15.5 C
New York
Wednesday, March 19, 2025
Home Blog Page 6

Making America Irrelevant – CleanTechnica



Join day by day information updates from CleanTechnica on e-mail. Or comply with us on Google Information!


Final Up to date on: 18th March 2025, 11:32 am

Enjoying King of the Mountain might be enjoyable when you’re 10 years previous, but it surely takes multiple particular person to play. The present administration in America desires to play King of the Mountain on the world stage, jamming its imaginative and prescient of American preëminence down the throats of the opposite 194 nations on the planet. Paul Krugman is an economist who’s a Nobel Laureate (2008). He was a columnist for the New York Occasions for a few years, however left to begin his personal Substack channel after the final election, distraught over the Occasions‘ resolution to roll over and play useless when it got here to opposing the authoritarian polices of the incoming president. I discovered his publish on March 17, 2025 entitled, Destroying America’s Model —  Dropping the world’s belief and some huge cash too, worthy of sharing with CleanTechnica readers. Listed here are the related components of that article.


Final week Mark Carney, having received the Liberal Social gathering’s management election, grew to become Canada’s Prime Minister. And it seems to be doable that he might maintain that place for some time. Not way back the Liberals appeared headed for an electoral wipeout, however they’ve seen an incredible surge within the polls. The key behind that surge is, in fact, Donald Trump, who has not solely imposed tariffs on Canada with none justification however retains doubling down on his fully insane demand that Canada grow to be the 51st state. Each time Trump or his minions repeat that demand, they strengthen Carney’s hand in opposition to Pierre Poilievre, the Bitcoin-loving, Trumpy-sounding Conservative chief.

Certainly one of Carney’s first coverage strikes as PM was to order a assessment of Canada’s plan to purchase a considerable variety of U.S.-made F-35 fighter jets. Which means that Canada is becoming a member of European nations which are equally reconsidering their dependence on U.S. weapons. This flip away from army dependence on the U.S. is comprehensible. America is not a dependable ally to the world’s democracies; certainly, between Trump’s flip towards Putin and his speak of annexing Canada and Greenland, we don’t seem like an ally in any respect. Rumors that U.S. jets have a “kill swap” that will enable Trump to disable them at will are in all probability false, however refined army gear requires quite a lot of technical help, so that you don’t need to purchase it from a rustic you don’t belief.

How a lot financial harm will America undergo as a result of it has grow to be a rogue nation? Changing into a nation that may’t be trusted to honor agreements or comply with the rule of regulation has to have financial in addition to political and diplomatic penalties. How huge are these financial penalties? [Based on the available data], US publicity to international revulsion seems to be fairly giant.

Begin with these army gross sales. US gross sales of protection gear to international governments have gone up so much since Russia invaded Ukraine. A lot of the rise has gone both to Ukraine or to European governments supporting Ukraine, however there may be additionally a common development towards rearmament as we study that the world is a extra harmful place than we realized. Pre-Trump that rearmament meant quite a lot of U.S. exports. In 2024 US army exports have been $318.7 billion — roughly 15 p.c of whole U.S. items exports. It was additionally nearly twice our agricultural exports. How a lot will these gross sales shrink now that international governments know that we will’t be trusted? Given a while to search out replacements, the doubtless reply is “so much.”

Navy {hardware} isn’t the one export more likely to undergo from our new rogue nation standing. Our commerce deficit in items is partly offset by a surplus in providers commerce, however a number of of our main service exports will certainly be harm by America’s flip to the darkish aspect. Certainly one of these is training. Many foreigners come to America to review, attracted by the standard of our schools and universities. In 2023, the latest 12 months for which information can be found, they spent greater than $50 billion. However should you have been a foreigner contemplating research within the US subsequent 12 months, wouldn’t you be nervous that you simply would possibly end up arrested and deported for expressing what the present administration considers anti-American views? I’d. So we will anticipate a success to larger training, which, though we hardly ever consider it this fashion, is a significant U.S. export.

Private journey — principally tourism — was even greater at greater than $100 billion. However you possibly can make sure that we’ll be seeing so much fewer Canadians this 12 months and subsequent, and it received’t simply be Canadians reconsidering their plans. Salon studies that “Quite a few vacationers from European international locations have been detained by ICE in current weeks when trying to enter the US, their deliberate holidays as an alternative turning into lengthy stretches in detention. Specialists say their arrests are an obvious escalation in enforcement motion as…..Trump’s immigration crackdown rages on.”

