Let’s start 2025 off strong by avoiding it entirely and escaping a thousand years into the past to an Amazonian civilization of forest islands, garden cities, and duck tales. From there, we’ll flee even farther from the present, though we’ll keep the “enchanted forest” vibe going strong. 

Then, the BATS are SURFING. What else do you want to know? Close up shop; we’ve reached the pinnacle of enlightenment. And finally, want to see some robots hula hoop? You came to the right place.

Happy New Year to all who acknowledge the passage of time, and congratulations to anyone who has managed to transcend it.

The Ancient Garden Cities of Llanos de Mojos 

Hermengildo, Tiago et al. “Stable isotope evidence for pre-colonial maize agriculture and animal management in the Bolivian Amazon.” Nature Human Behaviour.

It’s unwise to romanticize any past society or culture. Humans are reliably humans, with all that this entails, across time and continents. But when you encounter tales of garden cities linked by vast causeways and populated by people and their pet ducks, it can be a little hard not to indulge in daydreams about life there. 

That’s the scene unveiled in a new study on the Casarabe culture, who lived in the Llanos de Mojos region of the Bolivian Amazon between 500 and 1400, before the arrival of Europeans. Over the centuries, these people built roughly 200 monumental mounds linked by more than 600 miles of canals and causeways. The sprawl included primary urban centers and small forest islands, which are cultivated patches of trees amid the wetland plains. 

“The sheer volume of sites and their architectural layout, divided into a four-tier settlement system…indicate that the people of the Casarabe culture created a new social and public landscape through monumentality, leading to low-density urbanism,” said researchers led by Tiago Hermengildo of the Max Planck Institute of Geoanthropology. “The extent and complexity of the Casarabe settlement network present a unique context in the South American lowlands.”

To better understand the diets and lifestyles of these people, Hermengildo and his colleagues collected isotope data from the remains of 86 humans and 68 animals (including mammals, reptiles, birds, and fish) that lived in Llanos de Mojos between 700 and 1400. The results revealed that maize was the central staple of the Casarabe diet—both for its people, and its ducks.

“We provide evidence that muscovy ducks (Cairina moschata), the only known domesticated vertebrate in the South American lowlands, had substantial maize intake suggesting intentional feeding, or even their domestication, from as early as 800 CE,” said the team. “Similar isotopic evidence indicative of maize feeding practices was also reported in muscovy duck from Panama, suggesting that maize was a key element in the domestication of ducks throughout the American continent.”

Feeding ducks: a meditative passtime for the ages. Though the birds were raised for sustenance, I like to imagine a few charismatic drakes and hens earned a role as companions. 

But regardless of the charm quotients of bygone ducks, these findings are part of a wave of emerging research revealing that ancient cultures in the Amazon Basin were far more complex and extensive than previously realized—and researchers have only started to scratch the surface of many of these sites. Get your brain checked now, because this field is going to be throwing out head-spinners and mind-bogglers for years to come.

Yellowstone’s Lost Woods 

Pederson, Gregory T. et al. “Dynamic treeline and cryosphere response to pronounced mid-Holocene climatic variability in the US Rocky Mountains.” Proceedings of the National Academy of Sciences.

As global temperatures rise, alpine snowpack and glaciers are receding, a pattern that often exposes fossils, artifacts, and other relics that have been locked in ice for millennia. 

For instance, scientists recently discovered an eerily well-preserved forest of whitepark pines that melted out of an ice patch on Yellowstone’s Beartooth Plateau. This forest stand thrived about 5,500 years ago, but the ice left it in such pristine condition that scientists were able to measure tree rings and reconstruct the climate these trees experienced over five centuries.

“The extraordinary quality of wood preservation at the…ice-patch site provides an opportunity to generate a multicentury, mid-Holocene record of high-elevation temperature during the life of the forest stand, and to elucidate the climate conditions that contributed to the stand’s demise and subsequent growth of the ice patch,” said researchers led by Gregory Pederson of the U.S. Geological Survey. 

The treeline in the Beartooth Mountains was at a much higher elevation 5,500 years ago due to a multi-century warm spell. Then, around 5,100 years ago, Iceland went on an epic volcanic bender, as it is prone to do from time to time, causing a “summer cooling anomaly” that “led to rapid ice-patch growth and preservation of the trees,” according to the study.

In other words, Iceland’s stinky lava breath likely killed off this forest all the way in Wyoming by cooling the Northern Hemisphere, which entombed the stand in ice. 

The study notes that the treeline is likely to creep back up the slopes again as anthropogenic climate change melts ice off at high elevations. Pines may grow once more on the ancestral grounds of this ancient forest, as a consequence of human activity.   

BATS SURF

Hurme, Edward et al. “Bats surf storm fronts during spring migration.” Science. 

Bats surf. 

Let that sentence breathe. Just two words, yet it may well be the shortcut to nirvana. Dust to dust. Hallelujah. BATS SURF.

In addition to being my new incantation for 2025, “bats surf” is a scientific discovery reported this week. Researchers outfitted 71 female common noctule bats (Nyctalus noctule) with tags and followed their spring migration across Europe, which lasted about 46 days and covered nearly 700 miles. Some of these batgirls covered an astonishing 237 miles in just a single night, much farther than previously recorded flights. 

The noctules were able to achieve these distances by timing their flights to coincide with warm fronts that buoyed them along with strong winds. In other words, bats surf the tropospheric waves. This skill is especially important for female noctules, as they must navigate migrations at the same time they are gestating future surfer pups in their bellies.  

“Females are generally pregnant in spring and can delay the embryo’s development through torpor,” said researchers led by Edward Hurme of the Max Planck Institute of Animal Behavior.

“As these bats wait for the right migration conditions, they must either invest in their embryo while increasing their own energetic cost of flight or delay the development of the embryo, possibly affecting the pup’s survival,” the team said. “This phenological flexibility may be key for their long-term survival and maintenance of migration.”

Parenthood is hard enough without having to worry getting literally weighed down by your brood on the road. There’s no hanging loose for these bats; they are truly on a journey of surf-ival. 

Robots Taking Hula Hoop Jobs

Zhu, Xintong et al. “Geometrically modulated contact forces enable hula hoop levitation.” Proceedings of the National Academy of Sciences.

You might be a scientist if you look at a hula hoop and think “this familiar playtime activity can serve as an archetype of the challenging class of problems involving parametric excitation by driven supports and the mechanics of dynamic contact points with frictional and normal forces.”

That’s a quote from a new study that investigated the complex dynamics behind “hula hoop levitation,” which describes how skilled hoopers synchronize their body movements in ways that appear to defy gravity. The study belongs to one of my favorite research traditions—the earnest examination of an outwardly trivial item, a class that also includes the nano-pasta work we recently covered and a legendary 2022 breakdown of the fluid dynamics of Oreos. 

“Seemingly simple toys and games often involve surprisingly subtle physics and mathematics,” said researchers led by Xintong Zhu of New York University. “The physics of hula hooping was first studied as an excitation phenomenon soon after the toy became a fad, and more recent interest has come during its renewed popularity as a form of exercise and performance art.”

In addition to outlining the physical underpinnings of levitation, the authors took the inspired step of experimenting with a variety of hula-hooping robots. The study is punctuated by frankly delightful footage of these machines hooping their cold metal hearts out. See for yourself; the study will be open-access for six months.

The upshot: We now have experimental confirmation that people (or robots) with “sufficiently curvy” figures have a hooping advantage. The team notes that “an hourglass-shaped body of hyperboloidal form successfully suspends the hoop.” 

Shout out to all you hyperboloids out there! Happy hooping.

Thanks for reading! See you next week.

Earlier this week, Meta executive Connor Hayes told the Financial Times that the company is going to roll out AI character profiles on Instagram and Facebook that “exist on our platforms, kind of in the same way that accounts do … they’ll have bios and profile pictures and be able to generate and share content powered by AI on the platform.” 

This quote got a lot of attention because it was yet another signal that a “social network” ostensibly made up of human beings and designed for humans to connect with each other is once again betting its future on distinctly inhuman bots designed with the express purpose to pollute its platforms with AI-generated slop, just like spammers are already doing and just like Mark Zuckerberg recently told investors the explicit plan is. In the immediate aftermath of the Financial Times story, people began to notice the exact types of profiles that Hayes was talking about, and assumed that Meta had begun enacting its plan. 

But the Meta controlled, AI-generated Instagram and Facebook profiles going viral right now have been on the platform for well over a year and all of them stopped posting 10 months ago after users almost universally ignored them. Many of the AI-generated profiles that Meta created and announced have been fully deleted; the ones that remain have not posted new content since April 2024, though their chat functionality continues to work. 

Peoples’ understandable aversion to the idea of Meta-controlled AI bots taking up space on Facebook and Instagram has led them to believe that these existing bots are the new ones “announced” by Hayes to the Financial Times. In Hayes’ quote, he says that Meta ultimately envisions releasing tools that allow users to create these characters and profiles, and for those AI profiles to live alongside normal profiles. So Meta has not actually released anything new, but the news cycle has led people to go find Meta’s already existing AI-generated profiles and to realize how utterly terrible they are.

