Author name: Paul Patrick

anthropic’s-auto-clicking-ai-chrome-extension-raises-browser-hijacking-concerns

Anthropic’s auto-clicking AI Chrome extension raises browser-hijacking concerns

The company tested 123 cases representing 29 different attack scenarios and found a 23.6 percent attack success rate when browser use operated without safety mitigations.

One example involved a malicious email that instructed Claude to delete a user’s emails for “mailbox hygiene” purposes. Without safeguards, Claude followed these instructions and deleted the user’s emails without confirmation.

Anthropic says it has implemented several defenses to address these vulnerabilities. Users can grant or revoke Claude’s access to specific websites through site-level permissions. The system requires user confirmation before Claude takes high-risk actions like publishing, purchasing, or sharing personal data. The company has also blocked Claude from accessing websites offering financial services, adult content, and pirated content by default.

These safety measures reduced the attack success rate from 23.6 percent to 11.2 percent in autonomous mode. On a specialized test of four browser-specific attack types, the new mitigations reportedly reduced the success rate from 35.7 percent to 0 percent.

Independent AI researcher Simon Willison, who has extensively written about AI security risks and coined the term “prompt injection” in 2022, called the remaining 11.2 percent attack rate “catastrophic,” writing on his blog that “in the absence of 100% reliable protection I have trouble imagining a world in which it’s a good idea to unleash this pattern.”

By “pattern,” Willison is referring to the recent trend of integrating AI agents into web browsers. “I strongly expect that the entire concept of an agentic browser extension is fatally flawed and cannot be built safely,” he wrote in an earlier post on similar prompt injection security issues recently found in Perplexity Comet.

The security risks are no longer theoretical. Last week, Brave’s security team discovered that Perplexity’s Comet browser could be tricked into accessing users’ Gmail accounts and triggering password recovery flows through malicious instructions hidden in Reddit posts. When users asked Comet to summarize a Reddit thread, attackers could embed invisible commands that instructed the AI to open Gmail in another tab, extract the user’s email address, and perform unauthorized actions. Although Perplexity attempted to fix the vulnerability, Brave later confirmed that its mitigations were defeated and the security hole remained.

For now, Anthropic plans to use its new research preview to identify and address attack patterns that emerge in real-world usage before making the Chrome extension more widely available. In the absence of good protections from AI vendors, the burden of security falls on the user, who is taking a large risk by using these tools on the open web. As Willison noted in his post about Claude for Chrome, “I don’t think it’s reasonable to expect end users to make good decisions about the security risks.”

Anthropic’s auto-clicking AI Chrome extension raises browser-hijacking concerns Read More »

2025-vw-jetta-gli:-save-the-manuals,-but-not-like-this

2025 VW Jetta GLI: Save the manuals, but not like this


the American sedan take on a GTI

Specs mean nothing if you get the feel and execution wrong.

A white VW Jetta

Built in Mexico, the Volkswagen Jetta is a North American sedan take on the Golf hatchback. Credit: Jim Resnick

Built in Mexico, the Volkswagen Jetta is a North American sedan take on the Golf hatchback. Credit: Jim Resnick

Manual transmissions have gone the way of the dodo, but you can still find a few out there. Bless Volkswagen for keeping the helical gears turning, both literally and figuratively. The 2025 Jetta GLI, Volkswagen’s sporty sedan, still offers a gear lever with actual gears attached at the other end, and a third pedal hanging down from under the dash. Meanwhile, Golf GTI fans are still sobbing in their beer because 2024 was the last model year you could row your own in the hot hatch—now it’s paddles only.

Volkswagen updated the 2025 Jetta GLI with a new grille, LED headlights, and light bars that connect across both the front grille and rear taillights. There’s a red accent stripe that runs across the lower front fascia and turns up at the front corners, somewhat like The Joker’s lipstick, but way less menacing. It’s less distinctive than the Golf GTI, though, and the design even reminds me of the 2017-era Honda Accord a bit. So, yes, in a face-off, the Golf GTI wins.

The test GLI’s wheels get black paint with the Black Package (blackened wheels and side mirror caps). The Monument Gray color option pairs with a black roof, which must seem like a good idea to people who don’t live in the Southwest, where cars overheat before they’re even started.

A black Jetta wheel

Our test car had the black package. Credit: Jim Resnick

Performance: Punch without poetry

VW’s long-running EA888 2.0 L engine, which debuted back in 2007 in the Audi A3, resides under the hood. Now in its fourth turbocharged generation, it develops a healthy 228 hp (170 kW) and 258 lb-ft (350 Nm) of torque, entirely respectable numbers from modest displacement and compact external dimensions.

Mated to this particular 6-speed manual, the engine has its work cut out for itself. On my very first drive, before examining the technical data on gearbox ratios, I could tell that the manual 6-speed had massive gaps between first, second, and third gears.

Diving further into the gearing matter, the ratio spread between first and third gears is vastly wider in the 6-speed manual transmission than in the 7-speed DSG semi-automatic gearbox. This means that as you upshift the manual, the engine is faced with a huge drop in engine revs when you let out the clutch, placing the engine well below the rev range it would prefer to operate within to provide maximum power.

VW Jetta engine bay

EA888 in the house. Credit: Jim Resnick

Let’s look at the ratios, and remember that a lower numerical value means a “taller” or “higher” ratio, just like on multi-speed bicycles. The manual’s first gear is 3.77:1, where the DSG’s is 3.40:1. Upshift to the 2.09:1 second gear in the manual, and you select a gear that’s a whopping 55 percent taller than first gear. Conversely, the same 1-2 shift in the DSG (from 3.40:1 up to 2.75:1) results in a 19 percent taller gear ratio—a far narrower gap.

Third gear tells a similar story. The 6-speed manual’s third ratio (1.47:1) is 17 percent higher than the 1.77:1 ratio in the DSG (again, this “taller” gear giving 17 percent less mechanical advantage). Advantage: automatic.

Closer ratios mean better, faster engine torque recovery and better continued acceleration, because the engine will be spinning in the happier part of its power band—engines being happiest when revving at their torque peak and beyond.

