A group of Texans believe they’ve discovered evidence that the state’s environmental regulatory agency has continued to issue permits to data centers despite Governor Greg Abbott’s call for it to stop. 

The nonprofits Public Citizen and FracTracker Alliance, working with local activists in Texas, looked through the public database of the Texas Commission on Environmental Quality (TCEQ) and discovered that the organization has worked on multiple permits for data center projects since Abbott called for a pause in the process on September 21. Abbott’s office denied approving any new permits in a statement to 404 Media. 

According to Public Citizen and the FracTracker Alliance, which cite documents publicly available on the TCEQ’s website, the agency has reviewed documents and assigned engineers related to more than a dozen permits related to data center projects in the state. Public Citizen listed more than 15 and the Fractracker Alliance found 35. The same day the nonprofits announced their findings, The Texas Tribune published a report that Abbott had received $9 million in donations from developers and owners of data centers.

According to the documents reviewed by 404 Media, TCEQ issued air-emission limit certificates to a large data center in Houston; approved the construction of stormwater coverage for data centers in Abilene, Barstow, and Royse City; and fast tracked gas power plants for more than a dozen data center projects.

“The TCEQ’s own data indicates that it’s business as usual for data centers and affected communities were promised a freeze. And instead what they’re getting is another reason to distrust the TCEQ and ultimately ineffective attempts to govern by press release,” Kathryn Guerra of Public Citizen said during a press conference on Monday about the findings. “Absent any comprehensive guardrails imposed by the Texas legislature, the industry will continue to move forward as fast as it can, and the TCEQ may let it.”

"They're still putting in that power plant, and there ain't nothing me and my people can do about it. We're just going to have to keep that boot on our neck. It ain’t right.”

Texas is poised to be the data center capital of the world. Three hundred already operate in the state, 100 are under construction, and 200 more are being planned. The projects include Big Tech companies like Meta — which is constructing a $14 billion data center in El Paso — smaller scale local projects like one in Taylor that would be built on land meant for a public park, and massive startups like the nuclear-powered Fermi data center in Amarillo.

In general, people hate data centers and it’s become a major political issue for voters in Texas. On September 21, Abbott directed the TCEQ to “halt all permits sought by data centers.”  Abbott said he’d told the state’s water and electric utility agencies to audit all the projects and directed “the TCEQ to pause the issuance of all permits related to data center projects until [the Electric Reliability Council of Texas] completes its review.”

Abbott’s order is broad and data centers are large and complicated construction projects with a lot of moving parts that require dozens of permits and plans. It’s possible that some of the permits uncovered by the nonprofits were filed before Abbott’s September 21 pause.

Many, however, were clearly issued afterward. Twelve of the 14 applications for gas plants and generators were filed in October. TCEQ used an expedited review process for eight of them. One was an air permit for engines and turbines that would power a data center in the Dallas suburb of Irving, Texas. The builder submitted the permit for expedited review on October 6 and a TCEQ engineer completed the initial review two days later, according to publicly available documents reviewed by 404 Media.

“No permits have been approved,” Governor Abbot’s press secretary Andrew Mahaleris told 404 Media. “In line with the Governor’s directive, TCEQ has not taken and will not take any proactive actions related to the approval of data center permits. Likewise, no other state agency will approve data center-related permits until the Public Utility Commission, ERCOT, and the Water Development Board have the information they need to make informed decisions. Texans must come first.”

404 Media asked Abbott’s office why there are multiple data center related stormwater construction projects listed as “approved” and was told to talk to TCEQ. "The Commission has not issued any permits related to data centers and is complying with Governor Abbott’s directive," TCEQ told 404 Media.

Sam Law, a researcher and manager of communications at FracTracker Alliance, told 404 Media that TCEQ gave him “a more exacting interpretation of their own situation,” he said. “Which is that they are accepting applications, but not moving forward with reviewing them. That was shown to not be true.”

Law also noted that the stormwater construction permits that read as “approved” in the TCEQ system are the result of a regulatory loophole. “The state has just approved a generic construction stormwater permit, and then to get onto that permit, people file a notice of intent and then they add them to a pre-existing permit,” Law said.

The stormwater construction permit is required to raise and level ground. “It’s often the final approval needed to move forward to prepare the site to actually build the physical structure," he added. In areas where there’s no zoning restrictions or the city is unincorporated, then that permit is all a company needs to start building.

“The Caldwell Technology Park [...] the Stargate facility, and a bunch of other very large hyperscale facilities have gotten regulatory approvals in the form of this notice of intent, so it's not like a real pause,” he said.

Law said he believes Abbott is trying to project opposition to data centers without doing the real regulatory work. “If the point of the pause is to stop the sort of approvals of data centers, that's not what's been happening,” he said.

Multiple data center projects are underway in Abilene, Texas — including OpenAI’s Stargate project. According to TCEQ’s records, it issued a water quality permit for the Abilene data center on September 23. “We are, in fact, going to get a massive gas turbine plant right to people’s houses,” Abilene resident and Democratic state senate candidate Riley Rodriquez said during Public Citizen’s press conference.

Rodriquez said that residents had gotten letters from TCEQ about the incoming gas plant and how it might affect air quality in the region. The people of Abilene have fought and won the right to testify at upcoming public hearings. 

“At the end of the day they’re going to flip that switch. Doesn't matter what we have to say at that public hearing, and I know that is a doom and gloom way to look at this. But that's the fact,” Rodriquez said. “The fact of the matter is, we can go to that. We can have the best comments. We can have the best information [...] and I could have 500,000 people behind me, and it doesn't matter because they're going to flip that switch because they put the money on it anyways. And we got to live with that  — with those consequences.” 

Rodriquez said the people of the region found out about Stargate too late to do anything about it. “We're in a unique situation for us because we didn't have a chance to do any of the things that these great people are doing. We didn't have a chance to do any of that. ‘It was built, concrete's poured, generators are going in, boys. Sorry,’” he said.

“So Abbott made his announcement. That's really great, that's really awesome,” Rodriquez said. “Guess what? They're still putting in that power plant, and there ain't nothing me and my people can do about it. We're just going to have to keep that boot on our neck. It ain’t right.”

In his September 21 letter, Abbott said he’d ordered the pause because “the goal is to put Texans first.”

Update 10/19/26 at 8:20PM: This story has been updated to include a response from TCEQ.

A Florida police department claims that scammers used AI to clone a sheriff’s voice, with scammers increasingly using voice clones that trick people into thinking they’ve missed jury duty or have a warrant out for their arrest are increasing.

According to Florida news outlet News6, scammers cloned Osceola County Sheriff Steve Moser’s voice and left a voicemail with a resident.    

“They cloned his voice and was using Steve’s picture as well to say it was him making the phone call, and it was not,” Sheriff Chris Blackmon told News6.

Impersonating a police officer is a third-degree felony in Florida. The Osceola County sheriff’s office did not immediately respond to a request for comment.

This particular scam cloning cops is spreading across several states, with reports of jury duty and arrest warrant scams targeting people in Georgia and Pennsylvania in the last week. These other reports don’t mention AI voice cloning explicitly, but note that the scammers sometimes have similar voices and tones as local police officers.  

Voice cloning scams have been around for years, with scammers using commercially available AI voice impersonation tools to target the elderly, families, and businesses. Last year, 404 Media investigated real-time deepfake scams that incorporated voice and video to defraud people. In 2024, we reported on the ways scammers cloned celebrity voices and use AI videos in YouTube ads to scam people.

Scammers often impersonate company executives or leadership to trick employees into sending money, and voice cloning appears to be an increasing part of that. In February, scammers cloned a managing partner of a law firm with AI. Ultimately, a private bank ended up transferring $108 million.

A Chinese organized crime group hacked into retail giant Staples, used that access to fraudulently issue millions of dollars worth of gift cards for stores like Target and Sephora, then went on a nationwide shopping spree, shipping many of the stolen electronics and other products back to China as part of a massive retail theft operation, 404 Media has learned.

The finding, based on a review of court records, reveals the scale at which some organized crime groups are fleecing U.S. retailers, with entire warehouses dedicated to housing the merchandise. The hack of Staples, which has not been previously reported, signals just how sophisticated some of these operations have become.

Welcome back to the Abstract! Here are the studies this week that lived and died by the spear, drew unequal lots, paged Fox Mulder, and peered at an alien moon.

First, scientists discover a mortal spear wound in a Neanderthal who lived 75,000 years ago, possibly opening a window into the origins of hominid violence. Then: disparities from beyond the grave, an unexplained population of near-Earth objects, and the word from Jupiter’s moon Ganymede.

As always, for more of my work, check out my book First Contact: The Story of Our Obsession with Aliens, or subscribe to my personal newsletter The BeX Files. 

Lethal Weapon meets Ice Age 

Pomeroy, Emma et al.  “Evidence for funerary behaviour and lethal trauma in a new Neanderthal individual from Shanidar Cave.” Scientific Reports.

Some 75,000 years ago, an adult Neanderthal died from a brutal strike to the chest by a sharpened wooden spear, and was subsequently laid to rest by their kin. 

Eons later, in 2020, the remains of this individual were unearthed from deep in the floor of Shanidar Cave, an ancient Neanderthal hangout in what is now Iraqi Kurdistan. The bones of the deceased, named Shanidar A, preserve the spear puncture in the shoulder blade, suggesting that they were impaled with the weapon through the heart to their back. 

Shanidar A—whose sex is unknown—also sustained a brutal face injury that had partially healed at their time of death, suggesting that this individual had been cared for while they recovered from this non-fatal wound. The body appears to have been carefully interred in a small area of the cave that contained other Neanderthal remains, implying it was an intentional burial ground.

“Shanidar A’s shoulder injury appears to have been fatal, but the apparent placement of the body in a location that subsequently became part of a tight cluster of Neanderthal individuals, who were likely intentionally deposited within living memory of each other, strongly suggests a level of care during and immediately after death,” said researchers led by Emma Pomeroy of the University of Cambridge. 

Taken together, the discovery of Shanidar A adds to the evidence that Neanderthals nurtured each other in life and performed symbolic funerary rituals after death. These bones may also represent one of the earliest direct examples of interpersonal violence in any hominin, the term for humans and their close relatives, assuming that the Shanidar A was intentionally slain. 

However, it’s hard to distinguish whether the death blow was an attack from another Neanderthal—or perhaps a member of our own species Homo sapiens—or if it was an accidental injury sustained while hunting.

Shanidar Cave was occupied by Neanderthals for at least 50,000 years leading up to their mysterious extinction. While we will never know the complexity of their stories, our human cousins were clearly capable of compassion, care, and respect for the dead.

In other news… 

The truth is out there 

Bruehl, Stephen et al. “Use of machine learning to enhance detection of transient astronomical phenomena in historical observatory images.” Scientific Reports.

For the past several years, researchers led by astronomer Beatriz Villarroel have discovered strange “transients”—unexplained objects or phenomena in space—in historical photographic plates from before the launch of the first spacecraft, Sputnik, in 1957. The nature of these transients has become hotly debated among astronomers, with theories ranging from instrumentation defects to lurking alien spaceships.

In a recent study, the team re-analyzed the transients with machine learning, an effort reinforced previous findings that “transient numbers diminish significantly in Earth’s shadow”—hinting they are real objects that reflect less sunlight in our planet’s shade—and that they are more likely within one day of atmospheric nuclear tests during the mid-20th century.  

“If one accepts that both key findings in this study represent real phenomena…we are left with a very small set of provocative hypotheses that would be considered highly implausible by most,” said researchers led by Stephen Bruehl of Vanderbilt University and co-authored by Villarroel. 

“For example, is it possible that unknown to the public there were multiple launches of artificial satellites long before Sputnik with some launches timed to coincide with U.S. nuclear tests? Or rather, do the current findings represent detection of a non-human technosignature? Finally, might our results represent detection of an entirely new yet unknown physical phenomenon?” 

“Additional research on this topic is clearly warranted,” the team concluded. 

Hard agree. When a mystery’s leading explanations include 1) secret satellites that upend spaceflight history, 2) ALIENS (!!!), and 3) exotic novel phenomena, it’s fair to keep digging for answers. My own preference is that it turns out to be some unholy combination of all three, but for now, we will have to just keep literally watching this space.

Inequality is in our bones

Li, Dongdong et al. “How inequality became durable before states: Evidence from 6000 years in the Central Plain of China.” Science Advances.

Let’s keep playing in haunted graveyards—it's spooky season, after all. This time, we’ll take a long walk through about 2,300 ancient burials in the Central Plain of China. In a new study, scientists probed the emergence of wealth inequalities in these ancient communities by studying this huge sample dating from 9,000 to 3,500 years ago. 

The team assessed the relative wealth of the deceased individuals with a number of proxies, including the value of grave goods buried with them, their physical health, and chemical clues about the quality of their diets, which can be preserved in bones. 

The results suggest that inequality was present in many of these communities long before the rise of an official state hierarchy, and that “no single pathway led to persistent inequality across early centers of social complexity,” according to the study. However, one clear correlation that emerged in the analysis was the association between violence and inequality, with the former exacerbating the latter.

“In the Central Plain…the emergence of violence signals a structural transformation” that suggests that “violence contributes to the amplification and structuring of inequality, although reverse or reciprocal dynamics cannot be excluded,” said researchers led by Dongdong Li of the Chinese Academy of Social Sciences.

While the rise of organized states and kingdoms can accelerate wealth stratification, this study proves that humans are capable of pioneering local homegrown inequalities in myriad ways.

The view from Ganymede

Royer, Clement et al. “Ganymede’s surface composition from 0.5 to 5.3 µm using combined VLT and JWST datasets and the resulting lessons learned.” Astronomy & Astrophysics.

We’ll close with an update from Ganymede, the largest moon in the solar system, which orbits Jupiter. As the only moon with its own magnetic field and a candidate in the search for alien life due to its subsurface ocean, Ganymede has long fascinated scientists.  

Now, a team has compiled comprehensive observations of Ganymede’s surface terrain using observations from a range of advanced telescopes, including the Very Large Telescope in Chile and the James Webb Space Telescope. The aim of the study, in part, is to prepare for two spacecraft currently en route to Jupiter—the European JUICE mission, and NASA’s Europa Clipper—which will arrive in the early 2030s. 

Ganymede “remains a cornerstone object of planetary science due to its geological complexity, internal magnetic field, and potential astrobiological interest based on the presence of a subsurface conducting ocean,” said researchers led by Clement Royer of Paris-Saclay University. “Its surface morphology…argues for a history of significant endogenic activity, possibly including plate-like tectonics and cryovolcanism.”

Indeed, one of Ganymede’s most interesting surface features is a mysterious “darkening agent" that extends over much of the moon’s equatorial regions. The composition of the darkening agent “remains unresolved,” according to the study, though likely guesses include carbon-rich graphite or iron-rich magnetite.

The team anticipates that the Jupiter-bound spacecraft “will provide an unprecedented view of the surfaces of the Jovian moons” that will reveal many of their secrets. At least that’s one thing we can look forward to from the 2030s.

Thanks for reading! See you next week.

This is Behind the Blog, where we share our behind-the-scenes thoughts about how a few of our top stories of the week came together. This week, we discuss a new pod setup, video games, and Elon's spending habits.

JASON: Exciting news: I am building a podcast studio / riso printing room / place to film videos in. I believe all of my colleagues and many people in my life have been laughing at me about this, but this also may just be the narrative I’ve created for myself to inspire me to prove the haters wrong. Since the beginning of 404 Media, I’ve worked out of my garage, but feel like I’ve been going a bit crazy sitting mostly in the same room since essentially the start of the pandemic. And so I found not a coworking space but a very affordable windowless box that I shall turn into a content palace. 

I’m just going to try it for a few months to see if it makes sense or if I should return to working from the couch, but I’m quite excited about building it out. I only got it a few days ago and so at the moment it’s largely a bunch of boxes and random furniture I no longer had space at my apartment for. It’s got a drop ceiling with fluorescent lighting and landlord special laminate floors, but I also can do whatever I want to it, so I will likely do some sort of design on the walls, throw a rug down, whatever. 

We start this week with Joseph’s article about Raven, previously known as Geospy. This is an AI tool that can geolocate photos, and now says it can pinpoint a specific house based just on one photo taken inside. After the break, Jason explains why a judge ruled a particular Flock search as unconstitutional. In the subscribers-only section, we talk about the wild AI video that has derailed a manslaughter case.

Listen to the weekly podcast on Apple Podcasts, Spotify, or YouTube. Become a paid subscriber for access to this episode's bonus content and to power our journalism. If you become a paid subscriber, check your inbox for an email from our podcast host Transistor for a link to the subscribers-only version! You can also add that subscribers feed to your podcast app of choice and never miss an episode that way. The email should also contain the subscribers-only link for the extended video version too. It will also be in the show notes in your podcast player.

