struggles became a starting point for conversations, friendships, and a support system. She learned that finding a community did not necessarily mean having everything figured out. 

“Sometimes you find your community simply by allowing yourself to struggle alongside other people,” she says.

Throughout her undergraduate experience, Calzadilla Sosa has also explored the many ways chemical engineering can be applied beyond the classroom. 

While studying in Miami, she interned with the U.S. Food and Drug Administration, analyzing data on toxic elements in food, and with the engineering consulting firm Jacobs, where she learned about water and wastewater infrastructure projects in the county. As an MIT student, she has been a materials intern at the medical device company Convatec, and a materials chemistry/chemical engineering intern at the startup Folia Materials. 

In the process, she has gotten a closer look at different industries and begun to figure out which ones interest her most. At MIT, she has become particularly interested in energy systems and how existing resources and infrastructure can be used more efficiently.

“I think exploring different areas is very valuable,” she says. “I find myself thinking ‘Maybe I could do this or I could do that. Maybe I don’t like this. Maybe I prefer doing another thing.’”

Outside of her studies, Calzadilla Sosa enjoys cooking and baking for family and friends, traveling, and going to concerts and dance performances. She also likes bringing people together, especially when she returns to her first home in Cuba and has the chance to reconnect with loved ones.

As graduation approaches, Calzadilla Sosa is excited to leave student life behind and see where her degree takes her. She has not settled on one career path, but she is comfortable with that uncertainty. After studying at multiple institutions and exploring different corners of chemical engineering, she knows there is still plenty left to discover.

“I spent so many years as an undergrad, so I’m really excited to go to industry and take that next step and see the results of my education,” she says.

Nature Climate Change, Published online: 23 October 2026; doi:10.1038/s41558-026-02772-0

Extreme southward swings of the South Indian convergence zone (a major source of rainfall across southern Africa) can trigger devastating floods. Climate-model projections indicate that these swings might occur twice as often in the twenty-first century as in the previous century and produce more intense rainfall, owing to an increased land–sea temperature contrast and poleward intensification of atmospheric circulation.

Canada’s Parliament is debating a massive expansion of surveillance powers that will threaten the privacy and security of millions of people. Bill C-22, also called the Lawful Access Act, has already passed the House of Commons, and is now before the Canadian Senate. 

Canadians still have an opportunity to speak out and stop this dangerous legislation. The Canadian Civil Liberties Association (CCLA) is urging all Canadians to sign its petition opposing the bill. (The petition on CCLA’s website is governed by CCLA’s privacy policy.) 

Take action

Tell the canadian senate to stop C-22

As we wrote earlier this year, Bill C-22 gives the government new powers to force digital services—including telecom companies, messaging apps, and more—to help with government surveillance. Worse, it allows Canada’s Minister of Public Safety to order companies to create a backdoor to their services for law enforcement, as long as it doesn’t lead to a “systemic insecurity.” That’s a clear recipe for weakening the encryption we all rely on. 

It also requires services to retain metadata for up to a year, which reveals who people communicate with, where they go, and what services they use, even when they are not suspected of any crime. 

Researchers at CCLA and Citizen Lab published a detailed analysis of C-22 and its serious constitutional and cybersecurity problems. The analysis points out that the bill needs more than cosmetic changes—it calls for entirely withdrawing Part 2 of Bill C-22, the section that establishes the surveillance and data retention regime. 

Bill C-22 could also expand the sharing of Canadians’ personal data with foreign law enforcement, including the United States. Canada has been negotiating a cross-border data-sharing agreement with the U.S. that would allow American police to get information about Canadian internet users without any Canadian court oversight. 

Some Canadian senators have already expressed concerns about the bill, and rightly suggested, as CCLA and Citizen Lab have, that it may not be compatible with privacy protections in the Canadian constitution. 

If you’re in Canada, read and sign CCLA’s petition opposing Bill C-22 today. Don’t let the Senate allow this dangerous expansion of government surveillance to become Canada’s new reality. 

