Reading view

Trump Administration To Pay German Firm $1.2 Billion To Halt US Wind Projects

An anonymous reader quotes a report from the BBC: German energy company RWE has said it will abandon its offshore wind projects in the U.S. after reaching a $1.2 billion payout deal with President Donald Trump's Department of the Interior (DoI). RWE said that it will now reinvest the sum into conventional gas projects, including $900 million in a liquefied natural gas (LNG) export terminal project in Louisiana. "After careful consideration, it was determined there is no path forward to permit these projects in the US for the foreseeable future," the company said in a statement. RWE said it has agreed to relinquish its leases off the California and Louisiana coasts as well as in the New York Bight. Overall, the German firm plans to invest approximately $19.6 billion in the U.S. over the next six years "to grow its generation capacity." Interior Secretary Doug Burgum said in a statement posted on X that Americans deserve an energy system built on common sense and not one dependent on "costly subsidies." "We welcome RWE's agreement and voluntary investment in projects that strengthen our nation's energy security," he added. Earlier this year, the DOL reached a deal with TotalEnergies putting an end to the French company's offshore wind projects in the U.S. "Instead, the firm agreed to reroute investment to build a LNG plant in Texas and to develop 'upstream conventional oil' in the Gulf of Mexico," reports the BBC. Another similar deal was signed with Charlotte-based Duke Energy last month to terminate the company's offshore wind lease in the Carolina Long Bay area.

Read more of this story at Slashdot.

  •  

The mental model that finally made WordPress caching layers click for me (OPcache vs object vs page)

I spent a while stacking caching plugins and wondering why things weren't as fast as they should be. The thing that fixed it wasn't a plugin, it was understanding that the three caching layers do completely different jobs and you build them from the bottom up.

OPcache is the foundation. It caches compiled PHP bytecode so the interpreter isn't recompiling your code on every request. It helps every single PHP app, it operates independently of everything else, and you basically never turn it off. In production I set validate_timestamps=0 and just flush it on deploy.

Object caching (Redis or Memcached) sits above that. It stores the results of expensive database queries so WordPress isn't making dozens of DB round trips per page. This is the layer that matters most for logged-in users and anything dynamic, because those requests skip page caching entirely.

Page caching (Nginx FastCGI cache for me) is the big hitter for anonymous traffic. A cached page never touches PHP or MySQL, it just serves HTML. Massive for traffic spikes, but useless for logged-in users, so you set proper bypass rules for wp-admin, carts, checkout and logged-in cookies.

The lightbulb moment was realizing they don't compete, they cover for each other. Page cache handles anonymous hits, object cache carries the cache misses and logged-in users, OPcache speeds up all the PHP underneath both. The mistakes I'd been making were running two page cache solutions at once and expecting object cache to help on pages that were already fully page-cached (it doesn't, page cache bypasses WordPress completely).

The other thing that clicked: the right strategy depends on your site. Marketing sites lean hard on page caching. Membership and ecommerce lean on object caching because everyone's logged in. Frequently updated content sites need shorter TTLs and smart invalidation.

I wrote the full guide up with the actual php.ini, wp-config and Nginx config snippets in this article Understanding WordPress Caching Layers: A Developer's Configuration Guide. Curious how you guys handle cache invalidation on fast-moving sites, that's the part I still tweak most.

submitted by /u/anouarabsslm
[link] [comments]
  •  

Virginia Governor To Intervene In Dominion-NextEra Merger

Longtime Slashdot reader schwit1 shares an opinion piece from the Washington Post, written by Virginia Governor Abigail Spanberger: NextEra Energy, a Florida-based utility company, has filed paperwork to buy Dominion Energy for about $67 billion, creating the largest regulated electric utility in the world. Virginia's State Corporation Commission is the regulatory body tasked with reviewing the application, and the SCC's commissioners will ultimately decide whether to approve, deny or impose new conditions on any potential merger. As a Virginian, I am deeply skeptical about whether selling our primary state-regulated utility to an out-of-state company is good for the commonwealth. I have serious questions about what this deal would mean for us. And as governor, I intend to get answers and be a voice for Virginians in the process. That is why I will be taking the legal step of "intervening" in this proposed merger, which means that as governor, I will formally request to be a party to the case. I know this action is unprecedented by a Virginia governor -- but so, too, is the size of this proposed merger and its potential impact on the commonwealth. Virginians deserve to know that their leaders are laser-focused on ensuring that their needs are part of the SCC review. "If two large corporations stand to benefit financially from this merger, so, too, should the Virginians who pay the bills," said Spanberger. "That is why any potential deal must deliver a more affordable energy bill with sustained, long-term energy cost savings." By formally intervening in the merger review, Spanberger's administration would gain legal standing to participate directly in the case, request detailed information, raise concerns, and advocate for conditions that benefit people in the state. She says the goal is to push for lower long-term energy costs, protect utility jobs, and ensure any new owner continues investing in reliable, affordable and cleaner power.

