ShinyHunters Leaks Madison Square Garden Surveillance Records ⇥ 404media.co

Joseph Cox, 404 Media, last month:

ShinyHunters published the [Madison Square Garden] data on Tuesday. The full file download is nearly 45GB. A spokesperson of the group sent 404 Media a smaller sample of the data. One file includes what appear to be emails sent by customers to MSG and sometimes MSG’s response. One email is a man complaining about potentially being flagged by MSG’s facial recognition systems (MSG owner Jim Dolan has long spied on people inside his arenas, with MSG deploying various surveillance technologies, WIRED reported.)

Noah Shachtman and Maddy Varner, Wired:

The talent database also tracks some celebrities’ race, gender identity, and sexual orientation; 93 entries are marked as “LGBTQIA.” Why MSG felt the need to label Ricky Martin or Phoebe Bridgers or Geese’s Emily Green in this way is unclear.

“I’ve never met James Dolan. I don’t know the higher-up leadership at Madison Square Garden. But, like, there does seem to be a bit of a pattern here,” says Evan Greer, director of the digital rights group Fight for the Future, citing WIRED’s reporting on the Garden’s minute-by-minute surveillance of a trans woman. “They just seem overly interested in queer and trans people in their venue,” Greer adds.

I cannot imagine what it would be like to be the person who put this together, stepped back from their computer, and thought yes, this seems fine. How surveilling people like this is not criminal, I have no idea.

We Need Modern Equivalents to Those Old ‘Twin Cam’ Badges on Cars ⇥ theautopian.com

Jason Torchinsky, the Autopian:

You know what I miss that cars often had up until the ’90s or so, and are almost extinct today? Badges. Not the usual make/model badges, though, we still have plenty of those, I mean the highly-specific feature badges that cars used to proudly display. Actually, not even just features — also technical details.

Torchinsky’s ideas for modern versions of this are very good.

Apple Sues OpenAI Alleging Trade Secret Theft ⇥ cnbc.com

Kif Leswing and MacKenzie Sigalos, CNBC:

Apple on Friday sued OpenAI in federal court in Northern California, alleging trade secret theft, saying that the artificial intelligence lab took the iPhone maker’s intellectual property in order to develop its own consumer hardware.

The docket is on CourtListener, along with Apple’s complaint (PDF). What is immediately notable about this whole thing is the myriad conflicts of interest. Apple, of course, has a current partnership with OpenAI to power Apple Intelligence features, something repeatedly mentioned on the previous version of its marketing webpage, and conspicuously absent on the current one.

But the history runs far deeper. Among the defendants in the suit is io Products — do not blame me for that capitalization choice — founded by Jony Ive and acquired by OpenAI last May. Total mentions of “Ive” in the body of this lawsuit? Zero. Also, one of the investors in Ive’s company was Emerson Collective, founded by Laurene Powell Jobs, and which now has equity in OpenAI. Neither Emerson nor Powell Jobs are defendants.

In May, Kalley Huang of the New York Times reported OpenAI was “weighing legal action such as sending Apple a notice claiming breach of contract” because it felt Apple was not doing enough to promote ChatGPT through its Apple Intelligence integration. I would be surprised if that modest tie-in exists for much longer. When you update to Siri A.I. in iOS 27, for example, ChatGPT is turned off by default, though it is possible to re-enable it. It is also listed in Settings under an “Extension” sub-section — currently singular, though perhaps not at some point in the future.

Serial Fraudsters Are Responsible for an Offensive Cybersecurity Startup ⇥ krebsonsecurity.com

Brian Krebs:

The X/Twitter account IRIS C2 (@C2IRIS) has gained more than 4,000 followers since its creation in January 2025, posting frequently about security vulnerabilities, AI and software exploits. IRIS C2 says it is a company in McLean, Va. that sells offensive cybersecurity capabilities.

[…]

A search on the Arlington, Va. address listed in the incorporation records for Calvexa Group LLC finds the property is occupied by Jack Burkman, the 60-year-old founder and managing partner of the lobbying firm Burkman & Associates. When approached with questions about IRIS C2, Burkman referred further inquiries to his longtime associate, 28-year-old Jacob Wohl.

