Enlarge / A meeting of the UN Security Council on April 14. (credit: Fatih Aktas/Anadolu via Getty Images)

Russia vetoed a United Nations Security Council resolution Wednesday that would have reaffirmed a nearly 50-year-old ban on placing weapons of mass destruction into orbit, two months after reports Russia has plans to do just that.

Russia's vote against the resolution was no surprise. As one of the five permanent members of the Security Council, Russia has veto power over any resolution that comes before the body. China abstained from the vote, and 13 other members of the Security Council voted in favor of the resolution.

If it passed, the resolution would have affirmed a binding obligation in Article IV of the 1967 Outer Space Treaty, which says nations are "not to place in orbit around the Earth any objects carrying nuclear weapons or any other kinds of weapons of mass destruction."

Enlarge (credit: Getty Images)

On Friday, a federal judicial panel convened in Washington, DC, to discuss the challenges of policing AI-generated evidence in court trials, according to a Reuters report. The US Judicial Conference's Advisory Committee on Evidence Rules, an eight-member panel responsible for drafting evidence-related amendments to the Federal Rules of Evidence, heard from computer scientists and academics about the potential risks of AI being used to manipulate images and videos or create deepfakes that could disrupt a trial.

The meeting took place amid broader efforts by federal and state courts nationwide to address the rise of generative AI models (such as those that power OpenAI's ChatGPT or Stability AI's Stable Diffusion), which can be trained on large datasets with the aim of producing realistic text, images, audio, or videos.

In the published 358-page agenda for the meeting, the committee offers up this definition of a deepfake and the problems AI-generated media may pose in legal trials:

Enlarge / A BE-4 engine is moved into position on ULA's second Vulcan rocket. (credit: United Launch Alliance)

Welcome to Edition 6.40 of the Rocket Report! There was a lot of exciting news this week. For the first time, SpaceX launched a reusable Falcon 9 booster for a 20th flight. A few miles away at Cape Canaveral, Boeing and United Launch Alliance completed one of the final steps before the first crew launch of the Starliner spacecraft. But I think one of the most interesting things that happened was NASA's decision to ask the space industry for more innovative ideas on how to do Mars Sample Return. I have no doubt that space companies will come up with some fascinating concepts, and I can't wait to hear about them.

As always, we welcome reader submissions, and if you don't want to miss an issue, please subscribe using the box below (the form will not appear on AMP-enabled versions of the site). Each report will include information on small-, medium-, and heavy-lift rockets, as well as a quick look ahead at the next three launches on the calendar.

Going vertical Down Under. Gilmour Space has raised its privately developed Eris rocket vertical on a launch pad in North Queensland for the first time, the Australian Broadcasting Corporation reports. This milestone marks the start of the next phase of launch preparations for Eris, a three-stage rocket powered by hybrid engines. If successful, Eris would become the first Australian-built rocket to reach orbit. Gilmour says the maiden flight of Eris is scheduled for no earlier than May 4, pending launch permit approvals. This presumably refers to a commercial launch license from the Australian government.

Enlarge / Technicians inside United Launch Alliance's Vertical Integration Facility connect Boeing's Starliner spacecraft to the top of its Atlas V rocket Tuesday. (credit: United Launch Alliance)

Ground teams on Florida's Space Coast hoisted Boeing's Starliner spacecraft atop its United Launch Alliance Atlas V rocket this week, putting all the pieces in place for liftoff next month with two veteran NASA astronauts on a test flight to the International Space Station.

This will be the first time astronauts fly on Boeing's Starliner crew capsule, following two test flights without crew members in 2019 and 2022. The Starliner Crew Flight Test (CFT) next month will wrap up a decade and a half of development and, if all goes well, will pave the way for operational Starliner missions to ferry crews to and from the space station.

Starliner is running years behind schedule and over budget. SpaceX's Crew Dragon spacecraft has flown all of NASA's crew rotation missions to the station since its first astronaut flight in 2020. But NASA wants to get Boeing's spacecraft up and running to have a backup to SpaceX. It would then alternate between Starliner and Crew Dragon for six-month expeditions to the station beginning next year.

Enlarge / Ed Dwight stands in front of an F-104 jet fighter in 1963. (credit: Bettmann Archive/Getty Images)

Welcome to Edition 6.38 of the Rocket Report! Ed Dwight was close to joining NASA's astronaut corps more than 60 years ago. With an aeronautical engineering degree and experience as an Air Force test pilot, Dwight met the qualifications to become an astronaut. He was one of 26 test pilots the Air Force recommended to NASA for the third class of astronauts in 1963, but he wasn't selected. Now, the man who would have become the first Black astronaut will finally get a chance to fly to space.