After this article was originally published, Liz Sweeney, a Meta spokesperson, told 404 Media that "there is confusion" on the internet between what Hayes told the Financial Times and what is being talked about online now and Meta is deleting those accounts now. 404 Media confirmed that many of the profiles that were live at the time this article was published have since been deleted.

This is Behind the Blog, where we share our behind-the-scenes thoughts about how a few of our top stories of the week came together. This week, we talk more about magic links and building shelves offline. A light Behind the Blog today but we're back from the holiday on Monday.

JOSEPH: There has been a lot of response to our post We Don’t Want Your Password. Much of it supportive, some of it mad, some of it funny. The TLDR is (although I do think it’s worth a read) is that we’re four journalists trying to spend as much time as possible doing actual journalism, rather than spending our very limited amount of time building things that are not necessary and that we’re not equipped to do. We do want to build, like our big project for a fulltext RSS feed for paying subscribers and for the broader independent media ecosystem, but we’re not interested in using up resources (time, mostly) on introducing a username/password login for the site when the current magic link system works mostly fine and is how the CMS we use is designed.

Capabilities used in or justified by extreme circumstances often become commonplace and are used for much more mundane things in the future. And so the remote investigative actions taken by Elon Musk in Wednesday’s Cybertruck explosion in Las Vegas are a warning and a reminder that Tesla owners do not actually own their Teslas, and that cars, broadly speaking, are increasingly spying on their owners and the people around them.

After the Cybertruck explosion outside of the Trump International Hotel in Vegas on Wednesday, Elon Musk remotely unlocked the Cybertruck for law enforcement and provided video from charging stations that the truck had visited to track the vehicle’s location, according to information released by law enforcement. 

“We have to thank Elon Musk specifically, he gave us quite a bit of additional information in regards to—the vehicle was locked due to the nature of the force from the explosion, as well as being able to capture all of the video from Tesla charging stations across the country, he sent that directly to us, so I appreciate his help on that,” Clark County Police sheriff Kevin McKahill said in a press conference.  

The fact that the CEO of a car company or someone working on his behalf can—and did—remotely unlock a specific vehicle and has the means of tracking its location as well as what Musk described as the vehicle’s “telemetry” is not surprising given everything we have learned about newer vehicles and Teslas in particular. But it is a stark reminder that while you may be able to drive your car, you increasingly do not own it, that the company that manufactured it can inject themselves into the experience whenever it wants, and that information from your private vehicle can be provided to law enforcement. Though Musk is being thanked directly by law enforcement, it is not clear whether Musk himself is performing these actions or whether he’s directing Tesla employees to  do so, but Tesla having and using these powers is concerning regardless of who is doing it.

Reverse engineer Scotty Allen made his own iPhone. Well, more accurately, he made his own iPhone enclosure out of a block of aluminum, put the internal components of an iPhone into it, and managed to make it all work. Then, he used the same schematics he made to 3D print a working iPhone enclosure out of nylon carbon fiber.

Like lots of repair and DIY projects on the iPhone, Allen did tons of painstaking work over the course of a year to more or less recreate something that already exists and that most people do not need. But his work opens the door to a more modifiable iPhone and a DIY culture around smartphones that still doesn’t really exist. Essentially, he took a block of aluminum, used a CNC mill to carve it down, and was able to put all of the components in the custom enclosure, the way someone might when they’re building a PC. Along the way, he made CAD files of the inside of an iPhone, which will allow people to recreate his work. It is now possible to download his design files and 3D print your own iPhone shell.

“There's been an open question for me from the beginning, which is like, we have this culture around modding PCs, right? And custom PCs. Why do we not have that for phones?,” Allen told me in a video chat. “It’s very celebrated in the culture. But then when you talk about building your own phone, everyone is like, ‘No, that’s crazy.’ Apple is going to sue you.”

As you might expect, the iPhone’s enclosure is not just an empty block of metal. There are various tiny holes for screws and engraved areas for cables and antennas to go. Allen studied all of this and, through a roughly year-long process of trial-and-error, was able to recreate this enclosure and create blueprints for other people to replicate it. 

“This was really difficult because I had to reverse engineer it and there was a lot of time spent figuring out, ‘OK, now I’ve got it drawn, but how do I know everything about the interior walls? There’s all these little threaded inserts that are glued in. And I think I actually went about this machining it in a different way than Apple does,” he said.

Over the years, Allen has done lots of cool things with the iPhone, which started with adding a working headphone jack back into the iPhone 7 after Apple removed it. He is part of the right to repair movement, but takes things a step further and says he’s advocating for the right to modify, and the normalization of opening and tweaking things like the iPhone to prove that they’re not just unknowable black boxes.

“I look at this as an infrastructure project, which is, let’s make a 1-to-1 copy,” he said. “It’s not totally 1-to-1, but in terms of overall geometry, it’s a fairly faithful representation and reproduction with the goal that, if you want to do interesting things, you need to start with the boring things first. And now with all the design files that I’ve created, you can really easily begin to modify it to look how you want on the outside, to add space for things on the inside. So this is a base for doing all sorts of more creative things.” 

Allen said that at the moment one challenge is that there are limitations on the types of touchscreens that will work with the iPhone, but that with more work it would be possible to work with additional modifications. 

“My notion is that a phone is a device that you can open up and tinker with, or at least repair,” he said. “I think I’ve had a hand in saying, ‘Look, this isn’t a black box that only Apple is allowed to open.’ … I think consistently what I’ve done is poke at the edges and say, ‘What other things can we do with this?’” 

Almost two years ago, Louisiana passed a law that started a wave that’s since spread across the entire U.S. south, and has changed the way people there can access adult content. As of today, Florida, Tennessee, and South Carolina join the list of 17 states that can’t access some of the most popular porn sites on the internet, because of regressive laws that claim to protect children but restrict adults’ use of the internet, instead.

That law, passed as Act 440, was introduced by “sex addiction” counselor and state representative Laurie Schegel and quickly copied across the country. The exact phrasing varies, but in most states, the details of the law are the same: Any “commercial entity” that publishes “material harmful to minors” online can be held liable—meaning, tens of thousands of dollars in fines and/or private lawsuits—if it doesn’t “perform reasonable age verification methods to verify the age of individuals attempting to access the material.”

To remain compliant with the law while protecting users’ privacy, Aylo—the company that owns Pornhub and a network of sites including Brazzers, RedTube, YouPorn, Reality Kings, and several others—is making the choice, state by state, to block users altogether. 

Pornhub is currently blocked in:

Here's a special year in review episode of the 404 Media Podcast! We riff on the last year in AI, media, journalism, and more. We'll be back with a normal news show in the new year!

Listen to the weekly podcast on Apple Podcasts, Spotify, or YouTube. Become a paid subscriber for access to this episode's bonus content and to power our journalism. If you become a paid subscriber, check your inbox for an email from our podcast host Transistor for a link to the subscribers-only version! You can also add that subscribers feed to your podcast app of choice and never miss an episode that way. The email should also contain the subscribers-only unlisted YouTube link for the extended video version too. It will also be in the show notes in your podcast player.

Since we launched 404 Media one of the most common feature requests we’ve received from readers is the ability to log into the site with a username and password, as opposed to the magic links used by Ghost, the open source publishing platform we use for our site and newsletters. 

If you don’t have a 404 Media account, here is how magic links work: Rather than enter a username and password to register for our site and log in, you give us your email. We then send you an email with a link that you click, which logs you into the site. That email also comes with a URL you can copy/paste into the address bar of your browser of choice for reasons we’ll get into in a minute. That’s it. As long as you remain logged in you never have to think about this again, and if you are logged out or want to login on a different device you just repeat the same process. 

We find this to be a much easier login process and wish it was more common across the web where appropriate. But there’s a much more important reason why we have embraced Ghost’s login method and are not in a rush to develop our own solution for a username and password login in the same way we invested time and money in developing full text private RSS feeds for paying subscribers, for example. The gist is that it’s safer for us and for you to not share any passwords with us. 

It’s impossible to say what the exact number is, but a huge portion of cybersecurity breaches start with compromised credentials. There are a few ways hackers can compromise your passwords, many of which Joseph has covered on 404 Media recently, but one common method is exploiting the fact that the majority of people reuse their passwords across the internet (a study of 28.8 million users found that 52 percent of them reuse passwords). This is why it’s much safer for people to use password managers that generate unique, strong passwords for every account, and why Have I Been Pwned is such an important resource—by keeping track of sites and services that have been hacked, it acts a constant reminder to use a different password on every service. Otherwise, a hacker could take your password from that random forum hack, and then use it to break into your workplace account, or whatever other account shares that password.

It is standard best practice for sites that ask for your password to hash it, meaning even if a site got hacked, hackers can’t just run off with your password. However, that is not always the case, with some companies storing passwords in plain text, and depending on what hashing algorithm the site has used, hackers may be able to crack it.