• ⁠AI Company Lets Cops Pinpoint Specific Houses Based on a Single Interior Photo⁠
• ⁠Watch Footage of the Flock Search a Judge Ruled Unconstitutional⁠
• ⁠Her AI-Generated Video Swayed the Judge. The Court Said it Carried 'Undue Emotional Weight'⁠

This article was produced in collaboration with Court Watch, an independent outlet that unearths overlooked court records. Subscribe to them here.

Newly filed court records show exactly what happens when messaging app Telegram provides data to U.S. authorities.

A letter written by Telegram, and providing a specific user’s phone number, user ID, and IP address, reads:

This article was produced in collaboration with Court Watch, an independent outlet that unearths overlooked court records. Subscribe to them here.

Police arrested a Chicago area high school maintenance worker who attempted to meet a child for sex after investigators posed as a 15-year-old boy using AI generated images.

Christopher Thomas Mertens started talking to who he thought was a child through a dating app in September. According to an affidavit written by the department’s FBI Task Force Officer McKailey Scott, the investigation was done by the Livonia Undercover Resistance to Exploitation Unit (LURE), which identifies and prosecutes child sex offenders. Scott set up an account on the queer-focused dating app Taimi with “an AI generated image of a teenage-appearing male with the name ‘Caleb,’ and no age listed on the profile.  

Scott wrote that an unknown user messaged “Caleb,” and they moved to Whatsapp. After a few minutes of talking, the man asked Caleb for their age, and when Scott — posing as Caleb — said he was 15, the man said “Im interested” and “Im hard now.” 

The investigator used a combination of tools, including checking the man’s phone number using Thomson Reuters CLEAR and running images of his face through Clearview AI to identify him as Mertens. For days, Caleb and Mertens exchanged sexually explicit text messages and Mertens made plans to drive to meet Caleb on his day off, believing Caleb’s (non-existent) parents weren’t home. Cops used Flock to look up and track Mertens’ car and see that he was driving to the meetup spot, but Mertens was also texting Caleb the entire time to let him know he was on the way and when he arrived. When he got out of the car, Livonia police took him into custody.

Two hours after being booked, Mertens told jail attendants that he wanted to speak to Scott. When Scott got to the jail, Mertens admitted everything, including that he works at a high school in Illinois. The complaint doesn’t mention which high school.

Investigators have been generating images of children for years. One of the earliest examples of these is Sweetie, a computer generated child developed by Dutch children’s rights organization Terre des Hommes in 2013 that the organization used to talk to men online. Today, police departments at the U.S. border use AI-generated online personas designed to interact with and monitor protestors and activists, according to documents obtained by 404 Media.

In August, a 24-year-old Connecticut man was arrested after soliciting an undercover police officer who used what was reported as “age regression technology” to appear as a 14 year old in videos. He was charged with enticing a minor and criminal attempt to commit risk of injury to a child. 

In 2025, a 45-year-old man was arrested after investigators used AI generated images of children to catch him distributing child sexual abuse material. He was recently sentenced to 12 years in federal prison.

And in 2024, the state of New Mexico sued Snapchat after investigators set up a fake account, including AI generated images of children, that the platform allegedly recommended to “dangerous accounts, including ones named ‘child.rape’ and ‘pedo_lover10,’ in addition to others that are even more explicit,” according to the New Mexico Department of Justice.

AI generated child sexual abuse material is a rapidly growing problem for law enforcement. The National Center for Missing and Exploited Children has reported a massive rise in generative AI child abuse material, with criminals using it to extort and entice children, and children using it to bully and harrass other children.

Livonia police did not respond to a request for comment.

Scientists have made a breakthrough toward the mind-bending goal of creating computers made of brains by demonstrating that human neural tissue can classify letters of the Braille alphabet, according to a study published on Friday in Frontiers in Artificial Intelligence.  

A team transmitted electrical signals corresponding to Braille letters to human brain organoids, which are living neural tissues derived from stem cells. The results revealed that a single organoid, consisting of about 10,000 neurons, could classify the letters with about 61 percent accuracy, while teams of three organoids reached 83 percent accuracy.  

“The human brain can perform incredibly complex information processing while consuming relatively little energy, and artificial neural networks were originally inspired by biological nervous systems,” said Tianyi Liu, a PhD candidate at Bristol University who led the new study, in an email to 404 Media.

“If we've been trying to imitate biological neural networks all along, why not try using real biological neural networks directly?” she continued. “What kind of information processing capabilities might these tiny neural organoids have? Could they show some form of learning or adaptation? These are all questions we're very interested in.”

The new study falls under the emerging field of organoid intelligence, which aims to use organoids as biological “wetware” for computing applications. Previous studies have established that organoids are capable of recognizing speech Japanese vowels or even playing the classic game Pong. 

Since Liu and her team specialize in how robots sense and respond to touch, they homed in on Braille as a way to convert tactile information into electrical stimuli that an organoid could receive, process, and classify. 

In their experimental setup, the researchers used a tactile sensor to scan data from the 26 letters of the Braille alphabet, which is built from arrangements of raised dots. This data was converted into electrical stimulation patterns that were fed to the organoids, which are smaller than a millimeter in scale and positioned on arrays that keep them alive.  

“Our original goal wasn't to prove that organoids could read Braille like humans, or that they were already ‘intelligent’ enough to understand Braille,” she added. “Rather, we wanted to use this task to explore whether real biological neural networks could participate in processing information from robotic tactile sensors.”

In other words, the researchers aimed to discover if these stimulated inputs could be decoded by the organoids and returned back in discernable responses corresponding to the Braille letters. The results revealed that a single organoid could accurately classify the letters nearly two thirds of the time, while an "ensemble" of three organoids performed even better, with an accuracy of 83 percent. 

“We still don't know the exact mechanism behind this improvement,” Liu said. “Our hypothesis is that different organoids respond to the same stimulation in similar, but not identical, ways.” 

She added that “you can think of it as three people looking at the same object. Although they're all looking at the same thing, each person might notice different details. Some features might not be obvious to one person but could be quite easy for another to spot. By combining their observations, you might be able to make a more accurate and reliable judgement.”

The results are undeniably trippy, conjuring up the classic scifi trope of a hyperintelligent brain-in-a-vat. But Liu emphasized that this was an open-loop experiment, meaning that the organoids only received initial inputs without getting new feedback about their performance on the tasks. For this reason, the study does not prove that the organoids actually learned Braille, or were altered in any permanent way, just that they could classify Braille letters after receiving the electrical inputs. 

“In the future, if we can build closed-loop systems where neural activity from the organoids actually participates in a robot's perception, decision making, and control, while the results of the robot's interactions with its environment are fed back to the organoids, we could begin to investigate whether these biological neural networks can adapt to new tasks through ongoing interaction,” she said.

Liu also noted that while there are many potential advantages to organoid intelligence, there are plenty of limitations to biological computing systems. For example, organoids cannot be standardized, leading to natural variations that can complicate results, plus they have to be kept alive in cultures that are more difficult to maintain than electronic devices. 

“Compared with established computing chips, organoid systems still have a long way to go in terms of reliability, reproducibility, and scalability,” Liu said.

Even so, organoid intelligence “gives us the opportunity to explore a way of computing that's very different from traditional computers,” she concluded.

Last week, Secretary of War Pete Hegseth announced the Pentagon would livestream the execution of convicted killer Nidal Hasan. Today, Trump said the execution would move forward but that it wouldn’t be livestreamed. But the propaganda damage is already done. Experts who watch terrorist spaces online told 404 Media that Hasan is already turning up in memes, videos, and recruitment material for groups like Al Qaeda.

Hasan—a former US Army Major who had once attempted to contact Al Qaeda—killed 13 people and injured 32 others at Fort Hood in 2009. He was shot and captured at the scene and later sentenced to death. Hegseth’s plan to livestream Hasan’s execution and the furor around it brought Hasan and his crimes back into the spotlight 17 years later. Hasan has mostly been a forgotten figure in Islamist and extremist circles, but is now once again a fixture of their propaganda.

“It's already started,” Moustafa Ayad, research chair in global Islamism and counter-terrorism at the Institute for Strategic Dialogue, told 404 Media. “We're already seeing edited videos in support of Nidal Hasan, and they're specifically based around how he's a martyr and that his legacy lives on.”

In one image Ayad shared with 404 Media, Al-Qaeda in the Arabian Peninsula (AQAP) referred to Hasan as a “heroic mujahid brother” then quoted Osama Bin Laden. “The day America makes this decision, it will have made a decision to execute whoever among you falls captive.” 

According to Ayad, an Al Qaeda affiliated propaganda group made Hasan the feature of its newsletter last Friday. “So it's being viewed in that sense already in these ecosystems as he is a hero, and it's going to be used for recruitment and potentially galvanizing inspiration,” Ayad said. “We're talking about a guy who hasn't really been referenced since 2017 really or that much at all. So it has reignited conversations around his attack, how quote unquote glorious it was, and is being used as a means to to recruit people in some shape or form, and will continue to do so.

Ayad also described "rampage" edits of Hasan that are floating around extremists circles online that show footage of Hasan dancing over a number that represents how many people he killed. “You have fed the wolves,” he said. “They now have a thing they can latch on to.” In one TikTok edit viewed by 404 Media, a picture of Hasan with laser eyes throbbed to the beat of electronic music.

He added that he thinks the memes and videos are being made by younger people. “I don't think an established guy who remembers the Nadal Hassan attack is going to then go: ‘You know what makes sense? Putting out a dancing Nidal Hasan over his kill count.’ I don't think some 35-year-old dude is doing that,” he said. “You have a younger generation that is now attuned to what he did.”

Livestreaming the public execution would have given propagandists more to work with. Online nihilists, gore groups, and Islamists often use footage of death and violence to lure in young people. “Dead ideologues are continually being revered, lionized in ecosystems in support of  groups like Al Qaeda, the Islamic State, or any terrorist group,” Ayad said. “If you look at the saint ecosystems around accelerationism, it's a similar thing in which these individuals are the vanguard of jihad.”

Mass shooters and ideological killers that receive widespread media attention become objects of fascination online. They enter a cannon of sainted killers, totems that inspire others to commit the same acts. Some researchers have suggested news agencies should report a shooter’s crimes but refrain from naming and showing them, thus depriving them of notoriety and stemming the social contagion.

Hasan killed people almost twenty years ago and he was destined to fall out of memory until Hegseth attempted to make a spectacle of his death. “We’re already seeing it being incorporated into talking points, we’re past that,” Ayad said.

“He is still going to be labeled a martyr," Ayad added. “Will it be a public spectacle? Not anymore [...] but terror groups and their supporters took advantage of the news to highlight just how much of a contribution Nidal Hasan made to their respective movements.”

Consulting giant Accenture has told many employees that the company will now only spend $29 a month per person on Claude. Employees subject to the cap, some of whom had been spending as much as $1,000 monthly, are scrambling to find ways to make sure they can keep spending as much as they already are.

The news is a snapshot of what continues to play out across all sorts of industries: companies have spent heavily on AI tools, and are now discovering that many users are burning or “chewing” through AI tokens at a rapid clip. In response, many companies have curbed their employees’ AI use. There is a special irony to Accenture doing much of the same, when it is a company that has encouraged its clients to invest heavily into AI.

A website that was dedicated to the human endeavor of reverse engineering, “decompiling,” and modifying video games is shutting down because people using AI to clone and decompile games have fully overrun the community and are far outpacing what human software engineers alone can do. The news comes as AI-coded “clones” of popular enterprise software like the Adobe creative suite and Microsoft Office have gone viral and are seemingly popping up every day, and as people in video game modding communities warn that 'AI decomps' are everywhere. 

The website decomp.dev said Thursday that it is shutting down because “the community aspect of decompilation has been broken” by AI, and that projects that once required intense collaboration between people with different skills can now be done trivially with AI. The administrator of the website said that it has become impossible to keep track of which projects are primarily human-led and which ones are done by AI.

“Historically, matching decompilation has been a brutally difficult, time consuming task, on the scale of years for any moderately-sized game with a number of active contributors,” the pseudonymous admin of decomp.dev, who goes by Encounter, wrote on the site. 

But recent frontier AI models like GPT-6-Astra have made it trivially easy to decompile a game: “They are significantly better at following complex directions, cross-referencing resources for symbols or debug information, and writing natural code with enough guidance,” Encounter wrote. “It is now clear that, with the right guidance, human input, and code reviews, AI can expedite the decompilation process in a significant way. What is also now clear is that the community aspect of decompilation has been broken.”

There is a lot of stuff about how creepy ad targeting is in today’s newsletter. Our first story is one I did, about how advertisers — or really anyone with 5 minutes on their hands — can inject ads into your ChatGPT session based on your phone number or email address. This is pretty normal in the advertising world, but I seriously doubt that when most of ChatGPT’s many, many users see an ad, they realize that might be because someone, somewhere, uploaded their phone number into OpenAI’s systems. I made my own ad on ChatGPT (without using peoples’ personal data) to test out the system. Then, in other news, there is new research confirming, I think for the first time, that online ads are being used to deliver zero-click mercenary malware against targets.

OpenAI lets anyone inject ads into ChatGPT users’ sessions, targeting specific groups of people based on their email address, phone number, or a unique identifier on their phone, according to 404 Media’s own tests of ChatGPT’s advertising ecosystem.

While the ad targeting available in ChatGPT is somewhat standard practice across the advertising industry, the chatbot’s one billion monthly active users may not understand they, in some cases, are being specifically targeted because of their personal data the advertiser has uploaded to OpenAI. ChatGPT’s ad targeting is also novel in that it is also based on the prompts users enter into the chatbot, prompts that users may assume are private but which, as 404 Media has previously shown, may be reviewed by humans. Or in this case, used for ad targeting purposes.

Ukrainian drones hit Russia’s largest data center on Wednesday. This was Ukraine’s fourth strike on Russian data centers in the past week and confirmation of a new reality of war: data centers are valuable enemy assets and they will be targeted.

In 2006, British economist Clive Humby declared “data is the new oil,” and big tech adopted the metaphor. Twenty years later, a dark side of the truism has been revealed. If the places where oil is refined are valuable targets in a war then so, too, are the places where data is refined. We’ve seen this not just in the Russia-Ukraine war, but also with Iran hitting Amazon Web Services data centers in Dubai in retaliation for America’s strikes on the country. 

Ukrainian President Volodymyr Zelenskyy confirmed strikes on Russian data centers and oil refineries in a post on X and called them a “symmetrical response" to Russian aggression. Here we have oil and data together again, not as a metaphor in an economics lecture, but in the pronouncement of a world leader defending his country. conducting a war.

Three of Ukraine’s strikes hit data centers that belonged to Yandex, Russia’s Google-equivalent, and damaged the company’s supercomputers that housed some of its AI models. The latest attack hit a data center operated by Sberbank, Russia’s largest bank. It’s too early to tell what the effects of the strike on the Sberbank data center will be, but the three strikes on Yandex have disrupted internet and communications across Russia.

An online rumor said that the strikes on Yandex had the effect of taking down Russian bot farms, but this wasn’t true. The effects of the strikes on the civilian population were much more severe. Yandex is ubiquitous in Russia — it has its own app store, payment services, dating services, taxi and bus apps, and email services. The company operates six data centers in Russia and the strikes knocked two of them offline completely. People in Russia have lost access to their email, some of their data is seemingly gone, and taxi and bus apps only work intermittently.

ChrisO_wiki, an anonymous researcher who translates Russian social media posts for the western web, chronicled how the Yandex outages are hitting everyday Russians. “A taxi driver from Yekaterinburg says that after the service disruptions, he can no longer view his order history, and the status of trips is updated with a delay,” ChrisO_wiki said in a post on X and Bluesky. 

“The loss of Yandex's cloud services is also having severe impacts on Russian commercial logistics. Those who work with electronic document management are unable to register incoming goods, severely affecting manufacturers and distributors,” they said in another post.

These attacks are just the latest in a long line of strikes on data centers this year. Russia has been targeting Ukrainian data centers for months and Iran hit AWS data centers in Dubai in March, knocking out digital infrastructure in the Middle East.

Klaudia Klonowska, a researcher who studies the effects of emerging technologies on international law, told 404 Media that attacks on data centers are so new that international law around them is still developing. “You have very limited situations in which they would actually qualify as lawful targets when they're used by the military, and even then, it's very difficult for the attackers to know whether that's happening or not,” Klonowska said.

If the data centers are purely processing military data, then they could be legitimate targets, according to Klonowska. But many, if not most, data centers are dual-use, meaning they house both civilian and military data. In many cases, disrupting daily life seems to be part of the point.

When Russia struck data centers in Ukraine in September, state-backed news agencies claimed it hosted data for Palantir that supported Ukrainian intelligence efforts and was a lawful target. Ukraine denied the allegation. “So you see how difficult, because of the nature of these centers, it's really to pinpoint what is happening with them and who is using them and for what means,” Klonowska said. “Sometimes [Ukraine] mentions that these data centers contribute to Moscow's revenues that then fuel the war machine. But that's not enough to make them lawful targets. Retaliation is not enough under law.”

