Last week, Secretary of War Pete Hegseth announced the Pentagon would livestream the execution of convicted killer Nidal Hasan. Today, Trump said the execution would move forward but that it wouldn’t be livestreamed. But the propaganda damage is already done. Experts who watch terrorist spaces online told 404 Media that Hasan is already turning up in memes, videos, and recruitment material for groups like Al Qaeda.

Hasan—a former US Army Major who had once attempted to contact Al Qaeda—killed 13 people and injured 32 others at Fort Hood in 2009. He was shot and captured at the scene and later sentenced to death. Hegseth’s plan to livestream Hasan’s execution and the furor around it brought Hasan and his crimes back into the spotlight 17 years later. Hasan has mostly been a forgotten figure in Islamist and extremist circles, but is now once again a fixture of their propaganda.

“It's already started,” Moustafa Ayad, research chair in global Islamism and counter-terrorism at the Institute for Strategic Dialogue, told 404 Media. “We're already seeing edited videos in support of Nidal Hasan, and they're specifically based around how he's a martyr and that his legacy lives on.”

In one image Ayad shared with 404 Media, Al-Qaeda in the Arabian Peninsula (AQAP) referred to Hasan as a “heroic mujahid brother” then quoted Osama Bin Laden. “The day America makes this decision, it will have made a decision to execute whoever among you falls captive.” 

According to Ayad, an Al Qaeda affiliated propaganda group made Hasan the feature of its newsletter last Friday. “So it's being viewed in that sense already in these ecosystems as he is a hero, and it's going to be used for recruitment and potentially galvanizing inspiration,” Ayad said. “We're talking about a guy who hasn't really been referenced since 2017 really or that much at all. So it has reignited conversations around his attack, how quote unquote glorious it was, and is being used as a means to to recruit people in some shape or form, and will continue to do so.

Ayad also described "rampage" edits of Hasan that are floating around extremists circles online that show footage of Hasan dancing over a number that represents how many people he killed. “You have fed the wolves,” he said. “They now have a thing they can latch on to.” In one TikTok edit viewed by 404 Media, a picture of Hasan with laser eyes throbbed to the beat of electronic music.

He added that he thinks the memes and videos are being made by younger people. “I don't think an established guy who remembers the Nadal Hassan attack is going to then go: ‘You know what makes sense? Putting out a dancing Nidal Hasan over his kill count.’ I don't think some 35-year-old dude is doing that,” he said. “You have a younger generation that is now attuned to what he did.”

Livestreaming the public execution would have given propagandists more to work with. Online nihilists, gore groups, and Islamists often use footage of death and violence to lure in young people. “Dead ideologues are continually being revered, lionized in ecosystems in support of  groups like Al Qaeda, the Islamic State, or any terrorist group,” Ayad said. “If you look at the saint ecosystems around accelerationism, it's a similar thing in which these individuals are the vanguard of jihad.”

Mass shooters and ideological killers that receive widespread media attention become objects of fascination online. They enter a cannon of sainted killers, totems that inspire others to commit the same acts. Some researchers have suggested news agencies should report a shooter’s crimes but refrain from naming and showing them, thus depriving them of notoriety and stemming the social contagion.

Hasan killed people almost twenty years ago and he was destined to fall out of memory until Hegseth attempted to make a spectacle of his death. “We’re already seeing it being incorporated into talking points, we’re past that,” Ayad said.

“He is still going to be labeled a martyr," Ayad added. “Will it be a public spectacle? Not anymore [...] but terror groups and their supporters took advantage of the news to highlight just how much of a contribution Nidal Hasan made to their respective movements.”

Consulting giant Accenture has told many employees that the company will now only spend $29 a month per person on Claude. Employees subject to the cap, some of whom had been spending as much as $1,000 monthly, are scrambling to find ways to make sure they can keep spending as much as they already are.

The news is a snapshot of what continues to play out across all sorts of industries: companies have spent heavily on AI tools, and are now discovering that many users are burning or “chewing” through AI tokens at a rapid clip. In response, many companies have curbed their employees’ AI use. There is a special irony to Accenture doing much of the same, when it is a company that has encouraged its clients to invest heavily into AI.