Simply to be clear, I’m far more nervous concerning the risk Trump poses to democracy than his unhealthy financial insurance policies. And even in purely financial phrases, self-inflicted harm from tariffs and deportations, plus express international retaliation, are in all probability extra vital than the prices imposed by international lack of belief. But these prices are actual. A technique to consider that is to say that Trump is doing to America what Elon Musk is doing to Tesla, destroying a useful model by way of erratic conduct and repulsive ideology. Did I point out that Tesla gross sales in Europe look like cratering?

True, there are variations between a non-public enterprise and a nation-state. I don’t assume folks visiting Tesla showrooms are topic to random arrest, or that Musk will kill your automotive should you say one thing he doesn’t like. However, Tesla relies upon much more on purchaser goodwill than the US as an entire does. Nonetheless, Trump’s perception that America holds all of the playing cards, that the remainder of the world wants entry to our markets however we don’t want them, is all unsuitable. We’re quickly dropping the world’s belief, and a part of the associated fee will likely be monetary.


Making America Irrelevant

From our perspective right here at CleanTechnica international headquarters, the cash is a secondary concern. In all of the years I’ve been privileged to write down for this publication, I’ve reported on dozens — possibly tons of — of analysis papers printed in scientific journals and I’ve all the time been struck by how most of the scientists writing these studies have Asian names. Most of the scientists doing important analysis right here in America are actually persona non grata, because of the insanely paranoid insurance policies that the US authorities has put in place.

This week, we realized of the wholesale cancellation of funding for researchers in dozens of fields, together with these learning modifications in Antarctica. A lot of them will take their abilities and specialised data to different international locations, making America the largest loser. BYD claims to have 150,000 engineers growing new applied sciences. Simply this week, it introduced a brand new Blade battery that with a ten C cost charge and a brand new electrical motor with 780 hp that may spin to over 30,000 RPM. Have you ever heard of comparable bulletins from Ford, GM, or Stellantis? If not, what does that recommend for American competitiveness sooner or later? What it suggests to me is that hiding behind tariffs partitions is assured to make America irrelevant. Whereas we spend time telling ourselves how fantastic we’re, the remainder of the world will transfer ahead into the longer term and leaving us to stew in our personal juices.

When my daughter was younger, we spent quite a lot of time watching Sesame Avenue collectively. In the present day’s leaders might imagine that present is a bunch of  “woke” nonsense, however possibly all of us may study one thing from its easy however refined messages — like this one.

Whether or not you will have solar energy or not, please full our newest solar energy survey.



Chip in a couple of {dollars} a month to assist help impartial cleantech protection that helps to speed up the cleantech revolution!


Have a tip for CleanTechnica? Wish to promote? Wish to recommend a visitor for our CleanTech Discuss podcast? Contact us right here.


Join our day by day e-newsletter for 15 new cleantech tales a day. Or join our weekly one if day by day is just too frequent.


Commercial



 


CleanTechnica makes use of affiliate hyperlinks. See our coverage right here.

CleanTechnica’s Remark Coverage




ios – Dealing with fetch redirect on react-native app throughout pkce authorization code movement


I’ve a react native cell app (ios/android), which I am trying to implement the PKCE Authorization Movement per the RFC. My purpose is to redirect the consumer to my very own login web page as a substitute of a 3rd get together supplier like google or fb. This manner I can keep away from having to retailer the applying secret on the consumer aspect. The movement is working nice on the browser as a result of I’ve a completely certified area title and the browser is ready to observe the redirect despatched by the authorization server on to my login web page.