Take action

Canadians: defend your privacy and security

As a child, you likely saw a few Disney movies depicting inanimate objects, such as clocks, cups, and toys, as interactive companions to humans — an act of pure magic, seemingly. But scientists at MIT’s Computer Science and Artificial Intelligence Laboratory (CSAIL) are now doing something similar: transforming stationary items into self-aware tools that perceive and respond to human motion to complete a task.

Engineers have 3D-printed these dynamic items with built-in sensing, using conductive materials for sensors and traces (sort of like wires) inside. The issue: both components were typically fabricated using the same material, so they’d emit similar signals. It’s sort of like hearing two radio stations at the same time, a mixup that’s hard to interpret. This confuses, say, a glove that relays instructions to a robotic hand about how to handle a specific object. The device couldn’t filter out the noise or verify the angle of a user’s motions, leading a humanoid student to make errors.

Researchers at CSAIL and Tianjin University (TJU) in China may have found a way to 3D print more precise interactive items. With their “X-Hinges” software, users can customize a design, and the tool will automatically embed two different materials: a filament for the sensors designed to send the strongest signal possible, and another for the wire-like elements that don’t interfere. Interactions won’t get lost in translation, meaning users can fabricate objects that respond in real-time, such as small robots, household decor, object-detection systems, and toys.

With X-Hinges, users can put together an item by selecting and connecting different shapes, then choosing how certain parts move. The item won’t be limited to moving in just one way like previous approaches; instead, users can select up to three “axes:” compressing, up and down, or to the sides. Building a robotic hand, for example, you’d likely want its fingertips to move vertically and laterally. The new tool would then embed sensors where the object bends (in this case, its joints) to capture motion data from both angles. That way, the device can understand and respond to your interactions more dynamically once it’s 3D-printed.

“It’s kind of like adding a conscious element to everyday objects,” says Jiaji Li, MIT electrical engineering and computer science (EECS) postdoc and CSAIL researcher, who is a senior author on a paper introducing the work. “What you get is objects that better understand how they’re being used and have more ways to respond. In the same way an AI agent is programmed to make certain decisions based on our instructions, these creations have built-in sensing to adaptively react to human touch.”

Jiaji Li and lead author Xiang Chang, a TJU PhD student and visiting researcher at CSAIL, used X-Hinges to create many clever devices. For example, they made a glove that can teach a robot how to grasp blocks. It adjusts to the size of a user’s hands, then records how the joints in their fingers bend via sensors before rapidly relaying that information to a humanoid hand to mimic it. The glove could be useful in factories or homes, where a robot often needs to learn new interactions quickly.

The researchers also produced a small, origami-style lamp using X-Hinges. It senses when a human pinches it closed and adjusts its brightness accordingly. When you turn on this adaptive, portable light source (sort of like a reading light), it looks like a piece of folded-up paper that sprouts into a lamp.

X-Hinges can even assemble devices that identify which objects have been placed on it. You could put a banana on top, for instance, and it’ll recognize the fruit almost immediately based on the tactile data it’s recorded using its sensors. This advanced physical awareness could be integrated into detection systems in places such as airports and grocery stores. 

Behind each of the scientists’ creations is an easy-to-use interface that helps you design interactive objects from scratch. Users can choose how each part of their design looks and moves, just as the researchers did when making a video game controller that resembles a cartoon shark.

X-Hinges gives you four shapes to choose from: a custom option, cylinder, rectangle, and thin outline. To recreate the unique look of a shark’s tail, the researchers designed their own shape. They then chose how the toy bent, opting for its tail to move up and down, sort of like a joystick. Finally, the program embedded the sensors, and the scientists 3D-printed their device.

The researchers say that X-Hinges’ diverse motions are a novel feature compared to past attempts to 3D-print responsive everyday objects. “Most methods only allow for one axis of motion, often due to signal interference. X-Hinges enables your 3D-printed item to move from three angles,” says Chang. “Ultimately, you get a design with the intended movement you want. It also records motion data in each of those areas at the same time, making the device responsive to different kinds of interactions.”

The tool could help realize the untapped potential of the seemingly mundane. Objects we use every day for a specific purpose, like a water bottle for drinking or a lamp for lighting, could become interactive gadgets. Much like how a chatbot uses a sort of digital intelligence to answer your prompts, an object could leverage a kind of physical intelligence to execute a physical task when users interact with it.