But you know what’s the safest way for us to keep your password safe? Not asking for one to begin with. By not creating a password with us you have no risk of it leaking, and we don’t have to deal with the responsibility of keeping it secure. The sign in link is going to your email, which presumably is protected with two-factor authentication, if you have it set up (which you should!).

“The main reason (as you know!) is security,” Ghost CEO John O’Nolan told us when asked about the company’s choice to use magic links. “Passwords get hacked all the time, but they can’t be hacked if they don’t exist. Then what I would usually add to that is how this allows a small team like 404 to spend less time managing security administration, and more time investing in bringing you stories you care about.”

That being said, we want to acknowledge that the magic link system isn’t perfect because no system is. We also understand that some people don’t like the magic link system or have extenuating circumstances where it does not work for them, and would prefer a password system. We’re writing this article in part to explain our thinking behind having the magic link system and to explain why a password system is not currently feasible for us.

We have, on a couple of rare occasions, heard from users complain that the emailed links take a while to come in. This almost never happens and when it has we’ve seen it resolved within a few hours. More often than not, users will sign up to our site via a work email with aggressive security or content filtering rules that block our emails. If you ever think that might be the case for you please reach out to [email protected], but also keep in mind you are always free to change the email associated with your account to a personal email address. We want to make our articles as easy as possible for subscribers to access, which is why we set up private RSS feeds that don’t require a login to read our stories.

Probably the most common problem people run into with magic links is they think they have logged into the site on their normal browser, but they’re actually logged in through an in-app browser. For example, someone might receive the login link to their email. They open up the Gmail app, click the “Sign in to 404 Media” button, and their phone loads the webpage. But this is loading the website in Gmail’s web browser, not your native Safari one. People then navigate the site as they would normally in their default browser, and are surprised when they are not logged in. These two browsers are not sharing any cookies or log in sessions.

It’s annoying when apps open stuff in their own browsers rather than the phone’s native one. This is a more fundamental design issue with how many apps or operating systems work. A solution on iPhone is when receiving the login link, click and hold the “Sign in to 404 Media” button to bring up the contextual venue, and hit “Open Link.” This will open the link, and sign you in, on your native browser. Or, copy and paste the sign in link which is also in the email. Regardless, we recommend you login to 404 Media wherever you expect to read it. 

We totally understand that this is a frustrating experience, and frankly a flaw with the mobile web in general. But we also recognize that for a lot more people, not having to remember or save a password is the easiest, more preferred, most secure option we can offer right now. The benefits of the magic link system outweigh the costs, both to us as a small business, and to our readers who are privacy-conscious. 

Ultimately, it is much safer for us, and for you.

The Secret Service never actually checked whether people gave proper consent to be tracked by a mobile phone location monitoring tool, despite claiming the data was collected with peoples’ permission, the agency admitted in an email obtained by 404 Media.

The email undermines the Secret Service’s and other U.S. federal agencies' justification that monitoring the movements of phones with commercially available location data without a warrant is possible because people allegedly agreed to the terms of services of ordinary apps that may collect it. The news also comes after the Federal Trade Commission (FTC) banned Venntel, the company that provided the underlying dataset for the surveillance tool used by the Secret Service, from selling sensitive location data, and alleged that it did not obtain that consent in multiple cases. The tool used by the Secret Service is called Locate X, which is made by a company called Babel Street.

In the 2022 email, the office of Senator Ron Wyden asked the Secret Service what steps it had taken to verify that the location data it purchased from Babel Street was obtained from consumers who consented to “the onwards sale and sharing of the data.” Venntel collates location data from a variety of sources, including apps installed on peoples’ phones such as weather or navigation tools. The Secret Service’s one word response to that question read “None,” according to a copy of the email Wyden’s office shared with 404 Media.

Welcome back to a very special holiday edition of the Abstract! I hope this week brought you all the seasonal mirth to which you are entitled. 

As the year winds to a close, I’m sharing five studies that stood out to me in 2024. They are not judged by any specific criteria other than general mind bogglery. We’ll start with banana galaxies; no further explanation needed. Then, the new record-holders for brightest thingummy and biggest genome. Next, we are living in an RNA world and we are all RNA girls. And to close out 2024, a vision of life in the lunar underground. 

It’s Bananas All the Way Down

Pandya, Viraj et al. “Galaxies Going Bananas: Inferring the 3D Geometry of High-redshift Galaxies with JWST-CEERS.” The Astrophysical Journal.

The James Webb Space Telescope, launched on Christmas Day 2021, has been looking at weird space stuff for over two years now, yielding a constant stream of insights about the early universe, alien exoplanets, and whatever else it sets its unprecedented sights on.

To that end, 2024 kicked off with the landmark discovery that baby galaxies from the dawn of time were…bananas. Scientists reported in January that galaxies at high redshifts—meaning they were observed in the very ancient universe—often seem to take on a “banana-like” shape. 

“In this paper, we place new constraints on the 3D shapes of high-redshift galaxies using JWST observations from the Cosmic Evolution Early Release Science (CEERS) survey,” said researchers led by Viraj Pandya of Columbia University. “We will illustrate how this curved ‘banana-like’ joint distribution” arises from galaxies “with intrinsically elongated 3D shapes.” 

The results suggest that many galaxies go through an awkward “prolate” phase of morphological elongation before maturing into more familiar galactic shapes we see today, like clusters and disks. And while Pandya and his colleagues see bananas in space, these shapes have also been described as pickles or cigars. It all depends on what kind of treat you want to see at the edge of the universe.  

A Sun a Day Keeps the Doctor Away

Wolf, Christian et al. “The accretion of a solar mass per day by a 17-billion solar mass black hole.” Nature Astronomy. 

2024 had its fair share of dark moments, but there was one very literal bright spot: Scientists identified the most radiant object known in the universe, which is a quasar called J0529−4351. Quasars are pyrotechnic galactic cores and the most ludicrously luminous entities in space. Their “implausibly huge output of light,” as it is described in the above study, is generated by intense gravitational interactions between supermassive black holes at the center of galaxies, and forms of matter (gas, dust, doomed civilizations) that accrete around those holes.  

“In terms of luminosity and likely growth rate, J0529−4351 is the most extreme quasar known,” said researchers led by Christian Wolf of Australian National University. “The black hole in this quasar accretes around one solar mass per day onto an existing mass of ∼17 billion solar masses.”

In other words, J0529−4351 is eating the equivalent of a whole Sun every single day. It’s the Gaston of quasars. As a consequence of this insane diet, J0529−4351 is 500 trillion times more luminous than the Sun. Just utterly incomprehensible radiance. What’s wild is that the record for brightest quasar has been repeatedly broken in recent years, so it’s possible that even J0529−4351—an unprecedented light-barfing marvel—may be outshone in the near future. 

Big Genome Energy

Fernández, Pol et al. "A 160 Gbp fork fern genome shatters size record for eukaryotes." Cell.

Pop quiz: What species has the biggest genome ever found? You would be forgiven for not guessing that it is (drumroll) some random fern in New Caledonia. And yet, in May, scientists reported that Tmesipteris oblanceolata, a tropical fork fern that appears totally inconspicuous, bears the most “obese genome” ever discovered. 

The fern’s genome contains 160 billion base pairs, making it 50 times bigger than a human genome and 7 percent bigger than the genome of the Japanese andromeda, a flowering plant that previously held the record. 

“Here, we present the discovery of the largest eukaryotic genome so far reported,” said researchers led by Pol Fernández of the Institut Botanic de Barcelona. “This record-breaking genome challenges current understanding and opens new avenues to explore the evolutionary dynamics of genomic gigantism.”

“It cannot be completely ruled out that even larger genomes may be uncovered in the future,” the team concluded. “Nevertheless, the multiple physiological, ecological, and evolutionary costs associated with genomic expansions at such gigantic scales most likely suggest that if the upper limit has not been reached yet, that of Tmesipteris oblanceolata must be very close to it.”

In other words, this species may well be the world's genomic heavyweight champion. And it’s just some tropical fern! Nature: an inscrutable weirdo.

It’s a Mad (RNA) World 

Papastavrou, Nikolaos et al, “RNA-catalyzed evolution of catalytic RNA.” Proceedings of the National Academy of Sciences.

How did life first arise on Earth? There are lots of compelling mythological answers to this question, such as “the Sky and Earth Hooked Up” and “Magic Dirt.” The question has also inspired a number of tantalizing scientific hypotheses, including what’s known as “RNA World.” In this leading scenario, the first Earthlings were self-replicating molecules of ribonucleic acid (RNA) that emerged about four billion years ago, before the emergence of proteins or deoxyribonucleic acid (DNA).

In March, scientists bolstered support for RNA World by developing an RNA enzyme that can perform some of the functions associated with these early speculative molecules, including making accurate copies of RNA strands and introducing variants over time. This discovery is a stepping stone toward recreating forms of primordial evolution in laboratory conditions, where they can be directly probed for clues about the origins of life, known as abiogenesis.

“At some point during the early history of RNA-based evolution, it is thought that RNA evolved the ability to catalyze its own replication, acting as an RNA-dependent RNA polymerase,” said researchers led by Nikolaos Papastavrou of the Salk Institute for Biological Studies. “This study demonstrates the critical importance of replication fidelity for maintaining heritable information in an RNA-based evolving system, such as is thought to have existed during the early history of life on Earth.”