Nevertheless, on the cell app I haven’t got a site title and so the redirect_uri I ship the authorization server is a schema url, e.g: my-app://someurl.com. I’ve created this schema url in xcode in addition to the AndroidManifest.xml and verified that domestically on the gadget it appropriately routes to the app from both chrome or safari whether or not the app is in background or inactive. The issue is that the react native fetch technique follows the 302 redirect despatched by the authorization server (e.g. my-app://someurl.com domestically) however it might probably’t resolve it domestically the best way the browser does for instance and throws a networking exception:

Fetch Exception

I printed out the stack on the native aspect and it is complaining about an ‘unsupported url’ given that it is the schema url and never a http/s formatted url:

Error Area=NSURLErrorDomain Code=-1002 "unsupported URL" UserInfo={NSLocalizedDescription=unsupported URL, NSErrorFailingURLStringKey=my-app://someurl.com?client_id=client-id-LLg5PEvPwvyfVQNrNuDUgyHXWbSmUHki&authorization_code=ajxmtNSGUysXoj8qyU1xu9al9dMo9PFRZoFpCzsepGzrh7p9RKQyeT3qvjmoTcK, NSErrorFailingURLKey=my-app://someurl.com?client_id=client-id-LLg5PEvPwvyfVQNrNuDUgyHXWbSmUHki&authorization_code=ajxmtNSGUysXoj8qyU1xu9al9dMo9PFRZoFpCzsepGzrh7p9RKQyeT3qvjmoTcK, _NSURLErrorRelatedURLSessionTaskErrorKey=( "LocalDataTask <5271A124-F625-4583-9926-056D95F943B9>.<2>" ), _NSURLErrorFailingURLSessionTaskErrorKey=LocalDataTask <5271A124-F625-4583-9926-056D95F943B9>.<2>, NSUnderlyingError=0x600000d308a0 {Error Area=kCFErrorDomainCFNetwork Code=-1002 "(null)"}}

The redirect: 'handbook' fetch choice would additionally clear up this downside for me assuming it could additionally give me entry to the redirect url I must extract the token from however neither ‘handbook’ nor ‘error’ work on react native (consumer aspect).

Curious to know if anyone has gotten this engaged on react native fetch with schema url’s, maybe I am lacking one thing apparent. The issue is not a lot the Deep Linking as that seems to be working, however extra that I am unsure deal with this redirect within the app. For the reason that native aspect has acquired the redirect request externally however is choking on it when it makes an attempt to observe it, is there a manner for it to bypass the act of truly following it and as a substitute simply return the url end result again to the react aspect?

Lastly, there are fairly a number of posts on right here about comparable points however nothing that truly offers with this distinctive use case.

Thanks…

Unpatched Home windows Zero-Day Flaw Exploited by 11 State-Sponsored Menace Teams Since 2017

0


Mar 18, 2025Ravie LakshmananVulnerability / Home windows Safety

Unpatched Home windows Zero-Day Flaw Exploited by 11 State-Sponsored Menace Teams Since 2017

An unpatched safety flaw impacting Microsoft Home windows has been exploited by 11 state-sponsored teams from China, Iran, North Korea, and Russia as a part of information theft, espionage, and financially motivated campaigns that date again to 2017.

The zero-day vulnerability, tracked by Development Micro’s Zero Day Initiative (ZDI) as ZDI-CAN-25373, refers to a problem that permits unhealthy actors to execute hidden malicious instructions on a sufferer’s machine by leveraging crafted Home windows Shortcut or Shell Hyperlink (.LNK) recordsdata.

“The assaults leverage hidden command line arguments inside .LNK recordsdata to execute malicious payloads, complicating detection,” safety researchers Peter Girnus and Aliakbar Zahravi stated in an evaluation shared with The Hacker Information. “The exploitation of ZDI-CAN-25373 exposes organizations to vital dangers of information theft and cyber espionage.”

Cybersecurity

Particularly, this includes the padding of the arguments with Line Feed (x0A) and Carriage Return (x0D) characters to evade detection.

Practically a 1,000 .LNK file artifacts exploiting ZDI-CAN-25373 have been unearthed thus far, with a majority of the samples linked to Evil Corp (Water Asena), Kimsuky (Earth Kumiho), Konni (Earth Imp), Bitter (Earth Anansi), and ScarCruft (Earth Manticore).

Of the 11 state-sponsored menace actors which were discovered abusing the flaw, almost half of them originate from North Korea. Apart from exploiting the flaw at varied instances, the discovering serves as a sign of cross-collaboration among the many totally different menace clusters working inside Pyongyang’s cyber equipment.

Telemetry information signifies that governments, personal entities, monetary organizations, suppose tanks, telecommunication service suppliers, and navy/protection businesses positioned in the USA, Canada, Russia, South Korea, Vietnam, and Brazil have grow to be the first targets of assaults exploiting the vulnerability.

