ICE collected nearly a million DNA samples last year.

States are dealing with new challenges in health care, disaster relief, education and more.

Memos show a federal group cannot meet "all requested resources" to fight wildfires and "no immediate relief" is expected.

A new law will make the nation the first to block legal claims seeking corporate accountability for global warming.

Kevin Guthrie served as the director of the Florida Division of Emergency Management since 2021.

That fossil fuel infrastructure threatens to push Big Tech’s climate goals out of reach.

During test periods this winter and next, air traffic controllers tell some flights to deviate up to 2,000 feet to avoid areas where contrails are likely to form.

As glaciers and permafrost melt due to higher temperatures caused by climate change, the threat of landslides is rising in the Swiss Alps.

There may not be one perfect fabric for extreme temperatures, but there are ways to pick clothing that works with the body’s cooling system rather than against it.

MIT researchers have overcome a major challenge holding back the real-world deployment of microwave quantum technologies for advanced signal processing and secure communications.

The team developed a scalable platform that generates pairs of highly correlated radio frequency waves, without the need for bulky and expensive cooling equipment. In quantum technologies, these linked radio waves can be used for noise-resilient communication or high-precision radar and sensing. However, they’re usually only generated in research labs, under extremely cold conditions.

The MIT researchers fabricated a small, electronic device that can generate the same type of highly correlated signals at room temperature. 

The device incorporates a magnetic film, which interacts with microwave energy inside a metal cavity to split an incoming signal into two linked output signals. The researchers used the device to demonstrate secure communications by encoding information in a signal that could only be recovered using its partner signal.

“We’ve shown how the quantum properties of magnets can be leveraged to realize new communication and detection technologies. I hope our demonstration of this platform will enable further development of room-temperature quantum simulators, which have huge potential to enable many future discoveries,” says Qiuyuan Wang, an electrical engineering and computer science (EECS) graduate student and lead author of a paper on this technique.

Wang is joined on the paper by Aravind Karthigeyan, a graduate student at the University of Illinois at Urbana-Champaign; Chung-Tao Chou, an MIT postdoc; and senior author Luqiao Liu, an associate professor in EECS and a member of the Research Laboratory of Electronics. The research appears today in Nature Electronics.

Synchronized signals

Microwave photons are fundamental particles that form the signals used for wireless communication and sensing. 

Scientists can split one microwave photon into two tightly correlated photons using a device called a Josephson junction, which is an element of a superconducting circuit. These linked microwave photons can be used in applications like secure communications or high-performance radar systems that can detect extremely faint signals.

To enable secure communications using these correlated signals, engineers could design electronic devices that encode data in one signal by altering the signal’s properties, such that the information could only be decoded at the other end of the transmission using the matching signal. But to operate effectively, superconducting circuits must be kept at temperatures below 273 degrees Celsius, usually inside a bulky, expensive, and energy-intensive cryostat machine.

While pursuing a different line of research, the scientists in Liu’s group realized they could generate the same highly correlated microwave signals using magnets instead of cryogenically cooled superconducting circuits.

By putting a magnetic film into a microwave resonator, which is a metal cavity that traps electromagnetic energy, they could split one incoming microwave photon into a pair of perfectly synchronized signals with distinct frequencies, at room temperature.

“On its own, each signal looks random, but their phase relationship remains strongly correlated,” Wang explains.

Their device relies on magnons, which are tiny packets of magnetic energy. Typically, pumping microwave photons into a magnetic system generates a pair of correlated magnons with the same frequency. 

Even though both magnons are correlated, because they have the same frequency, scientists can’t separate them. They would need to separate the magnons to use one signal for transmission and the other for detection in secure communications.

A hybrid system

By coupling a magnetic film with a microwave resonator and carefully controlling the energy they pump into the device, the researchers could form hybrid magnon-photon waves. These hybrid waves output a pair of synchronized signals with distinct microwave frequencies.

The signals remain strongly correlated, but since the frequencies are always different and random, an attacker can’t recover the information encoded in one signal without having the matching one to use as a key.

The researchers demonstrated this by encoding a small image in the frequency of one microwave signal. They successfully decoded the signal and extracted the image using its partner.

“Magnonic systems exhibit a remarkably rich range of nonlinear dynamics, but these nonlinearities have not yet been harnessed for practical applications as extensively as those in nonlinear optics and other dynamical systems. In this work, we address one important challenge: the spectral overlap between a pair of ‘twin’ magnons generated by the same pump photon. By using the level repulsion arising from coupling between magnons and microwave photons, we were able to separate the two magnons in frequency,” says Liu. “We believe this demonstration could provide a foundation for technologies such as quantum radar, secure communications, and quantum-limited sensing, all of which rely on correlated — and ultimately entangled — microwave sources.”

This hybrid magnon-microwave system could also be used in noise-resilient communication by enabling the receiver to decode a message that has been garbled by random data that interfere with the transmission.

Correlated microwave signals are also a key element of a quantum simulator, which is a device that can emulate the complex behavior and interactions of subatomic particles that classical computers can’t handle. Scientists are developing quantum simulators to discover new drugs and materials. 