For now, though, X-Hinges faces a calibration bottleneck. Each time an item is 3D-printed, its layout of electrical elements varies slightly, so two devices that appear identical from the outside may not make the same sensor readings. This is crucial if you’re building a deformable fitness glove, for instance, for two separate users. To fix this, Chang and Li built a computer vision system that can recalibrate outputs to align, ensuring data is accurate across two of the same items, although they hope to develop a built-in signal recalibration mechanism in the future.

That ambition traces back to the throughline in Jiaji Li’s own research: letting actuation and sensing “grow” directly inside a 3D-printed object, instead of adding them on afterward. He previously built printed tendon-driven mechanisms that gave objects the ability to move; X-Hinges is how he’s now building on the ability to sense. The next step, he says, is combining the two in a single print — it’s actuation and sensing born together in the same fabrication process, opening the door to new physical platforms for embodied intelligence and AI agents.

Chang and Li wrote the paper with MIT associate professor of EECS and CSAIL principal investigator Stefanie Mueller and recent TJU graduate Haiyang Yan. Their work was supported, in part, by a postdoctoral research fellowship from Zhejiang University and the MIT-GIST Program.

The researchers will present their work at the ACM Symposium on User Interface Software and Technology in early November.

Entrepreneurship and MIT have become a classic pairing, with a storyline that seems to write itself: A researcher develops a brilliant innovation in the lab, spins out a company, and brings a product to market that saves lives or improves society. It happens, sure — but long-term startup success is far from guaranteed.

That’s the challenge that prompted the launch of the MIT Kavanaugh Translational Fellows Program a decade ago, giving scholars who want to turn academic research into solutions to pressing challenges the time, tools, and business training to improve their chances of success.

“MIT has this world-class research facility and faculty and everything, but it also has world-class entrepreneurial programs,” says Nick Diaco, an MIT postdoc and 2025 Kavanaugh Fellow, in a new video about the program. “You really need both if you actually want to take an idea from the lab and put it into the real world and put it into situations where it’s actually affecting people’s lives.”

The program’s focus reflects a fundamental challenge for academic innovators: developing a promising technology is only the beginning. Turning it into a viable business requires making difficult decisions about customers, markets, financing, and other factors that may fall outside a typical researcher’s expertise.

“Even in a place like MIT, the majority of those people who choose to start businesses or bring that product to another business, the majority are going to fail,” said philanthropist Bart Kavanaugh at a May event announcing the 2026 fellows. Kavanaugh is one of the namesakes of the Saks-Kavanaugh Foundation, which supports the fellowship. He and his wife, Betty Saks, run the organization.

The foundation, he explained, analyzed what distinguishes successful startups. The selection process for the fellowship, he told the three new fellows — John Zhang, Maximiliano Jara Fornerod, and Xinyuan Zhang — is intended to identify researchers who have the potential to succeed.

The three are developing technologies ranging from a faster way to manufacture custom optical lenses to at-home strep throat tests and infrared detectors that can operate without energy-intensive cryogenic cooling.

They join a growing legacy of Kavanaugh Fellows whose research has moved toward commercialization, including Sublime Systems, a manufacturer of low-carbon cement; SiTration, which develops technology for extracting materials; and Stratagen Bio, which develops tools for quantitative biomarker assessment.

The yearlong program, managed by MIT’s Department of Materials Science and Engineering, gives MIT scholars time to focus on the business side of their ideas and develop the planning and decision-making skills needed to move promising research beyond the lab.

“If while you’re doing your research, you’re able to set aside some time to investigate the commercial potential before you leave the university, you get a really good picture on, 'is this a good idea for commercialization?'” says Diana Mojahed in the video. Mojahed was a postdoc at MIT when she became a 2023 Kavanaugh Fellow and is now the CEO of Lightfinder, which makes handheld spectrometers for health care, manufacturing, and telecommunications.

“It’s so much more than just achieving good specs with whatever you’re trying to achieve. There has to be a market for it. The unit economics need to work out. There’s a lot that goes into building a company.”