Klonowska noted that it is civilians who suffer most, not the military, when data centers go offline. “There are questions about proportionality given how widespread the attacks are,” she said. “A lack of internet access for very prolonged periods affects everything. It's all of the civilian services that are being disrupted, which you can imagine also includes things like hospitals, traffic, judicial services, etc. etc.” It’s worth noting that Russia has repeatedly attacked civilian targets in Ukraine, including apartment buildings, public transportation, and hospitals.

According to Klonowska, international and humanitarian law needs to catch up with the issue and that scholars like herself are only just starting to understand the ramifications. “I think there's also another bigger question behind all of this,” she said. “Why have we gotten to the point where we have permitted militaries of various states to use civilian commercial data centers for their military purposes? By potentially using them and relying on them, they have opened them up to the possibility of becoming military targets.”

Disentangling civilian and military data probably won’t take data centers off the target list, but it will make international law more clear on which buildings are legitimate targets. It may also change how data centers processing military data are built. 

“France has recently announced that they have unveiled their underground data center on the outskirts of Paris that will be exclusively for military use,” Klonowska said. “Just as we expect them not to use schools or hospitals or other civilian residential areas to host weapons or other military equipment, we would, I think, increasingly need to mention this in the case of data centers.”

The idea that a data center might be a military target is not lost on the American communities facing construction of them in their backyards. America’s nuclear weapons scientists at Los Alamos National Laboratories (LANL) have partnered with the University of Michigan in an attempt to build a data center in Ypsilanti Township, Michigan. The people and government of the Township aren’t thrilled about it for a number of reasons and the city attorney has said that the data center would be a “high value target” in wars of the future. Los Alamos pushed back on this in a letter to the community in September, around the same time Russia was striking data centers in Ukraine. LANL accused the township attorney of creating “that terminology without basis. It should not be interpreted as evidence of a known, specific, or imminent threat to the facility or the surrounding community,” the letter said. 

“Like other major research facilities, the center would employ appropriate security measures, including controlled access, cameras, and on-site security personnel,” it said. “Los Alamos and U-M would coordinate with local, state, and federal partners on matters related to safety and security.”

It’s easy to see where the people of Ypsilanti Township are coming from. When Ukraine struck three Yandex data centers in Russia over the weekend, its drones slipped past Russia’s air defenses. The idea that a town next to a data center, especially one with ties to America’s nuclear weapons programs, could sustain damage if the data center was ever attacked isn’t unfounded. The data centers smoldering in the world’s war zones proved that the township’s fears aren’t theoretical.

Let’s briefly deconstruct a viral or soon to be viral story out of Cologne, Germany regarding an incident in which a “remotely controlled robot grabs 16-year-old's buttocks” and “performed thrusting movements against her,” according to police.

I have begun to see this story percolate around the English-speaking internet because it is absurd and not good, and has already been aggregated to hell by social media meme pages with essentially zero information other than this absurd police image: 

The Cologne Police did not exactly help matters by issuing a short press release that treats the robot as mysterious, the circumstances as mysterious, and the evidence as “unusual.” The Cologne Police’s Facebook post featuring a photo of the mustachioed robot reads “A red-gold robot triggered a police operation on the Cologne Ring on Sunday night (October 11). The device is said to have touched a 16-year-old girl's buttocks and performed thrusting movements against her […] The police are now investigating how the robot worked at the time of the assault and whether someone was deliberately controlling its movements. Emergency services seized the robot and two mobile phones from the suspect. The police are investigating on suspicion of defamation on a sexual basis.”

Coverage by even well-resourced outlets like CNN, CBC, and the BBC have almost no information beyond the police press release, which is lazy and stupid, because it is possible to figure out everything that happened here with three seconds of clicking around the internet. The Associated Press wrote that the entire phenomenon is "new territory" for the police, which, I'm sorry to say, men using tech to harass women on livestreams in 2026 is not "unusual" or "new territory" and hasn't been for many years.

The English coverage of the incident looks like this:

In fact, with a small amount of Googling and/or clicking around social media, it is easy to find out everything you would ever need to know about the robot and what happened here.

The tl;dr is that a 16-year-old German Twitch IRL livestreamer named Agaamuza has been streaming himself using an off-the-shelf $5,000 robot from a company named Unitree to walk around Cologne and bother people outside of bars in the way that extremely annoying Twitch livestreamers and TikTok stars have been doing for years. In a recent livestream, Agaamuza or one of his friends uses the robot to grab a girl’s ass, the boys laugh about it, and the police get involved. Twitch has temporarily suspended his channel from streaming but because of the social media clipping economy, there are zillions of videos of the streamers and the robot percolating across Instagram, YouTube, and TikTok.

On the actual internet where real people click around and don't regurgitate police statements and pretend they're reporting the news, you can see the entire arc of what happened, which now includes an hour-long "statement" Twitch video in which Agaamuza streams with the robot dressed in striped prison clothes.

The slightly longer version: For at least a few weeks, Agaamuza and his friends put a mustache and giant chain necklace on the robot, call him “Ahmad the Robot,” and film people’s reactions to the robot thrusting, dancing, punching the sky, walking into stores, etc. Most of these videos are annoying but not illegal. They are very much a part of YouTube / Twitch “prank” culture, in which men—almost always men—film themselves hitting on women, interviewing people outside of bars, and doing stupid shit in public. Agaamuza and “Ahmad the Robot” have become minor characters in the German Twitch streaming world over the last few weeks. 

The robot in question is the Unitree R1, which costs between $4,900 and $5,900 depending on the specific model. Unitree is a Chinese robot company that makes the R1 and a robot dog that has become vaguely popular among people who are excited about humanoid robots and gadget YouTubers. Unitree is kind of a Boston Dynamics-esque company in that it makes lots of YouTube videos of its robots doing cartwheels and backflips and fighting other robots, and regularly goes viral for it. The capabilities of the R1 robot are not a secret and can be found in any number of YouTube videos or on Unitree’s website (which is to say that the R1 is not a mysterious harassment or spy robot as it has been portrayed in some of the aggregations of this story I’ve seen). 

Anyways, over the weekend while live-streaming, Agaamuza or one of his friends has the robot walk into a group of girls standing on the street in Cologne. “Oh my god oh my god Ahmad,” one of the streamers says, as they walk the robot directly into a girl’s ass. One of the girls says “Oh my god stop.” The boys say “Hey, he wants to meet you, do you want to meet him?” The girls say no. The robot begins thrusting its arms in the air (the girls have moved away at this point), and the streamers start screaming “no brother, no bro oh man.” The girls tell the streamers to leave them alone and then walk away. 

In his statement video, Agaamuza says that the robot simply ran into the girl and didn't grope her. The robot certainly did run into her, the whole thing was harassing and annoying; in the United States, these sorts of things happen on Twitch constantly, generally with no consequences.

What happened is bad, and is not much different than the types of clips of men harassing women that go viral all the time on social media, many of them filmed or streamed surreptitiously using Meta’s AI glasses. What actually is unusual about this case is that the police appear to actually be taking it seriously.

Character.ai’s bankruptcy is the one of the first dominos to fall in the long-foreseen AI bubble. The circumstances of its bankruptcy are exactly what critics of AI have been saying would happen: Character.ai lit a huge amount of money on fire running its product, did not bring in a lot of revenue, and faced enormous legal fees after causing harm to its users. Enshittifying its product to try to make its expenses cheaper did not work, according to a narrative filed in bankruptcy court Tuesday.

Disney has reportedly offered Character.ai $20 million to license some of its intellectual property; Last year, Disney sent Character.ai a cease and desist letter demanding it stop using its copyrighted characters without permission. In 2023, it was valued at $1 billion after raising $150 million in a round led by a16z. 

Character.ai is one of the best-known AI chatbot companies that has become popular in the AI companion space. The company has faced various legal problems after being sued by the family of one of its users who killed himself after chatting with a Character.ai chatbot, and has been the target of regulators pushing for age verification tech because of its popularity with kids. In its bankruptcy filings, the company says that its enormous legal costs contributed to its bankruptcy, but that even without the legal problems, its business was wildly unsustainable. 

Sorry for the late newsletter today, we’re still a little sleepy. To ease you into this afternoon, I have an interview with the guy who coined the term “smutstep,” and has become a sensation among a very specific section of dark romance BookTok — as well as a lot of haters. I thought he had some interesting things to say about the content creation game and not taking yourself too seriously while respecting your own craft and audience. Enjoy.

The Creator of ‘Smutstep’ Wants You to ‘Let Your Freak Flag Fly’

Last week, a video came across my feed of a man saying horny lines over a dubstep beat. “On your knees,” he snarled. As the beat dropped, he growled, “Mmm, now look at me.”

“Instagram reels just showed me a guy who makes 'smutstep' for the booktok crowd and it is the funniest thing I have ever watched,” the person reposting the video on X wrote. The replies are predictably harsh: “I think this is actually the worst thing I have ever heard.” “Who the FUCK is demanding this 😭” 

People demanding this is why it exists. DARQ DAGR, whose real name is James, is a dubstep musician and voice artist who’s been working in the voice acting world for years. But smutstep is what’s made his work go viral, in large part thanks to the people who hate it so much. Smutstep emerged as a reaction to BookTok, a subculture within TikTok built by book lovers and their various followings. Within BookTok, the romantasy book genre thrives, with series like The Fourth Wing and A Court of Thorns and Roses (ACOTAR) gaining massive readerships for their blend of elven high fantasy and dragon-based erotica. The romantasy genre is not a quaint fandom. It’s a billion-dollar industry.

Like so many online communities devoted to things a little horny and misunderstood, the wider world tends to scrutinize and discredit romance readers, especially when Fae fucking is involved. James, who wants people to know he does read the books too, saw a way into two niches that could compliment each other.

“I think what I like about the whole culture — the BookTok culture and dubstep culture — it's just letting your freak flag fly in a way,” he told me in a call. “It’s accepting and embracing what you're into within a safe and healthy space. I think that's a really beautiful thing.” 

Read the rest of this story here.

MORE FROM 404

Sentry mode? The “security protocols” on a Tesla stopped a Homeland Security Investigations agent from placing a tracking device on it, according to a warrant reviewed by 404 Media. On Halloween of 2025, an HSI Special Agent filed a more than 60 page application to place a tracking device on the Tesla of a suspected drug trafficker in Milwaukee. Agents had been watching alleged drug dealer Sam Stair — a local landlord they believed was using his rental properties as the front for a drug trafficking operation — for months when they asked a judge to let them install a tracker on his car. According to the warrant application, Stair went everywhere in a white Tesla and the agents wanted to see where it was when they couldn’t keep eyes on it.

FROM AROUND THE WEB

Ghosting much... SpaceX will testify before the New York City Council this week about AI safety risks. This is after Elon and co ditched a hearing on Oct. 5.  

Last week, a video came across my feed of a man saying horny lines over a dubstep beat. “On your knees,” he snarled. As the beat dropped, he growled, “Mmm, now look at me.” 

“Instagram reels just showed me a guy who makes 'smutstep' for the booktok crowd and it is the funniest thing I have ever watched,” the person reposting the video on X wrote. The replies are predictably harsh: “I think this is actually the worst thing I have ever heard.” “Who the FUCK is demanding this 😭” 

People demanding this is why it exists. DARQ DAGR, whose real name is James, is a dubstep musician and voice artist who’s been working in the music industry and voice acting world for years. But smutstep is what’s made his work go viral, in part thanks to the people who hate it so much – and the ones who demand more of it.

Smutstep emerged as a reaction to BookTok, a subculture within TikTok built by book lovers and their various followings. Within BookTok, the romantasy book genre thrives, with series like The Fourth Wing and A Court of Thorns and Roses (ACOTAR) gaining massive readerships for their blend of elven high fantasy and dragon-based erotica. The romantasy genre is not a quaint fandom. It’s a billion-dollar industry.

Like so many online communities devoted to things a little horny and misunderstood, the wider world tends to scrutinize and discredit romance readers, especially when Fae fucking is involved. James, who wants people to know he does read the books too, saw a way into two niches that could compliment each other.

“I think what I like about the whole culture — the BookTok culture and dubstep culture — it's just letting your freak flag fly in a way,” he told me in a call. “It’s accepting and embracing what you're into within a safe and healthy space. I think that's a really beautiful thing.” 

James and I talked about modern artistry in a world where interactivity and engagement rule, why he doesn’t take all of this too seriously, and the value of escapism in a time when everything else sucks. And yes, I ask him to do the growl.

This interview has been edited for length and clarity.

SAM: I will admit just off the bat, I'm not in the BookTok world personally.

DARQ DAGR: Uh-huh.

I have nothing against BookTok. Beautiful community. But I can't get into it. I've tried like, ACOTAR. I haven't found my romantasy, I suppose. So I might ask you some dumb questions, but hopefully you can also serve as a little bit of an explainer for those of us who are not super in that world. Tell me how you got into this?

Yeah. So the thing is, it wasn't like when I was a kid, I was like, when I grow up I wanna growl. You know? I've been a trained professional vocalist for a really long time. I've done metal and I've done theatre, I've done pop, I've done rock. The reason I'm in Nashville right now is because I spent eight years in a country band that was touring the world. I just kinda do everything there is to do with my voice. I've been a professional performer and vocalist for a really long time. My wife is really into the BookTok world. And so I was exposed to the community and the books through her. 

The first video that went viral for me was when I had just left my country band. And all I wanted was for the way I was presenting myself and expressing myself to be true to the things that I was into, which is dubstep. I had fallen in love with dubstep. I think it's the most beautiful community in the world. And then, I've always been a huge fantasy fan. I've always been really into Lord of the Rings and The Witcher and all that stuff. So getting into romantasy was not a big step for me, because I'm already a fan of fantasy. Making that video was me kind of saying, ‘I feel like a lot of these BookTok boys are getting the growl wrong.’ And then I did a growl that I did from back in my metal days. And it just blew up and it created this whole community of people who were really into the growl. But I was not the first person to do the growl. 

I didn't know that. 

There's another creator who was doing it long before me. His name's Michael Ayok. I can't take credit for being the first to BookTok growl, but I definitely get a lot of recognition for it. 

Obviously I wanted to be producing dubstep music, but my community all wanted me to growl, so it was like, how do I make this make sense? And so I just started growling in my dubstep and inadvertently created a subgenre of dubstep called smutstep. It's all community driven though. Honestly, even the name smutstep was a comment on one of my videos.

Somebody had requested that I growl ‘sit down’ and I did a video growling it that did really well. So I was like, well, let's just make a dubstep drop out of this. It's community driven, and it's fun. I'm glad that people are liking it. 

I think the biggest issue though is that... I'm having fun. I do not take this seriously. Again, it wasn't a dream of mine to grow up and growl at people. I took two very niche communities — the dark romance BookTok niche community, and the dubstep community — that are not designed to be exposed to general culture. So there's a lot of hate that comes with that and a lot of negativity. People react very strongly to what I do. And I think that that's as an artist, I think that's effective art. You want people to be moved to an extreme. You know? But you cannot control what that extreme is gonna be. 

There are people that treat me like Marilyn Manson in the nineties. His art is meant to be taken seriously. He is making a social commentary where he's putting a mirror up to society and showing how ugly it is. Whether you love that or you hate it, it's meant to be taken seriously. Smutstep is not meant to be taken seriously. If you enjoy it, that's awesome. You know what I mean? I'm having fun with it. I love the community I've created around it. We're all having fun. But it's not meant to be taken as seriously as so many of the haters take it.  

Yeah, it's broken containment from these specific niche communities, into the wider world. Which is the curse and blessing of social media, I guess. Something breaks out and becomes viral and then everybody's aware of it, even people who maybe are not the audience. 

I sent you the link to the video that's got a million views now on X, and all the comments and replies are really rude. So just be warned. People are like, ‘I'm never gonna unmute this. I would never unmute this to save my life,’ that kind of thing. And like you said, it’s not that serious. If it's not your thing, that's okay. Move on.

But what do you think about those comments? The ones that are like, ‘this is gigacringe.’

That's been a lot of what I deal with on other platforms. Facebook and TikTok are way better. On Instagram, l have my comments limited to people who follow me because it's just so much hate.  

People are crazy on Instagram. People will say the most sideways shit on Instagram.

Yeah, and that's that's the thing. Like obviously, as much as we're all just having fun, of course it does mentally take a big toll on you.

You said this is community driven. Were people waiting to have this sort of thing enter their already-existing BookTok community, or where do you think it comes from? Why are people resonating with this?

Men in BookTok is not a new thing. Making it dubstep is my brand. But for me, smutstep is like the KISS makeup. It's a gimmick. Everybody needs something that makes them stand out. So right now, smutstep is what makes me different, it's what makes me unique. 

Most of my content is based off of people making requests in the comments. I think that may be why it's taken off the way it has. Obviously it has to do with me, but it has so much to do with the people who are enjoying it. This is something that I think in a lot of ways is actually a much more modern take on entertainment. From its inception, it’s community demand, and giving people what they want within what I wanna do. I'm not doing something I don't wanna do. It's like, all right, you guys want this? Well, I'm gonna make it, but I'm gonna go the dark romance route and make it super aggressive, because I want to make dubstep out of it, and people are like, ‘That's fucking dope.’