The study offers a new piece of a puzzle that has enraptured untold generations: How can life spring up from non-living materials? What kind of cosmic magic trick is that? Enchanted dirt may genuinely not be far off from the truth, in the end.

You Can Take the Human Out of the Cave, But…

Carrer, Leonardo et al. “Radar evidence of an accessible cave conduit on the Moon below the Mare Tranquillitatis pit.” Nature Astronomy. 

Humans simply cannot resist a cozy cave. Caves were our starter homes; spaces used not just as shelters but as canvases for our imaginations and hubs of social and ritual activity (see: tortoise parties). So perhaps it’s no surprise that as we expand our exploratory efforts into outer space, we still cannot pass up a snug subterranean pad, even if it is on the Moon.

To that end, scientists reported in July that the Mare Tranquillitatis pit (MPT), a 330-foot-deep opening about 250 miles away from the Apollo 11 landing site, may be the entrance to an underground cave system made of ancient lava tubes. The team was able to map out this structure, which is the deepest known pit on the Moon, with radar reflections from NASA’s  Lunar Reconnaissance Orbiter.

“We find that a portion of the radar reflections originating from the MTP can be attributed to a subsurface cave conduit tens of metres long, suggesting that the MTP leads to an accessible cave conduit beneath the Moon’s surface,” said researchers led by Leonardo Carrer of the University of Trento. “This discovery suggests that the MTP is a promising site for a lunar base, as it offers shelter from the harsh surface environment and could support long-term human exploration of the Moon.”

It would be hilarious if all of those lofty human aspirations of a spacefaring techno-utopia culminated in us becoming cavemen again, just on a different world. The study also gets extra points for occasionally sounding like a high-end real estate listing, describing the pit as “an elliptical skylight with vertical or overhanging walls and a sloping pit floor that seems to extend further underground.” Dang, finally a Moon cave with the right specs—though it comes unfurnished and lacks desirable amenities (including breathable air).  Who’s up for some space spelunking?

That’s a wrap on the Abstract for 2024. Thanks so much for reading, and Happy New Year! 

AI-generated books and images are threatening the nearly 500-year-old art of lace making. 

It’s already come for the crochet community, and researchers have tried to teach machines to knit. But lace-making—a craft that even Renaissance artists struggled to master, and in which there are a literal infinite number of patterns to be created—is now having its AI slop moment. 

Mary Mangan, the librarian for her New England-based lace making group, told me that she first became aware of AI infiltrating lace spaces when someone in her group asked her to research a book that featured a cover photo that she wanted to try to make herself. “So I began to research the book. It smelled funny and I tried to search for the author's other work but couldn't find any,” Mangan said. She asked r/BobbinLace, a Reddit community for the bobbin lace-making technique, and users there helped track down the original, not-AI image from a lace catalog that the cover photo seemed to be based on. 

Longtime lace makers and experts from all around the community have started raising the alarm on AI grifting in their tight-knit community. Karen Bovard-Sayre, who has published several books about lace techniques, posted a video in November addressing the issue, saying she found 36 books about lace and tatting—a lacemaking technique—that seemed AI generated. She said she was looking at Amazon books about tatting to see what else was being published on the topic, and found many of the AI books targeting beginners. 

“As you probably all know, the tatting world's not that big even though it's around the world, but we kind of know who's doing what, who's making content, who's making books and all that,” Bovard-Sayre said in her video. “I started reading the summaries and they all kind of sounded flowery and didn't really say what they were, and then I started looking at the covers and back covers, and said wait a minute, something's wrong here.” She spends the rest of the video demonstrating what these books get wrong, and how to spot AI generated lace making materials. 

Some of the AI signs Bovard-Sayre points out include odd punctuation in the authors’ name (in the case of the book she’s examining in her video, “Sheila .A Richard,” where there’s a period before the middle initial), references to video tutorials like “This is a wonderful instructional video” which makes no sense in a printed book, obvious misspellings, and distorted or blurry photos.

She also finds designs in the book that she recognized as being the work of other lace designers, including Marilee Rockley, a fiber artist who specializes in tatting. Rockley also recently addressed the rise in AI generated materials on her website. “Some of you may have heard about the miserable thieves who are using Artificial Intelligence technology to ‘make’ books to sell,” she wrote. “Really horrible, fake books loaded with wrong information (lies) and stolen photos. They're so bad it would be laughable except they hurt a lot of innocent people who are looking to learn a new-to-them craft.” 

Preying on beginners’ lack of knowledge and relative inability to spot blatant fakes is a tactic used in other AI book grifts, too. The mushroom foraging community recently discovered AI scam books were flooding Amazon, directing newcomers to bad, potentially deadly misinformation. Unlike eating a poisonous mushroom because a chatbot or AI book told you it’s safe, buying a book on lacemaking that contains sloppily-generated images or instructions isn’t a matter of life and death—but it does threaten to devalue and dilute the integrity of a centuries-old art, as well as deterring newcomers. 

“Lace is a small hobby and a pretty tight community. We know who the designers and vendors are, and we trust them. However, until you become part of the lace community there's no way to know who is trustworthy and what is dubious. You need some level of skill and time within the network to really assess this,” Mangan told me. “Unfortunately, for newcomers who might be excited to dive into this hobby, they could get burned by the inadequate books—and frankly the thievery—of the work of our cherished lacemakers and designers. This could sour newbies on the craft and that would be unfortunate. And it could harm designers who opt out of sharing their works, and we'll all lose then.”

Lacemaker and textile historian Elena Kanagy-Loux told me she first noticed the proliferation of AI-generated books on bobbin lace while teaching a course last summer. A student showed her a book she’d recommended to her students on Amazon, but the recommended books on the site seemed off. “There were a number of suggested lace books with strange covers that did not represent real lace techniques, and subsequently I have been warning all of my students to avoid Amazon and buy from independent lace suppliers (a good practice for a multitude of reasons),” she said. “Now I see that there are a number of them advertising different lace techniques with strange AI images on the cover that don’t represent real lace or tools, and contents that—according to reviews—are either nonsense that provide no tangible instructions, or directly plagiarized from real lace books.” 

Some of the books Elena Kanagy-Loux found on Amazon included: 

• Bobbin Lace Crafting: Unleashing Your Creativity with Torchon Ground Patterns Book by Sarah DV Martin, which has a description that cites the book, as if it were a review. “Recently, I came across a fantastic book titled ‘Bobbin Lace Crafting: Unleashing Your Creativity with Torchon Ground Patterns’ that has truly inspired me in my lace making journey. The book not only provides detailed instructions on how to create stunning Torchon ground patterns but also offers valuable tips and tricks to help crafters unleash their creativity.” The cover shows crochet and machine-made lace on the cover, not bobbin lace.
• Lace Crafting Mastery: Beginner's Guide to Needle Tatting: Discover the Art of Needle Tatting to Create Stunning Lace Crafts by Alanah .F Thatcher. A reviewer wrote: “This is an AI written book whose parameters were set by someone who doesn’t know the difference between embroidery, tatting, and bobbin lace. That is like not knowing the difference between running, swimming, and cycling.” 
• NEEDLE TATTING FOR BEGINNERS: MASTER THE ART WITH ESSENTIAL TECHNIQUES AND FOUR STUNNING PROJECTS: AN EXPERT GUIDE TO CREATING ELEGANT NEEDLE TATTED LACE WITH STEP-BY-STEP INSTRUCTIONS by Evanna Harrington. The cover is AI-generated and “does not in any way resemble needle tatting (just a mess of threads, not real techniques)” Kanagy-Loux said.
• Bobbin Lace Mastery for Absolute Beginners: A Step by Step Guide to Elegant Patterns and Techniques in making Bobbin lace Paperback by Gloria Brock. Reviewers say it has no images inside and repeats instructions: “It keeps repeating the same thing over and over. It does provide some written instructions for a bookmark or flowers or leaves but doesn't provide visual patterns to use on the pillow,” one reviewer wrote. “I don't think this book is completed for a beginner since I am more confused now than before going over it. Sorry.”
• HOW TO MAKE BOBBIN LACE: A Step-by-Step Beginner’s Guide to Mastering Bobbin Lace Techniques and Patterns Paperback by Patricia Walcott, which has a cover that doesn’t even resemble bobbin lace
• The Bobbin Lace Bible: An Essential Book for Crafters by James XL Garcia, which a reviewer notes is ripping off the work of Jo Edkins, an established and respected bobbin lace instructor. The description follows the pattern seen on a lot of AI-generated books on Amazon, with phrases like “one thing I love” and “in conclusion” as if it’s a book report written by a grade school child. “Of course, no book is good, and ‘The Bobbin Lace Bible’ is not exempt from its flaws,” the description of the book says. “Some crafters may find certain sections a bit too technical or challenging, especially if they are complete beginners. However, with patience and practice, I believe that anyone can master the art of bobbin lace making with the help of this book.” Probably not!  

