FBI tip line and veterans crisis site among 350 federal web addresses exposing visitors to network spies, senator warns

• Sen. Ron Wyden wants CISA and OMB to require Encrypted Client Hello on federal websites and make it a federal contract condition
• His list of 350 CDN-hosted addresses without ECH includes the FBI tip portal, the VA's crisis line, and hotlines for whistleblowers and civil rights complaints
• ECH hides site names only alongside encrypted DNS, does nothing for server breaches, and is already blocked in Russia, where some listed embassy pages are aimed

US Senator Ron Wyden (D-Ore.) wants the federal government to turn on a privacy feature that major web browsers have supported for three years, warning that hundreds of agency web addresses still broadcast the name of the site each visitor uses to anyone watching the network along the way.

In a letter to CISA acting director Nick Andersen and deputy federal chief information officer Thomas Flagg, Wyden asked the two agencies to require Encrypted Client Hello (ECH) across federal websites and to make ECH support a condition for cloud and network vendors seeking federal contracts.

The letter attaches a list of 350 executive branch web addresses that use content delivery networks (CDNs) but do not use ECH, while requesting an unclassified response and action plan by November 20 2026.

The one thing HTTPS leaves in the open is the gap being addressed here

Almost every federal site now encrypts the pages people read and the forms they submit. Standard HTTPS does not hide the hostname. When a browser opens a secure connection, it announces the site it wants in a field called Server Name Indication, in plain text, before encryption begins.

An internet provider, a hostile Wi-Fi network, or a compromised telecom carrier can therefore log that a connection went to tips.fbi.gov without reading a word of the tip itself.

ECH encrypts that part of the handshake. It works best behind a large CDN, where thousands of unrelated sites share the same front door. Cloudflare's implementation, for example, presents every ECH-protected site to the network under one shared name, so an observer can tell a visitor is reaching a Cloudflare-hosted site, but not which one.

Wyden's letter singles out two services. The Department of Veterans Affairs' online suicide prevention service at veteranscrisisline.net is hosted on Amazon Web Services, which the letter says does not currently support ECH. The FBI's tip portal at tips.fbi.gov runs on Cloudflare, which does, but the bureau has not turned it on yet, as Wyden noted, stating: "For the federal domains using a CDN provider with ECH support, such as Cloudflare, turning on domain protection merely requires a configuration update."

191 of the 350 addresses, or 54.6%, are diplomatic: 174 embassy sites, three consulates, and 14 missions, mostly to international bodies such as NATO and the UN. Another 53 are subdomains of bie.edu, the Bureau of Indian Education's domain, which appear to be individual school sites. A further 12 are test, training, or staging hosts, including several user acceptance testing subdomains for Education Department debt services.

That leaves 94 addresses outside those groups, and the most troubling entries sit there; they include the DHS inspector general's complaint hotline, the Justice Department's civil rights reporting portal, the intelligence community's job application site, a USCIS tip form, the State Department's Rewards for Justice site, an NIH alcohol treatment navigator, a CDC doxy-PEP site, several federal HIV information sites, and ICE's detainee locator.

Cloudflare's documentation says ECH is enabled by default on Free zones, while customers on other plans must switch it on themselves. That fits the spokesperson's finding: a paying government customer has to opt in. For the FBI, the fix really is a setting.

For the VA, it is not. If Amazon's CDN does not offer ECH, the agency would need to change providers or wait. This is where Wyden's second request, making ECH support a condition of federal contracts, gets complicated.

A procurement rule written today would, in practice, favor a very small pool of providers until others catch up. That may be the intent, since it pressures Amazon and its rivals, but it may be as much a market lever as a security fix, at least in the short term.

ECH does have its limitations, however: the protocol's own specification warns that the destination can still leak through plaintext DNS lookups or the server's IP address. Google made the same point when Android 17 added system-wide ECH in August, saying the feature works "in tandem with private DNS to obscure the domain names you visit."

To reiterate, agencies can enable ECH on their side, but they cannot make a veteran on home broadband use encrypted DNS, therefore leaving the door open to exploitation by someone snooping on the network.

A bigger problem is also international coverage. Many of the highlighted URLs are embassies such as ru.usembassy.gov, by.usembassy.gov, cn.usembassy.gov, and ir.usembassy.gov, all of which arguably have users connecting from relatively hostile networks.

Russia has been blocking Cloudflare's ECH since November 2024, with regulator Roskomnadzor declaring at the time that using it violates Russian law. Russian providers block connections that carry both an ECH extension and Cloudflare's shared outer name, which left Cloudflare customers there choosing between disabling ECH and moving to a domestic CDN.

