Blog

  • Hantavirus outbreak on cruise ship not ‘another COVID’, WHO says

    A deadly hantavirus outbreak aboard a cruise ship in the Atlantic Ocean poses a low global public health risk and is “not the start of another COVID pandemic”, the World Health Organization (WHO) said on Thursday.
  • Hyaluronic Acid Adulteration

    There may be undisclosed ingredients in your hyaluronic acid supplement.

    The post Hyaluronic Acid Adulteration first appeared on Science-Based Medicine.

  • Hantavirus-hit cruise ship on way to Canary Islands after three evacuated

    A British man is among three evacuees sent to the Netherlands after displaying symptoms while aboard the MV Hondius.
  • Made in Moscow: The Foreign Agent Law as a Blueprint for Autocrats

    It is not a secret weapon or a military tactic. It is a law — bureaucratic, dull, and devastatingly effective. Russia’s 2012 foreign agent legislation gave autocrats everywhere a template for dismantling civil society while keeping their hands seemingly clean.
  • Pluralistic: Bubbles are REALLY evil (07 May 2026)

    Today’s links



    The royal carriage of king Louis Philippe is burned in front of the Chateau d'eau during the French revolution of 1848, Paris 24th February 1848.

    Bubbles are REALLY evil (permalink)

    I am on record as saying that every economic bubble is terrible, but some bubbles do at least leave behind a salvageable productive residue while others leave behind nothing but ashes; indeed, this is the thesis of my next book, The Reverse Centaur’s Guide to Life After AI:

    https://us.macmillan.com/books/9780374621568/thereversecentaursguidetolifeafterai/

    Here’s a historical comparison that’s illuminating: Enron vs Worldcom. Both were monumental frauds, the CEOs of both companies died shortly after the frauds were discovered, but they have very different legacies. Enron – a scam that pretended to secure billions of dollars’ worth of new efficiencies through “energy trading” but was actually just engineering rolling blackouts in order to jack up energy prices – left behind nothing.

    Well, not quite nothing. Enron did leave behind a little useful residue after it burned to the ground: a giant repository of emails. You see, after Enron went bust, it was sued by its creditors, who demanded access to relevant emails from the company’s Outlook server. But the company execs decided they didn’t want to spend the money to weed out the irrelevant emails before the court-mandated disclosure, so instead they published all the emails ever sent or received by anyone at Enron, including tons of extremely private, personal, sensitive information relating to Enron’s employees and customers:

    https://en.wikipedia.org/wiki/Enron_Corpus

    This became the “Enron Corpus” and it was the first large tranche of emails that were in the public domain and available to researchers. As a result, it became the gold standard dataset for researchers investigating social graphs, natural language, and many other subjects that subsequently became very important computer science fields and commercial applications.

    As legacies go, the Enron Corpus is pretty small ball, and even so, it is decidedly mixed, both because the Enron Corpus constitutes a gross, ongoing privacy violation for a huge number of people; and because a lot of that social graph and natural language work that it jumpstarted has been put to deeply shitty purposes.

    Then there’s Worldcom: also a gigantic fraud, Worldcom falsified billions of dollars’ worth of orders for new fiber optic lines, which it then dug up streets all over the world and installed. When Worldcom went bankrupt, all that fiber stayed in the ground, and many people are still using it today. My home in Burbank has a 2GB symmetrical fiber connection through AT&T that runs on old Worldcom fiber that AT&T bought up for pennies on the dollar.

    So while you have to squint really hard to find any benefit that can be salvaged from Enron, it’s really easy to point at Worldcom’s productive residue – it’s a ton of fiber and conduit running under the streets of major cities around the world, ready to be lit up and bring the people nearby into the 21st century. Fiber, after all, is amazing, literally thousands of times better than copper or 5G or Starlink:

    https://pluralistic.net/2026/04/07/swisscom/#stacked

    Even though Enron’s CEO Ken Lay and Worldcom’s CEO Bernie Ebbers both received prison sentences after their fraud was revealed, the bubbles never stopped, and indeed, they only got worse. AI is the biggest bubble in human history, worse even than the South Sea Bubble:

