Feed aggregator

Computer Security Is About to Get a Lot Worse, Here’s What You Can Do

EFF: Updates - Fri, 10/23/2026 - 6:36pm

It is a commonly held truth among computer geeks that there is no such thing as bug free software, or a secure computer. Any piece of software that anyone actually uses will have a security vulnerability somewhere in the code. The more complex that software is, the more likely there will be a vulnerability. Fortunately for everyone, finding severe vulnerabilities was generally considered an expensive and difficult task requiring years of training and deep knowledge of how computers and software worked. Until recently there was a steady background hum of vulnerabilities being found and patched, with major vulnerabilities that could cripple the entire internet only happening every few years. Now that is no longer the case.  

You may have noticed your nerdiest friends freaking out about the “Vulnerability Apocalypse” this week and waving their arms in panic about something called PHP. You may have also noticed that some of your favorite websites were down for a bit. In the last two weeks of October alone, there have been multiple, potentially internet-breaking vulnerabilities reported and patched. Many of those vulnerabilities were in the open-source software that is the foundation of the vast majority of the internet.

For more detailed information on what happened, and why supporting open-source projects matters, check out our other blog.

This is all because frontier AI models, such as those created by OpenAI, Anthropic, and others, have made it incredibly cheap and easy to find previously unknown vulnerabilities (zero-days) in open- and closed-source code. Three percent of all software vulnerabilities ever found in history were found just in the month of October. This year alone researchers have found nearly a quarter of all software security issues which have ever been discovered. 

If exploiting critical software is now cheaper and easier than ever, what does that mean for us as individuals and what does that mean for society as a whole? TL; DR: It’s going to get worse before it gets better. But you can protect yourself with basic digital security hygiene that is now more important than ever.  

What Do I Need to Do? 

There absolutely needs to be a bigger conversation about how we got here and how to fix the systemic issues involved, including how corporations that depend on open-source code should contribute to their upkeep, and how big tech should be regulated.  

But for now, this news is a compelling reason to tighten up your digital hygiene. A lot of computers are going to get hacked a lot more often, and unfortunately, it isn’t going to get better any time soon. Thankfully, EFF has compiled a comprehensive set of security advice in our Surveillance Self-Defense guides. To start, we recommend making sure your browser and all applications are always up to date with the latest patches.   

You should also consider installing a tracker blocking tool, like EFF’s Privacy Badger (now on Safari), and remain vigilant for phishing attempts. Additionally, install a password manager and use unique passwords for each website, so that if one site is compromised, the rest of your passwords are safe. You should also be aware that data breaches may now be more likely, and the websites you visit may experience more attacks than usual, which means that some services may be disrupted.  

If you host a blog or other website, make sure that either you or your hosting provider has patched this particular issue.  

For additional tips on protecting yourself and others, head over to our Surveillance Self-Defense site. Additionally, if you’d like to support any of EFF’s open-source projects like Privacy Badger, Rayhunter, and Certbot, visit our donate page. 

Friday Squid Blogging: Increasing Squid Populations

Schneier on Security - Fri, 10/23/2026 - 5:00pm

This article in Nature argues that it’s due to an overfishing of predators and warming sea temperatures.

As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered.

Blog moderation policy.

At MIT, Martha Minow speaks on sustaining democracy, both by using and overcoming AI

MIT Latest News - Fri, 10/23/2026 - 5:00pm

Legal scholar Martha Minow delivered this fall’s Compton Lecture at MIT on Thursday, examining the civic foundations of democracy — and describing how artificial intelligence is undermining it, but could be used to help reinforce traditional U.S. governance. 

“It’s not a good time for democracy or constitutionalism,” said Minow, who is the 300th Anniversary University Professor at Harvard University, and a prominent expert in constitutional law and human rights. She noted a litany of challenges to democracy in recent years, including violations of laws and norms, the stifling of free speech, a diminution of congressional authority, disregard of legal rulings, the common vilification of others in society, and more. 

Recent Gallup polling, Minow observed, shows 77 percent of people saying that the founders of the U.S. would be disappointed in the contemporary condition of the country. 

“Many people genuinely wonder whether this nation’s system of government and rule of law, ignited 250 years ago, will survive,” Minow said.  

Her remarks assessed the state of the U.S. in terms of what she called four key “ingredients” of democracy: education, reliable and accessible information, security from violence, and fairness. Minow evaluated how AI has, among other things, influenced these areas of life — but also suggested ways people could use contemporary technology to help. 

“It’s very familiar to hear blame attributed to digital technologies and experts of all stripes, but a turnaround, I believe, is genuinely possible if people at MIT and elsewhere pour time and talent towards real and much-needed solutions,” Minow said. 

A substantial portion of her remarks focused on the pitfalls of AI in education. That issue compounds some other troubling trends: The U.S. already has large local and regional disparities in educational funding, Minow noted, while schools have actually become significantly more segregated in economic and ethnic terms over the last three decades. 

In this context, AI threatens to further weaken independent-thinking skills, Minow suggested, just when greater understanding of civic issues is absolutely vital. 

“As AI surges, I think we have to learn to be smarter about how to use it, how to regulate it, and how to actually educate people about the costs of mindless using,” Minow said. She added: “Dominant AI platforms supercharge the strategies that are deployed by social media companies, inducing passivity in people … Leading AI models and interfaces and sycophantic elements endanger the development particularly of young people’s capabilities to think, to remember, and to engage in critical thinking.” 

That trend away from cognitive effort, she suggested, can be changed — perhaps through AI tools that act more like tutors and are designed to enhance people’s deep thinking.

“Existing LLMs, model training, and interface design can offer nudges and questions and hints rather than replacing student work, but there’s so much more that could be developed, and more effectively, to be trustworthy, and to deepen human activities and curiosity, rather than replacing people,” Minow said.

To the audience, she added, “AI tools could do much more of that … And I believe that you, the people here, could develop better tools than the ones that are out there. And make better assessments, more meaningful and cheating-resistant.” 

Minow’s talk, “Constituting Democracy in the Era of AI,” was delivered to a large audience in MIT’s Huntington Hall, Room 10-250 on campus.

MIT President Sally A. Kornbluth delivered introductory remarks to the audience. The Karl Taylor Compton Lecture Series, introduced in 1957, is the highest-profile event of its kind at MIT. Karl Taylor Compton was MIT’s ninth president, serving from 1930 to 1948, and then becoming chair of the MIT Corporation from 1948 to 1954.

“He guided MIT through the Great Depression and World War II,” Kornbluth said, “transforming the Institute from an outstanding school for training job-ready engineers to a great global research university.” 

She added: “He was also a deeply committed patriot who helped harness the intellectual power of America’s research universities to serve the nation during World War II.” 

Kornbluth called Minow “a legal scholar of extraordinary intellectual scope,” and a “dedicated educator whose work has shaped how we think about the law and our own humanity, as individuals and as a society.” 

Minow has been a faculty member at Harvard Law School since 1981, and served as dean of the school from 2009 through 2017. Minow earned her BA in history from the University of Michigan, an MA in education from Harvard, and a JD from Yale University.

Minow’s books include “Making All the Difference” (1990), “Partners Not Rivals” (2002), and “When Should Law Forgive?” (2020). 

In her talk, Minow also discussed the civic effects of misinformation, threats of violence, and multiple dimension of societal fairness. Modern media technology has led to a 75 percent reduction in journalists in recent decades, Minow observed, with an attendant rise in corruption in places without local media. Civic-minded technologists, she proposed, should work towards establishing a widely-used “information commons,” or many forms of them, to help people access more reliable information. 

Meanwhile, when it comes to basic security in society, Minow warned, “We’re on the brink right now. I know a lot of judges, and every one of them has a credible threat of violence against them. In America. This is not acceptable.” 

For all the challenges to democracy and traditional civic norms, however, Minow sounded positive notes throughout her remarks, pointing out that there are many opportunities to create new forms of reliable information, education, and community relations. 

“We have to actually invent the world that we want to live in,” she offered. 

Minow’s remarks were followed by a Q&A session in which Kornbluth read aloud questions submitted by the audience — and asked her to characterize her concerns about present trends. 

“I worry about the loss of the Enlightenment,” Minow said. “I worry about the loss of the belief that reason, and testing hypotheses, and rejecting myths in the face of evidence, and the toleration and rights and expansion of participation that came along with the Enlightenment, that’s what concerns me the most. That’s why the disinformation issue for me is so important, that’s why the loss of critical thinking in schools is so important.”

She added: “I’ve spent much of my own career thinking about mass violence. What happens when people don’t understand each other, and are afraid. And it’s terrible, and we don’t want to be there. And I do view the Enlightenment as a time when people learned that actually having mass wars is a bad thing, and coming up with toleration is a good thing, and testing our ideas in light of evidence other people can share can produce a better life for everybody. I worry we’re abandoning that right now.”

Reinforcing the value of human understanding at MIT

MIT Latest News - Fri, 10/23/2026 - 3:35pm

At the MIT School of Humanities, Arts, and Social Sciences (SHASS) 75th Anniversary Symposium, speakers celebrated the school’s value and contributions, while exploring how artificial intelligence is transforming many aspects of teaching, research, and society.

The symposium was held Sept. 24-25 in the Linde Music Building’s Thomas Tull Concert Hall. Scholars, students, staff, and alumni from across SHASS and MIT gathered for the event, which kicked off with welcoming remarks from MIT leadership. 

“How should we think about MIT’s School of Humanities, Arts, and Social Sciences? With enthusiastic appreciation and gratitude,” said President Sally Kornbluth.