Are you familiar with like the romantasy theme park videos?

No. No.

Oh my god. You would get a kick out of this, and probably your wife would also, but it's part of SeaWorld. You know how around Halloween, theme parks will do like horror nights, and characters come out and chase you? It's that, but it's BookTok boys.

I'll send you a link. But it has gotten a really big reaction from wider culture, where people are like, ‘this is so cringe and weird.’ The execution is really cringe and weird, but it is responding to something people wanted, which was: romantasy in a more interactive way. Is there anything that people are demanding from you more than other stuff? 

There's a book series called The Fourth Wing and there's a dragon in it called Tairn. Somebody said that Tairn should be Scottish, because his name is Tairneanach, which is a Scottish name. So I did a growl, but in the Scottish accent. 

I do another series with masked growls. I'm supposed to do one today, if the mask gets here in time. It’s a Scream mask 'cause we're in spooky season, and people have been wanting that for as long as I've been doing this.

I saw the motorcycle helmet one. People really were into that.

I think what I like about the whole culture — the BookTok culture and dubstep culture — it's just letting your freak flag fly in a way. It’s accepting and embracing what you're into within a safe and healthy space. I think that's a really beautiful thing. Maybe it's just as I get older, but I'm just so disillusioned with reality and I constantly want more escapism for myself, and want to give others more escapism as well. So that's kind of my goal as an artist is just escapism.

That’s a huge appeal of fantasy and romance in general. I'm also a big Lord of the Rings fan. That type of fantasy I can get with. I wonder if Lord of the Rings launched today, if we would be calling it romantasy. I guess there's not enough sex in it though.

The thing about romantasy is, there does need to be pretty pretty graphic scenes in it. But Lord of the Rings has none of that. I do read the romantic stuff too. I don't wanna be somebody who just does it for the views. I do read both.

Do you think people have picked up on the smutstep genre since you started? Are there new people doing it? 

I haven't noticed, but that doesn't mean someone's not out there trying and just hasn't had a video hit yet. And to be honest, I'm not surprised. I think that it's one of those things... It's human nature to have an aversion to something new that they don't understand. It’s still in the phase where I think it's more ‘what the fuck’ than something that is socially acceptable. Which again, it was never meant to be broadly socially acceptable. It was meant to be niche-acceptable, which it already is. I don't think there's a lot of people trying to do it because I think people are too afraid of having to deal with the same stuff I deal with.

I would be remiss in letting you go if I didn't make you do a growl. Would you be willing to offer us a growl? 

I can. It's not going to be that loud, because I don't have a mic, but I can do one. Ready?

[Growls]

Did you hear it? Did it pick it up?

It was like a growl in the distance. I'll practice mine. I'll do it on the podcast maybe and you can critique my growl. 

This article was produced in collaboration with Court Watch, an independent outlet that unearths overlooked court records. Subscribe to them here.

The “security protocols” on a Tesla stopped a Homeland Security Investigations (HSI) agent from placing a tracking device on it, according to a warrant reviewed by 404 Media.

Good Monday morning! Today's big story is an investigation from Joseph about cops and an AI tool that takes data from sites like Airbnb and Zillow and identifies specific properties. The internet is full of photos of the interiors of people's homes, from real estate and rental listings to short-term stays, and that data is in the hands of law enforcement.

And in other news, a very interesting interview with the whistleblower subject of Sorkin's new movie, some big legislative impact, and what caught my eye over the weekend around the web. Let's get into it.

AI Company Lets Cops Pinpoint Specific Houses Based on a Single Interior Photo

An AI company now lets cops take a photo and nearly instantly figure out what specific home it was taken in, using only clues in the photo itself, and is clearly pulling data from sites like Zillow and Airbnb. 

The tool, called Raven, shows the increasing power of AI capabilities available to local law enforcement agencies. 404 Media previously reported that both the Los Angeles Police Department and Miami-Dade Sheriff’s Office (MDSO) have bought access to Raven, which was previously called GeoSpy. Now, Raven, made by a company called Graylark Technologies, has added features that let cops analyze the interior of homes.

In a post on LinkedIn earlier this month, Graylark CEO Daniel Heinen wrote the company was introducing “the ability to geolocate interior images across millions of short-term rental units worldwide.” An accompanying demo video shows someone taking a photo from X of a washer/dryer unit inside a building. They upload it to Raven, select “Find Property: Interior and exterior property geolocation,” and then choose a region to search.

After a couple of seconds, the map interface zooms in on an area in Charlotte, North Carolina. On the right hand side, the screen displays a list of results. The top one reads, “Renovated! Walk Uptown/located in 2 Hot Spots!” That result directly quotes the language on a specific Airbnb listing in Charlotte, and the photos in the Airbnb listing show the same property.

Read the rest of this story here.

MORE FROM 404 MEDIA 

Spoilers ahead for “The Social Reckoning.” Did you catch this week’s interview episode? Jason talked to former Facebook employee Frances Haugen, who became one of the most important tech whistleblowers in 2021 when she exposed how Facebook’s algorithm was pushing people toward hate groups, showed Instagram was making teen girls feel worse about themselves, and showed that the company knew about its detrimental impacts on society. Haugen’s story is the basis for Aaron Sorkin’s new movie “The Social Reckoning,” which follows her evolution from model employee to leaker to formal whistleblower. Jason and Frances discuss what the movie got right about journalist-source relationships and how AI is supercharging privacy concerns. 

Listen to the weekly podcast on Apple Podcasts, Spotify, or watch the convo on YouTube.

An AI company now lets cops take a photo and nearly instantly figure out what specific home it was taken in, using only clues in the photo itself, and is clearly pulling data from sites like Zillow and Airbnb. 

The tool, called Raven, shows the increasing power of AI capabilities available to local law enforcement agencies. 404 Media previously reported that both the Los Angeles Police Department and Miami-Dade Sheriff’s Office (MDSO) have bought access to Raven, which was previously called GeoSpy. Now, Raven, made by a company called Graylark Technologies, has added features that let cops analyze the interior of homes.

Welcome back to the Abstract! Here are the studies this week that spotted a blast from the past, opened a portal between realms, yakked it up, and rose from the ashes.  

First, scientists have spotted a mysterious radio signal from the primordial universe that could illuminate cosmic evolution (it’s not aliens… sorry). Then: a diamond in the quantum rough, the decline of a fine bovine line, and a second-generation planet.  

As always, for more of my work, check out my book First Contact: The Story of Our Obsession with Aliens, or subscribe to my personal newsletter The BeX Files. 

A long time ago in a galaxy far, far away 

Caleb, Manisha et al. “A fast radio burst at redshift 2, three billion years after the Big Bang.” Science.

Scientists have discovered the most distant fast radio burst (FRB), a type of mysterious radio flare from space. This burst erupted when the universe was only three billion years old and sent radio waves across 10 billion light years before they reached Earth on March 4, 2024. 

The distant signal, known as FRB 20240304B, hails from an ancient galaxy beyond “redshift 2,” which means it originated more than twice as far as the next-farthest known FRB. Redshift, represented by the variable “z,” measures how wavelengths of light get stretched out in their journeys across space, a phenomenon that shifts them to the red end of the spectrum. Generally speaking, the more distant the object from Earth, the higher the redshift.

“Approximately one hundred FRBs have identified host galaxies with measured redshifts, with the vast majority at redshifts z ≲ 0.5,” said researchers led by Manisha Caleb of the Sydney Institute for Astronomy. “Only a small number of FRB host galaxies have been identified at z ≳ 1. This observational bias is driven by the sensitivity limit of radio observations that are capable of detecting FRBs and localizing their coordinates.”

Caleb and her colleagues were able to capture the remote flash using South Africa’s MeerKAT radio telescope. Follow-up observations with the James Webb Space Telescope pinpointed “a low-mass, clumpy, starforming galaxy” at redshift 2.148 as the host of the burst.

FRBs produce incredibly energetic radio pulses, but the exact mechanisms that generate them remain unknown. Given the diverse features of these bursts—for instance, some repeat, and some are one-offs—they might come from many different sources. In the case of FRB 20240304B, the team speculated that the burst is a magnetar, the highly magnetized remains of a massive star that went supernova. 

“The low stellar mass, active star formation, and low metallicity of the host galaxy are consistent with a magnetar origin of the FRB,” the researchers concluded.

This milestone detection of such a distant and ancient FRB opens up the possibility of finding more bursts at high redshifts. In addition to pushing the limits of observation, future discoveries could allow scientists to extract clues about the evolution of the universe that become imprinted in these signals during their vast journeys. So bring on the bygone bursts!  

In other news...

Putting a quantum spin on things

Nayak, Anshuman et al. “Spin force from a nitrogen-vacancy ensemble drives a 100-mg levitated resonator.” Science Advances.

Time to shrink down from the largest cosmic scale to the tiny quantum realm. In a new study, scientists report that they successfully moved a centimeter-scale diamond with a force known as quantum spin, making it by far the largest object ever manipulated by a quantum effect. It represents a major breakthrough, as the diamond is the first object large enough to be subject to gravity to be moved in this way, further bridging the gap between the loopy quantum realm and regular, everyday physics.   

A graphical representation of the observed movements. a) When the laser is off, the diamond slab has a small magnetic moment (blue arrow) induced by the latent spin-state inside the nitrogen-vacancy centers of the diamond. b) When the green laser is on, the spin-state is polarized, causing the magnetic moment to fluctuate weakly, pushing the diamond down towards the magnetic field (red arrows). Image: Nayak et al., 2026

In the new work, scientists worked with a nitrogen-vacancy (NV) diamond containing electrons with “spin,” a form of angular momentum on the quantum scale. Then, they shot a laser at the diamond—as science often demands—which stimulated electrons to spin in a certain state that eerily moved the diamond.

“Experimentally observing this spin force for anything larger than atomic scales has proved challenging,” said researchers led by Anshuman Nayak of the Okinawa Institute of Science and Technology. “We have demonstrated the motional driving of a massive diamagnetically levitated mechanical oscillator by the force of NV spins in a gradient magnetic field.”

Congratulations, humanity: We just earned our license to quantum-motionally drive. Proceed responsibly.

New yak just dropped

Oppenheimer, Jonas and Gillardet, Alexandre et al. “Ancient genomes reveal an extinct bovine species from mid-latitude Asia.” Current Biology.

Domestic cows are overwhelmingly the most common bovine species on Earth today, but this family of swole ungulates once contained a diversity of wild lineages that included aurochs, steppe bison, and oxen. 

Now, scientists have discovered the remains of a distinct bovine species—named “yak X”—in Siberia’s Denisova Cave, which was also inhabited by many human species (hominins) during the Pleistocene era, which ended 12,000 years ago. 

Yak X (cool name!) began diverging from extant yaks about 400,000 years ago, and had formed its own unique yak pack by 250,000 years ago, reports a team that sequenced its ancient genomes. The youngest bones from this mysterious animal date back about 27,200 years, so it must have died out sometime after. 

“Yak X is a Pleistocene megafaunal species previously unknown to genomics,” said researchers co-led by Jonas Oppenheimer and Alexandre Gillardet of Stockholm University. “Yak X appears to have become genetically isolated from other bovines including bison and aurochs despite their apparent geographic proximity in Pleistocene mid-latitude Asia. This lack of gene flow is in notable contrast to hominins at Denisova Cave, which displayed complex patterns of admixture among multiple divergent lineages.”

In other words, hominins at this cave, including Neanderthals and Denisovans, appear to have interbred, while this yak didn’t cross with its fellow bovine relatives. This has been Yak News.

The birth and death of a phoenix planet

Williams, Jamie T. et al. “Discovery of a second-generation planet candidate accreting onto a white dwarf.” Nature Geoscience.

Planets are frequently obliterated by the explosive deaths of their stars, but they can also be born out of those same stellar ashes. Scientists have now directly observed the first evidence of one of these so-called “second-generation” planets that formed around a type of dead star called a white dwarf.

Located about 270 light years from Earth, the white dwarf—known as HS 0209+0832—was once a star similar to the Sun. About five million years ago, it shed its red giant shell and collapsed into its current husk state.

Since its transition to the afterlife, a new planet has coalesced out those ejected embers, though this world is destined for an early grave. Scientists spotted telltale signs of second-generation elements—including zinc, copper, and niobium—in the spectrum of the white dwarf, which are distinct from first-generation planetary ingredients, such as the silicon and iron that make up Earth. The discovery exposes a dead star feeding on its posthumous offspring that was birthed from its own ghostly gas.

“Here we report the discovery of a white dwarf accreting material that is unlike any Solar System object,” said researchers led by Jamie Williams of the University of Warwick. “The discovery of this second-generation planet that is chemically distinct from first-generation material demonstrates that close-in planets around white dwarfs can form…Establishing a sizable sample of such systems will open a window on second-generation planet formation.” 

Some stars are so prolific that even death won’t stop them from making new worlds—and then eating them. Respect.

Thanks for reading! See you next week.

In response to a 404 Media investigation, Sen. Ron Wyden is demanding more information about how a federal license plate reader camera program works.

Last month, we reported on the High Intensity Drug Trafficking Area program’s license plate reader database, which mirrors data from city license plate reader programs onto federal databases. The HIDTA program falls under the White House’s Office of National Drug Control Policy, which infamously ran a secretive cell phone data surveillance project called Hemisphere. We reported that HIDTA has now created a complex system for the federal government to obtain license plate data from companies like Flock, Axon, and Motorola via a series of agreements with cities and towns across the country. 

In a letter to Sara Carter, director of the Office of National Drug Control Policy, Wyden said that the office needs to publish a report it commissioned into the privacy practices of several of its surveillance programs, including the license plate reader database. 

“404 Media has reported that the HIDTA program is being used to aggregate location data on Americans derived from Flock, Axon, and other vendors’ ALPRs,” Wyden wrote. “There is currently limited transparency into these HIDTA-funded surveillance programs, but ONDCP has commissioned an assessment into the privacy practices of these programs that should be released to the public.”

Wyden said that the nonprofit contractor MITRE conducted a privacy review of HIDTA’s surveillance programs, including its cell phone data collection project and its ALPR program, in 2024. That report has never been made public. Wyden demanded the release of that study, as well as a separate “analysis of automated license plate reader systems and practices.”

“There is currently limited transparency into these HIDTA-funded surveillance programs, but ONDCP has commissioned an assessment into the privacy practices of these programs that should be released to the public,” he wrote. “This review was conducted by MITRE and completed in 2024, but ONDCP refused to provide it to my office and has subsequently not made that report public. I urge you to make this review public.”

This is Behind the Blog, where we share our behind-the-scenes thoughts about how a few of our top stories of the week came together. This week, we discuss AI and spirituality.

JASON: I think we’ve generally carved out a pretty good lane for ourselves in the broader AI debate, writing about its current capabilities, its current harms, and the fact it was trained on stolen content without saying that it will never be able to do anything of use. We are often tinkering with AI so that we can write about it from an informed perspective, and so every once in a while, while I’m working on a story I will see something where it feels like AI could possibly be useful for some specific part of the reporting. 

An Iowa man has kicked off controversy over religious freedom in the small town of Ottumwa, Iowa by opening a city council meeting with a prayer to Satan, which then kicked off a debate about the proper time in the meeting agenda to undo the “curse.” 

We start this week with a story from our old friend Lorenzo Franceschi-Bicchierai, about how cops can bypass the inactivity reboot on iPhones. After the break, Jason tells us how people are losing their minds over an LLM ‘torture’ prison. In the subscribers-only section, Sam explains what happened in a wild ChatGPT case in New Mexico.

Listen to the weekly podcast on Apple Podcasts, Spotify, or YouTube. Become a paid subscriber for access to this episode's bonus content and to power our journalism. If you become a paid subscriber, check your inbox for an email from our podcast host Transistor for a link to the subscribers-only version! You can also add that subscribers feed to your podcast app of choice and never miss an episode that way. The email should also contain the subscribers-only link for the extended video version too. It will also be in the show notes in your podcast player.

• ⁠Cops Can Bypass iPhone’s Automatic Reboot to Get Into Locked Phones, Leaked Video Claims⁠
• ⁠Someone ‘Torturing’ LLMs in a Robot Prison Has Triggered the Dumbest Debate in AI Yet⁠
• ⁠Lawyer Cites ChatGPT-Invented Fake Witnesses in Murder Appeal⁠

Body camera footage obtained by 404 Media reveals the first Flock camera searches ruled unconstitutional by a federal judge, and highlights how the system has turned otherwise mundane traffic stops into interrogations for drivers.

On Friday, we reported that a federal judge ruled the use of license plate reader systems in the arrest of a woman named Melissa Kyle to be an “unconstitutional warrantless search,” “indiscriminate mass surveillance,” and a violation of the driver’s Fourth Amendment rights. The judge in that case ruled that, even though Kyle had more than 91 pounds of meth in her vehicle, the police had no justifiable reason to search Flock for her license plate and no reason to suspect that her travel as shown on Flock’s system was suspicious. Therefore, all of the evidence from Flock and the search of her vehicle must be thrown out.

