New court records reportedly show that DHS targeted Stop Cop City activist Samuel Tunick at an Atlanta airport because he was under investigation for suspected "terrorist activities." However, the CBP officers told him instead that they wanted to search his phone for child sexual abuse material (CSAM). Tunick, who is not accused of terrorism or any other crime beyond allegedly wiping his GrapheneOS phone during the encounter, faces up to five years in prison. 404 Media reports: Instead of saying he was being targeted for suspected terrorism -- although this search happened just at the start of the second Trump administration, it has dramatically broadened what organizations or people may be considered such -- they said they needed his phone to look for "kiddie p*rn." "Good afternoon," an email sent from a Homeland Security Investigations (HSI) official, part of Immigration and Customs Enforcement (ICE), to CBP and other officials reads. "The following subject is scheduled to arrive in ATL [Hartsfield-Jackson Atlanta International Airport] today via DL 1778 @ 1930 Hours. TUNICK is under investigation by HSI/JTTF for suspected terrorist activities." The email includes a photo of Tunick, and asks the officials to direct him to secondary inspection, retain all of his electronics, and collect their passcodes.

As 404 Media first revealed in December, Tunick was charged because he allegedly "did knowingly destroy, damage, waste, dispose of, and otherwise take any action to delete the digital contents of a Google Pixel cellular phone, for the purpose of preventing and impairing the Government's lawful authority to take said property into its custody and control." Matthew Dodge, one of Tunick's lawyers, previously told 404 Media he only found one other case using the same obscure law, a drug trafficking case. "This is extraordinarily rare," Dodge said.

Tunick was part of the Stop Cop City movement in Atlanta, which broadly protested the building of a large police training center, and which authorities investigated for arson, vandalism, and doxing. Tunick is not suspected of any crime beyond the alleged wiping of the phone, and has previously put his current prosecution in the context of the wide spanning cases against other Stop Cop City protesters. The newly filed court record, in which Tunick's lawyers argue that evidence should be thrown out, include new photos and descriptions of the airport encounter. The CBP officials asked Tunick if they were going to find "kiddie p*rn" on his phone, which Tunick immediately denied. "As the evidentiary hearing made clear, these unfounded accusations were nothing more than pretext for a fishing expedition into the depths of Mr. Tunick's devices," the lawyers wrote. They added, "Officer Findley acknowledged that officers had no reason whatsoever to believe Mr. Tunick possessed child p*rnography," referring to one of the officials.

Security researchers say Meta's Muse AI assistant exposed thousands of users' shared conversations because conversation titles were placed in subdomains that could be discovered through public DNS records. Meta has since suspended the sharing feature while it considers making changes. Ars Technica reports: Like many online services, Muse has allowed users to share searches, conversations, images, and similar content with other people. Such share features usually involve clicking an option to create a unique URL that anyone can use to load a page hosting the content. To keep potentially sensitive information from being accessible to unintended people, the URLs typically contain a long sequence of text that can't be easily guessed.

Muse, which Meta CEO Mark Zuckerberg said last month was "built from the ground up for privacy and security," seems to take the same precautions. But a central design decision for constructing URLs has made the links easy to discover. As a result, researchers from security firm Claroc said they were able to enumerate 6,800 links Muse users created for sharing conversations with others. After opening a few hundred of them, the researchers found information that was clearly not intended to be publicly available... [...]. "If you had asked us beforehand, we would have guessed that gathering these would take real effort," the researchers wrote. "It took one query."

[...] The easiest way to discover the URLs is to perform a passive DNS search through one of many available commercial services. Passive DNS records store the historical resolution of domain names to IP addresses, as well as nameserver, and mail-server records over time. Passive DNS systems typically collect DNS responses from sensors positioned at recursive DNS resolvers or other infrastructure. A passive DNS record is generally created when a monitoring system observes a DNS response. In the case here, once the intended party clicks on the share link, the DNS information is recorded in a searchable database.

Claroc researchers were able to discover the Muse share links because all of them use the domain name cf.metaaiusercontent.com. Discovery is further made easy by the decision to add the conversation name to the URL, along with a long string of text. Simplified examples of such links are home-sale-budget-9f21c8a3.cf.metaaiusercontent.com, q3-revenue-review-7b1e42f0.cf.metaaiusercontent.com, and loan-application-draft-a4c9e2.cf.metaaiusercontent.com. It's this last design decision, putting the conversation title in the subdomain rather than in the URL path, that makes public discovery possible.