    https://en.wikipedia.org/wiki/South_Sea_Company

    And like those earlier bubbles, some of our modern bubbles will leave behind nothing, while others will leave behind some productive residue. Take the cryptocurrency bubble. Crypto will go to zero, and when it does, all it will leave behind is shitty monkey JPEGs and even worse Austrian economics:

    https://www.web3isgoinggreat.com/

    As with Enron, you can find some productive residue from cryptocurrency if you look hard enough. A lot of programmers have had a heavily subsidized education in Rust programming and cryptographic fundamentals, both of which are unalloyed goods in our otherwise very insecure digital world.

    Some of the underlying mechanisms from the crypto are useful, even without blockchains. Take Metalabel, a system that lets collaborators on creative projects automate how they handle revenues from those projects by plugging DAO-like logic into traditional, dollar-based bank accounts. They’re recycling some of the tooling from the crypto bubble to create a very useful utility, without the crypto:

    https://www.metalabel.com/

    But, as with the Enron Corpus, this is pretty small ball. The world has flushed away hundreds of billions to get paltry millions’ worth of value out of crypto – the rest of that value disappeared into the pockets of crooked insiders who defrauded the public into parting with their savings.

    If crypto will be Enron-like in its post-bubble life, what about AI? I think AI is more like Worldcom: there’s a bunch of useful stuff that AI can do, after all. Take away the bubble and we’d call the things AI can do “plug-ins” and some people would use them, and others wouldn’t, and some of those uses would be productive, and others would be foolish, but we wouldn’t bet the world’s economy on them, nor would we squander our last dribbles of potable water to cool their data centers.

    After the AI bubble pops, there will be a lot of durable residue. The data centers will still stand. The GPUs will still be there, and if we don’t “sweat the assets” by running them as hot and hard as they can tolerate, they won’t burn out in 2-3 years. There will be lots of applied statisticians, skilled data-labelers, etc, looking for work. And there will be lots of open source models that have barely been optimized (why make an open source model more efficient when you’re raising capital based on the promise of outspending everyone else in order to dominate a world of ubiquitous, pluripotent, winner-take-all centralized AI?):

    https://pluralistic.net/2025/10/16/post-ai-ai/#productive-residue

    That’s a situation not unlike the post-dotcom bubble of the early 2000s. Almost overnight, the legion of humanities undergrads who’d been treated to subsidized training in perl, Python and HTML found themselves looking for work. Servers could be purchased in bulk for pennies on the dollar (with user data still on them!). I bought a “dining room set” of six $1,000+ fancy office chairs for $50 each (still wrapped in plastic!) from a dotcom founder who was selling them on the sidewalk out front of his failed startup’s office in the Mission. He offered to sell me ten lifetime’s supply of branded t-shirts for $20. I turned him down.

    That was the birth of Web 2.0. All of a sudden, people who wanted to make real things that were good could do so, because they could find skilled workers, hardware, and office space at such knock-down prices that they could be funded out of pocket or put on a credit card. People got to pursue the web they wanted, free from asshole bosses and VCs. Not everything that got built in those heady days was good, but many good things got built.

    I can easily imagine that the post-bubble AI scene will produce benefits comparable to Web 2.0 – projects built by and for people who want to do useful and fun things, without being distracted by the mirage of illusory billions promised by the stock swindlers who created the bubble.

    I can easily imagine that I will find some of those post-bubble tools useful, and that in 20 years I will still be using them, just as today, I am still using some of those early post-dotcom bubble services and tools.

    And despite all that, IT IS NOT WORTH IT.

    The residue that is left behind by every bubble is subsidized, but that subsidy doesn’t come from the deep-pocketed investors who are gripped by “irrational exuberance.” It comes from mom-and-pop, normie, retail investors who have been tricked into giving their money to the insiders who inflated the bubble.

    From Worldcom to Enron, from crypto to AI, the point of the bubble wasn’t ever the residue or lack thereof – it was a transfer from working people to crooks. Bubbles are a system for moving the painfully sequestered life’s savings of people who do things to people who steal things.