Now there are a couple of names I have not heard in a while, probably because their previous scheme was established under fake names. In an interview with Krebs, Wohl claims to “know more about tech than anyone”, which sounds about as delusional as anything else he has ever said.

Anyway, if you want to risk getting scammed, the company claims to be hiring.

Meta Announces First Canadian Data Centre to Be Built North of Edmonton ⇥ about.fb.com

Meta:

Once complete, our Sturgeon County data center will represent an investment of more than CAD $13 billion. We anticipate approximately 3,000 construction workers will be onsite at the peak of construction, and the data center will support more than 300 operational jobs.

[…]

As with all of our data centers, this data center’s electricity use will be matched with 100% clean and renewable energy.

As for the data centre itself, however…

Chris Varcoe, Calgary Herald:

Last week, Calgary-based Pembina Pipelines, Morgan Stanley Infrastructure Partners and Kineticor announced they will build a new 932-megawatt (MW) gas-fired power generation facility in Sturgeon County to power the data centre, although they didn’t identify a customer at the time.

Chalk up another questionable outcome for the environmental record. Meta makes a lot of big promises in this news release and in an interview for Varcoe’s column, but I question whether the company can be adequately monitored, particularly by this provincial government.

Flock and Ring Are Champions of the Privatized Surveillance State ⇥ engadget.com

Tim Cushing, Techdirt:

Even if you truly believe the company you work for is capable of doing this, perhaps read the room a bit before offering up this sort of insane assertion to a journalist:

Langley offers a prediction: In less than 10 years, Flock’s cameras, airborne and fixed, will eradicate almost all crime in the U.S. 

That would be Flock Safety CEO (and co-founder) Garrett Langley speaking to Thomas Brewster of Forbes. Flock Safety has grown a lot over the past few years, following paths paved by Amazon’s doorbell surveillance camera acquisition, Ring, and other upstarts in the public/private surveillance mesh network field.

Ring founder Jamie Siminoff made a similarly unsubstantiated claim to Jennifer Pattison Tuohy of the Verge. The reality, however, is that cameras from companies like Flock and Ring are giving a sheen of authority to false accusations made by law enforcement.

In September, for example, Chrisanna Elser of Colorado was falsely accused of theft by a police officer using Flock’s cameras. The entire exchange was recorded on her doorbell camera. 404 Media obtained body camera footage which showed the officer refused to see exonerating evidence, in the form of cameras on her Rivian truck and a Ring camera at her tailor’s house. This is just a mass surveillance race to the bottom. The officer in question was required to complete additional training for politeness as a result.

Joel Feder, the Drive:

On an otherwise normal Sunday afternoon in late June, I’d decided to take the $155,000 Range Rover I was testing that week out to run some errands with my wife. Little did I know that choice would complete a technological chain linking surveillance cameras, AI, and law enforcement that led to me and my wife being surrounded by police, hands on their guns, in a Kohl’s parking lot in suburban Minnesota.

Without spoiling this story too much, this was the result of a typo that affected several more vehicles than the one Feder was driving.

Max Miller, Engadget:

Although Flock cameras are often referred to as license plate readers, that’s reductive. Reading license plates is their primary task, but they can be used to track just about anyone or anything. Even without a license plate, law enforcement officers can search for things such as, hypothetically, “green sedan with American flag bumper sticker,” or, “pickup truck with paint scratches on left side and dirt bike in truck bed.” Reducing Flock ALPRs to license plate readers is a bit like calling your own eyes “Engadget article readers” simply because that’s what you’re using them for at this particular moment. The company also offers AI surveillance cameras which do track individuals.

I keep thinking about Elser’s story. The way she was implicated was thanks to a network of cameras surveilling her every public move, and the way she was exonerated was because of documentary evidence from a bunch of cameras surveilling her every public move. It was not very long ago that U.S. media was freaking out about the number of CCTV cameras in the U.K., but the U.S. has quickly caught up. There are hundreds across Canada, too.