The school’s origins date back to the Lewis Committee Report, commissioned by MIT and published in 1949, which called for stronger integration between scientific and technical topics and humanistic scholarship and teaching.

Kornbluth noted that, much like when the school was founded just after World War II, the world faces uncertainty as it grapples with the broad implications of artificial intelligence.

“AI has suddenly arrived with enormous consequences for both research and education,” she said. “As we face the challenges of our own time, and our own society, it’s clear that MIT has never needed your particular insight and guidance more than we do now.”

In opening remarks, Provost Anantha Chandrakasan described the importance of a human-centered approach to technology, one that considers both its efficacy and its impacts. He lauded many of the new research projects happening through the MIT Human Insight Collaborative, a strategic initiative launched in 2024.

“Today — a time of rapid, AI-driven change — the arts, humanities, and social sciences are as important as ever,” he said. “To be able to contribute effectively to solving the world’s great challenges, it is not enough to gain technical mastery.”

Chancellor Melissa Nobles recalled how, during her tenure as SHASS dean from 2015 to 2021, reading the positive feedback from students in their SHASS course assessments reinforced the value of the school’s teaching.

“MIT students have a range of interests that draw them to our classes that may be invisible to their STEM professors, but that we very well know our students have,” said Nobles, who is also a professor of political science.

Agustín Rayo, the Kenan Sahin Dean of SHASS and professor of philosophy, noted that, while research in the school plays a key role in addressing global issues such as climate change and AI, the value of the work in SHASS should not be measured by practical application alone.

“Education should also help us ask what is worth doing, what do we owe one another, and what makes a life worth living,” Rayo said. “Some research matters because it helps us understand the histories, cultures, and social structures that have made us who we are. Some things matter because they enrich human life.”

Scholarship from across SHASS and beyond 

Over the symposium’s two days, research presentations, panel discussions, and performances offered attendees opportunities to engage with the role of SHASS in exploring today’s biggest societal questions.

“We gather not so much to look back over the past 75 years, but to showcase where we are now, and share what we urgently aim to tackle together in the years ahead,” said David Kaiser, Germeshausen Professor of the History of Science and professor of physics at MIT, who also served as chair of the symposium planning committee.

The first day included a session on teaching and learning innovations. Faculty presented on the success of educational programs housed within SHASS, including the MIT Indigenous Languages Initiative Master's Program, the Master in Data, Economics, and Design of Policy (DEDP), and MISTI, the hub for global experiences for MIT students.

Stephanie Seed, associate professor of literature, spoke about why she and others are working to reintegrate classic books into their teaching.

“MIT, of course, is an institution unusually oriented towards the future,” she said. “Our students are trained to imagine and create worlds that don’t yet exist. And it’s precisely this future orientation that makes reading the past especially important here.”

Eric Klopfer, professor of Comparative Media Studies/Writing and co-author of MIT’s recent report on AI and instruction, said this is a moment when instructors must reassess how courses are taught.

“I don’t know exactly what that looks like, but I do think it means something that’s more than modifying our curriculum. I think it really means rethinking what the educational experience is,” he said.

During a session on computing and society, panelists described different views and research into technology and how it affects humans.

“We project aspects of ourselves onto computational systems,” said MIT Professor D. Fox Harrell during his talk about seeing “selfness” in machines. 

“What makes an AI system is not just the code, not just the programming or the algorithm, it’s the fact that we narrate it as being intentional,” he said.

Program in Science, Technology, and Society Professor Sherry Turkle offered a skeptical view of human-technology interaction, particularly with AI chatbots, which she describes as “intimate machines.” 

“If social media came for our attention, I argue that chatbots are coming for our capacity for attachment, which is deeper and much more troubling,” said Turkle.

Professor David Autor, head of the Department of Economics, said it’s an exciting time to be working at MIT, where scholars are collaborating to explore AI’s impact on society.

“I don’t think there’s a close analogy to a moment when everyone felt the world change so quickly,” he said. “The stakes feel incredibly high.”

Celebrating the arts and engaging with the future 

The first day concluded with a rousing Music and Theater Arts performance showcase, which began with an excerpt from Stan Lai’s “A Dream Like A Dream,” a play directed and performed by students and instructors in class 21T.100 (Theater Arts Production).

“Variations on the Theme of SHASS 75,” a piece choreographed by Dan Safer, senior lecturer and director of dance programs, combined movement, lighting, and music in a celebration of both the human body and the school’s milestone anniversary.

Student and faculty musicians from a variety of styles and disciplines shared the stage, including Rambax MIT, MIT Concert Choir, and the MIT All-Star Jazz Combo. The showcase included stirring renditions of “Madrigal,” composed by Vice Provost for the Arts Keeril Makan, and “Prayer for Peace.”

On the second day of the symposium, several alumni presented on their current work and the impact of their SHASS experiences.

Jessica Coon PhD ’10, now a professor of linguistics at McGill University, spoke about the leading role MIT Linguistics plays in preserving endangered languages, and how her studies at MIT prepared her to carry on that work.

“SHASS gives us the tools not just to conduct research, but to communicate the impacts of this research across a variety of different audiences and in different ways,” she said.

Ankita Reddy ’19 double-majored in anthropology and biology and is now an MD/PhD student at the University of Pennsylvania. She highlighted her most impactful SHASS courses, including 21A.308 (Global Mental Health).

“This was the first time I was forced to consider how good health care looks different based on social systems and cultural practices,” she said. “SHASS made me more comfortable with, and more curious about, complexity.”

During the symposium’s final session, panelists engaged in a conversation about AI, art, and the implications for creatives in an era where their art can be co-opted and copied. 

“There’s so much praise for new and upgraded technologies,” remarked associate professor of literature Sandy Alexandre. “The question I consistently have is: What does it mean to be an upgraded human being? How are we innovating as technology is innovating?”

Philosopher Justin Khoo said AI’s role in art could be considered a “giant paint brush you don’t have much control over,” adding he could see the creation of new sub-genres of art that are human-only, AI-infused, and purely AI, for example.

Khoo closed by saying he encourages students to “think broadly, and really take seriously the humanistic education here at MIT.”

“A broad understanding of a set of concepts which are widely applicable, not just narrowly applicable, I think that’s what we need more than ever now,” he said.

As the symposium came to a close, attendee Kent Sahin praised the event.

“I’ve attended every session, and this is a fantastic program and a great celebration of the 75th anniversary,” he said. “Clearly, whether it’s AI impact, the impact of climate change, or the impact of political and social change, SHASS is in the right place at the right time.”

Gunter Stein, control systems and theory expert, dies at 84

MIT Latest News - Fri, 10/23/2026 - 2:25pm

Gunter Stein, an expert on control systems and theory who was a longtime MIT adjunct professor and researcher who also worked at Honeywell Labs, died on July 11 in his home state of Minnesota. He was 84 years old. 

Throughout his career, Stein helped to reconcile competing schools of thought surrounding automated control systems, and he worked helped usher in an era of robust multivariable control.

Born in Germany, Stein emigrated with his family to the United States at a young age. The son of a tool and die maker at Fisher Body Works, Stein earned his BS from the General Motors Institute (now Kettering University) in Flint, Michigan, and his MS and PhD in electrical engineering from Purdue University in 1966 and 1969, respectively. He then joined Honeywell Labs, where he spent a more than 50-year career developing systems including aircraft flight controls, spacecraft altitude and orbit controls, and other navigation and control systems for applications as varied as launch boosters, reentry vehicles, ship positioning systems, torpedo engines and autopilots, and precision guided weapons. 

As an engineer at Honeywell, Stein’s incisive and rigorous way of approaching problem-solving quickly garnered attention, catching the eye of the then-director of the MIT Laboratory for Information and Decision Systems (LIDS), Michael Athans, when the laboratory and Honeywell began cooperating on a NASA contract to design the controls for the F-8 aircraft. Stein’s submission on behalf of Honeywell was, at the time, labeled the “most conservative” of the potential submissions, but eventually became the only control system successfully flight-tested. 

Noting Stein’s talent, Athans approached Stein with a pitch to join MIT in 1977. As Stein’s career and personal life were by that point deeply rooted in Minnesota, he was not interested in relocating full-time, but agreed to an adjunct position with the Department of Electrical Engineering and Computer Science (EECS), where he would spend one week per month giving lectures, helping advise graduate students, reading PhD theses, and acting as a principal investigator in LIDS. This arrangement would continue for the next 30 years, and would deeply shape MIT’s overall approach to control theory. 

“Stein immediately struck me as a brilliant engineer,” says Munther Dahleh, the William A. Coolidge Professor in EECS and a member of LIDS, who at the time of Stein’s arrival was a newly hired junior member of the faculty. “As a naive researcher who was more of an applied mathematician than a real engineer, I was struck by how Gunter could see through the mathematics and distill what was truly essential for applications.” 

As Dahleh’s career developed — he would eventually become an associate department head of EECS and the founding director of the Institute for Data, Systems, and Society — his regard for Stein only grew: “Through Gunter’s work at Honeywell and his collaborations with students and faculty at MIT and other universities, robust control entered virtually every area of control applications. He shaped the direction of our field for decades, and his ideas remain a driving force behind many of today’s control applications.”

“Gunter came to LIDS at a propitious time,” says Nils R. Sandell Jr. SM ’71, EE ’73, PhD ’74, who co-taught class 6.291 (Classical and Modern Methods for Control System Design) with Stein. “With the experience on the NASA project and on others, the emphasis had begun to shift from optimal control to robust control. Gunter was a key part of this evolution, with his keen insight, based on extensive experience, of how classical frequency domain control techniques for single-input, single-output systems dealt with model uncertainty.” 

