Enlarge / A meeting of the UN Security Council on April 14. (credit: Fatih Aktas/Anadolu via Getty Images )

Russia vetoed a United Nations Security Council resolution Wednesday that would have reaffirmed a nearly 50-year-old ban on placing weapons of mass destruction into orbit, two months after reports Russia has plans to do just that.

Russia's vote against the resolution was no surprise. As one of the five permanent members of the Security Council, Russia has veto power over any resolution that comes before the body. China abstained from the vote, and 13 other members of the Security Council voted in favor of the resolution.

If it passed, the resolution would have affirmed a binding obligation in Article IV of the 1967 Outer Space Treaty, which says nations are "not to place in orbit around the Earth any objects carrying nuclear weapons or any other kinds of weapons of mass destruction."

Enlarge / Tech brands love hollering about the purported thrills of AI these days. (credit: Getty )

Logitech announced a new mouse last week. A company rep reached out to inform Ars of Logitech’s “newest wireless mouse.” The gadget’s product page reads the same as of this writing.

I’ve had good experience with Logitech mice, especially wireless ones, one of which I'm using now . So I was keen to learn what Logitech might have done to improve on its previous wireless mouse designs. A quieter click ? A new shape to better accommodate my overworked right hand? Multiple onboard profiles in a business-ready design?

I was disappointed to learn that the most distinct feature of the Logitech Signature AI Edition M750 is a button located south of the scroll wheel. This button is preprogrammed to launch the ChatGPT prompt builder, which Logitech recently added to its peripherals configuration app Options+.

Enlarge / Drops of the blood going onto an HIV quick test. (credit: Getty | BRITTA PEDERSEN )

Trendy, unproven "vampire facials" performed at an unlicensed spa in New Mexico left at least three women with HIV infections. This marks the first time that cosmetic procedures have been associated with an HIV outbreak, according to a detailed report of the outbreak investigation published today.

Ars reported on the cluster last year when state health officials announced they were still identifying cases linked to the spa despite it being shut down in September 2018. But today's investigation report offers more insight into the unprecedented outbreak, which linked five people with HIV infections to the spa and spurred investigators to contact and test nearly 200 other spa clients. The report appears in the Centers for Disease Control and Prevention's Morbidity and Mortality Weekly Report.

The investigation began when a woman between the ages of 40 and 50 turned up positive on a rapid HIV test taken while she was traveling abroad in the summer of 2018. She had a stage 1 acute infection . It was a result that was as dumbfounding as it was likely distressing. The woman had no clear risk factors for acquiring the infection: no injection drug use, no blood transfusions, and her current and only recent sexual partner tested negative. But, she did report getting a vampire facial in the spring of 2018 at a spa in Albuquerque called VIP Spa.

• 

  The HMD Pulse base model. [credit: HMD ]

HMD has been known as the manufacturer of Nokia-branded phones for years now, but now the company wants to start selling phones under its own brand. The first is the "HMD Pulse" line, a series of three low-end phones that are headed for Europe. The US is getting an HMD-branded phone, too—the HMD Vibe—but that won't be out until May.

Europe's getting the 140-euro HMD Pulse, 160-euro Pulse+, and the 180-euro Pulse Pro. If you can't tell from the prices, these are destined for Europe for now, but if you convert them to USD, that's about $150, $170, and $190, respectively. With only $20 between tiers, there isn't a huge difference from one model to the next. They all have bottom-of-the-barrel Unisoc T606 SoCs. That's a 12 nm chip with two Cortex A75 Arm cores, two A55 cores, an ARM Mali-G57 MP1, and it's 4G only. Previously, HMD used this chip in the 2023 HMD Nokia G22 . They also all have 90 Hz, 6.65-inch, 1612×720 LCDs, 128GB of storage, and 5,000 mAh batteries.

As for the differences, the base model has 4GB of RAM, a 13 MP main rear camera, an 8 MP front camera, and 10 W wired charging. The Plus model upgrades to a 50 MP main camera, while the Pro model has 6GB of RAM, a 50 MP main camera, 50 MP front camera, and 20 W wired charging. There is a second lens camera on the back, but it appears to be only a 2 MP "depth sensor" on all models.

Enlarge (credit: Getty Images)

In the world of AI, what might be called "small language models" have been growing in popularity recently because they can be run on a local device instead of requiring data center-grade computers in the cloud. On Wednesday, Apple introduced a set of tiny source-available AI language models called OpenELM that are small enough to run directly on a smartphone. They're mostly proof-of-concept research models for now, but they could form the basis of future on-device AI offerings from Apple.

Apple's new AI models, collectively named OpenELM for "Open-source Efficient Language Models," are currently available on the Hugging Face under an Apple Sample Code License . Since there are some restrictions in the license, it may not fit the commonly accepted definition of "open source," but the source code for OpenELM is available.