Read more of this story at Slashdot.

  •  

Excavation/Demolition Contractors: Is There Actually a Good All-in-One CRM?

I run an excavation/demolition company and have been trying to find a service-based CRM that actually fits the way we operate. I’ve looked into Workiz, Jobber, QuoteIQ, and a few others, but none seem to check all the boxes.
What I like about Jobber is the simplicity and ease of use, but I’m looking for something that can handle more of the operational side of a heavy equipment contractor.
Ideally, I want one system that can handle:
Clients, leads, estimates, jobs, invoicing, and billing
Job photos, documents, and notes
Calendar/scheduling with crews and individual employees assigned to jobs
Non-consumable equipment assigned to jobs the same way you would assign an employee or crew
Equipment availability so we can see where everything is scheduled and avoid double-booking it
Employee time tracking tied to specific jobs
Employees being able to log equipment hours/mileage
Pre-trip/pre-use inspections
Damage reports and maintenance issues
Individual history for each piece of equipment
The equipment side is where most CRMs seem to fall apart for us. We’re not talking about tracking consumable inventory. We have excavators, skid steers, dump trucks, trailers, attachments, ring saws, industrial pressure washers, specialized tools, etc.
I’d like to be able to assign something like an excavator + trailer + truck + operator to a project on the calendar and have all four treated as resources. Then, while it’s assigned, employees could record hours, inspections, damage, maintenance issues, etc., against that specific piece of equipment.
Right now, we’re basically using four different systems: a calendar/scheduling app, equipment management app, CRM, and billing/accounting app. It works, but there’s a ton of duplicated information and bouncing between apps.
Has anyone found something that can actually bring all of this together without becoming an overly complicated enterprise system?
I’m basically looking for Jobber-level simplicity with legitimate fleet/equipment management built into it.
Would especially like to hear from excavation, demolition, grading, concrete, trucking, or other equipment-heavy contractors about what you’re actually using day-to-day.

submitted by /u/Classic_Chard4773
[link] [comments]
  •  

Wordpress devs, what's your local setup?

Been doing wp work and my setup feels stuck in 2018. laragon for local, vscode, wp-cli, and a terminal open just to watch debug.log lol.

Is everyone on localwp / ddev now or does that not matter much? and the php version thing across older sites drives me nuts, curious if you just keep separate stacks or something smarter

whatever you're using, even if it's ugly, I want to hear it...

submitted by /u/Careless_Eye_3855
[link] [comments]
  •  

Water Utilities Group Partners With DEF CON Offshoot For Water Watch Center

The National Rural Water Association has partnered with DEF CON Franklin to launch the Water Watch Center, which will provide threat intelligence and cybersecurity services to smaller U.S. water utilities serving fewer than 10,000 people. The initiative comes amid a growing wave of cyberattacks on water systems across multiple states. The Record reports: The program will see five managed detection and response providers work with DEF CON Franklin and the NRWA to offer cyber services for water utilities serving fewer than 10,000 people. There are over 50,000 community water systems across the U.S. and 91% of them serve fewer than 10,000 people. "These leading cyber firms and NRWA are architecting a scalable cyber delivery model that has eluded water industry and national security officials to date," said Jake Braun, the co-founder of DEF CON Franklin and former cyber official in the Biden administration. "Our incredible Franklin volunteers will support the effort to keep costs down for cash-strapped utilities fending off adversaries like the Iranian Red Guard or Chinese Military," Braun said. "To further accelerate the effort, we hand-picked cyber providers who already support water utilities. These folks walk in the door knowing the intricacies of cybersecurity in a water utility environment." The providers include Rapid7, Defendify, Legato Security, L1 Secure and Sentinel Technologies. The companies will share threat information and data on vulnerability patches with the NRWA, which will operate as a hub.

Read more of this story at Slashdot.