To state the obvious, this ubiquitous surveillance has not eradicated crime. What it has done is give police the false confidence to accuse random people of crimes they did not commit. It has also allowed police to stalk people for personal reasons, despite major investors Andreessen Horowitz claiming critics “overlook the vigilant protections in place to ensure that Flock cannot be used for surveillance or to violate privacy”. That is nonsense — perhaps a lie, similar to those told by Flock. But it is not a lie any greater than the idea that we can eradicate crime if we just have more cameras with A.I. features.

Google Discontinues Google Earth Pro for Desktop ⇥ support.google.com

“Aamir F.”, on behalf of the Google Earth Team:

We’re continuing to make Google Earth on web and mobile (Android | iOS) the best place for people to get helpful geospatial insights. While you can continue using the legacy Google Earth Pro desktop app, it will no longer be available for new downloads beginning on June 25, 2027. We encourage using web and mobile for the best Google Earth experience.

This is a two-factor loss: the MacOS app is Intel-based and, thus, will no longer be supported by the system come next year.

Christoph Grützner, researcher at the University of Jena:

Discontinuing Google Earth desktop does not come unexpected, but it’s terrible news. The web tool is utterly useless for me and many geo folk.

There’ll be workarounds for most features, but not for easy 3D view of historical imagery and for sharing placemarks.

Carlos Moffat, faculty at the University of Delaware:

Still one of the most approachable and efficient tools for planning fieldwork. I used GEarth in our latest Antarctic cruise just a few months ago.

On the Google Earth community thread, you will find comments from people with all sorts of interesting use cases for the desktop app. I opened the web version today to see if it supports my limited use cases — it does — and I was greeted by a dialog advertising Gemini features, of course.

An Age-Gated Internet Is an Admission of Defeat ⇥ jamesrball.com

I am a tiny bit sorry for all the links I am posting regarding age gating. As I have written before, it is something I am still trying to work out for myself. After all, it seems straightforward why age verification is an easy way to reduce the risks to children of today’s platforms, the operators of which marketed their products directly to kids. But the trade-offs are numerous, whether from a predominantly U.S.-centric view of individual freedoms, or from the way such restrictions fail to address product safety concerns.

James Ball, Techtris:

In practice, of course, a social media ban would be widely circumvented. If we think the internet is bad for teenagers now, imagine a world in which all online access is illicit. Social platforms would have a new defence against online harms against that group: they’re just not meant to be there.

Provided Facebook, X, TikTok or whoever could show it had some legally compliant age verification system, harm befalling a teenager wouldn’t be their fault. They weren’t supposed to be there, after all. Instead of being the negligent owners of a space marketed to teens, they’re the blameless victims of trespass.

Age gates are such a procedural and mediocre response. Instead of reining in whatever broader risks may be invented or exacerbated by these companies’ products — and, in particular, the unique problems of each — we are throwing up our hands and pretending it is all too complicated.

Meta Laid Off Staff in Favour of Agentic Coding, and It Is Not Going Well ⇥ reuters.com

Katie Paul and Courtney Rozen, Reuters:

Meta Chief Executive Mark Zuckerberg acknowledged shortcomings in the company’s sweeping restructuring at an internal town hall on Thursday, saying the systems known as AI agents had not progressed as quickly as he had expected, according to a recording heard by Reuters.

[…]

In retrospect, he said, the “trajectory of the agentic development over at least the last four months hasn’t really accelerated in the way that we expected,” and ​that the company’s bets on the new structure “haven’t come to fruition yet.” Zuckerberg was referring to AI agents, automated systems that can ​execute tasks on behalf of a user.

A quintessentially Zuckerbergian premise: he pivots the whole company around whatever is the new thing, says oops, then reminds himself that nothing really matters as long as people keep looking at ads on Instagram.

For all Meta’s power and its massive base of users and ad buyers, the company’s YouTube channels are fascinating places. The main channel has a bunch of promo videos for the headlining products Meta wants people to associate with a world-changing company. There are corporate presentations hosted by Zuckerberg, ads for A.I. and glasses products, and little behind-the-scenes things, and all of them have hundreds-of-thousands to millions of views. That is what you would expect for an account with 456,000 subscribers and a household name. It really wants you to believe its leadership is made of visionary stuff.