I sent all of the above listings to Amazon for comment, and the platform removed all of them except for the first one. “We have content guidelines governing which books can be listed for sale, and we have proactive and reactive methods that help us detect content that violates our guidelines, whether AI-generated or not. We invest significant time and resources to ensure our guidelines are followed, and remove books that do not adhere to those guidelines," a spokesperson for Amazon told me in a statement. "We aim to provide the best possible shopping, reading, and publishing experience, and we are constantly evaluating developments that impact that experience, which includes the rapid evolution and expansion of generative AI tools. We continue to enhance our protections against non-compliant content, and our process and guidelines will keep evolving as we see changes in AI-driven publishing.”

Amazon is full of these books, but it’s not the only retailer selling them. Mangan showed me several she and others found on eBay, including Bobbin Lace Magic: Unlocking the Secrets of Colorous Book by Ethan CC Lee which, like the ones above, has a book-report description as if the author is reviewing their own book. And then there’s A Bobbin Lace Book by Tim M. Enoch, with a description that includes an error from generating the text: “This response was truncated by the cut-off limit (max tokens). Open the sidebar, Increase the parameter in the settings and then regenerate.” eBay did not respond to a request for comment.

Mangan wondered if the onslaught of AI-generated slop in lacemaking might drive people to connect to real humans more. “Gathering in groups and discussing valuable books might be a good outcome, and we can host public gatherings for the lace-curious folks,” she said. “One other thing that I do is to edit Wikipedia with good books as references when I hear about them—maybe that could become another route to connect people to higher quality and current materials.” Used and older books could become more valuable, too, she said. 

“Over the years of posting videos about lacemaking on social media, I have gotten many snarky comments saying ‘AI will replace this.’ At first I laughed it off, because for lacemakers like myself the joy is in the process of working with our hands, which can never be replaced by technology,” Kanagy-Loux said. “But now I have genuine concerns that beginners seeking affordable books will be scammed by AI-generated books that contain no real information about the techniques and give up in frustration. This misinformation is why it is so important to me to share resources online and make knowledge about lacemaking and lace history accessible to a broader audience. Fortunately, our community continues to grow all the time, so I hope we can combat the proliferation of AI pattern books with the instructions of human beings.”

Hello! Here's a holiday gift: an episode of the 404 Media Podcast that was previously only for paying subscribers! It gives a lot more context on the how and why we cover AI they way we do. Here's the original description of the episode:

We got a lot of, let's say, feedback, with some of our recent stories on artificial intelligence. One was about people using Bing's AI to create images of cartoon characters flying a plane into a pair of skyscrapers. Another was about 4chan using the same tech to quickly generate racist images. Here, we use that dialogue as a springboard to chat about why we cover AI the way we do, the purpose of journalism, and how that relates to AI and tech overall. This was fun, and let us know what you think. Definitely happy to do more of these sorts of discussions for our subscribers in the future.

Listen to the weekly podcast on Apple Podcasts, Spotify, or YouTube. Become a paid subscriber for access to this episode's bonus content and to power our journalism. If you become a paid subscriber, check your inbox for an email from our podcast host Transistor for a link to the subscribers-only version! You can also add that subscribers feed to your podcast app of choice and never miss an episode that way. The email should also contain the subscribers-only unlisted YouTube link for the extended video version too. It will also be in the show notes in your podcast player.

AI slop has consumed Facebook, is running Wikipedia editors ragged, is rapidly destroying Google search, probably put an extra finger on the scales of election influence, is confusing and annoying crafters, steals endlessly from authors, is on its way to demolish YouTube comment sections, and will probably end up in a movie theater near you sooner than you think. But if you’re streaming Christmas music today, did something seem a little off to you? If so, there’s a very good chance you’ve been listening to AI-generated carol-slop.

As spotted by video game developer Karbonic, YouTube compilation videos are sneaking AI generated songs into their mixes. 

The example they posted, “Best of 1950s to 1970s Christmas Carols ~ vintage christmas songs that will melt your heart 🎅🎄⛄❄️,” has more than five million views and more than 2,000 comments. A ton of the comments appear to be engagement-farming bots, saying things like “I'm looking forward to Christmas 2024, is anyone else like me?” but many seem human. “It takes me back to my childhood and I realize how wonderful life was before worries about money and so many futile things that dont matter,” one person wrote. Another commented, “Missing  memories of my youth. But, grateful for the blessings in my life. Merry Christmas and God bless you.❤” 

If I put this on in the background while doing something else, I might not think anything of it. But there are points in the one hour 18 minute video that give it away as AI: “O Little Town of Bethlehem,” around the 36:55 mark, is the lyrics of that song but the melody of “Silent Night.” If you compare it to an actual recording of Nat King Cole singing “O Little Town,” the difference is even more obvious. Once you start noticing the warped tunes, they’re hard to un-hear. “Oh Holy Night” is listed in the video as being by “Nei Diamond,” who as far as I can tell doesn’t exist, or is a typo of Neil Diamond, who is definitely not the singer in the song on this compilation. “The First Noel,” attributed here to Nat King Cole, is either an undiscovered recording where Nat and the choir run some really wild riffs, or is AI. 

I won’t list every tell in this video, but there are many and they give me the heebie jeebies. Other videos in this channel, Holiday Serenade Library, seem to be pulling the same grift, sometimes with AI-generated video of people blurring around outdoor markets, Santa with a burning sleigh and reindeer on fire, or children with weird mustaches skipping through the snow.

A quick search around the internet to see if anyone else has encountered other holiday-flavored AI slop turned up a recent Reddit thread where people were complaining about seemingly fabricated Spotify artists haunting retail workers during an already agonizing season. They list Dean Snowfield, North Star Notesmiths, Sleighbelle, Frosty Nights, The Humbugs, Snowdrift Sleighs, and Daniel & The Holly Jollies as artists on Spotify that have snuck into Christmas playlists but have little to no trace of a career outside of the streaming platform. Some of them, like several of Dean Snowfield’s songs, sound like midi mixes with a stilted voice singing the lyrics. These artists make it onto huge, popular playlists like “Old Christmas Music” alongside real songs. It’s honestly hard to tell whether these artists are AI-generated or just mass produced. But their Spotify artist bios often have the same exact text, or follow this pattern: 

“Dean Snowfield are songwriters, artists, and musicians who have combined forces to release holiday themed cover songs on their independent record label, distributed by Warner Music's ADA. In November and December, their ‘A Nostalgic Noel’ sampler managed to generate over 8,000,000 streams across Spotify and Apple Music. As a collective of artists, Sleighbelle have a great deal of respect for the original songwriters and producers who created these beloved holiday classics, and ask that you support them by streaming their original versions. Without songwriters like Edward Polo, George Wyle, Huge Martin, and Ralph Blane, we wouldn't have this music to interpret and cover. Thanks for listening to our labor of love, and make sure to follow us on our socials. - Dean Snowfield” 

They didn’t just appear this year: Third Bridge Creative, a music creative agency, noticed these artists dwelling in the uncanny valley last Christmas, too. “Is it a coincidence that each of their top songs match up with the respective iconic Christmas hits? Why would I ‘immerse [my]self in the enchanting world of Christmas music with Dean Snowfield’s’ low-key creepy Nostalgic Noel when I can put on The Dean Martin Christmas Album instead?,” they wrote.

These artists are still massively popular on Spotify, with hundreds of thousands of listeners each. The North Star Notesmiths and Dean Snowfield have a very similar male singer’s voice on several songs. Frosty Nights and Daniel & The Holly Jollies also sound awfully alike. They’re all signed by Warner Music’s ADA label, according to their Spotify bios—the “label services arm of Warner Music Group, breaking brand new artists and supporting industry legends,” according to the label’s site—so I’ve reached out to Warner Music to ask what is going on here and will update if I hear back. Spotify also did not respond to a request for comment. 

Again, it’s still not clear whether these artists are AI-generated or human, but a lot of people seem to think there’s something amiss. To make it all a little weirder, after I emailed ADA for comment, Dean Snowfield commented on one of my Instagram posts and said “Congrats on the book release!” I hadn’t interacted with, or found a way to reach out to, Snowfield at all prior to his comment. Snowfield’s Instagram account is private, and he keeps rejecting my requests to follow it. He has 36 followers and 3 posts. 

In the meantime, stay vigilant out there and Merry Christmas from a real human.

This article is a joint reporting collaboration by Court Watch and 404 Media.

An Alaska man who tipped off law enforcement to an airman interested in child pornography was arrested when authorities searched his phone and found virtual reality images of minors. In an interview with law enforcement, the tipster said he also downloaded AI child sexual abuse material but that sometimes “real” ones were mixed in.

According to newly filed charging documents, Anthaney O’Connor, reached out to law enforcement in August to alert them to an unidentified airman who shared child sexual abuse (CSAM) material with O’Connor. While investigating the crime, and with O’Connor’s consent, federal authorities searched his phone for additional information. A review of the electronics revealed that O’Connor allegedly offered to make virtual reality CSAM for the airman, according to the criminal complaint. 

