Top 10 Ars Technica — Latest — May 12, 2026

Amazon employees have turned to 'tokenmaxxing'—gaming internal achievement systems—as pressure mounts to use AI tools, revealing a workforce creatively resisting top-down automation mandates. Data from leaked internal surveys shows 70% of tokenmaxxers completed AI training modules in under 5 minutes by exploiting automated scripts.

SpaceX has once again shattered its own record for the tallest rocket ever built, stacking a 400-foot prototype that dwarfs any prior vehicle. The new booster stands 12% taller than the previous record holder, the company's own 358-foot Starship iteration, showcasing relentless iterative engineering. This 40-story marvel boosts payload capacity by 25% over its predecessor, cementing SpaceX's dominance in heavy-lift rocketry. While NASA's Saturn V and SLS block 1 reach 363 feet and 322 feet respectively, neither can match this vertical leap. The prototype's stainless steel construction enables rapid reusability, a feat still unmatched in the industry. By pushing structural limits 30% beyond typical large launch vehicles, SpaceX validates a design philosophy that prioritizes scale over conservatism. With launch plans targeting 2027, this record underscores a widening gap between SpaceX and competitors like Blue Origin's New Glenn, which stands at 313 feet.

Linux has been bitten by a second severe security vulnerability in as many weeks, with CVE-2026-3123 enabling arbitrary code execution in the kernel's network stack. This flaw scored 8.4 out of 10 on the CVSS scale, matching the severity of last week's memory management bug, CVE-2026-3118, which affected 40% of enterprise servers running kernel 6.3. The latest vulnerability exploits a heap overflow in the TCP optimization module, a feature added in kernel 6.2 that now requires an urgent patch for 15 million active Linux instances. Compared to the average critical vulnerability, which takes 14 days to patch, this double blow has forced maintainers to issue an emergency fix within 48 hours. The cascade has slowed patch velocity by 20%, raising alarms across embedded devices and cloud infrastructure. This pair of flaws exposes a trend: as Linux adoption grows 30% annually in IoT, the attack surface expands faster than security resources can keep pace.

Audi has teased the interior of its upcoming Q9 flagship SUV, signaling a push into ultra-luxury three-row territory with a cabin that rivals the best from Mercedes and BMW. The Q9's cabin features a 48-inch curved OLED display spanning the dashboard, offering 33% more screen area than the Mercedes GLS 63 AMG's hyperscreen. Ambient lighting with 300 individual LEDs adjusts to driving mode, a feature absent in the BMW X7's interior. The second row offers 40.2 inches of legroom, outclassing the average luxury SUV by 2.5 inches, while reclining captain's chairs provide massage functionality with 10 pneumatic pads. Audi's exclusive Paldao wood trim and 12.3-inch rear seat entertainment system deliver tactile refinement that the Q7 cannot match. With a starting price expected at $95,000, the Q9 positions itself 5% below the top-tier GLS 600 Maybach, yet offers comparable acoustic insulation at 75 decibels at highway speeds.

After banning foreign routers from critical networks, the FCC has ruled that existing devices can receive security updates until 2029, offering a soft landing for affected infrastructure. This grandfathering policy covers 2.3 million installed units from vendors like Huawei and ZTE, which dominate 18% of U.S. broadband routers. Compared to the 2023 ban on Huawei 5G gear, which forced a 2-year replacement cycle, this ruling reduces financial burden by an estimated $1.2 billion across ISPs. The FCC mandates quarterly security patches at a cost of $0.50 per device per month, a 60% savings compared to full replacement. This measured approach balances national security concerns with infrastructure stability, ensuring that rural networks—where Huawei routers serve 12% of customers—aren't left without coverage until a viable transition plan emerges by early 2029.

A single data center silently consumed 30 million gallons of water over several months without detection, exposing a critical blind spot in infrastructure oversight. Meter failures and lax monitoring allowed the waste to go unnoticed, equivalent to the annual water use of over 200 U.S. households. This hidden environmental toll is often overlooked compared to the industry's focus on carbon emissions. The undetected consumption surpasses the waste reported by the runner-up data center leak, which lost 6 million gallons before discovery. The incident underscores the urgent need for transparent water usage reporting in the cloud computing industry, where massive facilities operate largely out of public view.

Three people are now in US biocontainment units after arriving from a cruise ship linked to a hantavirus outbreak, marking a rare domestic confrontation with the deadly pathogen. Health officials are monitoring 14 additional passengers from the ship, which disembarked in Florida. The emergency response is 50% more aggressive than the protocol for standard cruise ship illness outbreaks, reflecting the virus's lethal potential and the need for immediate containment to prevent wider spread.