For an embassy page, enabling ECH could mean trading a visible hostname for an unreachable site in the country where the hostname matters most, making it a difficult tradeoff with only one real solution: skipping ECH for now.

None of this is new territory for Wyden. In October 2018, he wrote to DHS's Chris Krebs urging agencies to adopt encrypted DNS and Encrypted SNI, ECH's predecessor, and asking DHS to work with GSA on making ESNI a condition for CDN vendors selling to the government.

He called that "the next logical step" after DHS's 2017 HTTPS directive, BOD 18-01. The 2026 letter cites the same directive and describes its requests as "the next logical steps." His record on these letters is mixed rather than hopeless. A 2018 HTTPS letter to the Pentagon was followed by a Defense Department plan to secure its websites.

The client side is ready: most major browsers have supported ECH since October 2023, per the letter, and Android 17 now applies it system-wide. The FBI fix is cheap and overdue. But ECH narrows what a passive eavesdropper learns rather than making a visit invisible, and whether this request outlasts the last one may depend less on CISA and OMB than on whether Amazon and others join Cloudflare.

from Latest from TechRadar US in Computing News https://ift.tt/BsC2tVw
via

How to turn your Canon camera's images into 3D objects and videos with Canon's free DP3D software

Canon recently unveiled its new Dual Pixel 3D, or DP3D for short — an image generation technology making use of Canon’s proprietary Dual Pixel AF technology. The new technology piggybacks off Canon’s proprietary Dual Pixel AF technology found in many of its EOS mirrorless cameras, which splits each pixel on the camera sensor into two separate light-sensitive photodiodes.

This tech has delivered reliable and snappy autofocus in recent years — if the two images on each photodiode line up perfectly, the image is in focus, if they don’t line up then the camera knows which direction to move the autofocus motor to rapidly lock on.

Canon's proprietary Dual Pixel AF technology means each pixel is made up of two photodiodes - the technology is now being used to create 3D photos and video (Image credit: Canon)

The new Dual Pixel 3D feature can be used to create immersive three-dimensional images via Canon’s new Dual Pixel 3D Converter app which was released in October.

While launched in tandem with the hotly-anticipated Canon EOS R8 Mark II on September 16 — a full-frame which makes use of the new feature — it’s good news for owners like myself of any Canon EOS mirrorless camera with Dual Pixel AF, stretching back to older generation models such as the EOS R5 and EOS R6 Mark II, which will be able to benefit without a firmware update (although updating the firmware is always a good idea to stay up date with the latest features and bug fixes).

I downloaded the Canon Dual Pixel 3D Converter app to put it through its paces — here’s everything you need to know to get started…

How to take photos for Canon DP3D

To begin, you’ll need a Canon EOS camera with Dual Pixel AF. It’s safe to say if you own one of Canon’s interchangeable lens mirrorless cameras in recent years, then your camera will likely feature Dual Pixel AF and be able to make use of this new tech.

This is great news for users of older Canon mirrorless cameras like myself as my older EOS R5 and previous generation Canon EOS R6 Mark II will still be able to make full use of this brand-new technology.

Your camera will, however, also need to be paired with one of the compatible Canon RF lenses. The list goes beyond specialist Canon RF 5.2mm F2.8L Dual Fisheye or RF-S 3.9mm F3.5 Dual Fisheye, but it is a little limited and also won't currently work with older EF or EF-S glass. We published a full list of compatible Canon cameras and lenses that you can use to enjoy this new technology when it was first announced.

Most modern Canon cameras, such as the EOS R6 Mark II pictured, will be able to produce the Dual Pixel RAW files needed to create the 3D results in DP3D (Image credit: Future)

Canon says, “Specific shooting conditions and techniques are necessary to generate accurate depth information to eliminate blind spots, allow for the required depth of field, subject and background separation, subject depth and surface texture.”

In my experience the software works best when your subject is taken on a clean background (no bokeh) and without too many blind spots which make it harder for the software to create its 3D effect.

You also want an object that’s relatively flat with not too much depth; little bumps are fine such as small pieces of fruit on a tart, but large peaks in depth will cause more significant issues and make the effect much more noticeable and fake-looking.

Two of the compatible lenses Canon lists are the Canon RF 100mm f2.8L Macro IS USM and Canon RF 35mm f1.8 IS Macro STM, both of which are macro lenses. Yet, when I shot with both of these I later got an alert in DP3D warning me for shooting too close to my subject! The result still turned out fine, though.