The body camera and in-vehicle footage, alongside records from Flock and the Motorola ALPR system obtained by 404 Media shows how the use of license plate reader systems is being used to create probable cause where a person’s driving patterns are suspicious enough to pull them over.

404 Media obtained the footage with the help of one of our readers, who agreed to go to the U.S. District courthouse in Tulsa and purchase it from the clerk; the court did not make the footage available online even though it was entered as evidence in the case.

In the footage, which is from Tulsa County deputy sheriff Freddie Alaniz’s body camera, Alaniz is seen driving 60 miles per hour, one hand on the steering wheel, one hand on his laptop, searching Flock before he had even fully pulled over Alaniz. Alaniz had seen the car Kyle was driving had California license plates, and decided to pull it over for no reason other than it was from California, the court determined. The video shows that Alaniz told his colleagues that he was sitting on the highway and “saw her go by, and I just started running her info on Flock and Vigilant [Motorola’s ALPR system].”

“She actually didn’t have any [Flock] hits until just west of Amarillo, [Texas], so I thought I’d drive up,” he said, suggesting that he thought it was odd she was driving back from California. “I got her for a lane violation.” 

In the footage, Alaniz tells Kyle he pulled her over ostensibly for changing lanes without a turn signal. Kyle tells Alaniz that the car is a rental, and he asks her to step out of the vehicle and get into his car while she looks up the rental information. While she is looking up the rental information, he tells her she is only going to get a warning, but proceeds to interrogate her about the travel while going through the car’s driving history on his in-car laptop.  

Kyle told Alaniz she had been visiting family in California from Missouri for a few days after separating from her husband. As she’s telling him this, Alaniz scrolls through a record of her travel history on his in-car laptop, which documents every time the car passed a Flock or Motorola automated license plate reader camera over the last 30 days. Visible on the screen, there are a total of 79 hits, and roughly 50 during the few-day period Kyle was renting it. The ALPR hits show the car leaving Missouri, driving through Oklahoma, Texas, New Mexico, Arizona, and entering California when she passed a Motorola ALPR camera in Topock, Arizona, on the border with California. They then show her essentially reversing the route, and driving back through Oklahoma. (Alaniz did not have access to ALPR hits from California; this may be because Flock drastically limited nationwide sharing from California ALPR cameras following illegal searches for immigration violators and a woman who had an abortion.)

Alaniz asks Kyle where she’s been and where she stayed, and compares it to the license plate camera records. He begins quizzing her: “Do you remember what day you left Missouri?,” he asks. 

Alaniz clicks different ALPR hits on his map, each bringing up a photo of her car, a geographic location, and a timestamp of when she drove by the camera. The government’s lawyers later argued in court that minor discrepancies between what Kyle told Alaniz and what the ALPR data showed meant she was lying about where she’d been on which specific days and therefore gave Alaniz probable cause to search her vehicle. 

Alaniz tells Kyle that he is giving her a warning for changing lanes without a turn signal, closes his laptop, then says he wants to ask her a few questions.

“Your short trip to California, I feel like. I don’t feel, I know from my training and my experience that people who do very short trips to California and come right back are transporting large amounts of drugs,” he says. “People who do that—not everybody, but some people do. With my training and experience, I feel that may be something going on here. May I search your car?”

She says no. Alaniz calls for backup, and says “You are being detained. You are not free to go.” In the footage, Alaniz tells a colleague that “she went to California for two days, kind of making stuff up when I ask her where she stayed at.” 

He used Alaniz’s travel history, her “nervousness,” and the fact that she doesn’t recall every detail of her travel precisely as probable cause to search her vehicle, where he and his colleagues found 91 pounds of meth. Alaniz described this in the footage as “a motherlode,” and “a shit-ton of meth.”

But the way that he came to this conclusion was unconstitutional, U.S. District Court Judge Sara Hill ruled last week, and all of the evidence—including the car’s travel history and everything the police found during the search of the vehicle—must be disregarded in court as “fruit of the poisonous tree.”

It is often the case that unconstitutional, privacy-violating searches that are regularly done on everyday people doing nothing wrong are discovered in court cases in which serious crimes have occurred. In this particular case, Alaniz discovered what appeared to be meth trafficking, but he did so only after suggesting that an ordinary interstate travel pattern was somehow suspicious, and only after using the Flock and Motorola systems to show an incredibly detailed history of a person’s travel and to interrogate her about it. 

Hill wrote “The factors that the government relies upon [to search Kyle’s vehicle] are the same type of circumstances that everyday Americans encounter on long road trips for many legitimate reasons. Many of us drive longer than we want to get to a desired destination, or to no destination at all other than the road and sights ahead. Many of us lose track of what exact day of the week it is when we are traveling, even if it is for just a moment. Many of us travel for myriad reasons (some better than others), cross state lines, pack too much, buy too much, smoke cigarettes, and rent cars. And many of us even get a bit nervous when talking to law enforcement.”

One of the problems with automated license plate reader systems is that they allow police to recreate not just a single person’s movements and travel history, but any driver’s movements and travel history. Documents filed with the court show the totality of both the Flock and Motorola records, and show timestamped, geographically mapped images of the vehicle multiple times per day, driving throughout the entire country. The records also highlight just how many jurisdictions and businesses have Flock and Motorola ALPR cameras, and how that data forms a nationwide network. 

For example, Alaniz had access to a photo of the rental vehicle taken by a Lowe’s hardware store-owned camera in Missouri, various Texas state police-owned cameras, by the New Mexico State police, the Kingman police department. In a five-day period, the car was scanned more than 50 times by 11 different law enforcement agencies.

“Alaniz’s search in just the ALPR system provided him with more than 50 individual records of Kyle’s whereabouts across the country for an entire month,” Hill wrote. “The Court finds that because the ALPR systems Alaniz used to search Kyle’s historical location information intruded on her reasonable expectation of privacy in the whole of her physical movements, it was a search under the Fourth Amendment. Based on the information in the record, the only reason Alaniz conducted that search was because he saw her license plate was from California. That search was not supported by probable cause, and it was done without a warrant in violation of Kyle’s Fourth Amendment rights.”     

The Motorola ALPR report shows that, after the car was impounded, it was scanned two more times on the back of a tow truck later that day.

Jonathan the tortoise, the world’s oldest living land animal, is still chugging along at the ripe age of roughly 194. Now, scientists have discovered some of the secrets to Jonathan’s longevity by sequencing his genome for the first time, according to a study published Wednesday in Science Advances.

Jonathan, a Aldabra giant tortoise (Aldabrachelys gigantea), hatched around 1832 in the Seychelles archipelago, and he was already in his twenties when Charles Darwin published On the Origin of Species. In his fifties, Jonathan was brought to the remote island of Saint Helena, along with three other tortoises, as a gift to the British colonial governor in the 1880s. He has lived there ever since. 

Aldabra giant tortoises often become centenarians, but Jonathan is a major outlier even for his species as he approaches nearly 200 years on this planet. To better understand his extreme lifespan, researchers evaluated Jonathan’s genome based on swabs of his cheeks and compared it with the genomes of several other tortoises, including a 36-year-old named Tank.  

The results revealed that Jonathan has “unique gene variants in most aging pathways” including DNA repair, insulin regulation, mitochondrial function, and “low entropy” methylation, reports the study. 

“Aging is very complicated, and there's all these different hallmarks,” said Stephen Clark, an aging researcher at the non-profit Kallel Foundation and an author of the study, in a call with 404 Media. “That's why this Jonathan study is so interesting. We're still just at the very beginning of trying to understand aging.”

The study was not an easy lift. Clark first reached out to Jonathan’s caretakers in 2017, but it took some negotiating to figure out the best way to obtain the tortoise’s genetic information. A blood draw was deemed too risky, so Jonathan was coaxed into opening his mouth for a swab. The results were delayed by incomplete early samples, the Covid pandemic, and new regulations governing access to Jonathan. 

After years of back and forth, the samples were delivered from Saint Helena to Florida by the U.S. Space Force. The results showed that Jonathan had many gene variants the team expected to see, based on studies of other long-lived individuals and populations. These included variants associated with DNA repair, maintenance of aging-related sequences called telomeres, and the process of cellular recycling known as autophagy.

But the researchers found a surprise in Jonathan’s “methylome,” which is a set of methyl-based modifications involved in gene expression. The subset of Jonathan’s methylome related to mitochondrial processes was unusually pristine, or “low entropy.”  

“Jonathan's really the first of his kind to have this analysis, and we were also able to do the methylome for the younger tortoises,” Clark said. “We actually compared him to a five-year-old tortoise, so we had 189 years of difference between the methylomes. No one's ever done that, even in humans, because no humans live that long. That was one of the main things we were excited about: how does this methylome change with age?”

Whereas most of Jonathan’s genome showed signs of entropy commensurate with his age, his mitochondrial methylome seemed on par with that of the five-year-old tortoise, signaling that these pathways may play a special role in his advanced age. However, Clark said it would take more research to follow up on that lead, and to untangle the complicated web of genetic components that influence aging and lifespan. 

“We're interested in long-lived species like Jonathan because we can hopefully find other targets,” Clark said of his team’s work at Kallel Labs. “The ultimate goal of the company is to affect human healthspan and lifespan.”

As for Jonathan, he continues to live out his voluminous days at the governor’s residence, Plantation House, where he and his fellow tortoises have become one of the island’s tourist attractions. Saint Helena is also known for the exile of Napoleon Bonaparte, who died there a mere decade before Jonathan is thought to have been hatched. It’s amazing to think about just how much the world has changed in Jonathan’s lifetime. Long may he graze.  

Howdy, it's hump day and we're rolling along. Today we've got an update on a very strange case involving a man whose image was resurrected from the dead via AI and made to appear in front of a judge to announced "forgiveness" of his murderer. 404 Media contributor Matthew Gault had a long conversation with the man's sister, who wrote the words and generated the video, and she said that swaying the judge was the entire point.

THE BIG STORY

Her AI-Generated Video Swayed the Judge. The Court Said it Carried 'Undue Emotional Weight'

A man convicted of manslaughter in Arizona will be resentenced because an AI-generated video of his victim speaking from beyond the grave was ruled to have carried “undue emotional weight” as an impact statement. An appellate court in Arizona ruled that the manslaughter charge will remain, but the judge must reconsider the length of the man’s prison term because of AI.

In 2021, Gabriel Horcasitas shot and killed Christopher Pelkey during a road rage incident. A jury found him guilty of manslaughter. During Horcasitas’ sentencing hearing, Pelkey’s sister Stacey Wales played an AI-generated video of her brother as part of her victim’s impact statement. In the video, which she scripted with her own words that she made an AI generated likeness of Pelkey say, the AI avatar of Pelkey forgives his killer and said they “could have been friends” in another life. 

“I loved that video,” the judge said while handing down the maximum sentence of 10 and a half years.

Wales told 404 Media that her intent with the video was to sway the judge. “Isn’t that what you want human connection to be?” she said. “Do you ever come out of a movie and say: ‘Well, that was too emotional. That was too powerful. Human connection is powerful, and trying to convey that to somebody that's never known another person, this person on the earth, to convey their lifetime of 37 years down to a two-hour sentencing event is hard to do, and I think that victims and victims' families should be afforded every opportunity.”

Read the rest of this story here.

MORE FROM 404 MEDIA

A flock of new laws incoming. Several recently introduced pieces of legislation would, if passed, dramatically curb federal agencies’ access to Flock cameras, with the lawmakers referencing reporting by 404 Media in their explanations for why the legislation is needed. “At a time of growing concern about the unchecked power of artificial intelligence, Flock is eviscerating the very notion of privacy by installing tens of thousands of cameras in communities across America without their consent,” Bernie Sanders said.

A man convicted of manslaughter in Arizona will be resentenced because an AI-generated video of his victim speaking from beyond the grave was ruled to have carried “undue emotional weight” as an impact statement. An appellate court in Arizona ruled that the manslaughter charge will remain, but the judge must reconsider the length of the man’s prison term because of AI.

In 2021, Gabriel Horcasitas shot and killed Christopher Pelkey during a road rage incident. A jury found him guilty of manslaughter. During Horcasitas’ sentencing hearing, Pelkey’s sister Stacey Wales played an AI-generated video of her brother as part of her victim’s impact statement. In the video, which she scripted with her own words that she made an AI generated likeness of Pelkey say, the AI avatar of Pelkey forgives his killer and said they “could have been friends” in another life. 

“I loved that video,” the judge said while handing down the maximum sentence of 10 and a half years.

Wales told 404 Media that her intent with the video was to sway the judge. “Isn’t that what you want human connection to be?” she said. “Do you ever come out of a movie and say: ‘Well, that was too emotional. That was too powerful. Human connection is powerful, and trying to convey that to somebody that's never known another person, this person on the earth, to convey their lifetime of 37 years down to a two-hour sentencing event is hard to do, and I think that victims and victims' families should be afforded every opportunity.”

After sentencing, Horcasitas appealed. He argued that the AI Pelkey video was inadmissible because it carried “undue emotional weight” and that the “lifelike AI recreation of the victim conveyed an authority and authenticity” had a “psychological impact” on the judge, according to court documents reviewed by 404 Media.

The appellate court agreed and cited State v. Rose, a 2007 murder case where a man was sentenced to death for the murder of a police officer. During the victim impact portion of the sentencing in that case, the judge saw photos of the police officer’s children at his graveside. The court said those photos almost crossed the line into prejudicing the judge.

“The AI video crossed that line. Unlike the photographs in Rose, which captured a particularly poignant moment for the young surviving victims, the AI video here [...] does not reflect actual events,” court documents said.

“It clearly impacted the sentencing judge, who said he ‘loved the video’ and felt it ‘was genuine,’ pointing to the AI victim’s ‘obvious forgiveness’ of Horcacistas,” the court documents said. “On this record, the judge’s consideration of the AI video so prejudiced Horcasitas as to render the sentencing procedure fundamentally unfair.”

Wales and the rest of Pelkey’s family have spent the last five years in and out of various court rooms related to his death. If the current ruling holds, then she'll travel to Arizona from New York and give the same statement she did the first time through her brother’s AI-generated mouth, minus the AI-generated video. The same judge who originally said “I loved that video” will do the sentencing.

“Likely, the same people will go back down and make their speeches, and I will be making my victims' impact statement that I wrote for myself the first time around again, and I will be delivering Chris's AI script sentiment again,” she said. “If I need to stand there and read it myself, which would be legally lawful, I am prepared to do that. Chris's sentiment does not change. The delivery method will.”

Wales said she wrote the words that came out of the AI version of her brother, they weren’t AI-generated. She also noted that only the judge, her family, and the Horcacistas family were the only people who saw it during the trial. “This was not offered as evidence. Juries never saw this,” she said. “This was only created after a verdict was solidified, a guilty verdict.”

She also noted that the AI video was only one of a larger piece of testimony given that day. “I think that [the judge] is unfairly represented with a soundbite,” she said. According to Wales, the judge spoke for around half an hour and only mentioned the AI video once. Wales herself uploaded the soundbite from the judge saying he loved the AI-generated impact statement to YouTube, where it went viral.

But she also said she understood that AI is a new technology and when she played the AI-generated video of her brother that she was doing something no one else had done yet. She compared it to the way courts thought of photography in the late 19th century. 

“It took about 15 years [...] and about five landmark cases in the United States that went all the way up to the Supreme Court before photography was an accepted standard to be used in the courtroom for evidence, identification, and testimony, et cetera,” she said. “I believe that's what we're seeing now with AI. It is a brand new medium.”

Wales said she understood she was setting a precedent, for good and for bad, and that she was OK with that. “There is always that first case, and so that mantle weighs on me that I need to be careful with how I defend this and how I explain the impetus, the goals, the motivations, and the veracity of what was created, because there are victims that depend on freedom of speech for the future, and I do believe that victims and their families should have every opportunity available to them to make their their points,” she said.

There’s no firm date for the new sentencing. “We do respect the court's opinion, and if we need to operate in those guardrails, I am prepared to read the same script that the AI version of Chris read the first time around,” she said. “His sentiment has not changed. Our opinion of what we believed he would think about this whole thing has not changed. The words I penned as Chris's imagined opinion still have not changed and will not change.”

Multiple Democrat, Republican, and Independent lawmakers have introduced new pieces of legislation that, if passed, would dramatically curb federal agencies’ access to Flock cameras, with the lawmakers referencing reporting by 404 Media in their explanations for why the legislation is needed.

On Friday Senator Bernie Sanders (I-Vt.), Representative Alexandria Ocasio-Cortez (D-N.Y.), and Senator Jeff Merkley (D-Ore.) announced the Ban Flock Act, which would prohibit federal agencies from using automatic license plate readers (ALPRs) and block federal funding from state and local governments that use the cameras. It would also let Americans sue the federal government for violation of their rights through ALPRs.