  •  

Kalshi and Polymarket Bets On Clinical Trials Criticized As 'Ghastly'

An anonymous reader quotes a report from NPR: Billions of dollars are traded every week on the lightly regulated prediction market sites, where users bet on everything from movie reviews to elections to conflicts in the Middle East. Clinical trials are just the latest area where the industry's rapid growth is raising ethical questions. Kalshi claims such bets will provide a new source of information about which drugs will get approved, and what clinical trials will show promising results, which the company says can help investors decide what new drugs to fund. "If you want to ban profiting from the failure of clinical trials, you would start with the stock market, where the financial incentive for this type of profit is orders of magnitude larger," said Kalshi spokesman Jack Such, pointing to stock market short sellers who have profited from clinical trial failures. "While Kalshi and the stock market are the same in this regard, they do differ in one important way: the stock market doesn't give any valuable information to researchers," Such said. Drug trial researchers, though, are far from convinced. David Tsai, who runs clinical trials at a biotech company in the San Francisco Bay Area, started an online petition pushing for such betting to be banned, making the case that betting on drug trials "threatens the very foundation of trust and integrity in biotechnology." Tsai is concerned that the prospect of betting provides those involved with a clinical trial a reason to tamper with the results for a prediction market payout. "If we were running a trial for an oncology drug that requires an infusion, a pharmacist who had placed a bet saying that it's gonna work well, or doesn't work well, could obviously adjust the infusion rate, could adjust the source temperature of the drug," he said. "They could change any number of variables that could obviously have a direct impact [on] how the trial and the data and the patient safety would come out." Another skeptic is Nicholas Zaorsky, a professor of radiation oncology at the Mayo Clinic in Jacksonville, Fla., who has helped run clinical trials and agrees that prediction markets can interfere with the advancement of life-saving drugs. "Prediction markets can be valuable in some settings because they aggregate information, but clinical trials are fundamentally different: investigators, coordinators, and sometimes even participants can directly influence aspects of the outcomes being wagered on," Zaorsky said. "That creates financial incentives that risk undermining trial integrity." Bettors should not be rooting for an experimental medicine to fail just to earn a buck, says Joshua Pederson, the father of a 12-year-old cancer patient enrolled in a clinical trial. "It's a dark idea," he said. "It's quite ghastly." Kalshi, for its part, argues that its prediction markets could help patients track promising medical breakthroughs and clinical trials, enlisting experts including 23andMe founder Anne Wojcicki to make the case. "Most patients don't know about the choices available in clinical trials or which programs are most promising. The opportunity to have an open, transparent dataset about trial probabilities is extremely promising and empowering for people," a white paper sponsored by Kalshi stated.

Read more of this story at Slashdot.

  •  

'Asimov Was Right' About Rules For Robots, Says Ex-US Cyber Director

Former U.S. National Cyber Director Chris Inglis says the biggest AI risk isn't sentience but autonomy. "What I'm worried about is that they get to choose what and where they do something, and under what rules they do it," he said, citing recent cases of AI agents from OpenAI, Anthropic, and Meta escaping security sandboxes. He argues developers need stronger safeguards, monitoring, and human accountability, invoking Asimov's idea that protecting humans should come before simply obeying them. The Register reports: "Asimov was right," he said, referring to science fiction author Isaac Asimov and his three laws that were to be followed by robots -- more specifically, AIs, in this case. "The first rule, and we call it the superior role, must be that it's designed not to hurt humans," Inglis said. "Second rule: To obey humans, such that it doesn't achieve agency and aspiration on its own. And the third: To do what humans tell it - and in that order. Instead we've designed them in the exact opposite way." What this means, he explained, is that AI developers created models to "do what humans tell you, obey the humans until it's inconvenient, and then the third one is maybe implied - protect humans - but if that's not built into the DNA, hardwired into it, then we have no right to expect it." Inglis admits it's not possible to hardwire rules into models and still keep their non-deterministic nature. "I would offer that you can tease those out in a highly controlled environment, a true sandbox, where you say, 'Let's put this thing through its paces, and let's back away to see what happens,'" he said. "Maybe you get the equivalent of a mini nuclear explosion in that room, and now you know this thing is capable of that." Inglis thinks another problem with AI is that it's become a commodity. "It's not like you can control it like you can nuclear material," he said. "You can't even specify its properties the way you can for an airplane or for an automobile, as diverse as they might be. Its manifestations are so numerous, so diverse, that as a general matter, you can't actually win by simply saying, "I will design those properties in,'" he added. "You need to do that to some degree, and then make sure that you understand how to watch it, monitor it, make sure you know what it does." [...] Ultimately, humans remain accountable for AI models' actions, according to Inglis. "They remain the source of agency and aspiration. It's possible for them to give broad authority to an AI model and have it run around for 30 hours without further consultation, but they need to know what they've asked it to do, and they need to know what they expect it will deliver in terms of performance on the back end. If they don't, then they're going to get what they deserve, which is the very frequent unpleasant surprise."