A website that was dedicated to the human endeavor of reverse engineering, “decompiling,” and modifying video games is shutting down because people using AI to clone and decompile games have fully overrun the community and are far outpacing what human software engineers alone can do. The news comes as AI-coded “clones” of popular enterprise software like the Adobe creative suite and Microsoft Office have gone viral and are seemingly popping up every day, and as people in video game modding communities warn that 'AI decomps' are everywhere. 

The website decomp.dev said Thursday that it is shutting down because “the community aspect of decompilation has been broken” by AI, and that projects that once required intense collaboration between people with different skills can now be done trivially with AI. The administrator of the website said that it has become impossible to keep track of which projects are primarily human-led and which ones are done by AI.

“Historically, matching decompilation has been a brutally difficult, time consuming task, on the scale of years for any moderately-sized game with a number of active contributors,” the pseudonymous admin of decomp.dev, who goes by Encounter, wrote on the site. 

But recent frontier AI models like GPT-6-Astra have made it trivially easy to decompile a game: “They are significantly better at following complex directions, cross-referencing resources for symbols or debug information, and writing natural code with enough guidance,” Encounter wrote. “It is now clear that, with the right guidance, human input, and code reviews, AI can expedite the decompilation process in a significant way. What is also now clear is that the community aspect of decompilation has been broken.”

There is a lot of stuff about how creepy ad targeting is in today’s newsletter. Our first story is one I did, about how advertisers — or really anyone with 5 minutes on their hands — can inject ads into your ChatGPT session based on your phone number or email address. This is pretty normal in the advertising world, but I seriously doubt that when most of ChatGPT’s many, many users see an ad, they realize that might be because someone, somewhere, uploaded their phone number into OpenAI’s systems. I made my own ad on ChatGPT (without using peoples’ personal data) to test out the system. Then, in other news, there is new research confirming, I think for the first time, that online ads are being used to deliver zero-click mercenary malware against targets.

OpenAI lets anyone inject ads into ChatGPT users’ sessions, targeting specific groups of people based on their email address, phone number, or a unique identifier on their phone, according to 404 Media’s own tests of ChatGPT’s advertising ecosystem.

While the ad targeting available in ChatGPT is somewhat standard practice across the advertising industry, the chatbot’s one billion monthly active users may not understand they, in some cases, are being specifically targeted because of their personal data the advertiser has uploaded to OpenAI. ChatGPT’s ad targeting is also novel in that it is also based on the prompts users enter into the chatbot, prompts that users may assume are private but which, as 404 Media has previously shown, may be reviewed by humans. Or in this case, used for ad targeting purposes.

Ukrainian drones hit Russia’s largest data center on Wednesday. This was Ukraine’s fourth strike on Russian data centers in the past week and confirmation of a new reality of war: data centers are valuable enemy assets and they will be targeted.

In 2006, British economist Clive Humby declared “data is the new oil,” and big tech adopted the metaphor. Twenty years later, a dark side of the truism has been revealed. If the places where oil is refined are valuable targets in a war then so, too, are the places where data is refined. We’ve seen this not just in the Russia-Ukraine war, but also with Iran hitting Amazon Web Services data centers in Dubai in retaliation for America’s strikes on the country. 

Ukrainian President Volodymyr Zelenskyy confirmed strikes on Russian data centers and oil refineries in a post on X and called them a “symmetrical response" to Russian aggression. Here we have oil and data together again, not as a metaphor in an economics lecture, but in the pronouncement of a world leader defending his country. conducting a war.

Three of Ukraine’s strikes hit data centers that belonged to Yandex, Russia’s Google-equivalent, and damaged the company’s supercomputers that housed some of its AI models. The latest attack hit a data center operated by Sberbank, Russia’s largest bank. It’s too early to tell what the effects of the strike on the Sberbank data center will be, but the three strikes on Yandex have disrupted internet and communications across Russia.

An online rumor said that the strikes on Yandex had the effect of taking down Russian bot farms, but this wasn’t true. The effects of the strikes on the civilian population were much more severe. Yandex is ubiquitous in Russia — it has its own app store, payment services, dating services, taxi and bus apps, and email services. The company operates six data centers in Russia and the strikes knocked two of them offline completely. People in Russia have lost access to their email, some of their data is seemingly gone, and taxi and bus apps only work intermittently.