By generating correlated signals at room temperature, this new technique can improve the scalability and reduce the costs of quantum simulation. In the future, the researchers want to develop a scalable architecture for their platform, moving it one step closer to real-world deployment. They also want to explore additional applications for the process and use their platform to study the underlying physics of correlated microwave signals. 

“The creation of a non-degenerate parametric magnon-polariton platform marks an important milestone for cavity magnonics, extending the field beyond coherent microwave generation to the production of multichannel correlated microwave photons,” says Can-Ming Hu, a distinguished profess or physics and astronomy at the University of Manitoba in Canada, who was not involved with this paper. “This breakthrough will broadly impact secure microwave communications, hardware random number generation, correlation-based signal processing, and intelligent microwave sensing — all operating within the classical regime at room temperature. Looking ahead, this platform could well be remembered as the starting point for realizing quantum-inspired microwave sensing and communication technologies based on nonlinear cavity magnonics.”

This research was supported, in part, by the National Science Foundation and the U.S. Department of Energy.

Immune cells that are engineered to attack cancer cells, known as CAR-T cells, are used to treat some types of blood cancer. However, only about 5 percent of hospitals in the United States have the ability to generate and deliver CAR-T cells to patients. For many patients, this means the cells need to be frozen and shipped long-distance.

To help make this type of therapy accessible to more people, researchers at MIT have developed a new way to protect the cells from damage that can occur when they are frozen for storage and shipment. Their technique significantly reduces the use of a chemical preservative that is now used to protect the cells, which should make it easier for more hospitals to provide this treatment option to patients.

Instead of treating the cells with a cryoprotective chemical that has to be removed before treatment, the researchers were able to preserve them using a nontoxic antifreeze sugar.

“With this approach, you could theoretically just thaw the cells and then inject them, without any extra processing steps. We think that could allow a lot more cancer treatment centers to be able to give CAR-T cell therapy,” says Ana Jaklenec, a principal investigator in MIT’s Koch Institute for Integrative Cancer Research and one of the lead authors of the study, which appears this week in Trends in Biotechnology.

In the study, the researchers showed that cells preserved using this process had higher survival rates and could be successfully used to treat lymphoma and glioblastoma in mice.

Robert Langer, the David H. Koch Institute Professor at MIT, is also a senior author of the paper. MIT postdocs Amy Lee and Khanh Tran are the paper’s lead authors.

Preserving cells

To make CAR-T cells, doctors isolate T cells from patient blood samples. These cells are then engineered to express a protein called chimeric antigen receptor (CAR), which can be designed to target specific proteins found on cancer cells.

Then, the cells spend several weeks proliferating until there are enough to transfuse back into the patient. A small number of hospitals are equipped to generate and administer these cells, but most CAR-T cells are generated at centralized lab facilities. Once ready, these cells are frozen and shipped to a hospital or cancer treatment center.

To protect the cells from ice crystals that can damage their membranes, the cells are treated with a chemical called dimethyl sulfoxide (DMSO), which prevents ice crystal formation. This compound must be removed before the cells are transfused, but most hospitals don’t have the expertise to do this, which limits their ability to provide CAR-T cell treatment.

The process of removing DMSO can also harm cells, reducing the number of CAR-T cells that are viable and effective. In the new study, the MIT team wanted to find a way to reduce or eliminate DMSO from the process, which could make it easier for these cells to reach more patients.

“We looked at this cell-manufacturing process to see if there are ways to improve it, to increase the efficacy and hopefully eventually get to the point where these cells can be easily distributed to treatment centers,” Jaklenec says. “Our goal was to eliminate adding this chemical and really focus on safe excipients like sugars.”

The researchers employed two sugars that scientists have previously used to help cells survive cold temperatures. These sugars — trehalose and sucrose — help cells to naturally combat cold by protecting proteins from denaturation and preventing the formation of ice crystals. This antifreeze mechanism is found in many Arctic organisms, such as North American wood frogs, and helps them to survive extreme subzero temperatures. 

To get sugar molecules into the cells, the researchers used a technique called electroporation. By applying a small electrical current to the cells, they can briefly create holes in the cell membrane, allowing large molecules such as sugars to pass through. They found that they still needed to add a small amount of DMSO, but not enough that it had to be removed later. 

“We believe that our cryopreservation strategy can truly improve the cell therapeutic accessibility because with our strategy, you don’t need to remove the cryoprotectants. You could use the cells upon thawing,” Lee says.

More effective therapy

The researchers tested this technique on CAR-T cells as well as mesenchymal stem cells, which can differentiate into many other cell types and hold potential for use in regenerative medicine. For both types of cells, a higher percentage of the cells survived the freezing and thawing process when sugars were used as the main cryoprotectant instead of DMSO. 

They also used thawed CAR-T cells to treat non-Hodgkin’s lymphoma and glioblastoma, in mouse models. Mice treated with CAR-T cells preserved using the new strategy had higher survival rates than mice treated with cells preserved using the conventional DMSO approach.