The Trump administration has banned DeepSeek AI from most US civilian federal agencies, ordering the removal of the Chinese company's models and technology developed using them. The Department of Homeland Security did not specify the security threats behind the decision. The BBC reports: The order (PDF) is broad, as it requires agencies to ditch "all DeepSeek and DeepSeek-affiliate products, and third-party products and services developed using DeepSeek implementations." Complying will be tricky as it is not clear which third-party products and services have been developed using DeepSeek's wares. Nor is it clear whether "developed using" means providing ongoing access to DeepSeek models via API or simply refers to any app vibe-coded with the help of DeepSeek.

It also leaves open the question of AI gateways. Services such as OpenRouter and Vercel AI Gateway make DeepSeek's models available through APIs. And those using gateway services may find themselves using DeepSeek models without meaning to do so. OpenRouter, for example, "routes requests to the best available providers for your model." It selects what the service deems to be the best fit provider of AI services. Vercel AI Gateway does the same by default. So federal civilian agencies could be using DeepSeek models inadvertently, if they haven't taken steps to constrain their AI providers.

TP-Link plans to begin assembling routers in Mississippi as early as 2027 after the FCC banned imports of new foreign-made consumer routers over security concerns. Engadget reports: The company has signed a letter of intent with manufacturer Key Tronic and, pending approval from regulators, TP-Link says stateside assembly of its routers could start at a Mississippi production line as soon as early 2027.

Once things are up and running, Wi-Fi 8 routers are expected to be among the first TP-Link products that Key Tronic assembles. TP-Link claims that the agreement is part of its "long-term effort to accelerate US investment in high-tech manufacturing and job creation, designing and assembling next-generation products for American consumers here on American soil."

The company said it will still have to source components from outside the US. "Many [components] are just not available from a domestic source, and this is not a TP-Link issue," TP-Link's corporate affairs officer Steve Kovsky told PC Mag. "This is an issue for all manufacturers that are trying to onshore manufacturing."

Longtime Slashdot reader fahrbot-bot shares a report from ProPublica: A few months into President Donald Trump's second term, political appointees at the Department of Homeland Security (DHS) wanted Cybersecurity and Infrastructure Security Agency (CISA) to secretly acquire a voting machine and hack it. The appointees wanted the Cybersecurity and Infrastructure Security Agency to procure the machine, examine it and report back the findings so they could be given to the White House, according to two former administration officials with knowledge of the request.

The proposition was shocking to CISA's career staffers, according to one of the former officials. CISA typically worked to thwart hackers. Moreover, the agency had been directed not to alert the voting machine company if it uncovered flaws, contrary to its standard practices. The request made the CISA employees fear they were being asked to take part in political interference. "My thought was they could keep it in their back pocket to invalidate any [election] results they don't like," one of the former officials said. "This goes against everything CISA represents." [Or, perhaps do something worse?]

The CISA employees repeatedly told the political appointees that their request was impossible, in part because the agents capable of pulling off such an operation had just been laid off by Elon Musk's Department of Government Efficiency (DOGE) initiative. The appointees eventually stopped pressing CISA. Though not acted on, the request shows how the Trump administration has tried to use the agency for its own ends while draining it of resources for one of its critical missions: protecting the nation's voting systems.

Florida's DMV says a September 4 breach exposed driver's license and motor vehicle records after attackers obtained credentials that a local law-enforcement employee had "improperly stored on an electronic device." The ShinyHunters group has been linked to the intrusion. Ars Technica reports: In a notice posted Friday, [Florida Department of Highway Safety and Motor Vehicles (FLHSMV)] confirmed that it took "immediate steps" after discovering that "a malicious actor accessed certain department records on September 4, 2026, using compromised credentials." There's "no evidence" that data has yet been misused, the department said, but law enforcement "determined the information potentially affected includes driver license and motor vehicle data, to include document images, and other personal information."