But the way it actually makes its money — advertising — is nowhere to be found on that channel. For that, you need to go to the Meta for Business channel, which has a respectable 181,000 subscribers and lots of tips for how to use the company’s ad tools more effectively. But the view counts on those videos are, frankly, terrible. Most are in the dozens-to-hundreds; again, this is a channel with enough subscribers to get a famous silver plaque.

Meta can tell the world it is a revolutionary company while being internally honest about what it actually does. Many companies do that. But it is fairly troubling that Meta seemingly tricked itself into believing the external picture it paints.

Indonesia Is Also Facing Problems With Age-Gated Social Media ⇥ asia.nikkei.com

Marcel Thee, Nikkei Asia:

Following Australia’s move in late 2025, Indonesia became the first non-Western country to announce restrictions on social media access for users under 16. Rules unveiled on March 6 require platforms such as TikTok, Instagram, YouTube and Roblox to introduce age verification checks and remove underage accounts. The restrictions were supposed to take effect on March 28, but enforcement has been patchy, with tech companies largely ignoring the requirements and underage users continuing to access social media simply by lying about their ages.

As Michael Geist put it recently, “the better the privacy protection, the less effective the ban”.

Maestral, My Favourite Dropbox Client for MacOS, Is No Longer Being Maintained ⇥ github.com

Sam Schott:

As of 2026-07-28, this project is archived. It’s been a fun challenge to develop a syncing client, but unfortunately, I find too little time to invest in Maestral these days. I’ve also moved away from using Dropbox myself.

Maestral will still remain usable in the medium term, but will no longer be actively maintained or receive updates.

This is a bummer — understandable, but a bummer nevertheless. The official Dropbox app is hundreds of megabytes because, of course, it is a website masquerading as a native application with the help of Electron. Maestral is comparatively svelte, has a low memory footprint, and does not use Apple’s questionable File Provider API.

I use Dropbox only for some relatively basic but necessary things, like hosting PDFs for this very website, which is why Maestral has been the perfect client for me. It is a testament to the effect of a good third-party app that I have stuck with Dropbox despite its corporate-focused strategy pivot.

Anyway, many thanks to Schott for creating such a good little utility. Maestral is open source so I have hope somebody will take the baton.

A.I. and Liability ⇥ schneier.com

Bruce Schneier:

AI agents are agents of the person or organization that deploys them—and should be treated by the law as such. If a company hired human writers to write its summaries, that company would be liable for inaccuracies in those summaries. If a company’s human agent signed contracts in the company’s name, that company would be bound by those contracts. And if a doctor gave dangerously wrong medical advice, they would be liable for malpractice.

To allow businesses to hide behind the excuse of faulty AI in those same circumstances would be a massive handout to companies, and would introduce disastrous incentives for corporate misbehavior. Why hire human writers, lawyers or doctors when AIs are not only cheaper, but also absolve employers whenever they make a mistake?

In his video essay nominally about artificial intelligence, economist Cahal Moran repeatedly references the book “The Unaccountability Machine” by Dan Davies. I am only a couple of chapters in, but I think I am going to get a lot out of it, and I feel confident you should check it out from your local library.

An Updated Look at the Environmental Impact of A.I. Data Centres ⇥ wsj.com

Satya Nadella at Microsoft’s Build conference this year:

Perhaps the most important design criteria for us is: ‘how do we earn the permission from the communities in which we are building these data centres?’

That’s where these principles ground us and focus us. How do we ensure that the D.C.s do not increase the electricity prices? Making sure that we are replenishing all our water use. Creating jobs in the local communities for the local residents. Adding to the tax base. […]

Kate Brandt, chief sustainability officer at Google:

While we remain deeply committed to sustainability, reaching our climate moonshots is getting harder. It takes energy and resources to support the growing demand for AI that powers businesses and the tools we use every day. Like everyone in our industry, we experienced a surge in electricity demand last year. Our AI infrastructure buildout is accelerating faster than the grid is decarbonizing, and long waits to connect to the grid, fragmented markets, supply chain delays, and regulatory bottlenecks continue to slow down new carbon-free energy from coming online. We’re working within energy systems that simply aren’t clean enough or flexible enough yet.

Christopher Mims, Wall Street Journal:

Microsoft, Google and Amazon are among the tech companies spending an estimated $1 trillion on AI infrastructure this year and last. In some regions, they are using far more water than they report, depending on how data centers are powered. And their water consumption is projected to grow rapidly in coming years.