“Preservation methods for living biotherapeutics have seen limited innovation, remain poorly characterized at scale, and often compromise cell viability and function after thawing,” Tran says. “We believe that our findings underscore the importance of thorough characterization and optimization of every stage of cell therapy manufacturing, which could have dramatic impacts on treatment efficacy.”

The researchers now hope to work with hospitals to explore whether their new technique could be easily integrated into the process of producing and thawing CAR-T cells.

“If that’s successful from a cell viability and functionality standpoint, perhaps we will do a small trial with patients,” Jaklenec says.

Vijay G. Sankaran, a professor of pediatrics at Boston Children’s Hospital and Harvard Medical School and a Howard Hughes Medical Institute Investigator, who was not involved in the study, says he is excited by the potential applications of the research. 

“As a pediatric hematologist and oncologist, many of the cell therapies we use, including CAR-T cells and blood stem cells, require us to collect and freeze a substantial number of cells, so that enough healthy cells are available after thawing for when patients need treatment. This work suggests an innovative approach that could help more cells survive the freezing and thawing process, potentially making these powerful therapies more reliable and effective. Of course, further work will be needed to validate these results in settings where this approach can be clinically applied,” Sankaran says.

This work was supported by postdoctoral fellowships from the Ludwig Center at MIT’s Koch Institute and the Convergence Scholars Program at the MIT Marble Center for Cancer Nanomedicine.

Concrete has served as the foundation of empires for thousands of years. Today, it’s one of the most common materials in the world. But one look at the ancient Roman concrete structures still standing suggests that ancient builders knew something about durability that we don’t.

MIT Associate Professor Admir Masic has spent his career studying ancient Roman concrete. His work has uncovered details about what gave Roman concrete its legendary durability, including the manufacturing process that endowed it with self-healing properties.

In 2021, Masic decided to apply those findings to improve the durability of modern concrete by co-founding DMAT. Today, the company has developed additional technology to create a concrete additive that increases the lifespan of concrete structures by 50 percent and reduces CO2 emissions to 40% of traditional concrete.

The company’s concrete has been used to make complex infrastructure across Europe including underground water tanks, road barriers, and pavement in Italy and Switzerland. The company plans to expand to the U.S. soon.

“We can now offer an extremely competitively priced, self-healing product that is easy to implement and available worldwide,” Masic says. “What’s exciting to me is that this material could become the industry standard without requiring companies to change how they operate. It doesn’t introduce any uncertainty, because it’s based on ancient Roman technology that has been tested for thousands of years. By applying lessons from the past, we’re enabling a better future for the modern concrete industry.”

Applying ancient insights

Masic’s research at MIT has involved using new characterization techniques to probe the chemical makeup of ancient concrete. It has also brought him to well-preserved ancient construction sites in Pompeii, where historical practices could be deconstructed.

In a 2023 study funded, in part, by the Concrete Sustainability Hub, Masic and collaborators showed that when ancient Roman concrete cracks, reservoirs of calcium inside it desolve and recrystallize to fill in the new openings. Using that insight, the team developed new concrete formulations based on the Ancient Roman technique that deliberately retain calcium-rich lime clasts throughout the mix. The researchers spent a year testing samples to show the technique improved the mechanical performance and durability of different forms of concrete.

Those findings served as the foundation of DMAT. Masic partnered with Italian entrepreneur Paolo Sabatini to commercialize the technology shortly after the paper was published.

DMAT has since developed a large portfolio of proprietary technology on top of what was licensed from MIT. As it developed its solution, DMAT worked with company laboratories to secure safety and performance certifications in the European Union and ensure it fit modern concrete-making practices.

“At DMAT, we like to view concrete as an ecosystem,” says Sabatini, who serves as DMAT’s CEO and co-founder. “How does a material become the biggest industry in the world? There are considerations around not just materials but also transportation, price, and certifications. In order to get adoption, you need to design something that fits within the current industry’s ecosystem.”

Today DMAT supplies additives that can be mixed with concrete and mortar to extend the lifespan and performance of the materials. DMAT sells its additives to developers as well as concrete manufacturers to incorporate when mixing the concrete. More recently, the company has also introduced a line of ready-mix bagged mortars for structural restoration.

“When we work with clients, we can customize the concrete mix for their project and then supply filler using our recipe,” Sabatini explains. “We provide recipes to concrete manufacturers and engineers that improve the performance of concrete. But we also work across the supply chain with developers, architects, construction companies, and others.”

The first few years of the company were spent developing the technology and establishing relationships with the industry while attaining the necessary certifications to deploy in Europe.

“What’s good about DMAT is that the company is truly embedded into the concrete industry,” Masic says. “The company isn’t selling an idea. They have gone slow and carefully chosen projects to ensure they are successful in providing self-healing concrete without significant added cost.”

Built for scale

Other self-healing concretes use bacteria or polymer substances as additives, which can be more expensive, not to mention less familiar to people in the industry. DMAT’s founders have spent years honing their recipes to achieve self-healing properties with materials more familiar to the industry.