[...] On a webpage describing the security incident, FLHSMV confirmed that an "international cybercriminal organization" was behind the breach but did not specify which group or how long they had access. Instead, officials claimed to have "promptly mitigated the breach, launched an investigation, and issued required notification to state authorities." Mitigations included "blocking unauthorized access, resetting relevant user credentials, engaging cybersecurity professionals, and implementing additional safeguards to protect sensitive information," FLHSMV said. Florida's investigation is "ongoing," officials said, but a cybercriminal group called ShinyHunters -- which recently claimed credit for hacking the FBI -- may have stolen the data. Florida residents affected by the breach will receive a letter offering one year of free credit monitoring through Sontiq, Inc. Those whose contact information is outdated can email the FLHSMV at customerinquiry@flhsmv.gov to determine whether their data was compromised.

"When you pay for a game, you should own it," says U.S. Representative Ritchie Torres (D-NY), introducing a new bill to fight the practice of "a rental disguised as a sale".

Kotaku reports: The fifth best-selling game of 2024 in the U.S. was NBA 2K25. Every year, fans dump hundreds of hours and hundreds of dollars into the grindy NBA basketball sim. But just a little over two years after its release, 2K Games confirmed it's already pulling the plug on it. The game will be delisted from digital storefronts on October 30. By January 1, 2027, online servers will go offline as well, making it impossible to play the most popular modes. A game millions paid $70 for will become mostly useless. Democratic Congressman Ritchie Torres wants to change that.

"I think there should be a simple rule: if you pay for it, you own it," Torres told Kotaku in a phone interview this week. To make that the law of the land, the U.S. representative for New York's 15th congressional district since 2021 plans to introduce legislation in Congress called the Power To The Players Act. The bill would direct the Federal Trade Commission to create regulations protecting ownership rights for video games. Companies selling digital games would need to grant players more than just a license that can expire at any time, and games with online features would need to provide offline modes that still work even when servers eventually shut down...

The Power To The Players Act noticeably leaves out other types of digital media like movies and music, though Terminator 2 and a bunch of other movie purchases were ripped from people's digital libraries earlier this year.
Representative Torres "did not confirm if the bill will have any cosponsors," the article acknowledges, "or whether any of his Republican colleagues will sign on to support it."

But players will see the bill's importance next month, the article points out, "when Grand Theft Auto 6 releases as just a download code in a box, giving fans no control over a purchase that starts at $80.

July: Nvidia-backed Nscale is building a £2bn data centre at Loughton in Essex, with Microsoft signed up as its anchor tenant. But it can't get the electricity to switch on, reported The Next Web: Nscale's problem is not really Nscale's. It is Britain's. Grid-connection times have become the single biggest brake on new data centres. Some UK projects face waits stretching close to a decade for enough power. One estimate found more than a quarter of data-centre capacity slipped in 2025 alone.
"The data centre was due to receive its power supply at the end of the year," reports the BBC. "But as first reported by the Telegraph on Sunday, Nscale has been told this will not happen until the 2030s." (Though Nscale and Microsoft are still working together on other projects in Norway, Portugal and America.)

But now anchor-tenant Microsoft has pulled out of the Essex deal, reports the Telegraph, adding that Microsoft's move "leaves the site in apparent limbo. The company was its only announced customer, having agreed to rent 23,000 Nvidia AI chips at the facility..." Microsoft's decision threatens to undermine Nscale's attempts to push ahead with a Wall Street flotation worth up to $35bn (£26bn), despite a brutal sell-off in AI computing stocks. Rival data centre developers have seen their share prices plunge over the last week on concerns that they will struggle to repay their debts as interest rates and inflation continue to rise.... Tech analyst Gartner said last week that $3.5 trillion could be written off by 2030 if the AI boom fails to deliver on its promises.
And "our research indicates that enterprise and consumer AI revenue will be insufficient to support profitable returns on all planned AI capital expenditures during this period," Gartner wrote: "In 2026, AI providers are expected to spend nearly $1 trillion on AI infrastructure, and are forecast to invest an additional $6 trillion between 2027 and 2030," said Will Sommer, Sr Director Analyst at Gartner.... Failure to achieve sustainable return on investment capital (ROIC) on rapidly depreciating assets would almost certainly necessitate write-downs. Based on Gartner projections, a continued AI infrastructure investment trajectory could leave more than $4 trillion in asset value exposed to write-down risk through 2032. In this scenario, Gartner does not expect the 12% ROIC to be achieved until the end of 2032 at earliest...