As always, we welcome reader submissions, and if you don't want to miss an issue, please subscribe using the box below (the form will not appear on AMP-enabled versions of the site). Each report will include information on small-, medium-, and heavy-lift rockets, as well as a quick look ahead at the next three launches on the calendar.

Ed Dwight named to Blue Origin's next human flight. Blue Origin, Jeff Bezos' space company, announced Thursday that 90-year-old Ed Dwight, who almost became the first Black astronaut in 1963, will be one of six people to fly to suborbital space on the company's next New Shepard flight. Dwight, a retired Air Force captain, piloted military fighter jets and graduated test pilot school, following a familiar career track as many of the early astronauts. He was on a short list of astronaut candidates the Air Force provided NASA, but the space agency didn't include him. It took 20 more years for the first Black American to fly to space. Dwight's ticket with Blue Origin is sponsored by Space for Humanity, a nonprofit that seeks to expand access to space for all people. Five paying passengers will join Dwight for the roughly 10-minute up-and-down flight to the edge of space over West Texas. Kudos to Space for Humanity and Blue Origin for making this happen.

Enlarge / United Launch Alliance's final Delta IV Heavy rocket, seen here in December when ground crews rolled it to the launch pad at Cape Canaveral Space Force Station, Florida. (credit: United Launch Alliance)

This is the rocket that literally lights itself on fire before it heads to space. It's the world's largest rocket entirely fueled by liquid hydrogen, a propellant that is vexing to handle but rewarding in its efficiency.

The Delta IV Heavy was America's most powerful launch vehicle for nearly a decade and has been a cornerstone for the US military's space program for more than 20 years. It is also the world's most expensive commercially produced rocket, a fact driven not just by its outsize capability but also its complexity.

Now, United Launch Alliance's last Delta IV Heavy rocket is set to lift off Thursday from Cape Canaveral Space Force Station, Florida, with a classified payload for the National Reconnaissance Office, the US government's spy satellite agency.

• 

  This is one of the Panasonic Avionics Astrova in-flight entertainment systems, set to debut in Icelandair, Qantus, and United Airlines flights in the next couple of years. [credit: Panasonic ]

Flying on commercial airlines today might be a lot more of a pain than it used to be, but new tech is going to bring some improvement to one part of the experience—in-flight entertainment. Panasonic Avionics' brand Astrova in-flight entertainment systems are starting to roll out on commercial flights on certain airlines, promising 4K HDR TVs and other features to the backs of seats that should be a huge upgrade over the abysmal screens we normally watch in-flight movies on.

Look at most commercial airlines today, and you'll find a tiny, terrible LCD TV embedded in the seat in front of you. These HD, standard dynamic range screens have terrible contrast and poor viewing angles, and they aren't bright enough to achieve a good viewing experience when the overhead lights are on.

They're bad enough that I always bring my own hardware for flights—most recently, I took three flights with Apple's Vision Pro headset, which I plan to write about later this week. But most people just bring a tablet.

Enlarge / The United Nations building in New York. (credit: Getty Images)

On Thursday, the United Nations General Assembly unanimously consented to adopt what some call the first global resolution on AI, reports Reuters. The resolution aims to foster the protection of personal data, enhance privacy policies, ensure close monitoring of AI for potential risks, and uphold human rights. It emerged from a proposal by the United States and received backing from China and 121 other countries.

Being a nonbinding agreement and thus effectively toothless, the resolution seems broadly popular in the AI industry. On X, Microsoft Vice Chair and President Brad Smith wrote, "We fully support the @UN's adoption of the comprehensive AI resolution. The consensus reached today marks a critical step towards establishing international guardrails for the ethical and sustainable development of AI, ensuring this technology serves the needs of everyone."

The resolution, titled "Seizing the opportunities of safe, secure and trustworthy artificial intelligence systems for sustainable development," resulted from three months of negotiation, and the stakeholders involved seem pleased at the level of international cooperation. "We're sailing in choppy waters with the fast-changing technology, which means that it's more important than ever to steer by the light of our values," one senior US administration official told Reuters, highlighting the significance of this "first-ever truly global consensus document on AI."