Over the course of the next decades, Stein would work on systems for the B-2 bomber and F-47 aircraft, and for many years would serve as a member of the U.S. Air Force Scientific Advisory Board. “I can attest that, decades later, the flight control design methodology that Gunter and his colleagues at Honeywell developed is still being applied to our most advanced aircraft,” says Sandell. 

Alan Willsky, the Edwin Sibley Webster Professor of EECS (Emeritus), remembered his colleague at LIDS as both a practical and a theoretical force: “Gunter was one of the giants of automatic control. His work at Honeywell on advanced control systems is legendary, but what is equally impressive is his impact on control theory and his influence on generations of control researchers. The period of years when he split time between Minneapolis and MIT had major influences on how control is taught and researched here at LIDS.” 

Years of working with uncertainty and multivariable systems led Stein to think carefully and deeply about famous failures of engineering, including the nuclear reactor disaster at Chernobyl that captured the world’s attention in 1983. Stein saw the disaster as a stark warning to all designers of control systems, not only for nuclear power plants but for aircraft, spacecraft, and indeed all systems “with automatic controls that cannot be done manually and that, if done improperly, can have dire consequences for property, the environment, and human life.” 

In his highly influential 2003 Bode Lecture and essay for Control Systems Magazine, entitled “Respect the Unstable,” he wrote: “We must place renewed emphasis on stating and teaching the principles of our subject clearly and well. The applications out there are simply too serious for us to hide from responsibility under a cloak of mathematics.” Of that famous lecture, Dahleh muses, “his Bode Lecture, which marked the first time the award was given, solidified my view of his remarkable ability to understand very different applications from a common fundamental perspective ... He showed how the challenges posed by complex control engineering systems, from agile aircraft to the Chernobyl disaster, could be understood through the same fundamental ideas that explain the difficulty of controlling an inverted pendulum. Thirty years later, his lecture remains one of the most-cited Bode Lectures and one that has had a clear impact on our community.”

Among other honors, Stein was elected fellow of the IEEE in 1985; awarded the IEEE Control System Society's first Hendrik Bode Prize in 1989; elected to the National Academy of Engineering in 1994; and awarded the International Federation of Automatic Control's Nathaniel Nichols Prize in 1999. 

His impact on the field of control engineering is also measured by the regard of his colleagues, who uniformly remember him as warm, social, and deeply conscientious. 

“Gunter was a great engineer — the greatest I have known — and he was also a great human being,” says Sandell, who notes the great passion with which Stein, in the Bode lecture, enumerated his responsibilities toward society as an engineer. 

“On a personal level, Gunter was incredibly humble and unassuming, and always ready to offer help and support whenever asked,” says Dahleh. “He was a giant in our field and played a major role in shaping it. I am deeply grateful for the opportunity to have learned from him and to have had him as a colleague. He will be dearly missed.”

Predeceased by his parents and wife Nancy, Stein was survived by partner Ann Wynia, siblings Gerry (Lynn) Stein and Gisele Davis, and by many nieces and nephews. A skilled sailor and lifelong outdoorsman, Stein spent much of his life exploring the various coastlines and seas of the world, and the forests and lakes of his native Minnesota. Memorial donations can be made in Stein’s name to the Minnesota Nature Conservancy. 

Two States Can Now Restrict Social Media Access—Here’s What To Do Next 

EFF: Updates - Fri, 10/23/2026 - 2:19pm

Last week, two federal appeals courts issued opinions that will allow Florida and Georgia to start enforcing laws that will age-gate and block young people from accessing social media. The laws do not adequately respect minors’ rights to play, speak, and learn online. More fundamentally, these laws don’t help young people stay safe online—a goal that lawmakers should pursue.

Age-Gated? Email EFF at agegates@eff.org. 

Because of the new laws, some young people will lose their ability to access lawful information, find their online communities, and even engage with school board members. Others will need parental permission to stay online. And adults will face increased demands to prove their age, which will put their privacy at increased risk simply to continue to use the services they already use. 

We opposed these laws because they threaten the free expression and privacy of both minors and adults.  Even though these lawsuits are not over, the injunctions that paused enforcement have been lifted, and the states of Florida and Georgia will now be able to enforce broad restrictions on social media use. 

The restrictions that these states will start enforcing are a setback for the rights of all internet users, but they are not written in stone. That’s why EFF is encouraging internet users - and particularly young people – to start keeping a record of how they are affected. If you are a teenager who loses access to an online discussion, can’t participate in a political campaign, or stop seeking information because you don’t want to upload personal information, document what happened. The same is true for adults who may be mistakenly blocked by age checks, and parents who may encounter obstacles to authorizing their children's use of online services. These experiences matter. They can help us show courts, policymakers, and the public what government restrictions on online expression actually cost the people who live under them. 

Hopefully, with enough proof of the expressive harms these laws cause, we can push lawmakers to rescind them. That’s why we’re encouraging folks to reach out to EFF once they’ve documented these harms. You can write to us about this issue at the email address agegates@eff.org. 

The Decisions

These two opinions, issued by the same panel from the U.S. Court of Appeals for the 11th Circuit, allow Florida and Georgia to enforce restrictions on social media accounts for people under 16 years old. The requirements differ by state. 

In Florida, the judges allowed that state’s H.B. 3 to move forward, which requires covered platforms to ban anyone under 14 from opening or keeping accounts—even with parental permission. Teenagers who are 14 or 15 can have accounts only with parental consent. To be covered, a platform has to use algorithms, allow content uploads or the viewing of other peoples’ content, and have at least one feature on a list of features the state considers bad, including livestreaming, engagement metrics, autoplay, infinite scrolling, or push notifications. These requirements effectively apply to every major social media service that young people use.

To the extent there is a silver lining in the ruling on Florida’s law, it’s that the panel recognized that H.B. 3 targets expression protected by the First Amendment. The problem is that the ruling uncritically accepts the idea that a social media service is addictive in a clinical sense, even if just 10% of users under 16 are using the platform for two or more hours per day (the standard set in H.B. 3). The court simply accepts that time spent online is a proxy for harm. The bill doesn’t distinguish doomscrolling or compulsive use from organizing a campaign, making art, or talking with friends. 

In Georgia, S.B. 351 can now be enforced. That law requires parental consent for anyone under 16 to hold an account on social media platforms. It also requires platforms to make “commercially reasonable efforts” to check users’ ages, which creates a hurdle for adults as well as under-16s. 

The ruling acknowledges that S.B. 351 “overwhelmingly applies to platforms that overwhelmingly host protected speech.” But the ruling faults the plaintiffs for not being able to show that “invalid applications substantially outweigh the valid ones.” That asks the groups challenging the law to meet a virtually impossible standard—to make their case, they would have to measure and evaluate the content hosted by all online services affected by the law. 

Both of these cases may be further appealed, and are likely to continue in the lower courts. But people in Georgia and Florida can no longer count on court injunctions to protect their access to the web. What the effects will be going forward depends on how platforms implement these new restrictions, including how they check ages and parental consent, as well as state officials’ views on these efforts. 

If you hit an age-gate while online, check out our blog post about how you might want to proceed, and our age-gating resource hub. If you want to speak out about your experience, you can talk to us at agegates@eff.org.

What is Lost

Some youth who lose their social media accounts will lose contact with friends. Others will lose access to a support group, the ability to speak out on current issues, or an audience for their artwork. More young people will be shut out of discussions about what’s going on in their school and their community. U.S. law has long recognized that people under 18 have their own rights to speak and receive information. These new laws interfere with those rights. 

The Florida opinion suggests that young people can browse the internet without an account, or use a parent’s account. But that doesn’t help those who might participate in a private group, send a personal message, or speak to an audience they have built up. Nor does it recognize the reality that in many households, young people may not have the ability to use a parent’s device, or even have healthy relationships with their parents. For parents of children under 14, the Florida law also overrides parental autonomy—even if parents wanted to allow their child on these services, they cannot do so by law. 

These laws won’t just harm younger kids. Adults and older teens will bear the cost of the new rules. In order to figure out who is young enough to not be able to join, or who needs parental consent to join, services will have to check users’ ages. That likely means asking people to submit ID or other sensitive information. Some people will be mis-classified as too young; others will decide that they’d simply rather stop participating instead of handing over even more personal data. 

Keep A Record

Between the recent Meta settlement and these 11th Circuit decisions, despite widespread opposition, age-gating is becoming a reality for the American internet. As these laws are enforced, we need to understand what they mean for the people who have to deal with them. And we need to create a record of their effects on everyone’s speech so we can push to repeal them.

If you encounter a restriction due to these laws that affects you, keep a record, ideally while the details are still fresh in your mind. Screenshots, along with notes about the date and time, the service involved, and the task you were trying to accomplish, will all be helpful. 

Did you lose an account or can’t participate? Describe what you lost. Were you using a group to organize a club, volunteer in your community, or keep in touch with friends? Did losing your account cut you off from people you wouldn’t otherwise be able to be in touch with? Even if you just used the account to access local news or follow your favorite content creator, that’s still a significant loss of your right to access information online.

Record problems with age checks and parental consent. What information did the service request from you? Were you able to provide it? Did it reject your age proof, or classify you incorrectly? If you’re a parent, were you able to give permission, and what did you have to provide? What promises did the service make about what it did with the data it collected from you? Save explanations given by the platforms or any services they employ to age gate, including any law they cite. If you are to appeal a result and choose to, keep track of those attempts as well. 