As a result, they believe the company is now in a strong position to scale. And scalability is crucial to make an impact in the industry: Concrete today is the most produced material in the world. It’s responsible for approximately 5-8 percent of global CO2 emissions.

“There’s something profound about how ancient builders, without our modern chemistry, engineered self-healing material that still stands today,” Masic says. “My group research and work with DMAT is to make the modern built environment better by applying the best lessons from the past to today’s challenges.”

Nature Climate Change, Published online: 19 August 2026; doi:10.1038/s41558-026-02727-5

Extreme heat events are increasing, and urban adaptation is urgently needed for humans and non-humans to function safely under heat. Here we present a thermal justice framework and highlight how its use facilitates equitable adaptation and minimizes heat-risk displacement.

Nature Climate Change, Published online: 19 August 2026; doi:10.1038/s41558-026-02728-4

Informal adaptation can augment or replace formal adaptation with flexible and responsive actions, yet it can also reproduce and intensify existing injustices. We propose justice-oriented co-creation between informal and formal actions as a pathway for effective heat adaptation.

Nature Climate Change, Published online: 19 August 2026; doi:10.1038/s41558-026-02717-7

Adaptation to climate risks requires integrating knowledge across IPCC working groups. This study presents a climate impact taxonomy that connects climatic impact-drivers from Working Group I to representative key risks from Working Group II and provides more direct guidance for risk assessment and adaptation strategies.

A federal appeals court just made it harder for online services, big and small, to get lawsuits over user speech dismissed early. In California v. Meta, a Ninth Circuit three-judge panel held that the lower court’s denial of Section 230 immunity to Meta is not immediately appealable. The misguided ruling has the potential to have widespread impact and to threaten the free speech of all internet users.

The ruling is bigger than a loss for Meta, which has the resources to defend itself against these lawsuits. The court’s ruling signals that all online services (and internet users) that host others’ speech—including those without Meta’s deep pockets—must bear the burden and expense of fighting lawsuits that Section 230 ultimately precludes. This will have real consequences, incentivizing online services to take down users’ speech in response to spurious legal threats, filter speech preemptively, or simply stop offering a place for people to speak online. So even though some may think that Meta is not a sympathetic company, the ruling should raise concerns for anyone who cares about an open and free internet.

Immunities from Suit Advance Important Public Interests

A little procedural background is necessary to understand the implications of the Ninth Circuit’s ruling.

Meta had moved to dismiss a group of social media addiction cases brought by state attorneys general, school districts, and local governments. Meta argued that Section 230(c)(1) immunity applies because the plaintiffs’ claims, framed as seeking to hold Meta liable for allegedly harmful platform features, really seek to hold the company liable for publishing decisions related to third-party content. Section 230 is one of the most important laws supporting online free speech, because its protections for online services enable them to distribute users’ speech at an unprecedented scale.

The district court ruled that Section 230 does not apply to certain features (and does apply to others) and so denied the motion to dismiss on the claims related to those features. Meta immediately appealed invoking appellate jurisdiction under 28 U.S.C. § 1291, but the question before the Ninth Circuit was whether the appeal was legally appropriate.

Under Section 1291, U.S. circuit courts generally only have jurisdiction to hear appeals of “final decisions” from the district courts. Final decisions are trial court orders ending a case, or come after a trial on the merits. Section 230 appellate cases often arise from a district court’s grant of a defendant platform’s motion to dismiss the plaintiff’s case based on Section 230. Typically, a district court’s denial of a defendant’s motion to dismiss is not a final order—it simply means that the case may continue to discovery and summary judgment or trial, after which time an appeal would be appropriate.

However, federal law allows for “interlocutory appeals,” which are appeals of orders that do not end a case but nonetheless are allowed because they involve important legal issues. For example, there is an exception to Section 1291 called the “collateral order doctrine”—at issue in this case—allowing for immediate appeal if, as the Ninth Circuit explained here, “holding a trial would imperil a substantial public interest.”

Inherent in the collateral order doctrine is the consideration of whether an immunity like Section 230 provides mere “immunity from liability” or a more robust “immunity from suit.”

An immunity from liability does not require an immediate appeal and so demands that Section 1291’s final order rule be followed. That’s because waiting until the end of a case before an appellate court can consider the trial court’s denial of immunity does not prejudice the defendant. The appellate court may overturn the trial court and grant the immunity, and thus the defendant’s right to be immune from liability would be vindicated on appeal.

Immunity from suit is different. It means that the public interest demands that a defendant be able to get out of a case as early as possible and avoid having to litigate the case to the end. The U.S. Supreme Court has held, for example, that qualified immunity is such an immunity, and that a district court’s denial of qualified immunity for a government official is immediately appealable under Section 1291, notwithstanding the lack of a final order. The idea is that the public interest is served when government officials are free to act without fear of consequences when established rights are not implicated, and so determining as soon as possible whether their acts are immune serves that public interest.

Here, the Ninth Circuit held that the district court’s denial of Section 230 immunity for Meta was not immediately appealable under Section 1291’s collateral order doctrine because the immunity is not from suit, but rather from ultimate liability. The panel’s absurd result contravenes the text of Section 230, the statute’s policy goals, and the court’s own prior rulings.