Now, you might well argue that the manual’s third gear gives a higher top speed in-gear than the DSG automatic’s. And that’s 100 percent true. But it’s also irrelevant when you have three (or four!) more gears left to go in the transmission.

And then there’s the action of the shifter itself, with very long throws from forward to aft gates.

A white VW Jetta in profile

It’s quite handsome from some angles. Credit: Jim Resnick

But wait. I began this diatribe by complimenting the Jetta GLI for still offering a choice of manual or automatic gearbox. Indeed, if the manual gearbox had the DSG automatic’s ratios, the paragraphs above would have a very different tenor. The lesson here is that not all manuals are created equal.

We can also look objectively at the stopwatch. Using others’ published figures (don’t take our word for it), 0–60 mph figures tell the tale, as well. Car and Driver cites a time of 6.0 seconds to 60 mph for the manual GLI, where they achieved 5.6 seconds for the dash in the DSG automatic, a big gap.

Regardless of which transmission is used, a limited-slip differential tries to put the power down evenly, and adaptive suspension with multiple driving modes serves up a responsive connectedness to, or relative isolation from, the road surface. Compared to the standard GTI (not the Golf R), the Jetta GLI still rides with a greater accent on ride comfort, and that’s not always a bad thing, especially given the Jetta’s greater rear seat accommodations, which offer 2.4 inches (61 mm) more rear legroom than the GTI. Real adults can live back there for hours at a time without fidgeting, whereas you likely tickle that threshold in a GTI after a little over an hour.

Interior & tech

Inside, the GLI features perforated leather heated and cooled seats, a leather-wrapped and flat-bottom steering wheel that is still saddled with capacitive multifunction controls, a digital instrument cluster that can be configured with traditional dials or a compartmentalized digital-looking display, plus an 8-inch infotainment screen. While the latter may seem small compared to other cars that sport TV-size tablets perched on the dash, it at least comes fully equipped with Apple CarPlay and Android Auto. There’s a slow creep elsewhere in the industry to make this functionality either optional or simply unavailable, which is unforgivable in an era where we can hardly survive without our smartphones.

While much of the controls sit within the infotainment touchscreen, major climate controls reside just below, using capacitive sliders. These sliders are not anywhere near as intuitive as switches and knobs, but at least you don’t need to hunt and peck through endless menus to find them while driving.

The Jetta isn’t as modern as the 8th-generation Golf inside, but it’s had a bit of a tech upgrade. Jim Resnick

The GLI comes standard with active driver assists, including blind-spot warning, forward collision warning, emergency braking, adaptive cruise control, lane-keeping assist, and emergency assist.

Volkswagen managed to incorporate some pragmatic features and comforts. A 15 W wireless and cooled charging pad sits up front, and the trunk sports 14.1 cubic feet (400 L) of space with an actual spare tire under the trunk floor (although it’s a compact spare with limited mileage range).

The premium Beats Audio system in the Jetta GLI pumps 400 W through nine speakers, including a subwoofer. With all those speakers and electrons going for it, I expected way more than it delivered. It creates muddy bass frequencies that are simply inescapable, either by attenuating the bass or by lowering subwoofer gain.

Despite the preponderance of directionless bass, the system produces very little body to the music played, whether it’s jazz from Bill Evans or punk from Bad Religion. Midrange and high-end reproduction is no better. Shrill treble joins the errant bass, making everything sound muddy and indistinct. Delicate acoustic piano passages have little clarity, and Joni Mitchell hides behind a giant curtain of Saran Wrap. Poor Joni.

Driving the GLI is sometimes joyful, as the engine responds eagerly across all RPMs. The chassis and suspension prove willing, though a bit soft for a sports sedan. VW’s steering feels communicative, but not among the best of the modern electrically boosted lot.

VW equips this GLI with all-season Hankook Energy GT tires, sized 225/40R18. I specifically cite these tires because they underperform for the GLI. They don’t produce grip adequate for a sporty sedan, and they come up short underpinning the GLI. So, on a scale of 1 to 10, if the GLI’s engine is a 9, if the gearbox is a 5, and the interior is an 8.5, the GLI’s Hankook tires are a 6.

The GLI’s brakes are a version of the tire story. Despite borrowing front rotors and calipers from the lovely Golf R, they proved grabby, overboosted, and touchy in the GLI. Like the gearbox and tires, specs can tell you nothing in terms of feel and execution.

The GLI’s fuel economy lands at a decent 26/36/30 city/highway/combined mpg (9/6.5/7.8 L/100 km). In thoroughly mixed driving, I achieved an average of 29.1 mpg (8 L/100 km) over my approximately 400 miles (644 km).

The overall truth

The 2025 Jetta GLI certainly possesses sporty aspirations, but a few things hold it back from being the complete package that its Golf GTI stablemate is. Although the Golf GTI no longer offers a manual, the GLI’s 6-speed transmission disappoints both in feel and performance, with huge gaps between cogs. Of course, this malady could be overcome by ordering a DSG automatic GLI, but then any fun gleaned by rowing your gears is also lost.

This car could be better than it is. Credit: Jim Resnick

Closer to the road, mediocre tires generate modest grip. Compared to the Golf, the Jetta gains in rear seat legroom but loses in feel, performance, and tenacity. If it’s performance with practicality you’re after, the $35,045 price of this GLI as tested will get you what you need. But you’ll want something a bit spicier.

Photo of Jim Resnick

A veteran of journalism, product planning and communications in the automotive and music space, Jim reports, critiques and lectures on autos, music and culture.

2025 VW Jetta GLI: Save the manuals, but not like this Read More »

horrifying-screwworm-infection-confirmed-in-us-traveler-after-overseas-trip

Horrifying screwworm infection confirmed in US traveler after overseas trip

Flesh-eating screwworm larvae poised to invade the US have snuck into Maryland via the flesh of a person who had recently traveled to El Salvador, upping anxiety about the ghastly—and economically costly—parasite.