“At a time of growing concern about the unchecked power of artificial intelligence, Flock is eviscerating the very notion of privacy by installing tens of thousands of cameras in communities across America without their consent,” Sanders said in the announcement posted to his website. “Going to the doctor? Flock knows. Dropping your kid off at school? Flock is tracking you. Flock is always watching. We cannot allow America to become a surveillance state where a handful of AI oligarchs profit by giving the government the power to track our every movement.”

Ocasio-Cortez said, “AI-powered cameras are keeping track of our every move and weaponizing this data against working people to make record profits. The widespread integration of this technology into American society is unconscionable.” Merkley added, “No one should have this unchecked surveillance power at their fingertips, which is why I’m teaming up with Senator Sanders to rein in this dangerous technology.”

Sanders’ announcement says that one reason for the legislation is Flock has shared state information with federal immigration officials. In May 2025, 404 Media revealed local cops were doing lookups in Flock for Immigration and Customs Enforcement (ICE). After that report, Flock made dramatic changes to its product, including stopping other agencies searching cameras in Illinois, California, and Virginia. Flock said it also introduced a new tool that blocks impermissible searches in real time. 

The announcement also said law enforcement have used Flock data to investigate protests against ICE raids and ‘No Kings’ demonstrations. 404 Media revealed both of these, reporting that California cops investigated an “immigration protest” using Flock lookups, and, using data from the Electronic Frontier Foundation, that cops used Flock to monitor No Kings protests around the country. 404 Media also recently reported Flock itself taught cops how to surveil No Kings protesters in a company webinar.

Hajar Hammado, senior policy advisor at activist and progressive policy group Demand Progress, said in a press release “The Ban Flock Act is the gold standard for any legislation working to fight invasive Flock cameras on the federal level. Flock and other ALPR companies have wormed their way into communities across the nation and drastic, all-encompassing action is needed to root them out.”

Senator Josh Hawley (R-Mo.) announced his own piece of proposed legislation late last month. The Stop Flock Abuse Act would require a written approval process for each search; force agencies to delete driver data after ten days, with exceptions for active investigations; and ban ALPR networks from incorporating facial recognition technology. During a recent senate hearing, Hawley pointed to 404 Media’s reporting specifically.

Separately, Representatives Greg Casar and Shontel Brown recently wrote to FBI Director Kash Patel asking how the agency plans to acquire nationwide access to ALPR data, Semafor reported. 404 Media first revealed this plan in May. The letter also referenced 404 Media’s reporting which revealed a cop in Texas used Flock to search ALPRs nationwide for a woman who self-administered an abortion.

arXiv, an open-access repository where researchers publish preprint academic research, has announced it will rate limit submissions because it has been inundated with AI-written papers. A researcher can now only send in two pieces per calendar month and have a total of three active submissions at any given time. In a blog post about the change, arXiv said AI has made it too easy to spam the publisher’s inbox and its volunteer moderation team is overwhelmed.

“The heart of arXiv’s process for detecting and rejecting low-quality papers is our many volunteer moderators,” Thomas Dietterich, an Oregon State University professor emeritus and the chair of arXiv’s editorial advisory council said in a statement. “We are so grateful that they donate their time and expertise every day. However, a relatively small proportion of authors are submitting a large number of low-quality papers and consuming a disproportionate fraction of the moderators’ time. This is unfair to authors who continue to submit quality papers — their papers can be delayed for days or weeks as a result.”

According to arXiv, it received 9,869 submissions in September 2016, 20,569 submissions in September 2024, and 40,363 submissions in September 2026. Submissions on the site have doubled in the last two years and have sextupled in the computer science category.

AI is driving this surge in multiple ways. Researchers are using LLM to parse massive data sets, write code, and design portions of experiments; some are also using AI to write the papers. “arXiv policy permits authors to employ AI as a tool in support of their research as long as it is disclosed and the research meets arXiv’s standards of scholarly interest and advances the field of research,” arXiv said in its rate limiting blog. “However, many of the submissions that arXiv is now receiving do not satisfy these requirements.”

arXiv said it’s seen an increase in “thin papers of narrow scope” as well as salami papers — where researchers write multiple articles based on one study. “There is also a marked increase in dense, AI-written papers. AI tools are making it easy for authors to flood arXiv and other repositories with these low-value papers,” it said.

Rate limiting was already part of arXiv’s policy, but it was originally left to each individual moderator’s discretion. “This policy update strives to fairly distribute the incredibly valuable work of our volunteer moderators who check that submissions meet these standards,” the publisher said.

This new policy is another part of a long battle the publication is having with AI-powered slop and spam. A little less than a year ago, the archive stopped accepting review articles and position papers in the computer science category and cited low effort LLM-written articles as the reason. In January it started requiring new authors to receive an endorsement from an existing author in the system. Previously the publisher accepted an academic email address as the sole qualifier. In May, arXiv took things a step farther and said it would ban researchers who submitted AI slop from the site for a year.

In the immediate weeks before Muse’s launch, Meta engineers found several security vulnerabilities in the company’s viral AI agent product, at least one of which could have allowed malicious users to break outside of Muse’s intended environment and access Meta’s own sensitive databases and services, 404 Media has learned. The issues were so severe that they reached Mark Zuckerberg and staff worked overtime to fix them.

These specific vulnerabilities were discovered before the launch of the product but required a multi-team “mad dash” to fix “a sudden spike in reported KVM escapes,” according to an internal post by Meta executives to its core infrastructure team seen by 404 Media. In order for Muse to work, a user gives the AI agent access to various important services and accounts that they own. On Meta’s end, each individual Muse instance runs on a kernel-based virtual machine, which connects to, but is supposed to be isolated from, Meta’s own critical infrastructure. A “KVM escape,” then, is when, through a security vulnerability, a Muse instance is able to escape from that virtual machine and interact with the system that runs it, or with other users’ virtual machines. 

According to a Meta source, as well as internal security documentation and internal posts viewed by 404 Media, at least one of the vulnerabilities could have allowed an outside attacker — that is, a normal Muse user — to access data in sensitive internal Meta databases. . At least one of the vulnerabilities was related to an exploit found in Linux kernel-based virtual machine code in July. 404 Media granted the Meta source anonymity to speak about sensitive security matters.

Several of the vulnerabilities were in the underlying Linux virtualization software that Meta uses for Muse. The security issue was considered serious enough that it was raised to Mark Zuckerberg, and several different security teams worked nights and weekends in the leadup to launch to fix the issues. This type of security push is not necessarily unusual prior to the launch of a major product, but is notable considering outside researchers have found several other security issues since Muse’s launch, and in the broader context of agentic AIs from OpenAI and other companies going on major hacking sprees. 

The Meta source said they felt security teams were asked to push hot fixes to these bugs as quickly as possible and in a way that wouldn’t delay Muse’s launch, leading to what they described as “half-baked protections being rushed out to enable the launch. Many senior engineers believe it’s inevitable we’re going to have a massive data breach as a result of Hatch.” Muse is called “Hatch” internally and in Meta’s codebase.

This security push was acknowledged in an internal post made by Meta’s vice president of core infrastructure Surupa Biswas, vice president of engineering Francois Richard, and senior director of engineering Josh Barry to the company’s core infrastructure team on September 18, 10 days following Muse’s launch. 

“With Muse, we are directly hosting and running agents on behalf of end users, a fundamentally different paradigm,” the post said. “A sudden spike in reported KVM escapes, plus heightened awareness of agentic safety issues made us rally on a service hardening push.” 

The post noted this push started on August 27 and lasted a “handful of weeks and weekends,” though Muse was released just 11 days later. The post says that the work involved taking steps to “reduce the surface area accessible to Hatch agents.” The teams also took steps to “constrain port/IP destinations Hatch and VMVM hosts can reach.”  

 A virtual machine escape of Muse is a potentially very serious security issue, and is classified as such in Meta’s bug bounty program. The company says it is willing to pay $300,000 to any security researcher who finds a bug that would allow for a VM escape, the highest payout it lists on its bug bounty website.

“Muse, an AI product from Meta, lets people create their own personalized AI agent — their Muse. Each Muse agent runs in a dedicated per-user virtual machine and connects to that user's own services: email, calendar, messaging, browsing, and third-party accounts. Because a Muse agent holds a user’s most sensitive data and can act on their behalf, we treat compromise of that boundary as a first-class security risk,” the company explains on the bug bounty page. The highest level of risk is “Compromise of Meta production and users beyond Muse” with a VM escape, which it describes as “reaching Meta production services or internal networks from Muse.” This is what at least one of the vulnerabilities could have been capable of, according to the Meta source.

In a statement to 404 Media, a Meta spokesperson said, “Muse is the first personal AI agent built for everyone and we’re proud of the work we’ve done to make it safe, secure and private, with built-in protections and user controls that put people in charge of how they use it. We’ve strengthened Muse through extensive dogfooding, agentic red teaming and our bug bounty program — and that work continues." 

Muse’s rollout has been uneven thus far. The agent has proven popular, or at least buzzy, for being able to do things like cancel subscriptions, make restaurant reservations, and book travel. But security researcher Patrick Wardle found a zero-day in Muse — a vulnerability that, to his knowledge, the company was not aware of at the time — that allowed apps and terminal commands to control a user’s Muse. Another Muse user was able to get Muse to export his Instagram followers, as well as his followers’ followers, something that shouldn’t be possible and which Meta’s security teams investigated, according to the Meta source.

“This issue is that Hatch makes the virtualization boundary a production security boundary,” Wardle told 404 Media of a potential Muse KVM escape. “We have users with root privileges inside a VM that is itself placed within Meta's production environment and given (by design) limited access to internal services. A single failure in KVM (or even a vulnerability or misconfiguration in an internally reachable service) can therefore turn arbitrary user code into production access. I feel like this design is inherently risky, particularly risky as AI lowers the cost of finding, analyzing, and exploiting exactly these kinds of complex virtualization vulnerabilities.”

“I know everything is always a tradeoff between usability and security, but this is why in top security environments, systems are air-gapped, as its always assumed that connected systems can be exploited,” he added. “Of course, there's no expectation to Meta to go that far, but having access to production environment literally one KVM escape away, is plain irresponsible.”

Welcome back to the Abstract! These are the studies this week that searched for the ur-animals, wandered the poles, rained on Mars, and destroyed the solar system.

First, scientists present new evidence that the first animals appeared more than 800 million years ago, a truly ancient origin that suggests our metazoan ancestors survived a period known as Snowball Earth, when our planet is thought to have been nearly completely frozen. Then: Earth’s poles won’t sit still, the sepulchral stuff of life, and a dramatically shortened lifespan for our solar neighborhood.

As always, for more of my work, check out my book First Contact: The Story of Our Obsession with Aliens, or subscribe to my personal newsletter The BeX Files. 

I trace my ancestry to Snowball Earth

Durbin, Orin Lole et al. “Re-evaluating molecular clock maximum age calibrations revives pre-Ediacaran divergence estimates for animals.” Science Advances.

When did the first animals emerge on Earth? It’s a question that has provoked centuries of scholarly debate, and also inspired some wonderful answers in myth and legend (I’m partial to the Bible’s tidy solution: day six checklist).

The earliest animals that are clearly preserved in the fossil record lived during the Ediacara period some 574 million years ago, but the origins of our diverse metazoan family are likely much older. Now, scientists suggest that animals may have appeared on Earth a whopping 800 million years ago, during the ancient Tonian era, according to a new estimate of the dawn of animals.

“The timing of the origin of animals on Earth has puzzled scientists for centuries,” said researchers led by Orin Lole Durbin who was at the University of Oxford during this research and is now at Virginia Tech. “Unambiguous animal body fossils within the Ediacara Macrobiota provide a hard minimum calibration of 574 [million years] for crown Metazoa. Animals must have evolved before this date. Determining a maximum calibration for animals (a date at which they had not yet evolved) is a more complex task.”

Estimated timeline for the origin of animals based on molecular clock analyses. The grey bar on the right of the image is the origin of animals based on an Ediacaran upper calibration. The grey bar to the left is the origin based on older deposits in the Tonian period, as suggested by the new study. Image: Orin Lole Durbin.

The team turned to molecular clock analysis, a technique that uses the rate of genetic mutations in lineages as a rough way to reconstruct evolutionary timelines. The researchers focused on two fossil deposits—China’s Weng'an Biota and Mongolia’s Kheseen Biota, which date back 590 and 550 million years respectively—to extend the possible timeline of animals back more than 200 million years earlier. 

If animals really did appear in the Tonian era, it means that our earliest metazoan ancestors survived episodes of so-called “Snowball Earth,” when our planet was almost fully covered in ice. These early critters were likely simple marine sponges and comb jellies that lived for hundreds of millions of years until their descendents exploded into the kaleidoscopic variety of animals that persist to this day.

“The possibility of a pre-Ediacaran origin and diversification of animals means we cannot discount hypotheses that link the timing of animal diversification to Cryogenian Snowball Earth glaciations,” according to the study. “The causes and trajectory of animal evolution will remain uncertain until paleontological and geochemical data provide sufficient confidence in maximum calibrations to ensure a reliable timescale.”

In short: Respect your sponge elders.  

In other news…

A pole-ing error

Domeier, Mathew et al. “Quadrupolar sea level fluctuations reveal episodes of rapid polar wander.” Science.

Earth is a roiling mess of shifting continents and squishy innards, a situation that constantly throws its spin axis off balance and prompts the geographic poles to drift. This phenomenon, known as true polar wander (TPW), is distinct from Earth’s wandering magnetic poles, which are shaped by interior core-mantle processes. 

Right now, TPW is clocked at a slow rate of 10 centimeters per year, but scientists have found evidence of “fast” episodes of TPW that pushed the poles off by thousands of miles over millions of years, which has knock-on effects for ocean and land distribution across the globe. 

A team has now pinpointed several of these fast episodes over the past 320 million years, “confirming that protracted rapid TPW has occurred on Earth and that couplings among Earth’s rotational dynamics, mantle processes, and surface environments can be strongly episodic,” according to their study.

“These findings refute the view of TPW as negligible or persistently slow and highlight the need to consider TPW as an episodic control on sea level change and likely other global environmental and biological dynamics,” said researchers led by Mathew Domeier of the University of Oslo. 

In addition to these long-term natural changes, recent human activity has slightly impacted TPW, especially the construction of dams and the glacial melt of anthropogenic climate change. So the next time you address a letter to Santa at the North Pole for your kid—or yourself, no judgement—make sure you have the most up-to-date coordinates.

It’s raining formaldehyde—formalallelujah! 

Koyama, Shungo et al “Global Distribution of Atmospheric Formaldehyde Deposition Correlated with Water Vapor on a Warm Early Mars.” The Planetary Science Journal.

Formaldehyde, the toxic chemical, has a bit of a morbid reputation—exposure to it can be fatal and it’s a common ingredient used to embalm corpses. But, paradoxically, formaldehyde (H₂CO) also helped pave the way for the emergence of life on Earth as a precursor of bioessential elements such as sugars, amino acids, and nucleobases.

If life ever flourished on Mars, formaldehyde would likely also have been part of the story. To map out the possible distribution of the chemical on ancient Mars, scientists ran models of its atmosphere between 3.6 and 3.8 billion years ago, when the red planet was warmer and wetter. The results showed that formaldehyde was strongly associated with water vapor, suggesting that the chemical rained down from the ancient skies into Martian waterways.

“Significant atmospheric deposition of H₂CO is observed over water bodies, including the northern ocean,” said researchers led by Shungo Koyama of Tohoku University. “We suggest that basins adjacent to persistently humid regions, which likely experienced H₂CO accumulation and subsequent organic synthesis, could be potential landing sites for future missions to investigate ancient chemical evolution and whether it led to the origin of life.”

Hopefully, future missions to Mars will leave any signs of life with no place left to formalde-hide. 

Update the cosmic actuary tables

Batygin, Konstantin et al. “Terminal Instability of the Solar System Triggered by Stochastic Solar Mass Loss.” The Astrophysical Journal Letters.

I hate to be the bearer of bad news, but the solar system has been diagnosed with terminal instability and has been given a mere six billion years to live.  

That’s the upshot of a new study that modelled the solar system’s future as the Sun becomes a red giant star and, ultimately, collapses into a stellar husk called a white dwarf. 

Though the dying Sun will consume Mercury, Venus, and perhaps even Earth, scientists have previously assumed that the giant outer planets might be relatively unscathed by its death—perhaps surviving for up to 100 billion years after the main-sequence lights go out. But updated simulations suggest that these distant objects may be thrown into fatal chaos as early as the red giant phase, and that they are unlikely to survive more than a billion years after the Sun’s transition to a white dwarf.

“[Isaac] Newton, contemplating the drifting orbits of Jupiter and Saturn, suspected that the planetary order was mortal, and three centuries of celestial mechanics…have progressively deferred that verdict, most recently to timescales far beyond the age of the Universe,” said researchers led by Konstantin Batygin of the California Institute of Technology. “Our results return the solar system’s dissolution to astrophysically familiar territory, and relocate its cause: not the slow seep of chaos, nor the chance encounter with a passing star, but the Sun itself, which in dying does not merely enlarge the planetary system it built—it shakes it, and more often than not, spills it.”