Gartner estimates AI-optimized IaaS spending will grow from $66 billion in 2027 to $174 billion in 2030. "The growth in spending on AI-optimized IaaS will be too low for most AI compute providers to recover their AI investments before the current generation of AI semiconductors is replaced," said Sommer. By 2030, Gartner predicts that cost pressure and a lack of a differentiating business model will force over 80% of neocloud [AI-specialized infrastructure] providers to cease independent operations.

More details are emerging about Saudi OpenAI employee Abdulrahman Alfozan, who was arrested by the FBI for allegedly planting a recording device in an executive conference room. Previously Alfozan "was an engineer at Meta," notes the New York Times, "before joining a start-up that went through Y Combinator, the Silicon Valley start-up accelerator. He gained permanent residency status in the United States in 2020, according to court documents, and was hired by OpenAI in July 2025."

14 months later the conference room recording device was inserted in a USB port on the back of a television, and then concealed in toilet paper, according to a statement from America's Justice Department. (There's even a photo of a device — and a photo of Alfozan entering the executive conference room and appearing to look behind the television where the device was inserted.) The FBI's says a chatbot account associated with Alfozan's spouse showed prompts asking about installing and obfuscating a recording device. And the complaint alleges that OpenAI security personnel also found a bag Alfozan left in a different room which contained his wallet, his ID, and another recording device.

Discussions in that room included "highly confidential technical, commercial, and strategic information, including proprietary research," according to the FBI, "as well as nonpublic information about Open AI's technical progress and strategic decisions..."

"If convicted, Alfozan faces a maximum penalty of 5 years in prison and a $250,000 fine, followed by 3 years of supervised release."

Friday Alfozan's lawyersrequested his release from custody, saying Alfozan agrees to wear an ankle monitor, remain at home, surrender his passport and "not possess any covert audio or video recording or surveillance device." They argue that the one-way ticket he'd purchased to Saudi Arabia just continues a long-standing habit of buying one-way tickets over the years for air travel, since his tech career often involves last-minute changes to meeting schedules, and "70% of the airline bookings in his email since January 2021 (96 of 138) were one-way tickets."

His lawyers also presented 46 letters of support, including letters from former Meta colleagues, ten company founders and chief executives, and more than a dozen engineers and engineering managers.

That Saudi national working at OpenAI and arrested by the FBI "has not been charged with foreign espionage," writes the Washington Post, "and the U.S. government has not said whether he was acting alone or as an agent of a foreign government."

But "there are signs that the U.S. government is exploring the latter possibility," they add, citing comments from Chris McGuire, a member of the National Security Council during the Biden administration: The Department of Justice's press release about the incident says that the National Security Division's Counterintelligence and Export Control section, whose responsibility includes prosecuting spies, is assisting with the case... A Washington-based Middle East expert, who spoke on the condition of anonymity to avoid incurring wrath from Saudi Arabia, said he believed the Saudi government was almost certainly involved in some way. "No one does this, not even for patriotism, without getting paid," said the person. And money would not be distributed without agreement by the Saudi royal court, he said. The Saudis lag behind their regional rival, the United Arab Emirates, in artificial intelligence development, he added.
Friday America's Director of National Intelligence told CNBC that espionage, "both commercial espionage, and I would say state-sponsored espionage, are realities. It's something that our private sector companies need to be wary of." (And CNBC adds that"An ex-CIA official, who asked not to be named because they were discussing information that is not public, told CNBC this week that the case is 'probably the tip of the iceberg.'")

The suspect had recently said he helped advise government agencies in Saudi Arabia on technology, reports the New York Times: In an Arabic podcast interview last month, Abdulrahman Alfozan, 35, a Saudi national, said he and other Saudi tech professionals in Silicon Valley had formed a group that advised Saudi organizations, including the kingdom's social insurance agency...

"Silicon Valley is ground zero for espionage from a variety of countries around the world," said Amy Zegart, a professor at Stanford University who specializes in national security and intelligence. She added that she was "troubled" by the OpenAI incident and expected more cases "because these companies are so important."
The Washington Post says the arrest "has ignited a fierce debate about the potential risks of Silicon Valley's international workforce — employees who often hail from nations seeking to rival the AI superpower status of the U.S." Foreign nationals have long formed the backbone of the American tech industry, helping U.S. companies surpass their would-be international rivals... As recently as April, Katrina Mulligan, a senior member of OpenAI's national security team, called for an "accelerated pathway to citizenship" for such workers, referring to foreign hires as a "national strategic asset" at an event on Capitol Hill. She estimated that a significant number of OpenAI's employees were not U.S. citizens, including Chinese nationals. Just half of the 300 top AI researchers in the world, she said, were American.