Reuters was first to report the case early Monday, quoting Andrew Nixon, spokesperson for the US Department of Health and Human Services, who said in an email that the Centers for Disease Control and Prevention had confirmed the case on August 4 in a person who had returned from a trip to El Salvador.

While other outlets have since reported that the screwworm case found in Maryland is the first human case in the US, or first travel-related case in the US, or the first case in years—none of those things are true. Screwworms are endemic in parts of South America and the Caribbean and travel-related cases have always been a threat and occasionally pop up in the US. While the CDC doesn’t keep a public tally of the cases, experts at the agency have noted several travel-related human cases in the US in recent years, including one as recent as last year.

The new case in Maryland doesn’t change anything in the US. “The risk to public health in the United States from this introduction is very low,” Nixon wrote to Reuters. But, what has changed is that the risk of an incursion at the US-Mexico border is no longer low—in fact it’s rather high currently.

Savage parasites

Screwworms were once endemic to the US before a massive eradication effort that began in the 1950s drove the population out of the US and Central America. The flies were held at bay with a biological barrier of constant releases of sterile male flies along the Darién Gap at the border of Panama and Colombia. The flies were declared eradicated from Panama in 2006. But, in 2022, the barrier was breached and the flies have worked their way back up through Central America, including El Salvador, since then. Now they are merely 370 miles or less from the Texas border, and state and federal agencies are preparing for an invasion, including with plans to build a sterile fly facility in the state.

Horrifying screwworm infection confirmed in US traveler after overseas trip Read More »

is-the-ai-bubble-about-to-pop?-sam-altman-is-prepared-either-way.

Is the AI bubble about to pop? Sam Altman is prepared either way.

Still, the coincidence between Altman’s statement and the MIT report reportedly spooked tech stock investors earlier in the week, who have already been watching AI valuations climb to extraordinary heights. Palantir trades at 280 times forward earnings. During the dot-com peak, ratios of 30 to 40 times earnings marked bubble territory.

The apparent contradiction in Altman’s overall message is notable. This isn’t how you’d expect a tech executive to talk when they believe their industry faces imminent collapse. While warning about a bubble, he’s simultaneously seeking a valuation that would make OpenAI worth more than Walmart or ExxonMobil—companies with actual profits. OpenAI hit $1 billion in monthly revenue in July but is reportedly heading toward a $5 billion annual loss. So what’s going on here?

Looking at Altman’s statements over time reveals a potential multi-level strategy. He likes to talk big. In February 2024, he reportedly sought an audacious $5 trillion–7 trillion for AI chip fabrication—larger than the entire semiconductor industry—effectively normalizing astronomical numbers in AI discussions.

By August 2025, while warning of a bubble where someone will lose a “phenomenal amount of money,” he casually mentioned that OpenAI would “spend trillions on datacenter construction” and serve “billions daily.” This creates urgency while potentially insulating OpenAI from criticism—acknowledging the bubble exists while positioning his company’s infrastructure spending as different and necessary. When economists raised concerns, Altman dismissed them by saying, “Let us do our thing,” framing trillion-dollar investments as inevitable for human progress while making OpenAI’s $500 billion valuation seem almost small by comparison.

This dual messaging—catastrophic warnings paired with trillion-dollar ambitions—might seem contradictory, but it makes more sense when you consider the unique structure of today’s AI market, which is absolutely flush with cash.

A different kind of bubble

The current AI investment cycle differs from previous technology bubbles. Unlike dot-com era startups that burned through venture capital with no path to profitability, the largest AI investors—Microsoft, Google, Meta, and Amazon—generate hundreds of billions of dollars in annual profits from their core businesses.

Is the AI bubble about to pop? Sam Altman is prepared either way. Read More »

bank-forced-to-rehire-workers-after-lying-about-chatbot-productivity,-union-says

Bank forced to rehire workers after lying about chatbot productivity, union says

As banks around the world prepare to replace many thousands of workers with AI, Australia’s biggest bank is scrambling to rehire 45 workers after allegedly lying about chatbots besting staff by handling higher call volumes.

In a statement Thursday flagged by Bloomberg, Australia’s main financial services union, the Finance Sector Union (FSU), claimed a “massive win” for 45 union members whom the Commonwealth Bank of Australia (CBA) had replaced with an AI-powered “voice bot.”

The FSU noted that some of these workers had been with CBA for decades. Those workers in particular were shocked when CBA announced last month that their jobs had become redundant. At that time, CBA claimed that launching the chatbot supposedly “led to a reduction in call volumes” by 2,000 a week, FSU said.

But “this was an outright lie,” fired workers told FSU. Instead, call volumes had been increasing at the time they were dismissed, with CBA supposedly “scrambling”—offering staff overtime and redirecting management to join workers answering phones to keep up.

To uncover the truth, FSU escalated the dispute to a fair work tribunal, where the union accused CBA of failing to explain how workers’ roles were ruled redundant. The union also alleged that CBA was hiring for similar roles in India, Bloomberg noted, which made it appear that CBA had perhaps used the chatbot to cover up a shady pivot to outsource jobs.

While the dispute was being weighed, CBA admitted that “they didn’t properly consider that an increase in calls” happening while staff was being fired “would continue over a number of months,” FSU said.

“This error meant the roles were not redundant,” CBA confirmed at the tribunal.

Bank forced to rehire workers after lying about chatbot productivity, union says Read More »

humans-intervened-every-9-minutes-in-aaa-test-of-driver-assists

Humans intervened every 9 minutes in AAA test of driver assists

As most people who have used adaptive cruise control in traffic can no doubt appreciate, the most common event that required intervention was a car ahead cutting into the driver’s lane. These occurred about once every 8.6 miles, or 24.4 minutes, with 90 percent requiring intervention by the driver.

Inadequate lane centering was the next most common event, occurring once every 11.3 miles or 32.2 minutes. Seventy-two percent of those events also required intervention. Not resuming after coming to a halt happened 71 times, each of which required the driver to act. On 57 occasions, the lane keeping or adaptive cruise control deactivated, and there were 43 instances of a test car failing to adequately slow down, of which 70 percent required the driver to hit the brakes.