(Image credit: Canon)

To use the new software you’ll need to make sure you’re shooting not only in the RAW format, but Canon's Dual Pixel RAW (see above). This setting was found in the very first camera menu on my Canon EOS R6 Mark II.

Note that shooting Dual Pixel RAW will produce files roughly twice the size, take longer to write to your memory card, and can't be taken when using the electronic shutter.

Alongside 3D, Dual Pixel RAW can be useful for correcting minor parallax error, shifting bokeh or focus and reducing flare, but if you don't intend to utilize these capabilities within Canon's DPP, I would suggest turning it off when you don't need it to avoid compromizing the camera's performance.

Make sure your subject and focal point are in focus and that your shutter speed is fast enough to shoot handheld – if you’re in doubt shoot on a tripod. You’ll also want to make sure your exposure is correct so that the image isn’t too bright or dark. Canon recommends you don’t close the aperture down past f/5.6 and also keep the camera's sensitivity under ISO 1600 – a warning sign will be displayed on your image when you import it into DP3D otherwise and you won’t get optimal 3D results.

Installing the Canon DP3D app on Windows 11

With the image taken it’s time to open up the new Canon Dual Pixel 3D Converter app, which is currently only available for Windows PC running the latest Windows 11 operating system. Read our guide on How to plan a smooth Windows 10 to Windows 11 migration.

Canon also added “The application will initially be available free of charge”, though specifications and terms of use may change in the future – in other words, it’s initially free but you might need to pay to use it in the future.

(Image credit: Dan Mold)

When you're up and running with Windows 11 you’ll be able to run the installation wizard which can be downloaded from Canon’s site. Make sure that once downloaded you extract the ZIP file and then double-click the DP3dInstaller-W1.0.0.13.exe file from the unzipped folder to begin the installation.

Dan Mold

Dan Mold

Now you’ll need to choose which area you live in - you have the options: USA, Canada, Latin America, Europe, Middle East, Africa, Asia and Oceania. In the following screen you can choose the country you live in and also select your language. Once you’ve ticked the box to accept the license agreement you can hit next which takes you to the final setup screen, click Install here.

It’s also worth noting at the bottom of the same Canon site, you can download five sample images made up of a mix of food and flowers which you can play around with if you are yet to shoot with Dual Pixel RAW enabled, or perhaps you don’t own a Canon EOS mirrorless camera and what to see what all the fuss is about. Note, the sample files are downloaded as a DP3D _Sample.zip file and you’ll need to extract these files by right-clicking on the folder and choosing Extract before you can use these images in DP3D.

Creating 3D images in the DP3D app

The DP3D app allows users to fine-tune the degree of depth, making a more pronounced 3D effect or a more subtle ‘flat’ appearance. The technology also makes it easy to isolate your subject and remove or replace the background before outputting a 3D model or stereoscopic photo.

(Image credit: Dan Mold)

Dual Pixel RAW files and supported Canon EOS R8 Mark II JPEGs contain depth information derived from the slightly different views captured by the two photodiodes on each pixel. Using proprietary algorithms, Canon converts this phase-difference information into 3D shape data, which is combined with high-quality image data captured by selected EOS cameras as surface textures to create realistic and detailed 3D models.

Once you’ve loaded up DP3D you’ll need to click the folder icon at the top of the main window and then navigate to the folder where you’ve saved your Dual Pixel RAW files.

(Image credit: Dan Mold)

You have two main options – either create a 3D model which you can edit further in a 3D editor such as Blender, or you can create a Preview which creates a very short video with limited options, essentially doing a basic pan from left to right to show off the 3D depth effect. You also have options here to change the background, add a foreground and frame. You can also choose the quality of the video when you click Export Preview. Here you can also set the quality to High, Medium or Low quality (18, 8 or 4 Mbps), choose your own filename and where you want to save the video.

However, I found those options rather limiting within DP3D so I would instead click Export 3D Model where you’ll have the choice between OBJ and GLB files to edit further in your 3D editor of choice. You can also use Windows 3D viewer and even Preview on Mac to play around with these 3D files and explore the different angles produced by DP3D.

(Image credit: Dan Mold)

With the 3D file created you can use a program such as Windows 3D Viewer or Blender, which is free to download. In a program such as either of these options you’ll have way more options than DP3D for changing the angle, rotation and lighting, which is great for exporting still images. For videos, you’ll also be able to change the direction and duration of pans so you can get it looking perfect for what you need.