You can also document choosing to drop out. If you abandon an account or service because you’re unwilling to provide ID or other personal data, write down what you gave up, and why. You don’t need to submit sensitive information to show that you are burdened by new rules. 

You Can E-Mail agegates@eff.org

If these restrictions affect you, we encourage you to reach out to EFF by emailing agegated@eff.org and telling us more about what happened. 

EFF will continue to oppose laws that prevent adults and minors from expressing themselves online, or that push people to give up their privacy to participate in the digital world. These recent court decisions are setbacks, but they don’t settle the debate. By keeping track of people who lose access, age-check failures, and the online conversations that can no longer happen, we’ll be in a better position to challenge the worst of these restrictions, in both legislatures and courts. 

And in the meantime, EFF will keep fighting for laws that actually make us safer online—like stopping social media companies’  harmful surveillance of all internet users. We’ll continue to push for laws that empower parents, children, and all internet users to have meaningful choice and control over their online services. Those goals can make everyone safer online, while preserving our ability to speak and access information. 

Further Action  Further Reading

Compromised TLS Certificates

Schneier on Security - Fri, 10/23/2026 - 7:04am

The Indian CA eMudhra Limited has eight TLS certificates with laughably weak private keys:

The compromised eMudhra keys were defective at a level that’s challenging the imagination of many of the engineers studying the incident. A normal size for a NIST P-384 elliptic curve cryptography private key contains roughly 384 bits of entropy, a size allowing almost 2384, or a number with 116 digits, different possibilities. The private key sizes of the compromised keys ranged from 3 to 8 bits. Astonishingly, the private keys were 4, 56, 66, 115, 155, 156, 230, 237...

Q&A: How AI came to model the “messy” human mind

MIT Latest News - Fri, 10/23/2026 - 12:00am

Generative artificial intelligence models are rooted in ideas of mid-20th century engineers who thought some amount of irrationality was essential for a machine that could think like a human, contends Benjamin Lindquist, an assistant professor in the MIT History Section, who holds an MIT Schwarzman College of Computing shared position with the Department of Electrical Engineering and Computer Science (EECS) and is a principal investigator in the Laboratory for Information and Decision Systems. 

To mimic creative thinking, these AI pioneers intentionally injected randomness into algorithms designed to deterministically solve problems, Lindquist writes in a new paper that appears in the journal Past and Present. In the paper, he traces the origins of AI hallucinations back to this early research and suggests there will be inevitable tradeoffs between creativity and predictability when trying to build machines that mimic human behavior. MIT News spoke with Lindquist about these ideas.

Q: Why did early computer engineers believe they needed to inject randomness and irrationality into AI systems designed for logic and calculation? 

A: There is a long history of many figures in the world of science and art theorizing that chance plays an important part in discovery and creativity — in the ability to originate ideas. They equated creativity with unexpected leaps of logic, or even a dream-like state that allows you to think about things from a new perspective. 

In the early 1950s, one popular idea from John Pierce, who was a prominent electrical engineer at Bell Labs, was about math being valuable in the world of art. The idea was shared by a lot of people working in early computing. When we think of artwork that includes math, we may think of something very orderly and precise, but Pierce came to the opposite conclusion. He concluded that the utility of math is that it could remove order from art. Then in a very calculated way, math could add a burst of the unexpected as a means to deviate from clichés and add an element of irregularity which just might lead to insight. 

One popular way to add irregularity into otherwise predictable computers was through artificial (or random) neural networks. Many early neural networks were built by psychologists, who thought that by enabling scientists to build a model of the brain, artificial neural networks allowed scientists to observe what is happening inside, including how brains make productive mistakes. Rather than being black boxes, researchers believed these systems could open this black box of the mind and let scientists peer inside and see all the messy stuff that was really happening.

But there was another camp in the world of AI who thought that creative thinking was just “normal” thinking done better. It is interesting to look at these two very simplistic heuristics for understanding intelligence and creativity, and how they do and don’t mesh. The debate, then, was about trying to determine what human inventiveness boils down to, and then how to reconstitute human inventiveness in machine form. 

Q: How did these early computer engineers view AI, and how is it different from the way we think about AI today?

A: When we think of AI systems, we think of ChatGPT or Claude. We value and use these systems because they give answers that, most of the time, are correct. One of the things that was most interesting to me in this research was finding out that a lot of the early advocates of these systems valued them for exactly the opposite reason. They wanted a system that, on occasion, gave answers that deviated from their expectations. They already had systems that could deliver reasonable and expected answers. They saw neural networks as valuable because they could give unexpected, perhaps even strange and bizarre answers.

One reason we might view these systems differently today could be because of how they operate. Early on, these systems were confined to laboratories, so there weren’t really any real-world consequences of a system that gives a strange, or wrong, output. But now there are legal and monetary reasons why OpenAI or Anthropic doesn’t want a chatbot that gives unexpected or creative answers. There has been a “sanding down” of strangeness in these systems. They still potentially have that at their core, but it is something that is now largely suppressed.

Q: How did early neural networks that incorporated randomness to simulate human creativity evolve to become the dominant paradigm in AI?

A: For a long time, a specific kind of AI called “symbolic AI” was the dominant approach. Essentially, symbolic AI says the world is based on rules. The role of the AI researcher is to try and reconstruct the knowledge of the world in facts and propositions and feed it into a computer.

Neural networks, with their use of randomness to solve problems, started to gain traction in the 1950s but fell out favor early on. Frank Rosenblatt, a psychologist who was a very important early figure in neural networks, died prematurely; he died accidentally on his 43rd birthday in 1971. He was quite a charismatic and forceful personality, who made a lot of grand promises about what systems based on neural networks could do. By the time he died, a shift toward symbolic AI was already underway. It is possible if, had he lived, things might have turned out differently.

But neural networks never went away. By the 1980s they had shifted more into the world of cognitive science. To become more powerful, and more useful, neural networks needed a lot of data and computational power. That didn’t really arrive until the advent of the internet, when a lot of data became available and computing started to power up. Around 2012, neural networks started to outperform and outpace a statistical form of machine learning, and they kept growing from there.

Q: What lessons can we learn from studying AI’s history that could inform its development? 

A: I think there is a cautionary lesson here. The ideas and experiences of these early engineers tell us that we can work toward quashing hallucinations — we can work toward making AI perform a certain way so it doesn’t produce unexpected or unwanted answers — but there are going to be other consequences of that. These historical figures were onto something. There is a connection between the surprising and creative conclusions AI can offer and errors or hallucinations. There are tradeoffs when we build our systems to behave one way or the other. Maybe it is impossible to be completely at either end of the spectrum, but when we work toward one thing robustly, we often sacrifice something else unintentionally.

Persistence, teamwork, and some healthy competition

MIT Latest News - Fri, 10/23/2026 - 12:00am

When Veronica Calzadilla Sosa transferred to MIT from Miami Dade College in Florida, she was an incoming second-year student with an interest in chemical engineering. She didn’t know how involved she would soon become as a student leader in the department.

She would also go on to discover her competitive side.

At the encouragement of a friend who was then a team captain, Calzadilla Sosa joined MIT’s chapter of American Institute of Chemical Engineers, and the two worked with the Department of Chemical Engineering to build up the team of students representing MIT in the organization’s lively chemical engineering competitions. As the organization’s competition chair last year and the vice president of external relations this year, she has fallen in love with the club and found joy in bringing students together to work toward a common goal and have fun along the way.

When she first took on the role, MIT was new to the competition, and students were participating in only one of several events. Now, they participate in three categories: ChemE Cube (where teams build a miniature chemical plant that fits inside a 1-cubic-foot cube), ChemE Jeopardy (a “Jeopardy!”-style trivia competition), and ChemE Sports (where teams operate and optimize a virtual chemical plan). 

Calzadilla Sosa also captained MIT’s first ChemE Sports team, working alongside two first-year students. At their first competition, their challenge involved optimizing a distillation column, drawing on concepts Calzadilla Sosa was learning in her separation processes class. The team placed second at regionals.

“The competition was challenging, technical, and at times stressful, but also incredibly fun and rewarding,” she said after the event. “Experiences like this remind me how much engineering extends beyond technical knowledge alone.” 

For Calzadilla Sosa, the experience was about more than the result. It gave her the chance to take on a leadership role, work through unfamiliar problems with her teammates, and help create an opportunity for students who might not otherwise have participated.

Building community has been particularly important to Calzadilla Sosa, who began her undergraduate education in Cuba before moving to the U.S. When she later transferred to the Institute after earning her associate degree from Miami Dade, where she was part of the Honors College, “I was a sophomore for the third time,” she jokes. At that point, many of her new classmates had already spent a year getting to know one another and finding their footing.

She began to find her place in an unexpected setting: office hours.

During her first chemical engineering class at MIT, Calzadilla Sosa regularly went to office hours for help with difficult problems. She soon noticed that she was not the only one struggling.

“I was there because I was struggling with a problem, but then I would see more people also struggling with the same exact things,” she says. “And that, for some reason, gave me this idea that I wasn’t alone in that sense.”

Those shared struggles became a starting point for conversations, friendships, and a support system. She learned that finding a community did not necessarily mean having everything figured out. 

“Sometimes you find your community simply by allowing yourself to struggle alongside other people,” she says.

Throughout her undergraduate experience, Calzadilla Sosa has also explored the many ways chemical engineering can be applied beyond the classroom. 