Hands-on versus hands-off

AAA found that the less-advanced systems that required a driver to keep their hands on the steering wheel experienced notable events at three times the frequency of hands-free systems. Hands-off systems only required intervention every 7.2 miles or 20.1 minutes, whereas the less advanced systems required intervention on average every 2.3 miles or 6.7 minutes. AAA also noted that the hands-off systems told the driver to put their hands back on the wheel every 5.5 miles (or 15.3 minutes) on average.

AAA has some recommendations based on its findings, which could also be categorized under common sense. When you’re behind the wheel of a vehicle, you should always remain alert, and AAA cautions that ADAS is “never a substitute for an engaged driver.” Don’t be distracted, especially by your smartphone. Read the car’s user manual and understand how, when, and where its systems can be expected to work. And set an appropriate following distance to the car ahead, even if it means more cut-ins.

The organization says it will encourage automakers to improve ADAS performance, especially cut-in response and lane-centering.

Humans intervened every 9 minutes in AAA test of driver assists Read More »

microsoft-and-asus’-answers-to-steamos-and-the-steam-deck-launch-on-october-16

Microsoft and Asus’ answers to SteamOS and the Steam Deck launch on October 16

Asus and Microsoft will be launching their ROG Xbox Ally series of handheld gaming PCs starting October 16, according to an Asus announcement that went out today.

An Xbox-branded extension of Asus’ existing ROG Ally handheld line, the basic ROG Xbox Ally and more powerful ROG Xbox Ally X, both run a version of Windows 11 Home that’s been redesigned with a controller-first Xbox-style user interface. The idea is to preserve the wide game compatibility of Windows—and the wide compatibility with multiple storefronts, including Microsoft’s own, Valve’s Steam, the Epic Games Store, and more—while turning off all of the extra Windows desktop stuff and saving system resources. (This also means that, despite the Xbox branding, these handhelds play Windows PC games and not the Xbox versions.)

Microsoft and Asus initially announced the handhelds in June. Microsoft still isn’t sharing pricing information for either console, so it’s hard to say how their specs and features will stack up against the Steam Deck (starting at $399 for the LCD version, $549 for OLED), Nintendo’s Switch 2 ($450), or past Asus handhelds like the ROG Ally X ($800).

Both consoles share a 7-inch, 1080p IPS display with a 120 Hz refresh rate, Wi-Fi 6E, and Bluetooth 5.4 support, but their internals are quite a bit different. The lower-end Xbox Ally uses an AMD Ryzen Z2 A chip with a 4-core Zen 2-based CPU, an eight-core RDNA2-based GPU, 512GB of storage, and 16GB of LPDDR5X-6400—specs nearly identical to Valve’s 3-year-old Steam Deck. The Xbox Ally X includes a more interesting Ryzen AI Z2 Extreme with an 8-core Zen 5 CPU, a 16-core RDNA3.5 GPU, 1TB of storage, 24GB of LPDDR5X-8000, and a built-in neural processing unit (NPU).

The beefier hardware comes with a bigger battery—80 WHr in the Ally X, compared to 60 WHr in the regular Ally—and that also makes the Ally X around a tenth of a pound (or 45 grams) heavier than the Ally.

Microsoft and Asus’ answers to SteamOS and the Steam Deck launch on October 16 Read More »

top-pediatricians-buck-rfk-jr.’s-anti-vaccine-meddling-on-covid-shot-guidance

Top pediatricians buck RFK Jr.’s anti-vaccine meddling on COVID shot guidance

“It’s clear that we’re in a different place in the pandemic than we were four or five years ago in terms of risks to healthy older kids,” Sean O’Leary, chair of the AAP Committee on Infectious Diseases (COID), said in a statement. However, “the risk of hospitalization for young children and those with high-risk conditions remains pretty high.”

According to CDC data, the rate of COVID-19 hospitalization in children under 2 is the highest among any pediatric group. Further, the rate of hospitalization among children 6 months to 23 months is comparable to that of adults ages 50 to 64. Critically, more than half of children ages 6 months to 23 months who are hospitalized for COVID-19 have no underlying medical condition that puts them at high risk for severe infection.

For children 2 to 18, the AAP recommends COVID-19 shots for children who have a medical condition that puts them at high risk, are residents of care facilities, have never been vaccinated, or have household contacts who are at high risk of severe COVID-19. All other children and teens should also have access to updated seasonal shots if they desire them, the AAP says.

“The AAP will continue to provide recommendations for immunizations that are rooted in science and are in the best interest of the health of infants, children, and adolescents,” Kressly said. “Pediatricians know how important routine childhood immunizations are in keeping children, families, and their communities healthy and thriving.”

Coverage questions

With school starting, COVID-19 cases ticking up around the country, and cold-weather respiratory virus season looming, the question now is how the conflicting recommendations will be interpreted by insurance companies. Insurers are required to cover vaccines recommended by the CDC. But there is no such obligation for recommendations from medical groups.

AAP has been holding meetings with insurers to press for continued coverage of evidence-based vaccine recommendations.

O’Leary told The Washington Post that insurers are “signaling that they are committed to covering our recommendations.” The Post also noted that AHIP, the major insurance lobby, released a statement in June saying its members are committed to “ongoing coverage of vaccines to ensure access and affordability for this respiratory virus season.”

Top pediatricians buck RFK Jr.’s anti-vaccine meddling on COVID shot guidance Read More »

an-extinct-volcano-in-arkansas-hosts-the-only-public-diamond-mine-on-earth

An extinct volcano in Arkansas hosts the only public diamond mine on Earth

The park provides two covered pavilions with water troughs and tables for wet sifting, plus open sluice boxes with hand-operated water pumps at both ends of the field. Four shaded structures are available in the search area; however, visitors are also welcome to bring their own canopies or tents, provided they are well-secured.

The diamonds formed under extreme pressure and heat deep in the Earth’s mantle. If you find one, it will most likely look like a metallic or glassy pebble rather than a sparkly cut gem that you might picture in your mind. The volcanic soil also contains amethyst, garnet, jasper, agate, and various types of quartz (and you can keep those, too).