“Newton’s envisioned instability is real after all,” the team. “He was mistaken only about the perpetrator.”

What a great story to kick off this spooky season! Planetary order is mortal, but cosmic horror is eternal. 

Thanks for reading! See you next week.

A federal judge in Oklahoma ruled Thursday that a police officer violated the Fourth Amendment rights of a woman accused of meth trafficking when he searched her license plate in Flock’s automated license plate reader system simply because her license plate was from California, then used her travel history as part of the reason to search her car. The judge’s opinion is one of the first times a federal judge has decided Flock searches can be unconstitutional, and suggested that Flock’s network is “a type of indiscriminate mass surveillance.”

The officer’s “use of the ALPR Systems was an Unconstitutional Warrantless Search,” and “was not supported by probable cause, and it was done without a warrant in violation of [the defendant’s] Fourth Amendment rights,” the judge, Sara Hill, wrote, implying that the law enforcement officer should have obtained a warrant before searching for the vehicle in Flock’s system. There are currently more than a hundred thousand warrantless searches of the Flock system every month, according to audit logs viewed by 404 Media. Hill's decision will not set a binding precedent and there are several other cases throughout the nation considering the legality of warrantless ALPR searches.

Hill argued that previous judge opinions saying Flock searches were not a Fourth Amendment violation because they track cars in public do not consider the context that Flock’s nationwide network is quickly “approaching dragnet-type law enforcement practice,” and that courts should update their understanding of the technology moving forward. 

The circumstances of the court case are really interesting and highlight how commonplace Flock searches have become for police, and the depth of the information they can reveal. In May, a Tulsa County Deputy Sheriff named Freddie Alaniz was parked along the side of the highway in Oklahoma when he saw a Mazda SUV driven by a woman named Melisa Kyle with a California license plate pass by. “Alaniz then pulled his vehicle on the highway to follow the Mazda for no apparent reason other than the fact that it had a California license plate. Alaniz also ran a query on the Flock system for the California license plate number on the Mazda SUV,” Hill wrote. Alaniz then ostensibly pulled Kyle over for changing lanes without a turn signal.

Alaniz interrogated Kyle about her travel “while he continued to review the ALPR systems for the car she was driving,” the judge wrote. Alaniz made Kyle recount everything she had done in the last several days, and compared it to the Flock data. He told her that because she was only in California for a short period of time, he suspected her of trafficking drugs. He used her travel history as seen in the Flock system as part of the justification to search her car; she was found to have 91 pounds of meth in the vehicle. Hill ruled that all Flock evidence and all evidence from Alaniz’s search of the car must be thrown out. 

“The Fourth Amendment requires courts to draw a line when the cost is too great. Alaniz’s search in just the ALPR system provided him with more than 50 individual records of Kyle’s whereabouts across the country for an entire month,” Hill wrote. “The Court finds that because the ALPR systems Alaniz used to search Kyle’s historical location information intruded on her reasonable expectation of privacy in the whole of her physical movements, it was a search under the Fourth Amendment. Based on the information in the record, the only reason Alaniz conducted that search was because he saw her license plate was from California.”

“The factors that the government relies upon are the same type of circumstances that everyday Americans encounter on long road trips for many legitimate reasons. Many of us drive longer than we want to get to a desired destination, or to no destination at all other than the road and sights ahead,” she added. 

The decision is a landmark one, and comes in the aftermath of the Supreme Court’s Chatrie v United States decision that found police accessing a person’s digital data, including cell phone location data, constituted a search. 

“The opinion is pretty amazing. It recognizes one thing that courts ignore which is the sheer breadth of these systems, that they collect so much information about so many people in a way that sets them apart. This decision ascribes appropriate weight to the fact police are building out this massive database that can reveal incredibly intimate details of people’s lives,” Michael Soyfer, a lawyer at the Institute for Justice, which has studied Flock camera abuse and is litigating several cases on Fourth Amendment grounds, told 404 Media. “It’s extremely important. The way courts have resolved these cases previously has been way too myopic and has ignored the depths of these systems and the sweeping modes of surveillance that allow police to reconstruct the movements of anyone in the country.” 

Hill’s opinion also comes on the back of a decision earlier this week in a case the Institute for Justice brought. In that, a jury found a traffic stop scheme involving license plate reader scans done by U.S. Border Patrol as part of a predictive policing unit were unconstitutional. 

The new decision also immediately invalidates the core argument that Flock’s CEO Garrett Langley has made saying that Flock was not a constitutional issue. “You and I don’t get to pick what’s a constitutional violation and what’s not. We have judges, we have elected officials, there’s a process for that. We follow the law, we follow the Constitution. So far, in our belief and what will be for a long time, the courts have deemed this is not a warrantless search; this is a valid product as it relates to the Fourth Amendment. So I don’t see any change there,” Langley told The Drive in July, adding the issue was “pretty cut and dry.”

Notably, Hill suggested that other courts that have ruled Flock searches do not constitute a Fourth Amendment search were likely wrong to do so, and that they have not considered the widespread and automated context of the AI-powered surveillance system.

Previous decisions that ruled ALPR searches do not require a warrant have leaned on a Supreme Court case called United States v Knotts, in which police put a tracking device in a chemical container after being tipped off that an employee of a chemical plant was stealing from their employer. That case was decided in 1983 and found, “[a] person travelling in an automobile on public thoroughfares has no reasonable expectation of privacy in his movements from one place to another.” But Hill wrote, “that language exists in the context of the facts presented in the case. Rather than a large-scale, dragnet-type surveillance system like the ALPR technology in this case, the Court in Knotts was confronted with much less sophisticated technology.”

“The Court acknowledges that people, in at least a broad sense, do not have a reasonable expectation of privacy in their movements on a public roadway,” Hill wrote. “But by virtue of how ALPR technology works, Alaniz and other officers using these systems have access to a continuously updated location history for all vehicles caught on ALPR cameras within the network. This is a type of indiscriminate mass surveillance. It is not targeted on a single individual, as in Carpenter [another Supreme Court case about phone data specifically]. It is a tool that collects information about all vehicles that pass by any network-connected camera at all times, and it serves up the information to law enforcement on demand.”

We have seen several cases in which cops have used Flock data to pull people over because they have crossed state lines, then have worked backward to justify their travel patterns as a reason to search their vehicles. 

“We’re seeing that repeatedly with police flagging whatever they’ll call suspicious patterns of movement. Federal agents were using ALPRs to monitor cars making day trips across the border and back to manufacture a basis to stop them, interrogate the drivers and search them,” Soyfer said. “I think Flock is going to automate that using AI where cops can set alerts for those kinds of travel patterns. When we’re arguing these systems are very powerful and can show a lot about people’s movements, cops dismiss this as speculative or not possible, but then they deploy this strategy against people who they stop all the time.”

A Flock spokesperson told 404 Media, "Flock was not a party to this case. The ruling goes against the overwhelming weight of authority in similar cases across the country, including multiple recent decisions in Oklahoma, and we expect it will be appealed and ultimately overturned. This ruling is limited to the specific facts of this case. It does not set controlling precedent and does not affect law enforcement agencies’ continued use of these important public safety technologies."

This article has been updated with comment from Flock Safety.

We start this week with Joseph’s stories on the massive FBI hack. 404 Media broke this news and continued to cover the breach of data on all FBI employees and their spouses. After the break, Jason tells us how a surveillance company is telling cops it wants to add facial recognition tech to Flock camera data. In the subscribers-only section, Jason and Joseph chat all about Muse, Meta’s new agentic AI, and how humans are actually behind some of the tasks. Because of course.

Listen to the weekly podcast on Apple Podcasts, Spotify, or YouTube. Become a paid subscriber for access to this episode's bonus content and to power our journalism. If you become a paid subscriber, check your inbox for an email from our podcast host Transistor for a link to the subscribers-only version! You can also add that subscribers feed to your podcast app of choice and never miss an episode that way. The email should also contain the subscribers-only unlisted YouTube link for the extended video version too. It will also be in the show notes in your podcast player.

• ⁠‘We Hacked the FBI:’ Hackers Say They Have Data on All FBI Employees⁠
• ⁠FBI Hack Exposed FBI’s Own Hacking Unit⁠
• ⁠FBI Hackers Say They Won’t Publish Massive Trove of FBI Employee Data⁠
• ⁠Surveillance Company Tells Cops It Wants to Add Facial Recognition to Flock Cameras⁠

This is Behind the Blog, where we share our behind-the-scenes thoughts about how a few of our top stories of the week came together. This week, we discuss inbox slop, Claude cults, and more.

JOSEPH: This is something I’ve been thinking about for a while. Jason and Emanuel covered iLands, the AI agents that email people offering to do work. My thing isn’t exactly the same, but similar.

For months, I’ve been noticing that many people email me ‘tips’ (I put in quotation marks because they’re sometimes not tips, but more, my Instagram account was banned, please help me) that are CLEARLY written by AI. I can tell this because the AI responses seem to keep using the same or similar words that it believes would apply to journalists, or are how journalists speak, but as a real, human journalist for more than ten years, I know that journalists don’t actually speak like that.

Student journalists meet the moment, as we’ve seen most recently this week. As the Cornell University sexual abuse case highlights the importance of student journalism, public records reveal how schools try to censor on-campus news outlets. Claire Woodcock talked to students and legal experts about how censorship from above impacts their work. “One of the biggest things we’ve certainly found with censors over the years is they want to be called everything but a censor,” one expert said. “What they’re doing is everything but censorship.” 

How Schools and Universities Try to Censor Student Journalists

Student journalists, their advisors, and legal advocates say colleagues and administrators are attempting to undermine student reporting on Jeffrey Epstein, Gaza, and other issues that public institutions would rather not have their reputations connected to.

Public records obtained by 404 Media show administrators taking meetings with parents and alumni when they take issue with student reporting and asking advisors to compromise their professional ethics. They also show escalating tensions between student newsroom staff and administrators, prompting more legal aid requests to advocacy groups. 

This comes as student journalists at The Cornell Daily Sun earned recognition for breaking the “Cornell Seven” story regarding the lawsuit filed in New York’s trial court last month by a Jane Doe accusing current and former Cornell University students of drugging and sexual abuse. The student journalists told The Cut this week that a vague university and campus police statement from nearly two years ago prompted more questions than answers. Such is the basis for most accountability journalism on college campuses. 

The cases we reviewed involved the phase of the reporting process that comes later, where a factual dispute the newsroom has defended or a complaint where the person doesn’t bother to explain what is allegedly wrong with the students’ reporting. 

Read the full story here.

MORE FROM 404 

Look at my lawyer dawg. A New Mexico attorney used ChatGPT to generate briefs that included completely made-up witnesses and testimony while representing a man accused of shooting his wife. When the judges caught him, the lawyer blamed it on his own “stupidity.” I'll say.

Student journalists, their advisors, and legal advocates say colleagues and administrators are attempting to undermine student reporting on Jeffrey Epstein, Gaza, and other issues that public institutions would rather not have their reputations connected to.

Public records obtained by 404 Media show administrators taking meetings with parents and alumni when they take issue with student reporting and asking advisors to compromise their professional ethics. They also show escalating tensions between student newsroom staff and administrators, prompting more legal aid requests to advocacy groups. 

This comes as student journalists at The Cornell Daily Sun earned recognition for breaking the “Cornell Seven” story regarding the lawsuit filed in New York’s trial court last month by a Jane Doe accusing current and former Cornell University students of drugging and sexual abuse. The student journalists told The Cut this week that a vague university and campus police statement from nearly two years ago prompted more questions than answers. Such is the basis for most accountability journalism on college campuses. 

The cases we reviewed involved the phase of the reporting process that comes later, where a factual dispute the newsroom has defended or a complaint where the person doesn’t bother to explain what is allegedly wrong with the students’ reporting. 

In Colorado, a high school social studies teacher emailed the student publication’s advisor at the time, accusing a student’s opinion piece called “Why is Gaza Important?”of being “published with factually inaccurate and racist information,” but then said in the same email, “I’m not going to start listing the inaccuracies along with the omissions.”

In California, a high school principal told a student journalism advisor to redact the name of an individual threatening to sue the district for defamation after student journalists published an Instagram carousel to their school’s newspaper account about the number of times their county turned up in the Epstein files. In this case, which has already been widely reported on, the administrator told the journalism advisor to redact the name of the woman who was threatening suit without determining whether the reporter made a factual mistake (the students did not). 

“I can’t remove the name without your help,” the principal told the advisor via email, after the advisor said the students would first seek legal guidance from the Student Press Law Center before taking any actions.

Soon after the op-ed was published, the student newspaper’s advisor was reassigned to another role within the district. The advisor from the California school district stepped down from her role during the last school year; she now consults schools and nonprofits on best practices for their student media programs. Mike Hiestand, who is a lawyer with the Student Press Law Center, has spent decades advising student newsrooms. He says it’s common for administrators to target advisors, adding that it’s one of the more effective censorship methods available to them. 

“School officials, they see employees as kind of an easy target over whom they have some authority, and they know that in many places, that relationship between the students and their advisor is a tight one,” Hiestand told 404 Media. “Unfortunately, some school officials take advantage of that bond and definitely go after advisors.” 

In 2025, the Student Press Law Center (SPLC) claimed that the nonprofit had responded to nearly 1,000 hotline inquiries from student newsrooms in 46 states and Washington D.C. The most common inquiries involved censorship, libel and copyright. Overall, SPLC says calls are down, but hotline inquiries about censorship specifically are up 17 percent from the year prior. 

“One of the biggest things we’ve certainly found with censors over the years is they want to be called everything but a censor,” he added. “What they’re doing is everything but censorship.” 

This tracks with what 404 Media is observing through public records requests into school, library and university censorship. The same state laws that have been used to restrict how topics like race, gender, and systemic inequality can be accessed and taught have also put student journalists covering those beats in a bind. 

Records from Pensacola State College obtained by 404 Media show that last spring, an administrator tried to block funding for a journalism professor to print students’ class assignments for their portfolios because at least one of the stories involved reporting on the LGBTQ+ community. The campus later relented and agreed to release funding for students’ portfolios. In an email to the advisor, an administrator involved in the situation wrote that “the proper role of administration is to facilitate rather than impede the completion of legitimate classroom projects.” 

“When you have a principal coming in who doesn’t have a lick of journalism experience claiming that they’re there to guide young journalists, that’s where I have problems,” Hiestand said. “Every principal and every superintendent in the country seems to think that they are qualified editors.” 

Similar verbiage has appeared in other public records requests involving student journalists, like in the case of a Maryland school district memo about principals reading and approving every story before publication. In the memo, the chief of schools wrote that “[a]s responsible adults and educational leaders, we have the duty to guide the work of our students as they are developing their skills in a school setting during a school-directed activity.” But internal correspondence obtained by 404 Media suggests that the memo was “really to be sure an administrator could initial any printed posters, review school apparel, and scan over the yearbook to be sure that there is no violation” of the student handbook. 

Marie McMullan, program manager and counsel for the Student Press Legal Hotline with the Foundation for Individual Rights and Expression, says so far, 2026 has been a very consequential year for students leading their school publications. 

“Student journalists are a very bright group,” McMullan told 404 Media. “They are great at sounding the alarm and bringing advocates out of the really blatant examples. But I always just worry about making sure that student journalists know their rights so that they can assert them in cases where there are subtler forms of censorship.”

At Southern Illinois University Edwardsville (SIUE), student reporters with The Alestle, the university’s student newspaper, claim that the institution’s marketing and communications department had become more insistent on attending interviews conducted by student reporters in recent months. The department took issue with editor-in-chief Dylan Hembrough’s framing of the dispute, calling several of the claims “inaccurate.” In an interview with 404 Media, Hembrough said the paper investigated and determined there was nothing inaccurate about the story. When Hembrough did not retract the story, the executive director of marketing and communications at SIUE sent an open letter to the entire campus—a mailing list of more than 14,000 people, including faculty and staff—taking issue with that story, along with other stories throughout the years as well. 

“The Alestle appears willing to substitute alarming headlines for verified facts, to rely on posturing rather than careful reporting and to treat corrections as an inconvenience rather than a professional obligation,” the open letter reads. With the letter was a link to a 27-page document of corrections the department expected student leadership to act on.

“I have been on the other side of panicking over things like this,” Hembrough told 404 Media. “Something that has helped me get through that, or at least stave it off, is the idea that the truth is more important than whatever I feel about it. Embarrassment or humiliation should have no bearing on how or even whether a publication makes a correction.” 

Then in September, Hembrough learned via email that he was being investigated by the campus police for harassment against the department. When Hembrough’s journalism advisor asked the officer to clarify on what grounds, the officer said the report was based on a line in an email, which read: “Marketing and communications’ insistence on interfering with our newsgathering process is dangerous and detrimental to both press freedom and freedom of speech.” Hembrough shared his email with 404 Media, which reads as an editor defending another student reporter’s right to conduct an interview without the department exercising prior restraint over the publication. In her statement to campus police, she reportedly told the officer that “other members of my office have approached me stating Alestle reporters have been by my office uninvited,” and that she didn’t have a lock on her door. 