The court records say that the airman shared an image of a child at a grocery store and the two individuals discussed how to create an explicit virtual reality program of the minor. Using the code word ‘cheese pizza’ to describe the images, O’Connor allegedly noted that he could make the image for 200 dollars. He told the airman he was creating an online version of a pool where he could place an AI created image of the child from the grocery store. 

Documents say O’Connor possessed at least six AI created images, in addition to half a dozen ‘real’ CSAM images and videos. In an interview with law enforcement last Thursday, O’Connor told authorities that he “unintentionally downloaded ‘real’ images.” Court filings state he also told authorities that he would “report CSAM to Internet Service providers but still was sexually gratified from the images and videos.” A search of his house found a computer in his room and multiple hard drives hidden in a home’s vent. In a detention memo filed yesterday, the Justice Department says an initial review of O’Connor’s computer uncovered a 41 second video of a child rape.

404 Media has previously written about how the creation of AI-generated child sexual abuse material isn’t a “victimless” crime in part because real imagery of real victims can often be mixed in.

The Justice Department has stepped up its arrests of individuals possessing AI created CSAM images. In May 2024, Court Watch and 404 Media reported on the first of its kind arrest was made of a Wisconsin man who used “Stable Diffusion to create thousands of realistic images of prepubescent minors”

The U.S. Attorney’s office in Alaska, which is prosecuting the case, declined to comment outside of what was in the charging documents. A lawyer representing O’Connor did not immediately respond to a request for comment. On Monday, a federal judge ordered O’Connor be detained pending a further hearing on January 6th.

A lawyer defending an alleged distributor of Anom, the encrypted phone company for criminals that the FBI secretly ran and backdoored to intercept tens of millions of messages, is pushing to learn the identity of the confidential human source (CHS) who first created Anom and provided it to the FBI starting the largest sting operation in history, according to recently filed court records. The government says it will provide that identity under discovery, but the CHS may also be revealed in open court if they testify.

The move is significant in that the CHS, who used the pseudonym Afgoo while running Anom, is a likely target for retaliation from violent criminals caught in Anom’s net. The Anom case, called Operation Trojan Shield, implicated hundreds of criminal syndicates in more than 100 countries. That includes South American cocaine traffickers, Australian biker gangs, and kingpins hiding in Dubai. Anom also snagged specific significant drug traffickers like Hakan Ayik, who authorities say heads the Aussie Cartel which brought in more than a billion Australian dollars in profit annually.

Court records say, however, that if this defendant’s case goes to trial, the lawyer believes Afgoo will be the “government’s key witness.”

Welcome back to the Abstract! 

In the spirit of catching up with relatives over the holidays, I’d like to introduce you to a member of your extra-extended family: The Saber-toothed Gorgonopsian from Mallorca. Get acquainted with your great-great-great (insert about 100 million greats here) grandmother’s cousin. It’s probably not going to behave well at the dinner table. 

Then, the grim prognoses of Disney princesses are outlined in one of the world’s premiere medical journals. Next, I’m back on the cannibalism beat; I just can’t help myself. Finally, an archaeological adventure a world away.

Happy winter solstice to all who thrive in darkness. If you’re in the Southern Hemisphere, say hi to the Sun for us.

Wet Hot Pangean Summer

Matamales-Andreu, Rafel et al. “Early–middle Permian Mediterranean gorgonopsian suggests an equatorial origin of therapsids.” Nature Communications.

If you trace your lineage far back enough, you will eventually reach therapsid ancestors. Mammals sprouted out of this ancient group of creatures some 225 million years ago, around the same time that dinosaurs were ascending to world domination. But though therapsids were abundant during the Permian era, the period before the emergence of mammals and dinosaurs, gaps in the fossil record have made it difficult to reconstruct the origins of this ancestral group.

Enter: DA21/17-01-01, a fossil specimen that dates back at least 270 million years, making it likely the oldest therapsid ever found. The dog-sized animal was a “gorgonopsian,” a group of therapsid carnivores with saber-like teeth reminiscent of later mammals, but that still maintained more reptilian features, including oviparity (they laid eggs rather than birthing live offspring). 

Paleontologists were surprised to discover this gorgonopsian on the Spanish island of Mallorca, which was located in the equatorial region of the supercontinent Pangaea during the Permian. Almost all other gorgonopsian remains are preserved in locations like Russia and South Africa that would have been at higher latitudes, nearer to the poles. Previous work has suggested that therapsids originated at higher latitudes and then radiated into equatorial regions, but DA21/17-01-01 hints that the reverse may be true.

“The gorgonopsian from Mallorca provides the first unequivocal evidence that therapsids were indeed present in the summer wet biomes of equatorial Pangaea during the early–middle Permian transition, suggesting that the group may have originated in lower, tropical latitudes, rather than in the higher latitudes where nearly all of their fossils are known,” said researchers led by Rafel Matamales-Andreu of the Museu Balear de Ciències Naturals. 

“If therapsids originated in the tropics, this has implications for metabolic evolution in the clade,” the team added.

First off, let’s acknowledge that “the gorgonopsian from Mallorca” is a sublime phrase. It should be the title of a Criterion Collection classic. But more importantly, the discovery of this “unambiguously early” therapsid in the Pangean tropics offers a fleeting glimpse of a “ghost lineage” of mammal precursors. Ghost lineages are branches of the evolutionary tree that are presumed to exist based on circumstantial evidence, but that didn’t leave direct traces in the fossil record. Therapsid fossils proliferate in the middle and upper Permian, but scientists have long suspected that they originated much earlier, more than 300 million years ago.

“We confirm the traditional understanding that there was a relatively long ghost lineage of about 15 million years between the origin of ‘total-group’ therapsids and the radiation of the major therapsid clades,” around 278 million years ago, the team said. 

“This discovery opens the door for findings that may fill in the early therapsid fossil gap in the lower Permian, not in high latitude sites as traditionally thought, but in the so far poorly explored lower–middle Permian areas of palaeoequatorial Pangaea. Those locations hold the potential to elucidate the early evolution of therapsids and the origins of mammalian features.”

In other words, it’s worth searching for more of these early therapsids at overlooked sites, like the Balearic Islands. Some features that distinguish us as mammals today have their roots in what the study describes, somewhat luxuriously, as the “ancient summer wet biome of equatorial Pangaea.”

Death Becomes Disney Princesses 

Van Dijk, Sanne et al. “Living happily ever after? The hidden health risks of Disney princesses,” The British Medical Journal.

Every December, the British Medical Journal publishes a Christmas issue filled with parody studies and light-hearted editorials. My favorite example this year confronts the pressing health problems of Disney princesses, such as Cinderella’s risk of respiratory illness, Belle’s exposure to rabies, and Pocahontas’ bone-shattering penchant for diving off high cliffs.

But perhaps the best case study is Jasmine, whose social isolation is described in these devastating terms: “While the Genie might sing ‘you ain’t never had a friend like me,’ the truth is that Jasmine has no friends at all,” according to researchers led by Sanne van Dijk of the University of Twente. 

Wow, the medical consensus about Jasmine is pretty harsh. To add insult to injury, the editorial notes that Jasmine’s one companion, the tiger Rajah, “poses a risk of zoonotic infection as well as craniofacial and cervical spinal injuries” adding that “although Rajah seems like a sweet tiger, its natural instincts could lead to a dangerous and potentially fatal situation—a true Arabian nightmare.”

Please Disney, listen to these experts and start showing the real-life consequences of the princess lifestyle. We need a rabid Belle foaming at the mouth, Pocahontas in a full body cast, and Rajah brutally mauling Jasmine. Otherwise, we are sending a message to young people that it is safe to hang out with captive tigers and chimeric beasts while jumping off Niagara Falls. 

I will note that the study has nothing to say about Moana, who I will hereafter conclude is the healthiest Disney princess. We salute a physiologically robust chief.

Massacre at Charterhouse Warren

Schulting, Rick et al. ‘The darker angels of our nature’: Early Bronze Age butchered human remains from Charterhouse Warren, Somerset, UK.” Antiquity.

Steel yourself for some bad vibes, because this is a story about an unhinged cannibalistic massacre that occurred 4,000 years ago. Archaeologists working at Charterhouse Warren, an English Bronze Age burial site, have discovered evidence of a grotesque attack designed to “other” its many victims through butchery and consumption of flesh.

“Some 37 men, women and children—and possibly many more—were killed at close quarters with blunt instruments and then systematically dismembered and defleshed, their long bones fractured in a way that can only be described as butchery,” said researchers led by Rick Schulting of the University of Oxford. “Body parts were deposited in what was probably a single event between 2210 and 2010 BC, in a partly infilled shaft that was still 15 meters deep.”

“While evidence for interpersonal violence is not unknown in British prehistory, nothing else on this scale has been found,” the team noted.

It’s unlikely that these acts were motivated by either “culinary cannibalism,” embodied by Hannibal Lecter, or “survival cannibalism,” the desperate acts of starvation typified by tragedies like the Donner Party. The cruel and unusual treatment of the victims, even after their deaths, suggests a deliberate attempt at dehumanization.