Learn more about the Kavanaugh Translational Fellows Program.

PHP maintainers have released fixes for two critical vulnerabilities:

PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities that can allow unauthenticated remote code execution. All PHP users are strongly encouraged to update immediately.

Who is at risk: all PHP installations serving web requests, including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP and LiteSpeed. We consider the risk highest for mod_php, with a demonstrated exploit where an unauthenticated request can trigger the attack before any application code runs...

Building a nuclear power plant is one of the world’s most complex construction projects. It requires thousands of trucks to ship parts, often to remote regions, where huge teams of skilled workers like electricians and welders come together to assemble everything over many years.

Financing such projects is difficult, in part because no one wants to risk loaning money to a project that might never generate power and revenue, whether that’s due to technical failures, the inability to recruit enough talent, or regulatory hurdles.

Stated this way, it’s no surprise the average nuclear plant costs twice as much as originally expected and faces delays of many years. Those cost overruns and delays have ground the nuclear industry to a near halt: When Georgia finally turned on its Vogtle Unit 3 reactor in 2023 (seven years late), it was the first new reactor constructed in the U.S. in over 30 years.

Blue Energy wants to make deploying nuclear power plants more like wind, solar, and gas projects. The company prefabricates huge blocks of its nuclear plants at shipyards, where workers and equipment already produce huge steel structures for the oil and gas industry every day, then ships the blocks on barges to the site of the plant for final assembly.

“The nuclear problem is a construction problem,” says Blue Energy founder and CEO Jake Jurewicz ’14, SM ’15, who grew up in the construction industry and studied the differences between nuclear and oil and gas projects at MIT. “On paper, nuclear technology is almost perfect: It operates above 90 percent capacity, it’s zero carbon, dispatchable, extremely high reliability, and has predictable cash flow. We don’t have enough nuclear power because we’re really bad at building it. But there’s already a huge manufacturing supply base for offshore oil and gas and offshore wind. If we can point that toward building nuclear plants, and finance it the same way, we can reinvigorate the industry.”

Blue Energy’s prefabricated blocks weigh around 1,500 tons and are designed to be easily assembled at their destination to complete a nuclear power unit over the course of a single year. The company is further reducing barriers to financing and speeding up construction timelines by designing its early plants to run on gas initially before switching to nuclear reactors, which it hopes will generate revenue within three years from the start of construction.

The company has already gained approval from the Nuclear Regulatory Commission for its gas-to-nuclear approach and has also secured an agreement with GE Vernova Hitachi Nuclear Energy for its first project, a 2.5 gigawatt hybrid nuclear power plant in Victoria, Texas, that is scheduled to begin producing power in 2030. This September, Blue Energy submitted the first part of its application to the NRC to begin construction on its Texas project, making it just one of five companies to do so in the current nuclear development era.

“Our first site is a great power generation project for that community because it's going to generate a lot of excess power,” Jurewicz says. “It’s going to show a new model for the world: This is a way the U.S. and its allies can deliver a turnkey nuclear power plant and turnkey energy sovereignty.”

A new blueprint for nuclear

Jurewicz grew up in Chicago, where he worked as a construction draftsman through high school. When he arrived at MIT, he double majored in nuclear engineering and physics, then stayed at MIT for a masters in the Department of Nuclear Science and Engineering. He also minored in energy studies through the MIT Energy Initiative.

Jurewicz’s master’s thesis explored ways nuclear power plant construction could apply lessons from the offshore oil and gas industry.

“If you’re trying to solve the construction problem, find parallel industries where people have solved it before,” Jurewicz says. “That’s why I looked at offshore oil and gas as well as nuclear shipyards in the U.S. and South Korea. We build oil and gas plants all the time, so what looks different about the way we build and execute an oil and gas plant relative to how we build a nuclear plant? They’re both mostly steel welding.”

Shipyards have several advantages over other sites for building nuclear power plants. For one, they already have thousands of skilled workers and loads of specialized equipment. They can also manufacture things in controlled environments, enabling increased automation and reducing uncertainty.