Other industry leaders — as well as some lawmakers — have long accused top-tier tech companies with many foreign workers of disadvantaging Americans and being breeding grounds for Chinese espionage. Palmer Luckey, CEO of weapons maker Anduril, and venture capitalist Shaun Maguire of Sequoia Capital took to X on Wednesday to revisit arguments that the industry should focus on hiring U.S. citizens. "Silicon Valley has operated with maximum openness and maximum naivete toward foreign tradecraft," Maguire wrote... At OpenAI on Wednesday, employees continued tense conversations about the political implications of the arrest for immigrant workers, two OpenAI employees said, speaking on the condition of anonymity to describe internal discussions... The arrest triggered a discussion on OpenAI's internal Slack messaging platform among employees about whether the incident might increase pressure from the Trump administration on OpenAI to not hire foreign nationals, said one of the people.

In March, Emil Michael, the Pentagon's chief technology officer, wrote in court papers that AI developer Anthropic's reliance on staff with ties to China was among the concerns that fueled the Defense Department's conflict with the AI company.

For more than a year, The New York Times followed recipients of a universal basic income program who received $1,330 a month for an entire year.

There were benefits, but also the everyday challenges of being poor, and turning their life around "did not turn out to be quite that simple." Across Silicon Valley, experimental guaranteed income programs have quietly taken off. Google began funding six different initiatives in 2022 as part of a $50 million donation to nonprofits in the San Francisco Bay Area, saying basic income could be a novel way to prevent homelessness in one of the nation's most expensive locations. Each program has hundreds of participants who receive around $1,000 a month, and academics study the results. State and federal tax laws limit the lengths of the programs and the payment amounts.

The studies have found that most basic income programs improve short-term employment and mental health while reducing food insecurity. But while data from these efforts has been closely tracked, less is known about the individual journeys of participants... The Times ultimately shadowed three people... All of the program participants, including the ones The Times followed, were previously homeless and transitioning off a housing stipend that paid for a portion of their rent, and many received the payments on top of other social assistance like food stamps.

The Times's findings mirrored the academic studies. For all three recipients, the instant benefits of basic income were clear: They had breathing room for groceries, rent and other expenses. But the success of the payments in another area — giving people more free time and opportunity in the long term — was mixed. "It's a lot to ask of someone to get their life together in 12 months, when a lot of these issues are structural or systemic," said Jennifer Loving, who runs Destination: Home, a nonprofit that administers basic income programs in Silicon Valley. "And the world around them isn't getting cheaper."
One recipient began going to community college — but resorted to taking one class at a time while single parenting — and using their monthly payments to help support relatives. In fact, the article notes that a recent study of 3,000 universal basic income participants found that money spent supporting friends and family increased 26%, "the most of any category. That was more than the increases for food (6%) and child care (11%)."

Another recipient used the time to get help at a community college to find a higher-paying job. And one recipient died — but his mother used what he'd saved to help put his brother through a drug rehab program.

"When state lawmakers attempt to rewrite how the internet works," argues an EFF blog post, "users rely on courts to recognize that laws can't make technical impossibilities a reality."

"That's why we were happy to see that a court has blocked Utah's attempt to outlaw the privacy protections of Virtual Private Networks (VPNs)." In a win for digital rights, a federal judge has issued a preliminary injunction blocking Utah's SB 73, the state's draconian anti-VPN age verification law... Signed into law earlier this year, SB 73 attempted to regulate adult websites by requiring them to block VPN users or to identify the physical location of visitors using them or similar tools that mask their network traffic. It even went so far as to prohibit websites from offering instructions on how to use a VPN to bypass these checks. This made Utah, to EFF's knowledge, the first state in the nation to target the use of VPNs to avoid legally mandated age-verification gates. The Utah federal court halted enforcement of the law's VPN provisions last week, ruling that the law likely violates the U.S. Constitution's prohibition on passing laws that significantly burden businesses and people outside Utah's borders.