These companies produce annual sustainability reports that include water use at their data centers. But among this group of titans, only Meta tallies water used at the power stations that feed them electricity, in addition to the water used on-site.

Ketan Joshi:

Google’s power consumption rose by 7 TWh between 2023 and 2024. That was bad. But it rose by a whopping 12 TWh between 2024 and 2025, almost double last year’s increase. Google’s power consumption isn’t just growing — the rate at which it is growing is growing. We have a word for this: exponential growth.

Every time I look at this chart I have to go and double check every single Google number, because it just looks so ridiculous.

Google’s power consumption is now greater than the amount of electricity generated by New Zealand.

In their environmental reports (all PDF links), Apple, Google, Meta, and Microsoft all mention carbon capture or direct air capture as one strategy for minimizing the impact of their emissions. Reporters for Heated and ProPublica jointly published a look at carbon capture technologies. They found that carbon capture remains a basically theoretical technology despite decades of promotion. Meanwhile, solar energy installations have dramatically outpaced even the most optimistic projections.

Canada in the 1870s ⇥ petapixel.com

Matt Growcoot, PetaPixel:

Despite the technical difficulties, there are photographs of Canada in the 1860s — including one taken of the historic moment the proclamation of Confederation was read out at Market Square, Kingston, Ontario.

I had no idea there was a photo taken when this proclamation was read.

Apple’s ‘Trusted System Agent’ Proposal Has Not Actually Been Built ⇥ ft.com

When Apple announced Siri A.I. would not be available on E.U. iPhones or iPads at launch, it said:

Given the serious risks to users, Apple designed a solution called Trusted System Agent — an intermediary that would allow virtual assistants to safely access the same features and capabilities as Siri AI for devices in the EU. Apple also shared a plan to launch Siri AI in the EU while gradually rolling out this new solution over an 18-month period. The European Commission said no. In fact, the European Commission did not agree to any of Apple’s proposals.

I noted the curious mix between this pitch and Apple’s claim that — translated from French — “none of its engineers are currently working on solutions to open Siri A.I. to the competition”. I interpreted this to mean Apple was no longer working on the Agent idea for giving third-party A.I. systems comparable access. On reflection, I am more confused: is Apple throwing a red herring into the mix by claiming it is not giving competitors access to Siri A.I., something which I do not think the E.U. was asking for?

In that same post, I also reflected on how it was “refreshing to see Apple and the European Commission arguing in public and on the record instead of by leaking information to the Financial Times“.

Anyway, here are Michael Acton and Barbara Moens, reporting for the Financial Times:

A commission official said its contact with Apple on the idea was limited, and that it lacked a concrete proposal or details on how such an agent would work beyond the general concept. They said Apple “focused on obtaining a green light to delay the compliance”.

By contrast, the official said the commission’s process with Google after changes it made to its Android operating system led to a formal consultation on how the company could comply with the DMA and avoid massive fines.

To the extent Apple is not getting sufficient information about the validity of its proposals, the Commission is saying that is entirely Apple’s fault — obviously. I bet Apple thinks it is all the Commission’s fault, too. The DMA has been in effect for nearly four years and there is no reason why either party should be having so much difficulty with this proposal stage. Either the Commission is mischaracterizing Apple’s engagement, or Apple’s representatives need to be far better prepared.

One more thing I wrote last month:

Given Apple’s self-imposed problems with Apple Intelligence since WWDC 2024, I question whether many people in Europe will find this particularly disruptive or upsetting, however.

Well, according to Acton and Moens, I was quite wrong:

The dispute triggered a fierce public backlash against the commission, with European officials reporting hundreds of emails from consumers accusing Brussels of depriving Europeans of a new technology.

One EU official said that a commission spokesperson had received a stream of abusive messages, including several death threats.

A.I. really is breaking brains. Shameful behaviour.