Following graduation, Jurewicz worked in corporate strategy at the utility company Exelon Energy, where he sponsored research at MIT. He originally considered starting Blue Energy as a graduate student with an approach that included creating a new passive safety system and going through a new regulatory insurance framework.

When he founded Blue Energy in 2023, he wanted to minimize risks with a more conventional reactor design. That includes prefabricating functional chunks of the reactor — what the company calls “Blue Blocks” — at a shipyard using standard manufacturing approaches that meet nuclear licensing and quality assurance requirements.

“The 1,500-ton Blue Block prefabricated modules are fully functional mechanically and electrically, they have plumbing — everything is delivered ready to run directly to the site,” Jurewicz says. “Then we have this gas-to-nuclear technology that allows us to get things going earlier with gas by building the whole nuclear steam turbine system right away and energizing it with steam from gas combustion turbines, which means we can finance it as a gas plant, so the cost of capital goes down. It dramatically lowers the cost of the project, and it reduces risk. Then we switch it with the nuclear reactor.”

Blue Energy’s nuclear reactor will be a small modular light water reactor that has already been approved by the Nuclear Regulatory Commission and is made by GE Vernova Hitachi Nuclear Energy.

Blue Energy’s first power plant in Texas will provide 1 gigawatt of power using two GE Vernova gas turbines in 2030 and then add another 1.5 gigawatts of power from up to five small modular reactors beginning in 2032.

“It will be pretty easy to add more modular reactors to the site, so we can lower the cost to that community to provide things like water desalination, which is a big issue in south Texas,” Jurewicz says. “This power infrastructure is clean, reliable, and resilient through hurricanes or any other weather scenario that can happen in that community. It creates hundreds of high-paying permanent jobs and the foundation for a lot of local economic growth.”

Faster, cheaper nuclear

Historically, nuclear power plants have taken 10-plus years of construction. Blue Energy believes it can shorten that to about 36 months. The company is projecting power from later projects to reach about $5,000 per kilowatt. For context, the Vogtle nuclear plant delivers power at more than twice that cost.

Jurewicz believes Blue Energy’s lower prices could finally inject much-needed life into the U.S. nuclear industry.

“Despite all of the excitement around nuclear, you haven’t seen real power purchase agreements get signed because there’s a stalemate on who’s going to take the construction overrun risk,” Jurewicz says. “The government doesn’t want to take it. The construction companies don’t have the balance sheet to take it. The utilities can’t take it. Even the hyperscalers won’t take a two-or-three-times cost overrun risk. Blue Energy is introducing a fifth party to break the stalemate, which is the shipyards and fab yards, which are best positioned to take the risk because they can make things in a controlled fabrication environment, so they'll take the risk on construction in their own yards.”

The internet is a vast and confusing place no matter your age. Trying to help youth engage with it safely and privately is a complicated topic that touches on many different skillsets and ideas. But just because it’s complicated doesn’t mean it’s impossible. We’ve launched our Online Privacy for Parents and Youth Surveillance Self-Defense guide in hopes to provide a framework for finding solutions that work for you. 

EFF rolls out this crucial resource as state and local governments consider ill-advised laws that cut young people off from essential information and experiences. This particularly harms vulnerable youth and marginalized groups who often find safety in supportive online communities they can't access offline. Such laws also entail age gating, which compromises the privacy of all internet users and stifles young users’ ability to learn, grow, and express themselves.

Young people have unique needs and those needs change over time. Trying to protect from everything all the time is an exhausting process, but the security community has long had a solution for this: security planning (also called threat modeling). The idea is to provide a series of questions designed to help you focus on what’s truly important. When it comes to online privacy, this is as applicable for youth and parents as it is for anyone else. 

We used a security plan as our foundation for this guide because deciding what is and isn’t important is the first step we should all take when assessing our privacy risks. But this isn’t a place for quick fixes, and every young person has their unique needs and considerations. There is no single tool or technology fix that can substitute for spending time learning, and then teaching a young person, how the internet works, how to use it, what sorts of harms exist, and how to navigate those harms.

Solutions are rarely about the tools or software you use. It’s about understanding the threats and concerns you have, and then determining what steps you can take to mitigate those risks. We hope our Online Privacy for Parents and Youth guide can help provide the outline to get the conversation started.