Conclusion

After playing around with DP3D for some time and with various pictures and subject matter, I think it’s fun and interesting that Canon has released it for free - after all, additional functionality to the cameras which we already own is certainly welcome.

However, the results have limited uses and more often than not look quite poor. Are there situations where somebody might need to get a little 3D animation from a 2D image? Sure — marketeers looking to animate food or product shots for videos and reels seems like a perfectly adequate use for Canon's new DP3D tech.

While it’s admirable that Canon is trying to squeeze the most out of the pixels taken in-camera, this is one of those situations where I sadly think AI can probably do it better.

Canon is trying to stretch and manipulate the pixels already there, whereas AI can create brand new pixels and frames based on what it thinks should be there, and that’s likely to create smoother results with fewer artefacts. For still images, the Rotate Object feature found in Photoshop Beta is likely to produce better results and is glimpse of what lies ahead in our editing futures.

from Latest from TechRadar US in Computing News https://ift.tt/m2CAB9g
via

This AI tool can now turn ordinary household photos into location clues — so could law forces use the technology to scope out your home?

• An AI tool called Raven can cross-reference fixtures, fittings, and other interior details to find the location of a property
• It pinpoints properties using data scraped from Airbnb and other sites
• Raven was previously known as GeoSpy and was initially conceived to identify locations based on landmarks

A new AI tool that can identify a property’s location using interior photos has been publicized online. Already in use by law enforcement agencies in Florida and California, Raven uses AI to match fixtures and fittings and decorative elements from photos with information sourced online.

Following the publication of a video demonstrating the software, Raven has attracted attention from some of the websites it apparently uses to acquire the information it uses. The sites – which include Airbnb – seem to have concerns about how the data and images they collect is being used.

Raven’s existence could potentially be used to find the location of any property – assuming that its address and similar images already exist online.

Innocent? Your home is safe

Raven has been used by the LAPD and the Miami-Dade Sheriff's Office in Florida. Its main purpose so far has been in tackling human trafficking, but the software represents obvious privacy challenges which its creators seem to be sidestepping at this stage.

The most important takeaway is that as long as your home (or business premises) hasn’t been used for criminal activities and photos of its interior aren’t online, then you have nothing to worry about.

Daniel Heinen of Raven developers Graylark described the product as “purpose-built AI for the people working to find answers and protect lives.”

However, some of the websites that Raven uses to gather information have expressed concern. The video of Raven in action appears to show the software using both Zillow, Vrbo, and Airbnb, with the latter reviewing the situation. Zillow stated scraping its data was against its ToS.

These issues could prove to be a challenge to the successful use of Raven across a wider area.

Matching interiors

Raven essentially breaches privacy by providing the location of an interior photo. Assuming a similar photo of the same interior exists online with an address attached – such as on Airbnb or a property site – then Raven should be able to identify it.

Heinen doesn’t mention the privacy challenges in his LinkedIn post about Raven, instead focusing on the software’s “ability to geolocate interior images across millions of short-term rental units worldwide.”

While highlighting the use of short-term rentals for human trafficking, the post focuses on Raven’s USP: “For investigators, a photo or video from inside a property may be a critical lead, but without an address or location tag, knowing where to start can be difficult. Raven helps investigators match interior imagery to potential properties, turning visual clues into location leads they can review and verify.”

It would seem likely that for Raven to be embraced successfully by other police departments in the US and beyond, it would need to accept regional privacy laws and build partnerships with the companies it appears to be scraping.

from Latest from TechRadar US in Computing News https://ift.tt/L4ncMH9
via

Is the GPU crisis down to real shortages, or is it market manipulation?

• A new report claims that Amazon is buying up more AI GPU racks than it can deploy in data centers
• An analyst links this report to Nvidia's GeForce GPU supply woes, theorizing that there's a connection
• The contention is that Nvidia is deliberately 'channel stuffing' or in other words, pushing an excess of AI GPUs to the detriment of gaming GPU chips

Nvidia's supply issues with its gaming GPUs are seemingly the result of a strategy to get AI giants to stock up on more graphics chips than they can handle, if fresh reports are to be believed.

You can't have failed to notice the stock issues around Nvidia's GeForce GPUs, and the spike in prices that has happened over the past few months, particularly for higher-end graphics cards.

Well, according to the musings of tech pundit and analyst Ed Zitron (via RespawnFirst) — who picked up on a report by Business Insider — the consumer GPU shortage is a direct result of Nvidia pushing AI graphics cards on the likes of Amazon.