The largest diamond found in the United States came from this field—the 40.23-carat Uncle Sam diamond, discovered in 1924 before the land became a state park. In September 2021, California visitor Noreen Wredberg found a 4.38-carat yellow diamond after searching for two hours, and in 2024, a visitor named Julien Navas found a 7.46-carat diamond at the park.

The park received over 180,000 visitors in 2017, who found 450 certified diamonds of various colors. Of the reported diamond finds, 299 were white, 72 were brown, and 74 were yellow.

Park staff told Mays that visitors find one or two diamonds daily, so “keep your expectations in check,” she writes. Most diamonds discovered are about the size of a paper match head, while a one-carat diamond is roughly the size of a green pea. But even tiny diamonds carry the thrill of discovery. Park staff provide free identification services, examining finds under loupes and confirming whether that glassy pebble is quartz or something more valuable.

A family experience

For those wanting to join the thousands who visit each year, the park makes it affordable. Admission costs $15 for adults, $7 for children ages 6–12. You can camp overnight at the park and return to the field at dawn. During summer months, the park operates a small water park—an acknowledgment that diamond hunting in Arkansas can be brutal, with a heat index exceeding 110° Fahrenheit.

Sometimes rain turns the field into mud, which experienced searchers prefer because it makes diamonds easier to spot—but it can make for a messy adventure. As Mays put it, “Most visitors leave with a handful of interesting rocks, some newfound knowledge, and an urgent need for a long shower.”

If you don’t find any diamonds at the park, don’t despair—you could still potentially buy a $200,000 diamond-making machine on Alibaba.

An extinct volcano in Arkansas hosts the only public diamond mine on Earth Read More »

t-mobile-claimed-selling-location-data-without-consent-is-legal—judges-disagree

T-Mobile claimed selling location data without consent is legal—judges disagree


T-Mobile can’t overturn $92 million fine; AT&T and Verizon verdicts still to come.

Credit: Aurich Lawson | Getty Images

A federal appeals court rejected T-Mobile’s attempt to overturn $92 million in fines for selling customer location information to third-party firms.

The Federal Communications Commission last year fined T-Mobile, AT&T, and Verizon, saying the carriers illegally shared access to customers’ location information without consent and did not take reasonable measures to protect that sensitive data against unauthorized disclosure. The fines relate to sharing of real-time location data that was revealed in 2018, but it took years for the FCC to finalize the penalties.

The three carriers appealed the rulings in three different courts, and the first major decision was handed down Friday. A three-judge panel at the US Court of Appeals for the District of Columbia Circuit ruled unanimously against T-Mobile and its subsidiary Sprint.

“Every cell phone is a tracking device,” the ruling begins. “To receive service, a cell phone must periodically connect with the nearest tower in a wireless carrier’s network. Each time it does, it sends the carrier a record of the phone’s location and, by extension, the location of the customer who owns it. Over time, this information becomes an exhaustive history of a customer’s whereabouts and ‘provides an intimate window into [that] person’s life.'”

Until 2019, T-Mobile and Sprint sold customer location information (CLI) to location information aggregators LocationSmart and Zumigo. The carriers did not verify whether buyers obtained customer consent, the ruling said. “Several bad actors abused Sprint and T-Mobile’s programs to illicitly access CLI without the customers’ knowledge, let alone consent. And even after Sprint and T-Mobile became aware of those abuses, they continued to sell CLI for some time without adopting new safeguards,” judges wrote.

Carriers claimed selling data didn’t violate law

Instead of denying the allegations, the carriers argued that the FCC overstepped its authority. But the appeals court panel decided that the FCC acted properly:

Sprint and T-Mobile (collectively, “the Carriers”) now petition for our review. Neither denies what happened. Instead, they argue that the undisputed facts do not amount to a violation of the law. The Carriers also argue that the Commission misinterpreted the Communications Act, miscalculated the penalties, and violated the Seventh Amendment by not affording them a jury trial. Because the Carriers’ arguments lack merit, we deny the petitions for review.

The FCC fines included $80.1 million for T-Mobile and $12.2 million for Sprint. T-Mobile, which bought Sprint in 2020, reported service revenue of $17.4 billion and net income of $3.2 billion in the most recent quarter.

Although the FCC first proposed the fines in 2020, under Republican Chairman Ajit Pai, the 2024 vote to finalize the penalties was 3-2, with dissents from Republicans Brendan Carr and Nathan Simington. Carr is now chairman of the FCC.

T-Mobile told Ars today that it is “currently reviewing the court’s action” but did not provide further comment. The carrier could seek an en banc review in front of all the appeals court’s justices, or ask the Supreme Court to review the case. Meanwhile, AT&T is challenging its fine in the 5th Circuit appeals court while Verizon is challenging in the 2nd Circuit.

AT&T and Verizon were fined $57.3 million and $46.9 million, respectively. The FCC last year said the major carriers disclosed customer location information “without customer consent or other legal authorization to a Missouri Sheriff through a ‘location-finding service’ operated by Securus, a provider of communications services to correctional facilities, to track the location of numerous individuals.”

Carriers gave up right to jury trial, court rules

AT&T and Verizon made similar arguments about their right to a jury trial and cited the Supreme Court’s June 2024 ruling in Securities and Exchange Commission v. Jarkesy. That ruling held that “when the SEC seeks civil penalties against a defendant for securities fraud, the Seventh Amendment entitles the defendant to a jury trial.”

In the ruling against T-Mobile, the DC Circuit panel held that the carriers gave up any potential right to a jury trial when they “chose to pay their fines and to seek direct review in this court… The Carriers may not now complain that they were denied a right they voluntarily surrendered.”

The carriers could have obtained a jury trial if they simply failed to pay the fines and waited to be served with a complaint, the ruling said. “Even if the Seventh Amendment applies, it was not violated because the Carriers had the opportunity to put their case before a jury,” judges wrote.

The carriers argued that they didn’t really have a right to a jury trial because the FCC orders “are final agency actions with real-world effects; indeed, the FCC acknowledges that it may use its untested factual findings in license-renewal decisions and penalty calculations.”