Donate Today!

An open internet where people can freely build, share, and remix each other's work is a powerful engine of grassroots innovation we’ve all benefited from. In recent decades, however, corporations have taken control of an increasing share of this work, giving them a greater ability to stifle challengers and limit our choices. When regulators address this by mandating that  tech giants play fair by requiring interoperability, the gatekeepers respond with a tired refrain: Playing fair puts users’ security at risk.

Unfortunately for these trillion-dollar companies, this gotcha isn’t the end of the conversation. Regulators can ensure that meaningful choice and security thrive.

Lawmakers have been catching up, recognizing that the best way to rein in big tech is to require these oligopolies to open up their platforms to independent developers. As we explained six years ago, mandating interoperability helps prevent the misuse of people’s data and enables more privacy-respecting alternatives. Tech giants, in contrast, have been arguing that our data is safer when they have exclusive control.

Tech Giants Claim Interoperability Means Insecurity

The European Union’s Digital Markets Act (DMA) put interoperability into law under Article 6(7): “gatekeeper shall allow providers of services and providers of hardware, free of charge, effective interoperability with” a designated Core Platform Service they operate. The language describes an unambiguous requirement to remediate vendor lockouts and anti-competitive behavior of the major service operators—it is not optional.

Apple claimed that enforcing this obligation in mobile app stores would put their customers at risk and do irreparable harm to trust in their brand. It’s an argument reminiscent of Apple’s fight against the right to repair, and in both instances the company is fighting to maintain its restrictive ecosystem to stop people from finding better deals elsewhere. Apple has long cultivated a more corporate-controlled experience with the iPhone, but this argument is now also being used for the relatively-more-open Android devices from Google.

In the same year Apple argued against the DMA, Epic Games sued Google for its restrictive terms of service and extractive policies for revenue generated in apps. Google predictably alleged that opening up its platform to other app stores it couldn’t vet would allow harmful apps to be installed. The case was ultimately decided this year in the U.S. federal appeals court for the Ninth Circuit, with the court rejecting this argument, dealing a blow to  Google’s feudal security arrangement, and paving the way for third-party app stores to be delivered as apps via the Google Play Store.

Interoperating Secure Systems Can (and Should) Exist

Policymakers cannot take tech giants’ claims at face value. Companies have every incentive to resist interoperability requirements, because interoperability lowers practical barriers and reduces switching costs for consumers adopting competing services. 

Even where companies offer credible claims from internal technical and security experts, independent experts rarely have the access and information they need to test those claims. Companies have selectively made arguments that security is harmed by interoperability, often in contexts which are to their advantage. These companies are happy to let a general misconception flourish which frames security as inherently opposed to interoperability.

This narrative is wrong. We’ve seen that when interoperability and information security are both set as essential and non-negotiable criteria, secure interoperable systems result—systems that don’t sacrifice the rich features we’ve come to expect of the services we rely on. 

The cross-platform rollout of Rich Communication Services (RCS), and now Message Layer Security (MLS) on top of it is a perfect example of this, creating end-to-end secure messaging by default between Android and iOS. For RCS and MLS, Google was conveniently on the other side of the interoperability argument, campaigning Apple to adopt the standard to overcome the diminished “green bubble” experience iPhone users had when texting non-iPhone users. Once Apple finally agreed to interoperate by implementing common standards, all users benefited from improved messaging security. In cases where legitimate security concerns are raised, these can be assessed and remedied on a case-by-case basis, without sacrificing user agency.

Striking the Right Balance

Retrofitting interoperability into already secure closed systems shouldn’t be done carelessly: it requires regulators strike the right balance of pressure and leniency to allow the time and precision necessary to make these renovations. Any components developed with the assumption of privileged access by trusted parties (e.g. your browser engine) are particularly vulnerable to serious security risks when opened up to unaccountable third parties.

By adapting interoperability and information security as essential design principles, we can expect more safety, but also more freedom.