Sony Announces Closure of PlayStation Store for PS3, Says Digital Distribution Is the Future ⇥ blog.playstation.com

Sony’s Sid Shuman:

As consumer preferences and the broader entertainment industry continue to shift away from physical discs to digital, physical game disc production for all new games releasing on PlayStation consoles will be discontinued starting January 2028.  Following this date, new games will be available on PlayStation Store and at retailers in digital formats only. […]

Also Sony’s Sid Shuman:

After nearly two decades of supporting the PS3 console generation, we wanted to let you know we will be closing the PlayStation Store on PS3, as well as on PS Vita. […]

Incredibly, these announcements were made on the very same day, as if to illustrate the fragility and centralized control of the digital-only distribution Sony says is the new standard. At least physical versions of PS3 and Vita games will continue to function. Remember how, in 2023, Sony said it would yank access to media purchased by users because Sony did not renew its license with Discovery? If we cannot actually own something, I find it difficult to believe an unpaid reproduction of that thing is actually tantamount to theft.

Update: Just this week, Sony said it would remove hundreds more titles from users’ accounts in the U.K. due to its licensing with StudioCanal expiring. (Also, Sony and Discovery struck a new agreement in 2023.)

Is There a New Quantum Processor or Is Microsoft Lying? ⇥ mathewingram.com

Mathew Ingram:

So what, I can hear you thinking. I don’t know or care what anyons are, or how gallium arsenide works. Me neither! The interesting part of this story for me is that Microsoft — a company that has a market value of $2.7 trillion and almost single-handedly created the personal computing industry — has repeatedly claimed that its Majorana processor uses these particles, and that its new version is a thousand times more reliable, and yet some other theoretical physicists have called BS on these claims, not once but several times. In other words, Microsoft keeps putting out press releases saying it has done this, and that it will build a working quantum computer using said particles within the next three years, and a number of prominent members of the industry keep saying that the company and its research scientists are full of you-know-what.

It is fascinating to see academics call out one of the world’s most valuable companies for making claims that are “perhaps even ‘fraudulent’”.

Apple Has Known About a Hide My Email Vulnerability for Over a Year ⇥ easyoptouts.com

Tyler Murphy and Ben, co-founders of EasyOptOuts:

We’ve discovered vulnerabilities in Hide My Email that allow attackers to discover the meant-to-be-hidden address behind a Hide My Email address. We reported the issue to Apple over a year ago, and as of June 30, 2026, it still hasn’t been fixed. About a month ago, we realized that the vulnerabilities’ severity and scope are greater than we initially thought. […]

Apple replied — twice — that it had fixed these vulnerabilities, but Joseph Cox of 404 Media was able to reproduce the problem as recently as earlier this week. Very few details are available right now. I have seen speculation that the original email address is revealed when someone replies using their hidden email address, but the impression I get from Cox’s reporting is that no user interaction is necessary:

To test the issue I generated a new Hide My Email address and provided it to Murphy. Around five minutes later, he replied with my real email address linked to my Apple account which was supposed to be hidden.

I am also unclear about how, as of May, the EasyOptOuts guys found the “vulnerability may have greater severity and scope” than initially reported. Ominous, though.

Also, it is pretty shameful Apple has known about this for a year and has not actually fixed it. This seems to be a common occurrence when reporting bugs of any kind. There are plenty of times I have received responses to years-old bug reports claiming a fix was delivered recently, despite the issue still being easily reproducible. And those are little things; this is a bug that, if you believe this EasyOptOuts write-up and Cox’s reporting, fundamentally undermines a privacy feature that costs money.

Reddit Login-Walls ‘Old Reddit’ ⇥ reddit.com

“boat-botany”:

Old Reddit’s logged-out experience is a significant source of abusive scraping and automated traffic on the platform. It’s also an important interface for many long-time mods and redditors. To strike the right balance between preserving your access to Old Reddit while preventing abusive scraping and automated traffic, over the next month we will start requiring everyone to log in. All logged-in users will continue to have access to Old Reddit, and this change will not impact logged-out browsing on reddit.com.

“New” Reddit is a janky, slow, bloated mess of a website that mostly displays text, images, and videos. “Old” Reddit is ugly but functional. The site admins are not promising the superior version will be available forever, and they are specifically calling attention to its lack of a “modern security tech stack”. I do not think “old” Reddit is long for this world — especially since Reddit is aggressively promoting its mobile app.