Treating Section 230 as an Immunity from Suit Protects Online Free Speech

Meta rightly argued that Section 230(e)(3) plainly states, “No cause of action may be brought and no liability may be imposed under any State or local law that is inconsistent with this section.” The panel dismissed this argument, stating that this language likely amounts to “redundancy” reflecting only immunity from liability. The court failed to side with the more reasonable position that statutory language should generally not be interpreted as superfluous.

Meta also reminded the panel that the Ninth Circuit has many times over the past two decades framed Section 230 as both an immunity from liability and an immunity from suit. The panel also dismissed this argument, stating, “It is true that we have used the phrase ‘immunity’ somewhat loosely in our section 230 jurisprudence.”

But “loosely” is a gross mischaracterization—the panel did not discuss a seminal prior ruling, Fair Housing Council of San Fernando Valley v. Roommates.com (2008), in which the entire Ninth Circuit, not just a three-judge panel, explicitly ruled that Section 230 is also an immunity from suit. That court rightly explained that Section 230 “must be interpreted to protect websites not merely from ultimate liability, but from having to fight costly and protracted legal battles.”

Why is it important that social media platforms and other internet intermediaries (and their users) have immunity from suit for engaging in publishing activities related to third-party content—and thus a right to immediately appeal when Section 230 immunity is denied?

The Ninth Circuit panel here, using their own words, failed to “evaluate the interests that would be lost through rigorous application of a final judgment requirement” and failed to consider the “substantial public interest” served by treating Section 230 as an immunity from suit.

Section 230 immunity, contrary to what some argue, is not a gift to Big Tech—it applies to all internet intermediaries, big and small, from the large social media companies to smaller entities like community message boards and local ISPs. It even protects internet users who forward others’ emails or host comments on their blogs. In turn, the law supports the free speech of all internet users.

While it is helpful when an internet intermediary can ultimately benefit from Section 230 immunity, if a trial court’s early denial is not immediately appealable, that means the intermediary must bear the extended logistical and financial burdens of defending itself. Under the Ninth Circuit’s logic, anyone hosting others’ speech online would have to endure the pain and expense of discovery, summary judgment, or trial, before they ultimately can be protected by Section 230.

Congress crafted Section 230 to give internet intermediaries legal breathing room, so that they will be incentivized to facilitate online communication and commerce, allowing the rest of us to go online with minimal barriers to entry, without needing to have loads of money or to know how to code. Congress acknowledged in Section 230 itself, “Increasingly Americans are relying on interactive media for a variety of political, educational, cultural, and entertainment services.”

Yet if platforms, especially smaller platforms, know that they will have to defend themselves for years in court before they can ultimately benefit from Section 230 immunity, this alone will create a perverse incentive, as we have explained, to censor user speech, in order to reduce the platforms’ legal exposure. And this incentive is only exacerbated at scale, where the sheer volume of user-generated content hosted by modern platforms makes legal risk astronomical.

Unfortunately, this opinion seems to be part of larger trend reflecting the Ninth Circuit’s increasing disdain for Section 230, and apparently for free speech rights more broadly. The court similarly held last year in Gopher Media v. Melone (2025)—overruling itself—that a trial court’s denial of a defendant’s anti-SLAPP motion also is not immediately appealable under the collateral order doctrine. This is despite the fact that, similar to Section 230, California’s anti-SLAPP law is intended to allow defendants to get harassing lawsuits meant to silence them dismissed early, lest they be chilled from engaging in lawful speech on public issues due to the risk of being mired in litigation, even if they ultimately win a delayed appeal.

Age verification (laws and regulations requiring platforms and websites to assure or estimate that a user seeking to use an online service is of a certain age) is everywhere. At the time of writing, about half the states in the US have some internet age verification law in place, and dangerous proposals, from the KIDS Act to the Kids Online Safety Act (KOSA), have been advancing at the federal level. European Union member states are moving toward having age verification in a centralized app by the end of this year. Australia famously now has one extremely broad restriction in place.

Most age verification laws tend to fail at their primary goal of barring kids from being online or from entering only specially designated zones, not to mention they pose a significant threat to everyone’s privacy. Some proponents of these age-based internet restrictions think they've found the silver bullet: Zero-Knowledge Proofs (ZKPs). We wrote about ZKP’s when they were first rolled out in the age verification context last year. However, more recent examples show our concerns weren’t just conjecture; ZKP-focused AV schemes are gameable, hackable, and not the cure-all some may claim.

ZKPs in Age Verification Would Only Centralize Power and Create More Harms

Before we jump into how these systems work, it must be said: creating a single point of failure for internet access contradicts the very idea of a free and open internet. 

The mechanisms underlying ZKPs pose an existential threat to everyone’s digital rights, not just kids. The idea behind ZKPs is that you are issued a “token” that vouches for your age every time you log in, creating a constant link back to the entity that verified you. The issuer of the tokens these AV schemes rely on could track every time that credential is used, creating a dangerous trail of metadata on any user they wanted to target. The issuer itself could be pressured by authoritarian governments to remove a user's access to a service, essentially removing that person’s access to the internet entirely. Without oversight of who has authority to implement and operate these systems, this approach centralizes critical internet infrastructure in the hands of very few actors. 