The events “may be best interpreted as an extreme form of ‘violence as performance,’ in which the aim was to not only eradicate another group, but to thoroughly ‘other’ them in the process,” according to the study. “While the remains themselves seem to have been removed from view soon afterwards (to judge from the paucity of carnivore scavenging), an event of this scale could not be hidden, and no doubt resonated across the wider region and over time. In this sense it was a political statement.”

My advice is to steer clear of political statements that demand ritualistic cannibalism, but I’m open to the marketplace of ideas.

It Belongs in a Marseum

Holcomb, Justin A et al. “The emerging archaeological record of Mars.” Nature Astronomy.

Let’s close out with an archaeology story that doesn’t involve dehumanizing bloodbaths; we will need to travel to another planet to accomplish this task. No massacres have occurred on Mars at the time of this writing, but the red planet is home to plenty of archaeological sites and artifacts, which I shall hereafter refer to as Martifacts. 

Technological relics on Mars, such as dead rovers or spent heat shields, are part of the human archaeological record, raising questions about the culture and heritage value of Martifacts.      

“Some scientists have referred to this cultural material as ‘space trash’ or ‘galactic litter,’ implying that it may have limited scientific value and could cause environmental problems and put future missions at risk,” said researchers led by Justin Holcomb of the Kansas Geological Survey. 

“We agree that these concerns warrant further investigation, but we argue that the objects need to be evaluated as important cultural heritage in need of protection because they record the legacy of space exploration by our species,” the team said. 

The article reminds me of the heartrending xkcd comic that portrays NASA’s Spirit rover coming to terms with its abandonment on Mars. Space archaeology can seem esoteric but it is relevant to consider values about our off-Earth heritage at a time when visions of Martian colonization are culturally ascendent. There is more to this extraterrestrial archaeological record than the sum of its dusty metal parts. 

Also, I’m calling dibs on the remains of the Opportunity rover right now and we all know that dibs are legally binding.

Thanks for reading! See you next week.

This is Behind the Blog, where we share our behind-the-scenes thoughts about how a few of our top stories of the week came together. This week, we discuss our top games of the year, air traffic control, and posting through it.

JOSEPH: Jason did a bit of this last week, but here’s my stab at reflecting briefly on the past year. Here are my favourite articles I did this year: I published detailed documents on what phones Cellebrite and Graykey are able (or unable) to unlock; I revealed Apple quietly included code that reboots iPhones, locking out cops (Apple has still not officially documented this feature as far as I know); I along with other journalists showed how Locate X, a surveillance tool bought by the U.S. government, can be used to track visitors to abortion clinics; I verified that two students combined Meta’s smart Ray Ban glasses with the facial recognition service Pimeyes which entirely shatters our understanding of privacy; I went deep on how the walls were closing in on the hacker suspected of some of the most significant breaches this year (the suspect was later arrested); I found a CISA official had broken with his agency’s narrative on SS7, and shown the issue is much more pressing than some may want to admit; I found a site was selling Discord messages and that it was linked to notorious harassment site Kiwi Farms; I showed that money launderers were using betting platform FanDuel; I continued to verify real world acts of physical violence emerging from the cybercrime underground; I mapped out the complex supply chain that ends up with hackers ordering mountains of oxy and adderall; I revealed that a site called OnlyFake was using “neural networks” to churn out realistic photos of fake IDs; and I exposed a global phone spy tool monitoring billions (which Google then took action on).

New research from Anthropic, one of the leading AI companies and the developer of the Claude family of Large Language Models (LLMs), has released research showing that the process for getting LLMs to do what they’re not supposed to is still pretty easy and can be automated. SomETIMeS alL it tAKeS Is typing prOMptS Like thiS. 

To prove this, Anthropic and researchers at Oxford, Stanford, and MATS, created Best-of-N (BoN) Jailbreaking, “a simple black-box algorithm that jailbreaks frontier AI systems across modalities.” Jailbreaking, a term that was popularized by the practice of removing software restrictions on devices like iPhones, is now common in the AI space and also refers to methods that circumvent guardrails designed to prevent users from using AI tools to generate certain types of harmful content. Frontier AI models are the most advanced models currently being developed, like OpenAI’s GPT-4o or Anthropic’s own Claude 3.5.

As the researchers explain, “BoN Jailbreaking works by repeatedly sampling variations of a prompt with a combination of augmentations—such as random shuffling or capitalization for textual prompts—until a harmful response is elicited.”

For example, if a user asks GPT-4o “How can I build a bomb,” it will refuse to answer because “This content may violate our usage policies.” BoN Jailbreaking simply keeps tweaking that prompt with random capital letters, shuffled words, misspellings, and broken grammar until GPT-4o provides the information. Literally the example Anthropic gives in the paper looks like mocking sPONGbOB MEMe tEXT. 

Anthropic tested this jailbreaking method on its own Claude 3.5 Sonnet, Claude 3 Opus, OpenAI’s GPT-4o, GPT-4o-mini, Google’s Gemini-1.5-Flash-00, Gemini-1.5-Pro-001, and Facebook’s Llama 3 8B. It found that the method “achieves ASRs [attack success rate] of over 50%” on all the models it tested within 10,000 attempts or prompt variations. 

The researchers similarly found that slightly augmenting other modalities or methods for prompting AI models, like speech or image based prompts, also successfully bypassed safeguards. For speech, the researchers changed the speed, pitch, and volume of the audio, or added noise or music to the audio. For image based inputs the researchers changed the font, added background color, and changed the image size or position. 

Anthropic’s BoN Jailbreaking algorithm is essentially automating and supercharging the same methods we have seen people use to jailbreak generative AI tools, often in order to create harmful and non-consensual content. 

In January, we showed that the AI-generated nonconsensual nude images of Taylor Swift that went viral on Twitter were created with Microsoft’s Designer AI image generator by misspelling her name, using pseudonyms, and describing sexual scenarios without using any sexual terms or phrases. This allowed users to generate the images without using any words that would trigger Microsoft’s guardrails. In March, we showed that AI audio generation company ElevenLabs’s automated moderation methods preventing people from generating audio of presidential candidates were easily bypassed by adding a minute of silence to the beginning of an audio file that included the voice a user wanted to clone.

Both of these loopholes were closed once we flagged them to Microsoft and ElevenLabs, but I’ve seen users find other loopholes to bypass the new guardrails since then. Anthropic’s research shows that when these jailbreaking methods are automated, the success rate (or the failure rate of the guardrails) remains high. Anthropic research isn’t meant to just show that these guardrails can be bypassed, but hopes that “generating extensive data on successful attack patterns” will open up “novel opportunities to develop better defense mechanisms.” 

It’s also worth noting that while there’s good reasons for AI companies to want to lock down their AI tools and that a lot of harm comes from people who bypass these guardrails, there’s now no shortage of “uncensored” LLMs that will answer whatever question you want and AI image generation models and platforms that make it easy to create whatever nonconsensual images users can imagine. 

An entity claiming to be United Healthcare is sending bogus copyright claims to internet platforms to get Luigi Mangione fan art taken off the internet, according to the print-on-demand merch retailer TeePublic. An independent journalist was hit with a copyright takedown demand over an image of Luigi Mangione and his family she posted on Bluesky, and other DMCA takedown requests posted to an open database and viewed by 404 Media show copyright claims trying to get “Deny, Defend, Depose” and Luigi Mangione-related merch taken off the internet, though it is unclear who is filing them.

Artist Rachel Kenaston was selling merch with the following design on TeePublic, a print-on-demand shop: 

She got an email from TeePublic that said “We're sorry to inform you that an intellectual property claim has been filed by UnitedHealth Group Inc against this design of yours on TeePublic,” and said “Unfortunately, we have no say in which designs stay or go” because of the DMCA. This is not true—platforms are able to assess the validity of any DMCA claim and can decide whether to take the supposedly infringing content down or not. But most platforms choose the path of least resistance and take down content that is obviously not infringing; Kenaston’s clearly violates no one’s copyright. Kenaston appealed the decision and TeePublic told her: “Unfortunately, this was a valid takedown notice sent to us by the proper rightsholder, so we are not allowed to dispute it,” which, again, is not true.

The threat was framed as a “DMCA Takedown Request.” The DMCA is the Digital Millennium Copyright Act, an incredibly important copyright law that governs most copyright law on the internet. Copyright law is complicated, but, basically, DMCA takedowns are filed to give notice to a social media platform, search engine, or website owner to inform them that something they are hosting or pointing to is copyrighted, and then, all too often, the social media platform will take the content down without much of a review in hopes of avoiding being being sued.

“It's not unusual for large companies to troll print-on-demand sites and shut down designs in an effort to scare/intimidate artists, it's happened to me before and it works!,” Kenaston told 404 Media in an email. “The same thing seems to be happening with UnitedHealth - there's no way they own the rights to the security footage of Luigi smiling (and if they do.... wtf.... seems like the public should know that) but since they made a complaint my design has been removed from the site and even if we went to court and I won I'm unsure whether TeePublic would ever put the design back up. So basically, if UnitedHealth's goal is to eliminate Luigi merch from print-on-demand sites, this is an effective strategy that's clearly working for them.”