    Since the Carter years, workers have been forced to flush their savings into the stock market, after the traditional “defined benefits pension” (that guarantees you an inflation-adjusted sum every month until you die) was replaced with 401(k)s and other “market-based pensions” (where you only get to survive after retirement if you bet correctly on the movement of stocks):

    https://pluralistic.net/2022/05/29/against-cozy-catastrophies/

    Despite this having all the appearances of a rigged game – finance industry insiders are always going to be better at betting on stocks than teachers, nurses, janitors and other productive workers – proponents of this system always insisted that workers weren’t really the suckers at the table. But the stock market is like Kalshi or Polymarket in that one bettor’s losses are another bettor’s gains, and in those markets, nearly all the money is harvested by less than 1% of bettors:

    https://www.coindesk.com/markets/2026/04/29/a-tiny-group-is-winning-on-polymarket-as-under-1-of-wallets-take-half-the-profits

    Somehow, supposedly, we could beat those insiders and survive into our old age without having to eat dog food or become a burden on our kids by betting on the whole market, through index-tracker funds:

    https://pluralistic.net/2022/03/17/shareholder-socialism/#asset-manager-capitalism

    Supposedly, this would “diversify” our portfolios, which would insulate us from risks we could not understand, much less estimate. But thanks to private equity and the AI bubble, betting on “the whole market” is basically “betting on AI.” 35% of the S&P 500 is tied up in seven AI companies, who are engaged in the obviously fraudulent (and Worldcom-adjacent) practice of passing the same $100b IOU around really quickly and pretending it’s in all their bank accounts at once:

    https://www.fool.com/investing/2025/11/05/ai-growth-stocks-is-there-still-room-to-run/

    When the AI bubble pops, it will vaporize (at least) 35% of the US stock market and wipe out everyday savers who have been swindled into betting their futures on AI, based on the fraudulent representations of AI pitchmen. Millions of people who worked hard all their lives and deprived themselves of small comforts in order to save for their retirement will be wiped out. They will be made dependent on the Social Security system that Republicans are determined to starve into bankruptcy and then turn into (yet another) “market based system” that you will be required to convert into chips at the stock market casino where you’re up against professional players who hold all the cards:

    https://www.newsweek.com/major-social-security-change-proposed-to-build-wealth-11727844

    Annihilating a third of the stock market will have severe knock-on effects, even though the median US worker only has $955 saved for retirement:

    https://finance.yahoo.com/news/955-saved-for-retirement-millions-are-in-that-boat-150003868.html

    Because wiping out the life’s savings of everyone else will tank consumption for a generation. Retirees who have to sell their family homes to pay their medical bills won’t be buying breakfast at the local diner or catching a Tuesday night movie. They won’t be indulging their grandkids with nice birthday presents or helping their own kids buy their first home.

    Worse still: the only thing our society knows how to do about economic catastrophe (for now, anyway) is to impose brutal austerity, and austerity drives voters into the arms of fascist strongmen, who blame all their woes on a scapegoated minority in order to win office, and then steal everything that’s not nailed down:

    https://pluralistic.net/2026/04/12/always-great/#our-nhs

    Which is all to say, there’s a world of difference between recognizing that the AI bubble is the superior sort of bubble in that it will leave a productive residue, and endorsing the AI bubble as a productive or morally acceptable way to produce that residue. It’s one thing to anticipate salvaging something useful out of a catastrophe, and another thing altogether to deliberate induce or prolong that catastrophe so as to maximize the amount of salvage.

    The swindlers who created this bubble are crooks who have set out to destroy the futures of a generation of savers. They are monsters, and their bubble needs to be popped as quickly as possible.


    Hey look at this (permalink)



    A shelf of leatherbound history books with a gilt-stamped series title, 'The World's Famous Events.'