The carriers argued that in some jurisdictions where the government could bring a collection action, “the Companies would not have the right to raise factual and legal challenges to the Orders. The possibility of a government-initiated collection action therefore does not satisfy the Seventh Amendment and Article III.”

The appeals court panel responded that “this court has not adopted the rule that troubles” the carriers. If “the government brought an enforcement action in a jurisdiction with the unfavorable rule, the Carriers could have raised as-applied challenges in those proceedings. But we cannot ‘invalidate legislation on the basis of… hypothetical… situations not before’ us,” judges wrote.

Carriers quibbled over definition of sensitive data

The carriers also argued that the device-location information, which is “passively generated when a mobile device pings cell towers to support both voice and data services,” does not qualify as Customer Proprietary Network Information (CPNI) under the law. The carriers said the law “covers information relating to the ‘location… of use’ of a telecommunications service,” and claimed that only call location information fits that description.

Judges faulted T-Mobile and Sprint for relying on “strained interpretations” of the statute. “We begin with the text. The Communications Act refers to the ‘location… of a telecommunications service, not the location of a voice call… Recall that cell phones connect periodically to cell towers, and that is what enables the devices to send and receive calls at any moment,” the ruling said.

In the judges’ view, “a customer ‘uses’ a telecommunications service whenever his or her device connects to the carrier’s network for the purpose of being able to send and receive calls. And the Carriers’ reading therefore does not narrow ‘location… of use’ to times when the customer is actively on a voice call.”

Judges also weren’t persuaded by the argument that the fines were too large. “The Carriers note that the Commission previously had imposed such large fines only in cases involving fraud or intentional efforts to mislead consumers, and they are guilty of neither form of misconduct,” the ruling said. “The Commission reasonably explained, however, that the Carriers’ conduct was ‘egregious’: Even after the Securus breach exposed Sprint and T-Mobile’s safeguards as inadequate, both carriers continued to sell access to CLI under a broken system.”

Photo of Jon Brodkin

Jon is a Senior IT Reporter for Ars Technica. He covers the telecom industry, Federal Communications Commission rulemakings, broadband consumer affairs, court cases, and government regulation of the tech industry.

T-Mobile claimed selling location data without consent is legal—judges disagree Read More »

elon-musk’s-“thermonuclear”-media-matters-lawsuit-may-be-fizzling-out

Elon Musk’s “thermonuclear” Media Matters lawsuit may be fizzling out


Judge blocks FTC’s Media Matters probe as a likely First Amendment violation.

Media Matters for America (MMFA)—a nonprofit that Elon Musk accused of sparking a supposedly illegal ad boycott on X—won its bid to block a sweeping Federal Trade Commission (FTC) probe that appeared to have rushed to silence Musk’s foe without ever adequately explaining why the government needed to get involved.

In her opinion granting MMFA’s preliminary injunction, US District Judge Sparkle L. Sooknanan—a Joe Biden appointee—agreed that the FTC’s probe was likely to be ruled as a retaliatory violation of the First Amendment.

Warning that the FTC’s targeting of reporters was particularly concerning, Sooknanan wrote that the “case presents a straightforward First Amendment violation,” where it’s reasonable to conclude that conservative FTC staffers were perhaps motivated to eliminate a media organization dedicated to correcting conservative misinformation online.

“It should alarm all Americans when the Government retaliates against individuals or organizations for engaging in constitutionally protected public debate,” Sooknanan wrote. “And that alarm should ring even louder when the Government retaliates against those engaged in newsgathering and reporting.”

FTC staff social posts may be evidence of retaliation

In 2023, Musk vowed to file a “thermonuclear” lawsuit because advertisers abandoned X after MMFA published a report showing that major brands’ ads had appeared next to pro-Nazi posts on X. Musk then tried to sue MMFA “all over the world,” Sooknanan wrote, while “seemingly at the behest of Steven Miller, the current White House Deputy Chief of Staff, the Missouri and Texas Attorneys General” joined Musk’s fight, starting their own probes.

But Musk’s “thermonuclear” attack—attempting to fight MMFA on as many fronts as possible—has appeared to be fizzling out. A federal district court preliminarily enjoined the “aggressive” global litigation strategy, and the same court issued the recent FTC ruling that also preliminarily enjoined the AG probes “as likely being retaliatory in violation of the First Amendment.”

The FTC under the Trump administration appeared to be the next line of offense, supporting Musk’s attack on MMFA. And Sooknanan said that FTC Chair Andrew Ferguson’s own comments in interviews, which characterized Media Matters and the FTC’s probe “in ideological terms,” seem to indicate “at a minimum that Chairman Ferguson saw the FTC’s investigation as having a partisan bent.”

A huge part of the problem for the FTC was social media comments posted before some senior FTC staffers were appointed by Ferguson. Those posts appeared to show the FTC growing increasingly partisan, perhaps pointedly hiring staffers who they knew would help take down groups like MMFA.

As examples, Sooknanan pointed to Joe Simonson, the FTC’s director of public affairs, who had posted that MMFA “employed a number of stupid and resentful Democrats who went to like American University and didn’t have the emotional stability to work as an assistant press aide for a House member.” And Jon Schwepp, Ferguson’s senior policy advisor, had claimed that Media Matters—which he branded as the “scum of the earth”—”wants to weaponize powerful institutions to censor conservatives.” And finally, Jake Denton, the FTC’s chief technology officer, had alleged that MMFA is “an organization devoted to pressuring companies into silencing conservative voices.”

Further, the timing of the FTC investigation—arriving “on the heels of other failed attempts to seek retribution”—seemed to suggest it was “motivated by retaliatory animus,” the judge said. The FTC’s “fast-moving” investigation suggests that Ferguson “was chomping at the bit to ‘take investigative steps in the new administration under President Trump’ to make ‘progressives’ like Media Matters ‘give up,'” Sooknanan wrote.