ChrisO_wiki, an anonymous researcher who translates Russian social media posts for the western web, chronicled how the Yandex outages are hitting everyday Russians. “A taxi driver from Yekaterinburg says that after the service disruptions, he can no longer view his order history, and the status of trips is updated with a delay,” ChrisO_wiki said in a post on X and Bluesky. 

“The loss of Yandex's cloud services is also having severe impacts on Russian commercial logistics. Those who work with electronic document management are unable to register incoming goods, severely affecting manufacturers and distributors,” they said in another post.

These attacks are just the latest in a long line of strikes on data centers this year. Russia has been targeting Ukrainian data centers for months and Iran hit AWS data centers in Dubai in March, knocking out digital infrastructure in the Middle East.

Klaudia Klonowska, a researcher who studies the effects of emerging technologies on international law, told 404 Media that attacks on data centers are so new that international law around them is still developing. “You have very limited situations in which they would actually qualify as lawful targets when they're used by the military, and even then, it's very difficult for the attackers to know whether that's happening or not,” Klonowska said.

If the data centers are purely processing military data, then they could be legitimate targets, according to Klonowska. But many, if not most, data centers are dual-use, meaning they house both civilian and military data. In many cases, disrupting daily life seems to be part of the point.

When Russia struck data centers in Ukraine in September, state-backed news agencies claimed it hosted data for Palantir that supported Ukrainian intelligence efforts and was a lawful target. Ukraine denied the allegation. “So you see how difficult, because of the nature of these centers, it's really to pinpoint what is happening with them and who is using them and for what means,” Klonowska said. “Sometimes [Ukraine] mentions that these data centers contribute to Moscow's revenues that then fuel the war machine. But that's not enough to make them lawful targets. Retaliation is not enough under law.”

Klonowska noted that it is civilians who suffer most, not the military, when data centers go offline. “There are questions about proportionality given how widespread the attacks are,” she said. “A lack of internet access for very prolonged periods affects everything. It's all of the civilian services that are being disrupted, which you can imagine also includes things like hospitals, traffic, judicial services, etc. etc.” It’s worth noting that Russia has repeatedly attacked civilian targets in Ukraine, including apartment buildings, public transportation, and hospitals.

According to Klonowska, international and humanitarian law needs to catch up with the issue and that scholars like herself are only just starting to understand the ramifications. “I think there's also another bigger question behind all of this,” she said. “Why have we gotten to the point where we have permitted militaries of various states to use civilian commercial data centers for their military purposes? By potentially using them and relying on them, they have opened them up to the possibility of becoming military targets.”

Disentangling civilian and military data probably won’t take data centers off the target list, but it will make international law more clear on which buildings are legitimate targets. It may also change how data centers processing military data are built. 

“France has recently announced that they have unveiled their underground data center on the outskirts of Paris that will be exclusively for military use,” Klonowska said. “Just as we expect them not to use schools or hospitals or other civilian residential areas to host weapons or other military equipment, we would, I think, increasingly need to mention this in the case of data centers.”

The idea that a data center might be a military target is not lost on the American communities facing construction of them in their backyards. America’s nuclear weapons scientists at Los Alamos National Laboratories (LANL) have partnered with the University of Michigan in an attempt to build a data center in Ypsilanti Township, Michigan. The people and government of the Township aren’t thrilled about it for a number of reasons and the city attorney has said that the data center would be a “high value target” in wars of the future. Los Alamos pushed back on this in a letter to the community in September, around the same time Russia was striking data centers in Ukraine. LANL accused the township attorney of creating “that terminology without basis. It should not be interpreted as evidence of a known, specific, or imminent threat to the facility or the surrounding community,” the letter said. 

“Like other major research facilities, the center would employ appropriate security measures, including controlled access, cameras, and on-site security personnel,” it said. “Los Alamos and U-M would coordinate with local, state, and federal partners on matters related to safety and security.”

It’s easy to see where the people of Ypsilanti Township are coming from. When Ukraine struck three Yandex data centers in Russia over the weekend, its drones slipped past Russia’s air defenses. The idea that a town next to a data center, especially one with ties to America’s nuclear weapons programs, could sustain damage if the data center was ever attacked isn’t unfounded. The data centers smoldering in the world’s war zones proved that the township’s fears aren’t theoretical.