Enlarge (credit: Getty | Bloomberg)

As health systems around the US are still grappling with an unprecedented ransomware attack on the country's largest health care payment processor, the US Department of Health and Human Services is opening an investigation into whether that processor and its parent company, UnitedHealthcare Group, complied with federal rules to protect private patient data.

The attack targeted Change Healthcare, a unit of UnitedHealthcare Group (UHG) that provides financial services to tens of thousands of health care providers around the country, including doctors, dentists, hospitals, and pharmacies. According to an antitrust lawsuit brought against UHG by the Department of Justice in 2022, 50 percent of all medical claims in the US pass through Change Healthcare's electronic data interchange clearinghouse. (The DOJ lost its case to prevent UHG's acquisition of Change Healthcare and last year abandoned plans for an appeal.)

As Ars reported previously, the attack was disclosed on February 21 by UHG's subsidiary, Optum, which now runs Change Healthcare. On February 29, UHG accused the notorious Russian-speaking ransomware gang known both as AlphV and BlackCat of being responsible. According to The Washington Post, the attack involved stealing patient data, encrypting company files, and demanding money to unlock them. The result is a paralysis of claims processing and payments, causing hospitals to run out of cash for payroll and services and preventing patients from getting care and prescriptions. Additionally, the attack is believed to have exposed the health data of millions of US patients.

Enlarge / The Alabama State Capitol in Montgomery, Alabama, on Wednesday, Feb. 28, 2024. (credit: Getty | Andi Rice)

Alabama lawmakers on Wednesday hastily passed a bill to provide some civil and criminal immunity to patients and health care providers using in vitro fertilization. The bill, signed into law by Governor Kay Ivey within the hour of its passing, comes into play in the event that embryos—which were recently ruled to be "children" by the state's Supreme Court—are damaged or destroyed, a standard and common occurrence in fertility treatment.

The new protections are intended to restore IVF treatment in Alabama after the state Supreme Court's ruling last month led at least three major IVF providers and one embryo shipping company to suddenly halt aspects of their work in fear of liability for wrongful death lawsuits. People going through the arduous and costly process of IVF were then abruptly denied the very time-sensitive treatments needed to try to grow their families. The ruling drew outcry from around the state and across the nation.

IVF is a type of assisted reproductive technology that involves fertilizing painstakingly harvested eggs with sperm in a lab setting, allowing the fertilized eggs to develop into embryos, and then either transferring a limited number of them into a uterus at a key time in hopes of implantation or freezing them for later use. Not all fertilized eggs develop into viable embryos, and any embryos that are unviable or unneeded are routinely discarded.

Enlarge / SpaceX's fully stacked Starship rocket and Super Heavy booster on a launch pad in South Texas. (credit: SpaceX)

One of the largest launch pads at Cape Canaveral Space Force Station will become vacant later this year after the final flight of United Launch Alliance's Delta IV Heavy rocket. SpaceX is looking to make the sprawling facility a new home for the Starship launch vehicle.

The environmental review for SpaceX's proposal to take over Space Launch Complex 37 (SLC-37) at Cape Canaveral is getting underway now, with three in-person public meetings and one virtual meeting scheduled for March to collect comments from local residents, according to a new website describing the plan.

Then, federal agencies, led by the Department of the Air Force, will develop an environmental impact statement to evaluate how Starship launch and landing operations will affect the land, air, and water around SLC-37, which sits on Space Force property on the Atlantic coastline.

Enlarge / A nursing home resident is pushed along a corridor by a nurse. (credit: Getty | Marijan Murat)

Health insurance companies cannot use algorithms or artificial intelligence to determine care or deny coverage to members on Medicare Advantage plans, the Centers for Medicare & Medicaid Services (CMS) clarified in a memo sent to all Medicare Advantage insurers.

The memo—formatted like an FAQ on Medicare Advantage (MA) plan rules—comes just months after patients filed lawsuits claiming that UnitedHealth and Humana have been using a deeply flawed AI-powered tool to deny care to elderly patients on MA plans. The lawsuits, which seek class-action status, center on the same AI tool, called nH Predict, used by both insurers and developed by NaviHealth, a UnitedHealth subsidiary.