How ZKPs Work

ZKPs are mathematically impressive cryptographic tools–but they weren’t developed with age verification in mind. Essentially, they let a computer quickly attest to the validity of a given question asked by another computer without divulging any underlying private data. 

Computer A (such as the device operated by a person trying to access a website) is able to prove to Computer B (such as the server for the website that person is trying to access) that something is true without actually sharing the contents of that information itself. Computer A locks in a "commitment" to the information it needs to convey. Computer B, which wants to verify that information, generates mathematical "challenges" that can be answered correctly only if the information is true. Traditionally, this happens over many different “challenges" until there is no room for doubt that Computer A’s "commitment" is true.

Since that kind of lengthy back-and-forth process would drastically slow things down over the internet, there's a shortened version of this exchange that's "non-interactive.” In that case, the ZKP is verified instantly. The answer itself is hashed (mathematically converted into a fixed, shorter string of characters), and the resulting hash is theoretically unpredictable and tamper-resistant. This shortened version of the ZKP exchange is called "zk-SNARK," which is the current preferred method for age verification.

In the ideal scenario, this means that ZKP’s are able to attest to a person’s status as an adult or a child without actually giving away any other private information about that person. In other words, only one entity would collect that private information, typically on the user’s device, instead of every website or app that needs the user’s age attested to. Unfortunately, recent real-world testing of these systems prove that ZKP’s aren’t the silver bullet that proponents of AV laws were hoping for.

EU’s AV Rollout Reveals How Broken It Is

By the end of 2026, the 27 states within the European Union are expected to have infrastructure in place to do age verification within a "mini-wallet" app that will live inside the EUDI (European Digital Identity) Wallet. This is being met with plenty of warranted criticism from digital rights experts. The "mini-wallet" version is already being rolled out, with promises that the ZKPs are in working order. But recent insights show that the ZKP features aren't yet turned on except for the closed demo/prototype build (not the version of the app people are using “out of the box”), which the vast majority of everyday users can’t access. 

Worse still, a security researcher found they could bypass the app's system using a quickly built Chrome extension that tricked the app into repeatedly accepting the same "over-18" token. It did so without ever asking for fresh verification. 

Over 400 security researchers signed an open letter stating that age assurance checkpoints, even if implemented with privacy in mind, would cause more harm than good. A primary focus of their concern, which we share, is the fact that a centralized identity verification system creates a single point of failure that is extremely vulnerable to both cyberattack and authoritarian overreach.

Once the "mini-wallet" version of this is fully integrated into the EUDI Wallet, it will replicate these same failures, perhaps more, but at a much larger scale. At that point, the failures will involve many more pieces of sensitive information that the EUDI Wallet contains: passports, driver's licenses, travel information, financial information, to name a few.

ZKP’s Aren’t The Magic Bullet

As we’ve said time and time again, no method of online age verification is privacy-protective, fully accurate, and capable of guaranteeing universal coverage without introducing severe security risks. 

Lawmakers concerned about the privacy failures of age verification mandates must understand that ZKPs are not a magic bullet. They do not solve the age verification paradox; they simply push the burden of trust down the road, relying on technical ignorance and magical thinking about how the internet actually functions.  

Mandatory online age verification of any kind is a dangerously flawed idea. Tell your lawmakers we said so.

When an artificial intelligence image generator produces a portrait, whose work went into it? The question sits at the center of lawsuits, licensing deals, and proposed regulations worldwide. Artists want credit. Companies want clarity. Policymakers want a way to assign responsibility.

New work from a team of researchers at MIT's Computer Science and Artificial Intelligence Laboratory (CSAIL) suggests that for models trained on large datasets, the question may often have no answer. It's not that the tools for finding it are inadequate. The connection itself has disappeared.

The scientists identified a phenomenon they call attribution decay, where the more data a generative model is trained on, the less any individual training example matters to any particular output. It feels counterintuitive, but at sufficiently large scales, they find, you can often remove any single image from the training data, or every image by a given artist, or every photograph of a given person, and the generated sample doesn't change.

And if removing something changes nothing, the researchers argue, it can't be said to be responsible for anything. 

"If you take away a piece of data and the output of the model doesn't change, then that piece of data didn't affect the output," says Zheng Dai SM ’21, PhD ’24, former MIT CSAIL researcher and lead author on the work. "So it doesn't make much sense to attribute the output to that piece of data. And if you then do this one at a time for every other piece of data and find that the output doesn’t change for any of them either, then it doesn't make much sense to attribute the output to any one of them."

"All previous methods were approximate," says MIT Professor David Gifford, who is an MIT CSAIL principal investigator. "They really could not absolutely show that deleting individual things did not change the output. This paper introduces the first method that is absolute. You're actually deleting the inputs and deleting all influences of the inputs. This is the first exact method for doing large-scale deletion efficiently and showing that the results don't change."