With regard to the DMA, when security concerns are legitimate, we urge the European Commission to work with companies and outside experts to offer guidance in technical implementation and provide clarity on regulatory compliance. This approach paves a path forward that balances the interest of legal oversight and the needs of the companies alike. 

Policymakers wishing to uproot these unfair platforms of control must do so with care and limit the impact this disruption can have. But security concerns must not act as a lever to indefinitely delay compliance. Closed systems should be impartially evaluated, and if concerns are valid, regulators can allow more time and guidance to be given to companies implementing these changes. One possibility is a tiered approach: offering leniency during an initial period where systems need to be retrofitted to abide by new requirements, followed by a subsequent and ongoing stricter observance of fair play.

Once interoperability and information security are adopted as essential design principles, further development with these rights-enhancing principles in mind will more easily follow. The result will be an internet the world deserves—where we can expect more safety, but also more freedom.

The Brazilian National Data Protection Agency (ANPD) plays a pivotal role in the regulation of digital platforms according to new legislation approved in Brazil. Throughout this year, EFF has presented comments, filed submissions, and met with the agency to emphasize crucial guardrails that the enforcement of new regulations should ensure. 

ANPD is responsible for detailing and applying obligations set in Law n. 15.211/2025, which established rules for the protection of children and adolescents in the digital space. While some provisions establish important privacy safeguards, like prohibiting advertising based on profiling of underage users, the law created mandatory age assurance mechanisms for accessing digital products and services. 

We have raised alarms on the privacy and free expression issues around age-gating the internet. Age verification technology is often inaccurate and privacy-invasive. Examples also show how it’s prone to enforcement overreach, resulting in sites blocked beyond legal requirements. In the UK, providers disproportionately restricted several counseling, support and mental health sites under the Online Safety Act. Current age assurance methods risk wrongly walling off adults with no valid IDs, facial differences, physical disabilities, among others. 

We highlighted these concerns in our comments and submissions underscoring that ANPD should avoid a blanket approach to age assurance obligations. Following the legislation, restrictions should apply only to products and services that are inadequate or prohibited to children and adolescents according to categories already set in regulation, with robust protections against subjective and overbroad interpretations. Guarantees such as access to information, freedom to participate in society and meaningful access to technologies also compound what constitutes the best interests of the child.  

Moreover, we stressed that zero knowledge proofs alone fail to ensure strong user privacy, including safeguards that the law itself sought to secure. Our submission explains why other requirements, such as unlinkability, selective disclosure, batch issuance and processing on device, are crucial for achieving greater levels of protection and mitigating privacy harms. Minimum information being shared to the verifier and no “phoning home” to the issuer of a user’s accepted credentials are conditions that prevent actions like collusion and data sharing about the user. 

We also shared inputs about the scope of the law, asking more clarity on which providers are covered by its obligations and the importance of treating differently non-dominant players like federated networks and free software applications. Without that clarity, this could negatively impact beyond gaming and major platforms that are the main target of these regulations. We elaborated on the agency’s regulation of prevention duties, the relevance of modulating them according to the type and structure of providers, and alerted them that their interpretation should not result in general monitoring obligations. 

On another but related front, we sent comments regarding Brazil’s new internet intermediary rules. Here too, ANPD has a critical regulatory role after a Supreme Court’s decision and presidential decrees changed the liability regime initially set in the law known as “Marco Civil.”  

With the turn to notice and takedown mechanisms and duty of care obligations, we emphasized measures to prevent censorship of protected content. These involve ensuring solid means for appeals of restricted posts, avoiding overreliance on AI-based content moderation, strictly tailoring the application of concepts like duty of care and systemic failure, and not normalizing the blocking of platforms and websites.  

We raised concerns about a trend reflected in the new regulation requiring platforms to proactively report user to authorities with unclear guarantees. Finally, we urged the agency to advance essential transparency and accountability measures for enabling greater public oversight over the application of the new regime. 

As we said before, platform accountability under the new rules ultimately hinges on how accountable its enforcement will be by platforms and state institutions. Rigorous commitment to fundamental rights, including freedom of expression, privacy and data protection, is required so that intended protections don’t instead lead to harms. ANPD must uphold this commitment and make sure that new regulations don’t backfire.