While studying in Miami, she interned with the U.S. Food and Drug Administration, analyzing data on toxic elements in food, and with the engineering consulting firm Jacobs, where she learned about water and wastewater infrastructure projects in the county. As an MIT student, she has been a materials intern at the medical device company Convatec, and a materials chemistry/chemical engineering intern at the startup Folia Materials. 

In the process, she has gotten a closer look at different industries and begun to figure out which ones interest her most. At MIT, she has become particularly interested in energy systems and how existing resources and infrastructure can be used more efficiently.

“I think exploring different areas is very valuable,” she says. “I find myself thinking ‘Maybe I could do this or I could do that. Maybe I don’t like this. Maybe I prefer doing another thing.’”

Outside of her studies, Calzadilla Sosa enjoys cooking and baking for family and friends, traveling, and going to concerts and dance performances. She also likes bringing people together, especially when she returns to her first home in Cuba and has the chance to reconnect with loved ones.

As graduation approaches, Calzadilla Sosa is excited to leave student life behind and see where her degree takes her. She has not settled on one career path, but she is comfortable with that uncertainty. After studying at multiple institutions and exploring different corners of chemical engineering, she knows there is still plenty left to discover.

“I spent so many years as an undergrad, so I’m really excited to go to industry and take that next step and see the results of my education,” she says.

Climate warming boosts frequency and intensity of southern Africa’s rainfall extremes

Nature Climate Change - Fri, 10/23/2026 - 12:00am

Nature Climate Change, Published online: 23 October 2026; doi:10.1038/s41558-026-02772-0

Extreme southward swings of the South Indian convergence zone (a major source of rainfall across southern Africa) can trigger devastating floods. Climate-model projections indicate that these swings might occur twice as often in the twenty-first century as in the previous century and produce more intense rainfall, owing to an increased land–sea temperature contrast and poleward intensification of atmospheric circulation.

Canadians Are Running Out Of Time To Oppose The Dangerous C-22 Surveillance Bill

EFF: Updates - Thu, 10/22/2026 - 6:10pm

Canada’s Parliament is debating a massive expansion of surveillance powers that will threaten the privacy and security of millions of people. Bill C-22, also called the Lawful Access Act, has already passed the House of Commons, and is now before the Canadian Senate. 

Canadians still have an opportunity to speak out and stop this dangerous legislation. The Canadian Civil Liberties Association (CCLA) is urging all Canadians to sign its petition opposing the bill. (The petition on CCLA’s website is governed by CCLA’s privacy policy.) 

Take action

Tell the canadian senate to stop C-22

As we wrote earlier this year, Bill C-22 gives the government new powers to force digital services—including telecom companies, messaging apps, and more—to help with government surveillance. Worse, it allows Canada’s Minister of Public Safety to order companies to create a backdoor to their services for law enforcement, as long as it doesn’t lead to a “systemic insecurity.” That’s a clear recipe for weakening the encryption we all rely on. 

It also requires services to retain metadata for up to a year, which reveals who people communicate with, where they go, and what services they use, even when they are not suspected of any crime. 

Researchers at CCLA and Citizen Lab published a detailed analysis of C-22 and its serious constitutional and cybersecurity problems. The analysis points out that the bill needs more than cosmetic changes—it calls for entirely withdrawing Part 2 of Bill C-22, the section that establishes the surveillance and data retention regime. 

Bill C-22 could also expand the sharing of Canadians’ personal data with foreign law enforcement, including the United States. Canada has been negotiating a cross-border data-sharing agreement with the U.S. that would allow American police to get information about Canadian internet users without any Canadian court oversight. 

Some Canadian senators have already expressed concerns about the bill, and rightly suggested, as CCLA and Citizen Lab have, that it may not be compatible with privacy protections in the Canadian constitution. 

If you’re in Canada, read and sign CCLA’s petition opposing Bill C-22 today. Don’t let the Senate allow this dangerous expansion of government surveillance to become Canada’s new reality. 

Take action

Canadians: defend your privacy and security

This design software reimagines everyday objects as self-aware devices

MIT Latest News - Thu, 10/22/2026 - 4:45pm

As a child, you likely saw a few Disney movies depicting inanimate objects, such as clocks, cups, and toys, as interactive companions to humans — an act of pure magic, seemingly. But scientists at MIT’s Computer Science and Artificial Intelligence Laboratory (CSAIL) are now doing something similar: transforming stationary items into self-aware tools that perceive and respond to human motion to complete a task.

Engineers have 3D-printed these dynamic items with built-in sensing, using conductive materials for sensors and traces (sort of like wires) inside. The issue: both components were typically fabricated using the same material, so they’d emit similar signals. It’s sort of like hearing two radio stations at the same time, a mixup that’s hard to interpret. This confuses, say, a glove that relays instructions to a robotic hand about how to handle a specific object. The device couldn’t filter out the noise or verify the angle of a user’s motions, leading a humanoid student to make errors.

Researchers at CSAIL and Tianjin University (TJU) in China may have found a way to 3D print more precise interactive items. With their “X-Hinges” software, users can customize a design, and the tool will automatically embed two different materials: a filament for the sensors designed to send the strongest signal possible, and another for the wire-like elements that don’t interfere. Interactions won’t get lost in translation, meaning users can fabricate objects that respond in real-time, such as small robots, household decor, object-detection systems, and toys.

With X-Hinges, users can put together an item by selecting and connecting different shapes, then choosing how certain parts move. The item won’t be limited to moving in just one way like previous approaches; instead, users can select up to three “axes:” compressing, up and down, or to the sides. Building a robotic hand, for example, you’d likely want its fingertips to move vertically and laterally. The new tool would then embed sensors where the object bends (in this case, its joints) to capture motion data from both angles. That way, the device can understand and respond to your interactions more dynamically once it’s 3D-printed.

“It’s kind of like adding a conscious element to everyday objects,” says Jiaji Li, MIT electrical engineering and computer science (EECS) postdoc and CSAIL researcher, who is a senior author on a paper introducing the work. “What you get is objects that better understand how they’re being used and have more ways to respond. In the same way an AI agent is programmed to make certain decisions based on our instructions, these creations have built-in sensing to adaptively react to human touch.”

Jiaji Li and lead author Xiang Chang, a TJU PhD student and visiting researcher at CSAIL, used X-Hinges to create many clever devices. For example, they made a glove that can teach a robot how to grasp blocks. It adjusts to the size of a user’s hands, then records how the joints in their fingers bend via sensors before rapidly relaying that information to a humanoid hand to mimic it. The glove could be useful in factories or homes, where a robot often needs to learn new interactions quickly.

The researchers also produced a small, origami-style lamp using X-Hinges. It senses when a human pinches it closed and adjusts its brightness accordingly. When you turn on this adaptive, portable light source (sort of like a reading light), it looks like a piece of folded-up paper that sprouts into a lamp.

X-Hinges can even assemble devices that identify which objects have been placed on it. You could put a banana on top, for instance, and it’ll recognize the fruit almost immediately based on the tactile data it’s recorded using its sensors. This advanced physical awareness could be integrated into detection systems in places such as airports and grocery stores. 

Behind each of the scientists’ creations is an easy-to-use interface that helps you design interactive objects from scratch. Users can choose how each part of their design looks and moves, just as the researchers did when making a video game controller that resembles a cartoon shark.

X-Hinges gives you four shapes to choose from: a custom option, cylinder, rectangle, and thin outline. To recreate the unique look of a shark’s tail, the researchers designed their own shape. They then chose how the toy bent, opting for its tail to move up and down, sort of like a joystick. Finally, the program embedded the sensors, and the scientists 3D-printed their device.

The researchers say that X-Hinges’ diverse motions are a novel feature compared to past attempts to 3D-print responsive everyday objects. “Most methods only allow for one axis of motion, often due to signal interference. X-Hinges enables your 3D-printed item to move from three angles,” says Chang. “Ultimately, you get a design with the intended movement you want. It also records motion data in each of those areas at the same time, making the device responsive to different kinds of interactions.”

The tool could help realize the untapped potential of the seemingly mundane. Objects we use every day for a specific purpose, like a water bottle for drinking or a lamp for lighting, could become interactive gadgets. Much like how a chatbot uses a sort of digital intelligence to answer your prompts, an object could leverage a kind of physical intelligence to execute a physical task when users interact with it.

For now, though, X-Hinges faces a calibration bottleneck. Each time an item is 3D-printed, its layout of electrical elements varies slightly, so two devices that appear identical from the outside may not make the same sensor readings. This is crucial if you’re building a deformable fitness glove, for instance, for two separate users. To fix this, Chang and Li built a computer vision system that can recalibrate outputs to align, ensuring data is accurate across two of the same items, although they hope to develop a built-in signal recalibration mechanism in the future.

That ambition traces back to the throughline in Jiaji Li’s own research: letting actuation and sensing “grow” directly inside a 3D-printed object, instead of adding them on afterward. He previously built printed tendon-driven mechanisms that gave objects the ability to move; X-Hinges is how he’s now building on the ability to sense. The next step, he says, is combining the two in a single print — it’s actuation and sensing born together in the same fabrication process, opening the door to new physical platforms for embodied intelligence and AI agents.

Chang and Li wrote the paper with MIT associate professor of EECS and CSAIL principal investigator Stefanie Mueller and recent TJU graduate Haiyang Yan. Their work was supported, in part, by a postdoctoral research fellowship from Zhejiang University and the MIT-GIST Program.