SB 73 burdens the rights of all internet users outside of Utah because it requires adult websites to either know every visiting user's physical location, and then block those in Utah, or to verify every visitor's age just in case they might be in Utah. The law's "actual-location provision in practice requires an entity to perform age verification services for every user visiting its site from any location because the entity would violate the law if even one of those users happened to be obfuscating," the court wrote. The court essentially ruled that Utah has less-burdensome ways to prevent Utah minors from accessing adult websites than requiring all users in the world to comply with SB 73.
EFF's position is that "forcing platforms to detect and block privacy-preserving tools undermines user privacy and security worldwide while demanding the impossible."

But there's another problem, explained an EFF email this week. "Age verification laws that are predicated on users possessing identity documents exclude critical sections of populations. And this problem is global in nature: Millions of people lack government-issued identification or encounter regular challenges to obtaining or updating it...." Every site-blocking bill has the same rotten idea at their core: That enforcing copyrights requires building a censorship machine for websites into the architecture of the internet. This is, of course, a disaster for a free and open web. These proposals keep coming, but there is still no way to create a mechanism for blocking access to an entire website that does not invite both deliberate abuse and lots of collateral harm to free and lawful speech.
EFF has declared this month "Opt Out October," and each day they're offering new guides on how to "stand our ground and take control over what happens with our data."

MapQuest creates a new layer (that can be toggled on and off), Gizmodo reports: After promising not to comply with the Trump administration's "Lake America" gimmick, the platform announced a new "Surveillance Layer" that displays the locations of automated license plate readers (ALPRs), including those from Flock Safety. Per MapQuest, its new tool will identify the locations of known outdoor surveillance cameras and plate readers from Motorola Solutions (Vigilant), Genetec, Axis Communications, Axon, Leonardo (ELSAG), Neology, Rekor, PlateSmart, Ubicquia, Verkada, and others.

While the company didn't specify how it sources its data, it appears to be similar to the data amassed by DeFlock, which maintains a user-submitted map of ALPR camera locations. MapQuest may be sourcing the information from DeFlock and the OpenStreetMap project.
Engadget notes that MapQuest also recently added "useful, long-overdue features like Android Auto support and public transit directions."

Millions of current and former students at California's public school have had their data stolen — including names, date of birth, and addresses — stolen in a breach, reports the Los Angeles Times.

The breach affects students "who took the state's mandated standardized tests that annually assess their academic proficiency, education officials announced Friday." The compromised information affects many more than the state's current 5.7 million public-school students as the breach dates back to 2023 enrollments. Students who left California but did not confirm their transfer to another school also were affected, dating back to 2006.

The data breach involved [nonprofit] Educational Testing Service or ETS, which provides extensive services to California [including test participation and assessment data]... Affected former students, including those who are now adults, are eligible for 24 months of free identity-protection services and identity-restoration help if there is identity theft. Officials said that parents and guardians may want to consider requesting a free credit freeze for their children who are under 16 to help prevent unauthorized accounts from being opened in the names of their children.
The breach involved a compromised login credential, according to a web page about the incident from California's Department of Education. The compromised credential was then used to copy files with student information at "various" times between May 22 and September 18, 2026, which drew concern from a cybersecurity expert interviewed by the Los Angeles Times: "A stolen login credential should not become a months-long passport to millions of students' personal records," said Anton Dahbura, executive director of the Johns Hopkins University Information Security Institute. "If that is what happened here, the critical question is why authentication safeguards, access restrictions, and monitoring systems failed to detect and stop the unauthorized activity."

He added: "Incidents like this expose a fundamental weakness in how we manage student data: School systems may outsource the storage and processing of sensitive information, but they cannot outsource the consequences of a breach. When millions of student records are concentrated with a single vendor, one security failure can become a statewide problem with consequences that follow children for years."
A spokesperson for ETS told the Times that they've now implemented additional safeguards, including strengthened access controls, enhanced monitoring, and more third-party review of their security practices.

TechCrunch writes: "Isn't it weird that I, like, did a TV show about kind of a business scam, and you got in trouble for like ... a business scam?" comedian and filmmaker Nathan Fielder gently asks Elizabeth Holmes.

One month before the notorious Theranos CEO surrendered to begin her 11-year criminal fraud sentence in 2023, Holmes and her husband contacted A24 as a last-ditch effort to exonerate her in the public eye, suggesting they send a film crew to document her final days of freedom. Alongside director Lance Oppenheim, Fielder — a cringe-comedy mastermind whose work often walks the line between fact and fiction — embraced the impossible project of figuring out who the infamous Stanford dropout really is.