Business Insider informs us that Amazon (or rather AWS) is buying more Nvidia GPUs than it can deploy. Apparently, racks of the AI graphics cards are being kept unused in holding warehouses until there's power available at the data centers where they'll be used (electricity capacity, not space, is the issue here).

Amazon is paying out huge sums for these GB300 racks from Nvidia, and according to an internal email that Business Insider got hold of, a new 'Early Rack Receipt' process (buying these GPUs upfront, before they're installed) saw some $5 billion worth of server racks paid for in August 2026. Seemingly $3 billion more are on order every month for the "foreseeable future" going by another email.

We're told one AWS team didn't have a "clear forecasted path" for getting the purchased racks installed — in other words, they're not even sure when these GPUs might be used.

Zitron's argument is based on a key phrase in the Business Insider report, where the author states that the reason for the switch in policy — Amazon only used to pay for racks when they were installed in a data center — is that "Amazon has to compete more for scarce resources as it jockeys with rivals for access to Nvidia GPUs and other AI components."

The conclusion Zitron draws is that this is basically indicating that Nvidia is making Amazon, and others buying up AI GPUs, compete with each other by agreeing to order a whole pile of them there and then — more than they possibly need — otherwise they won't get their allocation (presumably).

Analysis: GPU misery is clear enough to see

(Image credit: Shutterstock / aslysun)

In short, these AI GPUs aren't actually needed as such — not by Amazon in this quantity, as per the Business Insider report — but Nvidia is effectively strong-arming the company into buying the chips, or as Zitron puts it, this is "deliberate channel stuffing." Meaning Nvidia is forcing this AI demand artificially to the seeming detriment of GeForce GPUs, with lesser chip supply for those gaming cards causing price inflation and general misery for gamers.

Obviously we need to take this with a good deal of caution — that goes for the initial report from Business Insider, and doubly so with the theorizing that Zitron applies on top of that article.

There's no denying, however, that we have witnessed a frustrating shortage of consumer GPUs, and in particular Nvidia's high-end gaming graphics cards have become painfully thin on the ground — and pricey. The RTX 5090 is either unobtainable, save through third-party marketplace sellers trying to gouge you out of the best part of 10 grand (in the US), or it's hideously expensive to the tune of over £6,000 in the UK, for example.

What's worse is the RTX 5080 is now getting ridiculously pricey too, reaching £1,400 in the UK. And in the US on Newegg, there's now only one model for sale (direct from the retailer) — and it'll set you back $2,000. It's all getting silly, frankly, and with rumors that the RTX 5090 is being discontinued doing the rounds — speculation Nvidia has denied, I should make clear — it's currently a disappointingly gloomy picture for GPUs.

The expectation is that matters are only going to get worse for RAM, SSDs, and GPUs, as next year rolls into town — and that makes all the above theorizing seem a bit more plausible. It's certainly clear that Nvidia's priority is AI GPUs rather than GeForce graphics cards because of the profits involved with AI, but of course, Team Green is a business — so what do we expect? Prioritization is one thing, though, and the levelled accusation of the practice of 'channel stuffing' is entirely another.

from Latest from TechRadar US in Computing News https://ift.tt/IH7egw8
via

Microsoft helped shut down an “App Store” for criminals linked to over a billion malicious messages

• Microsoft collaborated with the Japanese National Police Agency to tackle Chinese-language cybercrime “app stores”
• The YAM Store, CoGUI, and Iron Man have targeted people in more than 150 countries
• Microsoft is working with law enforcement agencies worldwide to take down illegal operations that target businesses and individuals

Microsoft has announced a successful operation with the Japanese National Police Agency in which a collection of cybercrime app stores were disrupted. Investigating fraudulent, scam messages targeting Japanese businesses and citizens, the operation uncovered a multi-faceted criminal marketplace, with three key elements.

The YAM Store, CoGUI, and Iron Man had targeted 75,000 organizations across more than 150 countries worldwide, sent over one billion malicious communications promoting scams, and generated millions of dollars for the criminals behind them. Furthermore, 750 million messages were aimed at Microsoft’s own customers.

Alongside the Japanese authorities, Cloudflare, Oracle, Proofpoint, Resecurity, and TRM Labs were also involved in the operation.

Impersonation templates

Exploring the cybercrime ecosystem targeting Japanese businesses, investigators found the trio of the YAM Store, CoGUI, and Iron Man. Investigators found these provided a route into a cybercrime ecosystem for cybercriminals.