Musk’s fight continues in Texas, for now

Possibly most damning to the FTC case, Sooknanan suggested the FTC has never adequately explained the reason why it’s probing Media Matters. In the “Subject of Investigation” field, the FTC wrote only “see attached,” but the attachment was just a list of specific demands and directions to comply with those demands.

Eventually, the FTC offered “something resembling an explanation,” Sooknanan said. But their “ultimate explanation”—that Media Matters may have information related to a supposedly illegal coordinated campaign to game ad pricing, starve revenue, and censor conservative platforms—”does not inspire confidence that they acted in good faith,” Sooknanan said. The judge considered it problematic that the FTC never explained why it has reason to believe MMFA has the information it’s seeking. Or why its demand list went “well beyond the investigation’s purported scope,” including “a reporter’s resource materials,” financial records, and all documents submitted so far in Musk’s X lawsuit.

“It stands to reason,” Sooknanan wrote, that the FTC launched its probe “because it wanted to continue the years’ long pressure campaign against Media Matters by Mr. Musk and his political allies.”

In its defense, the FTC argued that all civil investigative demands are initially broad, insisting that MMFA would have had the opportunity to narrow the demands if things had proceeded without the lawsuit. But Sooknanan declined to “consider a hypothetical narrowed” demand list instead of “the actual demand issued to Media Matters,” while noting that the court was “troubled” by the FTC’s suggestion that “the federal Government routinely issues civil investigative demands it knows to be overbroad with the goal of later narrowing those demands presumably in exchange for compliance.”

“Perhaps the Defendants will establish otherwise later in these proceedings,” Sooknanan wrote. “But at this stage, the record certainly supports that inference,” that the FTC was politically motivated to back Musk’s fight.

As the FTC mulls a potential appeal, the only other major front of Musk’s fight with MMFA is the lawsuit that X Corp. filed in Texas. Musk allegedly expects more favorable treatment in the Texas court, and MMFA is currently pushing to transfer the case to California after previously arguing that Musk was venue shopping by filing the lawsuit in Texas, claiming that it should be “fatal” to his case.

Musk has so far kept the case in Texas, but risking a venue change could be enough to ultimately doom his “thermonuclear” attack on MMFA. To prevent that, X is arguing that it’s “hard to imagine” how changing the venue and starting over with a new judge two years into such complex litigation would best serve the “interests of justice.”

Media Matters, however, has “easily met” requirements to show that substantial damage has already been done—not just because MMFA has struggled financially and stopped reporting on X and the FTC—but because any loss of First Amendment freedoms “unquestionably constitutes irreparable injury.”

The FTC tried to claim that any reputational harm, financial harm, and self-censorship are “self-inflicted” wounds for MMFA. But the FTC did “not respond to the argument that the First Amendment injury itself is irreparable, thereby conceding it,” Sooknanan wrote. That likely weakens the FTC’s case in an appeal.

MMFA declined Ars’ request to comment. But despite the lawsuits reportedly plunging MMFA into a financial crisis, its president, Angelo Carusone, told The New York Times that “the court’s ruling demonstrates the importance of fighting over folding, which far too many are doing when confronted with intimidation from the Trump administration.”

“We will continue to stand up and fight for the First Amendment rights that protect every American,” Carusone said.

Photo of Ashley Belanger

Ashley is a senior policy reporter for Ars Technica, dedicated to tracking social impacts of emerging policies and new technologies. She is a Chicago-based journalist with 20 years of experience.

Elon Musk’s “thermonuclear” Media Matters lawsuit may be fizzling out Read More »

after-recent-tests,-china-appears-likely-to-beat-the-united-states-back-to-the-moon

After recent tests, China appears likely to beat the United States back to the Moon


An expert explains why this will be enormously bad for the United States.

China’s Long March-10 rocket conducts its first static fire test at the Wenchang Spacecraft Launch Site on August 15, 2025. Credit: VCG via Getty Images

China’s Long March-10 rocket conducts its first static fire test at the Wenchang Spacecraft Launch Site on August 15, 2025. Credit: VCG via Getty Images

In recent weeks, the secretive Chinese space program has reported some significant milestones in developing its program to land astronauts on the lunar surface by the year 2030.

On August 6, the China Manned Space Agency successfully tested a high-fidelity mockup of its 26-ton “Lanyue” lunar lander. The test, conducted outside of Beijing, used giant tethers to simulate lunar gravity as the vehicle fired main engines and fine control thrusters to land on a cratered surface and take off from there.

“The test,” said the agency in an official statement, “represents a key step in the development of China’s manned lunar exploration program, and also marks the first time that China has carried out a test of extraterrestrial landing and takeoff capabilities of a manned spacecraft.”

As part of the statement, the space agency reconfirmed that it plans to land its astronauts on the Moon “before” 2030.

Then, last Friday, the space agency and its state-operated rocket developer, the China Academy of Launch Vehicle Technology, successfully conducted a 30-second test firing of the Long March 10 rocket’s center core with its seven YF-100K engines that burn kerosene and liquid oxygen. The primary variant of the rocket will combine three of these cores to lift about 70 metric tons to low-Earth orbit.

These successful efforts followed a launch escape system test of the new Mengzhou spacecraft in June. A version of this spacecraft is planned for lunar missions.

On track for 2030

Thus, China’s space program is making demonstrable progress in all three of the major elements of its lunar program: the large rocket to launch a crew spacecraft, which will carry humans to lunar orbit, plus the lander that will take astronauts down to the surface and back. This work suggests that China is on course to land on the Moon before the end of this decade.

For the United States and its allies in space, there are reasons to be dismissive of this. For one, NASA landed humans on the Moon nearly six decades ago with the Apollo Program. Been there, done that.

Moreover, the initial phases of the Chinese program look derivative of Apollo, particularly a lander that strikingly resembles the Lunar Module. NASA can justifiably point to its Artemis Program and say it is attempting to learn the lessons of Apollo—that the program was canceled because it was not sustainable. With its lunar landers, NASA seeks to develop in-space propellant storage and refueling technology, allowing for lower cost, reusable lunar missions with the capability to bring much more mass to the Moon and back. This should eventually allow for the development of a lunar economy and enable a robust government-commercial enterprise.