    Object permanence (permalink)

    #20yrsago Judge mocks FCC’s legal argument for wiretapping VoIP https://web.archive.org/web/20060512141440/https://www.eff.org/deeplinks/archives/004638.php

    #20yrsago Podcasting saved from the UN — for now https://web.archive.org/web/20060603152220/https://www.eff.org/deeplinks/archives/004637.php

    #15yrsago Two billion people and the royal wedding: pretty damned unlikely https://www.gyford.com/phil/writing/2011/05/06/2-billion-viewers/

    #15yrsago Mozilla tells DHS: we won’t help you censor the Internet https://torrentfreak.com/homeland-security-wants-mozilla-to-pull-domain-seizure-add-on-110505/

    #15yrsago Foxconn workers forced to sign promise not to commit suicide due to working conditions https://memex.craphound.com/2011/05/05/foxconn-workers-forced-to-sign-promise-not-to-commit-suicide-due-to-working-conditions/

    #15yrsago Shannon’s Law: a story about bridging Faerie and the mundane world with TCP-over-magic https://reactormag.com/shannons-law/

    #15yrsago Green Army men with PTSD https://www.wearedorothy.com/collections/artworks/products/casualties-of-war

    #10yrsago Deep Insert skimmers: undetectable, disposable short-lived ATM skimmers https://krebsonsecurity.com/2016/05/crooks-go-deep-with-deep-insert-skimmers/

    #10yrsago How standardizing DRM will make us all less secure https://www.eff.org/deeplinks/2016/04/standardized-drm-will-make-us-less-safe

    #10yrsago Excellent advice for generating and maintaining your passwords https://www.wired.com/2016/05/password-tips-experts/

    #10yrsago Amid education funding emergency, Washington State gives Boeing, Microsoft $1B in tax breaks https://jeffreifman.com/2016/05/05/forget-boeing-microsofts-tax-break-costs-776-million/

    #5yrsago MRNA vaccines and Clarke’s Law https://pluralistic.net/2021/05/05/clarkes-third-law/#indistinguishable-from-magic

    #5yrsago Stimmies killed the McJob https://pluralistic.net/2021/05/05/clarkes-third-law/#precariat-nostalgia

    #1yrago Bridget Read’s ‘Little Bosses Everywhere’ https://pluralistic.net/2025/05/05/free-enterprise-system/#amway-or-the-highway


    Upcoming appearances (permalink)

    A photo of me onstage, giving a speech, pounding the podium.



    A screenshot of me at my desk, doing a livecast.

    Recent appearances (permalink)



    A grid of my books with Will Stahle covers..

    Latest books (permalink)



    A cardboard book box with the Macmillan logo.

    Upcoming books (permalink)

    • “The Reverse-Centaur’s Guide to AI,” a short book about being a better AI critic, Farrar, Straus and Giroux, June 2026 (https://us.macmillan.com/books/9780374621568/thereversecentaursguidetolifeafterai/)
    • “Enshittification, Why Everything Suddenly Got Worse and What to Do About It” (the graphic novel), Firstsecond, 2026

    • “The Post-American Internet,” a geopolitical sequel of sorts to Enshittification, Farrar, Straus and Giroux, 2027

    • “Unauthorized Bread”: a middle-grades graphic novel adapted from my novella about refugees, toasters and DRM, FirstSecond, April 20, 2027

    • “The Memex Method,” Farrar, Straus, Giroux, 2027



    Colophon (permalink)

    Today’s top sources:

    Currently writing: “The Post-American Internet,” a sequel to “Enshittification,” about the better world the rest of us get to have now that Trump has torched America. Third draft completed. Submitted to editor.

    • “The Reverse Centaur’s Guide to AI,” a short book for Farrar, Straus and Giroux about being an effective AI critic. LEGAL REVIEW AND COPYEDIT COMPLETE.
    • “The Post-American Internet,” a short book about internet policy in the age of Trumpism. PLANNING.

    • A Little Brother short story about DIY insulin PLANNING


    This work – excluding any serialized fiction – is licensed under a Creative Commons Attribution 4.0 license. That means you can use it any way you like, including commercially, provided that you attribute it to me, Cory Doctorow, and include a link to pluralistic.net.

    https://creativecommons.org/licenses/by/4.0/

    Quotations and images are not included in this license; they are included either under a limitation or exception to copyright, or on the basis of a separate license. Please exercise caution.