On Tuesday, we covered Microsoft's Phi-3 models , which aim to achieve something similar: a useful level of language understanding and processing performance in small AI models that can run locally. Phi-3-mini features 3.8 billion parameters, but some of Apple's OpenELM models are much smaller, ranging from 270 million to 3 billion parameters in eight distinct models.

Enlarge / The Q*Bert's so bright, I gotta wear shades. (credit: Aurich Lawson | Getty Images | Gottlieb)

For years now, video game preservationists, librarians, and historians have been arguing for a DMCA exemption that would allow them to legally share emulated versions of their physical game collections with researchers remotely over the Internet. But those preservationists continue to face pushback from industry trade groups, who worry that an exemption would open a legal loophole for "online arcades" that could give members of the public free, legal, and widespread access to copyrighted classic games.

This long-running argument was joined once again earlier this month during livestreamed testimony in front of the Copyright Office, which is considering new DMCA rules as part of its regular triennial process . During that testimony, representatives for the Software Preservation Network and the Library Copyright Alliance defended their proposal for a system of "individualized human review" to help ensure that temporary remote game access would be granted "primarily for the purposes of private study, scholarship, teaching, or research."

Enlarge / Ubuntu has come a long way over nearly 20 years, to the point where you can now render 3D Ubuntu coffee mugs and family pictures in a video announcing the 2024 spring release. (credit: Canonical)

History might consider the most important aspect of Ubuntu 24.04 to be something that it doesn't have: vulnerabilities to the XZ backdoor that nearly took over the global Linux scene .

Betas, and the final release of Ubuntu 24.04, a long-term support (LTS) release of the venerable Linux distribution, were delayed , as backing firm Canonical worked in early April 2024 to rebuild every binary included in the release. xz Utils, an almost ubiquitous data-compression package on Unix-like systems, had been compromised through a long-term and elaborate supply-chain attack, discovered only because a Microsoft engineer noted some oddities with SSH performance on a Debian system. Ubuntu, along with just about every other regularly updating software platform, had a lot of work to do this month .

What is actually new in Ubuntu 24.04 , or " Noble Numbat ?" Quite a bit, especially if you're the type who sticks to LTS releases. The big new changes are a very slick new installer, using the same Subiquity back-end as the Server releases, and redesigned with a whole new front-end in Flutter. ZFS encryption is back as a default install option, along with hardware-backed (i.e. TPM) full-disk encryption, plus more guidance for people looking to dual-boot with Windows setups and BitLocker. Netplan 1.0 is the default network configuration tool now. And the default installation is "Minimal," as introduced in 23.10 .

Enlarge (credit: Getty Images)

A now-abandoned USB worm that backdoors connected devices has continued to self-replicate for years since its creators lost control of it and remains active on thousands, possibly millions, of machines, researchers said Thursday.

The worm—which first came to light in a 2023 post published by security firm Sophos—became active in 2019 when a variant of malware known as PlugX added functionality that allowed it to infect USB drives automatically. In turn, those drives would infect any new machine they connected to, a capability that allowed the malware to spread without requiring any end-user interaction. Researchers who have tracked PlugX since at least 2008 have said that the malware has origins in China and has been used by various groups tied to the country’s Ministry of State Security.

Still active after all these years

For reasons that aren’t clear, the worm creator abandoned the one and only IP address that was designated as its command-and-control channel. With no one controlling the infected machines anymore, the PlugX worm was effectively dead, or at least one might have presumed so. The worm, it turns out, has continued to live on in an undetermined number of machines that possibly reaches into the millions, researchers from security firm Sekoia reported .

Enlarge / This Toyota factory in Indiana is getting a $1.4 billion investment so it can assemble a new three-row electric SUV for the automaker. (credit: Toyota)

US electric vehicle manufacturing got a bit of a boost today. Toyota has revealed that it is spending $1.4 billion to upgrade its factory in Princeton, Indiana, in order to assemble a new three-row electric SUV. That will add an extra 340 jobs to the factory, which currently employs more than 7,500 workers who assemble the Toyota Sienna minivan and the Toyota Highlander, Grand Highlander, and Lexus TX SUVs.

"Indiana and Toyota share a nearly 30-year partnership that has cultivated job stability and economic opportunity in Princeton and the surrounding southwest Indiana region for decades," said Governor Eric Holcomb.

"Toyota's investment in the state began with an $800 million commitment and has grown to over $8 billion. Today's incredible announcement shows yet again just how important our state’s business-friendly environment, focus on long-term success, and access to a skilled workforce is to companies seeking to expand and be profitable far into the future. Indiana proudly looks forward to continuing to be at the center of the future of mobility,” Holcomb said.