China’s Lanyue lander undergoes tests in early August.

Credit: CCTV

China’s Lanyue lander undergoes tests in early August. Credit: CCTV

But recent setbacks with SpaceX’s Starship vehicle–one of two lunar landers under contract with NASA, alongside Blue Origin’s Mark 2 lander—indicate that it will still be several years until these newer technologies are ready to go. So it’s now probable that China will “beat” NASA back to the Moon this decade and win at least the initial heat of this new space race.

To put this into perspective, Ars connected with Dean Cheng, one of the most respected analysts on China, space policy, and the geopolitical implications of the new space competition. He was also a researcher at the Heritage Foundation for 13 years, where he focused on China. (He was not involved with Project 2025.) Now “sort of” retired, in his own words, Cheng is presently a non-resident fellow at the George Washington University Space Policy Institute.

The implications of this for the West

Ars: How significant was the Lanyue lander demonstration? Does this indicate the Chinese space program remains on track to land humans on the Moon by or before 2030?

Dean Cheng: The Lanyue lander is significant because it’s part of the usual Chinese “crawl-walk-run” approach to major space (and other scientific) projects. The [People’s Republic of China] can benefit from other people’s experiences (much of NASA’s information is open), but they still have to build and operate the spacecraft themselves. So the test of the Lanyue lander, successful or not, is an important part of that process.

Note that the Chinese also this week had a successful static test of the LM-10, which is their lunar SLV (satellite launch vehicle). This, along with the Lanyue, indicates that the Chinese lunar program is pushing ahead. The LM-10, even more than the Lanyue, is significant because it’s a new launch vehicle, in the wake of problems with the LM-5 and the cancellation of the LM-9 (which was probably their Saturn-V equivalent).

Ars: How likely is it that China lands humans on the Moon before NASA can return there with the Artemis Program?

Cheng: At the rate things are going, sadly, it seems quite likely that the Chinese will land on the Moon before NASA can return to the Moon.

Ars: What would the geopolitical impact be if China beats the United States back to the Moon?

Cheng: The geopolitical impact of the Chinese beating the US to the Moon (where we are returning) would be enormous.

Ars: How so?

Cheng: It means the end of American exceptionalism. One of the hallmarks of the post-1969 era was that only the United States had been able to land someone on the Moon (or any other celestial body). This was bound to end, but the constant American refrain of “We’ve put a man on the Moon, we can do anything” will certainly no longer resonate.

It means China can do “big” things, and the United States cannot. The US cannot even replicate projects it undertook 50 (or more) years ago. The optics of “the passing of the American age” would be evident—and that in turn would absolutely affect other nations’ perceptions of who is winning/losing the broader technological and ideological competition between the US and the PRC.

A few years back, there was talk of “The Beijing Consensus” as an alternative to the “Washington Consensus.” The Washington Consensus posited that the path forward was democracy, pluralism, and capitalism. The Beijing consensus argued that one only needed economic modernization. That, in fact, political authoritarianism was more likely to lead to modernization and advancement. This ideological element would be reinforced if Beijing can do the “big” things but the US cannot.

And what will be the language of cis-lunar space? The Chinese are not aiming to simply go to the Moon. Their choice of landing sites (most likely the South Pole) suggests an intent to establish longer-term facilities and presence. If China regularly dispatches lunar missions (not just this first one), then it will rightfully be able to argue that Chinese should be a language, if not the language, of lunar/cis-lunar space traffic management. As important, China will have an enormous say over technical standards, data standards, etc., for cis-lunar activities. The PRC has already said it will be deploying a lunar PNT (positioning, navigation, and timing) network and likely a communications system, (given the BeiDou’s dual capabilities in this regard).

Ars: Taking the longer view, is the United States or China better positioned (i.e., US spending on defense, reusable in-space architecture vs Chinese plans) to dominate cislunar space between now and the middle of this century?

Cheng: On paper, the US has most of the advantages. We have a larger economy, more experience in space, extant space industrial capacity for reusable space launch, etc. But we have not had programmatic stability so that we are consistently pursuing the same goal over time. During Trump-1, the US said it would go to the Moon with people by 2024. Here we are, halfway through 2025. Trump-2 seems to once again be swinging wildly from going (back) to the Moon to going to Mars. Scientific and engineering advances don’t do well in the face of such wild swings and inconstancy.

By contrast, the Chinese are stable, systematic. They pursue a given goal (e.g., human spaceflight, a space station) over decades, with persistence and programmatic (both budgetarily and in terms of goals) stability. So I expect that the Chinese will put a Chinese person on the Moon by 2030 and follow that with additional crewed and unmanned facilities. This will be supported by a built-out infrastructure of lunar PNT/comms. The US will almost certainly put people on the Moon in a landing in the next several years, but then what? Is Lunar Gateway going to be real? How often will the US go to the Moon, as the Chinese go over and over?

Ars: Do you have any advice for the Trump administration in order to better compete with China in this effort to not only land on the Moon but have a dominant presence there?

Cheng: The Trump administration needs to make a programmatic commitment to some goal, whether the Moon or Mars. It needs to mobilize Congress and the public to support that goal. It needs to fund that goal, but as important, it also needs to have a high-level commitment and oversight, such as the VP and the National Space Council in the first Trump administration. There is little/no obvious direction at the moment for where space is going in this administration, and what its priorities are.

This lack of direction then affects the likelihood that industry, whether big business or entrepreneurs, can support whatever efforts do emerge. If POTUS wants to rely more on entrepreneurial business (a reasonable approach), he nonetheless needs to provide indications of this. It would help to also provide incentives, e.g., a follow-on to the Ansari and X-prizes, which did lead to a blossoming of innovation.

Photo of Eric Berger

Eric Berger is the senior space editor at Ars Technica, covering everything from astronomy to private space to NASA policy, and author of two books: Liftoff, about the rise of SpaceX; and Reentry, on the development of the Falcon 9 rocket and Dragon. A certified meteorologist, Eric lives in Houston.

After recent tests, China appears likely to beat the United States back to the Moon Read More »