According to the lawsuits, nH Predict produces draconian estimates for how long a patient will need post-acute care in facilities like skilled nursing homes and rehabilitation centers after an acute injury, illness, or event, like a fall or a stroke. And NaviHealth employees face discipline for deviating from the estimates, even though they often don't match prescribing physicians' recommendations or Medicare coverage rules. For instance, while MA plans typically provide up to 100 days of covered care in a nursing home after a three-day hospital stay, using nH Predict, patients on UnitedHealth's MA plan rarely stay in nursing homes for more than 14 days before receiving payment denials, the lawsuits allege.

White Knight Two carries the first SpaceShipTwo during a glide test. (credit: Virgin Galactic)

Virgin Galactic reported an anomaly on its most recent flight, Galactic 06, which took place 12 days ago from a spaceport in New Mexico.

In a statement released Monday, the company said it discovered a dropped pin during a post-flight review of the mission, which carried two pilots and four passengers to an altitude of 55.1 miles (88.7 km).

This alignment pin, according to Virgin Galactic, helps ensure the VSS Unity spaceship is aligned to its carrier aircraft when mating the vehicles on the ground during pre-flight procedures. The company said the alignment pin and a shear pin fitting assembly performed as designed during the mated portion of the flight, and only the alignment pin detached after the spaceship was released from the mothership.

Enlarge

Apple is "deeply concerned" that proposed changes to a United Kingdom law could give the UK government unprecedented power to "secretly veto" privacy and security updates to its products and services, the tech giant said in a statement provided to Ars.

If passed, potentially this spring, the amendments to the UK's Investigatory Powers Act (IPA) could deprive not just UK users, but all users globally of important new privacy and security features, Apple warned.

"Protecting our users’ privacy and the security of their data is at the very heart of everything we do at Apple," Apple said. "We’re deeply concerned the proposed amendments" to the IPA "now before Parliament place users' privacy and security at risk."

Enlarge (credit: Unity)

When Unity laid off 265 Weta Digital engineers in November, the company warned that more layoffs would be necessary in the near future as part of a plan to "refocus" on the company's core game engine business. A large chunk of those changes became real on Monday as the Unity Engine maker told the SEC that "it plans to reduce approximately 1,800 employee roles, or approximately 25% of its current workforce."

"This decision was not taken lightly, and we extend our deepest gratitude to those affected for their dedication and contributions," Unity Director of PR Kelly Ekins said in a statement to The Verge. Ekins added that the layoffs will be spread across "all teams," and a company spokesperson told Reuters that this round of layoffs will be complete by March, with additional internal changes coming thereafter.

The massive staffing cuts come after over 1,300 layoffs already implemented across the company in multiple waves since June 2022 (including those November Weta Digital cuts). Despite that, Unity's statement to the SEC says these further cuts are necessary "to position [the company] for long-term and profitable growth."

Enlarge / The first Vulcan rocket fires off its launch pad in Florida. (credit: United Launch Alliance)

CAPE CANAVERAL, Florida—Right out of the gate, United Launch Alliance's new Vulcan rocket chased perfection.

The Vulcan launcher hit its marks after lifting off from Florida's Space Coast for the first time early Monday, successfully deploying a commercial robotic lander on a journey to the Moon and keeping ULA's unblemished success record intact.

"Yeehaw! I am so thrilled, I can’t tell you how much!" exclaimed Tory Bruno, ULA's president and CEO, shortly after Vulcan's departure from Cape Canaveral. "I am so proud of this team. Oh my gosh, this has been years of hard work. So far, this has been an absolutely beautiful mission."

Enlarge / The Moon sets over sandstone formations on the Navajo Nation. (credit: David McNew/Getty Images)

Science instruments aren't the only things hitching a ride to the Moon on a commercial lunar lander that is ready for launch on Monday. Two companies specializing in "space burials" are also sending cremated human remains to the Moon, and this doesn't sit well with the Navajo Nation.

The Navajo people, one of the nation's largest indigenous groups, hold the Moon sacred, and putting human remains on the lunar surface amounts to desecration, according to Navajo Nation President Buu Nygren.

"The sacredness of the Moon is deeply embedded in the spirituality and heritage of many Indigenous cultures, including our own," Nygren said in a statement. "The placement of human remains on the Moon is a profound desecration of this celestial body revered by our people."

• 

  United Launch Alliance's first Vulcan rocket prepares to emerge from the Vertical Integration Facility at Cape Canaveral Space Force Station in Florida. [credit: United Launch Alliance ]

CAPE CANAVERAL, Fla.—United Launch Alliance's first Vulcan rocket emerged from its hangar Friday for a 30-minute trek to its launch pad in Florida, finally moving into the starting blocks after a decade of development and testing.