The environment was providing criminals with pre-fabricated fake websites and messages, designed to be used to fool targets into thinking they were interacting with the genuine article. Amazon was among the faked sites, on sale so scammers could simply host convincing pages to steal login and payment credentials, without any need to hire their own coder. Other spoofs on sale included government agencies, financial institutions, and other well-known companies.

Security filtering software was initially unable to handle the CoGUI phishing-as-a-service (Phaas) framework as it employed some sophisticated methods to avoid detection, including browser fingerprinting and geofencing.

What is interesting to note is the role these facilities played for the distribution of cybercrime assets. CoGUI was apparently targeting Japan and US victims, but during the course of the investigation, was replaced by a new service, Iron Man.

The YAM Store

While all three components were already known to Microsoft and the authorities, it took a concerted effort to infiltrate the network of cybercriminals using the services. They were hosted in a wholly Chinese-language environment, requiring native-speakers to be added to the investigating team, and gain access to the underground cybercrime marketplace known as the YAM Store.

Microsoft assigned a tracking number Storm-3119 to the marketplace, which it describes as an “Initial Access Broker.” It was set up to provide its customers with “compromised or fraudulently obtained environments in providers like Microsoft and Google.”

While it may be expected for compromised software to be on the radar of its publishers, the creator(s) of the YAM Store had a workaround. It was able to keep its inventory fresh by using automation. This identified “expired environment or organization names and leverages legitimate customer information associated with them to help circumvent existing detections.”

Microsoft has seized domains associated with the YAM/CoGUI/Iron Man infrastructure, and either blocked or redirected them.

from Latest from TechRadar US in Computing News https://ift.tt/dXgPbMr
via

The dark side of 'free' mobile games — how developers reverse-engineer your patience to milk ad revenue

• Block Blast allegedly adjusts difficulty to encourage players to watch advertisements
• The free puzzle game reportedly generated $127 million from advertising in five months
• Hidden gameplay mechanisms may turn player frustration into advertising revenue

A developer known as Ayoships has reverse-engineered the code of Block Blast, a puzzle app by Hungry Games, revealing deliberate tricks that push players toward ads.

The app costs nothing to download, yet it earned close to $127 million from ads in five months from January through May 2026.

According to the developer, the app allegedly adjusts its difficulty based on what each player is worth to the developers rather than the skill of that player

How free games allegedly manipulate your patience

The game's code reportedly contains mechanisms that assess players using data such as smartphone models, geographical locations, and previous ad interactions.

These indicators can help estimate users’ purchasing power and ad value, potentially influencing how the application manages their playing experience.

Owners of expensive smartphones may be considered more commercially valuable than users with older, cheaper devices.

Similarly, geographical information can provide clues about average consumer income, helping ad systems estimate which audiences might generate greater returns.

The reported techniques extend beyond identifying potentially valuable advertising audiences.

One mechanism used by the game is “Boost then kill,” which reportedly makes a round easier before introducing greater difficulty.

This sequence can encourage players to believe they are performing exceptionally well, motivating them to continue playing rather than abandon the game.

According to the investigation, gameplay can suddenly become exceptionally difficult, encouraging players to watch a video ad in exchange for another attempt.

This approach connects frustration directly to ad revenue by making continued progress appear dependent on accepting an ad offer.

The game reportedly includes additional mechanisms that secretly increase scores, making ad-related rewards appear more valuable than they otherwise might.

References in the code include “reward,” “bait,” and “moreCleanSuccessRound,” the latter reportedly describing an easier round designed to build confidence.

If these mechanisms operate as described, players may struggle to distinguish genuine achievements from software adjustments intended to influence their decisions.

Advertising revenue drives concerns about deceptive game mechanics

Block Blast illustrates the concerns surrounding ad-supported games when commercial incentives potentially influence difficulty, rewards, and progression.

Free access does not necessarily mean users pay nothing, since their attention and viewing time can become valuable sources of income.

Optional advertisements offering extra lives or additional attempts are common in mobile gaming.

However, deliberately increasing frustration to encourage ad consumption raises different ethical questions.

Ayoships develops AI-powered mobile applications himself; therefore, independent verification is important when assessing his interpretation of Block Blast’s code.

The available findings do not establish how frequently the alleged difficulty adjustments occur or whether every player experiences the same treatment.

They also leave open whether the mechanisms respond automatically to advertising opportunities or follow other conditions built into the software.

These distinctions matter when determining whether the observed behaviour constitutes deliberate manipulation rather than ordinary gameplay balancing.

Via minimachines

from Latest from TechRadar US in Computing News https://ift.tt/RMaLKNB
via