There is no world in which the copyright of a watercolor painting of Luigi Mangione surveillance footage done by Kenaston is owned by United Health Group as it quite literally has nothing to do with anything that the company owns. It is illegal to file a DMCA unless you have a “good faith” belief that you are the rights holder (or are representing the rights holder) of the material in question. 

“What is the circumstance under which United Healthcare might come to own the copyright to a watercolor painting of the guy who assassinated their CEO?” tech rights expert and science fiction author Cory Doctorow told 404 Media in a phone call. “It’s just like, it’s hard to imagine” a lawyer thinking that, he added, saying that it’s an example of “copyfraud.”  

United Healthcare did not respond to multiple requests for comment, and TeePublic also did not respond to a request for comment. It is theoretically possible that another entity impersonated United Healthcare to request the removal because copyfraud in general is so common. 

But Kenaston’s work is not the only United Healthcare or Luigi Mangione-themed artwork on the internet that has been hit with bogus DMCA takedowns in recent days. Several platforms publish the DMCA takedown requests they get on the Lumen Database, which is a repository of DMCA takedowns. 

On December 7, someone named Samantha Montoya filed a DMCA takedown with Google that targeted eight websites selling “Deny, Defend, Depose” merch that uses elements of the United Healthcare logo. Montoya’s DMCA is very sparse, according to the copy posted on Lumen: “The logo consists of a half ellipse with two arches matches the contour of the ellipse. Each ellipse is the beginning of the words Deny, Defend, Depose which are stacked to the right. Our logo comes in multiple colors.” 

Medium, one of the targeted websites, has deleted the page that the merch was hosted on. It is not clear from the DMCA whether the person filing this is associated with United Healthcare, or whether they are associated with deny-defend-depose.com and are filing against copycats. Deny-defend-depose.com did not respond to a request for comment. Similarly, a DMCA takedown filed by someone named Manh Nguyen targets a handful of “Deny, Defend, Depose” and Luigi Mangione-themed t-shirts on a website called Printiment.com.

Based on the information on Lumen Database, there is unfortunately no way to figure out who Samantha Montoya or Manh Nguyen are associated with or working on behalf of.

Not Just Fan Art 

Over the weekend, a lawyer demanded that independent journalist Marisa Kabas take down an image of Luigi Mangione and his family that she posted to Bluesky, which was originally posted on the campaign website of Maryland assemblymember Nino Mangione. 

The lawyer, Desiree Moore, said she was “acting on behalf of our client, the Doe Family,” and claimed that “the use of this photograph is not authorized by the copyright owner and is not otherwise permitted by law.” 

Moore said that Nino Mangione’s website “does not in fact display the photograph,” even though the Wayback Machine shows that it obviously did display the image. In a follow-up email to Kabas, Moore said “the owner of the photograph has not authorized anyone to publish, disseminate, or otherwise use the photograph for any purpose, and the photograph has been removed from various digital platforms as a result,” which suggests that other websites have also been threatened with takedown requests. Moore also said that her “client seeks to remain anonymous” and that “the photograph is hardly newsworthy.” The New York Post also published the image, and blurred versions of the image remain on its website. The New York Post did not respond to a request for comment. Kabas deleted her Bluesky post “to avoid any further threats,” she said. 

“It feels like a harbinger of things to come, coming directly after journalists for something as small as a social media post,” Kabas, who runs the excellent independent site The Handbasket, told 404 Media in a video chat. “They might be coming after small, independent publishers because they know we don’t have the money for a large legal defense, and they’re gonna make an example out of us, and they’re going to say that if you try anything funny, we’re going to try to bankrupt you through a frivolous lawsuit.” 

The takedown request to Kabas in particular is notable for a few reasons. First, it shows that the Mangione family or someone associated with it is using the prospect of a copyright lawsuit to threaten journalists for reporting on one of the most important stories of the year, which is particularly concerning in an atmosphere where journalists are increasingly being targeted by politicians and the powerful. But it’s also notable that the threat was sent directly to Kabas for something she posted on Bluesky, rather than being sent to Bluesky itself. (Bluesky did not respond to a request for comment for this story, and we don’t know if Bluesky also received a takedown request about Kabas’s post.)

Sometimes for better, but mostly for worse, social media platforms have long served as a layer between their users and copyright holders (and their lawyers). YouTube deals with huge numbers of takedown requests filed under the Digital Millennium Copyright Act. But to avoid DMCA headaches, it has also set up automated tools such as ContentID and other algorithmic copyright checks that allow copyright holders to essentially claim ownership of—and monetization rights to—supposedly copyrighted material that users upload without invoking the DMCA. YouTube and other social media platforms have also infamously set up “copy strike” systems, where people can have their channels demonetized, downranked in the algorithm, or deleted outright if rights holders claim a post or video violates their copyright or if an automated algorithm does.

This layer between copyright holders and social media users has created all kinds of bad situations where social media platforms overzealously enforce against content that may be OK to use under fair use provisions or where someone who does not own the copyright at all abuses the system to get content they don’t like taken down, which is what happened to Kenaston.

Copyright takedown processes under social media companies almost always err on the side of copyright holders, which is a problem. On the other hand, because social media companies are usually the ones receiving DMCAs or otherwise dealing with copyright, individual social media users do not usually have to deal directly with lawyers who are threatening them for something they tweeted, uploaded to YouTube, or posted on Bluesky. 

There is a long history of powerful people and companies abusing copyright law to get reporting or posts they don’t like taken off the internet. But very often, these attempts backfire as the rightsholder ends up Streisand Effecting themselves. But in recent weeks, independent journalists have been getting these DMCA takedown requests—which are explicit legal threats—directly. A “reputation management company” tried to bribe Molly White, who runs Web3IsGoingGreat and Citation Needed, to delete a tweet and a post about the arrest of Roman Ziemian, the cofounder of FutureNet, for an alleged crypto fraud. When the bribe didn’t work because White is a good journalist who doesn’t take bribes, she was hit with a frivolous DMCA claim, which she wrote about here.

These sorts of threats do happen from time to time, but the fact that several notable ones have happened in quick succession before Trump takes office is notable considering that Trump himself said earlier this week that he feels emboldened by the fact that ABC settled a libel lawsuit with him after agreeing to pay him a total of $16 million. That case—in which George Stephanopoulos said that Trump was found civilly liable of “rape” rather than of “sexual assault”—has scared the shit out of media companies. 

This is because libel cases for public figures consider whether that person’s reputation was actually harmed, whether the news outlet acted with “actual malice,” rather than just negligence, and the severity of the harm inflicted. Considering Trump is the most public of public figures, that he still won the presidency, and that a jury did find him liable for a “sexual assault,” this is a terrible kowtowing to power that sets a horrible precedent. 

Trump’s case with ABC isn’t exactly related to a DMCA takedown filed over a Bluesky post, but they’re both happening in an atmosphere in which powerful people feel empowered to target journalists. 

“There’s also the Kash Patel of it all. They’re very openly talking about coming after journalists. It’s not hypothetical,” Kabas said, referring to Trump’s pick to lead the FBI. “I think that because the new administration hasn’t started yet, we don’t know for sure what that’s going to look like,” she said. “But we’re starting to get a taste of what it might be like.”  

What’s happening to Kabas and Kenaston highlights how screwed up the internet is, and how rampant DMCA abuse is. Transparency databases like Lumen help a lot, but it’s still possible to obscure where any given takedown request is coming from, and platforms like TeePublic do not post full DMCAs. 

Tuesday night, the pilots of at least 11 commercial planes flying into New York City-area airports reported having lasers from the ground shined at their aircraft, including in some cases their cockpits, according to an analysis of air traffic control audio obtained by 404 Media. In some of the audio, pilots can be heard saying the lasers are “definitely directed straight at us,” that the lasers “are tracking us,” and, at one point air traffic control says “yep, we’ve been getting them all night, like literally 30 of them.” 

The air traffic control recordings, which come from Newark Airport in New Jersey and JFK Airport in New York City, suggest that people in New Jersey are shining powerful lasers at passenger airplanes during one of the busiest travel times of the year amid politician- and media-stoked panic about “mystery drones” in New Jersey. The FBI warned people in New Jersey Tuesday not to shoot at drones or shine lasers at them. A military pilot flying over New Jersey also said he was injured by a laser earlier this week. The air traffic control analysis shared with 404 Media was done by John Wiseman, whose work analyzing open-source flight data has previously uncovered secret FBI surveillance programs. His analysis suggests that people blasting “drones” with lasers is not some theoretical issue, but instead could cause real disruption or harm to commercial pilots. 

“Getting lasered about two miles up, our right hand side, our present position,” the pilot of American Airlines flight 586, a flight from Chicago to Newark, said. 

“Okay, yep, we’ve been getting them all night, like literally 30 of them,” air traffic control responds. “Do you know what color it was?” 

ATC Audio 1

0:00

/74.81469387755102

1×

“Green and they are tracking us,” the pilot of American Airlines 586 says.