This was the first time anyone had seen the full-size 202-foot-tall (61.6-meter) Vulcan rocket in its full form. Since ULA finished assembling the rocket last month, it has been cocooned inside the scaffolding of the company's vertical hangar at Cape Canaveral Space Force Station.

On Friday, ULA's ground crew rolled the Vulcan rocket and its mobile launch platform to its seaside launch pad. It was one of the last steps before the Vulcan rocket is cleared for liftoff Monday at 2:18 am EST (07:18 UTC). On Sunday afternoon, ULA engineers will gather inside a control center at Cape Canaveral to oversee an 11-hour countdown, when the Vulcan rocket will be loaded with methane, liquid hydrogen, and liquid oxygen propellants.

Enlarge / United Launch Alliance's first Vulcan rocket stands 202 feet (61.6 meters) tall with the addition of its payload fairing. (credit: United Launch Alliance)

United Launch Alliance's first Vulcan rocket has been fully assembled at Cape Canaveral, Florida, in preparation for its inaugural flight next month.

Technicians hoisted the Vulcan rocket's payload fairing, containing a commercial lunar lander from Astrobotic, on top of the launch vehicle Wednesday morning at ULA's Vertical Integration Facility. This milestone followed the early morning transfer of the payload fairing from a nearby facility where Astrobotic's lunar lander was fueled for its flight to the Moon.

ULA's new rocket has rolled between its vertical hangar and the launch pad at Cape Canaveral Space Force Station several times for countdown rehearsals and fueling tests. But ULA only needed the Vulcan rocket's first stage and upper stage to complete those tests. The addition of the payload shroud Wednesday marked the first time ULA has fully stacked a Vulcan rocket, standing some 202 feet (61.6 meters) tall, still surrounded by scaffolding and work platforms inside its assembly building.

Enlarge / Signage is displayed outside the Humana Inc. office building in Louisville, Kentucky, US, in 2016. (credit: Getty | Luke Sharrett)

Humana, one the nation's largest health insurance providers, is allegedly using an artificial intelligence model with a 90 percent error rate to override doctors' medical judgment and wrongfully deny care to elderly people on the company's Medicare Advantage plans.

According to a lawsuit filed Tuesday, Humana's use of the AI model constitutes a "fraudulent scheme" that leaves elderly beneficiaries with either overwhelming medical debt or without needed care that is covered by their plans. Meanwhile, the insurance behemoth reaps a "financial windfall."

The lawsuit, filed in the US District Court in western Kentucky, is led by two people who had a Humana Medicare Advantage Plan policy and said they were wrongfully denied needed and covered care, harming their health and finances. The suit seeks class-action status for an unknown number of other beneficiaries nationwide who may be in similar situations. Humana provides Medicare Advantage plans for 5.1 million people in the US.

Enlarge (credit: Getty Images)

Hundreds of Windows and Linux computer models from virtually all hardware makers are vulnerable to a new attack that executes malicious firmware early in the boot-up sequence, a feat that allows infections that are nearly impossible to detect or remove using current defense mechanisms.

The attack—dubbed LogoFAIL by the researchers who devised it—is notable for the relative ease in carrying it out, the breadth of both consumer- and enterprise-grade models that are susceptible, and the high level of control it gains over them. In many cases, LogoFAIL can be remotely executed in post-exploit situations using techniques that can’t be spotted by traditional endpoint security products. And because exploits run during the earliest stages of the boot process, they are able to bypass a host of defenses, including the industry-wide Secure Boot, Intel’s Secure Boot, and similar protections from other companies that are devised to prevent so-called bootkit infections.

Game over for platform security

LogoFAIL is a constellation of two dozen newly discovered vulnerabilities that have lurked for years, if not decades, in Unified Extensible Firmware Interfaces responsible for booting modern devices that run Windows or Linux. The vulnerabilities are the product of almost a year’s worth of work by Binarly, a firm that helps customers identify and secure vulnerable firmware.

Enlarge (credit: Aurich Lawson | Getty Images)

AI face detection now counts among the tools that could be used to help adult sites effectively estimate UK user ages and block minors from accessing pornography, the UK's Office of Communications (Ofcom) said in a press release on Tuesday.

The only foreseeable problem, Ofcom noted: There's little evidence that the AI method of age estimation will be fair, reliable, or effective.