    How to get Pluralistic:

    Blog (no ads, tracking, or data-collection):

    Pluralistic.net

    Newsletter (no ads, tracking, or data-collection):

    https://pluralistic.net/plura-list

    Mastodon (no ads, tracking, or data-collection):

    https://mamot.fr/@pluralistic

    Bluesky (no ads, possible tracking and data-collection):

    https://bsky.app/profile/doctorow.pluralistic.net

    Medium (no ads, paywalled):

    https://doctorow.medium.com/

    Tumblr (mass-scale, unrestricted, third-party surveillance and advertising):

    https://mostlysignssomeportents.tumblr.com/tagged/pluralistic

    When life gives you SARS, you make sarsaparilla” -Joey “Accordion Guy” DeVilla

    READ CAREFULLY: By reading this, you agree, on behalf of your employer, to release me from all obligations and waivers arising from any and all NON-NEGOTIATED agreements, licenses, terms-of-service, shrinkwrap, clickwrap, browsewrap, confidentiality, non-disclosure, non-compete and acceptable use policies (“BOGUS AGREEMENTS”) that I have entered into with your employer, its partners, licensors, agents and assigns, in perpetuity, without prejudice to my ongoing rights and privileges. You further represent that you have the authority to release me from any BOGUS AGREEMENTS on behalf of your employer.

    ISSN: 3066-764X

  • What is hantavirus and how does it spread?

    The Andes strain of the virus, which can rarely be passed from person to person, has been confirmed in some passengers.
  • Cardiologist Convicted of Sexual Assault in France Found Work in Belgium

    After a cardiologist was convicted of sexually assaulting his patients in France, he was stripped of his medical license and forbidden to practice in the country. So he hopped across the border to Belgium and obtained a new license there.

    The Belgian hospital was not aware of the 65-year-old cardiologist’s April 2024 conviction until contacted by reporters, according to an investigation published today by De Tijd, Le Monde and France Television.

    “The hospital had no legal basis, or any indication whatsoever, that would allow it to identify or suspect such a situation,” said Céline Barcham, a spokesperson for Iris Hospitals South.

    She added that the Brussels-based hospital group had followed procedures by verifying his license with Belgium’s Federal Public Service Public Health and the Order of Physicians. 

    After being informed of the cardiologist’s history, the hospital group confirmed it with French authorities and terminated his employment, which had lasted about a week in March 2026.

    The French cardiologist is only the latest discovery of a doctor jumping jurisdictions after losing a license. In the Bad Practice project, OCCRP and media partners identified more than 100 doctors who lost their licenses for serious wrongdoing in one jurisdiction, but held or obtained a license in another.

    The project exposed serious flaws in Europe’s Internal Market Information System (IMI), which notifies member states of the status of a doctor’s license. 

    Aside from the cardiologist, reporters have now confirmed three more doctors banned in France and practicing in Belgium. 

    One physician was reportedly convicted for sexually assaulting patients, a gynecologist was suspected of deficiency in his care, and a surgeon had self prescribed opiates. The surgeon had also failed to disclose his conviction for involuntary manslaughter following an operation that resulted in the death of a 14-year-old patient. 

    Belgian authorities had not read the IMI alerts sent by the French authorities regarding the three physicians. 

    After being informed of the cases by reporters, the Belgian Order of Physicians said “immediate action is being taken regarding the doctors reported.” 

    In the case of the cardiologist, French authorities filed an alert warning that his license had been revoked. However, records obtained by reporters show that in Belgium, only one healthcare authority accessed the alert. 

    That’s a common situation across Europe, OCCRP has reported

    Belgian authorities have only opened 43 of the 2,065 alerts filed for substantial reasons within the IMI system between 2021 and 2025, according to data obtained by journalists. French officials haven’t opened any.  

    “Improvements to the IMI system are currently under consideration, in particular strengthening the harmonization of notification practices, improving response times between competent authorities, and enhancing the clarity of the information transmitted,” the French Ministry of Health. 

    Belgian authorities said the system was difficult to use and needed improvement.