Within the assaults dissected by ZDI, the .LNK recordsdata act as a supply car for recognized malware households like Lumma Stealer, GuLoader, and Remcos RAT, amongst others. Notable amongst these campaigns is the exploitation of ZDI-CAN-25373 by Evil Corp to distribute Raspberry Robin.

Cybersecurity

Microsoft, for its half, has categorised the difficulty as low severity and doesn’t plan to launch a repair.

“ZDI-CAN-25373 is an instance of (Person Interface (UI) Misrepresentation of Crucial Info (CWE-451),” the researchers stated. “Which means the Home windows UI didn’t current the person with essential info.”

“By exploiting ZDI-CAN-25373, the menace actor can forestall the tip person from viewing essential info (instructions being executed) associated to evaluating the danger stage of the file.”

Discovered this text attention-grabbing? Comply with us on Twitter and LinkedIn to learn extra unique content material we put up.



Java 24 is now out there with launch of Stream Gatherers, Class-File APIs


Oracle has introduced the discharge of Java 24, which provides a number of new options to the language, corresponding to the supply of the Stream Gatherers API and Class-File API, and new options designed for AI inference and quantum safety.

“Over the previous 30 years, Java has supplied builders with a complete platform to construct and deploy functions that deal with a various vary of use circumstances,” stated Georges Saab, senior vp for the Oracle Java Platform and chair of the OpenJDK governing board. “With greater than 20 new options spanning each component of Java, together with new AI and post-quantum crypto capabilities, the Java 24 launch offers builders the instruments they should construct revolutionary, AI-infused functions. Because the stewards of Java, we’re excited to work with the worldwide Java

neighborhood to proceed delivering a gradual stream of recent options by way of our predictable, six-month cadence.”

This launch is the ultimate Java launch earlier than the subsequent Lengthy-Time period Help (LTS) launch in September. In accordance with Saab, Java 25 is not going to have plenty of newer options in comparison with Java 24, so builders can now begin making ready for that subsequent launch by experimenting with Java 24. 

Java 24 consists of the discharge of the Steam Gatherers API, which helps customized intermediate operations, permitting stream pipelines to rework information in methods which are troublesome when utilizing built-in intermediate choices. In accordance with Oracle, this API will enable Java builders to be extra environment friendly when studying, writing, and sustaining their Java code. 

The Class-File API was additionally finalized on this launch, and it offers an ordinary API for parsing, producing, and reworking Java class information, in addition to monitoring the category file format that’s outlined by the JVM specification. In accordance with the builders who labored on this API, the six-month launch schedule for Java has induced some points with class information, as a result of typically third-party frameworks embrace class-files which are older than the present model, leading to errors. 

“The Java Platform ought to outline and implement an ordinary class-file API that evolves along with the class-file format,” they wrote within the JEP. “Elements of the Platform would be capable to rely solely on this API, somewhat than rely perpetually on the willingness of third-party builders to replace and take a look at their class-file libraries. Frameworks and instruments that use the usual API would help class information from the newest JDK mechanically, in order that new language and VM options with illustration in school information could possibly be adopted shortly and simply.”

A lot of efficiency enhancements have been additionally included on this launch, together with ahead-of-time class loading and linking, elimination of the non-generational mode from the Z rubbish collector (ZGC), late barrier extension for the G1 rubbish collector, and the flexibility to synchronize digital threads with out pinning

Hardening Java for post-quantum world

Java 24 introduces a number of new security measures geared toward hardening Java for quantum computing. The Key Derivation Perform API (in preview) presents cryptographic safety for information in transit. This launch additionally presents implementations in Java of the Quantum-Resistant Module-Lattice-Primarily based Key Encapsulation Mechanism and the Quantum-Resistant Module-Lattice-Primarily based Digital Signature Algorithm, each of that are NIST requirements for quantum safety. 

“You understand, the business consensus is that it’s not a matter of if, however a matter of when quantum computing goes to render present cryptographic schemes breakable,” stated Donald Smith, vp of Java Product Administration at Oracle. “So there may be plenty of curiosity within the business to develop quantum resistant algorithms for communication and signing and so forth. And we’re beginning to get plenty of questions, ‘hey, when are we going to have quantum resistant algorithms in Java?’”