The UK's legal age to watch porn is 18. To enforce that restriction, under the Online Safety Act, Ofcom will soon require all apps and sites displaying adult content to introduce so-called "age assurance" systems that verify and/or estimate user ages. Sites and apps risk potential fines if they fail to "ensure that children are not normally able to encounter pornography on their service."

Enlarge / Risk of Rain was the work of two college students and GameMaker. (credit: Gearbox Publishing)

Up until this year, game engines were not something most gamers had to give much thought to beyond the one or two seconds their logos might appear while a game was loading.

That changed this fall when popular pick Unity went from a remarkable anybody-can-make-a-game tool to a developer-enraging, threat-generating, CEO-resignation mess. CD Projekt Red, maker of The Witcher and Cyberpunk 2077, made a point of stating that its next games would be built with the Unreal Engine, not its in-house REDengine. After Cities: Skylines 2 launched with notably rough performance, deep decompilation analysis found a bunch of seemingly Unity-related, or at least Unity-adjacent, issues.

That's why this news about another big change in a popular game engine is so striking: it's generally good. GameMaker (formerly Game Maker Studio), a 2D engine that was acquired by browser firm Opera in 2021, has simplified its licensing structure, declaring it "Free for Non-Commercial Use."

Enlarge (credit: Paradox Interactive)

The worst thing about Cities: Skylines 2 is that it was recently released.

If this hugely ambitious city-builder simulation would have been released some time ago, patched over and over again, and updated with some gap-filling DLC, it would be far better off. It could be on its slow-burn second act, like No Man’s Sky, Cyberpunk 2077, or Final Fantasy XIV. It could have settled into a disgruntled-but-still-invested player base, like Destiny 2 or Overwatch 2. Or its technical debts could have been slowly paid off to let its underlying strengths come through, as with Disco Elysium or The Witcher 3.

But Cities: Skylines 2 (C:S2) is regrettably available now in its current state. It has serious performance problems, both acknowledged by its 30-odd-employee developer Colossal Order and studied in-depth by others (which we’ll get into). It has a rough-draft look when compared to its predecessor, which has accumulated eight years of fixes, DLC, and mods to cover a dizzying array of ideas. Worst of all, it was highly anticipated by fans, some of whom have high-end systems that still can't properly run the sluggish game.

Enlarge / UnitedHealthcare (UHC) health insurance company signage is displayed on an office building in Phoenix on July 19, 2023. (credit: Getty | Patrick Fallon)

UnitedHealthcare, the largest health insurance company in the US, is allegedly using a deeply flawed AI algorithm to override doctors' judgments and wrongfully deny critical health coverage to elderly patients. This has resulted in patients being kicked out of rehabilitation programs and care facilities far too early, forcing them to drain their life savings to obtain needed care that should be covered under their government-funded Medicare Advantage Plan.

That's all according to a lawsuit filed this week in the US District Court for the District of Minnesota. The lawsuit is brought by the estates of two deceased people who were denied health coverage by UnitedHealth. The suit also seeks class-action status for similarly situated people, of which there may be tens of thousands across the country.

The lawsuit lands alongside an investigation by Stat News that largely backs the lawsuit's claims. The investigation's findings stem from internal documents and communications the outlet obtained, as well as interviews with former employees of NaviHealth, the UnitedHealth subsidiary that developed the AI algorithm called nH Predict.

Enlarge

Intel on Tuesday pushed microcode updates to fix a high-severity CPU bug that has the potential to be maliciously exploited against cloud-based hosts.

The flaw, affecting virtually all modern Intel CPUs, causes them to “enter a glitch state where the normal rules don’t apply,” Tavis Ormandy, one of several security researchers inside Google who discovered the bug, reported. Once triggered, the glitch state results in unexpected and potentially serious behavior, most notably system crashes that occur even when untrusted code is executed within a guest account of a virtual machine, which, under most cloud security models, is assumed to be safe from such faults. Escalation of privileges is also a possibility.

Very strange behavior

The bug, tracked under the common name Reptar and the designation CVE-2023-23583, is related to how affected CPUs manage prefixes, which change the behavior of instructions sent by running software. Intel x64 decoding generally allows redundant prefixes—meaning those that don’t make sense in a given context—to be ignored without consequence. During testing in August, Ormandy noticed that the REX prefix was generating “unexpected results” when running on Intel CPUs that support a newer feature known as fast short repeat move, which was introduced in the Ice Lake architecture to fix microcoding bottlenecks.