The researchers will present their work at the ACM Symposium on User Interface Software and Technology in early November.

MIT’s Kavanaugh Fellowship: From invention to impact

MIT Latest News - Thu, 10/22/2026 - 4:20pm

Entrepreneurship and MIT have become a classic pairing, with a storyline that seems to write itself: A researcher develops a brilliant innovation in the lab, spins out a company, and brings a product to market that saves lives or improves society. It happens, sure — but long-term startup success is far from guaranteed.

That’s the challenge that prompted the launch of the MIT Kavanaugh Translational Fellows Program a decade ago, giving scholars who want to turn academic research into solutions to pressing challenges the time, tools, and business training to improve their chances of success.

“MIT has this world-class research facility and faculty and everything, but it also has world-class entrepreneurial programs,” says Nick Diaco, an MIT postdoc and 2025 Kavanaugh Fellow, in a new video about the program. “You really need both if you actually want to take an idea from the lab and put it into the real world and put it into situations where it’s actually affecting people’s lives.”

The program’s focus reflects a fundamental challenge for academic innovators: developing a promising technology is only the beginning. Turning it into a viable business requires making difficult decisions about customers, markets, financing, and other factors that may fall outside a typical researcher’s expertise.

“Even in a place like MIT, the majority of those people who choose to start businesses or bring that product to another business, the majority are going to fail,” said philanthropist Bart Kavanaugh at a May event announcing the 2026 fellows. Kavanaugh is one of the namesakes of the Saks-Kavanaugh Foundation, which supports the fellowship. He and his wife, Betty Saks, run the organization.

The foundation, he explained, analyzed what distinguishes successful startups. The selection process for the fellowship, he told the three new fellows — John Zhang, Maximiliano Jara Fornerod, and Xinyuan Zhang — is intended to identify researchers who have the potential to succeed.

The three are developing technologies ranging from a faster way to manufacture custom optical lenses to at-home strep throat tests and infrared detectors that can operate without energy-intensive cryogenic cooling.

They join a growing legacy of Kavanaugh Fellows whose research has moved toward commercialization, including Sublime Systems, a manufacturer of low-carbon cement; SiTration, which develops technology for extracting materials; and Stratagen Bio, which develops tools for quantitative biomarker assessment.

The yearlong program, managed by MIT’s Department of Materials Science and Engineering, gives MIT scholars time to focus on the business side of their ideas and develop the planning and decision-making skills needed to move promising research beyond the lab.

“If while you’re doing your research, you’re able to set aside some time to investigate the commercial potential before you leave the university, you get a really good picture on, 'is this a good idea for commercialization?'” says Diana Mojahed in the video. Mojahed was a postdoc at MIT when she became a 2023 Kavanaugh Fellow and is now the CEO of Lightfinder, which makes handheld spectrometers for health care, manufacturing, and telecommunications.

“It’s so much more than just achieving good specs with whatever you’re trying to achieve. There has to be a market for it. The unit economics need to work out. There’s a lot that goes into building a company.”

Learn more about the Kavanaugh Translational Fellows Program.

New Serious PHP Vulnerabilities Released and Patched

Schneier on Security - Thu, 10/22/2026 - 9:26am

PHP maintainers have released fixes for two critical vulnerabilities:

PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities that can allow unauthenticated remote code execution. All PHP users are strongly encouraged to update immediately.

Who is at risk: all PHP installations serving web requests, including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP and LiteSpeed. We consider the risk highest for mod_php, with a demonstrated exploit where an unauthenticated request can trigger the attack before any application code runs...

Startup plans to rejuvenate the nuclear power industry with a new manufacturing approach

MIT Latest News - Thu, 10/22/2026 - 12:00am

Building a nuclear power plant is one of the world’s most complex construction projects. It requires thousands of trucks to ship parts, often to remote regions, where huge teams of skilled workers like electricians and welders come together to assemble everything over many years.

Financing such projects is difficult, in part because no one wants to risk loaning money to a project that might never generate power and revenue, whether that’s due to technical failures, the inability to recruit enough talent, or regulatory hurdles.

Stated this way, it’s no surprise the average nuclear plant costs twice as much as originally expected and faces delays of many years. Those cost overruns and delays have ground the nuclear industry to a near halt: When Georgia finally turned on its Vogtle Unit 3 reactor in 2023 (seven years late), it was the first new reactor constructed in the U.S. in over 30 years.

Blue Energy wants to make deploying nuclear power plants more like wind, solar, and gas projects. The company prefabricates huge blocks of its nuclear plants at shipyards, where workers and equipment already produce huge steel structures for the oil and gas industry every day, then ships the blocks on barges to the site of the plant for final assembly.

“The nuclear problem is a construction problem,” says Blue Energy founder and CEO Jake Jurewicz ’14, SM ’15, who grew up in the construction industry and studied the differences between nuclear and oil and gas projects at MIT. “On paper, nuclear technology is almost perfect: It operates above 90 percent capacity, it’s zero carbon, dispatchable, extremely high reliability, and has predictable cash flow. We don’t have enough nuclear power because we’re really bad at building it. But there’s already a huge manufacturing supply base for offshore oil and gas and offshore wind. If we can point that toward building nuclear plants, and finance it the same way, we can reinvigorate the industry.”

Blue Energy’s prefabricated blocks weigh around 1,500 tons and are designed to be easily assembled at their destination to complete a nuclear power unit over the course of a single year. The company is further reducing barriers to financing and speeding up construction timelines by designing its early plants to run on gas initially before switching to nuclear reactors, which it hopes will generate revenue within three years from the start of construction.

The company has already gained approval from the Nuclear Regulatory Commission for its gas-to-nuclear approach and has also secured an agreement with GE Vernova Hitachi Nuclear Energy for its first project, a 2.5 gigawatt hybrid nuclear power plant in Victoria, Texas, that is scheduled to begin producing power in 2030. This September, Blue Energy submitted the first part of its application to the NRC to begin construction on its Texas project, making it just one of five companies to do so in the current nuclear development era.

“Our first site is a great power generation project for that community because it's going to generate a lot of excess power,” Jurewicz says. “It’s going to show a new model for the world: This is a way the U.S. and its allies can deliver a turnkey nuclear power plant and turnkey energy sovereignty.”

A new blueprint for nuclear

Jurewicz grew up in Chicago, where he worked as a construction draftsman through high school. When he arrived at MIT, he double majored in nuclear engineering and physics, then stayed at MIT for a masters in the Department of Nuclear Science and Engineering. He also minored in energy studies through the MIT Energy Initiative.

Jurewicz’s master’s thesis explored ways nuclear power plant construction could apply lessons from the offshore oil and gas industry.

“If you’re trying to solve the construction problem, find parallel industries where people have solved it before,” Jurewicz says. “That’s why I looked at offshore oil and gas as well as nuclear shipyards in the U.S. and South Korea. We build oil and gas plants all the time, so what looks different about the way we build and execute an oil and gas plant relative to how we build a nuclear plant? They’re both mostly steel welding.”

Shipyards have several advantages over other sites for building nuclear power plants. For one, they already have thousands of skilled workers and loads of specialized equipment. They can also manufacture things in controlled environments, enabling increased automation and reducing uncertainty.

Following graduation, Jurewicz worked in corporate strategy at the utility company Exelon Energy, where he sponsored research at MIT. He originally considered starting Blue Energy as a graduate student with an approach that included creating a new passive safety system and going through a new regulatory insurance framework.

When he founded Blue Energy in 2023, he wanted to minimize risks with a more conventional reactor design. That includes prefabricating functional chunks of the reactor — what the company calls “Blue Blocks” — at a shipyard using standard manufacturing approaches that meet nuclear licensing and quality assurance requirements.

“The 1,500-ton Blue Block prefabricated modules are fully functional mechanically and electrically, they have plumbing — everything is delivered ready to run directly to the site,” Jurewicz says. “Then we have this gas-to-nuclear technology that allows us to get things going earlier with gas by building the whole nuclear steam turbine system right away and energizing it with steam from gas combustion turbines, which means we can finance it as a gas plant, so the cost of capital goes down. It dramatically lowers the cost of the project, and it reduces risk. Then we switch it with the nuclear reactor.”

Blue Energy’s nuclear reactor will be a small modular light water reactor that has already been approved by the Nuclear Regulatory Commission and is made by GE Vernova Hitachi Nuclear Energy.

Blue Energy’s first power plant in Texas will provide 1 gigawatt of power using two GE Vernova gas turbines in 2030 and then add another 1.5 gigawatts of power from up to five small modular reactors beginning in 2032.

“It will be pretty easy to add more modular reactors to the site, so we can lower the cost to that community to provide things like water desalination, which is a big issue in south Texas,” Jurewicz says. “This power infrastructure is clean, reliable, and resilient through hurricanes or any other weather scenario that can happen in that community. It creates hundreds of high-paying permanent jobs and the foundation for a lot of local economic growth.”

Faster, cheaper nuclear

Historically, nuclear power plants have taken 10-plus years of construction. Blue Energy believes it can shorten that to about 36 months. The company is projecting power from later projects to reach about $5,000 per kilowatt. For context, the Vogtle nuclear plant delivers power at more than twice that cost.

Jurewicz believes Blue Energy’s lower prices could finally inject much-needed life into the U.S. nuclear industry.