Dai and Gifford's project is described in an open-access paper published today in Nature Communications.

The retraining problem

Testing this idea directly meant answering a what-if question. What would this model have produced if it had never seen this particular image? Answering it honestly means retraining the model from scratch without that image, then doing it again for the next image, and the next. With millions of training examples, the math quickly becomes prohibitive, which is why prior work in the attribution field has relied on approximations that estimate a training example's influence, rather than actually removing it.

Their workaround is an architecture they built themselves, called a "diffusion ensemble." Instead of one monolithic model, it's made up of many smaller components, each trained on a different slice of the data. Want to know what the model would do without a particular image? Just switch off the parts that saw it. No retraining, no approximation. What's left is a true counterfactual model, not an estimate of one.

Of course, a clever architecture only matters if it still works as a generator. So the team put the ensembles head to head with 24 conventional diffusion models trained on the exact same data. The images came out looking about as good by standard measures. 

One nice surprise in the numbers: The more training data, the better the ensembles held up against their single-model counterparts, a hint that they may actually be more data-efficient.

"When you have low amounts of data, they do very poorly," says Dai. "But if you have more data, it actually scales better compared to the vanilla diffusion model." 

Exploring a counterfactual universe

With ablation working, the researchers could finally ask their question at scale. Take one generated image, then imagine every alternate version of it, each produced by removing a different piece of the training data. The team calls this the image's counterfactual universe. The distance between the original and its most different alternate, the counterfactual radius, captures the most that any single piece of training data could have mattered.

They trained 24 ensembles on datasets from 256 images to more than 160,000, pulled from seven public collections including CIFAR-10, CelebA, MetFaces, and ArtBench. The pattern was consistent: The bigger the training set, the smaller the radius, shrinking along an inverse power law. It held whether differences were measured pixel by pixel or by semantic meaning, with statistical significance both ways.

The team also stress-tested their own result. Maybe ablation itself was the culprit? They redid it the brute-force way at small scale, training 1,282 separate models, and the decay showed up anyway. Maybe bigger datasets just make each removal proportionally smaller? They pinned the removed fraction in place, and it persisted. Fixed epochs, text-prompted models, class-conditioned models, four similarity metrics — the finding survived everything.

The privacy paradox

The implications run in a direction that surprised the researchers themselves.

Gifford sees the finding as bearing directly on the legal question of whether model outputs are derivative works. 

"One way to think about this is that these models are creative. They are not simply copying what they are fed, but creating brand new outputs. If those outputs have nothing to do with any individual piece of training data, that raises questions about fair use, about whether the outputs are themselves copyrightable as novel works, and about how authors get compensated when what comes out of a model isn't attributable to anything on the internet." 

Gifford also notes that the work shows how to produce outputs that are guaranteed to be unattributable, a capability he frames as an obligation for the industry, rather than a loophole. 

"In order for these companies to claim their outputs aren't derivative of the internet in a copyright-infringing way, they need to revise their models to take advantage of the advances in this work, so they can show they're not creating derivatives of individual people or items."

The work looks at diffusion models, now dominant in generating audiovisual media and prevalent in scientific applications including protein structure modeling and therapeutic discovery. Whether the same decay holds for the large language models at the center of the highest-profile copyright litigation is still an open question.

"If attribution worked, it would reliably tell us whether similarities between a model's output and a copyright-protected work are due to copying or coincidence," says James Grimmelmann, a law professor at Cornell Law School and Cornell Tech. "But this paper provides reason to think that attribution will fail for interesting models. Instead, technologists and courts will need to resort to other methods for assessing copying."

Dai and Gifford's work was supported by Schmidt Futures. 

MIT Principal Research Scientist and Haystack Observatory Assistant Director Emerita Anthea J. Coster was awarded the prestigious Appleton Prize at the International Union of Radio Science (URSI) General Assembly and Science Symposium in Krakow, Poland, on Aug. 16. 

The Appleton Prize recognizes career achievements and outstanding contributions to studies in ionospheric physics. Appleton awardees are regarded as pillars of the URSI atmospheric science community; the citation for Coster, an URSI Fellow, is for “pioneering research in GNSS [Global Navigation Satellite System] science, developing techniques to provide global-scale view of storm responses in the ionosphere, operationalizing novel algorithms, and providing novel ionospheric products to the community.” 

The Appleton Prize honors Sir Edward Victor Appleton, a Nobel Prize–winning physicist and former president of URSI (1934–52) who proved the existence of the ionosphere.

Coster joined MIT in 1984, originally at MIT Lincoln Laboratory, where she worked on satellite tracking applications within the Space Surveillance Complex situated at MIT Haystack Observatory. While at Lincoln, she was introduced to the Global Positioning System (GPS), the first GNSS; her GPS research at Lincoln eventually led to an appointment in Haystack’s geospace and atmospheric science research group. She continued and expanded her Lincoln-based GNSS research, focusing on ionospheric and atmospheric applications. At Haystack, Coster started as a research scientist, becoming an MIT principal research scientist in 2012; she also served as assistant director for the observatory from 2015 until 2024. 