Java 24 places concentrate on AI inference

Primitive Sorts in Patterns, instanceof, and swap (JEP 488) — presently in its second preview — goals to make the language extra uniform and expressive. In accordance with Oracle, this characteristic shall be significantly helpful to builders integrating AI inferencing into their functions.

“Numerous software builders who’re utilizing or integrating with an inference engine, they’re typically pulling collectively giant units of primitive information,” Smith defined. “So you’ll have a document kind of some sort, and also you wish to pull out some variable from that—it’s often a primitive— after which ship that into an inference engine to attempt to perceive the information somewhat higher, proper? And in order that JEP goes to assist make that job lots simpler.”

Different new options on this space embrace the second preview of Module Import Declarations, which permits builders to extra simply combine enterprise logic with AI inference, libraries, and repair calls, and one other incubation of the Vector API, which is commonly utilized in AI inference. 

Locus Array automates induction, storage for ‘zero contact’ achievement

0


Array, shown here, uses a LocusBot designed to pick from and to bins from warehouse shelving, says Locus Robotics.

Array makes use of a LocusBot designed to select from and to bins from warehouse shelving. Supply: Locus Robotics


CHICAGO — Locus Robotics is thought for its goods-to-person automation, wherein cell robots help human pickers. At ProMat yesterday, the corporate gave a sneak peek of Locus Array, a system utilizing synthetic intelligence and robots for high-density storage and throughput. “We’ve been engaged on this for the previous a number of years,” mentioned Rick Faulk, CEO of Locus Robotics. “Our zero-touch achievement automates induction, and double-deep storage covers 100% of SKUs.” The Wilmington, Mass.-based firm has developed a brand new journal tower that may retrieve a number of orders from shelving into bins or cartons that may be subdivided for additional effectivity.

Locus Array makes use of AMRs, arms for environment friendly retrieval

For Array, Locus Robotics mixed an autonomous cell robotic (AMR) with a tower and a custom-developed, vision-guided choosing arm. The AMR has omnidirectional wheels much like Vector, which the corporate acquired with Waypoint Robotics, to make tight turns and slide subsequent shelving on both facet of an aisle.

“It will possibly pull from a conveyor or circulate rack, decide most of an order, after which hand off objects to be picked with Origin or Vector,” mentioned Mike Johnson, president of Locus Robotics. “The robotic can decide to 3 totally different tote sizes for optimum density with 99.9% accuracy.”

Array’s robotic choosing arm, which makes use of suction cup finish effectors, can decide from both facet of a really slim aisle, defined Faulk. Racks as much as 10 ft. (3 m) excessive add versatile, high-density storage and a 3rd dimension to Locus’ robotic choosing, not not like an automatic storage and retrieval system (ASRS).

“Healthcare, industrial, retail, and e-commerce all have the identical issues with throughput and labor shortages. We will now automate every part from induction and putaway to decant for packout,” he informed The Robotic Report throughout an unique media preview. “It will possibly get rid of 90% of labor, and our aim is to empty the parking plenty of all of the warehouses world wide.”

Locus has already assisted with greater than 4 billion picks, and the corporate was a 2024 RBR50 Robotics Innovation Award honoree.


SITE AD for the 2025 Robotics Summit registration.
Register now so you do not miss out!


LocusOne orchestrates achievement

As with Locus Robotics’ current goods-to-person (G2P) choosing, LocusOne‘s AI sequences choosing workflows for optimum effectivity, famous Kait Peterson, vp of product advertising at Locus.

“We’re creating a brand new class of robot-to-goods, or R2G, choosing,” she mentioned.

LocusOne already had the order logic and required only a few modifications for Array, added Faulk.

“This has been a part of the corporate’s imaginative and prescient because it was based, and our engineers have labored on this since September,” he mentioned. “By decreasing value per decide, we will ship a quick ROI [return on investment].”

Faulk added that cell manipulator Array may be shortly and simply built-in with current warehouses and Locus’ AMRs, permitting scalable deployments in weeks fairly than months. It will possibly function 24/7 to fulfill rising achievement calls for, he mentioned.

In response to Locus, the product will likely be out there for ordering later this yr, and can begin transport in early 2026.

Editor’s observe: Observe our ongoing protection of ProMat 2025.