“Despite all of the excitement around nuclear, you haven’t seen real power purchase agreements get signed because there’s a stalemate on who’s going to take the construction overrun risk,” Jurewicz says. “The government doesn’t want to take it. The construction companies don’t have the balance sheet to take it. The utilities can’t take it. Even the hyperscalers won’t take a two-or-three-times cost overrun risk. Blue Energy is introducing a fifth party to break the stalemate, which is the shipyards and fab yards, which are best positioned to take the risk because they can make things in a controlled fabrication environment, so they'll take the risk on construction in their own yards.”

Introducing Our New Surveillance Self-Defense Guide: Online Privacy for Parents and Youth

EFF: Updates - Wed, 10/21/2026 - 7:07pm

The internet is a vast and confusing place no matter your age. Trying to help youth engage with it safely and privately is a complicated topic that touches on many different skillsets and ideas. But just because it’s complicated doesn’t mean it’s impossible. We’ve launched our Online Privacy for Parents and Youth Surveillance Self-Defense guide in hopes to provide a framework for finding solutions that work for you. 

EFF rolls out this crucial resource as state and local governments consider ill-advised laws that cut young people off from essential information and experiences. This particularly harms vulnerable youth and marginalized groups who often find safety in supportive online communities they can't access offline. Such laws also entail age gating, which compromises the privacy of all internet users and stifles young users’ ability to learn, grow, and express themselves.

Young people have unique needs and those needs change over time. Trying to protect from everything all the time is an exhausting process, but the security community has long had a solution for this: security planning (also called threat modeling). The idea is to provide a series of questions designed to help you focus on what’s truly important. When it comes to online privacy, this is as applicable for youth and parents as it is for anyone else. 

We used a security plan as our foundation for this guide because deciding what is and isn’t important is the first step we should all take when assessing our privacy risks. But this isn’t a place for quick fixes, and every young person has their unique needs and considerations. There is no single tool or technology fix that can substitute for spending time learning, and then teaching a young person, how the internet works, how to use it, what sorts of harms exist, and how to navigate those harms.

Solutions are rarely about the tools or software you use. It’s about understanding the threats and concerns you have, and then determining what steps you can take to mitigate those risks. We hope our Online Privacy for Parents and Youth guide can help provide the outline to get the conversation started.

Donate Today!

Interoperability vs. Security: Why not both?

EFF: Updates - Wed, 10/21/2026 - 6:39pm

An open internet where people can freely build, share, and remix each other's work is a powerful engine of grassroots innovation we’ve all benefited from. In recent decades, however, corporations have taken control of an increasing share of this work, giving them a greater ability to stifle challengers and limit our choices. When regulators address this by mandating that  tech giants play fair by requiring interoperability, the gatekeepers respond with a tired refrain: Playing fair puts users’ security at risk.

Unfortunately for these trillion-dollar companies, this gotcha isn’t the end of the conversation. Regulators can ensure that meaningful choice and security thrive.

Lawmakers have been catching up, recognizing that the best way to rein in big tech is to require these oligopolies to open up their platforms to independent developers. As we explained six years ago, mandating interoperability helps prevent the misuse of people’s data and enables more privacy-respecting alternatives. Tech giants, in contrast, have been arguing that our data is safer when they have exclusive control.

Tech Giants Claim Interoperability Means Insecurity

The European Union’s Digital Markets Act (DMA) put interoperability into law under Article 6(7): “gatekeeper shall allow providers of services and providers of hardware, free of charge, effective interoperability with” a designated Core Platform Service they operate. The language describes an unambiguous requirement to remediate vendor lockouts and anti-competitive behavior of the major service operators—it is not optional.

Apple claimed that enforcing this obligation in mobile app stores would put their customers at risk and do irreparable harm to trust in their brand. It’s an argument reminiscent of Apple’s fight against the right to repair, and in both instances the company is fighting to maintain its restrictive ecosystem to stop people from finding better deals elsewhere. Apple has long cultivated a more corporate-controlled experience with the iPhone, but this argument is now also being used for the relatively-more-open Android devices from Google.

In the same year Apple argued against the DMA, Epic Games sued Google for its restrictive terms of service and extractive policies for revenue generated in apps. Google predictably alleged that opening up its platform to other app stores it couldn’t vet would allow harmful apps to be installed. The case was ultimately decided this year in the U.S. federal appeals court for the Ninth Circuit, with the court rejecting this argument, dealing a blow to  Google’s feudal security arrangement, and paving the way for third-party app stores to be delivered as apps via the Google Play Store.

Interoperating Secure Systems Can (and Should) Exist

Policymakers cannot take tech giants’ claims at face value. Companies have every incentive to resist interoperability requirements, because interoperability lowers practical barriers and reduces switching costs for consumers adopting competing services. 

Even where companies offer credible claims from internal technical and security experts, independent experts rarely have the access and information they need to test those claims. Companies have selectively made arguments that security is harmed by interoperability, often in contexts which are to their advantage. These companies are happy to let a general misconception flourish which frames security as inherently opposed to interoperability.

This narrative is wrong. We’ve seen that when interoperability and information security are both set as essential and non-negotiable criteria, secure interoperable systems result—systems that don’t sacrifice the rich features we’ve come to expect of the services we rely on. 

The cross-platform rollout of Rich Communication Services (RCS), and now Message Layer Security (MLS) on top of it is a perfect example of this, creating end-to-end secure messaging by default between Android and iOS. For RCS and MLS, Google was conveniently on the other side of the interoperability argument, campaigning Apple to adopt the standard to overcome the diminished “green bubble” experience iPhone users had when texting non-iPhone users. Once Apple finally agreed to interoperate by implementing common standards, all users benefited from improved messaging security. In cases where legitimate security concerns are raised, these can be assessed and remedied on a case-by-case basis, without sacrificing user agency.

Striking the Right Balance

Retrofitting interoperability into already secure closed systems shouldn’t be done carelessly: it requires regulators strike the right balance of pressure and leniency to allow the time and precision necessary to make these renovations. Any components developed with the assumption of privileged access by trusted parties (e.g. your browser engine) are particularly vulnerable to serious security risks when opened up to unaccountable third parties.

By adapting interoperability and information security as essential design principles, we can expect more safety, but also more freedom.



With regard to the DMA, when security concerns are legitimate, we urge the European Commission to work with companies and outside experts to offer guidance in technical implementation and provide clarity on regulatory compliance. This approach paves a path forward that balances the interest of legal oversight and the needs of the companies alike. 

Policymakers wishing to uproot these unfair platforms of control must do so with care and limit the impact this disruption can have. But security concerns must not act as a lever to indefinitely delay compliance. Closed systems should be impartially evaluated, and if concerns are valid, regulators can allow more time and guidance to be given to companies implementing these changes. One possibility is a tiered approach: offering leniency during an initial period where systems need to be retrofitted to abide by new requirements, followed by a subsequent and ongoing stricter observance of fair play.

Once interoperability and information security are adopted as essential design principles, further development with these rights-enhancing principles in mind will more easily follow. The result will be an internet the world deserves—where we can expect more safety, but also more freedom.

EFF to Brazil’s ANPD: Data Privacy and Free Expression Must Underpin Platform Regulations

EFF: Updates - Wed, 10/21/2026 - 6:11pm

The Brazilian National Data Protection Agency (ANPD) plays a pivotal role in the regulation of digital platforms according to new legislation approved in Brazil. Throughout this year, EFF has presented comments, filed submissions, and met with the agency to emphasize crucial guardrails that the enforcement of new regulations should ensure. 

ANPD is responsible for detailing and applying obligations set in Law n. 15.211/2025, which established rules for the protection of children and adolescents in the digital space. While some provisions establish important privacy safeguards, like prohibiting advertising based on profiling of underage users, the law created mandatory age assurance mechanisms for accessing digital products and services. 

We have raised alarms on the privacy and free expression issues around age-gating the internet. Age verification technology is often inaccurate and privacy-invasive. Examples also show how it’s prone to enforcement overreach, resulting in sites blocked beyond legal requirements. In the UK, providers disproportionately restricted several counseling, support and mental health sites under the Online Safety Act. Current age assurance methods risk wrongly walling off adults with no valid IDs, facial differences, physical disabilities, among others. 

We highlighted these concerns in our comments and submissions underscoring that ANPD should avoid a blanket approach to age assurance obligations. Following the legislation, restrictions should apply only to products and services that are inadequate or prohibited to children and adolescents according to categories already set in regulation, with robust protections against subjective and overbroad interpretations. Guarantees such as access to information, freedom to participate in society and meaningful access to technologies also compound what constitutes the best interests of the child.  

Moreover, we stressed that zero knowledge proofs alone fail to ensure strong user privacy, including safeguards that the law itself sought to secure. Our submission explains why other requirements, such as unlinkability, selective disclosure, batch issuance and processing on device, are crucial for achieving greater levels of protection and mitigating privacy harms. Minimum information being shared to the verifier and no “phoning home” to the issuer of a user’s accepted credentials are conditions that prevent actions like collusion and data sharing about the user. 

We also shared inputs about the scope of the law, asking more clarity on which providers are covered by its obligations and the importance of treating differently non-dominant players like federated networks and free software applications. Without that clarity, this could negatively impact beyond gaming and major platforms that are the main target of these regulations. We elaborated on the agency’s regulation of prevention duties, the relevance of modulating them according to the type and structure of providers, and alerted them that their interpretation should not result in general monitoring obligations. 

On another but related front, we sent comments regarding Brazil’s new internet intermediary rules. Here too, ANPD has a critical regulatory role after a Supreme Court’s decision and presidential decrees changed the liability regime initially set in the law known as “Marco Civil.”  