    Separate from the IMI system, the cardiologist was required to disclose his history in France, according to Barcham of Iris Hospitals South. 

    “The physician is required to inform our institution as soon as they are subject to any disciplinary, correctional, or administrative sanction that could affect their professional practice within the hospital,” she said. “This contractual obligation was not fulfilled in this case.”

    The cardiologist said he had only been barred from practicing in France.

    “I made a stupid mistake by starting over anyway,” he said in an interview. “I did that because I have debts for the compensation to the patients, and because of my age I can’t get another job.”

    The case against the cardiologist had been brought to trial after more than a dozen women came forward with reports of abuse.

    In one testimony, a patient described how the cardiologist made her undress and groped her breasts, buttocks, vagina and anus, while pleasuring himself during a medical examination. The door had been locked, and she believed that he filmed the encounter. 

    The court sentenced the cardiologist to four years, but he did not serve it in prison. The court suspended 30 months of his sentence, and ordered the remaining 18 to be served outside prison with an ankle bracelet.

    With his medical license revoked in France, he attempted to start practicing again in Belgium. 

    “But my career is over now,” he said.

  • What I Learned From Reading Apartheid Propaganda

    What I Learned From Reading Apartheid Propaganda

    In 1989, as South Africa lost its last allies behind a wall of international sanctions, the German-born writer Klaus D. Vaqué wrote an impassioned defense of his adopted home country. His book, The Plot Against South Africa, provides a unique viewpoint: one through the eyes of the country’s white minority rulers.

  • Milestone 1.0.0 Release of APK Downloader `apkeep` Powers Research on Android Apps

    Last week, we released apkeep version 1.0.0, the latest edition of our command-line Android package downloading software. Rather than indicating major changes for the project, this milestone instead signifies arriving at a relatively stable and mature place after gradual iteration on the project over the course of over four years.

    What’s New in 1.0.0

    We do have a few fresh features we’ve packed into this latest release, though—all focused on the Google Play Store: 

    • You can now download a dex metadata file associated with an app containing a Cloud Profile, which provides information on app performance based on real usage. 
    • You can now provide a token generated by the Aurora Store’s dispenser to log in anonymously for app downloads. 
    • Users can specify their own device profiles when downloading apps from Google Play, which the store uses to deliver the app variant which works for your particular device specifications. 
    • We’ve also fixed an authentication bug introduced by the Play Store API.

    In addition to the various Linux, Windows, and Android environments we support, we’re also happy to announce that since the last release in October we’ve been included in Homebrew for macOS users!

    How Researchers Use apkeep to Understand the Android App Landscape

    Researchers and users contributed most of the features of this release, including downloading dex metadata containing Google’s Cloud Profiles. This feature helps them use the tool in their own research of highlighting how these Android compilation profiles can be a vital source of information for evaluating dynamic testing. Numerous other projects have cited apkeep usage in their own workflows. For example, Exodus Privacy uses it to power the εxodus tool’s downloads when they monitor the privacy properties of apps. Various research teams have noted their own use of the tool in whitepapers, including one team who used the tool to download 21,154 apps in a widespread study of Android evasive malware. We are proud to provide a reliable tool in the toolbox they use to power their work.

    What’s in Store for apkeep?

    Our goals with apkeep have remained constant: provide a reliable, fast, and safe way to download apps from multiple app providers, not just the Google Play Store. While we’ve focused on it as the major Android app provider of choice across much of the world, we’ve expanded support to other stores as well, such as F-Droid for downloading open source apps. We’d like to continue broadening apkeep’s list of supported providers, to make it easy to do comparative analysis of apps provided in different contexts. For this, we’d love your contributions.

    How You Can Help

    If you’re using apkeep as part of your own toolbox (whether using it to do malware analysis, auditing apps, or simply using it as an app archiving tool), let us know! And if you like what we do, please consider donating to EFF to support our work.

  • Hantavirus-hit cruise ship leaves Cape Verde after three evacuated

    A British man is among three evacuees sent to the Netherlands after displaying symptoms while aboard the MV Hondius.