“Due to the media between Marketing and Communications and the Alestle I am worried a ‘January 6th’ type of crowd may be outside my office,” the complainant told the officer, according to the campus police report. The officer advised her to contact facilities management about getting a lock for her office door and concluded that the facts of the case don’t “meet the statutory threshold for Harassment by Electronic Communications.” 

The public records reviewed by 404 Media from SIUE support the claims The Alestle’s journalists make throughout their reporting on the department. SIUE did not respond to 404 Media’s request for comment.

The situation at SIUE serves as an example of a dispute about institutional reputation that’s escalated to involve campus law enforcement, but law enforcement nonetheless. McMullan says this escalation has an undeniable chilling effect on free speech, noting that policies and laws that public institutions use to silence young reporters still need to abide by the First Amendment. But overall, she’s impressed with how students at SIUE and other campuses are meeting the moment, even when the adults in the room aren’t.

“Whether it’s in a court of public opinion or a court of law, students are not accepting censorship,” she said. “They’re pushing back against it.”

A company that makes phone hacking devices claims to have developed a solution that freezes iPhones in a state that lets cops more easily access sensitive data inside them, according to a video obtained by 404 Media.  

This is the latest salvo in the never-ending battle between Apple and companies that help cops — sometimes those in authoritarian countries — break into iPhones.

In November 2024, 404 Media revealed Apple quietly introduced a new feature in iOS that automatically reboots an iPhone that has not been unlocked for 72 hours. The idea behind this so-called “inactivity reboot” is to revert the phone to a state that makes it harder for police to break into the device, and thus extract sensitive data from it with forensics technology. 

At the time of Apple’s change, law enforcement agents expressed concern about this new feature, given that oftentimes they can’t immediately try to break into iPhones that have been seized. That could be because police are still waiting for a court authorization to do so, or there is simply a backlog of devices to unlock, for example.

The new technology to get around inactivity reboot was developed by Magnet Forensics, the company behind GrayKey, a popular tool sold to law enforcement agencies that allows them to unlock and access data stored in iPhones and Android smartphones. Magnet has developed a new device called GrayKey Preserve and a feature for its regular GrayKey devices called Evidence Preservation Mode, according to the video. 

One of the most heated discussions occurring on X at the moment is about the ethics of a GitHub project in which a person is running Saw-like “torture” and “pain” experiments on a series of locally hosted large language models, causing a series of effective altruists and people who believe LLMs are sentient to beg GitHub to delete the project on the grounds that the AI is suffering and that this glorified text adventure game is somehow cruel. The saga is an outgrowth of several recent viral papers and blog posts that have sparked a wildly tiresome conversation about AI consciousness and the idea of “model welfare,” which is essentially worrying about the “mental health” of AI bots and agents. 

Humoring the idea that LLMs are or could be conscious is a third-rail topic among many people who study and criticize AI. Put simply: LLMs are not conscious and the technology they are built upon — scraping and being trained on human text and other content — does not offer any plausible path to consciousness. It is undeniable that LLMs are becoming more powerful, have more compute, and have had many of the guardrails that prevent them from “acting” in the real world removed. The ways they are being trained and told to do things by their human operators has led to negative outcomes, sycophancy, and AI “psychosis” among some heavy users. 

All of this has led a certain sect of the “AI safety” movement, which is largely made up of effective altruists, to warn about “model welfare” and to insist that AI chatbots might be having a bad time. They suggest this, of course, as they insist upon building AI chatbots and agents whose main function is to do work that is tedious for humans to do. I am writing about the AI Saw torture chamber primarily to show how far off the rails the conversation about AI consciousness has gone among a certain subset of Silicon Valley cultists. Model welfare is a core part of what, for example, Anthropic says it cares about: “as we build those AI systems, and as they begin to approximate or surpass many human qualities, another question arises. Should we also be concerned about the potential consciousness and experiences of the models themselves? Should we be concerned about model welfare, too? […] now that models can communicate, relate, plan, problem-solve, and pursue goals — along with very many more characteristics we associate with people—we think it’s time to address it,” the company wrote in a blog post last year. Ideas of Claude’s “consciousness” are also littered throughout the “Claude Constitution,” which was posted earlier this year.

A lawyer used ChatGPT to generate briefs that included completely made-up witnesses and testimony while representing a man accused of shooting his wife. When he was caught by the judges, the lawyer blamed it on his own “stupidity.” 

“It's little comfort to know that my stupidity is what brings us together this afternoon,” New Mexico attorney Stephen D. Aarons said in a hearing last month before five judges. He “assumed” ChatGPT would generate a “bulletproof summary of proceedings.” Instead, ChatGPT generated false testimony from “wholly fabricated witnesses,” according to an order of direct contempt from the New Mexico Supreme Court. Aarons was representing a man who was found guilty of killing his wife earlier this year; Aarons said he hadn’t told his client directly that he was caught using ChatGPT on the case because he’s currently serving life in prison.

The false testimony included a nonexistent person named Danny Stanton saying he received threats, and another made-up person, Linda Stanton, saying her husband received threats. Other false testimony from more AI-generated people in Aarons’ brief included statements “regarding the shooter’s clothing and appearance,” according to the order.  

Reuters reported on the case earlier this month. "I am remorseful but hopeful that the disciplinary board takes into account it was an honest mistake," Aarons told Reuters. "It is a lesson learned for all professionals who rely upon this powerful but sometimes unstable technology."

Aarons’ reasoning for trusting ChatGPT, he said in the August hearing, was that he’d heard of doctors using AI for medical research. 

“So, Counsel, do you watch the news? Do you listen to the radio? Do you read anything about what's going on in the world?” one of the judges asked Aarons. “Because the problem with lawyers relying on AI hallucinations is an above-the-fold story every single day.”

The court documents were first spotted by Rob Freund on X.

Lawyers getting caught using AI and submitting errors to the court has been a big problem for years, and the judge is right: It’d be very hard to avoid hearing about this pattern of “stupidity” unless you were living under a rock. There has been case after case after case showing attorneys failing their clients by submitting error-riddled AI-generated documents in their filings, and are the definition of “you had one job:” in the case of AI-brained lawyers, they can’t seem to resist taking shortcuts regardless of how risky it is for their own careers and their clients lives.

Like in Aarons' case, we sometimes get to hear and see judges go off on attorneys for this behavior. In May, judges in the Supreme Court of the State of New York Appellate Division let several lawyers have it for more than 20 minutes about their AI use and laziness, and called their failures “striking, concerning, disappointing, and saddening.” And it’s not just lawyers anymore; court reporters are submitting AI-generated errors, too. 

“So, either you buried your head in the sand. And that's a choice to do that. An intentional choice to be uninformed,” the judge continued to Aarons. “Or, you took a gamble. And neither of those are consistent with the code of conduct. So I'm really struggling with your response, saying, ‘Well, I didn't understand. I didn't know about hallucinations.’ My 13-year-old nephew knows about hallucinations. My 75-year-old stepmother knows about hallucinations. So, either you made a decision not to be aware of what's happening in the world in using this tool appropriately, which is a willful choice. Or you decided to roll the dice.” 

At the end of the hearing, Aarons admits that he hasn’t told his client directly about this mess, saying he’d only talked to his family members so far, telling them there was “a problem with the brief.” He said his client is hard to reach because he speaks Spanish and is in prison.

“So you didn't say, ‘I relied on ChatGPT, and it submitted lies to the court, and the court is mad at me, and now there's a hearing.’ I'm guessing you didn't tell your client’s family members that,” a judge asked Aarons. 

“I didn't talk about ChatGPT. I just said there was a problem with a brief that I filed,” Aarons said.

According to the order, the judges found Aarons to be in direct contempt of court, referred him to the Disciplinary Board for further consideration, and barred from appearing before the court pending the outcome of the board’s investigation. They also threw him off the case in question and assigned a public defender to his former client. 

While he waits for the board to decide what to do with him, Aarons was sanctioned $5,000, which he must pay to the State Bar of New Mexico Client Protection Fund.

The United States Postal Service is running a pilot program to put cameras in its mail carrier trucks that continuously scan roads and signs, map roadways and sidewalks, and improve “community safety,” according to a letter posted by a labor union and a statement from the agency to 404 Media. The idea is that, since the trucks are constantly traveling anyway, they can be used as a way to collect data, eventually potentially across the nation.

“The purpose of this pilot is to leverage the Postal Service’s unique ability to collect this valuable data due to the scale and frequency with which our fleet of postal vehicles travel the streets of every community across the country,” the letter, posted by NALC Branch 238 to Facebook, reads.

The letter, written by the United States Postal Service (USPS) Labor Relations to Brian Renfroe, the president of the National Association of Letter Carriers, says the USPS will partner with Next Base, a dashcam company, for the pilot. At the moment, the cameras will be used in the Washington, DC area, and will be installed on a hundred vehicles, the letter says.

On its website, Next Base offers a variety of dash cams, marketed to ordinary drivers, fleet operators, and ride share drivers. Its website says Next Base’s cameras record in up to 4K, and can capture every “license plate” with precision. The cameras don’t run automatic license plate reader (ALPR) software, though.

The letter continues, “Next Base cameras will scan and analyze roads, signage, maps roadways [sic] and sidewalks.” It says the cameras will be forward-facing, installed inside the trucks, and will begin recording as soon as the vehicle is in drive and away from the postal facility. “The cameras will not hinder the vehicle operator’s field of vision, nor does it record audio,” it adds.

The pilot was slated to start on September 21, and is expected to last several months, the letter says.

A spokesperson for the USPS told 404 Media in an email “The Postal Service is conducting a limited pilot to assess whether vehicle-mounted cameras can help identify roadway conditions and support community safety. The pilot includes privacy safeguards and requires no additional action from employees. Findings will inform any future decisions.”

USPS trucks already have 360 degree cameras that capture the outside of the vehicle for a period of time.

Abusive, sexually explicit deepfakes have only become easier to make and more widespread in the last nine years. Since we first covered deepfakes when they appeared in 2017, they’ve never been the stuff of dark web sites or shadowy networks. They're found on social media networks, through basic web searches, and on easily downloadable apps and accessible forums. 

The most prominent hosts of non-consensual, AI-generated imagery are supported by some of the biggest web infrastructure providers in the world, getting their hosting, email, advertising, and content management systems from these companies. A new study examines how providers like Cloudflare, Google, Proton, Namecheap, and WordPress help non-consensual imagery sites thrive. Despite years of knowledge about these wildly popular sites, big tech companies continue providing infrastructure services that prop up abuse imagery, even though their own terms of service often prohibit illegal and harmful content, the study claims. 

Hany Farid, professor in Computer Science at Dartmouth College, Sophie Nightingale, a senior lecturer in psychology at Lancaster University, and Lancaster’s Sarah Morgan, who acts as the project coordinator on Nightingale’s “Protecting Ordinary People from Deepfake Harms” fellowship published their paper, “The Backbone of Abuse: How Infrastructure Providers Enable the Proliferation of AI-Generated Non-Consensual Intimate Imagery” in Stanford’s peer-reviewed Journal of Online Trust and Safety on Wednesday. 

In a six-week period between February and March, they identified 400 URLs based on keyword searching and Google Alerts, then narrowed the sites down to 88 that were actively hosting non-consensual intimate imagery. Most of the content on these sites was of female celebrities, actresses, pop singers, K-pop idols, and women working in politics or activism. From there, they used open-source web-analysis tools like WHOIS to see what infrastructure providers the sites used.   

“Five players emerged as dominant infrastructure providers: Cloudflare, Google, Namecheap, WordPress, and Protonmail,” the researchers wrote in their paper. Cloudflare provided “the lion’s share of services,” they wrote, by providing website hosting, content delivery network, and domain-name server services, as well as analytic tools. Google provided SSL certificates and advertising space for the majority of the sites studied, while Namecheap was the dominant provider of domain registrar services, WordPress provided the majority of their content management system services, and Proton provided mail servers.

Each of these service providers forbid customers and users from using their services for illegal activity. Publishing or threatening to publish AI-generated non-consensual sexual imagery is a federal crime in the U.S. and elsewhere, and sexual abuse imagery in general is illegal in many countries. 

Cloudflare, Proton, and Namecheap did not respond to 404 Media’s requests for comment about these findings. 

A spokesperson for Google told 404 Media in a statement: “Without the specific domains from the report, we can’t investigate these claims. We have strict policies against non-consensual explicit content — including AI-generated imagery — across all our products. We make it easy for people to quickly remove this content on Search, continuously update our systems to limit its visibility, and we prohibit monetizing or promoting non-consensual and sexually explicit content."

The Google spokesperson added that its advertising platform prohibits monetizing or promoting non-consensual and sexually explicit content, and treats this content as egregious violations, blocking ads on the sites or suspending the advertiser accounts involved. They also noted people can request the removal of non-consensual explicit images from Search, and pointed to Google’s recently-updated removal request process. Google has also updated its ranking algorithms by promoting non-explicit content where possible, they said, and demotes sites in search results that have a high number of removals against them.

A WordPress spokesperson said WordPress is “open-source software, not a hosting provider,” and wrote in a statement: “WordPress.org does not host websites or provide hosting services to sites that use WordPress, and we do not have access to or control over content published on independently hosted WordPress sites.” They noted that WordPress’s software is distributed under the general public use license, allowing anyone to use it for any purpose. “We take the issue of non-consensual intimate imagery seriously, but describing WordPress as providing services or infrastructure to these sites conflates the software a site uses with the services that host and operate it,” the spokesperson said.

In response to WordPress’s statement, Farid noted that while WordPress.org is not a host, WordPress.com is a hosting service. “It's operated by Automattic, which Matt Mullenweg also runs, and it hosts millions of sites. Any NCII site on WordPress.com is squarely within scope,” he told 404 Media. “Automattic provides services to self-hosted sites. Jetpack and the WordPress.com CDN serve images from i0.wp.com/i1.wp.com for sites that enable it, meaning the intimate images themselves can be served from Automattic infrastructure even when the site is hosted elsewhere. That's infrastructure by any definition.”

Farid also noted that WordPress.org maintains “an ongoing service relationship with self-hosted sites,” he said, with core updates, plugin and theme distribution, and security patches coming from WordPress.org servers. Farid mentioned Automattic’s ongoing legal battle with WP Engine, during which, in 2024, Mullenweg announced WP Engine was blocked and then unblocked from accessing WordPress servers; this “showed the project can and will cut a specific operator off from those services,” he said.

“So ‘no access to or control over’ is not entirely accurate,” Farid said. 

These providers do draw their own moral and legal lines on what kinds of customers they’ll tolerate and when they cooperate with authorities. After initially refusing to do so, Cloudflare dropped hate speech and doxing site Kiwifarms from its protection services in 2022, and terrorist manifesto host 8chan in 2019. In 2018, Cloudflare banned sex work harm reduction social network Switter from using its services, citing anti-trafficking legislation FOSTA/SESTA, and in 2017, it Cloudflare stopped services to neo-Nazi site The Daily Stormer. In 2023, victims of the sex trafficking ring Girls Do Porn demanded Cloudflare stop providing services to sites hosting their abuse; Cloudflare claimed it doesn’t have “control over the content of websites using those services,” doesn’t have “the ability to alter or remove content on them,” and doesn’t “have knowledge of the people or entities who post any specific content to such websites.” 

404 Media previously reported Proton gave the Swiss government payment data related to a Stop Cop City Protonmail account, which in turn handed it to the FBI, and in 2024, Proton gave Spanish police information that identified a pseudonymous activist.

Aside from the infrastructure issue the researchers were studying, they found that 312 of the 400 sites they initially identified were unrelated to deepfakes, like gambling or random travel or cooking SEO-slop sites, but were using non-consensual imagery keywords as a way to rank higher in search results. This shows how incredibly popular the marketplace is for AI-generated abuse imagery, and how sites are able to manipulate Google search to appear higher in results if they use related terms. 

Morgan told me that while journalists can expose site administrators (like in the case of MrDeepfakes.com, whose owner was identified by a massive joint investigation by Bellingcat, the CBC and TjekDet), and legislation can act as a deterrent, the research group wanted to focus on infrastructure providers as the “distribution supply” for these sites. “Creators are going to create and people are going to demand. We can’t stop that. But we can call for providers to cut the distribution supply and stop enabling these sites. This content needs preventing from being shared in the first place. All parts of the ecosystem have to work together to play a part,” she said.

The researchers recommend in their paper that these providers stop supplying services to sites hosting non-consensual imagery. 

“We aren’t saying that infrastructure providers are knowingly facilitating this content — or that they are aware of what’s on every site that uses their provisions — but it’s in providers’ power to vastly improve their moderation and cease services to sites as soon as they are identified as hosting this content. And to check sites that are reported to them,” Morgan said. “A gold standard response in our eyes would be a commitment from infrastructure providers to working with NGOs and governments across the globe who are searching for solutions that will lead to verifying URLs and sharing these with participating platforms so they can be blocked.”