Enlarge (credit: Getty Images)

Six weeks of targeted strikes by the United Auto Workers has proved to be an effective approach. Ford, Stellantis, and General Motors have all reached tentative agreements with the UAW over the past 10 days. Now, the union wants to focus its attention on automakers like Toyota and Tesla, who have resisted unionization or opened plants in right-to-work states that are hostile to collective bargaining.

The UAW began strike action at three car factories in mid-September, the first time in the union's history that it initiated industrial action against all three of the big US automakers simultaneously.

After watching years of executive pay raise largesse, the union asked for a 36 percent pay increase spread over four years, the return of cost-of-living adjustments, and the return of defined-benefit pensions. Among other demands was an end to the two-tiered system of hiring some employees as temporary workers, which meant that people hired after 2007 could be paid half as much as someone doing the same job hired before that practice was instituted.

Enlarge (credit: NurPhoto / Contributor | NurPhoto)

After researchers flagged verified users on X (formerly known as Twitter) as top superspreaders of Israel/Hamas misinformation and the European Union launched a probe into X, Elon Musk has vowed to get verified X users back in check.

On Sunday, Musk announced that "any posts that are corrected by @CommunityNotes"—X's community-sourced fact-checking feature—will "become ineligible for revenue share."

"The idea is to maximize the incentive for accuracy over sensationalism," Musk said, warning that "any attempts to weaponize @CommunityNotes to demonetize people will be immediately obvious, because all code and data is open source."

Enlarge / A Long March 2F rocket climbed into space Thursday with a three-man crew heading for China's Tiangong space station. (credit: Pedro Pardo/AFP via Getty Images)

Welcome to Edition 6.17 of the Rocket Report! Two Asian powers notched achievements in their human spaceflight programs this week. In China, three astronauts launched to begin a six-month expedition on the Tiangong space station. With this mission, China is settling into a routine of operations on the Tiangong complex. Elsewhere in Asia, India took strides toward launching its own astronauts with a successful test of a launch abort system for the country's Gaganyaan spacecraft, which could fly people into low-Earth orbit in 2025. This is welcome news for US officials because India could help offer a counterweight to China's dominance (among Asian countries) in spaceflight.

As always, we welcome reader submissions, and if you don't want to miss an issue, please subscribe using the box below (the form will not appear on AMP-enabled versions of the site). Each report will include information on small-, medium-, and heavy-lift rockets, as well as a quick look ahead at the next three launches on the calendar.

India tests escape system for human-rated crew capsule. India aced the first in-flight test of the crew escape system for the country's Gaganyaan spacecraft Saturday, Ars reports. With this flight, India tested the set of rocket motors and parachutes that would propel the spacecraft away from a failing launch vehicle, a dramatic maneuver that would save the lives of everyone on board. An unpressurized version of the Gaganyaan capsule launched, without anyone aboard, on top of a single-stage liquid-fueled rocket. About a minute later, soon after the rocket surpassed the speed of sound, the vehicle triggered the abort maneuver, and the capsule separated from the booster to parachute into the sea. By all accounts, Indian officials were thrilled with the outcome of the test flight.

Enlarge / Tory Bruno, ULA's chief executive, inside the company's rocket factory in Decatur, Alabama. (credit: Cameron Carnes for The Washington Post via Getty Images)

It sure sounds like United Launch Alliance is up for sale. Tory Bruno, the rocket builder's CEO, said this week that anyone who purchased ULA would reap the rewards of the company's "transformation" over the last few years, a course change primarily driven by geopolitics and the competitive threat of SpaceX.

While Bruno did not disclose details of any negotiations about a potential sale of ULA, he told Bloomberg News this week that the launch operator is primed for a buyer. Boeing and Lockheed Martin each have a 50 percent stake in the Colorado-based rocket company.

“If I were buying a space business, I’d go look at ULA,” Bruno said. “It’s already had all the hard work done through the transformation. You’re not buying a Victorian with bad plumbing. It’s all been done. You’re coming in at the end of the remodel, so you can focus on your future."

Enlarge / A push for more IronSource customers may have been a major motivation behind Unity's controversial install-fee proposals (credit: Unity)

It's been over a month now since Unity partially backtracked on its controversial proposed "pay per install" fee structure, a trust-destroying saga that seems to have contributed to the retirement of Unity CEO John Riccitiello. Now, a new report highlights some of the internal divisions over the "rushed-out" policy introduction and provides new insight into what may have been motivating the company to even attempt such a plan.