Read more of this story at Slashdot.

  •  

Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infostealer

A cluster of nearly 800 malicious packages has been published to the npm registry as part of a new campaign designed to deliver cross-platform malware targeting Windows, Mac, and Linux systems. "These packages appear to use AI slop squatted, or randomly generated typo-squatting package names, but all of them deliver a powerful RAT and infostealer payload," OpenSourceMalware researcher Paul

  •  

ClickFix Attacks Deliver macOS Stealer That Can Drain Crypto Wallets

ClickFix-style attacks are being used to deliver a Go-based malware capable of stealing cryptocurrency assets, as well as browser-stored passwords, Apple iCloud Keychain data, and cached credentials. The macOS-focused infection chain is designed to deliver a shell script that profiles the host and then fetches a macOS malware payload that's compatible with the computer's CPU architecture. "

  •  

UNC6671 Vishing Attacks Target Personal Phones to Steal SaaS Data

A recent wave of cyber attacks targeting financial services, private equity, and professional services has been attributed to a data extortion group known as UNC6671. "UNC6671 continues to rely on voice phishing (vishing) to target enterprise employees, posing as IT help desk staff facilitating mandatory, urgent security migrations. Significantly, the threat actor often contacts employees via

  •  

Framework Notifies 'All Customers' of a Data Breach Via Compromised Metabase BI Service

"Framework has been sending out email notifications to customers alerting of a limited data breach in which customer information was accessed through a Metabase BI service zero-day exploit," writes Slashdot reader DuoDreamer. Data includes customer names, email addresses, phone numbers, and physical addresses. "Framework is investigating whether or not this included Framework for Business customers as well." TechCrunch reports: Framework's spokesperson Eric Schumacher told TechCrunch that the breach affected "all customers," but declined to specify a specific number. Framework computers are relatively niche products, but some estimates say the company sold hundreds of thousands of devices. Metabase disclosed its own breach in a blog post on its official website, where it said that it was hacked by someone using an unknown security flaw, a so-called zero-day. The company said the hackers exploited the bug to give them the ability to access customers' databases stored on Metabase's cloud servers. In its email to customers, Framework also included the email Metabase sent to the company, which says hackers accessed Framework's cloud instance. The computer maker said it investigated the incident and found that hackers had stolen its customers' personal data, but did not include their payment information.

Read more of this story at Slashdot.

  •  

Suno Says It Will Start Watermarking Songs

Suno says it will begin watermarking and fingerprinting AI-generated songs, tighten download policies to curb mass distribution, and explicitly prohibit deceptive audio and unauthorized voice or likeness cloning. The changes come as the company faces mounting copyright lawsuits, a recent adverse ruling in Germany, and scrutiny over a past data breach that revealed training-data sources. TechCrunch reports: In a blog post, co-founder and CEO Mikey Shulman shared core principles and said that the platform wants to promote original creation while enabling more people to make music with its AI tools. One of the key points of contention involved users uploading AI-generated songs on other streaming platforms and gaming the system to earn revenue. Suno said that now it will use audio watermarking and fingerprinting to prevent misuse on other streaming platforms. It's not clear if Suno will use an existing system like Google's Synth ID or adopt a new one, and the company did not say when contacted by TechCrunch about this. The startup also signed an agreement with lyrics provider Musixmatch to use its Sentinel system for copyright detection, the blog post said. [...] The company added that it plans to add a new download policy to bar mass distribution on streaming platforms, but declined to provide details on the record. Suno has also changed its community guidelines to explicitly prohibit "deceptive audio presented as real" and "using a real person's voice or likeness without permission" to prevent copycats.

Read more of this story at Slashdot.

  •  

Changing the default heading using Avada

Hi,

I need to change the attached header to include two seperate images in the middle.

The website uses Avada and I understand I need to create a new Layout section to replace this.

The problem is that it's proving difficult to apply the style of the red contacts/ social row at the top and the Nav section at the bottom to the new header.

Is there an easier way of doing this in Avada?

The client understandably assumes this is a simple change!

Thanks

submitted by /u/Maximum_Ad_5648
[link] [comments]
  •  
❌