Her career research focus spans the physics of the ionosphere, magnetosphere, and thermosphere, covering space weather and storm-time effects and coupling of these atmospheric regions, with particular expertise on GNSS positioning and measurement accuracy. Coster’s breakthrough contributions in GNSS applications to frontier geospace research span many areas, including ionosphere-magnetosphere coupling and mid-latitude ionospheric dynamics. A selected number of her accomplishments include the first real-time GNSS ionospheric monitoring system, as well as pioneering work in monitoring tropospheric water vapor with GNSS signals. She also was responsible for the first GNSS observations of storm-enhanced density, a bright and important feature that can span the heavily populated continental United States, with significant impacts to the Federal Aviation Administration Wide Area Augmentation System, which supplements traditional GPS navigation systems.

MIT Haystack Observatory director Phil Erickson says, "Dr. Coster's award from the International Radio Science Union is most well-deserved, and reflects her substantial international impact on the field of geospace remote sensing. Coster's pioneering application of GNSS signals to global and precise maps of total ionospheric electron density has produced a rich and insightful scientific output that anchors and greatly complements the multi-messenger, sensor fusion techniques at the forefront of the research field in near-Earth space weather dynamics. These areas are of critical importance to our increasingly spacefaring civilization."

Coster’s career also encompasses a lifetime of professional service contributions to the U.S. and international geophysical sciences community, including many leadership positions with the U.S. chapter of the Union of Radio Science, the Institute of Navigation, and the American Geophysical Union. She has served as co-chair of NASA's Living with a Star Program Analysis Group and is a current member of the U.S. National Academies of Science, Medicine, and Engineering Space Weather Roundtable. 

She is an author or co-author on more than 200 peer-reviewed publications, and is the principal investigator of numerous federal scientific grants from NASA, the National Science Foundation, the Office of Naval Research, and the Air Force Office of Scientific Research. Prominent results of Coster’s work are heavily used, including scientifically rich GNSS total electron content (TEC) and scintillation data products available to the research community through NSF's CEDAR Madrigal database and the Millstone Hill Geospace Facility. 

Coster has also made a number of notable contributions to science outreach, such as deploying radio instrumentation with MIT graduate students in Brazil and Peru, presenting outreach talks to high school and middle school students in Rwanda and Zambia, and installing GNSS receivers in Inuit villages and along the remote Steese Highway in Alaska. For many years, she has taught U.N.-sponsored GNSS workshops aimed at workforce education and career advancement in disadvantaged countries.

Originally from Texas, Coster attended the University of Texas at Austin as an undergraduate and earned her master's and doctorate degrees at Rice University in Houston, where she was involved with ionospheric experiments at the Arecibo Observatory in Puerto Rico. She moved to Massachusetts in 1984 to join MIT Lincoln Laboratory. 

"Anthea Coster has made seminal contributions to the state of the profession, enabling the international science community to conduct ionospheric research at spatio-temporal scales that were previously unachievable," says Larisa Goncharenko, assistant director and head of the atmospheric and geospace group at Haystack. "Her pioneering work on introducing and relating GPS measurements to fundamental research has led the community to employ GNSS as an information-rich sensor for ionospheric remote sensing and space weather monitoring. Her effort enabled countless discoveries in the near-Earth space environment that has become increasingly important for human activities in space. I am truly in awe of Anthea's pioneering accomplishments, and incredibly proud of her receiving the Appleton Prize."

With this award, MIT Haystack Observatory is now home to three URSI prize recipients. Former director and research scientist John Evans received the Appleton Prize in 1975 with a citation for "ionospheric physics, including application of the incoherent scatter technique," and research scientist Alan Rogers received the 2008 John Howard Dellinger Gold Medal for outstanding contributions to radio astronomy. 

I have been thinking a lot about AI and integrity. Part of that is contextual integrity. I recently found two papers on the topic.

“CIMemories: A Compositional Benchmark for Contextual Integrity of Persistent Memory in LLMs“:

Abstract: Large Language Models (LLMs) increasingly use persistent memory from past interactions to enhance personalization and task performance. However, this memory introduces critical risks when sensitive information is revealed in inappropriate contexts. We present CIMemories, a benchmark for evaluating whether LLMs appropriately control information flow from memory based on task context. CIMemories uses synthetic user profiles with over 100 attributes per user, paired with diverse task contexts in which each attribute may be essential for some tasks but inappropriate for others. Our evaluation reveals that frontier models exhibit up to 69% attribute-level violations (leaking information inappropriately), with lower violation rates often coming at the cost of task utility. Violations accumulate across both tasks and runs: as usage increases from 1 to 40 tasks, GPT-5’s violations rise from 0.1% to 9.6%, reaching 25.1% when the same prompt is executed 5 times, revealing arbitrary and unstable behavior in which models leak different attributes for identical prompts. Privacy-conscious prompting does not solve this—models overgeneralize, sharing everything or nothing rather than making nuanced, context-dependent decisions. These findings reveal fundamental limitations that require contextually aware reasoning capabilities, not just better prompting or scaling...