Business-focused site MobileGamer.biz cites multiple "sources from inside Unity and across the mobile games business" in reporting that Unity received some significant pushback from senior-level managers before rolling out its initial fee-restructuring plans. "Half of the people in that meeting said that this model is too complicated, it’s not going to be well-received, and we should talk to people before we do this," one anonymous source told the site. "It felt very rushed. We had this meeting and were told it was happening, but we were not told a date. And then before we knew it, it was out there."

After the negative reaction to that initial plan, Unity reportedly considered a modification that would take up to 4 percent of revenue from the largest Unity publishers—slightly under the 5 percent charged by the Unreal Engine. The final policy knocked that cap down to 2.5 percent only after the extent of the backlash became clear.

Enlarge / The first stage for ULA's Vulcan rocket was lifted onto its launch platform at Cape Canaveral in January. (credit: United Launch Alliance)

Three days at Christmastime will be the final chance for United Launch Alliance to get its new Vulcan rocket off the ground this year, the company's chief executive announced Tuesday.

Still waiting for delivery of an upper stage and a final round of qualification testing following a test mishap earlier this year, Tory Bruno, ULA's CEO, told CNBC on Tuesday that the Vulcan rocket's first demonstration flight is scheduled for launch December 24. There are two backup launch dates available December 25 and 26; otherwise, the launch will have to wait until January.

If the Vulcan rocket's first flight happens on one of these dates, the launch will be at night, Bruno posted on the social media platform X.

Enlarge / Unity developers won't have John Riccitiello to kick around anymore. (credit: Getty Images)

Following weeks of controversy, partial walkbacks, and apologies surrounding a new fee-based business structure for the Unity engine, game developers and financial markets have responded overwhelmingly positively to the recent news of Unity CEO John Riccitiello's sudden retirement. But that departure may not be enough to restore trust for many developers who have already moved on to other engines.

"Long, long overdue," Gloomwood developer Dillon Rogers wrote, summing up joyful reactions to Riccitiello's departure from across the game development community.

Necrosoft Games' Brandon Sheffield (Demonschool), who was one of the most outspoken critics of Unity's initial install-fee plans, wrote on social media that he "truly did not think [Riccitiello's departure] would happen." The CEO's apparent ouster "is the main thing Unity needed to do to start rebuilding trust, so... it's a start," Sheffield continued.

Enlarge / Former Unity CEO John Riccitiello. (credit: Unity)

John Riccitiello, CEO of Unity, the company whose 3D game engine had recently seen backlash from developers over proposed fee structures, will retire as CEO, president, and board chairman at the company, according to a press release issued late on a Monday afternoon, one many observe as a holiday.

Riccitiello "will continue to advise Unity to ensure a smooth transition," the company stated, as it seeks to find a permanent CEO. James M. Whitehurst, a former Red Hat and IBM executive, will serve as interim CEO, while Roelof Botha, lead independent director of the Unity board, is now chairman.

“It’s been a privilege to lead Unity for nearly a decade and serve our employees, customers, developers and partners, all of whom have been instrumental to the Company’s growth,” Riccitiello said. “I look forward to supporting Unity through this transition and following the Company’s future success.”

Enlarge / United Launch Alliance's Atlas V rocket climbs away from its launch pad at Cape Canaveral Space Force Station, Florida, with Amazon's first two Kuiper satellites. (credit: United Launch Alliance)

The first two prototype satellites for Amazon's broadband network launched Friday from Florida, the first in a series of at least 77 rocket launches the retail giant has booked over the next six years to deploy a fleet of more than 3,200 spacecraft to rival SpaceX's Starlink system.

These first two satellites for Amazon's $10 billion Internet megaconstellation, called Project Kuiper, took off on top of a United Launch Alliance Atlas V rocket from Cape Canaveral Space Force Station in Florida at 2:06 pm EDT (18:06 UTC).

On its 99th flight, ULA's Atlas V rocket fired a Russian-made RD-180 engine and thundered off the launch pad, heading east from the Florida coastline over the Atlantic Ocean. The kerosene-fueled engine—flying without the aid of solid rocket boosters on this flight—fired more than four minutes, then a hydrogen-burning engine on the rocket's Centaur upper stage took over for a 10-minute burn to reach a targeted 311-mile-high (500-kilometer) orbit.