With the turn to notice and takedown mechanisms and duty of care obligations, we emphasized measures to prevent censorship of protected content. These involve ensuring solid means for appeals of restricted posts, avoiding overreliance on AI-based content moderation, strictly tailoring the application of concepts like duty of care and systemic failure, and not normalizing the blocking of platforms and websites.  

We raised concerns about a trend reflected in the new regulation requiring platforms to proactively report user to authorities with unclear guarantees. Finally, we urged the agency to advance essential transparency and accountability measures for enabling greater public oversight over the application of the new regime. 

As we said before, platform accountability under the new rules ultimately hinges on how accountable its enforcement will be by platforms and state institutions. Rigorous commitment to fundamental rights, including freedom of expression, privacy and data protection, is required so that intended protections don’t instead lead to harms. ANPD must uphold this commitment and make sure that new regulations don’t backfire. 

Making room to explore

MIT Latest News - Wed, 10/21/2026 - 4:45pm

At MIT’s McGovern Institute for Brain Research, Professor Fan Wang tackles innovative research every day. Her work centers on a fundamental question in neuroscience: How does the brain interact with the body to shape our sensations, emotions, and actions?

Wang and the students in her lab study the neural circuits underlying experiences such as touch and pain, as well as the sensory and motor systems that allow animals to carry out behaviors like eating, drinking, moving, and vocalizing.

This research is inherently exploratory. Understanding how the brain generates complex sensations and behaviors often requires following unexpected findings and pursuing questions whose answers are not immediately clear.

Wang brings this same openness to her mentorship style, giving those within her lab the freedom to explore while providing the scientific guidance needed to navigate uncertainty.

“Innovative research is often inherently high-risk and requires continuous exploration, and adjustment of direction,” Wang says. 

She does her best to share the excitement of promising results alongside her students while also working to alleviate their stress when everything doesn’t go to plan. Ultimately, she aims to create a research process that is “both intellectually stimulating and genuinely enjoyable” for her advisees.

For all these efforts, Wang was honored as “Committed to Caring” through a student-driven nomination and selection process.

Creating space for discovery

Research rarely follows a perfectly predictable path. New results can require revisiting hypotheses, changing direction, or returning to questions that had already been answered. Wang sees this uncertainty as a fundamental part of the research process.

She meets with members of her lab regularly to discuss their work and investigate problems together. These conversations serve to provide both feedback and structure, while also allowing them to work together through the frustrations that can accompany difficult research.

One nominator describes Wang’s “rigorous yet thoughtful scientific training” as tailored to each student’s personality and interests. For this student, weekly or biweekly meetings provide opportunities to review progress and plans, receive detailed guidance, and get critical feedback that supports both academic and professional growth.

Wang strives to create a challenging research environment that is also steeped in encouragement. This is particularly important when students are pursuing questions without obvious answers. When these sorts of questions arise, Wang is quick to work through uncertainty as a team.

For Wang, the goal is not to eliminate the uncertainty that comes with research, but to help students become comfortable navigating it. When results point in an unexpected direction, researchers can return to the questions, discuss what they are seeing, and determine where the evidence should lead them next.

Tailoring support to the student

Wang’s mentorship extends beyond experiments and research questions. She recognizes that each of her advisees is different, with unique interests, relationships, and experiences, and she tries to understand the type of support they need in order to flourish.

Her influence extends beyond the students she directly advises. As a member of the graduate affairs committee for the department, Wang meets with first-year PhDs to offer career advice and help them navigate the challenges of graduate school. Her nominators describe her as “compassionate, approachable, and deeply supportive.”

Wang also recognizes that circumstances outside the laboratory can affect a student’s ability to focus on research. “When something difficult happens in a student’s life, the most important thing I can do is be there to listen with genuine care and without judgment,” she says. “I do my best to support them as a whole person, not just as a researcher, and to be flexible when they need it.”

That flexibility can mean slowing things down, helping a student take a challenge one step at a time, or simply giving them space to talk. At the same time, Wang continues to emphasize the real goals at the heart of graduate education: asking difficult questions and responding thoughtfully to unexpected results.

One nominator describes Wang as bringing “warmth to the lab” — sharing food, engaging in conversations, and showing genuine concern for everyone’s mental well-being. Wang’s gestures create an environment where they feel supported both as researchers and as people.

Fostering trust

Wang describes her position as something of a “mother hen” philosophy. She feels a deep sense of responsibility for every student who joins her lab, and genuinely wants each of them to succeed.

For Wang, mutual trust is what allows mentorship to become an authentic connection. Her advisees can pursue uncertain ideas and navigate difficult moments knowing that their relationship with their mentor does not depend on always getting the right answer. 

“When students know that I truly care about them as people, not just as producers of data, it builds trust,” Wang reflects. “They understand that they are not just workers hired to complete a research project, and that I do not value or judge them solely by their output.”

For students with their sights set on space medicine, a new community takes flight

MIT Latest News - Wed, 10/21/2026 - 4:40pm

Since its launch two years ago, MIT’s Doctors Without Gravity club has already amassed more than 100 student members. The club was co-founded by graduate students Anna Wadhwa and Nicole McGaa, who now serve as president and vice president, respectively.

Bringing together students from MIT and Harvard University who are interested in the intersection of medicine, health, and space exploration, Doctors Without Gravity is the student chapter of the Aerospace Medical Association (AsMA) and the Aerospace Medical Student and Resident Organization (AMSRO). The club is open to both undergraduate and graduate students from both institutions.

Students interested in the club do not need to be aero/astro, biology, or pre-med majors, says Wadhwa, noting that the club also has many mechanical engineering students interested in spacecraft mechanics, for example. Wadhwa adds that all majors are welcome to join.

“We want to help increase student awareness and education about aerospace medicine as a potential field that people can study and pursue for a career,” says Wadhwa, who is part of the Aerospace Physiology Lab and pursuing a PhD in aeronautics and astronautics at MIT before returning to Harvard Medical School to complete her medical degree. “We hope to achieve this by connecting the existing communities that are already in place at Harvard, MIT, and Boston by hosting events, lightning talks, and our annual symposium.”

Building a community around space medicine

To bring community members together, Doctors Without Gravity hosts general social events where members can get to know one another and network in a casual setting. They also hold workshops and fireside chats with faculty, researchers, physicians from Massachusetts General Hospital, and residents in training, so students can ask questions, learn more about their research, and ask for career advice. “It’s a great way to get students plugged into the Boston area network of people interested in space medicine,” says Wadhwa.

The club’s director of science communications, Maryam Hiradfar, a graduate student in the Harvard Biophysics Program, says the club’s interdisciplinary membership is one of its greatest strengths.

“Members are a diverse group of students who can all learn from one another. We have members who are not doing active space research or space life research, including myself, but I think just being able to spark that interest in them and hopefully give people direction to get involved in that kind of research if they're interested.”

She adds, “members of the club pursue a wide variety of fields after graduating, including medical consultants, physicians, and research. Some people go into academia and research. There are numerous ways to explore space medicine; it doesn't have to be just as a flight surgeon at NASA. People interested in the field also work at Mission Control to monitor astronauts' health not only while in space, but also on a daily basis, while others do contract work for SpaceX or Axiom Space.”

The club also helps students learn about career opportunities as they arise. Wadhwa notes that if SpaceX, NASA, Axiom Space, Blue Origin, or other groups reach out to the club with job or internship possibilities, the information is quickly passed along to its members.

Faculty advisor and director of the Aerospace Physiology Lab, Associate Professor Lonnie Petersen, adds, “Doctors Without Gravity brings together curious students from many different fields who share an interest in advancing medical care beyond Earth. As faculty advisor, I am proud to support these students, expand their network, and provide opportunities for them.”

Researching the effects of spaceflight on the human body

Hiradfar is conducting research in the Integrated Positron Emission Tomography and MRI lab at the Martinos Center for Biomedical Imaging. Much of her time is spent scanning patients on a total-body positron emission tomography system. She does everything from scanning to adapting and developing conventional analysis pipelines and algorithms to analyze this new type of whole-body scan.

Wadhwa is conducting research in the Aerospace Physiology Lab with Petersen. Her work specifically focuses on how the brain reacts to spaceflight, because astronauts experience fluid shifts while in space and it is crucial to understand how those changes affect brain health. She is studying this both on a cellular and a systems level.

Both Wadhwa and Hiradfar say they would like to take flying lessons one day, but their schedules are too busy at the moment.

Helping colleagues with a study, Wadhwa did have the opportunity to take a ride in a centrifuge, accelerating from 1G to 4G — the equivalent of 88 mph.

“The test was designed to simulate the dynamics of flight maneuvers of a jet, in order to study patient physiology. It would go up for five seconds and then back down and then up and down. At the end, you do feel like you just got off a roller coaster, and I had to stay really still for a few minutes after the centrifuge finished,” she says.

Upcoming events

Doctors Without Gravity is already planning for their 2027 Symposium to be held during Massachusetts Space Week, April 19-25, 2027. Additional details will be announced as they become available.

At last year’s annual symposium, the keynote speaker was MIT Professor Dava Newman, Apollo Program Professor and director of the Human Systems Lab, who brought some samples of flight testing materials for everyone to see and touch. In 2025, the keynote was given by Erik Antonsen, director of the Mass General Brigham Space Medicine Fellowship. 

For students interested in exploring the possibilities of aerospace medicine, Doctors Without Gravity offers a place to learn, make connections, and discover the many paths into the field. Students interested in potentially joining the club may join the group’s mailing list.

Pages