"I never actually made that connection," says Holmes. "I think it's a pretty different situation...."

We already know that Elizabeth Holmes is not innocent. What we still can't figure out, though, is whether she really, truly believes she did nothing wrong. Even as she sat on trial — listening to testimonies from investors who lost hundreds of millions of dollars, whistleblowers who were silenced when they flagged that Theranos' blood-testing devices didn't work, and patients who acted on incorrect blood test results — Holmes never wavered.
Business Insider says the scariest thing about the new documentary "is how much I wanted to believe her." SFGate calls it "one of the finest works of journalism I've ever seen." As Fielder ingratiates himself with Holmes and [her husband] Evans, he gets them comfortable enough to ask the hard questions: about Theranos, about prison, and even about themselves. The resulting footage is often shocking. You will see Elizabeth Holmes, who still maintains she did nothing wrong, answer "no" when Fielder asks her if she's ever lied in her life... [Y]ou will also see Holmes and Evans spend a great deal of time in this movie attempting to boot up Theranos 2.0. They even go so far as to drag out some of the original Theranos blood testing apparatus, which looks like a bunch of random parts from TigerDirect they hooked together, to show Fielder what their product can do. We do not see it doing anything on screen, but the couple assures that we would if it was, like, hooked up properly.

These scenes are extremely funny, but funny isn't what Fielder is looking for. He's trying to figure out if this woman is a clueless naif, if she believes her own lies, or if she is playing the character of an innocent woman, and doing so with such effectiveness that, to paraphrase Fielder, she might be the most manipulative person in the world. The answer proves fabulously elusive, and so Fielder and Oppenheim go to extremes in their attempt to find it. They hold the camera on Holmes' rubbery elfin face for what feels like hours at a time, to see if she'll blink (figuratively or literally!). They interview Holmes' visiting parents, with the father, former Enron exec Christian Holmes, casually telling Fielder that everything changed for his daughter "when she was raped." To the furthest extreme, they bring in actress Amanda Seyfried — who played Holmes in the Hulu TV show "The Dropout" — to recreate any dialogues Fielder had with Holmes herself that couldn't be recorded on camera. Seyfried is so convincing in mimicking Holmes that you, the audience, might forget which scenes were Seyfried talking to the camera and not Holmes herself. I know I did.
Continuing that theme in the film, TechCrunch notes, is how her husband Billy Evans "has constructed a lifelike AI avatar of his wife, trapped inside of a large vertical screen that he wheels over to the dinner table to sit with him and his kids as though she's actually there."

Elizabeth Holmes "comes off in the doc as every bit as innately bizarre as anyone showing up for a cinematic freak show might hope," writes Variety: My personal hunch is that Fielder came away thinking Holmes is on the level, to the extent that someone who sometimes seems like an AI program's idea of how a human should behave can be on the level. There are a few possibilities that might explain how Holmes comes off the way she does in the movie: (a) She is a simpleton. (b) She is a conniving sociopath who happens to be utterly brilliant at playing a simpleton. (c) Somewhere between those poles, she is the very emblem of a woman who throughout her life has put herself in the sway of controlling men, to the detriment of her intellect, willpower and emotional development... Is it possible that the more you learn about someone, the less you might know how to think about them?
Meanwhile, NBC News recently reported: Elizabeth Holmes, who was convicted of fraud for siphoning hundreds of millions of dollars from several high-profile investors, is scheduled to be transferred from a minimum-security federal prison to a halfway house next year, according to one of her victims... [America's Department of Justice "is required by law to notify victims of crime of case developments through letters and emails," the article points out.] She was sentenced in 2022 to 11 years and three months in prison. She and her business partner, Ramesh "Sunny" Balwani, were ordered to pay 12 victims a total of $452 million in restitution.

Holmes has been serving that sentence at a minimum-security prison in Bryan, Texas. The halfway house will provide her greater freedom... In March, a judge cut Holmes' sentence from 135 months to 123 months. According to a court document, the judge agreed with Holmes that she did not personally cause "substantial financial hardship" to her victims.
NBC News adds that a prison consultant they interviewed "said inmates who report to halfway houses can work, have phones, drive to religious services or shop for things they need and earn passes for weekends at home."